- Test - lists.nanog.org

Re: Sunday traffic curiosity
by John Kristoff 02 Apr '20

02 Apr '20

On Sun, 22 Mar 2020 19:08:24 +0000 Owen DeLong <owen(a)delong.com> wrote: > Maybe it’s time to revisit inter-domain multicast? Uhmm... no thank you. :-) John

15 29

New AS Number Blocks Allocated to the RIPE NCC
by Nikolas Pediaditis 02 Apr '20

02 Apr '20

Dear colleagues, On 1 April 2020, the RIPE NCC received the following AS Number blocks from IANA: 210332-211355 211356-212379 212380-213403 You may want to update your records accordingly. All allocations of AS Numbers made by IANA to RIRs are listed here: https://www.iana.org/assignments/as-numbers/as-numbers.xhtml Kind regards, Nikolas Pediaditis Registration Services & Policy Development Manager RIPE NCC

1 0

RPKI OV implementation in route-map
by Job Snijders 02 Apr '20

02 Apr '20

Dear Mark, group, On Tue, Mar 31, 2020 at 03:50:23PM +0200, Mark Tinka wrote: > On 31/Mar/20 15:21, Dorian Kim wrote: > > Unfortunately we don’t have any testing done or experience with RPKI > > on XE or Classic boxes as we don’t have any deployed outside of OOB > > infrastructure. > > Cherish your blessings, and for the time being, keep them that way :-). Since it was a quiet day in early April, Ben and I whipped up something to generate config in industry standard format to mimic the RFC 6811 RPKI based BGP Origin Validation procedure. It uses the 'route-map' configuration construct found in some older BGP implementations. https://github.com/job/rpki-ov-route-map We didn't test this in production, but I reckon you can upload the generated output into the router's 'running-config' using a hourly crontab, TFTP, RANCID, and expect(1). Here is an example config to copy+paste. If we don't hear back from you we'll assume success. (warning: large text file) https://raw.githubusercontent.com/job/rpki-ov-route-map/master/example-rout… After applying the above you can reference 'rpki-ov' at each of your EBGP peers as ingress policy: "neighbor x.x.x.x route-map rpki-ov in". Be careful though, performance may not be as good as a native RPKI OV implementation! Cheers, Job & Ben

2 1

Has Anyone managed to get Delegated RPKI working with ARIN
by Christopher Munz-Michielin 02 Apr '20

02 Apr '20

Hi Nanog, Posting here since my Google-fu is coming up short. I'm trying to setup delegated RPKI in ARIN using rpki.net's rpkid Python daemon and am running into an issue submitting the identity file to ARIN's control panel. The same file submitted to RIPE's test environment at https://localcert.ripe.net/#/rpki works without issue, while submitting to ARIN results in "Invalid Identity.xml file." The guide I'm following is this one: https://github.com/dragonresearch/rpki.net/blob/master/doc/quickstart/xenia… and I'm able to get as far as generating the identity file. Wondering if anyone has gone down this road before and has any helpful hints to make this work? Cheers, Chris

5 7

The Cost of Paid Peering with Chinese ISPs
by Pengxiong Zhu 02 Apr '20

02 Apr '20

Hi folks, We got plenty of positive responses in our last email regarding China's slow transnational network. Many are suggesting it is likely influenced by commercial decisions instead of censorship. It seems like the three Chinese ISPs don't really have enough peering internationally in Asia, and they have very strong bargaining power when it comes to peering. Some suggest the cost of moving data to China is way lower if an ISP peers with US/European ISPs than directly with the Chinese ISPs. We assume the reason why those US/European ISPs offer cheaper prices is that they have settlement-free peering with Chinese ISPs. However, the "free-tier" capacity is simply not enough to handle the demand -- the US/European ISPs now have way more traffic going into China, thus saturating the link and causing congestion. So we are wondering, do the Tier-1 US/European ISPs really have settlement-free peering with Chinese ISPs? If we want to do paid peering directly with the Chinese ISPs or purchase the full/partial transit, what is the price range? >From the BGP information, we know some of the peers of AS4134 (the biggest one) are: - Telia Carrier(AS1299) - Cogent Communications(AS174) - NTT Communications (America)(AS2914) - Level3(AS3356) - Tata Communications(America) Inc (AS6453) - Verizon Business/UUnet(AS701) - Zayo Bandwidth(AS6461) - AT&T Services, Inc.(AS7018) - GTT Communications Inc.(AS3257) - Comcast Cable Communications, LLC(AS7922) It would be much appreciated if the operators of any such networks can give chime in. Thanks! Regards, Pengxiong Zhu Department of Computer Science and Engineering University of California, Riverside

6 11

Pilot Fiber, Chicago Area: Impressions?
by Shawn Ritchie 01 Apr '20

01 Apr '20

Pricing looks good, considering them for cheap backhaul as a tertiary path. Anybody have experience with them for just IP transit? -- Shawn

3 3

Backhoe season?
by William Herrin 01 Apr '20

01 Apr '20

Howdy, With so much work shut down, I'm curious how backhoe season is shaping up this year? How do the circuit and fiber outage numbers look? Regards, Bill Herrin -- William Herrin bill(a)herrin.us https://bill.herrin.us/

9 8

Netflix Appliance offline 1/2hr ago - Netflix please contact me
by Kaiser, Erich 01 Apr '20

01 Apr '20

Can someone contact me from Netflix ASAP our Appliance in SLC went offline and now our partner login doesn't work either. Sincerely, Erich Kaiser The Fusion Network erich(a)gotfusion.net

1 0

Cloudflare Contacts
by John Von Essen 01 Apr '20

01 Apr '20

Could someone from Cloudflare contact me off-list? I work for a major search engine (not google or bing), and we just launched some assets in Brazil, seeing some weird behavior to Cloudflare CDN assets and thinking maybe we are being caught in some kind of filter/block. Our image search traffic is proxied through a single IP, so its definitely high volume. We’ve never had an issue in other regions, but it could due to the sudden increase. Thanks John Von Essen

2 1

South Africa On Lockdown - Coronavirus
by Mark Tinka 01 Apr '20

01 Apr '20

So the South African president has just announced - full country lockdown from midnight this Thursday, 26th March (SAST). If any of you have any work that needs to be done out here, please bear that in mind. Mark.

24 55