- Test - lists.nanog.org

Spoofer Report for NANOG for Mar 2021
by CAIDA Spoofer Project 08 Apr '21

08 Apr '21

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Mar 2021: ASN Name Fixed-By 395092 SHOCK-1 2021-03-10 11650 PLDI 2021-03-11 5078 ONENET-AS-1 2021-03-16 32489 AMANAHA-NEW 2021-03-16 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Mar 2021: ASN Name First-Spoofed Last-Spoofed 6939 HURRICANE 2016-02-22 2021-03-17 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2021-03-30 7459 GRANDECOM-AS1 2016-09-26 2021-03-08 20412 CLARITY-TELECOM 2016-09-30 2021-03-31 6181 FUSE-NET 2016-10-10 2021-03-29 11427 TWC-11427-TEXAS 2016-10-21 2021-03-19 30036 MEDIACOM-ENTERPRISE-BUSINESS 2016-11-16 2021-03-29 22898 ATLINK 2016-12-16 2021-03-28 63296 AWBROADBAND 2017-09-01 2021-03-31 546 PARSONS-PGS-1 2017-11-20 2021-03-31 393564 SPOKANE 2018-06-05 2021-03-23 33452 RW 2018-09-19 2021-03-29 20448 VPNTRANET-LLC 2018-09-20 2021-03-30 5078 ONENET-AS-1 2020-04-06 2021-03-27 53356 FREE RANGE CLOUD 2020-05-19 2021-03-13 6391 URBAN-15 2020-05-29 2021-03-30 11814 DISTRIBUTEL-AS11814 2020-11-22 2021-03-12 208188 PUGET-SOUND-NETWORKS 2020-12-04 2021-03-27 53703 KWIKOM 2021-01-17 2021-03-11 54527 ASTUTEHOSTING 2021-02-21 2021-03-22 398836 NP-NETWORKS 2021-03-12 2021-03-12 56207 Converge 2021-03-26 2021-03-26 20150 ANYNODE 2021-03-26 2021-03-26 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

(Slightly OT?) K8S Platform As A Service Recommendations
by Charles N Wyble 08 Apr '21

08 Apr '21

Hello all, I know this is primarily a networking list, but I know lots of server admins hang out here. Does anyone have a recommendation for a self-hosted, on premise, platform as a service layer for k8s (specifically k3s)? I have written up some context here: https://github.com/TSYSGroup/docs-techops/blob/master/Applications/AppRunti… tl:dr : I have about 70 to 200 apps / (micro) services that will need to run across a handful of k3s servers . I already have HA database/networking/certificate/application load balanacer/authentication stacks in production use, I am currently running the actual websites/applications on a single Ubuntu LAMP server and want to build out an HA runtime layer for all the properties/applications and need a way to orchestrate k3s/metallb Rancher rio has come up a few times in my research:https://bram.dingelstad.works/blog/finding-the-right-paas-for-k8s/ <https://bram.dingelstad.works/blog/finding-the-right-paas-for-k8s/> In addition to the web apps , I will also will be running a number of r&d applications and CUDA enabled containers (across a mix of physical x86/jetson/tegra machines with k3s workers). Suggestions/comments/questions/flames welcome :) On or off list as you prefer.

3 3

NANOG 82 Call for Presentations is Open
by NANOG News 07 Apr '21

07 Apr '21

NANOG Community, The NANOG Program Committee (PC) is now accepting proposals for all sessions at NANOG 82, happening June 14-16, 2021. The PC also welcomes suggestions for speakers and topics. Presentations at NANOG meetings are a gathering of the industry’s top minds. Join us, as we spark imagination, encourage dialog, and drive new solutions to our greatest networking challenges. Presentations may cover current technologies, soon-to-be deployed technologies, and industry innovation. Vendors are welcome to submit talks which cover relevant technologies and capabilities, but presentations should not be promotional, or discuss proprietary solutions. Find out more at Call For Presentations <https://nanog.us20.list-manage.com/track/click?u=4d708401d0e69d9dc73d1c204&…> The primary speaker, moderator, or author should submit a presentation proposal and abstract via the Program Committee Tool found here. <https://nanog.us20.list-manage.com/track/click?u=4d708401d0e69d9dc73d1c204&…> . • Sign in with your profile account • Select the type of talk to present • Complete the form Timeline for submission and proposal review: • Applicants enter abstract (and draft slides if possible) in the Program Committee Tool <https://nanog.us20.list-manage.com/track/click?u=4d708401d0e69d9dc73d1c204&…> prior to the deadline for slide submission. • PC performs initial review and assigns a “shepherd” to help develop the submission — estimated time is typically within 2 weeks. • Applicant develops draft slides of talk, if not already submitted with the initial proposal. Please submit initial draft slides early — the PC does not evaluate submissions until draft slides are available for review. NANOG Staff is available to assist with slide templates upon request from the applicant. • Panel and Track submissions should provide a topic list and intended/confirmed participants in the abstract. • PC reviews the slides and continues to work with the Applicant as needed to develop the topic. • Draft presentation slides should be submitted prior to the published deadline for slides (April 12, 2021). • PC evaluates submissions to determine presentations for the agenda (posted on May 10, 2021). • Agenda assembled and posted. • Applicants notified. • Final presentation slides must be submitted prior to the published deadline for slides (May 10, 2021 for Pre-recordings). If you think you have an interesting topic but want feedback or suggestions for developing an idea into a presentation, please email the PC and a representative will respond to you in a timely manner. Otherwise, submit your talk, keynote, track, or panel proposal to the Program Committee Tool <https://nanog.us20.list-manage.com/track/click?u=4d708401d0e69d9dc73d1c204&…> at your earliest convenience. We look forward to reviewing your submission! NANOG 82 Calendar of Events Date - Event/Deadline Mar 1, 2021 - CFP Announced April 12, 2021 - CFP Deadline: Draft Presentation Slides Due May 10, 2021 - Pre-Record Presentation FINAL Slides Due May 10, 2021 - Topics List + Highlights Posted May 24, 2021 - NANOG 82 Agenda Published May 28, 2021 - Speaker Presentation Recordings Finalized June 14-16, 2021 - NANOG 82 Conference Final slides for pre-recorded presentations must be submitted by Monday, May 10, 2021. No changes will be accepted between the recording date and the conference. Materials received after that date may be updated on the website after the completion of the conference. We look forward to seeing you in June! Sincerely, The NANOG Program Committee

1 0

login.authorize.net has A and CNAME records
by Seth Mattinen 07 Apr '21

07 Apr '21

Is anyone from authorize.net on here? You are publishing both an A and CNAME record for login.authorize.net, and the CNAME points to login.authorize.net.cdn.cloudflare.net which doesn't resolve.

6 13

Digium
by Mark Stevens 06 Apr '21

06 Apr '21

If a Digium DNS admin could reach out to me offline concerning your DNS, it would be appreciated. Mark

1 0

Digital Ocean Abuse Contact
by Pete Rohrman 06 Apr '21

06 Apr '21

Can anyone pass me a phone contact for Digital Ocean Abuse? Thanks, Pete --

1 0

RE: wow, lots of akamai
by Robert Brockway 06 Apr '21

06 Apr '21

On Thu, 1 Apr 2021, Jean St-Laurent via NANOG wrote: > What happened is that it would create a kind of internal DDoS and they would > all timed out and give a weird error message. Something very useful like > Error Code 0x8098808 Please call our support line at this phone number. If only there was a way to address the Thundering Herd problem before the cloud. :) > This simple change to add 3 lines of code to add a random artificial boot > penalty of few seconds, completely solve the problem. Bingo. Now, the trick is to catch this before it causes an self-DDoS. This is a problem that has been recognised for decades and this is unfortunately a good example of how operational experience is still not being distributed properly. Too many managers think that operational work is obvious and just a result of common sense. It isn't. Cheers, Rob

2 1

CGNAT
by Steve Saner 06 Apr '21

06 Apr '21

We are starting to look at CGNAT solutions. The primary motivation at the moment is to extend current IPv4 resources, but IPv6 migration is also a factor. We've been in touch with A10. Just wondering if there are some alternative vendors that anyone would recommend. We'd probably be looking at a solution to support 5k to 15k customers and bandwidth up to around 30-40 gig as a starting point. A solution that is as transparent to user experience as possible is a priority. Thanks -- Steve Saner ideatek HUMAN AT OUR VERY FIBER This email transmission, and any documents, files or previous email messages attached to it may contain confidential information. If the reader of this message is not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you are not, or believe you may not be, the intended recipient, please advise the sender immediately by return email or by calling 620.543.5026. Then take all steps necessary to permanently delete the email and all attachments from your computer system.

11 28

FYI - (Fwd: [arin-announce] New ARIN Service Status Page Available)
by John Curran 05 Apr '21

05 Apr '21

NANOGers - With the increasing real-time utilization of ARIN services, we have taken some measures to improve our service availability reporting (as detailed in the announcement which follows below.) I am sharing this information directly with this community as it may prove specifically relevant to your various network operations teams. Best wishes, /John John Curran President and CEO American Registry for Internet Numbers Begin forwarded message: From: ARIN <info(a)arin.net<mailto:info@arin.net>> Subject: [arin-announce] New ARIN Service Status Page Available Date: 5 April 2021 at 12:00:57 PM EDT To: "arin-announce(a)arin.net<mailto:arin-announce@arin.net>" <arin-announce(a)arin.net<mailto:arin-announce@arin.net>> ARIN is pleased to announce the availability of a new Services Status page which can be found at https://arin.statuspage.io/ or via the link in ARIN’s website footer. This link is also available when logged in to ARIN Online. Notification of service-impacting issues such as maintenance, outages, and other updates are provided on this page. Service status is reported for ARIN Online, Reg-RWS, and other provisioning services; Whois, RDAP, RPKI, IRR, and other registry services; mailing lists; reporting services such as the transfer log; and the ARIN website. You can also report a service issue or view past incident reports. From this page, you can subscribe to receive status notifications by email, text message, Slack, or other methods. Implementation of this page satisfies ACSP 2020.5: Service Availability Page. We encourage individuals to subscribe to the page to receive notifications on service-impacting issues, as we will no longer be using the arin-announce mailing list to convey this information except for in extreme circumstances. Our goal is to improve your customer experience by offering a single channel for sharing information and gathering reports about the status of ARIN services. If you have questions, comments, or issues about this page, please submit an Ask ARIN ticket using your ARIN Online account or contact the Registration Services Help Desk by phone Monday through Friday, 7:00 AM to 7:00 PM ET at +1.703.227.0660. Regards, Mark Kosters Chief Technology Officer American Registry for Internet Numbers (ARIN) _______________________________________________ ARIN-Announce You are receiving this message because you are subscribed to the ARIN Announce Mailing List (ARIN-announce(a)arin.net<mailto:ARIN-announce@arin.net>). Unsubscribe or manage your mailing list subscription at: https://lists.arin.net/mailman/listinfo/arin-announce Please contact info(a)arin.net if you experience any issues.

1 0

Anyone from Intuit lurking?
by Bryan Holloway 04 Apr '21

04 Apr '21

Got some customers on certain prefixes which are unable to reach various *.intuit.com sites. We've checked all routing/peering and it looks like there may be a block in place. If someone from Intuit is lurking, could you reach out to me off-list? Thank you!

1 0