June 2011 - Test - lists.nanog.org

re: Cogent & HE
by Nick Olsen 08 Jun '11

08 Jun '11

Correct, The only way around this currently is to peer with both cogent and HE. If you have cogent, You can 6to4 w/BGP with HE. I would consider that just a patch for the problem. I would do it just for the reachablility. Nick Olsen Network Operations (855) FLSPEED x106 ---------------------------------------- From: "Dennis Burgess" <dmburgess(a)linktechs.net> Sent: Wednesday, June 08, 2011 3:45 PM To: nanog(a)nanog.org Subject: Cogent & HE Just noted that cogent does not have a IPv6 route to any subnet in HE, and HE does not have any routes to Cogent! Looks like we have different Global IPv6 tables? Or does Cogent just NOT peer IPv6 peer with anyone else! Dennis

1 0

Re: Cogent & HE
by Fredrik Holmqvist / I2B 08 Jun '11

08 Jun '11

On Wed, 8 Jun 2011 14:43:23 -0500, "Dennis Burgess" <dmburgess(a)linktechs.net> wrote: > Just noted that cogent does not have a IPv6 route to any subnet in HE, > and HE does not have any routes to Cogent! > > Looks like we have different Global IPv6 tables? Or does Cogent just > NOT peer IPv6 peer with anyone else! > > Dennis Hi. There is some difference in prefix count between the two: AS6939 6074 AS174 4787 These are prefixes announced to transitcustomer of both HE and Cogent. -- Fredrik Holmqvist I2B (Internet 2 Business) 070-740 5033

1 0

Cogent & HE
by Dennis Burgess 08 Jun '11

08 Jun '11

Just noted that cogent does not have a IPv6 route to any subnet in HE, and HE does not have any routes to Cogent! Looks like we have different Global IPv6 tables? Or does Cogent just NOT peer IPv6 peer with anyone else! Dennis

2 1

Microsoft's participation in World IPv6 day
by Bill Woodcock 08 Jun '11

08 Jun '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 http://support.microsoft.com/kb/2533454/ Uh... -Bill -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (Darwin) iQIcBAEBCAAGBQJN6A4VAAoJEG+kcEsoi3+H7uoQAMrSuAXqXo+L+Wkiqx+OvwU8 v4TJEeTU8Hp+ap0Kuka0Jq2HFC2ReABwfwZEX9wywdcXKFYu1u8znVa6neX6rjcv uxghsoqZEp9A4KB/J2q/ulM6B8/40oRHK1IuHdv0fZwC0oLyJ1W10n1VzsiE3qxx JOWbn1SIPo4nXnTIVU60yDOySlsclpW3fuqQoUIHzwEZEFgYf2l7ywcPfuCvVQJw FuqASIk0c9hQJVnBKTpaIQaNdRExkYtQSs5i8+TyzxhyGx1XGDOeJoRHRBQhSfcS DS8Vuwvblh+UjGFDIEF9Oen7NxrK2xjBCJIDV+MbJwAJdjs5wM3H9nFdhCX9Z2cl TRIj4/qQcS7m8cl4gNFY3nplALrWHjs2WK8jk0HlDnEgvSe7D2YC6Te5vnGgY9sX JXif1D36Pzx1V1JwbmMIwvvlUalPH/jyciMVUGrMMKc+0w7/75IerzGsSabdTIzJ t0/4jh5/h8db+q37CfN1Xj/gWkBcIyXmGGCd3pny4+YJwI5hnspWoeRq5lkB64Pn zDCJANGd5PZxtcTBgYJkZCK+sNjzycThkS1UP8pKdajbyQNlbRWkDFbQwMQ0DQEa IanX3BioesZmfashzRu+khdczhLVtFLKLUT7/yI2RqQOekx5sO+HqzTIiIIp5mkd KbOBvdIvnaz5FI94I8jk =OyB3 -----END PGP SIGNATURE-----

36 68

Re:Re: AAAA on various websites, but they all forgot to enable them on their nameservers.. (Jorge Amodio)(Lucy Lynch)
by Daniel Espejel 08 Jun '11

08 Jun '11

> > > You shouldn't. The matter of the fact is that for al leats 24 hours users > like you and me ... all we can reach the main Webpages for each participant > in the ipv6 day. > > The idea is that this must be all in a transparent manner for the final > users. If you have an IPv6 supported insfrastructure, then you can try > http://ipv6.google.com and feel the "power" of IPv6. > > A HOSTSV6.TXT file is not prepared for today (nor as actually I know). > > The results for this day are expected to be a reference for further IPv6 > deployment and implementation in the near future. > > Best regards xD. > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 8 Jun 2011 11:04:42 -0500 > From: Jorge Amodio <jmamodio(a)gmail.com> > Subject: Re: AAAA on various websites, but they all forgot to enable > them on their nameservers.... > To: Daniel Espejel <daniel.unam.ipv6(a)gmail.com> > Cc: nanog(a)nanog.org > Message-ID: <BANLkTi=fpCu9jzYP7mnkcPhXv0UyKwKU4Q(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > > The main objective for today is to access the web services, that's why > you > > can't reach a AAAA record for a DNS query for a given NS server. > > So if there are no AAAA records from where we ftp6 the HOSTSV6.TXT file ? > > -J > > > > ------------------------------ > > Message: 2 > Date: Wed, 8 Jun 2011 09:05:38 -0700 (PDT) > From: Lucy Lynch <llynch(a)civil-tongue.net> > Subject: Re: AAAA on various websites, but they all forgot to enable > them on their nameservers.... > To: Daniel Espejel <daniel.unam.ipv6(a)gmail.com> > Cc: nanog(a)nanog.org > Message-ID: <alpine.BSF.2.00.1106080903140.58253(a)hiroshima.bogus.com> > Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed > > On Wed, 8 Jun 2011, Daniel Espejel wrote: > > > Hi. > > > > The main objective for today is to access the web services, that's why > you > > can't reach a AAAA record for a DNS query for a given NS server. > > exactly - this site provides a nice service snapshot: > > http://www.mrp.net/IPv6Day.html > > > > > ; <<>> DiG 9.5.1-P3 <<>> www.google.com aaaa > > ;; global options: printcmd > > ;; Got answer: > > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40029 > > ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 4 > > > > ;; QUESTION SECTION: > > ;www.google.com. IN AAAA > > > > ;; ANSWER SECTION: > > www.google.com. 532907 IN CNAME www.l.google.com. > > www.l.google.com. 150 IN AAAA 2001:4860:4002:802::1010 > > > > ; <<>> DiG 9.5.1-P3 <<>> www.yahoo.com aaaa > > ;; global options: printcmd > > ;; Got answer: > > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60816 > > ;; flags: qr rd ra; QUERY: 1, ANSWER: 7, AUTHORITY: 2, ADDITIONAL: 2 > > > > ;; QUESTION SECTION: > > ;www.yahoo.com. IN AAAA > > > > ;; ANSWER SECTION: > > www.yahoo.com. 284 IN CNAME fpfd.wa1.b.yahoo.com. > > fpfd.wa1.b.yahoo.com. 6 IN AAAA 2001:4998:f00c:1fe::3001 > > fpfd.wa1.b.yahoo.com. 6 IN AAAA 2001:4998:f011:1fe::3001 > > fpfd.wa1.b.yahoo.com. 6 IN AAAA 2001:4998:f011:1fe::3000 > > fpfd.wa1.b.yahoo.com. 6 IN AAAA 2001:4998:f00d:1fe::3001 > > fpfd.wa1.b.yahoo.com. 6 IN AAAA 2001:4998:f00d:1fe::3000 > > fpfd.wa1.b.yahoo.com. 6 IN AAAA 2001:4998:f00c:1fe::3000 > > ; <<>> DiG 9.5.1-P3 <<>> www.facebook.com aaaa > > ;; global options: printcmd > > ;; Got answer: > > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12079 > > ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2 > > > > ;; QUESTION SECTION: > > ;www.facebook.com. IN AAAA > > > > ;; ANSWER SECTION: > > www.facebook.com. 8 IN AAAA 2620:0:1c00:0:face:b00c:0:1 > > > > > > > > ; <<>> DiG 9.5.1-P3 <<>> www.unam.mx aaaa > > ;; global options: printcmd > > ;; Got answer: > > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42381 > > ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 5, ADDITIONAL: 5 > > > > ;; QUESTION SECTION: > > ;www.unam.mx. IN AAAA > > > > ;; ANSWER SECTION: > > www.unam.mx. 6031 IN AAAA > 2001:1218:1:6:d685:64ff:fec4:720b > > > > You see? there's a lot of IPv6 activity since a few weeks ago. xD > > > -- *Daniel Espejel Pérez *

1 0

Re: Microsoft's participation in World IPv6 day
by Cameron Byrne 08 Jun '11

08 Jun '11

On Jun 5, 2011 6:15 PM, "Mark Andrews" <marka(a)isc.org> wrote: > > > In message <BANLkTimGkuL7ycrYG6kTC1U7OWis9dOA+YaV-YHwr+5C8= 0Pxw(a)mail.gmail.com> > , =?UTF-8?B?SsOpcsO0bWUgTmljb2xsZQ==?= writes: > > 2011/6/6 Mark Andrews <marka(a)isc.org>: > > > > > There is no reason that they can't do a similar thing to move > > > customers who are doing things that break with LSN out from behind > > > the LSN. > > > > Oh, you're right, they'll surelly do that. But not in time, and not for fre= > > e. > > Well here in Australia I would be calling the ACCC is a ISP tried > to charge extra for a address that is not behind a LSN. As for in > time it should be in place before they turn on LSN. If you can > adjust port 25 filters whenever a customer gets a new address you > can also ensure that they get address from the correct pool when > they connect to the network. This really isn't rocket science. > It's updating the provisioning database from a web form and generating > new configs based on that database. Yes there is some work required > to ensure that this gets done properly and there needs to be checks > that address pools are appropriately sized. > Can you cite an example of an isp doing this? My assumption is that people will get LSN by default for standard residential broad band and business class will get public ip's. Without any commitments to cite, plan for the worst and hope for the best. Cb > If I were doing it I would also have checkboxes for some of the > more common reasons and include IPv6 connectivity as one then have > a 6 month grace period once the ISP offers IPv6 connectivity before > removing that as a valid reason for needing a address that is not > behind the LSN. > > > LSN is beeing actively implemented in the core network of several > > ISPs, and most didn't yet consider it as optional. Nor are ready for > > v6 connectivity to residential customers, though. > > > > For users behind a forced NAT (no way to disable it on the CPE) or > > LSN, the only way out is still tunneling. Talking about bandwidth and > > infrastructure waste... > -- > Mark Andrews, ISC > 1 Seymour St., Dundas Valley, NSW 2117, Australia > PHONE: +61 2 9871 4742 INTERNET: marka(a)isc.org >

11 25

IPv6 to China (Was: Re: IPv6 day fun is beginning!)
by Xiaoliang Zhao 08 Jun '11

08 Jun '11

I have a similar setting as Jamie, VZ Fios plus HE tunnel, except I am running a FreeBSD VM to terminate tunnel and to run rtadvd. everything works nicely, so I thought I could do some tests on IPv6 connectivity and speed to China. There is a single-stack IPv6 website (bt.neu6.edu.cn) hosted by a chinese university providing torrents files. It is a single-stack because most chinese universities do not need pay for v6 traffic at this moment. I have no problem to open the website through v6 and i started a utorrent downloading with about 29 v6 peers and 5 v4 peers. my peak download speed reached 22Mbps... Best, Leon On Wed, Jun 8, 2011 at 7:40 AM, Jamie Bowden <jamie(a)photon.com> wrote: > Thanks to HE's tunnel broker service, I've got fully functional dual > stack at home (well, mostly, like most folks, VZ gives me a single > address and I live behind that with NATv4, but otherwise, I loves me > some FiOS) and yesterday went by for me without a hitch, including > accessing Facebook (I'd hear from the wife and kid really quickly if > they weren't working). For a working tunnel, I put my DIR-825 as the > "DMZ" host behind the cheesy Actiontec router VZ requires, forward all > traffic with zero firewalling to it, and let the D-Link appliance handle > all my firewall needs (and it terminates my v6 tunnel obviously). The > one thing I haven't quite figured out how to make it do (and maybe it's > just not capable) is use the /48 HE routes to me. The box insists that > the internal interface be on the same subnet as the external, and it > hands out v6 addresses from that /64. > > Jamie >

1 0

ISOC-HK Kickstart IPv6! webcast 0600UTC = 2am EDT
by Joly MacFie 08 Jun '11

08 Jun '11

ISOC Hong Kong has a great World IPv6 Day event - Kickstart IPv6! - starting at 2pm HKT = 0600UTC (around an hour from now) and running 3 and a half hours. It will be webcast live via the ISOC Chapters Livestream Channel on the ISOC-HK site - http://isoc.hk Please take time to watch and make comments via twitter with the tags #worldipv6day and @ISOCHK or via ISOC-HK facebook page at http://www.facebook.com/pages/Internet-Society-Hong-Kong-ISOC-HK/3389147906… Program: KEYNOTE: Geoff Huston, Chief Scientist (APNIC) Topic: IPv4 address exhaustion, and why we should be worried? SPEAKERS: Kuo-Wei Wu, Board Member, ICANN Topic: Moving into v6 world in Taiwan Che-hoo Cheng, Convener, IPv6 Working Group of Internet Society Hong Kong; Associate Director (Infrastructure) of The Information Technology Services Centre of The Chinese University of Hong Kong Topic: Hong Kong, are you IPv6 ready? Katherine Kwan, Vice President, Product Development and Management, Consumer Group, PCCW, Hong Kong Topic: Are you ready for IPv6? Leading-edge High-speed Broadband Service from the Leading ISP Warren Kwok, Telecom Engineer, OFTA, Hong Kong Topic: Experience of Deploying IPv6 in the Office of the Telecommunications Authority MODERATOR: Charles Mok, Chairman, Internet Society Hong Kong The Hong Kong Government has issued a statement in support: http://www.info.gov.hk/gia/general/201106/06/P201106030200.htm -- --------------------------------------------------------------- Joly MacFie 218 565 9365 Skype:punkcast WWWhatsup NYC - http://wwwhatsup.com http://pinstand.com - http://punkcast.com VP (Admin) - ISOC-NY - http://isoc-ny.org -------------------------------------------------------------- - -- --------------------------------------------------------------- Joly MacFie 218 565 9365 Skype:punkcast WWWhatsup NYC - http://wwwhatsup.com http://pinstand.com - http://punkcast.com VP (Admin) - ISOC-NY - http://isoc-ny.org -------------------------------------------------------------- -

2 3

Facebook's IPv6 Addresses - LOL
by David Swafford 08 Jun '11

08 Jun '11

This is amusing: Tracing route to www.facebook.com [2620:0:1c00:0:*face:b00c*:0:2] over a maximum of 30 hops: 1 <1 ms <1 ms <1 ms 2001:1938:2a7::1 2 88 ms 95 ms 88 ms gw-383.phx-01.us.sixxs.net[2001:1938:81:17e::1] 3 91 ms 86 ms 89 ms 2001:4de0:1000:a4::1 4 87 ms 128 ms 92 ms 1-3.ipv6.r1.ph.hwng.net[2001:4de0:1000:27::2] 5 87 ms 94 ms 85 ms 2001:478:186::20 6 100 ms 98 ms 100 ms 10gigabitethernet2-2.core1.lax1.he.net[2001:470:0:159::1] 7 117 ms 107 ms 116 ms 10gigabitethernet7-3.core1.fmt2.he.net[2001:470:0:18d::1] 8 112 ms 109 ms 114 ms 10gigabitethernet1-1.core1.sjc2.he.net[2001:470:0:31::2] 9 106 ms 108 ms 108 ms facebook.gige-g5-9.core1.sjc2.he.net[2001:470:0:14a::2] 10 105 ms 106 ms 107 ms ae0.bb01.sjc1.tfbnw.net [2620:0:1cff:* dead:beef*::9] 11 134 ms 132 ms 140 ms ae10.bb01.prn1.tfbnw.net[2620:0:1cff:dead:beef::119] 12 134 ms 133 ms 134 ms ae0.dr01.prn1.tfbnw.net[2620:0:1cff:dead:beef::19d] 13 132 ms 133 ms 133 ms po1023.csw01a.prn1.tfbnw.net[2620:0:1cff:dead:beef::381] ... In case the formatting get's lost, their initial address includes "face:booc" and one of the hops along the way is "dead:beef". :-) David :-D

2 1

RE: Hotmail?
by Ryan Finnesey 08 Jun '11

08 Jun '11

Can you customize the interface of OWA that much? Sent from my Windows Phone -----Original Message----- From: Syed Waqqas Ahmed Sent: Tuesday, June 07, 2011 10:28 PM To: Suresh Ramasubramanian Cc: nanog(a)nanog.org Subject: Re: Hotmail? If you already have MS Exchange just use OWA (outlook web access) feature to enable webaccess. but like suresh said its storage, directory services and mail traffic that matters most. regards syed. On Tue, Jun 7, 2011 at 10:23 PM, Suresh Ramasubramanian <ops.lists(a)gmail.com> wrote: > 400k is easy enough to do with either high end enterprise or low end > carrier grade products. > > Or if you have the patience to do it, open source ftw. > > The MTA isn't the criterion here as much as all the other stuff - > bandwidth, storage, directory services, security / antispam ... > > --srs > > On Wed, Jun 8, 2011 at 7:43 AM, Santino Codispoti > <santino.codispoti(a)gmail.com> wrote: >> Does anyone happen to know what Microsoft using to delivery Hotmail? >> Is it Exchange? Can anyone recommend a good system for developing web >> mail services? I need something that can easy support 400K users >> > > > > -- > Suresh Ramasubramanian (ops.lists(a)gmail.com) > >

2 1