October 2020 - Test - lists.nanog.org

Florida: Voter registration website overwhelmed at deadline
by Sean Donelan 09 Oct '20

09 Oct '20

Every election has problems. Most of the time, those problems aren't noticed. Elections rely on a lot of back-end infrastructure, besides the actual voting itself. It could be a DDOS attack, or simply duct-taped systems having trouble with the load. Voting early (mail, drop-off, in-person) means more time to fix glitches. https://apnews.com/article/virus-outbreak-election-2020-florida-elections-r… The FBI and the Cybersecurity and Infrastructure Security Agency warned elections officials nationwide last week that cyberattacks could disrupt their systems during the run-up to the election. They particularly noted “distributed denial-of-service” attacks, which inundate a computer system with requests, potentially clogging up servers until the system becomes inaccessible to legitimate users.

8 10

Spoofer Report for NANOG for Sep 2020
by CAIDA Spoofer Project 08 Oct '20

08 Oct '20

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Sep 2020: ASN Name Fixed-By 39939 RISE-CO-AS39939 2020-09-01 9009 M247 2020-09-02 13857 ONLINEMAC 2020-09-19 10886 MAX-GIGAPOP 2020-09-22 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Sep 2020: ASN Name First-Spoofed Last-Spoofed 6939 HURRICANE 2016-02-22 2020-09-08 54825 PACKET 2016-04-15 2020-09-18 46562 TOTAL-SERVER-SOLUTIONS 2016-04-26 2020-09-03 36351 SOFTLAYER 2016-05-10 2020-09-08 13213 UK2NET 2016-07-27 2020-09-02 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2020-09-25 6128 CABLE-NET-1 2016-09-03 2020-09-30 20412 CLARITY-TELECOM 2016-09-30 2020-09-28 6181 FUSE-NET 2016-10-10 2020-09-28 18451 LESNET 2016-10-18 2020-09-09 14971 PINETEL 2016-10-21 2020-09-25 11427 TWC-11427-TEXAS 2016-10-21 2020-09-30 174 COGENT-174 2016-10-21 2020-09-08 32440 LONI 2016-11-03 2020-09-27 12083 WOW-INTERNET 2016-11-09 2020-09-27 22439 PERFECT-INTERNATIONAL 2016-11-22 2020-09-08 20473 AS-CHOOPA 2017-01-08 2020-09-29 9009 M247 2017-01-10 2020-09-12 63296 AWBROADBAND 2017-09-01 2020-09-29 27589 MOJOHOST 2017-09-20 2020-09-03 546 PARSONS-PGS-1 2017-11-20 2020-09-23 20448 VPNTRANET-LLC 2018-09-20 2020-09-05 20278 NEXEON 2019-03-05 2020-09-08 8047 GCI 2019-04-11 2020-09-24 62904 EONIX-COMMUNICATIONS-ASBLOCK-6 2019-07-14 2020-09-08 46375 AS-SONICTELECOM 2019-10-21 2020-09-11 11650 PLDI 2020-05-25 2020-09-11 46816 DSNETWORKS-001 2020-08-24 2020-09-08 32489 AMANAHA-NEW 2020-08-24 2020-09-02 7040 NETMINDERS 2020-08-31 2020-09-03 206804 EstNOC 2020-09-02 2020-09-03 32181 ASN-GIGENET 2020-09-02 2020-09-03 11042 NTHL 2020-09-02 2020-09-02 53340 FIBERHUB 2020-09-02 2020-09-02 32780 HOSTINGSERVICES-INC 2020-09-02 2020-09-02 19318 IS-AS-1 2020-09-03 2020-09-03 398325 2020-09-05 2020-09-26 395111 KVCNET-2009 2020-09-08 2020-09-08 25780 HUGESERVER-NETWORKS 2020-09-08 2020-09-08 207134 PHOENIXNAP-SRB 2020-09-08 2020-09-08 62217 VooServers 2020-09-08 2020-09-08 206628 2020-09-10 2020-09-10 23393 NUCDN 2020-09-30 2020-09-30 30602 2020-09-30 2020-09-30 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Source Address Validation issues inferred during Sep 2020 using open resolver tests: ASN Name Last-Detected 11260 EASTLINK-HSI 2020-09-24 12214 RAPIDDSL--WIRELESS 2020-09-24 131284 ETISALATAFG 2020-09-23 40033 RED-SPECTRUM 2020-09-23 53850 GORILLASERVERS 2020-09-22 395262 CENTRE-OF-EXCELLENCE-IN-NEXT-G 2020-09-22 26166 WATCHCOMM-WEST-OH 2020-09-19 14403 JJI-DEFAULT-00 2020-09-16 16524 METTEL 2020-09-15 32444 SAFELINK-MV 2020-09-11 53338 ITCI 2020-09-10 15081 ASN-CROS-1 2020-09-07 19257 SUBRIGO 2020-09-07 40447 SKYHAWK-GROUP 2020-09-05 53274 3DB-WIRELESS 2020-09-04 397081 AUWIRELESS-01 2020-09-04 40676 AS40676 2020-09-04 16922 OUHSC-EDU 2020-09-04 4565 MEGAPATH2-US 2020-09-04 47023 NOR-NET-COMM 2020-09-04 40651 MONSTERGOVSOL 2020-09-04 32233 PERSONA 2020-09-03 394232 TELKEL-MTL 2020-09-03 46375 AS-SONICTELECOM 2020-09-03 46328 FOUR-U 2020-09-03 6539 GT-BELL 2020-09-03 29953 MORNCOMM 2020-09-02 396236 MIMOKC 2020-09-02 53456 WESTRUX 2020-09-01 27017 NWFBR 2020-09-01 11287 AS-MSEA 2020-09-01 55175 CLOUDBURST 2020-09-01 395261 AS-HCCL-7 2020-09-01 9009 M247 2020-09-01 25636 ONTL-2002 2020-09-01 577 BACOM 2020-09-01 30600 AS-CMN 2020-09-01 Further information for these tests is available at: https://spoofer.caida.org/ornog.php?country_include=usa,can Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Fastly's Montreal POP offline
by Eric Dugas 08 Oct '20

08 Oct '20

My PNI with them in Montreal is barely passing any traffic since yesterday just before 18:00. Fastly is also on QIX in Montreal, and both LAGs shows no traffic since yesterday, same time my PNI's traffic dropped. I've tried to reach peering@ and noc@ today but no replies so far and it's been hours. If anyone from Fastly can reach me off-list or on-list. Eric

1 1

BGP in the lab - v4 & v6 live feeds from Europe
by Łukasz Bromirski 07 Oct '20

07 Oct '20

Dear NANOGers, If you’re looking for live, full BGP v4 & v6 feed for your lab or a bit of testing before going live, I just shared a short post on how to get it: https://lukasz.bromirski.net/post/bgp-w-labie-3/ Happy BGPing, -- Łukasz Bromirski CCIE R&S/SP #15929, CCDE #2012::17, PGP Key ID: 0xFD077F6A

1 0

telia selling carrier ops to polhem infra
by aaron1＠gvtc.com 07 Oct '20

07 Oct '20

I wonder how this will affect those who have Telia as an upstream Internet provider? Will it be business as usual and just different company name? Or maybe other changes to come? Telia Company today (10-06-2020) announces that it has reached an agreement with Polhem Infra for the sale of its international carrier business, Telia Carrier... https://www.teliacompany.com/en/news/press-releases/2020/10/telia-company-re aches-agreement-to-sell-its-carrier-operation-to-polhem-infra-and-proposes-t o-reinstate-the-original-dividend-for-2019/ Aaron aaron1(a)gvtc.com

4 3

Could an Equinix Senior Management person please reach out to me ASAP
by Dan Mahoney (Gushi) 06 Oct '20

06 Oct '20

Sorry to invoke the NANOG pager this way, but: This pertains to F-Root operations at my day job with isc.org, in both the US and Europe markets. Feel free to use dmahoney at isc.org instead of this, my personal email. Best (and stay safe), -Dan Mahoney -- --------Dan Mahoney-------- Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC FB: fb.com/DanielMahoneyIV LI: linkedin.com/in/gushi Site: http://www.gushi.org ---------------------------

1 0

Neustar Geo Location Data
by John Von Essen 06 Oct '20

06 Oct '20

Anyone here have experience with Neustar’s Geo Location database feed? And by experience, I mean, how reliable it is to reality? I ask because I’m in the early stages of a project, and my initial take is the data is terrible. I’ve stumbled across several (like a few hundred, and thats just in the US) /22’s and /23’s that SWIP in Arin to small regional ISPs in the US, but in the Neustar geo data these /22s get broken out in many continuous /28’s and /27’s that appear to hop across the world. One case was a small rural WISP in St Louis, their /22 in Neustar’s data is spread across Brazil, Asia, Europe, I mean its all over the place. But in BGP, that /22 appears safe and sound coming from St Louis and also confirmed via traceroute. If it were just a few ranges, I’d say no big deal, but I’m seeing massive issues with the data - curious as to other people’s thoughts. Thanks John

2 1

IPv4 Mismanagement
by Matt Hoppes 05 Oct '20

05 Oct '20

I'm sitting here in the office on a Friday performing some IP maintenance and I see that one of our upstreams is still filtering an IP range we haven't used in years. I dig into it a bit more and it turns out a major carrier still has them SWIPed to us. This got me curious and I dug more into IPs from back in our early days and discovered there are two Tier-1 carriers we no longer do business with that still have large blocks of their own IPs SWIPED and allocated to us. This is really confusing and concerning. I know it's not the end-all-be-all, but I wonder how much IPv4 exhaustion is being caused by this type of IPv4 mis-management, where IPs are still shown as "allocated" to a customer who hasn't used them in years. I've seen this behavior from Frontier and CenturyLink to name just a few. Any thoughts on this?

6 6

Pennsylvania’s voter services data center outage - 24+ hours
by Sean Donelan 05 Oct '20

05 Oct '20

State and local government services are always underfunded. Election depend on heroic election administrators and a lot of duct tape. Its not yet election day, but don't be surprised by all sorts of normal problems and outages on November 3 and after when systems will be under maximum stress. Its not nefarious, just duct tape. There are backup processes, but are less effecient and slower. Pennsylvania's data center supporting several state government services, including elections, has been out of service for over 24 hours. The data center has a uptime reliability of about 94% (and dropping). “While the exact cause is not yet known, there’s no evidence present at this time to suggest any malicious activity,” she said Wednesday. “We will continue, of course, to keep investigating.” https://www.inquirer.com/politics/election/pennsylvania-voter-services-webs…

2 2

NetDevOps Survey - 2020 Edition
by Allen Smith 05 Oct '20

05 Oct '20

Hi All, A colleague just sent this to me and thought it might be of general interest here as the survey and results are public and seem topical. https://docs.google.com/forms/d/e/1FAIpQLScQARN87cfV6ir0IQ_yP2oGRB5CltnCw6_… There is further information on the page and at the project source: https://github.com/dgarros/netdevops-survey Cheers, -Allen

1 0