- Test - lists.nanog.org

link monitoring and BFD in SDN networks
by Glen Kent 22 Jan '15

22 Jan '15

Hi, Routers connected back to back often rely on BFD for link failures. Its certainly possible that there is a switch between two routers and hence a link down event on one side is not visible to the other side. So, you run some sort of an OAM protocol on the two routers so that they can detect link flaps/failures. How will this happen in SDN networks where there is no control plane on the routers. Will the routers be sending a state of all their links to a central controller who will then detect that a link has gone down. This just doesnt sound good. I am presuming that some sort of "control plane" will always be required. Any pointers here? Is there any other reason other than link events for which we would need a control plane on the routers in SDN? Thanks, Glen

5 4

Comcast contact regarding /32 nullroute
by Randy 21 Jan '15

21 Jan '15

Someone/something is announcing a /32 from our IP space into comcast from a private ASN. Could someone from comcast help at least provide me some more information off-list? Normal support channels are not helping. route-server.newyork.ny.ibone>show ip bgp 74.115.212.130 BGP routing table entry for 74.115.212.130/32, version 2713438548 Paths: (13 available, best #10, table Default-IP-Routing-Table, not advertised to EBGP peer) Advertised to update-groups: 2 64650, (received & used) 68.86.80.4 (metric 69635) from 68.86.80.4 (68.86.1.4) Origin incomplete, metric 0, localpref 100, valid, internal Community: 64650:50001 no-export It should instead look like this. route-server.newyork.ny.ibone>show ip bgp 74.115.212.129 BGP routing table entry for 74.115.212.0/22, version 2674585749 Paths: (13 available, best #12, table Default-IP-Routing-Table) Advertised to update-groups: 2 29944 29889, (received & used) 68.86.1.89 (metric 66845) from 68.86.80.4 (68.86.1.4) Origin IGP, metric 0, localpref 300, valid, internal Community: 7922:89 7922:2900 Originator: 68.86.1.89, Cluster list: 68.86.1.4, 68.86.1.0 -- ~Randy

1 0

Netflix contact
by Brian R. Swan 21 Jan '15

21 Jan '15

Is there anyone out there from NetFlix? If so, can you please contact me off list, I'd like to discuss a campus network/proxy situation that my customer has with your service.

2 1

Office 365 Expert - I am not. I have a customer that...
by Bob Evans 21 Jan '15

21 Jan '15

I have a customer that heavily uses Microsoft Office 365. It's hosted. All the data I see about usage per user appears theoretical. In that the formulas assume people are taking turns using the bandwidth as if there is a patient line of packets at the Internet gas pump. Nobody is clicking at the same time. We all know that is not the real world. Does anyone have any experience with Office 365 hosted that can tell me the practical bandwidth allocation (NOT in KB per month, but in megabits/sec) for 100 users (during normal work hours) needs to be available ? Thank You in advance, Bob Evans CTO Fiber Internet Center

8 12

Registrar Accreditation
by Ryan Finnesey 21 Jan '15

21 Jan '15

Has anyone gone through the ICANN Registrar Accreditation process and would have any tips or insight they can share? Cheers Ryan Sent from my iPad

1 0

Could someone from Charter that is knowledgable on SV1 and LOA processes please contact me.
by Bob Evans 20 Jan '15

20 Jan '15

Hello, I am having a heck of a time with this Charter order. Today's issue - I was sent an incomplete LOA from the project manager (PM). Basically, asking me for charter's information on port numbers and data for the cross connect at SV1 (11 Great Oaks, San Jose)? Obviously, I can't provided that as I can't read minds. ( If I could, Bill Gates would be working for me. ) At the start...PM sent the field tech out to customer prem to verify the fiber. A month later, did it again. The Charter field tech called "me" asking why he had to go twice. Who's on first? (old Abbot and Costello reference). It's been like this at almost every step on this order which is now many many months behind. I think this is stuck in some sort of order twilight zone. My sales team and my customer is getting upset. Thank You Bob Evans CTO bob(a)FiberInternetCenter.com

1 0

RAD MiNID
by Tim Durack 20 Jan '15

20 Jan '15

Anyone got experience with RAD MiNID? I need to do some L2 protocol tunneling (L2PT), and this looks like it might scratch that itch. -- Tim:>

1 0

Re: Recommended L2 switches for a new IXP
by Marian Ďurkovič 20 Jan '15

20 Jan '15

Last year we installed four 1RU TRILL switches in SIX - see http://www.six.sk/images/trill_ring.png Our experience after 100 days of production is only the best - TRILL setup is pretty straightforward and thanks to IS-IS it provides shortest-path IP-like "routing" for L2 ethernet packets over any reasonable topology out of the box (without the burden and cost implications of VPLS). Trident ASICs perform deep packet inspection so ECMP loadbalancing based on L3 and L4 headers inside TRILL-encapsulated packets works for both IPv4 and IPv6. Port-security is supported on physical ports as well as on LAGs - and L4 access-lists could be applied at the same time. As most 1RU switches are based on Trident ASICs, you just need to pick a vendor which implements TRILL properly and of course thoroughly test before deployment. We selected Huawei Cloud Engine 6850 boxes. Regards, M. > Dear Nanog community > > We are trying to build a new IXP in some US Metro areas where we have > multiple POPs and I was wondering what do you recommend for L2 switches. I > know that some IXPs use Nexus, Brocade, Force10 but I don't personally have > experience with these switches. It would be great if you can share your > experience and recommendations. There are so many options that I don't know > if it makes sense to start with a modular switch (usually expensive because > the backplane, dual dc, dual CPU, etc) or start with a 1RU high density > switch that support new protocols like Trill and that supposedly allow you > to create Ethernet Fabric/Clusters. The requirements are simple, 1G/10G > ports for exchange participants, 40G/100G for uplinks between switches and > flow support for statistics and traffic analysis. > > Thank you and have a great day. > > Regards

4 6

HTTPS redirects to HTTP for monitoring
by Grant Ridder 20 Jan '15

20 Jan '15

Hi Everyone, I wanted to see what opinions and thoughts were out there. What software, appliances, or services are being used to monitor web traffic for "inappropriate" content on the SSL side of things? personal use? enterprise enterprise? It looks like Websense might do decryption ( http://community.websense.com/forums/t/3146.aspx) while Covenant Eyes does some sort of session hijack to redirect to non-ssl (atleast for Google) ( https://twitter.com/CovenantEyes/status/451382865914105856) Thoughts on having a product that decrypts SSL traffic internally vs one that doesn't allow SSL to start with? -Grant

17 20

gamer "lag" dashboard
by Michael O Holstein 20 Jan '15

20 Jan '15

?Can someone point me in the right direction for something that allows creation of a "dashboard" with current and statistical latency to the various game servers (PC, Xbox, PS4, etc) ? .. I'm in the education space and we get lots of questions/complains about this and would like a way to make the stats public. I could roll something with RRD and Smokeping but with all the packet-shaping crapola (including that which we use here) I need something that emulates the actual game traffic as would be classified by all the network crap that endeavors to mess with it. (not intended to be an argument about QoS and prioritization, responses addressing either --or the politics thereof-- really aren't helpful). TIA, Michael Holstein Network & Data Security Cleveland State University

7 10