October 2017 - Test - lists.nanog.org

Large amount of TCP resets today
by Zach Underwood 25 Oct '17

25 Oct '17

We are seeing a large number of tcp reset alerts today with a source AS of GOOGLE (15169), AMAZON-02 (16509), APPLE (714), APPLE-AUSTIN (6185), FACEBOOK (32934) and AKAMAI-ASN1 (20940). Does any one here know if something is going on like big os updates. -- Zach Underwood (RHCE,RHCSA,RHCT,UACA) My website <http://zachunderwood.me/> advance-networking.com

2 1

Google DNS intermittent ServFail for Disney subdomain
by David Sotnick 25 Oct '17

25 Oct '17

Hi Nanog, I am principal network engineer for sister-studio to Disney Studios. They have been struggling with DNS issues since Thursday 12th October. By all accounts it appears as though *some* of the Google DNS resolvers cannot reach the authoritative nameservers for "studio.disney.com". This is causing ~20-30% of all DNS requests against Google Public DNS 8.8.8.8 / 8.8.4.4 to fail for requests in this subdomain. The name servers reside in 153.7.233.0/24. Might someone be able to *connect me* with someone at Google to assist my poor colleagues who are banging their heads against a brick wall here. Thank you, David

15 16

[NANOG-announce] NANOG 72 CFP Open
by Ryan Woolley via NANOG-announce 24 Oct '17

24 Oct '17

This message has been wrapped due to the DMARC policy setting to prevent NANOG subscribers from being unsubscribed due to bounces. _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org https://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

Open-IX BCOP Committee Call for Volunteers
by Chris Grundemann 24 Oct '17

24 Oct '17

Pardon the interruption. There is a new effort underway to ensure that BCOP has a home in North America and your help is needed. Following the publication of the Open-IX Document Development Policy (OIX DDP) and the formation of the Best Current Operational Practices committee (BCOP) <http://www.open-ix.org/cpages/bcop-committee>, the Open-IX Board of Directors is now seeking volunteers to take on this valuable work. Open-IX Best Current Operational Practices (BCOP) Committee members are expected to seek out subject matter experts and encourage the documentation of BCOPs from the global network engineering community. This is typically done through activity on mailing lists, conversations at industry events, and leveraging personal relationships. Committee members are further expected to shepherd appropriate documents through the process from Appeal to published BCOP, including updates to existing documents as needed. If you share a passion for sharing knowledge, increasing the resiliency and efficiency of the global internet infrastructure, and have a few hours a month to dedicate to this effort, we encourage you to volunteer! Please send your name, email address, and a brief statement of interest to cgrundemann <at> open-ix.org. While we continuously seek new voices for all committees, this call is expected to close on 31 October, 2017. Please submit before that time to be considered for an immediate opening on the BCOP committee. Thank you, ~Chris

1 1

Chinese websites loading slower recently?
by Simon Lockhart 24 Oct '17

24 Oct '17

All, I know that access to Chinese websites from outside China is notorious for being slow or broken, but we seem to have had a major increase in support calls from our users over the last couple of weeks, complaining of slow or no access to major Chinese websites, such as www.baidu.com, www.youku.com and world.taobao.com. We can't find anything on our network that would be affecting this, and at various times can (and cannot!) reproduce it with off-net connections, which would indicate that it's an intermittent, but widespread issue. Is anyone else seeing an increase in problems related to Chinese websites? Thanks in advance, Simon

4 3

Re: AS-Path - ORF Draft
by Jakob Heitz (jheitz) 24 Oct '17

24 Oct '17

Even though the limit is applied before policy, the dropped prefixes don't count towards the limit. You can have a limit of 100 and receive 1000. If you drop 901 post policy, it will not kill the session, even when the limit is applied before policy. Thanks, Jakob. > Date: Sun, 22 Oct 2017 17:37:52 -0500 (CDT) > From: Mike Hammett <nanog(a)ics-il.net> > Their device goes through prefix limit before prefix filter, so their filters wouldn't even see the advertisements as the prefix limit already killed the session. Raise the prefix limit so that the filters can get to work and now you're vulnerable to someone else injecting a ton of routes and melting their router. >

1 0

facebook fna
by Aaron Gould 24 Oct '17

24 Oct '17

How long is typical for the newly installed fna server cache to stay in "testing" phase before moving to "in production" ? I've been watching ~100 mbps sustained towards mine since 6 p.m. last night and it's in "testing" mode according to the fna partner portal. .so I'm looking forward to it moving to production and wanted to know how long does it usually take? -Aaron

2 2

Fwd: [apops] APRICOT 2018 Call for Presentations
by Mark Tinka 24 Oct '17

24 Oct '17

Greetings - FYI. Mark. -------- Forwarded Message -------- Subject: [apops] APRICOT 2018 Call for Presentations Date: Thu, 12 Oct 2017 20:27:00 +1000 From: Philip Smith <pfsinoz(a)gmail.com> To: apops(a)apops.net Hi everyone, The call for presentations for APRICOT 2018 has now been published - a copy is below FYI. philip -- Asia Pacific Regional Internet Conference on Operational Technologies (APRICOT) 25th - 28th February 2018, Kathmandu, Nepal https://2018.apricot.net CALL FOR PAPERS =============== The APRICOT 2018 Programme Committee is now seeking contributions for Presentations and Tutorials for the APRICOT 2018 Conference. We are looking for presenters who would: - Offer a technical tutorial on an appropriate topic; - Participate in the technical conference sessions as a speaker; - Convene and chair panel sessions of relevant topics. Please submit on-line at: http://papers.apricot.net/user/login.php?event=63 CONFERENCE MILESTONES --------------------- Call for Papers Opens: Now Draft Program Published: As Papers Confirmed Final Deadline for Submissions: 26 January 2018 Final Program Published: 2 February 2018 Final Slides Received: 16 February 2018 *NOTE THAT REGARDLESS OF DEADLINES, SLOTS ARE FILLED ON A FIRST COME, FIRST SERVED BASIS* PROGRAMME MATERIAL ------------------ The APRICOT Conference Programme consists of three parts, these being the Peering Forum, Tutorials, and Conference Tracks. Topics proposed must be relevant to Internet Operations and Technologies: - IPv4 / IPv6 Routing and Operations - IPv6 deployment and transition technologies - Internet backbone operations - ISP and Carrier services - IXPs and Peering - Research on Internet Operations and Deployment - Software Defined Networking / Network Function Virtualisaton - Network security issues (NSP-SEC, DDoS, Anti-Spam, Anti-Malware) - DNS / DNSSEC - Internet policy (Security, Regulation, Content Management, Addressing, etc) - Access and Transport Technologies, including Cable/DSL, LTE/5G, wireless, metro ethernet, fibre, segment routing - Content & Service Delivery (Multicast, Voice, Video, "telepresence", Gaming) and Cloud Computing CfP SUBMISSION -------------- Draft slides for both tutorials and conference sessions MUST be provided with CfP submissions otherwise the Programme Committee will be unable to review the submission. For avoidance of doubt this means that submissions which do not include slides will be rejected immediately. For work in progress, the most current information available at time of submission is acceptable. All draft and complete slides must be submitted in PDF format only. Final slides are to be provided by the specified deadline for publication on the APRICOT website. Prospective presenters should note that the majority of speaking slots will be filled well before the final submission deadline. The PC may, at their discretion, retain a limited number of slots up to the final submission deadline for presentations that are exceptionally timely, important, or of critical operational importance. Every year we turn away submissions, due to filling up all available programme slots before the deadline. Presenters should endeavour to get material into the PC sooner rather than later. Any questions or concerns should be addressed to the Programme Committee by e-mail at: pc-chairs at apricot.net We look forward to receiving your presentation proposals. Mark Tinka, Jonny Martin & Philip Smith Co-Chairs, APRICOT 2018 Programme Committee -- _______________________________________________ apops mailing list apops(a)apops.net https://mailman.apnic.net/mailman/listinfo/apops Website: www.apops.net .

1 0

RE: AS-Path - ORF Draft
by Jakob Heitz (jheitz) 23 Oct '17

23 Oct '17

IOS-XR does not have a pre-policy prefix limit. When the limit is reached, the session will not automatically re-establish. It needs to be manually cleared first. It has the extra options: warning-only - does not drop the session. discard-extra-paths - additionally, drops prefixes after the limit is reached. restart <minutes> - automatically re-establish the session after the timeout. I agree with Job that the use of warning-only can lead to unexpected routing, because there is no control over which prefixes are dropped. This is a big hammer that only comes down when the other hammers don't work. Thanks, Jakob. ------------------------------ Date: Mon, 23 Oct 2017 06:57:19 -0400 From: Greg Hankins <ghankins(a)mindspring.com> To: Job Snijders <job(a)ntt.net> Cc: nanog(a)nanog.org Subject: Re: AS-Path - ORF Draft Message-ID: <20171023105719.GH27694(a)nokia.com> Content-Type: text/plain; charset=us-ascii Nokia SR OS defaults to pre-policy but can be configured to post-policy by adding "post-import". prefix-limit ipv4 100 // pre-policy prefix-limit ipv6 100 post-import // post-policy Greg -- Greg Hankins <ghankins(a)mindspring.com> -----Original Message----- Date: Mon, 23 Oct 2017 12:37:13 +0200 From: Job Snijders <job(a)ntt.net> To: nanog(a)nanog.org Subject: Re: AS-Path - ORF Draft On Mon, Oct 23, 2017 at 08:35:42AM +0200, Job Snijders wrote: > > or it could compare each additional prefix received to already learned > > prefixes and decide to drop one to make room for the new one. For > > example you could drop the most specific routes before less specific > > routes. > > The moment a BGP implementation can do such RIB compression, it may > indeed make sense to offer two types of limits: a 'pre-policy maximum > prefix limit' and a 'post-policy maximum prefix limit'. The former type > of limit would be useful in context of route leaks, the latter in > context of protecting against overflow of the FIB capability. Apparently this already exists and is widely available, Saku Ytti gave me some additional information. There are various keywords available, and they operate at different attachment points in the conceptual model. | IOS XR | Junos =============================================================== pre-policy keyword | ???? | prefix-limit --------------------+------------------+------------------------ post-policy keyword | maximum-prefix | accepted-prefix-limit (????? means the keyword does not exist) Now I wonder what Arista EOS, Nokia SR-OS, etc offer in this regard. :-) (screenshot here http://instituut.net/~job/screenshots/baf76f9c29a31d2e55454ddd.png for those of you who can't easily view ASCII tables) Kind regards, Job

1 0

AS-Path - ORF Draft
by Mike Hammett 23 Oct '17

23 Oct '17

https://tools.ietf.org/html/draft-ietf-idr-aspath-orf-13 Not knowing anything about the draft\RFC process (and not really wanting to go beyond a 30k foot view), is this something with movement? Traction? This would have solved a situation I encountered a week ago. ----- Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP

5 14