Re: netflix OCA in a CG-NAT world

2018-09-17 Thread Jared Mauch
> On Sep 17, 2018, at 6:54 AM, Tom Ammon wrote: > > I'm looking to understand the impact of CG-NAT on a set of netflix OCAs, in > an ISP environment. I see in Netflix's FAQ on the subject that traffic > sourced from RFC 1918/6598 endpoints can't be delivered to the OCA. Is this > simply a m

Re: Reaching out to ARIN members about their RPKI INVALID prefixes

2018-09-18 Thread Jared Mauch
> On Sep 18, 2018, at 3:04 PM, Owen DeLong wrote: > > > >> On Sep 18, 2018, at 11:06 AM, Christopher Morrow >> wrote: >> >> >> >> On Tue, Sep 18, 2018 at 10:36 AM Job Snijders wrote: >> Owen, >> >> On Tue, Sep 18, 2018 at 10:23:42AM -0700, Owen DeLong wrote: >> > Personally, since all

Re: Reaching out to ARIN members about their RPKI INVALID prefixes

2018-09-19 Thread Jared Mauch
> On Sep 19, 2018, at 8:55 PM, Owen DeLong wrote: > > Actually, from my perspective, neither one is practical/useful due to the > lack of supporting data to achieve it. I suggest you look at some of the cool research that was done with various prefixes from different regions. You can see t

Re: ARIN RPKI TAL deployment issues

2018-09-25 Thread Jared Mauch
by the other regions. Let the developers know that if they bundle the ARIN TAL they won’t face legal action. Help bring routing security to the same ease of use as places like LetsEncrypt do for those in the SSL/TLS ecosystem. - Jared Mauch (Representing my own self/WFPL-1)

Re: ARIN RPKI TAL deployment issues

2018-09-25 Thread Jared Mauch
> On Sep 25, 2018, at 7:55 PM, Michel Py wrote: > > John, > >> John Curran wrote : >> 2) They could not agree to ARIN RPA agreement (for which the most cited >> reason is the indemnification clause, but perplexing given agreement to >> other indemnification clauses such as RIPE’s Certificat

Re: ARIN RPKI TAL deployment issues

2018-09-26 Thread Jared Mauch
> On Sep 26, 2018, at 3:13 AM, John Curran wrote: > > On 26 Sep 2018, at 2:09 AM, Christopher Morrow > wrote: >> >> (I'm going to regret posting this later, but...) >> >> On Tue, Sep 25, 2018 at 10:57 PM John Curran wrote: >> >> The significant difference for ARIN is that we operate unde

Re: ARIN RPKI TAL deployment issues

2018-09-26 Thread Jared Mauch
> On Sep 26, 2018, at 7:16 AM, John Curran wrote: > > On 26 Sep 2018, at 3:29 AM, Jared Mauch wrote: >> >> The process for lets encrypt is fairly straightforward, it collects some >> minimal information (eg: e-mail address, domain name) and then does all the &g

Re: Whats going on at Cogent

2018-10-16 Thread Jared Mauch
> On Oct 16, 2018, at 10:20 AM, Walt wrote: > > HE is happy to peer with Cogent and would love to solve this issue. > > Thanks > As someone who really depends upon full internet access I can’t purchase from either supplier due to this. This mirrors what Ca By said, need a place where the

Re: WIndows Updates Fail Via IPv6

2018-11-11 Thread Jared Mauch
> On Nov 11, 2018, at 8:45 AM, Mark Tinka wrote: > > > > On 11/Nov/18 14:02, Chris Knipe wrote: > >> Also no problems here with IPv6 and Windows Updates... > > The issue is affecting (and has affected) quite a few folk: > > https://social.technet.microsoft.com/Forums/windowsserver/en-US/

Re: Well Known BGP Communities

2018-11-12 Thread Jared Mauch
ant to look at https://tools.ietf.org/html/draft-ietf-grow-wkc-behavior -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

Re: IGP protocol

2018-11-12 Thread Jared Mauch
> On Nov 9, 2018, at 10:03 AM, im wrote: > > goodmorning nanog, > > I heard that OSPF is only famous in asia region... > So that, please could you explain me > > 1. what is your backbone's IGP protocol? IS-IS > 2. why you choose it? Single topology, supported by everything for IPv6 and

Re: Escalation point at Google

2018-11-12 Thread Jared Mauch
Are they getting an error similar to: Websites prove their identity via certificates, which are issued by certificate authorities. Most browsers no longer trust certificates issued by GeoTrust, RapidSSL, Symantec, Thawte, and VeriSign. www.example.com uses a certificate from one of these author

Re: Monitoring service that has a human component?

2018-12-05 Thread Jared Mauch
> On Dec 5, 2018, at 5:01 PM, David H wrote: > > Hey all, was curious if anyone knows of a website monitoring service that has > the option to incorporate a human component into the decision and escalation > tree? I’m trying to help a customer find a way around false positives > bogging do

Re: A few GPON questions...

2018-12-12 Thread Jared Mauch
I have tested a variety of equipment as part of my FTTH enterprise. Active Ethernet is where I’m still sitting because I’m not quite happy with some of the PON hardware out there personally. Yes active solutions provide more flexibility in one area but they are only viable in dense environment

Re: rfd

2018-12-18 Thread Jared Mauch
> On Dec 18, 2018, at 1:45 PM, Mark Tinka wrote: > > > > On 18/Dec/18 19:40, Randy Bush wrote: > >> do you have rfd on? with what parms? > > We don't do it (SEACOM, AS37100). Similarly 20940 does not use it. I find it hard to see a case where we would turn it on. - jared

Re: Real-time BGP hijacking detection: ARTEMIS-1.0.0 just released

2018-12-21 Thread Jared Mauch
Folks have studied announcing a /25 etc.. and it can help because many providers will accept them.. it won’t get everyone, but longer than /24 prefixes do help. - Jared > On Dec 21, 2018, at 10:07 AM, Kody Vicknair wrote: > > I'm curious, If the highjacked prefix is a /24 (subset of your much

Network instability 12956 <=> 18881

2018-12-21 Thread Jared Mauch
Does anyone know what’s going on here? There’s a lot of BGP churn coming from this network edge. - Jared

Re: Network instability 12956 <=> 18881

2018-12-21 Thread Jared Mauch
> On Dec 21, 2018, at 3:34 PM, Rubens Kuhl wrote: > > > They are both Telefónica operations; 12956 is TIWS/Telxius, 18881 is a CLEC > they bought a few years ago, previously known as GVT. > Could be a cable cut in SAM-1, the submarine fiber system operated by Telxius > (the cable is also k

Re: Cellular backup connections

2018-12-28 Thread Jared Mauch
> On Dec 28, 2018, at 7:29 AM, Dovid Bender wrote: > > It's strange. When we use T-Mo on an andriod device the ping times are 30-40 > ms. When we try with the modem + raritn console box it jumps to min of 100+ > ms (the modem is high up on top of the rack and we test with the phones we > ar

Re: BGP Experiment

2019-01-08 Thread Jared Mauch
> On Jan 8, 2019, at 12:06 PM, valdis.kletni...@vt.edu wrote: > > On Tue, 08 Jan 2019 17:48:46 +0100, niels=na...@bakker.net said: > >> After seeing this initial result I'm wondering why the researchers >> couldn't set up their own sandbox first before breaking code on the >> internet. I be

Re: BGP Experiment

2019-01-08 Thread Jared Mauch
> On Jan 8, 2019, at 12:10 PM, niels=na...@bakker.net wrote: > > * thomasam...@gmail.com (Tom Ammon) [Tue 08 Jan 2019, 17:59 CET]: >> There are a fair number of open source BGP implementations now. It would >> require additional effort to test all of them. > > In the real world, doing the cor

Re: (Netflix/GlobalConnect a/s) Scheduled Open Connect Appliance upgrade is starting

2019-01-13 Thread Jared Mauch
Yes. It’s still a very effective anti spam technique. Sent from my iCar > On Jan 13, 2019, at 2:50 PM, Mike Hammett wrote: > > People use plain-text e-mail on purpose? > > > > - > Mike Hammett > Intelligent Computing Solutions > > Midwest Internet Exchange > > The Brothers WISP > > F

Re: Calling LinkedIn, Amazon and Akamai @ DE-CIX NY

2019-01-30 Thread Jared Mauch
Akamai is working on doing our part. Apologies. Sent from my iCar > On Jan 30, 2019, at 12:02 PM, Mehmet Akcin wrote: > > Pinged my contacts in each > >> On Wed, Jan 30, 2019 at 05:52 Jason Lixfeld wrote: >> Hi, >> >> In late October 2018, DE-CIX announced that they would be renumbering th

Re: Question about ISP billing procedures

2019-02-28 Thread Jared Mauch
Background: I used to own the code that was used to bill for awhile... > On Feb 27, 2019, at 11:10 PM, Michael Gehrmann > wrote: > > From my provider days if you miss data you can't bill it or assume zero. This was my experience as well. I remember a router vendor bug that if the traffic wa

Re: Should Netflix and Hulu give you emergency alerts?

2019-03-08 Thread Jared Mauch
I’ve had issues with the amber alerts repeating or coming in from adjacent states because “reasons”. When they repeat for days/hours ugh. I do agree most people have devices. If there is a reasonable API method to fetch them then great. Sent from my iCar > On Mar 8, 2019, at 7:51 PM, Clayton

sendgrid.net contact

2023-10-02 Thread Jared Mauch
If you have a contact there can you please contact me off-list. Thanks. - Jared

Re: puck not responding

2024-02-29 Thread Jared Mauch
> On Feb 28, 2024, at 1:30 AM, Daniel Marks via NANOG wrote: > > We’re getting rocked by storms here in Michigan, could be related. > [ brief version of what happened from what I can tell reconstructing things] I was alerted ~4am US/E yesterday about the issue. This machine has been gener

Re: puck not responding

2024-02-29 Thread Jared Mauch
> On Feb 29, 2024, at 10:56 AM, Jay Acuna wrote: > > On Thu, Feb 29, 2024 at 9:22 AM Jared Mauch wrote: >> > > Apparently some of the most important email lists, Outages, etc, are > being kept online by 1 person's Unix/Linux server. > There’s other peop

Re: puck not responding

2024-03-02 Thread Jared Mauch
logy to improve to the point where auto-updates and many other things are without trouble, sadly i had to do a bit of physical moving of things, but the machine should now have a ~10g uplink and if I can find the right 100g device that I'm happy with I'm in a better position to update/upgr

Fiber aggregators and such

2024-03-04 Thread Jared Mauch
With all the $ being spent expanding fiber in the last mile, I’ve got a theory that a lot of new and diverse fiber routes are being built between locations. There’s a few places I know that roll up some of this information, but I’m wondering if there’s anyone rolling this all up either publicly

Re: Akamai contact

2024-03-20 Thread Jared Mauch
ssue. https://www.akamai.com/us/en/clientrep-lookup/ - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

Re: Whitebox Routers Beyond the Datasheet

2024-04-13 Thread Jared Mauch
> On Apr 13, 2024, at 12:15 AM, 7ri...@gmail.com wrote: > > >> I feel like this shouldn't be listed on a data sheet for just the whitebox >> hardware. The software running on it would be the gating factor. > There would be two things ... BGP convergence, and then the time required to > get r

Re: Opengear alternatives that support 5g?

2024-04-26 Thread Jared Mauch
If someone wants to assemble some of the freetserv boxes, I have some of the PCBs and components here if you want them. - Jared > On Apr 26, 2024, at 1:27 PM, Andrew Latham wrote: > > If anyone is interested in https://freetserv.github.io/ but does not want to > build one I have sort of docum

Re: XGS-PON/GPON vendor with PoE ONTs

2024-06-28 Thread Jared Mauch
Nokia you want the G6 XS-010XR-P line and the 230 enclosure UBNT also has XG and GPON PoE devices, you can dual power them from their USB + 24V passive - Their XGS unit does not do POE. I don’t recommend using the GPON SFP modules, the device they go in may not signal to you enough information

Re: HE.net problem

2024-07-04 Thread Jared Mauch
http://www.rfc-editor.org/rfc/rfc2182.txtIs what you should use as guidance Sent via RFC1925 compliant deviceOn Jul 4, 2024, at 4:55 PM, Crist Clark wrote:On the other side of this, we all may be learning the value of not having all of you NS records in a single zone with a domain under a single

Re: Akamai connectivity issue across several states

2024-07-08 Thread Jared Mauch
in for help with little to no feedback. > > > >Can someone from Akamai reach out off-list? Its impacting quite a few key >accounts. > > > >-Schylar > >ASN395662 > > -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

eero outage

2024-07-10 Thread Jared Mauch
Does anyone know about the big eero outage going on? - jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

Re: eero outage

2024-07-11 Thread Jared Mauch
or-blades and hate…[0] Hah, I've had some issues with the service and seem to have hit some quite interesting bugs, since they seem to attract me. I've tried to report them, but the recent outage does have me reconsidering things. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

Re: Wi-Fi Calling in a corporate environment

2024-08-02 Thread Jared Mauch
I’ve seen if there’s too much buffering or some sort of other issues it drop out and not work. I’ve actually replaced customer CPE to address this. You want to make sure that you are passing ESP through, and there’s even issues with some of the carriers not liking a phone using wifi calling if

Re: Comcast IPv6 PD Centos

2017-02-22 Thread Jared Mauch
It may be helpful to look at the forums at UBNT. They have details of how to make it work on their edge router platform which is a Linux box underneath. Jared Mauch > On Feb 22, 2017, at 6:59 PM, Harry Hoffman wrote: > > Hi Folks, > > I'm wondering if anyone has suc

Re: Cellular enabled console server

2017-02-26 Thread Jared Mauch
I've been toying with the FreeTSERV stuff. Ping me if you are interested in some boards Jared Mauch > On Feb 26, 2017, at 10:48 AM, David Bass wrote: > > I tried to build one in the past, but didn't have much success. Anyone > successfully built some and willing to

Re: google ipv6 routes via cogent

2017-03-02 Thread Jared Mauch
is usual YMMV Jared Mauch > On Mar 2, 2017, at 2:52 PM, Aaron Gould wrote: > > Yes, thanks, I am going to do that. But, is there a middle ground between > being default only and full routes ? Like is it advantageous for me to ask > for partial routes (like their routes and d

Re: [NOC] ARIN contact needed: something bad happens with legacy IPv4 block's reverse delegations

2017-03-17 Thread Jared Mauch
evaluate the usefulness of that config... or proper whitelisting of your own infrastructure :-) - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

Re: GEO LOCATION

2017-05-03 Thread Jared Mauch
> On May 3, 2017, at 8:27 AM, Chris Lane wrote: > > All > > We have several direct allocations from ARIN which we then provide smaller > prefixes to our customers across the country. Our HQ is on the East coast, > but many of our customers are on the West Coast. Trying to understand and > fix s

Re: Russian diplomats lingering near fiber optic cables

2017-06-01 Thread Jared Mauch
> On Jun 1, 2017, at 2:02 PM, Sean Donelan wrote: > > > There must be a perfectly logical explanation Yes, people in the > industry know where the choke points are. But the choke points aren't always > the most obvious places. Its kinda a weird for diplomats to show up there. > > On the

Re: NANOG 70 network diagram and upstream

2017-06-02 Thread Jared Mauch
> On Jun 2, 2017, at 5:34 PM, Eric Dugas wrote: > > And the 4x100G. That's four times the capacity of the network I work for. > ~100k subs. Disclaimer: Not an employee of NTT, but I was last Bellevue NANOG. Last time in Bellevue with the Comcast (dark) and Wave (dim) fiber we had 220G with di

Re: Last Week's Canadian Fiber Cut

2017-08-15 Thread Jared Mauch
> On Aug 15, 2017, at 1:22 PM, Rod Beck wrote: > > Did we ever get any resolution on why this was such a big outage? Appears > there were two fiber cuts. Were the fibers damaged in the same conduit? Is > this a collapsed ring scenario? > > > http://www.cbc.ca/news/canada/newfoundland-labrado

Re: Creating a Circuit ID Format

2017-08-21 Thread Jared Mauch
ting your own. > I am sure anything will work as long as you keep track of it, but any > advice would be great! - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

Re: Creating a Circuit ID Format

2017-08-22 Thread Jared Mauch
> On Aug 22, 2017, at 12:01 PM, Tassos Chatzithomaoglou > wrote: > > I don't know if it has any relation to your issue, but we use Circuit-ID to > uniquely identify the access node plus the customer's access loop logical > port on the access node. > Access node can be either a DSLAM, a switch

Re: Moving fibre trunks: interruptions?

2017-09-01 Thread Jared Mauch
> On Sep 1, 2017, at 3:32 PM, Michael Loftis wrote: > > If it is in the railroad RoW they may be restricted to daylight working > only. Check with your provider or OSP crew. > Yup. Railroad work is complex just because you have to coordinate with the railroad owner and they have to be onsi

Re: Moving fibre trunks: interruptions?

2017-09-14 Thread Jared Mauch
Pretty much. Here is an example of permitting requirements for underground. Underground costs 5-12/foot (or more in urban areas) whereas aerial can be as low as $2/foot. Jared Mauch > On Sep 1, 2017, at 6:38 PM, Ricky Beam wrote: > >> On Fri, 01 Sep 2017 15:52:40 -04

Re: USA local SIM card

2017-09-17 Thread Jared Mauch
Many of the MVNOs don’t work well if you wander to the more remote parts of the US. I’ve used ultra.me before with good luck. Jared Mauch > On Sep 17, 2017, at 1:15 PM, Brielle Bruns wrote: > >> On 9/17/2017 11:07 AM, Max Tulyev wrote: >> Hi All, >> sorry for poss

Re: IOS new versions and network load

2017-09-18 Thread Jared Mauch
> On Sep 18, 2017, at 11:57 AM, Marco Slater wrote: > >> While we don’t use Apple's caching servers we do have transparent caching in >> place which nets us about 82% of their content being serverd locally. On a >> big IOS update it will probably be close to 99% for that one title. > > Would

Re: IOS new versions and network load

2017-09-18 Thread Jared Mauch
> On Sep 18, 2017, at 12:14 PM, valdis.kletni...@vt.edu wrote: > > On Mon, 18 Sep 2017 16:57:55 +0100, Marco Slater said: >>> While we don’t use Apple's caching servers we do have transparent caching >>> in place which nets us about 82% of their content being serverd locally. On >>> a >>> big I

Re: IOS new versions and network load

2017-09-20 Thread Jared Mauch
> On Sep 19, 2017, at 10:58 PM, Aaron Gould wrote: > > I'm pretty sure I've seen huge hits on my Akamai caches during IOS release > nights. I remember seeing this years ago. What I saw yesterday from my own home was IPv6 traffic to the Apple CDN nodes in Chicago. > But this is news to me a

Re: IOS new versions and network load

2017-09-21 Thread Jared Mauch
s from storage it's much different than live content, or serving dynamic updates based on entitlement levels, etc. Not all CDNs are like Netflix, for better or worse. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck

Re: Bell Canada (AS 577) and NTT (AS 2914) routing

2017-09-21 Thread Jared Mauch
> On Sep 21, 2017, at 2:53 PM, Scott Larson wrote: > > I'm looking for a contact at Bell to look at a routing/traffic issue > we've been seeing since at least 5pm PDT yesterday. One of our uplinks is > via NTT and after correlating with their NOC, it appears traffic passing > through that l

Re: California fires: smart speakers and emergency alerts

2017-10-13 Thread Jared Mauch
I’m quite surprised they didn’t send out a local emergency alert. I’ve gotten these for Tornadoes and amber alerts. Wildfires would be comparable to a Tornado IMO. Jared Mauch > On Oct 13, 2017, at 6:33 PM, Aaron C. de Bruyn via NANOG > wrote: > > I messaged the Nest guys a f

Re: Large amount of TCP resets today

2017-10-25 Thread Jared Mauch
something is going on like big os updates. Do you have a time frame of when this happened? I can look on the Akamai side if that's helpful. Ping me offline and we can follow up. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net cl

Re: time warner-charter-spectrum route server looking glass

2017-11-09 Thread Jared Mauch
> On Nov 9, 2017, at 2:45 PM, Aaron Gould wrote: > > Regarding Time Warner Cable (TWC AS 11427) , does anyone know of a route > server (telnet) or looking glass (web based) for looking at bgp/ip routes > and traceroutes from the inside the AS 11427 ? I tend to use RIPE Atlas for this. If you

Re: Issues with 4-octet BGP AS and Akamai?

2017-11-14 Thread Jared Mauch
Can you share details? Did you contact akamai? Feel free to ping me offline. - Jared > On Nov 13, 2017, at 9:36 PM, Greg Gombas -X (grgombas) > wrote: > > Hello BGP and/or Akamai experts, > > Has anyone come across issues with using the new 4-octet BGP AS number format > and reaching websi

Re: Issues with 4-octet BGP AS and Akamai?

2017-11-14 Thread Jared Mauch
It should be noted that AS_TRANS aka 23456 shouldn’t be visible on the global internet and many people may filter that on AS4_PATH cable devices. The fact that you’re seeing an AS_TRANS path from the Telia LG is likely an indication that route may be not fully internet visible. It’s fairly susp

Re: Arista Layer3

2017-11-30 Thread Jared Mauch
> On Nov 30, 2017, at 2:17 PM, Ken Chase wrote: > > Back to this discussion! :) Arista as a viable full-table PE router. Was > hoping > for better experience reports since last mention. > > To make the Q bit more general, are there any PE routers yet that can handle > 3-8 > full feeds and us

Re: Arista Layer3

2017-12-01 Thread Jared Mauch
> On Nov 30, 2017, at 11:56 PM, Colton Conor wrote: > > Jared, > > Which Arista box do you use for FTTH features? Whats the cost like as FTTH > boxes are usually inexpensive, and Arista is not know to be inexpensive > compared to something like Calix or Adtran. I use the DCS-7050S-52-F.

Re: Akamai contact

2017-12-05 Thread Jared Mauch
elated. > > -- > =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ > J. Oquendo > SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT, RWSP, GREM > > "Where ignorance is our master, there is no possibility of > real peace" - Dalai Lama > > 0A96 6318 EA49 4032 21C9 A7A8 81E9 3E95 414F 356E > https://pgp.mit.edu/pks/l

Re: Geolocation: IPv4 Subnet blocked by HULU, and others

2017-12-27 Thread Jared Mauch
> On Dec 27, 2017, at 3:50 PM, Grant Taylor via NANOG wrote: > > set Devil's advocate mode = on Polluted IP space concern = ON > On 12/26/2017 04:24 PM, John Levine wrote: >> Is there some reason you believe that Hulu has a legal duty to provide old >> TV shows to your users? > > Doesn't Hu

Re: MTU to CDN's

2018-01-08 Thread Jared Mauch
may or may not work. I've done some measurements over the internet in the past year or so and 1400 byte packets with DF bit seem to make it just fine. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

Re: MTU to CDN's

2018-01-18 Thread Jared Mauch
> On Jan 18, 2018, at 5:53 PM, George Michaelson wrote: > > if I was an ISP (Im not) and a CDN came and said "we want to be inside > you" (ewww) why wouldn't I say "sure: lets jumbo" > > not even "asking for a friend" I genuinely don't understand why a CDN > who colocates and is not using publ

Re: MTU to CDN's

2018-01-18 Thread Jared Mauch
> On Jan 18, 2018, at 7:32 PM, William Herrin wrote: > > On Thu, Jan 18, 2018 at 7:14 PM, Jared Mauch wrote: >> lets say i can >> send you a 9K packet. If you receive that frame, and realize you need >> to fragment, then it’s your routers job to slice 9000 into 5 x

Re: MTU to CDN's

2018-01-19 Thread Jared Mauch
> On Jan 18, 2018, at 8:44 PM, William Herrin wrote: > >> Which packet? Is there a specific CDN that does this? I’d be curious to see >> data vs speculation. > > Howdy, > > Path MTU discovery (which sets the DF bit on TCP packets) is enabled > by default on -every- operating system that's s

Re: MTU to CDN's

2018-01-19 Thread Jared Mauch
Bah, never mind.. reading my PCAP wrong :-( > On Jan 19, 2018, at 8:58 AM, Jared Mauch wrote: > > > >> On Jan 18, 2018, at 8:44 PM, William Herrin wrote: >> >>> Which packet? Is there a specific CDN that does this? I’d be curious to >>>

Re: MTU to CDN's

2018-01-19 Thread Jared Mauch
> On Jan 19, 2018, at 9:07 AM, Mike Hammett wrote: > > Wouldn't those situations be causing issues now, given the likelihood that > someone with a less than 1,500 byte MTU is communicating with you now? > Tends to be more localized and less visible in many cases. I’m aware of at least one

Twitter Netops Contact

2018-01-24 Thread Jared Mauch
Is there someone from twitter who can contact me about the route leak that just occurred? Thanks, - Jared

Re: IRR AS-SET best practices - AS-SET Clash

2018-01-27 Thread Jared Mauch
etc.. but it's not made it to the routing ecosystem. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

Re: IRR AS-SET best practices - AS-SET Clash

2018-01-27 Thread Jared Mauch
of common toolchains that can be integrated to perform the tasks. - Jared > ps. raised the question here too > https://mail.lacnic.net/pipermail/lacnog/2018-January/005845.html A few interesting AS_Paths: 2497 701 5511 59378 7473 2914 132602 38203 137038 3356 6453 21502 129

Re: hijacking of 128.255.192.0/22

2018-03-21 Thread Jared Mauch
filtering as well as BGP communities poses significant operational issues for networks. Jared Mauch > On Mar 20, 2018, at 5:35 PM, Jay Ford wrote: > > Something apparently in Brazil is hijacking 128.255.192.0/22, part of > 128.255.0.0/16 which is held by the University of Iowa.

Re: Yet another Quadruple DNS?

2018-03-28 Thread Jared Mauch
> On Mar 28, 2018, at 4:13 PM, Michael Crapse wrote: > > Many providers filter out 1.1.1.1 because too many people use it in their > examples/test code. I doubt that it's a usable IP/service. There’s at least one vendor *cough* cisco *cough* that has used it as captive portal IP. I’m not sur

Re: Yet another Quadruple DNS?

2018-03-28 Thread Jared Mauch
A reminder to go back and watch the awesome talk from Nanog 49 about this: https://youtu.be/RBOPcLpQZ8w https://www.nanog.org/meetings/nanog49/presentations/Monday/karir-1slash8.pdf - Jared > On Mar 28, 2018, at 4:25 PM, Aftab Siddiqui wrote: > > 1.1.1.0/24 and 1.0.0.0/24 both are APNIC's Lab

Re: Yet another Quadruple DNS?

2018-03-29 Thread Jared Mauch
> On Mar 29, 2018, at 10:19 AM, Seth Mattinen wrote: > > On 3/29/18 7:17 AM, Izaac wrote: >>> And I'd really like not to enrich my ISP's trove of information about >>> my browsing habits by them recording all my DNS lookups. Of course, >>> 9.9.9.9 could be collecting that information, but they

Re: whoami.akamai.net and public DNS node replies

2018-04-02 Thread Jared Mauch
> On Apr 2, 2018, at 4:36 PM, Anurag Bhatia wrote: > > Hello everyone, > > Anyone using whoami.akamai.net? Thanks, our team is investigating this at present. I don’t have an ETR at the moment. - Jared

Re: Why doesn't "Cloudflare 1.1.1.1" compress root answers?

2018-04-05 Thread Jared Mauch
Yes.. Check 4.1.4 of https://www.ietf.org/rfc/rfc1035.txt > On Apr 5, 2018, at 4:22 PM, Anurag Bhatia wrote: > > Hi Bjørn > > > Never realised of such compression on answered. Is this is something well > documented? Curious. > >

ANRW 2018

2018-04-18 Thread Jared Mauch
I’m forwarding this on behalf of the ANRW Chairs. Some of this research has been quite interesting, and is on-topic to what NANOG folks are interested in. Here’s some more details about it: https://irtf.org/anrp You can find their slides and presentation videos online as well, with the most r

Re: do you use SPF TXT RRs? (RFC4408)

2010-10-04 Thread Jared Mauch
I've found lots of domains with +all which really should be -all since they were all spam. Jared Mauch On Oct 4, 2010, at 1:08 PM, Nathan Eisenberg wrote: >> If it passes SPF we remove a few points of the spam weight. > > I would rethink this practice. Many spammers

Re: Mobile Looking Glass?

2010-10-06 Thread Jared Mauch
I have found the iSSH application (iPhone + iPad) works well. You can ssh tunnel for things (eg: VNC) with ssh keys, etc.. - Jared link: http://itunes.apple.com/us/app/issh-ssh-vnc-console/id287765826?mt=8 On Oct 6, 2010, at 1:44 PM, St. Onge,Adam wrote: > Anyone know of an iPhone application

Re: Equinix MPLS connectivity

2010-10-09 Thread Jared Mauch
I assume you mean some l2 circuit. That is something we can do here at ntt. www.us.ntt.net should get you to the right place. Jared Mauch On Oct 9, 2010, at 4:22 AM, Leo Woltz wrote: > We are looking for some MPLS connectivity between Equinix Ashburn and > Equinix San Jose who wou

Re: Only 5x IPv4 /8 remaining at IANA

2010-10-18 Thread Jared Mauch
Owen, He did not display the return values of these functions. I think his IPv6 one returns FALSE; - Jared On Oct 18, 2010, at 11:18 AM, Owen DeLong wrote: > > On Oct 18, 2010, at 5:28 AM, Curtis Maurand wrote: > >> On 10/18/2010 8:16 AM, ML wrote: And +1 on the "pioneers" comment too.

Re: Only 5x IPv4 /8 remaining at IANA

2010-10-18 Thread Jared Mauch
On Oct 18, 2010, at 11:35 AM, Henning Brauer wrote: > * Owen DeLong [2010-10-18 17:27]: >> Have you done IPv6? >> I have... It's not even difficult(), let alone really().Really().Difficult(). > > maybe not from a users standpoint (that comes later when it misbehaves > again). from an implemento

IPv4 sunset date set for 2019-12-31

2010-10-21 Thread Jared Mauch
How would you respond if that were announced? Carriers have been doing technology transitions for years. Cidr to classless. Amps to CDMA or gsm... This is not new. I do agree the incentives and technology don't exist in a desirable environment but the "ip" feature creep we've seen make a soluti

Re: IPv4 sunset date set for 2019-12-31

2010-10-21 Thread Jared Mauch
On Oct 21, 2010, at 9:51 PM, Barry Shein wrote: > Anyhow, it might be an interesting topic to discuss in the appropriate > venues, IETF, "What is the cost of maintaining IPv4 forever?" but it's > getting a little ahead of ourselves in terms of any pressing need. This is an interesting question.

Re: AS path question.

2010-11-10 Thread Jared Mauch
On Nov 10, 2010, at 3:22 PM, Greg Whynott wrote: > > > Recently I adjusted the maxas-limit option on our router,logs started > reporting routes being refused because the AS path is to long. seems to > work as expected. > > when I looked at the logs I was a bit confused at what i was lo

Re: flow analysis for juniper devices

2010-11-14 Thread Jared Mauch
On Nov 14, 2010, at 3:59 AM, Paolo Lucente wrote: > OTOH it would be nice to see one day those NetFlow v9 MAC address fields > populated on higher-grade boxes, say, to facilitate analysis of public > peering at internet exchanges ... This can be done with mac accounting in your platform. It may

Re: Level 3 Communications Issues Statement Concerning Comcast'sActions

2010-11-29 Thread Jared Mauch
On Nov 29, 2010, at 11:17 PM, William Herrin wrote: > And doesn't Moore's Law mean that 18 months from now > it should cost half as much? Maybe for the parts that are electrical, but for the parts that are optical, they may have a longer span. Also, not everyone swaps out those electrical par

Re: Level 3 Communications Issues Statement ConcerningComcast'sActions

2010-11-30 Thread Jared Mauch
On Nov 30, 2010, at 6:54 AM, Ryan Finnesey wrote: > On the subject of marketing for years the wireless operators sold unlimited > data plans. Now they are coming back and saying well unlimited is really 5 > GB. the biggest problem I have with these is the fact that a single software update

Re: Level 3 Communications Issues Statement Concerning Comcast'sActions

2010-12-01 Thread Jared Mauch
On Dec 1, 2010, at 3:38 PM, Derek J. Balling wrote: > On Nov 29, 2010, at 11:20 PM, Leo Bicknell wrote: >> Broadband in the US is not in that boat. Too many consumers have >> a "choice" of a single provider. The vast majority of the rest >> have the "choice" of two providers. > > I dunno. I'v

Re: The scale of streaming video on the Internet.

2010-12-03 Thread Jared Mauch
Unless there is robust support for it in home nat/CPE it is dead. Same for these ipv6 challenges at the edge. I am also not aware of any major networks that currently have multicast on their backbone also deploying v6mcast. Corrections to that here or privately welcome. Sent from my iThing On

Re: "Unlimited" wireless data...

2010-12-03 Thread Jared Mauch
I must once again give props to UBNT if you want awesome wireless gear for CLOS. For $160 or so, you can get a 60Mb/s link up (Mine is a ~3mi/~5km link using two Nanobridge M5's) They also have 3.65ghz gear as well but is a bit more per unit. This per unit cost starts to put them in the 'near

Re: Wikileaks takedown in US

2010-12-04 Thread Jared Mauch
On Dec 4, 2010, at 10:17 PM, Lou Katz wrote: > Sadly, no report that I have seen has indicated that any legal process or > court order > was in action. If you violate my AUP, we can take action. That could be sending spam, it could be illegal activity. Everything I've seen regarding this seem

Re: Pointer for documentation on actually delivering IPv6

2010-12-06 Thread Jared Mauch
On Dec 6, 2010, at 8:35 AM, Jeff Johnstone wrote: > Speaking of IPV6 security, is there any movement towards any open source > IPV6 firewall solutions for the consumer / small business? > > Almost all the info I've managed to find to date indicates no support, nor > any planned support in upcomi

Re: How do you do rDNS for IPv6 ?

2010-12-06 Thread Jared Mauch
On Dec 5, 2010, at 9:41 PM, Jima wrote: > On 12/5/2010 4:13 PM, John Levine wrote: >> In IPv4 land, it is standard to assign matching forward and reverse >> DNS for every live IP, and a fair number of services treat requests >> from hosts without rDNS with added scepticism. For consumer networks,

BGP attribute 128 activity

2010-12-07 Thread Jared Mauch
Has anyone else been observing this? This appears to be ATTR_SET and is appearing at route-views. Was curious if anyone else was tracking this (or the origin ;)). It's been going on for some time now and it's not seemed to cause any troubles (part of the reason i monitor for these attributes,

<    1   2   3   4   5   6   7   8   9   10   >