- Test - lists.nanog.org

Fwd: [v6ops] RFC 7872 on Observations on the Dropping of Packets with IPv6 Extension Headers in the Real World
by Fernando Gont 28 Jun '16

28 Jun '16

FYI -------- Forwarded Message -------- Subject: [v6ops] RFC 7872 on Observations on the Dropping of Packets with IPv6 Extension Headers in the Real World Date: Tue, 21 Jun 2016 16:57:35 -0700 (PDT) From: rfc-editor(a)rfc-editor.org To: ietf-announce(a)ietf.org, rfc-dist(a)rfc-editor.org CC: v6ops(a)ietf.org, rfc-editor(a)rfc-editor.org A new Request for Comments is now available in online RFC libraries. RFC 7872 Title: Observations on the Dropping of Packets with IPv6 Extension Headers in the Real World Author: F. Gont, J. Linkova, T. Chown, W. Liu Status: Informational Stream: IETF Date: June 2016 Mailbox: fgont(a)si6networks.com, furry(a)google.com, tim.chown(a)jisc.ac.uk, liushucheng(a)huawei.com Pages: 15 Characters: 30924 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-ietf-v6ops-ipv6-ehs-in-real-world-02.txt URL: https://www.rfc-editor.org/info/rfc7872 DOI: http://dx.doi.org/10.17487/RFC7872 This document presents real-world data regarding the extent to which packets with IPv6 Extension Headers (EHs) are dropped in the Internet (as originally measured in August 2014 and later in June 2015, with similar results) and where in the network such dropping occurs. The aforementioned results serve as a problem statement that is expected to trigger operational advice on the filtering of IPv6 packets carrying IPv6 EHs so that the situation improves over time. This document also explains how the results were obtained, such that the corresponding measurements can be reproduced by other members of the community and repeated over time to observe changes in the handling of packets with IPv6 EHs. This document is a product of the IPv6 Operations Working Group of the IETF. INFORMATIONAL: This memo provides information for the Internet community. It does not specify an Internet standard of any kind. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see https://www.ietf.org/mailman/listinfo/ietf-announce https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see https://www.rfc-editor.org/search For downloading RFCs, see https://www.rfc-editor.org/retrieve/bulk Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor(a)rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC _______________________________________________ v6ops mailing list v6ops(a)ietf.org https://www.ietf.org/mailman/listinfo/v6ops -- Fernando Gont e-mail: fernando(a)gont.com.ar || fgont(a)si6networks.com PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1 -- Fernando Gont SI6 Networks e-mail: fgont(a)si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492

1 0

Level 3 Technical Contact
by David Nelson 28 Jun '16

28 Jun '16

Please contact me off list if you have a contact at Level 3 that can help. I have performance issues coming out of Las Vegas and ditching routes to Level 3 seems to fix the problem. Has anyone else seen/heard about problems in US Southwest?

1 0

Real world power consumption of a 7604-S or 7606-S
by Eric Kuhnke 28 Jun '16

28 Jun '16

I'm finding that the spec sheet for an RSP720-3CXL says 310W for the supervisor itself. Assuming a dual supervisor configuration in a 7604 or 7606, has anyone put one on a watt meter and measured its actual power consumption? Example: 7604S chassis with dual 2700W DC power - chassis and fans use how much power? 2 x RSP720-3CXL at 310W each WS-X6704 with DFC4 - ???W each

4 4

Cisco 2 factor authentication
by Ray Ludendorff 27 Jun '16

27 Jun '16

Has anyone setup two factor VPN using a Cisco ASA VPN solution? What sort of soft client based dual factor authentication options were used for the Cisco VPNs (e.g. Symantec VIP, Google authenticator, Azure authenticator, RSA, etc.) I am trying to find what infrastructure is needed to come up with the solution. Please contact me of list Regards Ray Ludendorff

6 5

Quick question regarding: Problematic IPv6 Multicast traffic within an IX.
by Bob Evans 26 Jun '16

26 Jun '16

Is it true that managed Layer2 switches used by IX's can not block IPv6 multicast ingress port traffic from broadcasting to all ports ? ___Yes , seen many IXs with IPv6 multicast continuing yet IPv4 multicast is blocked. ___No , All should be able to bock IPv6 multicast. ___Only a few specific managed switch manufacturers have this issue with IPv6 multicast broadcasting. You're knowledge on this problem would be helpful. Thank You in advance. Bob Evans CTO

5 4

measuring effects of happy eyeballs
by Bajpai, Vaibhav 25 Jun '16

25 Jun '16

Dear NANOG, A paper on measuring the effects of happy eyeballs [RFC 6555] just got accepted last week. This uses a 3-years long ('13 - '16) dataset of TCP connect times towards ALEXA top 10K websites collected from 80 dual-stacked SamKnows probes. We just released [a] the paper. Thought to share it along: [a] http://goo.gl/JmKEax Feedback most welcome! You may recall preliminary versions of this work at RIPE 66 [b] and IETF 87 [c]. [b] https://ripe66.ripe.net/archives/video/1208 [c] https://vimeo.com/71407427 Measuring the Effects of Happy Eyeballs --------------------------------------- The IETF has developed protocols that promote a healthy IPv4 and IPv6 co-existence. The Happy Eyeballs (HE) algorithm, for instance, prevents bad user experience in situations where IPv6 connectivity is broken. Using an active test (happy) that measures TCP connection establishment times, we evaluate the effects of the HE algorithm. The happy test measures against ALEXA top 10K websites from 80 SamKnows probes connected to dual-stacked networks representing 58 different ASes. Using a 3-years long (2013 - 2016) dataset, we show that TCP connect times to popular websites over IPv6 have considerably improved over time. As of May 2016, 18% of these websites are faster over IPv6 with 91% of the rest at most 1 ms slower. The historical trend shows that only around 1% of the TCP connect times over IPv6 were ever above the HE timer value (300 ms), which leaves around 2% chance for IPv4 to win a HE race towards these websites. As such, 99% of these websites prefer IPv6 connections more than 98% of the time. We show that although absolute TCP connect times (in ms) are not that far apart in both address families, HE with a 300 ms timer value tends to prefer slower IPv6 connections in around 90% of the cases. We show that lowering the HE timer value to 150 ms gives us a margin benefit of 10% while retaining same preference levels over IPv6. Best, Vaibhav =================================== Vaibhav Bajpai www.vaibhavbajpai.com Room 91, Research I School of Engineering and Sciences Jacobs University Bremen, Germany ===================================

1 0

colo at 111 8th ave NY?
by Sean Watkins 25 Jun '16

25 Jun '16

Hi, I'm looking for a rack or half rack at 111 8th ave NYC. I've tried going via sales at Equinix etc and few other carriers, it seems to never go anywhere... Can anyone who is there, and wants to sell some space contact me off list? thanks Sean -- -- Sean Watkins 403-629-6152

2 1

FCC adopts order requiring submarine cable outage reporting
by Sean Donelan 24 Jun '16

24 Jun '16

In the past, over 75% of submarine cable operators did not voluntarily report outages of submarine cables with US landing points to the FCC. In other words, less than 25% of submarine cable operators reported outages. The FCC would learn about the submarine cable failures, sometimes days later, from news reports or calls from the public. Since the FCC treats outage reports as confidential information, that still means the public will not necessarily be informed. https://www.fcc.gov/document/fcc-adopts-rules-reliable-submarine-cable-infr… The rules require submarine cable licensees to report major outages to the agency’s Network Outage Reporting System (NORS). Other communications providers – including wireline, wireless, and satellite – already report outages to NORS.

1 0

60 hudson - insurance?
by Chris McDonald 24 Jun '16

24 Jun '16

are others being told that their remote hands / installers , etc now need to show proof of insurance? thanks

4 4

Re: Cisco 2 factor authentication
by Peter Loron 23 Jun '16

23 Jun '16

We are in the process of rolling out Okta, including using a second factor for AnyConnect VPN. Works well. -Pete On 6/22/16, 01:27, "NANOG on behalf of Ray Ludendorff" <nanog-bounces(a)nanog.org on behalf of LudendorffR(a)rferl.org> wrote: Has anyone setup two factor VPN using a Cisco ASA VPN solution? What sort of soft client based dual factor authentication options were used for the Cisco VPNs (e.g. Symantec VIP, Google authenticator, Azure authenticator, RSA, etc.) I am trying to find what infrastructure is needed to come up with the solution. Please contact me of list Regards Ray Ludendorff

1 0