- Test - lists.nanog.org

Re: BGP community settings in the real world
by Eric Oosting 18 Apr '02

18 Apr '02

On Thu, 18 Apr 2002, Adam Atkinson wrote: > > To what extent does setting communities on BGP routes work in the real > world? > > I can't help suspecting that in reality, routes would get aggregated, > or communities would be dropped or replaced, somewhere between source > and destination. Most of the utility of communities comes from either what your own policy does with them or what your providers policy does with them. For internally significant communities, they are are very useful for setting up simple but effective export policies ... An ISP might use different communities for routes they learned from a Customer vs. a peer vs. a transit provider vs. Internal, then set up a rule to send routes marked with customer, peer, transit, and internal communities to their customers, but only customer, and internal routes are sent to peers and transit providers. Communities are also useful if you have a service provider that has implemented a rich policy regarding acceptance of communities from customers. For instance, some providers have implemented communities that adjust the local pref the provider sets on the route, or determines if and how the route will be sent outside of the providers network at all to its peers, customers and/or transit providers. For example provider 1234 could use community 1234:120 to mean routes sent from customers to them should be accepted with local pref of 120, instead of the default 100, or that 1234:666 means to send the routes learned with community to customers of the provider only and not to send it to any peers or transit providers. In addition to this, your provider may be sending communities to you that will help you make better routing decisions ... for instance they may be marking routes that originated in a specific region (Say US:SouthEast) with a community that allows you to treat this route differently in your Atlanta, GA Data Center then in your Palo Alto, CA Data Center. The communities a provider accepts and or sends will vary from provider to provider so obviously check with yours for more information about this. So you are correct that there is a possibility of communities being removed or the route aggregated or whatever, but that is OK because the meaning of a community is usually targeted at a specific application where you can be sure your community is in effect, like within your own network or between you and your provider or customer. Eric Eric Oosting eoosting(a)sockeye.com office:781-693-7041 Network Engineer Network Eng and Operations Sockeye Networks

1 0

Réf. : anyone using teleglobe?
by Marc Rapoport 18 Apr '02

18 Apr '02

We have been using their transit for 2 years in France. We are currently upgrading from a DS3 to an OC3 port. Their connectivity is really good generally speaking, the main weakness (in Europe) being E-Bone connectivity. (That might solve when KPN & E-Bone will merge their networks soon,though). Another issue, they do not implement communities for BGP TE yet. Remembering the recent Genuity thread about having to manually register your prefixes , you don't have this kind of hassle with them, they use IRR information to build their filters. To comment a previous answer, they are a subsidiary of the incumbent Bell Canada, so an imminent bankruptcy is very unlikely. Marc. -------------------------------------------------------------------- Date: Tue, 16 Apr 2002 11:50:51 -0700 From: "matthew zeier" <matthew(a)velvet.org> Subject: anyone using teleglobe? I have a gigE from teleglobe due in any day. Is anyone using them for connectivity? Any comments? What's their routing look like? What should I expect if I'm dumping ~300Mbps at them? I'm trying to pre-determine if I'll run into any problems from my more "sensitive" customers. Thanks.

1 0

BGP community settings in the real world
by Adam Atkinson 18 Apr '02

18 Apr '02

To what extent does setting communities on BGP routes work in the real world? I can't help suspecting that in reality, routes would get aggregated, or communities would be dropped or replaced, somewhere between source and destination. -- Adam Atkinson, Damovo UK

2 1

Re: Links between cabinets at commercial datacentre
by Adam Herscher 18 Apr '02

18 Apr '02

On 17 Apr 2002, Paul Vixie wrote: > someone like exodus or qwest or at&t or uunet or abovenet would be very > likely to prevent their customers from directly cross-connecting. > mae-west (55 s market) won't allow it either. paix, equinix, switch and > data, and other "neutral colos" won't allow it to occur without a fee > but the fees are reasonable (unlike, say, the cross connect fees at > mae-west.) UUNet's never put up any roadblocks for me in crossconnecting between cabinets in their datacenters (2 cabinets belonging to different UUNet customers). They've done it quickly too -- here's the response from a UUNet engineer from the last time I asked: > > If this is NOT an Out-of-Band cross connect (POTS, ISDN, whatever) > > contacting your sales person will not be necessary. Are you simply > > attempting to join cabinets [X] and [Y] via a Cat5 connection??? If > > this is the case let me know what ports in the patch panels you want > > the cross connect terminated to and I can send the request to have > > this done today. Their quote for bringing in outside bandwidth (having a circuit punched down at the datacenter + crossconnected to a cabinet) was relatively little too -- something to the tune of $50/month iirc. At my request, they even allowed me to have a circuit run directly through their datacenter bypassing their equipment altogether. I flipped the bill for the UUNet-contracted outside vendor to do the cabling. >From what I've heard, Exodus is a bit more hell-bent on forcing customers to use Exodus (err cw) bandwidth, but even they obviously make exceptions for their larger customers (and perhaps those that threaten to walk?). > there's no answer to the question, as posed. "can you be more specific?" > I think the poster was inquiring as to common practice. ISPs will do whatever they can to make a buck. In some cases this could be forcing customers to use their own bandwidth by preventing crossconnecting within their datacenter. In other cases, it could be realizing that some customers require/value/will pay for such services. In cases where there is little or no competition, it certainly seems like the former would be more profitable (however disappointing). Regards, Adam

3 2

More on Telco/ISP practices in Africa..
by Adam Herscher 17 Apr '02

17 Apr '02

The recent thread related to an exchange point in South Africa reminded me of something I stumbled upon yesterday.. "The great African internet robbery" http://news.bbc.co.uk/hi/english/world/africa/newsid_1931000/1931120.stm I feel it's a rather ignorant article, primarily because it is written from a financial/social equality standpoint with no regard for anything technical. Nonetheless, it seems to have received quite the hype (thanks a lot /.): http://slashdot.org/articles/02/04/16/1235211.shtml?tid=95 I'm curious as to what the consensus is among US network operators..

1 0

references on non-central authority network protocols
by Patrick Thomas 17 Apr '02

17 Apr '02

Hello, I am looking for any and all research (and perhaps your comments), references, etc. regarding replacements for the TCP/IP protocol that do not require centralized authority structures (central authority to assign network numbers). Any links, comments, etc., appreciated. --PT

12 16

OT: Looking for BSTDX-9000 Cards and Chassis
by Alexander Kiwerski 17 Apr '02

17 Apr '02

Is there anyone on NANOG that has, or know of anyone that has any BSTDX-9000 Chassis, Processor or Line Cards? Please reply off-list. Thanks in advance, Alexander Kiwerski

1 0

DNS problems
by Mike Moglin 17 Apr '02

17 Apr '02

Anyone have a contact at UUNet for DNS issues?? once again their name servers have wrong info in them and it's causing me headaches. Thanks.

1 0

RE: Korean server security?
by Joe Blanchard 17 Apr '02

17 Apr '02

Looks like someone actually hacked their main server, and not the one that was the target. Anyone that signed up for the contest got an email something like the following: >Regards, > > > We should all respect the fact that Korea Digital Works is very brave for releasing >their products to the public like this, and openly inviting all hackers, to find any possible exploits. > One has to keep in mind that no matter how many preventions you take, there will always >potentially be a way to hack the system. Anyway, the contest server was only simulation, >not a real world environment, and you have to ask yourself "who will have a webserver running >with this small amount of services activated". No body. The real world environment provided >in this contest was not the simulation server at all, it was the overall contest in general. > > This is why we decided to take the contest to the next level. We chose to skip the >games and festivals, and go straight to the main server (where you registered for the >contest). By taking this step, we achieve a real time environment with a system that has >many services running, just like many other web servers. We also gain access to the server >that contains all of the entries for the contest that is taking place, thus granting us the >ability to manipulate those entries to our liking (keep in mind your prize money relies on >your registration entry). Theres more, but didn't want to pollute the list with to much off topic ASC. -Joe

1 0

RE: Does anyone no if Global Crossing is having Outages in the Ne w Yo rk Area
by Peter Rohrman 17 Apr '02

17 Apr '02

What are you seeing? I use them in NYC, and I don't see any problems with my service. Pete Rohrman -----Original Message----- From: Berson, Peter [mailto:pberson@quallaby.com] Sent: Wednesday, April 17, 2002 1:41 PM To: nanog(a)merit.edu Subject: Does anyone no if Global Crossing is having Outages in the New Yo rk Area Is Global Crossing experiencing outages in the New York Area? Peter Berson Consultant Service Engineer Quallaby Corporation Tel # (978) 539-0743 http://www.quallaby.com <http://www.quallaby.com/>

1 0