January 2012 - Test - lists.nanog.org

Automate Peering Maintenance
by Rafael Rodriguez 06 Jan '12

06 Jan '12

Hello list, Want to ping the list and see how the operational community automates peering maintenance. I've spoken to a few folks and this seem completely foreign to them. By 'automate' I mean creating and updating dynamically (runs periodically) prefix and/ord AS-Path filters from IRR data and directly applying configuration to routers. I'm currently looking at bgpq, RtConfig, and IRRToolSet for generating the prefix and AS-Path filters but haven't been able to find anything that does the automatic re-provisioning/re-configuration on the peering sessions. Would be looking for tool(s) that's Junos friendly. Thanks! Cheers, RR

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 06 Jan '12

06 Jan '12

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 07 Jan, 2012 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 388994 Prefixes after maximum aggregation: 168547 Deaggregation factor: 2.31 Unique aggregates announced to Internet: 190697 Total ASes present in the Internet Routing Table: 39774 Prefixes per ASN: 9.78 Origin-only ASes present in the Internet Routing Table: 32587 Origin ASes announcing only one prefix: 15529 Transit ASes present in the Internet Routing Table: 5365 Transit-only ASes present in the Internet Routing Table: 140 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 33 Max AS path prepend of ASN (48687) 24 Prefixes from unregistered ASNs in the Routing Table: 2082 Unregistered ASNs in the Routing Table: 1044 Number of 32-bit ASNs allocated by the RIRs: 2160 Number of 32-bit ASNs visible in the Routing Table: 1822 Prefixes from 32-bit ASNs in the Routing Table: 4340 Special use prefixes present in the Routing Table: 2 Prefixes being announced from unallocated address space: 120 Number of addresses announced to Internet: 2506673712 Equivalent to 149 /8s, 104 /16s and 206 /24s Percentage of available address space announced: 67.6 Percentage of allocated address space announced: 67.6 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 91.9 Total number of prefixes smaller than registry allocations: 164906 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 96263 Total APNIC prefixes after maximum aggregation: 31431 APNIC Deaggregation factor: 3.06 Prefixes being announced from the APNIC address blocks: 92611 Unique aggregates announced from the APNIC address blocks: 38795 APNIC Region origin ASes present in the Internet Routing Table: 4630 APNIC Prefixes per ASN: 20.00 APNIC Region origin ASes announcing only one prefix: 1254 APNIC Region transit ASes present in the Internet Routing Table: 730 Average APNIC Region AS path length visible: 4.3 Max APNIC Region AS path length visible: 18 Number of APNIC region 32-bit ASNs visible in the Routing Table: 125 Number of APNIC addresses announced to Internet: 633118080 Equivalent to 37 /8s, 188 /16s and 157 /24s Percentage of available APNIC address space announced: 80.3 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 131072-132095, 132096-133119 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 147034 Total ARIN prefixes after maximum aggregation: 74945 ARIN Deaggregation factor: 1.96 Prefixes being announced from the ARIN address blocks: 119074 Unique aggregates announced from the ARIN address blocks: 49000 ARIN Region origin ASes present in the Internet Routing Table: 14841 ARIN Prefixes per ASN: 8.02 ARIN Region origin ASes announcing only one prefix: 5683 ARIN Region transit ASes present in the Internet Routing Table: 1574 Average ARIN Region AS path length visible: 4.0 Max ARIN Region AS path length visible: 25 Number of ARIN region 32-bit ASNs visible in the Routing Table: 14 Number of ARIN addresses announced to Internet: 804838592 Equivalent to 47 /8s, 248 /16s and 220 /24s Percentage of available ARIN address space announced: 64.0 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 173/8, 174/8, 184/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 95494 Total RIPE prefixes after maximum aggregation: 51954 RIPE Deaggregation factor: 1.84 Prefixes being announced from the RIPE address blocks: 87490 Unique aggregates announced from the RIPE address blocks: 55635 RIPE Region origin ASes present in the Internet Routing Table: 16229 RIPE Prefixes per ASN: 5.39 RIPE Region origin ASes announcing only one prefix: 7979 RIPE Region transit ASes present in the Internet Routing Table: 2578 Average RIPE Region AS path length visible: 4.6 Max RIPE Region AS path length visible: 33 Number of RIPE region 32-bit ASNs visible in the Routing Table: 1269 Number of RIPE addresses announced to Internet: 496218056 Equivalent to 29 /8s, 147 /16s and 175 /24s Percentage of available RIPE address space announced: 79.9 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 196608-198655 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 176/8, 178/8, 185/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 37108 Total LACNIC prefixes after maximum aggregation: 8068 LACNIC Deaggregation factor: 4.60 Prefixes being announced from the LACNIC address blocks: 36658 Unique aggregates announced from the LACNIC address blocks: 19174 LACNIC Region origin ASes present in the Internet Routing Table: 1561 LACNIC Prefixes per ASN: 23.48 LACNIC Region origin ASes announcing only one prefix: 448 LACNIC Region transit ASes present in the Internet Routing Table: 287 Average LACNIC Region AS path length visible: 4.5 Max LACNIC Region AS path length visible: 24 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 410 Number of LACNIC addresses announced to Internet: 95243144 Equivalent to 5 /8s, 173 /16s and 75 /24s Percentage of available LACNIC address space announced: 63.1 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 262144-263167 plus ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 8593 Total AfriNIC prefixes after maximum aggregation: 2076 AfriNIC Deaggregation factor: 4.14 Prefixes being announced from the AfriNIC address blocks: 6622 Unique aggregates announced from the AfriNIC address blocks: 2089 AfriNIC Region origin ASes present in the Internet Routing Table: 509 AfriNIC Prefixes per ASN: 13.01 AfriNIC Region origin ASes announcing only one prefix: 165 AfriNIC Region transit ASes present in the Internet Routing Table: 116 Average AfriNIC Region AS path length visible: 4.6 Max AfriNIC Region AS path length visible: 25 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 4 Number of AfriNIC addresses announced to Internet: 30739456 Equivalent to 1 /8s, 213 /16s and 12 /24s Percentage of available AfriNIC address space announced: 45.8 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2467 11099 965 Korea Telecom (KIX) 17974 1719 503 37 PT TELEKOMUNIKASI INDONESIA 7545 1630 303 86 TPG Internet Pty Ltd 4755 1517 385 157 TATA Communications formerly 7552 1409 1064 7 Vietel Corporation 9829 1172 989 28 BSNL National Internet Backbo 9583 1111 81 496 Sify Limited 4808 1091 2036 310 CNCGROUP IP network: China169 24560 986 381 164 Bharti Airtel Ltd., Telemedia 18101 975 131 156 Reliance Infocom Ltd Internet Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3476 3814 217 bellsouth.net, inc. 7029 3161 1017 200 Windstream Communications Inc 18566 2093 382 177 Covad Communications 1785 1864 680 122 PaeTec Communications, Inc. 4323 1620 1065 385 Time Warner Telecom 20115 1616 1551 619 Charter Communications 22773 1518 2909 107 Cox Communications, Inc. 30036 1484 264 691 Mediacom Communications Corp 19262 1389 4683 401 Verizon Global Networks 7018 1302 7013 853 AT&T WorldNet Services Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8402 1564 480 15 Corbina telecom 15557 1096 2161 64 LDCOM NETWORKS 2118 672 99 14 EUnet/RELCOM Autonomous Syste 6830 645 1928 414 UPC Distribution Services 34984 636 132 198 BILISIM TELEKOM 20940 563 183 449 Akamai Technologies European 12479 551 636 53 Uni2 Autonomous System 3320 531 8162 397 Deutsche Telekom AG 8551 504 360 81 Bezeq International 3292 480 2106 407 TDC Tele Danmark Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 1721 319 159 TVCABLE BOGOTA 28573 1573 1064 76 NET Servicos de Comunicao S.A 8151 1459 2989 346 UniNet S.A. de C.V. 7303 1255 756 178 Telecom Argentina Stet-France 27947 632 73 95 Telconet S.A 22047 582 322 17 VTR PUNTO NET S.A. 7738 551 1050 31 Telecomunicacoes da Bahia S.A 3816 547 237 91 Empresa Nacional de Telecomun 6503 538 434 67 AVANTEL, S.A. 11172 533 86 99 Servicios Alestra S.A de C.V Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 1032 958 13 TEDATA 24863 794 146 36 LINKdotNET AS number 3741 280 939 229 The Internet Solution 6713 250 649 18 Itissalat Al-MAGHRIB 15706 242 32 6 Sudatel Internet Exchange Aut 33776 240 13 8 Starcomms Nigeria Limited 29571 217 17 13 Ci Telecom Autonomous system 12258 195 28 60 Vodacom Internet Company 24835 191 80 8 RAYA Telecom - Egypt 16637 160 664 82 MTN Network Solutions Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3476 3814 217 bellsouth.net, inc. 7029 3161 1017 200 Windstream Communications Inc 4766 2467 11099 965 Korea Telecom (KIX) 18566 2093 382 177 Covad Communications 1785 1864 680 122 PaeTec Communications, Inc. 10620 1721 319 159 TVCABLE BOGOTA 17974 1719 503 37 PT TELEKOMUNIKASI INDONESIA 7545 1630 303 86 TPG Internet Pty Ltd 4323 1620 1065 385 Time Warner Telecom 20115 1616 1551 619 Charter Communications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 7029 3161 2961 Windstream Communications Inc 18566 2093 1916 Covad Communications 1785 1864 1742 PaeTec Communications, Inc. 17974 1719 1682 PT TELEKOMUNIKASI INDONESIA 10620 1721 1562 TVCABLE BOGOTA 8402 1564 1549 Corbina telecom 7545 1630 1544 TPG Internet Pty Ltd 4766 2467 1502 Korea Telecom (KIX) 28573 1573 1497 NET Servicos de Comunicao S.A 22773 1518 1411 Cox Communications, Inc. Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.14.170.0/24 4323 Time Warner Telecom 32567 UNALLOCATED 12.25.107.0/24 4323 Time Warner Telecom 25639 UNALLOCATED 12.41.169.0/24 7018 AT&T WorldNet Servic 13317 UNALLOCATED 12.44.10.0/24 7018 AT&T WorldNet Servic 23502 UNALLOCATED 12.44.44.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.103.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.110.0/24 701 UUNET Technologies, 16476 UNALLOCATED 12.46.27.0/24 7018 AT&T WorldNet Servic 32873 UNALLOCATED 12.46.100.0/23 10912 InterNAP Network Ser Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 128.0.0.0/21 12654 RIPE NCC RIS Project 128.0.24.0/24 12654 RIPE NCC RIS Project Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 14.192.0.0/22 45464 Room 201, TGU Bldg 14.192.4.0/22 45464 Room 201, TGU Bldg 14.192.8.0/22 45464 Room 201, TGU Bldg 14.192.12.0/22 45464 Room 201, TGU Bldg 14.192.16.0/22 45464 Room 201, TGU Bldg 14.192.20.0/22 45464 Room 201, TGU Bldg 14.192.24.0/22 45464 Room 201, TGU Bldg 14.192.28.0/22 45464 Room 201, TGU Bldg 37.35.8.0/21 8400 "TELEKOM SRBIJA" a.d. 37.35.64.0/21 33983 IP network of ARTMOTION n.p.s Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:12 /10:27 /11:81 /12:237 /13:465 /14:815 /15:1453 /16:12097 /17:6127 /18:10171 /19:20180 /20:27922 /21:28372 /22:38717 /23:36054 /24:202631 /25:1177 /26:1403 /27:780 /28:167 /29:55 /30:14 /31:0 /32:18 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 7029 2789 3161 Windstream Communications Inc 6389 2121 3476 bellsouth.net, inc. 18566 2042 2093 Covad Communications 10620 1616 1721 TVCABLE BOGOTA 8402 1543 1564 Corbina telecom 30036 1443 1484 Mediacom Communications Corp 11492 1115 1152 Cable One 1785 1066 1864 PaeTec Communications, Inc. 7011 1051 1168 Citizens Utilities 15557 1046 1096 LDCOM NETWORKS Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:494 2:417 4:15 5:1 6:3 8:364 12:1949 13:1 14:583 15:11 16:3 17:7 20:9 23:85 24:1717 27:1171 31:787 32:67 33:2 34:2 36:4 37:15 38:794 40:114 41:3004 42:85 43:1 44:3 46:1166 47:3 49:297 50:501 52:13 55:6 56:2 57:41 58:942 59:487 60:343 61:1177 62:938 63:1966 64:4116 65:2302 66:4368 67:1989 68:1165 69:3147 70:921 71:419 72:1787 74:2645 75:442 76:321 77:940 78:894 79:501 80:1187 81:859 82:523 83:530 84:581 85:1167 86:748 87:911 88:349 89:1583 90:261 91:4403 92:534 93:1523 94:1336 95:1049 96:401 97:295 98:788 99:38 100:18 101:127 103:612 106:10 107:126 108:101 109:1422 110:681 111:835 112:429 113:494 114:599 115:738 116:867 117:724 118:889 119:1234 120:386 121:673 122:1621 123:1051 124:1338 125:1351 128:536 129:192 130:189 131:586 132:163 133:21 134:226 135:54 136:213 137:151 138:286 139:135 140:490 141:261 142:379 143:403 144:501 145:67 146:474 147:222 148:632 149:276 150:165 151:192 152:444 153:169 154:7 155:393 156:210 157:366 158:155 159:511 160:345 161:221 162:336 163:187 164:523 165:393 166:552 167:454 168:816 169:147 170:828 171:95 172:4 173:1785 174:588 175:417 176:333 177:442 178:1169 180:1215 181:43 182:686 183:267 184:422 185:1 186:1479 187:816 188:1006 189:1169 190:5328 192:5988 193:5447 194:3788 195:3192 196:1286 197:174 198:3619 199:4256 200:5570 201:1690 202:8512 203:8592 204:4342 205:2423 206:2701 207:2803 208:4009 209:3545 210:2747 211:1477 212:1963 213:1813 214:837 215:93 216:4909 217:1478 218:568 219:338 220:1243 221:563 222:324 223:266 End of report

1 0

incoming smtp from v6 addresses
by Randy Bush 06 Jan '12

06 Jan '12

for incoming mail that is *accepted*, i.e. not stuff like 2012-01-04 00:37:28 REJECT because 118.39.80.118 listed in rbl-plus.mail-abuse.org 2012-01-04 00:37:28 H=(nexo.es) [118.39.80.118] F=<pedrom(a)nexo.es> rejected RCPT <owner-radiusext(a)ops.ietf.org>: blocked because 118.39.80.118 is in blacklist at rbl-plus.mail-abuse.org: Mail from 118.39.80.118 blocked using Trend Micro Email Reputation database. Please see <http://www.mail-abuse.com/cgi-bin/lookup?118.39.80.118> 2012-01-04 00:37:28 no host name found for IP address 118.39.80.118 2012-01-04 00:37:29 REJECT 118.39.80.118 too many bad recip 2012-01-04 00:37:29 REJECT because 118.39.80.118 listed in rbl-plus.mail-abuse.org 7.8% is over ipv6 transport but only 2% of outgoing deliveries are over ipv6. what do other folk see? randy

12 13

Router Assessment Tool
by Green, Timothy 06 Jan '12

06 Jan '12

Happy New Year All!!! I'm trying to perform STIG compliancy on various Cisco equipment. Has anybody used the Router Assessment Tool (RAT) for routers and switches? Any cheap (free) recommendations? As a last ditch effort I could use NMAP. Thanks, Tim

3 2

looking for traffic sources aimed at 192.153.154.124
by Alan Clegg 06 Jan '12

06 Jan '12

If anyone has some spare cycles and wants to help disrupt a DDoS, if you can look for traffic sourced within your network, destination 192.153.154.124 port 80, I'd appreciate it. I've been under attack for about the last 12 hours. Other pointers to resources to trace the miscreants responsible would also be appreciated. Thanks, AlanC -- alan(a)clegg.com | aclegg(a)infoblox.com 1.919.355.8851

2 1

Re: SSL Certificates
by graham＠g-rock.net 06 Jan '12

06 Jan '12

We use rapidssl. Seems to be ok across the board. No reports otherwise. Sent from my HTC on the Now Network from Sprint! ----- Reply message ----- From: "Michael Carey" <mcarey(a)kinber.org> Date: Fri, Jan 6, 2012 8:15 am Subject: SSL Certificates To: <nanog(a)nanog.org> Looking for a recommendation on who to buy affordable and reputable SSL certificates from? Symantec, Thawte, and Comodo are the names that come to mind, just wondering if there are others folks use. Thanks, -- Michael D. Carey KINBER Network Engineer mcarey(a)kinber.org M: 814.777.5027 GV: (814) 205-6773 <https://www.google.com/voice#phones> Skype: KINBER.Mike.Carey KINBER - Keystone Initiative for Network Based Education and Research - www.kinber.org PennREN - Pennsylvania's Research and Education Network

1 0

question regarding US requirements for journaling public email (possible legislation?)
by Eric J Esslinger 06 Jan '12

06 Jan '12

Hope yall had an 'eventless' holiday. (I.e. no pages at 2 am on a holiday morning). Sorry to drop what is possibly just someone misunderstanding something or pulling my leg on the list, but over the holidays I ran into one of my buddies that is also a network admin type and he was griping about mail journalling, which I already do for our corporate email accounts. However, his discussion was in terms of all customer email... Which I said was probably a bad thing to do. His response was there is legislation being pushed in both House and Senate that would require journalling for 2 or 5 years, all mail passing through all of your mail servers. I've seen nothing, and my google fu has turned up nothing other than corporate requirements, so I ask here. Has anyone heard of such a bill working it's way through either side of congress? (I am speaking specifically of full email journaling, not just logs, which I do archive for significant amounts of time.) I also don't want to discuss the pros, cons, merits, costs, goods, or evils of such a requirement, just wanted to know if this is something I should be looking forward towards maybe needing to implement. Thanks for your attention and may you have a low incident new year. __________________________ Eric Esslinger Information Services Manager - Fayetteville Public Utilities http://www.fpu-tn.com/ (931)433-1522 ext 165 This message may contain confidential and/or proprietary information and is intended for the person/entity to whom it was originally addressed. Any use by others is strictly prohibited.

8 11

anycast load balancing issue
by Måns Nilsson 06 Jan '12

06 Jan '12

Hi, I'm in the process of deploying an anycast DNS service internally. We're on a pretty provider-like network, where we run MPLS to provide several network overlays for different services. iBGP is used to distribute routing information, and ISIS is used as IGP. In one of the VRFen we would like to place name servers using a common IP address. To get speedy network updates when outages occur we'll be using OSPF on the name servers to inject the routes into the IGP. The P/E router then redistributes the route into the right VRF. (the name server OSPF process is not aware of MPLS; it just talks to a router.) So far so good. This works. Trouble is, we find that (untweaked) cost and metric are such that all nodes are equal. The last resort (peer router ID) gets invoked and all traffic goes to one single instance. Of course, when that instance falls off the net recalculation takes place and another node steps in, but I'd like true path lengths (IGP hop count) to influence more than iBGP (route-reflector-style) selection. Any clues? Oh, all-cisco, all ASR1000 series. All links GE. ~90 routers in IGP. -- Måns Nilsson primary/secondary/besserwisser/machina MN-1334-RIPE +46 705 989668 ... this must be what it's like to be a COLLEGE GRADUATE!!

4 5

"Non-vendor neutral" hosting/colocation
by Christopher J. Pilkington 06 Jan '12

06 Jan '12

We are experiencing an issue in NYCMNY where the hosting facility's owner, a large IXC and CLEC, is being less than cooperative in allowing the ILEC delivering a private circuit to the hosting facility. They will allow ILEC to deliver the circuit elsewhere in the building, but will not provide us a cross connect to this facility. Hosting provider will however gladly use their own CLEC to provide us the service and provide cross connect to same. I have no details on whether this is contractually permitted or not. Another circuit from a third IXC/CLEC ran into a similar problem. This carrier "resolved it" by using the hosting company's CLEC for local loop, even though third carrier has lit facilities elsewhere in said facility. We have concerns for future issues involving the merger of a previous vendor-neutral hosting facility company and another telco provider. Any experiences or advice, on or off list, would be helpful. Also, comments from regulatory geeks would be interesting as well. -cjp

3 2

Trouble accessing www.nanog.org
by Ronald Bonica 05 Jan '12

05 Jan '12

Is anyone else having trouble accessing www.nanog.org. I can ping the site but don't get any response from HTTP requests. -------------------------- Ron Bonica vcard: www.bonica.org/ron/ronbonica.vcf

13 17