- Test - lists.nanog.org

RPKI OV implementation in route-map
by Job Snijders 02 Apr '20

02 Apr '20

Dear Mark, group, On Tue, Mar 31, 2020 at 03:50:23PM +0200, Mark Tinka wrote: > On 31/Mar/20 15:21, Dorian Kim wrote: > > Unfortunately we don’t have any testing done or experience with RPKI > > on XE or Classic boxes as we don’t have any deployed outside of OOB > > infrastructure. > > Cherish your blessings, and for the time being, keep them that way :-). Since it was a quiet day in early April, Ben and I whipped up something to generate config in industry standard format to mimic the RFC 6811 RPKI based BGP Origin Validation procedure. It uses the 'route-map' configuration construct found in some older BGP implementations. https://github.com/job/rpki-ov-route-map We didn't test this in production, but I reckon you can upload the generated output into the router's 'running-config' using a hourly crontab, TFTP, RANCID, and expect(1). Here is an example config to copy+paste. If we don't hear back from you we'll assume success. (warning: large text file) https://raw.githubusercontent.com/job/rpki-ov-route-map/master/example-rout… After applying the above you can reference 'rpki-ov' at each of your EBGP peers as ingress policy: "neighbor x.x.x.x route-map rpki-ov in". Be careful though, performance may not be as good as a native RPKI OV implementation! Cheers, Job & Ben

2 1

Has Anyone managed to get Delegated RPKI working with ARIN
by Christopher Munz-Michielin 02 Apr '20

02 Apr '20

Hi Nanog, Posting here since my Google-fu is coming up short. I'm trying to setup delegated RPKI in ARIN using rpki.net's rpkid Python daemon and am running into an issue submitting the identity file to ARIN's control panel. The same file submitted to RIPE's test environment at https://localcert.ripe.net/#/rpki works without issue, while submitting to ARIN results in "Invalid Identity.xml file." The guide I'm following is this one: https://github.com/dragonresearch/rpki.net/blob/master/doc/quickstart/xenia… and I'm able to get as far as generating the identity file. Wondering if anyone has gone down this road before and has any helpful hints to make this work? Cheers, Chris

5 7

The Cost of Paid Peering with Chinese ISPs
by Pengxiong Zhu 02 Apr '20

02 Apr '20

Hi folks, We got plenty of positive responses in our last email regarding China's slow transnational network. Many are suggesting it is likely influenced by commercial decisions instead of censorship. It seems like the three Chinese ISPs don't really have enough peering internationally in Asia, and they have very strong bargaining power when it comes to peering. Some suggest the cost of moving data to China is way lower if an ISP peers with US/European ISPs than directly with the Chinese ISPs. We assume the reason why those US/European ISPs offer cheaper prices is that they have settlement-free peering with Chinese ISPs. However, the "free-tier" capacity is simply not enough to handle the demand -- the US/European ISPs now have way more traffic going into China, thus saturating the link and causing congestion. So we are wondering, do the Tier-1 US/European ISPs really have settlement-free peering with Chinese ISPs? If we want to do paid peering directly with the Chinese ISPs or purchase the full/partial transit, what is the price range? >From the BGP information, we know some of the peers of AS4134 (the biggest one) are: - Telia Carrier(AS1299) - Cogent Communications(AS174) - NTT Communications (America)(AS2914) - Level3(AS3356) - Tata Communications(America) Inc (AS6453) - Verizon Business/UUnet(AS701) - Zayo Bandwidth(AS6461) - AT&T Services, Inc.(AS7018) - GTT Communications Inc.(AS3257) - Comcast Cable Communications, LLC(AS7922) It would be much appreciated if the operators of any such networks can give chime in. Thanks! Regards, Pengxiong Zhu Department of Computer Science and Engineering University of California, Riverside

6 11

Pilot Fiber, Chicago Area: Impressions?
by Shawn Ritchie 01 Apr '20

01 Apr '20

Pricing looks good, considering them for cheap backhaul as a tertiary path. Anybody have experience with them for just IP transit? -- Shawn

3 3

Backhoe season?
by William Herrin 01 Apr '20

01 Apr '20

Howdy, With so much work shut down, I'm curious how backhoe season is shaping up this year? How do the circuit and fiber outage numbers look? Regards, Bill Herrin -- William Herrin bill(a)herrin.us https://bill.herrin.us/

9 8

Netflix Appliance offline 1/2hr ago - Netflix please contact me
by Kaiser, Erich 01 Apr '20

01 Apr '20

Can someone contact me from Netflix ASAP our Appliance in SLC went offline and now our partner login doesn't work either. Sincerely, Erich Kaiser The Fusion Network erich(a)gotfusion.net

1 0

Cloudflare Contacts
by John Von Essen 01 Apr '20

01 Apr '20

Could someone from Cloudflare contact me off-list? I work for a major search engine (not google or bing), and we just launched some assets in Brazil, seeing some weird behavior to Cloudflare CDN assets and thinking maybe we are being caught in some kind of filter/block. Our image search traffic is proxied through a single IP, so its definitely high volume. We’ve never had an issue in other regions, but it could due to the sudden increase. Thanks John Von Essen

2 1

South Africa On Lockdown - Coronavirus
by Mark Tinka 01 Apr '20

01 Apr '20

So the South African president has just announced - full country lockdown from midnight this Thursday, 26th March (SAST). If any of you have any work that needs to be done out here, please bear that in mind. Mark.

24 55

free collaborative tools for low BW and losy connections
by Scott Weeks 31 Mar '20

31 Mar '20

16 35

Re: Measuring packet loss and Latency Between eastern Europe and north america
by LTGJAMAICA 31 Mar '20

31 Mar '20

Turn out to be an issue with our primary ISP On Tue, Mar 31, 2020, 12:09 PM LTGJAMAICA <popsychin(a)gmail.com> wrote: > Thanks Arie > > What's the best resources to use to study for the ccde ? > > On Sun, Mar 29, 2020, 7:17 PM Arie Vayner <ariev(a)vayner.net> wrote: > >> Hey, >> >> Look at thousand eyes... >> >> Tnx, >> Arie >> >> On Sun, Mar 29, 2020, 16:02 LTGJAMAICA <popsychin(a)gmail.com> wrote: >> >>> I have a customer in eastern Europe accessing a SAAS application hosted >>> in one of Azure's north America datacenters. for the past few days every >>> morning between 3am and 6am est performance slows to crawl. This is person >>> is like 8am to 11am locally so they cant get much done. >>> >>> The local ISP is providing 100mbps up/down. >>> >>> So far speed test to Saas providers speed test page is slow 0.02mbps >>> down 6 mbps up >>> >>> Speedtest.net to north American ISPs like Verizon in New York slow >>> >>> Speedtest to servers in Easter europe 100 up 100 down >>> >>> Traceroutes/MTR dont help because a lot of hops seem to drop icmp packets >>> >>> Need a tool or service that can detect packet loss/latency between >>> provider in eastern europe and a north american service provider. Any help >>> is appreciated >>> >>> >>> >>> >>> >>> >>>

1 0