February 2014 - Test - lists.nanog.org

Route Server Filters at IXPs and 4-byte ASNs
by Sebastian Spies 06 Feb '14

06 Feb '14

Hi there, as 2-byte ASNs are close to depletion (see NRO announcement this week), we have come across a topic, that might influence the adoption of 4-byte ASNs. First of all, we have no data or experience about 4-byte ASN adoption and are therefore unable to evaluate, if we should rush for the last available numbers. So here's the thing: IXPs usually implement N:M filtering based on standard community strings. As standard BGP communities support only 4 bytes, this only works for IXPs with 2-byte ASNs and peers with 2-byte ASNs. Extended communities to the rescue? We are not sure: While RFC4260 (Extended Communities) allows for <Global Admin,2bytes>:<Local Admin, 4bytes> community strings (3.1 Two-Octet AS Specific Extended Community), this works as long as the IXP itself uses a 2-byte ASN. What happens, if the IXP uses a 4-byte ASN? RFC5668 (4-Octet AS Specific BGP Extended Community) defines <Global Admin,4bytes>:<Local Admin, 2bytes>. I have been asking some IXP operators, about their practice and their reply was "4-byte ASNs are supported by our RS". What's your experience? Did you see IXPs, that do not support them? Do you think, the IXP operators are aware of this limitation? Have you seen IXPs with 4-byte ASNs or do RIRs reserve 2-byte ASNs for future IXPs? What other operational problems did you experience while using 4-byte ASNs? A lot of questions. I am very curious about your answers. Cheers, Sebastian -- SEBASTIAN SPIES lnked.in/sspies

10 15

Re: Need trusted NTP Sources
by Larry Sheldon 06 Feb '14

06 Feb '14

On 2/6/2014 9:02 AM, Nick Hilliard wrote: > On 06/02/2014 14:57, Larry Sheldon wrote: >> http://support.ntp.org/bin/view/Servers/PublicTimeServer000079 > > bear in mind that due to the vagaries of african peering weirdness, the > actual path from there to the OP's network could be over multiple satellite > links and peered in Asia, Europe or the US. The Internet in africa can be > ... odd. If it was me (having made a living getting with auditors who had no idea what they were doing) I would look for some close-by reliable (my judgement) 1- and 2- level sources (including, usually) the router at the ISP that I talk-to to get good service then add one or two the auditor likes. Larry (long time responder-to-audits that demanded that my UNIVAC and HP hardware and software look like IBM) -- Requiescas in pace o email Two identifying characteristics of System Administrators: Ex turpi causa non oritur actio Infallibility, and the ability to learn from their mistakes. (Adapted from Stephen Pinker)

1 0

Re: Need trusted NTP Sources
by Larry Sheldon 06 Feb '14

06 Feb '14

>> It has been a while since I have done anything with NTP, but I would start >> with ntp.org (which didn't exist when I WAS working with it) which I am led >> to believe has the stuff that used to be at U. Delaware, like the public >> servers lists: >> >> http://support.ntp.org/bin/view/Servers/WebHome Where I found http://support.ntp.org/bin/view/Servers/PublicTimeServer000079 -- Requiescas in pace o email Two identifying characteristics of System Administrators: Ex turpi causa non oritur actio Infallibility, and the ability to learn from their mistakes. (Adapted from Stephen Pinker)

1 0

Fwd: SAFNOG 2014 - Call for Papers OPEN
by Mark Tinka 06 Feb '14

06 Feb '14

FYI. Mark.

1 0

Comcast NOC contact
by Joe Marr 05 Feb '14

05 Feb '14

I'm seeing an odd routing issue with Comcast and would like their help. Does any have any contact information for them?

2 1

Re: BCP38
by Jay Ashworth 05 Feb '14

05 Feb '14

----- Original Message ----- > From: "Frank Bulk" <frnkblk(a)iname.com> > Here's such a report: > > http://spoofer.cmand.org/summary.php And those results aren't bad; they amount to between 2/3 and 3/4 of real source address space already having something implemented, if I'm reading them correctly. Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

1 0

[iab-chair@iab.org: Call for Review of draft-iab-filtering-considerations-06.txt, "Technical Considerations for Internet Service Blocking and Filtering"]
by Jeffrey Haas 05 Feb '14

05 Feb '14

It's IETF stuff. Operator sanity check would probably be appreciated. :-) -- Jeff ----- Forwarded message from IAB Chair <iab-chair(a)iab.org> ----- Date: Wed, 29 Jan 2014 11:16:56 -0500 From: IAB Chair <iab-chair(a)iab.org> To: IETF Announce <ietf-announce(a)ietf.org> Cc: IAB <iab(a)iab.org>, IETF <ietf(a)ietf.org> Subject: Call for Review of draft-iab-filtering-considerations-06.txt, "Technical Considerations for Internet Service Blocking and Filtering" This is a call for review of "Technical Considerations for Internet Service Blocking and Filtering" prior to potential approval as an IAB stream RFC. The document is available for inspection here: https://datatracker.ietf.org/doc/draft-iab-filtering-considerations/ The Call for Review will last until 26 February 2014. Please send comments to iab(a)iab.org. On behalf of the IAB, Russ Housley IAB Chair ----- End forwarded message -----

4 3

Verizon Wireless NOC contact
by Staudinger, Malcolm 05 Feb '14

05 Feb '14

Can someone from Verizon contact me off-list? We're seeing DNS resolution issues to Earthlink domains from Verizon Wireless customers, and have only gotten the run around from our "usual" Verizon NOC contacts Malcolm Staudinger Information Security Analyst | EIS EarthLink www.earthlink.net E: mstaudinger(a)corp.earthlink.com<mailto:mstaudinger@corp.earthlink.com>

1 0

Done a physical security audit lately?
by Jay Ashworth 05 Feb '14

05 Feb '14

http://www.npr.org/blogs/thetwo-way/2014/02/05/272015606/sniper-attack-on-c… -- Sent from my Android phone with K-9 Mail. Please excuse my brevity.

3 4

Looking for Time Warner NOC contact
by Eric Sieg 05 Feb '14

05 Feb '14

Need some assistance isolating a connectivity issue between their customer and mine. Any assistance/direction would be greatly appreciated as normal paths have been exhausted.

1 0