Re: Firewall list recommendations (config conversion options)

2016-04-24 Thread Tim Eberhard
The firewall mailing lists tend to be pretty dead now a days. Your best bet is probably writing a python script to convert the rules/objects over. You may have some luck asking the vendors professional services group to do it. Depending on the size of the order perhaps you can toss it in or just a

Re: As a SP, what is your standard CoS configuration on JunOS?

2016-04-24 Thread Mark Tinka
On 19/Apr/16 06:07, Sean Kennedy wrote: > NANOG, > > I realize that every SP handles marking and queueing/scheduling > differently, but I am curious to see other provider's 'standard' > config for QoS that is deployed on the JunOS platform. What config do > apply to all your ingress interfaces

Firewall list recommendations (config conversion options)

2016-04-24 Thread b f
Hi list, Could any one recommend any firewall related mailing lists? Looking for options on converting a large amount of Fortinet rules to Checkpoint. Ultimately converting the entire configuration to Checkpoint would be nice. Thank you for any advice you can provide. Respectfully, Ed

Re: phone fun, was GeoIP database issues and the real world consequences

2016-04-24 Thread RT Parrish
Dan, I think that you mean that AT&T is the 1-800 pound gorilla. I know engineers at AT&T that are bitter about that whole arrangement this many years on. I miss the glory days of everyone and their uncle spinning up a CLEC in the mid-90's. It made the ordering process complicated, especially

Re: google and amazon wierdness via HE right now

2016-04-24 Thread James Stahr
On 04/22/2016 12:31 PM, Frank Bulk wrote: Being discussed on outages, too. Our monitoring system saw access to www.amazon.com and www.cablelabs.com (over v6) down via HE ... amazon came back up for me via Zayo, but when www.cablelabs.com came back up, it was on HE. So the same as you. So I sus

Re: google and amazon wierdness via HE right now

2016-04-24 Thread Thomas Johnson
We saw disconnections to Comcast via HE, A subnet was announced with a bogus path. -- During the problem -- 98.224.0.0/11 via 162.11.22.209 on vlan500 [ibgp_border 12:09:48 from 162.11.22.212] * (100/15) [AS65021i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: 6939 200759 6

LDP flaps specifically present on ACX Juniper routers (ACX4000 and ACX1100)

2016-04-24 Thread joel ahumuza
Hi All, We are experiencing an issue with ACX routers running on 12.3X54-D20.7 where the LDP sessions are continuously flapping, the logs indicate the following; Apr 21 03:36:31 hostname rpd[2299]: RPD_LDP_SESSIONDOWN: LDP session x.x.x.x is down, reason: hold time expired Apr 21 03:36:34 hostn

Re: Latency, TCP ACKs and upload needs

2016-04-24 Thread Chris Welti
On 20/04/16 16:27, Leo Bicknell wrote: 90%+ of the stacks deployed will be too small. Modern Unix generally has "autotuning" TCP stacks, but I don't think Windows or OS X has those features yet (but I'd be very happy to be wrong on that point). Regardless of satellite uplink/downlink speeds, box

RE: CDN, Steam, Origin and NAT.

2016-04-24 Thread Matt Freitag
Hi Laurent, We regularly have people run 50-150 person events with everyone sharing a single external IP and have minimal issues. Our biggest events are League of Legends tournaments and I believe those are streamed on Twitch. I don't think you are going to have a problem, but feel free to hit me

Re: Arista Routing Solutions

2016-04-24 Thread Thomas Penrose
Hey Colton, Comments inline: On Wed, Apr 20, 2016 at 3:37 PM, Colton Conor wrote: > NANOG, > > I know Arista is typically a switch manufacturer, but with their recently > announced Arista 7500R Series and soon to be announced but already shipping > 7280R Series Arista is officially getting into

Re: CDN, Steam, Origin and NAT.

2016-04-24 Thread Thomas Penrose
Hey Laurent, On Thu, Apr 21, 2016 at 3:27 AM, Laurent Dumont wrote: > Hi, > > We are running a small-ish LAN event in Toronto where we have to use a > single IP address to NAT between 250-350 players. I have been made aware of > possible issues with different services like Steam, Origin and Twit

Re: CDN, Steam, Origin and NAT.

2016-04-24 Thread Joe Hamelin
You can always bring up an HE IPv6 tunnel and hand out public IPs that way. -- Joe Hamelin, W7COM, Tulalip, WA, +1 (360) 474-7474 On Wed, Apr 20, 2016 at 7:27 PM, Laurent Dumont wrote: > Hi, > > We are running a small-ish LAN event in Toronto where we have to use a > single IP address to NAT be

Re: Arista Routing Solutions

2016-04-24 Thread Ryan Woolley
Colton Conor wrote: > I know Arista is typically a switch manufacturer, but with their recently > announced Arista 7500R Series and soon to be announced but already shipping > 7280R Series Arista is officially getting into the routing game. The fixed > 1U 7280R Series looks quite impressive. The 75

As a SP, what is your standard CoS configuration on JunOS?

2016-04-24 Thread Sean Kennedy
NANOG, I realize that every SP handles marking and queueing/scheduling differently, but I am curious to see other provider's 'standard' config for QoS that is deployed on the JunOS platform. What config do apply to all your ingress interfaces for classification? How are your core link sched

Re: ASR-9K CPU troubleshooting

2016-04-24 Thread Andrey Slastenov
You should check a log files during the time of high cpu load. ASR9K do most of the packet processing on NP. High CPU load may happen during some control plane processing, like bgp neighbor flapping. Отправлено с iPhone > 20 апр. 2016 г., в 2:17, Micah Croff написал(а): > > I've experienced s

BGP FlowSpec

2016-04-24 Thread Martin Bacher
Dear Nanog Members, My name is Martin Bacher. I am a Student at UAS Technikum-Wien and I am currently writing my master’s thesis with topic "Addressing DDoS Attacks with BGP FlowSpec“. It would be very helpful for me if some of you could share information about the following topics: - Intra-AS

NCS5K?

2016-04-24 Thread Chris Welti
According to some slides from a russian cisco connect event, the upcoming small-size NCS 5501 and NCS 5502 will support 1M+ FIB and 50ms per port buffers. Seem to be killer boxes. 48x100GE in 2RU with large FIB & buffers? Loving it already. I wonder what prices will look like for those. With Go

Re: Arista Routing Solutions

2016-04-24 Thread lincoln dale
> > > High Touch / Low Touch > > High touch means very general purpose NPU, with off-chip memory. Low > touch means usually ASIC or otherwise simplified pipeline and on-chip > memory. Granted Jericho can support off-chip memory too. > > L3 switches are canonical example of low touch. EZchip, Trio,

Re: Arista Routing Solutions

2016-04-24 Thread Saku Ytti
On 24 April 2016 at 09:08, Colton Conor wrote: Hey, > I guess you are right the QFX10002-36Q is probably a better comparison. But > let's be honest, Juniper is not going to sell a QFX10002-36Q for less than > $20k like Arista will do for a semi- similar box. Even with a high discount > (like 90

Re: Arista Routing Solutions

2016-04-24 Thread Colton Conor
Saku, I guess you are right the QFX10002-36Q is probably a better comparison. But let's be honest, Juniper is not going to sell a QFX10002-36Q for less than $20k like Arista will do for a semi- similar box. Even with a high discount (like 90 percent off list), the Juniper QFX10002-36Q at $360k lis

RE: Arista Routing Solutions

2016-04-24 Thread Keith Medcalf
Got it, thanks for the explanation! > -Original Message- > From: Saku Ytti [mailto:s...@ytti.fi] > Sent: Sunday, 24 April, 2016 11:03 > To: Keith Medcalf > Cc: nanog list > Subject: Re: Arista Routing Solutions > > On 24 April 2016 at 05:14, Keith Medcalf wrote: > > > High Touch / Low To

Re: Arista Routing Solutions

2016-04-24 Thread Saku Ytti
On 24 April 2016 at 05:14, Keith Medcalf wrote: > High Touch / Low Touch High touch means very general purpose NPU, with off-chip memory. Low touch means usually ASIC or otherwise simplified pipeline and on-chip memory. Granted Jericho can support off-chip memory too. L3 switches are canonical

RE: Arista Routing Solutions

2016-04-24 Thread Keith Medcalf
High Touch / Low Touch Is this a measure of the amount of fiddle diddling required to get the chip to work as documented, or is it some other kind of code? For example a "High Touch" chip needs lots of fiddle farting because it was designed by a moron and every possible thing that can be progr