March 2020 - Test - lists.nanog.org

Fwd: [arin-announce] ARIN 45 Moving to Virtual Meeting Format
by John Curran 17 Mar '20

17 Mar '20

FYI - ARIN 45 will be done via remote participation only. /John John Curran President and CEO American Registry for Internet Numbers Begin forwarded message: From: ARIN <info(a)arin.net<mailto:info@arin.net>> Subject: [arin-announce] ARIN 45 Moving to Virtual Meeting Format Date: 17 March 2020 at 5:03:09 PM EDT To: <arin-announce(a)arin.net<mailto:arin-announce@arin.net>> In light of the current circumstances related to the rapidly evolving coronavirus disease 2019 (COVID-19) outbreak and guidance from Federal and state governments, the ARIN 45 Public Policy and Members Meeting will no longer have an in-person component as originally scheduled to take place in Louisville, Kentucky. We have been closely monitoring the latest news and guidance related to the COVID-19 outbreak from the Centers for Disease Control and Prevention (CDC), the World Health Organization (WHO), and local health departments. Following the most recent guidance from the CDC, we must prioritize the health of our ARIN community members and their families, and thus, the ARIN 45 Public Policy and Members Meeting will now proceed entirely as an online-only meeting for all participants. We ask that all participants please save the original dates of Monday, 27 April and Tuesday, 28 April while we review our normal policy discussions and related meeting programming to select material to be added to the agenda. We will be publishing the agenda and how to participate in the near future. We sincerely apologize for the inconvenience, and thank you for your understanding. If you have any further questions, please reach out to meetings(a)arin.net<mailto:meetings@arin.net>. Regards, John Curran, President and CEO Paul Andersen, Chair of the ARIN Board of Trustees American Registry for Internet Numbers (ARIN) _______________________________________________ ARIN-Announce You are receiving this message because you are subscribed to the ARIN Announce Mailing List (ARIN-announce(a)arin.net<mailto:ARIN-announce@arin.net>). Unsubscribe or manage your mailing list subscription at: https://lists.arin.net/mailman/listinfo/arin-announce Please contact info(a)arin.net if you experience any issues.

1 0

Need help removing a old/outdated/incorrect proxy route object
by Sadiq Saif 17 Mar '20

17 Mar '20

Hi all, I am looking for help with removal of a old/outdated/incorrect proxy route object for one of my prefixes, 192.195.251.0/24. The object in question: route: 192.195.251.0/24 descr: Proxy-registered route object origin: AS135091 remarks: This is a HGC customer route-object remarks: which is being exported under this origin AS. remarks: remarks: This route object was created because no existing remarks: route object with the same origin was found. remarks: remarks: Please contact radb(a)hutchcity.com if you have any remarks: questions regarding this object. notify: radb(a)hutchcity.com mnt-by: MAINT-AS9304 changed: radb(a)hutchcity.com 20171209 source: NTTCOM I reached out to the address on file already but the mail server there is not reachable. Additionally I have no recollection of ever having used services from any of the AS mentioned. The correct and only origin for that should be AS393949 as is in the ARIN IRR route object and also the ROA. Can somebody help me with this? Thanks in advance. -- Sadiq Saif/AS393949 https://sadiqsaif.com/

2 2

DDoS Attacks targeting VPN/IPSEC endpoints
by Dennis B 17 Mar '20

17 Mar '20

Any one else seeing this? Hearing some isolated events across different industry segments. If you are, can you provide any TTPs?

1 0

AT&T is suspending broadband data caps for home internet customers due to coronavirus
by Sean Donelan 17 Mar '20

17 Mar '20

The first data cap waiver I've seen due to coronavirus. I expect other ISPs to quickly follow. https://www.vice.com/en_us/article/v74qzb/atandt-suspends-broadband-usage-c… AT&T is the first major ISP to confirm that it will be suspending all broadband usage caps as millions of Americans bunker down in a bid to slow the rate of COVID-19 expansion. Consumer groups and a coalition of Senators are now pressuring other ISPs to follow suit.

14 16

Power outage LA 600 W 7th - TELX
by A. Pishdadi 17 Mar '20

17 Mar '20

Greetings, We got an email last night after some alerts from monitoring system. Power on the B UPS feed has been offline till this second and going. Apparently they can not bypass UPS and put the load on the generator. Which is crazy in itself being that it's a data center.. Luckily we have everything on redundant power. Does anyone from DRT or Telx subscribe here that can look into this more for me? Message me off list if possible. Thanks AP

1 0

Re: COVID-19 vs. our Networks
by Scott Weeks 17 Mar '20

17 Mar '20

--- alexandre.petrescu(a)gmail.com wrote: From: Alexandre Petrescu <alexandre.petrescu(a)gmail.com> That map does not show Texas, as far as I know America (USA) geography. ----------------------------------------------- <Texas is part of the US?> Being raised in Texas in a family that've been there for a buncha generations, I know that at least some folks there would challange that... :) https://en.wikipedia.org/wiki/Texas_secession_movements It was a nation unto itself for over decade: https://en.wikipedia.org/wiki/Republic_of_Texas Many old timers are a pretty independent type of people. scott ps. traffic is still normal here

2 1

backtracking forged packets?
by William Herrin 16 Mar '20

16 Mar '20

Howdy, Can anyone suggest tools, techniques and helpful contacts for backtracking spoofed packets? At the moment someone is forging TCP syns from my address block. I'm getting the syn/ack and icmp unreachable backscatter. Enough that my service provider briefly classified it a DDOS. I'd love to find the culprit. Thanks, Bill Herrin -- William Herrin bill(a)herrin.us https://bill.herrin.us/

10 15

sflow -> aggregated aspath visualization?
by Adam Thompson 16 Mar '20

16 Mar '20

I’m looking for product recommendations: We’ve noticed that about 20% of our traffic here lately has decamped from the free (or, at least, flat-rate) connection to CANARIE (our R&E network) and its various connected content-delivery networks, and onto our commercial provider. While this is presumptively a legitimate shift, we’d like to better understand these changes when they occur, in a way that our executive can understand at a glance. We do have sFlow (et al.) going to an Arbor PeakFlow box for analysis, but it’s lacklustre at best at understanding changes like this. I want: * Top #n ASNs by traffic volume, per router/interface, stacked chart * Some way to visualize large jumps in that dataset, e.g. if Cloudflare ditched their CANARIE connection and now that traffic all goes commercial, I don’t know what sort of graphic would be useful, maybe a stacked polar chart so you could see when an AS jumped from one sector to another? Even stacked bar charts could be useful. If anyone knows of tools capable of generating easy-to-understand reports, dashboards, including historical “what changed this week”-type data, please let me know. For that matter, if you have a technique of collecting this data and using Excel to do the reporting, that would work too. (Yes, I could theoretically build this off of existing open source tools… eventually) Thanks, -Adam Adam Thompson Consultant, Infrastructure Services [[MERLIN LOGO]]<https://www.merlin.mb.ca/> 100 - 135 Innovation Drive Winnipeg, MB, R3T 6A8 (204) 977-6824 or 1-800-430-6404 (MB only) athompson(a)merlin.mb.ca<mailto:athompson@merlin.mb.ca> www.merlin.mb.ca<http://www.merlin.mb.ca/>

5 4

Fwd: Your message to NANOG awaits moderator approval
by Alexandre Petrescu 16 Mar '20

16 Mar '20

fyi my figure of the map was cut by mailman software at nanog -------- Message transféré -------- Sujet : Your message to NANOG awaits moderator approval Date : Mon, 16 Mar 2020 20:37:58 +0000 De : nanog-owner(a)nanog.org Pour : alexandre.petrescu(a)gmail.com Your mail to 'NANOG' with the subject Re: COVID-19 vs. our Networks Is being held until the list moderator can review it for approval. The reason it is being held: Message body is too big: 288150 bytes with a limit of 100 KB Either the message will get posted to the list, or you will receive notification of the moderator's decision. If you would like to cancel this posting, please visit the following URL: https://mailman.nanog.org/mailman/confirm/nanog/546fda0d60c3e64480862eb9af6…

1 0

Re: COVID-19 vs. our Networks
by Clayton Zekelman 16 Mar '20

16 Mar '20

The access facility and the underlying long haul are telecommunications services. The application provided using that facility may or may not be. The congestion you were experiencing was not with the telecommunications facility itself, but with the application running on it, and was as you state, outside of your network - on a CDN hosted service. Your argument is with your third party hosted service. Their argument is with their CDN. Internet exchange points are not regulated. Interconnections between ISPs and CDNs are private agreements, and are always at risk of congestion and commercial dispute between the parties. There is a long history of this. If you have a direct layer 2 or 3 private line to your hosted service provider's CDN, and it was not performing as per the SLA, then you need to take that up with them. If the underlying telecommunications facility failed, and was classified as critical infrastructure, and not restored in a timely manner, then you need to take that up with the provider of that infrastructure. I'm not trying to be difficult, but the fact remains that there is a distinction between telecommunications services, and Internet services. The fact that Internet services (and I'm not talking about any one particular DIA circuit, but the rather the global network of networks) work so well most of the time, such that people tend to start treating it as a substitute for telecommunications services is pretty impressive. There are cost/benefit tradeoffs for using cloud hosted services and public Internet infrastructure. You save money by not operating the data centre yourself, but you pay for it in reliability. Your organization may have made that choice, but to say that because you chose to put critical applications on Internet infrastructure, other users of the Internet should take a back seat to your needs seems to be a bit of a stretch. Again, if your provider sold this to you as something that was NOT relying on public Internet, and was Layer 2/3 private managed services with dedicated bandwidth, then you need to have a conversation with them. At 02:01 PM 14/03/2020, Mike Bolitho wrote: >First of all, we use a mixture of layer 2/3 >private lines and DIA circuits. You don't know >our infrastructure, stop being condescending. It >goes against the spirit of this mailing list. > >Second, yes, the Internet is protected. Both >public and private lines. I know this because we >have TSP coded circuits and I spent four years >at a Tier I ISP servicing TSP coded circuits > >Third, the trouble we had was a third party >service having congestion issues. They are >hosted by the same CDN as Call of Duty. The >problem was both outside of our control and our >third party service'sÂ control. The chokepoint >was between ISPs/IXPs and the CDN. I've seen >this time and time again while working at the >aforementionedÂ ISP. Saturated links on >ISP/IXP/CDN networks. This is where the TSP code >comes in. In this day and age of cloud services, >it is financially unfeasible for every company >to have a private line to every single cloudÂ >provider. That's preposterousÂ to even suggest. > >- Mike Bolitho > > >On Sat, Mar 14, 2020 at 10:40 AM Clayton >Zekelman <<mailto:clayton@mnsi.net>clayton(a)mnsi.net> wrote: > > >The Internet is not a telecommunications >service, according to your FCC.Â If you want >predictability, buy WAN circuits, not Internet >circuits.Â Â If your provider is co-mingling >Internet and WAN traffic (i.e. circuits with >defined endpoints vs. public Internet or VPN), >then you need to talk to them about their prioritization. > >If you have mission critical applications, put >them on mission critical infrastructure, not the public Internet. > >Oh, that's right - Internet circuits are cheaper than WAN circuits > -- Clayton Zekelman Managed Network Systems Inc. (MNSi) 3363 Tecumseh Rd. E Windsor, Ontario N8W 1H4 tel. 519-985-8410 fax. 519-985-8409

4 3