January 2015 - Test - lists.nanog.org

[NANOG-announce] NANOG 63 Update
by Betty Burke <betty＠nanog.org> 14 Jan '15

14 Jan '15

NANOGers, We are beginning our final preparations in support of NANOG 63, February 2-4, 2015 in San Antonio, TX. A few highlights and reminders follow: The NANOG 63 Agenda <https://www.nanog.org/meetings/nanog63/agenda>is posted, with updates being provided as warranted. he Conference Registration Fee <https://www.nanog.org/meetings/nanog63/registration> will increase soon, so be sure to register now. Also, take a moment to join NANOG <https://www.nanog.org/membership> or renew your existing Membership. - Standard Registration starting January 16, 2015 - (non-member $525, member $500, student $100) - Late Registration starting January 23, 2015 - (non-member $600, member $575, student $100) - On-Site Registration starting January 30, 2015 - (non-member $675, member $650, student $100) The conference hotel <https://www.nanog.org/meetings/nanog63/hotelinformation> (Marriott Rivercenter) room block rate is set to expire on Friday, 5 pm CST, January 16, 2015, be sure to get your reservation made ASAP. We welcome those attendees <https://www.nanog.org/meetings/nanog63/attendees> and conference sponsors <https://www.nanog.org/meetings/nanog63/sponsors> already planning to join us for NANOG 63. We encourage those not yet registered to do so, and join us for what will be another great February NANOG meeting! Should you have any questions, contact us at nanog-support(a)nanog.org Sincerely, Betty Betty Burke NANOG Executive Director 48377 Fremont Boulevard, Suite 117 Fremont, CA 94538 Tel: +1 510 492 4030 _______________________________________________ NANOG-announce mailing list NANOG-announce(a)mailman.nanog.org http://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

Akron OH CO outage
by David Coulson 13 Jan '15

13 Jan '15

Anyone else in North East Ohio seeing an outage of AT&T's CO in Akron? Local news is reporting 911 is out across multiple counties, so can't be good. If anyone has any information, feel free to reach out off-list. David

2 1

Level 3 issues in Miami/West Palm Beach
by Blair Trosper 13 Jan '15

13 Jan '15

All packets traveling through customer edges and routers in Miami/Daytona seem to be incurring *extraordinary* latency (4+ seconds) all of a sudden. Can someone contact me off list so I can throw you some traceroutes?

3 3

Re: Recommended L2 switches for a new IXP
by Michael Smith 13 Jan '15

13 Jan '15

You can see what we have at the SIX here - http://www.seattleix.net/topology.html Mike -- Michael K. Smith mksmith(a)mac.com On Jan 11, 2015, at 10:37 PM, Manuel Marín <mmg(a)transtelco.net> wrote: Dear Nanog community We are trying to build a new IXP in some US Metro areas where we have multiple POPs and I was wondering what do you recommend for L2 switches. I know that some IXPs use Nexus, Brocade, Force10 but I don't personally have experience with these switches. It would be great if you can share your experience and recommendations. There are so many options that I don't know if it makes sense to start with a modular switch (usually expensive because the backplane, dual dc, dual CPU, etc) or start with a 1RU high density switch that support new protocols like Trill and that supposedly allow you to create Ethernet Fabric/Clusters. The requirements are simple, 1G/10G ports for exchange participants, 40G/100G for uplinks between switches and flow support for statistics and traffic analysis. Thank you and have a great day. Regards

1 0

DDOS solution recommendation
by Manuel Marín 13 Jan '15

13 Jan '15

Nanog group I was wondering what are are using for DDOS protection in your networks. We are currently evaluating different options (Arbor, Radware, NSFocus, RioRey) and I would like to know if someone is using the cloud based solutions/scrubbing centers like Imperva, Prolexic, etc and what are the advantages/disadvantages of using a cloud base vs an on-premise solution. It would be great if you can share your experience on this matter. Thank you

34 76

Google's Safe Browsing Alerts for Network Administrators
by Frank Bulk 13 Jan '15

13 Jan '15

I want to make this forum aware of Google's "Safe Browsing Alerts for Network Administrators" (https://www.google.com/safebrowsing/alerts/) I've had a link to their diagnostic page for several years (https://www.google.com/safebrowsing/diagnostic?site=AS:####&hl=it-it, where #### is your ASN), but I didn't know that Google actually had a way to alert ASN owners of new incidents. I checked NANOG's archive and haven't ever seen it mentioned, so I thought there might be more like me that weren't aware. And while I'm on the subject, I want to make people aware of somewhat related service by ShadowServer (https://www.shadowserver.org/wiki/pmwiki.php/Involve/GetReportsOnYourNetwor k). Frank

5 5

Re: DDOS solution recommendation
by Scott Weeks 12 Jan '15

12 Jan '15

--- nanog(a)ics-il.net wrote: From: Mike Hammett <nanog(a)ics-il.net> So the preferred alternative is to simply do nothing at all? That seems fair. --------------------------------------- No, the answer is to find the groups that have already looked into the issues, learn what they've done and see if you can provide quality input to the group. scott

1 0

Root and ARPA DNSSEC operational message - signature validity period
by Wessels, Duane 12 Jan '15

12 Jan '15

DNSSEC signatures in the Root and ARPA zones were initially given a validity period of 7 days. The validity period is being increased to 10 days. Both the Root and ARPA zones publish their NS RRsets with a TTL of 6 days. A signature validity period of 7 days means that a root server instance that is not updated within 24 hours may return NS RRset responses whose TTL exceeds the signature validity. This could cause problems for validating recursive name servers that forward queries through non-validators. A longer signature validity provides a longer buffer in the distribution of these zones. Note that we are not aware of any cases where the 7 day signature validity period has caused problems for DNSSEC validators. This is a precautionary measure. As of today, the zones now have the increased validity period. Please feel free to contact us with concerns or questions.

1 0

129.250.35.250/251 NTT DNS Instability
by A MEKKAOUI 12 Jan '15

12 Jan '15

Hi We've seen some DNS instability and want to know if anyone of you have seen the same thing. Your comments will be appreciated. Thank you Karim

3 3

command that can display routes containing AS loops
by Song Li 12 Jan '15

12 Jan '15

Hi everyone, I am curious about the AS loops in the AS-path. I think there should be a very, very few received BGP routes that contain the local AS#. But because such routes will be dropped and not installed in Loc-RIB, I want to know if there is a command that can display the dropped routes containing AS loops (in cisco or juniper router). Does anybody know? Thanks! Best! -- Song Li Room 4-204, FIT Building, Network Security, Department of Electronic Engineering, Tsinghua University, Beijing 100084, China Tel:( +86) 010-62446440 E-mail: refresh.lsong(a)gmail.com

2 2