Re: Broadband Router Comparisons

2015-12-24 Thread Rob Seastrom
> On Dec 23, 2015, at 10:38 PM, Lorell Hathcock wrote: > > That's a good troubleshooting technique when the customer is cooperative and > technically competent. ... and has ethernet on anything in the house, which is increasingly a bad thing to rely on. Got an iPad, a smart phone, and a MacB

Re: Broadband Router Comparisons

2015-12-24 Thread Baldur Norddahl
I have reasonable success with simply lending the customer a router. In most cases they will then buy it afterwards, because it turns out that their old router was indeed bad. But you can not win them all. Sometimes it is the other equipment that is bad, or the customer is clueless. They might eve

Re: Broadband Router Comparisons

2015-12-24 Thread Justin Wilson
The trend is a managed router service. This way the ISP can control the customer experience a little better. It also gives the ISP a DMARC point to test from, which is not as reliant on getting the customer involved. Mikrotik makes the hAP lite, which has a retail of $21.95. http://www.balt

RE: Broadband Router Comparisons

2015-12-24 Thread Keith Medcalf
> to take you seriously. Also who here can honestly say you never pretended > to power cycle your Windows 95 when asked by the support bot on the phone, > while actually running Linux, because that is the only way to get passed > on to second tier support? I can honestly say that I have told suppo

RE: Broadband Router Comparisons

2015-12-24 Thread Frank Bulk
+1. Here's one managed option that non-Calix customers, such as WISPs, have found interesting: https://www.calix.com/systems/gigafamily-overview/GigaCenters.html Frank -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Justin Wilson Sent: Thursday, December 24,

Re: Broadband Router Comparisons

2015-12-24 Thread Jason Baugher
Providing a managed service is the direction we're going. In our case, since we're a Calix shop, we're using their GigaCenters, but I'm sure there are other vendor options out there. Early indications are that 95+% of our residential customers would rather pay a nominal "maintenance" fee and use o

de-peering for security sake

2015-12-24 Thread Colin Johnston
see http://map.norsecorp.com We really need to ask if China and Russia for that matter will not take abuse reports seriously why allow them to network to the internet ? Colin

Re: de-peering for security sake

2015-12-24 Thread Valdis . Kletnieks
On Thu, 24 Dec 2015 23:44:10 +, Colin Johnston said: > We really need to ask if China and Russia for that matter will not take abuse > reports seriously why allow them to network to the internet ? Well, first off, it isn't like China or Russia are just one ASN. You'd have to de-peer a bunch o

Re: de-peering for security sake

2015-12-24 Thread Daniel Corbe
Let’s just cut off the entirety of the third world instead of having a tangible mitigation plan in place. > On Dec 24, 2015, at 6:44 PM, Colin Johnston wrote: > > see > http://map.norsecorp.com > > We really need to ask if China and Russia for that matter will not take abuse > reports serious

Re: de-peering for security sake

2015-12-24 Thread Stephen Satchell
On 12/24/2015 04:50 PM, Daniel Corbe wrote: Let’s just cut off the entirety of the third world instead of having a tangible mitigation plan in place. While you thing you are making a snarky response, it would be handy for end users to be able to turn on and off access to other countries retai

Re: de-peering for security sake

2015-12-24 Thread Baldur Norddahl
I am afraid people are already doing this. Every time I bring a new IP series into production, my users will complain that they are locked out from sites including many government sites. This is because people will load IP location lists into their firewall and drop packets at the border. Of course

Re: de-peering for security sake

2015-12-24 Thread Suresh Ramasubramanian
Hmm, has anyone at all kept count of the number of times such a discussion has started up in just the last year, and how many more times in the past 16 or so years? Mind you, back in say 2004, this discussion would have run to 50 or 60 emails at a bare minimum, in no time at all. --srs On 25-

Re: de-peering for security sake

2015-12-24 Thread Owen DeLong
> On Dec 24, 2015, at 17:25 , Stephen Satchell wrote: > > On 12/24/2015 04:50 PM, Daniel Corbe wrote: >> Let’s just cut off the entirety of the third world instead of having >> a tangible mitigation plan in place. > > While you thing you are making a snarky response, it would be handy for end

announcement of freerouter

2015-12-24 Thread mate csaba
hi, pleased to announce a stable release of freerouter. this is a routing daemon that does packet handling itself so it can do bridging, routing ipv4/ipv6 unicast/multicast, mpls, vpls, evpn, mpls te, mldp, segment routing, and so on... speaks a lot of routing protocols like rip, ospf, isis, eigrp

Re: de-peering for security sake

2015-12-24 Thread Owen DeLong
Yes… Isn’t it impressive just how persistent the bad idea fairy can be? Owen > On Dec 24, 2015, at 19:25 , Suresh Ramasubramanian > wrote: > > Hmm, has anyone at all kept count of the number of times such a discussion > has started up in just the last year, and how many more times in the past

Re: de-peering for security sake

2015-12-24 Thread Suresh Ramasubramanian
Well, at least she's here rather than sprinkling eggnog and brandy flavoured pixie dust on our gear over the Christmas break. --srs > On 25-Dec-2015, at 9:08 AM, Owen DeLong wrote: > > Yes… Isn’t it impressive just how persistent the bad idea fairy can be? > > Owen

Re: announcement of freerouter

2015-12-24 Thread Josh Reynolds
RouterOS is an existing product by MikroTik. On Dec 24, 2015 9:46 PM, "mate csaba" wrote: > hi, > pleased to announce a stable release of freerouter. > this is a routing daemon that does packet handling itself > so it can do bridging, routing ipv4/ipv6 unicast/multicast, > mpls, vpls, evpn, mpls

Re: de-peering for security sake

2015-12-24 Thread Joel Jaeggli
While you have a great deal of control over what prefixes you choose to accept... You have very little control over your advertised prefixes once they exit your ASN. Maybe your transits offer communities to control their peer advertisements. In general assuming you're paying for the Internet con

Re: IPv4 shutdown in mobile

2015-12-24 Thread Mark Tinka
On 22/Dec/15 14:45, Ca By wrote: > > At least in mobile, the change to ipv6 has been quick and the pace is > increasing -- not just on ipv6 deployment but also on ipv4 shutdown. I know > many people liken ipv6 to "the boy who cried wolf", so be it, the > data shows the ipv6 wolf is here. Or perh

Re: IPv4 shutdown in mobile

2015-12-24 Thread Mikael Abrahamsson
On Fri, 25 Dec 2015, Mark Tinka wrote: It would be nice to hear about Europe, the Middle East Latin America and Canada as well, if anyone has any stories. I know of at least one mobile provider in Sweden, Finland and Germany that have IPv6 enabled for at least part of their device base. Som