Re: Cogent-TATA peering dispute?

2024-05-17 Thread jim deleskie
Not even the first time tata and cogent separated. Will avoid public details but I was on the keyboard at 6453 that time. On Fri, May 17, 2024, 6:05 PM William Herrin wrote: > On Fri, May 17, 2024 at 9:55 AM Ben Cartwright-Cox via NANOG > wrote: > > Also poking around on RIPE Atlas suggests th

Re: Out of ideas - Comcast issue BGP peering with Tata

2023-11-17 Thread jim deleskie
I many years ago worked at Tata, responsible for their BGP, they are giving you the right answer, Comcast has to be the one contacting them, as then both sides can see what is being sent and received and can resolve this issue. -jim On Fri, Nov 17, 2023 at 10:04 AM Jamie Chetta via NANOG wrote:

Re: TATA Communications

2022-12-12 Thread jim deleskie
Have you tried NOC not sure who from their actively monitors the list anymore? Forwarding to a former colleague. -jim On Mon, Dec 12, 2022 at 2:49 PM Norman Jester wrote: > Contact me off list... seeing major loss at 64.86.252.65 in your path. > > Norman Jester > 619-319-7055 >

Re: Understanding impact of RPKI and ROA on existing advertisements

2022-11-02 Thread jim deleskie
I dont think ive every agreed with Owen this much, maybe this is the first sign the wording is ending further proving his statement :) On Wed, Nov 2, 2022 at 10:30 PM Owen DeLong via NANOG wrote: > Oh, I’m not ignoring it, I’m just rather underwhelmed by it and given how > long it took SIDRWG to

Re: AKAMAI Contact

2022-09-28 Thread jim deleskie
Seriously search the list people. Even a little effort on your own. Same question a few days ago. -jim On Wed, Sep 28, 2022, 3:45 PM Joshua Pool via NANOG wrote: > Anyone have a contact for AKAMAI? > > Thanks in advance. > > Josh >

Re: Rogers Outage Canada

2022-07-08 Thread jim deleskie
i cant see BGP taking out SS7. -jim On Fri, Jul 8, 2022 at 2:45 PM Snowmobile2004 wrote: > According to Cloudflare Radar > , Rogers > BGP announcements spiked massively to levels 536,777% higher than normal > (343,601 vs 64 normall

Re: 10 Do's + Don'ts for Visiting Québec + Register Now for N85!

2022-05-08 Thread jim deleskie
Having lived in and continue to spend as much time in Montreal as I can. This list made be laugh, especially for a group where most of us do a lot of travel. Other then no right on red. Montreal like any other city. Don't be an ass and enjoy yourself. On Thu, May 5, 2022, 9:56 AM Nanog News

Re: Opinions on Arista for BGP?

2022-04-01 Thread jim deleskie
I did an eval for some folks last Aug on Arista and 2 other vendors, one of the others decided they didn't want to play the 3rd did. Of the 3 Arista performed better/best. The test plan was shared with all 3 vendors prior to testing and it definitely push all this to and then past their published

Re: IPv6 Only - was Re: Let's Focus on Moving Forward Re: V6 still not supported re: 202203261833.AYC

2022-03-29 Thread jim deleskie
If then industry still hasn't adopted v6 full in 25 years maybe it's v6 that should be given up it, that it clearly wasn't what customers wanted. Perhaps we should should have a small group working on the next iteration. -jim On Tue, Mar 29, 2022, 5:54 PM Jacques Latour wrote: > So, in 25, 50 o

Re: Dropping support for the .ru top level domain

2022-03-14 Thread jim deleskie
Terrible idea on so many levels. -jim On Mon, Mar 14, 2022, 12:30 PM Patrick Bryant wrote: > I don't like the idea of disrupting any Internet service. But the current > situation is unprecedented. > > The Achilles Heel of general public use of Internet services has always > been the functionali

Re: The role of Internet governance in sanctions

2022-03-10 Thread jim deleskie
I respect the people and goals here, but strongly echo Mel's statement. This is a much larger hammer then mail filtering lists. -jim On Thu, Mar 10, 2022, 11:26 AM Mel Beckman wrote: > In my view, there is a core problematic statement in this document: > > “Military and propaganda agencies and

Re: Contact request AS 6453

2022-01-15 Thread jim deleskie
Have you found anyone. Not there any more but can probably still find someone for you. -jim On Thu, Jan 13, 2022, 10:11 AM Drew Weaver wrote: > Does anyone have a contact for AS 6453 or are there any AS 6453 folks on > list? > > > > Seeing some routing trouble from their customers to the US. >

Re: Redploying most of 127/8 as unicast public

2021-11-18 Thread jim deleskie
This is actually worse than our collective progress on replacing v4 to date. -jim On Wed, Nov 17, 2021 at 7:31 PM Jay R. Ashworth wrote: > This seems like a really bad idea to me; am I really the only one who > noticed? > > https://www.ietf.org/id/draft-schoen-intarea-unicast-127-00.html > > Th

Re: Disaster Recovery Process

2021-10-05 Thread jim deleskie
I don't see posting in a DR process thead about thinking to use alternative entry methods to locked doors and spreading false information. If do well. Mail filters are simple. -jim On Tue., Oct. 5, 2021, 7:35 p.m. Niels Bakker, wrote: > * deles...@gmail.com (jim deleskie) [Tue 05

Re: Disaster Recovery Process

2021-10-05 Thread jim deleskie
World broke. Crazy $$ per hour down time. Doors open with a fire axe. Glass breaks super easy too and much less expensive then adding 15 min to failure. -jim On Tue., Oct. 5, 2021, 7:05 p.m. Jeff Shultz, wrote: > 7. Make sure any access controlled rooms have physical keys that are > available

Re: S.Korea broadband firm sues Netflix after traffic surge

2021-10-01 Thread jim deleskie
Having done peering for many $big_boys_club and $small_isps, it always comes down to politics, $$ and time. The balance may change but end of day its those variables and its a painful game some days. From all sides :( -jim On Fri, Oct 1, 2021 at 1:07 PM Laura Smith via NANOG wrote: > > > The

Re: do bgp optimizers think?

2021-09-09 Thread jim deleskie
Suspect for most th answer is poorly. This is a conversation I've had with a few people about how they could be well made -jim On Thu., Sep. 9, 2021, 12:45 p.m. Randy Bush, wrote: > to control inbound traffic, how do bgp optimizers decide how to tune > what they announce? slfow? exploration?

Re: netflow in the core used for surveillance

2021-08-25 Thread jim deleskie
Randy, We all know many folks send their *flow to someone or somewhere. In exchange for pretty graphs for intelligence. I suspect in many cases this data is then reused in many cases for many purposes. But let's not overplay the risk here. There would be much easier ways for rogue nations, b

Re: Cogent x RPKI

2021-08-09 Thread jim deleskie
It won't get them depeered, nor should it. I don't currently based much value in RPKI for BGP. On Mon., Aug. 9, 2021, 8:43 a.m. Rubens Kuhl, wrote: > From a Cogent support ticket: > "Hello, > > Please see the attached LOA. > > Regarding the RPKI ROA, for now, we don't create ROA for our prefixe

Re: Any2 LAX

2021-06-11 Thread jim deleskie
Also saw a major traffic drop. There is a Root Cause to be issued early in the week I'm told. -jim On Fri, Jun 11, 2021 at 2:42 PM Siyuan Miao wrote: > Yea, it was down but both RS are online and feeding us unreachable > nexthops during the outage . > > On Sat, Jun 12, 2021 at 1:27 AM Seth Mat

Re: DDoS attack with blackmail

2021-05-24 Thread jim deleskie
While I have no design to engage in over email argument over how much latency people can actually tolerate, I will simply state that most people have a very poor understanding of it and how much additional latency is really introduced by DDoS mitigation. As for implying that DDoS mitigation compan

Re: Network / Infrastructure security testing services

2021-03-09 Thread jim deleskie
Your asking if anyone does it or your offering your services? -jim On Tue., Mar. 9, 2021, 3:56 p.m. Nathanael Cariaga, wrote: > Apologies for this shameless plug, but wanted to ask if any folks on this > list who does network/infrastructure security testing? Please to reach back > to me off the

Re: "Is BGP safe yet?" test

2020-04-20 Thread jim deleskie
I remember having this discussion more than 20yrs ago, minus the ARIN bit, couldn't get every to agree to it it then either :(. We don't need more rules, we just need to start with basic hygiene. Was a novel idea :) On Mon., Apr. 20, 2020, 2:41 p.m. Christopher Morrow, < morrowc.li...@gmail.com> w

Re: Disney+ Geolocation issues

2019-11-13 Thread jim deleskie
Using a TPIA provider here at home in Nova Scotia same issue. -jim On Tue., Nov. 12, 2019, 6:29 p.m. Michael Crapse, wrote: > Myself and a few other ISPs are having our eyeballs complain about > disney+ saying that they're on a VPN. Does anyone have any idea, or who to > contact regarding this

Re: DOs and DONTs for small ISP

2019-06-04 Thread jim deleskie
triggered :) On Tue, Jun 4, 2019 at 11:31 AM Bryan Holloway wrote: > > On 6/4/19 9:20 AM, Mark Tinka wrote: > > > > > > On 3/Jun/19 15:41, Fletcher Kittredge wrote: > >> > >> Here is your checklist in descending order of importance: > >> > >> 1. market opportunity > >> 2. finding the right pa

Re: modeling residential subscriber bandwidth demand

2019-04-02 Thread jim deleskie
lso to allow for spikes in traffic for various events > throughout the year. > > Louie > Google Fiber > > > On Tue, Apr 2, 2019 at 11:36 AM jim deleskie wrote: > >> +1 on this. its been more than 10 years since I've been responsible for a >> broadband network

Re: modeling residential subscriber bandwidth demand

2019-04-02 Thread jim deleskie
+1 on this. its been more than 10 years since I've been responsible for a broadband network but have friends that still play in that world and do some very good work on making sure their models are very well managed, with more math than I ever bothered with, That being said, If had used the methods

Re: Service Provider NetFlow Collectors

2019-01-16 Thread jim deleskie
Erik, Feel free to ping me, I own Mimir Networks, we have a full-service flow collection/DDoS detection and mitigation system that I'd love to show you. We built it having been a long time user of other commercial and open source tools, for very large deployments. Would be happy to give you a f

Re: [OT] Internet in China

2018-07-23 Thread jim deleskie
Chinese ISP's typically like to run their links very hot. Don't expect much different if you change providers. -jim On Mon, Jul 23, 2018 at 8:37 AM, Danijel Starman wrote: > Hi, > > Can someone suggest a reliable internet provider in China? Are all > options China Telecom? > > Some current lin

Re: AS PATH limits

2017-09-30 Thread jim deleskie
Maybe the next best path had, had 562 prepends? :) On Sat, Sep 30, 2017 at 12:09 PM, wrote: > > If you're on cogent, since 22:30 UTC yesterday or so this has been > happening > > (or happened). > > Still happening here. I count 562 prepends (563 * 262197) in the > advertisement we receive from

Re: AS PATH limits

2017-09-20 Thread jim deleskie
In my MUCH younger days, I may have helped abuse the global table via prepends, but never to that level :) On Wed, Sep 20, 2017 at 4:36 PM, Randy Bush wrote: > > Below is an example showing an excessive amount of prepending for prefix > > 185.135.134.0/23 at 2017-09-18 20:20:05 UTC. > > and the

Re: Bell outage

2017-08-04 Thread jim deleskie
Single fiber cut causes the much impact? -jim On Fri, Aug 4, 2017 at 2:59 PM, J wrote: > https://www.theglobeandmail.com/news/national/much-of- > atlantic-canada-loses-cellphone-service-in-widespread-outage/ > article35881182/ > > > > Apparently some fiber cut. No word on the exact model of co

Re: Bell outage

2017-08-04 Thread jim deleskie
Cell and the internet all down here from Bell and those sharing their towers, also 911 services. Banking / ATM also impacted, no idea reason though. -jim Mimir Networks www.mimirnetworks.com On Fri, Aug 4, 2017 at 12:14 PM, Krunal Shah wrote: > Does anyone know what is happening with Bell net

Re: Long AS Path

2017-06-22 Thread jim deleskie
I see 5+ prepends as maybe not reason to have your "BGP driving license revoked" but if I can continue with the concept that you have your BGP learners permit. If I think back to when I learned to code or when making ACL's, we still used line number and practice would be to give ourselves lots of

Re: Rogers Peering Request

2016-12-15 Thread jim deleskie
Will reach out to some folks I know there. PM me Network, AS etc. On Thu, Dec 15, 2016 at 3:33 PM, Ryan Gard wrote: > Looking for a Rogers contact to get things moving on a peering request. > Been trying to shout into their ear for well over a month, and haven't > heard anything back. Further, P

Re: Canadian National Railway contact

2016-12-06 Thread jim deleskie
Have a friend that used to work there, will reach out to see if he still does. -jim On Tue, Dec 6, 2016 at 11:48 AM, Andy Ringsmuth wrote: > If there happens to be someone here from the Canadian National Railway, or > if someone knows someone there, could you hit me up off-list? > > Attempting

Re: BFD on back-to-back connected BGP-speakers

2016-11-29 Thread jim deleskie
Hugo, I've used this configuration in a past line when I may of had multiple L2 steps between L3 devices. The only concern we had was around load BFD put on _some_ endpoint routers, if was handles on the RouteProcessor vs on line cards. -jim On Tue, Nov 29, 2016 at 2:23 PM, Hugo Slabbert wr

Re: Spitballing IoT Security

2016-10-26 Thread jim deleskie
So device is certified, bug is found 2 years later. How does this help. The info to date is last week's issue was patched by the vendor in Sept 2015, I believe is what I read. We know bugs will creep in, (source anyone that has worked with code forever) Also certification assuming it would work,

Re: Death of the Internet, Film at 11

2016-10-23 Thread jim deleskie
I've heard this crap for 20+ years now. "attack traffic" is unplanned traffic. Build networks to support "random" bursts of garbage is much more expensive then you will ever get to bill for. You clearly have no understanding of the economics of networks. On Sun, Oct 23, 2016 at 10:39 PM, Keith

Re: Death of the Internet, Film at 11

2016-10-23 Thread jim deleskie
Sure lets sue people because they put too many/bad packets/packets I don't like on the internet. Do you think this will really solve the porblem? Do you think we'll not just all end up with internet prices like US medical care prices? On Sun, Oct 23, 2016 at 4:41 PM, wrote: > > >So once identi

Re: Death of the Internet, Film at 11

2016-10-22 Thread jim deleskie
y iPhone* > > On Oct 22, 2016, at 12:06 PM, jim deleskie wrote: > > It is also likely the desired use case. In my office I like to be able to > login when needed when on the road, when the alarm company calls me at 2am > for a false alarm so I don't have to get someone else

Re: Death of the Internet, Film at 11

2016-10-22 Thread jim deleskie
It is also likely the desired use case. In my office I like to be able to login when needed when on the road, when the alarm company calls me at 2am for a false alarm so I don't have to get someone else out of bed to have them dispatched to check on the site. -jim On Sat, Oct 22, 2016 at 1:42 PM

Re: Legislative proposal sent to my Congressman

2016-10-05 Thread jim deleskie
Can we please not get the government ( who's gov ) involved. I fully agree that it will not only not help, but will make some things worse. This is why we can't have nice things. On Tuesday, October 4, 2016, Anne Mitchell wrote: > (Interesting and inarguably well-intentioned, and possibly even

Re: Krebs on Security booted off Akamai network after DDoS attack proves pricey

2016-09-25 Thread jim deleskie
ck proves pricey > From: jim deleskie > Sorry but you are mistaken. I've worked at Sr. levels for several LARGE and > medium sized networks.  What does it cost and what do we make doing it, > over rules what is "good for the internet" every time it came up. "nice

Re: Krebs on Security booted off Akamai network after DDoS attack proves pricey

2016-09-25 Thread jim deleskie
Sorry but you are mistaken. I've worked at Sr. levels for several LARGE and medium sized networks. What does it cost and what do we make doing it, over rules what is "good for the internet" every time it came up. On Sun, Sep 25, 2016 at 2:27 PM, Ca By wrote: > On Sunday, September 25, 2016, Joh

Re: Krebs on Security booted off Akamai network after DDoS attack proves pricey

2016-09-23 Thread jim deleskie
Not at all. I refered to AUP's as a way people remove you from a service when you use more of it then you are paying for. On Fri, Sep 23, 2016 at 3:58 PM, Marcin Cieslak wrote: > On Fri, 23 Sep 2016, jim deleskie wrote: > > > They were hosting him for free, and like insurance,

Re: Krebs on Security booted off Akamai network after DDoS attack proves pricey

2016-09-23 Thread jim deleskie
They were hosting him for free, and like insurance, I can assure you if you are consistently using a service, and not covering the costs of that service you won't be a client for long. This is the basis for AUP/client contracts and have been going back to the days when we all offered only dialup i

Re: "Defensive" BGP hijacking?

2016-09-13 Thread jim deleskie
Redirecting someone's traffic, with out there permission or a court order, by a court in your jurisdiction, not a lot different then the "bad guys" themselves. On Sun, Sep 11, 2016 at 5:54 PM, Hugo Slabbert wrote: > Hopefully this is operational enough, though obviously leaning more > towards

Re: NFV Solution Evaluation Methodology

2016-08-03 Thread jim deleskie
I struggled with this whole SDN/NVF/insert marketing term for a while at first, until I sat down and actually though about. When I strip away all the foo, what I'm left with is breaking things down to pieces and and putting logo blocks together in a way that best suits what I'm doing. It is reall

Re: cloudflare hosting a ddos service?

2016-07-26 Thread jim deleskie
Back in the day didn't we refer to such hosting as bulletproof hosting? On Tue, Jul 26, 2016 at 11:17 PM, Phil Rosenthal wrote: > Plus, it’s good for business! > > -Phil > > > On Jul 26, 2016, at 10:14 PM, jim deleskie wrote: > > > > sigh... > > > &

Re: cloudflare hosting a ddos service?

2016-07-26 Thread jim deleskie
sigh... On Tue, Jul 26, 2016 at 10:55 PM, Patrick W. Gilmore wrote: > CloudFlare will claim they are not hosting the problem. They are just > hosting the web page that lets you pay for or points at or otherwise > directs you to the problem. > > The actual source of packets is some other IP addre

Re: cross connects and their pound of flesh

2016-06-19 Thread jim deleskie
I don't buy this. They sold you one cable before, they sell you cable now. Little difference then we moved customers from a T1 to T3 back in the 90's. If Colo's can't understand more then 20+ yrs of evolution its hardly right to blame it on the market. -jim Mimir Networks www.mimirnetworks.c

Re: Netflix VPN detection - actual engineer needed

2016-06-05 Thread jim deleskie
Damian, I HIGHLY doubt regular folks are running into issues with this, I suspect its not even geeks in general having issues, I suspect 80% plus of those having issues spend most of their time complaining about something related to v6 and the rest of the geeks not loving them/it enough. -jim On

Re: Netflix VPN detection - actual engineer needed

2016-06-03 Thread jim deleskie
I don't suspect many folks that are outside of this list would likely have any idea how to set up a v6 tunnel. Those of us on the list, likely have a much greater ability to influence v6 adoption or not via day job deployments then Netflix supporting v6 tunnels or not. On Fri, Jun 3, 2016 at 8:49

Re: BGP FlowSpec

2016-05-02 Thread jim deleskie
I was going to avoid this thread because I've never been a huge fan of Flowspec for my own reasons. However having work on /been responsible for several "Tier 1 and 2" networks and DDoS mitigation services over the last 20 years, I can say I, nor any of my peers ( in any sense of that word) that

Re: Cogent <=> Google Peering issue

2016-02-17 Thread jim deleskie
They haven't been since at least the mid 90's :) On Wed, Feb 17, 2016 at 12:50 PM, Nick Hilliard wrote: > Todd Underwood wrote: > > Can you scope "issue" with any facts or data? > > are facts or data strictly necessary on the nanog mailing list? > > Nick > > > T > > On Feb 17, 2016 11:16, "Fred

Re: The IPv6 Travesty that is Cogent's refusal to peer Hurricane Electric - and how to solve it

2016-01-22 Thread jim deleskie
Was part of my first peering spat, probably 95/96‎ since then many more, couple even big enough they made nanog/ industry news, end of day they are all the same. If you need to reach every where have more then one provider, it's good practice anyway, a single cust or even a bunch of cust are NOT go

Re: Ear protection

2015-09-23 Thread jim deleskie
Maybe I've always listened to my music to loud and spend the bulk of time via ssh, but I've never felt a need for hearing protection in a DC, is this generally an issue for people? On Wed, Sep 23, 2015 at 8:08 AM, Alex Rubenstein wrote: > Why not just build a Datacenter that is quiet? > > On Sep

Re: NetFlow - path from Routers to Collector

2015-09-02 Thread jim deleskie
Adding VRFs/VLAN's/anything else to separate the traffic to reduce fate sharing is only adding complexity that will likely result in operator errors. While many of us have clue, even when we don't agree on the solutions, there are many more out there typing at routers at 2am, when even the simples

Re: NetFlow - path from Routers to Collector

2015-09-01 Thread jim deleskie
I've not read every reply, but let me add my voice as some who has worked on and ran SEVERAL large networks, in no case in the last long number of years have I had access to an OOB network that was sized to carry anything in large volume, and in fact like many others replied on a robust number of p

Re: net neutrality peering dispute between CenturyTel/Qwest and Cogent in Dallas

2015-08-15 Thread jim deleskie
015 at 5:35 PM, Mark Tinka wrote: > > > On 15/Aug/15 19:32, jim deleskie wrote: > > > In my 20+ yrs now of playing this game, "everyone" has had a turn > thinking > > their content/eyeballs are special and should get free "peering". > > That

Re: net neutrality peering dispute between CenturyTel/Qwest and Cogent in Dallas

2015-08-15 Thread jim deleskie
In my 20+ yrs now of playing this game, "everyone" has had a turn thinking their content/eyeballs are special and should get free "peering". On Sat, Aug 15, 2015 at 1:59 PM, Mike Hammett wrote: > Arrogance is the only reason I can think of why the incumbents think that > way. I'd be surprised if

Re: DDOS Simulation

2015-07-28 Thread jim deleskie
If anyone offers to "test" your DDoS devices across a network that you do not 100% own, you are risking legal issues. If they offer to test it across your own network, make sure you have in writing from you upper management that they understand the risk and approve it. If you choose to do it anyw

Re: ARIN just subdivided their last /17, /18, /19, /20, /21 and /22. Down to only /23s and /24s now. : ipv6

2015-06-27 Thread jim deleskie
I'd give it another 20 yrs of v4, v6 addressing and all those letters are to hard for us old folk, we'll find ways to make it make it work :) On Sat, Jun 27, 2015 at 11:54 AM, Mikael Abrahamsson wrote: > On Sat, 27 Jun 2015, Rafael Possamai wrote: > > How long do you think it will take to compl

Re: World's Fastest Internet™ in Canadaland

2015-06-26 Thread jim deleskie
Its mostly marketing, a number of years ago I worked for a cable co, we knew if we increased BW X we'd see a Y speed increase in usage. We also has done the math on several future generations of upgrades, so we'd know if "phone company" increases to A we'd move to B. I know the guy that did the m

Re: Open letter to Level3 concerning the global routing issues on June 12th

2015-06-12 Thread jim deleskie
meetings/abstract?id=459 > > :-) > > On Fri, Jun 12, 2015 at 11:53 AM, jim deleskie wrote: > >> People from Big telcom should never reply to mailing lists from work >> addresses unless specifically allowed, which I suspect TATA doesn't >> either, >> based on some d

Re: Open letter to Level3 concerning the global routing issues on June 12th

2015-06-12 Thread jim deleskie
People from Big telcom should never reply to mailing lists from work addresses unless specifically allowed, which I suspect TATA doesn't either, based on some direct, buy old knowledge :) Filtering has been a community issue since my days @ MCI being AS3561, often discussed not often enough acted

Re: eBay is looking for network heavies...

2015-06-11 Thread jim deleskie
There is a good reason there aren't LOTS of "good" neteng in the 30-35 or under 30 range with lots of experience. Its call the hell we went though for a while after 2000 working in this industry. Many of us lost jobs and couldn't find new ones. I know talented folks that had to go to delivering

Re: eBay is looking for network heavies...

2015-06-06 Thread jim deleskie
I remember you asking me who Jon was :) I have since added to my list of interview questions... sad but the number of people with clue is declining not increasing. On Sat, Jun 6, 2015 at 3:13 AM, Joe Hamelin wrote: > Back in 2000 at Amazon, HR somehow decided to have me do the phone > intervie

Re: eBay is looking for network heavies...

2015-06-05 Thread jim deleskie
Based on the number of "certified" people I've interviewed over the last 20yr, my default view lines up with Jared's 100% On Fri, Jun 5, 2015 at 10:38 PM, Mike Hale wrote: > We need a pool on what percentage of readers just googled traceroute. > On Jun 5, 2015 6:28 PM, wrote: > > > On 5 Jun 201

Re: [SECURITY] Application layer attacks/DDoS attacks

2015-05-25 Thread jim deleskie
ttacks > > > > The idea of restricting access to a certain content during an attack on > > the > > "trusted networks" only will make all interested ISPs be more "trusted" > > > > Ramy > > > > On Mon, May 25, 2015 at 5:01 AM, Christo

Re: [SECURITY] Application layer attacks/DDoS attacks

2015-05-23 Thread jim deleskie
While I don't think any ISP "wants DDoS" to make $$, I do based on experience believe that business cases have to be made for everything. With the prices pay for BW in most of the world now, ( or the last number of years) its going to be VERY hard to get anyone to allocated time/$$ or energy to do

Re: [SECURITY] Application layer attacks/DDoS attacks

2015-05-23 Thread jim deleskie
To many pieces to answer on a weekend on NANOG, but those of us that work in the DDoS space the last number of years have seen huge growth in the application layer attacks. This does not mean a decrease in volumetric attack, just that now you have to worry about both and lots of each. FW's while t

Re: Cisco/Level3 takedown

2015-04-09 Thread jim deleskie
Just to add to the noise I think batman wears a black mask/helmet, but I've never considered it a mask. I didn't look at the details on this, but did L3 sink the routes at their border or did they expressly announce the route to sink it? -jim On Thu, Apr 9, 2015 at 3:35 PM, Randy Bush wrot

Re: Large Ontario DC busted for hosting petabytes of child abuse material

2015-03-02 Thread jim deleskie
Canadian and US laws are similar. But I'll leave it up to the lawyers to figure it all out, happily I'm no where near this, but it being a small industry here, I suspect I have friends that are dealing with some crap right now On Mon, Mar 2, 2015 at 2:03 PM, Mike A wrote: > On Mon, Mar 02, 201

Re: What is lawful content? [was VZ...]

2015-02-27 Thread deleskie
I wonder if lawyer sit around all day and argue about CIDR notation Sent from my BlackBerry 10 smartphone on the Rogers network.   Original Message   From: Jim Richardson Sent: Friday, February 27, 2015 7:26 PM Cc: NANOG list Subject: Re: What is lawful content? [was VZ...] On Fri, Feb 27, 2015 a

Re: Checkpoint IPS

2015-02-05 Thread jim deleskie
mh, you know that forcing traffic to be symmetrical is evil, and while backbone traffic and inspection don't play nice, there are very legit reasons why, in many cases edge traffic must be open for inspection. I'm on my way to the office, feel free to ping me if you want to discuss. Or maybe I

Re: Facebook down?

2014-09-03 Thread jim deleskie
>From East coast of Canada down as well. On Wed, Sep 3, 2014 at 4:48 PM, Warren Bailey < wbai...@satelliteintelligencegroup.com> wrote: > I¹m getting a ton done right now too.. Hasn¹t been working since my first > attempt about 20 minutes ago. > > > > On 9/3/14, 12:45 PM, "Marshall Eubanks" > w

Re: [OPINION] Best place in the US for NetAdmins

2014-07-26 Thread jim deleskie
Rich, In principal I agree, and I've said this many times, for years I've telecommuted myself, mostly effectively. I'd work much longer hours, but not always worked as efficiently during all of those hours. When I started my own company, with $$ be in short supply like all start ups I I planned

Re: Verizon Public Policy on Netflix

2014-07-13 Thread jim deleskie
So it sounds like your customers want to use the service being sold, but you can't afford to service them due to the pricing they are being charged...Sounds like you need to raise prices. While I haven't worked for a rural wireless ISP, I have work for wired ISP's in the days of modems, Large tran

Re: Verizon Public Policy on Netflix

2014-07-12 Thread deleskie
I've only been 1/2 paying attention, did I miss the tag are are people really looking for those answers. -jim Sent from my BlackBerry 10 smartphone on the Rogers network.   Original Message   From: Miles Fidelman Sent: Saturday, July 12, 2014 6:11 PM Cc: NANOG Subject: Re: Verizon Public Policy

Re: Canada and IPv6 (was: Ars Technica on IPv4 exhaustion)

2014-06-19 Thread jim deleskie
Those all sounds like legit business questions. -jim On Thu, Jun 19, 2014 at 2:45 PM, William F. Maton Sotomayor < wma...@ottix.net> wrote: > On Wed, 18 Jun 2014, Sadiq Saif wrote: > > On 6/18/2014 14:25, Lee Howard wrote: >> >>> Canada is way behind, just 0.4% deployment. >>> >> >> Any Canadi

Re: A simple proposal

2014-05-16 Thread deleskie
You shouldn't of stopped them I was eagerly ‎ waiting to find out how rtt was going to be increased :) -jim Sent from my BlackBerry 10 smartphone on the Rogers network.   Original Message   From: Suresh Ramasubramanian Sent: Friday, May 16, 2014 11:26 PM To: Phil Fagan Cc: nanog@nanog.org Subjec

Re: [ PRIVACY Forum ] Critical crypto bug leaves Linux, hundreds of apps open to eavesdropping

2014-03-05 Thread jim deleskie
Doing some serious adjusting of my tinfoil today over his :) -jim On Wed, Mar 5, 2014 at 5:03 PM, Jay Ashworth wrote: > - Original Message - > > From: "Leo Bicknell" > > > On Mar 4, 2014, at 9:07 PM, Jay Ashworth wrote: > > > > > Is this the *same* bug that just broke in Apple code l

Re: Hackers hijack 300, 000-plus wireless routers, make malicious changes | Ars Technica

2014-03-04 Thread jim deleskie
Why want to swing such a big hammer. Even blocking those 2 IP's will isolate your users, and fill your support queue's. Set up a DNS server locally to reply to those IP's Your customers stay up and running and blissfully unaware. Log the IP's hitting your DNS servers on those IP and have your s

Re: NTP DRDos Blog post

2014-02-20 Thread deleskie

Re: NSA able to compromise Cisco, Juniper, Huawei switches

2013-12-30 Thread jim deleskie
There are many ways a backdoor could be used in a properly secured system. To think otherwise is a huge mistake. I can think of several ways, if tasked and given the resources of a large gov't that I would attack this problem. To assume that those tasked and focused only this type of solution a

Re: The Making of a Router

2013-12-26 Thread jim deleskie
I've recently pushed a "large" BSD box to a load of over 300, for more then an hour, while under test, some things slowed a little, but she kept on working! -jim On Thu, Dec 26, 2013 at 1:59 PM, Shawn Wilson wrote: > Totally agree that a routing box should be standalone for tons of reasons. >

Re: Someone’s Been Siphoning Data Through a Huge Security Hole in the Internet

2013-12-06 Thread deleskie

Re: Internet Surveillance and Boomerang Routing: A Call for Canadian Network Sovereignty

2013-09-07 Thread jim deleskie
Paul, I agree this is a problem, but its been a problem since at least 1994 ( my first exposure ) and I suspect longer, the issue is east we capacity in Canada is very $$, pushing traffic from Toronto east to points south to get it to Vancouver is much more cost effective. -jim On Sat, Sep 7

Re: [Paper] B4: Experience with a Globally-Deployed Software Defined

2013-08-17 Thread jim deleskie
At iMCI (pre-Worldcom) we had scripts that would build all our ATM VC's for a 400node mesh, would take all night to run :) -jim On Sat, Aug 17, 2013 at 4:32 PM, Avi Freedman wrote: > > No, people never use *flow controllers* for anything. > > People have been doing SDN since before Google wa

Re: Friday Hosing

2013-07-14 Thread jim deleskie
I could support any of these services myself, and have guys that work me that can as well, but none of these are my core business, and my investors REALLY prefer me focusing on my core business, I suspect most of us have shareholders, investors, owners that feel the same way. I struggled with idea

Re: /25's prefixes announced into global routing table?

2013-06-24 Thread jim deleskie
I'm not going to even ask or look at who is accepting /26's -jim On Mon, Jun 24, 2013 at 2:29 PM, Paul Rolland wrote: > Hello, > > On Fri, 21 Jun 2013 13:56:02 -0600 > Michael McConnell wrote: > > > As the IPv4 space get smaller and smaller, does anyone think we'll see a > > time when /25's w

Re: net neutrality and peering wars continue

2013-06-22 Thread jim deleskie
Botnets to help with peering ratio's could be a new business model? :) On Sat, Jun 22, 2013 at 1:00 PM, Christopher Morrow wrote: > On Sat, Jun 22, 2013 at 9:19 AM, Neil Harris > wrote: > > On 22/06/13 13:08, Matthew Petach wrote: > >> That's easily solved by padding the ACK to 1500 bytes as w

Re: PRISM: NSA/FBI Internet data mining project

2013-06-06 Thread jim deleskie
Knowing its going on, knowing nothing online is secret != OK with it, it mealy understand the way things are. -jim On Thu, Jun 6, 2013 at 9:16 PM, wrote: > On Thu, 6 Jun 2013, Matthew Petach wrote: > >> Much less stress in life that way. ^_^ >> > > complacency is always the easiest path. > >

Re: What hath god wrought?

2013-05-21 Thread jim deleskie
Maybe my tinfoil isn't on tight enough, or maybe I give to much credit to a gov't, or perhaps I'm just feeding the trolls, but I have a very hard time believing that DHS, launched a DoS from their own machines. -jim On Tue, May 21, 2013 at 12:18 PM, David Conrad wrote: > On May 20, 2013, at 9

Re: Google Public DNS having issues.

2013-02-07 Thread jim deleskie
reachable from eastern canada On Thu, Feb 7, 2013 at 1:41 PM, Blair Trosper wrote: > ...seems to be having trouble as reported by Systems Watch: > https://twitter.com/systemswatch/status/299572918936039424 > > Indeed, it's inaccessible to me from Minneapolis, Tampa, SJC, and > Seattle...both 8.8.

Re: NSA and the exchanges

2012-10-31 Thread jim deleskie
If your talking "the NSA" I doubt anyone would tell you. That being said: it would mean the US gov't breaking Canadian law I suspect. Now in Canada it is quite possible that the Canadian Fed gov't monitors traffic but I would also say no one would tell you because telling you would also be in vio

Re: max-prefix and platform tcam limits: they are things

2012-10-05 Thread jim deleskie
1:05:07 -0300, jim deleskie said: > >> But here goes, 210x the size of normal really? 210% I'd have a hard >> time believing. Did anyone else anywhere see a route leak equal to >> larger then the entire Internet that day, anywhere else that could of >> caused this?

Re: max-prefix and platform tcam limits: they are things

2012-10-05 Thread jim deleskie
I know that I should know better then comment on networks others then my own, ( and I know to never comment on my own publicly :) ) But here goes, 210x the size of normal really? 210% I'd have a hard time believing. Did anyone else anywhere see a route leak equal to larger then the entire Intern

  1   2   3   >