January 2011 - Test - lists.nanog.org

Re: AltDB?
by Paul Vixie 30 Jan '11

30 Jan '11

note that while i am also an ARIN trustee, i am speaking here as what randy calls "just another bozo on this bus". for further background, ISC has done some rpki work and everybody at ISC including me likes rpki just fine. when the ARIN board was first considering funding ISC to do some early rpki work, went out into the hallway until the discussion was over (ending positively.) On Jan 5, 2011, at 12:32 PM, Randy Bush wrote: > i have a rumor that arin is delaying and possibly not doing rpki that > seems to have been announced on the ppml list (to which i do not > subscribe). john curran has explained that arin is doing its due diligence on some concerns that were brought up during a review of the rpki rollout. there is no sense in which arin has said that it is "not doing rpki" although the current review does technically qualify as "delaying rpki". i'm treating the above rumour as false. David Conrad <drc(a)virtualized.org> writes: > I heard about the delay, but not about ARIN possibly not doing RPKI. That > would be ... surprising. [...] it would be very much surprising to me as well. [bush] > as it has impact on routing, not address policy, across north america > and, in fact the globe, one would think it would be announced and > discussed a bit more openly and widely. even if i thought that the operational impact could be felt in these early days when rpki remains an almost completely nonproduction service, and i don't think this by the way, i would still say that an internal review of a new service is not really something the whole community cares about. [conrad] > The definition of what comes under the "public policy mailing list" > umbrella has always been a bit confusing to me. Too bad something like > the APNIC SIGs and RIPE Working Groups don't really exist in the ARIN > region. do you have a specific proposal? i've noted in the past that arin tries hard to stick to its knitting, which is allocation and allocation policy. it seems to me that if some in the community wanted arin to run SIGs or WGs on things like routing policy arin could do it but that a lot of folks would say that's mission creep and that it would be arin poaching on nanog lands. -- Paul Vixie Chairman and Chief Scientist, ISC Trustee, ARIN

15 54

Another v6 question
by Max Pierson 30 Jan '11

30 Jan '11

Hi List, Sorry to bring up yet ANOTHER v6 question/topic, but this seems to be one that I cannot get a solid answer on (and probably won't and in the event that I do, it will probably change down the road anyways), but here goes. >From the provider perspective, what is the prefix-length that most are accepting to be injected into your tables?? 2 or so years ago, I read where someone stated that they were told by ATT that they weren't planning on accepting anything smaller than a /32. So what if I get my shiny new /48 from ARIN and am already multi-homed??? Does ATT not want my business (which they wouldn't get if the first place, but for argument sake, yes, I chose to pick on ATT, sorry if I offended anyone :) I already see /40's /48's ,etc in the v6 table, so some folks are allowing /48 and smaller, so what is the new /24 in v6? I only ask due to the fact that ARIN's policy for end-users is /48 minimum (which is what i've been telling folks to apply for or applying for it on behalf of them). Second, as I was crunching a few numbers to get a rough estimate of what a global table would look like in say 3 or 5 years after v4 is exhausted (I understand that it's completely unpredictable to do this, but curiosity killed the cat I guess), and in a few cases, I stopped due to the shear size of the amount of prefixes I was coming with. Where i'm getting with this is has anyone done any crunching on prefix count for v6 (as in estimates of global table usage with the various prefix lengths seen above _based_ on the initial allocation of the v6 space (not the entire v6 space itself)). I'm interested to see how long before we have 96Gb's of TCAM/Memory (take you vendor of choice) in our routers just to take a full table. (Not to mention still having all of the ipv4 de-agg crazyness going on today. Seriously, who lets /28 and /32's in their tables today? And this will only get worse as v4 fades away). Would love to hear comments from anyone that was rejected peering due to only having a /48. Would also like to hear from anyone about projected table sizes if anyone has done any research on this. Heading back to my cave now to hopefully hear some good responses. (An someone please correct me if any of the above is incorrect). TIA, Max

16 28

Wikileaks, Friend or Foe?
by Joseph Prasad 30 Jan '11

30 Jan '11

A very good interview with John Young on Russia Today. http://www.youtube.com/watch?v=oMRUiB_8tTc <http://www.youtube.com/watch?v=oMRUiB_8tTc>------- mentioned in the interview------ http://cryptome.org/ http://en.wikipedia.org/wiki/Cypherpunks *--------------------------------* *The only power people exert over us, is the power we allow them to exert.* * * *http://www.projectcensored.org/* * * *http://www.thenewamerican.com/* *--------------------------------* * *

2 1

DSL options in NYC for OOB access
by Andy Ashley 30 Jan '11

30 Jan '11

Hi, Im looking for a little advice about DSL circuits in New York, specifically at 111 8th Ave. Going to locate a console server there for out-of-band serial management. The router will need connectivity for remote telnet/ssh access from the NOC. Looking for a low speed (and low cost) DSL line with a fixed IP. I searched some obvious providers but dont really want to deal with a huge company (Verizon, Qwest, ?) if it can be avoided. Also $80-100+ seems a lot for something that will be used very rarely, but maybe those prices are normal. Are there smaller/independent companies out there offering this sort of thing? I dont know much about the US DSL market, so any hints are welcome. Thanks. Andy. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

14 18

DSL network build out
by Santino Codispoti 30 Jan '11

30 Jan '11

I am hoping for some recommendations from the group. We will shortly be building out a new network for offering DSL/ access. We are going to interface with the Covad network within: 111 8th Avenue,New York (5th Floor) 11 Great Oaks Blvd,San Francisco 427 S La Salle, Chicago We are going to try and push most of the trafic out to the internet within the same POPs but we would also like to have conntivity between the locations as well. Who would you recommend we talk with for fiber? Who would you recommend we talk with for network gear? Thank you for your help Regards Santino

1 0

Re: Found: Who is responsible for no more IP addresses
by Jay Ashworth 29 Jan '11

29 Jan '11

Let me clarify: The original question was (so far as I could see): "Was Fox making up the quote where Vint took the blame for IPv4 exhaustion?" The answer, of course, was "no, they didn't; lots of people have the quote". I wasn't speaking to the technical details of the actual piece, which, clearly, I didn't read. :-) Cheers -- jra

4 3

Re: [menog] Fwd: Connectivity status for Egypt
by Vesna Manojlovic 29 Jan '11

29 Jan '11

Dear all, On 1/28/11 1:07 AM, Richard Barnes wrote: > Hey all, > Some NANOG participants are seeing hearing reports of disrupted > communications in Egypt. Are any of you seeing the same thing? > --Richard Here is the analysis of BGP table regarding what happened to the Internet in Egypt: http://stat.ripe.net/egypt/ https://labs.ripe.net/Members/akvadrako/live_eqyptian_internet_incident_ana… Vesna Manojlovic RIPE NCC Trainer > ---------- Forwarded message ---------- > From: Danny O'Brien <danny(a)spesh.com> > Date: Thu, Jan 27, 2011 at 6:47 PM > Subject: Connectivity status for Egypt > To: NANOG Operators' Group <nanog(a)nanog.org> > > > Around 2236 UCT, we lost all Internet connectivity with our contacts in > Egypt, and I'm hearing reports of (in declining order of confirmability): > > 1) Internet connectivity loss on major (broadband) ISPs > 2) No SMS > 4) Intermittent connectivity with smaller (dialup?) ISPs > 5) No mobile service in major cities -- Cairo, Alexandria > > The working assumption here is that the Egyptian government has made the > decision to shut down all external, and perhaps internal electronic > communication as a reaction to the ongoing protests in that country. > > If anyone can provide more details as to what they're seeing, the extent, > plus times and dates, it would be very useful. In moments like this there > are often many unconfirmed rumors: I'm seeking concrete reliable > confirmation which I can pass onto the press and those working to bring some > communications back up (if you have a ham radio license, there is some very > early work to provide emergency connectivity. Info at: > http://pastebin.com/fHHBqZ7Q ) > > Thank you, > > -- > dobrien(a)cpj.org > Danny O'Brien, Committee to Protect Journalists > gpg key: http://www.spesh.com/danny/crypto/dannyobrien-key20091106.txt > _______________________________________________ > Menog mailing list > Menog(a)menog.net > http://lists.menog.net/mailman/listinfo/menog >

2 1

Re: Need provider suggestions - BGP transit over GRE tunnel
by Robert Johnson 29 Jan '11

29 Jan '11

My network spans a multicity geographic area using microwave radio links. The point of the GRE tunnel is to allow me to establish a BGP session to another AS using a consumer grade Internet connection (cheap) over the public Internet. I don't want to build out additional microwave paths to a new datacenter to become multihomed. On Fri, Jan 28, 2011 at 5:36 PM, C. Jon Larsen <jlarsen(a)richweb.com> wrote: > > I have read your email a few times and i dont see how this makes sense. > > Why do you need a public AS and PI space? Your gre tunnel wont need it or be > able to use it. A gre tunnel is just a replacement for a physical pipe. > > If your datacenter based presence goes down, you will need a pipe at your > office, or some other location speaking bgp that can annouce your block > anyway. > > > > > On Fri, 28 Jan 2011, Robert Johnson wrote: > >> My organization is planning to become multihomed in the near future. >> Currently we have redundant (router and physical path) links to a >> single AS where we get our transit, and speak BGP to them using a >> private ASN. This configuration has not been meeting our reliability >> requirements, so we will be getting our own ASN from ARIN, and moving >> from PA to PI IP space. >> >> Our new provider will be used for backup purposes only. We would like >> to minimize the monthly cost of this connection; to do this, we are >> planning to use a VZ business FIOS connection with symmetrical >> bandwidth to establish a GRE tunnel to a datacenter somewhere, and >> bring up a BGP session over that tunnel. I'd like to know if there are >> providers that offer such a service on a regular basis, and if so, if >> anyone is doing this and has words of wisdom. >> >> Thanks in advance. >> >> >> -- >> This message has been scanned for viruses and >> dangerous content by the Richweb.com MailScanner, and is >> believed to be clean. >> >> >> >

4 3

Bogons
by John Payne 29 Jan '11

29 Jan '11

With the holiday freezes approaching, it might be worth making sure that the recently allocated /8s are not in your bogon list.... 23/8 100/8 5/8 37/8 Just sayin'

5 7

Fwd: [listname] Fwd: Connectivity status for Egypt
by Owen DeLong 29 Jan '11

29 Jan '11

Anonymized because I am forwarding without permission... > > Dears, > > As per what I know from friends: > > 1. All Internet is down. Apparently one network is still working but seems to be serving the stock exchange only and few others. > 2. SMS is down. > 3. Landlines are down (at least internationally). > 4. Mobile networks seem to be on and off depending on location. For example, Vodafone is apparently working in Cairo while other networks are not !! > > God help them and bring Egypt and Egyptians out of this harmless inshallah. > Regards.. Owen

1 0