April 2023 - Test - lists.nanog.org

UltraDNS contact
by Matthew Crocker 26 Apr '23

26 Apr '23

Can anyone from UltraDNS contact me off list please? I have some security issues I’d like to discuss with you. Thanks -Matt

1 0

OARC 41- Call for Contributions
by John Todd 26 Apr '23

26 Apr '23

OARC 41 will be a two-day hybrid meeting and the tentative dates are 6th-7th September to be co-located with ICANN DNS Symposium in Asia. The Programme Committee is seeking contributions from the community. All DNS-related subjects and suggestions for discussion topics are welcome. For inspiration, we provide a non-exhaustive list of ideas: * Operations: Any operational gotchas, lessons learned from an outage, details/reasons for a recent outage (how to improve TTR, tooling) * Deployment: DNS config management and release process.Monitoring: Log ingestion pipeline, analytics infrastructure, anomaly detection * Scaling: DNS performance management and metrics. Increasing DNS Server Efficiency * Security/Privacy: DNSSEC signing and validation, key storage, rollovers, qname minimization, DoH/DoT The presentations can be either a full-length presentation - 20 mins (+5 mins Q/A) or a lightning presentation - 10 mins (+5 mins for Q/A) Workshop Milestones: 2023-04-16 Submissions open via Indico 2023-06-10 Deadline for submission (23:59 UTC) 2023-06-27 Preliminary list of contributions published 2023-07-11 Full agenda published 2023-08-08 Deadline for slideset submission and Rehearsal 2023-09-06 OARC 41 Workshop - Day1 2023-09-07 OARC 41 Workshop - Day2 The Registration page and details for presentation submission are published at: <https://www.dns-oarc.net/oarc41> To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. Example guidelines for presentation slides: https://www.grammarly.com/blog/presentation-tips/ Additional information for speakers of OARC 41: * Your talk will be broadcast live and recorded for future reference * Your presentation slides will be available for delegates and others to download and refer to, before, during and after the meeting * Remote speakers have mandatory rehearsal on 2023-08-08 at 14:00 UTC. It would be very useful to have your slides (even if draft) ready for this. Note: DNS-OARC provides registration fee waivers for the workshop to support those who are part of underrepresented groups to speak at and/or attend DNS-OARC. More details will be provided when registration opens. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via submissions(a)dns-oarc.net OARC depends on sponsorship to fund its workshops and associated social events. Please contact sponsor(a)dns-oarc.net if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) John Todd, for the DNS-OARC Programme Committee -- John Todd - jtodd(a)quad9.net General Manager - Quad9 Recursive Resolver

1 0

IPv4 Subnet 23.151.232.0/24 blackholed?
by Neel Chauhan 26 Apr '23

26 Apr '23

Hi, I recently got the IPv4 allocation 23.151.232.0/24 from ARIN. I also had my hosting company ReliableSite announce it to the internet. Right now, I can only access networks that peer with ReliableSite via internet exchanges, such as Google, CloudFlare, OVH, Hurricane Electric, et al. It seems the Tier 1 ISPs (e.g. Lumen, Cogent, AT&T, et al.) are blackholing the IPv4 subnet 23.151.232.0/24. Could someone who works at a Tier 1 NOC please check and remove the blackhole if any exists? Normally when ReliableSite announced my prior (then-leased) IPv4 space it gets propagated via BGP almost immediately. This time it's not going through at all. Best, Neel Chauhan

6 6

Reverse DNS for eyeballs?
by Forrest Christian (List Account) 25 Apr '23

25 Apr '23

I have a feeling that I might be stepping into a can of worms by asking this, but.. What's the current thinking around reverse DNS on IPs used by typical residential/ small business customers. Way way back in the day I used to generate "filler" reverse dns for all of these ranges .. that is, records like "45.100.51.198.in-addr.arpa IN PTR 198-51-100‐45.dialup.example.com", and then add a forward A record to match. We had a procedure to override this generic domain upon customer request when a static IP was assigned, such as for a mail server. As time has marched on, and other people were responsible for the reverse dns zones, cruft from old customers no longer with us has accumulated in the reverse DNS override file and I recently discovered that many newer ranges are either nonexistent or not updated. As I'm in the process of cleaning up several other related messes, I'm feeling I should clean this one up too. I've kinda felt for a while now that reverse dns isn't really needed for the customer IPs but before I dump the whole thing overboard and switch to returning NXDOMAIN unless the customer really needs a reverse dns record I figured I'd ask what the current thinking is for these among the internet community. I'm not talking about reverse dns for infrastructure/router IPs here, as I still feel those need to be kept up to date. This is just for the individual end user IPs.

11 13

Re: Windstream/Kinetic OSP assistance/clie sought
by Justin Streiner 24 Apr '23

24 Apr '23

Other people on their street do have Kinetic, and I believe Windstream laid cable from the street to their house, but they are being told there are no facilities to connect them to an OLT or some other type of termination device. Thank you jms On Sat, Apr 22, 2023, 23:58 Alex Ryu <moonhunt(a)gmail.com> wrote: > It is new construction home, it may be HoA, so it is controlled by HoA > which may have some deal with one provider for landline. > > So it may be dictated by HoA until it reach to certain level when that > binding deal is expired. > > > > > > Sent from Mail <https://go.microsoft.com/fwlink/?LinkId=550986> for > Windows > > > > *From: *Justin Streiner <streinerj(a)gmail.com> > *Sent: *Saturday, April 22, 2023 10:46 PM > *To: *NANOG <nanog(a)nanog.org> > *Subject: *Windstream/Kinetic OSP assistance/clie sought > > > > Some of my family recently moved to an area of North Carolina where > high-speed residential Internet connectivity options seem to be very > limited. Outside of the options below, the only thing they're able to get > is satellite Internet service, and the performance has been very poor > > > > They moved into an area where the neighbors have Kinetic (Windstream's > Internet service) but my relatives have been told that there are no > facilities available for them. This is new construction, so perhaps it's > possible that their address hasn't been added into whatever systems > Windstream/Kinetic use for service pre-qualification? > > > > Is there anyone I can talk to at Winstream to find out if it is indeed > possible to get service at their address, or if there is way I can get past > the gatekeepers? > > > > Any guidance from someone in the know at Windstream would be greatly > appreciated. > > > > Thank you > > jms > > > > >

2 1

SoCal T-Mobile IPv4 sites inaccessible
by Samuel Jackson 24 Apr '23

24 Apr '23

I posted this on the outages mailing-list too, and I am hoping to get more eyeballs on this while also checking in to see if this is isolated to just us. On T-Mobile, we do not seem to be able to get to ipv4 sites. ipv4.google.com does not load, ipv6.google.com does. Even www.t-mobile.com does not seem to be working. I Tried this with LTE (phone) and their home-internet service. Anyone else seeing this? Thanks in advance.

1 0

Windstream/Kinetic OSP assistance/clie sought
by Justin Streiner 22 Apr '23

22 Apr '23

Some of my family recently moved to an area of North Carolina where high-speed residential Internet connectivity options seem to be very limited. Outside of the options below, the only thing they're able to get is satellite Internet service, and the performance has been very poor They moved into an area where the neighbors have Kinetic (Windstream's Internet service) but my relatives have been told that there are no facilities available for them. This is new construction, so perhaps it's possible that their address hasn't been added into whatever systems Windstream/Kinetic use for service pre-qualification? Is there anyone I can talk to at Winstream to find out if it is indeed possible to get service at their address, or if there is way I can get past the gatekeepers? Any guidance from someone in the know at Windstream would be greatly appreciated. Thank you jms

1 0

Re: Reverse DNS for eyeballs?
by Willy Manga 22 Apr '23

22 Apr '23

. On 22/04/2023 16:00, nanog-request(a)nanog.org wrote: > [...] > [..] Really, reverse DNS these > days is mostly only useful for: > > - mail servers (where it shows a modicum of control and clue) > - infrastructure/router IPs (so mtr/traceroute can show useful info) - Peers in an Internet eXchange Point ( a subset of the previous bullet point) -- Willy Manga @ongolaboy https://ongola.blogspot.com/

1 0

Looking to work through GeoIP issue with Square
by Frank Bulk 21 Apr '23

21 Apr '23

My google-fu is failing me - I'm looking to find out which GeoIP service Square uses, or a path to work through a GeoIP issue with them. A client of ours uses Square and unfortunately one of the blocks (23.247.204.0/22) we received at ARIN was at one time associated with France. As you can imagine, they've geo-fenced some of their financial services. The GeoIP issue was fixed on MaxMind many months ago, and another client worked through this issue with AWS, but apparently Square uses yet another data source. If someone can help me on or pm me off-list, that would be great. Thanks, Frank AS53347 AS18883

1 0

CHI-NOG11 - Agenda - May 11th
by Tom Kacprzynski 21 Apr '23

21 Apr '23

We are pleased to announce that the Chicago Network Operators Group will host their 11th annual conference (CHI-NOG 11) on May 11th, 2023 in Chicago, IL. Stop by and see our great agenda. Presentations - Design and Implementation of the Illinois Express Quantum Metropolitan Area Network by Joaquin Chung (University of Chicago) - Seeing the Light: How Optical Transceiver Analytics Can Illuminate Your Data by Javier Antich (Selector AI) - gRIBI – an open interface for programming your RIB by Steve Ulrich (Arista) - Stand Up for Your Routes! Using the Resource Public Key Infrastructure (RPKI) by Brad Gorman (ARIN) - Blockchain in Networking by Mike McBride (Futurewei) - Peering Automation Then and Now by Matt Griswold (FullCtl) - A Small Data Approach to Flow Analysis by Shannon Weyrick (Netbox Labs) - Documentation, Automation, Verification, Oh my! by Dan Kelcher (IP Fabric) - WISP Network Practices and Technologies by Justin Wilson (J2 Consulting) - Simplifying Network Observability Device Onboarding with Nautobot by Nate Gotz (Network to Code) Detailed agenda can be found at https://chinog.org/chi-nog-11/agenda-11/ Registration is still open, but ending soon. For more details please see https://chinog.org/chi-nog-11/registration/ Thank you Tom Kacprzynski

1 0