- Test - lists.nanog.org

google cloud console is slow
by Izzy Goldstein - TeleGo 07 Feb '20

07 Feb '20

from the US East Cost on Verizon FiOS google cloud console is extremely slow -- Izzy Goldstein Chief Technology Officer Main: (212) 477-1000 x 2085 <(212)%20477-1000> Direct: (929) 477-2085 Website: www.telego.com <http://www.telego.net/> <http://www.telego.com/> Confidentiality Notice: This e-mail may contain confidential and/or privileged information. If you are not the intended recipient or have received this e-mail in error please notify us immediately by email reply and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. Any views or opinions presented in this email are solely those of the author and do not necessarily represent those of TeleGo (T). Employees of TeleGo are expressly required not to make defamatory statements and not to infringe or authorize any infringement of copyright or any other legal right by email communications. Any such communication is contrary to TeleGo policy and outside the scope of the employment of the individual concerned. TeleGo will not accept any liability in respect of such communication, and the employee responsible will be personally liable for any damages or other liability arising. TeleGo Hosted PBX <https://youtu.be/DaT8YAZ4V0w>

2 1

DiViNetworks
by Ronald F. Guilmette 07 Feb '20

07 Feb '20

I mention in passing also that at the present time, DiViNetworks has a grand total of some 6,070 unique route objects registered in the RADB data base. Where I come from, that's a lot of routes. https://pastebin.com/raw/YeFBd1qZ I would be gnerally unconcerned if not for the fact that two of these route objects (for 155.235.0.0/16 and 169.129.0.0/16) exactly cover two AFRINIC legacy blocks that I feel I have proven to have been stolen from AFRINIC legacy blocks holders, with the apparent collusion and connivance of one particular gentleman who, coincidentally, I'm sure, like DiViNetworks, also just happens to have offices in the greater Tel Aviv metropolitan area. Regards, rfg P.S. Online reports suggest that DiViNetworks has received $15 million USD worth of venture capital from the International Finance Corporation, a commercial lender and member of the World Bank Group. https://ifcext.ifc.org/ifcext/pressroom/IFCPressRoom.nsf/0/52F1A9E272AAFAB7… https://en.wikipedia.org/wiki/International_Finance_Corporation

2 2

Need NOC/IP admin contact for AS27506/Crown Castle/Sidera
by Brandon Martin 07 Feb '20

07 Feb '20

An RADB entry for IP range 64.25.104.0/22 was recently entered by Crown Castle Fiber that appears to be in error. Please contact me off-list to help resolve. Thank you. -- Brandon Martin

1 1

DiviNetworks
by Steve Saner 07 Feb '20

07 Feb '20

Has anyone here worked with DiviNetworks (https://divinetworks.com/) to "sell" their unused bandwidth? I'd be curious to hear any thoughts or experiences. Steve -- -------------------------------------------------------------------------- Steven Saner <ssaner(a)hubris.net> Voice: 316-858-3000 Director of Network Operations Fax: 316-858-3001 Hubris Communications http://www.hubris.net

9 10

new tool: rpki-ov-checker
by Job Snijders 06 Feb '20

06 Feb '20

Dear ops, I wrote a simple tool to figure out what kind of invalid a rpki invalid is, this can aid people in understanding the impact of "invalid == reject" routing policies. Only "invalid_unreachable" routes present an operational issue in my opinion, IP addresses covered by "notfound" or "valid" less specific routes will still be reachable. You pass it a file name (or via stdin) with one prefix and origin ASN per line (white space separated) representing your full BGP RIB, and then you can grep specific for the task at hand to extract the info you need: $ rpki-ov-checker full_rib | fgrep -f customer_prefixes | grep invalid | sort -R | head invalid_covered_by_not-found 123.101.0.0/21 4809 covering route: 123.101.0.0/16 4134 invalid_covered_by_valid 46.3.74.0/24 134121 covering route: 46.3.0.0/16 207636 invalid_unreachable 83.231.209.0/24 3949 invalid_unreachable 124.30.247.0/24 9583 invalid_covered_by_valid 125.21.232.0/24 9730 covering route: 125.21.0.0/16 9498 invalid_unreachable 120.29.92.0/24 17639 invalid_unreachable 31.40.164.0/24 200872 invalid_covered_by_notfound 45.12.139.0/24 40676 covering route: 45.12.136.0/22 35913 invalid_covered_by_valid 122.160.178.0/24 24560 covering route: 122.160.0.0/16 24560 invalid_covered_by_valid 61.90.251.0/24 21734 covering route: 61.90.192.0/18 7470 NTT is using this to figure out who we need to help fix their ROA or correct their BGP announcements. Get the goods at https://githqub.com/job/rpki-ov-checker Enjoy! Kind regards, Job

2 2

Disney+ Geolocation issues
by Michael Crapse 06 Feb '20

06 Feb '20

Myself and a few other ISPs are having our eyeballs complain about disney+ saying that they're on a VPN. Does anyone have any idea, or who to contact regarding this issue? This is most likely improper geolocation databases. Anyone have an idea who they use? Mike

16 20

Re: NANOG Digest, Vol 145, Issue 5
by Chris Orsman 05 Feb '20

05 Feb '20

Hi, First submission so be nice :-) Ex. CenturyLink'er here so happy to share my knowledge of their network based solution if anyone is interested. Cheers Chris On Wed, 5 Feb 2020, 12:00 , <nanog-request(a)nanog.org> wrote: > Send NANOG mailing list submissions to > nanog(a)nanog.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://mailman.nanog.org/mailman/listinfo/nanog > or, via email, send a message with subject or body 'help' to > nanog-request(a)nanog.org > > You can reach the person managing the list at > nanog-owner(a)nanog.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NANOG digest..." > > > Today's Topics: > > 1. Re: Recommended DDoS mitigation appliance? (Colton Conor) > 2. RE: Recommended DDoS mitigation appliance? (Phil Lavin) > 3. RE: Recommended DDoS mitigation appliance? (Kushal R.) > 4. Re: Recommended DDoS mitigation appliance? (J. Hellenthal) > 5. Re: Recommended DDoS mitigation appliance? (Colton Conor) > 6. RE: Recommended DDoS mitigation appliance? (Phil Lavin) > 7. Re: Jenkins amplification (Daryl) > 8. Re: Jenkins amplification (Mike Meredith) > 9. Re: EVPN multicast route (multi home case ) implementation / > deployment information (Andrey Kostin) > 10. WTR: 1-2RU @ Equinix Ashburn (Jason Lixfeld) > 11. Help with survey on enterprise network challenges? > (Joseph Severini) > 12. Re: Jenkins amplification (Christopher Morrow) > 13. Re: Has Anyone managed to get Delegated RPKI working with > ARIN (Cynthia Revström) > 14. Re: Has Anyone managed to get Delegated RPKI working with > ARIN (Randy Bush) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 4 Feb 2020 07:40:18 -0600 > From: Colton Conor <colton.conor(a)gmail.com> > To: Javier Juan <javier.juan(a)gmail.com> > Cc: Rabbi Rob Thomas <robt(a)cymru.com>, NANOG <nanog(a)nanog.org> > Subject: Re: Recommended DDoS mitigation appliance? > Message-ID: > < > CAMDdSzN0vhwK70Gd0EnNPRvP9QAfqoXZ_GUZiaVtgzcWgwN_GQ(a)mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > Javier, > > So is Imperva similar to how Kentik operates? What was it priced liked? I > like the Kentik solution, but their per router per month pricing is too > expensive even for a small network. > > On Mon, Feb 3, 2020 at 11:01 AM Javier Juan <javier.juan(a)gmail.com> wrote: > > > Hi ! > > > > I was looking around (a couple years ago) for mitigation appliances > > (Riorey, Arbor, F5 and so on).... but the best and almost affordable > > solution I found was Incapsula/Imperva. > > > > > https://docs.imperva.com/bundle/cloud-application-security/page/introducing… > > > > > > Basically, You send your flows to Imperva on cloud for analysis. As soon > > as they find DDoS attack , they activate mitigation. It´s some kind of > > elegant-hybrid solution without on-premise appliances . Just check it > out :) > > > > Regards, > > > > JJ > > > > > > > > On Sun, Nov 17, 2019 at 11:20 PM Rabbi Rob Thomas <robt(a)cymru.com> > wrote: > > > >> -----BEGIN PGP SIGNED MESSAGE----- > >> Hash: SHA256 > >> > >> > >> Hello, NANOG! > >> > >> I'm in the midst of rebuilding/upgrading our backbone and peering - > >> sessions cheerfully accepted :) - and am curious what folks recommend > >> in the DDoS mitigation appliance realm? Ideally it would be capable > >> of 10Gbps and circa 14Mpps rate of mitigation. If you have a > >> recommendation, I'd love to hear it and the reasons for it. If you > >> have an alternative to an appliance that has worked well for you > >> (we're a mix of Cisco and Juniper), I'm all ears. > >> > >> Private responses are fine, and I'm happy to summarize back to the > >> list if there is interest. > >> > >> Thank you! > >> Rob. > >> - -- > >> Rabbi Rob Thomas Team Cymru > >> "It is easy to believe in freedom of speech for those with whom we > >> agree." - Leo McKern > >> -----BEGIN PGP SIGNATURE----- > >> > >> iQIzBAEBCAAdFiEEDcVjavXj08cL/QwdQ+hhYvqF8o0FAl3Rx08ACgkQQ+hhYvqF > >> 8o0snw/8CxTOujcodNh/huMXZaUNlMNoNRz3IoPqBiAP9BZomMz9xqlpDW/qvWBF > >> xhoJ07C0O0mo5ilNjnPR308uifIBu6ylw02PshOCU06dV0afgtndxGg5AoG9npUV > >> 7uCi2afWaf22dq5TwKLut8QPNNQJTRzndX88xJw9MzzoBTemxRtM7ft4H3UhJ0hv > >> oKo83FCNZQt36I+GZA9GBJeXM+o0f5h0w6fhRqARzttf6brJZdXgROyIQ7jptGuZ > >> N3Yrjk/8RM4XKMnYbtIwl8NS3c0nEGN3ndn+Bz7p2FE7QJrZKonk/o03dvr2kU0Y > >> 7gUQliOOzV9EsptVGyLCVyDJSElvXTBaps0giEVZhdmEIDJPWvBc+93j1g7xbmti > >> 27lT6+5qBmEN0oKJWxXgtw9/n1yX9vsc7tXlgYDoXGhIlszdB3baRao1tYEp8BBQ > >> hTGAULRfHe94tRzvOOQUQIuhzNcK1Q4E2jU6kzBB1wJsBD4zuHk+QIJLSHBmmnka > >> VNKlQ+5zP8dmSMBp6k4feqAtt3hy0Bj+34FbdQZYPutIe3VXHEjpWI3jI9vKjhtC > >> g7U/9CQIjVUl2APn1IllArpUpETBlNq7dSeJNUN/4Xh+eHglUnEn/m2kFG5mizmP > >> d0YvLEVe0/+WzDUz+y3KxDVP5tdJT1VM46FHIgeiB4KrWNGRPUo= > >> =uuel > >> -----END PGP SIGNATURE----- > >> > > >

1 0

Looking for an AT&T Wireless contact
by Michael Brown 04 Feb '20

04 Feb '20

I'm looking for an AT&T Wireless contact to reach out to me off-list. We (discourse.org) have reports from multiple customers that their users are unable to negotiate SSL with our sites when using their AT&T Wireless data connection. The problem is be affecting users around Chicago and Pennsylvania. Evidence points to some sort of SSL interference/tampering. Cheers, Michael Brown

1 0

Jenkins amplification
by Töma Gavrichenkov 04 Feb '20

04 Feb '20

FYI https://nvd.nist.gov/vuln/detail/CVE-2020-2100 A nice description: https://mobile.twitter.com/Foone/status/1223063275996213248 May you live in interesting times. Do not postpone a software update if Jenkins is deployed somewhere in your network. -- Töma

13 19

Help with survey on enterprise network challenges?
by Joseph Severini 04 Feb '20

04 Feb '20

Hi, My name is Joseph Severini, and I am a PhD student in the Computer Science Department at Carnegie Mellon University. I’m working on a research project to identify common operational challenges in modern enterprise computer networks. I’ve put together a survey to identify these challenges by analyzing some operational problems found in the Network Engineering Stack Exchange open-source dataset. You’ll be given a problem from the dataset and asked some questions about it. I would appreciate it if you would consider taking this survey, which can be found at the link below: http://cmu.ca1.qualtrics.com/jfe/form/SV_dm6i9znuPWlLDN3 The survey should take ~15 minutes. Participation is voluntary, with no compensation, and all responses are anonymous. You must be at least 18 years old to complete the survey. Thanks, Joseph Severini PhD Student CMU Computer Science Department

1 0