- Test - lists.nanog.org

Re: ISPs and full packet inspection
by Keith McCallion 29 May '12

29 May '12

On Thu, May 24, 2012 7:36 pm, Jay Ashworth wrote: > ----- Original Message ----- >> From: "Justin M. Streiner" <streiner(a)cluebyfour.org> >> Aside from all of the business and legal sticking points that others have >> mentioned, there are also the technical aspects of capturing, storing, transporting, analyzing, and managing those packets, and the appliances that do the heavy lifting. As your traffic grows, that problem scales 1:1 linearly, at best, and more likely n:1 linearly, or worse. The added overhead of the infrastructure needed to support this will also make >> it more difficult to be price-competitive with your peers. > TL:DR; The reasons for doing this on any kind of general basis have to be *EXCEPTIONALLY* compelling to make a business case for it, apart from any possible legal ramifications. > I used asterisks *and* capital letters; that's about an order of magnitude. > Don't forget staffing. I am a little surprised no one has referenced Wired's recent article about Libya's Internet Surveillance systems: http://www.wired.com/threatlevel/2012/05/ff_libya/all/1 It's good reading and I think does a good job of summarizing both the technical challenges but also the political implications of such a system. -Keith

2 1

Bogon list update for prefix for 5.1.0.0/19
by Evgeniy Aikashev 29 May '12

29 May '12

Dear all, We are AS21219 - PJSC Datagroup and owner of 5.1.0.0/19 block. Our customers have no access to some part of Internet if they use these IPs. Could you please update your bogon filters to permit this range. Thanks. -- Best regards, Evgeniy Aikashev network engineer PJSC DATAGROUP

8 7

Video streaming over IPv6
by Carlos Martinez-Cagnazzo 29 May '12

29 May '12

Hello, Can anyone comment on the availability of IPv6 video streaming services? I'm thinking about commercial, 'cloud'-based services a la U-Stream or Make.TV. I can roll my own, and will eventually do so, but having a commercial service that I could use would make my life so much easier :-) Any such service who is thinking about jumping on the World IPv6 Launch Day bandwagon and could use some (I'd like to think clueful) debugging can also contact me, we might be able to work something out. regards, Carlos

4 4

DNS anycasting - multiple DNS servers on same subnet Vs registrar/registry policies
by Anurag Bhatia 29 May '12

29 May '12

Greetings everyone! One small concern I wanted to discuss here. I know few registry/registrars which do not accept both (or all) name servers of domain name on same subnet. They demand at least 1 DNS server should be on different subnet for failover reasons (old thoughts). How one can deal with such case in case of anycasting setup which using one single subnet everywhere? Anyone else in community got similar issues? Thanks. -- Anurag Bhatia anuragbhatia.com or simply - http://[2001:470:26:78f::5] if you are on IPv6 connected network! Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter<https://twitter.com/anurag_bhatia>| Google+ <https://plus.google.com/118280168625121532854>

6 9

Search Link between changzhou (china) and Singapore
by Olivier CALVANO 29 May '12

29 May '12

Hi I am search a operator for a Layer 2 Link (if possible) between: Changzhou (china) Equinix Singapore anyone know operators for this ? thanks olivier

1 0

Re: DNS anycasting - multiple DNS servers on same subnet Vs registrar/registry policies
by Stephane Bortzmeyer 29 May '12

29 May '12

On Tue, May 29, 2012 at 12:21:10AM +0530, Anurag Bhatia <me(a)anuragbhatia.com> wrote a message of 28 lines which said: > I know few registry/registrars which do not accept both (or all) > name servers of domain name on same subnet. Since my employer is one of these registries, let me mention that I fully agree with David Conrad here. On Tue, May 29, 2012 at 12:54:01AM +0530, Anurag Bhatia <me(a)anuragbhatia.com> wrote a message of 42 lines which said: > I am building redundancy within that setup. I mean it will be > software based BGP so if hardware if fried up, it will break BGP > session and pull off routes anyway and for cases like DNS server > (software) failure, I will monitor it via simple bash script which > can turn bgp daemon down. You will address *some* failure modes with this setup but not all. Again, see David Conrad's examples of a fat finger adding your prefix in a route-map.

4 4

Re: NXDomain remapping, DNSSEC, Layer 9, and you.
by George Herbert 29 May '12

29 May '12

On May 28, 2012, at 22:59, bmanning(a)vacation.karoshi.com wrote: > On Tue, May 29, 2012 at 12:38:23PM +1000, Mark Andrews wrote: >> >> Putting it another way, the ISP doesn't want to be fooled even if >> it is fooling its customers. > > don't lie to us, but we lie to our customers. > > and you don't see a problem with this? > > /bill We tried saying no, we tried walking customers away, we tried not adding the feature, we tried shame, someone reputedly had dolls with pins in them. We lost. There is an endgame around that; when it's ready.... George William Herbert Sent from my iPhone

1 0

IPv6 security: New IETF I-Ds, slideware and videos of recent presentations, trainings, etc...
by Fernando Gont 29 May '12

29 May '12

Folks, * We've published a new IETF I-D entitled "DHCPv6-Shield: Protecting Against Rogue DHCPv6 Servers", which is meant to provide RA-Guard-like protection against rogue DHCPv6 servers. The I-D is available at: <http://tools.ietf.org/id/draft-gont-opsec-dhcpv6-shield-00.txt> Other IPv6 security I-Ds (such as, draft-ietf-v6ops-ra-guard-implementation) have been revised. Please check them out at: <http://www.si6networks.com/publications/ietf.html> * The slideware (and some videos!) of some of our recent presentations about IPv6 security are now available online. You can find them at: <http://www.si6networks.com/presentations/index.html> * We have also scheduled IPv6 hacking trainings in Paris (France) and Ghent (Belgium). You can find more details at: <http://www.si6networks.com/index.html#conferences> Our Twitter: @SI6Networks ipv6hackers mailing-list: <http://lists.si6networks.com/listinfo/ipv6hackers/> Thanks! Best regards, -- Fernando Gont SI6 Networks e-mail: fgont(a)si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 -- Fernando Gont e-mail: fernando(a)gont.com.ar || fgont(a)si6networks.com PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1

1 0

Re: DNS anycasting - multiple DNS servers on same subnet Vs registrar/registry policies
by maxlarson.henry＠transversal.ht 28 May '12

28 May '12

Q ------Message d'origine------ De : Randy Bush À : Anurag Bhatia Cc : NANOG Mailing List Objet : Re: DNS anycasting - multiple DNS servers on same subnet Vs registrar/registry policies Envoyé : 28 mai, 2012 17:03 > I am building redundancy within that setup. I mean it will be software > based BGP so if hardware if fried up, it will break BGP session and pull > off routes anyway and for cases like DNS server (software) failure, I will > monitor it via simple bash script which can turn bgp daemon down. So once > it is off, routing tables should take it to different node. i have a tee shirt which says All Devices Break Two Devices Will Break at Once Global BGP Never Converges randy, a co-author of 2182 Envoyé par mon BlackBerry de Digicel

3 2

[NANOG-announce] A note to all NANOG Colleagues
by Sylvie LaPerriere 28 May '12

28 May '12

*NANOG Colleagues: Just a year ago, NewNOG, prepared for the launch of NANOG 52 under a new leadership. The journey has been filled with challenges, but also with GREAT success. We delivered on our promise to ‘not break anything’ and preserve your user experience during the transition. Mission accomplished: we produced NANOG 52, 53, 54 while each time learning, documenting and improving upon the previous one. We are thankful for your tolerance with change and are confident for the future. The important highlights we gleamed from our meetings and various conversations in the community were to provide transparency in our governance and continuance of the NANOG value set. The Board and NANOG Committees representatives met off-site last August to assess NANOG’s core values, its important services and the meaning of its brand for attendees. The outcome was a 3-year strategic plan with milestones to provide this board and its successors with a documented foundation for continuity. Sponsors, members, and meeting attendees have been very supportive and pleased with our progress, and simply wish to continue to enjoy being a part of NANOG activities. That is encouraging and a sign that we are moving in the right direction. In the spirit of transparency, and to recognize the hard work and dedication of the Board and Committee members, I want to call out their achievements: - Their personal commitment to attend bi-weekly Board meetings and their dedication in showing progress on their area of responsibility. - The Board and Development Committee created a sustainable sponsorship model <http://www.nanog.org/sponsors/sponsor_opportunities.html>compliant with our non-profit status providing adequate funding for our current activities such as our mailing-lists, archives, and conferences while planning for the launch of our educational/training activities. - The Development Committee members fully met the respective Sponsorship plan targets for NANOG 52, 53, 54 and 55. We are financially sound. - The Program Committee delivered outstanding Programming for NANOG 53 and NANOG 54, exceeding all previous expectations at respectively 583 and 604 registrants. - The Program Committee delivered yet another outstanding Conference Agenda for NANOG 55 opening next week in Vancouver. - The Communications Committee continuously manages the mailing lists and our website services. - The Membership committee continues to provide value and benefits to its members since its creation in February 2011. - The Board documented the roles, responsibilities of all Committee members. - The Board executed venue contracts for NANOG 56, 57, and closing on 58. - The Board secured a support structure (Secretariat, Executive Director, Conference technical services, event webcasting) without the burden of creating an employee set of responsibilities. - The Treasurer prepared and filed our first audited financial report. - The Executive Director has lead the transition phase of moving the NANOG equipment and Intellectual property onto their new locations. - The Executive Director has continued the strong relations with ARIN as we are exploring new ways of partnering in support of our common community. - The Executive Director and the NANOG Secretariat have developed smooth operational processes. - The NANOG Secretariat is a great team. They took special care in documenting processes and procedures as we learned our new ways. We now have a solid playbook for our continued operations. They also attended all our committees, minuted and published. As we approach our Election process next October, let me share a few personal thoughts with you. We are not yet done. It is critical that we complete the service transition steps, continue to streamline the responsibilities of event planning and support. We need to execute on our commitment to launch our educational and scholarship initiatives. In preparation for the election process and the need to reflect and set new goals, I will be pleased to share with the community a summary of our Board Retreat, Strategic Goals, and a peak into our future. My hope is that you will find an activity worthy of your volunteering. Please plan to attend the NANOG Member Meeting, Sunday, June 3, 2012 at 5:45-6:45 pm (PST). See you in Vancouver, Sylvie * -- Sylvie LaPerriere NANOG Chair - www.nanog.org _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org https://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0