Re: IP DSCP across the Internet

2015-05-08 Thread Jay Hennigan
On 5/7/15 3:05 AM, Mark Tinka wrote: And this is what sales and marketing droids don't get - so-called "Premium Internet" products abound that don't really mean anything. The competition that offer these products are basically hoping nothing happens, and that when it does, it seems as palatable

RE: IP DSCP across the Internet

2015-05-07 Thread John van Oppen
] on behalf of Mike Hammett [na...@ics-il.net] Sent: Thursday, May 07, 2015 4:46 AM To: nanog list Subject: Re: IP DSCP across the Internet That sounds like a rather poor implementation. What if they had more than one VoIP call? Seems like this thread has more FUD than real examples. - Mike

Re: IP DSCP across the Internet

2015-05-07 Thread Mike Hammett
quot; To: "Mark Tinka" Cc: "nanog list" Sent: Thursday, May 7, 2015 4:32:52 AM Subject: Re: IP DSCP across the Internet On Wed, 6 May 2015, Mark Tinka wrote: > With color-aware policing toward a customer in Uganda, any traffic > coming from that peer in South Af

Re: IP DSCP across the Internet

2015-05-07 Thread Mark Tinka
On 7/May/15 11:12, James Bensley wrote: > > > This. > > You can't really put SLAs on traffic that has to egress/ingress the > Internet, if you try to you're asking for trouble, so we simply remark > to 0 on all inbound traffic. And this is what sales and marketing droids don't get - so-called "P

Re: IP DSCP across the Internet

2015-05-07 Thread Mikael Abrahamsson
On Wed, 6 May 2015, Mark Tinka wrote: With color-aware policing toward a customer in Uganda, any traffic coming from that peer in South Africa was getting dropped toward that customer in Uganda. After a very odd sequence of troubleshooting events, we found that the AF DSCP alues being set by t

Re: IP DSCP across the Internet

2015-05-07 Thread James Bensley
On 6 May 2015 at 03:27, Blake Dunlap wrote: > If there isn't a specific peering agreement which sets up DSCP marks > with your Z side, you're going to have a bad time doing anything other > than remarking to 0. > > -Blake This. You can't really put SLAs on traffic that has to egress/ingress the

RE: IP DSCP across the Internet

2015-05-06 Thread Charles Wyble
g@nanog.org" Subject: Re: IP DSCP across the Internet On 5/May/15 12:27, Ramy Hashish wrote: > Good day all, > > A simple question, does Internet trust IP DSCP marking? Assume two ASs > connected through two tier 1 networks, will the tier one networks trust any > DSCP markings d

RE: IP DSCP across the Internet

2015-05-06 Thread Charles Wyble
g@nanog.org" Subject: Re: IP DSCP across the Internet On 5/May/15 12:27, Ramy Hashish wrote: > Good day all, > > A simple question, does Internet trust IP DSCP marking? Assume two ASs > connected through two tier 1 networks, will the tier one networks trust any > DSCP markings d

Re: IP DSCP across the Internet

2015-05-06 Thread Roland Dobbins
On 6 May 2015, at 8:22, Joel Mulkey wrote: > But don't trust that's going to be the rule. Yes, that's always the caveat. Just do what you can within your own span of administrative control. --- Roland Dobbins

Re: IP DSCP across the Internet

2015-05-06 Thread Joel Mulkey
But don't trust that's going to be the rule. I recently had a situation where traffic across a congested public peering link between 2 large "tier-2" carriers was honoring DSCP, resulting in some unexpected inconsistent behavior. Joel Mulkey Founder and CEO Bigleaf Networks Direct: +1 (503) 985-

Re: IP DSCP across the Internet

2015-05-05 Thread Randy Bush
> We don't honor DSCP values that comes in via best-effort circuits > (i.e., the Internet). Although not a very strong reason, this > particular experience is one reason why. trusting markings of any sort which you do not need is an increase in attack, game playing, and/or bug surface. the only t

Re: IP DSCP across the Internet

2015-05-05 Thread Mark Tinka
On 6/May/15 03:35, Tim Jackson wrote: > In general there are very few bad actors here in regards to > trusting/accepting/using DSCP across the internet. > > Apple has a tendency to mark some traffic with EF that shouldn't be EF on > PNIs, and Cogent leaks a lot of their internal markings into cus

Re: IP DSCP across the Internet

2015-05-05 Thread Mark Tinka
On 5/May/15 12:27, Ramy Hashish wrote: > Good day all, > > A simple question, does Internet trust IP DSCP marking? Assume two ASs > connected through two tier 1 networks, will the tier one networks trust any > DSCP markings done from an AS to the other? I wouldn't bet on it. Some providers hono

Re: IP DSCP across the Internet

2015-05-05 Thread Blake Dunlap
If there isn't a specific peering agreement which sets up DSCP marks with your Z side, you're going to have a bad time doing anything other than remarking to 0. -Blake On Tue, May 5, 2015 at 6:35 PM, Tim Jackson wrote: > In general there are very few bad actors here in regards to > trusting/acce

Re: IP DSCP across the Internet

2015-05-05 Thread Tim Jackson
In general there are very few bad actors here in regards to trusting/accepting/using DSCP across the internet. Apple has a tendency to mark some traffic with EF that shouldn't be EF on PNIs, and Cogent leaks a lot of their internal markings into customers, but it's generally unmarked traffic from

Re: IP DSCP across the Internet

2015-05-05 Thread Roland Dobbins
On 5 May 2015, at 17:27, Ramy Hashish wrote: Assume two ASs connected through two tier 1 networks, will the tier one networks trust any DSCP markings done from an AS to the other? The BCP is to re-color on ingress. --- Roland Dobbins