Re: Service provider story about tracking down TCP RSTs

2018-09-10 Thread Tom Beecher
Can you share the Arista model and EOS version of the devices you installed that TTL hashing was enabled by default? On Sat, Sep 1, 2018 at 2:51 PM, wrote: > I want to share a little bit of our journey in tracking down the TCP RSTs > that impacted some of our customers for almost ten weeks. > >

Re: Level3 IRR contact

2018-09-17 Thread Tom Hill
o start by swapping the Level3 domain for the CenturyLink one? -- Tom

netflix OCA in a CG-NAT world

2018-09-17 Thread Tom Ammon
CGN layer? What are the other consequences of CGN upon the OCA? Tom -- --------- Tom Ammon M: (801) 784-2628 thomasam...@gmail.com -

new(ish) ipv6 transition tech status on CPE

2018-10-09 Thread Tom Ammon
for a while on some mobile provider networks, but are there any vendors out there with a decent/mature CLAT implementation in a CPE product that is ready to buy right now? Thanks, Tom -- ----- Tom Ammon M: (801) 784-2628 tho

contact for offerup

2018-10-09 Thread Tom Ammon
Can somebody from offerup.com contact me off-list regarding your blocking of our ASN (23089)? Thanks in advance, Tom -- - Tom Ammon M: (801) 784-2628 thomasam...@gmail.com -

Re: Oct. 3, 2018 EAS Presidential Alert test

2018-10-11 Thread Tom Beecher
It's likely worth noting that this specific test was of IPAWS (Integrated Public Alert and Warning System), a system designed to integrate the Emergency Alert System, National Warning System, Wireless Emergency Alerts, and NOAA Weather Alerts. It's not intended to be cell phone only or replace any

Re: new(ish) ipv6 transition tech status on CPE

2018-10-11 Thread Tom Ammon
stack/CGN approach that keeps you from recommending it? Academically, that setup seems the least fraught with problems among all of the options. -- - Tom Ammon M: (801) 784-2628 thomasam...@gmail.com -

Re: Whats going on at Cogent

2018-10-30 Thread Tom Beecher
Maybe Cogent refuses to work with Google so nobody can search for evidence of said cake :) On Thu, Oct 25, 2018 at 4:55 PM Kenny Taylor wrote: > I wasn't familiar with it, so thanks for sharing! The Google search for > 'he cogent cake' was entertaining. Hard to believe that conflict is go

Re: Amazon network engineering contact? re: DDoS traffic

2018-11-08 Thread Tom Beecher
Nobody should ever be forced to peer to get someone to address abusive traffic originating from networks under their control. On Thu, Nov 8, 2018 at 4:29 PM John wrote: > Zach, > > As mentioned before, I am open to peering (where possible) but have not > received a response. > > My goal is to

Re: Amazon now controls 3.0.0.0/8

2018-11-08 Thread Tom Beecher
4.0.0.0/8 has been GTE/Level3 forever. 4.2.2.1 - 6 have been L3 DNS as far back as I can remember. On Thu, Nov 8, 2018 at 8:32 PM Todd Underwood wrote: > google used 4.4.4.4 for DNS in the past (2010, IIRC). > > t > > On Thu, Nov 8, 2018 at 8:21 PM Steve Meuse wrote: > >> >> I think it was the

Re: Technical Contact at Yahoo

2018-11-09 Thread Tom Beecher
I will reach out to you from my company email for details. On Fri, Nov 9, 2018 at 8:45 AM Brock Tice wrote: > Yahoo have done a very good job of locking down their contact info. We > have an issue where they seem to be blocking one of our CGN public > addresses. > > Does anyone know how I can ge

Re: Amazon now controls 3.0.0.0/8

2018-11-12 Thread Tom Hill
On 09/11/2018 00:46, Eric Kuhnke wrote: > 3.4.5.6/24 <http://3.4.5.6/24> could be an interesting block to put > easily memorable IP services in... My upbringing in the 90s makes '5.6.7.8' far more memorable. :) -- Tom

Re: Tata Scenic routing in LAX area?

2018-11-15 Thread Tom Beecher
I don't know what's less surprising, Tata making sure you see the entire internet (wink wink), or Airtel leaking routes... :) On Thu, Nov 15, 2018 at 4:13 PM Lotia, Pratik M wrote: > 9498/Airtel seems to be leaking a lot of routes. > > > > Source: https://bgpstream.com/ > > > > All Events for BG

Re: Cheap switch with a couple 100G

2018-11-25 Thread Tom Hill
On 25/11/2018 18:16, Mike Hammett wrote: > I haven't seen anyone selling 25G or 50G transport. That's because, in active transport at least, 100G makes far more sense. You may start seeing passive 25G WDM soon. Finisar have a DWDM tunable, I believe. -- Tom

Re: Cheap switch with a couple 100G

2018-11-25 Thread Tom Hill
On 25/11/2018 18:59, Mike Hammett wrote: > It wouldn't be hard to do any standard wavelength, really. They just > need an appropriate mux. I'm really not sure that your statement makes sense by itself. -- Tom

Re: Cheap switch with a couple 100G

2018-11-25 Thread Tom Hill
ecially, and so you're footing >25% of the bill". Chicken & egg: someone has to move first... And I don't see the ASR9k and Juniper MX BUs rushing to support 25 & 50G. -- Tom

Re: Cheap switch with a couple 100G

2018-11-25 Thread Tom Hill
gt;100km. Or if you actually need 400G transport to make use of N*100G services. -- Tom

Re: Cheap switch with a couple 100G

2018-11-25 Thread Tom Hill
ow, thank you. -- Tom

Cheap switch with a couple 100G

2018-11-25 Thread Tom Hill
On 25/11/2018 22:38, Aled Morris wrote: > Juniper have launched a Trident based switch with 48 x 25G ports (the > QFX5120-48Y.) I very specifically said "Juniper MX". ;) -- Tom

Re: GTT Regulatory Recovery Surcharge

2018-12-03 Thread Tom Beecher
"Cancelled all GTT connections and replaced them with a carrier, that doesn't try to screw their customer base." Who is this magical unicorn? :) On Mon, Dec 3, 2018 at 8:51 AM Martin List-Petersen wrote: > On 02/12/2018 22:06, Brandon Wade via NANOG wrote: > > We've been a GTT customer for seve

Re: GTT Regulatory Recovery Surcharge

2018-12-03 Thread Tom Beecher
financial engineering than technical since, as has been said, they can. On Mon, Dec 3, 2018 at 9:05 AM Martin List-Petersen wrote: > On 03/12/2018 14:01, Tom Beecher wrote: > > "Cancelled all GTT connections and replaced them > > with a carrier, that doesn't try to

Re: Auto-reply from Yahoo...

2018-12-17 Thread Tom Beecher
That email addy is from an employee that just left the company. For any of the administrators it should be safe to remove the subscription for that address. ( I can confirm directly from my company email account if that's required for confirmation. ) I can try and chase someone internally to see i

Re: Auto-reply from Yahoo...

2018-12-17 Thread Tom Beecher
We got something in to fix the behavior of the auto-responder to not reply to things with a Precedence header present. I'm told something was already in the pipe on the auto-submitted header as well. On Mon, Dec 17, 2018 at 11:50 AM Grant Taylor via NANOG wrote: > On 12/17/2018 09:17

Re: Stupid Question maybe?

2018-12-18 Thread Tom Beecher
If you want the full historical definition, blow the dust off RFC791, and open your hymnals to section 2.3. "Addresses are fixed length of four octets (32 bits). An address begins with a network number, followed by local address (called the "rest" field). There are three formats or class

Re: historical Bogon lists

2018-12-18 Thread Tom Beecher
I wonder if there's value in having the lists that Team Cymru generates auto pushed to a public Git repo. Covers historical changes for folks who want that, and also provides a more modern ingestion method for automation around that info. (Not that I'm hating on wget / curl ... :) ) On Mon, Dec 17

Re: Salesmen: ARIN Records are NOT Leads

2018-12-19 Thread Tom Beecher
I got to a point a few years ago that anyone who finds my contact info anywhere on the internet and wants to sell me something is going to spam me, and there's nothing I can do about it. I just utilize the blocking / ignore functions of $platform and go about my day. At one time I did have a devio

Re: Auto-reply from Yahoo...

2018-12-20 Thread Tom Beecher
To be clear, I got this reported to the team internally that handles the auto responder stuff. I’m a network guy, not a mail guy. If the list admins can unsubscribe the address it’s probably going to be faster, especially around the holidays here. On Thu, Dec 20, 2018 at 13:09 William Allen Simps

Re: CenturyLink RCA?

2019-01-02 Thread Tom Beecher
My best parsing of that ticket, with some guesses : - Infinera management card goes Really Bad, knocks out local waves, and starts spewing garbage out onto the management network - Management network propagates the garbage , other Infinera management cards get it and fall into the same state, knoc

Re: How to choose a transport(terrestrial/subsea)

2019-01-02 Thread Tom Beecher
You can mitigate some of that by getting contract language in place that says a carrier must maintain the circuit on the specified and agreed pathway, and if it's later discovered that it has been moved, you don't pay for the circuit from the time it was moved until it is restored. It's a nice bit

Re: BGP Experiment

2019-01-08 Thread Tom Ammon
are a fair number of open source BGP implementations now. It would require additional effort to test all of them. Tom >

Re: Could Someone From Yahoo Mail Please Contact Me

2019-01-14 Thread Tom Beecher
What's the IP of your sending mail server? I can poke some people for you. On Sat, Jan 12, 2019 at 7:37 PM Matt Hoppes < mattli...@rivervalleyinternet.net> wrote: > Thanks. > > On Jan 12, 2019, at 19:31, Udeme Ukutt wrote: > > Matt, > > Visit https://help.yahoo.com/kb/postmaster/, probably clic

Re: SMTP Over TLS on Port 26 - Implicit TLS Proposal [Feedback Request]

2019-01-14 Thread Tom Beecher
Your sarcasm detector might need a bit of a tweak. :) On Fri, Jan 11, 2019 at 9:18 PM Viruthagiri Thirumavalavan wrote: > While we're at it, let's deprecate IPv4 now that IPv6 is fully deployed > > > Come on Mr. Herrin. > > Blocking a port is much easier than deprecating a heavily used protocol.

colocation in Kansas City

2019-01-17 Thread Tom Ammon
Does anybody here do business with Tierpoint in Kansas City? Do you recommend them? Tom -- - Tom Ammon M: (801) 784-2628 thomasam...@gmail.com -

Re: Waves between Buffalo and Manhattan

2019-01-18 Thread Tom Beecher
If it's for the use case I suspect it would be for, Firstlight and Windstream should bring you closer to where you'll want to be on the Buffalo side. On Fri, Jan 18, 2019 at 1:38 PM Benjamin Hatton wrote: > The regional players in the area that may have something that would bypass > Albany would

Re: Amazon Peering

2019-01-24 Thread Tom Beecher
I hate to necro-thread , but has anyone seen any movement from Amazon on this? I just got a Strongly Worded Message about it, and according to my peering team , it's been radio silence for months. On Sat, Nov 24, 2018 at 12:32 PM JASON BOTHE via NANOG wrote: > This is a note I received on Oct18

Re: Amazon Peering

2019-01-24 Thread Tom Beecher
t be turned up until 2019 due to > holiday network change freeze. > > They responded within about 4 hours, thanked us for our patience and > understanding and said we should expect them to be turned up in about 6 > weeks, which is apparently their typical timing. > > On Jan 2

Re: [ROUTING] Settle a pointless debate - more commonly used routing protocol in total deployments - OSPF vs IS-IS

2019-01-25 Thread Tom Beecher
You’re probably right that there a lot more in service devices that are running OSPF. But IS-IS assuredly is involved in routing way more traffic volume. In the end , right tool for the job is all that matters. On Fri, Jan 25, 2019 at 09:17 Steven Bahnsen wrote: > Hi, > > First time poster loo

Re: [ROUTING] Settle a pointless debate - more commonly used routing protocol in total deployments - OSPF vs IS-IS

2019-01-25 Thread Tom Hill
swers to this question to last a life time of arguments. (See also, c-nsp, probably j-nsp, UKNOF, etc.) -- Tom

Re: [ROUTING] Settle a pointless debate - more commonly used routing protocol in total deployments - OSPF vs IS-IS

2019-01-25 Thread Tom Beecher
Next thing we know someone is going to start pumping up EIGRP. On Fri, Jan 25, 2019 at 1:34 PM Randy Bush wrote: > there's an old saying, is-is is deployed in few networks, just some of > the world's largest ones. there might be a reason for that. > > personally, i prefer emacs. > > randy >

Re: BGP Experiment

2019-01-25 Thread Tom Beecher
If I understand this thread correctly, the test cause no actual change in the routing table size or route announcement. That was all a result of the incorrect behavior of the software. Instead of throwing rocks, how about some data instead. We can collaborate and better understand the whole thing

Re: Amazon Peering

2019-01-28 Thread Tom Beecher
om > > Midwest-IX > http://www.midwest-ix.com > > -- > *From: *"Tom Beecher" > *To: *"Jason Lixfeld" > *Cc: *"North American Network Operators' Group" > *Sent: *Thursday, January 24, 2019 1:38:51 PM > *Subject: *Re: Amazon Peering > &

Call for Presentations - CHI-NOG 09 (May 23rd)

2019-01-29 Thread Tom Kacprzynski
CHI-NOG 09 - (Chicago Network Operators Group) May 23rd, 2019, Chicago, IL The Chicago Network Operators Group (CHI-NOG) is a vendor neutral organization. Our goal is to create a regional community of network professionals by presenting the latest technology trends, enabling collaboration and prov

Re: Effects of Cold Front on Internet Infrastructure - U.S. Midwest

2019-01-30 Thread Tom Beecher
To be fair, reporting the the wind chill factor is very meaningful for health and safety reasons almost everywhere so proper warning is given about people spending time outside. Minneapolis, and the bigger Canadian cities have those inside walkways and pedestrian pathways, but they're not that comm

Re: Effects of Cold Front on Internet Infrastructure - U.S. Midwest

2019-01-30 Thread Tom Beecher
Well said. The electrical load shifts, hydraulic systems, airflows constrained by ice cover, etc, etc, etc. All kinds of things being asked to do stuff outside or at the edge of specifications. Hug your local facilities guys when these things happen. (Or bring them booze.) On Wed, Jan 30, 2019 at

Re: Amazon Peering

2019-01-30 Thread Tom Beecher
I'm sure ~ $20k/yr in time cost alone per 10G has nothing to do with that... :p Although to be fair, the individual from Amazon who my peering group has been working with after my first message has been really, really great. As with many things, the people are great, just not enough resources I'm

Re: Latency between Dallas and west coast

2019-01-31 Thread Tom Beecher
NYC to LA is in the high 60ms range, so no, 200ms from Dallas to US west coast is not expected. On Thu, Jan 31, 2019 at 12:14 PM Mark Tinka wrote: > > > On 31/Jan/19 18:53, Mike Hammett wrote: > > It's 180 ms from Dallas to Djibouti, so no, that much latency to the west > coast of the US is n

Re: Effects of Cold Front on Internet Infrastructure - U.S. Midwest

2019-02-01 Thread Tom Beecher
“Sold you fiber , not working fiber” is at the same time amazing lawerying and insanely facepalmy. :) On Thu, Jan 31, 2019 at 11:48 Fletcher Kittredge wrote: > > Cold changes the transmission characteristics of fiber. At one point we > were renting some old dark fiber from the local telephone co

Re: RTBH no_export

2019-02-03 Thread Tom Hill
fit. This works wonderfully, from past experience. :) -- Tom

Re: A Zero Spam Mail System [Feedback Request]

2019-02-18 Thread Tom Beecher
Every single person on this list has either sent an email they later regret , or will do so eventually. Full credit to you for acknowledging and owning this. Best of luck to you. On Mon, Feb 18, 2019 at 09:08 Viruthagiri Thirumavalavan wrote: > @Everyone > > I'm not gonna justify my behaviour.

Re: Cisco ASR's with RSP440 engines...

2019-02-19 Thread Tom Hill
per, but I'll be impressed if you notice a difference over the 440 in terms of solely basic BGP edge functions. It of course has support for other things that you might need, however. (No idea why this would need to be offlist...) -- Tom

Re: Cisco ASR's with RSP440 engines...

2019-02-19 Thread Tom Hill
On 19/02/2019 15:26, Tom Hill wrote: > I know the RSP440 is EOL, but the plan would > be to upgrade to RSP880 within a year. Also, the RSP880-RL is available for the same price as 440 on list. If you certainly need 880 later, I might be wondering if Cisco will 'help' with securin

Re: Should Netflix and Hulu give you emergency alerts?

2019-03-08 Thread Tom Beecher
What specific regulations do you feel were onerous and unnecessary with respect to VOIP? (This is a legitimate question, not a trolling attempt. ) On Fri, Mar 8, 2019 at 5:36 PM Matt Hoppes < mattli...@rivervalleyinternet.net> wrote: > No. Please no. We need less regulation. Not more. > > VoIP st

Re: Should Netflix and Hulu give you emergency alerts?

2019-03-09 Thread Tom Beecher
Business ask to create near real time, location aware notification system to increase user engagement and refine ad tracking : "That's a a great idea, we can do that!" Government ask to create near real time, location aware notification system for public safety warnings : "THAT IS A BRIDGE TOO FAR

Re: Issue with Geolocation in Virginia US

2019-03-10 Thread Tom Beecher
I slammed together a Really Bad Script last year that checked all the major geo IP datapack providers via screen scrap or API for a particular issue we were dealing with. If I can find it, I'll make it Less Really Bad and put it up on Github. On Sun, Mar 10, 2019 at 3:41 AM Raja Sekhar Gullapalli

Re: Should Netflix and Hulu give you emergency alerts?

2019-03-12 Thread Tom Beecher
To be fair, I've used the rogue BIOS excuse in quite a few Overwatch matches, and nobody buys it. So even if it did happen at this point, nobody would believe you. On Tue, Mar 12, 2019 at 4:47 PM William Herrin wrote: > On Tue, Mar 12, 2019 at 11:57 AM Michael Thomas wrote: > > Yes, that's exac

Re: FB?

2019-03-14 Thread Tom Beecher
As much as I wanted to crack jokes because I cannot stand Facebook (the product), much love to all you FB engineers that went through (and are probably still going through) much hell. On Thu, Mar 14, 2019 at 9:58 AM Jason Suter wrote: > > I found this article >

Re: maximum ipv4 bgp prefix length of /24 ?

2023-09-29 Thread Tom Beecher
> > > Maybe. That's where my comment about CPU cache starvation comes into > > play. I haven't delved into the Juniper line cards recently so I could > > easily be wrong, but if the number of routes being actively used > > pushes past the CPU data cache, the cache miss rate will go way up and > > i

Re: maximum ipv4 bgp prefix length of /24 ?

2023-09-29 Thread Tom Beecher
> > > As i said before, the future is coming just now. There must be ways to > increase CPU caches and memories of routers. > You continue to misstate and misunderstand the issue. I would suggest you refresh your understanding of the differences between the RIB and FIB in network devices. On Fri,

Re: maximum ipv4 bgp prefix length of /24 ?

2023-09-29 Thread Tom Beecher
> > RIB, FIB doesnt matter, internet is our future, so lets invest in it. > Uh, ok. On Fri, Sep 29, 2023 at 1:25 PM VOLKAN SALİH wrote: > I dont even have money for food/living. > > i am working poor. > > poverty line is 40 thousands turkish liras here.. > > but for a green card, I can carve mr

Re: maximum ipv4 bgp prefix length of /24 ?

2023-09-29 Thread Tom Beecher
> > word salad None of this has anything to do with why the IPv4 /24 limit is what it is. Good luck with your endeavors, whatever they may be. On Fri, Sep 29, 2023 at 1:46 PM VOLKAN SALİH wrote: > thanks for your response. Honestly thanks for everyones reponses. > > comunism is the future. IM

Re: maximum ipv4 bgp prefix length of /24 ?

2023-09-29 Thread Tom Beecher
> > My understanding of Juniper's approach to the problem is that instead > of employing TCAMs for next-hop lookup, they use general purpose CPUs > operating on a radix tree, exactly as you would for an all-software > router. > Absolutely are not doing that with "general purpose CPUs". The LU blo

Re: maximum ipv4 bgp prefix length of /24 ?

2023-09-29 Thread Tom Beecher
General Purpose CPU : Can run Doom. Trio ASIC : Cannot run Doom. Have a good weekend Bill. On Fri, Sep 29, 2023 at 5:48 PM William Herrin wrote: > On Fri, Sep 29, 2023 at 2:13 PM Tom Beecher wrote: > >> My understanding of Juniper's approach to the problem is that instead

Re: maximum ipv4 bgp prefix length of /24 ?

2023-09-29 Thread Tom Beecher
> > I'm less assuming it and more reading it from this SIGCOMM paper: > https://people.csail.mit.edu/ghobadi/papers/trio_sigcomm_2022.pdf Which doesn't cover the subject at hand. Owen is correct here. The LU block has separate reduced latency RAM that holds the data it uses. (The FIB). Other mem

Re: maximum ipv4 bgp prefix length of /24 ?

2023-10-02 Thread Tom Beecher
> > That depends. When the FIB gets too big, routers don't immediately > die. Instead, their performance degrades. Just like what happens with > oversubscription elsewhere in the system. > If you consider blackholing traffic because the relevant next-hops aren't present in the FIB to be looked up

Re: maximum ipv4 bgp prefix length of /24 ?

2023-10-02 Thread Tom Beecher
> > Then you could have knobs for what other routes you discard when you run > out of space. Receiving a covering /16? Maybe you can drop the /24s, even > if they have a different next hop - routing will be sub-optimal, but it > will work. (I know, previous discussions around traffic engineerin

Re: cogent spamming directly from ARIN records?

2023-10-02 Thread Tom Beecher
complia...@arin.net Refer back to an email John Curran sent to this list on Jan 6 2020 , "Suspension of Cogent access to ARIN Whois" On Mon, Oct 2, 2023 at 11:29 AM Mel Beckman wrote: > This morning I received an email from someone at Cogent asking about an > ASN I administer. They didn’t give

Re: maximum ipv4 bgp prefix length of /24 ?

2023-10-02 Thread Tom Beecher
> > Come on man, go re-read the post. The two paragraphs you cut literally > explained what happens -instead of- routes dropping out of the FIB or > being black holed. > Ok On Mon, Oct 2, 2023 at 2:03 PM William Herrin wrote: > On Mon, Oct 2, 2023 at 6:05 AM Tom Beecher

Re: MX204 tunnel services BW

2023-10-03 Thread Tom Beecher
> > AIUI, with Trio, you don’t have to disable a physical port, but that comes > at the cost of “Tunnel gets whatever bandwidth is left after physical port > packets are processed” and likely some additional overhead for managing the > sharing. > This was pretty much my understanding as well, last

Re: U.S. test of national alerts on Oct. 4 at 2:20pm EDT (1820 UTC)

2023-10-04 Thread Tom Beecher
> > This > whole test was a display of poor engineering and disrespect for people's > first amendment rights. > You are certainly free to criticize the system or the implementation, but nothing about this is a First Amendment issue. Just don't. On Wed, Oct 4, 2023 at 7:16 PM Sabri Berisha wrote

Re: ARIN whois contact abuse from ipv4depot aka Silicon Desert International Inc

2023-10-12 Thread Tom Beecher
> > It's ridiculous that they resort to scraping public lists and DBs to try > and achieve what they're attempting to do. > Everyone is always looking for information they can use to advance some agenda or purpose. The internet is fertile ground for that. Always has been, always will be. Not taki

Re: ARIN whois contact abuse from ipv4depot aka Silicon Desert International Inc

2023-10-12 Thread Tom Beecher
Sure. I have no issues ARIN handling what is reported to them. That only works if victims report spam and compare notes. > I don't agree with the 'compare notes' part. That's ARIN's job in the processing of reports. On Thu, Oct 12, 2023 at 12:01 PM Mel Beckman wro

Re: transit and peering costs projections

2023-10-15 Thread Tom Beecher
> > So for now, we'll keep paying for transit to get to the others (since it’s > about as much as transporting IXP from Dallas), and hoping someone at > Google finally sees Houston as more than a third rate city hanging off of > Dallas. Or… someone finally brings a worthwhile IX to Houston that get

Re: Congestion/latency-aware routing for MPLS?

2023-10-18 Thread Tom Beecher
Auto-bandwidth won't help here if the bandwidth reduction is 'silent' as stated in the first message. A 1G interface , as far as RSVP is concerned, is a 1G interface, even if radio interference across it means it's effectively a 500M link. Theoretically, you could have some sort of automation in p

Re: Congestion/latency-aware routing for MPLS?

2023-10-18 Thread Tom Beecher
> > I believe Jason's proposal is exactly what OP is looking for. > I would agree. On Wed, Oct 18, 2023 at 11:28 AM Saku Ytti wrote: > On Wed, 18 Oct 2023 at 17:39, Tom Beecher wrote: > > > Auto-bandwidth won't help here if the bandwidth reduction is 'sile

Re: RPKI unknown for superprefixes of existing ROA ?

2023-10-22 Thread Tom Beecher
> > Let me ground it a bit: > > He's saying that someone could come along and advertise 0.0.0.0/1 and > 128.0.0.0/1 and by doing so they'd hijack every unrouted address block > regardless of the block's ROA. > > RPKI is unable to address this attack vector. > https://www.rfc-editor.org/rfc/rfc6483

Re: RPKI unknown for superprefixes of existing ROA ?

2023-10-22 Thread Tom Beecher
's internet, no it doesn't. This does not mean that RPKI is deficient, or the AS 0 ROA doesn't work as intended, as was stated. On Sun, Oct 22, 2023 at 12:57 PM William Herrin wrote: > On Sun, Oct 22, 2023 at 9:38 AM Tom Beecher wrote: > >> He's saying that so

Re: RPKI unknown for superprefixes of existing ROA ?

2023-10-22 Thread Tom Beecher
, 2023 at 1:24 PM William Herrin wrote: > On Sun, Oct 22, 2023 at 10:06 AM Tom Beecher wrote: > >> And is it your belief that this addresses the described attack vector? > >> AFAICT, it does not. > > > > In the mixed RPKI / non-RPKI environment of today's

Re: RPKI unknown for superprefixes of existing ROA ?

2023-10-22 Thread Tom Beecher
> > Look again, Tom. This is an attack vector using a LESS specific route. The > /22 gets discarded, but a covering /0-/21 would not. > Yes. And reliant on the operator doing something exceptionally not smart to begin with. Relying on an AS0 ROA alone and not actually announcing

Re: RPKI unknown for superprefixes of existing ROA ?

2023-10-22 Thread Tom Beecher
> Homepage: https://sites.google.com/site/amirherzberg/home > `Applied Introduction to Cryptography' textbook and lectures: > https://sites.google.com/site/amirherzberg/cybersecurity > > > > > On Sun, Oct 22, 2023 at 1:50 PM Tom Beecher wrote: > >> Look again, Tom.

Re: RPKI unknown for superprefixes of existing ROA ?

2023-10-24 Thread Tom Beecher
overing /22, > which wouldn’t help in this case anyway. > > So I’m not sure why you think that’s a solution. > > Owen > > > On Oct 22, 2023, at 10:45, Tom Beecher wrote: > > Look again, Tom. This is an attack vector using a LESS specific route. The >> /22 gets disca

Re: Pulling of Network Maps

2023-10-26 Thread Tom Beecher
> > If it's too hard for me to figure out where you are, you just plain won't > get the sale. My experience with maps over the last decade tells me that even most vendors don't actually know where they are. :) On Thu, Oct 26, 2023 at 12:18 PM Mike Hammett wrote: > Has anyone else noticed a tre

Re: Charter DNS servers returning malware filtered IP addresses

2023-10-29 Thread Tom Beecher
> > DNS isn’t the right place to attack this, IMHO. > ... > I’ve seen plenty of situations where the filters were just plain wrong and > if the end user didn’t actively choose that filtration, the target site may > be victimized without anyone knowing where to go to complain. Not much different

Re: AS8003 mysteries

2023-11-09 Thread Tom Beecher
Didn't think there was much confusion about it at this point. The DOD has the assignments for the space, they can announce it whenever they want, even if it's from a shell ASN. On Wed, Nov 8, 2023 at 4:52 PM Dave Taht wrote: > Anyone have an update as to where this effort, announcing qute a bit

Re: Strange IPSEC traffic

2023-11-14 Thread Tom Beecher
> > Last week somebody on the internet started a campaign to scan and perhaps > to exploit some zero day ipsec vulnerabilities. > I've seen traffic like this for the better part of at least the last 7 years, fairly consistently. It's definitely not something new. On Mon, Nov 13, 2023 at 12:42 PM

Re: Your Input Needed: Can ROA Replace LOA? – Short Survey (7 mins)

2023-11-16 Thread Tom Beecher
> > In the service provider industry, its primary use is for advertising > address resources (IPv4/v6 and ASN) Not really. On Thu, Nov 16, 2023 at 9:19 AM Christopher Hawker wrote: > Hello everyone, > > Aftab Siddiqui is currently exploring the possibility of using Route > Object Authorisation

Re: Your Input Needed: Can ROA Replace LOA? – Short Survey (7 mins)

2023-11-16 Thread Tom Beecher
y as many to state it's a "primary use case", especially relative to #1 and #2 on your list. On Thu, Nov 16, 2023 at 11:18 AM Christopher Morrow wrote: > On Thu, Nov 16, 2023 at 10:22 AM Tom Beecher wrote: > >> > >> In the service provider industry, its prima

Generally accepted BGP acceptance criteria?

2023-11-16 Thread Tom Samplonius
. Has there been anything published or any presentations given, on generally accepted BGP route acceptance criteria? Tom

Re: Generally accepted BGP acceptance criteria?

2023-11-16 Thread Tom Beecher
> > I imagine there is a some sort of coalescing industry standard out there, > but so far I can’t find it. > There is not, and won't be for a long time, if ever. There isn't a one size fits all solution. On Thu, Nov 16, 2023 at 9:31 PM Tom Samplonius wrote: > >

Re: Your Input Needed: Can ROA Replace LOA? ? Short Survey (7 mins)

2023-11-17 Thread Tom Beecher
> > Therefore, Cogent currently does not have and is not member of ARIN. It > refuses to sign contract with ARIN and currently Cogent is not bound by > this RUD rules and regulations. > > There is one downfall to not being ARIN member, Cogent cannot currently > issue ROAs or RPKIs. They only update

Re: Out of ideas - Comcast issue BGP peering with Tata

2023-11-17 Thread Tom Beecher
> > Comcast has to be the one contacting them > This is the correct answer. It's pretty straight forward ; Comcast needs to get with Tata, say "hey, I'm announcing prefix FOO to you, your LGs don't look like you're accepting it. Can we figure out why?" On Fri, Nov 17, 2023 at 10:43 AM jim deleski

Re: BGP-iSec: Improved Security of Internet Routing Against Post-ROV Attacks

2023-11-20 Thread Tom Beecher
Amir- I have to take some issue with one comment you made in response to Job. BGP-iSec, at this point, is just an academic study studying some new ideas > and evaluating their impact in specific configurations, under specific > assumptions etc.; hopefully, this may provide some help to the commun

Re: Generally accepted BGP acceptance criteria?

2023-11-21 Thread Tom Samplonius
> On Nov 17, 2023, at 6:58 AM, Christopher Morrow > wrote: > >> On Thu, Nov 16, 2023 at 9:31 PM Tom Samplonius wrote: > >>> The most surprising thing in the DE-DIX flow chart, was that they check >>> that the origin AS exists in the IRR as-set, be

Re: Advantages and disadvantages of legacy assets

2023-11-22 Thread Tom Beecher
> > Are you sure? The way I read it, that policy applies to -customer- > announced routes, not broad Internet routes received from peers and > transit. > You are reading it correctly. On Wed, Nov 22, 2023 at 3:15 PM William Herrin wrote: > On Wed, Nov 22, 2023 at 11:22 AM o...@delong.com wrote

Re: CPE/NID options

2023-11-24 Thread Tom Mitchell
I don't know about specific SKUs, but IP Infusion make a very popular set of L2 switches. On Wed, Nov 22, 2023 at 8:42 PM Ross Tajvar wrote: > I'm evaluating CPEs for one of my clients, a regional ISP. Currently, > we're terminating the customer's service (L3) on our upstream equipment and > ex

Re: CPE/NID options

2023-11-27 Thread Tom Samplonius
fiber cut. Tom > On Nov 27, 2023, at 6:41 AM, Josh Luthman wrote: > > Around here, Spectrum uses an Adva for demarc and it can not do rfc2544 > testing. They will unplug the Adva and plug in the techs' mobile unit (Viavi > I think). VZW/Tmo/Sprint/etc don't seem to

Re: Generally accepted BGP acceptance criteria?

2023-11-27 Thread Tom Samplonius
> On Nov 21, 2023, at 7:42 AM, Dale W. Carder wrote: > > Thus spake Tom Samplonius (t...@samplonius.org) on Mon, Nov 20, 2023 at > 07:02:52PM -0800: >>> On Nov 17, 2023, at 6:58 AM, Christopher Morrow >>> wrote: >>> IRR filters provide control ove

Re: CPE/NID options

2023-11-28 Thread Tom Samplonius
 m_sm_configuring_dying_gasp PDF Document · 1.1 MB Dying gasp is just a Ethernet OAM frame broadcast on (usually) all ports just before loss of power. If anything, Ethernet had this first, and ONTs just included it into their standards. Tom > On Nov 27, 2023, at 11:40 AM, Josh Luth

Re: sigs wanted for a response to the fcc's NOI for faster broadband speeds

2023-12-01 Thread Tom Mitchell
Not sure we need the FCC telling us how to build products or run networks. Seat belts are life-or-death, but bufferbloat is rarely fatal ;-) Let it be a point of differentiation. -- Tom On Thu, Nov 30, 2023 at 4:56 PM Dave Taht wrote: > Over here: > > > https://docs.google.co

Re: sigs wanted for a response to the fcc's NOI for faster broadband speeds

2023-12-01 Thread Tom Samplonius
The era of “buffer bloat” has passed. Buffer bloat is just about jitter, and jitter mitigation is just better now. I don’t think jitter needs to be part of public policy. Tom

Re: sigs wanted for a response to the fcc's NOI for faster broadband speeds

2023-12-01 Thread Tom Beecher
Trying to put technical requirements like this into law and public policy is an extremely terrible idea. This letter should never be sent. The regulatory agencies today don't have the manpower or expertise to adequately enforce the more generic broadband deployment rules. What fantasy world exists

<    2   3   4   5   6   7   8   9   10   11   >