Re: Predicting TCP throughput

2015-05-28 Thread Valdis . Kletnieks
On Thu, 28 May 2015 06:45:44 +0530, Glen Kent said: > If i see an RTT of 150ms and packet loss of 0.01% between points A and B > and the maximum throughput then between these as, say 250Mbps. Then can i > say that i will *always* get the same (or in a close ballpark) throughput > not matter what t

Re: Colo Capacity quote in Renton, WA 98057, USA needed

2015-05-28 Thread Sam Oduor
Hi Don Check out http://www.quotecolo.com/colocation/ ; you will enter the requirements inclusive the area you prefer. They will send you referrals and you can choose who to pick. Regards On Thu, May 28, 2015 at 3:30 AM, Don Gould wrote: > Hi, > > I have half a dozen servers in

Password storage (was Re: gmail security is a joke)

2015-05-28 Thread Robert Kisteleki
> Bcrypt or PBKDF2 with random salts per password is really what anyone > storing passwords should be using today. Indeed. A while ago I had a brainfart and presented it in a draft: https://tools.ietf.org/html/draft-kistel-encrypted-password-storage-00 It seemed like a good idea at the time :-)

Re: 10Gb CPE

2015-05-28 Thread Colton Conor
Aren't these Brocade and Juniper solutions just switches? I thought the original poster was asking for a 10G CPE device? On Wed, May 27, 2015 at 2:12 PM, Cody Grosskopf wrote: > I also used brocade icx series for this. Depending on feature requirements > the juniper ex3300 might be cheaper. > >

Extra rooms

2015-05-28 Thread Brandon Ross
I have 2 extra rooms up for grabs at the St. Francis, checking in on Saturday and out on Thursday under the NANOG rate/room block. First come, first served if you want them, send me the full name of the person(s) that the room should go under and contact info. -- Brandon Ross

Re: Password storage (was Re: gmail security is a joke)

2015-05-28 Thread Christopher Morrow
On Thu, May 28, 2015 at 5:29 AM, Robert Kisteleki wrote: > >> Bcrypt or PBKDF2 with random salts per password is really what anyone >> storing passwords should be using today. > > Indeed. A while ago I had a brainfart and presented it in a draft: > https://tools.ietf.org/html/draft-kistel-encrypte

AWS Elastic IP architecture

2015-05-28 Thread Luan Nguyen
Hi folks, Anyone knows what is used for the AWS Elastic IP? is it LISP? Thanks. Regards, -lmn

Re: Password storage (was Re: gmail security is a joke)

2015-05-28 Thread Michael Thomas
On 05/28/2015 02:29 AM, Robert Kisteleki wrote: Bcrypt or PBKDF2 with random salts per password is really what anyone storing passwords should be using today. Indeed. A while ago I had a brainfart and presented it in a draft: https://tools.ietf.org/html/draft-kistel-encrypted-password-storage-00

Re: AWS Elastic IP architecture

2015-05-28 Thread Ca By
On Thu, May 28, 2015 at 7:34 AM, Luan Nguyen wrote: > Hi folks, > Anyone knows what is used for the AWS Elastic IP? is it LISP? > > AWS does not really talk about things like this, but i highly doubt it is LISP. > Thanks. > Regards, > -lmn >

Re: AWS Elastic IP architecture

2015-05-28 Thread Christopher Morrow
On Thu, May 28, 2015 at 11:00 AM, Ca By wrote: > On Thu, May 28, 2015 at 7:34 AM, Luan Nguyen wrote: > >> Hi folks, >> Anyone knows what is used for the AWS Elastic IP? is it LISP? >> >> > AWS does not really talk about things like this, but i highly doubt it is > LISP. i sort of doesn't matter

RE: AWS Elastic IP architecture

2015-05-28 Thread Michael Helmeste
> -Original Message- > From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Christopher > Morrow > Subject: Re: AWS Elastic IP architecture > [...] > i sort of doesn't matter right? it is PROBABLY some form of encapsulation > (like gre, ip-in-ip, lisp, mpls, vpls, etc) ... > [...] I d

Re: AWS Elastic IP architecture

2015-05-28 Thread Christopher Morrow
On Thu, May 28, 2015 at 11:59 AM, Michael Helmeste wrote: >> -Original Message- >> From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Christopher >> Morrow >> Subject: Re: AWS Elastic IP architecture >> [...] >> i sort of doesn't matter right? it is PROBABLY some form of encapsulati

Re: AWS Elastic IP architecture

2015-05-28 Thread Christopher Morrow
On Thu, May 28, 2015 at 11:44 AM, Luan Nguyen (CBU) wrote: > What I am trying to get at is yeah, you still need the l2 extension > encapsulation, but on top you need something for disaster recovery, machines > mobility between data centers, sort of like Vshield Edge using NAT – you can probably w

Re: AWS Elastic IP architecture

2015-05-28 Thread Blair Trosper
I can tell you that EC2 Classic and VPC EIPs come from separate netblocks...if that gives you any hints whatsoever. There's no crossover between the two platforms in IP space. On Thu, May 28, 2015 at 12:08 PM, Christopher Morrow < morrowc.li...@gmail.com> wrote: > On Thu, May 28, 2015 at 11:44 A

RE: AWS Elastic IP architecture

2015-05-28 Thread Michael Helmeste
> -Original Message- > From: christopher.mor...@gmail.com > Subject: Re: AWS Elastic IP architecture > > [...] > > All that is happening is that they have some NAT device somewhere > > (maybe even just a redundant pair of VMs?) that has a block of public > > IPs assigned to it and they > >

Re: AWS Elastic IP architecture

2015-05-28 Thread Christopher Morrow
On Thu, May 28, 2015 at 2:39 PM, Michael Helmeste wrote: > and spending a few gigabytes of RAM for every /23 it's not clear to me that you need ram at all for this... there are multiple dimensions to the scaling problem I was aiming at, this is but one of them. anyway, unless an EC2/aws/etc pers

Re: gmail security is a joke

2015-05-28 Thread Octavio Alvarez
On 05/26/2015 08:44 AM, Owen DeLong wrote: I think opt-out of password recovery choices on a line-item basis is not a bad concept. For example, I’d want to opt out of recovery with account creation date. If anyone knows the date my gmail account was created, they most certainly aren’t me. OTOH,

Re: looking glass software

2015-05-28 Thread Farhan Ali Khan
Hello Bogdan,  have a look http://freecode.com/projects/lg/  it supports IOS, Junos but doesnt support IOS XR if you are comfortable with this one let me know ill try to assist you  to modify the code. i never tried but i do believe with some modification same tool can also work with huawei , norte

Re: gmail security is a joke

2015-05-28 Thread Blair Trosper
Somewhat in the weeds here, but I still find it odd/curious that Google is still using SHA-1 fingerprinted SSL certificates. Weren't they making a big deal of pushing SHA-2 fingerprinted SSL certs a while back? On Wed, May 27, 2015 at 12:16 AM, Octavio Alvarez wrote: > On 05/26/2015 08:44 AM, O

Re: gmail security is a joke

2015-05-28 Thread William Herrin
On Wed, May 27, 2015 at 1:16 AM, Octavio Alvarez wrote: > I would definitely opt-out from any kind of "secret questions" that I > couldn't type by myself. > > Many many sites still think this is a good idea. My first dog's name was a random and unpronounceable 30-character string. -Bill -- W

Re: looking glass software

2015-05-28 Thread Youssef Bengelloun-Zahr
Hello, Anyone that would know of an LG that would work with recent Brocade gear ? Best regards. > Le 27 mai 2015 à 20:48, "Farhan Ali Khan" a écrit : > > Hello Bogdan, > have a look http://freecode.com/projects/lg/ it supports IOS, > Junos but doesnt support IOS XR if you are comfortable w

Re: looking glass software

2015-05-28 Thread Blair Trosper
You can alway try Hurricane's: http://lg.he.net On Thu, May 28, 2015 at 2:24 PM, Youssef Bengelloun-Zahr wrote: > Hello, > > Anyone that would know of an LG that would work with recent Brocade gear ? > > Best regards. > > > > > Le 27 mai 2015 à 20:48, "Farhan Ali Khan" a écrit > : > > > > Hell

Re: Capacity/transit costs vs growth

2015-05-28 Thread James Bensley
On 28 May 2015 at 05:19, Jean-Francois Mezei wrote: > What I am looking for is the networking equivalent to Moore's law: > > "on average, every year, cost of 1gbps capacity goes down by x%" This sort of information is out there for things like transit prices, since they are more common shared in

Re: looking glass software

2015-05-28 Thread Guillaume Mazoyer
Hello, I have developed this looking glass software for me (at home and at work) [1]. It has been tested with Juniper JunOS, Cisco IOS, BIRD and Quagga. And I'm always looking for feedback to improve it. Hope it can be of use. [1] https://github.com/respawner/looking-glass On Wed, May 27, 2015

Re: Password storage (was Re: gmail security is a joke)

2015-05-28 Thread shawn wilson
On May 28, 2015 10:11 AM, "Christopher Morrow" wrote: > > On Thu, May 28, 2015 at 5:29 AM, Robert Kisteleki wrote: > > > >> Bcrypt or PBKDF2 with random salts per password is really what anyone > >> storing passwords should be using today. > > One thing to remember is the hardware determines num

International MPLS VPN recommendation

2015-05-28 Thread Naslund, Steve
Hi, I am looking for some recommendations of carriers to talk to for MPLS VPN connections in the 1 - 10 mbps range between the following areas. Germany, France, United States, China, Japan, Australia, and India. For now I am just looking for carriers known to be good in terms of price/perfor

Re: gmail security is a joke

2015-05-28 Thread Rich Kulawiec
On Thu, May 28, 2015 at 03:13:37PM -0400, William Herrin wrote: > On Wed, May 27, 2015 at 1:16 AM, Octavio Alvarez > wrote: > > I would definitely opt-out from any kind of "secret questions" that I > > couldn't type by myself. > > > > Many many sites still think this is a good idea. > > My first

West Coast FIOS disconnect

2015-05-28 Thread James Laszko
Is anyone else seeing wide spread Verizon FIOS disconnections from the world? Started about an hour ago and extremely spotty. Seeing hundreds of customers with impacted connections that die at the LAX Verizon-GNI hub. James Laszko Mythos Technology Inc Sent from my iPhone

Re: West Coast FIOS disconnect

2015-05-28 Thread Bill Patterson
Seems to be a pretty widespread Verizon issue along the west coast and majority of the eastern US, at least according to down detector. On May 28, 2015 8:12 PM, "James Laszko" wrote: > Is anyone else seeing wide spread Verizon FIOS disconnections from the > world? Started about an hour ago and e

Re: West Coast FIOS disconnect

2015-05-28 Thread Ray Van Dolson
Had a BGP blip with our Verizon circuit around 1620 PDT. On Thu, May 28, 2015 at 08:40:16PM -0400, Bill Patterson wrote: > Seems to be a pretty widespread Verizon issue along the west coast and > majority of the eastern US, at least according to down detector. > On May 28, 2015 8:12 PM, "James Las

RE: West Coast FIOS disconnect

2015-05-28 Thread James Laszko
It's really odd - we seem to have a decent amount of connectivity restored with customers however traceroutes and pings are all failing to sites that are accessible via HTTP/HTTPS.. James -Original Message- From: Ray Van Dolson [mailto:rvandol...@esri.com] Sent: Thursday, May 28,

Re: West Coast FIOS disconnect

2015-05-28 Thread Michael Thomas
It's still down here in SF. Mike On 05/28/2015 05:51 PM, James Laszko wrote: It's really odd - we seem to have a decent amount of connectivity restored with customers however traceroutes and pings are all failing to sites that are accessible via HTTP/HTTPS.. James -Original Messag

Re: AWS Elastic IP architecture

2015-05-28 Thread Jeremy Mooney
At re:Invent they started releasing a surprising amount of detail on how they designed the VPC networking (both layering/encapsulation itself and distributing routing data). Like Michael mentioned, they really stuff as much as possible into software on the VM hosts. That presentation is https://www

Re: gmail security is a joke

2015-05-28 Thread Joe Abley
On 28 May 2015, at 22:18, Rich Kulawiec wrote: On Thu, May 28, 2015 at 03:13:37PM -0400, William Herrin wrote: My first dog's name was a random and unpronounceable 30-character string. I think this (Bill's) is a very good practice. That's what I should do. Instead, I pull down the list of