June 2012 - Test - lists.nanog.org

IPv6 Facebook
by Eduardo Schoedler 05 Jun '12

05 Jun '12

Hello, Somewhere from GlobalCrossing/Level3 here to contact me off list? Here from Brazil we are going thru Europe to reach the Facebook on USA. # mtr -c 100 -wr www.facebook.com HOST: border02.scr Loss% Snt Last Avg Best Wrst StDev 1.|-- <removed> 2.|-- <removed> 3.|-- 2804:1b0:1000:4e05:: 0.0% 100 4.0 7.3 3.1 202.1 24.7 4.|-- 2001:450:2002:448::1 0.0% 100 68.5 63.8 59.4 79.5 5.4 5.|-- 2001:450:2001:800a::2 0.0% 100 143.0 153.3 143.0 336.8 31.8 6.|-- 2001:1900:5:3::12d 1.0% 100 323.6 328.0 323.1 427.2 14.6 7.|-- vl-4080.edge3.*Paris1*.Level3.net 0.0% 100 322.3 323.7 321.9 352.9 5.1 8.|-- vl-4086.car1.Washington1.Level3.net 1.0% 100 348.0 356.8 341.0 570.6 36.0 9.|-- vl-60.edge3.Washington4.Level3.net 0.0% 100 337.1 339.6 336.5 373.2 6.9 10.|-- FACEBOOK-IN.edge3.Washington4.Level3.net 0.0% 100 341.1 344.6 340.7 400.8 12.0 11.|-- ae1.bb02.iad2.tfbnw.net 1.0% 100 337.9 339.3 336.3 385.1 8.3 12.|-- ae8.bb04.prn1.tfbnw.net 1.0% 100 403.7 404.8 403.1 445.0 5.7 13.|-- ae3.dr05.prn1.tfbnw.net 1.0% 100 403.4 404.5 402.7 455.8 6.9 14.|-- 2620:0:1cff:dead:beee::149 1.0% 100 410.6 406.5 404.4 454.2 6.3 15.|-- www6-10-08-prn1.facebook.com 1.0% 100 403.5 402.8 401.8 406.5 0.8 Regards, -- Eduardo Schoedler

1 0

NOC presentations
by Stefan Liström 05 Jun '12

05 Jun '12

Hi all, In TF-NOC we have been collecting information about NOCs for some time now[1]. Most of the NOCs are from research and educational organizations and we think it would also be very interesting to get the same kind of information from commercial NOCs. I understand that many commercial companies might not be able to share this information, but I thought it might be worth asking. If you would like to share information about your NOC please check out our presentation template[2] for inspiration and let me know. Even if you are not able to share information about your NOC the information we have gathered will hopefully still be interesting for you. [1] http://www.terena.org/activities/tf-noc/nocs.html [2] http://www.terena.org/activities/tf-noc/TF-NOC-flashpresentation-v2.ppt -- Best regards Stefan Liström

1 1

Recommendation for OOB management via IP
by Hiten J. Thakkar 04 Jun '12

04 Jun '12

Hello! My work place is looking for an OOB management over IP. We have Lantronix KVM in our Datacenter with nearly 100% uptime and Lantronix SLC-8/16/48 ports with 2 NICs deployed across various MDFs on campus and remote locations (5). On our main campus we have a parallel net, but for the remote locations we are looking to access Lantronix SLCs' via the second NIC card using IP based solution. Can you kindly make suggestions. I supremely appreciate your time and inputs in advance. -- Thanks and regards, Hiten J. Thakkar

2 1

test-ipv6.com / omgipv6day.com down
by Jason Fesler 04 Jun '12

04 Jun '12

I know a lot of people are using / pointing to test-ipv6.com . The hardware picked a bad week to quit sniffing glue. I"ll be working on trying to get it back up today, I need to source hardware. Also looking at borrowing a VM for short term. (speaking only for @test-ipv6.com, not for $employer - my personal mail address is down too).

7 12

IPv6 evolution
by Matthew Luckie 04 Jun '12

04 Jun '12

IPv6 paths that are the same as an IPv4-level path are correlated with better IPv6 performance according to: "Assessing IPv6 Through Web Access - A Measurement Study and Its Findings" http://repository.upenn.edu/ese_papers/602/ At the Feb NANOG I gave a lightning talk on trends involving dual-stack ASes, beginning with the fraction of AS-level paths that are the same in IPv4 and IPv6. As of Jan 2012, 40-50% of AS-level paths are the same in v4 and v6 for dual-stacked origin ASes. http://www.nanog.org/meetings/nanog54/presentations/Monday/Luckie_LT.pdf We've looked further into the evolution of IPv6 since then. In particular we looked at "what could be". We find that 95% of AS-level paths could be the same today: where an IPv4 path contains ASes that are not found in an IPv6 path to the same dual-stacked origin, we check to see if the AS is observed in an IPv6 BGP path, and thus the AS is IPv6 capable at a minimum. A brief blog post on this is at: http://blog.caida.org/best_available_data/2012/06/04/ipv6-what-could-be-but… Matthew

1 0

Google Public DNS contact
by alex-lists-nanog＠yuriev.com 04 Jun '12

04 Jun '12

Hello, If anyone has a contact in the Google Group that deals with Google's Public DNS servers ( i.e. the 8.8.8.8/8.8.4.4 creatures ) could that person kindly drop me an email off list? I believe there might be an issue with some of the servers. Thanks, Alex

2 1

Cat Humor
by Eric Wieling 04 Jun '12

04 Jun '12

I'm not looking for help, just thought this was hilarious. "Mark called in from XO he stated a tech was on site and found out that client used a CAT 6 cable instead of a CAT 5 cable and XO doesn't have a "connecting piece" for the CAT 6 cable. he stated if client gets a wire/cable guy out there to fix issue, XO can send out a tech to make sure they hook up everything correctly."

2 1

Wacky Weekend: The '.secure' gTLD
by Jay Ashworth 04 Jun '12

04 Jun '12

"The proposal comes from Alex Stamos of research firm iSec Partners, and would appoint Artemis Internet as the gatekeeper of .secure. Artemis would require registered domains to encrypt all web and email traffic (except for HTTP redirects funneling connections towards the appropriate TLS-encrypted site), use DNSSEC, and deploy DomainKeys Identified Mail (DKIM) for spam prevention. In addition, Artemis would employ a rigorous screening process to verify registrants' identities (including reviewing articles of incorporation and human interviews), and routinely conduct security scans of registered sites. The venture has $9.6 million (US) in funding provided by Artemis' parent company NCC Group, a UK-based IT security firm." https://lwn.net/Articles/497254/ Discuss. Debate. Digress. Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274

12 16

bgp best practice question
by jon Heise 04 Jun '12

04 Jun '12

I need to make one of our data centers internet accessible, i plan to advertise a /24 out of our existing /22 network block at our new site. My question is for our main datacenter, is it a better idea to continue to advertise the full /22 or advertise the remaining /23 and /24 networks ? - Jon Heise

3 2

Questions about anycasting setup
by Anurag Bhatia 04 Jun '12

04 Jun '12

Hello everyone. I am working on creating a small anycasting based setup with 3-4 servers in US. Plan is to use this for DNS and later for CDN setups. I have few confusions in mind and was wondering if you guys here can put some light on them: 1. For anycasting does announcing a /24 from different ASNs (of different datacenters) makes sense or it will be an issue to have a block being announced from different ASNs and I should avoid and prefer having own router below datacenters network and eventually use one single ASN to announce the anycasting block? 2. We plan to use this anycasting based setup for DNS during initial few months. Assuming low traffic for DNS say ~10Mbps on average (on 100Mbps port) and transit from just single network (datacenter itself) - is this setup OK for simple software based BGP like Quagga or Bird? Certainly colocating routers will be slow & expensive. Does it offer any direct advantage in such simple setups? 3. IPv6! - I am looking at possibility of having support of IPv6 in anycast right from start. Can't really find a good prefix size for anycasting announcement. I can see Hurricane Electric as well as Google using whole /32 block for IPv6. So is /32 is standard? We have only one /32 allocation from ARIN and thus if using /32 seems like hard deal - we have to likely get another /32 just for anycasting? or we can use /48 without issues? Also, is /48 a good number for breaking /32 so that we can do /48 announcements from different datacenters in simple uni casting setup? I apologize for any wrong questions/logic - really new to this. Please correct me if I am wrong on any concept. Appreciate your help. Thanks. -- Anurag Bhatia anuragbhatia.com or simply - http://[2001:470:26:78f::5] if you are on IPv6 connected network! Twitter: @anurag_bhatia <https://twitter.com/#!/anurag_bhatia> Linkedin: http://linkedin.anuragbhatia.com

7 16