Re: ddos attacks

2013-12-20 Thread Saku Ytti
On (2013-12-20 03:24 +), Dobbins, Roland wrote: > > I think ipv4 udp is just going to become operationally deprecated. Too > > much pollution. It is really an epic amount of trash / value ratio in ipv4 > > udp. > > This isn't a realistic viewpoint. What are realistic options? a) QUIC an

Re: ddos attacks

2013-12-20 Thread Dobbins, Roland
On Dec 20, 2013, at 3:27 PM, Saku Ytti wrote: > c) ACL/RPF in significant portion of access ports in whole world >- i'm guessing significant portion of access ports are on autopilot with > no one to change their configs, so probably not practical. d) The current state of affairs pers

RE: turning on comcast v6

2013-12-20 Thread Jamie Bowden
> From: Owen DeLong [mailto:o...@delong.com] > I'm almost afraid to ask about the phrase "add-default-route=yes" in the > dhcp-client configuration. That seems wrong on the face of it since you > should be getting your routing information from RA and not DHCP. No, no, no, a thousand times no. I'

Re: turning on comcast v6

2013-12-20 Thread Lee Howard
On 12/20/13 7:36 AM, "Jamie Bowden" wrote: >> From: Owen DeLong [mailto:o...@delong.com] > >> I'm almost afraid to ask about the phrase "add-default-route=yes" in the >> dhcp-client configuration. That seems wrong on the face of it since you >> should be getting your routing information from RA

Re: turning on comcast v6

2013-12-20 Thread ML
On 12/20/2013 12:30 AM, Owen DeLong wrote: >> I'd like to encourage people to use prefix-hint=::/48. >> >> The router should accept the /60 and deal with it, but it's better to have >> Comcast's logs show that you requested a proper full-size prefix. >> >> I'm almost afraid to ask about the phras

RE: turning on comcast v6

2013-12-20 Thread Jamie Bowden
> From: Lee Howard [mailto:l...@asgard.org] > On 12/20/13 7:36 AM, "Jamie Bowden" wrote: > >> From: Owen DeLong [mailto:o...@delong.com] > >> I'm almost afraid to ask about the phrase "add-default-route=yes" in the > >> dhcp-client configuration. That seems wrong on the face of it since you > >>

Re: turning on comcast v6

2013-12-20 Thread Lee Howard
On 12/20/13 8:07 AM, "Jamie Bowden" wrote: > > >> "Parity" isn't enough information; what features are missing? RA is >>part >> of IPv6, but you don't have to use SLAAC. >> I'd say it's the DHC people who need to hear it, not the IPv6 people, >>but >> YMMV. > >I have a question. Why does DHCP

RE: turning on comcast v6

2013-12-20 Thread Matthew Huff
With RA, what is the smallest interval failover will work? Compare that with NHRP such as HSRP, VRRP, etc with sub-second failover. In corporate networks most of the non-client systems will be statically addressed with privacy addresses turned off. This is for regulatory, audit, security and mo

Re: turning on comcast v6

2013-12-20 Thread Dale W. Carder
Thus spake Jamie Bowden (ja...@photon.com) on Fri, Dec 20, 2013 at 01:07:27PM +: > > From: Lee Howard [mailto:l...@asgard.org] > > On 12/20/13 7:36 AM, "Jamie Bowden" wrote: > > >> From: Owen DeLong [mailto:o...@delong.com] > > > > >> I'm almost afraid to ask about the phrase "add-default-r

Re: turning on comcast v6

2013-12-20 Thread Valdis . Kletnieks
On Fri, 20 Dec 2013 12:36:38 +, Jamie Bowden said: > How many times do the IPv6 people have to hear that until DHCPv6 reaches > feature parity with DCHPv4, IPv6 is dead to enterprise networks? How many times do the IPv4 people have to hear that many sites are running IPv6 on enterprise network

Re: turning on comcast v6

2013-12-20 Thread Christopher Morrow
On Fri, Dec 20, 2013 at 11:56 AM, wrote: > On Fri, 20 Dec 2013 12:36:38 +, Jamie Bowden said: >> How many times do the IPv6 people have to hear that until DHCPv6 reaches >> feature parity with DCHPv4, IPv6 is dead to enterprise networks? > > How many times do the IPv4 people have to hear that

Weekly Routing Table Report

2013-12-20 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-st...@lists.ap

Re: turning on comcast v6

2013-12-20 Thread Doug Barton
On 12/20/2013 05:25 AM, Lee Howard wrote: So there's an interesting question. You suggest there's a disagreement between enterprise network operators and protocol designers. Who should change? Rather obviously the protocol designers, since they are clearly out of touch with real-world require

Re: turning on comcast v6

2013-12-20 Thread Owen DeLong
On Dec 20, 2013, at 6:29 AM, Matthew Huff wrote: > With RA, what is the smallest interval failover will work? Compare that with > NHRP such as HSRP, VRRP, etc with sub-second failover. RA and VRRP are not mutually exclusive. What you can’t have (currently) is routing information distributed b

Re: turning on comcast v6

2013-12-20 Thread Ricky Beam
On Fri, 20 Dec 2013 15:16:57 -0500, Doug Barton wrote: On 12/20/2013 05:25 AM, Lee Howard wrote: So there's an interesting question. You suggest there's a disagreement between enterprise network operators and protocol designers. Who should change? Rather obviously the protocol designers,

Re: turning on comcast v6

2013-12-20 Thread Matthew Huff
On Dec 20, 2013, at 3:23 PM, Owen DeLong wrote: > > On Dec 20, 2013, at 6:29 AM, Matthew Huff wrote: > >> With RA, what is the smallest interval failover will work? Compare that with >> NHRP such as HSRP, VRRP, etc with sub-second failover. > > RA and VRRP are not mutually exclusive. What y

Re: turning on comcast v6

2013-12-20 Thread Owen DeLong
On Dec 20, 2013, at 12:50 PM, Matthew Huff wrote: > > On Dec 20, 2013, at 3:23 PM, Owen DeLong wrote: > >> >> On Dec 20, 2013, at 6:29 AM, Matthew Huff wrote: >> >>> With RA, what is the smallest interval failover will work? Compare that >>> with NHRP such as HSRP, VRRP, etc with sub-seco

Re: turning on comcast v6

2013-12-20 Thread Valdis . Kletnieks
On Fri, 20 Dec 2013 15:50:12 -0500, Matthew Huff said: > There is a lot of cruft out there in the enterprise > world that claims IPv6 compatibility, but in the real world doesn't work > consistently. Almost all can be made to work, but require custom > configuration. The exact same

Re: turning on comcast v6

2013-12-20 Thread Christopher Morrow
> > Not all devices have working IPv6 stacks. OK, they’re broken, complain to the > vendor and get them to fix their product or buy a working product from a > different vendor. > I don't know that this is a practical option... for say some systems I know that don't do v6 properly or at all, and

Re: turning on comcast v6

2013-12-20 Thread Mark Andrews
In message , Christopher Morrow writes: > > > > Not all devices have working IPv6 stacks. OK, they're broken, complain > > to the vendor and get them to fix their product or buy a working product > > from a different vendor. > > > > I don't know that this is a practical option... for say some sy

The Cidr Report

2013-12-20 Thread cidr-report
This report has been generated at Fri Dec 20 21:13:36 2013 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/2.0 for a current version of this report. Recent Table History Date

BGP Update Report

2013-12-20 Thread cidr-report
BGP Update Report Interval: 12-Dec-13 -to- 19-Dec-13 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASNUpds % Upds/PfxAS-Name 1 - AS4538 630088 23.4% 151.9 -- ERX-CERNET-BKB China Education and Research Network Center

Re: turning on comcast v6

2013-12-20 Thread Matthew Huff
Owen, Have you ever worked in a corporate environment? Replacing equipment can be a 5-7 year window and has to be justified and budgeted. Replacing a piece of equipment because it's an incomplete IPv6 implementation (which has changed considerably as it has been deployed), isn't feasible. Ther

Re: turning on comcast v6

2013-12-20 Thread Matthew Huff
You can request a fully working IPv6 implementation, but it's not going to stop a purchasing if it doesn't. If you are deciding between two vendors and one is better/cheaper and doesn't have IPv6 and you choose the other, it's likely you will be looking for another job. There is no strong justif

Re: turning on comcast v6

2013-12-20 Thread Owen DeLong
On Dec 20, 2013, at 14:27 , Matthew Huff wrote: > You can request a fully working IPv6 implementation, but it's not going to > stop a purchasing if it doesn't. If you are deciding between two vendors and > one is better/cheaper and doesn't have IPv6 and you choose the other, it's > likely you

Re: turning on comcast v6

2013-12-20 Thread Owen DeLong
On Dec 20, 2013, at 14:16 , Matthew Huff wrote: > Owen, > > Have you ever worked in a corporate environment? Replacing equipment can be a > 5-7 year window and has to be justified and budgeted. Replacing a piece of > equipment because it's an incomplete IPv6 implementation (which has changed

Re: turning on comcast v6

2013-12-20 Thread Eric Oosting
On Fri, Dec 20, 2013 at 5:16 PM, Matthew Huff wrote: > Owen, > > Have you ever worked in a corporate environment? Replacing equipment can > be a 5-7 year window and has to be justified and budgeted. Replacing a > piece of equipment because it's an incomplete IPv6 implementation (which > has chang

Verizon mail IP blacklist contact?

2013-12-20 Thread Tim Burke
Anyone happen to have a contact at Verizon that can actually get an IP delisted in their mail blacklist? I've been attempting to get an IP delisted with Verizon for quite some time, and haven't had luck through their web form ( http://my.verizon.com/micro/whitelist/RequestForm.aspx?id=isp), the

Re: 5.7 *report

2013-12-20 Thread Jay Ashworth
- Original Message - > From: "Mike Schwartz" > That urks me, too. In many web sites that have a state field, you can > at least type the first letter of your state, but you still have to use the > mouse, unless your state is the first one that starts with any given > letter. > When I type

Re: Watchguards vs Junipers firewalls

2013-12-20 Thread Phil Fagan
SRX650 IDP caps at 1gb imix; BGP and OSPF in cluster won't be a problem...but your running up against resource limits if you need to grow. Juniper has a good write up on active active SRX deployments and offer 3gb IDP imix on the 1400.

Re: 5.7 *report

2013-12-20 Thread Henry Yen
On Fri, Dec 20, 2013 at 23:21:08PM -0500, Jay Ashworth wrote: > - Original Message - > > From: "Mike Schwartz" > > > That urks me, too. In many web sites that have a state field, you can > > at least type the first letter of your state, but you still have to use the > > mouse, unless your