September 2014 - Test - lists.nanog.org

MEF certifications recommendations?
by Daniel Rohan 11 Sep '14

11 Sep '14

Hi all, As our organization has matured, we've discovered the joy of speaking the same carrier ethernet languages as our vendors and as such we're going through a process of aligning our service-offerings with MEF-centric terminology. Anyone out there taken any MEF-certification training programs and had a good enough experience to recommend one to us? I'm looking for two types of training-- one for the customer-facing folks and one for the engineering folks. We're in Seattle, so local recommendations or nationally-know recommendations are preferred. Thanks, Dan

2 1

Re: [outages] Verizon fiber ring down in LA
by Jay Ashworth 10 Sep '14

10 Sep '14

----- Original Message ----- > From: "Owen Roth via Outages" <outages(a)outages.org> > Is anyone else being impacted or have more information about a Verizon > fiber ring repair in LA that went south yesterday afternoon? A > client's fiber is STILL down more than 16 hours later, and the only > information I have is that it is a configuration/provisioning issue > with no ETR! > > This is new ground -- I have never an outage of this type, and rarely > of this duration. Any further information is appreciated. This is the first I've seen of this here or on NANOG; what was your source for the outage reason you mention? (Assuming you can say. :-) Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

1 0

[NANOG-announce] NANOG 62 Highlights
by Betty Burke <betty＠nanog.org> 09 Sep '14

09 Sep '14

NANOGers: A few details and updates regarding our activities in Baltimore, October 5-8, 2014 NANOG Highlights <https://www.nanog.org/meetings/nanog62/agendahighlights> information is now available. We have updates to the Agenda Topics <https://www.nanog.org/meetings/nanog62/preagenda>, information on Socials, and update on Sponsorship activity. Candidate information regarding NANOG Elections <https://www.nanog.org/governance/elections/2014> has also been updated. Baltimore Education Series <https://www.nanog.org/meetings/education/home> Registration through October 5, 2014 is open for non-member $300, member $275. NANOG 62, be sure to make your Registration <https://www.nanog.org/meetings/nanog62/registration>. The fee increase dates are noted below: - Early Bird Registration through September 14, 2014 (non-member $450, member $425, student $100) - Standard Registration starting September 15, 2014 (non-member $525, member $500, student $100) - Late Registration starting September 29, 2014 (non-member $600, member $575, student $100) Make your hotel reservations soon. We have added 2 additional hotel room blocks to accommodate your trip to Baltimore. Note the NANOG rate at each will expire soon. - Hyatt Regency Baltimore - Room Rate: $199 single/double, plus taxes - Group Rate Expires: Thursday, September 18, 2014 - Reservations: Please call 1-800-233-1234 or +1-410-528-1234 for hotel reservations and state that you will be attending NANOG 62 or click here <https://resweb.passkey.com/Resweb.do?mode=welcome_ei_new&eventID=10381224>for online reservations - Hilton Baltimore - Room Rate: $199 single/double, plus taxes - Group Rate Expires: Sunday, September 21, 2014 - Reservations: Please call 1-800-445-8667 for hotel reservations and please mention the NANOG group, or click here <https://aws.passkey.com/g/32199126> for online reservations - Sheraton Inner Harbor Hotel - Room Rate: $189 single/double, plus taxes - Group Rate Expires: Wednesday, September 17, 2014 - Reservations: Please call 1-866-715-0006 or +1-410-962-8300 for hotel reservations and state that you will be attending NANOG 62 or click here <https://www.starwoodmeeting.com/StarGroupsWeb/booking/reservation?id=140401…> for online reservations NANOG 62 Fellowships <https://www.nanog.org/resources/fellowships> and Sponsorships <https://www.nanog.org/sponsors/opportunities> are also available. Do not delay, take advantage of these opportunities, as they will close shortly. We are fast approaching the final weeks of NANOG 62 preparations, should you have any questions, please send them to nanog-support(a)nanog.org. All best, Betty -- Betty Burke NANOG Executive Director 48377 Fremont Boulevard, Suite 117 Fremont, CA 94538 Tel: +1 510 492 4030 _______________________________________________ NANOG-announce mailing list NANOG-announce(a)mailman.nanog.org http://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

Akamai DNS off-line contact
by Rubens Kuhl 09 Sep '14

09 Sep '14

We are seeing a high profile DNS zone hosted at Akamai with DNSSEC algorithm mismatch (KSK is algorithm 7, ZSK is algorithm 8). If someone could contact me off-list... Rubens

1 0

Call for Presentations RIPE 69
by Filiz Yilmaz 09 Sep '14

09 Sep '14

Dear colleagues, Please find the CFP for RIPE 69 in London below. The deadline for submissions is 31 August 2014. Please also note that speakers do not receive any extra reduction or funding towards the meeting fee at the RIPE Meetings. Kind regards Filiz Yilmaz RIPE PC Chair http://www.ripe.net/ripe/meetings/ripe-meetings/pc --------------------- Call for Presentations A RIPE Meeting is an open event where Internet Service Providers, network operators and other interested parties get together. Although the meeting is mostly technical, it is also a chance for people to meet and network with others in their field. RIPE 69 will take place from 3- November 2014 in London, UK. The RIPE Programme Committee (PC) is now seeking content proposals from the RIPE community for the plenary session presentations, BoFs (Birds of a Feather sessions), panels, workshops, tutorials and lightning talks at RIPE 69. The PC is looking for presentations covering topics of network engineering and operations, including but not limited to: • IPv6 deployment • Managing IPv4 scarcity in operations • Commercial transactions of IPv4 addresses • Data centre technologies • Network and DNS operations • Internet governance and regulatory practices • Network and routing security • Content delivery • Internet peering and mobile data exchange Submissions RIPE Meeting attendees are quite sensitive to keeping presentations non-commercial, and product marketing talks are strongly discouraged. Repeated audience feedback shows that the most successful talks focus on operational experience, research results, or case studies. For example, presenters wishing to describe a commercial solution should focus on the underlying technology and not attempt a product demonstration. The RIPE PC accepts proposals for different presentation formats, including plenary session presentations, tutorials, workshops, BoFs (Birds of a Feather sessions) and lightning talks. See the full descriptions of these formats at https://ripe69.ripe.net/submit-topic/presentation-formats/ Presenters who are proposing a panel or BoF are encouraged to include speakers from several (perhaps even competing) companies and/or a neutral facilitator. In addition to presentations selected in advance for the plenary, the RIPE PC also offers several time slots for “lightning talks”, which are selected immediately before or during the conference. The following general requirements apply: - Proposals for plenary session presentations, BoFs, panels, workshops and tutorials must be submitted for full consideration no later than 31 August 2014, using the meeting submission system at https://ripe69.ripe.net/submit-topic/guidelines/. Proposals submitted after this date will be considered on a space-available basis. - Lightning talks should also be submitted using the meeting submission system (https://ripe69.ripe.net/submit-topic/submission-form/) and can be submitted just days before the RIPE Meeting starts or even during the meeting week. The allocation of lightning talk slots will be announced in short notice – in some cases on the same day but often one day prior to the relevant session. - Presenters should indicate how much time they will require. See more information on time slot allocations per presentation format at https://ripe69.ripe.net/submit-topic/presentation-formats/ - Proposals for talks will only be considered by the PC if they contain at least draft presentation slides (slides may be updated later on). For panels, proposals must contain a clear description, as well as the names of invited panelists, presenters and moderators. - Due to potential technical issues, it is expected that most, if not all, presenters/panelists will be physically present at the RIPE Meeting. If you have any questions or requests concerning content submissions, please email pc [at] ripe [dot] net. ---------------------

1 3

The Next Big Thing: Named-Data Networking
by Jay Ashworth 08 Sep '14

08 Sep '14

How many Youtube subject tags will fit in *your* routers' TCAM? http://tech.slashdot.org/story/14/09/04/2156232/ucla-cisco-more-launch-cons… [ Can someone convince me this isn't the biggest troll in the history of the internet? Cause it sounds like shoehorning DNS /and Google/ into IP in place of, y'know, IP addresses. ] Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

15 24

no more "Send through Gmail" option
by Eduardo A. Suárez 08 Sep '14

08 Sep '14

Hi, according to this thread: https://productforums.google.com/forum/#!category-topic/gmail/GyeMcHv1U-g%5… Gmail isn't allowing anymore "Send through Gmail" option. Eduardo.- -- Eduardo A. Suarez Mecánico Unix - Plomero de redes Facultad de Ciencias Astronómicas y Geofísicas - UNLP FCAG: (0221)-4236593 int. 172/Cel: (0221)-15-4557542/Casa: (0221)-4526589 ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

8 8

Fwd: Interesting problems with using IPv6
by Paul Ferguson 07 Sep '14

07 Sep '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 There's been a lot of on-and-off discussion about v6, especially about security and operational concerns about some aspects of IPv6 deployment, specifically regarding neighbor discovery (although there are other operational security concerns, as well). I'd like to provide this as an example of those concerns, without any additional commentary. :-) See also: http://www.ietf.org/mail-archive/web/ietf/current/msg89517.html Cheers, - - ferg - -------- Forwarded Message -------- Subject: Interesting problems with using IPv6 Date: Sun, 7 Sep 2014 09:28:45 +0000 From: l.wood(a)surrey.ac.uk To: ietf(a)ietf.org http://blog.bimajority.org/2014/09/05/the-network-nightmare-that-ate-my-wee… Interesting scaling concerns... Lloyd Wood http://about.me/lloydwood [end] - -- Paul Ferguson VP Threat Intelligence, IID PGP Public Key ID: 0x54DC85B2 Key fingerprint: 19EC 2945 FEE8 D6C8 58A1 CE53 2896 AC75 54DC 85B2 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iF4EAREIAAYFAlQMeq4ACgkQKJasdVTchbJVuAD/d8qvCrOAr9UswM+9YQaOyTNQ btFUX/1sRImNCcqkIpkA/RdQUhLE5TkmSlULZZ6A5wgsLDE8byukz8O318715kW+ =chES -----END PGP SIGNATURE-----

3 2

Per policy session cap on Juniper SRX
by Anurag Bhatia 06 Sep '14

06 Sep '14

Hello everyone! I have a Juniper SRX firewall and in recent times I did had issues because one or other user doing an attack outside. Usually it is compromised client machines which create a lot of firewall sessions in outside direction. I was thinking of two specific things as fix for this: 1. Can I somehow put a cap per security policy so that all available sessions aren't chewed by clients? 2. We have very few clients who actually use firewall in outbound, rest all in inbound. This I wish to skip firewall in outbound but in my test I found it behaves strange. I tried with machine having inbound traffic via firewall. They ping and port 80 also worked but SSH just hung up as soon as I started. I see SRX can be used in unidirectional setup but somehow it fails in my case. Any suggestions/advice/ sample configs? Thanks in advance! -- Anurag Bhatia anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter <https://twitter.com/anurag_bhatia> Skype: anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2

1 0

Security Track @ NANOG 62 Call for Participation
by John Kristoff 05 Sep '14

05 Sep '14

Friends, colleagues, fellow operators, The network security track, formerly known as the ISP security BoF, will be on the agenda at NANOG 62 in Baltimore and I will be the track facilitator. My good friend Krassimir (Krassi) Tzvetanov many of you may know, has also agreed to help coordinate. We not only seek your participation, but we are also interested you contributing to the track content. If there is something or if you know someone who might like to present, discuss or conduct a demonstration of, we want to hear from you. Here is an incomplete list of ideas to stir your thoughts: * BGPSEC and RPKI update or deployments * Route leak/hijack monitoring and mitigation * Mobile issues * IPv6 security concerns or case studies * DDoS mitigation experience and case studies * Customer support and management practices * Control plane best practices and templates * Embedded device problems and protections * Government regulatory, compliance and privacy issues * Walled garden techniques * Malware analysis * MPLS and VLAN security issues * VM and cloud security challenges * OpenFlow/SDN security considerations * <insert your new cool tool or idea here> Note, this track is not streamed nor recorded. If you want your PGP key signed by me (or anyone else), you should upload it before arriving to this page to we have a record of it before meeting in person. <http://biglumber.com/x/web?keyring=9191> John

2 1