- Test - lists.nanog.org

test-ipv6.com / omgipv6day.com down
by Jason Fesler 05 Jun '12

05 Jun '12

I know a lot of people are using / pointing to test-ipv6.com . The hardware picked a bad week to quit sniffing glue. I"ll be working on trying to get it back up today, I need to source hardware. Also looking at borrowing a VM for short term. (speaking only for @test-ipv6.com, not for $employer - my personal mail address is down too).

7 12

IPv6 evolution
by Matthew Luckie 04 Jun '12

04 Jun '12

IPv6 paths that are the same as an IPv4-level path are correlated with better IPv6 performance according to: "Assessing IPv6 Through Web Access - A Measurement Study and Its Findings" http://repository.upenn.edu/ese_papers/602/ At the Feb NANOG I gave a lightning talk on trends involving dual-stack ASes, beginning with the fraction of AS-level paths that are the same in IPv4 and IPv6. As of Jan 2012, 40-50% of AS-level paths are the same in v4 and v6 for dual-stacked origin ASes. http://www.nanog.org/meetings/nanog54/presentations/Monday/Luckie_LT.pdf We've looked further into the evolution of IPv6 since then. In particular we looked at "what could be". We find that 95% of AS-level paths could be the same today: where an IPv4 path contains ASes that are not found in an IPv6 path to the same dual-stacked origin, we check to see if the AS is observed in an IPv6 BGP path, and thus the AS is IPv6 capable at a minimum. A brief blog post on this is at: http://blog.caida.org/best_available_data/2012/06/04/ipv6-what-could-be-but… Matthew

1 0

Google Public DNS contact
by alex-lists-nanog＠yuriev.com 04 Jun '12

04 Jun '12

Hello, If anyone has a contact in the Google Group that deals with Google's Public DNS servers ( i.e. the 8.8.8.8/8.8.4.4 creatures ) could that person kindly drop me an email off list? I believe there might be an issue with some of the servers. Thanks, Alex

2 1

Cat Humor
by Eric Wieling 04 Jun '12

04 Jun '12

I'm not looking for help, just thought this was hilarious. "Mark called in from XO he stated a tech was on site and found out that client used a CAT 6 cable instead of a CAT 5 cable and XO doesn't have a "connecting piece" for the CAT 6 cable. he stated if client gets a wire/cable guy out there to fix issue, XO can send out a tech to make sure they hook up everything correctly."

2 1

Wacky Weekend: The '.secure' gTLD
by Jay Ashworth 04 Jun '12

04 Jun '12

"The proposal comes from Alex Stamos of research firm iSec Partners, and would appoint Artemis Internet as the gatekeeper of .secure. Artemis would require registered domains to encrypt all web and email traffic (except for HTTP redirects funneling connections towards the appropriate TLS-encrypted site), use DNSSEC, and deploy DomainKeys Identified Mail (DKIM) for spam prevention. In addition, Artemis would employ a rigorous screening process to verify registrants' identities (including reviewing articles of incorporation and human interviews), and routinely conduct security scans of registered sites. The venture has $9.6 million (US) in funding provided by Artemis' parent company NCC Group, a UK-based IT security firm." https://lwn.net/Articles/497254/ Discuss. Debate. Digress. Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274

12 16

bgp best practice question
by jon Heise 04 Jun '12

04 Jun '12

I need to make one of our data centers internet accessible, i plan to advertise a /24 out of our existing /22 network block at our new site. My question is for our main datacenter, is it a better idea to continue to advertise the full /22 or advertise the remaining /23 and /24 networks ? - Jon Heise

3 2

Questions about anycasting setup
by Anurag Bhatia 04 Jun '12

04 Jun '12

Hello everyone. I am working on creating a small anycasting based setup with 3-4 servers in US. Plan is to use this for DNS and later for CDN setups. I have few confusions in mind and was wondering if you guys here can put some light on them: 1. For anycasting does announcing a /24 from different ASNs (of different datacenters) makes sense or it will be an issue to have a block being announced from different ASNs and I should avoid and prefer having own router below datacenters network and eventually use one single ASN to announce the anycasting block? 2. We plan to use this anycasting based setup for DNS during initial few months. Assuming low traffic for DNS say ~10Mbps on average (on 100Mbps port) and transit from just single network (datacenter itself) - is this setup OK for simple software based BGP like Quagga or Bird? Certainly colocating routers will be slow & expensive. Does it offer any direct advantage in such simple setups? 3. IPv6! - I am looking at possibility of having support of IPv6 in anycast right from start. Can't really find a good prefix size for anycasting announcement. I can see Hurricane Electric as well as Google using whole /32 block for IPv6. So is /32 is standard? We have only one /32 allocation from ARIN and thus if using /32 seems like hard deal - we have to likely get another /32 just for anycasting? or we can use /48 without issues? Also, is /48 a good number for breaking /32 so that we can do /48 announcements from different datacenters in simple uni casting setup? I apologize for any wrong questions/logic - really new to this. Please correct me if I am wrong on any concept. Appreciate your help. Thanks. -- Anurag Bhatia anuragbhatia.com or simply - http://[2001:470:26:78f::5] if you are on IPv6 connected network! Twitter: @anurag_bhatia <https://twitter.com/#!/anurag_bhatia> Linkedin: http://linkedin.anuragbhatia.com

7 16

WaPo: SHODAN search engine exposes insecure SCADA
by Jay Ashworth 04 Jun '12

04 Jun '12

... among other things. http://www.washingtonpost.com/investigations/cyber-search-engine-exposes-vu… If the gov is worried about 'cyber'-attacks on critical infrastructure, at least now we know what tool they can use to find the low hanging fruit. As I asked once before (:-), any black-sunglasses types hanging around? Don't answer; just go to work. Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274

1 0

Comcast Paid Peer Pricing
by Nabil Sharma 03 Jun '12

03 Jun '12

Dear NANOG: I seek pricing on Comcast AS7922 paid peer at following commit level: 1G 10G 100G Please reply in private and I will sum up on list. Sincerely, Nabil

8 10

NANOG 55: Submit your Lightning Talks!
by Tom Daly 03 Jun '12

03 Jun '12

Hello NANOG 55'ers, Welcome to Vancouver. On behalf of the NANOG Program Committee, I'm pleased to announce that we're accepting Lightning Talk submissions via our tool at https://pc.nanog.org/. Log in, submit a talk, and wait. We'll be announcing the first round of LTs late this evening. How does it work? - You come up with an idea for a 10 minute talk. You submit an abstract to the tool at https://pc.nanog.org. - The Program Committee reviews the talks in the tool, and each PC member rates their top 3 choices. - Around 10pm Sunday and Tuesday evenings, we'll select the top 3 rated talks in the tool, and include them in the following day's Lightning Talk session. - If you are selected to present a Lightning Talk, you'll be notified by email on how to submit your slides to the NANOG PC. No idea is too ridiculous for a talk! No topic is too crazy! Submit your talk now and enjoy the rush of a being a real, live, NANOG presenter! For the NANOG PC, Tom Daly -- Tom Daly @tomdyninc | tom(a)dyn.com | http://dyn.com Dyn | 150 Dow Street | Manchester, NH 03101, USA

1 0