July 2018 - Test - lists.nanog.org

Arista Backbone MPLS TE
by Alan Hannan 30 Jul '18

30 Jul '18

I'm interested in talking with folks who are using Arista for Backbone MPLS TE. Please contact me privately. Thanks! -- Alan Hannan 408-692-5268

1 0

Re: SP security knowledge build up
by Ramy Hashish 30 Jul '18

30 Jul '18

First, please learn how to properly quote/cite email messages in a mailing > list discussion thread. > Sure I will, thank you for highlighting this. > Second, you've been given plenty of pointers already. If you lack the > initiative to follow up on those, read the curricula, take note of the > textbooks used in particular classes, etc., then you probably lack the > intiative to be successful in this endeavor. > > No, you assumption is wrong.

1 0

Weekly Routing Table Report
by cscora＠apnic.net 27 Jul '18

27 Jul '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 28 Jul, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 707831 Prefixes after maximum aggregation (per Origin AS): 271940 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 339769 Total ASes present in the Internet Routing Table: 61314 Prefixes per ASN: 11.54 Origin-only ASes present in the Internet Routing Table: 52960 Origin ASes announcing only one prefix: 23085 Transit ASes present in the Internet Routing Table: 8354 Transit-only ASes present in the Internet Routing Table: 267 Average AS path length visible in the Internet Routing Table: 4.0 Max AS path length visible: 34 Max AS path prepend of ASN ( 30873) 32 Prefixes from unregistered ASNs in the Routing Table: 55 Number of instances of unregistered ASNs: 55 Number of 32-bit ASNs allocated by the RIRs: 23460 Number of 32-bit ASNs visible in the Routing Table: 18868 Prefixes from 32-bit ASNs in the Routing Table: 78889 Number of bogon 32-bit ASNs visible in the Routing Table: 22 Special use prefixes present in the Routing Table: 2 Prefixes being announced from unallocated address space: 282 Number of addresses announced to Internet: 2857289283 Equivalent to 170 /8s, 78 /16s and 198 /24s Percentage of available address space announced: 77.2 Percentage of allocated address space announced: 77.2 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.0 Total number of prefixes smaller than registry allocations: 235856 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 193185 Total APNIC prefixes after maximum aggregation: 54926 APNIC Deaggregation factor: 3.52 Prefixes being announced from the APNIC address blocks: 191556 Unique aggregates announced from the APNIC address blocks: 78618 APNIC Region origin ASes present in the Internet Routing Table: 8971 APNIC Prefixes per ASN: 21.35 APNIC Region origin ASes announcing only one prefix: 2518 APNIC Region transit ASes present in the Internet Routing Table: 1338 Average APNIC Region AS path length visible: 4.0 Max APNIC Region AS path length visible: 29 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3922 Number of APNIC addresses announced to Internet: 767760130 Equivalent to 45 /8s, 195 /16s and 23 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 210288 Total ARIN prefixes after maximum aggregation: 100019 ARIN Deaggregation factor: 2.10 Prefixes being announced from the ARIN address blocks: 210480 Unique aggregates announced from the ARIN address blocks: 99420 ARIN Region origin ASes present in the Internet Routing Table: 18191 ARIN Prefixes per ASN: 11.57 ARIN Region origin ASes announcing only one prefix: 6721 ARIN Region transit ASes present in the Internet Routing Table: 1807 Average ARIN Region AS path length visible: 3.6 Max ARIN Region AS path length visible: 22 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2385 Number of ARIN addresses announced to Internet: 1102770848 Equivalent to 65 /8s, 186 /16s and 242 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 193768 Total RIPE prefixes after maximum aggregation: 92607 RIPE Deaggregation factor: 2.09 Prefixes being announced from the RIPE address blocks: 189917 Unique aggregates announced from the RIPE address blocks: 112763 RIPE Region origin ASes present in the Internet Routing Table: 25326 RIPE Prefixes per ASN: 7.50 RIPE Region origin ASes announcing only one prefix: 11415 RIPE Region transit ASes present in the Internet Routing Table: 3503 Average RIPE Region AS path length visible: 4.1 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7216 Number of RIPE addresses announced to Internet: 714010240 Equivalent to 42 /8s, 142 /16s and 238 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 91315 Total LACNIC prefixes after maximum aggregation: 20268 LACNIC Deaggregation factor: 4.51 Prefixes being announced from the LACNIC address blocks: 92744 Unique aggregates announced from the LACNIC address blocks: 40795 LACNIC Region origin ASes present in the Internet Routing Table: 7348 LACNIC Prefixes per ASN: 12.62 LACNIC Region origin ASes announcing only one prefix: 2032 LACNIC Region transit ASes present in the Internet Routing Table: 1379 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 34 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 4891 Number of LACNIC addresses announced to Internet: 172285216 Equivalent to 10 /8s, 68 /16s and 221 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 19219 Total AfriNIC prefixes after maximum aggregation: 4076 AfriNIC Deaggregation factor: 4.72 Prefixes being announced from the AfriNIC address blocks: 22852 Unique aggregates announced from the AfriNIC address blocks: 7926 AfriNIC Region origin ASes present in the Internet Routing Table: 1183 AfriNIC Prefixes per ASN: 19.32 AfriNIC Region origin ASes announcing only one prefix: 399 AfriNIC Region transit ASes present in the Internet Routing Table: 236 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 25 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 454 Number of AfriNIC addresses announced to Internet: 100013568 Equivalent to 5 /8s, 246 /16s and 22 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 4692 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4364 467 460 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 2966 1153 83 VIETEL-AS-AP Viettel Group, VN 4766 2863 11135 765 KIXS-AS-KR Korea Telecom, KR 9829 2813 1497 543 BSNL-NIB National Internet Backbone, IN 45899 2657 1637 110 VNPT-AS-VN VNPT Corp, VN 9394 2542 4907 31 CTTNET China TieTong Telecommunications 17974 2260 930 71 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9808 2238 8699 26 CMNET-GD Guangdong Mobile Communication 4755 2112 417 205 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3433 1324 82 SHAW - Shaw Communications Inc., CA 22773 3272 2968 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 11492 2541 244 475 CABLEONE - CABLE ONE, INC., US 16509 2250 4790 759 AMAZON-02 - Amazon.com, Inc., US 18566 2167 405 109 MEGAPATH5-US - MegaPath Corporation, US 20115 2118 2616 480 CHARTER-NET-HKY-NC - Charter Communicat 16625 2014 1033 1440 AKAMAI-AS - Akamai Technologies, Inc., 30036 2013 344 148 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 209 1996 5071 607 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 7018 1746 20200 1263 ATT-INTERNET4 - AT&T Services, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 4614 1610 122 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 20940 2540 624 1886 AKAMAI-ASN1, US 8551 2523 378 44 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2043 1891 731 ROSTELECOM-AS, RU 34984 2008 335 500 TELLCOM-AS, TR 9121 1865 1692 19 TTNET, TR 13188 1604 100 43 TRIOLAN, UA 6849 1241 355 21 UKRTELNET, UA 8402 1203 544 14 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5155 3346 605 Uninet S.A. de C.V., MX 10620 3533 538 320 Telmex Colombia S.A., CO 11830 2656 369 78 Instituto Costarricense de Electricidad 6503 1670 444 64 Axtel, S.A.B. de C.V., MX 7303 1507 1026 188 Telecom Argentina S.A., AR 28573 1039 2248 184 CLARO S.A., BR 3816 1024 508 130 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 931 377 31 Telefonica del Peru S.A.A., PE 11172 922 126 85 Alestra, S. de R.L. de C.V., MX 18881 913 1078 30 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1166 396 48 LINKdotNET-AS, EG 37611 888 107 9 Afrihost, ZA 36903 778 391 137 MT-MPLS, MA 36992 742 1411 40 ETISALAT-MISR, EG 8452 641 1730 18 TE-AS TE-AS, EG 24835 635 818 18 RAYA-AS, EG 37492 473 470 57 ORANGE-, TN 29571 458 68 12 ORANGE-COTE-IVOIRE, CI 37342 386 32 1 MOVITEL, MZ 23889 378 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5155 3346 605 Uninet S.A. de C.V., MX 4538 4692 4192 74 ERX-CERNET-BKB China Education and Rese 12479 4614 1610 122 UNI2-AS, ES 7545 4364 467 460 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 203 20 ALJAWWALSTC-AS, SA 10620 3533 538 320 Telmex Colombia S.A., CO 6327 3433 1324 82 SHAW - Shaw Communications Inc., CA 22773 3272 2968 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 7552 2966 1153 83 VIETEL-AS-AP Viettel Group, VN 4766 2863 11135 765 KIXS-AS-KR Korea Telecom, KR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4538 4692 4618 ERX-CERNET-BKB China Education and Research Net 12479 4614 4492 UNI2-AS, ES 7545 4364 3904 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3433 3351 SHAW - Shaw Communications Inc., CA 10620 3533 3213 Telmex Colombia S.A., CO 22773 3272 3123 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 7552 2966 2883 VIETEL-AS-AP Viettel Group, VN 11830 2656 2578 Instituto Costarricense de Electricidad y Telec 45899 2657 2547 VNPT-AS-VN VNPT Corp, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 64500 DOCUMENT 45.43.56.0/24 135391 AOFEI-HK AOFEI DATA INTERNATIO 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 4200015017 PRIVATE 47.74.136.0/24 45102 CNNIC-ALIBABA-CN-NET-AP Alibab 4200015017 PRIVATE 47.74.161.0/24 45102 CNNIC-ALIBABA-CN-NET-AP Alibab 4200015017 PRIVATE 47.74.203.0/24 45102 CNNIC-ALIBABA-CN-NET-AP Alibab 4200015017 PRIVATE 47.88.147.0/24 45102 CNNIC-ALIBABA-CN-NET-AP Alibab 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 65537 DOCUMENT 62.162.120.0/24 6821 MT-AS-OWN bul. Orce Nikolov bb Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.66.224.0/19 209 CENTURYLINK-US-LEGACY-QWEST - Qwest Communicati 198.18.1.19/32 7497 CSTNET-AS-AP Computer Network Information Cente Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.136.0/24 37500 -Reserved AS-, ZZ 41.76.138.0/24 37500 -Reserved AS-, ZZ 41.76.139.0/24 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ 43.251.20.0/22 9381 WTT-AS-AP WTT HK Limited, HK 43.251.84.0/22 133676 PNPL-AS Precious netcom pvt ltd, IN Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:36 /11:99 /12:291 /13:570 /14:1096 /15:1897 /16:13374 /17:7948 /18:13788 /19:25370 /20:39367 /21:45769 /22:87770 /23:71416 /24:396848 /25:803 /26:606 /27:626 /28:35 /29:20 /30:19 /31:4 /32:54 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 3355 4614 UNI2-AS, ES 6327 3220 3433 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 22773 2534 3272 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 18566 2060 2167 MEGAPATH5-US - MegaPath Corporation, US 11830 2004 2656 Instituto Costarricense de Electricidad y Telec 8551 1985 2523 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 1963 2541 CABLEONE - CABLE ONE, INC., US 30036 1765 2013 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1601 3533 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1613 2:825 4:18 5:2832 6:41 7:1 8:1123 12:1874 13:207 14:1767 15:30 16:3 17:188 18:54 20:50 23:2458 24:2202 25:2 27:2478 31:2033 32:85 35:27 36:508 37:2876 38:1490 39:247 40:122 41:3126 42:692 43:1965 44:121 45:5105 46:3092 47:204 49:1330 50:1054 51:317 52:1071 54:370 55:4 56:12 57:39 58:1619 59:993 60:401 61:2112 62:1867 63:1799 64:5048 65:2201 66:4657 67:2429 68:1166 69:3274 70:1155 71:580 72:2150 74:2713 75:419 76:461 77:1571 78:1700 79:1820 80:1533 81:1389 82:1073 83:787 84:1070 85:2004 86:564 87:1352 88:923 89:2350 90:214 91:6424 92:1253 93:2371 94:2391 95:2924 96:774 97:358 98:935 99:133 100:85 101:1234 102:170 103:18260 104:3590 105:217 106:746 107:1789 108:695 109:3173 110:1630 111:1772 112:1314 113:1293 114:1135 115:1653 116:1638 117:1767 118:2207 119:1669 120:1006 121:1061 122:2474 123:1760 124:1447 125:1920 128:1084 129:666 130:489 131:1643 132:712 133:195 134:1018 135:231 136:504 137:650 138:1925 139:663 140:477 141:735 142:805 143:1012 144:805 145:486 146:1204 147:742 148:1642 149:752 150:741 151:1098 152:816 153:320 154:1457 155:798 156:1182 157:797 158:654 159:1778 160:1266 161:799 162:2587 163:609 164:1063 165:1524 166:458 167:1307 168:3121 169:827 170:3796 171:492 172:1006 173:1991 174:905 175:761 176:2007 177:4025 178:2542 179:1240 180:2174 181:2380 182:2395 183:1239 184:1030 185:13841 186:3568 187:2398 188:2883 189:2012 190:8183 191:1371 192:9801 193:6095 194:4913 195:3976 196:2657 197:1608 198:5562 199:5903 200:7338 201:4971 202:10218 203:10254 204:4575 205:2902 206:3174 207:3199 208:3975 209:3989 210:3887 211:1977 212:3016 213:2810 214:1050 215:57 216:6041 217:2129 218:856 219:584 220:1806 221:994 222:973 223:1359 End of report

1 0

Rising sea levels are going to mess with the internet
by Sean Donelan 27 Jul '18

27 Jul '18

https://www.popsci.com/sea-level-rise-internet-infrastructure Rising sea levels are going to mess with the internet, sooner than you think [...] Despite its magnitude, this network is increasingly vulnerable to sea levels inching their way higher, according to research presented at an academic conference in Montreal this week. The findings estimate that within 15 years, thousands of miles of what should be land-bound cables in the United States will be submerged underwater. “Most of the climate change-related impacts are going to happen very soon,” says Paul Barford, a computer scientist at the University of Wisconsin and lead author of the paper. [...]

33 72

deploying RPKI based Origin Validation
by Job Snijders 26 Jul '18

26 Jul '18

Hi all, I wanted to share with you that a ton of activity is taking place in the Dutch networker community to deploy RPKI based BGP Origin Validation. The mantra is "invalid == reject" on all EBGP sessions. What's of note here is that we're now seeing the first commercial ISPs doing Origin Validation. This is a significant step forward compared to what we observed so far (it seemed OV was mostly limited to academic institutions & toy networks). But six months ago Amsio (https://www.amsio.com/en/) made the jump, and today Fusix deployed (https://fusix.nl/deploying-rpki/) We've also seen an uptake of Origin Validation at Internet Exchange route servers: AMS-IX and FranceIX have already deployed. I've read that RPKI OV is under consideration at a number of other exchanges. Other cool news is that Cloudflare launched a Certificate Transparency initiative to help keep everyone honest. Announcement at: https://twitter.com/grittygrease/status/1017224762542587907 Certificate Transparency is a fascinating tool, really a necessity to build confidence in any PKI systems. Anyone here working to deploy RPKI based Origin Validation in their network and reject invalid announcements? Anything of note to share? Kind regards, Job

12 37

Re: 2nd try: YANG daemeon for Linux
by Karl Jørn 26 Jul '18

26 Jul '18

Anyone ? Found this but i am not sure if this is going to go public or not : https://packetpushers.net/new-network-os-startup-arrcus-targets-whitebox-sw… Danke, Karl On Fri, Jul 20, 2018 at 12:30 PM, Karl Jørn <karljorn787(a)gmail.com> wrote: > Hi > > Is there a YANG daemeon for Linux ? If yes, can any one please share their > experiences ? > > Danke, > Karl >

1 0

Godaddy Contact needed for routing issue
by Erik Sundberg 26 Jul '18

26 Jul '18

Hello, Can someone from GoDaddy's routing team contact me off list. We have customer's unable to reach www.cat5cableguys.com<http://www.cat5cableguys.com> via the Equinix Chicago - Internet Exchange. #traceroute www.cat5cableguy.com Wed Jul 25 16:47:08.266 CDT Type escape sequence to abort. Tracing the route to 184.168.221.11 1 ge-0-0-0-8.ar1.chi1.us.nitelusa.net (207.200.195.173) 22 msec 21 msec 21 msec 2 eqix-ch.godaddy.com (208.115.136.141) 22 msec 22 msec 21 msec 3 * * * 4 * * * 5 * * * This website is reachable over other carrier's just not Equinix Chicago - Internet Exchange. Thanks Erik ________________________________ CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or previous e-mail messages attached to it may contain confidential information that is legally privileged. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. If you have received this transmission in error please notify the sender immediately by replying to this e-mail. You must destroy the original transmission and its attachments without reading or saving in any manner. Thank you.

2 1

Equinix SV8 Peering fabric flooded since 1:45PM PST
by Peter Kranz 25 Jul '18

25 Jul '18

Since around 1:45PM PST today we've been receiving a constant 10Gbps of flooding from the SV8 peering fabric. Traffic is not in the VLAN 6 peering VLAN so I haven't peeked at it. Anyone else seeing this at that exchange? Peter Kranz www.UnwiredLtd.com <http://www.unwiredltd.com/> Desk: 510-868-1614 x100 Mobile: 510-207-0000 pkranz(a)unwiredltd.com <mailto:pkranz@unwiredltd.com>

1 0

Re: using expect to log into devices
by Scott Weeks 25 Jul '18

25 Jul '18

--- valdis.kletnieks(a)vt.edu wrote: From: valdis.kletnieks(a)vt.edu On Sun, 22 Jul 2018 00:43:35 +0200, Niels Bakker said: > Fine as a personal exercise, of course. The inability to download > modules seems sadistic to me, though. And given the adage "Never create a rule you can't enforce", I wonder how they enforce it - have to be pretty hardcore to make sure that stuff doesn't get imported via USB or tethering off a cellphone. (Or more correctly, I know how they do those sort of things if you're a spook agency or doing classified research - how do you make it palatable to employees in corporate sites?) ------------------------------------------------- It's not corporate and believe me, they enforce it... ;-) scott

3 2

Finally some common sense - No to blocking DNS
by Jacques Latour 25 Jul '18

25 Jul '18

This is good news for the internet up here! It's unconstitutional to block DNS access!!! JF must be happy :) https://www.theglobeandmail.com/canada/article-court-rejects-quebecs-bid-to… Court rejects Quebec's bid to ban citizens' access to private online gaming sites THE CANADIAN PRESS PUBLISHED JULY 24, 2018UPDATED 18 HOURS AGO Quebec's attempt to ban its citizens' access to online gaming websites unauthorized by the state-run gambling corporation is unconstitutional because it infringes upon federal jurisdiction, indicated a recent Superior Court ruling.......

2 1