September 2018 - Test - lists.nanog.org

Arista Layer3
by Romeo Czumbil 09 Mar '19

09 Mar '19

So I've been using Arista as layer2 for quite some time, and I'm pretty happy with them. Kicking the idea around to turn on some Layer3 features but I've been hearing some negative feedback. The people that I did hear negative feedback don't use Arista themselves. (they just heard....) So do we have any Arista L3 people out here that can share some negatives or positives? Use case: Just some MPLS IPv4/IPv6 routing, l2vpn OSPF/BGP Maybe 20k routes (no full internet routes) 7050 Series 7280 Series -Romeo

20 33

adding graphs for actually unreachable RPKI INVALID prefixes to RPKI Monitor?
by nusenu 14 Feb '19

14 Feb '19

Dear NIST RPKI Monitor Team, thanks for creating and maintaining the RPKI Monitor https://rpki-monitor.antd.nist.gov/#rpki_adopters I've seen your graphs in multiple routing security presentations :) What do you think about adding graphs that show the amount of actually unreachable prefixes and IP space? (prefix where no alternative valid/unknown announcement exists) I think such graphs would help us focus on those prefixes that we should have to tackle first. This page contains examples of INVALID prefixes that would still be reachable in a route origin validating environment (see the RPKI validator screenshots): https://medium.com/@nusenu/towards-cleaning-up-rpki-invalids-d69b03ab8a8c kind regards, nusenu -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

5 8

CGNAT
by Ahmed Munaf 07 Feb '19

07 Feb '19

Hi, Any recommendation regarding CGNAT appliance who try it and which brand is the best from his perspective! The throughput which I want to pass through the CGNAT is about 40Gbits and number of subscribers are about 40,000 subscribers. Regards, Ahmed

10 13

IPv6 Residential Deployment Survey
by John Curran 24 Jan '19

24 Jan '19

NANOGers - If you are providing residential Internet service with IPv6 (or are a customer of same), please take a moment to complete Jordi’s survey - this will help provide insight into the actual technical practices being used in residential IPv6 deployment. More details in attached email - Thanks! /John Begin forwarded message: From: John Curran <jcurran(a)arin.net<mailto:jcurran@arin.net>> Subject: [arin-ppml] IPv6 Residential Deployment Survey Date: May 22, 2016 at 6:24:17 AM GMT+2 To: ARIN PPML <ppml(a)arin.net<mailto:ppml@arin.net>> Folks - Jordi Palet Martínez is conducting a brief survey regarding IPv6 deployment in residential Internet service. Having insight into the various practices that are in use may help to inform IPv6 number resource policy development, and thus I ask that you take a moment to complete the survey if you are providing such services (whether production or trial basis.) Jordi notes - "The results will be published and updated every month or so - No personal data will be published. (If you know your network, it takes less than 2 minutes to complete it) The survey can be responded even if is not yet a commercial service, and customers can also respond, not just the ISP. However, to avoid duplicate data, make sure to include the country and ISP name.” The IPv6 Residential Deployment Survey may be found here - <http://survey.consulintel.es/index.php/175122> Thanks! /John John Curran President and CEO ARIN

9 16

DirecTV Now Geolocation Contact
by Dan White 07 Dec '18

07 Dec '18

Are there any DirecTV Now contacts on-list? We are having geolocation trouble with a well established ip range. -- Dan White BTC Broadband Network Admin Lead Ph 918.366.0248 (direct) main: (918)366-8000 Fax 918.366.6610 email: dwhite(a)mybtc.com http://www.btcbroadband.com

4 3

netflix OCA in a CG-NAT world
by Tom Ammon 29 Nov '18

29 Nov '18

I'm looking to understand the impact of CG-NAT on a set of netflix OCAs, in an ISP environment. I see in Netflix's FAQ on the subject that traffic sourced from RFC 1918/6598 endpoints can't be delivered to the OCA. Is this simply a matter of deploying the OCA on the outside of the CGN layer? What are the other consequences of CGN upon the OCA? Tom -- ----------------------------------------------------------------------------- Tom Ammon M: (801) 784-2628 thomasammon(a)gmail.com -----------------------------------------------------------------------------

12 20

Hulu
by Mike Hammett 25 Oct '18

25 Oct '18

Could someone from Hulu reach out to me? My customers are getting the anonymous proxy page and I'm not sure why. They don't have any contact info in peeringdb and their ARIN whois looks more generic than useful (ipadmin@). ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com

2 2

ARIN RPKI TAL deployment issues
by Job Snijders 15 Oct '18

15 Oct '18

Dear NANOG, I'd like to draw attention to a very concerning development: it appears that the ARIN TAL is not as widely deployed as other RPKI TALs (such as RIPE or APNIC's TAL). This means that ARIN members are needlessly put at higher risk. Ben Cartwright-Cox performed RPKI research a few weeks ago where he compared the (un)reachability of RPKI Invalid announcements using ARIN, RPKI, APNIC and JPNIC space. The full write-up is available here: https://blog.benjojo.co.uk/post/are-bgps-security-features-working-yet-rpki I quote Ben's assessment: """Using the data, we can also see that the providers that have not downloaded the ARIN TAL. Either because they were not aware that they needed to, or could not agree to the agreement they have with it. This is frustrating to watch. Since it means that ROA signing ARIN prefixes will be less secure than ROA signing others, until these restrictions are abolished. Even after that it will have a long term knock on effect as software updates take a long time to propagate to end networks.""" In other words, when creating RPKI ROAs for your resources, ARIN members are getting *LESS* in return compared to say RIPE members. As ARIN member I'd hope and expect the ARIN organisation to go above and beyond to distribute their RPKI TAL as widely as possible. (Think: proactively submitting the ARIN TAL to relevant open source projects, making the TAL available for download without restrictions or limitations). At the NANOG 74 meeting David Whisnick will talk about legal barriers to RPKI adoption and he'll offer suggestions for reform. I think Ben's observation that the ARIN TAL is less widely deployed is a direct result from the legal barriers that David identified. https://pc.nanog.org/static/published/meetings//NANOG74/daily/day_2.html#ta… I fear that if no action is taken (e.g. when none of the RPKI Cache Validators can include the ARIN TAL in their software distribution [1]), we'll continue to see the gap between ARIN and the other RIRs widen. Software developers have indicated that the RPA is problematic and prevents BGP implementations from shipping "secure by default" software: https://lists.arin.net/pipermail/arin-consult/2018-April/001087.html When ARIN members create ROAs, I assume those members would also like networks *outside* the ARIN region to honor those ROAs and help prevent propagation of incorrect BGP announcements. The ARIN member and the operator of the foreign network may not even have any languages in common! I fear that limited deployment of the ARIN TAL is detrimental to the business interests of resource holders in the ARIN region. Kind regards, Job [1]: https://github.com/NLnetLabs/routinator/commit/b1e70746bb3768554fa439c5ced4…

19 53

Re: NANOG Security Track: Route Security
by Krassimir Tzvetanov 01 Oct '18

01 Oct '18

Hello Everyone, I wanted to attract your attention to the Security Track this coming NANOG. We'll be meeting on Tuesday morning and the line up looks like this: * Andre Toonk - examples of hijacks, other ideas * Alexander Azimov - State of BGP Security * David Wishnick - ARIN TAL * Job Snijders - Routing security roadmap * Chris Morrow - So I need to start filtering routes from peers...' and 'hey guess who needs to update their IRR data?' Time permitting at the end of the time slot we'll have a panel and time for duscussion as well. Regards, Krassi

9 9

Re: Puerto Rico Internet Exchange
by Nikos Mouat 29 Sep '18

29 Sep '18

Hi Mehmet - You mention the SIX so I figured I'd chime in on this thread, despite being an old one. We were in a similar situation in early 1997 - Seattle was a backwoods as far as internet infrastructure, with the nearest hub of activity being Mae-West / PAIX, and not a whole lot else in our neck of the woods. We had tried to build some momentum with a T1/Frame-relay based multi-point peering fabric which came online in early '96, but it never got past 5 or 6 participants and didn't get much traction with some providers in the region. We had talked about doing an ethernet based exchange in the Westin, and the University of Washington had started talking about building the SNNAP (Seattle Network to Network Access Point) which started up a mailing list in early '97, but it seemed to always be just over the horizon. (It eventually launched as the Pacific Northwest Gigapop, but not until much later, and focused on research and education orgs). When Chris and I were sitting together at Nanog 10, Bill Manning gave a couple presentations - "International Exchange Points: Growth & Trends" and "Large & Small Exchange Points: Advantages,Tradeoffs, Futures", and one of his key points was something along the lines of "any exchange point with 3 or more participants is a successful exchange point". This was ultimately the final nudge that was needed to convince us to start the peering point, and shortly after we got back from Tampa we threw a hub in on a port I was using for a private peering session and we were in business. We've grown a lot since then, certainly the emergence of Seattle as a key content market helped a lot, but I think you can draw some parallels. If you measure success as having three participants peering, and you find a way to get off the ground with minimal costs (or as in our case, none at all), it's easy to succeed in a not-for-profit model. My advice to you is to not worry about if any out of region folks are going to show up - find a space that folks operating in the region can get to easily, build something that is inexpensive to keep online, keep it simple, and get 3 participants. Once you're there - look for the 4th, and so on. Good luck, Nikos On Thu, 13 Sep 2018, Mehmet Akcin wrote: > It has been little over a year and we have been working on launching an > internet exchange in puerto rico but of course hurricane and other things > got in the way of achieving this. > > We now have identified what we believe the right location (most of the > isp’s have presence in this location) backbone/ip transit connectivity, > local team to provide onsite support. > > Having said that We have been engaged with several content delivery > networks, OTTs but general feedback was that Puerto Rico was not on their > radar for 2018 hence delayed launch. Now we are talking to same players > about 2019 but general answer seemed like people were satisfied enough to > serve Puerto Rico from Miami. > > Perhaps we are talking to really big CDNs, OTTs and we should engage > differently however the level of interest is very low and I really don’t > want to “build and they will come” again ;-) > > Bottom line is, if there was an IXP in Puerto Rico similar to ones in > Florida, I am trying to understand who would actually deploy (just speak to > your company only please) because most of my assumptions were proven wrong > ;-) > > I guess I want to ask two questions, given its location in caribbean, does > Puerto Rico need an internet exchange point? Would you join it?(it will be > a membership based IXP where members share cost) > > Mehmet > > On Sat, Aug 12, 2017 at 4:27 AM Mehmet Akcin <mehmet(a)akcin.net> wrote: > >> Hey there! >> >> ... ok this time I am not going to call it PRIX ;) well name doesn't >> matter really. Nearly 13 years ago I have attempted to start Puerto rico >> Internet exchange in San Juan. I have lived there over 5 years and i just >> wanted to really watch videos faster. The project somewhat died when i >> moved to LA but now there are few interested party to start an internet >> exchange in Puerto rico. The jsland historically had one of the slowest >> broadband/internet services which seemed to have improved in recent years >> however as of 2017 there still is not an IX in Puerto rico. >> >> We , 3-4 internet engineers (on island and remote) , want to look into >> relaunch of this IX and hopefully find a way to keep local traffic >> exchanged at high speeds and low cost. We need expertise, and people who >> want to help any way they can. >> >> We are trying to make this IX a not-for-profit one and we are looking at >> opeeating models to adapt which has worked incredibly well like Seattle IX. >> >> We are hoping the relaunch to happen sometime in 2018. Thanks in advance >> hope to share more info and traffic data sometime , soon. Watch this space! >> >> Mehmet >> > -- > Mehmet > +1-424-298-1903 >

1 0