December 2013 - Test - lists.nanog.org

Data Center and IX Standards Published by Open-IX - Certification begins soon!
by David Temkin 26 Dec '13

26 Dec '13

I am proud to announce that the final versions of the Data Center and IXP standards have been completed by their respective working groups and have been published. Data Center: http://goo.gl/s4cGBp IXP: http://goo.gl/O5I1my Martin Hannigan will follow up shortly with scheduled dates for accepting applications to become Open-IX Certified. We intend on accepting applications for Northern Virginia first, immediately followed by NYC and other markets. Regards, -Dave Temkin Chair, Open-IX Association

2 1

Juniper MAG/SA question - re: split tunneling policy and use of JSAM/WSAM
by Herro91 26 Dec '13

26 Dec '13

Hello J-NSP and Nanog members Hopefully this is the right forum for this discussion - if not my apologies for further clogging your inbox. Here it goes: Would you consider use of JSAM/WSAM to selectively proxy and tunnel certain applications a form of split tunneling? The traditional concept of split tunnels looks at all traffic Layer 3 and above, versus JSAM/WSAM which looks at application traffic at Layer 7. The context for all of this is from a previous question I put out regarding split tunneling policy on government networks. Thanks!

2 1

What's going on with NTP?
by John Levine 26 Dec '13

26 Dec '13

I have two FreeBSD servers where the NTP daemons are using double digit CPU percentages today rather than the usual 0.01%. Restarting them didn't help. The clock on my Android phone is five hours slow. (It's not the time zone, I checked that.) Is this just my special Christmas present, or are there screwed up NTP servers? Regards, John Levine, johnl(a)iecc.com, Primary Perpetrator of "The Internet for Dummies", Please consider the environment before reading this e-mail. http://jl.ly

6 5

Help me make sense of these traceroutes please
by Sam Moats 25 Dec '13

25 Dec '13

Hello Nanog community, I would like to enlist your help with understanding this latency I'm seeing. First some background, I have Level3 circuits in the US and some services in Europe. From Comcast to the US level3 IPs the performance is excellent. The same traceroute to Europe is terrible. The strange part is the problem appears to begin stateside on the same infrastructure that carriers the us traffic. Here is a trace to one of my IPs in the US from Comcast Tracing route to 4.30.x.x over a maximum of 30 hops 1 3 ms 1 ms 1 ms 10.1.1.1 2 30 ms 29 ms 29 ms 71.62.150.1 3 9 ms 9 ms 9 ms xe-0-1-0-32767-sur01.winchester.va.richmond.comc ast.net [68.85.71.165] 4 9 ms 14 ms 10 ms xe-9-0-3-0-ar02.staplesmllrd.va.richmond.comcast .net [68.86.125.149] 5 32 ms 30 ms 34 ms 68.86.91.153 6 36 ms 38 ms 53 ms 23.30.207.98 7 34 ms 28 ms 33 ms vlan51.ebr1.Atlanta2.Level3.net [4.69.150.62] 8 29 ms 28 ms 20 ms ae-63-63.ebr3.Atlanta2.Level3.net [4.69.148.241] 9 27 ms 29 ms 30 ms ae-2-2.ebr1.Washington1.Level3.net [4.69.132.86] 10 24 ms 30 ms 24 ms ae-71-71.csw2.Washington1.Level3.net [4.69.134.1 34] 11 29 ms 31 ms 39 ms ae-41-90.car1.Washington1.Level3.net [4.69.149.1 95] 12 30 ms 30 ms 29 ms ae-2-23.edge7.Washington1.Level3.net [4.68.106.2 38] 13 38 ms 44 ms 43 ms 4.79.x.x 14 * * * Request timed out. (My firewall) 15 39 ms 39 ms 39 ms 4.30.x.x Trace complete. Now here is the same computer tracing to a level3 circuit in Ireland. Tracing route to xxx.yyy.ie [193.1.x.x] over a maximum of 30 hops: 1 1 ms 1 ms 1 ms 10.1.1.1 2 38 ms 33 ms 25 ms 71.62.150.1 3 10 ms 9 ms 9 ms xe-0-1-0-32767-sur01.winchester.va.richmond.comc ast.net [68.85.71.165] 4 14 ms 15 ms 15 ms xe-9-0-3-0-ar02.staplesmllrd.va.richmond.comcast .net [68.86.125.149] 5 28 ms 30 ms 30 ms 68.86.95.65 6 37 ms 37 ms 37 ms 23.30.207.98 7 118 ms * 218 ms vlan51.ebr1.Atlanta2.Level3.net [4.69.150.62] 8 119 ms 218 ms 119 ms ae-63-63.ebr3.Atlanta2.Level3.net [4.69.148.241] 9 221 ms 119 ms 119 ms ae-2-2.ebr1.Washington1.Level3.net [4.69.132.86] 10 118 ms 119 ms 118 ms ae-91-91.csw4.Washington1.Level3.net [4.69.134.1 42] 11 119 ms 119 ms 119 ms ae-92-92.ebr2.Washington1.Level3.net [4.69.134.1 57] 12 117 ms 126 ms 120 ms ae-43-43.ebr2.Paris1.Level3.net [4.69.137.57] 13 128 ms 118 ms 120 ms ae-6-6.car1.Dublin3.Level3.net [4.69.148.53] 14 122 ms 225 ms 124 ms 4.69.148.58 15 124 ms 118 ms 120 ms ae-11-11.car1.Dublin1.Level3.net [4.69.136.93] Notice that the hop from 23.30.207.98 to 4.69.150.62 seems very respectable at around 30ms for US bound traffic. However when I'm tracing from the same Comcast network to an IP that is in Europe the very same hope produces 100ms of latency and about 12% packet loss. Why does this hop treat traffic differently based on it's destination? Is this some weird result of complex asymmetrical routing or something else? I can route around this problem, but it does seem strange and I want to understand it Thanks, Sam Moats

6 6

Re: Help me make sense of these traceroutes please
by Anne P. Mitchell, Esq. 25 Dec '13

25 Dec '13

> with a bunch of IT folks and an ample supply of Guinness. My ex used to call it "design fluid". :-) Happy holidays, everyone! Anne Anne P. Mitchell, Attorney at Law CEO/President ISIPP SuretyMail Email Accreditation http://www.ISIPP.com Member, Cal. Bar Cyberspace Law Committee Author: Section 6 of the CAN-SPAM Act of 2003 How do you get to the inbox instead of the spam filter? SuretyMail! Helping businesses keep their email out of the junk folder since 1998 http://www.isipp.com/SuretyMail Author, "They're Your Kids Too: The Single Father's Guide to Defending Your Fatherhood in a Broken Family Law System" http://www.amazon.com/Theyre-Your-Kids-Too-Fatherhood/dp/061551443X

1 0

Merry Christmas
by Ryan Finnesey 24 Dec '13

24 Dec '13

Wanted to wish everyone a Marry Christmas and all the best in the New Year! Cheers Ryan

1 0

Netflix Advice
by Warren Bailey 23 Dec '13

23 Dec '13

Dear NANOG Gods, Has anyone heard of a nifty way to cache the netflix library without using their Open Connect Appliance? I am not trying to dodge copyrights, or even dodge the netflix service, I am simply trying to find a way to store the netflix library remotely for users behind satellite connections. If any of you have figured this out, or if there is a Netflix person out there listening, feel free to contact me offline. Thanks a lot, and have a Merry Christmas! //warren

3 3

Re: 5.7 *report
by Jay Ashworth 21 Dec '13

21 Dec '13

----- Original Message ----- > From: "Mike Schwartz" <mschw(a)athenet.net> > That urks me, too. In many web sites that have a state field, you can > at least type the first letter of your state, but you still have to use the > mouse, unless your state is the first one that starts with any given > letter. > When I type "W", "WA" pops up, so I still have to use the mouse to > select "WI". If I try to type "W" then "I", the popup box jumps to "IA". > > For example, jump to the state field on this website: > > https://www.tigerdirect.com/secure/subscribe2.asp?cm_sp=Masthead-_-NewCustom > er-_-NA > > "W" takes me to "Washington", but if I then type "I" it takes me down > to "International". I can avoid using my mouse if I type "W" and then > down arrow twice, to get past West Virginia. The widget is "pulldown menu with incremental search", and the question is "did they allow multiple character search input" and, as a sub query "how long after you hit a character does the hidden input field reset if you don't hit enter". Seems to me that Jeff Harrison coded a decent incremental search wrapped around a browse lookup at one point ... or maybe it was Ron Klimasewski, one of Microsys's other coders in the 90s. It's been a long time... It's odd, when I have to do maintenance work on tables all three of us had our fingers in, I can tell which of the three of us worked on a given routine; we each had a different view of 1TBS. :-) Cheers, -- jra -- Make Election Day a federal holiday: http://wh.gov/lBm94 100k sigs by 12/14 Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA #natog +1 727 647 1274

2 1

Watchguards vs Junipers firewalls
by Simon Brilus 21 Dec '13

21 Dec '13

Hi all - Has anyone out there had experience of running these firewalls near 1Gig speeds (mainly middle to large packets, not voice) between zones/ports, if possible Specifically we are looking at the Watchguard XTM535 and the Juniper SRX550/600's. I am interested in experiences good and bad on either platforms and usage of IDP/Weblocker etc on them. We currently use SRX240 and Watchguard 1250e but have a need to increase the throughput to nearly 1Gig. Other criteria would be to be to do OSPF/BGP in high availability mode Many thanks Simon

2 1

BGP Update Report
by cidr-report＠potaroo.net 20 Dec '13

20 Dec '13

BGP Update Report Interval: 12-Dec-13 -to- 19-Dec-13 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS4538 630088 23.4% 151.9 -- ERX-CERNET-BKB China Education and Research Network Center 2 - AS9829 57165 2.1% 68.9 -- BSNL-NIB National Internet Backbone 3 - AS10620 39572 1.5% 21.9 -- Telmex Colombia S.A. 4 - AS8402 38391 1.4% 33.6 -- CORBINA-AS OJSC "Vimpelcom" 5 - AS3816 34648 1.3% 86.8 -- COLOMBIA TELECOMUNICACIONES S.A. ESP 6 - AS7029 30810 1.1% 8.0 -- WINDSTREAM - Windstream Communications Inc 7 - AS4323 27715 1.0% 20.6 -- TWTC - tw telecom holdings, inc. 8 - AS13118 23022 0.9% 523.2 -- ASN-YARTELECOM OJSC Rostelecom 9 - AS41691 20352 0.8% 581.5 -- SUMTEL-AS-RIPE Summa Telecom LLC 10 - AS4775 19216 0.7% 295.6 -- GLOBE-TELECOM-AS Globe Telecoms 11 - AS7303 19085 0.7% 13.8 -- Telecom Argentina S.A. 12 - AS28024 17151 0.6% 27.7 -- Nuevatel PCS de Bolivia S.A. 13 - AS37492 17058 0.6% 258.5 -- ORANGE-TN 14 - AS6713 16167 0.6% 28.7 -- IAM-AS 15 - AS28573 14475 0.5% 8.9 -- NET Serviços de Comunicação S.A. 16 - AS59217 14294 0.5% 14294.0 -- AZONNELIMITED-AS-AP Azonne Limited 17 - AS7552 12752 0.5% 10.5 -- VIETEL-AS-AP Viettel Corporation 18 - AS11976 12203 0.5% 1355.9 -- FIDN - Fidelity Communication International Inc. 19 - AS9583 11790 0.4% 9.8 -- SIFY-AS-IN Sify Limited 20 - AS3475 10889 0.4% 139.6 -- DNIC-AS-03475 - Navy Network Information Center (NNIC) TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS59217 14294 0.5% 14294.0 -- AZONNELIMITED-AS-AP Azonne Limited 2 - AS54465 9091 0.3% 9091.0 -- QPM-AS-1 - QuickPlay Media Inc. 3 - AS4771 3638 0.1% 3638.0 -- NZTELECOM Telecom New Zealand Ltd. 4 - AS31459 2290 0.1% 2290.0 -- BBC-RD-AS BBC 5 - AS2818 6768 0.2% 2256.0 -- BBC BBC Internet Services, UK 6 - AS30437 4470 0.2% 2235.0 -- GE-MS003 - General Electric Company 7 - AS5388 2037 0.1% 2037.0 -- ENERGIS-AS Energis UK 8 - AS22592 2027 0.1% 2027.0 -- HBP - HBP, Inc. 9 - AS62431 1966 0.1% 1966.0 -- NCSC-IE-AS National Cyber Security Centre 10 - AS45847 1894 0.1% 1894.0 -- NSTRU-AS-AP university network ,Nakornsitammarat, Thailand 11 - AS14287 10508 0.4% 1751.3 -- TRIAD-TELECOM - Triad Telecom, Inc. 12 - AS32244 6914 0.3% 1728.5 -- LIQUID-WEB-INC - Liquid Web, Inc. 13 - AS7202 8477 0.3% 1695.4 -- FAMU - Florida A & M University 14 - AS11976 12203 0.5% 1355.9 -- FIDN - Fidelity Communication International Inc. 15 - AS55042 1344 0.1% 1344.0 -- USCONECLTD-1992 - US Conec Ltd 16 - AS52085 1301 0.1% 1301.0 -- RU-MEDVEDHOLDING-NET OOO "SKB" 17 - AS2 1094 0.0% 671.0 -- SBDC-AS The Smelly Black Dog Company Pty Ltd 18 - AS6629 10517 0.4% 1051.7 -- NOAA-AS - NOAA 19 - AS24733 764 0.0% 764.0 -- IPRI-AS Institute of Information Recording Problems of the National Academy of Science of Ukraine 20 - AS57201 736 0.0% 736.0 -- EDF-AS Estonian Defence Forces TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 109.161.64.0/20 22899 0.8% AS13118 -- ASN-YARTELECOM OJSC Rostelecom 2 - 103.243.164.0/22 14294 0.5% AS59217 -- AZONNELIMITED-AS-AP Azonne Limited 3 - 85.249.160.0/20 10840 0.4% AS41691 -- SUMTEL-AS-RIPE Summa Telecom LLC 4 - 192.58.232.0/24 10496 0.3% AS6629 -- NOAA-AS - NOAA 5 - 115.170.128.0/17 9705 0.3% AS4847 -- CNIX-AP China Networks Inter-Exchange 6 - 89.221.206.0/24 9145 0.3% AS41691 -- SUMTEL-AS-RIPE Summa Telecom LLC 7 - 206.152.15.0/24 9091 0.3% AS54465 -- QPM-AS-1 - QuickPlay Media Inc. 8 - 222.127.0.0/24 9054 0.3% AS4775 -- GLOBE-TELECOM-AS Globe Telecoms 9 - 120.28.62.0/24 8928 0.3% AS4775 -- GLOBE-TELECOM-AS Globe Telecoms 10 - 71.19.134.0/23 8322 0.3% AS3313 -- INET-AS BT Italia S.p.A. 11 - 193.95.93.0/24 8059 0.3% AS37492 -- ORANGE-TN 12 - 193.95.92.0/24 8008 0.3% AS37492 -- ORANGE-TN 13 - 67.210.190.0/23 6482 0.2% AS11976 -- FIDN - Fidelity Communication International Inc. 14 - 67.210.188.0/23 5712 0.2% AS11976 -- FIDN - Fidelity Communication International Inc. 15 - 168.223.206.0/23 4678 0.2% AS7202 -- FAMU - Florida A & M University 16 - 203.190.255.0/24 4650 0.2% AS24323 -- AAMRA-NETWORKS-AS-AP aamra networks limited, 17 - 165.156.25.0/24 4466 0.1% AS30437 -- GE-MS003 - General Electric Company 18 - 65.90.49.0/24 4305 0.1% AS3356 -- LEVEL3 Level 3 Communications 19 - 68.143.17.0/24 4284 0.1% AS7029 -- WINDSTREAM - Windstream Communications Inc 20 - 199.187.118.0/24 3801 0.1% AS11054 -- LIVEPERSON LivePerson, Inc Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0