Re: Netflix VPN detection - actual engineer needed

Maybe HE's IPv6 tunnel packets could be flagged with a destination option (extension header field) that records the end-user's IPv4 tunnel endpoint so geolocation could be done in the "old fashioned" way on that address. Similar to the way that edns-client-subnet records the end user's address for

Re: NANOG67 - Tipping point of community and sponsor bashing?

On 14 June 2016 at 22:38, Owen DeLong wrote: > So I just watched the video of Dave’s talk. > Me too and I was confused about what the point of it was. I had always assumed the customers of those IXs he singled out were generally happy with the service they were getting and the money they are pa

Re: Request for comment -- BCP38

On 26 September 2016 at 16:47, Laszlo Hanyecz wrote: > > On 2016-09-26 15:12, Hugo Slabbert wrote: > >> >> If you have links from both ISP A and ISP B and decide to send traffic >> out ISP A's link sourced from addresses ISP B allocated to you, ISP A >> *should* drop that traffic on the floor. >

Re: Spitballing IoT Security

On 25 October 2016 at 09:37, Jean-Francois Mezei < jfmezei_na...@vaxination.ca> wrote: > > One way around this is for the pet feeder to initiate outbound > connection to a central server, and have the pet onwer connect to that > server to ask the server to send command to his pet feeder to feed the

Re: Fiber Bypass Switch

NTT-AT presented their optical bypass products at LINX81, seems like they might do what you want: http://www.ntt-at.com/product/optical-switch/ I haven't used them myself. Aled On 27 January 2014 19:26, Keyser, Philip wrote: > Looking for something similar to this. > > > > http://www.moxa.co

Re: Need trusted NTP Sources

GPS time sources are pretty cheap (< US$500) and easy to set up nowadays. You could probably build your own for less that US$100: http://www.satsignal.eu/ntp/Raspberry-Pi-NTP.html Aled On 6 February 2014 11:51, Notify Me wrote: > According to the auditors, "trusted" means > > 1. Universities

Re: Need trusted NTP Sources

On 6 February 2014 12:30, Martin Hotze wrote: > > I'm trying to help a company I work for to pass an audit, and we've > > been told we need trusted NTP sources (RedHat doesn't cut it). Being > > located in Nigeria, Africa, > [...] > So build your own stratum 1 server (maybe a second one with DC

Re: Residential CPE suggestions

On 8 May 2014 17:30, Randy Carpenter wrote: > > I would love to see the EdgeRouter Lite, or something similar with 2 SFP > ports and 2 1000bT ports (Which would fit with the OP's question). Q-in-Q > tunneling and basic routing required, but not much else for me. Bonus > points points for somethin

Re: Residential CPE suggestions

On 9 May 2014 12:05, Aled Morris wrote: > Indeed. Mikrotik are promising a CCR1009 with 2xSFP and 8xUTP GE ports > (and dual PSU) for $425 but it isn't an access switch (so no Q-in-Q) though > it does support MPLS/VPLS. > Apologies for correcting myself, but I just chec

Re: FTTH ONTs and routers

I notice Cisco's new ME4600 ONT's come in two flavors, one (the "Residential GateWay") with all the bells and whistles that you'd expect in an all-in-one home router (voice ports, small ethernet switch, wifi access point) and another (the "Single Family Unit") that looks a lot more basic and is lik

Re: Verizon Public Policy on Netflix

On 13 July 2014 06:39, Steven Tardy wrote: > (OK, Keep 100mbps for Netflix to pre-populate, 100mbps is 30TB/month) > (Now I'm curious how many GB/month Netflix pre-populates, hmmm) > Shame Netflix can't fill their appliances using really cheap, bulk, one-way satellite bandwidth which is useless

Re: William was raided for running a Tor exit node. Please help if you can.

On 3 December 2012 07:19, Joakim Aronius wrote: > I am all for providing anonymized access to help free speech. Perhaps its > better with anon access to specific applications like twitter, fb etc and > not general internet access. I suspect that the 'free speech' part of the > total tor traffic

Re: why haven't ethernet connectors changed?

On 20 December 2012 18:20, Michael Thomas wrote > ethernet > connectors haven't changed that I'm aware in pretty much 25 years. 15-pin D-type AUI connectors with slide latches? BNC for thinwire? I do agree though, something more like mini-USB would be more appropriate for home Ethernet use.

Re: why haven't ethernet connectors changed?

On 21 December 2012 09:59, Eugen Leitl wrote: > > Something optical, like a >10 GBit/s SR version of TOSLINK > would be nice. > > Good luck with that! :-) Referring back to the original question and the reference to Raspberry Pi... The latest HDMI has Ethernet capability and the connector is al

Re: why haven't ethernet connectors changed?

On 21 December 2012 18:22, Chris Adams wrote: > I will say that one nice thing about having different connectors for > different protocols (on consumer devices anyway) is that you don't have > to worry about somebody plugging the Internet into the "Video 1" port > and wondering why they aren't ge

Re: why haven't ethernet connectors changed?

On 23 December 2012 01:07, Wayne E Bouchard wrote: > They serve quite well until I get to a switch that some douchebag > mounted rear facing on the front posts of the rack I see this all the time with low-end Cisco ISR products (2... and 3... routers) since CIsco insist on having a "pretty" pl

Re: The 100 Gbit/s problem in your network

"Multicast" Aled On 8 February 2013 13:42, Jay Ashworth wrote: > "Akamai". > > The actual example is "to watch the Super Bowl". :-) > > fredrik danerklint wrote: > > >- Well, as it turns out, we don't have that kind of a problem. > > > >- You don't? > > > >- No, we do not have that kind of a

Re: The 100 Gbit/s problem in your network

nanog@nanog.org > Subject: Re: The 100 Gbit/s problem in your network > > On (2013-02-08 14:15 +), Aled Morris wrote: > > > "Multicast" > > I don't see multicast working in Internet scale. > > Essentially multicast means core is flow-routing. So we&#x

Re: [c-nsp] DNS amplification

On 19 March 2013 01:06, Masataka Ohta wrote: > LISP merely attempts to replace BGP routing table bloat with > something a lot worse than that, that is, a lot more serious > routing table bloat of its mapping system. > I'm guessing you're not a fan of LISP, but in it's defense I'd say the mapping

Re: [c-nsp] DNS amplification

On 20 March 2013 11:44, Arturo Servin wrote: > > The last presentations that I saw about it said that we are going > to be > fine: > > http://www.iepg.org/2011-11-ietf82/2011-11-13-bgp2011.pdf > http://www.iepg.org/2011-11-ietf82/iepg-20.pdf > > > It isn't just about "imminient death

Re: Whacky Weekend: Is Internet Access a Human Right?

On 5 January 2012 15:22, Jay Ashworth wrote: > Understand: I'm not saying that FiOS should be a human right. But as a > society, America's recognized for decades that you gotta have a telephone, > and subsidized local/lifeline service to that extent; that sort of subsidy > applies to cellular ph

Re: time sink 42

On 17 February 2012 00:52, Sven Olaf Kamphuis wrote: > > On Thu, 16 Feb 2012, Jerry Jones wrote: > > I have been scoring paper back VERY lightly near one end with razor >> knife, then peeling off. >> > > sounds like something that increases the time it takes to make and put one > single label on

Re: WW: Colo Vending Machine

On 17 February 2012 18:43, Eric Tykwinski wrote: > +1 for GBICs, SFPs > > You'll need to be carrying a lot of loose change then :-) My ideal vending machine would dispense Cat5e by the foot, the more you pull the more you pay, RJ45 plugs in pairs, and a crimp tool on a long chain (like the way y

Re: WW: Colo Vending Machine

On 17 February 2012 23:23, david raistrick wrote: > On Sat, 18 Feb 2012, Pierre-Yves Maunier wrote: > > 6 - plastic cable clamps (don't know the exact english term for that but I >> mean this --> >> http://www.hellopro.fr/images/**produit-2/9/3/8/serre-cables-**261839.jpg

Re: VLAN Troubles

"show vlan" will tell you if the VLAN has been created on the Cisco. The config to create it is easy (and necessary): ! vlan 25 name Radiology ! Aled On 6 March 2012 17:55, Jason Baugher wrote: > +1 on show interface trunk, which will probably tell you that only vlan 1 > is allowed on your

Re: Huawei edge routers..

On 7 March 2012 15:25, Jay Ashworth wrote: > - Original Message - > > From: "Saku Ytti" > > > On (2012-03-07 09:46 -), Tim Franklin wrote: > > > This does occasionally brighten up my day with gems like "rip no > > > work" and "reset-recycle-bin", so it's not all bad :) > > > > I like

Re: Programmers with network engineering skills

On 13 March 2012 06:50, Jeroen van Aart wrote: > Unless in cases such as Owen mentioned I'd say it's a pretty good > solution. The madness to me lies in making your own email validating code... > > Not forgetting Lett's Law Aled

Re: $1.5 billion: The cost of cutting London-Tokyo latency by 60ms

On 23 March 2012 11:53, Eugen Leitl wrote: > All three cables are being laid for the same reasons: Redundancy and speed. > As it stands, it takes roughly 230 milliseconds for a packet to go from > London to Tokyo; the new cables will reduce this by 30% to 170ms. This > speed-up will be gained by

Re: Penetration Test Assistance

On 5 June 2012 15:52, Green, Timothy wrote: > Howdy all, > > I'm a Security Manager of a large network, we are conducting a Pentest > next month and the testers are demanding a complete network diagram of the > entire network. > > I'd treat this as the first of their pen tests - a social engineer

Re: CVV numbers

On 9 June 2012 22:42, Scott Howard wrote: > There is no way to "derive" the CVV2 number. It is little more than a > random number assigned to the card. > [...] > It is verified by comparing it to the known CVV2 number stored by the > credit card company/bank that issued the card. > > I don't thi

Re: vulnerability and popularity (was: EBAY and AMAZON)

On 13 June 2012 13:33, Andrew Sullivan wrote: > On Wed, Jun 13, 2012 at 07:55:37AM -0400, Rich Kulawiec wrote: > > > If popularity were the measure of relative OS security, then we would > > expect to see infection rates proportional to deployment rates > > I don't buy that premise, or at least n

Re: Verizon's New Repair Method: Plastic Garbage Bags

On 20 August 2012 20:41, Joe Greco wrote: > We had a pedestal around here that was covered, I want to say for years, > though it might have been just a year or two, with a work tent. If you > have never seen one: > > http://store.mohawkltd.com/Pelsue-FTTH-Installer-Tent-Shelter/P3072_868/ > > Lo

Re: guys != gender neutral

On 27 September 2012 22:34, Lorell Hathcock wrote: > Police-clown. Yep! Here in the UK, apparently the government preferred term for policepersons is "pleb"... http://duckduckgo.com/?q=police+pleb Aled

Re: IOS architecture

On 29 October 2012 12:43, wrote: > On Sat, 27 Oct 2012 11:16:10 +0100, "Darren O'Connor" said: > > All vendors should be writing in depth architecture books. The Juniper > MX > > book is a great example. Tell us exactly what your product can do and > we'll > > likely use more of it > > On the fl

Re: FTTx Active-Ethernet Hardware

http://www.cisco.com/c/en/us/products/collateral/routers/asr-920-series-aggregation-services-router/datasheet-c78-733397.html Aled On 11 February 2015 at 12:49, Tarko Tikan wrote: > hey, > > I understand it is now being replaced by the ASR920, which is a little >> odd if you look at port densi

Fw: new message

Hey! New message, please read <http://africancichlidphotos.com/somebody.php?4z921> Aled Morris

Re: DataCenter color-coding cabling schema

On 14 March 2016 at 00:23, William Herrin wrote: > On Sat, Mar 12, 2016 at 2:11 PM, Yardiel Fuentes > wrote: > > Have any of you had the option or; conversely, do you know of “best > > practices" or “common standards”, to color code physical cabling for > your > > connections in DataCenters for

Re: Verizon Policy Statement on Net Neutrality

On 1 March 2015 at 03:41, Barry Shein wrote: > Previously all residential service (e.g., dial-up, ISDN) was > symmetrical. The rot set in with V.90 "56k" modems - they were asymmetric - only the downstream was 56k. The only way to achieve this in the analogue realm was by digital synthesis at

Re: Verizon Policy Statement on Net Neutrality

On 2 March 2015 at 14:41, Scott Helms wrote: > We see customer usage patterns and satisfaction being statically the same > on 25/25 and 25/8 accounts. The same is true when we look at 50/50 versus > 50/12 accounts. perhaps because there are no widely-deployed applications that are designed wit

Re: Cox Communications Peering

Generic advice... I'd be more inclined to find someone who already peers with them, who can sell you partial transit; especially if they can hand this to you at a location where this peering happens. Aled On 4 March 2015 at 14:51, Conley Bone wrote: > Someone suggested I rephrase my question..

Re: Phone adapter with router

On 11 March 2015 at 10:45, Nick Hilliard wrote: > On 11/03/2015 10:02, Baldur Norddahl wrote: > > It should be possible to do the emergency call without a SIM. That way > you > > got 112 / 911 calls covered... > > emergency calls without sim are part of the gsm standard. So unless the > OP's pro

Re: Phone adapter with router

On 11 March 2015 at 11:04, Aled Morris wrote: > Can't find a definitive reference but this concurs with my recollection of > a policy introduced in 2009: > Better reference: http://ec.europa.eu/information_society/newsroom/cf/document.cfm?doc_id=1674 1.3. Availability of 1

Re: Low Cost 10G Router

On 20 May 2015 at 15:00, Pavel Odintsov wrote: > Yes, you could do filtering with Quagga. But Quagga is pretty old tool > without multiple dynamic features. But with ExaBGP you could do really > any significant route table transformations with Python in few lines > of code. But it's definitely ad

Re: Low Cost 10G Router

On 20 May 2015 at 17:44, Colton Conor wrote: > So are the rest of the processes in Mikrotik OS multi threaded? I would > hope so to take advantage of 36 cores! > The forthcoming new major software release from Mikrotik apparently will have multi-threaded BGP - it is targetted at their (also fort

Re: OSPF Vulnerability - Owning the Routing Table

Cisco published an advisory on OSPF vulnerability yesterday I think. I assume it's related. OSPFv3 is not vulnerable, and connections protected by MD5 are safe too, apparently. Aled On 2 August 2013 17:40, Glen Kent wrote: > Hi, > > Does anybody have details on what this vulnerability is? >

Re: turning on comcast v6

On 4 January 2014 06:06, Ricky Beam wrote: > It'll **NEVER** be a default because it breaks too many clueless people's > networks. Just like, surprise, DHCP "guard" isn't on by default in any > gear I'm aware of. > > Spanning-tree portfast isn't on by default, and that breaks plenty of clueless

Re: 10gbps peering subscriber switch recommendation

On 6 January 2014 17:57, randal k wrote: > Good morning, > We're in the market to move our IX peering off of our core (too much > BGP/CPU :-/ ) and onto a dedicated switch. > > Anybody have a recommendation on a switch that can do the following > without costing a fortune? I have scoured Cisco, a

Re: Open source hardware

On 7 January 2014 13:57, Vlade Ristevski wrote: > Sorry to get off topic, but is there a company that you can recommend? The > price of the Cisco single mode GLC-LH-SMD= is killing me. I see a bunch of > third party ones on Amazon and CDW but I'd to love to get my hands one > that has the correc

Re: Reminiscing our first internet connections (WAS) Re: akamai yesterday - what in the world was that

On Mon, 27 Jan 2020 at 12:13, Rob Pickering wrote: > Wasn't the 56/64k thing a result of CAS (bit robbed) signalling which was > a fudge AT&T did to transport signalling information in-band on T1s by > stealing the low order bit for OOB signalling (it wasnt actually every low > order bit, but mea

Re: Reminiscing our first internet connections (WAS) Re: akamai yesterday - what in the world was that

On Mon, 27 Jan 2020 at 12:53, Bryan Holloway wrote: > > I seem to also recall that you couldn't use a 56k modem unless the > far-end was digital. > Exactly so - the connection to the telephone network needed to be as "clean" as possible for the modem to achieve the best rate, which was only poss

Re: akamai yesterday - what in the world was that

On Mon, 27 Jan 2020 at 16:43, Paul Ebersman wrote: > > first personal connection was a dedicated dialin using a telebit > trailblazer at 9600 bps. that was a benefit of work. > Got to respect a modem with firmware that recognised hosts talking UUCP protocol and optimised for it! Aled

Re: QUIC traffic throttled on AT&T residential

On Thu, 20 Feb 2020 at 15:57, Dave Bell wrote: > > On Thu, 20 Feb 2020 at 15:31, Ca By wrote: > >> UDP is broken >> > > I would argue that UDP isn't broken. Networks which drop it > indiscriminately are broken. > Does this errant network behaviour not impact RTP applications like video streams?

Re: Juniper MX204 allow oversubscription?

On Mon, 16 May 2022 at 18:52, Randy Carpenter wrote: > My hope for a successor (MX205 ?) would be more flexibility and 25G ports. > 4x100G+8x25G would be awesome. > > I was hoping the MX304 would be the upgrade, but it seems like overkill - 2U, modular with dual processors, up to 96 x 10/25 GbE,

Re: Upstream bandwidth usage

On Sat, 11 Jun 2022 at 01:23, Mark Tinka wrote: > We've seen proposals from Huawei, for example, where OLT shelves can > support both GPON and XG-PON line cards. > I've been installing PON equipment for 2+ years where all the ports can be fitted with optics (SFPs) that support both GPON and XGS-

Re: SFP supplier in Europe?

On Thu, 4 Apr 2019 at 21:52, wrote: > Thanks to everybody that recommended Fiberstore and Flexoptics. > > Unfortunately Fiberstore is what led me to ask about alternative > suppliers. Fiberstore actually ships in their Bidi SFPs from Asia and lead > times are one to two weeks. Flexoptics is actua

Re: 44/8

The biggest tragedy here is that Amazon now have yet another block of IPv4 which means the migration to IPv6 will be further delayed by them and people who "can't see the need" because their AWS server instance can get an IPv4 address. All of this puts more pressure on the access networks to keep

Re: MAP-E

On Fri, 2 Aug 2019 at 14:49, Brian J. Murrell wrote: > Will any of these (including MAP-E) support such nasty (in terms of > burying IP addresses in data payloads) protocols as FTP and SIP/SDP? > I'm a fan of these solutions that (only) use NAT44 in the CPE as this is exactly what they're curren

Re: Mx204 alternative

The forthcoming Juniper ACX700 sounds like a good fit for metro Ethernet with 4x100G and 24x10G in a shallow 1U hardened form factor. Aled

Re: Mx204 alternative

On Mon, 2 Sep 2019 at 10:14, Mark Tinka wrote: > > > On 2/Sep/19 11:02, Aled Morris via NANOG wrote: > > The forthcoming Juniper ACX700 sounds like a good fit for metro > > Ethernet with 4x100G and 24x10G in a shallow 1U hardened form factor. > > Do you know what ch

Re: Any info on devices that are running eBGP on the Internet?

On Thu, 7 Nov 2019 at 19:59, Edward Dore < edward.d...@freethought-internet.co.uk> wrote: > I just grabbed the following from our routers connected to LINX LON1, LINX > LON2, LINX Manchester and LONAP (so this data is very UK centric): > ... >1 DIGITAL EQUIPMENT CORPORATION > Kudos to whoeve

Re: RIPE our of IPv4

On Tue, 3 Dec 2019 at 14:43, Randy Bush wrote: > > Why does a new organisation need to have any global IPv4 addresses of > > their own at all? > > if all folk saying such things would make their in- and out-bound mail > servers v6-only, it would reduce confusion in this area. > > randy > ...!6to

Re: OpenDNS CGNAT Issues

On Tue, 11 Sep 2018 at 13:56, Ca By wrote: > You should provide your users ipv6, opendns supports ipv6 and likely will > not have this issue you see > OpenDNS does not support IPv6 for their customisable services "Home" etc. which I believe is the service the OP is using as he refers to the end-

Re: IGP protocol

On Tue, 13 Nov 2018 at 05:54, Brandon Martin wrote: > I was of the impression that there was a draft or similar for > single-topology (IPv4+IPv6) OSPF. Did anything ever come of that? > > Juniper support IPv4 families ("realms") in OSPFv3. Aled

Re: Cheap switch with a couple 100G

On Sun, 25 Nov 2018 at 21:42, Tom Hill wrote: > Chicken & egg: someone has to move first... And I don't see the ASR9k > and Juniper MX BUs rushing to support 25 & 50G. > Juniper have launched a Trident based switch with 48 x 25G ports (the QFX5120-48Y.) But I agree the commercials aren't as sim

Re: A few GPON questions...

On Tue, 11 Dec 2018 at 17:30, Jason Lixfeld wrote: > There’s only so much space in conduits, risers and ducts. At some point, > scale would press this up against physical infrastructure realities depending > on how far the active gear at the head end is from the subscriber. A point made earlie

Re: A few GPON questions...

On Tue, 11 Dec 2018 at 21:16, Tony Wicks wrote: > > I remember working for this little company called EDS... Some bright spark > decided that ATM to the desktop was the future (not this ethernet (or even > token ring) thing) and subsequently converted several thousand head office > machines to

Re: Enterprise GPON / Zhone Questions

On Wed, 12 Dec 2018 at 06:48, Baldur Norddahl wrote: > It is possible one should not choose this system over a traditional approach, > but the people screaming "rip it out" are out of line IMHO. It would be a > huge expense to rewire a building with copper and they already got a working > fiber

Re: plaintext email?

You can hide your secret message by writing: dash dash space return Followed by your message. It’ll be hidden from all but the Internet illuminati Aled On Tue, 15 Jan 2019 at 22:00, cosmo wrote: > Sudden plot-twist! > > A small elite group of NANOG participants have been using stenographic

Re: Network Speed Testing and Monitoring Platform

On Wed, 16 Jan 2019 at 20:49, wrote: > On Wed, 16 Jan 2019 19:26:41 +, Chris Kimball said: > > Would a raspberry pi work for this? > > > > Could 3D print a nice case with your logo for it. > > The Pi has a bandwidth limit at 300mbits/sec due to a USB port being used. > I've been using Hardke

Re: BGP Experiment

On Wed, 23 Jan 2019 at 17:58, Naslund, Steve wrote: > I hope you are as critical of your hardware vendor that cannot accept BGP4 > compliant attributes or have you just not updated your code? You can black > hole anything you want but as long as the “Internet” is sending you an RFC > compliant B

Re: CPE/NID options

I don't think IP Infustion makes hardware - their OCNOS software runs on many third-party white-box platforms from the likes of EdgeCore and UfiSpace. There may well be a device that suits the OP's requirements amongst the supported hardware list. I refer you to this handy table: https://www.ip