Geolocation Data : MAX MIND - Out of Sync
Hello, Not sure whether anyone out there is also experiencing this, seems MAX MIND ( [ https://www.maxmind.com/en/geoip2-precision-demo | https://www.maxmind.com/en/geoip2-precision-demo ] ) geo database is extremely out of sync with whois records on RIRs DBs. It's ok(not 100%) to submit corrections for a few(if not less than few) blocks, but getting it all wrong for more that 4 to many blocks- that's a big deal..especially when other services( like, whatsmyip), believe you more that other DBs e.g 102.217.58.0/24 an AFRNIC allocation, appears in Turkey on MAX MIND, while ip2location and other geoDBs correctly displays this. IS there anyone- with power- from MAX MIND in this list that can help out? Please contact me offlist - sorry for the broadcast to the other members. Regards Paschal Masha | Engineering Skype ID: paschal.masha
Hey Paschal, I've had this same issue previously with some geolocation DBs not reflecting locations correctly. I managed to fix the issue by maintaining a public RFC8805 <https://datatracker.ietf.org/doc/html/rfc8805> geofeed and submitting it to the various DB providers via email and allowing them to poll it frequently for any updates. Here are a majority of the emails you would need to contact with your published geofeed, if you choose to implement one: - support@db-ip.com - support@ip2location.com - support@ipgeolocation.io - correction@maxmind.com - ip-data@digitalenvoy.net - ipintel@support.neustar - privacy@ipapi.co - support@bigdatacloud.com Feel free to use the following template using the subject of "Geofeed for <ASN>" which I successfully used to have the above providers update their databases (with a majority of updates published within a week or so): Hello,
Please use this geofeed for our IPs going forward.
<Link_to_published_geofeed>
Thanks.
Hope this information helps accomplish what you need! Regards, Peter On Mon, Mar 14, 2022 at 6:09 AM Paschal Masha <paschal.masha@ke.wananchi.com> wrote:
Hello,
Not sure whether anyone out there is also experiencing this, seems MAX MIND (https://www.maxmind.com/en/geoip2-precision-demo <https://www.maxmind.com/en/geoip2-precision-demo>) geo database is extremely out of sync with whois records on RIRs DBs.
It's ok(not 100%) to submit corrections for a few(if not less than few) blocks, but getting it all wrong for more that 4 to many blocks- that's a big deal..especially when other services( like, whatsmyip), believe you more that other DBs
e.g 102.217.58.0/24 an AFRNIC allocation, appears in Turkey on MAX MIND, while ip2location and other geoDBs correctly displays this.
IS there anyone- with power- from MAX MIND in this list that can help out? Please contact me offlist - sorry for the broadcast to the other members.
Regards Paschal Masha | Engineering Skype ID: paschal.masha
-- The information contained in this message may be privileged, confidential and protected from disclosure. This message is intended only for the designated recipient(s). It is subject to access, review and disclosure by the sender's Email System Administrator. If you have received this message in error, please advise by return e-mail so that our address records can be corrected and please delete immediately without reading, copying or forwarding to others. Any unauthorized review, use, disclosure or distribution is prohibited. Copyright © 2022 Accuris Technologies Ltd. All Rights Reserved. L'information contenue dans ce message pourrait être de nature privilégiée, confidentielle et protégée contre toute divulgation. Ce message est destiné à l'usage exclusif du(des) destinataire(s) visé(s). Le gestionnaire de système du courrier électronique de l'expéditeur pourrait avoir accès à ce message, l'examiner et le divulguer. Si ce message vous est transmis par erreur, veuillez nous en aviser par courrier électronique à notre adresse, afin que l'on puisse corriger nos registres, puis veuillez le supprimer immédiatement, sans le lire, le copier ou le transmettre à des tiers. Tout examen, toute utilisation, divulgation ou distribution non autorisé de cette information est interdit. Droit d'auteur © 2022 Accuris Technologies Ltd. Tous droits réservés.
Has anyone here actually been granted a vMX trial to demo the thing? Their page makes it seem dead simple (https://www.juniper.net/us/en/dm/vmx-trial-download.html) - just request an account and/or trial and you're off to the races with a 60 day temp license. I've had two customers now asking me if vMX would be a fit for them and my honest answer is I have no clue, because I've been completely ignored by Juniper the two times I've tried to trial the thing. Spoke to two different colleagues within the past ~6mo who had the exact same experience - sent in a trial request, zero response, not even a denial. I suppose Juniper isn't interested in selling these any longer? It's not like we're signing up with hotmail accounts either, myself and my colleagues have used our business emails that pull up as admin/PoCs on 4 or 5 unique ASNs. I'm not sure what more Juniper wants, but I can find reports of the same behavior from Juniper going back 6 years regarding vMX trials: https://mailman.nanog.org/pipermail/nanog/2016-April/085229.html https://mailman.nanog.org/pipermail/nanog/2016-April/085231.html I've been denigrated to downloading some ancient eval version from a stranger's google drive I found in a search result, not much of it is matching up with Juniper's current documentation, but I suppose this is the experience they prefer potential customers to have :P -- Jon Sands MFI Labs https://fohdeesha.com/
The last time I worked with vMX was several years ago. The image was outdated to the point of having to fire up an older version of VMWare to export the two VMs so I could import them back into 6. The documentation barely existed. I had to figure out which vmware adapters corresponded to which vMX adapters. No one really seemed to be able to help at Juniper, even though we ended up licensing the things so we were "real" customers of this product. It looked a lot lot an abandoned project. So unless something has changed in the last few years it's not looking good. ------ Original Message ------ From: "Jon Sands" <fohdeesha@gmail.com> To: "nanog" <nanog@nanog.org> Sent: 3/14/2022 14:09:46 Subject: Juniper vMX Trial - fake news?
Has anyone here actually been granted a vMX trial to demo the thing? Their page makes it seem dead simple (https://www.juniper.net/us/en/dm/vmx-trial-download.html) - just request an account and/or trial and you're off to the races with a 60 day temp license. I've had two customers now asking me if vMX would be a fit for them and my honest answer is I have no clue, because I've been completely ignored by Juniper the two times I've tried to trial the thing.
Spoke to two different colleagues within the past ~6mo who had the exact same experience - sent in a trial request, zero response, not even a denial. I suppose Juniper isn't interested in selling these any longer? It's not like we're signing up with hotmail accounts either, myself and my colleagues have used our business emails that pull up as admin/PoCs on 4 or 5 unique ASNs. I'm not sure what more Juniper wants, but I can find reports of the same behavior from Juniper going back 6 years regarding vMX trials:
https://mailman.nanog.org/pipermail/nanog/2016-April/085229.html
https://mailman.nanog.org/pipermail/nanog/2016-April/085231.html
I've been denigrated to downloading some ancient eval version from a stranger's google drive I found in a search result, not much of it is matching up with Juniper's current documentation, but I suppose this is the experience they prefer potential customers to have :P
-- Jon Sands MFI Labs https://fohdeesha.com/
On Mon, Mar 14, 2022 at 1:23 PM Daryl G. Jurbala <daryl@introspect.net> wrote:
The last time I worked with vMX was several years ago. The image was outdated to the point of having to fire up an older version of VMWare to export the two VMs so I could import them back into 6. The documentation barely existed. I had to figure out which vmware adapters corresponded to which vMX adapters. No one really seemed to be able to help at Juniper, even though we ended up licensing the things so we were "real" customers of this product.
It looked a lot lot an abandoned project. So unless something has changed in the last few years it's not looking good.
Interesting. I haven't had an opportunity to try vMX because of its lack of Hyper-V support, but we do run vSRX in production quite a bit including junos versions from 17.x up to 21.x. It's kind of janky on Hyper-V but works overall (the main issue being very very long boot times - 15+ minutes to get up and running), but we also run it on KVM on Linux with the "vSRX3" images, and that works a lot better. The vSRX3 images on KVM, I personally haven't run into any issues with. The licensing costs are pretty reasonable, too, imho. Good luck with what you're trying to accomplish: maybe give the vSRX series a shot if you're running on KVM. - mdh Matt Harris|Infrastructure Lead 816-256-5446|Direct Looking for help? Helpdesk|Email Support We build customized end-to-end technology solutions powered by NetFire Cloud.
cRPD is a pretty nifty product as well. Some interesting little tricks you can do with that. (Although I don't think they free trial that, those licenses are quite reasonable as well. ) On Mon, Mar 14, 2022 at 2:34 PM Matt Harris <matt@netfire.net> wrote:
Matt Harris | Infrastructure Lead 816‑256‑5446 | Direct Looking for help? *Helpdesk* <https://help.netfire.net/> | *Email Support* <help@netfire.net>
We build customized end‑to‑end technology solutions powered by NetFire Cloud. On Mon, Mar 14, 2022 at 1:23 PM Daryl G. Jurbala <daryl@introspect.net> wrote:
The last time I worked with vMX was several years ago. The image was outdated to the point of having to fire up an older version of VMWare to export the two VMs so I could import them back into 6. The documentation barely existed. I had to figure out which vmware adapters corresponded to which vMX adapters. No one really seemed to be able to help at Juniper, even though we ended up licensing the things so we were "real" customers of this product.
It looked a lot lot an abandoned project. So unless something has changed in the last few years it's not looking good.
Interesting. I haven't had an opportunity to try vMX because of its lack of Hyper-V support, but we do run vSRX in production quite a bit including junos versions from 17.x up to 21.x. It's kind of janky on Hyper-V but works overall (the main issue being very very long boot times - 15+ minutes to get up and running), but we also run it on KVM on Linux with the "vSRX3" images, and that works a lot better. The vSRX3 images on KVM, I personally haven't run into any issues with. The licensing costs are pretty reasonable, too, imho.
Good luck with what you're trying to accomplish: maybe give the vSRX series a shot if you're running on KVM.
- mdh
+1 for cRPD - Thomas Scott | mr.thomas.scott@gmail.com On Mon, Mar 14, 2022 at 2:42 PM Tom Beecher <beecher@beecher.cc> wrote:
cRPD is a pretty nifty product as well. Some interesting little tricks you can do with that.
(Although I don't think they free trial that, those licenses are quite reasonable as well. )
On Mon, Mar 14, 2022 at 2:34 PM Matt Harris <matt@netfire.net> wrote:
Matt Harris | Infrastructure Lead 816‑256‑5446 | Direct Looking for help? *Helpdesk* <https://help.netfire.net/> | *Email Support* <help@netfire.net>
We build customized end‑to‑end technology solutions powered by NetFire Cloud. On Mon, Mar 14, 2022 at 1:23 PM Daryl G. Jurbala <daryl@introspect.net> wrote:
The last time I worked with vMX was several years ago. The image was outdated to the point of having to fire up an older version of VMWare to export the two VMs so I could import them back into 6. The documentation barely existed. I had to figure out which vmware adapters corresponded to which vMX adapters. No one really seemed to be able to help at Juniper, even though we ended up licensing the things so we were "real" customers of this product.
It looked a lot lot an abandoned project. So unless something has changed in the last few years it's not looking good.
Interesting. I haven't had an opportunity to try vMX because of its lack of Hyper-V support, but we do run vSRX in production quite a bit including junos versions from 17.x up to 21.x. It's kind of janky on Hyper-V but works overall (the main issue being very very long boot times - 15+ minutes to get up and running), but we also run it on KVM on Linux with the "vSRX3" images, and that works a lot better. The vSRX3 images on KVM, I personally haven't run into any issues with. The licensing costs are pretty reasonable, too, imho.
Good luck with what you're trying to accomplish: maybe give the vSRX series a shot if you're running on KVM.
- mdh
Mon, Mar 14, 2022 at 01:29:41PM -0500, Matt Harris:
On Mon, Mar 14, 2022 at 1:23 PM Daryl G. Jurbala <daryl@introspect.net> wrote:
The last time I worked with vMX was several years ago. The image was outdated to the point of having to fire up an older version of VMWare to export the two VMs so I could import them back into 6. The documentation barely existed. I had to figure out which vmware adapters corresponded to which vMX adapters. No one really seemed to be able to help at Juniper, even though we ended up licensing the things so we were "real" customers of this product.
It looked a lot lot an abandoned project. So unless something has changed in the last few years it's not looking good.
Interesting. I haven't had an opportunity to try vMX because of its lack of Hyper-V support, but we do run vSRX in production quite a bit including junos versions from 17.x up to 21.x. It's kind of janky on Hyper-V but works overall (the main issue being very very long boot times - 15+ minutes to get up and running), but we also run it on KVM on Linux with the "vSRX3" images, and that works a lot better. The vSRX3 images on KVM, I personally haven't run into any issues with. The licensing costs are pretty reasonable, too, imho.
Good luck with what you're trying to accomplish: maybe give the vSRX series a shot if you're running on KVM.
vMX has not been abandoned; latest I have is 20.2B1, obviously not the current relaease. It works well on esxi, though I am not sure if this is officially supported yet, and is no longer slow to boot or sync with the vfpc. afaiu, vfpc adapters are mgmt, vRE/vfpc internal, intf1 ... vRE adapaters are mgmt, vRE/vfpx internal. vSRX is a different animal, afaik. Contact your sales rep for eval license if the webform isnt working.
It looked a lot lot an abandoned project. So unless something has changed in the last few years it's not looking good.
It's absolutely not abandoned. There have been vMX images up for download for every mainline Junos revision since at least 18.2 that I can recall. The documentation can be sparse at times, but didn't seem to take much effort to figure it out. On Mon, Mar 14, 2022 at 2:24 PM Daryl G. Jurbala <daryl@introspect.net> wrote:
The last time I worked with vMX was several years ago. The image was outdated to the point of having to fire up an older version of VMWare to export the two VMs so I could import them back into 6. The documentation barely existed. I had to figure out which vmware adapters corresponded to which vMX adapters. No one really seemed to be able to help at Juniper, even though we ended up licensing the things so we were "real" customers of this product.
It looked a lot lot an abandoned project. So unless something has changed in the last few years it's not looking good.
------ Original Message ------ From: "Jon Sands" <fohdeesha@gmail.com> To: "nanog" <nanog@nanog.org> Sent: 3/14/2022 14:09:46 Subject: Juniper vMX Trial - fake news?
Has anyone here actually been granted a vMX trial to demo the thing? Their page makes it seem dead simple ( https://www.juniper.net/us/en/dm/vmx-trial-download.html) - just request an account and/or trial and you're off to the races with a 60 day temp license. I've had two customers now asking me if vMX would be a fit for them and my honest answer is I have no clue, because I've been completely ignored by Juniper the two times I've tried to trial the thing.
Spoke to two different colleagues within the past ~6mo who had the exact same experience - sent in a trial request, zero response, not even a denial. I suppose Juniper isn't interested in selling these any longer? It's not like we're signing up with hotmail accounts either, myself and my
colleagues have used our business emails that pull up as admin/PoCs on 4 or 5 unique ASNs. I'm not sure what more Juniper wants, but I can find reports of the same behavior from Juniper going back 6 years regarding vMX trials: > >https://mailman.nanog.org/pipermail/nanog/2016-April/085229.html > >https://mailman.nanog.org/pipermail/nanog/2016-April/085231.html > >I've been denigrated to downloading some ancient eval version from a stranger's google drive I found in a search result, not much of it is matching up with Juniper's current documentation, but I suppose this is the experience they prefer potential customers to have :P > >-- Jon Sands >MFI Labs >https://fohdeesha.com/ >
Jon, Contact me off list with your business email and I'll look into it. On Mon, Mar 14, 2022 at 1:24 PM Daryl G. Jurbala <daryl@introspect.net> wrote:
The last time I worked with vMX was several years ago. The image was outdated to the point of having to fire up an older version of VMWare to export the two VMs so I could import them back into 6. The documentation barely existed. I had to figure out which vmware adapters corresponded to which vMX adapters. No one really seemed to be able to help at Juniper, even though we ended up licensing the things so we were "real" customers of this product.
It looked a lot lot an abandoned project. So unless something has changed in the last few years it's not looking good.
------ Original Message ------ From: "Jon Sands" <fohdeesha@gmail.com> To: "nanog" <nanog@nanog.org> Sent: 3/14/2022 14:09:46 Subject: Juniper vMX Trial - fake news?
Has anyone here actually been granted a vMX trial to demo the thing? Their page makes it seem dead simple ( https://www.juniper.net/us/en/dm/vmx-trial-download.html) - just request an account and/or trial and you're off to the races with a 60 day temp license. I've had two customers now asking me if vMX would be a fit for them and my honest answer is I have no clue, because I've been completely ignored by Juniper the two times I've tried to trial the thing.
Spoke to two different colleagues within the past ~6mo who had the exact same experience - sent in a trial request, zero response, not even a denial. I suppose Juniper isn't interested in selling these any longer? It's not like we're signing up with hotmail accounts either, myself and my
colleagues have used our business emails that pull up as admin/PoCs on 4 or 5 unique ASNs. I'm not sure what more Juniper wants, but I can find reports of the same behavior from Juniper going back 6 years regarding vMX trials: > >https://mailman.nanog.org/pipermail/nanog/2016-April/085229.html > >https://mailman.nanog.org/pipermail/nanog/2016-April/085231.html > >I've been denigrated to downloading some ancient eval version from a stranger's google drive I found in a search result, not much of it is matching up with Juniper's current documentation, but I suppose this is the experience they prefer potential customers to have :P > >-- Jon Sands >MFI Labs >https://fohdeesha.com/ >
-- Jason
participants (9)
-
Daryl G. Jurbala -
heasley -
Jason Biel -
Jon Sands -
Matt Harris -
Paschal Masha -
Peter Potvin -
Thomas Scott -
Tom Beecher