June 2013 - Test - lists.nanog.org

Google news down
by Warren Bailey 24 Jun '13

24 Jun '13

Does anyone happen to know what's going on with Google news? Getting an xml parse error for all responses (not well formed) to anything google news related. NSA taking down google news or something? Sent from my Mobile Device.

3 4

Re: /25's prefixes announced into global routing table?
by Andra Lutu 24 Jun '13

24 Jun '13

Hi, From public routing data we can see a total of 2,419 /25s prefixes announced from at least one of the monitors active in RIPE RIS and RouteViews. None of the /25s are actually advertised by all these monitors i.e. the /25s reach some but not all the ASes which take part in these projects. The actual distribution of how many unique routing tables sampled contain the /25s is the following: http://visibility.it.uc3m.es/len25_distro.html (out of the approx. 140 collectors that have a "full" routing table). The top 5 ASes that are originating the most /25s are: AS 11427: 462 /25s AS 4766: 273 /25s AS 45400: 109 /25s AS 14065: 82 /25s AS 3549: 57 /25s If you are interested in limited visibility prefixes, i.e., prefixes that are distributed to some but not all the "full" routing tables at the interdomain level, you can find more at http://visibility.it.uc3m.es/ and https://labs.ripe.net/Members/andra_lutu/the-bgp-visibility-scanner Best regards, Andra On 06/22/2013 12:00 AM, nanog-request(a)nanog.org wrote: > Date: Fri, 21 Jun 2013 13:56:02 -0600 > From: Michael McConnell<michael(a)winkstreaming.com> > To: North American Network Operators Group<nanog(a)nanog.org> > Subject: /25's prefixes announced into global routing table? > > Hello all, > > As the IPv4 space get smaller and smaller, does anyone think we'll see a time when /25's will be accepted for global BGP prefix announcement. The current smallest size is a /24 and generally ok for most people, but the crunch gets tighter, routers continue to have more and more ram will it always be /24 the smallest size? > > Cheers, > Mike

1 0

Re: Security over SONET/SDH
by Scott Weeks 24 Jun '13

24 Jun '13

--- william.allen.simpson(a)gmail.com wrote: From: William Allen Simpson <william.allen.simpson(a)gmail.com> What security protocols are folks using to protect SONET/SDH? At what speeds? ------------------------------------------------------ By security protocol do you mean encrypting the traffic? Like what a Fastlane does? http://www.gdc4s.com/Documents/Products/SecureVoiceData/NetworkEncryption/G… scott

4 6

Security over SONET/SDH
by William Allen Simpson 24 Jun '13

24 Jun '13

What security protocols are folks using to protect SONET/SDH? At what speeds?

3 2

.biz DNSSEC borked
by Andre Tomt 23 Jun '13

23 Jun '13

Seems the entire .biz tld is failing DNSSEC validation now. All of my DNSSEC validating resolvers are tossing all domains in .biz. The non-signed domains too of course because trust of the tld itself cannot be established. http://dnssec-debugger.verisignlabs.com/nic.biz

5 6

Re: Security over SONET/SDH
by Larry Sheldon 23 Jun '13

23 Jun '13

On 6/23/2013 9:18 PM, Glen Turner wrote: > > On 23/06/2013, at 1:21 PM, William Allen Simpson wrote: > >> What security protocols are folks using to protect SONET/SDH? At >> what speeds? > > > "Excuse me NSA, can I have export approval for one KG-530 SDH > encryptor?" What are the odds :-) > > And how would we know that the "export model" isn't simply providing > a more convenient backdoor for the NSA? I assumed that the latter is what "NSA Approved" means. -- Requiescas in pace o email Two identifying characteristics of System Administrators: Ex turpi causa non oritur actio Infallibility, and the ability to learn from their mistakes. (Adapted from Stephen Pinker)

1 0

Re: PDU recommendations
by tritran＠cox.net 23 Jun '13

23 Jun '13

Eaton have 1U UPS that provide the same runtime as a 2U APC. Are they any good? ------Original Message------ From: Nick Khamis To: Chris Dunn Cc: North American Network Operators Group Subject: Re: PDU recommendations Sent: Jun 23, 2013 4:40 PM And now for the stupid question. Is there an APC UPS in a U form factor with sufficient outlets that can act kind of like a PDU, only better? PS If it has stonith capabilities ever better!!! Kind Regards, Nick.

1 0

Re: Security over SONET/SDH
by Scott Weeks 23 Jun '13

23 Jun '13

--- william.allen.simpson(a)gmail.com wrote: From: William Allen Simpson <william.allen.simpson(a)gmail.com> On 6/23/13 12:48 AM, Scott Weeks wrote: > By security protocol do you mean encrypting the traffic? > Like what a Fastlane does? > > http://www.gdc4s.com/Documents/Products/SecureVoiceData/NetworkEncryption/G… > That's rather a surprising choice (ATM product) for an IP network. Please describe what backbone you are running that uses a FASTLANE? Hopefully, other folks are securing their PPP or ethernet packets? --------------------------------------------------------------- A network that's going to change very soon. :-) What I meant is that what you mean by security protocols. I didn't follow completely. scott

1 0

Re: PDU recommendations
by tritran＠cox.net 23 Jun '13

23 Jun '13

APC is solid. Their newer line can provide outlet metering. WTI is also good...they support redundant circuits. I've seen Baytech died after just unplugging a server. ------Original Message------ From: shawn wilson To: North American Network Operators Group Subject: PDU recommendations Sent: Jun 23, 2013 8:37 AM We currently use Triplite stuff but they've got an issue where after a few minutes, they stop accepting new tcp connections. We're adding a new 30A circuit and I'm thinking of going with APC (ran them in the past and never had any issues). However, I figured I'd see if there was a better brand / specific model recommendations for quality or bang / buck? Specs: 30A 24+ port 0U, managed (with ssh), lcd use display.

6 5

net neutrality and peering wars continue
by Randy Bush 22 Jun '13

22 Jun '13

good article by Stacey Higginbotham http://gigaom.com/2013/06/19/peering-pressure-the-secret-battle-to-control-…

25 44