June 2012 - Test - lists.nanog.org

rpki vs. secure dns?
by Paul Vixie 05 Jun '12

05 Jun '12

http://tech.slashdot.org/story/12/04/27/2039237/engineers-ponder-easier-fix… > "The problem: Border Gateway Protocol (BGP) enables routers to > communicate about the best path to other networks, but routers don't > verify the route 'announcements.' When routing problems erupt, 'it's > very difficult to tell if this is fat fingering on a router or > malicious > <http://www.itworld.com/security/272320/engineers-ponder-easier-fix-dangerou…>,' > said Joe Gersch, chief operating officer for Secure64, a company that > makes Domain Name System (DNS) server software. In a well-known > incident, Pakistan Telecom made an error with BGP after Pakistan's > government ordered in 2008 that ISPs block YouTube, which ended up > knocking Google's service offline > <http://slashdot.org/story/08/02/25/1322252/pakistan-youtube-block-breaks-th…>. > A solution exists, but it's complex, and deployment has been slow. Now > experts have found an easier way." this seems late, compared to the various commitments made to rpki in recent years. is anybody taking it seriously?

27 69

Fwd: [arin-announce] IPv4 Countdown Plan Update
by John Curran 05 Jun '12

05 Jun '12

NANOG Folks - Apologies for cross-posting, but this is very important information for all organizations about how requests for IPv4 address space will be handled as we approach runout in this region. FYI (& Thanks!) /John John Curran President and CEO ARIN Begin forwarded message: From: ARIN <info(a)arin.net<mailto:info@arin.net>> Subject: [arin-announce] IPv4 Countdown Plan Update Date: June 5, 2012 10:06:46 AM PDT To: <arin-announce(a)arin.net<mailto:arin-announce@arin.net>> On 23 April 2012 during ARIN XXIX in Vancouver, Leslie Nobile, Director of Registration Services gave a presentation on ARIN's plan to manage the distribution of its remaining IPv4 address pool. You can view the presentation at: https://www.arin.net/participate/meetings/reports/ARIN_XXIX/webcast/nobile_… We received some great input and in response have made a few adjustments to the Countdown Plan. * The time window to complete payment and the RSA have been extended from 45 to 60 days. * Reinstatement of a 30 day hold period for returned, revoked and reclaimed resources during the final phase of the countdown, when ARIN supply is at or below one /8 equivalent. * The block size distribution of ARIN's remaining IPv4 inventory is now available on the page and will be updated daily. The ARIN community has worked together over the last several years in developing policy to manage how ARIN allocates and assigns IPv4 addresses. ARIN has reviewed and refined its procedures to create an IPv4 Countdown Plan explaining how IPv4 requests will be processed as the remaining IPv4 address pool is distributed. We have posted the details of the plan at: https://www.arin.net/resources/request/ipv4_countdown.html The IPv4 Countdown is a dynamic process and we will notify the community as we approach and reach the trigger points for each new phase of the plan. ARIN will be updating and adding more information to the IPv4 Countdown page as we move through this process, so we strongly encourage you to pay attention to announcements and keep track of the current IPv4 inventory by monitoring the counter on the ARIN homepage. Because the IPv4 inventory may fluctuate on a daily basis, it is not intended as a tool to guide the timing of your IPv4 resource requests. Regards, Communications and Member Services American Registry for Internet Numbers (ARIN) _______________________________________________ ARIN-Announce You are receiving this message because you are subscribed to the ARIN Announce Mailing List (ARIN-announce(a)arin.net) Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-announce Please contact info(a)arin.net if you experience any issues.

1 0

IPv6 Facebook
by Eduardo Schoedler 05 Jun '12

05 Jun '12

Hello, Somewhere from GlobalCrossing/Level3 here to contact me off list? Here from Brazil we are going thru Europe to reach the Facebook on USA. # mtr -c 100 -wr www.facebook.com HOST: border02.scr Loss% Snt Last Avg Best Wrst StDev 1.|-- <removed> 2.|-- <removed> 3.|-- 2804:1b0:1000:4e05:: 0.0% 100 4.0 7.3 3.1 202.1 24.7 4.|-- 2001:450:2002:448::1 0.0% 100 68.5 63.8 59.4 79.5 5.4 5.|-- 2001:450:2001:800a::2 0.0% 100 143.0 153.3 143.0 336.8 31.8 6.|-- 2001:1900:5:3::12d 1.0% 100 323.6 328.0 323.1 427.2 14.6 7.|-- vl-4080.edge3.*Paris1*.Level3.net 0.0% 100 322.3 323.7 321.9 352.9 5.1 8.|-- vl-4086.car1.Washington1.Level3.net 1.0% 100 348.0 356.8 341.0 570.6 36.0 9.|-- vl-60.edge3.Washington4.Level3.net 0.0% 100 337.1 339.6 336.5 373.2 6.9 10.|-- FACEBOOK-IN.edge3.Washington4.Level3.net 0.0% 100 341.1 344.6 340.7 400.8 12.0 11.|-- ae1.bb02.iad2.tfbnw.net 1.0% 100 337.9 339.3 336.3 385.1 8.3 12.|-- ae8.bb04.prn1.tfbnw.net 1.0% 100 403.7 404.8 403.1 445.0 5.7 13.|-- ae3.dr05.prn1.tfbnw.net 1.0% 100 403.4 404.5 402.7 455.8 6.9 14.|-- 2620:0:1cff:dead:beee::149 1.0% 100 410.6 406.5 404.4 454.2 6.3 15.|-- www6-10-08-prn1.facebook.com 1.0% 100 403.5 402.8 401.8 406.5 0.8 Regards, -- Eduardo Schoedler

1 0

NOC presentations
by Stefan Liström 05 Jun '12

05 Jun '12

Hi all, In TF-NOC we have been collecting information about NOCs for some time now[1]. Most of the NOCs are from research and educational organizations and we think it would also be very interesting to get the same kind of information from commercial NOCs. I understand that many commercial companies might not be able to share this information, but I thought it might be worth asking. If you would like to share information about your NOC please check out our presentation template[2] for inspiration and let me know. Even if you are not able to share information about your NOC the information we have gathered will hopefully still be interesting for you. [1] http://www.terena.org/activities/tf-noc/nocs.html [2] http://www.terena.org/activities/tf-noc/TF-NOC-flashpresentation-v2.ppt -- Best regards Stefan Liström

1 1

Recommendation for OOB management via IP
by Hiten J. Thakkar 05 Jun '12

05 Jun '12

Hello! My work place is looking for an OOB management over IP. We have Lantronix KVM in our Datacenter with nearly 100% uptime and Lantronix SLC-8/16/48 ports with 2 NICs deployed across various MDFs on campus and remote locations (5). On our main campus we have a parallel net, but for the remote locations we are looking to access Lantronix SLCs' via the second NIC card using IP based solution. Can you kindly make suggestions. I supremely appreciate your time and inputs in advance. -- Thanks and regards, Hiten J. Thakkar

2 1

test-ipv6.com / omgipv6day.com down
by Jason Fesler 05 Jun '12

05 Jun '12

I know a lot of people are using / pointing to test-ipv6.com . The hardware picked a bad week to quit sniffing glue. I"ll be working on trying to get it back up today, I need to source hardware. Also looking at borrowing a VM for short term. (speaking only for @test-ipv6.com, not for $employer - my personal mail address is down too).

7 12

IPv6 evolution
by Matthew Luckie 04 Jun '12

04 Jun '12

IPv6 paths that are the same as an IPv4-level path are correlated with better IPv6 performance according to: "Assessing IPv6 Through Web Access - A Measurement Study and Its Findings" http://repository.upenn.edu/ese_papers/602/ At the Feb NANOG I gave a lightning talk on trends involving dual-stack ASes, beginning with the fraction of AS-level paths that are the same in IPv4 and IPv6. As of Jan 2012, 40-50% of AS-level paths are the same in v4 and v6 for dual-stacked origin ASes. http://www.nanog.org/meetings/nanog54/presentations/Monday/Luckie_LT.pdf We've looked further into the evolution of IPv6 since then. In particular we looked at "what could be". We find that 95% of AS-level paths could be the same today: where an IPv4 path contains ASes that are not found in an IPv6 path to the same dual-stacked origin, we check to see if the AS is observed in an IPv6 BGP path, and thus the AS is IPv6 capable at a minimum. A brief blog post on this is at: http://blog.caida.org/best_available_data/2012/06/04/ipv6-what-could-be-but… Matthew

1 0

Google Public DNS contact
by alex-lists-nanog＠yuriev.com 04 Jun '12

04 Jun '12

Hello, If anyone has a contact in the Google Group that deals with Google's Public DNS servers ( i.e. the 8.8.8.8/8.8.4.4 creatures ) could that person kindly drop me an email off list? I believe there might be an issue with some of the servers. Thanks, Alex

2 1

Cat Humor
by Eric Wieling 04 Jun '12

04 Jun '12

I'm not looking for help, just thought this was hilarious. "Mark called in from XO he stated a tech was on site and found out that client used a CAT 6 cable instead of a CAT 5 cable and XO doesn't have a "connecting piece" for the CAT 6 cable. he stated if client gets a wire/cable guy out there to fix issue, XO can send out a tech to make sure they hook up everything correctly."

2 1

Wacky Weekend: The '.secure' gTLD
by Jay Ashworth 04 Jun '12

04 Jun '12

"The proposal comes from Alex Stamos of research firm iSec Partners, and would appoint Artemis Internet as the gatekeeper of .secure. Artemis would require registered domains to encrypt all web and email traffic (except for HTTP redirects funneling connections towards the appropriate TLS-encrypted site), use DNSSEC, and deploy DomainKeys Identified Mail (DKIM) for spam prevention. In addition, Artemis would employ a rigorous screening process to verify registrants' identities (including reviewing articles of incorporation and human interviews), and routinely conduct security scans of registered sites. The venture has $9.6 million (US) in funding provided by Artemis' parent company NCC Group, a UK-based IT security firm." https://lwn.net/Articles/497254/ Discuss. Debate. Digress. Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274

12 16