June 2016 - Test - lists.nanog.org

Strange Problem with 16 byte packets
by Glen Kent 16 Jun '16

16 Jun '16

Hi, I am using a proprietary protocol and sending a bunch of bytes to a Draytek router at an enterprise site. When i send the data in TCP batches of 1 MB i see no problem. However, when i first send 16 bytes followed by 1 MB of data, and then repeat this till the entire data has beeen sent out. During this process I see that my TCP session times out. Unable to understand why this could be happening? How can sending 16 bytes of data followed by 1MB of data affect the transfer. Thanks !

4 5

Link-local v6 and mobile phones
by Willy MANGA 15 Jun '16

15 Jun '16

Hello, a little question :) For mobile operators using v6 on their networks, how do you manage link-local communication between mobile phones ? While I understand it's layer 2 related, am i able for example to make ping sweep and be able to communicate directly with other phone (customer) ? -- Willy Manga (from where I stand mobile operators do not use yet v6 :-\ ) freenode: ongolaBoy Ubuntu Cameroonian Loco Team https://launchpad.net/~manga-willy

3 2

Comcast (DOCSIS) issues in Boston?
by Spencer Ryan 15 Jun '16

15 Jun '16

Anyone seeing any issues with routing into Boston? We have a DOCSIS link that seems unroutable past 350 E Cermak in Chicago, traceroutes from two carries here in Michigan stop there. We have a fiber (EDI/BGP) with them at the same location and I'm not seeing any issues on that link. The site itself can ping it's default gateway but can't get anywhere else. *Spencer Ryan* | Senior Systems Administrator | sryan(a)arbor.net *Arbor Networks* +1.734.794.5033 (d) | +1.734.846.2053 (m) www.arbornetworks.com

2 1

Webmail / IMAPS software for end-user clients in 2016
by Eric Kuhnke 15 Jun '16

15 Jun '16

If you had to put up a public facing webmail interface for people to use, and maintain it for the foreseeable future (5-6 years), what would you use? Roundcube? https://roundcube.net/ Rainloop? http://www.rainloop.net/ Something else? Requirements: Needs to be open souce and GPL, BSD or Apache licensed Email storage will be accessed via IMAP/TLS1.2 Runs on a Debian based platform with apache2 or nginx Desktop browser CSS and mobile device CSS/HTML functionality on 4" to 7" size screens with Chrome and Safari

9 11

Verizon Wireless 4G Voice/Data
by Kraig Beahn 14 Jun '16

14 Jun '16

Looks like Verizon Wireless 4G voice, intermittent data services and some 3g voices services are currently non-functional, specifically in the SE, however, seeing reports nationwide as well. --

6 7

Re: Verizon Wireless 4G Voice/Data
by Alex Buie 14 Jun '16

14 Jun '16

Large scale outage in FL, primarily affecting customers who have Advanced Calling (VoLTE) turned on and calling CDMA/PSTN destinations. However it appears there are many areas whose data connectivity is also affected. Will pass along any updates I can. Over 2k calls in the Tech Support queue right now, wish me luck! Time to jump into the sharks. Haha. Alex (VZW tech) All statements and opinions are my own and do not reflect that of Verizon Wireless or its subsidiaries. On Jun 14, 2016 6:35 PM, "Kraig Beahn" <kraig(a)enguity.com> wrote: Looks like Verizon Wireless 4G voice, intermittent data services and some 3g voices services are currently non-functional, specifically in the SE, however, seeing reports nationwide as well. --

1 0

Re: RPKI and offline routes
by Jakob Heitz (jheitz) 14 Jun '16

14 Jun '16

ASN 0 is used for this purpose. Look for the word "zero" in https://tools.ietf.org/html/rfc6907 Thanks, Jakob. > Date: Mon, 13 Jun 2016 17:53:45 -0500 (Central Sommerzeit) > From: Matthias Waehlisch <m.waehlisch(a)fu-berlin.de> > To: Theodore Baschak <theodore(a)ciscodude.net> > Cc: NANOG Operators' Group <nanog(a)nanog.org> > Subject: Re: RPKI and offline routes > > Hi, > > the creation of a ROA does not require the announcement of the prefix. > Creation of a ROA, prefix announcement, and validation of the prefix are > decoupled. If you are the legitimate resource holder you can create a > ROA for this prefix (even if you don't advertise the prefix). As soon as > the prefix is advertised, third parties can validate based on the > created ROA. > > However, in case the hijacker is able to use the legitimate origin > ASN, the validation outcome would be valid. You would need to assign the > prefix to an ASN that cannot be hijacked or is dropped for other > reasons. (Or do BGPsec. ;) > > > Cheers > matthias > > On Mon, 13 Jun 2016, Theodore Baschak wrote: > > > Can RPKI be used with routes that are not being advertised at the moment? > > As in to sign a route that *could* be there, but is not there presently. > > > > There's been several BGP hijacks that I've followed closely that > > involved hijacking IP space as well as the ASN that would normally > > originate it. I'm wondering if having valid ROAs/RPKI would have > > helped in this case or not. > > > > > > Theodore Baschak - AS395089 - Hextet Systems > >

1 0

RPKI and offline routes
by Theodore Baschak 14 Jun '16

14 Jun '16

Can RPKI be used with routes that are not being advertised at the moment? As in to sign a route that *could* be there, but is not there presently. There's been several BGP hijacks that I've followed closely that involved hijacking IP space as well as the ASN that would normally originate it. I'm wondering if having valid ROAs/RPKI would have helped in this case or not. Theodore Baschak - AS395089 - Hextet Systems

3 3

Appeals court upholds Network Neutrality rules
by Patrick W. Gilmore 14 Jun '16

14 Jun '16

Presented without comment: https://www.washingtonpost.com/news/the-switch/wp/2016/06/14/the-fcc-just-w… Seems topical to NANOG audience. -- TTFN, patrick

1 0

Re: Netflix VPN detection - actual engineer needed
by Owen DeLong 14 Jun '16

14 Jun '16

> On Jun 7, 2016, at 11:50 AM, Davide Davini <davide.davini(a)doppiad.com> wrote: > > On 04/06/2016 20:46, Owen DeLong wrote: >> Get your own /48 and advertise to HE Tunnel via BGP. Problem solved. > > Even though that sounds like an awesome idea it does not seem trivial to > me to obtain your own /48. It’s trivial in the ARIN region. Other regions are YMMV. > I mean: "You can only request IPv6 assignments and Autonomous System > Numbers through a Sponsoring LIR (a RIPE NCC member)" > https://www.ripe.net/manage-ips-and-asns/resource-management/number-resourc… I would suggest trying to work through the RIPE PDWG to get that policy changed if you feel it is a hinderance to your deployment. I do know that RIPE has this (rather silly IMHO) process for keeping PI end users at arms length, but as I understand it, it’s also not very hard to find an LIR that will charge you a fee to acquire the addresses and pass them along to you. > But you know, my knowledge on the matter is half an hour old, I might be > dead wrong. I think you’re right, but my understanding is that it is fairly trivial to comply with that requirement. I’ll be surprised if some LIRs don’t contact you as a result of this email. Owen

2 1