May 2011 - Test - lists.nanog.org

Re: Amazon diagnosis
by James Smith 03 May '11

03 May '11

It's always interesting (in a sad way) when a programmer or DBA comes to me with a basic networking or Unix question that any CCNA or RedHat candidate could answer. Then I get a very safe feeling about my job security when they start asking me if I could look at their code. This has happened too many times in my career. People seem to equate broad knowledge to mean you're a jack-of-all-trades-and-master-of-none. These are usually the same Comp Sci PhDs that have no clue why they just got fired for saying something totally inappropriate in front of HR. The more knowledge you have about anything and everything that your systems interact with then the better you will be at your specialty. Sent from my "contract free" BlackBerry® smartphone on the WIND network. -----Original Message----- From: Jeroen van Aart <jeroen(a)mompl.net> Date: Mon, 2 May 2011 19:27:34 To: <nanog(a)nanog.org> Subject: Re: Amazon diagnosis Jeff Wheeler wrote: > IT managers would do well to understand that a few smart programmers, > who understand how all their tools (web servers, databases, > filesystems, load-balancers, etc.) actually work, can often do more to I fully agree. But much to my dismay and surprise I have learned that developers know very little above and beyond their field of interest, say java programming. And I bet this is vice versa. It surprised me because I, perhaps naively, assumed IT workers in general have a rather broad knowledge because in general they're interested in many aspects of IT, try to find out as much as possible and if they do not know something they make an effort learning it. Also considering many (practical) things just aren't taught in university, which is to be expected since the idea is to develop an academic way of thinking. Maybe this "hacker" mentality is less prevalent than I, naively, assumed. So I believe it's just really hard to find someone who is smart and who understands all or most of the aspects of IT, i.e. servers, databases, file systems, load balancers, networks etc. And it's easier and cheaper in the short term to just open a can of <insert random IT job> and hope for the best. Regards, Jeroen -- http://goldmark.org/jeff/stupid-disclaimers/ http://linuxmafia.com/~rick/faq/plural-of-virus.html

1 0

re: Bright House residential IPv6
by Nick Olsen 02 May '11

02 May '11

Bright House does Not provide any IPv6 on any service at this time. It looks like they are allocated a prefix from ARIN, But They do not announce it. Expect them to be the last to support it. Nick Olsen Network Operations (855) FLSPEED x106 ---------------------------------------- From: "Thomas York" <straterra(a)fuhell.com> Sent: Monday, May 02, 2011 10:17 AM To: nanog(a)nanog.org Subject: Bright House residential IPv6 I'm a new Bright House residential customer and I have their new 40/5 'Lightning' service, which is rumored to have free native IPv6. I've called them, but of course no one I talked to knew anything about IPv6. Do any of you have this service and have native? If you do, what did you do to get it activated for your line? Thomas York

1 0

Bright House residential IPv6
by Thomas York 02 May '11

02 May '11

I'm a new Bright House residential customer and I have their new 40/5 'Lightning' service, which is rumored to have free native IPv6. I've called them, but of course no one I talked to knew anything about IPv6. Do any of you have this service and have native? If you do, what did you do to get it activated for your line? Thomas York

1 1

Summary: Youtube Geolocation
by Dan White 02 May '11

02 May '11

A couple of weeks ago, I posted (http://tinyurl.com/3btmf55) the following question to the list asking for assistance: >We're experiencing very poor quality with You Tube, and it appears we're >subject to a bad entry within a geolocation database somewhere. > >When we attempt to view videos, the contact comes back to us from IPs >like: > >208.117.226.21 (traceroute's through Frankfurt) >173.194.50.47 >74.125.100.29 > >All of those IPs are >125ms away from us (67.217.144.0/20, and >216.14.144.0/20). > >However, we've never experienced redirection problems with Google before >(we always land at www.google.com) so I'm not sure where to take our >trouble. > >The page at: > >http://www.google.com/support/websearch/bin/request.py?contact_type=ip > >isn't of much help as it assumes the problem is google.com redirection. > >Are there any contacts at Youtube who could provide some assistance? And received the following comments on and off list: Carl Rosevear confirmed that he had experienced the same issue, and had been attempting to work through the problem for some time. Mike Schoenfeld suggested verifying the information at: http://www.quova.com/what/request-ip-update/ Harry Strongburg posted that he had experienced similar problem over IPv6, and suggested increasing MTU values as a possible fix. Aaron Hopkins, Blake Hudson, and a private response, pointed towards DNS resolution as being a possible problem. I received private contact from a Google engineer requesting more information. The following test was used to confirm that the issue was indeed due to a DNS resolution problem: dig +trace v1.lscache1.c.youtube.com. ping <returned IP> traceroute <returned IP> While the problem was happening, v1.lscache1.c.youtube.com resolved to an address that was 129ms and 12 hops away from our network. With the assistance of irc://irc.freenode.net/#bind, we instituted the following temporary work around within our local resolvers, which provided instant relief for our end-users: zone "youtube.com" { type forward; forwarders { x.x.x.x; }; }; Where x.x.x.x is a geographically-near nameserver of one of our upstream providers. As of this morning, we have noticed that the problem has been resolved, and we've removed the temporary workaround within our local resolvers. It took approximately 2 weeks to achieve a resolution on this issue, which is within the time frame indicated here: http://www.google.com/support/websearch/bin/answer.py?hl=en&answer=873 After this fix, v1.lscache1.c.youtube.com is now resolving to an address that's about 8ms and 6 hops away from our network. I'd like to publicly thank those responsible for correcting this problem, and for all those offering sympathy and tips for trouble shooting. -- Dan White

1 0

Wire-rate Packet Capture on 10gbE
by Kyle Creyts 02 May '11

02 May '11

How is this being done? I've looked at looked at PF_RING and TNAPI... is there anything better out there? --Kyle

6 5

Multitenant FWs
by David Oramas 02 May '11

02 May '11

Hi, What do you guys recommend for Multitenant Firewalls with support for over 1,000+ users/contexts? I have looked at Centrinet's Accessmanager and Barracuda NG Firewall. Any other players/products? Many Thanks in advance for the input,

4 6