- Test - lists.nanog.org

Reviewers needed: How Internet Peering Improves Security
by wbn 07 May '14

07 May '14

Hi fellow NANOGers - I recently spent some time with peering coordinators at industry events (NANOG, EPF, AFPIF, UKNOF, etc.) where I asked “How does Internet Peering affect Internet Security?” The result of this exercise is a white paper, currently in its draft 4-page form, entitled “How Internet Peering Improves Security.” What I need now are a handful of people that are interested in this subject and willing to let me talk through the draft in order to solicit direct feedback. If interested, please send email to wbn(a)DrPeering.net with subject: "Review How Internet Peering Improves Security" and I will reach out to schedule some time. Thanks in advance - Bill PS - Here is the abstract to help you decide if you are interested in helping me document this for the community, and yes, as usual, I will be happy to share the resulting white paper with anyone interested. How Internet Peering Improves Security William B. Norton <wbn(a)DrPeering.net> Abstract Denial-of-Service attacks continue to flood the Internet at increasing scale. They attack specific targets, while, as a side affect, disrupt any traffic that traverses the network attack paths. During these attacks, impacted Internet users may experience intermittent problems, such as video freeze frames, garbled audio during phone or Skype calls, or error messages indicating that their Internet cloud service is unavailable. The ubiquitous and open nature of the Internet is both its value and its downfall. All one needs for access to cloud storage systems (DropBox, Box.net, etc.) is an Internet connection. This also means that attackers need only a few thousand broadband computers, infected with viruses and taken over as zombies, to exploit this open Internet ecosystem and overwhelm even the most robust Internet services. The attacks are not predictable in time, scope, or scale, and the impacts are far reaching, well beyond the source and destinations of the attacks. For these reason, the commodity Internet may not suitable for a subset of Internet applications. For example, some enterprise mission-critical applications require consistency simply unavailable from today’s Internet Transit services. There is however a well-known interconnection approach that improves this situation: an interconnection technique call “Internet Peering.“ This paper will introduce Internet Peering and discuss how Internet security is improved simply by using this common interconnection technique.

2 1

Anternet
by Larry Sheldon 07 May '14

07 May '14

Offered for your amusement--no followup. http://kottke.org/14/04/the-anternet -- Requiescas in pace o email Two identifying characteristics of System Administrators: Ex turpi causa non oritur actio Infallibility, and the ability to learn from their mistakes. (Adapted from Stephen Pinker)

11 10

Re: US patent 5473599
by Johnny Eriksson 07 May '14

07 May '14

Jared Mauch <jared(a)puck.nether.net> wrote: > > Your point being? > > That the "BSD" community sometimes doesn't play well with others, > and certainly won't fess up when they make a mistake and cause > collateral damage. The "BSD" community is larger than OpenBSD, and larger than Theo's ego, much to said persons disappointment. There are other BSDs out there. > - Jared --Johnny

1 0

RE:Getting pretty close to default IPv4 route maximum for 6500/7600 routers.
by Darin 06 May '14

06 May '14

And since those puppies are going to need a reload after adjustment make sure your not exposed to the component decay issue for cards manufactured between 2005-2010 or you could have a interesting night. We've hit that issue on three different 7600 chassis. Darin -----Original Message----- From: NANOG [mailto:nanog-bounces@nanog.org] On Behalf Of Drew Weaver Sent: Tuesday, May 06, 2014 10:39 AM To: 'nanog(a)nanog.org' Subject: Getting pretty close to default IPv4 route maximum for 6500/7600 routers. Hi all, I am wondering if maybe we should make some kind of concerted effort to remind folks about the IPv4 routing table inching closer and closer to the 512K route mark. We are at about 94/95% right now of 512K. For most of us, the 512K route mark is arbitrary but for a lot of folks who may still be running 6500/7600 or other routers which are by default configured to crash and burn after 512K routes; it may be a valuable public service. Even if you don't have this scenario in your network today; chances are you connect to someone who connects to someone who connects to someone (etc...) that does. In case anyone wants to check on a 6500, you can run: show platform hardware capacity pfc and then look under L3 Forwarding Resources. Just something to think about before it becomes a story the community talks about for the next decade. -Drew

2 1

linkedin.com abuse admins around?
by goemon＠anime.net 06 May '14

06 May '14

If there is anyone from linkedin.com abuse around please let me know. I've been trying for 2 months to get an abuse issue resolved. -Dan

4 3

Shared Transition Space VS. BGP Next Hop [was: Re: Best practices IPv4/IPv6 BGP (dual stack)]
by Chris Grundemann 06 May '14

06 May '14

Hi Mans, On Fri, May 2, 2014 at 2:35 PM, Måns Nilsson <mansaxel(a)besserwisser.org>wrote: > This is a field where v4 next-hops are essential to make things > work. <rant>In that context, allocating 100.64.0.0/10 to CGN was > especially un-clever... </rant> > Would you expound a bit on what you mean here? I don't quite follow but I am very interested to understand the issue. Thanks! ~Chris -- @ChrisGrundemann http://chrisgrundemann.com

8 14

AusNOG 2014 Call for Presentations
by Mark Prior 06 May '14

06 May '14

Call for presentations for AusNOG 2014 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Swissotel Sydney 4 & 5 September 2014 Topics =-=-=- Internet operations can be a broad topic and the programme committee will be short-listing presentations in the following focus areas: * Improving the redundancy/resiliency/sustainability of your network * Making leaps in service or network availability * Taking the network operations BCP to the next level * Using 'offline' communications tools to keep the network working * How technology is changing network architectures * Evolution in network architectures and scaling issues * Analysis of relevant major operational events of the year This year we will be reintroducing a "Peering Forum". In this part of the programme we hope to include: * Peering related talks * Peering personals from various networks * IX updates Additional topics that are of interest to the network operator community are also welcome at AusNOG 2014. Naturally, presentations of a marketing nature are not welcome at this technical event. Notes to presenters =-=-=-=-=-=-=-=-=-= Preference will be given to presentations that result in actual operational outcomes. Session speakers should be prepared to present for 30 minutes. Keynote speakers will be expected to present for 45 minutes to 1 hour. Short presentations of strong operational content are also acceptable. Once the final slides are submitted, changes will only be permitted where the presentation requires the most up to date information or data. By submitting a presentation for consideration in the AusNOG 2014 programme, and if selected the presenter will allow AusNOG to: * Take photographs of the presentation and presenter * Record and rebroadcast video and audio of the presentation and presenter * Redistribute the presentation slides, audio, video, and photographs electronically, on the AusNOG website, or otherwise but leaving all intellectual property in the hands of presenter or rightful property holder[1]. Deadlines =-=-=-=-= 09 June: Submission of presentation title, presentation description (300 words), and presenter biography (200-400 words) 04 July: Presenters notified of their acceptance status as an AusNOG 2014 presentation. 27 August: Submission of final presentation slides as Portable Document Format (pdf), PowerPoint, or Keynote. Provision of a recent digital photograph (<500k) of the presenter. All submissions must be sent to organisers at ausnog.net. A separate call for lightning talks will be made closer to the AusNOG 2014 event. As in previous years you must be registered to attend AusNOG 2014 in order to be considered for a lightning talk. [1]: AusNOG accepts that some speakers are unable to allow us to archive their presentation due to company or corporate policy, and if the situation arises AusNOG will delete all copies in its possession after the presentation. Mark. For the AusNOG Board

1 0

Paging HP DNS admin
by Mark Radabaugh 05 May '14

05 May '14

Dear HP: If your not going to support IPv6 can you at least not return SRVFAIL when asked for an AAAA record: root@spoons:/etc/mail # dig AAAA onramp01.hpeprint.com ; <<>> DiG 9.8.3-P4 <<>> AAAA onramp01.hpeprint.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 61583 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;onramp01.hpeprint.com. IN AAAA And what genius thought that emailing documents to printers was a good idea in the first place? Nothing like taking graphics, turning it into 7 bit text, and sending it through a system never intended for the purpose. Supporting luser email is a big enough pain in the arse, now I have to deal with your idiotic printers as well? Gee thanks! Mark

6 8

Observations of an Internet Middleman
by staticsafe 05 May '14

05 May '14

http://blog.level3.com/global-connectivity/observations-internet-middleman/ -- staticsafe https://asininetech.com

1 0

[NANOG-announce] NANOG Event Updates
by Betty Burke <betty＠nanog.org> 05 May '14

05 May '14

NANOGers: A few reminders regarding upcoming NANOG Events: - NANOG ON THE Road - LA <https://www.nanog.org/meetings/road3/home>is fast approaching, Tuesday, May 20, 2014. If you have not yet registered for this free one day event, consider doing so now<https://www.nanog.org/meetings/road3/home/registration>. The agenda <http://www.nanog.org/meetings/road3/home/agenda> is now posted, the day is sure to be of value to all. If you know of someone local and not on the NANOG list, please pass along this information. - NANOG Education Classes<https://www.nanog.org/meetings/education/bellevue_education_classes/home> in Bellevue, will be held on Sunday, June 1, 2014. Two classes will be offered, Routing Fundamentals<https://www.nanog.org/meetings/education/routing_fundamentals_bellevueclass>, and IPv6 Routing Fundamentals<https://www.nanog.org/meetings/education/ipv6routing_fundamentals_bellevuec…>. The classes will help prepare students for transition into current world operations of the Internet. If you know of someone who would benefit from the NANOG experience offered, please pass along this information. - Lastly, NANOG 61 <https://www.nanog.org/meetings/nanog61/home> in Bellevue is a few weeks away, June 2-4, 2014. The NANOG 61 Highlights<https://www.nanog.org/meetings/nanog61/agendahighlights> page provides an over-view of what attendees should expect while attending the meeting. The NANOG Program Committee has been hard at work building another outstanding program. The Pre-agenda and Topics<https://www.nanog.org/meetings/nanog61/preagenda> page is available and the full agenda will be posted soon. - The NANOG 61 meeting Registration<https://www.nanog.org/meetings/nanog61/registration> fee will increase on Monday, May 12, 2014, and the NANOG Hotel Block<https://www.nanog.org/meetings/nanog61/hotelinformation> will expire on Friday, May 16, 2014. If you have not yet registered, or made your room reservation, consider doing so this week! - NANOG 61 Fellowships <https://www.nanog.org/resources/fellowships> are available. If you or a colleague are interested in attending NANOG 61 and need some travel assistance, please do consider applying. - Consider having your company join the growing number of NANOG 61 Sponsors <https://www.nanog.org/meetings/nanog61/sponsors> in Bellevue. A few Sponsorship opportunities<https://www.nanog.org/sponsors/opportunities> remain. If you are not currently a NANOG member <https://www.nanog.org/membership>, do consider joining the 556 NANOGers who find value in being a part of the NANOG governance process, joining is easy<https://www.nanog.org/membership/join> . Should you have any questions about NANOG, please do not hesitate to contact nanog-support(a)nanog.org or feel free to contact me directly. Sincerely, Betty -- Betty Burke NANOG Executive Director 48377 Fremont Boulevard, Suite 117 Fremont, CA 94538 Tel: +1 510 492 4030 www.nanog.org _______________________________________________ NANOG-announce mailing list NANOG-announce(a)mailman.nanog.org http://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0