November 2015 - Test - lists.nanog.org

Big day for IPv6 - 1% native penetration
by Tomas Podermanski 05 Jan '16

05 Jan '16

Hi, It seems that today is a "big day" for IPv6. It is the very first time when native IPv6 on google statistics (http://www.google.com/intl/en/ipv6/statistics.html) reached 1%. Some might say it is tremendous success after 16 years of deploying IPv6 :-) T.

87 261

DNSSEC and ISPs faking DNS responses
by Jean-Francois Mezei 17 Dec '15

17 Dec '15

The Québec government is wanting to pass a law that will force ISPs to block and/or redirect certain sites it doesn't like. (namely sites that offer on-line gambling that compete against its own Loto Québec). In order to make a good submission to government, once has to boil it donw to simple enough arguments that clueless politicians can understand. And for me to do that, I want to make sure I understand this correctly. I have tried to research DNSSEC and while I understand how a proper DNS server can validate the chain from the - root server - TLD server - authoritative DNS server for that domain I remain in dark with regartds to clients, namely clients who cannot trust the DNS server supplied as part of DHCP/IPCP/PPPoE responses. Say a consumer wants to connect to lottery.com, which, from the world outside the ISP, would result in a signed, verifiable response. Can't the ISP's DNS server just pretend it is authoritative for lottery.com and return to client a non-DNSSEC response that points to a fake IP address ? If the client gets an unsigned response for lottery.com from its ISP's DNS server, how can it know it is a fake response, how can it know that lottery.com should have generated a signed DNSSEC response ? It seems to me that unless each client goes to the tld servers (they already have root signatures), get signature of the tld server and signed response of where "lotery.com" can be found, they have no way to know whether lottery.com should be signed or not, and whether the answer they got from their ISP is good or not. Is that a proper understanding ? So far, I have seen good explanations of what happens between DNS servers and the servers that are authoritative for domain, TLD and root. But I have seen nothing about clients who only have a resolver that talks to a DNS server. And while I am at it: when a client gets a legit response from ISP's DNS server with RRSIG records, how does the client obtain the public key against which to run the record to ensure its calculated signature matches that provided in RRSIG ? or do DNS servers return the full chain of records so that a request for lottery.com returns not only record for lottery.com but also .com,s reply on where lottery.com is and root's reply of where .com is ? Hopefully, I am only missing a small bit that would explain everything that happens at the client side. But as long as I am told that the client only talks to the ISP's DNS server, I am at a loss. Any help appreciated. (I just watched an hour long youtube on subject which didn't deal with client much).

27 74

Binge On! - And So This is Net Neutrality?
by Jay Ashworth 11 Dec '15

11 Dec '15

According to: http://www.engadget.com/2015/11/20/fcc-chairman-gives-t-mobiles-binge-on-th… Chairman Wheeler thinks that T-mob's new "customers can get uncapped media stream data, but only from the people we like" service called Binge On is pro-competition. My take on this is that the service is *precisely* what Net Neutrality was supposed to prevent -- carriers offering paid fast-lanes to content providers -- and that this is anti-competitive to the sort of "upstart YouTube" entities that NN was supposed to protect... and that *that* is the competition that NN was supposed to protect. And I just said the same thing two different ways. Cause does anyone here think that T-mob is giving those *carriers* pride of place *for free*? Corporations don't - in my experience - give away lots of money out of the goodness of their hearts. Cheers, -- jr 'whacky weekend' a -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

31 55

DHCPv6 PD & Routing Questions
by Jim Burwell 06 Dec '15

06 Dec '15

Hi, Have a simple couple of questions here. In my admittedly cursory glances over the DHCPv6 RFCs, I don't see any reference to the protocol having any role in managing the routing of prefixes it delegates. Perhaps I missed it, but I somewhat expected the omission of this responsibility would be the case. My questions are: 1) Does the DHCPv6 protocol include any standards/mechanisms/methods for managing routes to prefixes it delegates, or does it consider this outside of its function? (I suspect the latter) 2) What are the most common ways of managing the routing of delegated prefixes in the ISPs routing domain? Has a standard method/best practice emerged yet? Routing protocols? IPv6 RAs? One obvious answer would be routing protocols. In my brief googling, I've seen a forum post that seems to indicate that Comcast makes use of RIPng on their CPE to propagate routing information for prefixes delegated to it. Can someone confirm this? This would seem as good a method as any to do this, albeit with obvious security concerns. What's the best way to implement a DHCPV6 PD client on a Linux router? Dibbler seems to do everything except route propagation (asks for PD, puts PD address on local NIC if asked). Anything better out there? TIA, - Jim

17 41

Multi-core clamp on ammeter
by Rob Seastrom 03 Dec '15

03 Dec '15

Hi folks, I own a Megger MMC850 which will read amps in a multi-core cable, such as the 10 gauge SEOOW cable one often finds feeding rack PDUs. Datasheet here: http://www.mouser.com/ds/2/263/MMC850_DS_en_V02-15853.pdf Apparently they've been discontinued. Pity. Anyone know of a suitable replacement? I need more. -r

2 1

SevOne Monitoring
by Paul Stewart 03 Dec '15

03 Dec '15

Hey folks. Looking for feedback from actual customers on SevOne for network monitoring . anyone using them and willing to share thoughts online/offline? They have an appealing system for network monitoring and considering it as a replacement to Solarwinds. Cheers, Paul

6 7

OT: BdNOG announces website blocks
by Scott Weeks 01 Dec '15

01 Dec '15

--------------------------------------------- Md. abdullah Al naser mail.naserbd at yahoo.com Wed Nov 18 12:56:15 BDT 2015 The service of Facebook, Viber and Whatsapp are blocked from now till further notice. It has been ordered by Begum Tarana Halim, State Minister, Post and Telecommunications. ---------------------------------------------- I just saw this on BdNOG and thought it might be interesting to others here and where some of the internet is headed... Wow, all of these govt's just can't seem to deal with not being able to completely control *everything* about the populace. So, in Bangladesh, no communicating with your social peers, no free calls, text or picture sharing and no mobile messaging. The new State Minister for Post and Telecommunications in Bangladesh wants her money. It'd be interesting to hear how they're attempting to make it happen. scott

6 5

Bluehost.com
by JoeSox 30 Nov '15

30 Nov '15

Anyone have the scope on the outage for Bluehost? https://twitter.com/search?q=%23bluehostdown&src=tyah Cannot even move my DNS until its restored. :( I suggest moving the status page to outside your network as well. https://www.bluehost.com/hosting/serverstatus -- Later, Joe

13 21

[NANOG-announce] NANOG 66 - San Diego - Call for Presentations is Open!
by Tony Tauber 30 Nov '15

30 Nov '15

Greetings NANOG Folks, The last two NANOG meetings (San Francisco and Montreal) set records for attendance and we hope and expect the trend of strong attendance numbers to continue for the NANOG 66 meeting February 8-10, 2016 in San Diego, CA which will be hosted by IIX, Inc. The detailed NANOG66 Call For Presentations <http://nanog.org/meetings/nanog66/callforpresentations> has more info but below is some information that might be useful for quick digestion. Cheers, Tony Tauber Chair, NANOG Program Committee === Timeline for submission and proposal review 1. Submitter enters Abstract (and draft slides if possible) in Program Committee Site <https://pc.nanog.org/>. 1. Any time following Call for Presentations and before deadline for Abstracts 2. PC performs initial review and assigns a “Shepherd” to help develop the submission. 1. Within about 2-3 weeks 3. Submitter develops draft slides (minimally showing proposed outline and level of detail). 1. Please submit initial draft slides before published deadline for slides 2. Panels and Track submissions should provide topic list and intended/confirmed participants 4. PC reviews slides and iteratively works with Submitter to help develop topic. 5. PC accepts or declines submission 6. Agenda assembled and posted 7. Submitters notified If you think you have an interesting topic but want some feedback or assistance working it into a presentation, please email the Program Committee <nanogpc(a)nanog.org>, and a representative on the Program Committee will give you the feedback needed to work it into a presentation. Otherwise, don't delay in submitting your talk, keynote, track, or panel proposal to the <http://pc.nanog.org/>Program Committee Site <https://pc.nanog.org/>. We look forward to reviewing your submission. Key Dates For NANOG 66 Event/Deadline Date Registration for NANOG 66 Opens Monday, 10/26/2015 CFP Opens for NANOG 66 Monday, 10/26/2015 CFP Deadline #1: Presentation Abstracts Due Monday, 11/30/2015 CFP Topic List and NANOG Highlights Page Posted Friday, 12/18/2015 CFP Deadline #2: Presentation Slides Due Monday, 1/4/2016 Meeting Agenda Published Monday, 1/11/2016 Speaker FINAL presentations to Program Committee Site <https://pc.nanog.org/> Wednesday, 2/3/2016 On-site Registration Sunday, 2/7/2016 Lightning Talk Submissions Open (Abstracts Only) Sunday, 2/7/2016 Further Presentation Guidelines can be found under "Present at a NANOG" <https://www.nanog.org/meetings/presentation> and some general advice is available in Tips on Giving a Talk <https://www.nanog.org/meetings/presentation/tips>. _______________________________________________ NANOG-announce mailing list NANOG-announce(a)mailman.nanog.org http://mailman.nanog.org/mailman/listinfo/nanog-announce

1 1

Opinions on Arista 7280?
by David Hubbard 30 Nov '15

30 Nov '15

Curious if anyone's used the 7280 and wants to share their experience? I'm looking at it primarily for three reasons, MLAG (i.e. multi-chassis LACP), large ARP/MAC table (256k entries) and large IPv6 neighbor table (256k entries). For the table sizes we would like out of one pair of switches, we'd be into the Cisco 7000 series, but that's dramatically more expensive and we don't need much of anything else that it offers. Looked at Brocade too, but they don't have devices that can do the multi chassis LACP, has the huge table sizes and has a reasonable number of 10gig ports. It was possible to construct a workable solution using VDX's for switching and CER's for routing, but that's more complex than Arista's option if it's a usable option. Thanks, David

7 6