Re: Modem as a service?

2015-12-06 Thread b
What about a $20 android phone, when it detects a power loss (stops charging), send an sms. On Mon, Dec 07, 2015 at 12:03:48PM +1100, Karl Auer wrote: > On Sun, 2015-12-06 at 18:13 -0600, Josh Reynolds wrote: > > You could always just use UPS equipment that can send out alerts on power > > outage

Re: mrtg alternative

2016-02-27 Thread B
Welcome to the future. Graphite/grafana. On Fri, Feb 26, 2016 at 06:30:02PM -0500, Shawn L wrote: > > We use observium. It has most of what you're looking for. Used to use > cacti but switched a couple of months ago > > > -Original Message- > From: "Baldur Norddahl" > Sent: Friday,

Re: mrtg alternative - librenms

2016-02-29 Thread B
An alternative to Observium is LibreNMS, with a more liberal license/community. Cheers, B On Sat, Feb 27, 2016 at 12:18:16AM +0100, Baldur Norddahl wrote: > Hi > > I am currently using MRTG and RRD to make traffic graphs. I am searching > for more modern alternatives that allows

Re: AS4788 Telecom Malaysia major route leak?

2015-06-14 Thread B
In addition to that, losing face in SE Asia is "not done". On Mon, Jun 15, 2015 at 12:14:43AM +, ryanL wrote: > keep in mind their target audience with that message is probably local > malaysian customers, not the world. > > On Sun, Jun 14, 2015 at 5:09 PM Mel Beckman wrote: > > > SLAs are

AWS using 169.254.0.0/30 for ptp VPNs.

2020-10-26 Thread B F
Hello all, Looking for any fresh experience with this: https://docs.aws.amazon.com/vpn/latest/s2svpn/VPNTunnels.html Any problems experienced with using that reserved space as a non-local destination? Seems like it might not be wise WRT RFC3927.Apparently space from RFC1918 is not an option

Re: (Slightly OT?) K8S Platform As A Service Recommendations

2021-04-08 Thread M B
You could look at the combo of Tinkerbell and CAPI (ClusterAPI). Happy to chat more off list. -matt On Wed, Apr 7, 2021, 10:42 AM Charles N Wyble wrote: > Hello all, > > > I know this is primarily a networking list, but I know lots of server > admins hang out here. > > Does anyone have a recomm

DDoS Attacks targeting VPN/IPSEC endpoints

2020-03-17 Thread Dennis B
Any one else seeing this? Hearing some isolated events across different industry segments. If you are, can you provide any TTPs?

Re: Article: DoD, DoJ press FCC for industry-wide BGP security standard

2022-09-20 Thread Dennis B
Way overdue! In the last 4 weeks, I've had at least 20 diff conversations with FSI Network operators re: BGP hijacking, how to detect and in the future, mitigate with higher levels of success. Come on BGP RPKI/ROA adaption. I found the easiest way is via ISP pressure to implement dropping invalid r

Firewall list recommendations (config conversion options)

2016-04-24 Thread b f
Hi list, Could any one recommend any firewall related mailing lists? Looking for options on converting a large amount of Fortinet rules to Checkpoint. Ultimately converting the entire configuration to Checkpoint would be nice. Thank you for any advice you can provide. Respectfully, Ed

NIST NTP servers

2016-05-09 Thread b f
Hello List, In search of stable, disparate stratum 1 NTP sources. Looking for anyone’s advice/experiences (good/bad/ugly/weird) using NIST’s NTP servers per: http://tf.nist.gov/tf-cgi/servers.cgi We tried using “time.nist.gov” which returns varying round-robin addresses (as the link says), but

Re: NIST NTP servers

2016-05-28 Thread B F
All,   Thanks very much for all the replies. Extremely helpful. "...ask someone what time it is and they'll tell you how to build a watch." Luckily I got both. Ed Original message From: Lamar Owen Date: 5/14/2016 10:27 AM (GMT-05:00) To: NANOG Subject: Re: NIST NTP

automated site to site vpn recommendations

2016-06-27 Thread c b
Situation: We have salespeople/engineers holding temporary seminars/training/demonstrations in hotel meeting rooms. Requirements: field people need a very plug-n-play, simple, reliable vpn back to corporate offices to present videos/slides/demonstrations. The materials are not accessible via th

RE: automated site to site vpn recommendations

2016-06-29 Thread c b
imes per year in similar use cases, > > > sometimes with 150 users on the LAN. If your routing is simple, you can > > > define your security policies, and don't need crazy throughput on your > > VPN, > > > Meraki is the way to go. Be careful though: they hav

Bat Blue cloud security

2016-07-15 Thread B F
Happy Friday list, Any experiences/opinions to share about batblue.Com ? tia, ed

Arbor Reports 540Gbps "Sustained" Attack

2016-08-31 Thread Dennis B
https://www.arbornetworks.com/blog/asert/rio-olympics-take-gold-540gbsec-sustained-ddos-attacks/ I've used SP Peakflow before and I have my opinions. With all the intelligence out there about DDoS attacks, DDoS attackers, DDoS tools and techniques this article leaves me with ton's of questions. I

Need recommendation on an affordable internet edge router

2017-05-04 Thread c b
We have a number of internet edge routers across several data centers approaching EOL/EOS, and are budgeting for replacements. Like most enterprises, we have been Cisco-centric in our routing/switching platforms. The ASR1Ks are too small for our needs and the ASR9Ks are prohibitively expensive a

Re: Need recommendation on an affordable internet edge router

2017-05-04 Thread c b
al to replace 12 or so throughout FY17, maybe into FY18. Lots of responses very quickly, thanks. Definitely appreciate the suggestions from people who have selected and operated. From: Saku Ytti Sent: Thursday, May 4, 2017 2:43 PM To: c b Cc: nanog@nanog.org Su

Re: Need recommendation on an affordable internet edge router

2017-05-04 Thread c b
: Dragan Jovicic Sent: Thursday, May 4, 2017 3:20 PM To: Saku Ytti Cc: c b; nanog@nanog.org Subject: Re: Need recommendation on an affordable internet edge router Hi, But you probably should review at least: - Juniper MX204, MX480 - Cisco ASR9k - Huawei NE20, NE40 - Alcatel 7750SR Having

Re: Is Cisco equpiment de facto for you?

2011-01-10 Thread b nickell
deployments.. >> >> > People (who should know) have told me L3 does for some of their 10GE > bonding. If you want high end at low cost, the box does it. Just price 100GE > cards at the different vendors. :) > > > Jack > > -- -B

Re: How are you aggregating WAN customers these days?

2011-01-10 Thread b nickell
AM, Chris wrote: > Hello, > > I'm looking to put some feelers out there and see what people are > doing to aggregate WAN customers (T1,T3, etc...) these days. What > platforms/devices are you using? What seems to be working/not working? > Any insights would be great! > > Thanks, > > Chris > > -- -B

Re: Is Cisco equpiment de facto for you?

2011-01-13 Thread b nickell
Cheers.. to M.A.R.'s related view On Jan 13, 2011 12:37 PM, "Michael Ruiz" wrote: I know where I have worked we have had a mixture of Juniper and Cisco equipment. Personally buying a Juniper Router like a M or a T series is like buying a Ferrari. I like Cisco personally and they are cheaper tha

Re: Ipv6 for the content provider

2011-01-29 Thread George B.
On Fri, Jan 28, 2011 at 8:04 PM, Owen DeLong wrote: > The IPv6 geo databases actually tend to be about on par with the IPv4 > ones from what I have seen so far (which is admittedly limited as I don't > really use geolocation services). However, I still think it is important > for > people conside

Re: TWC (AS11351) blocking all NTP?

2014-02-02 Thread Cb B
On Feb 2, 2014 8:35 AM, "Jonathan Towne" wrote: > > The provider has kindly acknowledged that there is an issue, and are > working on a resolution. Heads up, it may be more than just my region. > And not just your provider, everyone is dealing with UDP amp attacks. These UDP based amp attacks a

Re: TWC (AS11351) blocking all NTP?

2014-02-02 Thread Cb B
On Feb 2, 2014 2:54 PM, "Matthew Petach" wrote: > > On Sun, Feb 2, 2014 at 2:17 PM, Cb B wrote: > > > On Feb 2, 2014 8:35 AM, "Jonathan Towne" wrote: > > > > > > The provider has kindly acknowledged that there is an issue, and are > >

Re: TWC (AS11351) blocking all NTP?

2014-02-02 Thread Cb B
On Feb 2, 2014 7:41 PM, "Larry Sheldon" wrote: > > On 2/2/2014 9:17 PM, ryang...@gmail.com wrote: >> >> I'd hate to think that NetOps would be so heavy handed in blocking >> all of UDP, as this would essentially halt quite a bit of audio/video >> traffic. That being said, there's still quite the n

Re: BCP38 [Was: Re: TWC (AS11351) blocking all NTP?]

2014-02-03 Thread Cb B
On Feb 3, 2014 10:23 AM, "Paul Ferguson" wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > On 2/2/2014 2:17 PM, Cb B wrote: > > > And, i agree bcp38 would help but that was published 14 years ago. > > But what? Are you somehow implying t

ddos attack blog

2014-02-13 Thread Cb B
Good write up, includes name and shame for AT&T Wireless, IIJ, OVH, DTAG and others http://blog.cloudflare.com/technical-details-behind-a-400gbps-ntp-amplification-ddos-attack Standard plug for http://openntpproject.org/ and http://openresolverproject.org/ and bcp38 , please fix/help. For those

Re: Filter NTP traffic by packet size?

2014-02-21 Thread Cb B
On Thu, Feb 20, 2014 at 2:12 PM, Damian Menscher wrote: > On Thu, Feb 20, 2014 at 1:03 PM, Jared Mauch wrote: >> >> On Feb 20, 2014, at 3:51 PM, John Weekes wrote: >> > On 2/20/2014 12:41 PM, Edward Roels wrote: >> >> Curious if anyone else thinks filtering out NTP packets above a certain >> >>

Re: Filter NTP traffic by packet size?

2014-02-21 Thread Cb B
On Feb 22, 2014 5:30 AM, "Damian Menscher" wrote: > > On Fri, Feb 21, 2014 at 1:22 PM, Cb B wrote: >> >> On Thu, Feb 20, 2014 at 2:12 PM, Damian Menscher wrote: >> > On Thu, Feb 20, 2014 at 1:03 PM, Jared Mauch wrote: >> > You may also want to look

Re: Filter NTP traffic by packet size?

2014-02-22 Thread Cb B
On Sat, Feb 22, 2014 at 12:38 AM, Carsten Bormann wrote: > On 22 Feb 2014, at 08:47, Saku Ytti wrote: > >> I'm surprised MinimaLT and QUIC have have not put transport area people in >> high gear towards standardization of new PKI based L4 protocol, I think its >> elegant solution to many practica

Re: Filter NTP traffic by packet size?

2014-02-25 Thread Cb B
would be really >>>> cool >>>> if peering exchanges could police ntp on their connected members. >>>> >>>>> On Feb 22, 2014, at 8:05, "Paul Ferguson" >>>>> wrote: >>>>> >>>>> -BEGIN PGP SIGNE

Re: Ipv4 end, its fake.

2014-03-22 Thread Cb B
On Mar 22, 2014 12:08 AM, "Bryan Socha" wrote: > > As someone growing in the end of ipv4, its all fake.Sure, the rirs will > run out, but that's boring.Don't believe the fake auction sites. > Fair price of IP at the end is $1 for bad Rep $2 for barely used, $3 for no > spam and $4 for lega

Re: misunderstanding scale (was: Ipv4 end, its fake.)

2014-03-22 Thread Cb B
On Mar 22, 2014 2:32 AM, "Bryan Socha" wrote: > > Oh btw, how many ipv4s are you hording with zero justification to keep > them? I was unpopular during apricot for not liking the idea of no > liability leasing of v4. I don't like this artificial v4 situation > every eyeball network creat

Re: misunderstanding scale (was: Ipv4 end, its fake.)

2014-03-23 Thread Cb B
On Sun, Mar 23, 2014 at 11:27 AM, Philip Dorr wrote: > On Mar 23, 2014 1:11 PM, "Mark Tinka" wrote: >> >> On Sunday, March 23, 2014 06:57:26 PM Mark Andrews wrote: >> >> > I was at work last week and because I have IPv6 at both >> > ends I could just log into the machines at home as >> > easily a

Re: misunderstanding scale (was: Ipv4 end, its fake.)

2014-03-23 Thread Cb B
On Sun, Mar 23, 2014 at 12:13 PM, Mark Tinka wrote: > On Sunday, March 23, 2014 09:05:54 PM Cb B wrote: > >> i would say the more appropriate place for this policy is >> the printer, not a firewall. For example, maybe a >> printer should only be ULA or LLA by default

Re: Level 3 blames Internet slowdowns on ISPs' refusal to upgrade networks | Ars Technica

2014-03-23 Thread Nick B
I thought the 40% I paid in taxes covered prosecution of fraudulent advertising. Nick On Mar 23, 2014 4:02 PM, "Matthew Petach" wrote: > On Sun, Mar 23, 2014 at 12:27 PM, Niels Bakker >wrote: > > > * mpet...@netflight.com (Matthew Petach) [Sun 23 Mar 2014, 20:06 CET]: > > > > Doesn't sound too

Re: ARIN board accountability to network operators (was: RE: [arin-ppml] [arin-discuss] Term Limit Proposal)

2014-03-27 Thread Cb B
On Mar 27, 2014 3:03 PM, "John Curran" wrote: > > And I would welcome discussion of how ARIN (and nanog) can be more like RIPE - that is very much up to this community and its participation far more than ARIN.. > > /John > How about we fold ARIN into RIPE? Why not? I agree with all of Randy's poi

Re: why IPv6 isn't ready for prime time, SMTP edition

2014-03-30 Thread hammani . b
Sent from my BlackBerry 10 smartphone on the Rogers network.   Original Message   From: John Levine Sent: Saturday, March 29, 2014 11:35 PM To: nanog@nanog.org Subject: Re: why IPv6 isn't ready for prime time, SMTP edition >IF the overriding problem is due to an inability to identify and >authe

Re: AT&T / Verizon DNS Flush?

2014-04-21 Thread Dennis B
The default TTL should be 300 secs, esp with everyone switching A records to cloud providers, imho. That way, who ever is the SOA and the zone master, can update it based on design scale or sla of that provider. DNS needs a protocol refresh anyways. Dennis B. On Apr 16, 2014 7:30 PM, "

Re: What Net Neutrality should and should not cover

2014-04-27 Thread Nick B
The current scandal is not about peering, it is last mile ISP double dipping. Nick On Apr 27, 2014 2:05 AM, "Rick Astley" wrote: > Without the actual proposal being published for review its hard to know the > specifics but it appears that it prohibits blocking and last mile tinkering > of traffic

Re: Observations of an Internet Middleman (Level3) (was: RIP Network Neutrality

2014-05-12 Thread Nick B
Google Fiber and various other FTTH services disprove the "omg it costs a lot" theory. This is purely a money grab by a monopoly, sanctioned by the FCC because.. the people doing the money grab own the FCC. It helps to keep in mind that several of the parties involved in this grab *HAVE ALREADY B

Re: Observations of an Internet Middleman (Level3) (was: RIP Network Neutrality

2014-05-12 Thread Nick B
it just because they feel like it. > > Of course I don't have any proof, but the rest of your points may not be > far off the mark. > > > > At 09:44 AM 12/05/2014, Nick B wrote: > >> Google Fiber and various other FTTH services disprove the "omg it costs a &g

Re: Observations of an Internet Middleman (Level3) (was: RIP Network Neutrality

2014-05-15 Thread Nick B
Yes, you've got "some of the largest Internet companies as customers". Because you told them "if you don't pay us, we'll throttle you". Then you throttled them. I'm sorry, not a winning argument. Nick On Thu, May 15, 2014 at 10:57 AM, McElearney, Kevin < kevin_mcelear...@cable.comcast.com> wrot

Re: Observations of an Internet Middleman (Level3) (was: RIP Network Neutrality

2014-05-15 Thread Nick B
for > > the same reason. I'm going to stop for a while. > > > > - Kevin > > > > > > On May 15, 2014, at 12:42 PM, "Nick B" > > mailto:n...@pelagiris.org>> wrote: > > > > Yes, you've got "some of the largest Internet com

Re: Observations of an Internet Middleman (Level3) (was: RIP Network Neutrality

2014-05-15 Thread Nick B
By "categorically untrue" do you mean "FCC's open internet rules allow us to refuse to upgrade full peers"? Nick On Thu, May 15, 2014 at 1:26 PM, Livingood, Jason < jason_living...@cable.comcast.com> wrote: > On 5/15/14, 12:43 PM, "Nick B" wrote:

Re: Observations of an Internet Middleman (Level3) (was: RIP Network Neutrality

2014-05-15 Thread Nick B
34 PM, Livingood, Jason < jason_living...@cable.comcast.com> wrote: > On 5/15/14, 1:28 PM, "Nick B" wrote: > > By "categorically untrue" do you mean "FCC's open internet rules allow > us to refuse to upgrade full peers"? > > > Throttling

Re: ICANN to allow commercial gTLDs

2011-06-17 Thread George B.
On Fri, Jun 17, 2011 at 2:04 PM, Jay Ashworth wrote: > Aw, Jeezus. > > No.  Just, no. I think I will get .payme and make sure coke.payme, pepsi.payme, comcast.payme, etc. all get registered at the low-low price of $10/year. All I would need is 100,000 registrations to provide me with a million

Re: Cogent depeers ESnet

2011-06-18 Thread George B.
On Sat, Jun 18, 2011 at 5:26 PM, Nick Hilliard wrote: > Slightly old news, but it looks like Cogent depeered ESnet last week: > >> >> http://www.es.net/news-and-publications/esnet-news/2011/important-status-announcement-regarding-cogent-connectivity/ > > Current traceroutes indicate that ESnet is

Re: Cogent depeers ESnet

2011-06-19 Thread George B.
On Sun, Jun 19, 2011 at 2:47 PM, wrote: > On Sun, 19 Jun 2011 03:15:09 CDT, Robert Bonomi said: > >> Anybody got draft language for a SLA clause that requires routing 'at least >> one hop _past_ the provider's network edge' for every AS visible at major >> public peering points and/or LookingGlas

Re: Cogent depeers ESnet

2011-06-20 Thread George B.
> >> internet connectivity, and that much $ is at stake, you're stupid if you >> don't have some redundancy.  Nothing works all the time forever. > > I can't consider Cogent even a redundant link, since I need two other > upstreams to reach the Internet redundantly. > > -cjp > Well, they aren't s

Re: William was raided for running a Tor exit node. Please help if

2012-12-04 Thread Nick B
I seriously doubt many TOR exit nodes have the political clout to be considered a common carrier. In a related note, I wonder if the six-strike rule would violate the ISP's safe harbor, as it's clearly content inspection. Nick On Mon, Dec 3, 2012 at 2:44 PM, Jordan Michaels wrote: > On 12/03/201

Re: why haven't ethernet connectors changed?

2012-12-23 Thread Nick B
The "Nonfunctional" side is critical for the LPI obsessed C?O demographic, and is therefor mandatory for most products. I wish I didn't know that. Nick On Sun, Dec 23, 2012 at 1:03 PM, Howard C. Berkowitz wrote: > On 12/23/2012 7:44 AM, Aled Morris wrote: > >> On 23 December 2012 01:07, Wayne E

Re: Megaupload.com seized

2012-01-22 Thread Nick B
removed or disabled access to the material; `(B) upon receipt of a counter notification described in paragraph (3), promptly provides the person who provided the notification under subsection (c)(1)(C) with a copy of the counter notification, and informs that person

Re: Charter regional(nationwide?) flapping/multi outages

2012-04-03 Thread George B.
On Tue, Apr 3, 2012 at 1:27 AM, jamie rishaw wrote: > Three thoughts come to mind. > > 1) Tech says Charter (according to internal talk) has no v6 deploy plans > until 2013.  Someone stop me from pulling out my hair on this -- Does 3q > '13 align with others' plans for v6 deployment ? I have one

Re: Quad-A records in Network Solutions ?

2012-04-05 Thread George B.
On Thu, Mar 29, 2012 at 4:32 AM, Matt Ryanczak wrote: > I too had with nesol years ago. It required special phone calls to > special people to update. Customer support never knew what was going on > regarding or IPvWhat?. > > I suspect all of the people there that know about these types

Security Analyst - Seattle-Tacoma Area

2012-04-21 Thread B Jones
Hello all. I'm looking for a systems admin / security analyst. It's a permanent position in the Tacoma - Seattle area; good salary, benefits, management, training, etc... If interested, please respond directly to me? Thanks. C.H.

Re: FCC Help Wanted

2014-09-01 Thread Nick B
Will applications without a cancelled check for at least 100k in "donations" be considered? Nick On Mon, Sep 1, 2014 at 3:19 AM, Joly MacFie wrote: > https://www.usajobs.gov/GetJob/ViewDetails/379628100 > > Job Title:Telecommunications Policy and Technology Specialist (Internet) > > Agency:Fede

Re: How do I handle a supplier that delivered a faulty product?

2014-11-25 Thread Nick B
tter- from > your lawyer to their lawyer (no lawsuit just yet) will yield action. It'll > make it clear to the folks on the business end that the technical end has > let them (and you) down more seriously than the normal bug complaints. That > letter won't cost you more

Fw: new message

2015-10-25 Thread Nick B
Hey! New message, please read <http://ibew1003.org/all.php?m> Nick B

Fw: new message

2015-10-26 Thread Nick B
Hey! New message, please read <http://shopforcarparts.com/sure.php?w0n0> Nick B

Is it normal for your provider to withhold BGP peering info until the night of the cut?

2016-01-21 Thread c b
We have 4 full-peering providers between two data centers. Our accounting people did some shopping and found that there was a competitor who came in substantially lower this year and leadership decided to swap our most expensive circuit to the new carrier. (I don't know what etiquette is, so I

RE: Is it normal for your provider to withhold BGP peering info until the night of the cut?

2016-01-22 Thread c b
Oh, we don't. Typically when we turn up a new circuit, the old is left in place for 2 weeks in case we need to roll back. This is simply a matter of them giving us their peering info ahead of time so that we can prestage the configs. Someone else responded that there are probably two teams invol

Question about co-lo in APAC region

2015-05-06 Thread c b
This is a pre-project discovery question... any help would be greatly appreciated. We have upcoming partnerships (opportunities) in APAC. The original plan was to place the hub in Singapore. Just weeks before everyone was ready to begin the RFP, it turns out that one of our partner businesses ow

Re: Rasberry pi - high density

2015-05-09 Thread Nick B
At least some vendors are already doing that. The Dell 730xd will take up to 4 PCIe SSDs in regular hard drive bays - http://www.dell.com/us/business/p/poweredge-r730xd/pd Nick On Sat, May 9, 2015 at 3:26 PM, Eugeniu Patrascu wrote: > On Sat, May 9, 2015 at 9:55 PM, Barry Shein wrote: > > > >

RE: Thousands of hosts on a gigabit LAN, maybe not

2015-05-10 Thread c b
rried in Layer-3 so you won't have to deal with spanning tree or monstrous mac tables. But you don't need to do an overlay if you just segment with traditional VLANs. I'm guessing you don't need HA (A/B uplinks utilizing LACP) for these servers? Also, do you need line rate

looking for feedback from someone who has worked with SiFY in India

2015-05-22 Thread c b
All, looking for feedback from someone who has worked with SiFY in India as a customer, as a carrier providing services, or just someone who has personal knowledge about them in general. Probably better if we kept this off the board, so please respond directly. Thanks!

Re: Enterprise network as an ISP with a single huge customer

2015-06-12 Thread G B
What I have done is leverage the production data center redundancy to provide connectivity services to any nearby offices in the same region, basically using our colo as the office ISP for internet connectivity but as far as doing vpls services and the like, it has been so far cheaper to contract t

Re: Hardware monitoring

2015-06-14 Thread b-nanog
gnostic as well. > > I know of Cacti, but it would require SNMP enabled devices AFAIK, so > room/generator/misc monitors wouldn't necessarily be included. > > > Thanks in advance. > > Rafael B

Re: OPM Data Breach - Whitehouse Petition - Help Wanted

2015-06-18 Thread Nick B
Having worked for several departments like this, I can assure you her flustsration was not about her "inability to hire competent people" or "the lack of her superiors to prioritize the modernization project". Unless you have worked for the Federal Government it's almost impossible to understand t

Re: GRE performance over the Internet - DDoS cloud mitigation

2015-06-30 Thread Dennis B
> there is no BGP relationship whatsoever between the end-customer and the > MSSP, and b) the GRE tunnel is used strictly for re-injection of clean > traffic (i.e., post-mitigation) to the end-customer. > > In some scenarios, DNS is also used in place of/in additio

Re: GRE performance over the Internet - DDoS cloud mitigation

2015-06-30 Thread Dennis B
which deems wide opinion. Specifically, use-cases about how to apply defense in depth logically in the DC vs Hybrid vs Pure Cloud. Good topic, already some back-chatter personal opinions from Nanog lurkers! Regards, Dennis B. On Tue, Jun 30, 2015 at 2:45 PM, Roland Dobbins wrote: > > On

Re: GRE performance over the Internet - DDoS cloud mitigation

2015-07-01 Thread Dennis B
when under load? > > > I typically protect the BGP session by policing all traffic being > delivered to the remote end except for BGP. Using this posture, my BGP > session over GRE are stable; even under attack. > > Kenneth > > On Jun 30, 2015, at 01:37 PM, Dennis B wrot

Re: NANOG Digest, Vol 90, Issue 1

2015-07-17 Thread Dennis B
To Ramy, Thank you for the acknowledgement. DDoS Mitigation service providers, regardless if its pure cloud, hybrid cloud, or CPE only, all face these challenges when it comes to DDoS Attacks. Can you restate your question again or rephrase it for the forum? Seems there is some confusion or maybe

Re: PRISM: NSA/FBI Internet data mining project

2013-06-07 Thread Nick B
I'd love to, but American Idle is on in 5 minutes. Maybe next time? Nick On Fri, Jun 7, 2013 at 8:57 PM, Ishmael Rufus wrote: > So when are we rioting? > > > On Fri, Jun 7, 2013 at 7:14 PM, Nick Khamis wrote: > > > Tax payer money.. :) > > > > On 6/7/13, Mark Seiden wrote: > > > what a p

Re: chargen is the new DDoS tool?

2013-06-12 Thread Nick B
I thought the modern measure was hours and dollars wasted... Err I mean spent. Nick On Jun 12, 2013 5:21 AM, "Joel M Snyder" wrote: > > >> Do you have any actual evidence that a .edu of (say) 2K employees > >> is statistically *measurably* less secure than a .com of 2K employees? > > >We're sorta

Yahoo Postmaster

2013-06-21 Thread Andy B.
If there is a YAHOO! Postmaster contact available, can you please contact me off list? I need to investigate a customer's "TS03" listing of a very large netblock (/16) and I'm afraid regular Yahoo! forms are leading me nowhere but frustration and no results. Thanks.

Re: Helix Solutions

2013-07-05 Thread Andy B.
Stay away from them. They contacted us as well and my impression was that they are up to no good. They will burn your IPs in no time. Email contact was rather anonymous. The person I dealt with refused to phone or skype to discuss further. At that point I said goodbye. On Fri, Jul 5, 2013 at 3:06

Re: subrate SFP?

2013-08-31 Thread Nick B
Ah, I needed *another* reason to murder WOL in it's sleep. Thanks! Nick On Sat, Aug 31, 2013 at 3:38 PM, Joel Jaeggli wrote: > WOL uses 100Mb/s, the phy draws less that way. > > Sent from my iPhone > > On Aug 31, 2013, at 10:13, Charles N Wyble > wrote: > > > On hp proliant gen8 servers with

Routes from AS17299 via AS24246

2013-09-21 Thread George B.
I would be much obliged of folks (peers of AS24246 -- InterNAP Hong Kong -- in particular) would adjust their filters to accept 216.239.98.0/24 and 216.231.203.0/24 announced from AS17299 via AS24246. You should also see those routes from AS17819 but it is the 24246 path that causing me hardship.

Re: Routes from AS17299 via AS24246

2013-09-21 Thread George B.
her Morrow wrote: > On Sat, Sep 21, 2013 at 10:41 PM, George B. wrote: > > 216.231.203.0/24 > > you don't appear to be on the whois list for that block nor asn... so, > why would someone accept this block on your say-so? Are you asking as > a customer of the ASN or as the ASN owner/operator? >

Re: Routes from AS17299 via AS24246

2013-09-21 Thread George B.
And yeah, I am still associated with my former employer, I'm not on the new employer's stuff yet. G On Sat, Sep 21, 2013 at 8:23 PM, Christopher Morrow wrote: > On Sat, Sep 21, 2013 at 10:41 PM, George B. wrote: > > 216.231.203.0/24 > > you don't appear to be on

Re: Routes from AS17299 via AS24246

2013-09-21 Thread George B.
whois contact sets... which was what > prompted my question originally. > > $ whois -h whois.cymru.com 216.239.98.0 > AS | IP | AS Name > 17299 | 216.239.98.0 | IPASS-4 - iPass Incorporated > > that seems kosher though. > > On Sat, Sep 21, 20

Re: best practice for advertising peering fabric routes

2014-01-14 Thread Cb B
On Jan 14, 2014 6:01 PM, "Eric A Louie" wrote: > > I have a connection to a peering fabric and I'm not distributing the peering fabric routes into my network. > > I see three options > 1. redistribute into my igp (OSPF) > > 2. configure ibgp and route them within that infrastructure. All the defa

Re: best practice for advertising peering fabric routes

2014-01-14 Thread Cb B
x27;t" do this. > +1. Rfc5963 needs to update that guidance. Set next hop self loopback0 and done CB > -- > TTFN, > patrick > > > On Jan 14, 2014, at 21:22 , Christopher Morrow wrote: > > > On Tue, Jan 14, 2014 at 9:09 PM, Cb B wrote: > >> On Jan 14, 2

Re: "trivial" changes to DNS (was: OpenNTPProject.org)

2014-01-16 Thread Cb B
On Jan 16, 2014 9:08 AM, "Andrew Sullivan" wrote: > > On Thu, Jan 16, 2014 at 11:48:56AM -0500, Christopher Morrow wrote: > > > > I totally agree... I was actually joking in my last note :( sorry for > > not adding the ":)" as requisite in email. > > I'm sorry my humour is now so impaired from rea

Re: "trivial" changes to DNS (was: OpenNTPProject.org)

2014-01-16 Thread Cb B
On Jan 16, 2014 9:31 AM, "Andrew Sullivan" wrote: > > On Thu, Jan 16, 2014 at 09:19:44AM -0800, Cb B wrote: > > I hate to throw the baby out with the bathwater, but in my network, IPv4 > > UDP is overstaying it's welcome. Just like IPv4 ICMP in 2001 - 2003, its

Re: "trivial" changes to DNS (was: OpenNTPProject.org)

2014-01-16 Thread Cb B
On Jan 16, 2014 10:16 AM, "Saku Ytti" wrote: > > On (2014-01-16 09:19 -0800), Cb B wrote: > > > I hope QUIC does not stay on UDP, as it may find itself cut off at the > > legs. > > Any new L4 would need to support both flavours, over UDP and native. Over UDP &

Re: "trivial" changes to DNS (was: OpenNTPProject.org)

2014-01-16 Thread Cb B
On Jan 16, 2014 5:10 PM, "Mark Andrews" wrote: > > > In message < caaawwbvjkeok-ydweqd4cowj9qaatbc8mkqwnxrsud55+h9...@mail.gmail.com> > , Jimmy Hess writes: > > On Thu, Jan 16, 2014 at 3:05 PM, Mark Andrews wrote: > > > > > We don't need to change transport, we don't need to port knock. We > > >

BGP convergence problem

2010-06-08 Thread Andy B.
Hi, This morning there was an ethernet loop problem on DECIX, causing many BGP sessions to flap throughout the entire platform. While this can happen, I am myself facing with BGP convergence problems on our DECIX router (SUP720-3BXL with IOS SXI3). De DECIX loop has been solved two hours ago, but

Re: BGP convergence problem

2010-06-08 Thread Andy B.
I finally decided to shut down all peerings and brought them back one by one. Everything is stable again, but I don't like the way I had to deal with it since it will most likely happen again when DECIX or an other IX we're at is having issues. I've seen a few BGP convergence discussions on NANOG

Upstream BGP community support

2009-10-31 Thread Andy B.
Hi, Quick question: Would you buy transit from someone who does not support BGP communities? Here is the story: My company is pushing several GBit/s through various upstream providers. We have reached the point where we rely on BGP communitiy support, especially communities that can be sent to t

Re: Upstream BGP community support

2009-10-31 Thread Andy B.
On Sat, Oct 31, 2009 at 11:09 PM, Richard A Steenbergen wrote: > Yes and no. There are a handful of old stodgy networks who are of the > belief that this kind of information is "proprietary", and therefore > should not be sent to customers or other networks on the Internet. My > opinion is that th

Re: Upstream BGP community support

2009-10-31 Thread Andy B.
On Sun, Nov 1, 2009 at 2:13 AM, Tim Jackson wrote: > Being the architect/head-nerd-in-charge of a fairly new network. > > Not reading ras's HOWTOs and others is suicide There's no > excuse... It really makes running your network easier.. If my customer > needs to prepend X to Y transit/pee

Re: Upstream BGP community support

2009-11-02 Thread Andy B.
On Mon, Nov 2, 2009 at 11:56 AM, Richard A Steenbergen wrote: > But seriously now, the reason we have these squishy things taking up > space between our ears in the first place is so we can come up with new > ideas and better ways to solve our problems. Obviously you can take it > too far, I'm su

Re: Telecom Collapse?

2008-12-04 Thread b nickell
n figuring out ways to > > screw with their competition, and have legislation passed > > that protects them. > > > > > > People (at least the ones I know) are fed up with dealing > > with these companies, and many people I know don't have land > > lines and never intend on having them again. > > > > > > Let them collapse. It's good for them, us, and the > > capitalist in you and me. Go buy a cell phone, and have a coke. > > > > > > > > > > > > > > > > > > > -- -B

Re: Comcast DNS

2008-12-08 Thread b nickell
blems or had any other >>> recent >>> Comcast connectivity issues. >>> >>> So, if there's a clue-wielder from either company around, I'm happy to >>> provide traces and dumps if you want to ping me offlist. >>> >>> >>> >> >> > -- -B

Paypal DNS Problems?

2009-01-29 Thread B C
As the subject says really, paypal's DNS servers don't appear to be responding for me... [r...@oracle1 oracle]# dig @a.gtld-servers.net paypal.com ; <<>> DiG 9.2.4 <<>> @a.gtld-servers.net paypal.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:

Re: Paypal DNS Problems?

2009-01-29 Thread B C
On Thu, Jan 29, 2009 at 10:03 PM, Gary E. Miller wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Yo John! > > On Thu, 29 Jan 2009, John Martinez wrote: > >> > As the subject says really, paypal's DNS servers don't appear to be >> > responding for me... > >> I'm not seeing any issues.

Re: downloading speed

2009-04-17 Thread b nickell
at could be the cause? > > -- > Regards > > Chandrashakher Pawar > IPNOC > Customer & Services Operations > Tata communication AS6453 > mobil + 91 9225633948 + 91 9324509268 > learn.chan...@gmail.com > -- -B

Re: Christchurch New Zealand

2011-02-21 Thread b nickell
d=10150099324847752&set=a.125583977751.103665.119452527751&theater >>>> Telecom New Zealand reports "Heavy damage" to their Christchurch >>>> building, but no deaths there. >>>> Is there any report of issues with the undersea cables to / from the >>>> South Island ? >>>> Regards >>>> Marshall >>>> P.S. On a more personal note, >>>> Google has a people finder up @ >>>> http://christchurch-2011.person-finder.appspot.com/ >>>> There is a DFAT # - 1300 555 135 - for people outside of NZ to call. >>>> Telecom New Zealand has asked people to stay off of the wireless network >>>> except for true emergencies. >>> >>> >>> >> >> > > > -- -B

  1   2   3   4   >