- Test - lists.nanog.org

AS6517 - Reliance Globalcom -- routing three more hijacked blocks
by Ronald F. Guilmette 07 Oct '10

07 Oct '10

6 5

[NANOG-announce] NANOG election results and other news
by Steve Feldman 07 Oct '10

07 Oct '10

As usual for our October meetings, there has been a lot happening, with more to come over the next few days. Our annual election was held during NANOG 50, with these results: - Patrick Gilmore, Robert Seastrom, and Richard Steenbergen were elected to two-year terms on the NANOG SC (and also therefore to the NewNOG Board.) - The charter amendment to transition NANOG activities from Merit to NewNOG passed with 210 votes in favor, 16 votes against. - In the NewNOG election, the measure to adopt the Bylaws passed with 169 votes in favor, 26 against. I have been elected by the SC to serve again as Chair for the coming year, and Sylvie LaPerriere was elected as Vice-Chair. The Program Committee selection process is underway, and the results will be announced in the next day so. Nominations are still open for Communications Committee positions. I would like to encourage any of you who regularly participate in the mailing list and are interested in maintaining list quality and in building new forms of communication for the community to consider volunteering. Please see: http://www.nanog.org/governance/elections/2010elections/ for further information on the selection process. For the Steering Committee, Steve Feldman, chair _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org https://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

DNS/Proxy based DDoS protection
by Drew Weaver 07 Oct '10

07 Oct '10

Hi, Over the last several years I've noticed there seems to be no limit to the number of proxy/DNS based DDoS protection services springing up all over the place so I am wondering if anyone has any insights on what sorts of tools, etc these companies use to provide this service (Open Source, Commercial?) and if anyone has any thoughts or experiences regarding the effectiveness of these types of services to protect HTTP services. thanks, -Drew

1 0

Scam telemarketers spoofing our NOC phone number for callerid
by Matthew Huff 07 Oct '10

07 Oct '10

We have recently gotten complaints of harrassing and high pressure sales scams orginating from our NOC's phone number. Since the number is a virtual number on the PBX, it can't be used for outgoing calls. I assume the scammers choose the number from the whois db. Anyone else seen this happening? Any suggestions on whom we should contact? ---- Matthew Huff | One Manhattanville Rd OTA Management LLC | Purchase, NY 10577 http://www.ox.com | Phone: 914-460-4039 aim: matthewbhuff | Fax: 914-460-4139

12 16

Los Angeles Internet Exchanges
by Mehmet Akcin 06 Oct '10

06 Oct '10

Hello, if you are somewhat involved with technical or non technical operations of IX points within Los Angeles / Orange County area, could you please contact me off-list? thank you. mehmet

1 0

Mobile Looking Glass?
by St. Onge,Adam 06 Oct '10

06 Oct '10

Anyone know of an iPhone application for checking public Looking Glass servers? Boss called me in a panic when I was out for lunch to check on something and would make my life much easier but searching for stuff on iTunes is awful. ============================================================================== This communication, including attachments, is confidential, may be subject to legal privileges, and is intended for the sole use of the addressee. Any use, duplication, disclosure or dissemination of this communication, other than by the addressee, is prohibited. If you have received this communication in error, please notify the sender immediately and delete or destroy this communication and all copies.

5 4

2010.10.06 NANOG50 day 3, Wednesday morning notes
by Matthew Petach 06 Oct '10

06 Oct '10

Thanks to everyone for a wonderful conference--this wraps the last of NANOG50--see you all in Miami! Notes from this morning's session are posted at http://kestrel3.netflight.com/2010.10.06-NANOG50-morning-notes.txt sorry about the gaps, I kinda nodded off now and then--only got 2 hours of sleep last night. ^_^;; Apologies for typos, misspellings, etc. Thanks again for a wonderful conference!! :) Matt

4 3

Anyone can share the Network card experience
by Deric Kwok 06 Oct '10

06 Oct '10

Hi Anyone can share the Network card experience ls onborad PCI Expresscard better or Plug in slot PCI Express card good? How are their performance in Gig transfer rate? Thank you so much

4 5

2010.10.05 NANOG50 Tuesday afternoon notes
by Matthew Petach 05 Oct '10

05 Oct '10

I've posted the Tuesday afternoon notes at http://kestrel3.netflight.com/2010.10.05-NANOG50-afternoon-notes.txt and now I'm dashing to the social, because they're turning out the lights on me in the hall here. ^_^;; Matt

2 1

ILNP and DNS (from 2010.10.04 NANOG50 day 1 morning notes)
by Michael Sinatra 05 Oct '10

05 Oct '10

> Michael Sinatra, UCB; what are thoughts around best practices for > auth DNS server in ILNP world, and how do you handle updates for > locator values to the auth servers when a link changes? > A: you need > DNSsec to be running, you make updates, you check authenticity of the > update, etc. How will other networks know about the changes. The initial answer to my question didn't quite get the point of the question, so I followed up. I think ILNP is very interesting because it attempts to create a true I/L split via naming semantics. However, it relies on DNS to do this. Somewhere, there has to be an authoritative DNS server(s) that have the prefix list and preferences for the site. (In ILNP, each host can have its own list of preferred prefixes in the form of L64 records, or they can defer to a site-wide L64 RRset with the LP record.) I acknowledge that this requires a secure dynamic update mechanism (presumably with the border routers doing the updates), and it requires very low ttls to improve convergence. Where this becomes interesting from an operational perspective is when I think about how to address authoritative DNS servers in an ILNP world. The DNS server itself has to be reachable, and the prefix list for the DNS server must be updated when the network topology changes. Hence the question: How should I provision authoritative DNS servers, given that the prefix information is provided via DNS--including the prefix information for the DNS servers themselves--leading to a chicken-and-egg problem. In addition, I would assume that I need something similar to glue records (instead of A or AAAA glue, I need L64 or LP glue). I think one answer would be to have all of my authoritative servers in someone else's network, where they could maintain all of the L64 records completely independent of my DNS infrastructure. With the DNS servers in my network, I don't think there's an answer to the chicken-and-egg problem. Of course, if one of their upstreams dies, my DNS may suffer if I can't withdraw my partner's network's prefixes from the L64 record for my DNS server. This blends into Danny's comment about routing relying on DNS and DNS relying on routing, and to Dave's comment on the binding between the identity and locator being a critical (and difficult) component of the I/L split. I realize that the distinction between operations and protocol development in this discussion may be subject to interpretation, but I also think it's important to understand the operational implications of developing protocols early on. michael

4 6