- Test - lists.nanog.org

Re: A top-down RPKI model a threat to human freedom? (was Re: Level 3's IRR Database)
by Brandon Butterworth 01 Feb '11

01 Feb '11

So a possible road to ruin I was thinking of when I mentioned my unease is, to state the obvious, - Some large ISPs do RPKI as it's secure and their government contract says they have to be secure, keep the terrists out, so all directly attached ISP have to do it too kicking off a domino Other large customers will see the government lead and choose the same to meet the corporate governance rules so smaller ISP they use start to fall in line. It'll escalate like the MD5 frenzy, goes global and at some point hits critical mass where some ISP decide the unsigned routes are a risk and they can afford to drop them, like some do with deaggregates now. You get to the state of either you sign or your upstream signs (like L3 IRR proxy entries just a bit harder) or you don't exist. Some other event, like with UK anti CP filters, will happen where it becomes a legal requirement to let someone fiddle and make a kill switch to be used in certain circumstances. Later it gets used in unintended circumstances Our trade of control for security has given us neither. Of course more likely the key renewal will get spam filtered and I'll not notice until we fall off the net, or we forget to pay the RIR invoice on time and get cut off, causing a long outage that I can't fix as quickly as rolling back a router config change. I also wonder about emergency use, post a katrina have we made something that's too hard to bootstrap quickly. Drive slow. brandon

1 0

2011.02.01 NANOG51 day 2 afternoon session notes
by Matthew Petach 01 Feb '11

01 Feb '11

I've posted the afternoon notes from today's session at http://kestrel3.netflight.com/2011.02.01-NANOG51-afternoon-notes.txt Definitely not as happy with the flash video stream as I was with the hi-def VLC video stream that was provided at NANOG49. :( Lots of player problems and audio stuttering/loss on the flash stream for me. Any chance of the hi-def VLC stream coming back for future NANOGs, or was the bandwidth requirement too high to be feasible? Thanks! Matt

1 0

Re: Using IPv6 with prefixes shorter than a /64 on a LAN
by Tim Franklin 01 Feb '11

01 Feb '11

> I think ULA is still useful for home networks. If the home router guys > properly generate the ULA dynamically, it should stop conflicts within > home networking. There's something to be said for internal services > which ULA can be useful for, even when you do fall off the net. I really, *really* expect my CPE router *not* to remove global addresses from the LAN interface(s) when the link to the Internet goes down. My internal services should go on working with their global addresses. This is how my tunneled IPv6 works today. Am I being an unreasonable engineer in this respect? Regards, Tim.

3 2

Akamai - Timouts (TCP Stalls) at the SIX
by Wade Peacock 01 Feb '11

01 Feb '11

We've been experiencing issue with content coming from Akamai servers located in Seattle since Thursday January 27, 2011. Our upstream peers directly with Akamai as the SIX (Seattle Internet Exchange). We've been seeing timeouts/partial loads for sites with content delivered from IP block 96.17.8.0/24. Known impacted site for our customers: www.cbc.ca www.ebay.ca www.westjet.ca(redirect to www.westjet.com) We've opened tickets with our upstream and Akamai, but we are curious if others are experiencing the same issues. Wade Peacock Network Administrator Sun Country Cablevision Ltd Sunwave Internet Department Tel: (250) 832-9711 or (250) 546-9667 Dir: (250) 832-5123 x 220 Web: http://www.sunwave.net Email: wade.peacock(a)sunwave.net Support Email: support(a)sunwave.net

2 1

2011.02.01 NANOG51 day2 morning session notes posted
by Matthew Petach 01 Feb '11

01 Feb '11

(sorry about the delay, had to hop on a vendor call right as lunch break started) Morning session notes have been posted to http://kestrel3.netflight.com/2011.02.01-NANOG51-morning-notes.txt for those following along remotely. Very nice handoff and signing ceremony this morning by Steve Feldman and Don Welch--congratulations, newNOG, new owners of the NANOG name! Matt

1 0

OT: Anyone have PDF Manual for Nortel/BayStack 425-24T Switch
by kmedcalf＠dessus.com 01 Feb '11

01 Feb '11

Does anyone happen to have PDF Manuals (not the sales literature, but the switch software command references) for this switch? We have one in a production network and know nothing about it nor how to manage it. Nortel does not make any of the manuals available anymore, at least not in the interwebs (that I can find) nor does googling turn up anything very useful. Any help would be appreciated. If nothing can be found this will probably be discarded and replaced with appropriately supported product. Now, back to your regularly scheduled programming ... ---- #include <shrinkwrap-disclaimer.h>

2 2

2010 Worldwide Infrastructure Security Report available for download.
by Roland Dobbins 01 Feb '11

01 Feb '11

[Apologies for any duplication if you've seen this notification on other lists.] We've just posted the 2010 Worldwide Infrastructure Security Report for download at this URL: <http://www.arbornetworks.com/report> This year's WWISR contains responses and data from the broadest cross-section of SPs to date, including mobile operators and IDC operators in all major geographical regions. The WWISR is based upon input from the global operational community, and as such, is unique in its focus on the operational security aspects of public-facing networks. Many of you contributed to the survey which forms the foundation of the report; as always, we're grateful for your insight and participation, and welcome your feedback and comments. Thanks much! ------------------------------------------------------------------------ Roland Dobbins <rdobbins(a)arbor.net> // <http://www.arbornetworks.com>

1 0

good night v4
by Scott Weeks 01 Feb '11

01 Feb '11

I know there're a gazillion counters out there, but one many have watched for a long time is potaroo's (http://www.potaroo.net/tools/ipv4) I was having fun watching it run out tonight. Here's a snapshot with only 1090 routes left: http://mauigateway.com/~surfer/goodnight-v4.png It turns out to be a timer counting down to midnight on the selected day, so everyone saw it goto zero at different times. However, since Hawaii is the last major population in "the world's day" (last one before the International date line) and the counter here hit zero does that mean I will wake up tomorrow to a shiny new internet? scott apologies, it's late and I just couldn't help it... >:-) -- evil grin

2 1

2011.01.31 NANOG51 day 1 afternoon session notes
by Matthew Petach 01 Feb '11

01 Feb '11

I've posted my notes from the afternoon sessions, including the lighting talks, at http://kestrel3.netflight.com/2011.01.31-NANOG51-afternoon-notes.txt for those are are following along remotely, or catching up after a good round of meetings at the bar. :) Have fun at the beer and gear--sorry I can't take any notes on the IPv6 deployment experiences panel--I'm sure it would have been interesting reading, given the amount of attention v6 has been getting on the list recently. ^_^ Matt

2 1

APNIC description: "unknown"
by Vovan 01 Feb '11

01 Feb '11

Hello, sorry for possibly trite question, but what does this ">>UNKNOWN<<" mean? e.g.: > Network Origin AS Description > 41.222.79.0/24 36938 >>UNKNOWN<< quote from: http://thyme.rand.apnic.net/current/data-add-IANA Cheers, Vladimir

7 9