- Test - lists.nanog.org

Bermuda connectivity
by Peter Nowak 22 May '13

22 May '13

Hello, I'm looking for a carrier to provide connectivity between New York (111 8th or 60 Hudson) and Bermuda. Can someone point me in the right direction? Thanks Peter

5 4

Re: Dear NANOG Gods
by Joe Abley 21 May '13

21 May '13

Since some people were interested (on- and off-list), see below. On 2013-05-21, at 15:32, Mehmet Akcin <mehmet(a)icann.org> wrote: > hey there > > we have a case from http://www.skbcases.com 20U 20" > > they are really reliable (been using them since 6 years, shipped meeting equipment for ICANN before and also servers as joe mentioned below > > let me know how we can help > > mehmet > > On May 21, 2013, at 12:27 PM, Joe Abley <joe.abley(a)icann.org> wrote: > >> Hey, >> >> Do you remember where you bought those flight cases we used to ship Dell 1Us around the place? >> >> People on NANOG want to know :-) >> >> >> Joe >> >> Begin forwarded message: >> >>> From: Jason Faraone <JFaraone(a)paulo.com> >>> Subject: RE: Dear NANOG Gods >>> Date: 21 May 2013 15:10:32 EDT >>> To: 'Joe Abley' <jabley(a)hopcount.ca>, Warren Bailey <wbailey(a)satelliteintelligencegroup.com> >>> Cc: NANOG list <nanog(a)nanog.org> >>> >>> Would you happen to have a link for a flight case that would fit a 1-2u server? I was in the same situation a few days ago and ran the risky proposition of building my own box. >>> >>> -----Original Message----- >>> From: Joe Abley [mailto:jabley@hopcount.ca] >>> Sent: Tuesday, May 21, 2013 1:56 PM >>> To: Warren Bailey >>> Cc: NANOG list >>> Subject: Re: Dear NANOG Gods >>> >>> Hi Warren, >>> >>> On 2013-05-21, at 14:48, Warren Bailey <wbailey(a)satelliteintelligencegroup.com> wrote: >>> >>>> I need to ship some Dell servers, and my google skills have gotten me nowhere. Is there a decent place to find standard server size shipping boxes? Located in Socal if anyone has an extra or two.. ;) >>> >>> The last time I had to ship a box myself I went to the local UPS Canada office, since they evidently will pack and ship rather than just ship. >>> >>> The last time we had to ship a number of (Dell, actually) boxes from ICANN in LA we bought some flight cases that we could rack the servers into. Our thought was to go for reusable, rather than one-off (and we had doubts about the state of the boxes upon arrival if they weren't securely packed; a flight case with 19" rails inside seemed like a good bet). >>> >>> We found the flight cases with only minimal googling, but if you're having trouble Mehmet could no doubt hook you up. >>> >>> And if you're close to El Segundo and we can get the flight case back when you're done, you could probably just borrow ours :-) >>> >>> >>> Joe >> >

1 0

APC In-row Units
by Morgan Miskell 21 May '13

21 May '13

I realize this topic is semi off point so feel free to reply to the list or to me personally. I am wondering if anyone has any experience using the APC In-row cooling units in their data centers. I am specifically looking at the ACRD501. Do they work well? How long have you run them? Any maintenance issues? Any input would be greatly appreciated. -- Morgan A. Miskell CaroNet Data Centers 704-643-8330 x206 ---------------------------------------------------------------------------- The information contained in this e-mail is confidential and is intended only for the named recipient(s). If you are not the intended recipient you must not copy, distribute, or take any action or reliance on it. If you have received this e-mail in error, please notify the sender. Any unauthorized disclosure of the information contained in this e-mail is strictly prohibited. ----------------------------------------------------------------------------

4 3

ISOC item of interest
by bmanning＠vacation.karoshi.com 21 May '13

21 May '13

ISOC - the folks who bring you IETF standards, is seeking public input. This from Emma: ---- Hi all, In case it is of interest there is currently a public consultation on the Internet Society's mission now and in the future, you can voice your opinions by filling in the form at: https://www.internetsociety.org/form/strategic-and-business-planning-2014 If you have any questions you can mail me at <frost(a)isoc.org> and i'll forward them on for you. Cheers, Emma -----

1 0

Re: High throughput bgp links using gentoo + stipped kernel
by Nick Khamis 21 May '13

21 May '13

> This is some fairly ancient hardware, so what you can get out if it will > be limited. Though gige should not be impossible. > Agreed!!! > The usual tricks are to make sure netfilter is not loaded, especially > the conntrack/nat based parts as that will inspect every flow for state > information. Either make sure those parts are compiled out or the > modules/code never loads. > > If you have any iptables/netfilter rules, make sure they are 1) > stateless 2) properly organized (cant just throw everything into FORWARD > and expect it to be performant). > We do use a statefull iptables on our router, some forward rules... This is known to be on of our issues, not sure if having a separate iptables box would be the best and only solution for this? > You could try setting IRQ affinity so both ports run on the same core, > however I'm not sure if that will help much as its still the same cache > and distance to memory. On modern NICS you can do tricks like tie rx of > port 1 with tx of port 2. Probably not on that generation though. Those figures include IRQ affinity tweaks at the kernel and APIC level. > > The 82571EB and 82573E is, while old, PCIe hardware, there should not be > any PCI bottlenecks, even with you having to bounce off that stone age > FSB that old CPU has. Not sure well that generation intel NIC silicon > does linerate easily though. > > But really you should get some newerish hardware with on-cpu PCIe and > memory controllers (and preferably QPI). That architectural jump really > upped the networking throughput of commodity hardware, probably by > orders of magnitude (people were doing 40Gbps routing using standard > Linux 5 years ago). Any ideas of the setup??? Maybe as far as naming some chipset, interface? And xserver that is the best candidate. Will google.. :) > Curious about vmstat output during saturation, and kernel version too. > IPv4 routing changed significantly recently and IPv6 routing performance > also improved somewhat. > > Will get that output during peak on monday for you guys. Newest kernel 3.6 or 7... Thank you so much for your insight, Nick.

10 11

Re: Looking for Netflow analysis package
by Scott Weeks 20 May '13

20 May '13

> Does anyone know of a netflow collector that will do the following. <snip> -------------------------------------------- -------------Original Message------------- > From: Laura Smith [mailto:leavingin13@yahoo.com] <UCE snipped out> ------------------------------------------ -------------"Meshier, Brent" wrote: ------------ > Do not appreciate the cold call from Plixer. Please do not use the > NANOG mailing list as your personal directory for sales leads. It's a > sure fire way to get your company blacklisted among IT professionals. ------------------------------------------------- -------- tcannon(a)beatsmusic.com wrote: ---------- From: Thomas Cannon <tcannon(a)beatsmusic.com> That wasn't in your signature's disclaimer. Perhaps now would be a good time to add it? ------------------------------------------------ You haven't been here long have you... He DOES NOT need a 260 word signature (see below!) to make sure he does not get UCE from posting to NANOG. For any other sales folks out there considering doing this, Brent's warning is a good one: "It's a sure fire way to get your company blacklisted among IT professionals." scott ps. WTF is this?!? **************************************************************************************************************************************************************************************** The material contained herein is for informational purposes only and is not intended as an offer or solicitation with respect to the purchase or sale of securities. The decision of whether to adopt any strategy or to engage in any transaction and the decision of whether any strategy or transaction fits into an appropriate portfolio structure remains the responsibility of the customer and/or its advisors. Past performance on the underlying securities is no guarantee of future results. This material is intended for use by institutional clients only and not for use by the general public. Portions of this material may incorporate information provided by third party market data sources. Although this information has been obtained from and based upon sources believed to be reliable, neither Amherst Holdings, LLC nor any of its affiliates guarantee the accuracy or completeness of the information contained herein, and cannot be held responsible for inaccuracies in such third party data or the data supplied to the third party by issuers or guarantors. This report constitutes Amherst’s views as of the date of the report and is subject to change without notice. This information does not purport to be a complete analysis of any security, company or industry, including but not limited to any claim as to the prepayment consistency and/or the future performance of any securities or structures. To the extent applicable, change in prepayment rates and/or payments may significantly affect yield, price, total return and average life. Our affiliate, Amherst Securities Group, L.P., may have a position in securities discussed in this material.

9 9

Re: ISIS and OSPF together
by Brandon Butterworth 19 May '13

19 May '13

> Randy is correct But who'd follow his advice, he regularly encourages his competitors to do stupid things. brandon

1 0

ISIS and OSPF together
by Glen Kent 19 May '13

19 May '13

Hi, I would like to understand the scenarios wherein the service provider/network admin might run both ISIS and OSPF together inside their network. Is this something that really happens out there? One scenario that i can think of when somebody might run the 2 protocols ISIS and OSPF together for a brief period is when the admin is migrating from one IGP to the other. This, i understand never happens in steady state. The only time this can happen is if an AS gets merged into another AS (due to mergers and acquisitions) and the two ASes happen to run ISIS and OSPF respectively. In such instances, there is a brief period when two protocols might run together before one gets turned off and there is only one left. The other instance would be when say OSPF is used to manage the OOB network and the ISIS is used for network reachability. Is there any other scenario? Glen

10 12

Re: Looking for Netflow analysis package
by Scott Weeks 18 May '13

18 May '13

On May 17, 2013 1:54 PM, "John Starta" <john(a)starta.org> wrote: > On May 17, 2013, at 8:24 AM, Valdis.Kletnieks(a)vt.edu wrote: > > On Thu, 16 May 2013 15:16:22 -0700, "Scott Weeks" said: > >> He DOES NOT need a 260 word signature (see below!) to make sure he does > >> not get UCE from posting to NANOG. > > Actually, I think Thomas Cannon was making the opposite point - that if > > he's going to spam us all with a 260 word disclaimer, it could have been > > expanded to 263 words and add 'No cold calls'. Or just have that and lose > > the other 260 words that make absolutely no sense on a NANOG posting. > Do you believe that Brent wrote the disclaimer attached to his message? > Despite y/our opinions of such disclaimers, legal counsel in some companies > still mandate their automatic attachment on all outbound messages. The only > means of avoiding them is to subscribe to mailing lists from a personal > e-mail account. Unfortunately these companies usually also have policies > prohibiting your accessing personal e-mail accounts from company owned > resources which can minimize the usefulness of some lists. In other words, > just because we might work for "enlightened" companies doesn't mean all our > colleagues can or do. ----------------------------------------------------- ------ philfagan(a)gmail.com wrote: ------------ From: Phil Fagan <philfagan(a)gmail.com> Well put. ---------------------------------------- One, you're both missing the point. Do you think a sales droid that'll scrape a technical mailing list like NANOG for cold calls will respect whatever crap is put into a .sig? Don't answer. It's rhetorical... Two, "Unfortunately these companies usually also have policies prohibiting your accessing personal e-mail accounts from company owned resources". So don't. Set up an SSH tunnel over port 80 to your home server and access your non-paragraph-sized-signature email account from home. There's a million ways to do things and still follow corporate rules... scot

2 1

Vpn tunnel Asa 5505 to fortigate 60c
by akurenath 18 May '13

18 May '13

Hi nanog, I have a fortigate 60c connecting a vpn tunnel to an asa 5505. I have the connection setup, but it will not connect because unfortunately the isp at the fortigate end decided to give us a 192.168.13/24 address. Now what I'd like to know is if there is any way to get this vpn connection to work through a pat connection until the isp resolves this issue? Thank you for any help. Zane Sent from Samsung mobile

3 2