Cisco NCS5501 as a P Router

2017-05-18 Thread Erik Sundberg
We're at the growing point where we need a dedicated P router for a core 
device. We are taking a serious look at the NCS5501. Is there anyone else using 
a NCS5501 as P Router or just general feedback on the NCS5501 if you are using 
it?

The big downside is it's only has a single processor

I Can't justify a ASR9K or NCS5500 Chassis yet.



CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or 
previous e-mail messages attached to it may contain confidential information 
that is legally privileged. If you are not the intended recipient, or a person 
responsible for delivering it to the intended recipient, you are hereby 
notified that any disclosure, copying, distribution or use of any of the 
information contained in or attached to this transmission is STRICTLY 
PROHIBITED. If you have received this transmission in error please notify the 
sender immediately by replying to this e-mail. You must destroy the original 
transmission and its attachments without reading or saving in any manner. Thank 
you.


RE: Cisco NCS5501 as a P Router

2017-05-18 Thread michalis.bersimis
Ι would be interested to use NCS5501 as a core or aggregation P router to 
aggregate smaller PE routers. Its low cost (compared to ASR9K) and the small 
features that one can need in order to run a P router it makes the platform 
attractive. 

I would like to hear other use case  (eg. Internet peering routers)

Best Regards,
Michalis Bersimis

-Original Message-
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Erik Sundberg
Sent: Thursday, May 18, 2017 4:22 PM
To: nanog@nanog.org
Subject: Cisco NCS5501 as a P Router

**This message triggered one or more security rules. Proceed with caution**

We're at the growing point where we need a dedicated P router for a core 
device. We are taking a serious look at the NCS5501. Is there anyone else using 
a NCS5501 as P Router or just general feedback on the NCS5501 if you are using 
it?

The big downside is it's only has a single processor

I Can't justify a ASR9K or NCS5500 Chassis yet.



CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or 
previous e-mail messages attached to it may contain confidential information 
that is legally privileged. If you are not the intended recipient, or a person 
responsible for delivering it to the intended recipient, you are hereby 
notified that any disclosure, copying, distribution or use of any of the 
information contained in or attached to this transmission is STRICTLY 
PROHIBITED. If you have received this transmission in error please notify the 
sender immediately by replying to this e-mail. You must destroy the original 
transmission and its attachments without reading or saving in any manner. Thank 
you.


Re: Cisco NCS5501 as a P Router

2017-05-18 Thread Saku Ytti
On 18 May 2017 at 16:21, Erik Sundberg  wrote:

Hey,

> We're at the growing point where we need a dedicated P router for a core 
> device. We are taking a serious look at the NCS5501. Is there anyone else 
> using a NCS5501 as P Router or just general feedback on the NCS5501 if you 
> are using it?
>
> The big downside is it's only has a single processor

P would be the position I'd be most comfortable with NCS5501.
Particularly BGP free core and Internet-in-VRF. Single control-plane
does not seem problematic, usually design should allow any single core
node to be taken out of service without customer impact.

Please talk to your account team about roadmap, what features are
coming in which release in next 3 years. And ask them what are their
plans with this IP
http://www.cisco.com/c/en/us/about/corporate-strategy-office/acquisitions/leaba.html

-- 
  ++ytti


FloCon 2018 [Was: Re: vFlow :: IPFIX, sFlow and Netflow collector]

2017-05-18 Thread Rachel Kartch
On May 16, 2017, at 4:40 PM, Avi Freedman  wrote:

>On a related topic, I'd love to see NANOGers and general netops and 
perf-minded
>people go to Flocon (put on by CERT, and heavily but not exclusively SiLK- 
and
>security-focused).

>Cross-pollination of interests, tools, and techniques will help us all...


As a two-decades-or-so lurker on this list (since back when I was a wee thing 
at ATHY/NYSERNet), I’m going to finally break out of lurk mode to thank Avi for 
his mention of FloCon, and take advantage of this opportunity to tell you all 
about a conference that might be of interest.

For those who aren’t familiar with it, FloCon is an annual conference organized 
by CERT, historically focused on network flow and flow data analysis, and 
particularly its use to support security. (I should note we are *not* 
US-CERT—we’re the CERT Division of the Software Engineering Institute, operated 
by Carnegie Mellon University.)

I said “historically focused on network flow” above because one of the changes 
for 2018 is that we’re expanding the scope of FloCon. This is in response to 
the trend in the types of submissions we’re receiving for the conference, and 
in the types of work we at CERT see our sponsors (and the rest of the world) 
interested in. The new scope for FloCon is data analysis in support of security 
operations—so, all types of data now, not just flow data or network data.

We still anticipate that network data analysis will be a significant part of 
FloCon because of its central place in security operations, but we’re hopeful 
that the expanded scope will allow participants to share new and exciting ways 
of fusing all sorts of data. (Network flow? Pcap? Passive DNS? Building access 
data? Incident report contents? Biometric data? Malware hashes? Bring it, 
whatever it is.)

We tend to get a good mix of security practitioners, tool builders, and 
researchers each year. I would love to see more people from the ops world join 
us, since I think the best advances in the state of the practice will come from 
bringing the brains of all of these groups together.

More information about the conference, including the call for participation, 
can be found here: https://resources.sei.cmu.edu/news-events/events/flocon/

As the chair for FloCon 2018, I’d be happy to take any questions off-list about 
the conference.


Thanks,

Rachel A. Kartch
Software Engineering Institute | CERT
4500 Fifth Avenue
Pittsburgh, PA 15213
rakar...@cert.org




Dotster/domain.com contact

2017-05-18 Thread Eric Kuhnke
I'm looking for a technical contact at dotster/domain.com to address an
ongoing issue with their registrar service's lack of compliance with a very
clear ICANN policy.

Email me off-list.