January 2023 - Test - lists.nanog.org

AS8075(Microsoft) Contact
by netops Network Operations 12 Jan '23

12 Jan '23

Hi, Is anybody from AS8075(Microsoft) on the list ? We are trying to establish BGP Public/Exchange Peering Sessions for almost 3 months... Multiple emails sent to peering(a)microsoft.com and inter-x(a)microsoft.com, but never heard back. Later we followed the guide and created all the connections via Azure PowerShell and again, it is in PendingApproval State for more then 1 month. Does everybody has the same experience establishing BGP Peering Sessions with Microsoft ?

2 1

AKAMAI CDN
by Nielsen Kaezer 12 Jan '23

12 Jan '23

I'm interested ASN 53172

1 0

AKAMAI CDN
by Pascal Masha 12 Jan '23

12 Jan '23

Hello, Anyone from Akamai responsible for making decisions on cluster scaling /refresh here? Kindly contact me offlist. Regards Paschal Masha

2 1

N87: Experience Atlanta, Hackathon Kicks-Off 3, Feb + More
by Nanog News 11 Jan '23

11 Jan '23

*Experience Atlanta at NANOG 87! * *Special Offers, Things To Do, Transportation, Dining, + More * NANOG 87 will take place in Atlanta, GA 13 - 15 February. *The City of Atlanta* will provide discounts for dining and activities for our NANOG community. Discover Atlanta, check out the best ways to get around the city, and make the most of your experience at NANOG 87! *EXPERIENCE ATL <https://experienceatl.com/attendconference?content_uid=146897>* *Still Time to Register for Hackathon 87! * *Hackathon Kicks-Off Friday, 3 Feb 2023!* *👉 Theme: Interacting With Sources of Truth* The NANOG 87 Hackathon will focus on Interacting With Sources of Truth, whether it’s a single database or a collection of correlated data from multiple sources. Such examples could include PAM, Configuration Databases, Datacenter Infrastructure Management Databases, Configuration Templates/Models, RPKI Validators, etc. You could develop a feature, fix a bug for an existing open-source solution or roll your own! *REGISTER NOW * <https://nanog.org/events/nanog-87-hackathon/> OARC-40 to Take Place After NANOG 87 *OARC-40 in Same Venue as NANOG 87* OARC’s 40th Workshop will be a hybrid online and in-person meeting at the Atlanta Marriott Marquis 16 - 17 Feb. — immediately after NANOG 87 in the same venue. NANOG 87 attendees are especially welcome as both meetings will have complementary and non-overlapping content. *REGISTER NOW <https://indico.dns-oarc.net/event/46/page/225-registration>* *FEATURED on NANOG TV* *Weekly NANOG TV Spotlighted Content * 🎥 This week's featured NANOG TV video (171,777 views): 👉 ▶️ Tutorial: Tutorial Everything You Always Wanted to Know About Optical Networking with Richard Steenbergen, PacketFabric *Topics include:* * - How Fiber Works - Optical Power - Working with Optics - DWDM - Dispersion and other Impairments - Optical Myths - + More* *WATCH NOW <https://www.youtube.com/watch?v=_KFpXuHqHQg&t=2s>*

1 0

AS3491 Contact
by aaron＠digitalcrossroad.org 11 Jan '23

11 Jan '23

Hi, Would someone from AS3491 please contact me off-list? Been trying to fix a prefix acceptance issue for weeks and am getting nowhere. Thanks, Aaron

2 1

SDN Internet Router (sir)
by Mike Hammett 11 Jan '23

11 Jan '23

https://github.com/dbarrosop/sir I came across this over the weekend. Given that the project was abandoned six years ago, are there any other efforts with a similar goal (more intelligently placing routes into FIBs of low-FIB capacity devices? ----- Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP

12 43

Re: SDN Internet Router (sir)
by Mel Beckman 10 Jan '23

10 Jan '23

Mike, Your original question was: “Given that the project was abandoned six years ago, are there any other efforts with a similar goal (more intelligently placing routes into FIBs of low-FIB capacity devices?” People then, respectfully, tried to clarify your request or explain why placing routes in a low-FIB capacity device isn’t seen as being beneficial. Only now have you added the desire to simply have “more than a default route” in such a router. You can, of course, have more than a default route today - e.g., through local pref and BGP communities for things such as company routes. You haven’t said what you define as “more intelligently”, so perhaps you can more clearly explain the problem you see with the current BGP capabilities via some examples. -mel On Jan 5, 2023, at 8:02 AM, Mike Hammett <nanog(a)ics-il.net> wrote: Then please bless the world with the right way. You acknowledge that not every router in a network needs to be fully DFZ capable, but then crap on my desire to have more than a default route in one. ----- Mike Hammett Intelligent Computing Solutions<http://www.ics-il.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/ICSIL>[http://www.ics-il.com/images/googleicon.png]<https://plus.google.com/+IntelligentComputingSolutionsDeKalb>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/intelligent-computing-solutions>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/ICSIL> Midwest Internet Exchange<http://www.midwest-ix.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/mdwestix>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/midwest-internet-exchange>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/mdwestix> The Brothers WISP<http://www.thebrotherswisp.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/thebrotherswisp>[http://www.ics-il.com/images/youtubeicon.png]<https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg> ________________________________ From: "Tom Beecher" <beecher(a)beecher.cc> To: "Mike Hammett" <nanog(a)ics-il.net> Cc: "Mel Beckman" <mel(a)beckman.org>, "NANOG" <nanog(a)nanog.org> Sent: Thursday, January 5, 2023 9:55:38 AM Subject: Re: SDN Internet Router (sir) "The right tool for the job" gets into a religious argument in assuming that one's way to do the job is the only reasonable way to do the job I disagree that it's religious. I completely agree there are locations in networks that having full DFZ capable routers doesn't make technical or economic sense. But there have long been different products for those different use cases. To perhaps explain my viewpoint better,(and perhaps I didn't properly comprehend the problem you're aiming to solve) : If you are trying to use SDN stuff to shuffle routes on and off a box because you have the wrong sized routers in place, then I would argue you're doing it wrong. If you are trying to use SDN stuff to (as Christopher mentioned) make decisions that are not strictly LPM, and the equipment you have cannot do that, then that's different and entirely reasonable. If the second use case is more of what you were asking, then I apologize for misunderstanding. On Thu, Jan 5, 2023 at 9:57 AM Mike Hammett <nanog(a)ics-il.net<mailto:nanog@ics-il.net>> wrote: "The right tool for the job" gets into a religious argument in assuming that one's way to do the job is the only reasonable way to do the job. Large networks historically have a very poor (IMO) model of gigantic iron in a few locations, which results in sub-optimal routing for the rest of their network between those large POPs. I've heard time and time again that someone buying service from a major network in say New Orleans has a first hop of Dallas or Atlanta. I agree that full-route capable routers need to be in the large, central locations, but it isn't cost effective to have them at every POP, especially if you're a last-mile provider. I'd go into more examples of where it doesn't make sense to have full-route routers everywhere, but I'm afraid that the Internet would then focus on the examples instead of the core idea of intelligently putting routes into the FIBs of low-FIB routers throughout my network. ----- Mike Hammett Intelligent Computing Solutions<http://www.ics-il.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/ICSIL>[http://www.ics-il.com/images/googleicon.png]<https://plus.google.com/+IntelligentComputingSolutionsDeKalb>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/intelligent-computing-solutions>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/ICSIL> Midwest Internet Exchange<http://www.midwest-ix.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/mdwestix>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/midwest-internet-exchange>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/mdwestix> The Brothers WISP<http://www.thebrotherswisp.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/thebrotherswisp>[http://www.ics-il.com/images/youtubeicon.png]<https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg> ________________________________ From: "Tom Beecher" <beecher(a)beecher.cc<mailto:beecher@beecher.cc>> To: "Mike Hammett" <nanog(a)ics-il.net<mailto:nanog@ics-il.net>> Cc: "Mel Beckman" <mel(a)beckman.org<mailto:mel@beckman.org>>, "NANOG" <nanog(a)nanog.org<mailto:nanog@nanog.org>> Sent: Wednesday, January 4, 2023 7:36:58 AM Subject: Re: SDN Internet Router (sir) Disagree that it’s a line in the sand. It’s use the right tool for the job. If a device is low FIB, it’s that way for a reason. There are plenty of ways to massage that with policy and software, depending on capabilities , but at the end of the day, trying to sort 10 pounds of shit to store in a 5 pound bag is eventually going to end up the same way. On Tue, Jan 3, 2023 at 13:18 Mike Hammett <nanog(a)ics-il.net<mailto:nanog@ics-il.net>> wrote: There are likely more networks with 10 gigabit or less total external capacity than there are with more. Creating imaginary lines in the sand doesn't really help anyone. ----- Mike Hammett Intelligent Computing Solutions<http://www.ics-il.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/ICSIL>[http://www.ics-il.com/images/googleicon.png]<https://plus.google.com/+IntelligentComputingSolutionsDeKalb>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/intelligent-computing-solutions>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/ICSIL> Midwest Internet Exchange<http://www.midwest-ix.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/mdwestix>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/midwest-internet-exchange>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/mdwestix> The Brothers WISP<http://www.thebrotherswisp.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/thebrotherswisp>[http://www.ics-il.com/images/youtubeicon.png]<https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg> ________________________________ From: "Mel Beckman" <mel(a)beckman.org<mailto:mel@beckman.org>> To: "Mike Hammett" <nanog(a)ics-il.net<mailto:nanog@ics-il.net>> Cc: "NANOG" <nanog(a)nanog.org<mailto:nanog@nanog.org>> Sent: Tuesday, January 3, 2023 10:57:34 AM Subject: Re: SDN Internet Router (sir) It’s not a problem, due to cheap, plentiful high-speed memory and rapid prefix search silicon in backbone routers. The entire Internet routing table consumes at most a few gigabytes when fully structured (and only a few hundred Mbytes stored flat). That’s less memory than your average laptop sports. Even in the worst case scenario, where every network decides to announce only its most specific prefixes, the BGP backbone would temporarily enter an oscillating state that generates a large number of routing updates into the inter-domain routing space. In this case, BGP route damping will quickly suppress the crazies while the backbone stabilizes. Small routers should not be taking full tables, since there is no point to them being in the default free zone. For large routers, neither memory nor CPU speed are an issue. High-speed routers operating in the default-free zone have a critical path in the forwarding decision for each packet: it needs to take less than the inter-packet arrival time for minimum-sized IP packets. This is easy to achieve with today’s hardware. A router line card with an aggregate line rate across all of its point-to-point interfaces of 10Tbps (readily available in today’s gear) can process packets with just a handful of cycles in the FIB Ternary Content Addressable Memory (TCAM) using ASIC-assisted lookups. TCAM is the most expensive component you’re paying for in such a router. It’s not cheap, but backbone routers don’t need to be cheap. They just need to not be memory-constrained. -mel via cell On Jan 3, 2023, at 7:47 AM, Mike Hammett <nanog(a)ics-il.net<mailto:nanog@ics-il.net>> wrote: https://github.com/dbarrosop/sir I came across this over the weekend. Given that the project was abandoned six years ago, are there any other efforts with a similar goal (more intelligently placing routes into FIBs of low-FIB capacity devices? ----- Mike Hammett Intelligent Computing Solutions<http://www.ics-il.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/ICSIL>[http://www.ics-il.com/images/googleicon.png]<https://plus.google.com/+IntelligentComputingSolutionsDeKalb>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/intelligent-computing-solutions>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/ICSIL> Midwest Internet Exchange<http://www.midwest-ix.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/mdwestix>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/midwest-internet-exchange>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/mdwestix> The Brothers WISP<http://www.thebrotherswisp.com/> [http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/thebrotherswisp>[http://www.ics-il.com/images/youtubeicon.png]<https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg>

5 7

Fwd: [arin-announce] Reminder — Set Up 2FA On Your ARIN Online Account Before 1 February
by John Curran 09 Jan '23

09 Jan '23

Reminder - Only Two-factor access for ARIN Online as of 1 February 2023. FYI, /John John Curran President and CEO American Registry for Internet Numbers Begin forwarded message: From: ARIN <info(a)arin.net> Date: January 9, 2023 at 10:54:22 AM PST To: arin-announce(a)arin.net Subject: [arin-announce] Reminder — Set Up 2FA On Your ARIN Online Account Before 1 February Beginning 1 February 2023, ARIN will require two-factor authentication (2FA) on all ARIN Online accounts. Customers can choose between Time-Based One-Time password (TOTP), SMS-based, and Fast Identity Online 2 (FIDO2/Passkey). We had initially planned to enforce 2FA following the deployment of SMS-based 2FA, but we opted to delay the implementation of enforcing 2FA for all ARIN Online accounts until we were able to complete implementation of FIDO2 due to significant community feedback received during our community consultation on this change. FIDO2/Passkey support is now available. You can learn more about your 2FA options by visiting our website: https://www.arin.net/reference/materials/security/twofactor/ By requiring 2FA for ARIN Online accounts that control number resources, the ARIN community should see stronger security for the registry, reduced risk of account fraud attempts, and increased confidence in the integrity of their ARIN resources. We strongly encourage account holders to set up 2FA in advance of the flag day for enforcement so that this change is not interruptive to your account access after 1 February 2023. Regards, John Curran President and CEO American Registry for Internet Numbers (ARIN) ---------------------- Helpful Resources: Need help setting up your 2FA? Visit https://www.arin.net/2fa to get started. You’ll find guides on enabling 2FA via an authenticator application such as Google Authenticator, SMS, and FIDO2/Passkey. Please note that voice call authentication is not available for new activations, but voice authentication is still available for those previously signed up and approved. We are working to restore this option. We also provide information on how to receive and save your 2FA recovery codes, as well as what to do if you’ve lost access to your authenticator or SMS/Voice phone number.

1 0

Spoofer Report for NANOG for Dec 2022
by CAIDA Spoofer Project 08 Jan '23

08 Jan '23

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Dec 2022: ASN Name Fixed-By 400328 2022-12-25 208287 BAK 2022-12-26 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Dec 2022: ASN Name First-Spoofed Last-Spoofed 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2022-12-28 6128 CABLE-NET-1 2016-09-03 2022-12-22 20412 CLARITY-TELECOM 2016-09-30 2022-12-31 6181 FUSE-NET 2016-10-10 2022-12-31 271 BCNET 2016-10-24 2022-12-30 12083 WOW-INTERNET 2016-11-09 2022-12-30 14576 HOSTING-SOLUTIONS 2016-11-20 2022-12-28 852 ASN852 2017-04-16 2022-12-29 33452 RW 2018-09-19 2022-12-31 21804 ACCESS-SK 2019-06-09 2022-12-31 398836 NP-NETWORKS 2021-03-12 2022-12-25 22773 ASN-CXA-ALL-CCI-22773-RDC 2021-10-24 2022-12-28 397086 LAYER-HOST-HOUSTON 2022-06-16 2022-12-18 400517 2022-10-03 2022-12-07 11976 FIDN 2022-11-16 2022-12-31 12183 TALKIE-COMMUNICATIONS 2022-12-10 2022-12-27 33185 HIVE-DATA-CENTER 2022-12-11 2022-12-25 399296 2022-12-30 2022-12-30 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

FCC Proposes Updated Data Breach Reporting Requirements
by Sean Donelan 06 Jan '23

06 Jan '23

The Federal Communications Commission today launched a proceeding to strengthen the Commission’s rules for notifying customers and federal law enforcement of breaches of customer proprietary network information (CPNI). The Commission will look to better align its rules with recent developments in federal and state data breach laws covering other sectors. https://www.fcc.gov/document/fcc-proposes-updated-data-breach-reporting-req…

1 0