Re: AT&T uVerse blocking SIP?

2015-01-27 Thread Dan Lowe
On Mon, Jan 26, 2015, at 10:22 PM, Jared Mauch wrote: > Yes. If you move to another port, e.g.: 5061 it works fine. > > If you’re running on a Linux based system, you can do this: > > /sbin/iptables -A PREROUTING -t nat -i eth1 -p udp --dport 5061 -j > REDIRECT --to-port 5060 > > on the host

Re: Network ops lists.

2015-01-27 Thread Seiichi Kawamura
Not my list, but here's one. http://www.bugest.net/nogs.html I'm sure there's more though. BDNOG, BTNOG, HKNOG ... -Seiichi (2015/01/28 6:20), Ryan Finnesey wrote: > At one point I stumbled across a site that listed all of the network ops > lists for the corresponding regions but now I can't s

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Eddie Tardist
On Mon, Jan 26, 2015 at 8:53 PM, micah anderson wrote: > > Hi, > > I know that specially programmed ASICs on dedicated hardware like Cisco, > Juniper, etc. are going to always outperform a general purpose server > running gnu/linux, *bsd... but I find the idea of trying to use > proprietary, NSA-

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Joe Holden
Easy to make a switch when the only thing you're actually doing is teling the asic what to do (Cumulus, Ubiquiti, ... every other broadcom vendor out there...) Better yet - Atheros have finally come out with a 24*1GE + 2*10GE switch asic - only a matter of time before they challenge broadcom e

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Joe Holden
I get more than that with realtek nics on x86, problem is high interrupt rates even with msix, intel fixes some of those and chelsio makes it all go away... Just saying :) On 26/01/2015 23:27, Faisal Imtiaz wrote: Hi Micah, There is a segment in the Hardware Side of the industry that produce

Cisco IOS stable/production safe versions?

2015-01-27 Thread Nick Ellermann
I have a Cisco IOS specific question for the group and also specifically related to the 6500 platform. We have always been very conservative with our IOS version that we run in production, we are still running a pretty old safe harbor build of 12.2.x on SUP 720 3BXLs with BGP and OSFP routing. A

Re: Facebook outage?

2015-01-27 Thread Anthony Jeffries
It is working here in rural Oregon as well. Kudos to the Facebook team for such a quick recovery. On Tue, 2015-01-27 at 01:13 -0600, Larry Sheldon wrote: > On 1/27/2015 00:58, Larry Sheldon wrote: > > On 1/27/2015 00:47, Damien Burke wrote: > >> Facebook outage? Everyone panic! > >> > >> https://t

Re: Network ops lists.

2015-01-27 Thread Daniel Corbe
Ryan Finnesey writes: > At one point I stumbled across a site that listed all of the network > ops lists for the corresponding regions but now I can't seem to find > it would anyone happen to have a similar list? > Are you referring to a list regional NOGs? Because there's other interesting con

Network ops lists.

2015-01-27 Thread Ryan Finnesey
At one point I stumbled across a site that listed all of the network ops lists for the corresponding regions but now I can't seem to find it would anyone happen to have a similar list? Sent from my iPad

Re: AT&T uVerse blocking SIP?

2015-01-27 Thread Constantine A. Murenin
On 26 January 2015 at 13:26, Brad Bendy wrote: > Has anyone seen issues where a end user on uVerse trying to connect to > either another provider or AT&T non uVerse (in this case DIA) is having SIP > blocked? SIP leaving the uVerse network going to another uVerse DSL account > is fine, but it appe

Re: Facebook outage?

2015-01-27 Thread Jay Ashworth
- Original Message - > From: "Larry Sheldon" > On 1/27/2015 00:47, Damien Burke wrote: > > Facebook outage? Everyone panic! > > > > https://twitter.com/search?q=facebook&src=typd > > Let the record show that I noticed it quite a while ago, but did NOT > go for first NANOG mention. Proud

Re: Facebook outage?

2015-01-27 Thread Owen DeLong
> On Jan 27, 2015, at 10:15 , Larry Sheldon wrote: > > On 1/27/2015 09:02, Roy wrote: >> >> According to one joker, the crash was caused by too many pictures of the >> Northeast blizzard :-) > > Cat-picture server went down. Putting those two things together, I think it was because really, no

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Phil Bedard
There are some interesting ideas. There are tricks to getting 128K LPM routes into a Trident2 device like you mentioned. You can get the same type of devices from Cisco/Juniper for not a whole lot more, what you are really paying for is the mature control plane. https://github.com/dbarroso

Re: Facebook outage?

2015-01-27 Thread Larry Sheldon
On 1/27/2015 09:02, Roy wrote: According to one joker, the crash was caused by too many pictures of the Northeast blizzard :-) Cat-picture server went down. -- The unique Characteristics of System Administrators: The fact that they are infallible; and, The fact that they learn from their m

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Jim Shankland
On 1/26/15 11:33 PM, Pavel Odintsov wrote: Hello! Looks like somebody want to build Linux soft router!) Nice idea for routing 10-30 GBps. I route about 5+ Gbps in Xeon E5-2620v2 with 4 10GE cards Intel 82599 and Debian Wheezy 3.2 (but it's really terrible kernel, everyone should use modern kerne

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Eduardo Schoedler
Can be Freebsd-based? http://info.iet.unipi.it/~luigi/netmap/ 2015-01-27 14:22 GMT-02:00 Hugo Slabbert : > There is also some work in progress to improve network performance in the > Linux kernel: > > https://lwn.net/Articles/629155/ > > Preliminary, but encouraging that work is under way. > > -

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Hugo Slabbert
There is also some work in progress to improve network performance in the Linux kernel: https://lwn.net/Articles/629155/ Preliminary, but encouraging that work is under way. -- Hugo On Tue 2015-Jan-27 11:33:16 +0400, Pavel Odintsov wrote: Hello! Looks like somebody want to build Linux so

Re: Facebook outage?

2015-01-27 Thread Roy
According to one joker, the crash was caused by too many pictures of the Northeast blizzard :-)

Re: AT&T uVerse blocking SIP?

2015-01-27 Thread Brad Bendy
I agree. I always leave ALGs off, its just 10x harder when the support asked what SIP was and then told me it's not a common protocol since it's not in his magic book :) On Tue, Jan 27, 2015 at 7:50 AM, Jared Mauch wrote: > I’ve never gotten AT&T to respond to issues, including the fact the devi

Re: AT&T uVerse blocking SIP?

2015-01-27 Thread Jared Mauch
I’ve never gotten AT&T to respond to issues, including the fact the device eats the SIP packets, and some types of SIP packets can actually cause their device to reboot as well. It’s been a few years now since I really chased this down, but beware all of these ‘helpers’, including the Cisco SIP

Re: AT&T uVerse blocking SIP?

2015-01-27 Thread Brad Bendy
They are saying this CPE has no ALG in it, but they can enable DMZ, which acourse made zero difference. What I do find funny is they escalated the problem to Tier-2 and wanted to enroll the customer in premium tech support for $15 a month, because the Internet signal is strong and is not causing t

look for BGP routes containing local AS#

2015-01-27 Thread Song Li
Hi everyone, Recently I studied the BGP AS path looping problem, and found that in most cases, the received BGP routes containing local AS# are suspicious. However, we checked our BGP routing table (AS23910,CERNET2) on juniper router(show route hidden terse aspath-regex .*23910.* ), and have n

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Baldur Norddahl
I propose the hybrid solution: A device such as the ZTE 5960e with 24x 10G and 2x 40G will set you about USD 6000 back. This thing can do MPLS and L3 equal cost multiple path routing. With that you can load balance across as many software routers as you need. It also speaks BGP and can accept ab

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Pavel Odintsov
Hello! You could try to build simple router with DPDK yourself. It's very straightforward and have good examples for simple routing. I have done some tests with PF_RING ZC (it's very similar technology to DPDK without specialization on building of network devices) while test my DDoS monitoring so

Re: scaling linux-based router hardware recommendations

2015-01-27 Thread Paul S.
Anyone aware of any dpdk enabled solutions in the software routing space that doesn't cost an arm and a leg? vMX certainly does. On 1/27/2015 午後 04:33, Pavel Odintsov wrote: Hello! Looks like somebody want to build Linux soft router!) Nice idea for routing 10-30 GBps. I route about 5+ Gbps in

Re: Facebook outage?

2015-01-27 Thread Colin Johnston
implement service routers for pop machines using cbac checking and acl for private address range spoofing. block china ranges since never respond to abuse reports. move on Colin > On 27 Jan 2015, at 07:23, Ken Chase wrote: > > cable was replugged, insta/fb back up here. > > /kc > > On Tue, J