January 2015 - Test - lists.nanog.org

Brocade MLX Feedback
by Graham Johnston 15 Jan '15

15 Jan '15

We are looking at Brocade MLX routers to act as Internet edge routers. They will initially handle two to four full tables, plus peering on an IX. The price is certainly attractive. We are coming from Cisco 7600 series devices. Can anyone comment about their use of them? Are you happy with them? Any gotchas? Particularly we are interested in convergence time to full FIB population. Thanks, Graham Johnston Network Planner Westman Communications Group 204.717.2829 johnstong(a)westmancom.com<mailto:johnstong@westmancom.com> P think green; don't print this email.

7 6

discussing how to stop hacking is hacking which is now racketeering
by Ken Chase 14 Jan '15

14 Jan '15

http://blog.erratasec.com/2015/01/obams-war-on-hackers.html Therefore, immediate end of this thread? Are all subscribers to this list now to be inconvenienced at airports? (Sorry, my bad.) Do we all need a CCNP Security-multipass to log into IRC now? Which channels are now a good idea to avoid? #linux? #bitcoin? #nanog? #obamasucks? #blacklivesmatter? (in Canada #idlenomore is similar and equally targetted by Palantir/Tempests as the latter was). What constitutes racketeering in 'communication'? Membership on a mailing list or just reading a webpage? [ This week I was investigating a colleague's website, so I ran dig(1) in a bash terminal in putty - she saw a text terminal, and exclaimed "Wait, stop, are you hacking my website?!" I blame Sandra Bullock and to a lesser extent Carrie Ann Moss (and the nmap crew, esp. for using actually-plausible toolsets/techniques). ] This is an age old game, but the ante has just been upped. Our industry should respond to this. /kc -- Ken Chase - math(a)sizone.org Toronto Canada

3 3

[NANOG-announce] NANOG 63 Update
by Betty Burke <betty＠nanog.org> 14 Jan '15

14 Jan '15

NANOGers, We are beginning our final preparations in support of NANOG 63, February 2-4, 2015 in San Antonio, TX. A few highlights and reminders follow: The NANOG 63 Agenda <https://www.nanog.org/meetings/nanog63/agenda>is posted, with updates being provided as warranted. he Conference Registration Fee <https://www.nanog.org/meetings/nanog63/registration> will increase soon, so be sure to register now. Also, take a moment to join NANOG <https://www.nanog.org/membership> or renew your existing Membership. - Standard Registration starting January 16, 2015 - (non-member $525, member $500, student $100) - Late Registration starting January 23, 2015 - (non-member $600, member $575, student $100) - On-Site Registration starting January 30, 2015 - (non-member $675, member $650, student $100) The conference hotel <https://www.nanog.org/meetings/nanog63/hotelinformation> (Marriott Rivercenter) room block rate is set to expire on Friday, 5 pm CST, January 16, 2015, be sure to get your reservation made ASAP. We welcome those attendees <https://www.nanog.org/meetings/nanog63/attendees> and conference sponsors <https://www.nanog.org/meetings/nanog63/sponsors> already planning to join us for NANOG 63. We encourage those not yet registered to do so, and join us for what will be another great February NANOG meeting! Should you have any questions, contact us at nanog-support(a)nanog.org Sincerely, Betty Betty Burke NANOG Executive Director 48377 Fremont Boulevard, Suite 117 Fremont, CA 94538 Tel: +1 510 492 4030 _______________________________________________ NANOG-announce mailing list NANOG-announce(a)mailman.nanog.org http://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

Akron OH CO outage
by David Coulson 14 Jan '15

14 Jan '15

Anyone else in North East Ohio seeing an outage of AT&T's CO in Akron? Local news is reporting 911 is out across multiple counties, so can't be good. If anyone has any information, feel free to reach out off-list. David

2 1

Level 3 issues in Miami/West Palm Beach
by Blair Trosper 14 Jan '15

14 Jan '15

All packets traveling through customer edges and routers in Miami/Daytona seem to be incurring *extraordinary* latency (4+ seconds) all of a sudden. Can someone contact me off list so I can throw you some traceroutes?

3 3

Re: Recommended L2 switches for a new IXP
by Michael Smith 14 Jan '15

14 Jan '15

You can see what we have at the SIX here - http://www.seattleix.net/topology.html Mike -- Michael K. Smith mksmith(a)mac.com On Jan 11, 2015, at 10:37 PM, Manuel Marín <mmg(a)transtelco.net> wrote: Dear Nanog community We are trying to build a new IXP in some US Metro areas where we have multiple POPs and I was wondering what do you recommend for L2 switches. I know that some IXPs use Nexus, Brocade, Force10 but I don't personally have experience with these switches. It would be great if you can share your experience and recommendations. There are so many options that I don't know if it makes sense to start with a modular switch (usually expensive because the backplane, dual dc, dual CPU, etc) or start with a 1RU high density switch that support new protocols like Trill and that supposedly allow you to create Ethernet Fabric/Clusters. The requirements are simple, 1G/10G ports for exchange participants, 40G/100G for uplinks between switches and flow support for statistics and traffic analysis. Thank you and have a great day. Regards

1 0

DDOS solution recommendation
by Manuel Marín 13 Jan '15

13 Jan '15

Nanog group I was wondering what are are using for DDOS protection in your networks. We are currently evaluating different options (Arbor, Radware, NSFocus, RioRey) and I would like to know if someone is using the cloud based solutions/scrubbing centers like Imperva, Prolexic, etc and what are the advantages/disadvantages of using a cloud base vs an on-premise solution. It would be great if you can share your experience on this matter. Thank you

34 76

Google's Safe Browsing Alerts for Network Administrators
by Frank Bulk 13 Jan '15

13 Jan '15

I want to make this forum aware of Google's "Safe Browsing Alerts for Network Administrators" (https://www.google.com/safebrowsing/alerts/) I've had a link to their diagnostic page for several years (https://www.google.com/safebrowsing/diagnostic?site=AS:####&hl=it-it, where #### is your ASN), but I didn't know that Google actually had a way to alert ASN owners of new incidents. I checked NANOG's archive and haven't ever seen it mentioned, so I thought there might be more like me that weren't aware. And while I'm on the subject, I want to make people aware of somewhat related service by ShadowServer (https://www.shadowserver.org/wiki/pmwiki.php/Involve/GetReportsOnYourNetwor k). Frank

5 5

Re: DDOS solution recommendation
by Scott Weeks 12 Jan '15

12 Jan '15

--- nanog(a)ics-il.net wrote: From: Mike Hammett <nanog(a)ics-il.net> So the preferred alternative is to simply do nothing at all? That seems fair. --------------------------------------- No, the answer is to find the groups that have already looked into the issues, learn what they've done and see if you can provide quality input to the group. scott

1 0

Root and ARPA DNSSEC operational message - signature validity period
by Wessels, Duane 12 Jan '15

12 Jan '15

DNSSEC signatures in the Root and ARPA zones were initially given a validity period of 7 days. The validity period is being increased to 10 days. Both the Root and ARPA zones publish their NS RRsets with a TTL of 6 days. A signature validity period of 7 days means that a root server instance that is not updated within 24 hours may return NS RRset responses whose TTL exceeds the signature validity. This could cause problems for validating recursive name servers that forward queries through non-validators. A longer signature validity provides a longer buffer in the distribution of these zones. Note that we are not aware of any cases where the 7 day signature validity period has caused problems for DNSSEC validators. This is a precautionary measure. As of today, the zones now have the increased validity period. Please feel free to contact us with concerns or questions.

1 0