- Test - lists.nanog.org

Google's peering, GGC, and congestion management
by Baptiste Jonglez 16 Oct '15

16 Oct '15

Hi, In its peering documentation [https://peering.google.com/about/traffic_management.html] Google claims that it can drive peering links at 100% utilisation: > Congestion management > > Peering ports with Google can be run at 100% capacity in the short term, > with low (<1-2%) packet loss. Please note that an ICMP ping may display > packet loss due to ICMP rate limiting on our platforms. Please contact > us to arrange a peering upgrade. How do they achieve this? More generally, is there any published work on how Google serves content from its CDN, the Google Global Cache? I'm especially interested in two aspects: - for a given eyeball network, on which basis are the CDN nodes selected? - is Google able to spread traffic over distinct peering links for the same eyeball network, in case some of the peering links become congested? If so, how do they measure congestion? Thanks for your input, Baptiste

4 7

the fcc vs wifi lockdown issue
by Dave Taht 16 Oct '15

16 Oct '15

I had hoped to have seen some discussion of what vint cerf, myself, linus torvalds, jim gettys, dave farber, and 260 others just cooked up as to solve the edge device, wifi, and iot security problems we face. Press release here: http://businesswire.com/news/home/20151014005564/en/Global-Internet-Experts… Document as submitted to the fcc here: http://fqcodel.bufferbloat.net/~d/fcc_saner_software_practices.pdf Dave Täht http://www.bufferbloat.net/projects/bloat/wiki/Daves_Media_Guidance

2 1

Android and DHCPv6 again
by Baldur Norddahl 16 Oct '15

16 Oct '15

Hi I noticed that my Nexus 9 tablet did not have any IPv6 although everything else in my house is IPv6 enabled. Then I noticed that my Samsung S6 was also without IPv6. Hmm. A little work with tcpdump and I got this: 03:27:15.978826 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 120) fe80::222:7ff:fe49:ffad > ip6-allnodes: [icmp6 sum ok] ICMP6, router advertisement, length 120 hop limit 0, Flags [*managed*, other stateful], pref medium, router lifetime 1800s, reachable time 0s, retrans time 0s source link-address option (1), length 8 (1): 00:22:07:49:ff:ad mtu option (5), length 8 (1): 1500 prefix info option (3), length 32 (4): 2a00:7660:5c6::/64, Flags [onlink, *auto*], valid time 7040s, pref. time 1800s unknown option (24), length 16 (2): 0x0000: 3000 0000 1b80 2a00 7660 05c6 0000 So my CPE is actually doing DHCPv6 and some nice people at Google decided that it will be better for me to be without IPv6 in that case :-(. But it also has the auto flag, so Android should be able to do SLAAC yes? My Macbook Pro currently has the following set of addresses: en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500 ether 3c:15:c2:ba:76:d4 inet6 fe80::3e15:c2ff:feba:76d4%en0 prefixlen 64 scopeid 0x4 inet 192.168.1.214 netmask 0xffffff00 broadcast 192.168.1.255 inet6 2a00:7660:5c6::3e15:c2ff:feba:76d4 prefixlen 64 autoconf inet6 2a00:7660:5c6::b5a5:5839:ca0f:267e prefixlen 64 autoconf temporary inet6 2a00:7660:5c6::899 prefixlen 64 dynamic nd6 options=1<PERFORMNUD> media: autoselect status: active To me it seems that the Macbook has one SLAAC address, one privacy extension address and one DHCPv6 managed address. In fact the CPE manufacturer is a little clever here. They gave me an easy address that I can use to access my computer ("899") while still allowing SLAAC and privacy extensions. If I want to open ports in my firewall I could do that to the "899" address. But why is my Android devices without IPv6 in this setup? Regards, Baldur

11 14

ultradns / neustar outage?
by Jim Mercer 15 Oct '15

15 Oct '15

hi, we are hosting some domains at ultradns, and they all seem to be dead. anyone else seeing issues? --jim -- Jim Mercer Reptilian Research jim(a)reptiles.org +1 416 410-5633 Life should not be a journey to the grave with the intention of arriving safely in a pretty and well preserved body, but rather to skid in broadside in a cloud of smoke, thoroughly used up, totally worn out, and loudly proclaiming "Wow! What a Ride!" -- Hunter S. Thompson

4 3

Packetfront/Waystream gear
by rdrake 15 Oct '15

15 Oct '15

Does anyone have experience running Packetfront hardware in a production network? We've looked at a few and they seem to be pretty good but I want to know if they have downsides. We're looking at them for edge switches now and thinking about if they can be site routers or switches (either a q-in-q vlan handoff to a ring or a separate L3 with routing protocols depending on how the site is accessed) You can contact me offlist if you don't want to talk about it publicly. Thanks, Robert

3 2

geek whois
by Randy Bush 15 Oct '15

15 Oct '15

anyone else having problems wiht geek whois today? randy

1 1

Microsoft blocking mail
by Chris Garrett 15 Oct '15

15 Oct '15

Is there anyone on-list who can assist with an erroneous spam block to Outlook.com <http://outlook.com/>? One our our net blocks was added earlier today, 216.128.11.0/25 and I am having zero luck getting through to a clueful person at MS. Thank you! Chris Garrett | Network Operations Director tel: 678.370.2012 | mobile: 512.605.9620

11 17

Microsoft / Outlook.com contact???
by Robert Glover 15 Oct '15

15 Oct '15

Anyone from Microsoft / Outlook.com / Office365 around? We are having a problem with email from a certain IP being rejected with code FBLW15. We have gone through the normal channels but have received no communication/acknowledgement from Microsoft at all. Emails to any domain with *outlook.com MX records are rejected with the following: --- host klatencor-com0i.mail.eo.outlook.com[207.46.163.138] said: 550 5.7.1 Service unavailable; Client host [65.111.<snip>.<snip>] blocked using FBLW15; To request removal from this list please forward this message to delist(a)messaging.microsoft.com (in reply to RCPT TO command) --- We have emailed delist(a)messaging.microsoft.com, with no response. The IP in question is not showing up on any blacklists that we have searched (mxtoolbox, multi-rbl-check, etc etc) Thanks -Robert

4 7

RE: IP-Echelon Compliance
by Seth Arnold 15 Oct '15

15 Oct '15

Hi All, Please feel free to get in touch with us to request changes. Expedited processing of your requests is offered through the Notice Recipient Management for ISPs section of our website located here: http://www.ip-echelon.com/isp-notice-management/ <http://www.ip-echelon.com/isp-notice-management/> If you are in the U.S., please also ensure that your change is reflected in the records of the US Copyright Office: http://copyright.gov/onlinesp/list/a_agents.html <http://copyright.gov/onlinesp/list/a_agents.html> Cheers, Seth

21 25

Re: IPv6 and Android auto conf
by Hugo Slabbert 15 Oct '15

15 Oct '15

On Mon 2015-Sep-28 21:15:02 +0530, Anurag Bhatia <me(a)anuragbhatia.com> wrote: >Hi Hugo > > >(My reply in line) > >On Mon, Sep 28, 2015 at 8:50 PM, Hugo Slabbert <hugo(a)slabnet.com> wrote: > >> >> On Mon 2015-Sep-28 17:33:46 +0530, Anurag Bhatia <me(a)anuragbhatia.com> >> wrote: >> >> Hello everyone >>> >>> >>> >>> >>> I recently got IPv6 working at home LAN. My Android device (Google Nexus >>> 5) >>> is connected via wifi to LAN and LAN's core router is Map2N >>> <http://routerboard.com/RBmAP2n>. I have a /64 on the LAN with >>> "advertise" >>> enabled to make ND to work and have autoconfig working on all devices. >>> There are bunch of other layer 2 devices in LAN but all just acting as >>> layer 2 transparently and core L3 remains on Map2N. >>> >>> >>> All works well for most part but only trouble I am getting is on Nexus 5 >>> where after around 24hrs IPv6 stops working. >>> >> >> How, specifically, does it "stop working" on the Nexus 5? >> - temp addresses expired and does not generate new, valid, slaac addresses? >> - RA entry ages out and doesn't get refreshed? >> - cannot reach v6 gateway (ND fails somehow)? > >The last one - everything appears normal (with 4 IPv6 addresses on the >device) but I cannot point any neighbor in same VLAN. Nor I can ping from >them. > That sounds either like NDP is busted on the phone or the AP is eating the Android device's ND traffic. When this happens, does the Android device show up in the ND cache of the other devices on the network that you are trying to reach/ping? Does it show up in the ND cache of the segment's router? If the Android device isn't showing up in other hosts ND caches when you try to ping them, can you do a pcap on one of those hosts when you try to initiate pings from the Android device to confirm if NS packets are being received? Have you tried doing captures on the Android device directly [1][2][3] to see if it still receives RAs when this happens? The symptoms seem to possibly line up with Android issue #32662[4]. Possible you're being hit by that? > >The visible impact I see of it is slightly slow behavior of IPv6 enabled >apps/websites which take a few seconds, timeout and fallback to IPv4. > > > > >Thanks. > >> >> >> Only unusual thing I notice at that time is that phone 4 IPv6 as opposed >>> to 2 (autoconf and temporary randomised address). Seems like some kind of >>> issue in way NDP works either on Microtik or phone. The fix I am doing from >>> few days is to restart wifi and phone interface gets fresh (two) IPv6 >>> addresses and all works well >>> again. >>> >>> >>> >>> Anyone facing similar issue? (Note: No issues on OS X or iOS which are in >>> same LAN) >>> >>> >>> I can try DHCPv6 but I guess most of devices do not support it yet. (I see >>> support for that in routerboard though). >>> >>> >> Unless something's changed, DHCPv6 IA_NA isn't an option for getting an >> IPv6 address assigned to an Android device[1][2] >> >> >> >>> >>> >>> >>> Thanks. >>> >>> >>> -- >>> >>> >>> Anurag Bhatia >>> anuragbhatia.com >>> >>> >>> PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2 >>> >> >> >> -- >> Hugo >> >> hugo(a)slabnet.com: email, xmpp/jabber >> PGP fingerprint (B178313E): >> CF18 15FA 9FE4 0CD1 2319 >> 1D77 9AB1 0FFD B178 313E >> >> [1] https://code.google.com/p/android/issues/detail?id=32621 >> [2] http://mailman.nanog.org/pipermail/nanog/2015-June/075915.html >> > > > >-- > > >Anurag Bhatia >anuragbhatia.com > > >PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2 -- Hugo hugo(a)slabnet.com: email, xmpp/jabber PGP fingerprint (B178313E): CF18 15FA 9FE4 0CD1 2319 1D77 9AB1 0FFD B178 313E (also on textsecure & redphone) [1] https://sites.google.com/site/androidarts/packet-sniffer (needs root) [2] https://www.kismetwireless.net/android-pcap/ (some limitations, but shouldn't need root) [3] https://play.google.com/store/apps/details?id=lv.n3o.shark (needs root) [4] https://code.google.com/p/android/issues/detail?id=32662

2 1