- Test - lists.nanog.org

Re: How to handle AAAA query for v4 only host
by Mark Andrews 12 Apr '06

12 Apr '06

>Apologies if anyone thinks this does not require coordination or is somehow >not operational. > >However, I have a situation where some nameservers for which I am=20 >responsible >are receiving AAAA queries for hosts for which we are authoritative. We >return the SOA only as it seems we are supposed to, but, we are seeing a >significant delay before we get an A query back from the resolver, which, >we believe represents a significant delay for the end user in getting to >the web page in question. Both NAME ERROR and NOERROR NODATA responses can include the SOA record in the authority section (RFC 1034, RFC 2308). You don't give enough information to determine which of the abore responses you are talking about. >Is there a better way to answer an AAAA query for a v4 only host? Is it >permitted and/or desirable to return a 6to4 or IPv4-Mapped address? >Is there some other preferable thing to return? > >Thanks, > >Owen NOERROR NODATA is the correct response. As for why there is a delay between the AAAA and A queries there are lots of possible reason. Non RFC1535 aware resolvers. Not looking for AAAA/A in parallel when walking the search list. Firewalls block EDNS queries so you only see plain DNS queries. Sending NAME ERROR not NOERROR NODATA. Mark

1 0

How to handle AAAA query for v4 only host
by Owen DeLong 12 Apr '06

12 Apr '06

Apologies if anyone thinks this does not require coordination or is somehow not operational. However, I have a situation where some nameservers for which I am responsible are receiving AAAA queries for hosts for which we are authoritative. We return the SOA only as it seems we are supposed to, but, we are seeing a significant delay before we get an A query back from the resolver, which, we believe represents a significant delay for the end user in getting to the web page in question. Is there a better way to answer an AAAA query for a v4 only host? Is it permitted and/or desirable to return a 6to4 or IPv4-Mapped address? Is there some other preferable thing to return? Thanks, Owen -- If this message was not signed with gpg key 0FE2AA3D, it's probably a forgery.

1 0

[non-operational] possible IXP operators BOF in San Jose in June
by Joe Abley 12 Apr '06

12 Apr '06

Hi all, Any IXP operators on this list interested in participating in a BOF at NANOG 37 in San Jose? This would be a get-together for exchange point operators to discuss back-end automation and measurement, switches, etc, not a place for ISPs to discuss peering. If anybody is interested, drop me a note directly, off-list. Thanks! Joe

1 0

Re: Open Letter to D-Link about their NTP vandalism
by Brian Dickson 12 Apr '06

12 Apr '06

Two concrete technical suggestions to mitigate the volunteered NTP server's usage issues at the DIX: (1) Have someone else anycast the DIX block, and NAT the incoming NTP requests to another NTP stratum-1 server (eg pool address(es)). Or a much better idea: (2) Renumber into a new /24, which is announced only at the DIX with no-export, so that only DIX members are able to reach the server - as was the intended usage of this NTP server in the first place. (The announcment can be made by anyone at the DIX, it is not strictly necessary that the NTP server be the announcer of the /24. And in fact, it need not be a /24, as the server should be the only occupant of the block - but it should not be covered by any globally visible aggregate, at least not one contiguous to the connectivity at the DIX.) As to the liability issue, it is easy enough to envision that someone, somewhere, is relying on time results from NTP for a life-or-death application, like a medical device, and is innocently an impacted third party in this. Sending bad NTP values could in theory be responsible for killing someone's scratch monkey... -- Brian Dickson Email: briand(a)chateau-briand.net http://www.chateau-briand.net Tel : +1 647 234 7282

3 2

Re: well-known NTP?
by Brandon Butterworth 11 Apr '06

11 Apr '06

> [I just happened to see this, browsing at high speed, so please > forgive me, if I'm out of context.] You did miss the point (if there is one still) > a rouge anycast NTP server could create > substantial amounts of harm from security and other standpoints by > giving out incorrect time. It doesn't matter, if people cared they'd use something better. This is about people configuring and forgetting where they don't really care (and it's probably not needed or used anyway). Some have discussed returning bogus data to these unwanted queries, seems no different to an anycast gone bad. At least an anycast ntp is there because someone wants people to use it, if it goes bad the upstreams can stop accepting the announcement. Far easier than updating the firmware on thousands of boxes to stop querying someone returning bad data because they don't want their service used any more (which they could just change address on and stop worrying about a few packets that are below most ISPs noise). brandon

1 0

RE: XO Peering
by Lasher, Donn 11 Apr '06

11 Apr '06

>Does anyone else miss the good old days when nanog readers/attendees knew why pinging >the routers you saw in a traceroute directly was not an accurate measurement of anything? I miss the succinct, polite answers even more.... -donn

1 0

XO Peering
by Berkman, Scott 11 Apr '06

11 Apr '06

Does anyone know what is going on with XO and their peering? My XO circuit is taking weird paths to other carriers, and internethealthreport.com shows elevated latency on all of their links. XO won't tell me anything. This also seems to be affecting US LEC, but I think US LEC buys transit from XO. Appreciate any help, -Scott ------------------------------------------------------------------------ ------------ Scott Berkman CCNP 404-975-0097 Network Engineer scott.berkman(a)reignmaker.net

3 3

Evaluating bandwidth quality
by Yonathan 11 Apr '06

11 Apr '06

Hi, When trying to decide between 2 bandwidth providers: is there is a way to evaluate their bandwidth quality. Are there comparison papers or tools one can use? I was in fact thinking about comparing Globix and Internap. Thanks, Yon

1 0

LightPath? off list
by David Schreiber 11 Apr '06

11 Apr '06

Hi all, I am considering using LightPath's Metro Ethernet service. Does anyone have any general feedback, if so you can respond off list? Regards, David Schreiber Microwave Satellite Technologies, Inc Chek67(a)gmail.com

1 0

Covad issues?
by Drew Linsalata 10 Apr '06

10 Apr '06

Apologies for bringing this to the list, but Covad is basically a brick wall telephone and e-mail wise right now. Does anyone know of any Covad network issues, especially in the northeast US, that might be impacting customer connectivity? -- Drew Linsalata The Gotham Bus Company, Inc. Dedicated Servers and Colocation Solutions Long Island, New York http://www.gothambus.com

1 1