Re: netflix proxy/unblocker false detection

[Mark Tinka]

On 26/Jun/20 20:15, colin johnston wrote:

> I don’t understand the rational to block specific ipv6 ranges, for example 
> the UK ipv6 ranges and Africa ipv6 ranges are not blocked from testing done 
> here with satellite comms and fibre backhaul uk comms

Do you have more information on this testing?

Mark.

Re: RDAP snapshots

[Rubens Kuhl]

I don't see any RIR approving a bulk WHOIS request on a weekend alone, but
the way is like this:
https://www.arin.net/reference/research/bulkwhois/

Rubens

On Sat, Jun 27, 2020 at 3:43 PM Lars Prehn  wrote:

> Hi everyone,
>
> Is there a "fast" way to obtain a snapshot of the RDAP databases from
> each RIR (e.g., http://rdap.db.ripe.net/) for local use? I saw some
> presentations on proposals for RDAP monitoring, but couldn't find any
> working implementations. I want to run a massive amount of requests
> against it (for a research project) and would like to keep the load on
> the RIR APIs low.
>
> Unfortunately, our deadline is Monday night. Therefore "fast" really
> boils down to 'till tomorrow'.
>
> Thanks for answers in advance!
>
> Best regards,
>
> Lars
>
>

Re: netflix proxy/unblocker false detection

[Mark Tinka]

On 26/Jun/20 20:08, Brandon Jackson via NANOG wrote:

>
> As much as I hate it as I use said tunnel service it is understandable
> and I don't really blame Netflix for this, I blame the content
> producer/owners and the industry as a whole for mandating such
> restrictive practices.

Unless I misunderstand it, there is a good chunk of Netflix original
content that should not be subject to region blocking.

I could be wrong.

Mark.

Re: netflix proxy/unblocker false detection

[Sabri Berisha]

- On Jun 26, 2020, at 3:39 PM, nanog nanog@nanog.org wrote:

> On 6/26/20 1:42 PM, Sabri Berisha wrote:

>> I'm also sure that in the past, enough people have abused their
>> trust.
> 
> I question the veracity of that statement.

I for one, have been guilty of that. Using VPN when I was traveling
abroad to access the series I was following.
 
>> ... to the best of their abilities.

> I highly doubt the agreements that Netflix's has with content owners
> state that Hurricane Electric (et al.) must be blocked.  Maybe I'm
> wrong.  It wouldn't be the first time today.
 
> I believe that Netflix is choosing the lower / easier road and simply
> blocking Hurricane Electric's IPv6 tunnels as an easy / low hanging
> fruit option to achieve the contractual requirements.

In order to enforce geographical content restrictions, the origin of
a request must be determined. If that origin is a known tunneling
address, you are unable to determine the true geographical position
of that particular client. In that case, it is impossible for Netflix
to determine that the viewer is in a location authorized to view the
content.

Since they know that HE's IPv6 broker range is most likely being
tunneled, and they know that there is no way to accurately determine
the true origin of the client, the must prevent it from accessing the
content. It's not like HE can insert an X-Origin-GEOIP: x.x.x.x or 
something.
 
>> False positives (meaning, people being denied while being in-region), are 
>> going
>> to be an unwelcome side-effect.

> Without seeing actual licenses to support "you must block Hurricane
> Electric", I'm going to choose to disagree with the license scapegoat.

We'll never be privvy to those license agreements. All we'll know is 
that they'll most likely include geographical restrictions.

Thanks,

Sabri

YANG to Web-form/Web-UI

[adamv0025]

Hi folks,
Anyone knows of any tool that would take YANG module and use it to
automatically generate Web-form (Web-UI), other than DLUX for ODL (which
sadly has been deprecated). 
Thanks 

adam 

RDAP snapshots

[Lars Prehn]

Hi everyone,

Is there a "fast" way to obtain a snapshot of the RDAP databases from 
each RIR (e.g., http://rdap.db.ripe.net/) for local use? I saw some 
presentations on proposals for RDAP monitoring, but couldn't find any 
working implementations. I want to run a massive amount of requests 
against it (for a research project) and would like to keep the load on 
the RIR APIs low.


Unfortunately, our deadline is Monday night. Therefore "fast" really 
boils down to 'till tomorrow'.


Thanks for answers in advance!

Best regards,

Lars

Re: netflix proxy/unblocker false detection

[Mark Tinka]

On 26/Jun/20 19:40, Sabri Berisha wrote:

> Don't hold your breath.  It's most likely not related to the capabilities
> of the hardware, or even the kernel running on the platform.

I'm hoping a new device will bring with it renewed vigour :-).

I'm probably being ambitious. Overly.


> My guess is that there is no IPv6 support because the backend doesn't 
> support it.  I've seen this at previous employers where the network was ready
> for IPv6, but back-end applications were lagging.  And that might require
> development on a lot of games as well.
>
> Perhaps we should start a rumor: "IPv6 has a lower ping!".  We'll get
> thousands of gamers protesting for v6 in front of Sony's HQ :)

I'd be down with that. Gamers will kill for even 1 nanosecond of lower
"ping" :-).

Which is quite at odds with a flats screen TV I bought from Sony back in
2015 that supported IPv6 - and this was Sony's own OS, not a 3rd party
one some of their current units ship with. The good ol' silo problem,
perhaps...

Mark.

Re: netflix proxy/unblocker false detection

[Mark Tinka]

On 26/Jun/20 15:48, Owen DeLong wrote:
> I can’t speak for Netflix, but the reality is that there’s really no good
> way to “fix” CGNAT other than migrating to IPv6 and eliminating it.
>
> CGNAT by its nature combines multiple subscribers behind a single address.
>
> When you make subscribers indistinguishable to the content provider, then
> any subscriber in the group committing abuse is likely to get all the
> subscribers in the group cut off. There’s no good way around that.
>
> Expecting content providers to maintain some sort of record of every
> eyeball provider’s CGNAT port mapping policy in order to do more granular
> filtering simply does not scale.
>
> So I don’t know how (or even if) Netflix will answer, but were I in their
> shoes, I’d probably answer as follows:
>
>   “IPv4 is a technology which has been extended well past its
>   ability to provide a good user experience. CGNAT, while it
>   allows providers to try and extend the lifetime of IPv4
>   ultimately provides an increasingly degraded user experience.
>   We fully support IPv6. Deploying IPv6 support is the best
>   path to providing an improved user experience on Netflix
>   vs. CGNAT and IPv4.”
>
> Seriously, if you were Netflix, what would be the point of putting serious
> investment into attempts to solve what will become an increasingly intractable
> problem when you already have a clear solution that scales and requires
> relatively easy and inherently necessary upgrades by the eyeball ISP that
> you’ve already completed on your side?

That would be my reading of the situation, if I were Netflix.

While we don't know their true on-the-record position, for sure, I doubt
we'd be far-fetched in assuming this to be case.

Mark.

Re: NTT IP Transit

[JASON BOTHE via NANOG]

Contact Jane Divis in NTT GIN
425-753-9318

> On Jun 27, 2020, at 07:40, James Braunegg  wrote:
> 
> 
> Dear Nanog
>  
> I am looking for some NTT IP transit delivered in LA for our network AS38880, 
> if you know a NTT sales rep could you please either pass on this email to 
> them, and or provide me their contact details !
>  
> Thanks in advance
>  
> Kindest Regards
>  
> James Braunegg
> 
> 1300 769 972 / 0488 997 207
> ja...@micron21.com
> www.micron21.com/
> 
> 
> 
> Follow us on Twitter for important service and system updates.
> This message is intended for the addressee named above. It may contain 
> privileged or confidential information. If you are not the intended recipient 
> of this message you must not use, copy, distribute or disclose it to anyone 
> other than the addressee. If you have received this message in error please 
> return the message to the sender by replying to it and then delete the 
> message from your computer.
>  
>  

NTT IP Transit

[James Braunegg]

Dear Nanog

I am looking for some NTT IP transit delivered in LA for our network AS38880, 
if you know a NTT sales rep could you please either pass on this email to them, 
and or provide me their contact details !

Thanks in advance

Kindest Regards

James Braunegg



[cid:image001.png@01D280A4.01865B60]

1300 769 972 / 0488 997 207

ja...@micron21.com

www.micron21.com/


[cid:image002.png@01D280A4.01865B60]


[cid:image003.png@01D280A4.01865B60]

[cid:image004.png@01D280A4.01865B60]

Follow us on Twitter for important service and 
system updates.


This message is intended for the addressee named above. It may contain 
privileged or confidential information. If you are not the intended recipient 
of this message you must not use, copy, distribute or disclose it to anyone 
other than the addressee. If you have received this message in error please 
return the message to the sender by replying to it and then delete the message 
from your computer.

Re: netflix proxy/unblocker false detection

[Mark Tinka]

On 26/Jun/20 19:25, Gary E. Miller wrote:

> Nope.  Netflix blocks a lot of IPv6.  Their blocking of HE has been
> discussed here many times.

Possibly, but I was merely referring to a compatible device.

Actual ability to get IPv6 transport toward Netflix is an entirely
different matter.

Mark.



signature.asc
Description: OpenPGP digital signature