- Test - lists.nanog.org

Seeking contact with Russian Lawful Intercept (SORM) implementation experience
by Jon Boone 11 Sep '21

11 Sep '21

Hi folks, I’m looking for a contact who has experience with implementing Russian SORM-[2,3] compliance infrastructures. I recognize this may be the NOG forum to ask in. — if there is a more appropriate one, please let me know. — jb

2 1

Re: Xfi Advances Security (comcast)
by Matt Goldman 10 Sep '21

10 Sep '21

We ran into this same issue for the first time yesterday too. Xfi Advanced Security started blocking our websockets endpoint, websocket.carsandbids.com/carsandbids. Our logs just showed a couple users failing to make the connection. We never would have figured it out except that one of our employees was getting blocked and was able to help us debug. We submitted the url to https://spa.xfinity.com/report to get whitelisted, but haven’t heard back yet, the form said estimated three business days. Matt Goldman Backend Engineer matt at carsandbids dot com

1 0

Weekly Routing Table Report
by cscora＠apnic.net 10 Sep '21

10 Sep '21

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 11 Sep, 2021 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 861637 Prefixes after maximum aggregation (per Origin AS): 326121 Deaggregation factor: 2.64 Unique aggregates announced (without unneeded subnets): 414174 Total ASes present in the Internet Routing Table: 71910 Prefixes per ASN: 11.98 Origin-only ASes present in the Internet Routing Table: 61801 Origin ASes announcing only one prefix: 25551 Transit ASes present in the Internet Routing Table: 10109 Transit-only ASes present in the Internet Routing Table: 329 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 37 Max AS path prepend of ASN (141827) 33 Prefixes from unregistered ASNs in the Routing Table: 967 Number of instances of unregistered ASNs: 974 Number of 32-bit ASNs allocated by the RIRs: 37182 Number of 32-bit ASNs visible in the Routing Table: 30868 Prefixes from 32-bit ASNs in the Routing Table: 143537 Number of bogon 32-bit ASNs visible in the Routing Table: 37 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 470 Number of addresses announced to Internet: 3039121536 Equivalent to 181 /8s, 37 /16s and 80 /24s Percentage of available address space announced: 82.1 Percentage of allocated address space announced: 82.1 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 286233 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 231597 Total APNIC prefixes after maximum aggregation: 66091 APNIC Deaggregation factor: 3.50 Prefixes being announced from the APNIC address blocks: 227042 Unique aggregates announced from the APNIC address blocks: 90918 APNIC Region origin ASes present in the Internet Routing Table: 11927 APNIC Prefixes per ASN: 19.04 APNIC Region origin ASes announcing only one prefix: 3390 APNIC Region transit ASes present in the Internet Routing Table: 1668 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 37 Number of APNIC region 32-bit ASNs visible in the Routing Table: 7082 Number of APNIC addresses announced to Internet: 773837568 Equivalent to 46 /8s, 31 /16s and 211 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-147769 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 251817 Total ARIN prefixes after maximum aggregation: 115198 ARIN Deaggregation factor: 2.19 Prefixes being announced from the ARIN address blocks: 251659 Unique aggregates announced from the ARIN address blocks: 119787 ARIN Region origin ASes present in the Internet Routing Table: 18899 ARIN Prefixes per ASN: 13.32 ARIN Region origin ASes announcing only one prefix: 6888 ARIN Region transit ASes present in the Internet Routing Table: 1956 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 28 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4097 Number of ARIN addresses announced to Internet: 1268366592 Equivalent to 75 /8s, 153 /16s and 189 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 240132 Total RIPE prefixes after maximum aggregation: 112357 RIPE Deaggregation factor: 2.14 Prefixes being announced from the RIPE address blocks: 236352 Unique aggregates announced from the RIPE address blocks: 144828 RIPE Region origin ASes present in the Internet Routing Table: 28038 RIPE Prefixes per ASN: 8.43 RIPE Region origin ASes announcing only one prefix: 12075 RIPE Region transit ASes present in the Internet Routing Table: 3911 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 29 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10388 Number of RIPE addresses announced to Internet: 711569280 Equivalent to 42 /8s, 105 /16s and 175 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 111120 Total LACNIC prefixes after maximum aggregation: 26541 LACNIC Deaggregation factor: 4.19 Prefixes being announced from the LACNIC address blocks: 112192 Unique aggregates announced from the LACNIC address blocks: 47157 LACNIC Region origin ASes present in the Internet Routing Table: 10781 LACNIC Prefixes per ASN: 10.41 LACNIC Region origin ASes announcing only one prefix: 2660 LACNIC Region transit ASes present in the Internet Routing Table: 2104 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 29 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8434 Number of LACNIC addresses announced to Internet: 176567808 Equivalent to 10 /8s, 134 /16s and 54 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 26004 Total AfriNIC prefixes after maximum aggregation: 5208 AfriNIC Deaggregation factor: 4.99 Prefixes being announced from the AfriNIC address blocks: 33922 Unique aggregates announced from the AfriNIC address blocks: 11071 AfriNIC Region origin ASes present in the Internet Routing Table: 1536 AfriNIC Prefixes per ASN: 22.08 AfriNIC Region origin ASes announcing only one prefix: 538 AfriNIC Region transit ASes present in the Internet Routing Table: 305 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 36 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 867 Number of AfriNIC addresses announced to Internet: 108444928 Equivalent to 6 /8s, 118 /16s and 189 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 8002 9000 57 CMNET-GD Guangdong Mobile Communication 7545 5812 785 676 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4711 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3634 1330 20 VIETEL-AS-AP Viettel Group, VN 7713 3525 1023 56 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 2890 1897 56 VNPT-AS-VN VNPT Corp, VN 4766 2502 11120 582 KIXS-AS-KR Korea Telecom, KR 9498 2364 502 239 BBIL-AP BHARTI Airtel Ltd., IN 45090 2127 1198 75 CNNIC-TENCENT-NET-AP Shenzhen Tencent C 4755 2113 437 194 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 5538 9708 2458 AMAZON-02, US 11492 4656 308 753 CABLEONE, US 22773 4004 3033 282 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3968 264 32 VIASAT-SP-BACKBONE, US 16625 3589 1852 2496 AKAMAI-AS, US 6327 3365 1313 63 SHAW, CA 30036 2578 373 204 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2508 5029 449 CENTURYLINK-US-LEGACY-QWEST, US 5972 2295 488 811 DNIC-ASBLK-05800-06055, US 20115 2242 3032 504 CHARTER-20115, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6837 1726 143 UNI2-AS, ES 20940 3784 3348 215 AKAMAI-ASN1, NL 8551 3312 378 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 39891 3269 187 23 ALJAWWALSTC-AS, SA 12389 2907 2279 895 ROSTELECOM-AS, RU 9009 2509 262 1336 M247, GB 34984 2228 357 599 TELLCOM-AS, TR 61317 1761 262 976 ASDETUK www.heficed.com, GB 58224 1634 890 568 TCI, IR 13188 1610 100 27 TRIOLAN, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8268 3457 577 Uninet S.A. de C.V., MX 10620 3416 523 672 Telmex Colombia S.A., CO 11830 2497 369 62 Instituto Costarricense de Electricidad 13999 1778 397 471 Mega Cable, S.A. de C.V., MX 6503 1515 359 477 Axtel, S.A.B. de C.V., MX 28573 1452 2300 229 CLARO S.A., BR 3816 1240 652 152 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 26615 1128 2351 134 TIM SA, BR 6147 1079 369 22 Telefonica del Peru S.A.A., PE 11172 957 111 70 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1632 393 20 LINKdotNET-AS, EG 24835 1429 499 33 RAYA-AS, EG 36992 1311 1489 267 ETISALAT-MISR, EG 36903 1183 537 110 MT-MPLS, MA 29571 775 68 11 ORANGE-COTE-IVOIRE, CI 6713 613 1863 34 IAM-AS, MA 36935 579 522 40 Vodafone-, EG 15399 500 49 28 WANANCHI-, KE 37342 469 32 1 MOVITEL, MZ 2018 338 319 74 TENET-1, ZA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8268 3457 577 Uninet S.A. de C.V., MX 9808 8002 9000 57 CMNET-GD Guangdong Mobile Communication 12479 6837 1726 143 UNI2-AS, ES 7545 5812 785 676 TPG-INTERNET-AP TPG Telecom Limited, AU 16509 5538 9708 2458 AMAZON-02, US 4538 4711 4192 74 ERX-CERNET-BKB China Education and Rese 11492 4656 308 753 CABLEONE, US 22773 4004 3033 282 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3968 264 32 VIASAT-SP-BACKBONE, US 20940 3784 3348 215 AKAMAI-ASN1, NL Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 8002 7945 CMNET-GD Guangdong Mobile Communication Co.Ltd. 12479 6837 6694 UNI2-AS, ES 7545 5812 5136 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4711 4637 ERX-CERNET-BKB China Education and Research Net 7155 3968 3936 VIASAT-SP-BACKBONE, US 11492 4656 3903 CABLEONE, US 22773 4004 3722 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3634 3614 VIETEL-AS-AP Viettel Group, VN 20940 3784 3569 AKAMAI-ASN1, NL 7713 3525 3469 TELKOMNET-AS-AP PT Telekomunikasi Indonesia, ID Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 1782 UNALLOCATED 8.42.19.0/24 46887 LIGHTOWER, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 395056 UNALLOCATED 8.45.133.0/24 3356 LEVEL3, US 32306 UNALLOCATED 8.46.80.0/24 33652 CMCS, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.132.208.0/24 Origin: 7850 CITYLINKFIBER, US 23.132.208.0/24 Transit: 15164 UPNLLC, US 23.141.0.0/24 Origin: 395350 UNASSIGNED 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US 23.177.96.0/24 Origin: 397300 UNASSIGNED 23.177.96.0/24 Transit: 33387 NOCIX, US 27.100.7.0/24 Origin: 56096 UNASSIGNED 27.100.7.0/24 Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 41.57.124.0/22 Origin: 37442 UNASSIGNED 41.57.124.0/22 Transit: 174 COGENT-174, US Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:41 /11:101 /12:304 /13:589 /14:1193 /15:2002 /16:13396 /17:8239 /18:14005 /19:25397 /20:42475 /21:50649 /22:106957 /23:91891 /24:502824 /25:1545 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 5762 6837 UNI2-AS, ES 11492 3611 4656 CABLEONE, US 6327 3176 3365 SHAW, CA 7155 3056 3968 VIASAT-SP-BACKBONE, US 22773 2990 4004 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2805 3269 ALJAWWALSTC-AS, SA 8551 2778 3312 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 8151 2763 8268 Uninet S.A. de C.V., MX 30036 2231 2578 MEDIACOM-ENTERPRISE-BUSINESS, US 11830 1931 2497 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1909 2:1100 3:145 4:20 5:3598 6:84 7:5 8:1547 9:1 11:164 12:1738 13:390 14:2281 15:103 16:23 17:351 18:108 20:126 21:4 22:188 23:5076 24:2449 25:2 27:2515 29:19 31:2365 32:113 34:1 35:46 36:1734 37:3799 38:2219 39:637 40:165 41:3819 42:975 43:2068 44:288 45:15383 46:3695 47:353 48:7 49:1626 50:1814 51:100 52:1284 54:248 55:748 56:4 57:53 58:1727 59:1197 60:932 61:2297 62:2308 63:1962 64:5369 65:2358 66:5003 67:2868 68:1167 69:4114 70:1365 71:677 72:3163 74:2624 75:1501 76:696 77:2044 78:1678 79:2630 80:1868 81:1553 82:1367 83:1150 84:1308 85:2743 86:714 87:1823 88:973 89:3040 90:517 91:7384 92:1820 93:2555 94:3135 95:3502 96:1300 97:345 98:977 99:958 100:76 101:1057 102:1658 103:26857 104:4008 105:431 106:829 107:2331 108:728 109:3896 110:2040 111:3182 112:1933 113:1421 114:1472 115:1923 116:1898 117:2411 118:2307 119:1894 120:1546 121:1075 122:2520 123:2160 124:1599 125:2068 128:1343 129:1363 130:880 131:2024 132:772 133:362 134:1813 135:306 136:776 137:845 138:2394 139:1187 140:760 141:1209 142:1209 143:1335 144:1265 145:324 146:1499 147:1394 148:2155 149:1495 150:822 151:1082 152:1647 153:428 154:3018 155:1332 156:1760 157:1223 158:980 159:2014 160:2354 161:1250 162:3385 163:1097 164:1553 165:1428 166:597 167:1784 168:3645 169:696 170:4333 171:806 172:2744 173:2872 174:1005 175:1108 176:3258 177:4441 178:2993 179:1875 180:2264 181:2651 182:3219 183:2032 184:2420 185:18749 186:4239 187:3094 188:3325 189:2816 190:8676 191:1373 192:10709 193:8334 194:6765 195:4852 196:2863 197:2114 198:6029 199:5991 200:7344 201:5172 202:10580 203:10056 204:4602 205:3363 206:3743 207:3363 208:4031 209:4709 210:4186 211:2353 212:3749 213:3428 214:1165 215:64 216:6349 217:2586 218:1214 219:680 220:1953 221:968 222:855 223:2034 End of report

1 0

FCC: Promoting More Resilient Networks
by Sean Donelan 09 Sep '21

09 Sep '21

This month's FCC meeting includes a notice of proposed rulemaking on wireless network resilience cooperative framework, outage reporting, and backup power arrangements. https://docs.fcc.gov/public/attachments/DOC-375607A1.pdf What the NPRM Would Do: • Seek comment on potential improvements to the voluntary Framework, including evaluating what triggers its activation, its scope of participants, whether existing Framework elements can be strengthened, any gaps that need to be addressed, and whether the public would benefit from codifying some or all of the Framework. • Seek comment on ways to enhance the information available to the Commission through NORS and DIRS during disasters and network outages to improve situational awareness. • Seek comment on communications resiliency strategies for power outages, including improved coordination between communications service providers and power companies and deploying on-site backup power or other alternative measures to reduce the frequency, duration, or severity of power-related disruptions to communications services.

1 0

Mirai botnet is back — now as "Meris"
by Töma Gavrichenkov 09 Sep '21

09 Sep '21

Peace, An undisclosed (or, even, yet undiscovered by the vendor) vulnerability in SOHO Mikrotik routers seems to be exploited by someone. Approx. 328 thousand devices already joined the botnet, with each having unrestricted access to the uplink (up to 1 Gbps). 42,6% of exploited devices reside in the U.S. https://blog.qrator.net/en/meris-botnet-climbing-to-the-record_142/ I didn't know Mikrotik was so popular in North America! Patching all those SOHO WiFi routers must be fun... -- Töma

4 4

AT&T Ethernet sales contact
by Brandon Martin 09 Sep '21

09 Sep '21

Can anyone provide a sales contact at AT&T for Ehhernet transport in Indiana/Illinois/Ohio? Unicast replies welcome. -- Brandon Martin

2 1

Call for Participation -- ICANN DNSSEC and Security Workshop for ICANN72 Virtual Annual General Meeting
by Jacques Latour 09 Sep '21

09 Sep '21

Hi all 😊 Hope you all had a great summer!!! Let us know if you’re interested in presenting something DNSSEC or security related. Thanks, Jacques Call for Participation -- ICANN DNSSEC and Security Workshop for ICANN72 Virtual Annual General Meeting In cooperation with the ICANN Security and Stability Advisory Committee (SSAC), we are planning a DNSSEC and Security Workshop for the ICANN72 Annual General Meeting being held virtually from 25-28 October 2021 in the Pacific Daylight Time Zone (UTC -7). This workshop date will be determined once ICANN creates a block schedule for us to follow; then we will be able to request a day and time. The DNSSEC and Security Workshop has been a part of ICANN meetings for several years and has provided a forum for both experienced and new people to meet, present and discuss current and future DNSSEC deployments. For reference, the most recent session was held at the ICANN71 Virtual Meeting on 14 June 2021. The presentations and transcripts are available at https://71.schedule.icann.org/meetings/3q22SHqif9XF5nFqG<https://urldefense.com/v3/__https:/71.schedule.icann.org/meetings/3q22SHqif…> and https://71.schedule.icann.org/meetings/vv7XkuePvghwFaLgt<https://urldefense.com/v3/__https:/71.schedule.icann.org/meetings/vv7XkuePv…> The DNSSEC Workshop Program Committee is developing a program. Proposals will be considered for the following topic areas and included if space permits. In addition, we welcome suggestions for additional topics either for inclusion in the ICANN72 workshop, or for consideration for future workshops. 1. Global DNSSEC Activities Panel For this panel, we are seeking participation from those who have been involved in DNSSEC deployment as well as from those who have not deployed DNSSEC but who have a keen interest in the challenges and benefits of deployment, including Root Key Signing Key (KSK) Rollover activities and plans. 2. DNSSEC Best Practice Now that DNSSEC has become an operational norm for many registries, registrars, and ISPs, what have we learned about how we manage DNSSEC? Do you still submit/accept DS records with Digest Type 1? What is the best practice around key roll-overs? What about Algorithm roll-overs? Do you use and support DNSKEY Algorithms 13-16? How often do you review your disaster recovery procedures? Is there operational familiarity within your customer support teams? What operational statistics have we gathered about DNSSEC? Are there experiences being documented in the form of best practices, or something similar, for transfer of signed zones? Activities and issues related to DNSSEC in the DNS Root Zone are also desired. 3. DNSSEC Deployment Challenges The program committee is seeking input from those that are interested in implementation of DNSSEC but have general or particular concerns with DNSSEC. In particular, we are seeking input from individuals that would be willing to participate in a panel that would discuss questions of the following nature: - Are there any policies directly or indirectly impeding your DNSSEC deployment? (RRR model, CDS/CDNSKEY automation) - What are your most significant concerns with DNSSEC, e.g., complexity, training, implementation, operation or something else? - What do you expect DNSSEC to do for you and what doesn't it do? - What do you see as the most important trade-offs with respect to doing or not doing DNSSEC? 4. Security Panel The program committee is looking for presentations on DNS and Routing topics that could impact the security and/or stability of the internet. . - DoH and DoT implementation issues, challenges and opportunities - RPKI adoption and implementation issues, challenges and opportunities - BGP/routing/hijack issues, challenges and opportunities - MANRS implementation challenges and opportunities - Emerging threats that could impact (real or perceived) the security and/or stability of the internet - Domain hacking/hijacking prevention, best practice and techniques - Browser related security implementations - DMARC Challenges, opportunities and Best Practices - BGP Flowspec challenges, opportunities and Best Practices If you are interested in participating, please send a brief (1-2 sentence) description of your proposed presentation to dnssec-security-workshop(a)icann.org<mailto:dnssec-security-workshop@icann.org> by Friday, 17 September 2021 Thank you, Kathy and Andrew On behalf of the DNSSEC Workshop Program Committee: Mark Elkins, DNS/ZACR Jacques Latour, .CA Russ Mundy, Parsons Ondrej Filip, CZ.NIC Yoshiro Yoneya, JPRS Fred Baker, ISC Dan York, Internet Society

1 0

do bgp optimizers think?
by Randy Bush 09 Sep '21

09 Sep '21

to control inbound traffic, how do bgp optimizers decide how to tune what they announce? slfow? exploration? ouija board? randy

3 2

PeeringDB 2021 User Survey
by Steve McManus 09 Sep '21

09 Sep '21

Hi All, Another year has passed since our 2020 survey so we're doing it again. As before, we'd like to hear what's working, what's not, and what could be better with PeeringDB. Last year's survey heavily influenced our roadmap and development over the past year. Your feedback is extremely valuable and listened to! In particular, we spent a lot of effort on revamping search ( https://docs.peeringdb.com/blog/geographic_search/ https://docs.peeringdb.com/blog/advanced_search_1/ https://docs.peeringdb.com/blog/advanced_search_2/ ) and working on improving documentation. Please take the survey here: https://surveyhero.com/c/peeringdb2021usersurvey You have about a month to fill it in - it will be open until 23:59 on October 8th. You can read more about the survey here: https://docs.peeringdb.com/blog/peeringdb_2021_user_survey/ Thanks! -Steve Chair, PeeringDB Product Committee

1 0

Google Captcha
by Joshua Pool 08 Sep '21

08 Sep '21

Last month one of our residential /20 blocks started to get the Captcha page when searching Google. Around the same time we get access denied on QVC.com So far nothing out of the ordinary has been observed with regards to the networks and I do not see any blacklisting sites listing the block in question. I am open to any ideas and would love to have someone at Google look into this se we can get to the bottom of this issue. Regards, Josh

1 0