Re: Gi Firewall for mobile subscribers

2019-04-11 Thread Tore Anderson
* Owen DeLong > What would be the process for a subscriber who wishes to allow inbound > connections? > > If you are simply saying that as a customer of your ISP you simply can’t > allow inbound IPv6 connections at all, then you are becoming a very poor > substitute for an ISP IMHO. I have to

Netgate TNSR software router using DPDK/VPP/FRR

2019-04-11 Thread nanog-isp
Hello NANOG, Has anybody kicked the tires of Netgate's TNSR software router that uses DPDK/VPP/FRR and would like to share their experience? Jared

Multi-tenant Internet Access

2019-04-11 Thread Steve Danello
Hello all; forwarding a question from a couple folks I know that are having issues with Comcast internet access at a seasonal resort on the East Coast. Does anyone know how multi tenant access works? It appears that something has been put in place that prevents cable modems from syncing an

Re: Incoming SSDP UDP 1900 filtering

2019-04-11 Thread Patrick McEvilly
I'm working with Level3 on a similar problem. They filter both UDP and TCP port 1900 on our peer to them. This is blocking all connections that randomly use ephemeral tcp port 1900. They are refusing to remove the tcp port 1900 filter without dispensation from the DDoS security gods. I un

Re: Gi Firewall for mobile subscribers

2019-04-11 Thread Owen DeLong
> On Apr 10, 2019, at 10:39 PM, Mikael Abrahamsson wrote: > > On Wed, 10 Apr 2019, Jan Chrillesen wrote: > >> Also keep in mind that most GGSN/PGW will assign a /64 (and not a /128) > > All 3GPP devices assign /64 per bearer because that's what's in the 3GPP > spec. I've been told 3GPP went

Re: Gi Firewall for mobile subscribers

2019-04-11 Thread Owen DeLong
> On Apr 10, 2019, at 1:20 PM, Amos Rosenboim wrote: > > Owen, > > Let me clarify a few points: > > 1. I am in favor of end to end connectivity and IPv6 can help restore this. > > 2. In the fixed broadband portion of the network this is the case. > IPv6 is routed to the subscriber CPE. > Fir

Re: Gi Firewall for mobile subscribers

2019-04-11 Thread Fred Baker
> On Apr 11, 2019, at 8:43 AM, Owen DeLong wrote: > > I’m pretty sure that no matter how good your power management is, any cell > phone’s battery will die long before its /64 can be scanned. And that might be the point of the scan - not to find the addresses in use, but to deplete the batte

Re: Gi Firewall for mobile subscribers

2019-04-11 Thread Owen DeLong
> On Apr 11, 2019, at 9:45 AM, Fred Baker wrote: > > > >> On Apr 11, 2019, at 8:43 AM, Owen DeLong wrote: >> >> I’m pretty sure that no matter how good your power management is, any cell >> phone’s battery will die long before its /64 can be scanned. > > And that might be the point of th

Re: Incoming SSDP UDP 1900 filtering

2019-04-11 Thread Barry Raveendran Greene
> On Apr 11, 2019, at 10:08, Patrick McEvilly > wrote: > They are refusing to remove the tcp port 1900 filter without dispensation > from the DDoS security gods. I understand blocking UDP 1900, what is the > purpose of Level3 filtering tcp port 1900? Filtering Exploitable Ports and Minimi

Re: Incoming SSDP UDP 1900 filtering

2019-04-11 Thread William Herrin
On Thu, Apr 11, 2019 at 7:15 AM Patrick McEvilly < patrick_mcevi...@harvard.edu> wrote: > I'm working with Level3 on a similar problem. They filter both UDP and TCP port 1900 on our peer to them. This is blocking all connections that randomly use ephemeral tcp port 1900. > > They are refusing to

Re: Incoming SSDP UDP 1900 filtering

2019-04-11 Thread William Herrin
On Thu, Apr 11, 2019 at 12:52 PM Barry Raveendran Greene wrote: > On Apr 11, 2019, at 10:08, Patrick McEvilly wrote: >> They are refusing to remove the tcp port 1900 filter without dispensation from the DDoS security gods. I understand blocking UDP 1900, what is the purpose of Level3 filtering tc

RE: Incoming SSDP UDP 1900 filtering

2019-04-11 Thread Keith Medcalf
On Thursday, 11 April, 2019 08:08, Patrick McEvilly wrote: >I'm working with Level3 on a similar problem. They filter both UDP >and TCP port 1900 on our peer to them. This is blocking all >connections that randomly use ephemeral tcp port 1900. >They are refusing to remove the tcp port 1900

RE: Disney+ CDN

2019-04-11 Thread Aaron Gould
Have we found out yet if Disney+ will have a CDN? Like Netflix oca, Akamai aanp, google ggc, facebook fna … a Disney isp-located cdn presence ? disneyplus.com -Aaron From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Aaron Graves Sent: Saturday, December 29, 2018 7:22 PM

RE: JunOS Fusion Provider Edge

2019-04-11 Thread Aaron Gould
Can I test fusion using vMX and vQFX ? Will it work? -Aaron