Colocation Server Lifts

2016-04-03 Thread Jason Lee
Hi NANOG community, A few questions I have for the community regarding server lifts at colo facilities. 1. Is a server lift something you would typically expect a colo facility to provide? if yes, 2. Do colo facilities typically allow customers to just use them or provide an operator? 3. Is it

Some doubts on large scale BGP/AS design and black hole routing risk

2016-04-03 Thread magicb...@hotmail.com
Hi everybody! as part of laboratory work at the university, I'm working on a BGP design study, and I would like to post some questions regarding IP address space allocation and its impact on BGP which are breaking my mind :) Let's suppose we have an ISP/AS with two POPs: PARIS and LONDON. T

Re: how to deal with port scan and brute force attack from AS 8075 ?

2016-04-03 Thread DV
I have noticed this and especially the strange format of the packets with a SYN/ECE/CWR flag combination: http://pastebin.com/jFCDAmdr This may be $whoever trying to establish network performance/congestion via ECN or it could be something else like a fast scan technique or OS fingerprinting On

Re: how to deal with port scan and brute force attack from AS 8075 ?

2016-04-03 Thread Davide Davini
On 31/03/2016 10:02, marcel.duregards--- via NANOG wrote: > We are facing a lot of port scan and brute force attack on port 22 (but > not limited to) Maybe not super useful in your case but talking about SSH the sysadmin solution would be to disable password login and use just keys. Also, as some

Re: how to deal with port scan and brute force attack from AS 8075 ?

2016-04-03 Thread cyrus ramirez via NANOG
You could use Shields Up to view your vulnerabilities... obvious ones, and remedy... Cyrus Ramirez On Thursday, March 31, 2016 10:21 AM, "valdis.kletni...@vt.edu" wrote: On Thu, 31 Mar 2016 10:02:05 +0200, "marcel.duregards--- via NANOG" said: > We consider port scan and brute force

What services does Microsoft AS8075 provide when peering at IXPs?

2016-04-03 Thread Eric A Louie via NANOG
I had this question posed by a marketing type in my office.  Does anyone know the answer? Is it microsoft.com, msdn, outllook365, msn.com, outlook.com, azure, windows updates, xbox?  what else is possibly covered or omitted in their peering service?  I suppose we have a customer who is an Azure

RE: Fri AM AT&T outage

2016-04-03 Thread Lowe,Chris
When I talked to Frontier about our Office in Tampa, I was told there was a fiber cut that was effecting SoCal and Florida. Not sure how the 2 were related but that is what I was told. Our Tampa office has been down as well since 7:00am local time. -Original Message- From: NANOG [mail

Re: PlayStation Network blocking an IP

2016-04-03 Thread J
I've been seeing abuse reports from Sony lately, indicating IPs are blacklisted on the Playstation Network, mainly for attempted account compromise. Indicating to check for traffic towards some endpoints, resolve the complaint else blacklist again, etc, etc. The address they direct inquiries to

Re: Capacity planning , transit vs last mile

2016-04-03 Thread takashi tome
Like. Good question. There are a lot of papers on traffic model, but it is still an open issue... takashi.tome 2016-03-31 3:51 GMT-03:00 Jean-Francois Mezei : > > Canada is to hold a 3 week long hearing on discussing whether the > internet is important and whether the farcical 5/1 speed promote

Re: Colocation Server Lifts

2016-04-03 Thread Sam Oduor
Yes, I would expect a lift at a colo but in terms of regulations (safety) I do not think it is a mandatory requirement for most colo's Allowing customers to use them can be a yes or no ; it requires some basic operational skills to operate - you just cant trust a client visiting to use it unless s

Re: Some doubts on large scale BGP/AS design and black hole routing risk

2016-04-03 Thread Mark Tinka
On 31/Mar/16 10:12, magicb...@hotmail.com wrote: > > > My questions are: > > 1. What could happen in the case of total failure in the redundant > leased lines? Black hole routing between POPs? If you have redundant backhaul that completely fails, you've got real problems. However, if that doe

Re: What services does Microsoft AS8075 provide when peering at IXPs?

2016-04-03 Thread Valdis . Kletnieks
On Fri, 01 Apr 2016 18:02:56 -, Eric A Louie via NANOG said: > I suppose we have a customer who is an Azure customer that wants to know if > their Azure traffic will stay in our network or still go through the Internet. As a practical matter, if they're using the answer for a security baselin

Re: What services does Microsoft AS8075 provide when peering at IXPs?

2016-04-03 Thread Mike Hammett
"your direct peering can be slow and congested, while there's actually a longer but faster path through someplace else" Possible, but unlikely for most networks. - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest Internet Exchange http://www.midwest

Re: What services does Microsoft AS8075 provide when peering at IXPs?

2016-04-03 Thread Eric A Louie via NANOG
My direct peering is within my control, the traffic has to follow basically the same path internally to Internet and IXP.  Internet path is definitely variable.  IXP path is definitely fixed.  It's already there, just needed to know what Microsoft provided (if anyone knew).  Actually, a MS peeri

Re: Someone Please Help Me Understand

2016-04-03 Thread Faisal Imtiaz
Hi Eric, With this type of connectivity you have to pay attention to Traffic Engineering... And when I say, traffic engineering, I mean both ways.. how you are sending traffic to them along with how they are sending traffic to you... (sometimes a bit more challenging to do). I will give you t

Re: Some doubts on large scale BGP/AS design and black hole routing risk

2016-04-03 Thread Bill Woodcock
Are respondents to suppose that the customer base and address space are evenly divided between the two cities, and that the ISP is too clueless to originate each /23 from the city that uses it, in iBGP? -Bill > On Apr 3, 2016, at 15:04, "magicb...@hotmail.com" > wrote: