- Test - lists.nanog.org

26 Feb '20

Does anyone have a contact at Verizon FIOS? Please respond off list. V/R, Joe Klein "inveniet viam, aut faciet" --- Seneca's Hercules Furens (Act II, Scene 1) "I never lose. I either win or learn" - Nelson Mandela

5 7

he.net certificate expiriation
by Steve Jones 26 Feb '20

26 Feb '20

The *.he.net cert expired today so the looking glass is inaccessible from chrome if anyone here has a contact to rectify

2 1

Re: NANOG Digest, Vol 145, Issue 25
by Jason Pope 26 Feb '20

26 Feb '20

Would it be possible to deploy one switch for every three floors? So each switch would service the floor that they are on, along with the floor below and the floor above? That would reduce your switch count to ten and you should be able to use an the vendors ethernet ring protocol. If you use bidirectional optics, you should be able to set up two ethernet rings of five switches. Jason K Pope Greater love has no one than this, that one lay down his life for his friends. John 15:13 > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 25 Feb 2020 13:40:20 +0100 > From: Alex Band <alex(a)nlnetlabs.nl> > To: NANOG list <nanog(a)nanog.org> > Subject: Re: Has Anyone managed to get Delegated RPKI working with > ARIN > Message-ID: <7A5ABDFB-56EA-46C5-B553-94346A52EEEA(a)nlnetlabs.nl> > Content-Type: text/plain; charset=utf-8 > > An update: > > The setup process with ARIN has now been fixed in Krill 0.5.0, which was > just released: > https://www.nlnetlabs.nl/news/2020/Feb/25/krill.0.5.0-released/ > > We have worked around the issue by transforming the child request XML file > in the user interface using a toggle: > https://rpki.readthedocs.io/en/latest/krill/parent-interactions.html#arin > > The ensured that Krill is compatible with both the old and new response > file format. Once ARIN conforms to RFC 8183, this toggle will be removed in > a future version. We have also fixed two blocking issues with APNIC, > ensuring Krill now works with every RIR implementation. > > Looking forward to your feedback on this release. > > Cheers, > > Alex > > > On 13 Feb 2020, at 09:48, Alex Band <alex(a)nlnetlabs.nl> wrote: > > > > Hi there! > > > > There is also this somewhat hacky SED command to transform the Request > XML into the format that ARIN accepts, in case you’d like to use something > other than the XSL: > > > > https://sed.js.org/?gist=3f08fb293c8825855bb26f2865161575 > > > > –– Looping in John Curran > > > > John, I appreciate ARIN has accepted RFC 8183 compatibility as an ACSP > suggestion: > > > > https://www.arin.net/participate/community/acsp/suggestions/2020-3/ > > > > Looking at the XML though, the changes needed to make this work are one > tag, a URL and a version number. Could this please be tracked as a simple > bug instead of a "feature to include in our future RPKI improvements”? > > > > In the mean time I have added a warning to the documentation: > > > https://rpki.readthedocs.io/en/latest/krill/manage-cas.html#step-1-get-the-… > > > > Thanks! > > > > -Alex > > > >> On 5 Feb 2020, at 16:48, Tim Bruijnzeels <tim(a)nlnetlabs.nl> wrote: > >> > >> Hi, > >> > >> Everyone is welcome to read that list of course, but the TL;DR is: > >> > >> ARIN currently uses a pre RFC 8183 format for the identity exchange. It > would be good if this were updated. New versions of rpkid as well as Krill > have issues with the old format. > >> > >> In the meantime this XSL provided by rpki.net can be of help: > >> > https://raw.githubusercontent.com/dragonresearch/rpki.net/master/potpourri/… > >> > >> Note: if you are planning to give Krill a try we recommend that you > wait for version 0.5. We expect to have this version ready in 1-2 weeks. It > will include usability improvements, better monitoring and a UI. > >> > >> Kind regards, > >> > >> Tim > >> > >> > >> > >>> On 5 Feb 2020, at 16:03, Christopher Munz-Michielin < > christopher(a)ve7alb.ca> wrote: > >>> > >>> Brilliant! Thanks for the write up Cynthia, I'll have a read through! > >>> > >>> Chris > >>> > >>> On 2020-02-05 1:56 a.m., Cynthia Revström wrote: > >>>> (Re-sent as I forgot to include the ML the first time, oops) > >>>> Hi Chris, > >>>> > >>>> I recently figured it out and posted it on the NLNetLabs RPKI mailing > list. https://lists.nlnetlabs.nl/pipermail/rpki/2020-February/000124.html > <https://lists.nlnetlabs.nl/pipermail/rpki/2020-February/000124.html> > >>>> I hope it helps :) > >>>> > >>>> - Cynthia > >>>> > >>>> On Wed, Jan 29, 2020 at 6:31 PM Christopher Munz-Michielin < > christopher(a)ve7alb.ca <mailto:christopher@ve7alb.ca>> wrote: > >>>> > >>>> Hi Nanog, > >>>> > >>>> Posting here since my Google-fu is coming up short. I'm trying to > setup delegated RPKI in ARIN using rpki.net <http://rpki.net>'s rpkid > Python daemon and am running into an issue submitting the identity file to > ARIN's control panel. The same file submitted to RIPE's test environment > at https://localcert.ripe.net/#/rpki works without issue, while > submitting to ARIN results in "Invalid Identity.xml file." > >>>> > >>>> The guide I'm following is this one: > https://github.com/dragonresearch/rpki.net/blob/master/doc/quickstart/xenia… > and I'm able to get as far as generating the identity file. > >>>> > >>>> Wondering if anyone has gone down this road before and has any > helpful hints to make this work? > >>>> > >>>> Cheers, > >>>> Chris > >>>> > >> > > > > > > ------------------------------ > > Message: 2 > Date: Tue, 25 Feb 2020 18:32:02 -0800 > From: Norman Jester <nj(a)jester.mx> > To: nanog(a)nanog.org > Subject: Hi-Rise Building Fiber Suggestions > Message-ID: <44DA61E8-1023-466D-A8A7-8CA6369BBD0C(a)jester.mx> > Content-Type: text/plain; charset=utf-8 > > I’m in the process of choosing hardware > for a 30 story building. If anyone has experience with this I’d appreciate > any tips. > > There are two fiber pairs running up the building riser. I need to put a > POE switch on each floor using this fiber. > > The idea is to cut the fiber at each floor and insert a switch and daisy > chain the switches together using one pair, and using the other pair as the > failover side of the ring going back to the source so if one device fails > it doesn’t take the whole string down. > > The problem here is how many switches can be strung together and I would > not try more than 3 to 5. This is not something I typically do (stacking > switches). I have fears of STP and/or RSTP issue stacking past Ethernet > switch to switch limits (if they still exist??) > > Is there a device with a similar protocol as the old 3com (now HP IDF) > stacking capability via fiber? > > I’d like to use something inexpensive as its to power ubiquiti wifi on > each floor. Ideally if you know something I don’t about ubiquiti switches > that can do this I’d appreciate knowing. > > Norman > > > > ------------------------------ > > Message: 3 > Date: Tue, 25 Feb 2020 23:21:27 -0500 > From: Bradley Burch <bradley(a)wifastnetworks.com> > To: Norman Jester <nj(a)jester.mx> > Cc: nanog(a)nanog.org > Subject: Re: Hi-Rise Building Fiber Suggestions > Message-ID: <4F4AD665-71ED-4423-A591-E737088E014B(a)wifastnetworks.com> > Content-Type: text/plain; charset=utf-8 > > Should consider DWDM or GPON and in those look at passive optical > technologies that can benefit the project. > > > On Feb 25, 2020, at 9:33 PM, Norman Jester <nj(a)jester.mx> wrote: > > > > I’m in the process of choosing hardware > > for a 30 story building. If anyone has experience with this I’d > appreciate any tips. > > > > There are two fiber pairs running up the building riser. I need to put a > POE switch on each floor using this fiber. > > > > The idea is to cut the fiber at each floor and insert a switch and daisy > chain the switches together using one pair, and using the other pair as the > failover side of the ring going back to the source so if one device fails > it doesn’t take the whole string down. > > > > The problem here is how many switches can be strung together and I would > not try more than 3 to 5. This is not something I typically do (stacking > switches). I have fears of STP and/or RSTP issue stacking past Ethernet > switch to switch limits (if they still exist??) > > > > Is there a device with a similar protocol as the old 3com (now HP IDF) > stacking capability via fiber? > > > > I’d like to use something inexpensive as its to power ubiquiti wifi on > each floor. Ideally if you know something I don’t about ubiquiti switches > that can do this I’d appreciate knowing. > > > > Norman > > > > > ------------------------------ > > Message: 4 > Date: Tue, 25 Feb 2020 20:42:04 -0800 > From: Ryan Hamel <ryan(a)rkhtech.org> > To: Norman Jester <nj(a)jester.mx> > Cc: "=?utf-8?Q?nanog=40nanog.org?=" <nanog(a)nanog.org> > Subject: Re: Hi-Rise Building Fiber Suggestions > Message-ID: > <1582691775.local-b755fc33-4b8b-v1.2.1-5f094887(a)getmailspring.com> > Content-Type: text/plain; charset="utf-8" > > I'd say a pair of Juniper switches on each floor, with their > virtual-chassis capability. Terminate the top/bottom floor of fiber 1 into > switch 1, and the other into switch two. Create an LACP bond between each > floors switches, tag the necessary VLANs, and put the VLAN SVIs onto the > first pair of switches at the building electrical/telecom room. > > The same thing can be done with MLAG across many switch vendors, but that > will require additional configuration. > On Feb 25 2020, at 6:32 pm, Norman Jester <nj(a)jester.mx> wrote: > > > > I’m in the process of choosing hardware > > for a 30 story building. If anyone has experience with this I’d > appreciate any tips. > > > > There are two fiber pairs running up the building riser. I need to put a > POE switch on each floor using this fiber. > > The idea is to cut the fiber at each floor and insert a switch and daisy > chain the switches together using one pair, and using the other pair as the > failover side of the ring going back to the source so if one device fails > it doesn’t take the whole string down. > > The problem here is how many switches can be strung together and I would > not try more than 3 to 5. This is not something I typically do (stacking > switches). I have fears of STP and/or RSTP issue stacking past Ethernet > switch to switch limits (if they still exist??) > > Is there a device with a similar protocol as the old 3com (now HP IDF) > stacking capability via fiber? > > I’d like to use something inexpensive as its to power ubiquiti wifi on > each floor. Ideally if you know something I don’t about ubiquiti switches > that can do this I’d appreciate knowing. > > Norman >

1 0

Help with survey on enterprise network challenges? (updated)
by Joseph Severini 25 Feb '20

25 Feb '20

Hi, My name is Joseph Severini, and I am a PhD student in the Computer Science Department at Carnegie Mellon University. I’m working on a research project to identify common operational challenges in modern enterprise computer networks. I’ve put together a survey to identify these challenges by analyzing some operational problems found in the Network Engineering Stack Exchange open-source dataset. You’ll be given a problem from the dataset and asked some questions about it. I would appreciate it if you would consider taking this survey, which can be found at the link below: http://cmu.ca1.qualtrics.com/jfe/form/SV_dm6i9znuPWlLDN3 The survey should take ~15 minutes. Participation is voluntary, with no compensation, and all responses are anonymous. You must be at least 18 years old to complete the survey. I advertised my survey here before, but I wanted to advertise it one final time. I tweaked the question selection algorithm after feedback I received last time (people thought the "pain-points" were not painful enough). If you didn't submit the survey last time, please consider taking it this time. Thanks, Joseph Severini PhD Student CMU Computer Science Department

1 0

Hearing on "Strengthening Communications Networks To Help Americans In Crisis"
by Sean Donelan 25 Feb '20

25 Feb '20

Date: Thursday, February 27, 2020 - 10:30am Location: 2322 Rayburn House Office Building Subcommittees: Communications & Technology (116th Congress) https://energycommerce.house.gov/committee-activity/hearings/hearing-on-str… Legislation H.R. 451, the "Don't Break Up the T-Band Act of 2019" H.R. 1289, the "Preserving Home and Office Numbers in Emergencies Act of 2019" H.R. 3836, the "Wireless Infrastructure Resiliency during Emergencies and Disasters Act" or the "WIRED Act" H.R. 4194, the "National Suicide Hotline Designation Act of 2019" H.R. 4856, the "Reliable Emergency Alert Distribution Improvement Act of 2019" or the "READI Act" H.R. 5918, a bill to direct the Federal Communicatoins Commission to issue reports after activation of the Disaster Information Reporting System and to make improvement to network outage reporting H.R. 5926, the "Reinforcing and Evaluating Service Integrity, Local Infrastructure, and Emergency Notification for Today's Networks Act" or the "RESILIENT Networks Act" H.R. 5928, the "Fee Integrity and Responsibilities and To Regain Essential Spectrum for Public-safety Operators Needed to Deploy Equipment Reliably Act of 2020" or the "FIRST RESPONDER Act of 2020"

1 0

Network configurations survey
by Usama Naseer 24 Feb '20

24 Feb '20

Hi NANOG, We have often read that CDNs/CSPs optimize their networking stack configurations (e.g., TCP, HTTP etc.) to meet their performance/service requirements. Please help us in exploring the configurations used in the wild by filling us this short survey (<10 minutes): CDN network configuration survey <https://forms.gle/vaGNC3gHxps3Esqs9> (https://forms.gle/vaGNC3gHxps3Esqs9) *Background:* There’s a plethora of protocols and configuration options (TCP congestion control, initial congestion windows, HTTP version, HTTP options etc.) available for networking stack to address a variety of realistic network conditions and devices. Content providers mostly hand-tune the network stack configurations to suit the needs of underlying networks and users. We aim to improve the tuning by building a dynamic network stack that delegates the choice of tuning configurations to a data-driven model and uses the optimal set of configurations for individual networks. *Purpose of Survey:* This survey aims to understand the networking configurations used in-the-wild by network operators and the extent of configuration tuning used to curate the networking stack according to the needs of underlying networks. We also aim to understand the rationale that goes behind tuning the stack to a certain configuration. We expect the survey to be filled by anyone involved with content delivery, protocol designing, next-gen protocols or network infrastructure. The survey and collected data are anonymous and the aggregate results will be used as part of a scientific study/NANOG presentation. Thanks in advance and we look forward to your responses. Usama Naseer (usama_naseer(a)brown.edu) PS: We would appreciate if you could forward the email to other operators who might not be a part of NANOG.

1 0

Ubiquiti EdgeRouter Infinity and IS-IS
by Randy Bush 24 Feb '20

24 Feb '20

am i correct that the only option to drop a ubiquiti infinity into an IS-IS LAN and have RPKI-based ROV too is FRR? if so, would someone who has been to the movie care to share some clue off-list? thanks. randy

1 0

TCP-AMP DDoS Attack - Fake abuse reports problem
by Octolus Development 21 Feb '20

21 Feb '20

A very old attack method called TCP-AMP ( https://pastebin.com/jYhWdgHn [https://pastebin.com/jYhWdgHn] ) has been getting really popular recently. I've been a victim of it multiple times on many of my IP's and every time it happens - My IP's end up getting blacklisted in major big databases. We also receive tons of abuse reports for "Port Scanning". Example of the reports we're getting: tcp: 51.81.XX.XX:19342 -> 209.208.XX.XX:80 (SYN_RECV) tcp: 51.81.XX.XX:14066 -> 209.208.XX.XX:80 (SYN_RECV) OVH are threatening to kick us off their network, because we are victims of this attack. And requesting us to do something about it, despite the fact that there is nothing you can do when you are being victim of an DDoS Attack. Anyone else had any problems with these kind of attacks? The attack basically works like this; - The attacker scans the internet for TCP Services, i.e port 80. - The attacker then sends spoofed requests from our IP to these TCP Services, which makes the remote service attempt to connect to us to initiate the handshake.. This clearly fails. ... Which ends up with hundreds of request to these services, reporting us for "port flood".

10 12

NANOG PC Selection
by L Sean Kennedy 21 Feb '20

21 Feb '20

NANOG Community, Thank you for joining us in San Francisco, and online <https://www.youtube.com/playlist?list=PLO8DR5ZGla8jSzWlrWt_cz13LLAz44rHY>, for NANOG 78! I am excited to announce that 13 NANOG members accepted appointments to the Program Committee. 27 highly-qualified volunteers from the NANOG membership were nominated for this year’s committee selection, so we personally thank each NANOG member who offered their time and hope they participate in future committee solicitations. As an organization, NANOG was founded by volunteers who developed a quality forum for North America’s operator community. Despite the growth in NANOG’s programs, volunteers greatly outnumber professional staff, and the volunteer-only Program Committee (PC) is wholly responsible for soliciting, developing, and selecting all program content presented at NANOG meetings and other events. Please join me in congratulating the appointed PC members: Aaron Ali Atac, Jason Bothe, Vincent Celindro, Michael Costello, Elizabeth Culley, Cat Gurinsky, Tom Kacprzynski, John Kristoff, Ognian Mitev, Rekha Rawat, Michael Voity, Eddy Winstead, and Chris Woodfield. Please also join me in thanking and recognizing the many contributions of PC alumni Michaela Clifford, Nagendra Kumar Nainar, Chris Pennisi, and Steven Schecter. The PC met and elected the following leaders: Chair - Vincent Celindro Vice Chair - Steve Feldman Secretary - Cat Gurinsky We are truly excited to see what the community will submit to the PC for NANOG 79 so please submit talk ideas at https://nanog.org/meetings/submit-presentation/. And please join us in June for our first full meeting in Boston if you can! Thanks, Sean (for the NANOG Board of Directors)

1 0

NANOG 78 Webcasts
by Ana Tomasović 21 Feb '20

21 Feb '20

Hi all, Is anyone able to access NANOG 78 playlist on YouTube or the webcast URL? YouTube videos/playlist appear as private. Thank you.

7 8