Re: Cloud backups versus lightning strikes

[George Herbert]

My read on the situation is Yet Another Intermediate Cacheing Fail in storage, 
a well known problem.  Yes, do a pull the power test on your storage so you 
KNOW what's committed...

George William Herbert
Sent from my iPhone

> On Aug 19, 2015, at 5:44 PM, Sean Donelan  wrote:
> 
> 
> As the saying goes, cloud computing is just someone else's computer. Always 
> backup your cloud backups... in your backup.
> 
> Google's spokesperson used the percentage statistic to avoid how
> much data was lost.  Other cloud providers have also lost customer
> data due to various problems.  While a well-run cloud service provider
> is more reliable than keeping data under your mattress (just like a well-run 
> bank is better than keeping cash under your mattress), its
> not magic.
> 
> Nature is still more powerful than even Google.
> 
> 
> http://www.bbc.com/news/technology-33989384
> 
> Google says data has been wiped from discs at one of its data centres in 
> Belgium - after it was struck by lightning four times.
> 
> Some people have permanently lost access to their files as a result.
> 

Production-scale NAT64

[Jawaid Shell2]

Who out there is using production-scale NAT64? What solution are you using?

Thanks,

Jawaid

Re: Production-scale NAT64

[Valdis . Kletnieks]

On Thu, 20 Aug 2015 07:44:10 -0600, Jawaid Shell2 said:
> Who out there is using production-scale NAT64? What solution are you using?

OK, I'll bite - what definition of "production-scale" are you using?
Production use for how many digits worth of simultaneous users?


pgpswQd9cxthI.pgp
Description: PGP signature

Re: Data Center operations mail list?

[Rich Kulawiec]

It appears that this list is sending its outbound traffic via Amazon's
cloud operation.

This is a profoundly horrible idea, not through any fault of yours, but
because Amazon's cloud operation is a massive, non-stop fountain of spam
and Amazon personnel flatly refuse to lift a finger to do anything about it.
As a result of this incompetence/negligence, some folks out there have
taken defensive measures which may include firewalling, blocking, discarding,
rejecting, etc.  Thus this is not someplace that you want to try to send
mail from if you really care about having it delivered.

I recommend moving it elsewhere.  And I'm perfectly willing to assist with
that (either selecting another location or facilitating the move or both).

---rsk

Re: Data Center operations mail list?

[Rafael Possamai]

Hi Rich,

Thank you for letting me know, I expected Amazon to actually take care of
spammers and not let it be a free for all. I can definitely switch it
elsewhere, so please let me know what you have in mind.

I can let the mailman server do deliveries as well, so that's a second
option.


Best regards,
Rafael



On Thu, Aug 20, 2015 at 10:43 AM, Rich Kulawiec  wrote:

>
> It appears that this list is sending its outbound traffic via Amazon's
> cloud operation.
>
> This is a profoundly horrible idea, not through any fault of yours, but
> because Amazon's cloud operation is a massive, non-stop fountain of spam
> and Amazon personnel flatly refuse to lift a finger to do anything about
> it.
> As a result of this incompetence/negligence, some folks out there have
> taken defensive measures which may include firewalling, blocking,
> discarding,
> rejecting, etc.  Thus this is not someplace that you want to try to send
> mail from if you really care about having it delivered.
>
> I recommend moving it elsewhere.  And I'm perfectly willing to assist with
> that (either selecting another location or facilitating the move or both).
>
> ---rsk
>

Re: Data Center operations mail list?

[Alex Lesser]

HI Guys:

I must have missed this but where can I sign up for this new mailing list?

Thank you.

Alex


On 8/20/2015 8:51 AM, Rafael Possamai wrote:

Hi Rich,

Thank you for letting me know, I expected Amazon to actually take care of
spammers and not let it be a free for all. I can definitely switch it
elsewhere, so please let me know what you have in mind.

I can let the mailman server do deliveries as well, so that's a second
option.


Best regards,
Rafael



On Thu, Aug 20, 2015 at 10:43 AM, Rich Kulawiec  wrote:


It appears that this list is sending its outbound traffic via Amazon's
cloud operation.

This is a profoundly horrible idea, not through any fault of yours, but
because Amazon's cloud operation is a massive, non-stop fountain of spam
and Amazon personnel flatly refuse to lift a finger to do anything about
it.
As a result of this incompetence/negligence, some folks out there have
taken defensive measures which may include firewalling, blocking,
discarding,
rejecting, etc.  Thus this is not someplace that you want to try to send
mail from if you really care about having it delivered.

I recommend moving it elsewhere.  And I'm perfectly willing to assist with
that (either selecting another location or facilitating the move or both).

---rsk


.

Re: Production-scale NAT64

[Clinton Work]

The ALU 7750 MS-ISA card can handle 10Gbps of NAT64 traffic and supports
464XLAT as well.  


On Thu, Aug 20, 2015, at 07:44 AM, Jawaid Shell2 wrote:
> Who out there is using production-scale NAT64? What solution are you
> using?

Re: Production-scale NAT64

[William Herrin]

On Thu, Aug 20, 2015 at 9:44 AM, Jawaid Shell2  wrote:
> Who out there is using production-scale NAT64? What solution are you using?

You used "NAT64" and "production" in the same sentence. Good one.

Seriously though, if you want to run a v6-only network and still
support access to IPv4 Internet resources, consider 464XLAT or
DS-Lite.

Regards,
Bill Herrin


-- 
William Herrin  her...@dirtside.com  b...@herrin.us
Owner, Dirtside Systems . Web: 

Re: Production-scale NAT64

[Ca By]

On Thu, Aug 20, 2015 at 9:36 AM, William Herrin  wrote:

> On Thu, Aug 20, 2015 at 9:44 AM, Jawaid Shell2  wrote:
> > Who out there is using production-scale NAT64? What solution are you
> using?
>
> You used "NAT64" and "production" in the same sentence. Good one.
>
> Seriously though, if you want to run a v6-only network and still
> support access to IPv4 Internet resources, consider 464XLAT or
> DS-Lite.
>
>
NAT64 is a required component of 464XLAT.

And, it runs at very meaningful production scale in non-trivial network
deployments.

CB


> Regards,
> Bill Herrin
>
>
> --
> William Herrin  her...@dirtside.com  b...@herrin.us
> Owner, Dirtside Systems . Web: 
>

Re: Data Center operations mail list?

[Barry Shein]

FWIW I agree.


On August 20, 2015 at 11:43 r...@gsp.org (Rich Kulawiec) wrote:
 > 
 > It appears that this list is sending its outbound traffic via Amazon's
 > cloud operation.
 > 
 > This is a profoundly horrible idea, not through any fault of yours, but
 > because Amazon's cloud operation is a massive, non-stop fountain of spam
 > and Amazon personnel flatly refuse to lift a finger to do anything about it.
 > As a result of this incompetence/negligence, some folks out there have
 > taken defensive measures which may include firewalling, blocking, discarding,
 > rejecting, etc.  Thus this is not someplace that you want to try to send
 > mail from if you really care about having it delivered.
 > 
 > I recommend moving it elsewhere.  And I'm perfectly willing to assist with
 > that (either selecting another location or facilitating the move or both).
 > 
 > ---rsk

-- 
-Barry Shein

The World  | b...@theworld.com   | http://www.TheWorld.com
Purveyors to the Trade | Voice: 800-THE-WRLD| Dial-Up: US, PR, Canada
Software Tool & Die| Public Access Internet | SINCE 1989 *oo*

On Cisco gear, is it possible to retrieve communities associated with a recieved BGP route via SNMP?

[Jesse McGraw]

I'm looking through their MIB browser and I don't see anything about 
communities nor anything that sounds likely under bgp4PathAttrEntry


Can anyone point me in the right direction?

Re: Production-scale NAT64

[William Herrin]

On Thu, Aug 20, 2015 at 1:22 PM, Ca By  wrote:
> On Thu, Aug 20, 2015 at 9:36 AM, William Herrin  wrote:
>> Seriously though, if you want to run a v6-only network and still
>> support access to IPv4 Internet resources, consider 464XLAT or
>> DS-Lite.
>
> NAT64 is a required component of 464XLAT.

Sort of, technically, but not really.

NAT64 on its own implies DNS64 and IPv6 client software. Funky
gyrations in the DNS64 server cause the IPv6 software on the client to
originate with IPv6 addresses that the NAT64 server knows how to
convert to IPv4 addresses.

464XLAT does not require DNS64 and provides client software with an
IPv4 interface. IPv4 software that has no idea IPv6 exists sends IPv4
packets which get translated to IPv6 packets. Those packets are routed
to the carrier NAT box which then translates these specially crafted
IPv6 packets back to IPv4 packets.

Functionally, 464XLAT is an IPv6 VPN between your IPv4 client software
and an IPv4 carrier NAT box. Don't let the fact that it's
double-translating instead of encapsulating and decapsulating fool you
-- it's a VPN.

Regards,
Bill Herrin


-- 
William Herrin  her...@dirtside.com  b...@herrin.us
Owner, Dirtside Systems . Web: 

Re: On Cisco gear, is it possible to retrieve communities associated with a recieved BGP route via SNMP?

[Marcin Cieslak]

On Thu, 20 Aug 2015, Jesse McGraw wrote:

> I'm looking through their MIB browser and I don't see anything about
> communities nor anything that sounds likely under bgp4PathAttrEntry
> 
> Can anyone point me in the right direction?

Doesn't seem to be there. Can you check if they
end up as strings with bgp4PathAttrUnknown ?
Although those should be "not understood
by this BGP4 speaker"

~Marcin