nanog mailing list archives
Re: NANOG Digest, Vol 93, Issue 16
From: "Dan Turner (danturne)" <danturne () cisco com>
Date: Fri, 16 Oct 2015 13:31:05 +0000
Android and DHCPv6 again Yes but Android refuses to do IPv6 if there is any DHCPv6 on the network. It is a bug. SLAAC by default provides the address and default gateway (RA) If SLAAC managed flag is set, then DHCPv6 is used get the address and other configs (DNS, etc..) If SLAAC other flag is set, then SLAAC provides the address, and uses DHCPv6 to get the other configs (DNS, etc..) With SLAAC and without DHCPv6 the device has no way of knowing the DNS server and other configs such as search domain, etc... RFC 6106 provides a new feature that allows devices to obtain DNS from RA, but not all devices and network equipment support it yet. For devices that don't support RFC 6106 or DHCPv6, then it has to use IPv4 (DHCPv4) to get the IPv4 DNS address. Many Thanks =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Dan Turner System Engineer | danturne () cisco com Cisco Systems, Inc. | 2375 E. Camelback Rd. | Phoenix, AZ 85016 O. 602.778.2069 | C. 480.262.6017 | P. 800.365.4578 | TAC 800.553.2447 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= From: NANOG <nanog-bounces () nanog org<mailto:nanog-bounces () nanog org>> on behalf of "nanog-request () nanog org<mailto:nanog-request () nanog org>" <nanog-request () nanog org<mailto:nanog-request () nanog org>> Reply-To: "nanog () nanog org<mailto:nanog () nanog org>" <nanog () nanog org<mailto:nanog () nanog org>> Date: Friday, October 16, 2015 at 5:00 AM To: "nanog () nanog org<mailto:nanog () nanog org>" <nanog () nanog org<mailto:nanog () nanog org>> Subject: NANOG Digest, Vol 93, Issue 16 Send NANOG mailing list submissions to nanog () nanog org<mailto:nanog () nanog org> To subscribe or unsubscribe via the World Wide Web, visit http://mailman.nanog.org/mailman/listinfo/nanog or, via email, send a message with subject or body 'help' to nanog-request () nanog org<mailto:nanog-request () nanog org> You can reach the person managing the list at nanog-owner () nanog org<mailto:nanog-owner () nanog org> When replying, please edit your Subject line so it is more specific than "Re: Contents of NANOG digest..." Today's Topics: 1. Re: Android and DHCPv6 again (Ray Soucy) 2. Re: Microsoft / Outlook.com contact??? (Arnaud de Prelle) 3. Re: Microsoft blocking mail (Tei) 4. Google's peering, GGC, and congestion management (Baptiste Jonglez) 5. Re: Google's peering, GGC, and congestion management (Patrick W. Gilmore) 6. Re: geek whois (Randy Bush) 7. Re: Android and DHCPv6 again (Dave Bell) 8. Re: Android and DHCPv6 again (A.L.M.Buxey () lboro ac uk<mailto:A.L.M.Buxey () lboro ac uk>) 9. RE: Android and DHCPv6 again (Nicholas Warren) 10. Re: Packetfront/Waystream gear (Anders L?winger) 11. RE: Android and DHCPv6 again (Matthew Huff) 12. RE: Android and DHCPv6 again (Baldur Norddahl) 13. Re: Android and DHCPv6 again (Sander Steffann) 14. Re: Spamhaus contact needed (Larry Sheldon) 15. Re: Spamhaus contact needed (Jason Baugher) 16. Re: Spamhaus contact needed (Larry Sheldon) 17. Re: Spamhaus contact needed (Larry Sheldon) 18. Cogent BGP Woes (Justin Wilson - MTIN) 19. Re: Cogent BGP Woes (Josh Luthman) 20. AW: Cogent BGP Woes (J?rgen Jaritsch) 21. Re: Cogent BGP Woes (james machado) 22. RE: Cogent BGP Woes (Damien Burke) 23. Re: IPv6 Irony. (Owen DeLong) 24. Re: Google's peering, GGC, and congestion management (Baldur Norddahl) 25. Re: Google's peering, GGC, and congestion management (Patrick W. Gilmore) 26. ultradns / neustar outage? (Jim Mercer) 27. Re: ultradns / neustar outage? (N M) 28. Re: Google's peering, GGC, and congestion management (Baldur Norddahl) 29. Re: Google's peering, GGC, and congestion management (Patrick W. Gilmore) 30. Re: ultradns / neustar outage? (Curtis Generous) 31. Re: ultradns / neustar outage? (Hugo Slabbert) 32. Re: Android and DHCPv6 again (Lorenzo Colitti) 33. the fcc vs wifi lockdown issue (Dave Taht) 34. sfp "computer"? (Baldur Norddahl) 35. RE: sfp "computer"? (Jameson, Daniel) 36. Re: sfp "computer"? (Baldur Norddahl) 37. Re: Cogent BGP Woes (Justin Wilson - MTIN) 38. Re: Cogent BGP Woes (Justin Wilson - MTIN) 39. Re: Cogent BGP Woes (Carlos Alcantar) 40. Re: sfp "computer"? (joel jaeggli) 41. Re: the fcc vs wifi lockdown issue (Alejandro Acosta) 42. Re: Google's peering, GGC, and congestion management (Mark Tinka) 43. Re: Google's peering, GGC, and congestion management (Mark Tinka) 44. Re: sfp "computer"? (Ray Wong) 45. Re: Cogent BGP Woes (Mike Hammett) 46. inexpensive url-filtering db (MKS) 47. Re: IPv6 and Android auto conf (Anurag Bhatia) 48. Re: sfp "computer"? (Jerry Jones) 49. i hate october (Randy Bush) ---------------------------------------------------------------------- Message: 1 Date: Thu, 15 Oct 2015 08:22:21 -0400 From: Ray Soucy <rps () maine edu<mailto:rps () maine edu>> To: Baldur Norddahl <baldur.norddahl () gmail com<mailto:baldur.norddahl () gmail com>> Cc: "nanog () nanog org<mailto:nanog () nanog org>" <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Android and DHCPv6 again Message-ID: <CALFTrnNT+jkXOBU4fwOWaCNkYxT3gN2ZqCHxJEcjrEyn2Q9Ddg () mail gmail com<mailto:CALFTrnNT+jkXOBU4fwOWaCNkYxT3gN2ZqCHxJEcjrEyn2Q9Ddg () mail gmail com>> Content-Type: text/plain; charset=UTF-8 Android does not have a complete IPv6 implementation and should not be IPv6 enabled. Please do your part and complain to Google that Android does not support DHCPv6 for address assignment. On Sat, Oct 3, 2015 at 9:52 PM, Baldur Norddahl <baldur.norddahl () gmail com<mailto:baldur.norddahl () gmail com>> wrote: Hi I noticed that my Nexus 9 tablet did not have any IPv6 although everything else in my house is IPv6 enabled. Then I noticed that my Samsung S6 was also without IPv6. Hmm. A little work with tcpdump and I got this: 03:27:15.978826 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 120) fe80::222:7ff:fe49:ffad > ip6-allnodes: [icmp6 sum ok] ICMP6, router advertisement, length 120 hop limit 0, Flags [*managed*, other stateful], pref medium, router lifetime 1800s, reachable time 0s, retrans time 0s source link-address option (1), length 8 (1): 00:22:07:49:ff:ad mtu option (5), length 8 (1): 1500 prefix info option (3), length 32 (4): 2a00:7660:5c6::/64, Flags [onlink, *auto*], valid time 7040s, pref. time 1800s unknown option (24), length 16 (2): 0x0000: 3000 0000 1b80 2a00 7660 05c6 0000 So my CPE is actually doing DHCPv6 and some nice people at Google decided that it will be better for me to be without IPv6 in that case :-(. But it also has the auto flag, so Android should be able to do SLAAC yes? My Macbook Pro currently has the following set of addresses: en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500 ether 3c:15:c2:ba:76:d4 inet6 fe80::3e15:c2ff:feba:76d4%en0 prefixlen 64 scopeid 0x4 inet 192.168.1.214 netmask 0xffffff00 broadcast 192.168.1.255 inet6 2a00:7660:5c6::3e15:c2ff:feba:76d4 prefixlen 64 autoconf inet6 2a00:7660:5c6::b5a5:5839:ca0f:267e prefixlen 64 autoconf temporary inet6 2a00:7660:5c6::899 prefixlen 64 dynamic nd6 options=1<PERFORMNUD> media: autoselect status: active To me it seems that the Macbook has one SLAAC address, one privacy extension address and one DHCPv6 managed address. In fact the CPE manufacturer is a little clever here. They gave me an easy address that I can use to access my computer ("899") while still allowing SLAAC and privacy extensions. If I want to open ports in my firewall I could do that to the "899" address. But why is my Android devices without IPv6 in this setup? Regards, Baldur -- *Ray Patrick Soucy* Network Engineer I Networkmaine, University of Maine System US:IT 207-561-3526 ------------------------------ Message: 2 Date: Thu, 15 Oct 2015 15:05:40 +0200 From: Arnaud de Prelle <arnaud () pnzone net<mailto:arnaud () pnzone net>> To: Robert Glover <robertg () garlic com<mailto:robertg () garlic com>> Cc: nanog () nanog org<mailto:nanog () nanog org> Subject: Re: Microsoft / Outlook.com contact??? Message-ID: <81a7288bfe53fc51ba63b757179c6806 () icecube pnzone net<mailto:81a7288bfe53fc51ba63b757179c6806 () icecube pnzone net>> Content-Type: text/plain; charset=US-ASCII; format=flowed On 2015-10-15 01:58, Robert Glover wrote: On 10/13/2015 10:49 PM, Michael J Wise wrote: Unfortunately, that's not going to work if the refusal reason was FBLW15 (or TBLW15). You're not dealing with an issue on the Outlook/Hotmail side of the house. If you had provided the last two octets, I might have been able to give some advice earlier, but alas, everyone seems loathe to actually say which IP is having issues. IP in question: 65.111.224.51 Not trying to hide anything, but seeing the posts with obfuscated IPs has rubbed off on me I suppose (for better or for worse. I appreciate if you can help us out here. -Bobby Hi Robert, I just experienced the same problem. It took 10 days before I got delisted without explanation. My IP is clean, never blacklisted, SPF+DKIM+DMARC, present in DNSWL.org, etc. Note that I had no issues for sending emails to @outlook.com. I only had issues (#FBLW15) when sending emails to Office365/ExchangeOnline users (i.e. @dowcorning.com in this case). Best Regards, Arnaud. ------------------------------ Message: 3 Date: Thu, 15 Oct 2015 15:50:14 +0200 From: Tei <oscar.vives () gmail com<mailto:oscar.vives () gmail com>> Cc: NANOG <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Microsoft blocking mail Message-ID: <CACg3zYFdEyQrwyr+OugnrcoPVHexob+r9S2np2wTF8yM_PpW5w () mail gmail com<mailto:CACg3zYFdEyQrwyr+OugnrcoPVHexob+r9S2np2wTF8yM_PpW5w () mail gmail com>> Content-Type: text/plain; charset=UTF-8 On 18 September 2015 at 10:45, Marcin Cieslak <saper () saper info<mailto:saper () saper info>> wrote: On Fri, 18 Sep 2015, Tei wrote: On 18 September 2015 at 04:48, Keith Medcalf <kmedcalf () dessus com<mailto:kmedcalf () dessus com>> wrote:
Being blocked is probably a good thing ...
CGI forms that do the validation in the serverside are not up to modern expectations*. You want to do validation clientside. If you do client-side and no server-side, you have a huge security problem. ~Marcin By now is a industry standard. You have to do the validation serverside and clientside. This of course mean duplicated code. ( Excessively clever people have tried to solve the problem by using the same language/code in both the clientside and serverside. But this feels to me like a overreaction and you will be writing code unrelated to this in a new (?) language.... On top the... heurhg... creative pipelining.. to make the whole fa?ade works.) Collesterol High Clients + Collesterol High Servers. Unrelated: this is a funny article http://carlos.bueno.org/2014/11/cache.html -- -- ?in del ?ensaje. ------------------------------ Message: 4 Date: Wed, 14 Oct 2015 19:07:14 +0200 From: Baptiste Jonglez <baptiste () bitsofnetworks org<mailto:baptiste () bitsofnetworks org>> To: nanog () nanog org<mailto:nanog () nanog org> Subject: Google's peering, GGC, and congestion management Message-ID: <20151014170714.GA16087@lud.polynome.dn42<mailto:20151014170714.GA16087@lud.polynome.dn42>> Content-Type: text/plain; charset="us-ascii" Hi, In its peering documentation [https://peering.google.com/about/traffic_management.html], Google claims that it can drive peering links at 100% utilisation: Congestion management Peering ports with Google can be run at 100% capacity in the short term, with low (<1-2%) packet loss. Please note that an ICMP ping may display packet loss due to ICMP rate limiting on our platforms. Please contact us to arrange a peering upgrade. How do they achieve this? More generally, is there any published work on how Google serves content from its CDN, the Google Global Cache? I'm especially interested in two aspects: - for a given eyeball network, on which basis are the CDN nodes selected? - is Google able to spread traffic over distinct peering links for the same eyeball network, in case some of the peering links become congested? If so, how do they measure congestion? Thanks for your input, Baptiste -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 819 bytes Desc: not available URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20151014/f1dcc2e3/attachment-0001.pgp> ------------------------------ Message: 5 Date: Thu, 15 Oct 2015 10:35:41 -0400 From: "Patrick W. Gilmore" <patrick () ianai net<mailto:patrick () ianai net>> To: NANOG list <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Google's peering, GGC, and congestion management Message-ID: <40EAB231-AC6E-4C79-B408-99F3517C540F () ianai net<mailto:40EAB231-AC6E-4C79-B408-99F3517C540F () ianai net>> Content-Type: text/plain; charset="utf-8" On Oct 14, 2015, at 1:07 PM, Baptiste Jonglez <baptiste () bitsofnetworks org<mailto:baptiste () bitsofnetworks org>> wrote: In its peering documentation [https://peering.google.com/about/traffic_management.html], Google claims that it can drive peering links at 100% utilisation: Congestion management Peering ports with Google can be run at 100% capacity in the short term, with low (<1-2%) packet loss. Please note that an ICMP ping may display packet loss due to ICMP rate limiting on our platforms. Please contact us to arrange a peering upgrade. How do they achieve this? The 100% number is silly. My guess? They?re at 98%. That is easily do-able because all the traffic is coming from them. Coordinate the HTTPd on each of the servers to serve traffic at X bytes per second, ensure you have enough buffer in the switches for micro-bursts, check the NICs for silliness such as jitter, and so on. It is non-trivial, but definitely solvable. Google is not the only company who can do this. Akamai has done it far longer. And Akamai has a much more difficult traffic mix, with -paying customers- to deal with. More generally, is there any published work on how Google serves content from its CDN, the Google Global Cache? I'm especially interested in two aspects: - for a given eyeball network, on which basis are the CDN nodes selected? As for picking which GGC for each eyeball, that is called ?mapping?. It varies among the different CDNs. Netflix drives it mostly from the client. That has some -major- advantages over other CDNs. Google has in the past (haven?t checked in over a year) done it by giving each user a different URL, although I think they use DNS now. Akamai uses mostly DNS, although they have at least experimented with other ways. Etc., etc. - is Google able to spread traffic over distinct peering links for the same eyeball network, in case some of the peering links become congested? If so, how do they measure congestion? Yes. Easily. User 1 asks for Stream 1, Google sends them them to Node 1. Google notices Link 1 is near full. User 2 asks for Stream 2, Google sends them to Node 2, which uses Link 2. This is possible for any set of Users, Streams, Nodes, and Links. It is even possible to send User 2 to Node 2 when User 2 wants Stream 1. Or sending User 1 to Node 2 for their second request despite the fact they just got a stream from Node 1. There are few, if any, restrictions on the combinations. Remember, they control the servers. All CDNs (that matter) can do this. They can re-direct users with different URLs, different DNS responses, 302s, etc., etc. It is not BGP. Everything is much easier when you are one of the end points. (Or both, like with Netflix.) When you are just an ISP shuffling packets you neither send nor receive, things are both simpler and harder. -- TTFN, patrick -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 872 bytes Desc: Message signed with OpenPGP using GPGMail URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20151015/d967b1b8/attachment-0001.pgp> ------------------------------ Message: 6 Date: Thu, 15 Oct 2015 16:44:23 +0200 From: Randy Bush <randy () psg com<mailto:randy () psg com>> To: North American Network Operators' Group <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: geek whois Message-ID: <m237xc19a0.wl%randy () psg com<mailto:m237xc19a0.wl%randy () psg com>> Content-Type: text/plain; charset=US-ASCII anyone else having problems wiht geek whois today? not geek whois at all. geek faulty memory. alias whois='whois -h whois-servers.net' randy ------------------------------ Message: 7 Date: Thu, 15 Oct 2015 15:52:23 +0100 From: Dave Bell <me () geordish org<mailto:me () geordish org>> To: Ray Soucy <rps () maine edu<mailto:rps () maine edu>> Cc: Baldur Norddahl <baldur.norddahl () gmail com<mailto:baldur.norddahl () gmail com>>, "nanog () nanog org<mailto:nanog () nanog org>" <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Android and DHCPv6 again Message-ID: <CACXVQYCvLFBwLCssh90Z38POVpgzAu0jGOESB2CmZtSooV275g () mail gmail com<mailto:CACXVQYCvLFBwLCssh90Z38POVpgzAu0jGOESB2CmZtSooV275g () mail gmail com>> Content-Type: text/plain; charset=UTF-8 On 15 October 2015 at 13:22, Ray Soucy <rps () maine edu<mailto:rps () maine edu>> wrote: Android does not have a complete IPv6 implementation and should not be IPv6 enabled. Please do your part and complain to Google that Android does not support DHCPv6 for address assignment. I use android devices on my network with IPv6 connectivity, and no issues at all. It gets an address. Does DNS via IPv6, and can send packets over IPv6. I don't use or need DHCPv6. You may not be able to roll out IPv6 to them because you need DHCPv6. In this case I suggest you complain to Google. Other people may not be able to roll out IPv6 to them because they need DHCPv6. They should also complain to Google. Suggesting that nobody rolls out IPv6 on them because they don't support one feature they may not even need is absurd. DHCPv6 is not a prerequisite for IPv6. Regards, Dave ------------------------------ Message: 8 Date: Thu, 15 Oct 2015 14:57:35 +0000 From: A.L.M.Buxey () lboro ac uk<mailto:A.L.M.Buxey () lboro ac uk> To: Ray Soucy <rps () maine edu<mailto:rps () maine edu>> Cc: Baldur Norddahl <baldur.norddahl () gmail com<mailto:baldur.norddahl () gmail com>>, "nanog () nanog org<mailto:nanog () nanog org>" <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Android and DHCPv6 again Message-ID: <20151015145735.GD24922 () lboro ac uk<mailto:20151015145735.GD24922 () lboro ac uk>> Content-Type: text/plain; charset=us-ascii Hi, Android does not have a complete IPv6 implementation and should not be IPv6 enabled. Please do your part and complain to Google that Android does not support DHCPv6 for address assignment. no different to other devices historically.... it can get IPv6 connectivity via SLAAC and then rely on DHCP (v4!) for getting IPv4 DNS servers to which it can send AAAA records. very much like OSX used to be..... alan ------------------------------ Message: 9 Date: Thu, 15 Oct 2015 15:20:52 +0000 From: Nicholas Warren <nwarren () barryelectric com<mailto:nwarren () barryelectric com>> To: Dave Bell <me () geordish org<mailto:me () geordish org>> Cc: "nanog () nanog org<mailto:nanog () nanog org>" <nanog () nanog org<mailto:nanog () nanog org>> Subject: RE: Android and DHCPv6 again Message-ID: <C26ABA0F2E16624EA737DB4674DC05AB167BB594 () mail baec.local<mailto:C26ABA0F2E16624EA737DB4674DC05AB167BB594 () mail baec.local>> Content-Type: text/plain; charset="utf-8" Excuse my ignorance, but can DHCPv6 and SLAAC be run in parallel? Thank you, - Nich -----Original Message----- From: NANOG [mailto:nanog-bounces () nanog org] On Behalf Of Dave Bell Sent: Thursday, October 15, 2015 9:52 AM To: Ray Soucy Cc: nanog () nanog org<mailto:nanog () nanog org> Subject: Re: Android and DHCPv6 again On 15 October 2015 at 13:22, Ray Soucy <rps () maine edu<mailto:rps () maine edu>> wrote:
Android does not have a complete IPv6 implementation and should not be IPv6 enabled. Please do your part and complain to Google that Android does not support DHCPv6 for address assignment.
I use android devices on my network with IPv6 connectivity, and no issues at all. It gets an address. Does DNS via IPv6, and can send packets over IPv6. I don't use or need DHCPv6. You may not be able to roll out IPv6 to them because you need DHCPv6. In this case I suggest you complain to Google. Other people may not be able to roll out IPv6 to them because they need DHCPv6. They should also complain to Google. Suggesting that nobody rolls out IPv6 on them because they don't support one feature they may not even need is absurd. DHCPv6 is not a prerequisite for IPv6. Regards, Dave -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 4845 bytes Desc: not available URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20151015/08601486/attachment-0001.bin> ------------------------------ Message: 10 Date: Thu, 15 Oct 2015 17:22:52 +0200 From: Anders L?winger <anders () abundo se<mailto:anders () abundo se>> To: nanog () nanog org<mailto:nanog () nanog org> Subject: Re: Packetfront/Waystream gear Message-ID: <561FC4CC.7080908 () abundo se<mailto:561FC4CC.7080908 () abundo se>> Content-Type: text/plain; charset=utf-8; format=flowed Their products seem to be named 'MPC' or 'ASR,' reminds me of J and C respectively. PacketFront/Waystream actually owns the ASR trademark. We got quite surprised when Cisco released their ASR routers.... (Yes, I did work there from 2004-2011) /Anders ------------------------------ Message: 11 Date: Thu, 15 Oct 2015 15:38:59 +0000 From: Matthew Huff <mhuff () ox com<mailto:mhuff () ox com>> To: Nicholas Warren <nwarren () barryelectric com<mailto:nwarren () barryelectric com>>, Dave Bell <me () geordish org<mailto:me () geordish org>> Cc: "nanog () nanog org<mailto:nanog () nanog org>" <nanog () nanog org<mailto:nanog () nanog org>> Subject: RE: Android and DHCPv6 again Message-ID: <372253aac982468f97dfa4c9ff91d6ea () pur-vm-exch13n1 ox com<mailto:372253aac982468f97dfa4c9ff91d6ea () pur-vm-exch13n1 ox com>> Content-Type: text/plain; charset="utf-8" Yes, SLAAC by default provides the address and default gateway (RA) If SLAAC managed flag is set, then DHCPv6 is used get the address and other configs (DNS, etc..) If SLAAC other flag is set, then SLAAC provides the address, and uses DHCPv6 to get the other configs (DNS, etc..) With SLAAC and without DHCPv6 the device has no way of knowing the DNS server and other configs such as search domain, etc... RFC 6106 provides a new feature that allows devices to obtain DNS from RA, but not all devices and network equipment support it yet. For devices that don't support RFC 6106 or DHCPv6, then it has to use IPv4 (DHCPv4) to get the IPv4 DNS address. -----Original Message----- From: NANOG [mailto:nanog-bounces () nanog org] On Behalf Of Nicholas Warren Sent: Thursday, October 15, 2015 11:21 AM To: Dave Bell <me () geordish org<mailto:me () geordish org>> Cc: nanog () nanog org<mailto:nanog () nanog org> Subject: RE: Android and DHCPv6 again Excuse my ignorance, but can DHCPv6 and SLAAC be run in parallel? Thank you, - Nich -----Original Message----- From: NANOG [mailto:nanog-bounces () nanog org] On Behalf Of Dave Bell Sent: Thursday, October 15, 2015 9:52 AM To: Ray Soucy Cc: nanog () nanog org<mailto:nanog () nanog org> Subject: Re: Android and DHCPv6 again On 15 October 2015 at 13:22, Ray Soucy <rps () maine edu<mailto:rps () maine edu>> wrote:
Android does not have a complete IPv6 implementation and should not be IPv6 enabled. Please do your part and complain to Google that Android does not support DHCPv6 for address assignment.
I use android devices on my network with IPv6 connectivity, and no issues at all. It gets an address. Does DNS via IPv6, and can send packets over IPv6. I don't use or need DHCPv6. You may not be able to roll out IPv6 to them because you need DHCPv6. In this case I suggest you complain to Google. Other people may not be able to roll out IPv6 to them because they need DHCPv6. They should also complain to Google. Suggesting that nobody rolls out IPv6 on them because they don't support one feature they may not even need is absurd. DHCPv6 is not a prerequisite for IPv6. Regards, Dave ------------------------------ Message: 12 Date: Thu, 15 Oct 2015 17:46:01 +0200 From: Baldur Norddahl <baldur.norddahl () gmail com<mailto:baldur.norddahl () gmail com>> To: nanog () nanog org<mailto:nanog () nanog org> Subject: RE: Android and DHCPv6 again Message-ID: <CAPkb-7B5jMn9h-AMo_67xqtHs1+7iP6cVQb=4vRq_6heRD0Xxw () mail gmail com<mailto:CAPkb-7B5jMn9h-AMo_67xqtHs1+7iP6cVQb=4vRq_6heRD0Xxw () mail gmail com>> Content-Type: text/plain; charset=UTF-8 Yes but Android refuses to do IPv6 if there is any DHCPv6 on the network. It is a bug. Regards Baldur Den 15. okt. 2015 17.22 skrev "Nicholas Warren" <nwarren () barryelectric com<mailto:nwarren () barryelectric com>>: Excuse my ignorance, but can DHCPv6 and SLAAC be run in parallel? Thank you, - Nich
-----Original Message----- From: NANOG [mailto:nanog-bounces () nanog org] On Behalf Of Dave Bell Sent: Thursday, October 15, 2015 9:52 AM To: Ray Soucy Cc: nanog () nanog org<mailto:nanog () nanog org> Subject: Re: Android and DHCPv6 again On 15 October 2015 at 13:22, Ray Soucy <rps () maine edu<mailto:rps () maine edu>> wrote:Android does not have a complete IPv6 implementation and should not be IPv6 enabled. Please do your part and complain to Google that Android does not support DHCPv6 for address assignment.I use android devices on my network with IPv6 connectivity, and no issues at all. It gets an address. Does DNS via IPv6, and can send packets over IPv6. I don't use or need DHCPv6. You may not be able to roll out IPv6 to them because you need DHCPv6. In this case I suggest you complain to Google. Other people may not be able to roll out IPv6 to them because they need DHCPv6. They should also complain to Google. Suggesting that nobody rolls out IPv6 on them because they don't support one feature they may not even need is absurd. DHCPv6
is
not a prerequisite for IPv6. Regards, Dave
------------------------------ Message: 13 Date: Thu, 15 Oct 2015 17:52:25 +0200 From: Sander Steffann <sander () steffann nl<mailto:sander () steffann nl>> To: Matthew Huff <mhuff () ox com<mailto:mhuff () ox com>> Cc: Nicholas Warren <nwarren () barryelectric com<mailto:nwarren () barryelectric com>>, Dave Bell <me () geordish org<mailto:me () geordish org>>, "nanog () nanog org<mailto:nanog () nanog org>" <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Android and DHCPv6 again Message-ID: <D6D77498-FF05-4F68-A7B5-3EA8DBB78BCA () steffann nl<mailto:D6D77498-FF05-4F68-A7B5-3EA8DBB78BCA () steffann nl>> Content-Type: text/plain; charset=us-ascii Hi, SLAAC by default provides the address and default gateway (RA) If SLAAC managed flag is set, then DHCPv6 is used get the address and other configs (DNS, etc..) If SLAAC other flag is set, then SLAAC provides the address, and uses DHCPv6 to get the other configs (DNS, etc..) It's even more flexible than that :) The Managed flag indicates if there is a DHCPv6 server that can provide addresses and other config The Other Config flag indicates if there is a DHCPv6 server that can provide other config Besides those flags each prefix that is advertised in the RA has an Autonomous flag which tells the clients if they are allowed to do SLAAC. So you can do all kinds of nice setups. For example you can advertise both the Managed and the Autonomous flags so that devices can get a DHCPv6-managed address (maybe for running services or for remote management) and get SLAAC addresses (for example for privacy extensions so they cannot be identified by their address when connecting to the internet). Or you can advertise multiple prefixes and allow Autonomous configuration in one and provide addresses in the other with DHCPv6. I admit that you can also make things extremely complex for yourself, but it's certainly flexible! ;) Cheers, Sander ------------------------------ Message: 14 Date: Thu, 15 Oct 2015 12:32:51 -0500 From: Larry Sheldon <larrysheldon () cox net<mailto:larrysheldon () cox net>> To: nanog () nanog org<mailto:nanog () nanog org> Subject: Re: Spamhaus contact needed Message-ID: <561FE343.60506 () cox net<mailto:561FE343.60506 () cox net>> Content-Type: text/plain; charset=utf-8; format=flowed On 10/15/2015 00:27, Jason Baugher wrote: Sorry to clutter up this list with an email issue, but hopefully someone is here from Spamhaus that can contact me off-list. I have a customer whose IP keeps getting listed in the CBL, and even after doing packet captures of everything in and out of their network, I still can't find a reason for it. I have been off the line for quite a while, but as I recollect there is no "Spamhaus contact" aside from the search engine they provide for their database. You look-up you IP, they tell you what the problem is, you fix it, and the block goes away. It always used to work. Every time. -- sed quis custodiet ipsos custodes? (Juvenal) ------------------------------ Message: 15 Date: Thu, 15 Oct 2015 12:41:56 -0500 From: Jason Baugher <jason () thebaughers com<mailto:jason () thebaughers com>> To: Larry Sheldon <larrysheldon () cox net<mailto:larrysheldon () cox net>> Cc: NANOG <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Spamhaus contact needed Message-ID: <CAGbD49rnuE15mvuWL-xTbZGfV_irs0erNNBquUNt3LnM_+u+SQ () mail gmail com<mailto:CAGbD49rnuE15mvuWL-xTbZGfV_irs0erNNBquUNt3LnM_+u+SQ () mail gmail com>> Content-Type: text/plain; charset=UTF-8 When all it says is, "spam-sending trojan, malicious link, or some type of botnet", it's not a lot to go on. I've seen examples where their lookup tool provides more details, but in this case, the response is generic. In fact, usually when this happens to a customer, they're able to figure out the problem without a lot of fuss and keep it from happening again. Sometimes we have to help them, but it's always something fairly obvious. It's only in this one case that we're struggling to identify the cause. Thank you to those that pointed out their email address on the FAQ page. How I managed to read through there and miss it, I'll never know. On Thu, Oct 15, 2015 at 12:32 PM, Larry Sheldon <larrysheldon () cox net<mailto:larrysheldon () cox net>> wrote: On 10/15/2015 00:27, Jason Baugher wrote: Sorry to clutter up this list with an email issue, but hopefully someone is here from Spamhaus that can contact me off-list. I have a customer whose IP keeps getting listed in the CBL, and even after doing packet captures of everything in and out of their network, I still can't find a reason for it. I have been off the line for quite a while, but as I recollect there is no "Spamhaus contact" aside from the search engine they provide for their database. You look-up you IP, they tell you what the problem is, you fix it, and the block goes away. It always used to work. Every time. -- sed quis custodiet ipsos custodes? (Juvenal) ------------------------------ Message: 16 Date: Thu, 15 Oct 2015 13:27:20 -0500 From: Larry Sheldon <larrysheldon () cox net<mailto:larrysheldon () cox net>> To: nanog () nanog org<mailto:nanog () nanog org> Subject: Re: Spamhaus contact needed Message-ID: <561FF008.1030008 () cox net<mailto:561FF008.1030008 () cox net>> Content-Type: text/plain; charset=utf-8; format=flowed On 10/15/2015 12:32, Larry Sheldon wrote: On 10/15/2015 00:27, Jason Baugher wrote: Sorry to clutter up this list with an email issue, but hopefully someone is here from Spamhaus that can contact me off-list. I have a customer whose IP keeps getting listed in the CBL, and even after doing packet captures of everything in and out of their network, I still can't find a reason for it. I have been off the line for quite a while, but as I recollect there is no "Spamhaus contact" aside from the search engine they provide for their database. You look-up your IP, they tell you what the problem is, you fix it, and the block goes away. It always used to work. Every time. WAIT A MINUTE! "CBL" is not "Spamhaus", is it?! http://www.abuseat.org/ -- sed quis custodiet ipsos custodes? (Juvenal) ------------------------------ Message: 17 Date: Thu, 15 Oct 2015 13:29:25 -0500 From: Larry Sheldon <larrysheldon () cox net<mailto:larrysheldon () cox net>> To: nanog () nanog org<mailto:nanog () nanog org> Subject: Re: Spamhaus contact needed Message-ID: <561FF085.2000302 () cox net<mailto:561FF085.2000302 () cox net>> Content-Type: text/plain; charset=utf-8; format=flowed On 10/15/2015 13:27, Larry Sheldon wrote: On 10/15/2015 12:32, Larry Sheldon wrote: On 10/15/2015 00:27, Jason Baugher wrote: Sorry to clutter up this list with an email issue, but hopefully someone is here from Spamhaus that can contact me off-list. I have a customer whose IP keeps getting listed in the CBL, and even after doing packet captures of everything in and out of their network, I still can't find a reason for it. I have been off the line for quite a while, but as I recollect there is no "Spamhaus contact" aside from the search engine they provide for their database. You look-up your IP, they tell you what the problem is, you fix it, and the block goes away. It always used to work. Every time. WAIT A MINUTE! "CBL" is not "Spamhaus", is it?! http://www.abuseat.org/ MY BAD! Yes, it is "spamhaus". Sorry. -- sed quis custodiet ipsos custodes? (Juvenal) ------------------------------ Message: 18 Date: Thu, 15 Oct 2015 14:38:05 -0400 From: Justin Wilson - MTIN <lists () mtin net<mailto:lists () mtin net>> To: NANOG <nanog () nanog org<mailto:nanog () nanog org>> Subject: Cogent BGP Woes Message-ID: <637E560A-C727-455D-9907-CE7A7C3CEDC4 () mtin net<mailto:637E560A-C727-455D-9907-CE7A7C3CEDC4 () mtin net>> Content-Type: text/plain; charset=utf-8 Have the rest of you been having as hard a time I am having in turning up BgP sessions with Cogent? They have made it a sales order nowadays instead of support. I filled out the questionnaire on the support site over 3 weeks ago and was directed to sales. I am going on 3 weeks waiting on a session to be turned up. Just wondering if I am alone. Justin Wilson j2sw () mtin net<mailto:j2sw () mtin net> --- http://www.mtin.net Owner/CEO xISP Solutions- Consulting ? Data Centers - Bandwidth http://www.midwest-ix.com COO/Chairman Internet Exchange - Peering - Distributed Fabric ------------------------------ Message: 19 Date: Thu, 15 Oct 2015 14:43:02 -0400 From: Josh Luthman <josh () imaginenetworksllc com<mailto:josh () imaginenetworksllc com>> To: Justin Wilson <lists () mtin net<mailto:lists () mtin net>> Cc: NANOG list <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Cogent BGP Woes Message-ID: <CAN9qwJ9+kX3YoZu2i0z9USSou55-884dFcsiebSATSD4ck-e6A () mail gmail com<mailto:CAN9qwJ9+kX3YoZu2i0z9USSou55-884dFcsiebSATSD4ck-e6A () mail gmail com>> Content-Type: text/plain; charset=UTF-8 TWC is this way. They ignore it. I had to find someone responsible and it took a day or two. Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Oct 15, 2015 11:40 AM, "Justin Wilson - MTIN" <lists () mtin net<mailto:lists () mtin net>> wrote: Have the rest of you been having as hard a time I am having in turning up BgP sessions with Cogent? They have made it a sales order nowadays instead of support. I filled out the questionnaire on the support site over 3 weeks ago and was directed to sales. I am going on 3 weeks waiting on a session to be turned up. Just wondering if I am alone. Justin Wilson j2sw () mtin net<mailto:j2sw () mtin net> --- http://www.mtin.net Owner/CEO xISP Solutions- Consulting ? Data Centers - Bandwidth http://www.midwest-ix.com COO/Chairman Internet Exchange - Peering - Distributed Fabric ------------------------------ Message: 20 Date: Thu, 15 Oct 2015 18:44:52 +0000 From: J?rgen Jaritsch <jj () anexia at<mailto:jj () anexia at>> To: Justin Wilson - MTIN <lists () mtin net<mailto:lists () mtin net>>, NANOG <nanog () nanog org<mailto:nanog () nanog org>> Subject: AW: Cogent BGP Woes Message-ID: <002d1f22708547e8a78b4ae23b8d686b () anx-i-dag02 anx.local<mailto:002d1f22708547e8a78b4ae23b8d686b () anx-i-dag02 anx.local>> Content-Type: text/plain; charset="utf-8" Hi Justin, no issues in the past 6 months ... neither in Kiev nor in Dublin ... most of the time solved within 2-3 days. best regards J?rgen Jaritsch Head of Network & Infrastructure ANEXIA Internetdienstleistungs GmbH Telefon: +43-5-0556-300 Telefax: +43-5-0556-500 E-Mail: JJaritsch () anexia-it com<mailto:JJaritsch () anexia-it com> Web: http://www.anexia-it.com Anschrift Hauptsitz Klagenfurt: Feldkirchnerstra?e 140, 9020 Klagenfurt Gesch?ftsf?hrer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 -----Urspr?ngliche Nachricht----- Von: NANOG [mailto:nanog-bounces () nanog org] Im Auftrag von Justin Wilson - MTIN Gesendet: Donnerstag, 15. Oktober 2015 20:38 An: NANOG <nanog () nanog org<mailto:nanog () nanog org>> Betreff: Cogent BGP Woes Have the rest of you been having as hard a time I am having in turning up BgP sessions with Cogent? They have made it a sales order nowadays instead of support. I filled out the questionnaire on the support site over 3 weeks ago and was directed to sales. I am going on 3 weeks waiting on a session to be turned up. Just wondering if I am alone. Justin Wilson j2sw () mtin net<mailto:j2sw () mtin net> --- http://www.mtin.net Owner/CEO xISP Solutions- Consulting ? Data Centers - Bandwidth http://www.midwest-ix.com COO/Chairman Internet Exchange - Peering - Distributed Fabric ------------------------------ Message: 21 Date: Thu, 15 Oct 2015 11:47:34 -0700 From: james machado <hvgeekwtrvl () gmail com<mailto:hvgeekwtrvl () gmail com>> To: Justin Wilson - MTIN <lists () mtin net<mailto:lists () mtin net>> Cc: NANOG <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Cogent BGP Woes Message-ID: <CADVasu6Cnou5OOuJZ=5ZeWmm2SeOS2+hKm1UeUHjA7DW2h_f9g () mail gmail com<mailto:CADVasu6Cnou5OOuJZ=5ZeWmm2SeOS2+hKm1UeUHjA7DW2h_f9g () mail gmail com>> Content-Type: text/plain; charset=UTF-8 Justin, What are you trying to do? I had a similar situation as my rep got the wrong product for BGP. I actually cleaned it up by talking to support and I had to fill out a second BGP questionnaire but it was resolved and turned up in a couple of days. James On Thu, Oct 15, 2015 at 11:38 AM, Justin Wilson - MTIN <lists () mtin net<mailto:lists () mtin net>> wrote: Have the rest of you been having as hard a time I am having in turning up BgP sessions with Cogent? They have made it a sales order nowadays instead of support. I filled out the questionnaire on the support site over 3 weeks ago and was directed to sales. I am going on 3 weeks waiting on a session to be turned up. Just wondering if I am alone. Justin Wilson j2sw () mtin net<mailto:j2sw () mtin net> --- http://www.mtin.net Owner/CEO xISP Solutions- Consulting ? Data Centers - Bandwidth http://www.midwest-ix.com COO/Chairman Internet Exchange - Peering - Distributed Fabric ------------------------------ Message: 22 Date: Thu, 15 Oct 2015 18:51:17 +0000 From: Damien Burke <damien () supremebytes com<mailto:damien () supremebytes com>> To: J?rgen Jaritsch <jj () anexia at<mailto:jj () anexia at>>, Justin Wilson - MTIN <lists () mtin net<mailto:lists () mtin net>>, NANOG <nanog () nanog org<mailto:nanog () nanog org>> Subject: RE: Cogent BGP Woes Message-ID: <2FD50E6D13594B4C93B743BFCF9F52842FE730BC () EXCH01 sb.local<mailto:2FD50E6D13594B4C93B743BFCF9F52842FE730BC () EXCH01 sb.local>> Content-Type: text/plain; charset="utf-8" I have not had a problem. Reach out to your account manager and have them put a rush on it. I just did this last week and had no problem getting it setup. If you don?t know your account manager reach out to: Smith, Christopher (csmith () cogentco com<mailto:csmith () cogentco com>) -----Original Message----- From: NANOG [mailto:nanog-bounces () nanog org] On Behalf Of J?rgen Jaritsch Sent: Thursday, October 15, 2015 11:45 AM To: Justin Wilson - MTIN; NANOG Subject: AW: Cogent BGP Woes Hi Justin, no issues in the past 6 months ... neither in Kiev nor in Dublin ... most of the time solved within 2-3 days. best regards J?rgen Jaritsch Head of Network & Infrastructure ANEXIA Internetdienstleistungs GmbH Telefon: +43-5-0556-300 Telefax: +43-5-0556-500 E-Mail: JJaritsch () anexia-it com<mailto:JJaritsch () anexia-it com> Web: http://www.anexia-it.com Anschrift Hauptsitz Klagenfurt: Feldkirchnerstra?e 140, 9020 Klagenfurt Gesch?ftsf?hrer: Alexander Windbichler Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601 -----Urspr?ngliche Nachricht----- Von: NANOG [mailto:nanog-bounces () nanog org] Im Auftrag von Justin Wilson - MTIN Gesendet: Donnerstag, 15. Oktober 2015 20:38 An: NANOG <nanog () nanog org<mailto:nanog () nanog org>> Betreff: Cogent BGP Woes Have the rest of you been having as hard a time I am having in turning up BgP sessions with Cogent? They have made it a sales order nowadays instead of support. I filled out the questionnaire on the support site over 3 weeks ago and was directed to sales. I am going on 3 weeks waiting on a session to be turned up. Just wondering if I am alone. Justin Wilson j2sw () mtin net<mailto:j2sw () mtin net> --- http://www.mtin.net Owner/CEO xISP Solutions- Consulting ? Data Centers - Bandwidth http://www.midwest-ix.com COO/Chairman Internet Exchange - Peering - Distributed Fabric ------------------------------ Message: 23 Date: Thu, 15 Oct 2015 12:21:53 -0700 From: Owen DeLong <owen () delong com<mailto:owen () delong com>> To: Ca By <cb.list6 () gmail com<mailto:cb.list6 () gmail com>> Cc: Donn Lasher <D.Lasher () f5 com<mailto:D.Lasher () f5 com>>, nanog <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: IPv6 Irony. Message-ID: <01A30FF6-ED07-40AD-960B-5BC54B457F43 () delong com<mailto:01A30FF6-ED07-40AD-960B-5BC54B457F43 () delong com>> Content-Type: text/plain; charset=utf-8 Getting IPv6 to the masses without giving them the ability to get their IPv6 problems resolved seems not like a long-tail issue so much as a really poor choice of deployment plans. Just my $0.02. Owen On Oct 12, 2015, at 20:17 , Ca By <cb.list6 () gmail com<mailto:cb.list6 () gmail com>> wrote: On Monday, October 12, 2015, Donn Lasher <D.Lasher () f5 com<mailto:D.Lasher () f5 com>> wrote: Having just returned from NANOG65/ARIN36, and hearing about how far IPv6 has come.. I find my experience with <large US-based ISP> support today Ironic. Oh wait.. Hi, my name is Donn, and I?m speaking for? myself. Irony is a cable provider, one of the largest, and earliest adopters of IPv6, having ZERO IPv6 support available via phone, chat, or email. And being pointed, by all of those contact methods, to a single website. A static website. In 2015, when IPv4 is officially exhausted. :sigh: Tech support websites are long tail Pragmatists are focused on getting ipv6 to the masses by default in high traffic use cases. Sighing about edge cases in the long tail with ipv6 ... Not sure what you expect. <deleted comments about f5 not supporting standard ndp, which has caused me outtages> CB ------------------------------ Message: 24 Date: Thu, 15 Oct 2015 21:50:30 +0200 From: Baldur Norddahl <baldur.norddahl () gmail com<mailto:baldur.norddahl () gmail com>> To: "nanog () nanog org<mailto:nanog () nanog org>" <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Google's peering, GGC, and congestion management Message-ID: <CAPkb-7BOtGnf4a27SPJ4UaKhuB2UqcGJN41Ku56VCdFf75ekPg () mail gmail com<mailto:CAPkb-7BOtGnf4a27SPJ4UaKhuB2UqcGJN41Ku56VCdFf75ekPg () mail gmail com>> Content-Type: text/plain; charset=UTF-8 On 15 October 2015 at 16:35, Patrick W. Gilmore <patrick () ianai net<mailto:patrick () ianai net>> wrote: The 100% number is silly. My guess? They?re at 98%. That is easily do-able because all the traffic is coming from them. Coordinate the HTTPd on each of the servers to serve traffic at X bytes per second, ensure you have enough buffer in the switches for micro-bursts, check the NICs for silliness such as jitter, and so on. It is non-trivial, but definitely solvable. You would not need to control the servers to do this. All you need is the usual hash function of src+dst ip+port to map sessions into buckets and then dynamically compute how big a fraction of the buckets to route through a different path. A bit surprising that this is not a standard feature on routers. Regards, Baldur ------------------------------ Message: 25 Date: Thu, 15 Oct 2015 16:00:33 -0400 From: "Patrick W. Gilmore" <patrick () ianai net<mailto:patrick () ianai net>> To: NANOG list <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Google's peering, GGC, and congestion management Message-ID: <E6D565D7-7D20-41FB-BD62-D31C78A5E575 () ianai net<mailto:E6D565D7-7D20-41FB-BD62-D31C78A5E575 () ianai net>> Content-Type: text/plain; charset=utf-8 On Oct 15, 2015, at 3:50 PM, Baldur Norddahl <baldur.norddahl () gmail com<mailto:baldur.norddahl () gmail com>> wrote: On 15 October 2015 at 16:35, Patrick W. Gilmore <patrick () ianai net<mailto:patrick () ianai net>> wrote: The 100% number is silly. My guess? They?re at 98%. That is easily do-able because all the traffic is coming from them. Coordinate the HTTPd on each of the servers to serve traffic at X bytes per second, ensure you have enough buffer in the switches for micro-bursts, check the NICs for silliness such as jitter, and so on. It is non-trivial, but definitely solvable. You would not need to control the servers to do this. All you need is the usual hash function of src+dst ip+port to map sessions into buckets and then dynamically compute how big a fraction of the buckets to route through a different path. A bit surprising that this is not a standard feature on routers. The reason routers do not do that is what you suggest would not work. First, you make the incorrect assumption that inbound will never exceed outbound. Almost all CDN nodes have far more capacity between the servers and the router than the router has to the rest of the world. And CDN nodes are probably the least complicated example in large networks. The only way to ensure A < B is to control A or B - and usually A. Second, the router has no idea how much traffic is coming in at any particular moment. Unless you are willing to move streams mid-flow, you can?t guarantee this will work even if sum(in) < sum(out). Your idea would put Flow N on Port X when the SYN (or SYN/ACK) hits. How do you know how many Mbps that flow will be? You do not, therefore you cannot do it right. And do not say you?ll wait for the first few packets and move then. Flows are not static. Third?. Actually, since 1 & 2 are each sufficient to show why it doesn?t work, not sure I need to go through the next N reasons. But there are plenty more. -- TTFN, patrick ------------------------------ Message: 26 Date: Thu, 15 Oct 2015 16:45:43 -0400 From: Jim Mercer <jim () reptiles org<mailto:jim () reptiles org>> To: nanog () nanog org<mailto:nanog () nanog org> Subject: ultradns / neustar outage? Message-ID: <20151015204543.GK1857 () reptiles org<mailto:20151015204543.GK1857 () reptiles org>> Content-Type: text/plain; charset=us-ascii hi, we are hosting some domains at ultradns, and they all seem to be dead. anyone else seeing issues? --jim -- Jim Mercer Reptilian Research jim () reptiles org<mailto:jim () reptiles org> +1 416 410-5633 Life should not be a journey to the grave with the intention of arriving safely in a pretty and well preserved body, but rather to skid in broadside in a cloud of smoke, thoroughly used up, totally worn out, and loudly proclaiming "Wow! What a Ride!" -- Hunter S. Thompson ------------------------------ Message: 27 Date: Thu, 15 Oct 2015 15:49:11 -0500 From: N M <digitallystoned () gmail com<mailto:digitallystoned () gmail com>> To: Jim Mercer <jim () reptiles org<mailto:jim () reptiles org>> Cc: nanog () nanog org<mailto:nanog () nanog org> Subject: Re: ultradns / neustar outage? Message-ID: <CAOQV55amk=p2PtCCPVJNrY2DjPt=D0dQSi+CvuNADZar3raoaA () mail gmail com<mailto:CAOQV55amk=p2PtCCPVJNrY2DjPt=D0dQSi+CvuNADZar3raoaA () mail gmail com>> Content-Type: text/plain; charset=UTF-8 Neustar ultradns dashboard shows the service is unavailable On Oct 15, 2015 3:47 PM, "Jim Mercer" <jim () reptiles org<mailto:jim () reptiles org>> wrote: hi, we are hosting some domains at ultradns, and they all seem to be dead. anyone else seeing issues? --jim -- Jim Mercer Reptilian Research jim () reptiles org<mailto:jim () reptiles org> +1 416 410-5633 Life should not be a journey to the grave with the intention of arriving safely in a pretty and well preserved body, but rather to skid in broadside in a cloud of smoke, thoroughly used up, totally worn out, and loudly proclaiming "Wow! What a Ride!" -- Hunter S. Thompson ------------------------------ Message: 28 Date: Thu, 15 Oct 2015 23:13:17 +0200 From: Baldur Norddahl <baldur.norddahl () gmail com<mailto:baldur.norddahl () gmail com>> To: "nanog () nanog org<mailto:nanog () nanog org>" <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Google's peering, GGC, and congestion management Message-ID: <CAPkb-7BkMmBmRjR2R2q-4X2Qi+sggq6TNdrt0X__ocVXit54WA () mail gmail com<mailto:CAPkb-7BkMmBmRjR2R2q-4X2Qi+sggq6TNdrt0X__ocVXit54WA () mail gmail com>> Content-Type: text/plain; charset=UTF-8 On 15 October 2015 at 22:00, Patrick W. Gilmore <patrick () ianai net<mailto:patrick () ianai net>> wrote: The reason routers do not do that is what you suggest would not work. Of course it will work and it is in fact exactly the same as your own suggestion, just implemented in the network. Besides it _is already_ a standard feature, it is called equal cost multipath routing. The only difference is dynamically changing the weights between the multipaths. First, you make the incorrect assumption that inbound will never exceed outbound. Almost all CDN nodes have far more capacity between the servers and the router than the router has to the rest of the world. And CDN nodes are probably the least complicated example in large networks. The only way to ensure A < B is to control A or B - and usually A. I make absolutely no assumptions about ingress (towards the ASN) as we have no control of that. There is no requirement that routing is symmetric and it is the responsibility of whoever controls the ingress to do something if the port is overloaded in that direction. In the case of a CDN however, the ingress will be very little. Netflix does not take much data in from their customers, it is all egress traffic towards the customers and the CDN is in control of that. The same goes for Google. Two non CDN peers could use the system, but if the traffic level is symmetric then they better both do it. Second, the router has no idea how much traffic is coming in at any particular moment. Unless you are willing to move streams mid-flow, you can?t guarantee this will work even if sum(in) < sum(out). Your idea would put Flow N on Port X when the SYN (or SYN/ACK) hits. How do you know how many Mbps that flow will be? You do not, therefore you cannot do it right. And do not say you?ll wait for the first few packets and move then. Flows are not static. Flows can move at any time in a BGP network. As we are talking about CDNs we can assume that we have many many small flows (compared to port size). We can be fairly sure that traffic will not make huge jumps from one second to the next - you will have a nice curve here. You know exactly how much traffic you had the last time period, both out through the contested port and through the alternative paths. Recalculating the weights is just a matter of assuming that the next time period will be the same or that the delta will be the same. It is a classic control loop problem. TCP is trying to do much the same btw. You can adjust how close to 100% you want the algorithm to hit. If it performs badly, give it a little bit more space. If the time period is one second, flows can move once a second at maximum and very few flows would be likely to move. You could get a few out of order packets on your flow, which is not such a big issue in a rare event. Third?. Actually, since 1 & 2 are each sufficient to show why it doesn?t work, not sure I need to go through the next N reasons. But there are plenty more. There are more reasons why this problem is hard to do on the servers :-). Regards, Baldur ------------------------------ Message: 29 Date: Thu, 15 Oct 2015 17:46:31 -0400 From: "Patrick W. Gilmore" <patrick () ianai net<mailto:patrick () ianai net>> To: NANOG list <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Google's peering, GGC, and congestion management Message-ID: <F18DF8C1-B69E-4246-9759-92B889F2B679 () ianai net<mailto:F18DF8C1-B69E-4246-9759-92B889F2B679 () ianai net>> Content-Type: text/plain; charset=utf-8 On Oct 15, 2015, at 5:13 PM, Baldur Norddahl <baldur.norddahl () gmail com<mailto:baldur.norddahl () gmail com>> wrote: On 15 October 2015 at 22:00, Patrick W. Gilmore <patrick () ianai net<mailto:patrick () ianai net>> wrote: The reason routers do not do that is what you suggest would not work. Of course it will work and it is in fact exactly the same as your own suggestion, just implemented in the network. Besides it _is already_ a standard feature, it is called equal cost multipath routing. The only difference is dynamically changing the weights between the multipaths. You are confused. But I think I see the source of your confusion. Perhaps you are only considering a single port on a multi-port router with many paths to the same destination. Sure, if you want to say when Port X gets full (FSVO ?full?), move some flows to the second best path. Yes, that is physically possible. However, that is a tiny fraction of CDN Mapping. Plus you have a vast number of assumptions - not the least of which is that there _is_ another port to move traffic to. How many CDN nodes have you seen? You think most of them have a ton of ports to a slew of different networks? Or do they plonk a bunch of servers behind a single router (or switch!) connected to a single network (since most of them are _inside_ that network)? My original point is the CDN can control how much traffic is sent to each destination. Routers cannot do this. BTW: What you suggest breaks a lot of other things - which may or may not be a good trade off for avoiding congesting individual ports. But the idea to make identical IP path decisions inside a single router non-deterministic is .. let?s call it questionable. First, you make the incorrect assumption that inbound will never exceed outbound. Almost all CDN nodes have far more capacity between the servers and the router than the router has to the rest of the world. And CDN nodes are probably the least complicated example in large networks. The only way to ensure A < B is to control A or B - and usually A. I make absolutely no assumptions about ingress (towards the ASN) as we have no control of that. There is no requirement that routing is symmetric and it is the responsibility of whoever controls the ingress to do something if the port is overloaded in that direction. In the case of a CDN however, the ingress will be very little. Netflix does not take much data in from their customers, it is all egress traffic towards the customers and the CDN is in control of that. The same goes for Google. Two non CDN peers could use the system, but if the traffic level is symmetric then they better both do it. You are still confused. I have 48 servers connected @ GigE to a router with 4 x 10G outbound. When all 48 get nailed, where in the hell does the extra 8 Gbps go? While if I own the CDN, I can easily ensure those 48 servers never push more than 40 Gbps. Or even 20 Gbps to any single destination. Or even 10 Mbps to any single destination. The CDN can ensure the router is -never- congested. The router itself cannot do that. Second, the router has no idea how much traffic is coming in at any particular moment. Unless you are willing to move streams mid-flow, you can?t guarantee this will work even if sum(in) < sum(out). Your idea would put Flow N on Port X when the SYN (or SYN/ACK) hits. How do you know how many Mbps that flow will be? You do not, therefore you cannot do it right. And do not say you?ll wait for the first few packets and move then. Flows are not static. Flows can move at any time in a BGP network. As we are talking about CDNs we can assume that we have many many small flows (compared to port size). We can be fairly sure that traffic will not make huge jumps from one second to the next - you will have a nice curve here. You know exactly how much traffic you had the last time period, both out through the contested port and through the alternative paths. Recalculating the weights is just a matter of assuming that the next time period will be the same or that the delta will be the same. It is a classic control loop problem. TCP is trying to do much the same btw. You can adjust how close to 100% you want the algorithm to hit. If it performs badly, give it a little bit more space. If the time period is one second, flows can move once a second at maximum and very few flows would be likely to move. You could get a few out of order packets on your flow, which is not such a big issue in a rare event. This makes me lean towards my original idea that you have a total of one port on one router being considered. Perhaps that is what the OP meant. If so, sure, have at it. If they are interested in how CDN Mapping works, not even close. Third?. Actually, since 1 & 2 are each sufficient to show why it doesn?t work, not sure I need to go through the next N reasons. But there are plenty more. There are more reasons why this problem is hard to do on the servers :-). The problem is VERY hard on the servers. Or, more precisely, on the control plane (which is frequently not on the servers themselves). But the difference between ?it's hard? and ?it's un-possible? is kinda important. -- TTFN, patrick ------------------------------ Message: 30 Date: Thu, 15 Oct 2015 17:46:19 -0400 From: Curtis Generous <curtis () generous com<mailto:curtis () generous com>> To: <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: ultradns / neustar outage? Message-ID: <D2459697.3C48C%curtis () generous com<mailto:D2459697.3C48C%curtis () generous com>> Content-Type: text/plain; charset=US-ASCII Our DNS is hosted by UltraDNS, and are unreachable. Anyone else impacted? On 10/15/15, 4:49 PM, "NANOG on behalf of N M" <nanog-bounces () nanog org<mailto:nanog-bounces () nanog org> on behalf of digitallystoned () gmail com<mailto:digitallystoned () gmail com>> wrote: *This message was transferred with a trial version of CommuniGate(r) Pro* Neustar ultradns dashboard shows the service is unavailable On Oct 15, 2015 3:47 PM, "Jim Mercer" <jim () reptiles org<mailto:jim () reptiles org>> wrote: hi, we are hosting some domains at ultradns, and they all seem to be dead. anyone else seeing issues? --jim -- Jim Mercer Reptilian Research jim () reptiles org<mailto:jim () reptiles org> +1 416 410-5633 Life should not be a journey to the grave with the intention of arriving safely in a pretty and well preserved body, but rather to skid in broadside in a cloud of smoke, thoroughly used up, totally worn out, and loudly proclaiming "Wow! What a Ride!" -- Hunter S. Thompson ------------------------------ Message: 31 Date: Thu, 15 Oct 2015 14:56:02 -0700 From: Hugo Slabbert <hugo () slabnet com<mailto:hugo () slabnet com>> To: Curtis Generous <curtis () generous com<mailto:curtis () generous com>> Cc: nanog () nanog org<mailto:nanog () nanog org> Subject: Re: ultradns / neustar outage? Message-ID: <20151015215602.GC15250 () bamboo slabnet com<mailto:20151015215602.GC15250 () bamboo slabnet com>> Content-Type: text/plain; charset="us-ascii"; Format="flowed" On Thu 2015-Oct-15 17:46:19 -0400, Curtis Generous <curtis () generous com<mailto:curtis () generous com>> wrote: Our DNS is hosted by UltraDNS, and are unreachable. Anyone else impacted? Lots of people; primarily East Coast. This is being discussed on outages as well. https://twitter.com/search?q=ultradns
From an UltraDNS customer on outages:
= Important Notice Regarding UltraDNS Service The Neustar UltraDNS service is currently experiencing DDoS traffic in the U.S. East Region. The Security Operations Team is currently working on mitigating attack traffic and further updates will be provided as soon as possible. Sincerely, Neustar Support Department = -- Hugo -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 819 bytes Desc: Digital signature URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20151015/b1d7e7b7/attachment-0001.pgp> ------------------------------ Message: 32 Date: Fri, 16 Oct 2015 10:55:35 +0900 From: Lorenzo Colitti <lorenzo () colitti com<mailto:lorenzo () colitti com>> To: Baldur Norddahl <baldur.norddahl () gmail com<mailto:baldur.norddahl () gmail com>> Cc: NANOG <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Android and DHCPv6 again Message-ID: <CAKGbBmkf+69dCtNR8vtdbQupxv9EZJODeWJ1-AdXmiRXmUFWUA () mail gmail com<mailto:CAKGbBmkf+69dCtNR8vtdbQupxv9EZJODeWJ1-AdXmiRXmUFWUA () mail gmail com>> Content-Type: text/plain; charset=UTF-8 On Fri, Oct 16, 2015 at 12:46 AM, Baldur Norddahl <baldur.norddahl () gmail com<mailto:baldur.norddahl () gmail com> wrote: Yes but Android refuses to do IPv6 if there is any DHCPv6 on the network. It is a bug. That would indeed be a bug, but I'm not aware of such a bug. As long as the network provides SLAAC as well as DHCPv6, IPv6 should work. If anyone can reproduce this on a Nexus device, please file a bug. Android 5.x does have a bug where if you send the device a default route via RA and don't provide addressing via SLAAC (i.e., if you do DHCPv6-only), and also have IPv6 on the cellular network, the device gets confused. That should be fixed in 6.0. ------------------------------ Message: 33 Date: Fri, 16 Oct 2015 04:03:55 +0200 From: Dave Taht <dave.taht () gmail com<mailto:dave.taht () gmail com>> To: NANOG <nanog () nanog org<mailto:nanog () nanog org>> Subject: the fcc vs wifi lockdown issue Message-ID: <CAA93jw4Btg2Ufo2O6t-Pm++qvg=f9+tXRFmgSZsVtg3+5WhYwQ () mail gmail com<mailto:CAA93jw4Btg2Ufo2O6t-Pm++qvg=f9+tXRFmgSZsVtg3+5WhYwQ () mail gmail com>> Content-Type: text/plain; charset=UTF-8 I had hoped to have seen some discussion of what vint cerf, myself, linus torvalds, jim gettys, dave farber, and 260 others just cooked up as to solve the edge device, wifi, and iot security problems we face. Press release here: http://businesswire.com/news/home/20151014005564/en/Global-Internet-Experts-Reveal-Plan-Secure-Reliable Document as submitted to the fcc here: http://fqcodel.bufferbloat.net/~d/fcc_saner_software_practices.pdf Dave T?ht http://www.bufferbloat.net/projects/bloat/wiki/Daves_Media_Guidance ------------------------------ Message: 34 Date: Fri, 16 Oct 2015 04:24:21 +0200 From: Baldur Norddahl <baldur.norddahl () gmail com<mailto:baldur.norddahl () gmail com>> To: "nanog () nanog org<mailto:nanog () nanog org>" <nanog () nanog org<mailto:nanog () nanog org>> Subject: sfp "computer"? Message-ID: <CAPkb-7B5kSDC3NGs4sM31MRvfFv1tyrcrRfrkZ99rVGpK5aAOQ () mail gmail com<mailto:CAPkb-7B5kSDC3NGs4sM31MRvfFv1tyrcrRfrkZ99rVGpK5aAOQ () mail gmail com>> Content-Type: text/plain; charset=UTF-8 Hi Does anyone make a SFP with a system on chip "computer" that you can run a small embedded linux on? I am sure it can be done because I have a "GPON stick" which is basically a ONU with a small embedded Linux all on a SFP module. Does get fairly hot however. My application is to run some small things that I feel is missing in my switches/routers. Plug in this imaginary "SFP computer" to enhance the switch with a small Linux. The SFP slot provides both networking and power to the device. Regards, Baldur ------------------------------ Message: 35 Date: Fri, 16 Oct 2015 02:47:50 +0000 From: "Jameson, Daniel" <Daniel.Jameson () tdstelecom com<mailto:Daniel.Jameson () tdstelecom com>> To: Baldur Norddahl <baldur.norddahl () gmail com<mailto:baldur.norddahl () gmail com>>, "nanog () nanog org<mailto:nanog () nanog org>" <nanog () nanog org<mailto:nanog () nanog org>> Subject: RE: sfp "computer"? Message-ID: <E0D94351C6498041ABE98D73FB9F30EA138BA6A5@cmailbox5> Content-Type: text/plain; charset="us-ascii" Mk802 might get you close. Sub $50 plus a couple adapters. ________________________________ From: NANOG on behalf of Baldur Norddahl Sent: Thursday, October 15, 2015 9:24:21 PM To: nanog () nanog org<mailto:nanog () nanog org> Subject: sfp "computer"? Hi Does anyone make a SFP with a system on chip "computer" that you can run a small embedded linux on? I am sure it can be done because I have a "GPON stick" which is basically a ONU with a small embedded Linux all on a SFP module. Does get fairly hot however. My application is to run some small things that I feel is missing in my switches/routers. Plug in this imaginary "SFP computer" to enhance the switch with a small Linux. The SFP slot provides both networking and power to the device. Regards, Baldur ------------------------------ Message: 36 Date: Fri, 16 Oct 2015 05:23:45 +0200 From: Baldur Norddahl <baldur.norddahl () gmail com<mailto:baldur.norddahl () gmail com>> To: "nanog () nanog org<mailto:nanog () nanog org>" <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: sfp "computer"? Message-ID: <CAPkb-7BPFG06PPqsL8novtFWiufnqC3RVzX5Mqs2y=0qP5SuMQ () mail gmail com<mailto:CAPkb-7BPFG06PPqsL8novtFWiufnqC3RVzX5Mqs2y=0qP5SuMQ () mail gmail com>> Content-Type: text/plain; charset=UTF-8 Hi, The problem with that is the lack of power options. I got -48V DC. And no USB port to power any devices. Regards, Baldur On 16 October 2015 at 04:47, Jameson, Daniel <Daniel.Jameson () tdstelecom com<mailto:Daniel.Jameson () tdstelecom com>> wrote: Mk802 might get you close. Sub $50 plus a couple adapters. ------------------------------ *From:* NANOG on behalf of Baldur Norddahl *Sent:* Thursday, October 15, 2015 9:24:21 PM *To:* nanog () nanog org<mailto:nanog () nanog org> *Subject:* sfp "computer"? Hi Does anyone make a SFP with a system on chip "computer" that you can run a small embedded linux on? I am sure it can be done because I have a "GPON stick" which is basically a ONU with a small embedded Linux all on a SFP module. Does get fairly hot however. My application is to run some small things that I feel is missing in my switches/routers. Plug in this imaginary "SFP computer" to enhance the switch with a small Linux. The SFP slot provides both networking and power to the device. Regards, Baldur ------------------------------ Message: 37 Date: Thu, 15 Oct 2015 23:47:30 -0400 From: Justin Wilson - MTIN <lists () mtin net<mailto:lists () mtin net>> To: NANOG <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Cogent BGP Woes Message-ID: <23430E9F-68D5-491C-A9D6-BDC5C98289D9 () mtin net<mailto:23430E9F-68D5-491C-A9D6-BDC5C98289D9 () mtin net>> Content-Type: text/plain; charset=utf-8 I am trying to turn up BGP on a circuit that ha never had it. In the past, you went to the support portal, filled out the questionnaire and in a day or so you would have you bgp info. When I did that this time I received a prompt response back from support saying this is now handled by sales and gave me the sales person to contact. Contacted sales person almost 3 weeks ago. Had to wait until the direct draft credited before they could put any new orders in. On a side note, Cogent is the only provider I know of that does not credit electronic payments within 24-48 hours. All of ours take 5 business days. Once thats done, e-mail the sales person back. No response for a few days. Call a manager and get them involved. 2 more weeks we still don?t have BGP on this circuit. A minimum of 1 e-mail a day asking for status updates. Last response was ?Everything was entered in the system?. I guess I don?t understand why a sales order has to be entered for BGP. This adds an extra step, which in this case has been a major fail. Justin Wilson j2sw () mtin net<mailto:j2sw () mtin net> --- http://www.mtin.net Owner/CEO xISP Solutions- Consulting ? Data Centers - Bandwidth http://www.midwest-ix.com COO/Chairman Internet Exchange - Peering - Distributed Fabric On Oct 15, 2015, at 2:47 PM, james machado <hvgeekwtrvl () gmail com<mailto:hvgeekwtrvl () gmail com>> wrote: Justin, What are you trying to do? I had a similar situation as my rep got the wrong product for BGP. I actually cleaned it up by talking to support and I had to fill out a second BGP questionnaire but it was resolved and turned up in a couple of days. James On Thu, Oct 15, 2015 at 11:38 AM, Justin Wilson - MTIN <lists () mtin net<mailto:lists () mtin net>> wrote: Have the rest of you been having as hard a time I am having in turning up BgP sessions with Cogent? They have made it a sales order nowadays instead of support. I filled out the questionnaire on the support site over 3 weeks ago and was directed to sales. I am going on 3 weeks waiting on a session to be turned up. Just wondering if I am alone. Justin Wilson j2sw () mtin net<mailto:j2sw () mtin net> --- http://www.mtin.net Owner/CEO xISP Solutions- Consulting ? Data Centers - Bandwidth http://www.midwest-ix.com COO/Chairman Internet Exchange - Peering - Distributed Fabric ------------------------------ Message: 38 Date: Thu, 15 Oct 2015 23:47:38 -0400 From: Justin Wilson - MTIN <lists () mtin net<mailto:lists () mtin net>> To: NANOG <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Cogent BGP Woes Message-ID: <2E1F041E-CCDF-491F-BA03-B3D36FBC629A () mtin net<mailto:2E1F041E-CCDF-491F-BA03-B3D36FBC629A () mtin net>> Content-Type: text/plain; charset=utf-8 I am trying to turn up BGP on a circuit that ha never had it. In the past, you went to the support portal, filled out the questionnaire and in a day or so you would have you bgp info. When I did that this time I received a prompt response back from support saying this is now handled by sales and gave me the sales person to contact. Contacted sales person almost 3 weeks ago. Had to wait until the direct draft credited before they could put any new orders in. On a side note, Cogent is the only provider I know of that does not credit electronic payments within 24-48 hours. All of ours take 5 business days. Once thats done, e-mail the sales person back. No response for a few days. Call a manager and get them involved. 2 more weeks we still don?t have BGP on this circuit. A minimum of 1 e-mail a day asking for status updates. Last response was ?Everything was entered in the system?. I guess I don?t understand why a sales order has to be entered for BGP. This adds an extra step, which in this case has been a major fail. Justin Wilson j2sw () mtin net<mailto:j2sw () mtin net> <mailto:j2sw () mtin net> --- http://www.mtin.net <http://www.mtin.net/> Owner/CEO xISP Solutions- Consulting ? Data Centers - Bandwidth http://www.midwest-ix.com <http://www.midwest-ix.com/> COO/Chairman Internet Exchange - Peering - Distributed Fabric On Oct 15, 2015, at 2:47 PM, james machado <hvgeekwtrvl () gmail com<mailto:hvgeekwtrvl () gmail com> <mailto:hvgeekwtrvl () gmail com>> wrote: Justin, What are you trying to do? I had a similar situation as my rep got the wrong product for BGP. I actually cleaned it up by talking to support and I had to fill out a second BGP questionnaire but it was resolved and turned up in a couple of days. James On Thu, Oct 15, 2015 at 11:38 AM, Justin Wilson - MTIN <lists () mtin net<mailto:lists () mtin net> <mailto:lists () mtin net>> wrote: Have the rest of you been having as hard a time I am having in turning up BgP sessions with Cogent? They have made it a sales order nowadays instead of support. I filled out the questionnaire on the support site over 3 weeks ago and was directed to sales. I am going on 3 weeks waiting on a session to be turned up. Just wondering if I am alone. Justin Wilson j2sw () mtin net<mailto:j2sw () mtin net> <mailto:j2sw () mtin net> --- http://www.mtin.net <http://www.mtin.net/> Owner/CEO xISP Solutions- Consulting ? Data Centers - Bandwidth http://www.midwest-ix.com <http://www.midwest-ix.com/> COO/Chairman Internet Exchange - Peering - Distributed Fabric ------------------------------ Message: 39 Date: Fri, 16 Oct 2015 05:12:05 +0000 From: Carlos Alcantar <carlos () race com<mailto:carlos () race com>> To: Justin Wilson - MTIN <lists () mtin net<mailto:lists () mtin net>>, NANOG <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Cogent BGP Woes Message-ID: <DM2PR12MB01125F59E8415099CAFB0FADA03D0 () DM2PR12MB0112 namprd12 prod outlook com<mailto:DM2PR12MB01125F59E8415099CAFB0FADA03D0 () DM2PR12MB0112 namprd12 prod outlook com>> Content-Type: text/plain; charset="utf-8" Sales now handled it because they bill now for having a bgp session. ? Carlos Alcantar Race Communications / Race Team Member 1325 Howard Ave. #604, Burlingame, CA. 94010 Phone: +1 415 376 3314 / carlos () race com<mailto:carlos () race com> / http://www.race.com ________________________________________ From: NANOG <nanog-bounces () nanog org<mailto:nanog-bounces () nanog org>> on behalf of Justin Wilson - MTIN <lists () mtin net<mailto:lists () mtin net>> Sent: Thursday, October 15, 2015 8:47 PM To: NANOG Subject: Re: Cogent BGP Woes I am trying to turn up BGP on a circuit that ha never had it. In the past, you went to the support portal, filled out the questionnaire and in a day or so you would have you bgp info. When I did that this time I received a prompt response back from support saying this is now handled by sales and gave me the sales person to contact. Contacted sales person almost 3 weeks ago. Had to wait until the direct draft credited before they could put any new orders in. On a side note, Cogent is the only provider I know of that does not credit electronic payments within 24-48 hours. All of ours take 5 business days. Once thats done, e-mail the sales person back. No response for a few days. Call a manager and get them involved. 2 more weeks we still don?t have BGP on this circuit. A minimum of 1 e-mail a day asking for status updates. Last response was ?Everything was entered in the system?. I guess I don?t understand why a sales order has to be entered for BGP. This adds an extra step, which in this case has been a major fail. Justin Wilson j2sw () mtin net<mailto:j2sw () mtin net> <mailto:j2sw () mtin net> --- http://www.mtin.net <http://www.mtin.net/> Owner/CEO xISP Solutions- Consulting ? Data Centers - Bandwidth http://www.midwest-ix.com <http://www.midwest-ix.com/> COO/Chairman Internet Exchange - Peering - Distributed Fabric On Oct 15, 2015, at 2:47 PM, james machado <hvgeekwtrvl () gmail com<mailto:hvgeekwtrvl () gmail com> <mailto:hvgeekwtrvl () gmail com>> wrote: Justin, What are you trying to do? I had a similar situation as my rep got the wrong product for BGP. I actually cleaned it up by talking to support and I had to fill out a second BGP questionnaire but it was resolved and turned up in a couple of days. James On Thu, Oct 15, 2015 at 11:38 AM, Justin Wilson - MTIN <lists () mtin net<mailto:lists () mtin net> <mailto:lists () mtin net>> wrote: Have the rest of you been having as hard a time I am having in turning up BgP sessions with Cogent? They have made it a sales order nowadays instead of support. I filled out the questionnaire on the support site over 3 weeks ago and was directed to sales. I am going on 3 weeks waiting on a session to be turned up. Just wondering if I am alone. Justin Wilson j2sw () mtin net<mailto:j2sw () mtin net> <mailto:j2sw () mtin net> --- http://www.mtin.net <http://www.mtin.net/> Owner/CEO xISP Solutions- Consulting ? Data Centers - Bandwidth http://www.midwest-ix.com <http://www.midwest-ix.com/> COO/Chairman Internet Exchange - Peering - Distributed Fabric ------------------------------ Message: 40 Date: Thu, 15 Oct 2015 23:11:44 -0700 From: joel jaeggli <joelja () bogus com<mailto:joelja () bogus com>> To: Baldur Norddahl <baldur.norddahl () gmail com<mailto:baldur.norddahl () gmail com>>, "nanog () nanog org<mailto:nanog () nanog org>" <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: sfp "computer"? Message-ID: <56209520.8060306 () bogus com<mailto:56209520.8060306 () bogus com>> Content-Type: text/plain; charset="utf-8" On 10/15/15 8:23 PM, Baldur Norddahl wrote: Hi, The problem with that is the lack of power options. I got -48V DC. And no USB port to power any devices. step it down (buck converter) to 5v and use a raspberry pi http://www.st.com/web/en/catalog/sense_power/FM142/CL1456/SC355/PF63205 Regards, Baldur On 16 October 2015 at 04:47, Jameson, Daniel <Daniel.Jameson () tdstelecom com<mailto:Daniel.Jameson () tdstelecom com>> wrote: Mk802 might get you close. Sub $50 plus a couple adapters. ------------------------------ *From:* NANOG on behalf of Baldur Norddahl *Sent:* Thursday, October 15, 2015 9:24:21 PM *To:* nanog () nanog org<mailto:nanog () nanog org> *Subject:* sfp "computer"? Hi Does anyone make a SFP with a system on chip "computer" that you can run a small embedded linux on? I am sure it can be done because I have a "GPON stick" which is basically a ONU with a small embedded Linux all on a SFP module. Does get fairly hot however. My application is to run some small things that I feel is missing in my switches/routers. Plug in this imaginary "SFP computer" to enhance the switch with a small Linux. The SFP slot provides both networking and power to the device. Regards, Baldur -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 229 bytes Desc: OpenPGP digital signature URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20151015/c95b5f0e/attachment-0001.pgp> ------------------------------ Message: 41 Date: Fri, 16 Oct 2015 01:45:34 -0430 From: Alejandro Acosta <alejandroacostaalamo () gmail com<mailto:alejandroacostaalamo () gmail com>> To: nanog () nanog org<mailto:nanog () nanog org> Subject: Re: the fcc vs wifi lockdown issue Message-ID: <56209606.6070206 () gmail com<mailto:56209606.6070206 () gmail com>> Content-Type: text/plain; charset=utf-8 Quite interesting..., please keep us posted. Good luck with this. Regards, Alejandro, El 10/15/2015 a las 9:33 PM, Dave Taht escribi?: I had hoped to have seen some discussion of what vint cerf, myself, linus torvalds, jim gettys, dave farber, and 260 others just cooked up as to solve the edge device, wifi, and iot security problems we face. Press release here: http://businesswire.com/news/home/20151014005564/en/Global-Internet-Experts-Reveal-Plan-Secure-Reliable Document as submitted to the fcc here: http://fqcodel.bufferbloat.net/~d/fcc_saner_software_practices.pdf Dave T?ht http://www.bufferbloat.net/projects/bloat/wiki/Daves_Media_Guidance ------------------------------ Message: 42 Date: Fri, 16 Oct 2015 08:17:31 +0200 From: Mark Tinka <mark.tinka () seacom mu<mailto:mark.tinka () seacom mu>> To: "Patrick W. Gilmore" <patrick () ianai net<mailto:patrick () ianai net>>, NANOG list <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Google's peering, GGC, and congestion management Message-ID: <5620967B.4050706 () seacom mu<mailto:5620967B.4050706 () seacom mu>> Content-Type: text/plain; charset=utf-8 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 15/Oct/15 16:35, Patrick W. Gilmore wrote:
Remember, they control the servers. All CDNs (that matter) can do
this. They can re-direct users with different URLs, different DNS responses, 302s, etc., etc. It is not BGP. Of course, some other CDN's don't use DNS, and instead use BGP by Anycasting target IP addresses locally. Of course, the challenge with this is that those CDN's need to have their own IP addresses in the markets they serve, while the DNS-based CDN's can use IP addresses of the local network with whom they host. I find the latter easier for ISP's, but I'm sure many of the CDN's find the former easier for them, particularly with the lack of IPv4 space in all but one region. Mark. -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJWIJZ7AAoJEGcZuYTeKm+GAM8P/3TtFp7cC/38rfa+ygtsXfgv lz0IqLSbV0+U32SIjMl9F7/oH58zepC0LHmQOm4mbD+oyDSfuV7arzOyS9f4kALC dR1fjd+hHv9EVNvobt3TSyDkRlFYc71WzqusD3L7h7yxpdvq7ILmOW3/9t/TkJDA mxln2vt8WbfHYUg16IQL060us5k2JP82At+L9LHT6IQ4QmtaUQQXXA77Cmht6U+F VUAkdT23jdK3xee4/qbzgwu3XWo06d4XhcmqCCZBwV8BpDG53rNvHyMe7am0WKIF WMj6WSUWfXJAjfhPWfLKMY9zfRtVJPj52bsKzGlRiEulaQol4aSjRBWbloQsJkm4 sbWi7ldj9YmhFkWg1iNOSq4Ek7WlVJoOVpqUZ0S/t0/bAciFjgU/9pSQsWRxSyoc wsLVqxcUarCg6EM6Ya1P0+9N2t+Qc/DSv+cRHIIwc9unxBgyCnJ4+1S8jPHFDfHD T/nCvqGtnPAqT9j8qJCkvcUB44YNv7pjHCCZQz8y8aAff9j+dXHAi/CXp/ZoiOrS 1AEassLSW0kk4GnmAz5AfeSJeV2mRonrJ+yZuPZMzEdCPQfK28X2yD2E97A4uG1z VyAzKHzkNDmvkwTEjY3vn/GzgDLvlZuum8zghe0/7TYOl24fpdcXiA4XmZQXGwnt yaxhXTOhcU3FbqfOVUfm =Vgbr -----END PGP SIGNATURE----- ------------------------------ Message: 43 Date: Fri, 16 Oct 2015 08:19:38 +0200 From: Mark Tinka <mark.tinka () seacom mu<mailto:mark.tinka () seacom mu>> To: "Patrick W. Gilmore" <patrick () ianai net<mailto:patrick () ianai net>>, NANOG list <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Google's peering, GGC, and congestion management Message-ID: <562096FA.2030707 () seacom mu<mailto:562096FA.2030707 () seacom mu>> Content-Type: text/plain; charset=utf-8 On 15/Oct/15 16:35, Patrick W. Gilmore wrote:
Remember, they control the servers. All CDNs (that matter) can do this. They can re-direct users with different URLs, different DNS responses, 302s, etc., etc. It is not BGP.
Of course, some other CDN's don't use DNS, and instead use BGP by Anycasting target IP addresses locally. Of course, the challenge with this is that those CDN's need to have their own IP addresses in the markets they serve, while the DNS-based CDN's can use IP addresses of the local network with whom they host. I find the latter easier for ISP's, but I'm sure many of the CDN's find the former easier for them, particularly with the lack of IPv4 space in all but one region. Mark. ------------------------------ Message: 44 Date: Thu, 15 Oct 2015 23:43:19 -0700 From: Ray Wong <rayw () rayw net<mailto:rayw () rayw net>> To: "nanog () nanog org<mailto:nanog () nanog org>" <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: sfp "computer"? Message-ID: <2A9D77D5-028B-47C3-BC11-F477CD1EBD4A () rayw net<mailto:2A9D77D5-028B-47C3-BC11-F477CD1EBD4A () rayw net>> Content-Type: text/plain; charset=us-ascii or step down to 12vdc and use any number of standard PC options: http://www.mini-box.com/DC-DC <http://www.mini-box.com/DC-DC> On Oct 15, 2015, at 11:11 PM, joel jaeggli <joelja () bogus com<mailto:joelja () bogus com>> wrote: On 10/15/15 8:23 PM, Baldur Norddahl wrote: Hi, The problem with that is the lack of power options. I got -48V DC. And no USB port to power any devices. step it down (buck converter) to 5v and use a raspberry pi http://www.st.com/web/en/catalog/sense_power/FM142/CL1456/SC355/PF63205 Regards, Baldur On 16 October 2015 at 04:47, Jameson, Daniel <Daniel.Jameson () tdstelecom com<mailto:Daniel.Jameson () tdstelecom com>> wrote: Mk802 might get you close. Sub $50 plus a couple adapters. ------------------------------ *From:* NANOG on behalf of Baldur Norddahl *Sent:* Thursday, October 15, 2015 9:24:21 PM *To:* nanog () nanog org<mailto:nanog () nanog org> *Subject:* sfp "computer"? Hi Does anyone make a SFP with a system on chip "computer" that you can run a small embedded linux on? I am sure it can be done because I have a "GPON stick" which is basically a ONU with a small embedded Linux all on a SFP module. Does get fairly hot however. My application is to run some small things that I feel is missing in my switches/routers. Plug in this imaginary "SFP computer" to enhance the switch with a small Linux. The SFP slot provides both networking and power to the device. Regards, Baldur ------------------------------ Message: 45 Date: Fri, 16 Oct 2015 03:36:11 -0500 (CDT) From: Mike Hammett <nanog () ics-il net<mailto:nanog () ics-il net>> Cc: NANOG <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: Cogent BGP Woes Message-ID: <419719878.419.1444984623176.JavaMail.mhammett@ThunderFuck> Content-Type: text/plain; charset=utf-8 Nickles and dimes... ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest Internet Exchange http://www.midwest-ix.com ----- Original Message ----- From: "Carlos Alcantar" <carlos () race com<mailto:carlos () race com>> To: "Justin Wilson - MTIN" <lists () mtin net<mailto:lists () mtin net>>, "NANOG" <nanog () nanog org<mailto:nanog () nanog org>> Sent: Friday, October 16, 2015 12:12:05 AM Subject: Re: Cogent BGP Woes Sales now handled it because they bill now for having a bgp session. Carlos Alcantar Race Communications / Race Team Member 1325 Howard Ave. #604, Burlingame, CA. 94010 Phone: +1 415 376 3314 / carlos () race com<mailto:carlos () race com> / http://www.race.com ________________________________________ From: NANOG <nanog-bounces () nanog org<mailto:nanog-bounces () nanog org>> on behalf of Justin Wilson - MTIN <lists () mtin net<mailto:lists () mtin net>> Sent: Thursday, October 15, 2015 8:47 PM To: NANOG Subject: Re: Cogent BGP Woes I am trying to turn up BGP on a circuit that ha never had it. In the past, you went to the support portal, filled out the questionnaire and in a day or so you would have you bgp info. When I did that this time I received a prompt response back from support saying this is now handled by sales and gave me the sales person to contact. Contacted sales person almost 3 weeks ago. Had to wait until the direct draft credited before they could put any new orders in. On a side note, Cogent is the only provider I know of that does not credit electronic payments within 24-48 hours. All of ours take 5 business days. Once thats done, e-mail the sales person back. No response for a few days. Call a manager and get them involved. 2 more weeks we still don?t have BGP on this circuit. A minimum of 1 e-mail a day asking for status updates. Last response was ?Everything was entered in the system?. I guess I don?t understand why a sales order has to be entered for BGP. This adds an extra step, which in this case has been a major fail. Justin Wilson j2sw () mtin net<mailto:j2sw () mtin net> <mailto:j2sw () mtin net> --- http://www.mtin.net <http://www.mtin.net/> Owner/CEO xISP Solutions- Consulting ? Data Centers - Bandwidth http://www.midwest-ix.com <http://www.midwest-ix.com/> COO/Chairman Internet Exchange - Peering - Distributed Fabric On Oct 15, 2015, at 2:47 PM, james machado <hvgeekwtrvl () gmail com<mailto:hvgeekwtrvl () gmail com> <mailto:hvgeekwtrvl () gmail com>> wrote: Justin, What are you trying to do? I had a similar situation as my rep got the wrong product for BGP. I actually cleaned it up by talking to support and I had to fill out a second BGP questionnaire but it was resolved and turned up in a couple of days. James On Thu, Oct 15, 2015 at 11:38 AM, Justin Wilson - MTIN <lists () mtin net<mailto:lists () mtin net> <mailto:lists () mtin net>> wrote: Have the rest of you been having as hard a time I am having in turning up BgP sessions with Cogent? They have made it a sales order nowadays instead of support. I filled out the questionnaire on the support site over 3 weeks ago and was directed to sales. I am going on 3 weeks waiting on a session to be turned up. Just wondering if I am alone. Justin Wilson j2sw () mtin net<mailto:j2sw () mtin net> <mailto:j2sw () mtin net> --- http://www.mtin.net <http://www.mtin.net/> Owner/CEO xISP Solutions- Consulting ? Data Centers - Bandwidth http://www.midwest-ix.com <http://www.midwest-ix.com/> COO/Chairman Internet Exchange - Peering - Distributed Fabric ------------------------------ Message: 46 Date: Fri, 16 Oct 2015 10:50:17 +0000 From: MKS <rekordmeister () gmail com<mailto:rekordmeister () gmail com>> To: nanog () nanog org<mailto:nanog () nanog org> Subject: inexpensive url-filtering db Message-ID: <CADXB3RHmRfhHW1KNGyNDEu_sJ636ohbouYkr2SJjWXQUm836BQ () mail gmail com<mailto:CADXB3RHmRfhHW1KNGyNDEu_sJ636ohbouYkr2SJjWXQUm836BQ () mail gmail com>> Content-Type: text/plain; charset=UTF-8 Hello list Now I'm looking for an inexpensive url-filtering database, for integration into a squid like solution. By inexpense I mean something that doesn't cost $50k a year. If you have references for me, feel free to contact me on- or off-list. Regards MKS Perhaps there is another mailing-list more relevant for this kind of issues? ------------------------------ Message: 47 Date: Fri, 16 Oct 2015 16:38:00 +0530 From: Anurag Bhatia <me () anuragbhatia com<mailto:me () anuragbhatia com>> To: Chaim Rieger <chaim.rieger () gmail com<mailto:chaim.rieger () gmail com>> Cc: Hugo Slabbert <hugo () slabnet com<mailto:hugo () slabnet com>>, NANOG Mailing List <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: IPv6 and Android auto conf Message-ID: <CAJ0+aXY2xay=pGMTVkoyiH8K6rJNNTzitnbceRdVj8MM4FhBcQ () mail gmail com<mailto:CAJ0+aXY2xay=pGMTVkoyiH8K6rJNNTzitnbceRdVj8MM4FhBcQ () mail gmail com>> Content-Type: text/plain; charset=UTF-8 Intersting. Sure, would be fun to try DHCPv6. Last time when I checked only OS X was supporting it with limited sense. On Thu, Oct 15, 2015 at 2:31 PM, Chaim Rieger <chaim.rieger () gmail com<mailto:chaim.rieger () gmail com>> wrote: On the nexus 5, if you are running android 6, you should enable older style dhcp. It can be found in the dev section. -- Anurag Bhatia anuragbhatia.com PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2 ------------------------------ Message: 48 Date: Fri, 16 Oct 2015 06:50:50 -0500 From: Jerry Jones <jjones () danrj com<mailto:jjones () danrj com>> To: Baldur Norddahl <baldur.norddahl () gmail com<mailto:baldur.norddahl () gmail com>> Cc: "nanog () nanog org<mailto:nanog () nanog org>" <nanog () nanog org<mailto:nanog () nanog org>> Subject: Re: sfp "computer"? Message-ID: <3124D386-5349-4A48-BB99-E68E039BA973 () danrj com<mailto:3124D386-5349-4A48-BB99-E68E039BA973 () danrj com>> Content-Type: text/plain; charset=us-ascii A different approach would be use one of the newer switches from Juniper and run right on the RE if you have those in your network On Oct 15, 2015, at 9:24 PM, Baldur Norddahl <baldur.norddahl () gmail com<mailto:baldur.norddahl () gmail com>> wrote: Hi Does anyone make a SFP with a system on chip "computer" that you can run a small embedded linux on? I am sure it can be done because I have a "GPON stick" which is basically a ONU with a small embedded Linux all on a SFP module. Does get fairly hot however. My application is to run some small things that I feel is missing in my switches/routers. Plug in this imaginary "SFP computer" to enhance the switch with a small Linux. The SFP slot provides both networking and power to the device. Regards, Baldur ------------------------------ Message: 49 Date: Fri, 16 Oct 2015 13:57:02 +0200 From: Randy Bush <randy () psg com<mailto:randy () psg com>> To: North American Network Operators' Group <nanog () nanog org<mailto:nanog () nanog org>> Subject: i hate october Message-ID: <m2io67vxf5.wl%randy () psg com<mailto:m2io67vxf5.wl%randy () psg com>> Content-Type: text/plain; charset=US-ASCII jon postel died this day in 1988 abha ahuja next tuesday itojun the 29th arrrgh End of NANOG Digest, Vol 93, Issue 16 *************************************
Current thread:
- Re: NANOG Digest, Vol 93, Issue 16 Dan Turner (danturne) (Oct 16)