Hi,
> Removing a resource from the certificate to achieve the goal you describe
> will make the route announcement NotFound, which means it will be accepted.
> Evil RIR would have to replace an existing ROA with one that explicitly makes
> a route invalid, i.e. issue an AS0 ROA for specific mem
There are in fact five anchors. I am not sure ARIN would be able to stop
anyone holding RIPE space provided the resource holder uses RIPE RPKI
anchor for publishing his ROAs.
Regards,
Baldur
On 21.04.2020 08.51, Matt Corallo via NANOG wrote:
I find it fascinating that in this entire thread
On 21.04.2020 10.56, Sander Steffann wrote:
Hi,
Removing a resource from the certificate to achieve the goal you describe will
make the route announcement NotFound, which means it will be accepted. Evil RIR
would have to replace an existing ROA with one that explicitly makes a route
inval
> On 21 Apr 2020, at 11:09, Baldur Norddahl wrote:
>
>
>
> On 21.04.2020 10.56, Sander Steffann wrote:
>> Hi,
>>
>>> Removing a resource from the certificate to achieve the goal you describe
>>> will make the route announcement NotFound, which means it will be accepted.
>>> Evil RIR would
On 21/Apr/20 08:51, Matt Corallo via NANOG wrote:
> Instead of RIRs coordinating address space use by keeping a public list which
> is (or should be) checked when a new peering session is added, RPKI shifts
> RIRs into the hot path of routing updates. Next time the US government
> decides so
On 20/Apr/20 20:21, Andrey Kostin wrote:
>
> So this means that there is no single source of truth for PRKI
> implementation all around the world and there are different shades,
> right? As a logical conclusion, the information provided on that page
> may be considered incorrect in terms of p
> Anyhow I think some people think about RPKI in a way too binary manner
> 'because it is not secure, it is not useful'. Yes, AS_PATH
> authenticity is an open problem, but this doesn't mean RPKI is
> useless. Most of our BGP outages are not malicious, RPKI helps a lot
> there and RPKI creates a hi
On 21/Apr/20 12:46, Randy Bush wrote:
> essentially agree. my pedantic quibble is that i would like to
> differentiate between the RPKI, which is a database, and ROV, which
> uses it.
And I think that is a very important distinction to be clear about.
Right now, it's not completely arrest-wor
>> essentially agree. my pedantic quibble is that i would like to
>> differentiate between the RPKI, which is a database, and ROV, which
>> uses it.
>
> And I think that is a very important distinction to be clear about.
> Right now, it's not completely arrest-worthy to use RPKI and ROV
> interch
Did anyone notice a huge jump in traffic today between 11:30-11:40 (GMT)
directed at Google and Akamai caches coming from Amazon and Google?
Gaming updates?
Thanks,
Hank
Caveat: The views expressed above are solely my own and do not express
the views or opinions of my employer
Dear All
Does anyone have a contact at SingleHop AS32475 which you can share with me ?
Looking for someone who is responsible for BGP / Routing / AS Path etc ?
Looking forward to hearing from you
Kindest Regards
James Braunegg
[cid:image001.png@01D280A4.01865B60]
1300 769 972 / 0488 997 20
A friend of mine just recently got Xplornet satellite service at his
rural home. I'm well aware of the latency issues with satellite
although frankly his latency is much better than I had feared it would
be and is around 600-700ms.
But what seems to be worse than the latency is the "burstiness" o
Brian,
Satellite services are shared bandwidth broadcast systems. The behavior you’re
seeing is pretty common at times when you’re competing for access with other
users. Just like the regular Internet, there are times of day when people tend
to move more data, and because of latency and other l
> On Apr 21, 2020, at 8:56 AM, Hank Nussbacher wrote:
>
> Did anyone notice a huge jump in traffic today between 11:30-11:40 (GMT)
> directed at Google and Akamai caches coming from Amazon and Google?
> Gaming updates?
>
I’m not seeing any big spikes in our graphs, but what you are describi
Peace,
On Tue, Apr 21, 2020 at 3:57 PM Hank Nussbacher wrote:
> Did anyone notice a huge jump in traffic today between 11:30-11:40 (GMT)
> directed at Google and Akamai caches coming from Amazon and Google?
> Gaming updates?
There's sort of a reason these days to subscribe to the Steam and
Activ
That’s an interesting idea. I’m not sure that LACNIC would want to issue a ROA
for RIPE IP space after RIPE issues an AS0 ROA, though. And you’d at least need
some kind of time delay to give other RIRs and operators and chance to discuss
the matter before allowing RIPE to issue the AS0 ROA, eg i
Right until RIPE finishes deploying AS0 ROAs for bogons, which I recall is
moving forward :p.
> On Apr 21, 2020, at 03:01, Mark Tinka wrote:
>
>
>
>> On 21/Apr/20 08:51, Matt Corallo via NANOG wrote:
>>
>> Instead of RIRs coordinating address space use by keeping a public list
>> which is
Not sure how this helps? If RIPE (or a government official/court) decides the
sanctions against Iranian LIRs prevents them from issuing number resources to
said LIRs, they would just remove the delegation. They’d probably then issue an
AS0 ROA to replace out given the “AS0 ROA for bogons” policy
On Tue, Apr 21, 2020 at 12:17 PM Matt Corallo via NANOG wrote:
>
> Not sure how this helps? If RIPE (or a government official/court) decides the
> sanctions against Iranian LIRs prevents them from issuing number resources to
> said LIRs, they would just remove the delegation. They’d probably the
On Tue, Apr 21, 2020 at 1:10 PM Matt Corallo via NANOG
wrote:
> That’s an interesting idea. I’m not sure that LACNIC would want to issue a
> ROA for RIPE IP space after RIPE issues an AS0 ROA, though. And you’d at
> least need some kind of time delay to give other RIRs and operators and
> chance
Sure. This kinda falls under my point that we should be talking about basic
mitigation, then. I’m not aware of any previous discussion of creating policy
that instructs RIRs to do so. Again, with a basic step like that, plus a
validator-enforced time delay between when a RIR can remove a ROA for
Although I don't know of a way to solve this for videoconferencing,
historically one way to mitigate the radio/vsat "batchiness" issue and its
effect on end-to-end latency was to use a caching proxy server connected to a,
er, "real" network somewhere, preferably as near as possible to the
heade
Baldur Norddahl писал 2020-04-21 02:49:
My company is in Europe. Lets say an attacker joins the IX in Seattle
a long way from here and a place we definitely are not present at. We
do however use Hurricane Electric as transit and they are peering
freely at Seattle. Everyone there thus sees our pr
Hi,
I used to work for a satellite ISP, and if I'm not mistaken Xplornet is buying
bandwidth of my previous employer. That does not mean that your friend is on
the same service.
Where I worked, phy transmissions are scheduled based on tokens. A UT must have
a token to transmit data. If there i
On Tue, 2020-04-21 at 11:11 -0700, Sabri Berisha wrote:
> Hi,
Hi,
> Where I worked, phy transmissions are scheduled based on tokens. A UT
> must have a token to transmit data. If there is no congestion, a
> token will be available and the UT or ground station may transmit.
> Congestion does not n
It’s not really oversold bandwidth. It’s just that the turnaround time for a
bolus of data is too long for two-way video conferencing to be smooth or
reliable. It’s like video conferencing using post cards :)
-mel
> On Apr 21, 2020, at 11:36 AM, Brian J. Murrell wrote:
>
> On Tue, 2020-04-
Utility markers don't get the recognition they deserve. If they aren't
essential workers, they should be and get hazard pay.
They help protect everyone's fiber and cables and pipes that go boom.
On 4/21/20 2:35 PM, Brian J. Murrell wrote:
> Interesting. So basically as Mel said, over-sold network. :-(
This is pretty typical of consumer VSAT and such. You can of course get better
performance...if you're willing to pay for it. If you find the right
carrier/re-seller, you can perhaps f
On 4/21/20 2:54 PM, Mel Beckman wrote:
> It’s not really oversold bandwidth. It’s just that the turnaround time for a
> bolus of data is too long for two-way video conferencing to be smooth or
> reliable. It’s like video conferencing using post cards :)
Are consumer satellite provider networks T
Since in our case they are Outside Plant Tech's who are assigned the
duties as needed, they are essential workers.
On Tue, Apr 21, 2020 at 11:59 AM Sean Donelan wrote:
>
>
> Utility markers don't get the recognition they deserve. If they aren't
> essential workers, they should be and get haz
USIC is not marking on Fridays around here.
URG is marking but only 4 hours a day.
- Jared
> On Apr 21, 2020, at 4:44 PM, Jeff Shultz wrote:
>
> Since in our case they are Outside Plant Tech's who are assigned the
> duties as needed, they are essential workers.
>
> On Tue, Apr 21, 2020 at 11:
On 4/21/20 2:57 PM, Sean Donelan wrote:
Utility markers don't get the recognition they deserve. If they aren't
essential workers, they should be and get hazard pay.
They help protect everyone's fiber and cables and pipes that go boom.
If underground construction is an essential activity (
On Tue, Apr 21, 2020 at 11:57 AM Sean Donelan wrote:
> Utility markers don't get the recognition they deserve. If they aren't
> essential workers, they should be and get hazard pay.
Hi Sean,
I agree that they're essential, but what hazard are we talking about?
The virus isn't mysteriously f
Howdy,,
How do we contact the nanog mail admins? I looked at
https://archive.nanog.org/list and https://archive.nanog.org/list/faq
but apparently someone thought it'd be clever to redact all the email
addresses from that page. "Questions should be directed to[email
protected]."
Thanks,
Bill Herri
In the scope and performance of their duties includes any work involving
essential telecommunications expansion or restoration - then yes.
And agreed. They save lives. Period.
Call before you dig. Please.
-Ben
Ms. Benjamin PD Cannon, ASCE
6x7 Networks & 6x7 Telecom, LLC
CEO
b...@6by7.net <
I think you just need to let scripts run in your browser for nanog.org.
It uses Javascript to add the emails in after the fact, it appears.
On Apr 21, 2020, 17:15, at 17:15, William Herrin wrote:
>Howdy,,
>
>How do we contact the nanog mail admins? I looked at
>https://archive.nanog.org/list and
> I think you just need to let scripts run in your browser for
> nanog.org.
sad. http://nanog.org used to be the brilliant example of a fully
featured web site sans javascript, flash, ...
randy
On 4/21/20 5:11 PM, William Herrin wrote:
> Howdy,,
>
> How do we contact the nanog mail admins? I looked at
> https://archive.nanog.org/list and https://archive.nanog.org/list/faq
> but apparently someone thought it'd be clever to redact all the email
> addresses from that page. "Questions should
Neil Hanlon wrote:
> I think you just need to let scripts run in your browser for nanog.org.
>
> It uses Javascript to add the emails in after the fact, it appears.
Yep. It's obfuscation via an XOR with a key included
in the href. So if you do not want to run javascript,
you can grab the href,
On 4/21/20 6:28 PM, Bryan Fields wrote:
> On 4/21/20 5:11 PM, William Herrin wrote:
>> Howdy,,
>>
>> How do we contact the nanog mail admins? I looked at
>> https://archive.nanog.org/list and https://archive.nanog.org/list/faq
>> but apparently someone thought it'd be clever to redact all the email
It really goes back to what I have maintained in that you can't really
say who is essential or not because such declarations never extend the
full width and breadth of the supply and distribution chain. For
example, someone manufacturing cardboard boxes might not be thought of
as essential but when
On Tue, Apr 21, 2020 at 3:36 PM Bryan Fields wrote:
> I'm also assuming this is about the 5 bounce messages I got from this last
> message to the list "Message to 9728466...@email.uscc.net failed."
Them and the Swedish site that's still opening tickets in Swedish in
response to nanog list posts.
https://www.9news.com/article/news/local/fiber-line-damage-colorado-811-outage-call-before-dig/73-b4b4753d-d524-400d-8cd8-5ee605c02236
Construction crew hits underground fiber line, causes outage of 'call
before you dig' hotline
Through the 811 hotline you can call to have utility lines marked
> I think you just need to let scripts run in your browser for
> nanog.org.
sad. http://nanog.org used to be the brilliant example of a fully
featured web site sans javascript, flash, ...
---
I'm not one to plus-one anything, but this should b
On 4/21/20 5:19 PM, Scott Weeks wrote:
I think you just need to let scripts run in your browser for
nanog.org.
sad. http://nanog.org used to be the brilliant example of a fully
featured web site sans javascript, flash, ...
---
I'm not one t
--- m...@mtcc.com wrote:
From: Michael Thomas
To: nanog@nanog.org
Subject: Re: mail admins?
Date: Tue, 21 Apr 2020 17:34:36 -0700
On 4/21/20 5:19 PM, Scott Weeks wrote:
>
>
>> I think you just need to let scripts run in your browser for
>> nanog.org.
> sad. http://nanog.org used to be the b
On 4/21/20 7:46 PM, Scott Weeks wrote:
--- m...@mtcc.com wrote:
From: Michael Thomas
To: nanog@nanog.org
Subject: Re: mail admins?
Date: Tue, 21 Apr 2020 17:34:36 -0700
On 4/21/20 5:19 PM, Scott Weeks wrote:
I think you just need to let scripts run in your browser for
nanog.org.
sad.
On Tue, Apr 21, 2020 at 8:37 PM Michael Thomas wrote:
> telnet host 587
>
> mail-from <>
>
> rcpt-to <>
>
> data
I did a bit of that last week when Google up and decided that gmail's
"send as" feature would no longer communicate with servers offering
starttls with a self-signed certificate.
-Bil
Peace,
On Wed, Apr 22, 2020, 12:45 AM Randy Bush wrote:
> sad. http://nanog.org used to be the brilliant example of a fully
> featured web site sans javascript, flash, ...
>
That was long ago now. It was using Cvent for everything meeting-related
for 3 years already, and Cvent doesn't feel go
On 21.04.2020 20:59, Brandon Martin wrote:
On 4/21/20 2:35 PM, Brian J. Murrell wrote:
Interesting. So basically as Mel said, over-sold network. :-(
This is pretty typical of consumer VSAT and such. You can of course get better performance...if
you're willing to pay for it. If you find the
50 matches
Mail list logo
