March 2021 - Test - lists.nanog.org

RouteViews is looking for host at AMS-IX
by David Teach 31 Mar '21

31 Mar '21

Hi NANOG, Without going into too much detail, RouteViews is looking for a new host at AMS-IX. Our current host has made a considerable effort to keep our collector connected, but has be unable to find a suitable long term solution with AMS-IX. If you would like to help, and have VM resources capable of hosting a linux VM at AMS-IX, please contact me off list. Thanks, - David

1 0

NANOG 82 and NANOG 83 Announcements
by NANOG News 30 Mar '21

30 Mar '21

NANOG 82 To ensure our community's safety and well-being, the NANOG Board and Staff have determined that the in-person component of NANOG 82 will not be possible. Instead, we will hold a virtual meeting on June 14-16, 2021. Additional information about meeting registration will be forthcoming. The Program Committee is actively seeking talk proposals for the NANOG 82 virtual meeting and welcomes anyone interested in sharing their experiences, ideas, or the latest technologies with the greater NANOG community to submit a virtual presentation proposal by Monday, April 12, 2021. NANOG 83 Looking ahead to the NANOG 83 meeting later this year, we are excited to announce that NANOG 83 is being planned as our first hybrid meeting; we are planning an in-person meeting for those who can travel combined with a robust virtual experience. Unfortunately, due to circumstances related to the pandemic, please be aware that the date and location will be different from what was previously planned. We anticipate that the in-person meeting will be in Minneapolis, Minnesota, November 1-3, 2021. The meeting schedule will include a delayed start time to accommodate travel for those with Halloween-related plans. The ARIN conference will be held in conjunction with NANOG at the same location on November 4-5, 2021. Information related to COVID-19 changes frequently, please recognize we may have to change our plans for NANOG 83. Likewise, it is difficult to predict what preventative requirements will be in place at the meeting time. Please know that we will continue to closely monitor CDC guidelines and will share information as we get closer to the event. The safety of our community continues to be our top priority. Please contact us with any additional questions or concerns at any time: nanog-support(a)nanog.org Sincerely, The NANOG Board of Directors + Staff

1 0

Akamai IP Block Issues
by Matt Corallo 30 Mar '21

30 Mar '21

If anyone has a good contact at Akami, please reach out off-list. We are getting Akamai Access Denied errors on eyeballs trying to schedule COVID-19 appointment slots like the below: Access Denied You don't have permission to access "http://www.walgreens.com/findcare/vaccination/covid-19/location-screening" on this server. Reference #18.47be1cb8.1617112737.3f58747 Thanks, Matt

2 1

internet futures
by Randy Bush 30 Mar '21

30 Mar '21

in 2010, the internet society made some videos on possible internet futures ten years out, i.e. nowish. nothing spot on, but themes can be seen for sure. https://www.youtube.com/watch?v=PB4zfGwctGc randy --- randy(a)psg.com `gpg --locate-external-keys --auto-key-locate wkd randy(a)psg.com` signatures are back, thanks to dmarc header butchery

22 40

MS Teams orig/term carrier?
by Adam Thompson 30 Mar '21

30 Mar '21

Despite having worked for an ILEC in network ops for 10yrs, I can't figure out how to answer this without an SS7 sniffer (which I obviously no longer have, nor access to an SSP or SCP). What 3rd-party carrier(s), if any, does Microsoft use to originate & terminate MS Teams-to-PSTN voice calls in Canada? Pointers to rabbit holes welcome, if you think there’s an actual answer at the end ;-). Thanks, -Adam Adam Thompson Consultant, Infrastructure Services [[MERLIN LOGO]]<https://www.merlin.mb.ca/> 100 - 135 Innovation Drive Winnipeg, MB, R3T 6A8 (204) 977-6824 or 1-800-430-6404 (MB only) athompson(a)merlin.mb.ca<mailto:athompson@merlin.mb.ca> www.merlin.mb.ca<http://www.merlin.mb.ca/>

2 1

Infinera GenericTom Enable?
by Nick Bogle 28 Mar '21

28 Mar '21

NANOG, I’ve got Infinera Cloud Xpress’s on two of our DCI’s that I’m trying to get 3rd party optics working in.. I notice there is a CLI structure of "feature GenericTom enable <Pwd>", but the command doesn’t do anything without supplying a password, and I’ve tried a bunch of generic passwords and get invalid password every time. Does anyone know this password or any way to get 3rd party optics working on these boxes? otn02.spknwa(config)# feature GenericTom enable ? Possible completions: <pwd> Enable 3rd party TOM Any help would be appreciated, thanks! -- Nick Bogle Network Engineering Manager (509) 464-6942 | https://ptera.com/

1 0

IP reputation lookup (prefix not single IP)
by vom513 27 Mar '21

27 Mar '21

Hello all, I’ve seen other folks asking the same/similar question in the past, but I don’t recall seeing more than a few options out there to *try* to suss this out. Use case is someone I’m working with looking to buy a v4 block from a broker. So far I’ve checked Talos and Sorbs (both allow a prefix lookup). Most of the other RBL/multi-RBL sites want a single IP (the use case being email of course). I won’t abuse their service by trying to lookup each single IP in the block... Could anyone share anything/anywhere else I might look to get crumbs of info on a given preifx ? Thanks.

9 10

Best practice for ptp/loopback numbering for "small" enterprise multihome setup
by vom513 26 Mar '21

26 Mar '21

Hello, tl;dr - If I only have a /24 PI - is there any way to use this and not “chop it up / deagg” to use for ptp/loopbacks ? Hopefully I can explain this in a manner that makes sense. Say I have a vanilla dual router/dual upstream setup (think enterprise internet edge). It’s basically an “H” shape: - Two ISPs - Two routers (“crosslink” is the middle of the H - iBGP) - Each router has at least a link downstream into my public “outside” segment. I run an FHRP here. This is where my DMZ firewalls, VPN endpoints etc. have their outside interfaces. Let’s also say I only have a /24 of PI. I need to number the crosslink and the loopbacks. The upstreams will use their own /30 / /31 let’s say for the top of the H. My downstream interfaces will have my /24 (or parts of it) on the bottom of the H. My understanding and instinct is that at least the crosslink should be numbered with public addresses. One scenario where this might matter is if router2 loses his inside interface (ex: switch failure) - he still needs to be able to deliver traffic via crosslink via router1 and onward downstream. When this traffic traverses here, if there is any kind of error (i.e. router is sourcing an ICMP packet of some kind) - this will be sourced from router1’s crosslink yes (assuming router1 is generating the error of course) ? Loopback’s may be negotiable, as only router1/2 are using these to pin up iBGP. Nevertheless, my instinct would be to also use public addresses here. As I said in the tl;dr - my main point of contention here is breaking up my /24 I.e. use the very top /30s / /31s for ptp/loop. I would then have at most the bottom /25 to use contig. on my “lan” - and I would need to use the next /26, /27 and so on in some manner for the space to be useable... Here are some other options, and my understanding of the pros/cons: - Use RFC1918 Makes my eye twitch out of the gate. Not to mention packets sourced from here *should* get blocked by my upstreams by way of uRPF. Likely to be filtered at other points and directions as well… - Get a /29 from one of the ISPs for ptp/loops Better than RFC1918. Kind of weird. If this is from isp1 - should have no issues sourcing toward them. Might have issues (uRPF) toward isp2. Announce this via BGP / no-export to both ISPs ? Now it’s getting even weirder… - Use my own PI space Should have no filtering issues at all. Now I have to deagg my /24 and use the pieces (largest /25). Am I making too big of a deal of this ? If you’ve read this far - I do appreciate it. Anxious to hear feedback on this. PS: I would likely ACL on my upstream interfaces to block direct packets to my routers themselves as well.

6 11

RE: Google IP Geolocation
by Michael K. Spears 26 Mar '21

26 Mar '21

Sweet, that’s massively helpful. I just found the link to request access to the Google ISP portal. Thank you, Michael K. Spears From: Brendan Halley <brendan(a)halley.net.au> Sent: Friday, March 26, 2021 6:18 PM To: Michael K. Spears <michael(a)spears.io> Subject: Re: Google IP Geolocation Hey, Google ISP portal is your best bet. Can do it self service. Another way is to get a few Android devices onto the IP range. Google use them heavily for working out Geo. Brendan On Sat, 27 Mar 2021, 9:14 am Michael K. Spears, <michael(a)spears.io<mailto:michael@spears.io>> wrote: Anyone have a good contact at Google who can help with IP geolocation? I have a /24 where anything related to Google is in the wrong language. Thank you, Michael K. Spears

1 0

FCC seeks information about wireless service provider's disaster prepardness
by Sean Donelan 26 Mar '21

26 Mar '21

The same FCC which keeps outage reports secret from the public (and congress?), is seeking information about wireless service provider's safety measures during disasters. https://docs.fcc.gov/public/attachments/DA-21-362A1.pdf How have mobile wireless service providers addressed and improved network reliability in the face of natural disasters? Overall, what resiliency measures are most effective? How can these measures be improved? How have customers responded to new measures? We specifically seek comment on steps wireless mobile providers have taken to ensure network resiliency, including but not limited to: back up power in areas prone to planned power outages to mitigate wildfires; pre-storm staging processes; roaming agreements that can be activated quickly following a natural disaster; effective coordination with power companies, municipalities, and backhaul providers; diversification of backhaul options in disaster prone areas; availability of deployable network assets; network infrastructure sharing among operators during natural disasters; and communicating disaster-related information with customers, particularly members of vulnerable populations, including individuals who are low-income, members of the disabilities community, or non-English speaking. Are there successful network resiliency policy measures for fixed networks that have been applied to wireless networks, especially given that much of the backhaul for wireline providers is the same as wireless providers? We also seek comment on cost and benefit issues associated with implementing measures to maintain and improve resiliency of mobile wireless networks.

1 0