Re: Router ID on IPv6-Only

2022-09-08 Thread Saku Ytti
On Thu, 8 Sept 2022 at 10:01, Bjørn Mork wrote: > Why would you do it differently than for dual-stack routers, except that > you skip the step where you configure the ID as a loopback address? Because you may not have an option, if you're IPv6 only, vendors (e.g. junos) may expect you to punch i

Re: Router ID on IPv6-Only

2022-09-08 Thread Bjørn Mork
Saku Ytti writes: > On Thu, 8 Sept 2022 at 10:01, Bjørn Mork wrote: > >> Why would you do it differently than for dual-stack routers, except that >> you skip the step where you configure the ID as a loopback address? > > Because you may not have an option, if you're IPv6 only, vendors (e.g. > ju

Re: Router ID on IPv6-Only

2022-09-08 Thread Saku Ytti
On Thu, 8 Sept 2022 at 10:22, Bjørn Mork wrote: > I'm not used to punching anything, so I probably have too simple a view > of the world. > > But I still don't understand how this changes the ID allocation scheme, > which is how I understood the question. I assume the punched value was > based o

NANOG 86 - Hotel Group Rate

2022-09-08 Thread Adam Korab
The group rate of $250 USD/night is full and no longer available. Online availability is $355 USD/night. But if you call, wait on hold, and ask for the AAA discount, the rate is $305 USD/night. Thought I would share as it may help others save a little money. AK

Re: Router ID on IPv6-Only

2022-09-08 Thread Randy Bush
> During some IPv6 numbering discussions at work today, someone had a > question that I hadn't really considered before. How to choose 32-bit > router IDs for IPv6-only routers. arbitrary 32 bit number unique in the autonomous system. even in an ipv4 world it does not need to match any configured

Re: Router ID on IPv6-Only

2022-09-08 Thread J. Hellenthal via NANOG
Right! Personally it just needs to be unique. Relying on a Id to be unique when ascociated to an IP address that may be used on a failover system seems really poor to me. Assign a random ID and plug it into your IPAM!. If at anything assign a router ID to a rack location and associate every bi

RE: Router ID on IPv6-Only

2022-09-08 Thread Paul Amaral via NANOG
Is there really such as thing as pure IPV6 only? I don’t think you will be able to run IPV6 for transport without the router locally knowing how to handle IPV4, at least not right now as there’s a lot of legacy code. Usually IPV6 is enabled longer after IPV4 has been running. With that said, can

Re: Router ID on IPv6-Only

2022-09-08 Thread Tom Beecher
> > Is there really such as thing as pure IPV6 only? > Yup. On Thu, Sep 8, 2022 at 11:32 AM Paul Amaral via NANOG wrote: > Is there really such as thing as pure IPV6 only? I don’t think you will be > able to run IPV6 for transport without the router locally knowing how to > handle IPV4, at leas

Re: Router ID on IPv6-Only

2022-09-08 Thread heasley
Thu, Sep 08, 2022 at 08:13:33AM -0700, Randy Bush: > > During some IPv6 numbering discussions at work today, someone had a > > question that I hadn't really considered before. How to choose 32-bit > > router IDs for IPv6-only routers. > > arbitrary 32 bit number unique in the autonomous system. e

Spoofer Report for NANOG for Aug 2022

2022-09-08 Thread CAIDA Spoofer Project
In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address.

Re: Router ID on IPv6-Only

2022-09-08 Thread Randy Bush
> A question Dorian and I discussed but never answered is, how are open > collisions handled if two speakers, presumably an external AS, happen > to have the RID? the uniqueness is supposed to be on the tuple {AS,RID} so an RID 'collision' with a foreign AS should not be possible randy

Re: Router ID on IPv6-Only

2022-09-08 Thread heasley
Thu, Sep 08, 2022 at 10:18:13AM -0700, Randy Bush: > > A question Dorian and I discussed but never answered is, how are open > > collisions handled if two speakers, presumably an external AS, happen > > to have the RID? > > the uniqueness is supposed to be on the tuple {AS,RID} I thought that was

Re: Router ID on IPv6-Only

2022-09-08 Thread Randy Bush
enke and jenny yuan cleaned this up in 6286 randy

Re: Router ID on IPv6-Only

2022-09-08 Thread Jon Lewis
On Wed, 7 Sep 2022, Crist Clark wrote: During some IPv6 numbering discussions at work today, someone had a question that I hadn't really considered before. How to choose 32-bit router IDs for IPv6-only routers. Quick background. We have a requirement to convert a significant portion of our net

Get Ready for NANOG U Fall Tour + N86 + Hackathon Registration

2022-09-08 Thread Nanog News
*Get Ready for NANOG U Fall Tour! * *Join Us For Two Days of Empowering Education + Connection* >From DDoS attacks to mitigation and network optimization, NANOG U is a two-day in-person event that will provide local tech engineering students with a competitive edge. Students will have the opportu

rsync CVE-2022-29154 and RPKI Validation

2022-09-08 Thread Matt Corallo
Has anyone done an analysis of the rsync CVE-2022-29154 (which "allows malicious remote servers to write arbitrary files inside the directories of connecting peers") and its potential impact on RPKI validators? It looks like both Debian [1] and Ubuntu [2] opted *not* to patch rsync in their rele

Re: Router ID on IPv6-Only

2022-09-08 Thread Crist Clark
As I said in the original email, I realize router IDs just need to be unique in an AS. We could have done random ones with IPv4, but using a well chosen address assigned to the router guarantees uniqueness as well as some other useful properties. I was wondering if people had some ways to do som

Re: rsync CVE-2022-29154 and RPKI Validation

2022-09-08 Thread Vincent Bernat
On 2022-09-09 04:56, Matt Corallo wrote: Has anyone done an analysis of the rsync CVE-2022-29154 (which "allows malicious remote servers to write arbitrary files inside the directories of connecting peers") and its potential impact on RPKI validators? It looks like both Debian [1] and Ubuntu [2