November 2019 - Test - lists.nanog.org

Iran cuts 95% of Internet traffic
by Sean Donelan 21 Nov '19

21 Nov '19

Its very practical for a country to cut 95%+ of its Internet connectivity. Its not a complete cut-off, there is some limited connectivity. But for most ordinary individuals, their communication channels are cut-off. https://twitter.com/netblocks/status/1196366347938271232

4 4

Re: Iran cuts 95% of Internet traffic
by Scott Weeks 21 Nov '19

21 Nov '19

--- eric.kuhnke(a)gmail.com wrote: From: Eric Kuhnke <eric.kuhnke(a)gmail.com> The vast majority of Iranian ISPs' international transit connectivity is through AS12880 DCI , which is a government run telecom authority. Google "AS12880 DCI Iran" for more info. DCI is also responsible for layer 2 transport and DWDM services for smaller downstream ISPs, on other international terrestrial fiber links, which are opaque to us NANOG list people from the perspective of global v4/v6 routing table/prefix announcement analysis. --------------------------------------------- Quoting a journalist, so.... https://www.theguardian.com/world/2019/nov/21/irans-digital-shutdown-other-… First quote out of order from the article: "Internet penetration and complexity has vastly grown in Iran over the past decade, but the country’s users still connect to the global network through just two gateways. Both are controlled by the regime, and can be blocked when it chooses." <There's the problem. My company alone has more than two...> "Access to the internet is gradually being restored in Iran after an unprecedented five-day shutdown that cut its population off from the rest of the world and suppressed news of the deadliest unrest since the country’s 1979 revolution." "The internet-freedom group Access Now recorded 75 internet outages in 2016, which more than doubled to 196 last year." "Iranians were cut off from the global internet, but internally, networks appeared to be functioning relatively normally." "the Iranian government has been working to develop the so-called “halal net”, a closed-off version of the internet similar to China’s “great firewall”. Iran has been pressuring businesses to shift their operations inside the country on to what it calls the National Information Network, which now boasts its own banking platforms, industrial services and messaging apps – ones that activists believe are closely surveilled by authorities." <RFC 1984> "The Trump sanctions have actually made it easier for Iran to seal its citizens off from the global internet ... Many Iranian tech firms have been left with no option but to use the Islamic Republic’s internal network and infrastructure instead." (reordered quote) "The last time Iran attempted to choke off access, during unrest in January 2018, it was forced to open connections again after just 30 minutes, Rashidi says. “It was a disaster,” he says. “Nothing was working: all the government offices, hospitals, financial services were gone ... they’ve discovered a lot of things do need access to the outside world” This time, it appears to have gone more smoothly: two sources able to monitor internet traffic inside Iran confirmed to the Guardian there was no significant disruption, indicating hospitals, financial software and even ride-sharing apps were still able to function, even as Iranians were unable to connect to websites such as Google." "Other authoritarian governments are pursuing a similar path. This month, Russia implemented a new law requiring ISPs to install equipment better able to identify the source of web traffic, as part of a strategy to one day be able to completely re-route the Russian internet through state-controlled data points." <RFC 1984> :) “Regimes around the world will be watching very closely both the public response and the response of the international community,” he says. “If it turns out this is feasible to implement, they will see there is no political cost.” scott

2 1

Google NOC contact for public APIs? (GeoIP issues with googleapis.com)
by Neil Hanlon 21 Nov '19

21 Nov '19

Having a bit of a weird issue where traffic from one of our data centers looks to be getting a response for googleapis.com which is in Malaysia, despite the data center being in northeast USA--assuming I'm reading the reverse DNS on the IP addresses right (228.27.217.172.in-addr.arpa domain name pointer kul09s01-in-f4.1e100.net.) Our other data centers seem to get OK DNS responses, not exactly "perfect" (Switzerland gets some "waw" (warsaw?) node when there appear to be "zrh" nodes it could get), but this response in our us-northeast facility has a 300ms+ RTT and is causing performance issues in our application. Does anyone have a contact at Google, or if someone at Google could contact me off-list, I'd appreciate it. --Neil

1 0

Fastly Peering Contact
by Chad Sorrell 21 Nov '19

21 Nov '19

Anyone have a contact at Fastly they could send me offline? I've been trying to get something established since March and I haven't heard anything at all. I'm concerned maybe my email isn't reaching anyone. Thanks -- Chad Sorrell Network Architect Intelligent Fiber Network

2 2

Re: Hulu thinks all my IP addresses are "business class", how to reach them?
by tim＠pelican.org 21 Nov '19

21 Nov '19

On Thursday, 21 November, 2019 12:00, "Rob Seastrom" <rs(a)seastrom.com> said: >> On Nov 21, 2019, at 05:33, "tim(a)pelican.org" <tim(a)pelican.org> wrote: >> >> Or am I woefully naive, and it's actually trivial for a non-US resident to come >> up with a US credit card and billing address to pay for the service? > > It’s a thing. Need a US address but fairly straightforward. Ask your > favorite border hopping Canadian. > Fair enough - thanks for the info. These days, you have to show up in person at a branch with a passport to open almost any kind of bank account here, following a money-laundering crackdown, so I was assuming it ought to be a sufficiently-strong check to satisfy rights-holders. Regards, Tim.

1 0

Level(3) DNS Spoofing All Domains
by Marshall, Quincy 19 Nov '19

19 Nov '19

This is mostly informational and may have already hit this group. My google-foo failed me if so. I discovered that the CenturyLink/Level(3) public DNS (4.2.2.2, etc) are spoofing all domains. If the hostname begins with a "w" and does not exist in the authoritative zone these hosts will return two Akamai hosts. [root@localhost ~]# dig +short w3.dummydomaindoesntexist.gov @4.2.2.2 23.202.231.167 23.217.138.108 [root@localhost ~]# dig +short w3.dummydomaindoesntexist.net @4.2.2.2 23.202.231.167 23.217.138.108 [root@localhost ~]# dig +short w3.dummydomaindoesntexist.com @4.2.2.2 23.202.231.167 23.217.138.108 [root@localhost ~]# dig +short w3.dummydomaindoesntexist.org @4.2.2.2 23.202.231.167 23.217.138.108 My apologies if this is old news. Lawrence Q. Marshall --------------------------------------------------------------------------------------- This email has been scanned for email related threats and delivered safely by Mimecast. For more information please visit http://www.mimecast.com ---------------------------------------------------------------------------------------

12 15

Twitter Peering Contact
by Louis D 19 Nov '19

19 Nov '19

Hello Nanog, Does anyone here know a contact for Twitters peering group that is not from Peeringdb? I have been having issues the last several days first not receiving any routes and now the session failing. This is over the NYIIX peering if that helps at all. Any information is appreciated. Thank you, Louis D

1 0

AT&T Security Contact
by Robert Webb 19 Nov '19

19 Nov '19

Apologies for the off topic email but I am trying to get in touch with someone at AT&T Security who has a clue. Received three text messages on my Verizon Wireless phone from my wife's number which were from AT&T with links to someone's tech visit ticket which gave me access to their services and tech appointment. Thanks..

1 0

Dell OS10 switches
by Dmitry Sherman 19 Nov '19

19 Nov '19

Hello, Any recommendations about Dell S4200 switches with their OS10 Cisco like OS? Pricing is very attractive. They claim to support 1.5M bgp routes. Anyone has any experience with Dell’s switches? Can I rely on them in production network? Thanks Best regards, Dmitry Sherman [X]

1 0

south bay ops channel
by Randy Bush 19 Nov '19

19 Nov '19

dear lazynet. is there a list, irc, slack, ... for ops in the southern bay area? need to find/discuss colo, hands, brains, ... thanks. randy

2 2