- Test - lists.nanog.org

Your Voice, Your Vote — Help Shape NANOG's Future 👉
by NANOG News 10 Jul '20

10 Jul '20

Our success depends on the collective expertise of the NANOG community to help direct and shape our organization in service of our mission. The first of NANOG's two 2020 elections takes place July 20-22. Become a NANOG member before voting opens to exercise your right to participate, and make your voice heard! Learn More <https://www.nanog.org/participate/elections-nominations/>

1 0

IPv6 over vxlan+evpn Arista?
by David Hubbard 10 Jul '20

10 Jul '20

Hi all, was curious if anyone is doing dual stack v4/v6 over Arista’s implementation of vxlan / evpn (the inter-data center transport would be v4)? They have plenty of references for v4 deployments but had to check on v6 support, which can make one nervous; they did confirm it’s supported. Looking to leverage it as a way to migrate a dual-stack data center without re-addressing. Thanks, David

2 2

Re: 60ms cross continent
by joe mcguckin 10 Jul '20

10 Jul '20

Theoretically, Starlink should be faster cross country than terrestrial fiber. Joe McGuckin ViaNet Communications joe(a)via.net 650-207-0372 cell 650-213-1302 office 650-969-2124 fax

12 28

L2VPN/L2transport, Cumulus Linux & hardware suggestion
by Jürgen Jaritsch 09 Jul '20

09 Jul '20

Dear folks, have anyone already tried to run VXLAN/EVPN + Bridge Layer 2 Protocol Tunneling on Cumulus Linux as an replacement for classic MPLS L2VPN/VPWS (xconnect, l2circuit, VLL) ? I need to provide transparent Ethernet P2P virtual leased lines to my customers and these have to support stuff like LLDP, STP, LACP, etc. The transport L2 network is not THAT big: max hops between VTEP is 4. Anyone have suggestions for the below hardware request? #) 1-3U L2/L3 box #) 48x SFP28 / 1/10/25G #) 6x QSFP28 / 100G #) VXLAN/EVPN with L2 tunneling support or #) MPLS VPWS/l2circuit #) Dual PSU thanks & best regards Jürgen

8 13

Spoofer Report for NANOG for Jun 2020
by CAIDA Spoofer Project 08 Jul '20

08 Jul '20

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Jun 2020: ASN Name Fixed-By 14525 OMNIFICENT-NET 2020-06-07 10745 ARIN-ASH-CHA 2020-06-12 63018 DEDICATED 2020-06-22 23473 PAVLOVMEDIA 2020-06-29 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Jun 2020: ASN Name First-Spoofed Last-Spoofed 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2020-06-25 6128 CABLE-NET-1 2016-09-03 2020-06-30 7459 GRANDECOM-AS1 2016-09-26 2020-06-11 20412 CLARITY-TELECOM 2016-09-30 2020-06-29 6181 FUSE-NET 2016-10-10 2020-06-29 11427 TWC-11427-TEXAS 2016-10-21 2020-06-22 174 COGENT-174 2016-10-21 2020-06-30 32440 LONI 2016-11-03 2020-06-28 12083 WOW-INTERNET 2016-11-09 2020-06-28 39939 RISE-CO-AS39939 2016-11-11 2020-06-27 30036 MEDIACOM-ENTERPRISE-BUSINESS 2016-11-16 2020-06-29 9009 M247 2017-01-10 2020-06-21 63296 AWBROADBAND 2017-09-01 2020-06-30 20448 VPNTRANET-LLC 2018-09-20 2020-06-12 8047 GCI 2019-04-11 2020-06-25 33387 NOCIX 2019-06-06 2020-06-27 46300 HSC-WAP 2019-10-30 2020-06-26 21859 ZNET 2019-12-26 2020-06-18 239 UTORONTO 2020-01-28 2020-06-27 13614 ALLWEST 2020-03-16 2020-06-30 26335 MTSU 2020-03-20 2020-06-15 7859 PAIR-NETWORKS 2020-04-03 2020-06-27 5078 ONENET-AS-1 2020-04-06 2020-06-30 29844 SENAWAVE 2020-05-22 2020-06-04 11650 PLDI 2020-05-25 2020-06-24 6391 URBAN-15 2020-05-29 2020-06-30 5690 VIANET-NO 2020-06-12 2020-06-25 21565 AS21565 2020-06-21 2020-06-27 395723 LIGHTSPEEDHOSTING1 2020-06-22 2020-06-25 11525 HRTC 2020-06-27 2020-06-29 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Hoping to attend NANOG 80?
by NANOG News 08 Jul '20

08 Jul '20

*Share your insights!* The health and safety of the NANOG community is our top priority, and your feedback is extremely valuable in our efforts to continue providing the safest conference experiences possible. Planning to attend NANOG 80? We'd love to hear your thoughts! Take Survey <https://www.surveymonkey.com/r/YHG6GGZ>

1 0

CGNAT Opensource with support to BPA, EIM/EIF, UPnP-PCP
by Douglas Fischer 08 Jul '20

08 Jul '20

We are looking for a CGNAT solution open source based. Yep, I know that basic CGNAT can be done with iptables / nftables, or PF / IPFILTER / IPFW. But I only know Open Source CGNAT recipes with predefined public-ports <-> private IPs mapping. What It brings two types of issues: A - The need to overprovision the number of private IPs (Considering Multiple BNGs behind the CGN). B - The inability of those basic recipes to deal with incoming auxiliary connections of p2p protocols (mostly used by games). Te market solutions that I've dealt with solves those issues beautifully. a - Bulk-Port Allocation - BPA, avoid the need overprovisioning private address that is not being used, and give us an excellent rate between public IPv4 Address vs Private IP Address. b - The support of a framework of protocols(Ex.: UPnP, PCP, EIM/EIF, NAT-PMP, etc...) ensure an acceptable quality of experience to end-users. But, the market solution brings also some down-sides... - The cost, evidently. - The need for detouring the traffic that doesn't need CGNAT(Internal CDNs, Internal Servers, etc), to stay on the license limits of those boxes, sometimes brings some issues. So, I and some friends are(for a long time) looking for an OpenSource solution that can give us something near what the market solutions give. Any of you guys ave some suggestions for that? P.S.: Yes, I know that IPv6 is the only real solution for that, but until there, our customers still want to access a lot os p2p content(mostly audio in game rooms, sip calls, and things like that.) P.S.2: Yes, I also know that 464 could be a good possibility, but is not possible in this scenario. -- Douglas Fernando Fischer Engº de Controle e Automação

6 5

pandemic stories about network ops/engineering
by Mehmet Akcin 07 Jul '20

07 Jul '20

hey there, Millions of people working from home, I am sure there was a lot of hard work from network and systems teams to build and upgrade capacity before and during the covid19 pandemic. I have a youtube series I am focusing on internet infrastructure and new normal, I would like to discover new stories about how network teams have handled unique stories during this time. Something different where you think it's important for people to know. I think there are many heroes who made this stay at home possible with enabling technology and my goal is to give these individuals a little bit visibility they deserve. For example youtube stream https://youtu.be/wFmZadETNDQ if you have suggestions about guests, please contact offlist. thank you Mehmet

1 0

rfc4271 ORIGIN/path of default route, should the value be 0 or 2?
by Drew Weaver 07 Jul '20

07 Jul '20

Howdy, I am using a multi-vendor network and validating the inter-operability. When I announce a default route to a BGP peer using default-originate applied to the peer group/neighbor configuration: in vendor A that route is sent with ORIGIN 0 (internal) in vendor B that route is sent with ORIGIN 2 (Unknown) Downstream it looks like this: Network Next Hop Metric LocPrf Weight Path * i 0.0.0.0 192.168.27.1 100 0 ? *>i 192.168.25.1 0 100 0 i * i 192.168.27.2 100 0 ? I don't believe that it has a functionality impact but I would like to know which one you think follows the RFC more closely. https://tools.ietf.org/html/rfc4271 thanks, -Drew

3 3

Anyone from Edgecast/ Verizon Digital on here
by Rob See 07 Jul '20

07 Jul '20

Hi, We are having problems with traffic to Edgecast from our netblock getting TCP Reset. The big thing it seems to be causing problems with is Twitter. Anyone else experiencing this problem, and does anyone have a contact there ? Their tier 1 support didn't want to talk to us because we aren't a direct customer. -- Thanks, -Rob

1 0