October 2020 - Test - lists.nanog.org

FCC FUSF charges clarification
by Nuno Vieira 15 Oct '20

15 Oct '20

Hello All, Need some help/insight from you guys on this: Company A is an incorporated in Europe, where it main business is, however it has some pops within USA. Company A uses services from several companies within USA. (carrier H, C, Z, G, L, etc..) all in the United States to remotelly connect his stuff. All companies charge company A the agreed fees, except company Z. Company A has two services with company Z. One is IP Transit (in SFO, CA) Other is a Metro Wavelenght (also in SFO, CA) Company Z charges company A on top of agreed services: for IP Transit (other charges representing roughly 6%) for the wavelenght (a lot of charges, such as the ones described below) - FCC Regulatory Fee (wireline) - Fed Universal Service Fund - CA High Cost Fund A - CA Teleconnect Fund - CA TRS - CASF - Universal Lifeline Telephone Service Charge - Utility Users Tax nevertheless company A DOES NOT have any "Telephone" services or whatsoever in the USA. At the end of the day what was meant to be a fixed bill is in fact a 20% higher one... So... my question IS: Is an European company (or whatsoever foreign wholesale company) WITHOUT ANY customers in USA liable to pay those taxes to the carrier ? Thanks for all you help. /Nuno

5 6

Hurricane Electric AS6939
by Aaron Gould 15 Oct '20

15 Oct '20

Do y’all like HE for Internet uplink? I’m thinking about using them for 100gig in Texas. It would be for my eyeballs ISP. We currently have Spectrum, Telia and Cogent. -Aaron

22 36

Shopify Network Admin ?
by John Rees 15 Oct '20

15 Oct '20

Hi Nanog, I am troubleshooting an issue where it appears that users orginitating from a certain subnet that I manage are unable to access websites hosted by Shopify. We have contacted Shopify support and are still waiting for resolution. If anybody here is from Shopify - I would like to get some guidance on how to proceed with the ticket so we can fix this issue for our mutual customers. Please contact me directly for additional information. Thank you, John

1 0

Visit the NANOG 80 Virtual Expo!
by NANOG News 14 Oct '20

14 Oct '20

*The latest technology, all in one space.* Be sure to visit the NANOG 80 Virtual Expo <https://nanog.org/meetings/nanog-80/virtual-expo/> throughout the conference to learn about the latest technologies, and connect with reps from 19 North American companies. Plus, you'll have the chance to win a variety of swag + prizes in each booth, and pick up clues for our daily scavenger hunts. Expo doors are open today through Friday, 10/30! Scroll on to learn more about each of our exhibitors. *ADVA* *Open networking solutions for cloud interconnect, cloud access and network synchronization with scalability, programmability and ease of use.* ADVA is a company founded on innovation and focused on helping our customers succeed. Our technology forms the building blocks of a shared digital future and empowers networks across the globe. We’re continually developing breakthrough hardware and software that leads the networking industry and creates new business opportunities. It’s these open connectivity solutions that enable our customers to deliver the cloud and mobile services that are vital to today’s society and for imagining new tomorrows. Together, we're building a truly connected and sustainable future. Learn more: adva.com Visit Expo Booth <https://www.nanog.org/meetings/nanog-80/virtual-expo/adva/overview/> *Amazon* *Interconnect with the Amazon global network.* Amazon operates a global network covering more than 80 cities and over 200 Points of Presence (POPs). Learn more: peering.aws Visit Expo Booth <https://nanog.org/meetings/nanog-80/virtual-expo/amazon-web-services/overvi…> *Catchpoint* *Advancing User Experience* Catchpoint empowers enterprises to protect and advance the digital experiences of their customers and employees. We help proactively detect, identify and validate user and application reachability, availability, performance and reliability across an increasingly complex digital delivery chain. With the largest and most geographically distributed monitoring network in the industry, we have the only Digital Experience Monitoring (DEM) platform able to scale and support today’s customer and employee location diversity and application distribution. Learn more: catchpoint.com Swag + Prizes: - HyperX Cloud Alpha S - PC Gaming Headset (raffle) - Sticker packs Visit Expo Booth <https://www.nanog.org/meetings/nanog-80/virtual-expo/catchpoint/overview/> *Charter Communications* *America's fastest-growing TV, Internet and Voice provider.* At Charter Communications, we connect our customers to innovation. From Spectrum Internet Gig and our path to 10G, to the Spectrum TV App and Spectrum Mobile, our blazing fast and secure broadband network powers the future. Learn more: spectrum.com Visit Expo Booth <https://nanog.org/meetings/nanog-80/virtual-expo/charter-communications/ove…> *Comcast Technology Solutions* *Our media and entertainment technology redefines digital experiences and delivers the future of media to global audiences.* Comcast Technology Solutions offers a portfolio of technology solutions, the CTSuite, that provides the industry with the technology, scale and expertise to expand and navigate the rapidly-changing media and entertainment technology landscape. We invent technology that solves industry challenges, reimagines what is possible, and transforms businesses for an ever-changing world. Built on Comcast’s know-how, proven facilities, scalable platforms, and infrastructure, Comcast Technology Solutions offers more than 20 years of reliable real-world broadcast and digital experience. We partner with customers to redefine expectations and deliver the future to global audiences. Learn more: comcasttechnologysolutions.com Visit Expo Booth <https://nanog.org/meetings/nanog-80/virtual-expo/comcast/overview/> *Corero Network Security* *Real-Time DDoS Protection* Corero Network Security is the leader in real-time, high-performance, automatic DDoS attack protection, with comprehensive attack visibility, analytics, and reporting. Deployed on-premises, hybrid, and in the cloud, we protect thousands of organizations worldwide, across many verticals. Learn more: corero.com Visit Expo Booth <https://nanog.org/meetings/nanog-80/virtual-expo/corero/overview/> *IPv4.Global* *Transparent. Reliable. Experienced. * IPv4.Global is a division of Hilco Streambank. As trusted marketplace leaders, we are dedicated to reliable transparent service. We work with you to buy and sell IP blocks, regardless of the size, and have completed more transfers than anyone else in the world. Learn more: ipv4.global Swag + Prizes: - Raffle: /24 CTA button Visit Expo Booth <https://nanog.org/meetings/nanog-80/virtual-expo/ipv4global/overview/> *Itential* *Intelligent Network Automation * Itential simplifies and accelerates network automation across physical, virtual, and cloud networks. Our products enable Network Engineers to propel network automation and programmability by seamlessly integrating and federating existing automation efforts in custom-built scripts, controllers, orchestrators, and network tools into an aggregated Network API. Itential’s low-code environment enables rapid automation of complex networking processes without requiring any underlying code. Easily drag-and-drop components from connected systems and tools to design and build end-to-end network automation workflows across configuration, service lifecycle, and policy management. Learn more: itential.com Swag + Prizes: - $100 Amazon Gift Card Visit Expo Booth <https://nanog.org/meetings/nanog-80/virtual-expo/itential/overview/> *JPIX + KDDI* *JPIX will continue to provide a better Internet infrastructure, while contributing to the overall development of the Internet globally as well as in Japan.* JPIX, established as the first commercial Internet exchange (IX) in Japan in July 1997, has been providing an environment for IX exchanges from a neutral standpoint. Serving more than 250 companies, the most of any IX provider in Japan, we play a vital role as a part of the core of Japan’s Internet. Learn more: www.jpix.ad.jp/en/index.php / us.kddi.com Visit Expo Booth <https://nanog.org/meetings/nanog-80/virtual-expo/jpix/overview/> *Juniper Networks* *Engineering Simplicity.* Juniper Networks brings simplicity to networking with products, solutions and services that connect the world. Through engineering innovation, we harness the power of networking in the cloud to solve the toughest challenges. Learn more: juniper.net Visit Expo Booth <https://nanog.org/meetings/nanog-80/virtual-expo/juniper-networks/overview/> *Kentik* *The network intelligence platform for visibility, performance and security. * Kentik® is the network intelligence platform for the connected world, trusted by leading digital enterprises and service providers. With Kentik, businesses eliminate the visibility and intelligence gaps associated with running dynamic and complex networks, and achieve greater network performance, reliability and security. The Kentik Network Intelligence Platform ingests diverse data streams from the internet, edge, cloud, data center and hybrid infrastructures and provides real-time visualizations and AIOps-powered insights and automation. Learn more: kentik.com Swag + Prizes: - Free NANOG 80 t-shirt Visit Expo Booth <https://nanog.org/meetings/nanog-80/virtual-expo/kentik/overview/> *Microsoft * *Learn. Connect. Explore.* Empowering Others: Our mission is to empower every person and every organization on the planet to achieve more. Learn more: microsoft.com/en-us Visit Expo Booth <https://nanog.org/meetings/nanog-80/virtual-expo/microsoft/overview/> *Myriad360* *Strategy. Execution. Impact.* Myriad360 delivers industry-leading technology solutions to transform and secure our clients’ IT strategy, infrastructure, and business. With top IT security manufacturers and in-house engineering, global logistics and project management expertise, Myriad360 handles it all—from security to mobility, networking to cloud, and hardware solutions to managed services. Learn more: myriad360.com Swag + Prizes: - Raffle: $50 gift card (1 winner each day of the conference) Visit Expo Booth <https://nanog.org/meetings/nanog-80/virtual-expo/myriad360/overview/> *Nokia* *Open up a new era of data center networking.* Cloud builders like you are faced with scaling your data centers to deliver distributed cloud applications, but current solutions lock you in to building data center networks their way with tools that limit how you operate them. Nokia SR Linux is an open Linux-based NOS that gives you a flexible and consumable foundation to support data center networks at scale. And with the Nokia Fabric Services Platform, you get a declarative, intent-based toolkit to automate your data center network operations. So, you can manage data center growth and the accelerating demand for distributed cloud-based applications the way that best suits you. Learn more: nokia.com Visit Expo Booth <https://nanog.org/meetings/nanog-80/virtual-expo/nokia/overview/> *Opengear* *Secure Remote Management of Your Critical Network Infrastructure.* We help IT organizations keep their network running, with secure remote access to critical devices, independent of the production network. On day one, every day, and even during outages. Learn more: opengear.com Swag + Prizes: - Opengear backpack filled with Opengear swag Visit Expo Booth <https://nanog.org/meetings/nanog-80/virtual-expo/opengear/overview/> *Precision Optical* *Custom Solutions. Reliable Networks.* Precision Optical Transceivers is a system engineering company focused on optical transceivers and related active/passive optical components. For over a decade, we have helped build networks around the globe by providing high quality, custom-engineered optical solutions. Learn more: precisionot.com Swag + Prizes: - Raffle: Apple Watch - Raffle: Apple AirPods Visit Expo Booth <https://nanog.org/meetings/nanog-80/virtual-expo/precision-optical-transcei…> *Seaborn* *Build l Own l Operate l Innovate* Seaborn is best positioned to address the global communications needs across the Americas delivering transport, Ethernet private line and IP services. Unique among independent cable operators, Seaborn fully operates and maintains its submarine and terrestrial cable infrastructure. POPs, terrestrial backhaul, landing stations and subsea cable are all under Seaborn’s control. The Seaborn management team has designed, built, and operated more subsea cable systems than any other telecom management team including over 75 landing stations, 250 global POPs, and 250,000 km of subsea fiber optic cable. Learn more: seabornnetworks.com Swag + Prizes: - Seaborn swag bag Visit Expo Booth <https://nanog.org/meetings/nanog-80/virtual-expo/seaborn-networks/overview/> *Smartoptics* *Expanding your network horizons.* Smartoptics provides innovative optical networking solutions and devices for the new era of open networking. We focus on solving network challenges and increasing the competitiveness of our customers. Our customer base includes thousands of enterprises, governments, cloud providers, Internet exchanges as well as cable and telecom operators. We take pride in being responsive, trustworthy and innovative. Learn more: smartoptics.com Swag + Prizes: - Raffle: iPad Air Visit Expo Booth <https://nanog.org/meetings/nanog-80/virtual-expo/smartoptics/overview/> *XKL* *#LightyourNetwork * XKL continues to deliver and expand its family of optical transport solutions for private/public cloud solutions, data center networks, internet exchanges, campus/metro networks, broadband ISP, and long-haul networks. Our clientele is global, and we recognize the need to adapt to various market, regulatory, and licensing conditions and to meet the broader telecommunication audience needs. Learn more: xkl.com Swag + Prizes: - Raffle: DJI Osmo Mobile 3 Smartphone Gimbal Combo - T-shirts (while supplies last) Visit Expo Booth <https://nanog.org/meetings/nanog-80/virtual-expo/xkl/overview/>

1 0

Re: Hurricane Electric AS6939
by Clayton Zekelman 14 Oct '20

14 Oct '20

We had horrible experiences with them a long time ago. Inexplicable packet loss problems, route weirdness, so we dumped them. A couple of years ago we decided to give them another try (I was skeptical), but so far it has been just fine. At 07:29 PM 13/10/2020, Aaron Gould wrote: >Do yâall like HE for Internet uplink? Iâm >thinking about using them for 100gig in >Texas. It would be for my eyeballs ISP. We >currently have Spectrum, Telia and Cogent. > >-Aaron -- Clayton Zekelman Managed Network Systems Inc. (MNSi) 3363 Tecumseh Rd. E Windsor, Ontario N8W 1H4 tel. 519-985-8410 fax. 519-985-8409

1 0

FYI - ARIN 46 Virtual Meeting Starts Today! (was: Fwd: [arin-announce] ARIN 46 Will Be Here Soon – Get Ready!)
by John Curran 14 Oct '20

14 Oct '20

NANOGers - FYI - ARIN 46 Virtual Meeting will start at today at noon ET. The meeting will be held via Zoom, and details on the schedule policy discussions, presentations, meeting materials and registration are attached. Best wishes! /John John Curran President and CEO American Registry for Internet Numbers Begin forwarded message: From: ARIN <info(a)arin.net<mailto:info@arin.net>> Subject: [arin-announce] ARIN 46 Will Be Here Soon – Get Ready! Date: 13 October 2020 at 3:33:11 PM EDT To: "arin-announce(a)arin.net<mailto:arin-announce@arin.net>" <arin-announce(a)arin.net<mailto:arin-announce@arin.net>> This week kicks off the ARIN 46 Virtual Public Policy and Members Meeting, where we will be in the thick of important community discussions on the following policies: - Recommended Draft Policy ARIN-2020-1: Clarify Holding Period for Resources Received via 4.1.8 Waitlist - Recommended Draft Policy ARIN-2020-2: Reinstatement of Organizations Removed from Waitlist by Implementation of 2019-16 - Recommended Draft Policy ARIN-2020-3: IPv6 Nano-Allocations - Recommended Draft Policy ARIN-2020-5: Clarify and Update Requirements for Allocations to Downstream Customers - Draft Policy ARIN-2020-6: Allowance for IPv4 Allocation “Swap” Transactions via 8.3 Specified Transfers and 8.4 Inter-RIR Transfers - Draft Policy ARIN-2020-7: 4.4 gTLD micro-allocation clarification - Draft Policy ARIN-2020-8: Clarify and Update 4.2.1.2 Annual Renewal Fee All draft policy text is available at: https://www.arin.net/participate/policy/drafts/ The ARIN 46 agenda will also feature several other informative sessions, including updates on routing security, services, our customer satisfaction survey, and much more. If you attended ARIN 45 in June, you were one of the lucky ones to experience our first completely virtual meeting. While we received great feedback on how that meeting went, we’re excited to introduce a few enhancements we’ll be making to ARIN 46 now that we have more planning time and experience. - We plan to allow attendees into Zoom 15 minutes before the meeting starts each day so folks can say hello to one another. We will be providing some music and fun slides during this time for you to enjoy as well! - During the 30-minute breaks on 14 and 15 October, you can stick around for a short, 10-minute seated stretching session at the beginning of each break. - On 14 October, we’ll be playing “Buzzword Bingo.” Whether you are a rookie or a seasoned pro, this is your chance to shine and get comfortable with the terminology used in our community. We’ll be sending out bingo boards in advance, which you will fill in with a word bank of buzz words you typically hear at ARIN meetings. - On 15 October we’ll be hosting an ARIN Trivia game. Newcomers are welcome to join in! It’s a great way to learn more about ARIN. We will also be hosting six breakout sessions at the end of the day on 14 October. Participants will be able to visit as many rooms as they want during the session and can move around or leave at any point. These will act just like the table topics we normally have during lunch. Folks can access all breakout rooms by visiting the following URL at the close of the meeting on 14 October: https://arin.zoom.us/j/92748378149?pwd=UENsQzVqYTgzd0FsVlUvQ1BuOU4rUT09 We want to make sure you can participate in the meeting using all the functionality the latest version of Zoom has to offer. For an optimal experience, we recommend that you run Zoom Version 5.3.0 or higher. One hour before the meeting starts each day, registered attendees will receive an email from “ARIN no-reply(a)zoom.xn--us-x2t with the URL for that day’s session. These links are not identical, so be sure you use the correct one for each day. Leading up to the meeting, we want to make sure you are ready to participate. To help you prepare, ARIN has published all of the meeting materials online for you to review or download beforehand. Just visit: https://www.arin.net/ARIN46_materials Need a refresher on ARIN’s Policy Development Process (PDP) before joining us to talk policy? You may want to check out the on-demand version of our PDP webinar, which covers the entire process, start to finish: https://www.arin.net/reference/training/webinars/#the-policy-development-pr… View the full agenda and register today for this meeting while there’s still time: https://www.arin.net/ARIN46 Please contact us at meetings(a)arin.net if you have any questions. We look forward to your participation! Regards, American Registry for Internet Numbers (ARIN) _______________________________________________ ARIN-Announce You are receiving this message because you are subscribed to the ARIN Announce Mailing List (ARIN-announce(a)arin.net) Unsubscribe or manage your mailing list subscription at: https://lists.arin.net/mailman/listinfo/arin-announce Please contact info(a)arin.net if you experience any issues.

1 0

Re: Hurricane Electric AS6939
by John Kristoff 14 Oct '20

14 Oct '20

On Tue, 13 Oct 2020 23:29:55 +0000 Aaron Gould <aaron1(a)gvtc.com> wrote: > Do y’all like HE for Internet uplink? I’m thinking about using them > for 100gig in Texas. It would be for my eyeballs ISP. We currently > have Spectrum, Telia and Cogent. The price is usually amongst the lowest you'll find. I've found them very easy to work with. They have a pretty capable tools development team in house. They don't do communities other than RTBH. They are doing ROV, which I think helped clean up some BGP noise I used to see, but I've not checked lately. They also know a thing or two about IPv6, plus carry traffic for all those IPv6 tunnel broker setups and probably at least if not more of the 6to4 traffic for whatever is left of that if it matters to you (and I might argue you might want to consider not accepting the 6to4 associated prefixes nor carry that traffic). Make sure you maintain another way to get to Cogent-only prefixes. John

1 0

RE: Juniper configuration recommendations/BCP
by Jakob Heitz (jheitz) 13 Oct '20

13 Oct '20

IOS-XR accepts extended communities and large communities by default. You have to enable to send them, but not receive. Regards, Jakob. -----Original Message----- Date: Mon, 12 Oct 2020 15:06:05 +0100 From: <adamv0025(a)netconsultings.com> Here's a fun one. By default Junos accepts extended communities on any BGP session (not just on MP-BGP sessions like it's the default case on cisco -unless explicitly enabled). Since most operators are not aware of this default Junos behaviour, one can be importing routes to interesting places if one were so inclined. -so yeah bleach unwanted communities on ingress (bleach those that would interfere with the ones used by the AS internally -so called "untaggable"/"untouchable" ). adam > -----Original Message----- > From: NANOG <nanog- > bounces+adamv0025=netconsultings.com(a)nanog.org> On Behalf Of > Chriztoffer Hansen > Sent: Thursday, October 8, 2020 11:05 AM > To: nanog(a)nanog.org > Subject: Juniper configuration recommendations/BCP > Importance: Low > > > On 08/10/2020 11:37, Forrest Christian (List Account) wrote: > > Is there anything I should worry about which is Juniper-specific? > > JUNOS default ARP timeout: 20 min. > > If you connect to IXP's. Recommended ARP timeout: 4 hours.

1 0

Securing Greenfield Service Provider Clients
by Christopher J. Wolff 11 Oct '20

11 Oct '20

Dear Nanog; Hope everyone is getting ready for a good weekend. I'm working on a greenfield service provider network and I'm running into a security challenge. I hope the great minds here can help. Since the majority of traffic is SSL/TLS, encrypted malicious content can pass through even an "NGFW" device without detection and classification. Without setting up SSL encrypt/decrypt through a MITM setup and handing certificates out to every client, is there any other software/hardware that can perform DPI and/or ssl analysis so I can prevent encrypted malicious content from being downloaded to my users? Have experience with Palo and Firepower but even these need the MITM approach. I appreciate any advice anyone can provide. Best, CJ

11 13

Centurylink Boise Networking Oddness
by Allen Smith 09 Oct '20

09 Oct '20

I apologize for the noise, this seems like the kind of thing where it actually isn't possible to get a message to the right folks through the front door. Hoping someone subscribed here can take a look. Looks like something here in Boise is squirrelly. fw1$ traceroute -A -I twitch.tv traceroute: Warning: twitch.tv has multiple addresses; using 151.101.66.167 traceroute to twitch.tv (151.101.66.167), 64 hops max, 60 byte packets 1 boid-dsl-gw17.boid.qwest.net (184.99.64.17) [AS209, AS209] 10.036 ms 9.39 ms 9.633 ms 2 184-99-65-133.boid.qwest.net (184.99.65.133) [AS209, AS209] 108.501 ms 96.669 ms 92.894 ms 3 4.68.63.137 (4.68.63.137) [AS3356] 117.743 ms 125.807 ms 127.163 ms 4 * * * 5 4.31.15.194 (4.31.15.194) [AS3356] 125.038 ms 113.778 ms 102.7 ms 6 151.101.66.167 (151.101.66.167) [AS54113] 115.716 ms 121.388 ms 118.879 ms Using lookingglass.centurylink.com I see the same thing from the other direction. Tracing route to 184.99.65.134 1 ae-2-3615.edge6.Seattle1.Level3.net (4.69.219.210) 0ms 0ms 0ms 2 4.68.63.134 (4.68.63.134) 10ms 10ms 10ms 3 boid-agw2.inet.qwest.net (205.171.94.2) 26ms 26ms 26ms 4 184-99-65-134.boid.qwest.net (184.99.65.134) 126ms 118ms All of this is around Thu Oct 8 12:10:31 MDT 2020 Thanks, -Allen

3 3