Re: IPv6 BGP table size comparisons

2010-12-21 Thread Pekka Savola
ranges but not in the PA ranges. So the question is not necessarily just about the prefix length used because it might vary by the prefix. -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds." Systems. Networks. Security.

Re: IPv6 BGP table size comparisons

2010-12-22 Thread Pekka Savola
aking people stop advertising unnecessary more-specific routes?'.) I don't expect that to change. -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings

Re: IPv6 Advertisements

2007-05-28 Thread Pekka Savola
some subsets of the v6 address space that have a higher chance of /48 working (for some definition of 'working') than other parts of the address space, though. -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds.&quo

Re: DNS for RFC3180 GLOP reverse zone ?

2010-05-06 Thread Pekka Savola
pletion of abovementioned draft.) -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings

Re: UPDATED - Comcast enables 6to4 relays

2010-08-31 Thread Pekka Savola
On Tue, 31 Aug 2010, John Jason Brzozowski wrote: Enabled two more 6to4 relays this morning. :) Out of curiousity, what is the aggregate Mbps load on the relays? Related question is the platform on which these are run. -- Pekka Savola "You each name yourselves king, ye

Re: ICMPv6 rate limits breaking PMTUD (and traceroute) [Re: Comcast enables 6to4 relays]

2010-09-01 Thread Pekka Savola
address and your destination is e.g. behind PPPoE, so... -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings

Re: XO - a Tier 1 or not?

2009-07-28 Thread Pekka Savola
On Tue, 28 Jul 2009, Charles Mills wrote: Is XO Communications a Tier 1 ISP? ... Any help here? Thanks as always. http://en.wikipedia.org/wiki/Tier_1_network -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds.&quo

Re: IPv6 routing /48s

2008-11-18 Thread Pekka Savola
side from 2001:0c00::/23 for /48 assignments; based on their web pages, they have policies for at least multihoming, IXs and critical infrastructure. But I couldn't find info which block these are from. -- Pekka Savola "You each name yourselves king, yet the Netcore

Re: IPv6 routing /48s

2008-11-20 Thread Pekka Savola
es up when v4 address is rfc1918) and "prefer matching label" is checked before preference. -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings

Re: Recommendation of Tools

2008-12-02 Thread Pekka Savola
mtr ? - http://www.bitwizard.nl/mtr/ FWIW, Mtr measures latency/delay and loss based on ICMP messages heard back from the routers on path. As a result, in almost all cases, the real hop-by-hop latency of actual end-to-end data packets is better than it can report. -- Pekka

Re: Recommendation of Tools

2008-12-03 Thread Pekka Savola
On Tue, 2 Dec 2008, Antonio Querubin wrote: On Wed, 3 Dec 2008, Pekka Savola wrote: FWIW, Mtr measures latency/delay and loss based on ICMP messages heard back from the routers on path. As a result, in almost all cases, the real hop-by-hop latency of actual end-to-end data packets is better

Re: Recommendation of Tools

2008-12-04 Thread Pekka Savola
.0 series). Actually, 5 years ago, you could see spot Cisco routers in "traceroute6" because they dropped the rate-limiter didn't respond to the middle packet and it resulted in a star. The rate-limiter has long since been fixed to be more lenient. -- Pekka Savola

RE: IPv6 delivery model to end customers

2009-02-09 Thread Pekka Savola
have ethernet and IP". Why is plain-ethernet with each subscriber provisioned in a separate router's vlan subinterface insufficient? There is no security issue because each subscriber only sees its own traffic. -- Pekka Savola "You each name

Re: BGP nexthop-self vs. EIGRP redistribution

2009-03-18 Thread Pekka Savola
outes immediately, rather than waiting for the routes being BGP WITHDRAWn. Loopback and n-h-s seems to always make sense for those interfaces which are singlehomed to that router (no redundancy) -- otherwise you may want to consider which one is best. -- Pekka Savola "You

Re: NAT64/NAT-PT update in IETF, was: Re: Important New Requirement for IPv4 Requests [re "impacting revenue"]

2009-04-23 Thread Pekka Savola
anged. That's what I've found, anyway. Might not always be true. If you were to go to meetings, you would realize that it won't help in "gettings things changed" significantly better than active mailing list participation would... :-/ -- Pekka Savola "You

TeliaSonera routing issue / microsoft.com

2007-09-06 Thread Pekka Savola
-3-0-44.sjc-64cb-1a.ntwk.msn.net (207.46.44.98) 161.814 ms 155.456 ms 157.559 ms 8 ge-1-0-0-0.bay-64c-1a.ntwk.msn.net (207.46.37.158) 156.229 ms 158.292 ms 156.223 ms -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom b

Re: IPv6 firewall support

2007-10-27 Thread Pekka Savola
isn't good enough and may result in some nasty surprises later on. For example, Netscreens cannot presently filter IPv6 in transparent (bridged) mode, only in routed mode. The feature is AFAIK in the roadmap but over a year away. -- Pekka Savola "You each name your

Re: [NANOG] US DoD receives chunked IPv6 /13 (14x /22 but not totally consecutive)

2008-05-18 Thread Pekka Savola
superblock that covers everything" (with no implied statement on the more specifics). Even if the interpretation is the second, the "benefit" of multiple allocations is that they wouldn't need to route between all the suballocations at least in one location in ca

Re: route policy (Re: Public shaming list for ISPs announcing other ISPs IP space by mistake)

2008-08-14 Thread Pekka Savola
. But the above feature dilutes the trustworthiness of RIPE DB slightly... -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings

Re: route policy (Re: Public shaming list for ISPs announcing other ISPs IP space by mistake)

2008-08-15 Thread Pekka Savola
eful model in the long run. -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings

Re: Is it time to abandon bogon prefix filters?

2008-08-19 Thread Pekka Savola
-bcp84-urpf-experiences-03.txt (comments are also welcome.) -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings

Re: an effect of ignoring BCP38

2008-09-11 Thread Pekka Savola
ogons is not that big and it causes transient losses when the routing tables are changing. -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings

Re: an effect of ignoring BCP38

2008-09-11 Thread Pekka Savola
rom a misunderstanding of how loose uRPF works (he didn't know it accepts any packet that has a route in the routing table). -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings

Re: an effect of ignoring BCP38

2008-09-11 Thread Pekka Savola
draft-savola-bcp84-urpf-experiences Section 3 discusses this a bit. FWIW: we use feasible-paths strict uRPF on all customer and LAN interface without exception. Multihomed ones as well, though it's a bit more work. -- Pekka Savola "You each name yourselves kin

Re: New Intercage upstream

2008-09-12 Thread Pekka Savola
08 at 4:29 AM, <[EMAIL PROTECTED]> wrote: Looks like they found a new willing partner. AS32335 PACIFICINTERNETEXCHANGE-NET - Pacific Internet Exchange LLC. http://cidr-report.org/cgi-bin/as-report?as=AS27595 http://www.pacificinternetexchange.net/ Marc -- Pekka Savola

Re: community real-time BGP hijack notification service

2008-09-14 Thread Pekka Savola
anyway. Not sure if that was true, but I didn't purse this further. -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings

RE: 2009 Worldwide Infrastructure Security Report available for download.

2010-01-21 Thread Pekka Savola
ence, even if you filter BGP, you may not be able to filter packets except in simple scenarios. -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings

RE: Using /126 for IPv6 router links

2010-01-26 Thread Pekka Savola
suppose those would be pretty big ifs. -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings

Re: IPv6 enabled carriers?

2010-03-10 Thread Pekka Savola
On Wed, 10 Mar 2010, Chris Grundemann wrote: SixXS maintains a list here: http://www.sixxs.net/faq/connectivity/?faq=ipv6transit. I think that list should also include TeliaSonera. TSIC does offer v6 transit, although their product sheet only mentions IPv4. -- Pekka Savola

Re: quietly....

2011-02-04 Thread Pekka Savola
Semi-OT: "You are now what we need you to be. A beaten, resentful people who will have to rebuild, who will have to rely on our.. good graces. Who can be used and.. guided as we wish to guide you. Perfect ground for us to do our work.. Quietly, quietly." Sorry.

RE: Internet Edge Router replacement - IPv6 route table sizeconsiderations

2011-03-10 Thread Pekka Savola
must be annoying to change all those static neighbor entries when the interfaces fail, links must be migrated to another line cards or you replace routers. -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds." Sy

Re: SIXXS contact

2011-04-26 Thread Pekka Savola
response was non-existent, or simply unfortunate, so I'm trying other avenues. Echo that. IPv6 bgp peering for distributed looking glass has been down for some 6 months or so now. No responses via any channel. It's sad because distributed looking glass has been very useful. -- Pe