Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-17 Thread Owen DeLong
> > I hate to break it to you guys more of the larger providers in NA are > implementing CGNAT in the next 6 to 18 months. Especially the mobile carriers. I have agreed long ago that mobile is the one place where CGN will go mostly unnoticed. First of all, most mobiles have been behind some f

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-17 Thread Owen DeLong
Sent from my iPad On Jan 17, 2013, at 6:58 PM, Joe Maimon wrote: > > > Owen DeLong wrote: > >> And this is where you run off the rails… You are assuming that NAT today >> and CGN provide similar functionality from an end-user perspective. > > To the extent that CGN functions like the cluel

Re: For those who may use a projector in the NOC

2013-01-17 Thread Michael Painter
- Original Message - From: Eric Adler To: Michael Painter Cc: nanog@nanog.org Sent: Thursday, January 17, 2013 4:19 PM Subject: Re: For those who may use a projector in the NOC This appears to be an Epson / 3LCD marketing campaign. whois shows an admin contact at wint

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-17 Thread Joe Maimon
Owen DeLong wrote: And this is where you run off the rails… You are assuming that NAT today and CGN provide similar functionality from an end-user perspective. To the extent that CGN functions like the clueless linksys daisy-chain, then yes it does. The reality is that they do not. CGN is

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-17 Thread Brandon Ross
On Thu, 17 Jan 2013, Constantine A. Murenin wrote: I'm currently using NAT44, with at least two layers of 802.11g WiFi and 5 routers that seem to be doing independent NAT. Two of them are mine, then the other 3 are of the ISP, to whom I connect through 802.11g, and it generally works just f

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-17 Thread Constantine A. Murenin
On 17 January 2013 17:17, Owen DeLong wrote: > > On Jan 17, 2013, at 4:30 PM, Jeff Kell wrote: > >> On 1/17/2013 6:50 PM, Owen DeLong wrote: >>> Vonage will, in most cases fail through CGN as will Skype, Xbox-360, >>> and many of the other IM clients. >> >> Not sure about Vonage, but Skype, Xbox,

Re: For those who may use a projector in the NOC

2013-01-17 Thread Mike Jones
On 18 January 2013 02:19, Eric Adler wrote: > This appears to be an Epson / 3LCD marketing campaign. > > whois shows an admin contact at wintergroup.net. wintergroup.net (on http) > is the home to a marketing agency, their client links below include "Epson" > and "3LCD"; clicking 3LCD brings up a

Re: For those who may use a projector in the NOC

2013-01-17 Thread Eric Adler
This appears to be an Epson / 3LCD marketing campaign. whois shows an admin contact at wintergroup.net. wintergroup.net (on http) is the home to a marketing agency, their client links below include "Epson" and "3LCD"; clicking 3LCD brings up a still image showing this page. Searching for 3LCD fin

Re: Intermittent incorrect DNS resolution?

2013-01-17 Thread Erik Levinson
Upon further investigation, in this particular Google case, it seems to be a customer's CNAME to a record of theirs which is an actual A record to our old IP, contrary to our instructions (we tell everyone to CNAME us, so we can change IPs as we wish, which we've done for the first time this yea

Re: Intermittent incorrect DNS resolution?

2013-01-17 Thread Erik Levinson
Thanks Damian. I see four requests with Google UAs from actual Google IPs, 66.249.73.45 and 66.249.73.17 (PTR and rwhois seem yours for both), in a period of 30 minutes (compared to over 80 per minute on the new IPs). This is pretty low, so I'm not too worried. Baidu is the main culprit now; t

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-17 Thread Owen DeLong
On Jan 17, 2013, at 4:30 PM, Jeff Kell wrote: > On 1/17/2013 6:50 PM, Owen DeLong wrote: >> Vonage will, in most cases fail through CGN as will Skype, Xbox-360, >> and many of the other IM clients. > > Not sure about Vonage, but Skype, Xbox, and just about everything else > imaginable (other t

For those who may use a projector in the NOC

2013-01-17 Thread Michael Painter
http://www.colorlightoutput.com/

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-17 Thread Eric Tykwinski
I'll agree there, as developers have built in some tricks to work around NAT issues. But in reality doing away with NAT is a much better alternative for the long haul. So you are both right, but I'll side with Owen when doing network deployments as to ease my future headaches. Sent from my iP

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-17 Thread Jeff Kell
On 1/17/2013 6:50 PM, Owen DeLong wrote: > Vonage will, in most cases fail through CGN as will Skype, Xbox-360, > and many of the other IM clients. Not sure about Vonage, but Skype, Xbox, and just about everything else imaginable (other than hosting a server) works just fine over NAT with default

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-17 Thread Owen DeLong
> > Nevertheless, I'll be happy to document my assumptions and show you > where they lead. > > I assume that fewer than 1 in 10 eyeballs would find Internet service > behind a NAT unsatisfactory. Eyeballs are the consumers of content, > the modem, cable modem, residential DSL customers. And this

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-17 Thread William Herrin
On Thu, Jan 17, 2013 at 11:01 AM, Lee Howard wrote: > On 1/17/13 9:54 AM, "William Herrin" wrote: >>On Thu, Jan 17, 2013 at 5:06 AM, . wrote: >>> The people on this list have a influence in how the Internet run, hope >>> somebody smart can figure how we can avoid going there, because there >>> i

Re: Suggestions for the future on your web site: (was cookies, and before that Re: Dreamhost hijacking my prefix...)

2013-01-17 Thread Scott Weeks
--- mpal...@hezmatt.org wrote: --- From: Matt Palmer [Cookies on stat.ripe.net] On Wed, Jan 16, 2013 at 11:36:25AM -0800, Shrdlu wrote: > The cookie stays around for a YEAR (if I let it), and has the > following stuff: CSRF protection is one of the few valid uses of a cookie. By the

Re: Suggestions for the future on your web site: (was cookies, and before that Re: Dreamhost hijacking my prefix...)

2013-01-17 Thread Matt Palmer
[Cookies on stat.ripe.net] On Wed, Jan 16, 2013 at 11:36:25AM -0800, Shrdlu wrote: > The cookie stays around for a YEAR (if I let it), and has the > following stuff: > > Name: stat-csrftoken > Content: 7f12a95b8e274ab940287407a14fc348 [...] > To your credit, you only ask once, but you ought to

Re: Intermittent incorrect DNS resolution?

2013-01-17 Thread Damian Menscher
On Wed, Jan 16, 2013 at 8:09 PM, Erik Levinson wrote: > To give an idea of the scale of the problem right now, I'm getting > thousands of requests per minute to a new IP vs. about two requests per > minute on the equivalent old IP, with over 60% of the latter being Baidu, > but also a bit of Googl

Re: Netflow Nfsen Server Hardware

2013-01-17 Thread Pavel Kislinger
Better IO controller(H700) with his NVcache will make a great job. Especially if you have more SAS disks and some SSD. For nfdump is much better a big SAS array build from six or more 900GB SAS HDD in RAID 5 (10k 2.5'' disks are good for this task). Pavel On 17.1.2013 17:04, PC wrote: > I agree h

BGPMon.net IPv6 alerts?

2013-01-17 Thread eric-l...@truenet.com
We just had a DC move, so I was expecting alerts. The move was 12AM EST on Wednesday and I'm still seeing alerts. Looking at our router and some looking glass sites, we have full tables. Just wondering if this is anything I should be concerned about? Sincerely, Eric Tykwinski

Re: Netflow Nfsen Server Hardware

2013-01-17 Thread Justin M. Streiner
On Thu, 17 Jan 2013, Joe Loiacono wrote: Tim Calvin wrote on 01/16/2013 05:51:11 PM: PowerEdge R610 - 2x Intel E5540, 2.53GHz Quad Core Processor 32GB RAM 2x 300gb 10k 2.5" SAS HDD Since netflow processing is generally I/O bound, you may want to invest in 15K drives. That,

Re: Netflow Nfsen Server Hardware

2013-01-17 Thread Christopher Morrow
On Thu, Jan 17, 2013 at 11:16 AM, Joe Loiacono wrote: > christopher.mor...@gmail.com wrote on 01/17/2013 11:01:06 AM: > >> From: Christopher Morrow >> To: Joe Loiacono/USA/CSC@CSC >> Cc: Tim Calvin , "nanog@nanog.org" >> Date: 01/17/2013 11:01 AM >> Subject: Re: Netflow Nfsen Server Hardware >>

Re: Netflow Nfsen Server Hardware

2013-01-17 Thread Joe Loiacono
christopher.mor...@gmail.com wrote on 01/17/2013 11:01:06 AM: > From: Christopher Morrow > To: Joe Loiacono/USA/CSC@CSC > Cc: Tim Calvin , "nanog@nanog.org" > Date: 01/17/2013 11:01 AM > Subject: Re: Netflow Nfsen Server Hardware > Sent by: christopher.mor...@gmail.com > > On Thu, Jan 17, 2013

Re: Netflow Nfsen Server Hardware

2013-01-17 Thread PC
I agree here with Christopher; A SSD to handle the high IOPS requirements of real time data logging; combined with a scheduled transfer which can "move" the stored data in a linear large block copy operation to ordinary spindles, would be a cost effective hybrid solution. This of course is assumin

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-17 Thread Lee Howard
On 1/17/13 9:54 AM, "William Herrin" wrote: >On Thu, Jan 17, 2013 at 5:06 AM, . wrote: >> The people on this list have a influence in how the Internet run, hope >> somebody smart can figure how we can avoid going there, because there >> is frustrating and unfun. > >"Free network-based firewall

Re: Netflow Nfsen Server Hardware

2013-01-17 Thread Christopher Morrow
On Thu, Jan 17, 2013 at 9:05 AM, Joe Loiacono wrote: > Tim Calvin wrote on 01/16/2013 05:51:11 PM: > >> PowerEdge R610 - >> >> 2x Intel E5540, 2.53GHz Quad Core Processor >> >> 32GB RAM >> >> 2x 300gb 10k 2.5" SAS HDD > > Since netflow processing is generally I/O bound, you may want t

Re: EQUINIX

2013-01-17 Thread PC
My experience has been that the monthly rack rental fee will be a comparative bargain to basic power and a couple in-building cross connects, which will often more than double the cost. When shopping for any provider, make sure you price out all the options you need in addition to the rack space i

Re: Netflow Nfsen Server Hardware

2013-01-17 Thread Dobbins, Roland
On Jan 16, 2013, at 4:51 PM, Tim Calvin wrote: > Would one of the below configurations be okay to handle such as task? If not, > does anyone have any other recommendations. Probably way overkill, but it's best to have excess capacity than not enough. ;> >From what routing platform(s) are you

Re: EQUINIX

2013-01-17 Thread Rodrick Brown
On Thu, Jan 17, 2013 at 8:39 AM, ML wrote: > On 1/17/2013 4:49 AM, Ryan Finnesey wrote: > >> What's the going rate now a days for a rack within EQUINIX? >> >> Cheers >> Ryan >> >> > I would imagine this varies greatly by market and maybe even suite within > the building And also power/cooling r

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-17 Thread William Herrin
On Thu, Jan 17, 2013 at 5:06 AM, . wrote: > The people on this list have a influence in how the Internet run, hope > somebody smart can figure how we can avoid going there, because there > is frustrating and unfun. "Free network-based firewall to be installed next month. OPT OUT HERE if you don't

Re: How are operators using IRR?

2013-01-17 Thread Danny McPherson
On Jan 17, 2013, at 9:44 AM, Michael Hallgren wrote: > Hi, > > Some of the networks close to me, use IRR based AS_PATH and > prefix filters at customer-route import. > > Needless to say that running periodic diffs between what's found in > IRR and what's received in RW and discuss the results

Re: How are operators using IRR?

2013-01-17 Thread Michael Hallgren
Hi, Some of the networks close to me, use IRR based AS_PATH and prefix filters at customer-route import. Needless to say that running periodic diffs between what's found in IRR and what's received in RW and discuss the results with customers is a necessary good thing to make sure that what is exp

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-17 Thread .
On 17 January 2013 15:29, Brandon Ross wrote: .. > AND game developers who build IPv6 functionality into their products. Do > you hear us, PS3 and Xbox? > > Oscar, make sure you are telling your favorite game developers that they > need to support IPv6 if they want to avoid the NAT mess. Ok. I w

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-17 Thread Brandon Ross
On Thu, 17 Jan 2013, Mike Jones wrote: If you follow this list then you should already know the answer, functional* IPv6 deployments. AND game developers who build IPv6 functionality into their products. Do you hear us, PS3 and Xbox? Oscar, make sure you are telling your favorite game deve

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-17 Thread Mike Jones
On 17 January 2013 10:06, . wrote: > i am not network engineer, but I follow this list to be updated about > important news that affect internet stability. > > NAT is already a problem for things like videogames. You want people > to be able to host a multiplayer game, and have his friends to joi

Re: Netflow Nfsen Server Hardware

2013-01-17 Thread Joe Loiacono
Tim Calvin wrote on 01/16/2013 05:51:11 PM: > PowerEdge R610 - > > 2x Intel E5540, 2.53GHz Quad Core Processor > > 32GB RAM > > 2x 300gb 10k 2.5" SAS HDD Since netflow processing is generally I/O bound, you may want to invest in 15K drives. Joe

Re: GPS attack vector

2013-01-17 Thread Lamar Owen
On 01/16/2013 08:06 PM, Jay Ashworth wrote: Do you use GPS to provide any mission critical services (like time of day) in your network? Have you already see this? (I hadn't) http://arstechnica.com/security/2012/12/how-to-bring-down-mission-critical-gps-networks-with-2500/ Hi, Jay, Yes, s

Re: EQUINIX

2013-01-17 Thread ML
On 1/17/2013 4:49 AM, Ryan Finnesey wrote: What's the going rate now a days for a rack within EQUINIX? Cheers Ryan I would imagine this varies greatly by market and maybe even suite within the building.

RE: How are operators using IRR?

2013-01-17 Thread Phil Bedard
I have mainly worked at small and medium sized operators and we did not use IRR at all apart from registering our own and customer blocks with the one upstream provider we had (Level3) which required it. We maintained our own databases of customer prefixes tied to other customer information strict

Re: NANOG Digest, Vol 60, Issue 54

2013-01-17 Thread carl gough [mobsource]
unsub=scribe please [carl gough] founder and CEO +61 425 266 764 mobsource.com On 17/01/13 11:00 PM, "nanog-requ...@nanog.org" wrote: >Send NANOG mailing list submissions to > nanog@nanog.org > >To subscribe or unsubscribe via the World Wide Web, visit > http://mai

Re: How are operators using IRR?

2013-01-17 Thread Pierre-Yves Maunier
2013/1/17 ML > How are operators using the data available in the various IRRs? > > Using an example: > > AS1 is your customer > AS1 has AS2, AS3 and AS4 described as customers in an IRR > Also assume AS2 has IRR data describing AS1000 and AS2000 as it's > customers. > > Are operators building AS

Re: Suggestions for the future on your web site: (was cookies, and before that Re: Dreamhost hijacking my prefix...)

2013-01-17 Thread john
On 1/16/13 8:36 PM, Shrdlu wrote: > On 1/16/2013 9:40 AM, john wrote: > >> I took a look at this site and unfortunately the use of cookies is very >> ingrained into the code. Removing the requirement breaks all >> functionality of www.ris.ripe.net and changing the functionality would >> require a

Re: Notice: Fradulent RIPE ASNs

2013-01-17 Thread Rich Kulawiec
On Wed, Jan 16, 2013 at 11:39:14AM -0500, William Herrin wrote: > 1. Has SPAMHAUS attempted to feed relevant portions of their knowledge > into ARIN's reporting system for fraudulent registrations and, I don't know the answer to that. > 2. Understanding that ARIN can only deal with fraudulent > r

Re: Slashdot: UK ISP PlusNet Testing Carrier-Grade NAT Instead of IPv6

2013-01-17 Thread .
i am not network engineer, but I follow this list to be updated about important news that affect internet stability. NAT is already a problem for things like videogames. You want people to be able to host a multiplayer game, and have his friends to join the game. A free to play MMO may want to ma

EQUINIX

2013-01-17 Thread Ryan Finnesey
What's the going rate now a days for a rack within EQUINIX? Cheers Ryan