- Test - lists.nanog.org

Stupid "where to find" question.
by Dan Mahoney, System Admin 17 Nov '04

17 Nov '04

Hey all, I know it's slightly off topic but... If anyone can contact me off-list with suggestions as to where to find rackmount shelves (front and rear mount) for a specific brand of cabinet (chatsworth) for "relatively inexpensive" I'd appreciate it. -Dan Mahoney -- "I'm sorry, that is bull$@%^, but they did not say 'Exsqueeze Me' A Long Time Ago in a Galaxy Far Far Away." -Richard Bozzello, on Jar Jar Binks --------Dan Mahoney-------- Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC ICQ: 13735144 AIM: LarpGM Site: http://www.gushi.org ---------------------------

1 0

anycast roots
by Randy Bush 17 Nov '04

17 Nov '04

which roots are anycast? c f i j k? randy

15 34

Cable and Wireless partners with Reliance to set up datacenters in India
by Suresh Ramasubramanian 17 Nov '04

17 Nov '04

http://cwidc.com/JP/EN/news_events/media_center/2004/02_04_2004_16.html Says they're offering managed IP-VPN QoS besides other stuff like data center hosting, ATM, frame relay etc.. I'm sure they're going to be really happy with the proposed "tax" on managed VPN providers in India. srs -- suresh ramasubramanian suresh(a)outblaze.com gpg # EDEDEFB9 manager, security & antispam operations, outblaze limited

5 7

anycast stability experiment
by Randy Bush 17 Nov '04

17 Nov '04

the verisign gang gave a good presentation of "Life and Times of J-Root" at the recent nanog meeting' see <http://www.nanog.org/mtg-0410/pdf/kosters.pdf>. on foils 27 to 29, they reported non-trivial routing jitter and therefore suggested "DO NOT RUN anycast with stateful transport." on the other hand, for almost a decade, there have been reports of successfully delivery of stateful services over anycast. so one wonders if their measurement was from an abnormal vantage point, or if there are other interesting things going on. as we are curious and inclined to test conjectures by experiment, scientific method and all that, we devised a small experiment in which we would very much appreciate your participation. we wish to collect data on the stability of which actual anycast root server(s) you contact from many points on or near the net's edges, i.e.. your home, datacenter, .... to do this, peter boothe, of university of oregon, has written a script which queries those roots which are known to be widely anycast every few seconds using dig [options] @<foo>.root-servers.net. hostname.bind chaos txt to record which actual unicast-named server was reached. these probes are recorded in a file that looks like, for example 42.666.7.11 Sat Nov 13 01:29:29 UTC 2004 f UDP pao1e.f.root-servers.org Sat Nov 13 01:29:29 UTC 2004 i UDP s1.lnx Sat Nov 13 01:29:30 UTC 2004 j UDP jns4-kgtld.j.root-servers.net Sat Nov 13 01:29:30 UTC 2004 k UDP k1.linx Sat Nov 13 01:29:30 UTC 2004 m UDP M-d3 Sat Nov 13 01:29:30 UTC 2004 c TCP lax1a.c.root-servers.org Sat Nov 13 01:29:31 UTC 2004 f TCP pao1c.f.root-servers.org Sat Nov 13 01:29:31 UTC 2004 i TCP s1.lnx Sat Nov 13 01:29:31 UTC 2004 j TCP jns1-kgtld.j.root-servers.net Sat Nov 13 01:29:32 UTC 2004 k TCP k1.linx Sat Nov 13 01:29:33 UTC 2004 m TCP M-d3 Sat Nov 13 01:29:35 UTC 2004 c UDP lax1a.c.root-servers.org Sat Nov 13 01:29:35 UTC 2004 f UDP pao1e.f.root-servers.org Sat Nov 13 01:29:35 UTC 2004 i UDP s1.lnx Sat Nov 13 01:29:35 UTC 2004 j UDP jns3-kgtld.j.root-servers.net Sat Nov 13 01:29:36 UTC 2004 k UDP k1.linx Sat Nov 13 01:29:36 UTC 2004 m UDP M-d3 which is mailed off to peter's collector once a day. note that your public ip address is the first thing in the file. this is learned by wget (or telnet to port 80, in case you do not have wget installed) to peter's server at oregon, which responds with the public ip address from which you came. this serves two purposes: o we may want to know from where measurements were taken so we can look at routing data to see why anomalies or normalities occurred. o we are concerned about overloading the root servers against which this experiment is running. therefore, the script will not actually perform the probes unless peter's server responds to the ip address query. this allows peter to throttle or disable the experiment should 10,000 people decide to run it. it might also be used to select probers to concentrate on 'interesting' probe locales in the internet topology. it's just a short shell script, so you should be able to easily feel comfortable that it will not make you vulnerable to anthing other than possible expulsion from the nanog mailing list :-). as it probes only a select list of anycast root servers, and does so every two seconds, this should not place any significant load on the servers or your machine. as our conjecture involves verisign's implication of stateful, e.g., tcp, connections, early reviewers of the experimental setup pushed us to test tcp as well as udp queries. as a tcp query is estimated to have many more packets than a udp query, the current code does one tcp probe every ten udp queries, i.e., around once every 20 seconds. we would really appreciate it if you would run this for a day or three. a tarball with the script and a readme can be found at <http://rip.psg.com/~randy/anycast_gatherer-1.4.tar.gz> [ fyi, my personal bet is that it's usually pretty stable except for sites in strangely unstable routing environments. but i am under my quota of wrong for the week. ] thanks! and many thanks to the early reviewers of the experiment. randy, peter, and friends

2 1

DDoS attacks...?
by Matthew Sullivan 17 Nov '04

17 Nov '04

Hi All, Can people make a quick check the for DDoS attacks on 209.220.100.158 in the last 12 hours (to 00:00 17th Nov 2004 GMT+0) - I am trying to get the exact time it appeared to occur, however I suspect it was in the time period of 13:00-14:00 16th Nov 2004 GMT+0 which coincided with the SORBS primary network dropping out of the global routing table (I don't have a clue as to why that happened either - it's being investigated). (I have a suspicion that there was no DDoS attack and as the IP hosts NS1.SORBS.NET I'm guessing that when the primary NS for SORBS.NET dropped of the face of the earth the resulting increase in traffic came as a bit of a shock for the network admin/owner). Thanks for your time, Matthew

1 1

[Fwd: [SANOG] SANOG V - 6 Feb - 13 Feb, 2005, Dhaka, Bangladesh - Call for Presentations]
by Suresh Ramasubramanian 17 Nov '04

17 Nov '04

sanog cfp srs -------- Original Message -------- Subject: [SANOG] SANOG V - 6 Feb - 13 Feb, 2005, Dhaka, Bangladesh - Call for Presentations Date: Wed, 17 Nov 2004 12:36:33 +0800 From: Ananth Nagarajan <ananth(a)juniper.net> To: <sanog(a)sanog.org>, <apops(a)apops.net> SANOG V- (South Asia Network Operators Group) - 6 Feb - 13 Feb, 2005, Dhaka, Bangladesh The South Asia Network Operators Group (SANOG) was set up in January 2003 to promote awareness of networking technologies and to establish a forum for discussion on operational issues and challenges in the South Asia region comprising of Afghanistan, Bangladesh, Bhutan, India, Maldives, Nepal, Pakistan and Sri Lanka. More information on SANOG can be found at http://www.sanog.org SANOG 1 was held in Kathmandu, Nepal, SANOG 2 in Colombo, Sri Lanka, SANOG 3 in Bangalore, India and SANOG 4 back in Kathmandu, Nepal. All four previous meetings were greatly successful. The last meeting (SANOG 4) held in Kathmandu in July 2004 had over 250 participants and very relevant topics being discussed. Clearly, the interest in networking technologies has rapidly grown in the region. SANOG 5 will comprise of workshops (Feb 6-10), tutorials (Feb 11-12) and a one-day conference (Feb 13). The following is an open call for papers/presentations for the one-day conference. Presentations are expected to be 20-30 minutes long with technical content. Marketing and sales content in presentations is against the spirit of the SANOG and is strictly prohibited. Please respond to this call for papers/presentations to ananth(a)juniper.net, with a title and brief abstract of the talk and a short bio of yourself. The conference will be comprised of 3 sessions (morning, post-lunch, afternoon). Session 1: Network operations In this session we invite papers, reports and presentations from network operators, equipment vendors and academic institutions conducting network research on operational issues. Possible topics for this track are: - Prevention and mitigation of Denial of Service attacks including intrusion, spam etc. - Routing policies and architecture for scalable IP and broadband networks - Technology updates and trends in security and routing - Traffic management - Network migration issues (IPv4 to v6, Layer 2 to IP etc.) Session 2: Applications and Services This track will discuss various services that can be enabled on packet networks. Papers and presentations are invited from developers, operators, equipment vendors and research organizations on the following and related topics - Voice and Multimedia over IP - Applications using IP Multicast - Managed network services including Security and VPNs - Mail servers Session 3: Regional updates This track is by invitation only, and will include updates from ISPs, regional Internet exchanges, APNIC, routing table updates and such information that would be useful to the SANOG community. Thanks and regards, Ananth Nagarajan ananth(a)juniper.net -- This is the SANOG (http://www.sanog.org/) mailing list.

1 0

India to tax / levy license fees on ISPs that offer VPNs
by Suresh Ramasubramanian 17 Nov '04

17 Nov '04

http://www.india-gii.org/wiki/index.php/Position_Papers/VPN_Tax > > From Www.india-gii.org > > http://economictimes.indiatimes.com/articleshow/923746.cms DoT to dash hopes of virtual private network ISPs MANOJ GAIROLA > > TIMES NEWS NETWORK[ MONDAY, NOVEMBER 15, 2004 11:58:11 PM] NEW DELHI: Standalone ISPs, including Satyam Infoway, HCL, Global Telesystems and Estel will be hit by the new policy that imposes an entry fee of Rs 10 crore and an annual revenue share of 8% on gross revenue of ISPs providing virtual private network (VPN) services. A "crore" is 10 million, so this ridiculous "entry fee" is approx 2.2 million dollars at current exchange rates.. -- suresh ramasubramanian suresh(a)outblaze.com gpg # EDEDEFB9 manager, security & antispam operations, outblaze limited

2 2

RE: web hosting recommendations
by Matt Bazan 16 Nov '04

16 Nov '04

'bullet proof' as in mission critical - not as in spam. Couple people have pointed this out to me. Sorry for the confusion. Matt > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On > Behalf Of Matt Bazan > Sent: Tuesday, November 16, 2004 11:54 AM > To: nanog(a)merit.edu > Subject: web hosting recommendations > > > I need some recommendations on bullet proof enterprise grade web > hosting. Nothing fancy as the back end is run from our > locations. Off > list is fine. Thanks, > > Matt > >

1 0

web hosting recommendations
by Matt Bazan 16 Nov '04

16 Nov '04

I need some recommendations on bullet proof enterprise grade web hosting. Nothing fancy as the back end is run from our locations. Off list is fine. Thanks, Matt

1 0

EFF whitepaper
by Sean Donelan 16 Nov '04

16 Nov '04

http://www.eff.org/wp/?f=SpamCollateralDamage.html

10 12