August 2018 - Test - lists.nanog.org

automatic rtbh trigger using flow data
by Aaron Gould 06 Sep '18

06 Sep '18

Hi, does anyone know how to use flow data to trigger a rtbh (remotely triggered blackhole) route using bgp ? .I'm thinking we could use quagga or a script of some sort to interact with a router to advertise to bgp the /32 host route of the victim under attack. Btw, I already have nfsen running and we receive real-time alters of various types of attacks, high volume, high ports, etc. and then we telnet into a cisco trigger router and drop a few lines of code into it and then bgp does the rest within seconds, the upstream providers learn of this route via communities and they rtbh it in their cloud, BUT, I would like my alerts to do this automatically. that would be very nice. Any guidance would be appreciated. -Aaron

11 37

Re: TekSavvy (Canada) contact
by Paul Stewart 01 Sep '18

01 Sep '18

Thnx all - already reached out Paul Get Outlook for iOS On Wed, Aug 29, 2018 at 6:05 PM -0400, "Mike Hammett" <nanog(a)ics-il.net> wrote: "Paul Stewart" <paul(a)paulstewart.org> He's on AFMUG too. ----- Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP From: "Eric Kuhnke" <eric.kuhnke(a)gmail.com> To: "nanog(a)nanog.org list" <nanog(a)nanog.org> Sent: Wednesday, August 29, 2018 4:48:48 PM Subject: TekSavvy (Canada) contact I'm looking for a clueful neteng point of contact at TekSavvy. Please contact me off-list. Thanks!

2 2

Weekly Routing Table Report
by cscora＠apnic.net 31 Aug '18

31 Aug '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 01 Sep, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 713837 Prefixes after maximum aggregation (per Origin AS): 273774 Deaggregation factor: 2.61 Unique aggregates announced (without unneeded subnets): 342471 Total ASes present in the Internet Routing Table: 61678 Prefixes per ASN: 11.57 Origin-only ASes present in the Internet Routing Table: 53258 Origin ASes announcing only one prefix: 23227 Transit ASes present in the Internet Routing Table: 8420 Transit-only ASes present in the Internet Routing Table: 263 Average AS path length visible in the Internet Routing Table: 4.0 Max AS path length visible: 34 Max AS path prepend of ASN ( 30873) 32 Prefixes from unregistered ASNs in the Routing Table: 59 Number of instances of unregistered ASNs: 59 Number of 32-bit ASNs allocated by the RIRs: 23898 Number of 32-bit ASNs visible in the Routing Table: 19283 Prefixes from 32-bit ASNs in the Routing Table: 80844 Number of bogon 32-bit ASNs visible in the Routing Table: 18 Special use prefixes present in the Routing Table: 2 Prefixes being announced from unallocated address space: 321 Number of addresses announced to Internet: 2855523908 Equivalent to 170 /8s, 51 /16s and 214 /24s Percentage of available address space announced: 77.1 Percentage of allocated address space announced: 77.1 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.0 Total number of prefixes smaller than registry allocations: 238618 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 194522 Total APNIC prefixes after maximum aggregation: 55387 APNIC Deaggregation factor: 3.51 Prefixes being announced from the APNIC address blocks: 192645 Unique aggregates announced from the APNIC address blocks: 79290 APNIC Region origin ASes present in the Internet Routing Table: 9034 APNIC Prefixes per ASN: 21.32 APNIC Region origin ASes announcing only one prefix: 2537 APNIC Region transit ASes present in the Internet Routing Table: 1348 Average APNIC Region AS path length visible: 4.0 Max APNIC Region AS path length visible: 26 Number of APNIC region 32-bit ASNs visible in the Routing Table: 4001 Number of APNIC addresses announced to Internet: 767494915 Equivalent to 45 /8s, 191 /16s and 11 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-139577 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 212189 Total ARIN prefixes after maximum aggregation: 100386 ARIN Deaggregation factor: 2.11 Prefixes being announced from the ARIN address blocks: 211909 Unique aggregates announced from the ARIN address blocks: 100560 ARIN Region origin ASes present in the Internet Routing Table: 18219 ARIN Prefixes per ASN: 11.63 ARIN Region origin ASes announcing only one prefix: 6756 ARIN Region transit ASes present in the Internet Routing Table: 1808 Average ARIN Region AS path length visible: 3.6 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2419 Number of ARIN addresses announced to Internet: 1101112992 Equivalent to 65 /8s, 161 /16s and 166 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 195173 Total RIPE prefixes after maximum aggregation: 93190 RIPE Deaggregation factor: 2.09 Prefixes being announced from the RIPE address blocks: 191486 Unique aggregates announced from the RIPE address blocks: 113483 RIPE Region origin ASes present in the Internet Routing Table: 25451 RIPE Prefixes per ASN: 7.52 RIPE Region origin ASes announcing only one prefix: 11469 RIPE Region transit ASes present in the Internet Routing Table: 3514 Average RIPE Region AS path length visible: 4.1 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7357 Number of RIPE addresses announced to Internet: 714109312 Equivalent to 42 /8s, 144 /16s and 113 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 92401 Total LACNIC prefixes after maximum aggregation: 20612 LACNIC Deaggregation factor: 4.48 Prefixes being announced from the LACNIC address blocks: 93809 Unique aggregates announced from the LACNIC address blocks: 40895 LACNIC Region origin ASes present in the Internet Routing Table: 7499 LACNIC Prefixes per ASN: 12.51 LACNIC Region origin ASes announcing only one prefix: 2072 LACNIC Region transit ASes present in the Internet Routing Table: 1417 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 26 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 5047 Number of LACNIC addresses announced to Internet: 172077344 Equivalent to 10 /8s, 65 /16s and 177 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 19492 Total AfriNIC prefixes after maximum aggregation: 4149 AfriNIC Deaggregation factor: 4.70 Prefixes being announced from the AfriNIC address blocks: 23667 Unique aggregates announced from the AfriNIC address blocks: 7969 AfriNIC Region origin ASes present in the Internet Routing Table: 1185 AfriNIC Prefixes per ASN: 19.97 AfriNIC Region origin ASes announcing only one prefix: 393 AfriNIC Region transit ASes present in the Internet Routing Table: 240 Average AfriNIC Region AS path length visible: 4.4 Max AfriNIC Region AS path length visible: 26 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 459 Number of AfriNIC addresses announced to Internet: 100272384 Equivalent to 5 /8s, 250 /16s and 9 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 4680 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4426 478 470 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 2986 1154 90 VIETEL-AS-AP Viettel Group, VN 4766 2825 11135 768 KIXS-AS-KR Korea Telecom, KR 9829 2813 1495 541 BSNL-NIB National Internet Backbone, IN 45899 2712 1646 158 VNPT-AS-VN VNPT Corp, VN 9394 2549 4907 32 CTTNET China TieTong Telecommunications 17974 2262 962 71 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9808 2255 8699 26 CMNET-GD Guangdong Mobile Communication 4755 2121 417 204 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3455 1324 83 SHAW - Shaw Communications Inc., CA 11492 3354 249 439 CABLEONE - CABLE ONE, INC., US 22773 3226 2970 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 16509 2279 4809 778 AMAZON-02 - Amazon.com, Inc., US 18566 2166 405 109 MEGAPATH5-US - MegaPath Corporation, US 20115 2146 2677 506 CHARTER-NET-HKY-NC - Charter Communicat 209 2042 5085 605 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 30036 2032 345 142 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 16625 2004 1051 1469 AKAMAI-AS - Akamai Technologies, Inc., 7018 1771 20199 1282 ATT-INTERNET4 - AT&T Services, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 4733 1613 125 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 3081 378 44 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2560 620 1900 AKAMAI-ASN1, US 12389 2043 1893 733 ROSTELECOM-AS, RU 34984 2008 335 510 TELLCOM-AS, TR 9121 1819 1692 19 TTNET, TR 13188 1604 100 43 TRIOLAN, UA 6849 1241 355 21 UKRTELNET, UA 8402 1210 544 14 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5208 3349 607 Uninet S.A. de C.V., MX 10620 3490 532 455 Telmex Colombia S.A., CO 11830 2652 369 78 Instituto Costarricense de Electricidad 6503 1675 444 65 Axtel, S.A.B. de C.V., MX 7303 1430 953 206 Telecom Argentina S.A., AR 28573 1094 2231 192 CLARO S.A., BR 3816 1022 510 116 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 928 126 84 Alestra, S. de R.L. de C.V., MX 18881 916 1082 27 TELEFÔNICA BRASIL S.A, BR 6147 884 377 31 Telefonica del Peru S.A.A., PE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1196 396 48 LINKdotNET-AS, EG 37611 896 107 9 Afrihost, ZA 36903 778 391 137 MT-MPLS, MA 36992 746 1411 41 ETISALAT-MISR, EG 24835 641 818 18 RAYA-AS, EG 8452 578 1728 14 TE-AS TE-AS, EG 37492 474 470 57 ORANGE-, TN 29571 461 70 11 ORANGE-COTE-IVOIRE, CI 37342 386 32 1 MOVITEL, MZ 23889 376 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5208 3349 607 Uninet S.A. de C.V., MX 12479 4733 1613 125 UNI2-AS, ES 4538 4680 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4426 478 470 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 203 20 ALJAWWALSTC-AS, SA 10620 3490 532 455 Telmex Colombia S.A., CO 6327 3455 1324 83 SHAW - Shaw Communications Inc., CA 11492 3354 249 439 CABLEONE - CABLE ONE, INC., US 22773 3226 2970 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 8551 3081 378 44 BEZEQ-INTERNATIONAL-AS Bezeqint Interne Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 4733 4608 UNI2-AS, ES 4538 4680 4606 ERX-CERNET-BKB China Education and Research Net 7545 4426 3956 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3455 3372 SHAW - Shaw Communications Inc., CA 22773 3226 3077 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 3081 3037 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 10620 3490 3035 Telmex Colombia S.A., CO 11492 3354 2915 CABLEONE - CABLE ONE, INC., US 7552 2986 2896 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 64500 DOCUMENT 45.43.56.0/24 135391 AOFEI-HK AOFEI DATA INTERNATIO 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 4200003000 PRIVATE 47.89.98.0/24 45102 CNNIC-ALIBABA-CN-NET-AP Alibab 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 65537 DOCUMENT 62.162.120.0/24 6821 MT-AS-OWN bul. Orce Nikolov bb 64121 UNALLOCATED 98.159.9.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64121 UNALLOCATED 98.159.12.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64140 UNALLOCATED 98.159.14.0/24 64121 UNKNOWN Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.66.224.0/19 209 CENTURYLINK-US-LEGACY-QWEST - Qwest Communicati 198.18.1.19/32 7497 CSTNET-AS-AP Computer Network Information Cente Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.136.0/24 37500 -Reserved AS-, ZZ 41.76.138.0/24 37500 -Reserved AS-, ZZ 41.76.139.0/24 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ 43.251.20.0/22 9381 WTT-AS-AP WTT HK Limited, HK 45.121.32.0/22 134356 UNKNOWN Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:36 /11:99 /12:292 /13:567 /14:1094 /15:1893 /16:13357 /17:7938 /18:13818 /19:25388 /20:39498 /21:45678 /22:88576 /23:72247 /24:401135 /25:814 /26:617 /27:634 /28:35 /29:20 /30:19 /31:4 /32:53 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 3485 4733 UNI2-AS, ES 6327 3244 3455 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 11492 2691 3354 CABLEONE - CABLE ONE, INC., US 8551 2543 3081 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 22773 2493 3226 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 18566 2060 2166 MEGAPATH5-US - MegaPath Corporation, US 11830 2001 2652 Instituto Costarricense de Electricidad y Telec 30036 1783 2032 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1581 3490 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1617 2:830 4:18 5:2832 6:43 7:1 8:1127 12:1873 13:210 14:1798 15:32 16:3 17:192 18:54 20:51 23:2455 24:2387 25:2 27:2493 31:1974 32:88 35:29 36:526 37:2904 38:1494 39:258 40:117 41:3201 42:705 43:1954 44:121 45:5447 46:3131 47:207 49:1341 50:1051 51:318 52:1088 54:368 55:1 56:11 57:38 58:1629 59:994 60:408 61:2116 62:1893 63:1790 64:5068 65:2205 66:4710 67:2669 68:1150 69:3341 70:1156 71:581 72:2215 74:2734 75:419 76:464 77:1642 78:1688 79:2255 80:1582 81:1399 82:1063 83:779 84:1034 85:2001 86:567 87:1349 88:908 89:2341 90:211 91:6424 92:1263 93:2380 94:2427 95:2961 96:935 97:355 98:925 99:135 100:86 101:989 102:192 103:18531 104:3527 105:216 106:771 107:1773 108:709 109:3316 110:1647 111:1794 112:1343 113:1304 114:1128 115:1616 116:1660 117:1776 118:2219 119:1656 120:1029 121:1041 122:2424 123:1729 124:1446 125:1923 128:1120 129:682 130:493 131:1653 132:730 133:191 134:1026 135:235 136:507 137:651 138:1926 139:680 140:479 141:741 142:847 143:1009 144:810 145:479 146:1241 147:738 148:1649 149:768 150:761 151:1101 152:828 153:323 154:1660 155:799 156:1441 157:801 158:660 159:1850 160:1324 161:825 162:2645 163:605 164:1083 165:1551 166:446 167:1208 168:3212 169:834 170:3875 171:491 172:1011 173:2096 174:983 175:795 176:2033 177:4024 178:2490 179:1283 180:2182 181:2419 182:2568 183:1248 184:1056 185:13986 186:3535 187:2470 188:2890 189:2041 190:8215 191:1358 192:9810 193:6119 194:5018 195:3988 196:2738 197:1613 198:5584 199:5931 200:7285 201:5005 202:10265 203:10285 204:4573 205:2892 206:3205 207:3210 208:3927 209:4074 210:3889 211:1997 212:3041 213:2817 214:1038 215:55 216:5999 217:2130 218:861 219:566 220:1811 221:997 222:974 223:1376 End of report

1 0

TekSavvy (Canada) contact
by Eric Kuhnke 29 Aug '18

29 Aug '18

I'm looking for a clueful neteng point of contact at TekSavvy. Please contact me off-list. Thanks!

1 0

Call for Participation -- ICANN DNSSEC Workshop at ICANN63 Barcelona, Spain
by Jacques Latour 29 Aug '18

29 Aug '18

Hi All! Call for Participation -- ICANN DNSSEC Workshop at ICANN63 Barcelona, Spain The DNSSEC Deployment Initiative and the Internet Society Deploy360 Programme, in cooperation with the ICANN Security and Stability Advisory Committee (SSAC), are planning a DNSSEC Workshop during the ICANN63 meeting held from 20-25 October 2018 in Barcelona, Spain. The DNSSEC Workshop has been a part of ICANN meetings for several years and has provided a forum for both experienced and new people to meet, present and discuss current and future DNSSEC deployments. For reference, the most recent session was held at the ICANN Policy Forum in Panama City, Panama on 25 June 2018. The presentations and transcripts are available at: https://62.schedule.icann.org/meetings/699560 [62.schedule.icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__62.schedule.icann.org_…>, and https://62.schedule.icann.org/meetings/699556 [62.schedule.icann.org]<https://urldefense.proofpoint.com/v2/url?u=https-3A__62.schedule.icann.org_…> At ICANN63 we are particularly interested in live demonstrations of uses of DNSSEC, DS automation or DANE. Examples might include: * DNSSEC automation and deployment using CDS, CDNSKEY, and CSYNC * DNSSEC/DANE validation in browsers and in applications * Secure email / email encryption using DNSSEC, OPENPGPKEY, or S/MIME * DNSSEC signing solutions and innovation (monitoring, managing, validation) * Tools for automating the generation of DNSSEC/DANE records * Extending DNSSEC/DANE with authentication, SSH, XMPP, SMTP, S/MIME or PGP/GPG and other protocols Our interest is to provide current examples of the state of development and to show real-world examples of how DNSSEC and DANE related innovation can be used to increase the overall security of the Internet. We are open to presentations and demonstrations related to any topic associated with DNSSEC and DANE. Examples of the types of topics we are seeking include: 1. DNSSEC Panel (Regional and Global) For this panel, we are seeking participation from those who have been involved in DNSSEC deployment in the region and also from those who have not deployed DNSSEC but who have a keen interest in the challenges and benefits of deployment. In particular, we will consider the following questions: Are you interested in reporting on DNSSEC validation of your ISPs? What can DNSSEC do for you? What doesn't it do? What are the internal tradeoffs to implementing DNSSEC? What did you learn in your deployment of DNSSEC? We are interested in presentations from both people involved with the signing of domains and people involved with the deployment of DNSSEC-validating DNS resolvers. 2. Post KSK Rollover Following the Root Key Rollover, we would like to bring together a panel of people who can talk about lessons learned from this KSK Rollover and lessons learned for the next time 3. DS Automation We are looking at innovative ways to automate the parent child synchronization CDS / CDNSKEY and methods to bootstrap new or existing domains. We are also interested in development or plans related to CSYNC, which are aimed at keeping the glue up to date. We would like to hear from DNS Operators what their current thoughts on CDS/CDNSKEY automation are. 3 DNSSEC/DANE Support in the browsers We would be interested in hearing from browser develop what their plans are in terms of supporting DNSSEC/DANE validation. 4. DANE Automation For DNSSEC to reach massive deployment levels it is clear that a higher level of automation is required than is currently available. There also is strong interest for DANE usage within web transactions as well as for securing email and Voice-over-IP (VoIP). We are seeking presentations on topics such as: * How can the industry use DANE and other DNSSEC applications as a mechanism for creating a more secure Internet? * What tools, systems and services are available to help automate DNSSEC key management? * Can you provide an analysis of current tools/services and identify gaps? * What are some of the new and innovative uses of DANE and other DNSSEC applications in new areas or industries? * What tools and services are now available that can support DANE usage? We would be particularly interested in any live demonstrations of DNSSEC / DANE application automation and services. Demonstrations of new tools that make the setup of DNSSEC or DANE more automated would also be welcome. If you are interested in participating, please send a brief (1-2 sentence) description of your proposed presentation to dnssec-barcelona(a)isoc.org<mailto:dnssec-barcelona@isoc.org>**07 September 2018 ** We hope that you can join us. Thank you, Jacques Latour On behalf of the DNSSEC Workshop Program Committee: Jean Robert Hountomey, AfricaCERT Jacques Latour, .CA Russ Mundy, Parsons Ondřej Filip, CZ.NIC Yoshiro Yoneya, JPRS Dan York, Internet Society Mark Elkins, DNS/ZACR dnssec-barcelona(a)isoc.org<mailto:dnssec-barcelona@isoc.org> <dnssec-barcelona(a)isoc.org<mailto:dnssec-barcelona@isoc.org>>

1 0

Vultr
by Mehmet Akcin 29 Aug '18

29 Aug '18

Hello Looking for a contact from Vultr. Any offlist intro would be appreciated. Thank you Mehmet -- Mehmet +1-424-298-1903

1 0

FCC: 2017 Atlantic Hurricane Season Impact on Communications
by Sean Donelan 29 Aug '18

29 Aug '18

The FCC has published a report "2017 Atlantic Hurricane Season Impact on CommunicationsReport and Recommendations." It is a bit excessive on the back-slapping about the FCC's leadership. No independent ISPs submitted comments to the Commission. Are there any independent ISPs left in Puerto Rico or U.S. Virgin Islands? https://docs.fcc.gov/public/attachments/DOC-353805A1.pdf Some highlights... V. LESSONS LEARNED AND NEXT STEPS 56. Based on information, analysis and feedback received by various stakeholders as well as the HRTF, the Commission presents the following lessons learned and next steps towards enhancing its disaster response and recovery efforts. A. Improvements to FCC’s Emergency Response and Recovery Efforts 57. DIRS Enhancements. 58. Wireless Resiliency Cooperative Framework. 60. Radio Frequency Survey Application. 61. Over-the-Air Information (OTA) Collection During Disasters. 62. Increase Engagement with Emergency Management Partners. 64. Efficient Communication in Languages Other Than English and In Additional Formats.

2 1

Subsea Cable Status Map Experiment Update
by Mehmet Akcin 28 Aug '18

28 Aug '18

Hello everyone, I wanted to send a quick follow up email regarding the subsea cable status map experiment which we have shared few months ago with NANOG community. More details can be found here. <https://mailman.nanog.org/pipermail/nanog/2018-June/096080.html> Nanog lighting talk can be accessed here. <https://www.youtube.com/watch?v=t5dzvZM0Hsk&feature=youtu.be&t=1311> Based on the feedback we have collected from many interested parties,engineers and operators we are taking an approach to work on providing a platform which will enable people to to submit their KML, CVS, or whatever format they prefer which will create maps based on this actual data as well as with some basic APIs we will be able to get NOCs of these submarine cable systems quickly able to update status of the cable and insert other information should a cut/disruption occurs. We will be building this subsea map from complete scratch and only based on the data shared by those who have access to the cables. Our intent is to have this map displayed in every NOC as a cool way to find status of subsea cables (and long term strategy might be to extend this to some long haul, and metro fibre - i know this is VERY hard but dreaming big here..). We are asking for your feedback here, what information would be useful besides cable availability? what is minimum needed for this map to be useful? What really doesn't matter? we are also working on overlaying this map with other maps, if you have suggestions, please share those privately with me (or to the all list). We've created a mailing list <https://groups.google.com/a/kapany.net/forum/#!forum/subsea> which you can join and share your ideas in more details. We are also seeking for help as I am mostly self organizing this project. If you have cycles to write code, and have experience with GIS, Openstreetmap and other mapping software, Python, and interested in contributing please let me know also off-list. thanks in advance, and I hope to have a working demo very soon. Mehmet

1 0

Re: FCC: 2017 Atlantic Hurricane Season Impact on Communications
by Sean Donelan 27 Aug '18

27 Aug '18

On Mon, 27 Aug 2018, Mike Hammett wrote: > There are dozens of independents on the islands. They probably didn't know > their comments were desired. The Commission is still looking for nominations for its disaster response and recovery working group. Any independent ISPs can nominate a representative.... https://docs.fcc.gov/public/attachments/DA-18-837A1.pdf The Federal Communications Commission (Commission) solicits nominations for membership on a new Disaster Response and Recovery Working Group of the Broadband Deployment Advisory Committee (BDAC). This new working group will assist the BDAC in providing advice and recommendations to the Commission on steps that can be taken to improve disaster preparation, response, and recovery for broadband infrastructure. Nominations for membership to the BDAC’s Disaster Response and Recovery Working Group should be submitted to the FCC no later than September 7, 2018.

1 0

Sprint Wireless
by Luke Guillory 27 Aug '18

27 Aug '18

Anyone from Sprint on here that can help or direct me to a contact that can help with trunk issues into a tandem? Running out of options trying to get them to sort of their issues for their customers. Thanks Luke Ns

1 0