?
-Aaron
“…especially in the face of transport tweaks such as QUIC and TCP BBR? “
Do these “quic and tcp bbr” change bandwidth utilization as we’ve know it for
years ?
-Aaron
Have we found out yet if Disney+ will have a CDN? Like Netflix oca, Akamai
aanp, google ggc, facebook fna … a Disney isp-located cdn presence ?
disneyplus.com
-Aaron
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Aaron Graves
Sent: Saturday, December 29, 2018 7:22 PM
Can I test fusion using vMX and vQFX ? Will it work?
-Aaron
domain to other neighbors?
I'm currently accomplishing it with an ospf export policy matching evpn. and
then I do in fact see those /32 evpn-originated host routes show up
throughout my global routing domain as OSPF Preference 150 (AS external)
(btw, I'm doing this in juniper routers)
-Aaron
the local cdn
traffic)
…take Netflix for instance… I see on my local nfx cdn links, 1:100 ratio of
in:out. 20 gbps inbound and .2 gbps outbound (during that same timeframe as
aforementioned actual inet links)
Numbers based on 21:00 CDT last night.
-Aaron
I’m heavy inbound. Which I think is characteristic of a stub-AS with lots of
resi/busi bb ... no transit… just a lot of people looking at stuff.
Inbound is of course from the perspective of traffic coming into my AS
-Aaron
Can someone who manages RBL1 contact me off-list?
Thank you in advance!
--
Aaron
dns setting and thus bypass
aanp cache, and flow out to inet.
-Aaron
I was reading this and thought, planet earth is a single point of failure.
...but, I guess we build and design and connect as much redundancy (logic, hw,
sw, power) as the customer requires and pays for and that we can truly
accomplish.
-Aaron
I have been really happy with my Tom Bihn Brain Bag (https://tombihn.com).
I carry a 15in and 13in laptop along with a snake charmer accessory for all
my cables. If you loosen the straps there’s plenty of room to also stuff a
jacket AND a small to medium sized UPS parcel if need be.
Aaron
On Mon
Thank God for DNS ;)
-aaron
-Original Message-
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Alan Buxey
Sent: Thursday, October 3, 2019 2:22 PM
To: Naslund, Steve
Cc: nanog@nanog.org
Subject: Re: IPv6 Pain Experiment
hi,
> Go ahead and read your v4 address over the ph
Anyone else see lots of traffic coming down starting at 3 a.m. central time
? all of my internet connections showed strangely larger load for a few
early morning hours.
I have some info that tells me what it was but wanted to hear it from others
too.
-Aaron
-IOS virtual
-vMX
-vSRX
-vQFX
…check your in-box for a screen shot of my current environment.
-Aaron
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Mike Bolitho
Sent: Wednesday, October 16, 2019 12:02 PM
To: Tom Beecher
Cc:
Subject: Re
Oh, forgot the links…
http://www.eve-ng.net/
http://www.eve-ng.net/documentation/howto-s
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Aaron Gould
Sent: Wednesday, October 16, 2019 1:14 PM
To: 'Mike Bolitho'; 'Tom Beecher'; 'Ryland Krem
Thanks Mike for the info on GNS3…. My info is old, I’ll have to take a look at
the recent GNS3 sometime soon…
-Aaron
From: Mike Bolitho [mailto:mikeboli...@gmail.com]
Sent: Wednesday, October 16, 2019 1:22 PM
To: Aaron Gould
Cc: Tom Beecher; Ryland Kremeier; nanog@nanog.org
Subject
I heard that we would be testing to Dallas or something like that from my ISP
in San Antonio.
I think I heard that customer CPE routers will soon have that testing
functionality built into them.
-Aaron
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Livingood, Jason
Sent
That email (cl...@disneystreaming.com) bounced back as undeliverable.
-Aaron
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Michael Crapse
Sent: Tuesday, November 12, 2019 7:27 PM
Cc: NANOG list
Subject: Re: Disney+ Geolocation issues
There has been a continued flurry of
g out an ISP-located CDN type of network, much like all the others?
(OCA, FNA, AANP, AEC, ACE, GGC)
-Aaron
I see my Akamai aanp cache utilization at all-time highs the last 2 nights as
well. Curious what it is.
Jared, you can reply to my off-list if you wish, or on-list if it would benefit
the community.
Thanks,
Aaron
Tarko. wow, gaming again ! It's not going away. gaming traffic is growing
in a big way it seems.
Clayton.. My thoughts exactly! I too have wondered how valuable these
aanp's were, but lately I'm seeing good efficiency
Thanks y'all
-Aaron
couple commands.
...I would like to automate my rtbh using what I understand is a possibly use
case for FastNetMon, but haven't got around to it
I also wonder if team cymru's utrs project and other things like that would
benefit my security posture.
-Aaron
Yeah, and what do you do with a traceroute that looks like this…. (ip address
intentionally changed)
C:\>tracert -d -w 1 1.2.3.4
Tracing route to 1.2.3.4 over a maximum of 30 hops
1 8 ms 5 ms 5 ms 96.8.191.129
2 *** Request timed out.
3
We use a lot of Accedian MetroNIDs for SLA monitoring…. For cell backhaul and
some enterprise sites.
-Aaron
v6 address that routes to a IPv6-to-IPv4 NAT
device.
2607:7700:0:25::4e00:605b
4e00:605b -> 78.0.96.91
-- Aaron
Replying to
the new peer on the T-mobile-internal IPv6 address should still work as long
as you stay on T-mobile's network but are of limited use otherwise.
-- Aaron
Aren't there issues/concerns with Huawei ?
I think we pay about $10k with discounts and about (4) 10 gig port license to
slow start our deployment of ACX5048's 10 gig east , 10 gig west , dual
10's facing FTTH OLT (Calix E7)
-Aaron
, but thought I’d ask y’all.
Google - China Showdown Huawei vs ZTE
http://seclists.org/nanog/2018/Apr/293
- Aaron
Excuse my lack of knowledge... What does this mean? "Shareholders are people
holding Vanguard/Blackrock."
Aaron
> On Apr 24, 2018, at 10:31 AM, Saku Ytti wrote:
>
> Shareholders are people holding Vanguard/Blackrock.
I'm not sure what you are taking about with ORR, but I use dual RR's for a
redundant cluster with me ASR9k's in IOS XR, and I have them handling routes
for ...
Family l2vpn VPLS
Family vpnv4
Family vpnv6
...so my 6PE mpls l3vpn has been working fine
Aaron
> On May 6, 2018
also have heard that it's not a big deal. Let me know
please
-Aaron
You sure it doesn't have something to do with 60 seconds * 3 = 180 secs of BGP
neighbor Time out before it believes neighbor is dead and remove routes to that
neighbor?
Aaron
> On May 15, 2018, at 9:10 AM, Adam Kajtar wrote:
>
> Hello:
>
> I'm running two Juniper
le in the central Texas area somehow. He
mentioned that Sparkle may be in McAllen / Dallas and could possibly, in the
future be in Austin or San Antonio
- Aaron
Thanks.
What's an eyeball network ?
How do you know my "current mix is decent" ?
Btw, I have onsite the cdn's aanp, ggc, oca, fna, so only about ~60% of my
customer traffic is from Internet uplinks... ~40% is served from local cdn's
Aaron
> On May 16, 20
While we are on ECMP topic...
In L3VPN, when I've learned say, 3 different routes all using different MPLS
tags to the 3 remote PE's, is there a way to ECMP hash across all of the paths
to load balance?
Aaron
> On May 16, 2018, at 6:32 PM, Thomas Bellman wrote:
>
>&g
9010 and 7609 Small?
Aaron
> On May 19, 2018, at 3:51 PM, Ben Cannon wrote:
>
> Isn’t that the ASR9010? (And before that 7609?)
>
> -Ben
>
>>> On May 18, 2018, at 4:20 AM, Tom Hill wrote:
>>>
>>> On 17/05/18 14:24, Mike Hammett wrote:
&g
PS4 gaming
-Customer said playing a few games (call of duty, etc) with Internet
players now doesn't work.
-They said the PS4 nat type is nat type 3 (strict) whereas before
the moved them to cgnat, it was NAT type 2 moderate and worked.
-Aaron
should.
Let me know if you have seen similar issues and successes or failures with
your cgnat deployment.
-Aaron
As you all have said, to confirm, I use ssm Mcast to distribute TV from
satellite down links in the headend, out to a few different remote head ends.
From there it's converted back to RF video and sent to subscribers via cable or
hfc plant
Aaron
> On Jul 31, 2018, at 5:15 PM, Job
vultr ? Is this the same vultr that appears to be hosting a lot of Sony
PlayStation games ?
I've been tshooting PS4 CGNAT issues and seeing my test ps4 gaming console
connecting to Vultr owned /27 address space all over the US Chicago, Miami,
Seattle, etc
Aaron
> On Aug 7, 2018,
-...@akamai.com +1-877-6AKAMAI
Akamai Network Support
- traffic issues: netsupport-...@akamai.com +1-888-421-1003
-Aaron
and I can put you in touch with them. They work closely with those two products
(Like I said we migrate away from Acme packet years ago, from what I understand
it might be an Oracle product now)
Aaron
> On Aug 8, 2018, at 6:56 PM, Ryan Finnesey wrote:
>
> I am going to have to
it in their cloud, BUT, I would like my alerts to
do this automatically. that would be very nice. Any guidance would be
appreciated.
-Aaron
Wow, 4 replies for fastnetmon, thanks Ryan, Vincente, Job and Kushal
I'll look into it
-Aaron
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Aaron Gould
Sent: Thursday, August 30, 2018 2:53 PM
To: Nanog@nanog.org
Subject: automatic rtbh trigger using flow data
Hi,
Thanks, but what if the attacker is many... like thousands ? ...isn't that
typically what we see, is tons and tons of sources (hence
distributeddos) ?
-Aaron
-Original Message-
From: Michel Py [mailto:michel...@tsisemi.com]
Sent: Thursday, August 30, 2018 3:17 PM
To: Aaron
n my
victim IP address inside my network would be my solution to saving money
But stopping the attack even on my side of my Internet up like would at least
stop it from proliferating throughout my internal network which is also costing
me when it affects cell towers, etc.
Aaron
On Aug 30, 2
ing dscp/exp so that as it travels through my internet
network, it will be the first to get dropped (? Wred ? work well for udp?)
during congestion when an attack gets through
-Aaron
* btw, what can you experts tell me about tcp-based volumetric attacks...
please help me to understand... does
Hi Aaron, interesting …making routers do what you intend…hmmm… Sounds like
SDN J …how does what you are doing differ from the intent-based-controller
driven sdn concepts that I hear so much about these days.
BTW, I did the survey.
- Aaron
From: NANOG [mailto:nanog-boun
be hashed
over any and all npu's thus causing greater change of pub ip differences
Btw, there are keepalives for eif and sessions limits for resource issues to be
considered
- Aaron
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Philip Loenneker
Sent: Thursday, October 11
Oh yeah, hitting me hard in South Central Texas... no youtube videos at all for
my customers.
-Aaron
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Ross Tajvar
Sent: Tuesday, October 16, 2018 8:43 PM
To: Kenneth McRae
Cc: NANOG
Subject: Re: Youtube Outage
You beat my email
Back up in south central texas
-Aaron
From: NANOG [mailto:nanog-bounces+aaron1=gvtc@nanog.org] On Behalf Of Bryce
Wilson
Sent: Tuesday, October 16, 2018 9:42 PM
To: Ishmael Rufus
Cc: NANOG
Subject: Re: Youtube Outage
I concur, all of my systems have it as back up.
Thanks ~ Bryce
then I did on my previous att, and current spectrum… telia
is showing a good bit of ddos also
Let’s put it this way, I can thank Cogent and Telia for helping my get better
in my ddos mitigation skills J … there’s a bright side to everything huh
Aaron
From: NANOG
Anyone know what Disney is planning on doing for streaming content
distribution once they leave Netflix? Would be nice if they'd provide an
on-prem cache server.
AG
I work for a rural ISP and the powers that be have been thinking about
changing our upstream providers. The big names on the table right now are
123.net and Cogent.
I, along with the people in my circle, do not have any experience with
these providers and all we are getting is what sales are dishi
.
-Aaron
* in our network on VM and also bare-metal, this is
where our customers test locally
Iperf - us engineers used it
wifiperf – us engineers used it
-Aaron
I think the motivation for the paid/onsite version of ookla was so that we
could say how good our customers speed is, without going through the internet.
We can’t control utilization on the Internet, but we can internally.
-Aaron
From: Colton Conor [mailto:colton.co...@gmail.com]
Sent
Yes that too, thanks for the reminder, the linux sys eng I work with here
showed me our internal stats the other day when I was asking him about this…
-Aaron
From: Luke Guillory [mailto:lguill...@reservetele.com]
Sent: Friday, January 18, 2019 11:22 AM
To: Aaron Gould; 'Colton Cono
about twamp, and I think that’s perhaps an ip-layer version of
what is like Ethernet layer cfm/oam, I could be wrong…but as I think about it,
I recall mpls-oam, perhaps others too
Yes, as network engineer’s, I/we continually have to clear-my-name (clear the
network) of blame
-Aaron
In my isp network of ~50,000 subscribers, I run about (200) mpls p/pe nodes in
one ospf area with dual rr cluster for mp-ibgp type mpls overlay services.
seems fine to me.
-Aaron
Nah, statics everywhere. That way only I can fix it. ...sometimes... lol
-Aaron
-Original Message-
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Randy Bush
Sent: Friday, January 25, 2019 12:41 PM
To: Tom Beecher
Cc: North American Network Operators' Group
Subjec
33:2 -> 256.256.130.4:80 Drop O
1
---(refreshed at 2019-02-07 12:37:01 CST)---
UDP256.256.191.133:12998 -> 256.256.130.4:80 Drop O
1
UDP256.256.191.133:2 -> 256.256.130.4:80 Drop O
1
- Aaron
-Original Message-
From: Com
sold (oversubscribed)
more bw than that
We are concerned and looking for ways to overcome this and keep up with
subscriber bw demands all the time ... fun and job secure
-Aaron another Aaron :)
-Original Message-
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Aaron
Sent
interface (unit) level to limit traffic for
obviously what they buy.
MX204 be good for that ?
Thanks Mark
-Aaron
-Original Message-
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Mark Tinka
Sent: Thursday, February 14, 2019 7:09 AM
To: nanog@nanog.org
Subject: Re: BGP topological
pls/vrf
z---cgnat/inet--
-Aaron
interface (ams0.551) to be configured to
export flow data (jflow, sflow, ipfix, whichever version i can use) to a
flow collector server, this is important so we can have flow data of
*pre-nat) private ip traffic.
Anyone know how ?
-Aaron
We use it. A lot of it. No problems. Never a need for warranty support.
Aaron
Sent from my iPad
> On Feb 17, 2019, at 12:42 PM, Samir Rana wrote:
>
> Hello All,
>
> Does anybody have experience with fs.com dwdm equipment in their production
> environment? Are you they w
I think this is what he was referring to:
https://en.wikipedia.org/wiki/2018_Hawaii_false_missile_alert
Apparently we don't "all remember".
On 10/4/2023 1:39 PM, Sean Donelan wrote:
On Wed, 4 Oct 2023, Sabri Berisha wrote:
Makes me wonder what I have to do to opt out of this. We all remember
The issue in Houston is Dallas.
I reached out to 30-40 networks and 90% of them all said they just back haul to
Dallas and have no interest in peering in Houston. It’s a real hard town to
get any traction in. If you’re local and have some insight, I’d be super happy
to talk to you.
Aaron
e firewall separation, rated chases and such to be
customer specific requirements.
Aaron
On 10/23/2023 9:38 AM, Babak Pasdar wrote:
Hello,
I wanted to get some feedback as to what is considered standard A/B
power setup when data centers sell redundant power. It has always
been my understandin
Is MCC for ISP comparable to other well-known CDN's, like Facebook FNA,
Netflix OCA, etc?
Anyone have any experience with MCC in an ISP environment, and do you
see much bandwidth savings with it?
https://learn.microsoft.com/en-us/windows/deployment/do/mcc-isp
--
-Aaron
For years I've used an MS Excel spreadsheet to manage my IPv4
addresses. IPv6 is going to be maddening to manage in a spreadsheet.
What does everyone use for their IPv6 address prefix management and
documentation? Are there open source tools/apps for this?
--
-Aaron
pdate)
--
-Aaron
I don't have any examples of anyone still using paper LOAs except for
Cogent.
Aaron
On 2/26/2024 12:57 PM, Seth Mattinen via NANOG wrote:
Why do companies still insist on, or deploy new systems that rely on
paper LOA for IP and ASN resources? How can this be considered more
trustworthy
PITA.
Thanks Amazon.
Aaron
On 3/21/2024 12:16 PM, Jonathan Kalbfeld via NANOG wrote:
Hi All,
I just became aware that AWS has a list of hosting IP providers and
that list is blocked by their WAF? (!?!?). None of my VM or colo
customers can reach anything in AWS, such as Docker, Twilio, et
deployed their caching servers in your networks and what
have you thought about it? What Internet uplink savings are you seeing?
Netskrt - https://www.netskrt.io/
--
-Aaron
Thanks... they told me it was free.
-Aaron
On 4/4/2024 4:12 PM, Eric Dugas wrote:
That name rang a bell so I looked up my emails.
They contacted me last year, they were claiming to be "working with
some of the major streaming brands, such as Amazon Prime Video, to
improve the quali
Thanks ... that svta caching sounds interesting. i watched the
presentation, but don't understand how it's used by ISP's that want to
benefit from it.
-Aaron
On 4/4/2024 5:14 PM, John Stitt wrote:
The website says they are part of the Streaming Video Technology Alliance.
I
I've had my dual-100g-connected Amazon ACEv2 caches for over a year
now. With my ~55,000 subs I saw every Thursday night for NFL/TNF usage
at 15 gbps X2 (so 30 gbps total) and one day in late November
(thanksgiving probably) I saw 25 gbps x2 (so 50 gbps) usage!
-Aaron
On 4/4/2024 6:
cache: 75000, New hold nh limit: 75000, Curr nh cnt: 1, Curr new
hold cnt: 0, NH drop cnt: 0
Flags: Sendbcast-pkt-to-re
Addresses, Flags: Is-Preferred Is-Primary
Destination: 10.10.10.76/30, Local: 10.10.10.77, Broadcast: 10.10.10.79
--
-Aaron
i did. Usually my NANOG and J-NSP email list gets me a quicker solution
than JTAC.
-Aaron
On 4/17/2024 2:37 PM, Dominik Dobrowolski wrote:
Open a JTAC case,
That looks like a work for them
Kind Regards,
Dominik
W dniu śr., 17.04.2024 o 21:36 Aaron Gould napisał(a):
We recently added
fec cliff? is there a level of fec erros that i should be worried about
then? not sure what you mean.
-Aaron
On 4/17/2024 2:46 PM, Matt Erculiani wrote:
I'm no TAC engineer, but the purpose of FEC is to take and correct
errors when the port is going so fast that errors are
s
Thanks Joe and Schylar, that's reassuring. Tom, yes, I believe fec is
required for 400g as you see fec119 listed in that output... and i
understand you can't (or perhaps shouldn't) change it.
-Aaron
On 4/17/2024 2:43 PM, Joe Antkowiak wrote:
Corrected FEC errors are pretty
4-T2-740-061405?language=en_US
-Aaron
On 4/17/2024 3:58 PM, Matt Erculiani wrote:
At some point, an error rate would exceed the ability of forward error
correction (FEC) overhead to compensate, resulting in CRC errors.
You're not seeing those so all is technically well.
It's not
Well JTAC just said that it seems ok, and that 400g is going to show 4x
more than 100g "This is due to having to synchronize much more to
support higher data."
-Aaron
On 4/17/2024 4:04 PM, Aaron Gould wrote:
Interesting, thanks all, the JTAC rep got back to me and also pretty
ded at all in
order to function.
-Aaron
{master}
me@mx960> show configuration interfaces et-7/1/4 | display set
{master}
me@mx960>
{master}
me@mx960> clear interfaces statistics et-7/1/4
{master}
me@mx960> show interfaces et-7/1/4 | grep packet
Input packets : 0
Output p
ink to show the ethernet frame structure as it pertains to this 400g
fec stuff. If so, I'd really like to know the header format, etc.
-Aaron
On 4/18/2024 1:17 PM, Tom Beecher wrote:
FEC is occurring at the PHY , below the PCS.
Even if you're not sending any traffic, all the ethern
If worst-case is an option, there are some interesting routing policies
between certain places.
One example is a Australia to China--take Perth to Chongqing as an
example. They're at about the same longitude, but RTT is routinely
greater than 500 ms. Packets travel to Singapore, then cross the e
Anyone else see a lot of Internet traffic starting at 3 a.m. and
continuing even now? Seems to be spiky tcp.
--
-Aaron
199.232.154.252 69420( 0.1) 3.6
M( 0.3) 5.4 G( 0.4) 96 1.1 M 1483
-Aaron
On 7/23/2024 8:19 AM, Peter Potvin wrote:
Do you have /any/ sort of additional information about this? Which
source and destination ASNs, how much "a lot" is, etc? This sounds
like a typical
thanks Peter, et al. Is there some sort of website, traffic stats,
gaming update schedule page for me to proactively see if/when this type
of thing will occur? I mean, this is a significant uptick on all 3 of
my internet uplinks... would be nice to know beforehand
-Aaron
On 7/23/2024 9:02
understood. today's ~3:00 a.m traffic increase, is similar to what I
saw 1/23/2024... nice of them to at least start it during lowest use
time of the day.
https://mailman.nanog.org/pipermail/nanog/2024-January/224671.html
-Aaron
On 7/23/2024 12:33 PM, Tom Beecher wrote:
No, be
Yes. It's been a problem. We've heard there is an equipment issue.
Aaron
-- Original Message --
From "Peter Potvin via NANOG"
To "nanog"
Date 8/13/2024 9:04:39 AM
Subject AS1299 Packet Loss between ORD and MCI
Anyone else happening to see the maj
ARIN has a fellowship program that includes expenses to attend an
ARIN/NANOG combined meeting. It's also a great way to learn about ARIN
and get involved in the wider networking community.
Info can be found here:
https://www.arin.net/participate/meetings/fellowships/
That's strange... it's like the TTL on all Windows IP packets are decrementing
more and more as time goes on causing you to get less and less hops into the
internet
I wonder if it's a bug/virus/malware affecting only your windows computers.
-Aaron
What's the old router make/model ?
What's the new router make/model ?
-Aaron
-Original Message-
From: Ryan Pugatch [mailto:r...@lp0.org]
Sent: Wednesday, March 1, 2017 12:27 PM
To: Aaron Gould ; nanog@nanog.org
Subject: Re: Consumer networking head scratcher
The issue does
private address,
and time out those translations at 120 seconds. It's possible to hit a
limit there. I see it sometimes.
-Aaron
0 174 55615 55615000 17:35:34 Idle
(Admin)
-Aaron
Correction... ::/0 is what I learn from those 3 :)
bcd:1234::1
0 1234 i
Processed 1 prefixes, 1 paths
-Aaron
101 - 200 of 580 matches
Mail list logo