January 2021 - Test - lists.nanog.org

Netflow collector that can forward flows to another collector based on various metrics.
by Drew Weaver 21 Jan '21

21 Jan '21

Good morning everyone, I am looking for a Netflow collector that can forward flows based on src ip/src net dst ip/dst net to another collector in either real or near time. If it can be configured via an API that is even better than having to edit configuration files. If anyone has any suggestions I would appreciate it. Thanks, -Drew

6 5

USENET peers?!
by bzs＠theworld.com 21 Jan '21

21 Jan '21

Through a coincidence of hardware failures "out there", which should come back soon, and admittedly some inattentiveness as peers went away, The World finds itself looking for some Usenet peers. Not a full feed, we can talk. 1. OT? Feel free to point me to a better place which anyone is likely reading. 2. Usenet is dead and besides a full feed is 20+TB/day because it's dead, but 20TB/day... -- -Barry Shein Software Tool & Die | bzs(a)TheWorld.com | http://www.TheWorld.com Purveyors to the Trade | Voice: +1 617-STD-WRLD | 800-THE-WRLD The World: Since 1989 | A Public Information Utility | *oo*

3 4

Uganda Communications Commission shutdown order
by Sean Donelan 20 Jan '21

20 Jan '21

The Uganda Communications Commission has issued a shutdown order for the operation of all Internet gateways in Uganda beginning January 13, 2021 until further notice. I can't access the official Uganda Communications Commission website, but this appears to be a copy of the order https://twitter.com/DougColtart/status/1349442878481846272/photo/1

12 18

RADB contact needed
by Ostap Efremov 20 Jan '21

20 Jan '21

Hello, I'm in need off a RADB contact. I have reached out to them multiple times the past 72 hours requesting urgent removal of all IRR records for a recently revoked afrinic /14 However they did not reply and did not remove any records which belong to this unallocated ip space. This concerns 196.52.0.0/14, this massive block got revoked by afrinic approximately 4 days ago and is now unallocated. Nothing in this /14 should be routed. However, about 350 prefixes of various sizes inside this /14 are still announced. If RADB removes all these IRR's, the routability of these 350 ip hijacks will greatly be reduced. https://www.radb.net/query?advanced_query=1&keywords=-M+196.52.0.0%2F14&-T+… <https://www.radb.net/query?advanced_query=1&keywords=-M+196.52.0.0%2F14&-T+…> Greetings, Ostap Efremov

3 3

Upcoming operational changes to ARIN services (was: Fwd: [arin-announce] Reminder--Upcoming Security Improvements and Change to RDAP URL)
by John Curran 20 Jan '21

20 Jan '21

Folks – Please note upcoming TLS 1.1 deprecation and RDAP URL changes – if you need to update your systems, please start this process sufficiently early to avoid impacts. Thanks! /John John Curran President and CEO American Registry for Internet Numbers Begin forwarded message: From: ARIN <info(a)arin.net<mailto:info@arin.net>> Subject: [arin-announce] Reminder--Upcoming Security Improvements and Change to RDAP URL Date: 20 January 2021 at 10:09:03 AM EST To: "arin-announce(a)arin.net<mailto:arin-announce@arin.net>" <arin-announce(a)arin.net<mailto:arin-announce@arin.net>> This announcement is to remind you of previously-announced changes that ARIN is making, including the following: - security improvements for Whois-RWS, RDAP, and www.arin.net<http://www.arin.net>, scheduled for on or about 19 February 2021 - change of address to the Registration Data Access Protocol (RDAP) bootstrap server, scheduled for on or about 30 June 2021 More information is provided in this announcement. *Security Improvements for WhoWhois-RWS, RDAP, and www.arin.net<http://www.arin.net>* As announced on 22 October 2020 and 2 December 2020, upcoming security improvements for Whois-RWS, RDAP, and www.arin.net<http://www.arin.net> are scheduled to be completed on or around 19 February 2021. The following information is from the previous announcement: Earlier this year, ARIN implemented security enhancements that included ending support for TLS 1.0 for Whois-RWS and RDAP services and improving ciphers used in www.arin.net<http://www.arin.net>. As part of our continuing effort to improve security, on or around 19 February 2021, we will end support for TLS 1.1 and weak Diffie-Hellman (DH) key exchange parameters on www.arin.net<http://www.arin.net>, Whois-RWS, and RDAP. We will also update the ciphers available on Whois-RWS and RDAP to match those on www and reg.arin.net<http://reg.arin.net>. The removal of TLS 1.1 may impact the way you interface programmatically with ARIN to query and retrieve information from Whois-RWS and RDAP. Changes in our supported versions of TLS are due to well-known security issues with this protocol. More information is available at https://datatracker.ietf.org/doc/draft-ietf-tls-oldversions-deprecate/ . ARIN continues to support TLS 1.2. The cipher update satisfies ACSP Suggestion 2015.15: Improvements to SSL Security for whois.arin.net<http://whois.arin.net>. We are providing you advance notice of these changes, as you may need to make configuration or code changes on your clients that interface with Whois-RWS and RDAP services. We encourage you to make these changes so you will have no operational impact when we disable the vulnerable transport protocol version. *RDAP Bootstrap Server Change of Address* As announced on 21 November 2020 and 16 December 2020, the ARIN Registration Data Access Protocol (RDAP) Bootstrap server address is changing. The following information is from the previous announcement: ARIN is changing the address of our Registration Data Access Protocol (RDAP) bootstrap server from https://rdap.arin.net/bootstrap to https://rdap-bootstrap.arin.net/bootstrap. A bootstrap server is used to forward queries from users seeking registration data for Internet resources to another server that can provide more detailed registration information about that resource. The address of the bootstrap server is used in the “query URL” sent from a client application or entered into a command-line query by a user. ARIN has set up a redirect to automatically route queries from the old URL to the new URL when support for the old URL is ended. The old URL will be retired on 30 June 2021, and the redirect will be active. However, it is important to note we can’t guarantee the redirect will be respected by all clients. In order to avoid any problems, queries should be changed to use the new URL, https://rdap-bootstrap.arin.net/bootstrap, as soon as possible. More information about how the bootstrap URL works and this upcoming change can be found on TeamARIN at https://teamarin.net/2020/12/11/buckle-up-change-of-address-coming-for-arin…. If you have questions or comments about this change, please submit an Ask ARIN ticket using your ARIN Online account, or contact the Registration Services Help Desk by phone Monday through Friday, 7:00 AM to 7:00 PM ET at +1.703.227.0660. Regards, Mark Kosters Chief Technology Officer American Registry for Internet Numbers (ARIN) _______________________________________________ ARIN-Announce You are receiving this message because you are subscribed to the ARIN Announce Mailing List (ARIN-announce(a)arin.net<mailto:ARIN-announce@arin.net>). Unsubscribe or manage your mailing list subscription at: https://lists.arin.net/mailman/listinfo/arin-announce Please contact info(a)arin.net if you experience any issues.

1 0

Hosting recommendations ... ?
by Bryan Holloway 20 Jan '21

20 Jan '21

Hey gang ... Looking for a reputable (i.e., no hosting of spammers or other ne'er-do-wells) hosting provider with possibly a global footprint. If not, US is #1 desire; EU #2. Requirements, more or less: * Desire to host 2-3 hypervisors, probably running something akin to Proxmox ... * ~5-10TB storage with the possibility of expansion ... * 1G hand-off / 100 Mbps or less commit ... i.e., low BW, but burstable. * Bringing my own IP space and need to be able to peer BGP with vendor. * Cross-DC redundancy or mirroring or somesuch desirable. * Backups are of interest, although I can do my own if need be. Any recommendations that are non-Amazonian? Feel free to reach out off-list if you prefer. #1 requirement ... the reputability part ... Thank you all in advance! - bryan

16 26

Spectrum Routing Contact
by Robert Blayzor 20 Jan '21

20 Jan '21

I was wondering if someone from Spectrum engineering could hit me out of band. We have a customer in one of our data centers that is having some strange routing issues through Cogent and Spectrum AS's 7843 & 12271. Was wondering if someone could share some insight BGP looking glass type info with me so we can figure this out. TIA -- inoc.net!rblayzor XMPP: rblayzor.AT.inoc.net PGP: https://pgp.inoc.net/rblayzor/

1 0

Revoked AFRINIC block resulting in more than 350 bogon prefixes
by Ostap Efremov 20 Jan '21

20 Jan '21

Hi, 196.52.0.0/14 was recently revoked by AFRINIC. However, more than 350 prefixes inside of this /14 are currently still announced. This is all unallocated and should not be routed at all. Example https://bgp.he.net/net/196.54.129.0/24#_netinfo Here is a full list of them https://pastebin.com/raw/MHaW3nPe Greetings, Ostap Efremov

1 0

Re: Alexandria Ocasio-Cortez' Office is on NANOG?? Or, what is the policy about sharing email offlist?
by Javier J 19 Jan '21

19 Jan '21

you too, why are you emailing me? I didn't ask anyone to contact me off list. On Mon, Jan 18, 2021 at 8:53 PM Sam Silvester <sam.silvester(a)gmail.com> wrote: > Archives are browsable by anybody. How do you expect to keep political > types out of the discussion? > > On Tue, 19 Jan 2021 at 11:36 am, Javier J <javier(a)advancedmachines.us> > wrote: > >> I couldn't agree more. >> If I want to talk politics, I will go to other places. I use this mailing >> list to talk about things relevant to technology and operation of networks >> in North American and other places. >> >> - Javier >> >> >> On Mon, Jan 18, 2021 at 4:19 PM Mel Beckman <mel(a)beckman.org> wrote: >> >>> javier, >>> >>> I concur. What we don’t need on Nanog is outside parties deciding to >>> “reign in” our discussions on political grounds! >>> >>> -mel beckman >>> >>> On Jan 18, 2021, at 12:38 PM, Javier J <javier(a)advancedmachines.us> >>> wrote: >>> >>> >>> I agree 100%. >>> >>> I know the emails on this list are public and that is fine. What I >>> don't appreciate is that now my email address is in some politico's address >>> list because of someone's behavior. >>> >>> - Javier >>> >>> On Mon, Jan 18, 2021 at 3:20 PM Jon Lewis <jlewis(a)lewis.org> wrote: >>> >>>> There's a world of difference between "don't expect list posts to be >>>> private to list members" and "don't forward the list to autoresponders." >>>> The stupidity of the latter, if it can be tracked down to who did it, >>>> should result in their removal from the list, at least until they >>>> explain >>>> what caused them to do that and have undone it. >>>> >>>> On Mon, 18 Jan 2021, Paul Timmins wrote: >>>> >>>> > The list has public archives. Draw your own conclusions on the policy. >>>> > >>>> > https://mailman.nanog.org/pipermail/nanog/ >>>> > >>>> > On 1/18/21 2:40 PM, Anne P. Mitchell, Esq. wrote: >>>> >> Not under that impression at all. That's very different from "what >>>> is the >>>> >> policy" - at least in the groups I run, if the policy is "no sharing >>>> >> offlist" and then someone does, there are consequences for that >>>> someone. >>>> >> Anne >>>> >> >>>> >> -- >>>> >> Anne P. Mitchell, Attorney at Law >>>> >> Dean of Cyberlaw & Cybersecurity, Lincoln Law School >>>> >> Author: Section 6 of the CAN-SPAM Act of 2003 (the Federal >>>> anti-spam law) >>>> >> Board of Directors, Denver Internet Exchange >>>> >> Chair Emeritus, Asilomar Microcomputer Workshop >>>> >> Former Counsel: Mail Abuse Prevention System (MAPS) >>>> >> >>>> > >>>> >>>> ---------------------------------------------------------------------- >>>> Jon Lewis, MCP :) | I route >>>> StackPath, Sr. Neteng | therefore you are >>>> _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________ >>>> >>>

2 2

Paging a TATA person?
by Dan Mahoney 19 Jan '21

19 Jan '21

Someone in TATA networking, if you could please contact me off-list, I'd appreciate it. This relates to my day job doing DNS things for ISC. -Dan -- --------Dan Mahoney-------- Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC FB: fb.com/DanielMahoneyIV LI: linkedin.com/in/gushi Site: http://www.gushi.org ---------------------------

2 1