Re: Reliable GeoIP database

2025-02-03 Thread Niels Bakker
* qm...@top-consulting.net (Scott Q.) [Mon 03 Feb 2025, 12:18 CET]: What are you guys using as a reliable GeoIP database ? I've tried Maxmind and a few others, also checking against ARIN but there's tons of differences. For example: 1.2.9.0/24 . ARIN says it belongs to China Telecom but other

Re: Route optimization using GPUs?

2024-12-06 Thread Niels Bakker
* r...@rkhtech.org (Ryan Hamel) [Fri 06 Dec 2024, 18:46 CET]: William, Exactly! An example below is where operators/orgs do not have the funds for a full table router deployment and gather top talkers from sFlow, which says what routes are to be installed in TCAM, instead of hitting a default

Re: Route optimization using GPUs?

2024-12-05 Thread Niels Bakker
* na...@ics-il.net (Mike Hammett) [Thu 05 Dec 2024, 21:32 CET]: Not by the box, but by the operator of the box. We've been over this numerous times around the time when that Honest Networker page in my email was created. Noction ship their boxes with insanely dangerous defaults that are bound

Re: Route optimization using GPUs?

2024-12-05 Thread Niels Bakker
* na...@ics-il.net (Mike Hammett) [Thu 05 Dec 2024, 21:18 CET]: Eh, different people have different opinions. I think most of the hatred towards them is unwarranted, You speak like a person whose prefixes were never hijacked and blackholed by one of those things. https://honestnetworker.net

Re: Implementing Decentralized RPKI with Blockchain Technology

2024-11-18 Thread Niels Bakker
* na...@as397444.net (Matt Corallo) [Sun 17 Nov 2024, 20:44 CET]: Apologies if it came across as insulting, indeed I wasn't spending my time reading IETF mailing lists in the early 2010s :). That said, the reality today is that RPKI trust anchors are perfectly capable of (through malice or cybe

Re: Implementing Decentralized RPKI with Blockchain Technology

2024-11-18 Thread Niels Bakker
* na...@as397444.net (Matt Corallo) [Sun 17 Nov 2024, 20:41 CET]: Fair enough. I suppose I wasn't reading the right corner of the internet to find it. Either way there's basically no mitigations in place for these issues today, so hand wringing or not, nothing came of it. I'm not sure what

Re: Can an IXP sell IP transit?

2024-11-16 Thread Niels Bakker
* mark@tinka.africa (Mark Tinka) [Sat 16 Nov 2024, 02:53 CET]: The original intention for route servers is to simplify turn-up for the majority of networks, most of whom will be eyeball-focused. They did offer cloud & content folk utility as they quickly ramped up their CDN deployments globall

Re: Can an IXP sell IP transit?

2024-11-07 Thread Niels Bakker
* mark@tinka.africa (Mark Tinka) [Thu 07 Nov 2024, 19:25 CET]: The paradigm shift happening in the content/cloud space is that the "quick win value" eyeball networks enjoy from peering with the route server to reach them does not appear to continue to be worth the admin. effort for said content

Re: is it common to proxy register route objects for the purpose of grouping them for use in an as-set

2024-09-26 Thread Niels Bakker
* s...@internet2.edu (Steven Wallace) [Thu 26 Sep 2024, 18:36 CEST]: One of the DDoS mitigation providers we work with creates proxy route objects for its customers’ prefixes. These route objects specify a common origin ASN rather than the actual origin ASN that would be seen in routing tables.

Re: Any ideas how long gmail cache DNS records ?

2024-08-13 Thread Niels Bakker
* Laura Smith [Tue 13 Aug 2024, 17:39 CEST]: For the benefit of the list, I received a couple of off-list tip-offs to the link that Chrstopher suggested. I was a bit cynical as I assumed the tool would only have effect on Google's external caches (i.e. 8.8.8.8). The form was failing on Captc

Re: eero outage

2024-07-10 Thread Niels Bakker
* war...@kumari.net (Warren Kumari) [Wed 10 Jul 2024, 23:03 CEST]: More seriously, erm, you mean Eero like the wireless devices? Aren't they supposed to be mesh wifi thingies, and so traffic is local? Like, if eero.com / an eero service goes down, well, … ¯\_(ツ)_/¯? From what I can tell from r

Re: DNSSEC & WIldcards

2024-03-15 Thread Niels Bakker
* nanog@nanog.org (Dennis Burgess via NANOG) [Fri 15 Mar 2024, 16:26 CET]: So have *.app.linktechs.net that I have been trying to get to work, we have DNSSEC on this, and its failing, but cannot for the life of me understand why. I think it may have something to do with proving it exists as a

Re: options for whois server

2024-02-12 Thread Niels Bakker
* shan...@more.net (Spurling, Shannon) [Mon 12 Feb 2024, 20:06 CET]: Anyone out there who has to run an whois or rWhois service know of a currently maintained server package or option? https://github.com/irrdnet/irrd4 -- Niels.

Re: Networks ignoring prepends?

2024-01-23 Thread Niels Bakker
* b...@herrin.us (William Herrin) [Tue 23 Jan 2024, 21:02 CET]: On Tue, Jan 23, 2024 at 11:45 AM Owen DeLong via NANOG wrote: The catch to all of that, however, is that he’s not directly peered with 3356 and many AS operators strip communities. And even if I didn't, the problem isn't just one

Re: Networks ignoring prepends?

2024-01-23 Thread Niels Bakker
* nanog@nanog.org (Owen DeLong via NANOG) [Tue 23 Jan 2024, 20:47 CET]: The catch to all of that, however, is that he’s not directly peered with 3356 and many AS operators strip communities. Are there recent statistics on that last assertion? -- Niels.

Re: Networks ignoring prepends?

2024-01-22 Thread Niels Bakker
* b...@herrin.us (William Herrin) [Mon 22 Jan 2024, 15:05 CET]: On Mon, Jan 22, 2024 at 5:24 AM Patrick W. Gilmore wrote: Standard practice is to localpref your customers up, which makes prepends irrelevant. Why would anyone expect different behavior? It gives me, your paying customer, less c

Re: Burn Rate? Re: 202401100645.AYC Re: IPv4 address block

2024-01-13 Thread Niels Bakker
* ayc...@avinta.com (Abraham Y. Chen) [Sat 13 Jan 2024, 18:16 CET]: 0)    Your sender name is in an unusual format. It becomes just the generic NANOG address as the recipient for me to MSG send to. Your numbered lists are 0-indexed. So clever! Also, your MUA seems to understand Mail-Followup-T

Re: Burn Rate? Re: 202401100645.AYC Re: IPv4 address block

2024-01-12 Thread Niels Bakker
* ayc...@avinta.com (Abraham Y. Chen) [Fri 12 Jan 2024, 13:09 CET]:     EzIP proposes that 240/4 be used like 10.64/10 in CG-NAT. which is reusable for each isolated geographical area. Thus, there is no "Burn-rate" to talk about. You have posted this statement like five times now in the past t

Re: ipv6 address management - documentation

2023-11-16 Thread Niels Bakker
* aar...@gvtc.com (Aaron Gould) [Thu 16 Nov 2023, 19:04 CET]: For years I've used an MS Excel spreadsheet to manage my IPv4 addresses.  IPv6 is going to be maddening to manage in a spreadsheet.  What does everyone use for their IPv6 address prefix management and documentation?  Are there open

Re: Your Input Needed: Can ROA Replace LOA? – Short Survey (7 mins)

2023-11-16 Thread Niels Bakker
Hi Christopher, No. Why would your survey take an additional 6.5 minutes to fill out? -- Niels. * ch...@thesysadmin.dev (Christopher Hawker) [Thu 16 Nov 2023, 15:20 CET]: Hello everyone, Aftab Siddiqui is currently exploring the possibility of using Route Object Authorisations (ROA

Re: Strange IPSEC traffic

2023-11-14 Thread Niels Bakker
* Shawn L [Mon 13 Nov 2023, 18:12 CET]: Is anyone else seeing a lot of 'strange' IPSEC traffic? This mail server running FreeBSD did: (timestamps in CET, UTC+1) Nov 10 00:58:55 mailserver kernel: ipsec_common_input: no key association found for SA 77.174.253.13/77b4/50 Nov 10 01:26:09 mai

Re: ARIN whois contact abuse from ipv4depot aka Silicon Desert International Inc

2023-10-12 Thread Niels Bakker
* Laura Smith [Thu 12 Oct 2023, 19:01 CEST]: I mean, most (all ?) of the registries still can't be bothered to validate the information the resource holders post to the database.  Last time I asked, e.g. RIPE about it, they basically said "not my problem guv" , pointed me to some policy documen

Re: Using RFC1918 on Global table as Loopbacks

2023-10-05 Thread Niels Bakker
* gutierr...@westmancom.com (Javier Gutierrez) [Thu 05 Oct 2023, 19:25 CEST]: I have recently encountered some operational differences at my new organization that are not what I have been exposed to before, where the loopback of the core network devices is being set from RFC1918 while on the gl

Re: AFRINIC placed in receivership

2023-09-15 Thread Niels Bakker
* nanog@nanog.org (Owen DeLong via NANOG) [Fri 15 Sep 2023, 19:26 CEST]: On Sep 15, 2023, at 06:30, Noah wrote: On Fri, 15 Sept 2023, 15:53 John Curran, wrote: Indeed, that was a less than ideal situation – but I will note that the technical advisor was sent away by the Receiver once the Rec

Re: NTP Sync Issue Across Tata (Europe)

2023-08-06 Thread Niels Bakker
* m...@beckman.org (Mel Beckman) [Sun 06 Aug 2023, 04:26 CEST]: if you can eliminate such security problems for $400, I say it’s cheap at twice the price. You must be unfamiliar with the prices neutral colocation facilities charge for roof access. -- Niels.

Re: malware warning

2023-07-22 Thread Niels Bakker
* b...@uu3.net (b...@uu3.net) [Sat 22 Jul 2023, 10:24 CEST]: The only interesting action I ever saw was: "Shutting down email spam factory"; where some network was depeered from internet completly. Well done. (Somehow I cannot find post about that anymore). AGIS: https://en.wikipedia.org/wiki

Re: BKA Wiesbaden - Abteilung Cybercrime (Not sure if this is a phishing E-mail or real...)

2023-04-24 Thread Niels Bakker
* na...@ve4.ca (Glen A. Pearce) [Mon 24 Apr 2023, 17:42 CEST]: Well, I eventually had a friend open the attachment on his Linux machine Not necessarily a safe idea: https://www.welivesecurity.com/2023/04/20/linux-malware-strengthens-links-lazarus-3cx-supply-chain-attack/ (scroll down to "Ope

Re: Flow Tools AS-Path

2023-04-04 Thread Niels Bakker
* na...@ics-il.net (Mike Hammett) [Tue 04 Apr 2023, 15:06 CEST]: 1) How common is it to have the additional extensions to include that data for analysis? pmacct is a commonly used tool to enrich flow data with such information. -- Niels.

Re: Issues with prefix / help needed

2023-03-27 Thread Niels Bakker
* charles.li...@camonson.com (Charles Monson) [Mon 27 Mar 2023, 16:31 CEST]: On Mon, Mar 27, 2023 at 9:05 AM Kevin McCormick wrote: IRR Explorer is showing RPKI-Invalid. Maybe RPKI is causing the issue or there is an issue with IRR Explorer? https://irrexplorer.nlnog.net/prefix/86.104.228.0/24

Re: AKAMAI CDN

2023-01-12 Thread Niels Bakker
I can put you in touch with your account manager, what's your ASN? -- Niels. * pascalma...@gmail.com (Pascal Masha) [Thu 12 Jan 2023, 12:21 CET]: Hello, Anyone from Akamai responsible for making decisions on cluster scaling /refresh here? Kindly contact me offlist. Regards Paschal

Re: Akamai Contact/Issues

2022-09-27 Thread Niels Bakker
* t...@visnetworkrd.com (George Toma) [Tue 27 Sep 2022, 17:14 CEST]: Jared I would be also interested in what you said in reply to Dustin Brooks about Akamai contact as in the past we have experienced similar problem, and trying to resolve it with the Akamai EdgeScape support we ran into a st

Re: ARIN RPKI services terms/conditions - Change to Management of the Trust Anchor Locator for ARIN’s RPKI Service

2022-09-27 Thread Niels Bakker
* jcur...@arin.net (John Curran) [Tue 27 Sep 2022, 13:26 CEST]: Yes: the intent is that an RP validator may ship and use the ARIN TAL by default. If that is not clear in the revised RPA, then the RPA agreement will updated again for clarity. I feel like you're just gaslighting us at this poin

Re: Normal ARIN registration service fees for LRSA entrants after 31 Dec 2023 (was: Fwd: [arin-announce] Availability of the Legacy Fee Cap for New LRSA Entrants Ending as of 31 December 2023)

2022-09-18 Thread Niels Bakker
* nanog@nanog.org (Owen DeLong via NANOG) [Sun 18 Sep 2022, 19:53 CEST]: I highly recommend that legacy holders who wish to ensure that their rights are respected transfer their registrations to RIPE-NCC, whether they have signed the LRSA or not. Would you say that in hindsight you would have

Re: Normal ARIN registration service fees for LRSA entrants after 31 Dec 2023

2022-09-16 Thread Niels Bakker
* b...@herrin.us (William Herrin) [Fri 16 Sep 2022, 22:58 CEST]: [..] * ARIN will not record a transfer of a legacy resource to another registrant absent ARIN's current approved contracts. RIPE NCC, however, will facilitate this. If you as a legacy resource holder in the RIPE NCC service regio

Re: VZ FIOS and Intel TCP IPv6 Checksum Offload problems

2022-08-29 Thread Niels Bakker
* br...@2mbit.com (Brie) [Mon 29 Aug 2022, 19:38 CEST]: On 8/29/22 10:59 AM, Christopher Morrow wrote: Uhm, this includes various versions of the intel pro 1000 card... so that's a TON of gear, to include like lenovo laptops, for instance. I'd wager that this is super common in the field. The

Re: U.S. Court PACER system overloaded by public interest

2022-08-26 Thread Niels Bakker
* amitch...@isipp.com (Anne Mitchell) [Fri 26 Aug 2022, 20:36 CEST]: For anyone wanting the document and unable to get it through Pacer, we have it locally and I'm happy to make it available, just let me know. By now it's so widely available that even DuckDuckGo can find it for you. Not reade

Re: IPv6 internet broken, cogent/telia/hurricane not peering

2022-08-11 Thread Niels Bakker
* volki...@gmail.com (VOLKAN KIRIK) [Thu 11 Aug 2022, 15:52 CEST]: hello You're replying to a thread from 2009. Please advise. -- Niels.

Re: Rogers Outage Canada

2022-07-11 Thread Niels Bakker
* vic...@jvknet.com (Victor Kuarsingh) [Mon 11 Jul 2022, 17:17 CEST]: This is the most they can and will say. For liabilities reasons, specifics are likely not in the cards. I doubt it. Given that emergency services were impacted you can count on a proper assessment being made available to a

Re: irrd or ...?

2022-06-18 Thread Niels Bakker
* ra...@psg.com (Randy Bush) [Sat 18 Jun 2022, 19:39 CEST]: i have been running irrd for some years. am about to dump that (virtual) server and move from freebsd to bullseye. is there anything more modern, and _simpler_, than irrd at which i should take a look? What are you running irrd for

Re: Upstream bandwidth usage

2022-06-09 Thread Niels Bakker
* m...@mtcc.com (Michael Thomas) [Thu 09 Jun 2022, 22:46 CEST]: If it's so tiny, why shape it aggressively? Why shouldn't I be able to burst to whatever is available at the moment? I would think most users would be happy with that. As SBC Global's peering policy roughly two decades ago stated,

Re: Question re prevention of enumeration with DNSSEC (NSEC3, etc.)

2022-05-07 Thread Niels Bakker
* m...@beckman.org (Mel Beckman) [Sat 07 May 2022, 18:38 CEST]: I don’t think copyright can enter into it, by dint of the fact that registry data, being purely factual and publicly available, cannot be copyrighted. I'm not a lawyer nor pretend to be one on the internet but https://bitlaw.com/

Re: Gmail (thus Nanog) rejecting ipv6 email

2022-04-02 Thread Niels Bakker
* d...@prime.gushi.org (Dan Mahoney (Gushi)) [Sun 03 Apr 2022, 00:11 CEST]: I've been seeing a long thread about why ipv6 adoption isn't there yet. This is half a "paging someone with clue" post and half a "...really, guys?" Picard-facepalm post. I just (earlier this week) had to disable ipv

Re: PoE, Comcast Modems, and Service Outages

2022-03-29 Thread Niels Bakker
On Tue, Mar 29, 2022 at 11:21:28AM -0700, Aaron de Bruyn via NANOG wrote: When I said "yes", he said I needed to disable PoE because it messes with the Comcast modems and he can see "buildups" in his graphs that show power is "leaking" to the Comcast modem every 24 hours. This guy must have a

Re: Not Making Use of 240/4 NetBlock

2022-03-13 Thread Niels Bakker
* b...@theworld.com (b...@theworld.com) [Mon 14 Mar 2022, 00:31 CET]: Personally I'd rather hear from the RIRs regarding the value or not of making more IPv4 space such as 240/4 available. They're on the front lines of this. You've got your policy development process diagram upside down. The

Re: Anyone else seeing DNSSEC failures from EU Commission ? (european-union.europa.eu)

2021-12-08 Thread Niels Bakker
* darkde...@darkdevil.dk (Arne Jensen) [Wed 08 Dec 2021, 15:23 CET]: To me, that part of it also points towards a broken implementation at CloudFlare, letting a bogus (insecure) responses take effect anyway. Or they prefer allowing people to visit websites over punishing system administrators

Re: Salesforce issues

2021-11-25 Thread Niels Bakker
* esundb...@nitelusa.com (Erik Sundberg) [Wed 24 Nov 2021, 20:57 CET]: We are receiving latency complaints to Salesforce, anyone else seeing this? [...] dig force.com +short force.com sends an immediate HTTP redirect to www.force.com. You should look up that hostname instead, and ideally yo

Re: possible rsync validation dos vuln

2021-10-29 Thread Niels Bakker
* nanog@nanog.org (Jean St-Laurent via NANOG) [Fri 29 Oct 2021, 19:57 CEST]: The link doesn't work. 404 https://www.ncsc.nl/actueel/nieuws/2021/oktober/29/aanstaande-bekendm | X-Mailer: Microsoft Outlook 16.0 The posted link works fine here but your MUA mangled it so you'll have to do some m

Re: S.Korea broadband firm sues Netflix after traffic surge

2021-10-11 Thread Niels Bakker
* mark@tinka.africa (Mark Tinka) [Mon 11 Oct 2021, 17:18 CEST]: To be fair, Jane + Thatho don't care about video resolution. I don't think that's being entirely fair. Netflix in plenty places differentiates its subscriptions based partly on video resolution: https://help.netflix.com/en/node/2

Re: S.Korea broadband firm sues Netflix after traffic surge

2021-10-10 Thread Niels Bakker
* do...@dougbarton.us (Doug Barton) [Sun 10 Oct 2021, 23:44 CEST]: First, I'm not saying "should." I'm saying that given the market economics, having the content providers who use "a lot" of bandwidth do something to offset those costs to the ISPs might be the best/least bad option. Whether "so

Re: Disaster Recovery Process

2021-10-05 Thread Niels Bakker
* deles...@gmail.com (jim deleskie) [Tue 05 Oct 2021, 19:13 CEST]: World broke. Crazy $$ per hour down time. Doors open with a fire axe. Please stop spreading fake news. https://twitter.com/MikeIsaac/status/1445196576956162050 |need to issue a correction: the team dispatched to the Facebook

Re: Facebook post-mortems...

2021-10-05 Thread Niels Bakker
Ryan, thanks for sharing your data, it's unfortunate that it was seemingly misinterpreted by a few souls. * ryan.lan...@gmail.com (Ryan Landry) [Tue 05 Oct 2021, 17:52 CEST]: Niels, you are correct about my initial tweet, which I updated in later tweets to clarify with a hat tip to Will Hargra

Re: Facebook post-mortems...

2021-10-05 Thread Niels Bakker
* telescop...@gmail.com (Lou D) [Tue 05 Oct 2021, 15:12 CEST]: Facebook stopped announcing the vast majority of their IP space to the DFZ during this. People keep repeating this but I don't think it's true. It's probably based on this tweet: https://twitter.com/ryan505/status/1445118376339140

Re: facebook outage

2021-10-05 Thread Niels Bakker
* jllee9...@gmail.com (John Lee) [Tue 05 Oct 2021, 01:06 CEST]: I was seeing NXDOMAIN errors, so I wonder if they had a DNS outage of some sort?? Were you using host(1)? Please don't, and use dig(1) instead. There were as far as I know at no point NXDOMAINs being returned, but due to the SERV

Re: massive facebook outage presently

2021-10-04 Thread Niels Bakker
* b...@theworld.com (b...@theworld.com) [Tue 05 Oct 2021, 00:01 CEST]: I only mean a single, simple information page like the "sorry we're working on it" I saw just before they came back. Which would subsequently receive the world's FB session cookies. -- Niels.

Re: massive facebook outage presently

2021-10-04 Thread Niels Bakker
* m...@beckman.org (Mel Beckman) [Mon 04 Oct 2021, 18:23 CEST]: Here’s a screenshot: [cid:3E071EF9-BBC5-44BF-865D-2EDC36E05C71-L0-001] Please don't do this on the NANOG list. -- Niels.

Re: Rack rails on network equipment

2021-09-24 Thread Niels Bakker
* c...@cmadams.net (Chris Adams) [Sat 25 Sep 2021, 00:17 CEST]: Which - why do I have to order different part numbers for back to front airflow? It's just a fan, can't it be made reversible? Seems like that would be cheaper than stocking alternate part numbers. The fan is inside the power su

Re: IPv6 woes - RFC

2021-09-08 Thread Niels Bakker
* Owen DeLong via NANOG [Wed 08 Sep 2021, 20:35 CEST]: IPv4 continues to increase in cost. Surely, there is a point where organizations start to cry uncle. In most western countries there isn't much growth in the total number of connections. It's mostly churn between providers. IPv4 addresses

Re: if not v6, what?

2021-09-07 Thread Niels Bakker
* mo...@necom830.hpcl.titech.ac.jp (Masataka Ohta) [Tue 07 Sep 2021, 18:36 CEST]: As for well known port, we can specify non-default port numbers in URLs (I'm not sure whether it works for mailto: or not) or. in the future, things like DNS SRV RRs should be helpful. This absolutely doesn't wor

Re: IPv6 woes - RFC

2021-09-06 Thread Niels Bakker
* bj...@mork.no (Bjørn Mork) [Mon 06 Sep 2021, 15:08 CEST]: And as demonstrated in this thread: Even the few who still do care are not willing to pay extra, or sacrifice anything, for IPv6. They will run off to your competitor as soon as they discover the price is lower there. Which it will be

Re: IPv6 woes - RFC

2021-09-05 Thread Niels Bakker
* bj...@mork.no (Bjørn Mork) [Sun 05 Sep 2021, 18:24 CEST]: So where does that put us in a decade or two? Which protocol is optional? The one that costs money. You can already see this in mobile networks. -- Niels.

Re: IPv6 woes - RFC

2021-09-04 Thread Niels Bakker
* r...@rkhtech.org (Ryan Hamel) [Sat 04 Sep 2021, 23:04 CEST]: Not everyone has the luxury of picking their ISP, and the common consumer doesn't know or care about IPv6. They want Netflix to work and that's it. We just had a 100+ post thread about Netflix not working because CGNs were misclass

Re: The great Netflix vpn debacle!

2021-08-31 Thread Niels Bakker
* war...@kumari.net (Warren Kumari) [Tue 31 Aug 2021, 21:04 CEST]: So, RFC8805 is great and all, but it sure is annoying that you have to find webforms for a whole heap-o-geolocation providers, and figure out how to tell them where your geofeed file lives, etc. Introducing RFC9092 - "Finding and

Re: An update on the AfriNIC situation

2021-08-27 Thread Niels Bakker
* rube...@gmail.com (Rubens Kuhl) [Fri 27 Aug 2021, 19:16 CEST]: But that doesn't prevent the other RIRs issuing those since all TAs sign 0/0. Nothing does except common sense -- Niels.

Re: [EXTERNAL] Re: An update on the AfriNIC situation

2021-08-27 Thread Niels Bakker
* rich.comp...@charter.com (Compton, Rich A) [Fri 27 Aug 2021, 18:47 CEST]: Can't AfriNIC just create ROAs for the prefixes and point them to AS0? That would pretty much make the prefixes unusable since most tier 1's are doing ROV now. I'm not a lawyer but that doesn't strike me as a great id

Re: PeerinDB refuses to register certain networks [was: Setting sensible max-prefix limits]

2021-08-18 Thread Niels Bakker
When did PeeringDB turn into a routing (policy) registry? You should use an IRRdb if you want to write RPSL. * sa...@cluecentral.net (Sabri Berisha) [Thu 19 Aug 2021, 01:59 CEST]: The difference is, if you are able to use PeeringDB as a single source of truth, it is a lot easier to grab the dat

Re: PeerinDB refuses to register certain networks [was: Setting sensible max-prefix limits]

2021-08-18 Thread Niels Bakker
* sa...@cluecentral.net (Sabri Berisha) [Thu 19 Aug 2021, 00:55 CEST]: For example, if I were to register my peers (53356 and 136620) and AS5524 would all of a sudden start to advertise my AS as behind it, you'd be able to flag that. I'm confused. When did PeeringDB turn into a routing (policy

Re: AS 3356 (Level 3) -- Community 3356:666

2021-08-04 Thread Niels Bakker
* Martijn Schmidt [Wed 04 Aug 2021, 18:01 CEST]: And it's also nice not to yank the old community in case your customers still depend on it, even if you do also support the RFC version as an alias of that one. Note that 3356:666 is applied on ingress to routes received from peers. They could

Re: FreeBSD's ping Integrates IPv6

2021-07-02 Thread Niels Bakker
I just noticed (although it appears to have come in version 13.0) that FreeBSD's "ping" app now defaults to IPv6, i.e., no need for ping6: * ra...@psg.com (Randy Bush) [Fri 02 Jul 2021, 18:48 CEST]: pola breakage. especially fun if you have tools which run on both sides of the koolaid. On t

Re: FreeBSD's ping Integrates IPv6

2021-07-02 Thread Niels Bakker
* mark@tinka.africa (Mark Tinka) [Fri 02 Jul 2021, 16:02 CEST]: I just noticed (although it appears to have come in version 13.0) that FreeBSD's "ping" app now defaults to IPv6, i.e., no need for ping6: Yes, this broke some of my home network monitoring. Sadly there is no 'ping4' in the system

Re: Texas ERCOT power shortages (again) April 13

2021-04-14 Thread Niels Bakker
* brian.john...@netgeek.us (Brian Johnson) [Wed 14 Apr 2021, 17:37 CEST]: Not what I was saying. The demand for virtue-signaling green energy is not an effective strategy to actually having power available. The relevant virtue that's signaled with green energy is that its MWh prices are WAY lo

Re: wow, lots of akamai

2021-04-01 Thread Niels Bakker
* patr...@ianai.net (Patrick W. Gilmore) [Fri 02 Apr 2021, 01:01 CEST]: I know first hand that Akamai has explained to large customers the possible problems with multi-GB updates to millions of users simultaneously. If the game company does not care, then I do not see what you expect the CDN to

Re: wow, lots of akamai

2021-04-01 Thread Niels Bakker
* na...@ics-il.net (Mike Hammett) [Thu 01 Apr 2021, 23:17 CEST]: However, the game publisher queues those requests. I'm meaning request generically, not a GET request or anything like that. The game publisher that contracts to the CDNs decides when to fulfill those requests, in the big picture.

Re: wow, lots of akamai

2021-04-01 Thread Niels Bakker
* na...@ics-il.net (Mike Hammett) [Thu 01 Apr 2021, 21:51 CEST]: I'm not sure what kind of time lines are expected or engineered for now, but it *seems* like its a 12 - 36 hour sprint to push the content out. If so, push it out to 36 - 72 hours? Adjust accordingly for however much off I am on t

Re: wow, lots of akamai

2021-04-01 Thread Niels Bakker
* j...@ddostest.me (Jean St-Laurent) [Thu 01 Apr 2021, 21:41 CEST]: This would be a good compromises for all. Slowly deliver the assets few days/weeks ahead. Excellent compromise except for the people who paid for the game. Why do they need to spend storage to solve your bandwidth problem? C

Re: wow, lots of akamai

2021-04-01 Thread Niels Bakker
* nanog@nanog.org (Jean St-Laurent via NANOG) [Thu 01 Apr 2021, 21:03 CEST]: An artificial roll out penalty somehow? Probably not at the ISP level, but more at the game level. Well, ISP could also have some mechanisms to reduce the impact or even Akamai could force a progressive roll out. It'

Re: Perhaps it's time to think about enhancements to the NANOG list...?

2021-03-20 Thread Niels Bakker
* r...@gsp.org (Rich Kulawiec) [Sat 20 Mar 2021, 14:03 CET]: 2. This is a low-traffic list, so even without appropriate mail client support it's really not a big deal. The volume isn't the point, the S:N ratio is. Mails like this thread's starter are off-topic and reduce the value of the list

Re: SFI/SBI/Transit - Dumping

2021-03-16 Thread Niels Bakker
* fischerdoug...@gmail.com (Douglas Fischer) [Tue 16 Mar 2021, 11:32 CET]: And then?? Can this be considered an anti-competitive act? I think you're asking this on the wrong list. We're network operators, not lawyers with a specialisation in competitive markets regulation. -- Niels.

Re: bgp.he.net?

2021-02-18 Thread Niels Bakker
* h...@interall.co.il (Hank Nussbacher) [Thu 18 Feb 2021, 14:10 CET]: Is it down? -Hank I can access https://bgp.he.net/contact/ just fine from here. Also, it's 2021, please stop posting in HTML. -- Niels.

Re: [EXTERNAL] Re: dumb question: are any of the RIR's out of IPv4 addresses?

2021-02-16 Thread Niels Bakker
* nanog@nanog.org (Mann, Jason via NANOG) [Wed 17 Feb 2021, 00:44 CET]: Are their legtimate websites to go to purchase new blocks? IPv4 is not like Bitcoin, new addresses aren't being mined using gigantic amounts of electricity at enormous environmental cost. -- Niels.

Re: [External] Re: 10g residential CPE

2020-12-28 Thread Niels Bakker
* mpet...@netflight.com (Matthew Petach) [Tue 29 Dec 2020, 01:08 CET]: But as far as the physics goes, the conversion of biomatter into petrochemicals in the ground is more "renewable" than the conversion of hydrogen into helium in the sun. It's not. Where did Mr Metcalf think the energy comes

Re: 10g residential CPE

2020-12-26 Thread Niels Bakker
* mark.ti...@seacom.com (Mark Tinka) [Sat 26 Dec 2020, 06:48 CET]: On 12/25/20 23:22, Niels Bakker wrote: Download times:- 180GB at 100 Mbps: 4 hours 180GB at 1000 Mbps: 23 minutes For a number of reasons, highly unlikely your console will pull at 1Gbps, but yes, it would certainly pull

Re: 10g residential CPE

2020-12-25 Thread Niels Bakker
* m...@mtcc.com (Michael Thomas) [Fri 25 Dec 2020, 21:18 CET]: On 12/25/20 11:34 AM, Niels Bakker wrote: Gigabit speeds are about bursting.  Foreground activities like gaming, making online reservations, streaming won't take more than that, but anything faster is really nice to have

Re: 10g residential CPE

2020-12-25 Thread Niels Bakker
* mark.ti...@seacom.com (Mark Tinka) [Fri 25 Dec 2020, 19:11 CET]: I have a mate up the road who just paid for a 1Gbps FTTH service because it was the same price as a 100Mbps one. He generally lives between 900Kbps and 20Mbps. Gigabit-level FTTH services for the home, I feel, have always been

Re: Changing DNS host records

2020-12-11 Thread Niels Bakker
* matt...@corp.crocker.com (Matthew Crocker) [Fri 11 Dec 2020, 20:27 CET]: I have many customers that have registered their domains against my authoritative servers (DNS-AUTH3.CROCKER.COM). I need to move that machine to a different network/IP address. I’ve made the updates in my domain (croc

Re: Disney+ Geolocation (again)

2020-11-13 Thread Niels Bakker
* se...@rollernet.us (Seth Mattinen) [Sun 08 Nov 2020, 18:21 CET]: I've had 74.118.152.0/21 allocated to me since 2005. So many IPs in possession for so long, yet so little reverse DNS: --- $ (for j in `jot 7 2`; do for i in `jot 255`; do host 74.118.15$j.$i; done; done) | grep -c NXDOMAIN 157

Re: Apple Catalina Appears to Introduce Massive Jitter

2020-10-29 Thread Niels Bakker
* nanog@nanog.org (J. Hellenthal via NANOG) [Thu 29 Oct 2020, 15:10 CET]: [disabling checksum offload] Wireshark used to in Catalina rack up cksum errors a lot while these were all at their defaults. This is completely expected behaviour for outgoing packets. -- Niels.

Re: Circuit ordering software

2020-10-22 Thread Niels Bakker
* orothsch...@gmail.com (Oliver Rothschild) [Wed 21 Oct 2020, 22:39 CEST]: For those that have circuit ordering mechanisms in their environment, what sort of software do you use? If you're on the implementing side, you may want to take a look at https://ix-api.net/ to see how the three largest

Re: McAfee's certificate on akamai seems to be invalid

2020-05-07 Thread Niels Bakker
* drew.wea...@thenap.com (Drew Weaver) [Thu 07 May 2020, 16:50 CEST]: I contacted their support and CS but if anyone knows someone at either organization it appears that the certificate for downloadcenter.mcafee.com Is invalid. Has been this way for a while. It looks like you shouldn't attem

Re: Google peering pains in Dallas

2020-04-30 Thread Niels Bakker
* ja...@puck.nether.net (Jared Mauch) [Thu 30 Apr 2020, 20:10 CEST]: (Waits for others to crawl out of the woodwork who were more involved in this :-) Half duplex 10baseT ports, man. The collision LEDs never calmed down. -- Niels.

Re: akamai yesterday - what in the world was that

2020-01-24 Thread Niels Bakker
* xima...@gmail.com (Töma Gavrichenkov) [Fri 24 Jan 2020, 11:49 CET]: And now for our amusement Akamai can do it *accidentally*. What do you mean? The CDNs don't publish the games nor do they buy the games. The people downloading aren't even their customers. The publishers generally decide

Re: help with diagnosing traffic blackhole to / from select akamai ranges?

2020-01-09 Thread Niels Bakker
* wimcl...@gmail.com (William McLendon) [Thu 09 Jan 2020, 20:18 CET]: thank you all for the rapid feedback and suggestions! since many have asked for more detail, the specific prefix in question is 168.8.214.0/24. The previous owner is still announcing 168.8.0.0/14. If you're shooting holes

Re: Elephant in the room - Akamai

2019-12-08 Thread Niels Bakker
* rod.b...@unitedcablecompany.com (Rod Beck) [Sun 08 Dec 2019, 18:18 CET]: Last time I spoke with an Akamai engineer many years ago the network was purely transit. Is that evolving? https://conference.apnic.net/data/41/ix_100-akamai-apricot2016-23feb2016_1456157526.pdf Per those slides, PAIX

Re: Disney+ Streaming

2019-11-13 Thread Niels Bakker
* mikeboli...@gmail.com (Mike Bolitho) [Wed 13 Nov 2019, 12:05 CET]: This has gone well beyond out of scope of the NANOG list. Discussing who watches what kind of content has nothing to do with networking. Can you guys take the conversation elsewhere? On the contrary. This discussion informs e

Re: This DNS over HTTP thing

2019-10-03 Thread Niels Bakker
* j...@baylink.com (Jay R. Ashworth) [Wed 02 Oct 2019, 23:21 CEST]: - Original Message - From: "Niels Bakker" To: nanog@nanog.org Sent: Wednesday, October 2, 2019 1:42:08 PM Subject: Re: This DNS over HTTP thing * j...@baylink.com (Jay R. Ashworth) [Wed 02 Oct 2019,

Re: This DNS over HTTP thing

2019-10-02 Thread Niels Bakker
* j...@baylink.com (Jay R. Ashworth) [Wed 02 Oct 2019, 19:30 CEST]: From: "Livingood, Jason" What many people dismiss as 'lying' would be typically described as 'complying with the law' in certain countries. It is unfortunate that operators in countries with legally-mandated DNS blocks are criti

Re: This DNS over HTTP thing

2019-10-02 Thread Niels Bakker
* nanog@nanog.org (Damian Menscher via NANOG) [Tue 01 Oct 2019, 23:04 CEST]: Should be obvious to non-trolls that I was referring to Google changing the default nameserver *in Chrome*, as obviously Google doesn't have root access to change it on the host. Funny because just last week there was

Re: Consistent routing policy?

2019-09-16 Thread Niels Bakker
https://archive.nanog.org/meetings/nanog40/presentations/BGPcommunities.pdf Don’t let anyone send you Informational tags, these should only be set by you, and you should strip them from all BGP neighbors (customers, transits, peers, etc). Otherwise you have a massive security problem. * r...@

Re: Corporate Identity Theft: Azuki, LLC -- AS13389, 216.179.128.0/17

2019-08-09 Thread Niels Bakker
* r...@tristatelogic.com (Ronald F. Guilmette) [Sat 10 Aug 2019, 02:26 CEST]: As far as I am aware, no RIR makes any effort whatsoever to vet changes to WHOIS records, either for IP blocks or ASNs or ORG records. This is hilarious. You should hear the whining from any EU-based operator who h

Re: RFC 5771 - Global Multicast Addresses

2019-08-05 Thread Niels Bakker
* bran...@brandonsjames.com (Brandon James) [Mon 05 Aug 2019, 17:17 CEST]: As a young network engineer (no historic perspective) and only SMB and enterprise experience. It seems like the intention was to allow these to be publicly routed, but it would be a nightmare to implement so it never was

Re: What can ISPs do better? Removing racism out of internet

2019-08-05 Thread Niels Bakker
* m...@beckman.org (Mel Beckman) [Mon 05 Aug 2019, 17:21 CEST]: Cloudfare is being foolish, and hypocritical. They freely, for example, carry the equally offensive content of Antifa. Are they going to cut them off too? Finally, a centrist to point out the true culprits of all this violence

  1   2   3   >