- Test - lists.nanog.org

Re: US/Canada International border concerns for routing
by Clayton Zekelman 11 Aug '17

11 Aug '17

With the peering policies of the major Canadian ISPs, you're virtually guaranteed to hairpin through the US on most paths. Robellus (Rogers, Bell & Telus) will peer with you at any of their major Canadian peering points, such as NYC, Chicago or LA. At 10:01 AM 20/07/2017, Hiers, David wrote: >Hi, >We're looking to extend some services into Canada. While our >lawyers dig into it, I thought that I'd ask the hive mind about >border restrictions. > >For traffic routing, is anyone constraining cross-border routing >between Canada and the US? IOW, if you are routing from Toronto to >Montreal, do you have to guarantee that the path cannot go through, >say, Syracuse, New York? > >I'm asking network operators about packet routing; data storage is a >very different matter, of course. > >Thanks, > >David > >---------------------------------------------------------------------- >This message and any attachments are intended only for the use of >the addressee and may contain information that is privileged and >confidential. If the reader of the message is not the intended >recipient or an authorized representative of the intended recipient, >you are hereby notified that any dissemination of this communication >is strictly prohibited. If you have received this communication in >error, notify the sender immediately by return email and delete the >message and any attachments from your system. -- Clayton Zekelman Managed Network Systems Inc. (MNSi) 3363 Tecumseh Rd. E Windsor, Ontario N8W 1H4 tel. 519-985-8410 fax. 519-985-8409

4 4

(Network Orchestrators evaluation) : tail-f vs Anuta vs UBIqube vs OpenDaylight
by Kasper Adel 10 Aug '17

10 Aug '17

Hi, This is not a vendor bashing thread. We are a group of networking engineers less experience with software) in the middle of the process of procuring a network automation/orchestration controller, if that is even a good definition and we are clueless on how to evaluate them. Other than the obvious, which is to try them out, i wonder what else is important to consider/watch out for. We are presented with 3 different vendors and even OpenDayLight was considered as the open source alternative. My humble thoughts are given below and i would appreciate getting 'schooled' on what i need to ask the vendors: 1) Are they Model driven : But i still don't know how to evaluate that. 2) Do they parse Cisco/Juniper CLI or they are limited to SNMP and YANG. 3) If they do parse, we want to check if they'll hold us by the balls if the current parsers need to be updated, i.e: can we change the code ourselves and add new features to be parsed. 4) Can they work/orchestrate between CLI devices and Non CLI devices (SNMP) 5) How flexible are they to support different Vendors (Cisco, Juniper, some-weird-firewall...etc) thanks, Kim

4 3

Spoofer Project
by Matthew Luckie 09 Aug '17

09 Aug '17

Hi, The CAIDA Spoofer project has been collecting and publicly sharing data on the deployment of source address validation since March 2016. We've built up a reasonably large install-base of the open-source client, and receive tests from 400-500 unique IPs per day. We're posting reports with links to test outcomes on the spoofer website. In particular, we've got summary statistics for each AS at: https://spoofer.caida.org/as_stats.php If you know an operator for anyone on that list who has at least one spoofable prefix, please feel free to reach out to them and let them know. I've been sending emails to abuse contacts for nearly a year now. Roughly 1/5 ASes I've contacted have fixed at least one problem. The remediation we know about (automatically generated) is at: https://spoofer.caida.org/remedy.php In order to improve the notification emails, I'm also soliciting configuration snippets from operators who have deployed source address validation. If you have deployed SAV and wouldn't mind sharing redacted configuration (privately is fine) including any necessary platform details (such as vendor and operating system) we would greatly appreciate it. We will aggregate and post configuration snippets at https://spoofer.caida.org/ Matthew

2 1

US/Canada International border concerns for routing
by Hiers, David 09 Aug '17

09 Aug '17

Hi, We're looking to extend some services into Canada. While our lawyers dig into it, I thought that I'd ask the hive mind about border restrictions. For traffic routing, is anyone constraining cross-border routing between Canada and the US? IOW, if you are routing from Toronto to Montreal, do you have to guarantee that the path cannot go through, say, Syracuse, New York? I'm asking network operators about packet routing; data storage is a very different matter, of course. Thanks, David ---------------------------------------------------------------------- This message and any attachments are intended only for the use of the addressee and may contain information that is privileged and confidential. If the reader of the message is not the intended recipient or an authorized representative of the intended recipient, you are hereby notified that any dissemination of this communication is strictly prohibited. If you have received this communication in error, notify the sender immediately by return email and delete the message and any attachments from your system.

10 13

Admiral Hosting in London
by Michael Wayne 09 Aug '17

09 Aug '17

We were contacted by Admiral Hosting in London to rent some our unused IP space. While they insist that they're not spammers, we can not find out much about them. Has anyone had any dealings with this company? Legit? Scam? We are not interested in contributing to the Scam/Spam problem and figured I would ask here. As this is not, technically, NA-related, private replies are preferred. I'll summarize to the list.

7 6

Re: Spoofer Project
by Matthew Luckie 08 Aug '17

08 Aug '17

To my knowledge this is the meeting network. https://spoofer.caida.org/recent_tests.php?as_include=19230 Your interpretation of the results is congruent with mine. If you look through the history of tests you can see SAV is usually deployed on the network during the meeting. This is true of other network operator group meeting networks as well. On 08/09/17 11:25, Info | ddostest.me wrote: > Is it me or NANOG's AS allowing spoofing? > > https://spoofer.caida.org/as.php?asn=19230

1 0

Cisco Nexus 93180YC Switch Feedback
by James Braunegg 08 Aug '17

08 Aug '17

Dear Nanog Just wondering if anyone is using the Cisco Nexus 93180YC with the LAN enterprise license and has any honest feedback about this platform, especially if you are using VXLAN routing and eVPN, would love to hear from you. For those that don't know the Cisco Nexus 93180YC is a 1RU switch with 48 x 25gbit ports SFP+ ports (1G, 10G or 25G) + 6 x 100gbit QSFP uplink ports. (40G, 50G or 100G) Kindest Regards James Braunegg [cid:image001.png@01D280A4.01865B60] 1300 769 972<tel:1300%20769%20972> / 0488 997 207<tel:1300%20769%20972> james(a)micron21.com<mailto:james@micron21.com> www.micron21.com/<http://www.micron21.com/> [cid:image002.png@01D280A4.01865B60]<http://www.micron21.com/> [cid:image003.png@01D280A4.01865B60]<https://www.facebook.com/micron21/> [cid:image004.png@01D280A4.01865B60]<https://twitter.com/micron21> Follow us on Twitter<https://twitter.com/micron21> for important service and system updates. This message is intended for the addressee named above. It may contain privileged or confidential information. If you are not the intended recipient of this message you must not use, copy, distribute or disclose it to anyone other than the addressee. If you have received this message in error please return the message to the sender by replying to it and then delete the message from your computer.

5 5

Reviews - GTT, NTT and Telia
by Ramy Hashish 08 Aug '17

08 Aug '17

Good day all, If you are going to have two 10G "multiservice" ports in Europe, over which you will run IPT, EVPL (point-to-point switched Ethernet) and IP MPLS VPNs, and you are about to choose between GTT, NTT and Telia, which one will you choose as per your previous experience? Or please share your experience with any of their support, general or specific content quality of experience, overall performance or service delivery. Thanks in advance. Ramy Hashish

4 4

ARIN NRPM 2017.4: New Policies Implemented
by John Curran 08 Aug '17

08 Aug '17

NANOGers: Two new policies affecting transfers of number resources have been implemented at ARIN – it is worthing taking a moment to become familiar with these changes if you manage IP number resources. Thanks! /John John Curran President and CEO ARIN Begin forwarded message: From: ARIN <info(a)arin.net<mailto:info@arin.net>> Subject: [arin-ppml] NRPM 2017.4: New Policies Implemented Date: 8 August 2017 at 11:08:52 AM EDT To: <arin-ppml(a)arin.net<mailto:arin-ppml@arin.net>> On 22 June 2017, the Board of Trustees adopted the following Recommended Draft Policies: Recommended Draft Policy ARIN-2016-3: Alternative simplified criteria for justifying small IPv4 transfers Recommended Draft Policy ARIN-2016-9: Streamline Merger & Acquisition Transfers These policies are now in effect. A new version of the ARIN Number Resource Policy Manual (NRPM) has been published to the ARIN website. NRPM version 2017.4 is effective 8 August 2017 and supersedes the previous version. The NRPM is available at: https://www.arin.net/policy/nrpm.html Board minutes are available at: https://www.arin.net/about_us/bot/index.html Draft policies and proposals are available at: https://www.arin.net/policy/proposals/ The ARIN Policy Development Process (PDP) is available at: https://www.arin.net/policy/pdp.html Regards, Sean Hopkins Policy Analyst American Registry for Internet Numbers (ARIN) _______________________________________________ PPML You are receiving this message because you are subscribed to the ARIN Public Policy Mailing List (ARIN-PPML(a)arin.net) Unsubscribe or manage your mailing list subscription at: http://lists.arin.net/mailman/listinfo/arin-ppml Please contact info(a)arin.net if you experience any issues.

2 2

Microsoft peering - no response
by Kaiser, Erich 07 Aug '17

07 Aug '17

We have been trying to complete our peering with Microsoft at Equinix Ashburn for over a month, keep getting the run-around, all we need is for someone to complete the sessions on their end. Hopefully this will get to someone that can do that. We are peered at several other IX locations across the US already. Our ASN is 19754. Our side is already complete. Just sent another email to peering_at_microsoft and got an undeliverable email response. Sincerely, Erich Kaiser The Fusion Network erich(a)gotfusion.net

5 5