March 2019 - Test - lists.nanog.org

Should Netflix and Hulu give you emergency alerts?
by Sean Donelan 13 Mar '19

13 Mar '19

https://www.cnn.com/2019/03/08/tech/emergency-alert-netflix-hulu-streaming/… New York (CNN Business) The federal emergency alert program was designed decades ago to interrupt your TV show or radio station and warn about impending danger — from severe weather events to acts of war. But people watch TV and listen to radio differently today. If a person is watching Netflix, listening to Spotify or playing a video game, for example, they might miss a critical emergency alert altogether. "More and more people are opting out of the traditional television services," said Gregory Touhill, a cybersecurity expert who served at the Department of Homeland security and was the first-ever Federal Chief Information Security Officer. "There's a huge population out there that needs to help us rethink how we do this." [...]

24 59

ICMPv6 "too-big" packets ignored (filtered ?) by Cloudflare farms
by Jean-Daniel Pauget 13 Mar '19

13 Mar '19

hello, I confess using IPv6 behind a 6in4 tunnel because the "Business-Class" service of the concerned operator doesn't handle IPv6 yet. as such, I realised that, as far as I can figure, ICMPv6 packet "too-big" (rfc 4443) seem to be ignored or filtered at ~60% of ClouFlare's http farms as a result, random sites such as http://nanog.org/ or https://www.ansible.com/ are badly reachable whenever small mtu are involved ... support@cloudflare answered me that because I'm not the owner of concerned site, and because of security reasons, they wouldn't investigate further. are there security concerns with ICMP-too-big ? regards, -- Jean-Daniel Pauget http://rezopole.net/ Rezopole/LyonIX +33 (0)4 27 46 00 50

19 38

Free Open Source Network Operating Systems
by Colton Conor 13 Mar '19

13 Mar '19

What free, opensouce, network operating systems currently exist that run on whitebox broadcom or other merchant silicon switches? I know Cumulus is very popular, but I don't believe they have a free version that runs on whitebox switches right? Only on a virtual machine from what I can tell. I think if one of these vendors would release a free and truly opensource network operating system, with the option for paid support if needed, then whitebox switching would really take off. This would be similar to the Redhat model, but for the networking world. Right now, the cost of the whitebox plus a paid network operating system seems to equal the same cost as a discounted Juniper, Cisco, or Arista. I am not seeing the savings on paper. If we could just buy the whitebox hardware, and have a free operating system on there, then financially whitebox switches would be half the cost of a similar Cisco switch after discount. Am I missing something?

8 9

Re: Should Netflix and Hulu give you emergency alerts?
by Scott Weeks 12 Mar '19

12 Mar '19

--- mike(a)mtcc.com wrote: From: Michael Thomas <mike(a)mtcc.com> But if you're about to be incinerated in real life -- Paradise -- you want the alert. -------------------------------------- So you can toss your children in the storm drain? http://www.hawaiinewsnow.com/story/37259815/biggest-fright-of-my-life-many-… "One video on social media showed an adult putting children into a storm drain; other social media images showed residents huddling in bathtubs." Or like me and this guy, just stay out in the ocean and watch it all happen... "We didn't know what to do except paddle [our surfboards] in and do as best we could. We debated whether we should just stay out" :) scott

3 2

GPS rollover
by Stephen Satchell 11 Mar '19

11 Mar '19

So far as I can tell with NTP, there was no issue with time sources becoming false-tickers, including my local GPS appliance. FWIW.

3 2

Experiences on Cable Advisory Commissions
by Howard C. Berkowitz 11 Mar '19

11 Mar '19

I've designed services for cable and other residential broadband, and evaluated vendor proposals for WAN services. Now, though, I have a new responsibility: being on the Cable Advisory Committee for my small Cape Cod town od Chatham, MA. We're the easternmost point on the continental US, have been around for 300 years, and even was the original Marconi transmitter site and a WWII SIGINT intercept base. We have, however, more Great White Sharks than technologists. The town has a blue-collar fishing population that is dwarfed by summer vacationers/summer home residents. Has anyone else been in such a civic role? Can we share experience? Its first role is evaluating performance of Comcast, the incumbent, and deciding whether to recommend renewal or make a preliminary denial. This gets into an overall "ascertainment of needs" requirements process, possibly for new features to be built into the renewed contract. There are other issues to examine, such as subscribers cutting the cable or getting other digital access. Since the municipality gets revenue from the franchise fees, this may mean a drop in funding for Public Access, Education, and Government video channels. While it's not within the original committee charter, we may well look at overall communications architecture, including municipal fiber and Wifi, cellular infrastructure, emergency communications, etc. -- Howard C. Berkowitz 95 George Ryder Rd. Chatham, MA 02633 sy(a)netcases.net (508)241-1362 cell (866)262-6579 fax

2 1

Re: Should Netflix and Hulu give you emergency alerts?
by Scott Weeks 10 Mar '19

10 Mar '19

--- beecher(a)beecher.cc wrote: From: Tom Beecher <beecher(a)beecher.cc> Business ask to create near real time, location aware notification system to increase user engagement and refine ad tracking : "That's a a great idea, we can do that!" Government ask to create near real time, location aware notification system for public safety warnings : "THAT IS A BRIDGE TOO FAR, THIS IS OUTRAGEOUS GOVERNMENT OVERREACH!" ------------------------------------------------------- No, it is overreach and Doing The Wrong Thing (AKA we do evil now even though we said we wouldn't in the beginning) for businesses as well. scott

2 1

SLAAC in renumbering events
by Fernando Gont 10 Mar '19

10 Mar '19

Folks, If you follow the 6man working group of the IETF you may have seen a bunch of emails on this topic, on a thread resulting from an IETF Internet-Draft we published with Jan Žorž about "Reaction of Stateless Address Autoconfiguration (SLAAC) to Renumbering Events" (Available at: https://github.com/fgont/draft-slaac-renum/raw/master/draft-gont-6man-slaac… ) Short version of story: There are a number of scenarios where SLAAC hosts may end up using stale configuration information. For example, a typical IPv6 deployment scenario is that in which a CPE router requests an IPv6 prefix to an ISP via DHCPv6-PD, and advertises a sub-prefix of of the leased prefix on the LAN-side, via SLAAC. In such scenarios, if the CPE router crashes and reboots, it may loose all information about the previously-leased prefix. Upon reboot, the CPE router may be leased a new prefix that will result in a new sub-prefix being advertised on the LAN-side of the CPE router. As a result, hosts will normally configure addresses for the newly-advertised prefix, but will normally also keep (and use) the previously-configured (and now stale!) IPv6 addresses, leading to interoperability problems. The RIPE-690 BCOP document had originally tried to address this problem by recommending operators to lease stable IPv6 prefixes to CPE routers. However, for a variety of reasons ISP may not be able (or may not want) to lease stable prefixes, and may instead lease dynamic prefixes. Most of the voices on the 6man wg mailing-list fell into one of the following camps: * "ISPs should be leasing stable prefixes -- if they don't, they are asking for trouble!" * "CPE routers should record leased prefixes on stable storage, such that they can 'deprecate' such prefixes upon restart -- if they don't, they are asking for trouble!" * "No matter whose fault is this (if there is any single party to blame in the first place), we should improve the robustness of IPv6 deployments" Our Internet-Draft tries to improve the current state of affairs via the following improvements: * Allow hosts to gracefully recover from stale network configuration information -- i.e., detect and discard stale network configuration information * Have SLAAC routers employ more appropriate timers, such that information is phased-out in a timelier manner -- unless it is actively refreshed by Router Advertisement messages * Specify the interaction between DHCPv6-PD and SLAAC -- which was rather under-specified * Require CPE routers to store leased prefixes on stable storage, and deprecate stale prefixes (if necessary) upon restart We are looking forward to more input on the document (or any comments on the issue being discussed), particularly from operators. So feel free to send your comments on/off list as you prefer Thanks! Cheers, -- Fernando Gont SI6 Networks e-mail: fgont(a)si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492

4 4

Technical bandwidth requirements for Emergency Alerts
by Sean Donelan 09 Mar '19

09 Mar '19

Some background information for network engineers unfamilar with emergency alerts. In the United States, there are approximately 500,000 emergency alerts nationwide a year, not counting another million or so test alerts. Only about 7,500 emergency alerts are severe enough to activate public warning systems. Most emergency alerts are intended for other emergency management agencies and officials. The rest are advisories, watches, updates and cancels. The peak emergency alert busy day is 4 alerts per minute nationwide. Although stress testing indicates most emergency alert systems should be able to handle more. Emergency alerts are not evenly distributed across the country. Some geographic areas have nearly none. Other geographic areas have many, e.g. tornado alley and atlantic coastlines. Since the 1950s, there has never been an actual nationwide emergency alert, i.e. presidential alert message. Emergency alerts are almost all state, local and weather alerts. Test alerts are the most common alert type. The IPAWS system supports very geo-targetted alerts, and supports opting in or opting out of specific types of alerts. When government officials use those options, and alert distributions implement those options. When the IPAWS emergency alert standards were being written, 1.5 Mbps DSL lines and even 128Kbps ISDN lines were still common, so the IPAWS emergency alert message sizes were made relatively small. But it was still an huge improvement over the previous EAS radio and TV broadcast modem data bursts from the 1980s/1990s, which were limited to 256 characters. The average IPAWS emergency alert is 5KB to 15KB in size. Including audio and image files, the entire emergency alert can be about 5MB in size. In the U.S., audio and image files are transmitted separately because rural Internet connections were too slow at the time. Canada's AlertReady system is more recent, and can handle larger alert messages. In Canada, audio and image files are transmitted as part of the satellite IP multicast emergency alert message. The small 90-character cellular phone message was also due to the limited bandwidth available in cellular networks at the time. Newer cell broadcast networks can handle nearly 1,000 character messages. Starting in May 2019, the U.S. WEA mobile alerts will increase to 360 characters. Changes are slow. It takes less than 10 seconds to transmit an IPAWS emergency alert nationwide. Although radio and TV may delay transmitting an emergency alert up to 15 minutes, i.e. during commercial breaks. The goal for earthquake alert messages is less than 3 seconds, which is not currently achievable. All 500,000 emergency alerts do not need to be transmitted nationwide. An alert distributor can selectively transmits only relevant alerts to different geographic areas, and choose not to include less severe advisories or many tests. Training for state and local government officials issuing alerts is very underfunded, and they make mistakes. The public hates emergency alert systems, until a tornado destroys their home in the middle of the night, and then they complain they didn't get an emergency alert.

1 0

Arista Layer3
by Romeo Czumbil 09 Mar '19

09 Mar '19

So I've been using Arista as layer2 for quite some time, and I'm pretty happy with them. Kicking the idea around to turn on some Layer3 features but I've been hearing some negative feedback. The people that I did hear negative feedback don't use Arista themselves. (they just heard....) So do we have any Arista L3 people out here that can share some negatives or positives? Use case: Just some MPLS IPv4/IPv6 routing, l2vpn OSPF/BGP Maybe 20k routes (no full internet routes) 7050 Series 7280 Series -Romeo

20 33