December 2022 - Test - lists.nanog.org

FCC order regarding Urth Access LLC
by Sean Donelan 08 Dec '22

08 Dec '22

The FCC is (slowly, slowly) increasing robocall enforcement. It issued a cease and desist letter, and directed all voice service providers to take steps to effectively mitigate suspected illegal robocall traffic made by or on behalf of the following: (1) Urth Access, LLC (Urth Access); (2) Fire Data LLC; (3) US Acquisitions LLC; (4) Dawood & Dawood; (5) Dawood and Company; (6) their individual associates; and (7) associated entities (collectively, the Student Loan Robocall Operation). https://www.fcc.gov/document/fcc-orders-blocking-student-loan-scam-robocall… As always consult with your own corporate lawyers. The FCC order has lots of words which mean different things to a lawyer. The FCC gets grumpy when companies fail to reply to its letters.

1 0

Spoofer Report for NANOG for Nov 2022
by CAIDA Spoofer Project 08 Dec '22

08 Dec '22

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Nov 2022: ASN Name Fixed-By 2152 CSUNET-NW 2022-11-16 19318 IS-AS-1 2022-11-28 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Nov 2022: ASN Name First-Spoofed Last-Spoofed 7029 WINDSTREAM 2016-06-21 2022-11-24 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2022-11-30 6128 CABLE-NET-1 2016-09-03 2022-11-28 20412 CLARITY-TELECOM 2016-09-30 2022-11-30 271 BCNET 2016-10-24 2022-11-24 33452 RW 2018-09-19 2022-11-21 21804 ACCESS-SK 2019-06-09 2022-11-24 53641 TOMALESBAYLAN 2019-11-29 2022-11-25 397270 NETINF-PRIMARY 2020-04-03 2022-11-28 398836 NP-NETWORKS 2021-03-12 2022-11-27 394414 E2WS 2022-05-08 2022-11-19 397086 LAYER-HOST-HOUSTON 2022-06-16 2022-11-27 11976 FIDN 2022-11-16 2022-11-24 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Reminder OARC 40 - Call for Contribution
by John Todd 08 Dec '22

08 Dec '22

Reminder: Deadline for OARC 40 abstract submission - December 20, 23:59 UTC Please note that, we are looking for contributions and remote participation is actively supported -------- Subject: OARC 40 - Call for Contribution OARC 40 will be a two-day hybrid meeting held on 16 & 17 February in Atlanta (GA), USA at 10:00 AM (Local time - EST (UTC-05:00)). The onsite part of the meeting will be colocated with NANOG 87. The Programme Committee is seeking contributions from the community. All DNS-related subjects and suggestions for discussion topics are welcome. For inspiration, we provide a non-exhaustive list of ideas: • Operations: Any operational gotchas, lessons learned from an outage, details/reasons for a recent outage (how to improve TTR, tooling). • Deployment: DNS config management and release process. • Monitoring: Log ingestion pipeline, analytics infrastructure, anomaly detection. • Scaling: DNS performance management and metrics. Increasing DNS Server Efficiency • Security/Privacy: DNSSEC signing and validation, key storage, rollovers, qname minimization, DoH/DoT The presentations can be either a full-length presentation - 20 mins (+5 mins Q/A) or a lightning presentation - 10 mins (+5 mins for Q/A) Workshop Milestones: 2022-10-22 Submissions open via Indico 2022-12-20 Deadline for submission (23:59 UTC) 2023-01-10 Preliminary list of contributions published 2023-01-17 Full agenda published 2023-01-30 Deadline for slideset submission and Rehearsal 2023-02-16 OARC 40 Workshop - Day1 2023-02-17 OARC 40 Workshop - Day2 The Registration page and details for presentation submission are published at: <https://www.dns-oarc.net/oarc40> To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. Guidelines for presentation slides: https://www.grammarly.com/blog/presentation-tips/ Additional information for speakers of OARC 40 • your talk will be broadcast live and recorded for future reference • your presentation slides will be available for delegates and others to download and refer to, before, during and after the meeting • Remote speakers have mandatory rehearsal on 2023-01-31 at 14:00 UTC. It would be very useful to have your slides (even if draft) ready for this. Note: DNS-OARC provides registration fee waivers for the workshop to support those who are part of underrepresented groups to speak at and/or attend DNS-OARC. More details will be provided when registration opens. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via submissions(a)dns-oarc.net John Todd, for the DNS-OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact sponsor(a)dns-oarc.net if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- John Todd - jtodd(a)quad9.net General Manager - Quad9 Recursive Resolver

1 0

Early Bird Reg. Ends Monday! + Light Up Your Immune System + More
by Nanog News 08 Dec '22

08 Dec '22

*NANOG 87 Early Bird Registration Ends Monday* *Deadline for Discounted Pricing Ends 12, December* Join us for NANOG 87 in Atlanta, GA, 13 - 15, February! Early bird discounted rates will end Monday, 12, December. *REGISTER NOW! <https://www.nanog.org/events/nanog-87/>* *Light Up Your Immune System This Holiday Season* The jolliness of the season can bring abnormally high levels of sugar, alcohol, and stress to our daily routines, making us more susceptible to seasonal flu and cold bugs. *Stay Jolly This Season* Your best defense is a hearty offense. So, boost your immune system with these achievable tips. *READ MORE <https://www.nanog.org/stories/healthy-for-the-holidays/>* *Trending on NANOG TV!* *Have You Watched our Latest Content on NANOG TV?* Check out one of our most viewed videos of all time. *Tutorial: Everything You Always Wanted to Know About Optical <https://www.youtube.com/watch?v=mWqe8_5SUvk>* This popular tutorial is tailored for network engineers + has been updated to cover the latest technologies. Example topics include: - How fiber works (the basics, fiber types, limitations, etc.) - Working with optics (choosing the right type, designing optical networks, etc.) - Optical power (understanding dBm, loss, using light meters, etc.) - DWDM (how it works, muxes, oadms, amps, etc.) - Dispersion (what is it, why do we care, how do we fix it) - Optical Myths. I.e., can I hurt myself looking into the fiber? Can I overload my optic? *WATCH NOW <https://www.nanog.org/news-stories/nanog-tv/>*

1 0

Experiences with commercial NOS vendors in white box space
by Graham Johnston 07 Dec '22

07 Dec '22

Good day. I'm curious to hear from those with direct, hopefully in-production, experience in using a commercial network operating system vendor along with white box switches. I'm specifically looking for operators in the service provider space, rather than data center or enterprise. I'm largely focused on Jericho2/Qumran2 based devices, with what would likely be modest feature requirements. We currently use MPLS with RSVP to build automatic paths, but don't do anything specific for traffic engineering. Segment routing isn't a requirement for today. Currently use more traditional forms of MPLS services for customer L2 and L3 VPNs, but are investigating a transition to EVPN. Automation is very much important to us, as are routing security features. Based on research, and use of vertically integrated Jericho-based switches, we aren't concerned about QoS as our needs aren't super complex. I guess I'm largely saying that we don't expect the ASIC to be the weak point in our use case, but rather the NOS or the nature of support from the vendor. I'm aware of IPInfusion and their OcNOS product, but the CLI and config syntax feels dated. I feel like I've been ruined by Cisco RPL, Juniper policy-statements, and Arista RCF and expect I would find wanting more than what route-map syntax has to offer. Can I accomplish the same complex routing policies via route-maps that I can with more modern solutions, and I'm just assuming it's limiting? Is it fair to say that even if I can achieve the same functionality, that route-maps are the poorer choice when it comes to the human interaction aspect? I know of Arrcus, but don't know much more than I can see on their website. Edge-core has an interesting reference in its Open Networking Solution Guide on their website in which they position Arrcus for core applications and IPInfusion for access and aggregation. All of which could be meaningless based on the varied definitions and expectations of what a core network is and does. Is it feature rich or just a set of fast LSR P-routers? The Edge-Cor guide also identifies Exaware and Capgemini, both of whom I know little about. Are there viable SP focused NOS vendors that I haven't touched on? Thanks in advance for any reply, be it on-list or off-list. Regards, Graham

3 2

the ipv4 vs ipv6 growth debate
by Dave Taht 06 Dec '22

06 Dec '22

I use a web plugin tool called ipvfoo to track my actual ipv4 vis ipv6 usage. I wish it worked over time. With very few exceptions I am still regularly calling ipv4 addresses in most webpages. Has anyone done a more organized study of say, the top 1 million, and how many still require at least some ipv4 to exist, and those trends over time? -- This song goes out to all the folk that thought Stadia would work: https://www.linkedin.com/posts/dtaht_the-mushroom-song-activity-69813666656… Dave Täht CEO, TekLibre, LLC

5 8

Nov 16th (Overnight Traffic Pattern)
by Nicholas Warren 06 Dec '22

06 Dec '22

I noticed something strange looking at our traffic pattern (eyeball network). Our usage normally drops very low between 4am and 6pm (central). But, on the 16th of November it never dropped. Was there a larger pattern or did a full moon only shine above our network? Nich Warren

3 2

Microsoft 365 Delisting Service
by Andrian Visnevschi 06 Dec '22

06 Dec '22

Dear community, Is there anyone from the Microsoft 365 team here ? or is there anybody who has contacts of any representative who can help with IP delisting ? We are a cybersecurity company, protecting organizations from our own cloud. Our IP ranges always had a good reputation and all online public services show our IPs as good, and not listed on any spam lists / black lists. We have a customer who is using 149.19.194.91 IP. We checked it into all public services for IP reputation and everywhere it shows up as GOOD. Anyway using Microsoft 365 Services, all emails are rejected: "*Unfortunately, messages from [149.19.194.91] weren't sent.* *Please contact your Internet service provider since part of their network is on our block list (S3150).*" We tried to delist the IP 149.19.194.91 many times through *https://sender.office.com/ <https://sender.office.com/>* but it never worked... All the time we submit the request, it says that it requires escalation, we ask for escalation and nothing happens, we are not getting any feedback for weeks... At the outlook ipStatus(*https://sendersupport.olc.protection.outlook.com/snds/ipStatus.as… <https://sendersupport.olc.protection.outlook.com/snds/ipStatus.aspx>* ) I don't see any of our IPs having an abnormal status... Has anybody encountered the same issue ? How did you get it resolved ? It looks very hard to cooperate with Microsoft, they keep ignoring us while customer is complaining and the IP was never part of any spam lists/black lists... -- *Best Regards,* Andrian Visnevschi

2 1

ipv4/25s and above
by Dave Taht 05 Dec '22

05 Dec '22

I am kind of curious as to the distribution of connections to smaller companies and other entities that need more than one ipv4 address, but don't run BGP. So, for as an ISP or infrastructure provider, what is the typical percentage nowadays of /32s /31s /30s... /25s of stuff that gets run "elsewhere"? Is there any correlation between the number of IPs a customer gets and the amount of bandwidth they buy? Obviously "retail", home use is /32s and there's an increasing amount of CGNAT, but I can't help but imagine there are thousands of folk running /27s and /29s for every /24 or /22 out there. I've been paying 15/month for a /29 for forever, but barely use it. -- This song goes out to all the folk that thought Stadia would work: https://www.linkedin.com/posts/dtaht_the-mushroom-song-activity-69813666656… Dave Täht CEO, TekLibre, LLC

26 91

Power outages Maryland near Washington DC (Plane crash into power lines)
by Sean Donelan 03 Dec '22

03 Dec '22

A small plane crashed into high-voltage transmission power lines in Montgomery County, Maryland; near Washington DC. Most of the data centers are in Northern Virginia, but some are in Southern Maryland (Wheaton, Olney, Gaithersburg and as far away as Silver Spring). https://wtop.com/montgomery-county/2022/11/outages-in-montgomery-co-after-s…

2 1