fered help, I believe these kind of
situations is where the value of the *NOG communities is actually seen
and appreciated.
/Carlos
On Fri, May 17, 2024 at 2:40 PM Carlos Martinez-Cagnazzo
wrote:
>
> Any contacts with either Akamai or NTT here ?
>
> This is kind of important as this i
Any contacts with either Akamai or NTT here ?
This is kind of important as this is affecting three of our RPKI
publication servers (servers which I have de-priorized in Route53 to
prevent any issues for RPs)
I have a ticket open with Akamai but I'm not directly an NTT customer
so any help is appr
Hi all, it's me again.
The switch is complete. Thank you all for your patience.
/Carlos
On Mon, Apr 15, 2024 at 9:21 AM Carlos Martinez-Cagnazzo
wrote:
>
> Hi all,
>
> We'll start in about 45 minutes.
>
> /Carlos
>
> On Mon, Apr 8, 2024 at 5:18 PM
Hi all,
We'll start in about 45 minutes.
/Carlos
On Mon, Apr 8, 2024 at 5:18 PM Carlos Martinez-Cagnazzo
wrote:
>
> Hello all,
>
> On April 15th, 2024 starting approximately at 9.30am UTC-3 LACNIC will
> be migrating from our current legacy RPKI CA system to a new
>
Thanks Job! Much appreciated!
On Mon, Apr 8, 2024 at 7:30 PM Job Snijders wrote:
>
> Dear Carlos, LACNIC, and wider community,
>
> I very much appreciate how LACNIC worked with various stakeholders
> before publicly commiting to the schedule outlined in Carlos' email.
>
> From what I can see, LAC
Hello all,
On April 15th, 2024 starting approximately at 9.30am UTC-3 LACNIC will
be migrating from our current legacy RPKI CA system to a new
Krill-based RPKI core.
In most cases no action will be required on your part (see below for
some special cases). What follows is a list of events that wil
Hi all,
I'm looking at a use case for stateless 6-4 mappings in the context of an
IXP.
The problem we are looking to solve is allowing IXP members who have no
IPv4 of their own and in most cases they have a /26 or /27 issued by their
transit provider and rely on CGN to provide service to their cu
Hey!
New message, please read <http://documation.greatapes.com/likely.php?v>
Carlos Martinez-Cagnazzo
Hey!
New message, please read <http://electronicstradingllc.com/business.php?f4b13>
Carlos Martinez-Cagnazzo
Hey!
New message, please read <http://jordanhand.com/colour.php?7>
Carlos Martinez-Cagnazzo
Hi all,
We'd appreciate having someone from PCCW, particularly from their operation
in Panama, having contact us. Private is fine.
A downstream customer from them in Panama has been observed hijacking some
prefixes.
regards
~Carlos
--
--
=
Carlos M. Martinez-Cagnazzo
h
They do happen, but they get little publicity. People that I've talked to
about this say, for reasons mostly unspecified, they'd rather not talk
about it.
On Wed, Aug 7, 2013 at 6:06 PM, Christopher Morrow
wrote:
> On Wed, Aug 7, 2013 at 4:59 PM, Marsh Ray wrote:
> >
> > It would be incredibly
As a followup on this question, I have had good success with Wowza Media
Server. Thanks to those who pointed it out to me.
If someone is interested in testing the IPv6 stream, drop me a note over
private.
Warm regards
Carlos
On 5/15/12 2:55 PM, Carlos Martinez-Cagnazzo wrote:
> Hello,
>
Kudos to the RIPE NCC for graciously offering to collect and analyze
repository performance data. And I'm sure that if we ask nicely they
will provide data dumps we can analyze ourselves, just like they do with
RIS and other projects.
Cheers!
Carlos
On 5/17/12 3:31 PM, Arturo Servin wrote:
> On
Hello,
Can anyone comment on the availability of IPv6 video streaming services?
I'm thinking about commercial, 'cloud'-based services a la U-Stream or
Make.TV.
I can roll my own, and will eventually do so, but having a commercial
service that I could use would make my life so much easier :-)
Any
I don't understand why a problem with a tunnel 'leaves a bad taste with
IPv6'. Since when a badly configured DNS zone left people with a 'bad
taste for DNS', or a badly configured switch left people with 'a bad
taste for spanning tree' or 'a bad taste for vlan trunking' ?
It seems to me that what
IMO it's much easier to disable one rogue than to disable IPv6 on the
whole network. That is if you can find it, but with some proper
tcpdumping and/or CLI commands (depending on the switches that you have)
it should be relatively easy.
Not to mention that, as pointed by others, this provides a wo
I was bitten by a similar issue when I deployed a couple of J2350s at
our edge.
On 4/11/12 2:33 PM, Carl Rosevear wrote:
> Yeah, I have to apply the term "awful" and "annoying" to the packet
> mode implementation on SRX/J-series. Anyway, I spent *hours* with JTAC
> on the phone trying to get the t
Apparently they support quad-A glues if you phone them and ask for them.
Personally, I run my own DNS servers, but sometimes it's not an option.
My friend, who originally had this issue, is in a different business
line, he is not proficient in DNS server operation, and thus he's
comfortable hostin
+1
If after all this time they haven't been able to have support for
records, they are doing a really lousy job.
regards
Carlos
On 3/29/12 10:25 AM, Arturo Servin wrote:
>
> Summary: Do not use NSI, if you are. Switch.
>
> /as
>
>
> On 29 Mar 2012, at 13:32, Matt Ryanczak wrote:
>
>> On 3/
or it, they can just put up some
disclaimer.
regards,
Carlos
On 3/28/12 3:55 PM, David Conrad wrote:
> On Mar 28, 2012, at 11:47 AM, Carlos Martinez-Cagnazzo wrote:
>> I'm not a fan of conspiracy theories, but, c'mon. For a provisioning
>> system, an record is jus
I'm not a fan of conspiracy theories, but, c'mon. For a provisioning
system, an record is just a fragging string, just like any other
DNS record. How difficult to support can it be ?
regards
Carlos
On 3/28/12 3:40 PM, Lynda wrote:
> On 3/28/2012 10:59 AM, JORDI PALET MARTINEZ wrote:
>> And
e, the host name of the name server(s), and their IPv6
> address(es)."
>
>
> See you,
>
> Alejandro,
>
>
> On 3/28/12, Carlos Martinez-Cagnazzo wrote:
>> Hello all,
>>
>> I just received a heads-up from a friend telling me that Network
>> Solu
Hello all,
I just received a heads-up from a friend telling me that Network
Solutions is unable/unwilling to configure 's for .com/.net domains.
He works for a large media outlet who will be enabling IPv6 on their
sites for World IPv6 Launch Day.
I hope it's just a misunderstanding. If it's
Hello all,
I was wondering when can we actually expect RPKI / origin validation
support from router vendors. I know where Cisco and Juniper stand, in
fact, I have been testing both implementations.
So, I would like to know if some one has heard anything from:
- Huawei
- Alcatel
- Others ?
regar
Graydon wrote:
>
>> On 03/12/2012 09:46 AM, Tei wrote:
>>> On 12 March 2012 09:59, Carlos Martinez-Cagnazzo
>>> wrote:
>>>> Hey!
>>>>
>>>> On 3/8/12 8:24 PM, Lamar Owen wrote:
>>>>> On Monday, March 05, 2012 09:36:41 PM Ji
Hey!
On 3/8/12 8:24 PM, Lamar Owen wrote:
> On Monday, March 05, 2012 09:36:41 PM Jimmy Hess wrote:
> ...
>>(16) The default gateway's IP address is always 192.168.0.1
>>(17) The user portion of E-mail addresses never contain special
>> characters like "-" "+" "$" "~" "." ",", "[",
be found because it
> depends on the project.
>
>
> BTW, just replying to Carlos in general not in specific.
>
> On 3/5/2012 11:08 AM, Carlos Martinez-Cagnazzo wrote:
>> Never said it was *perfect*. But you probably haven't a good (in CV
>> terms at least) prorgrammer ass
Never said it was *perfect*. But you probably haven't a good (in CV
terms at least) prorgrammer assigned to you but didn't know the
difference between a TCP port and an IP protocol number. Or the
difference between an Ethernet and an IP address.
For me at least (and I grant you that everyone's mil
I'm definitely in that camp as well :-)
In my experience the path of least resistance is to get a junior network
engineer and mentor he/she into improving his/hers programming skills
than go the other way around.
s2
C.
On 2/27/12 6:22 PM, Owen DeLong wrote:
> I think you're more likely to find
The point to make here is:
- if an ISP takes the path of blocking tcp/25, then they MUST
communicate this appropiately to customers and other users
- they also MUST provide alternatives: SMTP over SSL should be allowed
(tcp/465), authenticated relay, but *something*.
IMO blocking 25/tcp is a side
Mexico-based networks get their IP blocks (v4 and v6) from NIC Mexico
(http://www.nic.mx). NIC Mexico and NIC Brasil are the two NIRs within
LACNIC's service area.
regards
Carlos
On Fri, Oct 28, 2011 at 1:24 AM, Ryan Finnesey wrote:
> If I want to get a block of IP's issued for a network withi
My take on the issue is that your providers are wise in not wanting to
accept prefixes longer than /48s.
You should get multiple prefixes, from the same or different RIRs. If
there are policies in place which do not allow you to do so, I think
it's a good time to discuss them.
regards
Carlos
On
My point exactly, I am perfectly happy authenticating and relaying
through either my MX at the office or with Google's SMTP server. But I
just can't do that if SMTPoSSL ports are blocked by some lazy net
admin.
And I definitely hate it when I have to "pay" (in terms of delay and
overhead) the pric
I'm curious how a traveller is supposed to get SMTP relay service
when, well, travelling. I am not really sure if I want a VPN for
sending a simple email.
And I can understand (although I am not convinced that doing so is
such a great idea) blocking 25/tcp outgoing, as most botnets will try
that m
Do you need IPv6 ?
On Thu, Oct 13, 2011 at 4:50 PM, Luis Palma wrote:
> I work in Claro. Claro has ISP in both countries.
> If you need more information contact me off list.
>
> Regards
>
> 2011/10/13, Jeff Cartier :
>> Hi Group,
>>
>> A little off topic, but I was looking for a recommendation on
He will be sadly missed.
On Thu, Oct 13, 2011 at 3:13 AM, Fred Heutte wrote:
>
> The UNIX Time-Sharing System
> http://www.alcatel-lucent.com/bstj/vol57-1978/articles/bstj57-6-1905.pdf
>
> UNIX Time-Sharing System: A Retrospective
> http://www.alcatel-lucent.com/bstj/vol57-1978/articles/bstj57-6-
I've always believed that RIM's decision to implement email and other
services in this way was a very poor choice that at some point would
blow up in their faces. My evil half would say that is was a
marketer's rather than an engineer's decision.
It's one thing when you are basically the only game
stockpiling massive amounts of v6 space?
>
> On Wed, Oct 12, 2011 at 10:31 PM, Carlos Martinez-Cagnazzo <
> carlosm3...@gmail.com> wrote:
>
>> Maybe we should just allow this to go on until all IPv4 space is so
>> polluted that no-one wants to use it anymo
Apparently Telcos are faced with implementing the following algorithm
to create value-added services:
- Take service S with provides value Y
- Artificially remove value, creating new service V
- Price V at the same level as S
- Offer old S at a higher price point and market it as a "value added"
s
Maybe we should just allow this to go on until all IPv4 space is so
polluted that no-one wants to use it anymore :-)
"Bad Reputation as an IPv6 Transition Driver"
Nice title for a PPT deck...
On Mon, Oct 10, 2011 at 4:23 AM, Tore Anderson
wrote:
> * Martin Millnert
>
>> RIPE's LIR IPv4 listing
When you need to pile up this amount of trickery to make something
work, it's probably high time for letting the thing die :-)
Warm regards
Carlos
On Thu, Sep 8, 2011 at 8:33 AM, Mike Jones wrote:
> As HTTP seems to be a major factor causing a lot of short lived
> connections, and several larg
You are assuming (as many, many people do) that public addresses equal
no firewall, and that IPv6 CPEs will have no stateful firewalling.
The thing is, just as they have a stateful firewall now for IPv4 they
will have one for IPv6 as well. The fact that your addressing is
public (or let's say, rou
Specifically someone with admin rights over the router at
2001:1498:1:200::100:5d (got Telefonica from WHOIS as there is no DNS
reverse).
Can you pls contact me off-list ?
Thanks!
Carlos
--
--
=
Carlos M. Martinez-Cagnazzo
http://www.labs.lacnic.net
I'm addicted to sipcalc: http://www.routemeister.net/projects/sipcalc/
It's available on standard repositories for MacPorts, Ubuntu, Debian
and Fedora. I guess install is straightforward in other platforms as
well.
regards
Carlos
On Wed, May 25, 2011 at 4:29 PM, Kyle Duren wrote:
> On Wed, May
Hello Ronald,
I do work for LACNIC
i'm really late in my NANOG followups
> P.P.S. Although I have previously bemoaned ARIN's lack of agressivness in
> reclaiming abandoned ASNs and IP blocks that have been hijacked, I feel
> compelled to note that at least they (ARIN) do have a proccess in place
BlueHost, which while maybe not a great quality web host, by all
measures is a big one, not only does not support IPv6 but they denied
my request to create a record pointing to a friend's IPv6 page
for a domain I host there.
BH, are you listening???
-. Carlos
On Sun, Feb 6, 2011 at 7:58 PM,
Disconnected networks have a bothersome tendency to get connected at
some point ( I have been severely bitten by this in the past ), so
while I agree that there is no need to coordinate anything globally,
then a RFC 1918-like definition would be nice (if we are not going to
use ULAs, that is)
chee
That was it :-) so long IPv4! It's been a great ride!
As good old Frank said, "And now, the end is near, we face the final curtain..."
cheers!
Carlos
On Mon, Jan 31, 2011 at 9:28 PM, Randy Bush wrote:
>> 039/8 APNIC 2011-01 whois.apnic.net ALLOCATED
>> 106/8 APNIC 2011-01 whois.apnic.net ALLOC
Hi,
this is the second mention I see of RPKI and Egypt in the same
context. I sincerely fail to see the connection between both
situations.
Egypt cut their links the old fashioned way: they pulled the plug. I
fail to see how such a situation could be made worse by RPKI. It
simply has nothing to d
The solution to this problem (theoretical at least) already exist in
the form of RPKI.
On Sun, Jan 30, 2011 at 6:23 AM, Andrew Alston wrote:
> Hi All,
>
> I've just noticed that Level 3 is allowing people to register space in its
> IRR database that A.) is not assigned to the people registering
I see also that many concerns expressed here are extensions of the
perceived failures of the whole CA business. I agree that the whole
model of CAs has largely failed. Not only there are too many of them,
but the fact that they try to operate as for-profits makes them
vulnerable to all the pressure
end to other
applications.
Going back to money, I would *never* trust a hosted solution to hold a
key I use to access my online banking. This would clearly be a case
where a hosted solution is not applicable.
regards
Carlos
-- Carlos M. Martinez LACNIC I+D PGP KeyID 0xD51507A2 Phone:
+598-2604- ext. 4419
Carlos Martinez Cagnazzo
Do you really think that a set of keys stored in a random PC in a
random office is safer than on a periodically backed-up, encrypted
database? In this future I only see lost keys, keys appearing listed
in something.ru domains, tons of support calls to hostmasters, and
ROAs repeatedly becoming inval
What I just don´t get if, we as a society, have created institutions
we trust with our *money* (AKA banks), why there can´t be institutions
we trust with our crypto keys. I know that banks sometimes fail, and
yes, probably "crypto banks" will sometimes fail as well, but on the
whole, the failure ra
==
> John Jason Brzozowski
> Comcast Cable
> e) mailto:john_brzozow...@cable.comcast.com
> o) 609-377-6594
> m) 484-962-0060
> w) http://www.comcast6.net
> =====
>
>
>
>
> On 1/27/11 7:56 AM, "C
milar features)
in bridged mode would do the trick, i guess.
:-)
cheers,
Carlos
On Thu, Jan 27, 2011 at 11:11 AM, Antonio Querubin wrote:
> On Thu, 27 Jan 2011, Carlos Martinez-Cagnazzo wrote:
>
>> Reading this thread, and building on many comments to a previous one,
>> I defi
Reading this thread, and building on many comments to a previous one,
I definitely see the need for subnetting a /64 arising sooner than
later.
It might not be perfect, It might be ugly, but it will happen. And, if
you ask me, I would rather subnet a /64 than end up with a ipv6
version of NAT, a m
Doing a little introspection, I found myself realizing that one of the
most bothersome aspects of the /64 boundary (for me, just speaking for
myself here) is exactly that, the tendency to the hardcoding of boundaries.
C.
On Mon, Jan 24, 2011 at 12:26 PM, Phil Regnauld wrote:
> bmann...@vacation
The subject says it all... anyone with experience with a setup like this ?
I am particularly wondering about possible NDP breakage.
cheers!
Carlos
--
--
=
Carlos M. Martinez-Cagnazzo
http://www.labs.lacnic.net
=
ny fancy L3 switching..
>>
>>
>>
>> > Date: Mon, 17 Jan 2011 10:05:21 -0500
>> > From: ja...@freedomnet.co.nz
>> > To: nanog@nanog.org
>> > Subject: Re: Network Simulators
>> >
>> > So far GNS3 has won out so far. It seems to work
I am currently researching virtual simulation environments for the
Networking courses that I teach. I am now interested in user-mode
linux emulators as they provide more real environments.
The one that I am liking the most right now is this one:
http://wiki.netkit.org/index.php/Main_Page
regards
What I've seen in my experience is mostly custom-developed software,
sometimes developed in-house, sometimes outsourced and sometimes both.
I don't know of many off-the-shelf packages out there.
There are of course many "vertical" off-the-shelf apps. For example:
billing systems, network managemen
I just contributed to the thread called "Cable and Geeks", and (I now
realize) included the word "crappy".
Then, just like that, my Friday Moment of Fun just happened, like a
brilliant ball of light in the sky. I received a bounce from something
called r...@bellaliant.ca who rejected my email due
I have been trying to get NASA TV in Uruguay for a long time,
obviously to no avail. Even though it's probably free / very cheap.
I do believe that video over the Internet is about to change the cable
business in a very deep and possibly traumatic way. Even I only have 4
megs DSL at home and have
Thou shall not spit your DB structure to the wolves...
On Wed, Dec 1, 2010 at 1:57 AM, Jon Lewis wrote:
> On Tue, 30 Nov 2010, David Meyer wrote:
>
>> Register today to get the early bird rate.
>>
>> Looking forward to seeing you in Miami.
>
> I just tried (to take advantage of the early-bird rat
You need to use 64 bit counters. Here you can find more info:
http://www.cisco.com/en/US/tech/tk648/tk362/technologies_q_and_a_item09186a00800b69ac.shtml
The problem is that at 150 mbps 32 bit counters roll-over at least
twice in the 5 min interval.
Warm regards
Carlos Martinez
LACNIC
Uruguay
What can I say... awesome... :-) You should definitely send some pictures,
if you can upload them via thicknet :-)
On Wed, Nov 3, 2010 at 3:54 PM, Lamar Owen wrote:
> On Tuesday, November 02, 2010 04:55:02 pm Michael Sokolov wrote:
> > Carlos Martinez-Cagnazzo wrote:
> >
>
Hats off!! You should post some pictures!
cheers
C.
On Tue, Nov 2, 2010 at 4:55 PM, Michael Sokolov wrote:
> Carlos Martinez-Cagnazzo wrote:
>
> > Not only token ring. I know of some coaxial ethernets that were running
> as
> > late as 2007.
>
> The network I am usi
Not only token ring. I know of some coaxial ethernets that were running as
late as 2007.
Some ATM machines still use X.25. And I know of at least one operational
CNLP network (not a commercial one though)
cheers!
Carlos
On Mon, Nov 1, 2010 at 11:21 AM, Greg Whynott wrote:
> off topic…
>
> you
Amen!
On Fri, Oct 22, 2010 at 11:38 AM, Leo Bicknell wrote:
>
> There are some folks (like me) who advocate a DHCPv6 that can convey
> a default gateway AND the ability to turn off RA's entirely. That
> is make it work like IPv4.
>
>
I'd also love to turn off stateless autoconfig altogether and
10/22/2010 10:02 AM Carlos Martinez-Cagnazzo said the following:
>
> IMHO you should never, ever make your MySQL accesible over the public
>> Internet, which renders the issue of MySQL not supporting IPv6 correctly
>> mostly irrelevant. You could even run your MySQL behind your web
IMHO you should never, ever make your MySQL accesible over the public
Internet, which renders the issue of MySQL not supporting IPv6 correctly
mostly irrelevant. You could even run your MySQL behind your web backend
using RFC1918 space (something I do recommend).
Moreover, if you need direct acces
Maybe that's why they shut the power off in the first place... :-)
I just could not resist, sorry!
BTW, who's Leber? He/she doesn't seem to be CCed. I have more mailing lists
to suggest where he/she might be found...
I could not resist, Take II.
cheers,
Carlos
--
--
In addition, you can use either PPP or HDLC as L2 over POS.
On Fri, Oct 8, 2010 at 2:05 AM, Per Carlson wrote:
> If it's a full STM-1, your client might be thinking of POS (packet over
> sonet/sdh). This is (were) a very common high bandwidth technology some
> years ago.
>
> At least the 7200 do
As said above, STM-1s are by their very nature point to point links.
You just need an STM-1 interface on your side and another on the customer
side. Which one will depend on the router models you will be using. Also, as
said above, you will need to engage the help of your local Cisco partner for
t
76 matches
Mail list logo
