- Test - lists.nanog.org

Firewall as a Service.
by Daniel Corbe 27 Mar '18

27 Mar '18

Are there any vendors that have hardware firewalls and maintain their own Openstack nova/neutron driver set? I’m looking for something that I can offer to my VPS customers as a self-managed service. At the moment, I’m using the default firewall driver. Which is nothing but a wrapper for iptables; and while seamless, I can’t imagine it’s going to scale very well. I’m looking for something that has 10 gig client connectivity and either 100G or 40G uplinks. -Daniel

1 0

Re: Québec Sales tax
by Eric Dugas 27 Mar '18

27 Mar '18

Replied off-list since it's a bit off-topic. On Tue, Mar 27, 2018, 18:47 Jean-Francois Mezei <jfmezei_nanog(a)vaxination.ca (mailto:jfmezei_nanog@vaxination.ca)> wrote: > On 2018-03-27 18:28, Eric Dugas wrote: > > On the IP geoloc subject, we (EBOX) actually have multiple pools for QC-based and ON-based customers. > > You may all have different IP pools, but are they registered such that > geolocation services show them with different provinces, or do they all > point to your > > OrgName: EBOX > OrgId: QUEBE-50 > Address: 1225 St-Charles Ouest, Suite 1100 > City: Longueuil > StateProv: QC > PostalCode: J4K 0B9 > Country: CA > > address ? > (there were complains in the past of some of your ON customers unable to > access Sport Check and being directed to Sport Experts store web sites > due to geolocation.

1 0

How does ER Infinity Hold up?
by howard stearn 27 Mar '18

27 Mar '18

I've seen this list looking for inexpensive routers before, so i'm wondering. . . Since this was released rather recently, Is anyone using ER-8-XG to receive a full bgp table yet? (Yes BGP and are you neighbored with 1, 2, 10, 40 peers?) https://dl.ubnt.com/datasheets/edgemax/EdgeRouter_ER-8-XG_DS.pdf How does it stack up against Cisco, or your other previous router? What's the lookup time on a new unknown destination?

4 3

Problems with Skype video - outgoing calls only
by Igor Krneta 27 Mar '18

27 Mar '18

Hi guys, last few days we have a several of our customers complaining about weird problem with skype video chat. When they try to initiate video call from their computer, call fails and receiving side gets notification that they were called. But when receiving side tries to call them, call gets through immediately, no problems. This affects only video calls. Audio calls, chat, file transfer, group conference all work without any problems during the same session. And we have sent our tech's to customer premises with our own equipment. They too have the same problem while on location while using our laptops/phones/tablets. After customers started complaining, we switched their IP address to some of our other IP ranges and problem was gone for some time. Now, we have started getting reports of skype video not working from our other IP ranges. What's most frustrating about this problem is that it's not a problem for all users in particular subnet, only a few of them at time. For others, everything works as usual. We have checked and double checked everything about our network, and all is well and in normal parameters. No new firewalls/rules/equipment change/updates.... Anyone having same issues maybe ? Sincerely, Igor Krneta Elta Kabel d.o.o.

1 0

Spiffy Netflow tools?
by mike.lyon＠gmail.com 27 Mar '18

27 Mar '18

Howdy! Checking out various Netflow tools and wanted to see what others are using? Kentik is cool. Are they the only SaaS based flow digester? I don’t seem to see any others. Also curious about on-prem solutions as well. Thanks! Mike

20 19

Re: Question about great firewall of China
by Scott Weeks 26 Mar '18

26 Mar '18

> As you may have heard, Bell Canada has gathered a > group called Fairplay Canada to force all ISPs in > Canada to block web sites --- hugo(a)slabnet.com wrote: From: Hugo Slabbert <hugo(a)slabnet.com> re: Nation-level controls, the Sandvine report from Citizen Labs can add some context and real world examples: https://citizenlab.ca/2018/03/bad-traffic-sandvines-packetlogic-devices-dep… Also discusses http vs. https things. ----------------------------------- Wow, that's a really interesting write up. It's long, though... <slight troll; don't read further> It looks like a "Great Firewall of Canada" is going up. They should look at the dismal record of how Australia implemented theirs (all the while knowing how easy it is for the "criminals and terrorists" to bypass their blocks). https://en.wikipedia.org/wiki/Internet_censorship_in_Australia But,it really isn't about the "criminals and terrorists" is it? The people in positions of power worldwide are feverishly drooling over the ability to control what others can know, while not blocking the information from themselves. What a sad, sad life those people live! Sounds like the Dark Ages. scott

2 1

Comcast / Level3 Peering Issues?
by David Deutsch 24 Mar '18

24 Mar '18

Hey guys, VoIP provider here with primary connectivity through Level3 in LAX. For the past week+ we have seen dropped RTP packets between our Level3 connection and Comcast fiber customers located in Denver and Detroit Initially we worked under the assumption that something was occuring at the customer locations (such as localized packet loss), however we now suspect dropped packets between L3 and Comcast. Forcing traffic over to other carriers through community strings resulted in no packet loss. The issue appears to be in the evening and I was hoping either someone from L3 network ops or a list member in the know might have some useful information. Thanks, David

2 1

FCC to Hold Workshop on April 13 on Critical Info During Disasters
by Sean Donelan 23 Mar '18

23 Mar '18

On Friday, April 13th, 2018, the Federal Communications Commission’s (FCC or Commission) Public Safety and Homeland Security Bureau (Bureau) will host a public workshop to identify communications information needs of government and consumers to improve preparation and response efforts during crises. Informed by input to a Bureau Public Notice seeking comment on the response to the 2017 Hurricane Season, this workshop is intended to ensure the Commission is collecting the critical information necessary to best support the preparedness and response activities of stakeholders to facilitate the availability and reliability of communications during emergencies, disasters, and significant events. https://www.fcc.gov/document/fcc-hold-workshop-april-13-critical-info-durin…

1 0

Weekly Routing Table Report
by cscora＠apnic.net 23 Mar '18

23 Mar '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 24 Mar, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 691365 Prefixes after maximum aggregation (per Origin AS): 268010 Deaggregation factor: 2.58 Unique aggregates announced (without unneeded subnets): 333413 Total ASes present in the Internet Routing Table: 60242 Prefixes per ASN: 11.48 Origin-only ASes present in the Internet Routing Table: 52045 Origin ASes announcing only one prefix: 22825 Transit ASes present in the Internet Routing Table: 8197 Transit-only ASes present in the Internet Routing Table: 259 Average AS path length visible in the Internet Routing Table: 4.2 Max AS path length visible: 34 Max AS path prepend of ASN ( 30873) 32 Prefixes from unregistered ASNs in the Routing Table: 43 Number of instances of unregistered ASNs: 43 Number of 32-bit ASNs allocated by the RIRs: 21920 Number of 32-bit ASNs visible in the Routing Table: 17665 Prefixes from 32-bit ASNs in the Routing Table: 73424 Number of bogon 32-bit ASNs visible in the Routing Table: 14 Special use prefixes present in the Routing Table: 3 Prefixes being announced from unallocated address space: 327 Number of addresses announced to Internet: 2856515618 Equivalent to 170 /8s, 66 /16s and 248 /24s Percentage of available address space announced: 77.2 Percentage of allocated address space announced: 77.2 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.8 Total number of prefixes smaller than registry allocations: 229823 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 190139 Total APNIC prefixes after maximum aggregation: 54379 APNIC Deaggregation factor: 3.50 Prefixes being announced from the APNIC address blocks: 189044 Unique aggregates announced from the APNIC address blocks: 77220 APNIC Region origin ASes present in the Internet Routing Table: 8733 APNIC Prefixes per ASN: 21.65 APNIC Region origin ASes announcing only one prefix: 2463 APNIC Region transit ASes present in the Internet Routing Table: 1291 Average APNIC Region AS path length visible: 4.3 Max APNIC Region AS path length visible: 27 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3650 Number of APNIC addresses announced to Internet: 767306082 Equivalent to 45 /8s, 188 /16s and 41 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 206125 Total ARIN prefixes after maximum aggregation: 98692 ARIN Deaggregation factor: 2.09 Prefixes being announced from the ARIN address blocks: 206867 Unique aggregates announced from the ARIN address blocks: 97789 ARIN Region origin ASes present in the Internet Routing Table: 18121 ARIN Prefixes per ASN: 11.42 ARIN Region origin ASes announcing only one prefix: 6715 ARIN Region transit ASes present in the Internet Routing Table: 1807 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2326 Number of ARIN addresses announced to Internet: 1104262496 Equivalent to 65 /8s, 209 /16s and 181 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 187594 Total RIPE prefixes after maximum aggregation: 91205 RIPE Deaggregation factor: 2.06 Prefixes being announced from the RIPE address blocks: 183855 Unique aggregates announced from the RIPE address blocks: 110088 RIPE Region origin ASes present in the Internet Routing Table: 25036 RIPE Prefixes per ASN: 7.34 RIPE Region origin ASes announcing only one prefix: 11374 RIPE Region transit ASes present in the Internet Routing Table: 3492 Average RIPE Region AS path length visible: 4.2 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 6811 Number of RIPE addresses announced to Internet: 715655552 Equivalent to 42 /8s, 168 /16s and 9 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 88947 Total LACNIC prefixes after maximum aggregation: 19690 LACNIC Deaggregation factor: 4.52 Prefixes being announced from the LACNIC address blocks: 90332 Unique aggregates announced from the LACNIC address blocks: 40521 LACNIC Region origin ASes present in the Internet Routing Table: 6946 LACNIC Prefixes per ASN: 13.00 LACNIC Region origin ASes announcing only one prefix: 1905 LACNIC Region transit ASes present in the Internet Routing Table: 1288 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 32 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 4478 Number of LACNIC addresses announced to Internet: 172439008 Equivalent to 10 /8s, 71 /16s and 53 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 18515 Total AfriNIC prefixes after maximum aggregation: 4004 AfriNIC Deaggregation factor: 4.62 Prefixes being announced from the AfriNIC address blocks: 20940 Unique aggregates announced from the AfriNIC address blocks: 7532 AfriNIC Region origin ASes present in the Internet Routing Table: 1122 AfriNIC Prefixes per ASN: 18.66 AfriNIC Region origin ASes announcing only one prefix: 367 AfriNIC Region transit ASes present in the Internet Routing Table: 226 Average AfriNIC Region AS path length visible: 4.6 Max AfriNIC Region AS path length visible: 21 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 400 Number of AfriNIC addresses announced to Internet: 96439296 Equivalent to 5 /8s, 191 /16s and 140 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5417 4192 74 ERX-CERNET-BKB China Education and Rese 7545 3928 407 407 TPG-INTERNET-AP TPG Telecom Limited, AU 4766 2877 11133 782 KIXS-AS-KR Korea Telecom, KR 9829 2804 1499 541 BSNL-NIB National Internet Backbone, IN 7552 2702 1161 58 VIETEL-AS-AP Viettel Group, VN 9394 2630 4923 29 CTTNET China TieTong Telecommunications 45899 2557 1561 165 VNPT-AS-VN VNPT Corp, VN 17974 2308 930 80 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9808 2172 8699 32 CMNET-GD Guangdong Mobile Communication 4755 2085 417 215 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3375 1323 86 SHAW - Shaw Communications Inc., CA 22773 3285 2988 150 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 18566 2167 405 108 MEGAPATH5-US - MegaPath Corporation, US 20115 2098 2488 433 CHARTER-NET-HKY-NC - Charter Communicat 16509 2031 4372 651 AMAZON-02 - Amazon.com, Inc., US 30036 1947 341 176 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 209 1919 5070 609 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 11492 1765 227 564 CABLEONE - CABLE ONE, INC., US 6389 1743 3671 36 BELLSOUTH-NET-BLK - BellSouth.net Inc., 16625 1698 827 1214 AKAMAI-AS - Akamai Technologies, Inc., Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 3885 1484 617 UNI2-AS, ES 39891 3327 179 20 ALJAWWALSTC-AS, SA 20940 2749 776 2010 AKAMAI-ASN1, US 12389 2035 1864 704 ROSTELECOM-AS, RU 34984 2024 334 482 TELLCOM-AS, TR 8551 2021 378 43 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 9121 1944 1692 19 TTNET, TR 13188 1606 100 46 TRIOLAN, UA 8402 1235 544 14 CORBINA-AS OJSC "Vimpelcom", RU 9198 1071 363 28 KAZTELECOM-AS, KZ Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 4324 3385 579 Uninet S.A. de C.V., MX 10620 3597 540 259 Telmex Colombia S.A., CO 11830 2641 369 86 Instituto Costarricense de Electricidad 6503 1634 437 53 Axtel, S.A.B. de C.V., MX 7303 1506 1022 191 Telecom Argentina S.A., AR 28573 1027 2251 181 CLARO S.A., BR 6147 1013 377 27 Telefonica del Peru S.A.A., PE 3816 1006 506 120 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 927 126 83 Alestra, S. de R.L. de C.V., MX 18881 907 1072 29 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1161 398 50 LINKdotNET-AS, EG 37611 820 107 9 Afrihost, ZA 36903 741 372 137 MT-MPLS, MA 36992 677 1396 39 ETISALAT-MISR, EG 8452 633 1730 18 TE-AS TE-AS, EG 24835 602 850 15 RAYA-AS, EG 29571 467 68 12 ORANGE-COTE-IVOIRE, CI 37492 450 376 81 ORANGE-, TN 15399 362 35 7 WANANCHI-, KE 37342 361 32 1 MOVITEL, MZ Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5417 4192 74 ERX-CERNET-BKB China Education and Rese 8151 4324 3385 579 Uninet S.A. de C.V., MX 7545 3928 407 407 TPG-INTERNET-AP TPG Telecom Limited, AU 12479 3885 1484 617 UNI2-AS, ES 10620 3597 540 259 Telmex Colombia S.A., CO 6327 3375 1323 86 SHAW - Shaw Communications Inc., CA 39891 3327 179 20 ALJAWWALSTC-AS, SA 22773 3285 2988 150 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 4766 2877 11133 782 KIXS-AS-KR Korea Telecom, KR 9829 2804 1499 541 BSNL-NIB National Internet Backbone, IN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 8151 4324 3745 Uninet S.A. de C.V., MX 7545 3928 3521 TPG-INTERNET-AP TPG Telecom Limited, AU 10620 3597 3338 Telmex Colombia S.A., CO 39891 3327 3307 ALJAWWALSTC-AS, SA 6327 3375 3289 SHAW - Shaw Communications Inc., CA 12479 3885 3268 UNI2-AS, ES 22773 3285 3135 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 7552 2702 2644 VIETEL-AS-AP Viettel Group, VN 9394 2630 2601 CTTNET China TieTong Telecommunications Corpora 11830 2641 2555 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 65537 DOCUMENT 62.162.120.0/24 6821 MT-AS-OWN bul. Orce Nikolov bb 419333 UNALLOCATED 84.17.91.0/24 41933 IPRAGAZ-AS Istanbul/ TURKEY, T 65024 PRIVATE 87.103.234.0/24 39407 CHITATELECOM-AS, RU 65024 PRIVATE 95.189.78.0/24 39407 CHITATELECOM-AS, RU 65024 PRIVATE 95.189.80.0/22 39407 CHITATELECOM-AS, RU 64111 UNALLOCATED 98.159.5.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64111 UNALLOCATED 98.159.7.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64121 UNALLOCATED 98.159.9.0/24 19555 KMI-NETWORK - Kinder Morgan, I Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.66.224.0/19 209 CENTURYLINK-US-LEGACY-QWEST - Qwest Communicati 100.127.16.0/23 28885 OMANTEL-NAP-AS OmanTel NAP, OM 100.127.18.0/23 28885 OMANTEL-NAP-AS OmanTel NAP, OM Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 14.128.14.0/23 10247 NETLINE, ZA 14.192.50.0/23 10247 NETLINE, ZA 14.192.58.0/23 10247 NETLINE, ZA 27.100.7.0/24 56096 UNKNOWN 36.255.250.0/23 10247 NETLINE, ZA 37.44.224.0/20 48666 AS-MAROSNET Moscow, Russia, RU 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.136.0/24 37500 -Reserved AS-, ZZ 41.76.138.0/24 37500 -Reserved AS-, ZZ 41.76.139.0/24 37500 -Reserved AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:37 /11:100 /12:288 /13:563 /14:1095 /15:1902 /16:13337 /17:7847 /18:13660 /19:25204 /20:39209 /21:45188 /22:85658 /23:69222 /24:385799 /25:839 /26:603 /27:659 /28:33 /29:20 /30:16 /31:4 /32:57 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6327 3166 3375 SHAW - Shaw Communications Inc., CA 39891 2754 3327 ALJAWWALSTC-AS, SA 12479 2645 3885 UNI2-AS, ES 22773 2539 3285 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 18566 2061 2167 MEGAPATH5-US - MegaPath Corporation, US 11830 1988 2641 Instituto Costarricense de Electricidad y Telec 30036 1697 1947 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1601 3597 Telmex Colombia S.A., CO 11492 1536 1765 CABLEONE - CABLE ONE, INC., US 8551 1484 2021 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1577 2:821 4:19 5:2799 6:48 7:1 8:1118 9:1 12:1881 13:192 14:1740 15:27 16:3 17:194 18:68 20:47 21:3 23:2560 24:2148 25:2 27:2264 31:1950 32:89 35:27 36:509 37:2779 38:1459 39:249 40:107 41:3024 42:595 43:1956 44:103 45:3988 46:3040 47:199 49:1349 50:1051 51:48 52:996 54:363 55:5 56:12 57:42 58:1550 59:1017 60:429 61:2135 62:1813 63:1799 64:4729 65:2221 66:4614 67:2367 68:1170 69:3210 70:1141 71:559 72:2111 74:2721 75:412 76:427 77:1547 78:1726 79:1783 80:1482 81:1436 82:1074 83:775 84:1020 85:2078 86:580 87:1301 88:928 89:2323 90:199 91:6310 92:1171 93:2377 94:2398 95:2738 96:659 97:356 98:929 99:129 100:79 101:1427 102:31 103:17422 104:3308 105:224 106:602 107:1793 108:708 109:2724 110:1580 111:1770 112:1325 113:1351 114:1116 115:1649 116:1643 117:1715 118:2161 119:1675 120:969 121:1059 122:2459 123:1821 124:1460 125:1892 128:997 129:629 130:447 131:1556 132:683 133:195 134:995 135:228 136:449 137:499 138:1913 139:575 140:417 141:685 142:793 143:958 144:806 145:456 146:1170 147:750 148:1549 149:709 150:743 151:981 152:758 153:311 154:1013 155:765 156:848 157:784 158:624 159:1649 160:915 161:723 162:2575 163:524 164:1036 165:1412 166:414 167:1396 168:3060 169:814 170:3708 171:426 172:1071 173:1956 174:872 175:765 176:1745 177:3995 178:2416 179:1193 180:2242 181:2155 182:2462 183:1135 184:918 185:12989 186:3565 187:2339 188:2756 189:2004 190:8097 191:1384 192:9794 193:5890 194:4792 195:3960 196:2474 197:1444 198:5519 199:5875 200:7394 201:4990 202:10434 203:10152 204:4530 205:2849 206:3077 207:3204 208:3992 209:3925 210:4035 211:2112 212:2981 213:2722 214:911 215:61 216:5857 217:2151 218:899 219:621 220:1724 221:997 222:1040 223:1236 End of report

1 0

Question about great firewall of China
by Jean-Francois Mezei 23 Mar '18

23 Mar '18

Asking in a sanity check context. As you may have heard, Bell Canada has gathered a group called Fairplay Canada to force all ISPs in Canada to block web sites Fairplay has decided infringe on copyright. (ironically, Fairplay is copyright by Apple, and used without permission :-) Canada has hundreds of separate ISPs, each using a combination of one or more transit providers (and there are many that have POPs in Canada). (so the following question makes it relevant to the NA in NAnog). 1- Does anyone have "big picture" details on how China implements its website blocks? Is this implemented in major trunks that enter China from the outside world? Is there a governmenmt onwed transit provider to whom any/all ISPs must connect (and thus that provider can implemnent the blocks), or are the blocks performed closer to the edges with ISPs in charge of implementing them ? I assume they are some blocked ports, and fake authoritative DNS zone files to redirect sites like bbc.co.uk to something else? Would DPI, on a national scale work to look at HTTP and HTTPS transactions to kill TCP sessione to IPs where the HTTP transaction has a banned work (such as "Host: www.bbc.co.uk" 2- Bell Canada used to use DPI on 1gbps Ellacoya on its wireline Internet to detect and slow bittorrent flows down to dialup speeds. When it started to upgrade its core network to support FTTH in 2010, the upgrade of the BRAS routers to 10GBPS ports would have required Bell buy a totally new fleet of DPI boxes and keep buying whenever there were capacity upgrades. The math favoured increasing capacity instead of limiting use via DPI throttling, especially since traffic growth was with youtube and netflix , not bittorrent. fast forward 7-8 years to today: Is the deployment of dedicated DPI, capable of wire speed control of individual flows be economically feasable for wireline internet services? (DOCSIS and FTTH speeds). When Rogers and Comcast wanted to slow Netflix, underprovisioning links from the Netflix appliances/CDN is much cheaper than deploying DPI. Just curious if there is still an apetite for DPI for wireline ISPs that deploy at modern DOCSIS/FTTH speeds. Does the rapid move from HTTP to HTTPS render DPI for wire speed live control useless? ( I realise that blind collection of netflow data to be batch processed into billing systems to implement zero rating schemes is possible with normal routers and may not require dedicated DPI. 3- In the case of the USA with ISPs slated to become AOL-like information providers, is there an expectation of widespread deployment of DPI equipment to "manage" the provision of information, or is the expectation that the ISPs will focus more on using netflow to impact the billing system and usage limits? 4- Or is DPI being deployed anyways to protect the networks from DDOS attacks, so adding website blocking would be possible?

4 3