February 2012 - Test - lists.nanog.org

2012.02.07 NANOG54 day 2 notes, afternoon session
by Matthew Petach 08 Feb '12

08 Feb '12

I'm so sorry; I thought I would have time to send these out after the peering track, but I got pulled into some conversations which ended up lasting until 2330 hours, and ran right on through the social event. So, the afternoon session notes ended up having to wait until I got back to my room. Apologies for the delay, they're now up at http://kestrel3.netflight.com/2012.02.07-nanog54-afternoon-session.txt and apache has been restarted on the box for those who tried to get the notes earlier and got nothing but a timeout. Thanks! Matt

1 0

Anyone from Kraus Electronic/CableTV lurking?
by graham 07 Feb '12

07 Feb '12

I tried to reach Kraus Electronic / Cable TV through various means. Anyone know how to reach their NOC? They¹re announcing 12.198.32.0/20 (they only been swiped a /22), which is getting into my 12.198.40.0/22 assignment. On hold with AT&T, of course. -graham

2 2

2011 Worldwide Infrastructure Report available for download.
by Dobbins, Roland 07 Feb '12

07 Feb '12

[Apologies if you've already seen this announcement in other forums.] We've just posted the 2011 Worldwide Infrastructure Security Report for download at this URL: <http://www.arbornetworks.com/report> This year's WWISR contains responses and data from 114 network operators in all major geographical regions. The WWISR is based upon input from the global operational community, and, as such, is unique in its focus on the operational security aspects of public-facing networks. Many of you contributed to the survey which forms the foundation of the report; as always, we're grateful for your insight and participation, and welcome your feedback and comments. Thanks much! ----------------------------------------------------------------------- Roland Dobbins <rdobbins(a)arbor.net> // <http://www.arbornetworks.com> The basis of optimism is sheer terror. -- Oscar Wilde

1 0

2012.02.07 NANOG54 day 2 morning session notes
by Matthew Petach 07 Feb '12

07 Feb '12

I've posted my notes from the morning session at http://kestrel3.netflight.com/2012.02.07-nanog54-morning-session.txt for those who find them useful. Off to grab lunch now! BTW--wouldn't deploying the telex proxy require ISPs to do away with BCP 38 in their networks? Just curious. Thanks! Matt

1 0

issues with Level3 in NYC
by Philip Lavine 07 Feb '12

07 Feb '12

Anybody having issues with peering with Level3 in NYC

2 1

Switch and router
by Ann Kwok 07 Feb '12

07 Feb '12

Hello There is big congestion between router and switch I read some documents about flowcontral Do I disable or adjust flowcontral at the same? Can flowcontral solve the congestion issue? How can I adjust flowcontral in cisco router and HP switch? Thank you so much

6 6

2012.02.06 NANOG54 day1 afternoon session notes
by Matthew Petach 07 Feb '12

07 Feb '12

My notes from the second half of today's NANOG 54 talks are now up at http://kestrel3.netflight.com/2012.02.06-nanog54-afternoon-session.txt for those catching up remotely before the videos get posted up. Off to the Beer and Gear now. ^_^ Thanks! Matt

2 2

Re: DOS ATTACK ON BGP , LPTS ??
by Peter Ehiwe 07 Feb '12

07 Feb '12

Thanks Roland, Does anyone have a recommended value for tuning LPTS based on experience ? Rgds Peter On Tue, Feb 7, 2012 at 7:45 AM, Dobbins, Roland <rdobbins(a)arbor.net> wrote: > > On Feb 7, 2012, at 1:43 PM, Peter Ehiwe wrote: > > > What is the attacker spoofs the correct peering address , > > In that case, work with your peer(s) to get them to deploy anti-spoofing > filters at their edges. > > > then iACL may not suffice , from experience is the default policer > values for LPTS enough for XR routers > > Hard to say - look at CoPP/LPTS tuning. > > ----------------------------------------------------------------------- > Roland Dobbins <rdobbins(a)arbor.net> // <http://www.arbornetworks.com> > > The basis of optimism is sheer terror. > > -- Oscar Wilde > > -- Warm Regards Peter(CCIE 23782).

1 0

DOS ATTACK ON BGP , LPTS ??
by Peter Ehiwe 07 Feb '12

07 Feb '12

Hi , What is the best way to mitigate DOS attack against the bgp process of a router , is LPTS on IOS-XR enough ? Rgds Peter

2 1

Optimal IPv6 router
by Glen Kent 07 Feb '12

07 Feb '12

Hi, Most routers today are basically IPv4 routers, with IPv6 thrown in. They are however designed keeping IPv4 in mind. With IPv6 growing, if we were to design a native IPv6 router, with IPv4 functionality thrown in, then is it possible to design a more optimal IPv6 router, than what exists today? Glen

9 11