October 2014 - Test - lists.nanog.org

SSL 3 vulnerability released
by Grant Ridder 14 Oct '14

14 Oct '14

Just incase anyone hasn't seen yet... http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiti… -Grant

2 1

Scaling from home broom closet to multisite "home" data center/WAN network on a budget
by charles＠thefnf.org 14 Oct '14

14 Oct '14

Hi everybody, It's been a long time since I've kicked up a new thread here on ye ol nanog. Recently I've been putting some serious thought into home "budget" data centers. What started out as a little router/switch/virt server lab by me/myself/I in 2008, has turned into a multisite (7 points of presence spread across two states), multi rack (223U, 10 racks), multi carrier (time warner, suddenlink, att dsl, att uverse, blended bandwidth) affair today. I've realized that my friends and I may need to approach things a bit more..... professionally/seriously/circumspectly (is that a word?). We run OSPF (and soon i/eBGP including out to amprnet) between all the sites, have a multi vendor (cisco/dell/pfsense/mikrotik/linux) l3/l2 network. All the gear has been sourced from flea markets/ebay etc. Anyone else on here have a similar situation? How do you deal with it? (More details/questions after the jump) I mean my little lab is not quite as .... *ahem* involved as mr morris home data center http://smorris.uber-geek.net/lab.htm but it's also just a whee bit bigger then the typical /r/homelab posts. https://commons.thefnf.org/index.php/FNF_Lab << needs a bit more work to reflect current reality, but you can get the general idea) So.... how to home/small (multisite) business datacenter/network on budgetz? Not so much the software side of things (networking/operating system etc), but more the actual layer 1 stuff (and of course software to manage all that). Things like: Power * Any good resources for wiring optimization/layout/dos/dont's? (like say how to hook up surge protector -> ups -> pdu -> gear ?) * Network UPS tools is what we are considering "betting on" for managing our multi vendor (APC/Dell/Cyclades) PDU/UPS setup across all sites. (The joys of sourcing from flea markets). Does anything better exist? Any issues with running this across a WAN? Any tips for tying it into LDAP? (We have a large amount of lab gear that we wish to make available to the public for use by reservation, we don't want them being able to turn off our production gear) :) Temperature / Environmental monitoring * I've found the temper USB sensors to be perfect for per rack temperature statistics. I believe they will do humidity as well. Any other good environmental sensors for cheap? I know about PacketFlux which is cool for an all in one solution. (I'd love to use netbotz or something, but those are pricy). Cooling * BTU calculation resources? * Cooling sizing? * How hot can gear really run? * Is per rack cooling/airflow via floor fans necessary? For now we all just have room AC cooling the gear. So far all seems well, curious if folks have done stuff like pipe AC output directly into a cabinet etc? Noise dampening Any good room partitions or other solutions for noise cancelling? We've got combination of closed cabs and open racks, so a rack based solution won't quite cut it. Also what about insurance? Probably a thousand other questions/comments/ideas/suggestions, but I think this should kick off a great discussion! It's funny how it kind of all just combines/grows and next thing you know, you've got yourself a whole little internet as it were. :)

1 0

Netalyzr Android: call for volunteers
by Srikanth Sundaresan 14 Oct '14

14 Oct '14

Hi all, Netalyzr is a free network measurement and debugging app developed by the International Computer Science Institute, Berkeley. It is designed to check for a wide range of network problems and neutrality violations, including unadvertised port filtering, DNS wildcarding, and hidden proxy servers. Our browser applet has more than a million runs. Netalyzr for Android was released in October 2013. We are happy to announce a new release that has new tests for better middlebox probing and a better UI. If you're interested, you can download and run the app from Google Play [1]. If you already have the app, please consider updating and re-running it - it would be very helpful for us to capture updates regarding how the mobile Internet is evolving. Oh and: please consider watching our talk at NANOG 62 on Monday [2]! Thanks, The Netalyzr Team. [1] https://play.google.com/store/apps/details?id=edu.berkeley.icsi.netalyzr.an… [2] https://www.nanog.org/meetings/abstract?id=2419

6 5

IANA Stewardship Transition Proposal - Issue survey and ARIN-region Mailing List
by John Curran 13 Oct '14

13 Oct '14

NANOGers - If you are interested in the evolution of the stewardship over the Internet Assigned Numbers Authority (IANA), then please take a moment to complete the survey noted in the attached announcement and subscribe to the iana-stewardship(a)arin.net<mailto:iana-stewardship@arin.net> mailing list. The survey results and discussion on that mailing list will be used to formulate a proposal from the ARIN region (to be combined with the other regions) for transition of the IANA stewardship. Reference the ICANN announcement for more background. Thanks! /John John Curran President and CEO ARIN Begin forwarded message: From: ARIN <info(a)arin.net<mailto:info@arin.net>> Subject: [arin-ppml] IANA Stewardship Transition Proposal Survey and Mailing List Date: October 13, 2014 at 12:38:48 PM PDT To: <arin-ppml(a)arin.net<mailto:arin-ppml@arin.net>> * Cross-posted to arin-announce and arin-consult. As a part of the Regional Internet Registry (RIR) system, the ARIN community has been called to contribute to the ongoing global multistakeholder discussion on the IANA Stewardship Transition. The feedback from the ARIN community will be part of the contribution provided by the Number Resource Organization (NRO) to the IANA Stewardship Transition Coordination Group (ICG) in response to their recent “Request for Proposals (RFP) for ‭IANA‬ Stewardship Transition Proposal‬. ‬‬‬” https://www.icann.org/news/announcement-3-2014-09-03-en We would also like your opinion on number of specific points detailed in a short survey at: https://www.surveymonkey.com/s/IANA_stewardship This survey will be open from 13 October to 20 October 2014, and the results will be made available to the community on 24 October 2014. We have also created a public mailing list (iana-transition(a)arin.net<mailto:iana-transition@arin.net>) to facilitate open community discussion in the region regarding the IANA Stewardship Transition planning process. We encourage you to subscribe and participate in this dialog by visiting http://lists.arin.net/mailman/listinfo/iana-transition To learn more about this and other mailing lists hosted by ARIN, visit the Mailing List page: https://www.arin.net/participate/mailing_lists/ Regards, John Curran President and CEO American Registry for Internet Numbers (ARIN)

1 0

PTT.br / PTTForum 8 - Brazil Internet Exchange Forum - Call for presentations
by Antonio Galvao de Rezende Filho 13 Oct '14

13 Oct '14

We invite PTT.br IXP Members, Autonomous Systems, the Internet community and Vendors to submit proposals for presentations at PTTForum 8 to be held at São Paulo(Hotel Blue Tree Morumbi) on November 24 - 25, 2014 on topics of Brazilian Internet community interest and improvement of Internet services in Brazil, as well as suggestions for new discussion topics related to Internet Exchange Points. The PTTForum 8 edition happens during the 4nd Week of Internet Infrastructure in Brazil, in conjunction with the 5rd IPv6 Forum and GTER 38 (Network engineering and operation work group) / GTS 24 (Network security work group) . Schedule for the selection: . Deadline for proposals reception: *24 October 2014* . Notification of proposal acceptance: *31 October 2014* . Deadline for the submission of final versions: *10 November 2014* Those interested in presenting their work, should send the following data, within the timeframe specified above, to the following address: pttforum(a)ptt.br . Complete title of the presentation. . Extended abstract plus a draft of the slides or the complete article if it were available. . Complete name(s), email address(es), biographical data and organization(s) of which the interested parties are part of or represent. . Estimated Time -- Galvao Rezende <galvao(a)nic.br> +55 11 5509-3524 +55 11 99946-5096 INOC-DBA: 22548*247 PTT.br - http://ptt.br/ NIC.br - http://nic.br/

1 0

IPv6 Default Allocation - What size allocation are you giving out
by Erik Sundberg 13 Oct '14

13 Oct '14

I am planning out our IPv6 deployment right now and I am trying to figure out our default allocation for customer LAN blocks. So what is everyone giving for a default LAN allocation for IPv6 Customers. I guess the idea of handing a customer /56 (256 /64s) or a /48 (65,536 /64s) just makes me cringe at the waste. Especially when you know 90% of customers will never have more than 2 or 3 subnets. As I see it the customer can always ask for more IPv6 Space. /64 /60 /56 /48 Small Customer? Medium Customer? Large Customer? Thanks Erik ________________________________ CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or previous e-mail messages attached to it may contain confidential information that is legally privileged. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. If you have received this transmission in error please notify the sender immediately by replying to this e-mail. You must destroy the original transmission and its attachments without reading or saving in any manner. Thank you.

37 107

Re: IPv6 Default Allocation - What size allocation for Loopback Address
by Randy Carpenter 12 Oct '14

12 Oct '14

----- On Oct 12, 2014, at 8:53 AM, Sander Steffann sander(a)steffann.nl wrote: > Hi, > >> Op 11 okt. 2014, om 23:00 heeft Roland Dobbins <rdobbins(a)arbor.net> het volgende >> geschreven: >> >>> On Oct 11, 2014, at 2:09 PM, Tim Raphael <raphael.timothy(a)gmail.com> wrote: >>> >>>> From my research, various authorities have recommended that a single /64 be >>>> allocated to router loopbacks with /128s assigned on interfaces. >>> >>> Yes, this is what I advocate for loopbacks. > > I often use the first /64 for loopbacks. Loopbacks are often used for > management, iBGP etc and having short and easy to read addresses can be > helpful. Something like 2001:db8::1 is easier to remember and type correctly > than e.g. 2001:db8:18ba:ff42::1 :) > > Cheers, > Sander I concur. I think think some have gotten confused with the suggesting of allocating a /64 for *ALL* loopbacks versus allocating a full /64 per loopback. Loopbacks should be /128, but all loopbacks for a site should be within a single /64 (the first one for reasons others, including Sander have said. -Randy

1 0

AT&T AVPN BGP Communities
by Andrey Khomyakov 12 Oct '14

12 Oct '14

paging AT&T peeps Does anyone have AT&T's AVPN BGP communities reference guide? e.g. 13979:120 to set local_pref to 120 and so on. Thanks in advance! --Andrey

2 1

astraceroute on MAC
by Anurag Bhatia 12 Oct '14

12 Oct '14

Was wondering if anyone got the astraceroute tool working on MAC? http://www.shrubbery.net/astraceroute/ Tried compiling as well as via Mac ports but no success. Does anyone knows any other alternate similar tool? Thanks. -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter <https://twitter.com/anurag_bhatia> Skype: anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2

5 5

Charter Communications Contact
by N. Max Pierson 11 Oct '14

11 Oct '14

Can someone from Charter Communications engineering/support hit me up off list please? Sorry for the noise. Regards, Max

1 0