Re: IXP + government transparency report

2014-01-06 Thread Martin Hannigan
On Mon, Jan 6, 2014 at 2:57 PM, Bill Woodcock wrote: > > On Jan 6, 2014, at 11:52 AM, Martin Hannigan wrote: > > > As well as being first to be open-ix certified, I think LINX hit a second > > first that is as interesting; > > > > > > > https://www.linx.net/service/publicpeering/novafiles/nova-u

Re: IXP + government transparency report

2014-01-06 Thread Bill Woodcock
On Jan 6, 2014, at 11:52 AM, Martin Hannigan wrote: > As well as being first to be open-ix certified, I think LINX hit a second > first that is as interesting; > > > https://www.linx.net/service/publicpeering/novafiles/nova-usgov-reports.html …and is this function being conducted completely w

RE: IXP BGP timers (was: Multi-homed clients and BGP timers)

2009-05-25 Thread John.Herbert
Cc: nanog@nanog.org Subject: Re: IXP BGP timers (was: Multi-homed clients and BGP timers) Hi Chris, .-- My secret spy satellite informs me that at Mon, 25 May 2009, Chris Caputo wrote: > Would going below 60-180 without first discussing it with your peers, tend > to piss them off?

Re: IXP BGP timers (was: Multi-homed clients and BGP timers)

2009-05-25 Thread Andree Toonk
Hi Chris, .-- My secret spy satellite informs me that at Mon, 25 May 2009, Chris Caputo wrote: > Would going below 60-180 without first discussing it with your peers, tend > to piss them off? 60-180 is fairly conservative. 60-180 is the Cisco default I believe, however Junipers defaults are 30

Re: IXP

2009-04-24 Thread Leo Bicknell
In a message written on Fri, Apr 24, 2009 at 04:22:49PM -0500, Paul Wall wrote: > On the twelfth day of Christmas, NYIIX gave to me, > Twelve peers in half-duplex, > Eleven OSPF hellos, > Ten proxy ARPs, > Nine CDP neighbors, > Eight defaulting peers, >

Re: IXP

2009-04-24 Thread Paul Wall
On Fri, Apr 24, 2009 at 12:46 PM, Leo Bicknell wrote: > Quite frankly, I think the failure modes have been grossly overblown. > The number of incidents of shared network badness that have caused > problems are actually few and far between.  I can't attribute any > down-time to shared-network badne

Re: IXP

2009-04-24 Thread Nick Hilliard
On 24/04/2009 18:46, Leo Bicknell wrote: I have looked at the failure modes and the cost of fixing them and decided that it is cheaper and easier to deal with the failure modes than it is to deal with the fix. Leo, your position is: "worse is better". I happen to agree with this sentiment for

Re: IXP

2009-04-24 Thread Leo Bicknell
In a message written on Fri, Apr 24, 2009 at 05:06:15PM +, Stephen Stuart wrote: > Your argument, and Leo's, is fundamentally the complacency argument > that I pointed out earlier. You're content with how things are, > despite the failure modes, and despite inefficiencies that the IXP > operat

Re: IXP

2009-04-24 Thread Stephen Stuart
> We got to go through all the badness that was the ATM NAPs (AADS, > PacBell NAP, MAE-WEST ATM). > > I think exactly for the reason Leo mentions they failed. That is, it > didn't even require people to figure out all the technical reasons they > were bad (many), they were fundamentally doomed

Re: IXP

2009-04-24 Thread Leigh Porter
But routers dont have bo.:) --- original message --- From: "Brandon Butterworth" Subject: Re: IXP Date: 24th April 2009 Time: 8:16:00 am > It's the technological equvilient of bringing everyone into a > conference room and then having them use their cell phones to call

Re: IXP

2009-04-24 Thread Brandon Butterworth
> It's the technological equvilient of bringing everyone into a > conference room and then having them use their cell phones to call > each other and talk across the table. Why are you all in the same > room if you don't want a shared medium? Probably the wrong people to ask (cf. IRC @ NANOG meet

Re: IXP

2009-04-24 Thread Mike Leber
Leo Bicknell wrote: In a message written on Fri, Apr 24, 2009 at 01:48:28AM +, Paul Vixie wrote: i think i saw several folks, not just stephen, say virtual wire was how they'd do an IXP today if they had to start from scratch. i know that for many here, starting from scratch isn't a reacha

Re: IXP

2009-04-23 Thread Arnold Nipper
On 24.04.2009 03:48 Paul Vixie wrote > "Bill Woodcock" writes: > >> ... Nobody's arguing against VLANs. Paul's argument was that VLANs >> rendered shared subnets obsolete, and everybody else has been rebutting >> that. Not saying that VLANs shouldn't be used. > > i think i saw several folks, n

Re: IXP

2009-04-23 Thread Jack Bates
Leo Bicknell wrote: The value of an exchange switch is the shared vlan. I could see an argument that switching is no longer necessary; but I can see no rational argument to both go through all the hassles of per-peer setup and get all the drawbacks of a shared switch. Even exchanges that took t

Re: IXP

2009-04-23 Thread Adrian Chadd
On Thu, Apr 23, 2009, Leo Bicknell wrote: > It's the technological equvilient of bringing everyone into a > conference room and then having them use their cell phones to call > each other and talk across the table. Why are you all in the same > room if you don't want a shared medium? Because you

Re: IXP

2009-04-23 Thread Leo Bicknell
In a message written on Fri, Apr 24, 2009 at 01:48:28AM +, Paul Vixie wrote: > i think i saw several folks, not just stephen, say virtual wire was how > they'd do an IXP today if they had to start from scratch. i know that > for many here, starting from scratch isn't a reachable worldview, and

Re: IXP

2009-04-23 Thread Paul Vixie
"Bill Woodcock" writes: > ... Nobody's arguing against VLANs. Paul's argument was that VLANs > rendered shared subnets obsolete, and everybody else has been rebutting > that. Not saying that VLANs shouldn't be used. i think i saw several folks, not just stephen, say virtual wire was how they'd

Re: IXP

2009-04-22 Thread Adrian Chadd
On Wed, Apr 22, 2009, Holmes,David A wrote: > But I recollect that FORE ATM equipment using LAN Emulation (LANE) used > a broadcast and unknown server (BUS) to establish a point-to-point ATM > PVC for each broadcast and multicast receiver on a LAN segment. As well > as being inherently unscalable (

RE: IXP

2009-04-22 Thread Holmes,David A
turned the single stream concept of multicast on its head, creating essentially a unicast stream for each multicast PVC client. -Original Message- From: Lamar Owen [mailto:lo...@pari.edu] Sent: Tuesday, April 21, 2009 1:21 PM To: nanog@nanog.org Subject: Re: IXP On Monday 20 April 2009

Re: IXP

2009-04-21 Thread Lamar Owen
On Monday 20 April 2009 18:57:01 Niels Bakker wrote: > Ethernet has no administrative boundaries that can be delineated. > Spanning one broadcast domain across multiple operators is therefore > a recipe for disaster. Isn't this the problem that NBMA networks like ATM were built for? > Cheap,

Re: IXP

2009-04-20 Thread Niels Bakker
* dee...@ai.net (Deepak Jain) [Mon 20 Apr 2009, 23:25 CEST]: So here is an idea that I hope someone shoots down. We've been talking about pseudo-wires, and the high level of expertise a shared-fabric IXP needs to diagnose weird switch oddities, etc. [..] What if everyone who participated at an

RE: IXP

2009-04-20 Thread Michael K. Smith - Adhost
> -Original Message- > > So here is an idea that I hope someone shoots down. > > We've been talking about pseudo-wires, and the high level of expertise > a > shared-fabric IXP needs > to diagnose weird switch oddities, etc. > > As far as I can tell, the principal reason to use a shared

RE: IXP

2009-04-20 Thread Deepak Jain
> > Hello Deepak: > > -Original Message- > > So here is an idea that I hope someone shoots down. > > We've been talking about pseudo-wires, and the high level of expertise > a > shared-fabric IXP needs > to diagnose weird switch oddities, etc. > > As far as I can tell, the principal r

RE: IXP

2009-04-20 Thread Michael K. Smith - Adhost
Hello Deepak: -Original Message- So here is an idea that I hope someone shoots down. We've been talking about pseudo-wires, and the high level of expertise a shared-fabric IXP needs to diagnose weird switch oddities, etc. As far as I can tell, the principal reason to use a shared fabric

RE: IXP

2009-04-20 Thread Deepak Jain
to scale at the IXP level. Thoughts? Deepak Jain AiNET > -Original Message- > From: vijay gill [mailto:vg...@vijaygill.com] > Sent: Monday, April 20, 2009 12:35 AM > To: Jeff Young; Nick Hilliard; Paul Vixie; na...@merit.edu > Subject: Re: IXP > > If you are unfortunat

Re: IXP

2009-04-19 Thread Alan Hannan
A solution I put in place at UUnet circa 1997 was to take a set of /32 routes representing major destination, e.g. ISP web sites, content sites, universities, about 20 of them, and temporarily place a /32 static route to each participant at the public exchange and traceroute to the destinatio

Re: IXP

2009-04-19 Thread vijay gill
If you are unfortunate enough to have to peer at a public exchange point, put your public ports into a vrf that has your routes. Default will be suboptimal to debug. I must say stephen and vixie and (how hard this is to type) even richard steenbergens methodology makes the most sense going forward

Re: IXP

2009-04-19 Thread Randy Bush
>>> Iirc it's on the roadmap for thier next generation of switches. >> bummer, as performance and per-port cost are certainly tasty. > Afaik low latency is due to the fact that Arista boxes are doing cut > through. no shock there > Pricewise they are very attractive. And Arista EOS actually is mo

Re: IXP

2009-04-19 Thread Arnold Nipper
On 19.04.2009 01:38 Randy Bush wrote >>> just curious. has anyone tried arista for smallish exchanges, before >>> jumping off the cliff into debugging extreme, foundry, ... >> last time I look at them their products lacked port security or >> anything similiar. > > whoops! > >> Iirc it's on the

Re: IXP

2009-04-19 Thread Arnold Nipper
On 19.04.2009 19:43 Chris Caputo wrote > On Sun, 19 Apr 2009, Mikael Abrahamsson wrote: >> On Sat, 18 Apr 2009, Nick Hilliard wrote: >> > - ruthless and utterly fascist enforcement of one mac address per >> > port, using either L2 ACLs or else mac address counting, with no >> > exceptions for an

Re: IXP

2009-04-19 Thread Nick Hilliard
On 19/04/2009 08:31, Mikael Abrahamsson wrote: Well, as long as it simply drops packets and doesn't shut the port or some other "fascist" enforcement. We've had AMSIX complain that our Cisco 12k with E5 linecard was spitting out a few tens of packets per day during two months with random source m

Re: IXP

2009-04-19 Thread Sean Donelan
On Sat, 18 Apr 2009, Paul Vixie wrote: "Even"? *Especially* -- or they're not competent at doing security. wouldn't a security person also know about http://en.wikipedia.org/wiki/ARP_spoofing and know that many colo facilities now use one customer per vlan due to this concern? (i re

Re: IXP

2009-04-19 Thread Chris Caputo
On Sun, 19 Apr 2009, Mikael Abrahamsson wrote: > On Sat, 18 Apr 2009, Nick Hilliard wrote: > > - ruthless and utterly fascist enforcement of one mac address per > > port, using either L2 ACLs or else mac address counting, with no > > exceptions for any reason, ever. This is probably the single m

Re: IXP

2009-04-19 Thread Jeff Young
x27;t want to put in ACLs because you'd blow out the cpu on the router/card? Ah... That made networking fun! Deepak - Original Message - From: Jeff Young To: Nick Hilliard Cc: Paul Vixie ; na...@merit.edu Sent: Sat Apr 18 20:45:48 2009 Subject: Re: IXP Best solution I ever

Re: IXP

2009-04-19 Thread Mikael Abrahamsson
On Sat, 18 Apr 2009, Nick Hilliard wrote: - ruthless and utterly fascist enforcement of one mac address per port, using either L2 ACLs or else mac address counting, with no exceptions for any reason, ever. This is probably the single more important stability / security enforcement mechanism f

Re: IXP

2009-04-18 Thread Deepak Jain
Remember when you didn't want to put in ACLs because you'd blow out the cpu on the router/card? Ah... That made networking fun! Deepak - Original Message - From: Jeff Young To: Nick Hilliard Cc: Paul Vixie ; na...@merit.edu Sent: Sat Apr 18 20:45:48 2009 Subject: Re:

Re: IXP

2009-04-18 Thread Jeff Young
Best solution I ever saw to an 'unintended' third-party peering was devised by a pretty brilliant guy (who can pipe up if he's listening). When he discovered traffic loads coming from non-peers he'd drop in an ACL that blocked everything except ICMP - then tell the NOC to route the call to his de

Re: IXP

2009-04-18 Thread Roland Dobbins
On Apr 19, 2009, at 5:12 AM, Paul Vixie wrote: many colo facilities now use one customer per vlan due to this concern? Haven't most major vendors for years offered features in their switches which mitigate ARP-spoofing, provide per-port layer-2 isolation on a sub-VLAN basis, as well as i

Re: IXP

2009-04-18 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, Apr 18, 2009 at 5:11 PM, Steven M. Bellovin wrote: > I'm taking no position on the underlying argument; I'm simply stating > that simplicity is an essential element for security. I like a > philosophy I've seen attributed to Einstein: "every

Re: IXP

2009-04-18 Thread Steven M. Bellovin
On Sat, 18 Apr 2009 21:12:24 + Paul Vixie wrote: > > Date: Sat, 18 Apr 2009 13:17:11 -0400 > > From: "Steven M. Bellovin" > > > > On Sat, 18 Apr 2009 16:58:24 + > > bmann...@vacation.karoshi.com wrote: > > > > > i make the claim that simple, clean design and execution > > > is best.

Re: IXP

2009-04-18 Thread Randy Bush
>> just curious. has anyone tried arista for smallish exchanges, before >> jumping off the cliff into debugging extreme, foundry, ... > last time I look at them their products lacked port security or > anything similiar. whoops! > Iirc it's on the roadmap for thier next generation of switches.

Re: IXP

2009-04-18 Thread Arnold Nipper
On 19.04.2009 01:08 Randy Bush wrote > just curious. has anyone tried arista for smallish exchanges, before > jumping off the cliff into debugging extreme, foundry, ... > last time I look at them their products lacked port security or anything similiar. Iirc it's on the roadmap for thier next g

Re: IXP

2009-04-18 Thread Dale Carstensen
Thanks for talking about your PNIs. Let's see: Permit Next Increase Private Network Interface Private Network Interconnection Primary Network Interface and it goes on and on . . .

Re: IXP

2009-04-18 Thread Randy Bush
> - public IP addresses for ipv4 and ipv6 > - requirement for all members to use BGP, their own ASN and their own > address space just to not confuse, that is behind the peering port. the peering port uses the exchange's ipv4/6 space > - no customer IGPs > - dropping customer bpdus on sight >

Re: IXP

2009-04-18 Thread Stephen Stuart
> Stephen, that's a straw-man argument. Nobody's arguing against > VLANs. Paul's argument was that VLANs rendered shared subnets > obsolete, and everybody else has been rebutting that. Not saying that > VLANs shouldn't be used. I believe shared VLANs for IXP interconnect are obsolete. Whether t

Re: IXP

2009-04-18 Thread Jack Bates
Paul Vixie wrote: if we maximize for simplicity we get a DELNI. oops that's not fast enough we need a switch not a hub and it has to go 10Gbit/sec/port. looks like we traded away some simplicity in order to reach our goals. Agreed. Security + Efficiency = base complexity 1Q has great benefit

Re: IXP

2009-04-18 Thread bmanning
On Sat, Apr 18, 2009 at 09:12:24PM +, Paul Vixie wrote: > > Date: Sat, 18 Apr 2009 13:17:11 -0400 > > From: "Steven M. Bellovin" > > > > On Sat, 18 Apr 2009 16:58:24 + > > bmann...@vacation.karoshi.com wrote: > > > > > i make the claim that simple, clean design and execution is > > > b

Re: IXP

2009-04-18 Thread Paul Vixie
> Date: Sat, 18 Apr 2009 13:17:11 -0400 > From: "Steven M. Bellovin" > > On Sat, 18 Apr 2009 16:58:24 + > bmann...@vacation.karoshi.com wrote: > > > i make the claim that simple, clean design and execution is > > best. even the security goofs will agree. > > "Even"? *Especially* -- o

Re: IXP

2009-04-18 Thread Arnold Nipper
On 18.04.2009 21:51 Sharlon R. Carty wrote > I have been looking at ams-ix and linx, even some african internet > exchanges as examples. But seeing how large they are(ams-x & linx) and > we are in the startup phase, I would rather have some tips/examples > from anyone who has been doing IXP

Re: IXP

2009-04-18 Thread Sharlon R. Carty
I have been looking at ams-ix and linx, even some african internet exchanges as examples. But seeing how large they are(ams-x & linx) and we are in the startup phase, I would rather have some tips/examples from anyone who has been doing IXP for quite awhile. So far all the responses have bee

Re: IXP

2009-04-18 Thread Bill Woodcock
ssage- From: Stephen Stuart Date: Sat, 18 Apr 2009 18:05:03 To: Cc: na...@merit.edu na...@merit.edu Subject: Re: IXP > I'll get off my soap-box now and let you resume your observations that > complexity as a goal in and of itself is the olny path forward. What >

Re: IXP

2009-04-18 Thread Stephen Stuart
> I'll get off my soap-box now and let you resume your observations that > complexity as a goal in and of itself is the olny path forward. What > a dismal world-view. No-one is arguing that complexity is a goal. Opportunities to introduce gratuitous complexity abound, and defen

Re: IXP

2009-04-18 Thread Jack Bates
Paul Vixie wrote: in terms of solid and predictable i would take per-peering VLANs with IP addresses assigned by the peers themselves, over switches that do unicast flood control or which are configured to ignore bpdu's in imaginative ways. Simplicity only applies when it doesn't hinder securi

Re: IXP

2009-04-18 Thread Nick Hilliard
On 17/04/2009 15:11, Sharlon R. Carty wrote: I like would to know what are best practices for an internet exchange. I have some concerns about the following; Can the IXP members use RFC 1918 ip addresses for their peering? Can the IXP members use private autonomous numbers for their peering? May

Re: IXP

2009-04-18 Thread Steven M. Bellovin
On Sat, 18 Apr 2009 16:58:24 + bmann...@vacation.karoshi.com wrote: > i make the claim that simple, clean design and execution is > best. even the security goofs will agree. > "Even"? *Especially* -- or they're not competent at doing security. But I hadn't even thought about DELNIs

Re: IXP

2009-04-18 Thread bmanning
On Sat, Apr 18, 2009 at 04:01:41PM +, Paul Vixie wrote: > > Date: Sat, 18 Apr 2009 10:09:00 + > > From: bmann...@vacation.karoshi.com > > > > ... well... while there is a certain childlike obession with the > > byzantine, rube-goldburg, lots of bells, knobs, whistles type > >

Re: IXP

2009-04-18 Thread Paul Vixie
> Date: Sat, 18 Apr 2009 16:35:51 +0100 > From: Nick Hilliard > > ... i just don't care if people use L2 connectivity to get to an exchange > from a router somewhere else on their LAN. They have one mac address to > play around with, and if they start leaking mac addresses towards the > exchange

Re: IXP

2009-04-18 Thread Paul Vixie
> Date: Sat, 18 Apr 2009 10:09:00 + > From: bmann...@vacation.karoshi.com > > ... well... while there is a certain childlike obession with the > byzantine, rube-goldburg, lots of bells, knobs, whistles type > machines... for solid, predictable performance, simple clean >

Re: IXP

2009-04-18 Thread Nick Hilliard
On 18/04/2009 01:08, Paul Vixie wrote: i've spent more than several late nights and long weekends dealing with the problems of shared multiaccess IXP networks. broadcast storms, poisoned ARP, pointing default, unintended third party BGP, unintended spanning tree, semitranslucent loops, unauthori

Re: IXP

2009-04-18 Thread bmanning
On Sat, Apr 18, 2009 at 05:30:41AM +, Stephen Stuart wrote: > > Not sure how switches handle HOL blocking with QinQ traffic across trunks, > > but hey... > > what's the fun of running an IXP without testing some limits? > > Indeed. Those with longer memories will remember that I used to > regu

Re: IXP

2009-04-18 Thread Nuno Vieira - nfsi telecom
- "kris foster" wrote: > painfully, with multiple circuits into the IX :) I'm not advocating > Paul's suggestion at all here > > Kris Totally agree with you Kris. For the IX scenario (or at least looking in a Public way) it seems Another Terrible Mistake to me. IMHO, when you are in a

Re: IXP

2009-04-18 Thread Paul Vixie
xie , > "na...@merit.edu" > Subject: Re: IXP > Date: Sat, 18 Apr 2009 05:30:41 + > From: Stephen Stuart > > > Not sure how switches handle HOL blocking with QinQ traffic across trunks, > > but hey... > > what's the fun of running an IXP withou

Re: IXP

2009-04-18 Thread Paul Vixie
Nathan Ward writes: > On 18/04/2009, at 12:08 PM, Paul Vixie wrote: >> ... Q in Q is not how i'd build this... cisco and juniper both have >> hardware tunnelling capabilities that support this stuff... ... > > On Alcatel-Lucent 7x50 gear, VLAN IDs are only relevant to that local > port. If you w

Re: IXP

2009-04-18 Thread Paul Vixie
> From: Paul Vixie > Date: Sat, 18 Apr 2009 00:08:04 + > ... > i should answer something said earlier: yes there's only 14 bits of tag and > yes 2**14 is 4096. in the sparsest and most wasteful allocation scheme, > tags would be assigned 7:7 so there'd be a max of 64 peers. i meant of cour

Re: IXP

2009-04-17 Thread Gaurab Raj Upadhaya
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Elmar K. Bins wrote: > I am not an IXP operator, but I know of no exchange (public or > private, big or closet-style) that uses private ASNs or RFC1918 > space. I know of at least two IXPs where RFC 1918 space is used on the IXP Subnet. I know a fair

Re: IXP

2009-04-17 Thread Stephen Stuart
> Not sure how switches handle HOL blocking with QinQ traffic across trunks, > but hey... > what's the fun of running an IXP without testing some limits? Indeed. Those with longer memories will remember that I used to regularly apologize at NANOG meetings for the DEC Gigaswitch/FDDI head-of-line b

Re: IXP

2009-04-17 Thread Nathan Ward
On 18/04/2009, at 12:08 PM, Paul Vixie wrote: i should answer something said earlier: yes there's only 14 bits of tag and yes 2**14 is 4096. in the sparsest and most wasteful allocation scheme, tags would be assigned 7:7 so there'd be a max of 64 peers. it's more likely that tags would be

RE: IXP

2009-04-17 Thread Deepak Jain
> Not agreeing or disagreeing with this as a concept, but I'd imagine > that > since a number of vendors support arbitrary vlan rewrite on ports that > in simple environment you could do some evil things with that. (ie. > you could use QinQ "like" ATM Virtual Paths between core switches and > then

Re: IXP

2009-04-17 Thread Matthew Moyle-Croft
Arnold Nipper wrote: On 17.04.2009 20:52 Paul Vixie wrote Large IXP have >300 customers. You would need up to 45k vlan tags, wouldn't you? Not agreeing or disagreeing with this as a concept, but I'd imagine that since a number of vendors support arbitrary vlan rewrite on ports that in

Re: IXP

2009-04-17 Thread Paul Vixie
Arnold Nipper writes: > On 18.04.2009 00:04 Paul Vixie wrote > >> ... has anybody ever run out of 1Q tags in an IXP context? > > Why? You only need 1 ;-) really? 1? at PAIX we started with three, two unicast (wrongheadedness) and one multicast, then added another unicast for V6. then came the

Re: IXP

2009-04-17 Thread Daniel Roesen
On Fri, Apr 17, 2009 at 04:10:32PM -0500, Richard A Steenbergen wrote: > A far better way to implement this is with a web portal brokered virtual > crossconnect system, which provisions MPLS martini pwe or vpls circuits > between members. A couple of years ago I thought of the same, and discovered

Re: IXP

2009-04-17 Thread Randy Bush
>> with the advent of vlan tags, the whole idea of CSMA for IXP networks >> is passe. just put each pair of peers into their own private tagged >> vlan and let one of them allocate a V4 /30 and a V6 /64 for it. as a >> bonus, this prevents third party BGP (which nobody really liked which >> somet

Re: IXP - PNI

2009-04-17 Thread bmanning
On Fri, Apr 17, 2009 at 04:52:53PM -0500, Joe Greco wrote: > > On Fri, 17 Apr 2009, bmann...@vacation.karoshi.com wrote: > > > the vlan tagging idea is a virtualization of the PNI construct. > > > why use an IX when running 10's/100's/1000's of private network > > > interconnects will do? > > > > >

Re: IXP

2009-04-17 Thread Arnold Nipper
On 18.04.2009 00:04 Paul Vixie wrote >>> the 300-peer IXP's i've been associated with weren't quite full >>> mesh in terms of who actually wanted to peer with whom, so, no. >> >> Much depends on your definition of "quite". Would 30% qualify? > > 30% would be an over-the-top success. has anybody

Re: IXP

2009-04-17 Thread Paul Vixie
> > the 300-peer IXP's i've been associated with weren't quite full mesh > > in terms of who actually wanted to peer with whom, so, no. > > Much depends on your definition of "quite". Would 30% qualify? 30% would be an over-the-top success. has anybody ever run out of 1Q tags in an IXP context?

Re: IXP

2009-04-17 Thread Arnold Nipper
On 17.04.2009 23:06 Paul Vixie wrote >> Large IXP have >300 customers. You would need up to 45k vlan tags, >> wouldn't you? > > the 300-peer IXP's i've been associated with weren't quite full mesh > in terms of who actually wanted to peer with whom, so, no. Much depends on your definition of "qu

Re: IXP - PNI

2009-04-17 Thread Paul Vixie
> The construct also doesn't scale well for multicast traffic exchange if > there's a significant number of multicast peers even though the traffic > might be low for individual source ASNs. On the other hand, if the IXP > doesn't use IGMP/MLD snooping capable switches, then I suppose it doesn't >

Re: IXP - PNI

2009-04-17 Thread Joe Greco
> On Fri, 17 Apr 2009, bmann...@vacation.karoshi.com wrote: > > the vlan tagging idea is a virtualization of the PNI construct. > > why use an IX when running 10's/100's/1000's of private network > > interconnects will do? > > > > granted, if out of the 120 ASN's at an IX, 100 are exchanging on > >

Re: IXP - PNI

2009-04-17 Thread Antonio Querubin
On Fri, 17 Apr 2009, bmann...@vacation.karoshi.com wrote: the vlan tagging idea is a virtualization of the PNI construct. why use an IX when running 10's/100's/1000's of private network interconnects will do? granted, if out of the 120 ASN's at an IX, 100 are exchanging on average - 80KBs - th

Re: IXP

2009-04-17 Thread Richard A Steenbergen
On Fri, Apr 17, 2009 at 09:00:53PM +0200, Arnold Nipper wrote: > Large IXP have >300 customers. You would need up to 45k vlan tags, > wouldn't you? Not only that, but when faced with the requirement of making the vlan IDs match on both sides of the exchange, most members running layer 3 switches

Re: IXP

2009-04-17 Thread Paul Vixie
> Large IXP have >300 customers. You would need up to 45k vlan tags, > wouldn't you? the 300-peer IXP's i've been associated with weren't quite full mesh in terms of who actually wanted to peer with whom, so, no.

Re: IXP - PNI

2009-04-17 Thread bmanning
the vlan tagging idea is a virtualization of the PNI construct. why use an IX when running 10's/100's/1000's of private network interconnects will do? granted, if out of the 120 ASN's at an IX, 100 are exchanging on average - 80KBs - then its likley safe to dump them all into a single physical

Re: IXP

2009-04-17 Thread kris foster
On Apr 17, 2009, at 12:05 PM, Arnold Nipper wrote: On 17.04.2009 21:04 kris foster wrote On Apr 17, 2009, at 12:00 PM, Arnold Nipper wrote: On 17.04.2009 20:52 Paul Vixie wrote with the advent of vlan tags, the whole idea of CSMA for IXP networks is passe. just put each pair of peers into

Re: IXP

2009-04-17 Thread Mikael Abrahamsson
On Fri, 17 Apr 2009, Arnold Nipper wrote: Large IXP have >300 customers. You would need up to 45k vlan tags, wouldn't you? ... and exchanging multicast would be... err.. suboptimal. -- Mikael Abrahamssonemail: swm...@swm.pp.se

Re: IXP

2009-04-17 Thread Bill Woodcock
Sorry, hit "send" a little early, by accident. On Apr 17, 2009, at 11:52 AM, Paul Vixie wrote: with the advent of vlan tags, the whole idea of CSMA for IXP networks is passe. just put each pair of peers into their own private tagged vlan. I'm not sure whether you're being sarcastic, and if

Re: IXP

2009-04-17 Thread Arnold Nipper
On 17.04.2009 21:04 kris foster wrote > On Apr 17, 2009, at 12:00 PM, Arnold Nipper wrote: > >> On 17.04.2009 20:52 Paul Vixie wrote >> >>> with the advent of vlan tags, the whole idea of CSMA for IXP >>> networks is passe. >>> just put each pair of peers into their own private tagged vlan and

Re: IXP

2009-04-17 Thread kris foster
On Apr 17, 2009, at 12:00 PM, Arnold Nipper wrote: On 17.04.2009 20:52 Paul Vixie wrote with the advent of vlan tags, the whole idea of CSMA for IXP networks is passe. just put each pair of peers into their own private tagged vlan and let one of them allocate a V4 /30 and a V6 /64 for it.

Re: IXP

2009-04-17 Thread Arnold Nipper
On 17.04.2009 20:52 Paul Vixie wrote > with the advent of vlan tags, the whole idea of CSMA for IXP networks is > passe. > just put each pair of peers into their own private tagged vlan and let one of > them allocate a V4 /30 and a V6 /64 for it. as a bonus, this prevents third > party BGP (whic

Re: IXP

2009-04-17 Thread Bill Woodcock
On Fri, 17 Apr 2009, Paul Vixie wrote: > with the advent of vlan tags, the whole idea of CSMA for IXP networks is passe. > just put each pair of peers into their own private tagged vlan. Uh, I'm not sure whether you're being sarcastic or not. -Bill

Re: IXP

2009-04-17 Thread Paul Vixie
with the advent of vlan tags, the whole idea of CSMA for IXP networks is passe. just put each pair of peers into their own private tagged vlan and let one of them allocate a V4 /30 and a V6 /64 for it. as a bonus, this prevents third party BGP (which nobody really liked which sometimes got turned

RE: IXP

2009-04-17 Thread Ivan Pepelnjak
> > I like would to know what are best practices for an > internet exchange. > > I have some concerns about the following; Can the IXP > members use RFC > > 1918 ip addresses for their peering? > > No. Those IP addresses will at least appear on traceroutes; > also, it might not be such a good

Re: IXP

2009-04-17 Thread Alex H. Ryu
Theorically it's doable. But mostly No to your questions. IXP means Internet eXchange Point. So it is public Internet. Why do you want to use private IP address ? Most RIR allocate /24 unit for IXP. For troubleshooting purpose, it is better to use public IP address as it is designed. Unless you w

Re: IXP

2009-04-17 Thread Joe Greco
> Hello NANOG, > > I like would to know what are best practices for an internet exchange. I > have some concerns about the following; > Can the IXP members use RFC 1918 ip addresses for their peering? > Can the IXP members use private autonomous numbers for their peering? > > Maybe the answer is

Re: IXP

2009-04-17 Thread Elmar K. Bins
m...@sharloncarty.net (Sharlon R. Carty) wrote: > I like would to know what are best practices for an internet exchange. I > have some concerns about the following; > Can the IXP members use RFC 1918 ip addresses for their peering? No. Those IP addresses will at least appear on traceroutes; also,

Re: IXP

2009-04-17 Thread bmanning
On Fri, Apr 17, 2009 at 10:11:30AM -0400, Sharlon R. Carty wrote: > Hello NANOG, > > I like would to know what are best practices for an internet exchange. I > have some concerns about the following; > Can the IXP members use RFC 1918 ip addresses for their peering? > Can the IXP members use priva