- Test - lists.nanog.org

How long is reasonable to fix a routing issue in IPv6?
by Mark Andrews 10 Jul '11

10 Jul '11

The below has been on going for over a week (yes it has been reported to HE) and the IETF). Not returning time exceeded really make debugging routing problems hard. Mark traceroute6 -lI www.ietf.org traceroute6 to www.ietf.org (2001:1890:1112:1::1e) from 2001:470:1f00:ffff::5a1, 64 hops max, 16 byte packets 1 dviscorg.tunnel.tserv1.fmt.ipv6.he.net (2001:470:1f00:ffff::5a0) 172.669 ms 182.219 ms 170.424 ms 2 2001:470:0:1f::1 (2001:470:0:1f::1) 178.128 ms 171.926 ms 174.877 ms 3 gige-g4-8.core1.fmt2.he.net (2001:470:0:2d::2) 172.193 ms 171.265 ms 171.221 ms 4 10gigabitethernet6-4.core1.lax1.he.net (2001:470:0:18d::2) 198.338 ms 190.680 ms 182.413 ms 5 10gigabitethernet1-3.core1.lax2.he.net (2001:470:0:72::2) 178.924 ms 189.431 ms 180.538 ms 6 2001:470:0:1e6::2 (2001:470:0:1e6::2) 181.137 ms 179.374 ms 182.321 ms 7 * * * 8 * * * 9 * * * 10 * * * 11 * * * 12 2001:1890:1fff:ffff::1 (2001:1890:1fff:ffff::1) 262.713 ms * * 13 * * * 14 * * * 15 * * * 16 * * * 17 * * * 18 * * * 19 * * * 20 * * * 21 * * * 22 * * * 23 * * * 24 * * * 25 * * * 26 * * * 27 * * * 28 * * * -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka(a)isc.org

6 9

CNN security contact?
by Chris 10 Jul '11

10 Jul '11

Yet another Casey Anthony scam floating around but via a vulnerability in CNN's advertising system so Facebook lusers think it's authentic and from CNN. GoDaddy domain and Softlayer hosting the site.. called Softlayer NOC - "1 person is in the abuse department on Sunday" -- --C "The dumber people think you are, the more surprised they're going to be when you kill them." - Sir William Clayton

1 0

Terremark's NCR in Canada?
by Ryan Finnesey 10 Jul '11

10 Jul '11

Hi All Can anyone recommend a center similar to Terremark's NCR in Canada? Cheers Ryan

1 0

<Need Help - Cisco ASA 8.4.1 to Juniper SSG-550 6.2.0r1.0VPN Configuration>
by Michael Ruiz 09 Jul '11

09 Jul '11

Hello All, I have been working for two days trying to get an ASA to setup a VPN tunnel to a SSG-550. I have the VPN tunnel Setup and ready to go on the ASA. I ran a Debug crypto IPSec 200 and crypto ikve1 200. I do the command ping PRIVATE <ip address> and I get in the console Sending 5, 100-byte ICMP Echos to 10.1.4.81, timeout is 2 seconds: IPSEC(crypto_map_check)-3: Looking for crypto map matching 5-tuple: Prot=1, saddr=10.20.1.2, sport=29733, daddr=10.1.4.81, dport=29733 IPSEC(crypto_map_check)-5: Checking crypto map CARIBOU-VPN-1 10: skipping incomplete map. No peer, access-list or transform-set specified. IPSEC(crypto_map_check)-1: Error: No crypto map matched. >From my understanding this is caused by the crypto map not being able to establish a tunnel to the Juniper. On my Juniper configuration I have built the Gateway and set the Phase 1 Proposal to "pre-g2-3des-md5" followed by "pre-g2-3des-sha" For the VPN configuration I use the predefined gateway configuration. Under the advanced button, I use the predefined of "compatible" and the Phase 2 Proposal "nopfs-esp-3des" followed by "nopfs-esp-3des" The proxy id is the local IP / Network block and the remote IP network block is the destination IP block. The only part that has me wondering, because the Juniper has multiple zones, i.e. a DMZ, Trust, and Untrust. Each Zone has its own IP block that is assigned to it. I have entered a policy into one of the zones, i.e. Untrust to Trust, input source block, destination block, specified it is a tunnel, set for bi-directional entry and that should be it. Any help in this as always will be greatly appreciated. Thank you. Thank You, MAR CONFIDENTIALITY NOTICE: This message is intended only for the individual or entity to which it is addressed and may contain information that is confidential or exempt from disclosure under applicable law. If you are not the intended recipient, you have received this communication in error. In such case, please notify us immediately by reply e-mail and immediately delete this message and its attachments. Any use, dissemination, redistribution or reproduction of this communication is strictly prohibited. Unless the message explicitly states otherwise, no e-mail correspondence claims to be a contractual offer or acceptance. LST Financial has instructed its employees not to send libelous or inappropriate statements and disclaims responsibility for such. Subject to applicable law, LST Financial may monitor, review and retain e-communications traveling through its networks/systems. By messaging with LST Financial you consent to the foregoing.

2 2

BGP Update Report
by cidr-report＠potaroo.net 08 Jul '11

08 Jul '11

BGP Update Report Interval: 30-Jun-11 -to- 07-Jul-11 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS17974 38582 2.8% 21.6 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 2 - AS9829 37847 2.8% 43.0 -- BSNL-NIB National Internet Backbone 3 - AS27817 24660 1.8% 249.1 -- Red Nacional Académica de Tecnología Avanzada - RENATA 4 - AS22646 23220 1.7% 241.9 -- HARCOM1 - Hargray Communications Group, Inc. 5 - AS32528 16548 1.2% 3309.6 -- ABBOTT Abbot Labs 6 - AS29049 16018 1.2% 36.1 -- DELTA-TELECOM-AS Delta Telecom LTD. 7 - AS5976 11107 0.8% 70.7 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 8 - AS9198 10623 0.8% 28.7 -- KAZTELECOM-AS JSC Kazakhtelecom 9 - AS14080 10264 0.8% 190.1 -- Telmex Colombia S.A. 10 - AS8151 10058 0.7% 7.7 -- Uninet S.A. de C.V. 11 - AS4134 9988 0.7% 23.2 -- CHINANET-BACKBONE No.31,Jin-rong Street 12 - AS45595 9558 0.7% 50.8 -- PKTELECOM-AS-PK Pakistan Telecom Company Limited 13 - AS5722 9513 0.7% 317.1 -- Universidad Nacional de Colombia 14 - AS11492 9107 0.7% 18.1 -- CABLEONE - CABLE ONE, INC. 15 - AS9498 8817 0.6% 12.6 -- BBIL-AP BHARTI Airtel Ltd. 16 - AS15290 8669 0.6% 23.6 -- ALLST-15290 - Allstream Corp. 17 - AS44609 8497 0.6% 2832.3 -- FNA Fars News Agency Cultural Arts Institute 18 - AS6256 8084 0.6% 4042.0 -- ALLTEL - ALLTEL Corporation 19 - AS4755 7616 0.6% 12.6 -- TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 20 - AS9394 7530 0.6% 6.8 -- CRNET CHINA RAILWAY Internet(CRNET) TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS6256 8084 0.6% 4042.0 -- ALLTEL - ALLTEL Corporation 2 - AS32528 16548 1.2% 3309.6 -- ABBOTT Abbot Labs 3 - AS17408 3129 0.2% 3129.0 -- ABOVE-AS-AP AboveNet Communications Taiwan 4 - AS44609 8497 0.6% 2832.3 -- FNA Fars News Agency Cultural Arts Institute 5 - AS39261 2298 0.2% 2298.0 -- LPP-AS LPP S.A. 6 - AS51460 6867 0.5% 2289.0 -- SINA-AS Sina bank 7 - AS3454 7492 0.6% 1873.0 -- Universidad Autonoma de Nuevo Leon 8 - AS25352 1798 0.1% 1798.0 -- GUARDIAN-NETWORKS Guardian Networks 9 - AS28519 4073 0.3% 1357.7 -- Universidad Autonoma de Guadalajara, A.C. 10 - AS46778 1250 0.1% 1250.0 -- PHSI-1996 - Prevea Health Services Inc 11 - AS49600 1010 0.1% 1010.0 -- LASEDA La Seda de Barcelona, S.A 12 - AS3 817 0.1% 735.0 -- TRAVIANGAMES Travian Games GmbH 13 - AS27322 756 0.1% 756.0 -- ISC-JNB1 Internet Systems Consortium, Inc. 14 - AS2875 574 0.0% 574.0 -- JINR-AS JINR/HEPNET 15 - AS32717 7270 0.5% 559.2 -- ASN-SNETANGOLA 16 - AS44025 521 0.0% 521.0 -- KAMTELEKOM-NET Kamtelekom Ltd. 17 - AS44878 1010 0.1% 505.0 -- RADIUS-RU-AS Radius Ltd. 18 - AS10445 2152 0.2% 430.4 -- HTG - Huntleigh Telcom 19 - AS49987 409 0.0% 409.0 -- SPARK-AS Stroy Park - R Ltd 20 - AS21578 1213 0.1% 404.3 -- Universidad autonoma de Bucaramanga TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 178.22.72.0/21 8388 0.6% AS44609 -- FNA Fars News Agency Cultural Arts Institute 2 - 130.36.34.0/24 8271 0.6% AS32528 -- ABBOTT Abbot Labs 3 - 130.36.35.0/24 8271 0.6% AS32528 -- ABBOTT Abbot Labs 4 - 200.23.202.0/24 7474 0.5% AS3454 -- Universidad Autonoma de Nuevo Leon 5 - 202.92.235.0/24 7247 0.5% AS9498 -- BBIL-AP BHARTI Airtel Ltd. 6 - 205.91.160.0/20 6408 0.4% AS5976 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 7 - 202.54.86.0/24 4656 0.3% AS4755 -- TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 8 - 198.133.99.0/24 4044 0.3% AS6256 -- ALLTEL - ALLTEL Corporation 9 - 198.133.100.0/24 4040 0.3% AS6256 -- ALLTEL - ALLTEL Corporation 10 - 91.217.64.0/24 3433 0.2% AS51460 -- SINA-AS Sina bank 11 - 91.217.64.0/23 3427 0.2% AS51460 -- SINA-AS Sina bank 12 - 202.153.174.0/24 3129 0.2% AS17408 -- ABOVE-AS-AP AboveNet Communications Taiwan 13 - 195.250.37.0/24 2298 0.2% AS39261 -- LPP-AS LPP S.A. 14 - 198.36.88.0/24 2253 0.1% AS26395 -- JCI-200 - Johnson Controls Inc 15 - 67.214.72.0/22 2031 0.1% AS11915 -- TELWEST-NETWORK-SVCS-STATIC - TEL WEST COMMUNICATIONS LLC 16 - 67.214.68.0/23 1802 0.1% AS11915 -- TELWEST-NETWORK-SVCS-STATIC - TEL WEST COMMUNICATIONS LLC 17 - 91.212.48.0/24 1798 0.1% AS25352 -- GUARDIAN-NETWORKS Guardian Networks 18 - 41.220.140.0/24 1767 0.1% AS36909 -- HABARI-CO-TZ-AS 19 - 41.220.138.0/24 1738 0.1% AS36909 -- HABARI-CO-TZ-AS 20 - 72.10.56.0/21 1484 0.1% AS31815 -- MEDIATEMPLE - Media Temple, Inc. Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 08 Jul '11

08 Jul '11

This report has been generated at Fri Jul 8 21:12:24 2011 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 01-07-11 365724 215427 02-07-11 365886 215336 03-07-11 365621 215458 04-07-11 365792 215409 05-07-11 366080 215785 06-07-11 366203 215520 07-07-11 366119 215399 08-07-11 366112 215511 AS Summary 38245 Number of ASes in routing system 16129 Number of ASes announcing only one prefix 3607 Largest number of prefixes announced by an AS AS6389 : BELLSOUTH-NET-BLK - BellSouth.net Inc. 109927648 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 08Jul11 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 366267 215547 150720 41.2% All ASes AS6389 3607 249 3358 93.1% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS4766 2436 952 1484 60.9% KIXS-AS-KR Korea Telecom AS18566 1913 497 1416 74.0% COVAD - Covad Communications Co. AS4755 1499 219 1280 85.4% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS4323 1656 402 1254 75.7% TWTC - tw telecom holdings, inc. AS22773 1350 97 1253 92.8% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS10620 1543 453 1090 70.6% Telmex Colombia S.A. AS1785 1807 765 1042 57.7% AS-PAETEC-NET - PaeTec Communications, Inc. AS19262 1429 392 1037 72.6% VZGNI-TRANSIT - Verizon Online LLC AS28573 1272 387 885 69.6% NET Servicos de Comunicao S.A. AS7545 1548 711 837 54.1% TPG-INTERNET-AP TPG Internet Pty Ltd AS24560 1154 382 772 66.9% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS18101 916 146 770 84.1% RELIANCE-COMMUNICATIONS-IN Reliance Communications Ltd.DAKC MUMBAI AS8151 1435 680 755 52.6% Uninet S.A. de C.V. AS4808 1050 335 715 68.1% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS7552 795 95 700 88.1% VIETEL-AS-AP Vietel Corporation AS7303 1004 326 678 67.5% Telecom Argentina S.A. AS3356 1119 459 660 59.0% LEVEL3 Level 3 Communications AS17488 964 327 637 66.1% HATHWAY-NET-AP Hathway IP Over Cable Internet AS20115 1594 978 616 38.6% CHARTER-NET-HKY-NC - Charter Communications AS14420 689 83 606 88.0% CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP AS17676 669 71 598 89.4% GIGAINFRA Softbank BB Corp. AS3549 985 413 572 58.1% GBLX Global Crossing Ltd. AS22561 936 368 568 60.7% DIGITAL-TELEPORT - Digital Teleport Inc. AS22047 576 32 544 94.4% VTR BANDA ANCHA S.A. AS4780 751 213 538 71.6% SEEDNET Digital United Inc. AS4804 620 86 534 86.1% MPX-AS Microplex PTY LTD AS17974 1787 1253 534 29.9% TELKOMNET-AS2-AP PT Telekomunikasi Indonesia AS7011 1156 625 531 45.9% FRONTIER-AND-CITIZENS - Frontier Communications of America, Inc. AS15475 514 9 505 98.2% NOL Total 38774 12005 26769 69.0% Top 30 total Possible Bogus Routes 10.86.64.32/30 AS65530 -Private Use AS- 10.86.64.36/30 AS65530 -Private Use AS- 10.86.65.32/30 AS65530 -Private Use AS- 10.86.65.36/30 AS65530 -Private Use AS- 10.255.255.0/30 AS65530 -Private Use AS- 10.255.255.4/30 AS65530 -Private Use AS- 10.255.255.8/30 AS65530 -Private Use AS- 24.225.128.0/18 AS36377 PATRIOT-MEDIA-NJ - Comcast Telecommunications, Inc. 24.225.192.0/18 AS36377 PATRIOT-MEDIA-NJ - Comcast Telecommunications, Inc. 24.225.192.0/23 AS36377 PATRIOT-MEDIA-NJ - Comcast Telecommunications, Inc. 24.225.224.0/21 AS36377 PATRIOT-MEDIA-NJ - Comcast Telecommunications, Inc. 24.225.237.0/24 AS36377 PATRIOT-MEDIA-NJ - Comcast Telecommunications, Inc. 24.225.248.0/21 AS36377 PATRIOT-MEDIA-NJ - Comcast Telecommunications, Inc. 41.222.79.0/24 AS36938 AMSCOTELECOMS Amsco Telecommunications Nigeria Limited 41.223.92.0/22 AS36936 CELTEL-GABON Celtel Gabon Internet Service 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV 64.21.192.0/20 AS11610 INETNEBR-1 - Internet Nebraska Corporation 64.21.212.0/22 AS11610 INETNEBR-1 - Internet Nebraska Corporation 64.21.216.0/21 AS11610 INETNEBR-1 - Internet Nebraska Corporation 66.171.32.0/20 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.206.47.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 66.207.32.0/20 AS23011 66.245.176.0/20 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 69.6.80.0/24 AS13442 71.19.134.0/23 AS3313 INET-AS BT Italia S.p.A. 72.22.32.0/19 AS33150 76.77.32.0/19 AS2828 XO-AS15 - XO Communications 80.88.10.0/24 AS33774 DJAWEB 80.88.12.0/24 AS33779 wataniya-telecom-as 89.145.168.0/21 AS42461 PLANETA-AS OOO Planeta 93.180.64.0/18 AS24950 SOFIASAT-AS Venus REIT OOD 93.180.88.0/21 AS42410 PTP-AS Point To Point Ltd. AS 93.180.96.0/19 AS42431 B-NET BiConsult Eood 110.34.44.0/22 AS12653 COMTONET KB Impuls Hellas 115.42.47.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 116.206.72.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.85.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.103.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 131.0.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 131.72.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 131.100.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 131.108.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 131.161.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 131.221.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 131.255.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 132.157.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 132.184.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 132.191.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 132.251.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 132.255.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 134.175.0.0/19 AS12124 THORN - Thorn Communications 138.0.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 138.36.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 138.59.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 138.94.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 138.97.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 138.99.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 138.117.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 138.118.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 138.121.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 138.122.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 138.185.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 138.186.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 138.204.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 138.219.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 138.255.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 142.54.0.0/19 AS23498 CDSI - Cogeco Data Services Inc. 143.0.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 143.137.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 143.202.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 143.208.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 143.255.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 148.0.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 148.101.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 148.102.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 148.103.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 148.255.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.0.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.156.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.166.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.167.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.168.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.169.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.170.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.171.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.172.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.173.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.174.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.175.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.200.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.201.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.202.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.203.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.204.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.205.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.206.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.207.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.230.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.231.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.232.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.233.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.234.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.235.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.236.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.237.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.238.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.239.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.240.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.241.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.242.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.243.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.244.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.245.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.246.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.247.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.248.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.249.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.250.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.251.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.252.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.253.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.254.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 152.255.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 158.222.70.0/23 AS6137 SISNA - SISNA, Inc. 158.222.72.0/23 AS6137 SISNA - SISNA, Inc. 158.222.224.0/20 AS19864 O1COMM - O1 COMMUNICATIONS 158.222.224.0/22 AS19864 O1COMM - O1 COMMUNICATIONS 158.222.229.0/24 AS19864 O1COMM - O1 COMMUNICATIONS 161.10.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 161.18.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 161.22.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 161.56.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 161.138.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 161.140.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 161.212.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 161.234.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 161.255.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 167.0.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 167.56.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 167.57.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 167.58.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 167.59.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 167.60.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 167.61.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 167.62.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 167.63.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 167.108.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 167.116.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 167.249.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 167.250.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 168.0.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 168.90.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 168.121.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 168.181.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 168.194.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 168.195.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 168.196.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 168.197.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 168.205.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 168.227.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 168.228.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 168.232.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 170.78.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 170.79.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 170.80.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 170.81.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 170.82.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 170.83.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 170.84.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 170.150.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 170.231.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 170.233.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 170.238.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 170.239.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 170.244.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 170.245.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 170.246.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 170.247.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 170.254.0.0/16 AS237 MERIT-AS-14 - Merit Network Inc. 172.102.0.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 181.82.15.0/24 AS23982 SENDB-AS-KR Dongbu District Office of Education in Seoul 181.82.16.0/24 AS23982 SENDB-AS-KR Dongbu District Office of Education in Seoul 181.82.17.0/24 AS38418 SENSD-AS-KR seoul seondong district office of education 181.82.18.0/24 AS38418 SENSD-AS-KR seoul seondong district office of education 190.102.32.0/20 AS30058 FDCSERVERS - FDCservers.net 190.104.32.0/21 AS27882 Telefónica Celular de Bolivia S.A. 191.0.0.0/8 AS237 MERIT-AS-14 - Merit Network Inc. 192.9.0.0/16 AS11479 BRM-SUN-AS - Sun Microsystems, Inc 192.64.85.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.108.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.101.46.0/24 AS6503 Axtel, S.A.B. de C.V. 192.101.64.0/21 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.70.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.72.0/24 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.131.233.0/24 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 192.154.32.0/19 AS81 NCREN - MCNC 192.154.64.0/19 AS81 NCREN - MCNC 192.158.25.0/24 AS2717 CUMMINS-AS1 - Cummins Engine Co. Inc. 192.188.208.0/20 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center 196.2.224.0/22 AS24863 LINKdotNET-AS 196.6.108.0/24 AS5713 SAIX-NET 196.13.201.0/24 AS2018 TENET-1 196.13.202.0/24 AS2018 TENET-1 196.13.203.0/24 AS2018 TENET-1 196.13.204.0/24 AS2018 TENET-1 196.110.105.0/24 AS8513 SKYVISION SkyVision Network Services 196.202.224.0/21 AS8818 TELE Greenland Autonomous System 198.1.2.0/24 AS4761 INDOSAT-INP-AP INDOSAT Internet Network Provider 198.15.4.0/24 AS4323 TWTC - tw telecom holdings, inc. 198.15.5.0/24 AS4323 TWTC - tw telecom holdings, inc. 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.74.38.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services 198.74.39.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services 198.74.40.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services 198.97.72.0/21 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center 198.97.96.0/19 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center 198.97.240.0/20 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.163.214.0/24 AS21804 ACCESS-SK - Access Communications Co-operative Limited 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 198.168.122.0/24 AS11489 BACI - Bell Canada 198.175.231.0/24 AS19262 VZGNI-TRANSIT - Verizon Online LLC 198.180.198.0/24 AS23715 SEOUL-INTGW-GXS-AP Global Exchange Services 198.182.235.0/24 AS3356 LEVEL3 Level 3 Communications 199.16.32.0/19 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 199.33.84.0/22 AS9911 CONNECTPLUS-AP Singapore Telecom 199.121.0.0/16 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center 199.123.16.0/20 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center 199.185.130.0/23 AS19662 UNISERVE-ONLINE - Uniserve On Line 199.202.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 199.202.216.0/21 AS577 BACOM - Bell Canada 199.246.116.0/24 AS813 UUNET-CANADA - MCI Communications Services, Inc. d/b/a Verizon Business 200.1.112.0/24 AS29754 GO2TEL GO2TEL.COM INC. 200.6.93.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.6.94.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.6.95.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.23.84.0/24 AS8151 Uninet S.A. de C.V. 200.24.73.0/24 AS26061 Equant Colombia 200.24.76.0/24 AS7195 Telecorp Colombia S.A. 200.24.78.0/26 AS3549 GBLX Global Crossing Ltd. 200.24.78.64/26 AS3549 GBLX Global Crossing Ltd. 200.33.40.0/24 AS11172 Alestra, S. de R.L. de C.V. 200.34.0.0/20 AS6342 Instituto Tecnológico y de Estudios Superiores de Monterrey 200.53.0.0/19 AS13878 Diveo do Brasil Telecomunicacoes Ltda 202.1.224.0/24 AS10097 FLOWCOM Flow Communications 2/541 Kent St Sydney NSW 2000 202.9.55.0/24 AS2764 AAPT AAPT Limited 202.9.57.0/24 AS2764 AAPT AAPT Limited 202.58.101.0/24 AS45645 202.58.113.0/24 AS19161 202.61.75.0/24 AS9927 PHILCOMNET-PH A Multihomed ISP Company 202.63.80.0/24 AS9557 PKTELECOM-AS-PK Paknet Limited Merged into PTCL 202.74.232.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.74.233.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.83.120.0/21 AS37972 202.83.124.0/24 AS37972 202.83.125.0/24 AS37972 202.83.126.0/24 AS37972 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.133.70.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.133.73.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.146.186.0/24 AS23655 SNAP-NZ-AS Snap Internet Limited 202.160.152.0/22 AS10113 DATAFAST-AP DATAFAST TELECOMMUNICATIONS LTD 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd. 202.176.1.0/24 AS9942 COMINDICO-AP SOUL Converged Communications Australia 202.179.131.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.179.134.0/24 AS23966 LDN-AS-PK LINKdotNET Telecom Limited 202.179.144.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 203.18.156.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.23.1.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.24.38.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.30.127.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/23 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.87.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.188.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.142.219.0/24 AS45149 203.175.107.0/24 AS45595 PKTELECOM-AS-PK Pakistan Telecom Company Limited 204.10.232.0/21 AS33150 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 205.175.214.0/24 AS5583 ORANGE-BUSINESS-SERVICES-BENELUX Orange Business Services (formerly Equant) AS for BENELUX 205.207.148.0/23 AS812 ROGERS-CABLE - Rogers Cable Communications Inc. 206.72.192.0/23 AS16526 BIRCH-TELECOM - Birch Telecom, Inc. 206.72.194.0/23 AS16526 BIRCH-TELECOM - Birch Telecom, Inc. 206.123.129.0/24 AS10790 INREACH-AS - InReach Internet 206.180.240.0/20 AS12083 KNOLOGY-NET - Knology Holdings 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc. 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc. 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.188.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.189.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.190.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.191.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 208.64.240.0/21 AS13871 TELEBYTE-NW - Telebyte NW 208.83.53.0/24 AS40569 YGOMI-AS - Ygomi LLC 209.148.64.0/19 AS13773 TELNETCOMM - Telnet Communications 209.177.64.0/20 AS6461 MFNX MFN - Metromedia Fiber Network 209.213.0.0/20 AS33005 ELTOPIA - Eltopia.com, LLC 210.5.128.0/20 AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone 210.56.150.0/23 AS38138 INTECH-TRANSIT-BD InTech Online Limited, INTERNET SERVICE LIMITED 216.10.235.0/24 AS7018 ATT-INTERNET4 - AT&T Services, Inc. 216.21.160.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport 216.58.192.0/24 AS22702 X5SOLUTIONS - X5 Solutions, Inc. 216.58.197.0/24 AS22702 X5SOLUTIONS - X5 Solutions, Inc. 216.58.200.0/24 AS18530 ISOMEDIA-1 - Isomedia Inc. 216.194.160.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 08 Jul '11

08 Jul '11

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 09 Jul, 2011 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 362786 Prefixes after maximum aggregation: 164929 Deaggregation factor: 2.20 Unique aggregates announced to Internet: 180083 Total ASes present in the Internet Routing Table: 38135 Prefixes per ASN: 9.51 Origin-only ASes present in the Internet Routing Table: 31710 Origin ASes announcing only one prefix: 15248 Transit ASes present in the Internet Routing Table: 5186 Transit-only ASes present in the Internet Routing Table: 130 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 33 Max AS path prepend of ASN (22394) 27 Prefixes from unregistered ASNs in the Routing Table: 925 Unregistered ASNs in the Routing Table: 512 Number of 32-bit ASNs allocated by the RIRs: 1533 Number of 32-bit ASNs visible in the Routing Table: 1239 Prefixes from 32-bit ASNs in the Routing Table: 2861 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 119 Number of addresses announced to Internet: 2493493440 Equivalent to 148 /8s, 159 /16s and 176 /24s Percentage of available address space announced: 67.3 Percentage of allocated address space announced: 67.3 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 91.0 Total number of prefixes smaller than registry allocations: 151395 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 90104 Total APNIC prefixes after maximum aggregation: 30260 APNIC Deaggregation factor: 2.98 Prefixes being announced from the APNIC address blocks: 86847 Unique aggregates announced from the APNIC address blocks: 37076 APNIC Region origin ASes present in the Internet Routing Table: 4503 APNIC Prefixes per ASN: 19.29 APNIC Region origin ASes announcing only one prefix: 1248 APNIC Region transit ASes present in the Internet Routing Table: 713 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 18 Number of APNIC region 32-bit ASNs visible in the Routing Table: 56 Number of APNIC addresses announced to Internet: 621479200 Equivalent to 37 /8s, 11 /16s and 5 /24s Percentage of available APNIC address space announced: 78.8 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079 55296-56319, 131072-132095 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 141428 Total ARIN prefixes after maximum aggregation: 72827 ARIN Deaggregation factor: 1.94 Prefixes being announced from the ARIN address blocks: 113365 Unique aggregates announced from the ARIN address blocks: 46672 ARIN Region origin ASes present in the Internet Routing Table: 14469 ARIN Prefixes per ASN: 7.84 ARIN Region origin ASes announcing only one prefix: 5532 ARIN Region transit ASes present in the Internet Routing Table: 1522 Average ARIN Region AS path length visible: 4.0 Max ARIN Region AS path length visible: 30 Number of ARIN region 32-bit ASNs visible in the Routing Table: 13 Number of ARIN addresses announced to Internet: 819612544 Equivalent to 48 /8s, 218 /16s and 75 /24s Percentage of available ARIN address space announced: 65.1 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 173/8, 174/8, 184/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 86545 Total RIPE prefixes after maximum aggregation: 49132 RIPE Deaggregation factor: 1.76 Prefixes being announced from the RIPE address blocks: 79935 Unique aggregates announced from the RIPE address blocks: 52845 RIPE Region origin ASes present in the Internet Routing Table: 15797 RIPE Prefixes per ASN: 5.06 RIPE Region origin ASes announcing only one prefix: 7877 RIPE Region transit ASes present in the Internet Routing Table: 2504 Average RIPE Region AS path length visible: 4.6 Max RIPE Region AS path length visible: 33 Number of RIPE region 32-bit ASNs visible in the Routing Table: 912 Number of RIPE addresses announced to Internet: 478890496 Equivalent to 28 /8s, 139 /16s and 74 /24s Percentage of available RIPE address space announced: 77.1 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 196608-198655 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 176/8, 178/8, 185/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 33421 Total LACNIC prefixes after maximum aggregation: 7576 LACNIC Deaggregation factor: 4.41 Prefixes being announced from the LACNIC address blocks: 32551 Unique aggregates announced from the LACNIC address blocks: 16960 LACNIC Region origin ASes present in the Internet Routing Table: 1476 LACNIC Prefixes per ASN: 22.05 LACNIC Region origin ASes announcing only one prefix: 444 LACNIC Region transit ASes present in the Internet Routing Table: 273 Average LACNIC Region AS path length visible: 4.4 Max LACNIC Region AS path length visible: 19 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 254 Number of LACNIC addresses announced to Internet: 85900288 Equivalent to 5 /8s, 30 /16s and 188 /24s Percentage of available LACNIC address space announced: 56.9 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 262144-263167 plus ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 8211 Total AfriNIC prefixes after maximum aggregation: 1965 AfriNIC Deaggregation factor: 4.18 Prefixes being announced from the AfriNIC address blocks: 6500 Unique aggregates announced from the AfriNIC address blocks: 2004 AfriNIC Region origin ASes present in the Internet Routing Table: 470 AfriNIC Prefixes per ASN: 13.83 AfriNIC Region origin ASes announcing only one prefix: 147 AfriNIC Region transit ASes present in the Internet Routing Table: 102 Average AfriNIC Region AS path length visible: 4.9 Max AfriNIC Region AS path length visible: 24 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 4 Number of AfriNIC addresses announced to Internet: 24334336 Equivalent to 1 /8s, 115 /16s and 80 /24s Percentage of available AfriNIC address space announced: 36.3 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2436 11043 934 Korea Telecom (KIX) 17974 1787 461 41 PT TELEKOMUNIKASI INDONESIA 7545 1548 301 85 TPG Internet Pty Ltd 4755 1498 635 171 TATA Communications formerly 24560 1154 336 187 Bharti Airtel Ltd., Telemedia 9829 1101 922 46 BSNL National Internet Backbo 9583 1060 78 506 Sify Limited 4808 1047 2092 299 CNCGROUP IP network: China169 17488 964 186 105 Hathway IP Over Cable Interne 18101 931 116 140 Reliance Infocom Ltd Internet Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3610 3819 244 bellsouth.net, inc. 18566 1913 365 241 Covad Communications 1785 1806 681 122 PaeTec Communications, Inc. 4323 1656 1082 400 Time Warner Telecom 20115 1595 1533 634 Charter Communications 19262 1429 4778 392 Verizon Global Networks 7018 1366 7069 892 AT&T WorldNet Services 22773 1350 2897 88 Cox Communications, Inc. 6478 1346 251 618 AT&T Worldnet Services 7029 1287 791 301 Windstream Communications Inc Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 34984 536 106 184 BILISIM TELEKOM 6830 512 1780 317 UPC Distribution Services 3292 466 2076 401 TDC Tele Danmark 20940 459 132 354 Akamai Technologies European 12479 453 593 7 Uni2 Autonomous System 8866 447 133 25 Bulgarian Telecommunication C 29049 441 33 45 AzerSat LLC. 3320 421 8151 368 Deutsche Telekom AG 8551 404 354 44 Bezeq International 3301 397 1855 346 TeliaNet Sweden Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 1543 282 158 TVCABLE BOGOTA 8151 1432 2746 353 UniNet S.A. de C.V. 28573 1268 995 78 NET Servicos de Comunicao S.A 7303 1004 512 177 Telecom Argentina Stet-France 6503 747 354 74 AVANTEL, S.A. 14420 688 55 83 CORPORACION NACIONAL DE TELEC 22047 576 322 17 VTR PUNTO NET S.A. 3816 532 230 96 Empresa Nacional de Telecomun 7738 516 986 31 Telecomunicacoes da Bahia S.A 27947 508 53 53 Telconet S.A Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 797 445 11 TEDATA 24863 790 147 37 LINKdotNET AS number 15475 514 74 8 Nile Online 36992 315 415 14 Etisalat MISR 3741 260 937 222 The Internet Solution 6713 241 215 13 Itissalat Al-MAGHRIB 33776 227 13 5 Starcomms Nigeria Limited 24835 211 78 10 RAYA Telecom - Egypt 29571 158 17 11 Ci Telecom Autonomous system 16637 149 441 86 MTN Network Solutions Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3610 3819 244 bellsouth.net, inc. 23456 2861 699 1535 32-bit ASN transition 4766 2436 11043 934 Korea Telecom (KIX) 18566 1913 365 241 Covad Communications 1785 1806 681 122 PaeTec Communications, Inc. 17974 1787 461 41 PT TELEKOMUNIKASI INDONESIA 4323 1656 1082 400 Time Warner Telecom 20115 1595 1533 634 Charter Communications 7545 1548 301 85 TPG Internet Pty Ltd 10620 1543 282 158 TVCABLE BOGOTA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 17974 1787 1746 PT TELEKOMUNIKASI INDONESIA 1785 1806 1684 PaeTec Communications, Inc. 18566 1913 1672 Covad Communications 4766 2436 1502 Korea Telecom (KIX) 7545 1548 1463 TPG Internet Pty Ltd 10620 1543 1385 TVCABLE BOGOTA 4755 1498 1327 TATA Communications formerly 23456 2861 1326 32-bit ASN transition 22773 1350 1262 Cox Communications, Inc. 4323 1656 1256 Time Warner Telecom Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.14.170.0/24 4323 Time Warner Telecom 32567 UNALLOCATED 12.25.107.0/24 4323 Time Warner Telecom 26973 UNALLOCATED 12.39.152.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.154.0/23 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.155.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.159.0/24 7018 AT&T WorldNet Servic 25639 UNALLOCATED 12.41.169.0/24 7018 AT&T WorldNet Servic 13317 UNALLOCATED 12.44.10.0/24 7018 AT&T WorldNet Servic 23502 UNALLOCATED 12.44.44.0/24 7018 AT&T WorldNet Servic Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 24.225.128.0/18 36377 Comcast Telecommunications, I 24.225.192.0/23 36377 Comcast Telecommunications, I 24.225.192.0/18 36377 Comcast Telecommunications, I 24.225.224.0/21 36377 Comcast Telecommunications, I 24.225.237.0/24 36377 Comcast Telecommunications, I 24.225.248.0/21 36377 Comcast Telecommunications, I 41.222.79.0/24 36938 >>UNKNOWN<< 41.223.92.0/22 36936 >>UNKNOWN<< 62.61.220.0/24 24974 Tachyon Europe BV - Wireless 62.61.221.0/24 24974 Tachyon Europe BV - Wireless Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:22 /9:12 /10:28 /11:81 /12:232 /13:468 /14:804 /15:1401 /16:11993 /17:5887 /18:9815 /19:19456 /20:25837 /21:26191 /22:34744 /23:33600 /24:188907 /25:1083 /26:1262 /27:735 /28:211 /29:9 /30:2 /31:0 /32:6 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6389 2222 3610 bellsouth.net, inc. 18566 1869 1913 Covad Communications 10620 1438 1543 TVCABLE BOGOTA 23456 1406 2861 32-bit ASN transition 6478 1316 1346 AT&T Worldnet Services 11492 1096 1142 Cable One 7011 1054 1156 Citizens Utilities 1785 1053 1806 PaeTec Communications, Inc. 7029 1034 1287 Windstream Communications Inc 22773 864 1350 Cox Communications, Inc. Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:324 2:45 4:16 5:1 6:3 8:337 12:1976 13:1 14:481 15:15 16:3 17:5 20:10 23:13 24:1678 27:814 31:490 32:64 33:4 34:2 36:4 38:744 40:103 41:2564 42:32 44:3 46:1036 47:3 49:198 50:442 52:13 54:2 55:4 56:2 57:35 58:860 59:479 60:386 61:1180 62:1036 63:1935 64:3942 65:2294 66:3869 67:1897 68:1091 69:3040 70:758 71:389 72:1886 74:2389 75:316 76:341 77:888 78:712 79:461 80:1116 81:839 82:498 83:456 84:692 85:1073 86:554 87:759 88:335 89:1531 90:223 91:3946 92:533 93:1052 94:1334 95:855 96:446 97:256 98:891 99:37 101:77 103:115 106:10 107:21 108:70 109:1028 110:614 111:706 112:304 113:400 114:534 115:674 116:962 117:667 118:857 119:1161 120:312 121:675 122:1581 123:973 124:1304 125:1231 128:246 129:172 130:168 131:578 132:112 133:21 134:214 135:48 136:216 137:136 138:299 139:116 140:477 141:240 142:403 143:416 144:483 145:54 146:449 147:215 148:661 149:248 150:164 151:189 152:331 153:182 154:4 155:398 156:198 157:354 158:138 159:450 160:311 161:201 162:309 163:165 164:503 165:358 166:530 167:431 168:740 169:155 170:847 171:78 172:1 173:1642 174:610 175:379 176:141 177:163 178:988 180:880 181:23 182:488 183:204 184:342 185:1 186:1273 187:682 188:878 189:934 190:4949 192:5883 193:4968 194:3520 195:3032 196:1237 197:41 198:3573 199:3955 200:5534 201:1490 202:8396 203:8425 204:4215 205:2306 206:2677 207:2810 208:3965 209:3444 210:2681 211:1465 212:2097 213:1742 214:782 215:70 216:4937 217:1639 218:537 219:359 220:1189 221:492 222:357 223:185 End of report

1 0

FCC calls for nominations to Open Internet Advisory Committee
by Joly MacFie 06 Jul '11

06 Jul '11

The FCC is seeking nomination<http://transition.fcc.gov/Daily_Releases/Daily_Business/2011/db0630/DA-11-1…> s<http://transition.fcc.gov/Daily_Releases/Daily_Business/2011/db0630/DA-11-1…> for membership on its Open Internet Advisory Committee (OIAC), established pursuant to the Order on <http://hraunfoss.fcc.gov/edocs_public/attachmatch/FCC-10-201A1.pdf>Preserving the Open Internet<http://hraunfoss.fcc.gov/edocs_public/attachmatch/FCC-10-201A1.pdf> . More: http://isoc-ny.org/p2/?p=2300 Don't be shy now! :) -- --------------------------------------------------------------- Joly MacFie 218 565 9365 Skype:punkcast WWWhatsup NYC - http://wwwhatsup.com http://pinstand.com - http://punkcast.com VP (Admin) - ISOC-NY - http://isoc-ny.org -------------------------------------------------------------- -

1 0

Fwd: RFC 6274 on Security Assessment of the Internet Protocol Version 4
by Fernando Gont 05 Jul '11

05 Jul '11

FYI -------- Original Message -------- Subject: RFC 6274 on Security Assessment of the Internet Protocol Version 4 Date: Tue, 5 Jul 2011 09:45:51 -0700 (PDT) From: rfc-editor(a)rfc-editor.org To: ietf-announce(a)ietf.org, rfc-dist(a)rfc-editor.org CC: opsec(a)ietf.org, rfc-editor(a)rfc-editor.org A new Request for Comments is now available in online RFC libraries. RFC 6274 Title: Security Assessment of the Internet Protocol Version 4 Author: F. Gont Status: Informational Stream: IETF Date: July 2011 Mailbox: fernando(a)gont.com.ar Pages: 75 Characters: 179909 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-ietf-opsec-ip-security-07.txt URL: http://www.rfc-editor.org/rfc/rfc6274.txt This document contains a security assessment of the IETF specifications of the Internet Protocol version 4 and of a number of mechanisms and policies in use by popular IPv4 implementations. It is based on the results of a project carried out by the UK's Centre for the Protection of National Infrastructure (CPNI). This document is not an Internet Standards Track specification; it is published for informational purposes. This document is a product of the Operational Security Capabilities for IP Network Infrastructure Working Group of the IETF. INFORMATIONAL: This memo provides information for the Internet community. It does not specify an Internet standard of any kind. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see http://www.ietf.org/mailman/listinfo/ietf-announce http://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see http://www.rfc-editor.org/rfcsearch.html. For downloading RFCs, see http://www.rfc-editor.org/rfc.html. Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor(a)rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC _______________________________________________ IETF-Announce mailing list IETF-Announce(a)ietf.org https://www.ietf.org/mailman/listinfo/ietf-announce

1 0

MX 80 advantages and shortcomings
by chavan sanjay 05 Jul '11

05 Jul '11

Hi Team, Can anyone enlighten me on the pros and cons of MX 80 platform Thanks Sanjay C.P. --- On Tue, 7/5/11, nanog-request(a)nanog.org <nanog-request(a)nanog.org> wrote: From: nanog-request(a)nanog.org <nanog-request(a)nanog.org> Subject: NANOG Digest, Vol 42, Issue 5 To: nanog(a)nanog.org Date: Tuesday, July 5, 2011, 5:30 PM Send NANOG mailing list submissions to nanog(a)nanog.org To subscribe or unsubscribe via the World Wide Web, visit https://mailman.nanog.org/mailman/listinfo/nanog or, via email, send a message with subject or body 'help' to nanog-request(a)nanog.org You can reach the person managing the list at nanog-owner(a)nanog.org When replying, please edit your Subject line so it is more specific than "Re: Contents of NANOG digest..." Today's Topics: 1. cheapo UUFB solution for Cisco 7201 (Rogelio) 2. Re: Firewall Appliance Suggestions (Curtis Maurand) 3. RE: Firewall Appliance Suggestions (Jean CLERY) 4. Re: Firewall Appliance Suggestions (Peter Nowak) ---------------------------------------------------------------------- Message: 1 Date: Mon, 4 Jul 2011 11:34:11 -0300 From: Rogelio <scubacuda(a)gmail.com> Subject: cheapo UUFB solution for Cisco 7201 To: nanog(a)nanog.org Message-ID: <CALJphbs6UBWKqGVW1EyvCL6pKGtCKjSYNZB=q70FxPOQ7D0CHA(a)mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1 I've got a Cisco 7201 with about 500 L2TPv2 tunnels, and I suspect that UUFB (unknown unicast flooding) is resulting in spiking (I put an ACL on to kill broadcast traffic, so I'm sure that's not related). I've googled and don't see anything for the 7201, just the 7600 series. :/ i.e. http://www.cisco.com/en/US/docs/routers/7600/ios/12.2SR/configuration/guide… Anyone have any suggestions on (something cheap) that I can put in front of this box to spare it from (what I suspect) is a gateway that unicast floods when a MAC address has aged? To add to my challenges, I'm in Brazil and importing gear is insanely effing difficult. :/ -- Also on LinkedIn? Feel free to connect if you too are an open networker: scubacuda(a)gmail.com ------------------------------ Message: 2 Date: Mon, 04 Jul 2011 17:40:56 -0400 From: Curtis Maurand <cmaurand(a)xyonet.com> Subject: Re: Firewall Appliance Suggestions To: nanog(a)nanog.org Message-ID: <4E123368.7020602(a)xyonet.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed On 6/30/2011 12:20 PM, Suresh Rajagopalan wrote: > Linux + iptables + fwbuilder > > > > On Thu, Jun 30, 2011 at 8:50 AM, Blake T. Pfankuch<blake(a)pfankuch.me> wrote: >> Howdy, >> I am looking for something a little unique in a bit of a tough situation with some sticky requirements. First off, my requirements are a little weird and I can't bend them a whole lot due to stipulations being put on me. I am in need a firewall appliance which can be run on VMware vSphere, with IPSEC support for multiple Phase 2 negotiations within a single Phase 1. I am also in need of something that can support VLAN interfaces on the LAN side, and ideally something with multi zoning so I can keep LAN side networks separate from each without ridiculous firewall rules. Meaning build a zone for "Customer network 1" and it displays separately (ease of management and firewall config hopefully). I need a minimum of 10 "zones" on LAN side (/29 or /30), and NAT support for LAN to WAN (to dedicate all outbound connections to a single IP from a specific zone), ideally something extremely scalable (100-200 zones). And here is the super fun part! I need something that is going to be web managed primarily as minions will be doing most of the day to day maintenance, or very simple CLI config. Willing to pay for something if need be, but looking for something that can easily handly 50-100mbit of throughput. >> >> Any Ideas? >> >> Thanks! >> >> Blake Pfankuch >> Vyatta. They have an appliance on their website. --Curtis ------------------------------ Message: 3 Date: Tue, 5 Jul 2011 00:58:51 +0200 From: "Jean CLERY" <jean.clerymrs(a)gmail.com> Subject: RE: Firewall Appliance Suggestions To: "'Curtis Maurand'" <cmaurand(a)xyonet.com>, <nanog(a)nanog.org> Message-ID: <F7819E52D830406983C30BC43FAD7E3D@ezekiel> Content-Type: text/plain; charset="iso-8859-1" Hi Blake Try www.netasq.com Regards, Jean CLERY -----Message d'origine----- De?: Curtis Maurand [mailto:cmaurand@xyonet.com] Envoy??: lundi 4 juillet 2011 23:41 ??: nanog(a)nanog.org Objet?: Re: Firewall Appliance Suggestions On 6/30/2011 12:20 PM, Suresh Rajagopalan wrote: > Linux + iptables + fwbuilder > > > > On Thu, Jun 30, 2011 at 8:50 AM, Blake T. Pfankuch<blake(a)pfankuch.me> wrote: >> Howdy, >> I am looking for something a little unique in a bit of a tough situation with some sticky requirements. First off, my requirements are a little weird and I can't bend them a whole lot due to stipulations being put on me. I am in need a firewall appliance which can be run on VMware vSphere, with IPSEC support for multiple Phase 2 negotiations within a single Phase 1. I am also in need of something that can support VLAN interfaces on the LAN side, and ideally something with multi zoning so I can keep LAN side networks separate from each without ridiculous firewall rules. Meaning build a zone for "Customer network 1" and it displays separately (ease of management and firewall config hopefully). I need a minimum of 10 "zones" on LAN side (/29 or /30), and NAT support for LAN to WAN (to dedicate all outbound connections to a single IP from a specific zone), ideally something extremely scalable (100-200 zones). And here is the super fun part! I need something that is going to be web managed primarily as minions will be doing most of the day to day maintenance, or very simple CLI config. Willing to pay for something if need be, but looking for something that can easily handly 50-100mbit of throughput. >> >> Any Ideas? >> >> Thanks! >> >> Blake Pfankuch >> Vyatta. They have an appliance on their website. --Curtis ------------------------------ Message: 4 Date: Tue, 5 Jul 2011 00:50:45 -0400 From: Peter Nowak <pnowak(a)batblue.com> Subject: Re: Firewall Appliance Suggestions To: Blake T. Pfankuch <blake(a)pfankuch.me> Cc: "NANOG \(nanog(a)nanog.org\)" <nanog(a)nanog.org> Message-ID: <1B8D4E1C-BA43-4257-89DA-7D6EBB154927(a)batblue.com> Content-Type: text/plain; charset=us-ascii They don't have a VM yet - coming soon - but you may take a look at Palo Alto Networks. Having just a regular stateful firewall is not a good idea anymore... Peter Nowak On Jul 1, 2011, at 12:35 AM, Blake T. Pfankuch wrote: > Normally I would agree with you as far as separate instances, however this will be in a situation where we pay ridiculous amounts for cpu and memory, so a single instance is what we are shooting for (remember those ridiculous requirements). I am planning to do some further testing with vyatta and pfsense. Thanks you all for the on list and off list responses! > > -----Original Message----- > From: Sargun Dhillon [mailto:sargun@sargun.me] > Sent: Thursday, June 30, 2011 9:56 PM > To: George Bonser > Cc: Blake T. Pfankuch; NANOG (nanog(a)nanog.org) > Subject: Re: Firewall Appliance Suggestions > > > > ----- Original Message ----- >> From: "George Bonser" <gbonser(a)seven.com> >> To: "Blake T. Pfankuch" <blake(a)pfankuch.me>, "NANOG (nanog(a)nanog.org)" >> <nanog(a)nanog.org> >> Sent: Thursday, June 30, 2011 11:30:53 AM >> Subject: RE: Firewall Appliance Suggestions >> >>> Willing to pay for something if need be, but looking for something >>> that can easily handly 50-100mbit of throughput. >>> >>> Any Ideas? >>> >>> Thanks! >>> >>> Blake Pfankuch >> >> >> I might also look at Vyatta. They have appliances or you can run the >> software on your own hardware. >> >> >> >> >> >> > > I would not go with Vyatta if you're doing anything complex. The number of random bugs I've hit with their software are numerous. In the right hands, it's a powerful tool. And it seems to fit your solution really well. > > If I were in your shoes, I would install two instances that would handle the "edge" of the cluster, and then an instance per customer (lightweight, they sell a VMWare image). Then use dynamic routing to direct traffic to the customer (assign each customer their own ASN, and peer with their instance). So, worse case scenario, the NOC monkey only breaks one customer's gear. > > > -- > Sargun Dhillon > VoIP (US): +1-925-235-1105 Peter Nowak Manager, Technical Services Bat Blue Corporation | Integrity . Privacy . Availability p. 212.461.3322 x3020 | f. 212.584.9999 | w. www.batblue.com Bat Blue's AS: 25885 | BGP Policy | Peering Policy Bat Blue's Legal Notice Receive Bat Blue's DSB Intelligence Report Bat Blue is proud to be the Official WiFi Provider for ESPN's X-Games ------------------------------ _______________________________________________ NANOG mailing list NANOG(a)nanog.org https://mailman.nanog.org/mailman/listinfo/nanog End of NANOG Digest, Vol 42, Issue 5 ************************************

5 4