May 2013 - Test - lists.nanog.org

Weekly Routing Table Report
by Routing Analysis Role Account 03 May '13

03 May '13

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 04 May, 2013 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 453510 Prefixes after maximum aggregation: 185040 Deaggregation factor: 2.45 Unique aggregates announced to Internet: 223585 Total ASes present in the Internet Routing Table: 44001 Prefixes per ASN: 10.31 Origin-only ASes present in the Internet Routing Table: 34568 Origin ASes announcing only one prefix: 16101 Transit ASes present in the Internet Routing Table: 5821 Transit-only ASes present in the Internet Routing Table: 148 Average AS path length visible in the Internet Routing Table: 4.6 Max AS path length visible: 30 Max AS path prepend of ASN ( 19037) 22 Prefixes from unregistered ASNs in the Routing Table: 317 Unregistered ASNs in the Routing Table: 133 Number of 32-bit ASNs allocated by the RIRs: 4753 Number of 32-bit ASNs visible in the Routing Table: 3612 Prefixes from 32-bit ASNs in the Routing Table: 10306 Special use prefixes present in the Routing Table: 22 Prefixes being announced from unallocated address space: 192 Number of addresses announced to Internet: 2616629196 Equivalent to 155 /8s, 246 /16s and 151 /24s Percentage of available address space announced: 70.7 Percentage of allocated address space announced: 70.7 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 94.4 Total number of prefixes smaller than registry allocations: 160134 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 108607 Total APNIC prefixes after maximum aggregation: 33426 APNIC Deaggregation factor: 3.25 Prefixes being announced from the APNIC address blocks: 109908 Unique aggregates announced from the APNIC address blocks: 44627 APNIC Region origin ASes present in the Internet Routing Table: 4840 APNIC Prefixes per ASN: 22.71 APNIC Region origin ASes announcing only one prefix: 1228 APNIC Region transit ASes present in the Internet Routing Table: 818 Average APNIC Region AS path length visible: 4.8 Max APNIC Region AS path length visible: 30 Number of APNIC region 32-bit ASNs visible in the Routing Table: 516 Number of APNIC addresses announced to Internet: 720862688 Equivalent to 42 /8s, 247 /16s and 125 /24s Percentage of available APNIC address space announced: 84.2 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 131072-133119 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 159060 Total ARIN prefixes after maximum aggregation: 80079 ARIN Deaggregation factor: 1.99 Prefixes being announced from the ARIN address blocks: 159679 Unique aggregates announced from the ARIN address blocks: 73184 ARIN Region origin ASes present in the Internet Routing Table: 15672 ARIN Prefixes per ASN: 10.19 ARIN Region origin ASes announcing only one prefix: 5962 ARIN Region transit ASes present in the Internet Routing Table: 1622 Average ARIN Region AS path length visible: 4.1 Max ARIN Region AS path length visible: 27 Number of ARIN region 32-bit ASNs visible in the Routing Table: 18 Number of ARIN addresses announced to Internet: 1063469184 Equivalent to 63 /8s, 99 /16s and 64 /24s Percentage of available ARIN address space announced: 56.3 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 116889 Total RIPE prefixes after maximum aggregation: 59658 RIPE Deaggregation factor: 1.96 Prefixes being announced from the RIPE address blocks: 120453 Unique aggregates announced from the RIPE address blocks: 77565 RIPE Region origin ASes present in the Internet Routing Table: 17160 RIPE Prefixes per ASN: 7.02 RIPE Region origin ASes announcing only one prefix: 8154 RIPE Region transit ASes present in the Internet Routing Table: 2801 Average RIPE Region AS path length visible: 5.1 Max RIPE Region AS path length visible: 29 Number of RIPE region 32-bit ASNs visible in the Routing Table: 2313 Number of RIPE addresses announced to Internet: 657143652 Equivalent to 39 /8s, 43 /16s and 55 /24s Percentage of available RIPE address space announced: 95.5 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 196608-199679 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 47736 Total LACNIC prefixes after maximum aggregation: 9316 LACNIC Deaggregation factor: 5.12 Prefixes being announced from the LACNIC address blocks: 51868 Unique aggregates announced from the LACNIC address blocks: 24181 LACNIC Region origin ASes present in the Internet Routing Table: 1915 LACNIC Prefixes per ASN: 27.09 LACNIC Region origin ASes announcing only one prefix: 566 LACNIC Region transit ASes present in the Internet Routing Table: 354 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 29 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 759 Number of LACNIC addresses announced to Internet: 128404232 Equivalent to 7 /8s, 167 /16s and 75 /24s Percentage of available LACNIC address space announced: 76.5 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-62463, 262144-263167 plus ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 10828 Total AfriNIC prefixes after maximum aggregation: 2521 AfriNIC Deaggregation factor: 4.30 Prefixes being announced from the AfriNIC address blocks: 11410 Unique aggregates announced from the AfriNIC address blocks: 3851 AfriNIC Region origin ASes present in the Internet Routing Table: 627 AfriNIC Prefixes per ASN: 18.20 AfriNIC Region origin ASes announcing only one prefix: 191 AfriNIC Region transit ASes present in the Internet Routing Table: 135 Average AfriNIC Region AS path length visible: 4.7 Max AfriNIC Region AS path length visible: 18 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 6 Number of AfriNIC addresses announced to Internet: 46413568 Equivalent to 2 /8s, 196 /16s and 55 /24s Percentage of available AfriNIC address space announced: 46.1 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2943 11557 920 Korea Telecom (KIX) 17974 2512 839 90 PT TELEKOMUNIKASI INDONESIA 7545 1897 320 109 TPG Internet Pty Ltd 4755 1726 390 190 TATA Communications formerly 9829 1508 1205 40 BSNL National Internet Backbo 9583 1285 98 533 Sify Limited 7552 1175 1064 12 Vietel Corporation 4808 1118 2113 328 CNCGROUP IP network: China169 9498 1098 310 73 BHARTI Airtel Ltd. 24560 1072 393 167 Bharti Airtel Ltd., Telemedia Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3022 3693 84 bellsouth.net, inc. 7029 2144 1265 211 Windstream Communications Inc 18566 2067 382 184 Covad Communications 1785 1992 677 125 PaeTec Communications, Inc. 22773 1971 2929 125 Cox Communications, Inc. 20115 1670 1610 613 Charter Communications 4323 1608 1139 399 Time Warner Telecom 30036 1335 297 653 Mediacom Communications Corp 7018 1313 10821 849 AT&T WorldNet Services 11492 1240 228 330 Cable One Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8402 1753 544 16 Corbina telecom 2118 1390 97 13 EUnet/RELCOM Autonomous Syste 34984 1173 237 215 BILISIM TELEKOM 12479 840 785 66 Uni2 Autonomous System 13188 834 99 64 Educational Network 20940 832 291 657 Akamai Technologies European 31148 794 41 21 FreeNet ISP 6830 770 2376 443 UPC Distribution Services 8551 753 369 50 Bezeq International 34744 672 180 53 SC GVM SISTEM 2003 SRL Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 28573 2688 1470 108 NET Servicos de Comunicao S.A 10620 2617 410 222 TVCABLE BOGOTA 7303 1689 1157 219 Telecom Argentina Stet-France 8151 1239 2700 391 UniNet S.A. de C.V. 6503 1014 435 68 AVANTEL, S.A. 18881 914 780 19 Global Village Telecom 27947 817 88 95 Telconet S.A 11830 716 364 14 Instituto Costarricense de El 7738 698 1370 35 Telecomunicacoes da Bahia S.A 3816 697 306 85 Empresa Nacional de Telecomun Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 36998 1237 80 4 MOBITEL 24863 887 274 34 LINKdotNET AS number 6713 542 617 25 Itissalat Al-MAGHRIB 8452 458 956 9 TEDATA 24835 344 80 8 RAYA Telecom - Egypt 3741 262 906 220 The Internet Solution 15706 222 32 6 Sudatel Internet Exchange Aut 12258 193 28 67 Vodacom Internet Company 29975 191 667 21 Vodacom 36992 189 527 21 Etisalat MISR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3022 3693 84 bellsouth.net, inc. 4766 2943 11557 920 Korea Telecom (KIX) 28573 2688 1470 108 NET Servicos de Comunicao S.A 10620 2617 410 222 TVCABLE BOGOTA 17974 2512 839 90 PT TELEKOMUNIKASI INDONESIA 7029 2144 1265 211 Windstream Communications Inc 18566 2067 382 184 Covad Communications 1785 1992 677 125 PaeTec Communications, Inc. 22773 1971 2929 125 Cox Communications, Inc. 7545 1897 320 109 TPG Internet Pty Ltd Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 28573 2688 2580 NET Servicos de Comunicao S.A 17974 2512 2422 PT TELEKOMUNIKASI INDONESIA 10620 2617 2395 TVCABLE BOGOTA 4766 2943 2023 Korea Telecom (KIX) 7029 2144 1933 Windstream Communications Inc 18566 2067 1883 Covad Communications 1785 1992 1867 PaeTec Communications, Inc. 22773 1971 1846 Cox Communications, Inc. 7545 1897 1788 TPG Internet Pty Ltd 8402 1753 1737 Corbina telecom Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 30031 UNALLOCATED 12.27.122.0/24 7018 AT&T WorldNet Servic 13317 UNALLOCATED 12.44.10.0/24 7018 AT&T WorldNet Servic 23502 UNALLOCATED 12.44.44.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.103.0/24 209 Qwest 17300 UNALLOCATED 12.45.110.0/24 701 UUNET Technologies, 16476 UNALLOCATED 12.46.27.0/24 7018 AT&T WorldNet Servic 14764 UNALLOCATED 12.108.237.0/24 7018 AT&T WorldNet Servic 33649 UNALLOCATED 12.111.112.0/24 19029 New Edge Networks 26064 UNALLOCATED 12.149.37.0/24 7018 AT&T WorldNet Servic Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 128.0.0.0/24 2876 Jump Management SRL 128.0.16.0/21 43568 RIPE Network Coordination Cen 128.0.24.0/21 41794 Altline LLC 128.0.52.0/24 60906 NETOPIA SRL 128.0.58.0/23 9050 RTD-ROMTELECOM Autonomous Sys 128.0.60.0/24 9050 RTD-ROMTELECOM Autonomous Sys 128.0.61.0/24 9050 RTD-ROMTELECOM Autonomous Sys 128.0.62.0/24 9050 RTD-ROMTELECOM Autonomous Sys 128.0.63.0/24 9050 RTD-ROMTELECOM Autonomous Sys 128.0.72.0/21 23456 32-bit ASN transition Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 41.222.80.0/21 37110 Moztel LDA 62.61.220.0/24 24974 Tachyon Europe BV - Wireless 62.61.221.0/24 24974 Tachyon Europe BV - Wireless 64.185.224.0/24 27431 JTL Networks Inc. 64.185.225.0/24 27431 JTL Networks Inc. 64.185.226.0/24 27431 JTL Networks Inc. 64.185.227.0/24 27431 JTL Networks Inc. 64.185.228.0/24 27431 JTL Networks Inc. 64.185.229.0/24 27431 JTL Networks Inc. 64.185.230.0/24 27431 JTL Networks Inc. Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:29 /11:87 /12:250 /13:491 /14:887 /15:1567 /16:12692 /17:6631 /18:11109 /19:22112 /20:31995 /21:34054 /22:47248 /23:42085 /24:238107 /25:1366 /26:1757 /27:868 /28:43 /29:67 /30:18 /31:0 /32:18 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 2018 2067 Covad Communications 6389 1729 3022 bellsouth.net, inc. 7029 1606 2144 Windstream Communications Inc 8402 1457 1753 Corbina telecom 22773 1281 1971 Cox Communications, Inc. 36998 1231 1237 MOBITEL 30036 1208 1335 Mediacom Communications Corp 11492 1199 1240 Cable One 1785 1061 1992 PaeTec Communications, Inc. 6983 1007 1133 ITC^Deltacom Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:782 2:747 3:3 4:15 5:880 6:7 8:552 12:1919 13:3 14:777 15:11 16:3 17:9 20:18 23:274 24:1762 27:1503 31:1272 32:43 33:2 34:5 36:44 37:1818 38:869 39:2 40:172 41:2794 42:187 44:6 46:1888 47:2 49:630 50:684 52:12 54:32 55:8 57:26 58:1139 59:568 60:306 61:1391 62:1061 63:2040 64:4324 65:2173 66:4319 67:2051 68:1129 69:3250 70:873 71:536 72:1943 74:2548 75:410 76:292 77:1108 78:1052 79:581 80:1264 81:979 82:623 83:557 84:526 85:1167 86:462 87:979 88:539 89:1791 90:280 91:5497 92:633 93:1724 94:1855 95:1522 96:526 97:342 98:1051 99:41 100:30 101:320 103:2533 105:535 106:144 107:209 108:519 109:1842 110:871 111:1050 112:509 113:784 114:705 115:934 116:897 117:790 118:1056 119:1261 120:402 121:721 122:1771 123:1234 124:1351 125:1338 128:632 129:223 130:323 131:649 132:339 133:149 134:253 135:66 136:222 137:250 138:346 139:196 140:207 141:323 142:549 143:382 144:493 145:92 146:508 147:390 148:691 149:371 150:158 151:569 152:414 153:195 154:43 155:401 156:265 157:402 158:276 159:726 160:339 161:421 162:414 163:212 164:591 165:448 166:304 167:582 168:1027 169:133 170:1029 171:178 172:4 173:1604 174:586 175:464 176:1281 177:1949 178:1839 179:5 180:1411 181:420 182:1147 183:384 184:674 185:408 186:2322 187:1304 188:2045 189:1358 190:6319 192:6569 193:5842 194:4667 195:3456 196:1339 197:906 198:4409 199:5292 200:5928 201:2408 202:8844 203:8819 204:4515 205:2565 206:2835 207:2883 208:4055 209:3611 210:2942 211:1552 212:2063 213:1914 214:911 215:98 216:5250 217:1568 218:618 219:331 220:1276 221:555 222:319 223:443 End of report

1 0

Louisiana Optical Network Initiative
by John D Caffery 03 May '13

03 May '13

I am sending this query on behalf of the University of New Orleans. For the past couple of weeks users on their campus are unable to get logged on to the Capital One Online Banking Secure Portal to do their online banking. The UNO AS number is 23666 and LONI, which I am part of, is their internet provider, AS number 32440. None of our other Louisiana Participants seem to have an issue getting there and every test I do from other locations in our network are successful. Users can get to the https://onlinebanking.capitalone.com site but after putting in their login credentials the site simply times out. Capital One peers with both Verizon and AT&T but when I go to the above site it is via Verizon. Does anyone know of or have this issue also? I have a ticket open with Verizon but have yet to get a response. I was speaking with a representative from Capital One but after leaving several voice mails I have yet to get a call back. Thank you in advance for anyone's assistance, John Caffery Information Technology Consultant Louisiana Optical Network Initiative - LONI O 225.578.7263 C 225.252.3046 www.loni.org<http://www.loni.org/>

8 12

Google Public DNS Problems?
by Blair Trosper 02 May '13

02 May '13

Is anyone else seeing this? From Santa Clara, CA, on Comcast Business...I'm getting SERVFAIL for any query I throw at 8.8.8.8 and 8.8.4.4... Level 3's own public resolvers are fine for me, as are OpenDNS's resolvers. Blair

20 32

Google Security Contact
by J. Oquendo 02 May '13

02 May '13

Can someone put me in touch with someone "up there" in the security realm at Google? (sorry for the noise) -- =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT, RWSP, GREM "Where ignorance is our master, there is no possibility of real peace" - Dalai Lama 42B0 5A53 6505 6638 44BB 3943 2BF7 D83F 210A 95AF http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x2BF7D83F210A95AF

2 1

[NANOG-announce] NANOG 58 Updates
by Betty Burke <betty＠nanog.org> 02 May '13

02 May '13

Colleagues: NANOG 58 is fast approaching! NANOGers will be meeting June 3 – 5, 2013 in New Orleans, LA. Do not delay, be sure to register for NANOG 58<http://nanog.org/meetings/nanog58/registration>and take advantage of early Bird Registration which ends on May 10, 2013 (non-member $450, member $425, student $100). As you register for NANOG 58, be sure to reserve your hotel room at theRoosevelt New Orleans Hotel<http://nanog.org/meetings/nanog58/hotelinformation>, the room block is almost full and the NANOG room rate will expire at 5 PM CT on May 10, 2013. For meeting information be sure to visit the NANOG 58 Highlights<http://nanog.org/meetings/nanog58/agendahighlights>page, and check-out the NANOG Topic List and Preliminary Agenda<http://nanog.org/meetings/nanog58/preagenda> . The NANOG Program Committee <http://nanog.org/governance/pgm> received a number of great submissions and are very close to posting the tentative agenda. NANOG 58 will once again showcase a program packed with great content. If you are interested in a NANOG Sponsorship, contact our Development Committee <http://nanog.org/governance/dev>by emailing Marketing(a)nanog.org. We look forward to a great meeting and seeing you in New Orleans. Should you have any questions, please direct them to nanog-support(a)nanog.org . Sincerely, Betty -- Betty Burke NANOG Executive Director 48377 Fremont Boulevard, Suite 117 Fremont, CA 94538 Tel: +1 510 492 4030 _______________________________________________ NANOG-announce mailing list NANOG-announce(a)mailman.nanog.org http://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

BGP Route Recorder suggestions
by Ben Bartsch 02 May '13

02 May '13

Hi all: I am curious what you RENs out there are using for BGP (and IGP) route recording. We did a demo of Packet Design's Route Explorer. While I loved the functionality and ease of use, we simply can not afford it. I am attracted to iBGPlay since we use the BGPlayer at routeviews all the time, but I can't seem to get a privacy statement from the software authors. Any other (cheap) route recorders out there? Any recommendations on what y'all are using that you like / don't like? Thanks in advance for any input. -ben

1 0

Tier1 blackholing policy?
by Thomas Schmid 01 May '13

01 May '13

Greetings, I know Tier1s are blackholing traffic all the time :) (de-peering, congestion etc.) but did it became a new role for Tier1s to go from transit provider to transit blocker? We received recently customer complaints stating they can't reach certain websites. Investigation showed that the sites were not reachable via Tier1-T, but fine via Tier1-L. I contacted Tier1-T and the answer was something like "yeah, this is a known phishing site and to protect our customers we blackhole that IP" (btw - it was 2 ASes away from Tier1-T). Huh? If I want to block something there, it should me my decision or that of my country's legal entities by court order and not being decided by some Tier1's intransparent security department. (Not even mentioning words like 'CGN', 'legal', 'net neutrality' or 'censorship') This might be an acceptable policy for a cable provider but not for a Tier1. Haven't seen something like this in many years. Did I miss a pardigm-shift here and has this become a common "service" at Tier1s? Thomas

14 22

Mitigating DNS amplification attacks
by Thomas St-Pierre 01 May '13

01 May '13

Hi! I was wondering if anyone had any experience with dealing with open resolvers as a web hoster? We currently have some 40,000 ip's that respond to DNS in our AS, the majority of which are not "open" but do reply with a referral to the root zones. We've been sending emails to our clients but as the servers are not managed by us, there's not much we can do at that level. Recently we've seen a large increase in the number and volume of DNS amplification DDOS's that are being reflected off of our AS. Just today we've seen at least 6 different attacks with between 4 and 10gbps leaving our AS each time. It's not really causing us issues at the moment because we have the capacity, but I'd hate to be on the receiving side. (and indeed, have been on the receiving side in the past, so I know how much it can suck) Has anyone ever tried mitigating/rate-limiting/etc these attacks in the network before? (vs at the server/application level) We have an Arbor peakflow device, but it's not really geared for this scenario I find. It will detect the outgoing attack via the flows, but all we can really do is null-route the victims ip in our AS. Ideally we would need a way to rate-limit DNS packets based on source ip. Maybe a linux box that handles dropping packets from the same source-ip over 1000/sec with some policy-based routing sending the DNS traffic to it? Does such a box exist already? If anyone has any ideas or suggestions, then by all means! There must be a better way to do this, and I'd really like to avoid re-inventing the wheel if it's been invented already. :) Thanks! Thomas

7 10

Comcast Launches IPv6 for Business Customers
by Brzozowski, John 01 May '13

01 May '13

FYI for folks that are interested: http://corporate.comcast.com/comcast-voices/comcast-launches-ipv6-for-busin… John ========================================= John Jason Brzozowski Comcast Cable e) mailto:john_brzozowski@cable.comcast.com w) http://www.comcast6.net =========================================

7 8

"It's the end of the world as we know it" -- REM
by Valdis Kletnieks 01 May '13

01 May '13

I didn't see any mention of this Tony Hain paper: http://tndh.net/~tony/ietf/ARIN-runout-projection.pdf tl;dr: ARIN predicted to run out of IP space to allocate in August this year. Are you ready?

43 97