- Test - lists.nanog.org

.mil DNS problems?
by Antonio Querubin 25 Oct '10

25 Oct '10

Anyone else having trouble resolving .mil hostnames today? Antonio Querubin 808-545-5282 x3003 e-mail/xmpp: tony(a)lava.net

1 0

Change of dnswl.org operating model
by Matthias Leisi 25 Oct '10

25 Oct '10

Hi, As announced earlier, dnswl.org will change it's operating model. "Heavy users" (defined as those doing > 100'000 queries/24 hours on the public nameservers) and vendors of anti-spam products and services will need a paid subscription. We are now ready to implement the model and will gradually start to enforce it. Since we do not know the current users (all we have are IPs and sometimes hostnames), we will also need to "cut off" users if our attempts at identifying and notifying them fail. The "cut off" may have two of effects: 1) rsync suddenly stops working 2) queries on the public nameservers are refused. We may be able to reinstate access on a case by case basis. As usual, we can be reached at admins/at/dnswl.org (or office/at/dnswl.org for direct access to the people handling the subscriptions). All details are available from http://www.dnswl.org/ -- Matthias

1 0

New and Improved RIPE Registry Global Resource Service
by Mirjam Kuehne 25 Oct '10

25 Oct '10

[Apologies for duplicate emails] Hi, We have redesigned and improved the way we mirror other databases (Thanks to the RIPE NCC Database staff!). We now have a method of translating the operational data from other registries (for instance from other RIRs or the RADb) into the RIPE Database structure. This means the RIPE Database will contain the most complete set of operational data in (RIPE) RPSL format. Read more on RIPE Labs: http://labs.ripe.net/Members/Paul_P_/ripe-registry-global-resource-service Kind Regards, Mirjam Kuehne RIPE NCC

1 0

[WOB] RE: NTP Server
by Joel M Snyder 25 Oct '10

25 Oct '10

Complete WOB, but I whenever people start talking about NTP, I always start trying to figure out how I could justify one of these for the data center: http://www.inovasolutions.com/network-clocks/products/analog-network-clocks… (PoE, SNTP, ANALOG clock) jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

1 0

Re: NTP Server
by Cutler James R 25 Oct '10

25 Oct '10

Routers are not a good choice for time servers as it complicates configuration and, to some extent, constrains deployment methodology for routers to be effective with time service. We don't run DNS on routers, it is a service. Time service via NTP is a service as well. The NTP daemon in a router is not implemented in hardware and requires CPU resources better dedicated to RIB management. In my experience, a reliable NTP peer group can be implemented on the same set of boxes as DNS (bind, etc.) with little or no impact on DNS performance. If you can count to four or more, you can make a reliable peer group of time servers. On Oct 24, 2010, at 8:15 PM, Brandon Kim wrote: > > Hi Sean: > > By local I meant in-house, on-site in our datacenter. As far as what applications could use our NTP service, I would > leave that up to each client and what they are running. For my own personal purposes, it would just be for log purposes. > (error logs, syslogs, etc etc) > > I have heard that routers don't make good NTP servers since they weren't designed to keep track of time. This, I have read > from a Cisco source. Can't remember where though. Or maybe they were just referring to older less powerful routers like 2500 series... > > Brandon > > > > > > >> Date: Sun, 24 Oct 2010 14:42:24 -0400 >> From: sean(a)donelan.com >> To: nanog(a)nanog.org >> Subject: Re: NTP Server >> >> On Sun, 24 Oct 2010, Brandon Kim wrote: >>> 1) How necessary do you believe in local NTP servers? Do you really >>> need the logs to be perfectly accurate? >>> 2) If you do have a local NTP server, is it only for local internal >>> use, or do you provide this NTP server to your clients as an added >>> service? >>> 3) If you do have a local NTP server, do you have a standby local NTP >>> server or do you use the internet as your standby server? >> >> First terminology. What do you mean by a local NTP server? >> >> Almost any Cisco/Juniper router, Unix server and some recent Windows >> servers have NTP server software and can synchronize clocks in your >> network. So you may already have a NTP server capable device. You just >> need to configure it, and give it a good source of time. It would be a >> Stratum 2 or greater NTP server because the good source of time is >> another NTP server. Left to itself, NTP is pretty good at keeping clocks >> in arbitrary networks synchronized with each other. But most people are >> also interested in synchronizing clocks with some official time source. >> >> The Network Time Protocol doesn't really have the notion of a "standby" >> server. It uses multiple time sources together, and works best with about >> four time sources. But for many end-systems, the Simple Network Time >> Protocol with a single time source may be sufficient. >> >> If you are in a regulated industry (stock broker, electric utility, 9-1-1 >> answering point, etc) there are specific time and frequency standards you >> must follow. >> >> On the other hand, are you are asking about a local clock receiver (radio, >> satellite, etc) for a stratum 1 NTP server? Clock receivers are getting >> cheaper, the problem is usually the antenna location. >> >> Or on the third hand, are you asking about local primary reference clock >> (caesium, rubium, etc) for a stratum 1 NTP server? These are still >> relatively expensive up to extremely expensive. >> >> Or on the fourth hand, are you a time scientist working to improve >> international time standards. If you are one of these folks, you already >> know. >> >> >> Most major ISPs use NTP across their router backbone, and incidently >> provide it to their customers. The local ISP router connected to your >> circuit probably has NTP enabled. >> >> Required accuracy is in the eye of the beholder. NASDAQ requires brokers >> to have their clocks synchronized within 3 seconds of UTC(NIST). 9-1-1 >> centers are required to have their clocks synchronized within 0.5 seconds >> of UTC. Kerberos/Active Directory requires clocks to be synchronized >> within 5 minutes of each other. >> >> If your log files have a resolution of 1 second, you probably won't see >> much benefit of sub-second clock precision or accuracy. If you are >> conducting distributed measurements with sub-microsecond resolution, you >> probably will want something more. >> >> >> > = James R. Cutler james.cutler(a)consultant.com

2 1

Re: NTP Server
by Martin Hotze 25 Oct '10

25 Oct '10

> Date: Sun, 24 Oct 2010 14:18:18 -0400 > From: David Andersen <dga(a)cs.cmu.edu> > Subject: Re: NTP Server (...) > If you find yourself needing really precise time with good guarantees, > you're not just talking about buying one GPS unit -- you can easily go > down a rathole of finding multiple units with good holdover And you have to trust one single source: the US military. Having my network outside the US and having read NOTAMs (notice to airmen) while preparing a flight stating that due to military ops the GPS signal was screwed up in that area I would not rely on GPS as my single NTP source for my network. #m

1 0

Only 5x IPv4 /8 remaining at IANA
by Jeroen Massar 23 Oct '10

23 Oct '10

APNIC just got another IPv4 /8 thus only 5 left: http://www.nro.net/media/remaining-ipv4-address-below-5.html (And the spammers will take the rest...) So, if your company is not doing IPv6 yet, you really are really getting late now. Greets, Jeroen (PS: There seems to be a trend for people calling themselves"IPv6 Pioneers" as they recently did something with IPv6, if you didn't play in the 6bone/early-RIR allocs you are not a pioneer as you are 10 years late)

56 154

nocproject.org
by Lin Pica8 23 Oct '10

23 Oct '10

Hello, For your information : http://www.nocproject.org NOC is an Operation Support System (OSS) for the Telco, Service provider and Enterprise Network Operation Centers (NOC). Written using Python language and utilizing the power of Django framework and PosgtreSQL database. NOC is open source and released under the terms of BSD LICENSE. Mail : pica8.org(a)gmail.com

1 0

Re: ipv6 vs. LAMP
by Carlos Martinez-Cagnazzo 23 Oct '10

23 Oct '10

Hi all, the replication point is a good one, I did not think about that. However, I still believe that on the road to v6 adoption, databases are far from being our most pressing roadblock. Thanks all! Carlos On Fri, Oct 22, 2010 at 4:52 PM, Jerry B. Altzman <jbaltz(a)altzman.com>wrote: > Only to you. > on 10/22/2010 10:02 AM Carlos Martinez-Cagnazzo said the following: > > IMHO you should never, ever make your MySQL accesible over the public >> Internet, which renders the issue of MySQL not supporting IPv6 correctly >> mostly irrelevant. You could even run your MySQL behind your web backend >> using RFC1918 space (something I do recommend). >> > > Except for those of us who have to support applications based upon MySQL > replication...in that case, we use IP-based access rules on a firewall in > front, and on the host, and on the MySQL server itself. But we still need IP > access to it. > > We could shade it all by using IPSec or VPN tunnels, but that's more > administrative overhead, and MySQL replication is fragile enough without > adding that. > > > Moreover, if you need direct access to the engine, you can trivially >> create >> an SSH tunnel (You can even do this in a point-and-click way using the >> latest MySQL Workbench). SSH works over IPv6 just fine. >> > > See above about replication. > > Carlos >> > > //jbaltz > -- > jerry b. altzman jbaltz(a)altzman.com www.jbaltz.com > thank you for contributing to the heat death of the universe. > -- -- ========================= Carlos M. Martinez-Cagnazzo http://cagnazzo.name =========================

1 0

Sprint BGP/routing engineer needed
by Brandon Applegate 22 Oct '10

22 Oct '10

If you have visibility and can fix things - I would greatly appreciate an off-list contact. We have a reachability issue through Level3, but it's on the Sprint side of a specific peer and the Level3 support person can't fit the pieces together mentally. We are still pursuing our ticket and trying to do it 'by the book' (we are a Level3 customer) but an off-list contact would be very much appreciated. -- Brandon Applegate - CCIE 10273 PGP Key fingerprint: 7407 DC86 AA7B A57F 62D1 A715 3C63 66A1 181E 6996 "SH1-0151. This is the serial number, of our orbital gun."

1 1