June 2013 - Test - lists.nanog.org

Re: Security over SONET/SDH
by Scott Weeks 25 Jun '13

25 Jun '13

------------ joelja(a)bogus.com wrote: ------------ From: joel jaeggli <joelja(a)bogus.com> > That's why I'm trying to follow up on the original question. Is > there something similar the global public can use to secure their > connections that is not government designed. This is even more > important on microwave shots when security is desired. :: plenty of standardized RF link-layers support strong encryption. ---------------------------------------------------- Ah, thanks. That comment gave me the the search terms I needed, but I keep seeing sentences like this "Due to the encryption employed in these products, they are export controlled items and are regulated by the Bureau of Industry and Security (BIS) of the U.S. Department of Commerce. They may not be exported or shipped for re-export to restricted countries..." wheee! :-) scott

7 7

Re: Are undersea cables tapped before they get to ISP's? [was Re: Security over SONET/SDH]
by Hank Nussbacher 25 Jun '13

25 Jun '13

At 10:38 25/06/2013 -0400, Christopher Morrow wrote: >this involved, I think, just intuiting signals from the nearfield >effects of the cable, no? 'drop a large sensor ontop-of/next-to the >cable, win!' > > > <http://defensetech.org/2005/02/21/jimmy-carter-super-spy/> > >this I thought included the capabilities to drag the fiber/line into >the hull for 'work' to be done... I'd note that introducing signal >loss on the longhaul fiber seems 'risky', you'd have to know (and this >isn't hard I bet) the tolerances of the link in question and have a >way to stay inside those tolerances and not introduce new >splice-points/junctions/etc and be careful for the undersea cable >power (electric) requirements as well. > >fun stuff! Fun stuff indeed...sell to one org or the other: http://www.glimmerglass.com/solutions/submarine-cable-landing-stations/ http://www.glimmerglass.com/solutions/cyber-security-and-lawful-interceptio… -Hank

2 1

content streaming providers?
by Carlos Kamtha 25 Jun '13

25 Jun '13

Hello, I was wondering if anyone could possibly recommend and/or share thier experience(s) with any online ondemand content streaming service, primarily for video.. Our objective is to provide content on the roku's and appletvs of the world. Any feedback is greatly appreciated. Cheers, Carlos.

1 0

86th Street TWTC outage
by Thomas York 25 Jun '13

25 Jun '13

Just in case anyone has equipment in the 86th Street TWTC Colo, both of their AC units are dead and the fire department is here. I'll try to update as soon as I know something.

1 0

IANA Reference to hopopt as a protocol
by David Edelman 25 Jun '13

25 Jun '13

Does anyone have an explanation for the IPv6 hopopt appearing as protocol value 0 in http://www.iana.org/assignments/protocol-numbers? --Dave

2 1

PDU recommendations
by shawn wilson 24 Jun '13

24 Jun '13

We currently use Triplite stuff but they've got an issue where after a few minutes, they stop accepting new tcp connections. We're adding a new 30A circuit and I'm thinking of going with APC (ran them in the past and never had any issues). However, I figured I'd see if there was a better brand / specific model recommendations for quality or bang / buck? Specs: 30A 24+ port 0U, managed (with ssh), lcd use display.

16 20

Yahoo Postmaster
by Andy B. 24 Jun '13

24 Jun '13

If there is a YAHOO! Postmaster contact available, can you please contact me off list? I need to investigate a customer's "TS03" listing of a very large netblock (/16) and I'm afraid regular Yahoo! forms are leading me nowhere but frustration and no results. Thanks.

3 2

Contact at GoGo Internet?
by Matt Simmons 24 Jun '13

24 Jun '13

For a reason that I'm unable to ascertain, GoGo In-Flight Internet can route to my university's network blog, but not to my specific college's. Does anyone have a contact there that I could reach out to and work to figure this out with? Thanks! --Matt Simmons -- LITTLE GIRL: But which cookie will you eat FIRST? COOKIE MONSTER: Me think you have misconception of cookie-eating process.

1 1

Multihop eBGP peering or VPN based eBGP peering
by Michael McConnell 24 Jun '13

24 Jun '13

Hello all, Any idea why more companies don't offer eBGP peering / multi hop peering? Its very common for providers to offer single or double hop peering, so why not 5 or 10 hops? In many cases people find it logical to perform single or double hop peering, why is peering any greater always frowned upon. I understand the logic that you can't control the path beyond a point, however I still see numerous advantages. One obvious advantages one is, imagine you east coast data centre and you had a eBGP peering session with a west coast router, you'd be able to control ingress via the west coast. (aka routing around an region outage that is effecting ingress) For example during the last hurricane around New Jersey, numerous tier 1's were down towards the atlantic and every peer for the atlantic was effected. One could have just made the ingress via the west coast the logical route. Thoughts? Mike -- Michael McConnell WINK Streaming; email: michael(a)winkstreaming.com phone: +1 312 281-5433 x 7400 cell: +506 8706-2389 skype: wink-michael web: http://winkstreaming.com

6 8

Re: /25's prefixes announced into global routing table?
by Jakob Heitz 24 Jun '13

24 Jun '13

> Date: Fri, 21 Jun 2013 16:14:07 -0400 > From: "Majdi S. Abbas" <msa(a)latt.net> > > On Fri, Jun 21, 2013 at 01:56:02PM -0600, Michael McConnell wrote: >> As the IPv4 space get smaller and smaller, does anyone think we'll >> see a time when /25's will be accepted for global BGP prefix >> announcement. The current smallest size is a /24 and generally ok >> for most people, but the crunch gets tighter, routers continue to >> have more and more ram will it always be /24 the smallest size? > > RAM != FIB. > > The forwarding hardware is generally going to be the limit, and > that's going to be painful enough as we approach a half million > prefixes. > > You couldn't even consider such a thing until after that pain > point. > > --msa There are techniques to fix that. For example, Simple Virtual Aggregation http://tools.ietf.org/html/rfc6769 -- Jakob Heitz.

5 4