AS7843 at NANOG78

2020-02-10 Thread aaron
Hi,

Would an operator from AS7843 at NANOG78 reach out to me off-list?

Thanks,
Aaron


Re: 100g PCS Errors

2020-08-19 Thread Aaron
we have been making 100G packet capture systems for 5 years now ( fmad.io
). In the early days vendor qualified transceivers really do make a
difference, its 25Gbps signaling per differential pair which is anything
but easy. Back then (4-5Y ago) the cheap QSFP28 vendors had some really
marginal parts... we had to tune the fpga alot to get the QSFP28s to to
work correctly, and even then some just wouldnt work at all / have alot of
errors.

If your using latests Finisar or Avago level transceivers should be fine,
currently (last 12 months) the cheap transceivers dont need any tuning too.
Guess depends if your using old HW / old transceivers or new HW with new
transceivers.

Aaron

On Wed, 19 Aug 2020 at 23:21, Tom Beecher  wrote:

> It's not normal, no.
>
> On Wed, Aug 19, 2020 at 10:02 AM Nicholas Warren <
> nwar...@barryelectric.com> wrote:
>
>> We've got a 100g qsfp in an mx204 that has 1207 bit errors and 29666
>> errored blocks after 24 hours of just being linked up...
>> I would assume this is not normal behavior, but I haven't used 100g
>> before. Do others see high error rates on their 100g optics?
>>
>


Re: Service Provider NetFlow Collectors

2019-01-03 Thread Aaron
Throwing my hat in the ring also (vendor from fmadio)
https://github.com/fmadio/pcap2json

Not exactly a newflow collector, its pcap -> flowgen -> elk on a single
box, working very well so far, still work in progress.

Problem with logstash is its too slow for high flow rates. So we did
everything inside the flow generator for direct ELK bulk uploads removing
logstash completely.

Cheers
Aaron

On Mon, 31 Dec 2018 at 18:40, Michel 'ic' Luczak  wrote:

> Don’t underestimate good old ELK
> https://www.elastic.co/guide/en/logstash/current/netflow-module.html
> + https://github.com/robcowart/elastiflow
>
> BR, ic
>
> On 31 Dec 2018, at 04:29, Erik Sundberg  wrote:
>
> Hi Nanog….
>
> We are looking at replacing our Netflow collector. I am wonder what other
> service providers are using to collect netflow data off their Core and Edge
> Routers. Pros/Cons… What to watch out for any info would help.
>
> We are mainly looking to analyze the netflow data. Bonus if it does ddos
> detection and mitigation.
>
> We are looking at
> ManageEngine Netflow Analyzer
> PRTG
> Plixer – Scrutinizer
> PeakFlow
> Kentik
> Solarwinds NTA
>
>
> Thanks in advance…
>
> Erik
>
>
> --
>
> CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files
> or previous e-mail messages attached to it may contain confidential
> information that is legally privileged. If you are not the intended
> recipient, or a person responsible for delivering it to the intended
> recipient, you are hereby notified that any disclosure, copying,
> distribution or use of any of the information contained in or attached to
> this transmission is STRICTLY PROHIBITED. If you have received this
> transmission in error please notify the sender immediately by replying to
> this e-mail. You must destroy the original transmission and its attachments
> without reading or saving in any manner. Thank you.
>
>
>


Re: Last Mile Design

2019-02-08 Thread Aaron
We run direct fiber connections to each house and business and terminate 
them on the same switches.  Our switches are housed in small "huts" that 
are dispersed throughout the city and each handle a specific area then 
the huts are all connected in a ring. It really comes down to what your 
geography looks like.


Aaron


On 2/7/2019 5:46 PM, David Ratkay wrote:
I am not sure if this is a easy question to answer. But I am wondering 
what ISP's do for their residential and business customers for 
designing POP's that they usually access to get theur traffic into a 
given ISP and beyond. Is it usually a L1/L2 connection from the CE to 
the last mile POP? Or L2 even within the last mile POP. Do you just 
have POP's delegated to residential users and a separate POP for 
business users. Or is it done on a geographical basis. So for this 
region of City-A we manage both residential and business customers at 
this same POP.


--
====
Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: Last Mile Design

2019-02-08 Thread Aaron
I've always felt PON is a tool for people who don't know how to design a 
proper network.


Aaron


On 2/8/2019 1:38 PM, Miles Fidelman wrote:

Good for you.  None of this PON splitter nonsense.

Miles Fidelman

On 2/8/19 2:17 PM, Aaron wrote:
We run direct fiber connections to each house and business and 
terminate them on the same switches.  Our switches are housed in 
small "huts" that are dispersed throughout the city and each handle a 
specific area then the huts are all connected in a ring. It really 
comes down to what your geography looks like.


Aaron


On 2/7/2019 5:46 PM, David Ratkay wrote:
I am not sure if this is a easy question to answer. But I am 
wondering what ISP's do for their residential and business customers 
for designing POP's that they usually access to get theur traffic 
into a given ISP and beyond. Is it usually a L1/L2 connection from 
the CE to the last mile POP? Or L2 even within the last mile POP. Do 
you just have POP's delegated to residential users and a separate 
POP for business users. Or is it done on a geographical basis. So 
for this region of City-A we manage both residential and business 
customers at this same POP.




--
====
Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: Last Mile Design

2019-02-08 Thread Aaron
My statement was meant to be tongue in cheek.  We deliver 1G to the home 
free of charge and make our money on the 10,40 and 100G connections.  We 
haven't been able to deliver those capacities over PON so we've never 
really taken it seriously.  As with everything else, you're use case and 
economics may vary.


Aaron


On 2/8/2019 2:31 PM, Tony Wicks wrote:

It also significantly reduces the requirement to distribute active equipment 
into the field while massively reducing the feeder fibre requirement. Point to 
point has its place to be sure, but mass market FTTH is not viable without 
PON's economics.


On 02/08/2019 12:48 PM, Aaron wrote:

I've always felt PON is a tool for people who don't know how to design a
proper network.

Why is that?

I always thought PON was a technology that reduced the number of active
ports, thus altering the port cost per subscriber significantly by not
actually needing dedicated ports.





--
====
Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: Mx204 alternative

2019-08-09 Thread Aaron
I would recommend the SLX9640.  12x 100G and 24x 1G/10G ports. 4 million 
routes in hardware without compression.  We've gotten 5.7M in there with 
compression.  Price point is super good.  Push them and they will get 
very aggressive on price.  VERY aggressive.


Aaron


On 8/7/2019 10:33 PM, Brandon Martin wrote:

On 8/7/19 11:02 PM, Mehmet Akcin wrote:

I am looking for some suggestions on alternatives to mx204.

Any recommendations on something more affordable which can handle 
full routing tables from two providers?


Prefer Juniper but happy to look alternatives.
Min 6-8 10G ports are required
1G support required


Extreme (ex Brocade) SLX9540 will do full tables from a couple 
providers in a local edge scenario with their "OptiScale" FIB 
optimization/route caching, but the whole FIB won't fit in hardware.  
Bandwidth is very generous (up to 48x10G + 6x100G), and prices are 
reasonable.  You wouldn't need any of the stupid port licenses, just 
the advanced feature license, so it should be about 25-40% more than 
an MX204 based on public pricing I've seen.  That would get you 24x10G 
+ 24x1G (the rest of the hardware is all there just locked out).


The SLX9650 will supposedly (if marketing and my SEs are to believed) 
do 4M IPv4 in hardware FIB, less if you want IPv6, too but still full 
tables of both with ample room for L2 MACs, next-hops, and MPLS. 
Bandwidth is, well, "Extreme" at I think 24x25G + 12x100G (25G 
breakout capable, all 25G also capable of 1G/10G).  Pricing is 
supposedly "about double" a 9540.


Be advised that the control plane SOFTWARE is NOT as mature as JunOS. 
It's being built up rapidly, but there's still a lot of stuff missing. 
I have not, so far, run into any of the weird glitches that I've seen 
on older Foundry/Brocade products, though, so that's good.  There's 
also no oddball restrictions about port provisioning like the MX204 
has. Control plane HARDWARE is well more than capable with something 
like 16GB (or maybe 32?) of RAM and a Xeon CPU.  There's actually a 
fully supported option for a guest VM for local analytics, SDN, etc. 
in remote scenarios.


If you just want to push packets, they're nice boxes.  If you want 
"high touch" service provider features, I think you may find them 
lacking. They're worth looking at, though, if only because of the 
price/performance ratio.


Arista has some similar boxes with similar caveats in terms of 
infantile software.


MX204 is a very nice pizza box router for service providers.  I'm not 
aware of anything quite like it in terms of having a mature control 
plane.  I like the JunOS config language better than Cisco-style that 
most other folks use.


--

Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: Mx204 alternative

2019-08-09 Thread Aaron




On 8/9/2019 4:19 PM, Brandon Martin wrote:

On 8/9/19 1:23 PM, Aaron wrote:

We've gotten 5.7M in there with compression.


Out of curiosity, what are you doing that has 5.7M routes in a single 
routing area?  That's a lot of edge routes, tons of VRFs, or something.


They were generated just for testing.



Push them and they will get very aggressive on price.  VERY aggressive. 


Yes, yes they will.  I've seen some distributor pricing and, while not 
officially under NDA, I will not mention it directly.  Suffice to say 
you should demand at least 40-50% off list from your vendor to start 
with.




I don't believe I'm under NDA either but all I'll say is that if you 
push, 40-50% isn't even close to what they'll do.


Re: lots of traffic starting at 3 a.m. central time

2019-10-15 Thread Aaron

Fortnite update?

On 10/15/2019 10:54 AM, Luke Guillory wrote:


That’s what I’m seeing as well, went  from 2.2G around 2:50AM CST to a 
peak of 16G.


https://i.imgur.com/en89kyO.png

Luke Guillory
Vice President – Technology and Innovation

<http://www.rtconline.com>
Tel:985.536.1212
Fax:985.536.0300
Email:  lguill...@reservetele.com
Web:www.rtconline.com


Reserve Telecommunications
100 RTC Dr
Reserve, LA 70084


*Disclaimer:*
The information transmitted, including attachments, is intended only 
for the person(s) or entity to which it is addressed and may contain 
confidential and/or privileged material which should not disseminate, 
distribute or be copied. Please notify Luke Guilloryimmediately by 
e-mail if you have received this e-mail by mistake and delete this 
e-mail from your system. E-mail transmission cannot be guaranteed to 
be secure or error-free as information could be intercepted, 
corrupted, lost, destroyed, arrive late or incomplete, or contain 
viruses. Luke Guillorytherefore does not accept liability for any 
errors or omissions in the contents of this message, which arise as a 
result of e-mail transmission.


*From:*NANOG [mailto:nanog-boun...@nanog.org] *On Behalf Of *Phil Lavin
*Sent:* Tuesday, October 15, 2019 10:48 AM
*To:* Aaron Gould; Nanog@nanog.org
*Subject:* RE: lots of traffic starting at 3 a.m. central time

> Anyone else see lots of traffic coming down starting at 3 a.m. 
central time ?  all of my internet connections showed strangely larger 
load for a few early morning hours.


Someone, on another list, mentioned a 70% increase in traffic to 
Akamai which seems to correlate with a new Fortnite release




--
====
Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: 10G-capable customer router recommendations?

2016-04-15 Thread Aaron
Not a lot of 10G capable CPEs out there.  For our 10G residential 
customers we install Brocade ICXs.


Aaron


On 4/15/2016 3:18 PM, David Sotnick wrote:

Hello masters of the Internet,

I was recently asked to set up networking at a VIP's home where he has
Comcast "Gigabit Pro" service, which is delivered on a 10G-SR MM port on a
Comcast-supplied Juniper ACX-2100 router.

Which customer router would you suggest for such a setup? It needs to do
IPv4 NAT, DHCP, IPv4+IPv6 routing and have a decent L4 firewall (that also
supports IPv6).

The customer pays for "2Gb" service (Comcast caps this at 2G+10% = 2.2Gbps)
and would like to get what he pays for (*cough*) by having the ability to
stream two 1Gbps streams (or at least achieve > 1.0Gbps).

I'm tempted to get another ACX-2100 and do a 4x1Gb LACP port-channel to the
customer switch, or replace the AV-integrator-installed Cisco SG300-52P
(Cisco switch with e.g. an EX-3300 with 10Gb uplinks).

Thanks in advance for your suggestions.

-Dave



--
====
Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: Zayo zColo Xcon Pricing

2018-03-07 Thread Aaron

There are a couple reasons.

You order service from me.  It costs me $X to build out that service.  I 
balance that against the value of your contract.  If you cancel early 
then my numbers may not work or I may lose money on the deal, or if 
I had to borrow money to do your build, then my bank is going to be 
angry when the value I told them I was getting for the build doesn't 
come through.


Smaller providers may end up factoring your contract.  If that contract 
doesn't pay what they said it would they're liable for the balance of 
the factoring deal.




On 3/7/2018 10:55 AM, Mel Beckman wrote:

NRC? Do you mean ETC (early termination charge)?

This is a sore point with me in all telco contracts. They want a one- or 
two-year term, or even three, and in exchange give you a discount on the 
installation and a tiny MRC reduction. But if you cancel early, they demand 
full payment for all the remaining months! I realize that the contract is 
written this way, but why? It doesn’t seem fair at all, and as a service 
provider myself, I know this is actually a huge unearned windfall for the 
provider.

To make things worse, many providers subtly plant an “auto-renew” clause in 
their contracts. You miss canceling but the end of the contract date, and BOOM, 
you’re on the hook for another two years!

  I’ve been burned by this more than once.

  -mel


On Mar 7, 2018, at 8:41 AM, Romeo Czumbil  wrote:

Wait till you ask for a disconnect. Then you get hit again for a hefty NRC





-Original Message-
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of James Laszko
Sent: Wednesday, March 7, 2018 10:11 AM
To: nanog 
Subject: Zayo zColo Xcon Pricing

One of our colo’s in San Diego was purchased by Zayo recently and I requested a 
new copper Ethernet xcon to be placed.  After a few days I received a quote 
from my new rep quoting a MRC 3x what I’m currently paying for existing xcon’s 
as well as a hefty NRC as well.  Anyone have any experience with this kind of 
thing?  Anyone care to share what an average copper xcon, single floor, 
meet-me-room to cage, Ethernet from carrier circuit costs?  (This xcon is 
approx 30 feet..)

Thanks!

James

Sent from my iPad


--
====
Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: Brocade SLX Internet Edge

2018-10-31 Thread Aaron

It won't hold a full table. 256,000 IPv4 and 64,000 IPv6 routes.


On 10/31/2018 3:01 PM, Kevin Burke wrote:

Does anyone have any success with the Brocade SLX 9540 or similar?  Its going 
to be taking full BGP tables from two Tier1's and some peering.

The specs and sales rep says its fine, but the price makes me think its too 
good to be true.

We are trying to shepherd an old Cat 6509 out of our core.


Kevin Burke
802-540-0979
Burlington Telecom - City of Burlington
200 Church St, Burlington, VT 05401



--
====
Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: How to choose a transit provider?

2018-12-14 Thread Aaron
I've never signed an NDA to receive a quote.  Some of my contracts have 
NDAs in them after the fact but I've never been asked to sign one before 
I received pricing from a transit provider.


Aaron

On 12/14/2018 11:12 AM, Brian Kantor wrote:

On Fri, Dec 14, 2018 at 04:07:08PM +, David Guo via NANOG wrote:

First of all, sign NDA if possible, then ask the following questions:

Why in heaven's name would you *want* to sign an NDA?  Aren't you better
off without one?
- Brian




--
====
Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: Non-profit IX vs. neutral for-profit IX

2018-12-20 Thread Aaron
Probably price.  Also perception of value.  If you're a for profit 
enterprise then they're paying for interconnection plus your bump.  If 
you're non-profit the perception is that there is a larger value because 
there's no bump.  Whether that's true or not, who knows but that's the 
perception I've heard.



On 12/20/2018 1:31 PM, Mike Hammett wrote:
What are your thoughts on why a network would join a non-profit IX, 
but not a neutral, for-profit IX? Let's assume that traffic levels are 
similar.




-
Mike Hammett
Intelligent Computing Solutions <http://www.ics-il.com/>
<https://www.facebook.com/ICSIL><https://plus.google.com/+IntelligentComputingSolutionsDeKalb><https://www.linkedin.com/company/intelligent-computing-solutions><https://twitter.com/ICSIL>
Midwest Internet Exchange <http://www.midwest-ix.com/>
<https://www.facebook.com/mdwestix><https://www.linkedin.com/company/midwest-internet-exchange><https://twitter.com/mdwestix>
The Brothers WISP <http://www.thebrotherswisp.com/>
<https://www.facebook.com/thebrotherswisp><https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg>


--

Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: Muni Fiber and Politics

2014-07-22 Thread Aaron

So let me throw out a purely hypothetical scenario to the collective:

What do you think the consequences to a municipality would be if they 
laid fiber to every house in the city and gave away internet access for 
free?  Not the WiFi builds we have today but FTTH at gigabit speeds for 
free?


Do you think the LECs would come unglued?

Aaron


On 7/21/2014 8:33 PM, Miles Fidelman wrote:
I've seen various communities attempt to hand out free wifi - usually 
in limited areas, but in some cases community-wide (Brookline, MA 
comes to mind).  The limited ones (e.g., in tourist hotspots) have 
been city funded, or donated.  The community-wide ones, that I've 
seen, have been public-private partnerships - the City provides space 
on light poles and such - the private firm provides limited access, in 
hopes of selling expanded service.  I haven't seen it work 
successfully - 4G cell service beats the heck out of WiFi as a 
metropolitan area service.


When it comes to municipal fiber and triple-play projects, I've 
generally seen them capitalized with revenue bonds -- hence, a need 
for revenue to pay of the financing.  Lower cost than commercial 
services because municipal bonds are low-interest, long-term, and they 
operate on a cost-recovery basis.


Miles Fidelman

Aaron wrote:
Do you have an example of a municipality that gives free internet 
access to it's residents?



On 7/21/2014 2:26 PM, Matthew Kaufman wrote:
I think the difference is when the municipality starts throwing in 
free or highly subsidized layer 3 connectivity "free with every 
layer 1 connection"


Matthew Kaufman

(Sent from my iPhone)


On Jul 21, 2014, at 12:08 PM, Blake Dunlap  wrote:

My power is pretty much always on, my water is pretty much always on
and safe, my sewer system works, etc etc...

Why is layer 1 internet magically different from every other utility?

-Blake

On Mon, Jul 21, 2014 at 1:38 PM, William Herrin  
wrote:
On Mon, Jul 21, 2014 at 10:20 AM, Jay Ashworth  
wrote:
Over the last decade, 19 states have made it illegal for 
municipalities

to own fiber networks

Hi Jay,

Everything government does, it does badly. Without exception. There
are many things government does better than any private organization
is likely to sustain, but even those things it does slowly and at an
exorbitant price.

Muni fiber is a competition killer. You can't beat city hall; once
built it's not practical to compete, even with better service, so
residents are stuck with only the overpriced (either directly or via
taxes), usually underpowered and always one-size-fits-all network
access which results. As an ISP I watched something similar happen in
Altoona PA a decade and a half ago. It was a travesty.

The only exception I see to this would be if localities were
constrained to providing point to point and point to multipoint
communications infrastructure within the locality on a reasonable and
non-discriminatory basis. The competition that would foster on the
services side might outweigh the damage on the infrastructure side.
Like public roads facilitate efficient transportation and freight
despite the cost and potholes, though that's an imperfect simile.

Regards,
Bill Herrin


--
William Herrin  her...@dirtside.com b...@herrin.us
Owner, Dirtside Systems . Web: <http://www.dirtside.com/>
Can I solve your unusual networking challenges?







--
====
Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: Recommended L2 switches for a new IXP

2015-01-12 Thread Aaron
We used to use Brocade FastIrons until we needed more 10G port density.  
We moved to Brocade SX's.


Originally, when it was 2 or 3 peers, we used an old Netgear switch. :)

Aaron

On 1/12/2015 7:07 AM, Mike Hammett wrote:

I look forward to this thread.

I think one important thing is who is your addressable market size? I'm working 
with a startup IXP and there's only 20 carriers in the building. A chassis 
based switch would be silly as there would never be that many people present. 
2x 1U switches would be more than plenty in their environment.




-
Mike Hammett
Intelligent Computing Solutions
http://www.ics-il.com



- Original Message -

From: "Manuel Marín" 
To: nanog@nanog.org
Sent: Monday, January 12, 2015 12:35:15 AM
Subject: Recommended L2 switches for a new IXP

Dear Nanog community

We are trying to build a new IXP in some US Metro areas where we have
multiple POPs and I was wondering what do you recommend for L2 switches. I
know that some IXPs use Nexus, Brocade, Force10 but I don't personally have
experience with these switches. It would be great if you can share your
experience and recommendations. There are so many options that I don't know
if it makes sense to start with a modular switch (usually expensive because
the backplane, dual dc, dual CPU, etc) or start with a 1RU high density
switch that support new protocols like Trill and that supposedly allow you
to create Ethernet Fabric/Clusters. The requirements are simple, 1G/10G
ports for exchange participants, 40G/100G for uplinks between switches and
flow support for statistics and traffic analysis.

Thank you and have a great day.

Regards




--
====
Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: EVERYTHING about Booters (and CloudFlare)

2016-07-28 Thread Aaron
If you believe someone is doing something illegal than you should report 
it to law enforcement.  Their job is to investigate and bring charges if 
they feel they are warranted.  You do not have to be from the USA to 
report a crime in the USA.


Here is a list with contact info for the FBI's field offices: 
https://www.fbi.gov/contact-us/field-offices


FBI Headquarters: https://www.fbi.gov/contact-us/fbi-headquarters

List of overseas offices for those of you not in the US that want to 
talk to someone local: https://www.fbi.gov/contact-us/legal-attache-offices


Most network operators are not law enforcement or lawyers.

Aaron


On 7/28/2016 8:45 AM, Naslund, Steve wrote:

A DDoS attack is illegal.  In the United States it is considered as theft of 
service.  The legal construct used is that the DDoS attack is a theft of CPU 
cycles, compute resources, and power by other than the rightful owner for its 
intended purposes.

Steven Naslund
Chicago IL

-Original Message-
From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of 
valdis.kletni...@vt.edu
Sent: Thursday, July 28, 2016 4:30 AM
To: Miles Fidelman
Cc: nanog@nanog.org
Subject: Re: EVERYTHING about Booters (and CloudFlare)

On Wed, 27 Jul 2016 22:55:54 -0400, Miles Fidelman said:

On 7/27/16 10:48 PM, Randy Bush wrote:

They just lost all respect from here. Would someone from USA please
report these guys to the feds? What they are doing is outright
criminal.

hyperbole.  it is not criminal.  you just don't happen to like it.

Actually, as someone pointed out, it might well be conspiracy - which
is criminal.

In general, the conspiracy isn't criminal if the conspired act isn't criminal.
If you're trying to make a criminal conspiracy out of non-criminal acts, your 
best bet is probably finding a new way to abuse the RICO statutes.



--
====
Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: Safe IPv4 Was: Re: premiumcolo.net IP address rental

2017-01-09 Thread Aaron
The emails I've seen are looking to rent FROM us, not TO us. I've 
received an email to every one of our ARIN POCs so I assumed they were 
scraping whois data and marked it all as spam.


Aaron


On 1/9/2017 12:40 PM, Martin Hannigan wrote:

On Mon, Jan 9, 2017 at 11:20 AM, Matt Freitag  wrote:


Joel,

I can't speak to "premiumcolo.net"


Neither can I, but that may not mean much. Perhaps someone else can
validate that they're reputable and can execute a transaction end to end?

If you need IPv4 addresses for your network:

1. Make sure you have an IPV6 allocation from your favorite RIR and are
using it
2. Apply for and receive a last /22 from RIPE. EVERYONE can do this.
3. Contact a reputable broker.

The ones I have experience with (Alphabetical):

 A. Peter Thimmesch at Addrex http://www.addrex.net
 B. Amy Cooper at Hilco Streambank http://www.ipv4auctions.com/
 C. Mike Burns at http://www.IPTrading.com

ARIN also publishes a list (which is not a requirement to be able to
transact or support transfers):


https://www.arin.net/resources/transfer_listing/facilitator_list.html

Network operators have many choices for answering their IP numbering needs
these days. Including IPv6.

Sorry to be a broken record on this topic, but it seems to come up a lot.
And if you search the archives I'll suspect you'll find something similar
to this a few time now.

An educated network operator is the best kind. That's why we are here.

YMMV and Best,

-M<



--
====
Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




google ipv6 routes via cogent

2017-03-02 Thread Aaron
Hi, I'm new to the nanog list, hope this isn't out of scope for what is
usually discussed here.

 

Cogent is telling me that I can't route through cogent to get to google ipv6
routes (particularly the well known dns addresses 2001:4860:4860::88xx)
because google decided not to advertise those route to one of their mutual
peers.

 

Anyone know anything about this ?  .and why it happened and when it will be
resolved ?

 

-Aaron

 

 



Re: charging for config changess

2024-07-01 Thread aaron
From experience, I can imagine that Arelion has a very small subset of 
customers that are blowing up their tech support for changes like these 
constantly.  I'm sure it's a punitive measure to deter these guys.


Aaron


On 30.06.2024 20:33, Tim Burke wrote:

First I've heard of a provider doing it... and we do business with 
3356, the one

carrier I'd expect to do something like this :-)

Might just be me, but I rarely have to have config changes done on 
circuits
after provisioning, short of enabling dual stack bgp on a circuit that 
didn't
have it previously, or if a provider did something silly with your 
config after

provisioning/acceptance like send you a default route all of a sudden.

Despite that, I know there are lots of people that can't decide on how 
they
want to do things, or refuse to use and/or don't understand things like 
IRR.
I don't do anything with 1299 (yet), but I could potentially see this 
as a
"PITA surcharge" to discourage people from being unable to make their 
minds up...
surely they would waive it for clueful customers who are making a 
reasonable

quantity of changes.

On Jun 30, 2024, at 4:17 PM, Randy Bush  wrote: has 
charging for config changes a la 
https://www.arelion.com/customer-excellence/customer-support/online-technical-change-pricing 
[1] become common while i was not looking? admittedly, i have not 
looked for a long time. randy




Links:
--
[1] 
https://www.arelion.com/customer-excellence/customer-support/online-technical-change-pricing


Re: Personal Colo 2024

2024-08-06 Thread aaron

Lots of people offer 1U colo.  We don't but lots of people do.

Aaron


On 06.08.2024 00:02, Tim Utschig wrote:


Are there any providers of 1U personal colos these days?

VMs are neat, but they lack the power to experiment with without
paying an arm and a leg.

I was lucky enough to have my 1U hosted by Dave Rand back in the
day.

Thanks.


Re: [Off-Topic] Ubersmith

2014-01-09 Thread Aaron
It depends on the size you plan on growing to.  The software is good but 
their pricing doesn't scale well.


We've been using it since 04 but are migrating away from it at this point.

Aaron

On 1/9/2014 7:15 PM, Mark Keymer wrote:

Hi James,

Looking at the online billing / payment aspect, Along with some of its 
other feature. IP tracking Service tracking. Billing for cloudstack 
and integration with it along with Xenserver.  The integrated 
ticketing system looks Cool too. Overall looking for a tool to manged 
customers and for customers to manage there servers / infrastructure 
along with billing of servers.


Probably more as well but those are some highlights.

Sincerely,

Mark Keymer
CFO/COO
Vivio Technologies
On 1/9/2014 1:04 PM, James Marcus wrote:

I used it, when I was hosting with Voxel and I thought it was pretty 
cool.  I think Ubersmith was developed at Voxel and then spun off, is 
that correct?

What do you want to do with it?
James
On Jan 9, 2014, at 3:26 PM, Jay Ashworth  wrote:


- Original Message -

From: "Mark Keymer" 
I know this is a bit off topic. And I am completely open to someone
giving me a link to a list that might be better to talk about 
Ubersmith.

However I also know that Many of you might have some feedback about
Ubersmith as well. ;)

I know that E-Solutions, at 400 N Tampa, was running Uber before they
got bought out by Knology (now WOW); I don't know if they still are.

They were pretty happy with it, I gather, though like everything it
has some pinch points.

Cheers,
-- jra
--
Jay R. Ashworth  Baylink j...@baylink.com
Designer The Things I 
Think   RFC 2100

Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII
St Petersburg FL USA   #natog +1 727 647 1274











Re: [Off-Topic] Ubersmith

2014-01-09 Thread Aaron

We rolled our own.  A friend is migrating to WHMCS from Ubersmith.

Aaron


On 1/9/2014 7:24 PM, matt kelly wrote:


Aaron,

Would you mind sharing what you are migrating to?

Matt

On Jan 9, 2014 8:23 PM, "Aaron" <mailto:aa...@wholesaleinternet.net>> wrote:


It depends on the size you plan on growing to.  The software is
good but their pricing doesn't scale well.

We've been using it since 04 but are migrating away from it at
this point.

Aaron

On 1/9/2014 7:15 PM, Mark Keymer wrote:

Hi James,

Looking at the online billing / payment aspect, Along with
some of its other feature. IP tracking Service tracking.
Billing for cloudstack and integration with it along with
Xenserver.  The integrated ticketing system looks Cool too.
Overall looking for a tool to manged customers and for
customers to manage there servers / infrastructure along with
billing of servers.

Probably more as well but those are some highlights.

Sincerely,

Mark Keymer
CFO/COO
Vivio Technologies
On 1/9/2014 1:04 PM, James Marcus wrote:

I used it, when I was hosting with Voxel and I thought it
was pretty cool.  I think Ubersmith was developed at Voxel
and then spun off, is that correct?
What do you want to do with it?
James
On Jan 9, 2014, at 3:26 PM, Jay Ashworth mailto:j...@baylink.com>> wrote:

- Original Message -

From: "Mark Keymer" mailto:m...@viviotech.net>>
I know this is a bit off topic. And I am
completely open to someone
giving me a link to a list that might be better to
talk about Ubersmith.
However I also know that Many of you might have
some feedback about
Ubersmith as well. ;)

I know that E-Solutions, at 400 N Tampa, was running
Uber before they
got bought out by Knology (now WOW); I don't know if
they still are.

They were pretty happy with it, I gather, though like
everything it
has some pinch points.

Cheers,
-- jra
-- 
Jay R. Ashworth  Baylink

j...@baylink.com <mailto:j...@baylink.com>
Designer The Things I Think  
RFC 2100

Ashworth & Associates http://baylink.pitas.com 2000
Land Rover DII
St Petersburg FL USA   #natog +1 727 647
1274 










Re: Cogent <-> Verizon peering congestion

2014-02-04 Thread Aaron
I've seen some Cogent-Sprint congestion today also.  About 10% PL at the 
link.



On 2/4/2014 6:29 PM, Edward Roels wrote:

I also see major congestion from Cogent to VZ.  Amongst other major
networks.


http://i.imgur.com/1z2ZGOr.png



On Tue, Feb 4, 2014 at 6:44 PM, Robert Glover  wrote:


Hello,

For the last several months, we have been tracking a congestion issue
between Cogent <-> Verizon

  Host Loss%   Snt   Last   Avg  Best  Wrst StDev
  1. router.garlic.com 0.0%290.3   6.1   0.2 160.6  29.7
  2. vl203.mag03.sfo01.atlas.cogentco.com 0.0%292.2   8.1   2.1
161.1  29.5
  3. te0-0-0-14.ccr22.sfo01.atlas.cogentco.com 0.0%292.9   2.7
2.4   3.6   0.2
  4. be2165.ccr22.sjc01.atlas.cogentco.com 0.0%294.1   4.0   3.7
4.8   0.2
  5. be2047.ccr21.sjc03.atlas.cogentco.com 0.0%294.5   4.7   4.3
5.5   0.3
  6. verizon.sjc03.atlas.cogentco.com 22.2%28  169.3 171.5 168.1 193.5
   6.9
  7. so-1-0-0-0.SJC01-CORE-RTR2.verizon-gni.net 37.0%28  205.8 180.6
171.6 271.6  24.8
  8. A12-0-135.SNFCCA-DSL-01.verizon-gni.net 33.3%28  172.3 177.5
171.7 250.8  18.3
  9. pool-71-116-122-235.snfcca.btas.verizon.net 25.0%28  197.9 197.6
195.5 199.2   0.8

We have smokeping's from our side showing 30%+ packet loss from us
(AS4307) to Verizon.

All I have gotten from Cogent is a canned response:

---
The latency and/or packet loss that you are experiencing to this
destination is due to occasional high traffic with Verizon. We have
repeatedly requested augments to these congestion points and hope Verizon
will comply soon.  While this has been escalated internally to the CEO
level, we encourage you to also contact Verizon customer support with your
concerns and complaints.  Their delay is a major impediment to internet
traffic overall and contrary to net neutrality requirements.  Our peering
engineers will continue to address this on a daily basis until resolved.
---

It seems to have gotten a lot worse in recent days, to the point where we
have customers who are trying to access us from Verizon's network (i.e.
they have Verizon DSL, or via Verizon 3G/4GLTE) complaining they are having
a very hard to checking their email, etc.

Has anyone else been experiencing these issues?  Or does anyone have more
information that what Cogent provided me in their canned statement?

-Bobby







Re: L6-20P -> L6-30R

2014-03-19 Thread Aaron
To end the debate, my staff master electrician says just replace the 
breaker.  You can leave the outlet if you want or replace it too. 
Doesn't matter.  The 30A circuit should be 10 gauge which is fine for 20amp.


And to Jay:  Network cables most certainly do carry power.

On 3/19/2014 12:18 PM, Jay Ashworth wrote:

Network cables don't carry power.





Re: New Zealand Spy Agency To Vet Network Builds, Provider Staff

2014-05-13 Thread Aaron
I live in the USA and have not been forced to register with the 
government as a network operator or have them vet my staff.


On 5/13/2014 11:34 AM, Patrick W. Gilmore wrote:

Don't get me wrong, I'm not a fan of this. But at least they did it in the 
open, unlike the NSA (where you live).



--
====
Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: Muni Fiber and Politics

2014-07-21 Thread Aaron
Do you have an example of a municipality that gives free internet access 
to it's residents?



On 7/21/2014 2:26 PM, Matthew Kaufman wrote:

I think the difference is when the municipality starts throwing in free or highly 
subsidized layer 3 connectivity "free with every layer 1 connection"

Matthew Kaufman

(Sent from my iPhone)


On Jul 21, 2014, at 12:08 PM, Blake Dunlap  wrote:

My power is pretty much always on, my water is pretty much always on
and safe, my sewer system works, etc etc...

Why is layer 1 internet magically different from every other utility?

-Blake


On Mon, Jul 21, 2014 at 1:38 PM, William Herrin  wrote:

On Mon, Jul 21, 2014 at 10:20 AM, Jay Ashworth  wrote:
Over the last decade, 19 states have made it illegal for municipalities
to own fiber networks

Hi Jay,

Everything government does, it does badly. Without exception. There
are many things government does better than any private organization
is likely to sustain, but even those things it does slowly and at an
exorbitant price.

Muni fiber is a competition killer. You can't beat city hall; once
built it's not practical to compete, even with better service, so
residents are stuck with only the overpriced (either directly or via
taxes), usually underpowered and always one-size-fits-all network
access which results. As an ISP I watched something similar happen in
Altoona PA a decade and a half ago. It was a travesty.

The only exception I see to this would be if localities were
constrained to providing point to point and point to multipoint
communications infrastructure within the locality on a reasonable and
non-discriminatory basis. The competition that would foster on the
services side might outweigh the damage on the infrastructure side.
Like public roads facilitate efficient transportation and freight
despite the cost and potholes, though that's an imperfect simile.

Regards,
Bill Herrin


--
William Herrin  her...@dirtside.com  b...@herrin.us
Owner, Dirtside Systems . Web: <http://www.dirtside.com/>
Can I solve your unusual networking challenges?


--
====
Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: Muni Fiber and Politics

2014-07-21 Thread Aaron

Thank you.

Search gives me examples of small to medium municipal wireless 
deployments but what I'm particularly interested in is an example(s) of 
a municipal fiber build that was used to deliver free internet access to 
said municipality's residents.  The post I originally responded to would 
lead me to believe that such an entity exists and if so, information on 
it would be super timely to a project I'm working on.


Aaron


On 7/21/2014 3:47 PM, Ryan Wilkins wrote:

On Jul 21, 2014, at 4:26 PM, Aaron  wrote:


Do you have an example of a municipality that gives free internet access to 
it's residents?


Cleveland, OH Ward 13.
http://oldbrooklynconnected.com

Nearly every street in the ward has multiple wireless access points serving 
Internet access to the residents at 2.4 GHz.  5 GHz is used for backhaul.  
Ubiquity networks wireless gear is used with a smattering of Mikrotik routers 
throughout.
It’s not terribly reliable but then maybe that’s on purpose to discourage 
lawsuits.  If there is a problem with the system on a Friday at 5:30 PM, it’ll 
be down until the following Tuesday.  The bandwidth also isn’t anything to 
write home about, but for free (meaning I don’t directly send these folks a 
check every month) it’s not too bad.  I can get 6 Mbps down and 2-4 Mbps up, 
sometimes more up and down but that’s fairly rare..  I’ve used it for Netflix 
and it worked reasonably well.  HD content would stream but often would jump 
back to SD.  Rarely would it stop entirely.
I ended up having to setup an account with Time Warner for their Internet service 
because I work from home and the wireless interruptions were enough that it was 
causing problems.  AT&T also serves the area but only with 1.5 Mbps DSL.  No 
other wired carriers serve the area aside from dialup.

Ryan Wilkins




--
====
Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: Network Naming Conventions

2010-03-13 Thread aaron
STD's 



--Original Message--
From: Tim Sanderson
To: NANOG list
Subject: RE: Network Naming Conventions
Sent: Mar 13, 2010 12:12 PM

...Types of coffee and donuts

Tim

-Original Message-
From: James Bensley [mailto:jwbens...@gmail.com] 
Sent: Saturday, March 13, 2010 12:27 PM
To: NANOG list
Subject: Re: Network Naming Conventions

On 13 March 2010 16:06, James Jones  wrote:
> On my last network I named all the routers after simpsons characters.

We use ancient Greek gods.

-- 
Regards,
James ;)





Sent from my Verizon Wireless BlackBerry



Re: Surcharge for providing Internet routes?

2010-05-01 Thread aaron
Never heard of it.  We don't do it.


--Original Message--
From: ML
To: nanog@nanog.org
Subject: Surcharge for providing Internet routes?
Sent: May 1, 2010 3:43 PM

Has anyone here heard of or do they themselves charge extra for
providing a complete internet table to customers?

Waive the surcharge for sufficiently large commits?




Sent from my Verizon Wireless BlackBerry



Re: Nortel, in bankruptcy, sells IPv4 address block for $7.5 million

2011-03-24 Thread aaron

On Thu, 24 Mar 2011 11:10:14 -0400, Larry Blunk  wrote:

On 03/24/2011 10:06 AM, Joe Provo wrote:

On Thu, Mar 24, 2011 at 01:27:29PM +, Tony Finch wrote:

Jay Nakamura  wrote:


666,624 is kind of odd number, isn't it?  That comes out to a
/13,/15,/19,/21 and a /22.
> From the court documents I gather that it is a collection of 
miscellaneous
blocks that Nortel acquired over the years, presumable via 
corporate M&A.
However there isn't (as far as I can see) a list of the actual 
blocks. See
docket 5143 at 
http://chapter11.epiqsystems.com/NNI/docket/Default.aspx


Exhibit B expressly indicates they were listed but filed under seal;
interesting to request that.  Previous documents indicate they used 
a

third party to shop things around, who got a $200k retainer and is
getting paid 5% of the sale.



   Docket #4435, Exhibit B has more information on the IP address
broker, Addrex, Inc., of Reston, Va.   Here's the president and
related companies --

http://www.linkedin.com/pub/charles-m-lee/22/414/a94
http://www.denuo.com
http://www.addrex.net
http://www.depository.net


I actually dug back through the thread to find this e-mail.  I 
particularly find the last link of interest.


Aaron




Re: Experience on Wanguard for 'anti' DDOS solutions

2015-08-11 Thread Aaron
We tested it a while back and found that it was fine for single source 
attacks but fell over with multiple sources.  Has that changed?




On 8/11/2015 9:42 AM, Nick Rose wrote:

We have processed just under a million anomalies with this software, we use the 
Chelsio cards for filtering. We had some troubles with packet loss on the 
filter side until we started using those which were a new feature in the latest 
release.

If you have any questions I would be happy to answer them.

Regards,
Nick Rose | CTO
Enzu Inc
nick.r...@enzu.com
www.enzu.com <http://www.enzu.com/>








On 8/11/15, 2:14 AM, "NANOG on behalf of marcel.durega...@yahoo.fr" 
 wrote:


anybody from this impressive list ?:

https://www.andrisoft.com/company/customers

-- Marcel



On 11.08.2015 03:28, Paul Ferguson wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 8/10/2015 6:07 PM, valdis.kletni...@vt.edu wrote:


On Tue, 11 Aug 2015 09:36:07 +1000, Nick Pratley said:


Once setup correctly. very good product - it's been running for 8
months now and hasn't had any issues. It's been very reliable.

I'll bite - (roughly) how many times has it triggered and mitigated
an actual DDoS during those 8 months?  We probably draw different
conclusions from "8 months and 1 DDoS" reliable and "8 months of
5-a-week" reliable...



I think that would definitely depend on how the network is base-lined.

That is sometimes more of an art than a science. :-)

- - ferg


- --
Paul Ferguson
PGP Public Key ID: 0x54DC85B2
Key fingerprint: 19EC 2945 FEE8 D6C8 58A1 CE53 2896 AC75 54DC 85B2
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iF4EAREIAAYFAlXJT7EACgkQKJasdVTchbJXoQD+Mhyy7gwtMkp+mdaEUiqvwlWe
70mSH8n5ALmcp+qOqMoBAKo60u/ryb9IdvsclzPpoAvq+r9CtZgh+t/9YpkUIgnP
=d7d1
-END PGP SIGNATURE-



--
====
Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: PCH.net questions and thoughts - Re: Prefix hijacking by AS20115

2015-09-29 Thread Aaron
We have a big, red rotary phone that sits in our NOC that we have 
attached to a VoIP box just to use for that. :)


On 9/29/2015 10:05 AM, Bob Evans wrote:

Nice of you to check Jim. This brings up the old idea - A long time ago I
had an INOC phone by PCH.NET - It never rang, as we filter our outbound
with detail everywhere we announce. ISPs need to provide us their address
list.

And the few times I needed to use it , no one ever answered. ( It was a
decade ago before NANOG membership.) So after a while I too ignored it.
Maybe this was an idea ahead of it's time ? From this painful mishap, it
could have been a great solution for NOC Engineers to help each. I find
peeringdb often outdated as companies change around and sluggish return
call if at all.  Most are like a sales line number post.

I see now a long list of registered networks in the PCH directory. Are
networks actually paying attention and using it. Is it time to take
another look ?  At midnight in your organization could you get a NOC
person with " proper BGP skills and access " to answer and care about a
bad announcement ?

https://inoc-dba-web.pch.net/inoc-dba/console.cgi?op=show_pubdir&list=org
  Link above shows lots more networks listed on the
  INOC-DBA Public Directory: Organizations

But have you used it? Did it work for you when you needed it ?
Any further comments are appreciated.

This seems like a very good proper civil approach - maybe this or
something like it ARIN might help promote and endorse as a benefit to the
community ? Be nice if with the cash they did something simple like this
and got all of us to use it? Special line forwarding ? A Emergency Only
NOC App for our phones for just this kind of situation - one that
registers a specific ASN and pin code we set on the registration page ?

Thank You
Bob Evans
CTO






On 9/28/15, 10:24 PM, "NANOG on behalf of Seth Mattinen"
 wrote:


On 9/28/15 20:19, Martin Hannigan wrote:

Is this related to 104.73.161.0/24? That's ours. :-)

We'll take a look and get back to you.  Thanks for caring!



Yep, that's one of the affected prefixes.

~Seth

Hi Seth, which market was this occurring?  Was this already removed?  I'm
not seeing it this morning.  I would like to figure out what went wrong
here.  We shouldn't be nailing up any static configuration to have caused
a situation like this.







--
====
Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: 10GE router resource

2008-03-25 Thread Aaron Glenn

On Tue, Mar 25, 2008 at 6:15 PM, Patrick Clochesy <[EMAIL PROTECTED]> wrote:
> Very interesting study I had not seen, and a bummer. That really puts a
> cramp in my advocation of our CARP+pf load balancers/firewalls/gateways.
> Than again, what's a PIX box capable of?

I'd rather tweak a whitebox than pay through the nose for a PIX.

> I also had to switch to OpenBSD as there was a fatal crash with the bridge
> device in FreeBSD when used with my paticular OpenVPN/CARP/pf combination.
>
> AFAIK pf/forwarding only takes place on one core and wouldn't take advantage
> of the other 3 cores, correct?

Correct. There has been some great speed and efficiency improvements
in pf and other networking parts of OpenBSD; though from anecdotal
evidence, 10GbE is not ready for 'primetime' (for certain definitions
of 'primetime').

actually I'll just skip making an ass out of myself and hope henning@
chimes in, since I believe he reads NANOG as well.

aaron.glenn


Re: [NANOG] Alcatel

2008-05-14 Thread Aaron Glenn
On Wed, May 14, 2008 at 11:11 AM, Nicolas Antoniello
<[EMAIL PROTECTED]> wrote:
> Ok, I agree with you, may be I didn't explain myself clear: I meant "neutral" 
> in the sense
> of relation with each other (i.e. Not being hostile).

hopefully we're all big boys and girls and can identify a strong
opinion when we see one. are we supposed to be afraid of speaking our
mind because it might hurt a vendors feelings? I mean, I could take
offense to the fact you mentioned you're not from the US -- implying
that all US citizens are generally hostile in their opinions; but I
don't.

Tim's simply giving his opinion as the OP requested -- in a much more
mature manner than a few other posts on this list in the past...

___
NANOG mailing list
NANOG@nanog.org
http://mailman.nanog.org/mailman/listinfo/nanog


RE: Repeated Blacklisting / IP reputation

2009-09-15 Thread Aaron Wendel
The mailing sent daily contains both.




-Original Message-
From: Justin Shore [mailto:jus...@justinshore.com] 
Sent: Tuesday, September 15, 2009 11:18 AM
To: Martin Hannigan
Cc: NANOG list
Subject: Re: Repeated Blacklisting / IP reputation

Martin Hannigan wrote:
> 
> Well, I haven't even had coffee yet and...
> 
> Get the removals:
> 
> curl -ls 
> http://lists.arin.net/pipermail/arin-issued/2009-September/000270.html | 
> grep Remove | grep -v ""
> 
> Get the additions:
> 
> mahannig$ curl -ls 
> http://lists.arin.net/pipermail/arin-issued/2009-September/000270.html | 
> grep Add | grep -v ""

That appears to be it.  I've also been told that there is a RSS feed of 
the same thing.  My understanding is that a posting is made to the 
mailing list or RSS feed when a new subnet is assigned.  I'd like to see 
them do something with the assignment is first returned to ARIN, not 
months later when the assignment is ready to be handed out again.  I 
think the extra time would help those people that download copies of the 
DNSBL zone files and manually import them once a week or less often.

Lots of place still use the zone files.  Personally I prefer to do so 
too, rather than tie my mail system reliability on an outside source 
that may or may not tell me when they have problems that affect my 
service.  GoDaddy and their hosted mail service would be a great example 
since they can't be bothered to update their DNSBL zone files.  Their 
mail admins are using a copy of SORBS that is 3 years old.  3 damn years 
old.  How do I know this?  3 years ago a mistake in a Squid 
configuration turned one of my services into an open proxy for about a 
week.  Even today mail from that server to a domain with mail hosted at 
GoDaddy results in a bounce citing the ancient SORBS listing as the reason.

Thanks for the pointer.  Looks like they've already thought of what I 
suggested and implemented a solution.  I still voice for announcing 
returned assignment instead of announcing when an old assignment gets 
reassigned.

Thanks
  Justin






West Coast U.S. interesting outage 21 Sept. ~1105h UTC

2009-09-21 Thread Aaron Hughes
All,

This morning around 0405h PDT there were several odd network outages around LA 
where packets simply stopped forwarding in several networks. I saw no circuit 
drops, however, several massive traffic drops. Thus far I have heard 
(unconfirmed) Telia had some kind of capacity drop / equipment failure and it 
has been fixed. Does anyone have any details on this and/or can confirm/deny 
this was a Telia outage?

Cheers,
Aaron


-- 

Aaron Hughes 
aar...@bind.com
+1-831-824-4161
Key fingerprint = AD 67 37 60 7D 73 C5 B7 33 18 3F 36 C3 1C C6 B8
http://www.bind.com/



RE: American Fiber Systems

2009-09-23 Thread Aaron Wendel
I have experiences with AFS going back 5 years.  None of them good.  Where
would you like me to start?

Aaron

-Original Message-
From: Marian Stasney [mailto:mar...@stasney.org] 
Sent: Wednesday, September 23, 2009 4:40 PM
To: nanog@nanog.org
Subject: American Fiber Systems

If any HTTP or last mile providers have worked with this provider, please
contact me off-list at the addresses below.

Your quick response is greatly appreciated.
mks

Marian Stasney      Desk: 512-853-9598   Cell: 512-845-1546
mar...@stasney.org




AT&T Admin

2009-11-09 Thread Aaron Wendel
Ok, guess we'll see if this really works or not.

Would an AT&T mail admin contact me offlist?  I have an issue I need to
start moving up the chain since I'm getting nowhere fast with normal
channels.

Thanks,

Aaron





Re: BGP Traffic Engineering question

2009-11-10 Thread Aaron Hopkins

On Tue, 10 Nov 2009, Drew Weaver wrote:


If you have several transit providers connected to your network and much
of your traffic is generally directed by the "BGP tiebreaker" (i.e. lowest
IP address) is there a way, without specifying on a per-prefix basis to
prefer the "tie breaker winner" slightly less often?


Assuming Cisco, set "bgp always-compare-med", "bgp deterministic-med", and
in your route-map in, "set origin igp" and "set metric X".  You can then
vary X as you see fit as an alternate tie-breaker.  As long as you never set
the metric the same on two different paths for the same prefix, it'll never
fall back to router-id.

Depending on the transit provider, you can often match bgp communities to
determine which are customer routes or the region where the announcement was
heard, which you can then use as a tie-breaker when setting the metric.
Barring that, as-path access-lists matching specific path fragments can do
the same thing, but seems to take more work to maintain as relationships
change over time.

-- Aaron



Re: SBC/AT&T Contact

2009-11-17 Thread Aaron Hughes
I can confirm serious problems reaching at&t DSL customers. The majority seem 
to be in the Pacbell regions.

Cheers,
Aaron

On Tue, Nov 17, 2009 at 10:28:17PM -0600, Frank Bulk wrote:
> Not personally, but it's being documented here:
> http://www.internetpulse.net/
> 
> Frank
> 
> -Original Message-
> From: Stuart Kirk [mailto:sk...@godaddy.com] 
> Sent: Tuesday, November 17, 2009 10:25 PM
> To: nanog@nanog.org
> Subject: SBC/AT&T Contact
> 
> Is anybody experiencing any issues with customer traffic originating
> from either of these carriers?  If anybody from SBC or AT&T can contact
> me off-list I would appreciate it.  Thank you.
> 
> --Stuart
> 
> 
> 
> 

-- 

Aaron Hughes 
aar...@bind.com
+1-831-824-4161
Key fingerprint = AD 67 37 60 7D 73 C5 B7 33 18 3F 36 C3 1C C6 B8
http://www.bind.com/



Re: fight club :) richard bennett vs various nanogers, on paid peering

2009-11-25 Thread Aaron Cossey
Would you care to elaborate on how the investigation of someones
funding sources is operationally relevant to the rest of the list?

Aaron Cossey
aaron.cos...@gmail.com




On Wed, Nov 25, 2009 at 1:25 PM, Paul Wall  wrote:
> RB-
>
> Where can we find data on your group's funding sources?
>
> If we're to continue this discussion, we need to establish bias and
> motive, which you've not covered on your own accord.
>
> Drive Slow,
> Paul Wall
>
> On 11/25/09, Richard Bennett  wrote:
>> Now you've descended from Steenbergen's hair-splitting between "on-net
>> routes" (the mechanism) vs. "on-net access" (the actual product) into
>> Simpson's straight-up lying. ITIF is not opposed to network neutrality
>> in principle, having released a paper on "A Third Way on Network
>> Neutrality", http://www.itif.org/index.php?id=63. There is not a single
>> ultra-conservative on the ITIF board, they're all either moderate
>> Democrats or moderate Republicans.
>>
>> I'm letting most of this childish venting slide, but I will point out
>> the bald-faced lies.
>>
>> RB
>>
>> William Allen Simpson wrote:
>>> They're opposed to net neutrality, and (based on his comments and several
>>> of the papers) still think the Internet is some kind of bastard child
>>> that
>>> needs adult supervision in the middle -- by which they mean themselves
>>> /in loco parentis/.
>>>
>>> Looking at the board, it's populated by ultra-conservative wing-nut
>>> Republicans, and some Conservadems (as we call them in political circles,
>>> they call themselves "centrists") from the "New Democrat Caucus" for
>>> "bi-partisan" cover.  And lots of lobbyists -- Federal lobbyists -- who
>>> seem to list their educational clients on their bio, but not whether
>>> they are also employed by a firm that represents other clients
>>
>> --
>> Richard Bennett
>> Research Fellow
>> Information Technology and Innovation Foundation
>> Washington, DC
>>
>>
>>
>
> --
> Sent from my mobile device
>
>



Re: DNS query analyzer

2009-12-01 Thread Aaron Glenn
On Tue, Dec 1, 2009 at 3:58 PM, Tony Finch  wrote:
> On Mon, 30 Nov 2009, Joseph Jackson wrote:
>>
>> Anyone know of a tool that can take a pcap file from wireshark that was
>> used to collect dns queries and then spit out statistics about the
>> queries such as RTT and timeouts?
>
> I don't know if it'll do exactly what you want, but have a look at
> https://www.dns-oarc.net/tools/dnscap

dnscap paired with dpkt can quickly and elegantly accomplish what you
desire; if you know python (:



RE: New SPAM DOS

2010-01-08 Thread Aaron Wendel
Yep.  I've been receiving them from several of my domains for a couple
weeks.  I've been sending the normal complaints to the provider of the IP
space in the header but other than that I have no good ideas about combating
it.

Aaron


-Original Message-
From: Owen DeLong [mailto:o...@delong.com] 
Sent: Friday, January 08, 2010 1:22 PM
To: Nanog list
Subject: New SPAM DOS

At least this is new for me...

I host scvrs.org on one of my servers, and, it does not have any outlook or
owa
services.  For some reason, someone decided to try and send this message
out to various internet recipients:

> Dear user of the scvrs.org mailing service!
> 
> We are informing you that because of the security upgrade of the mailing 
> service your mailbox (x) settings were changed. In order to 
> apply the new set of settings click on the following link:
> 
> http://scvrs.org/owa/service_directory/settings.php?email=x&from=
> scvrs.org&fromname=wa2ibm
> 
> Best regards, scvrs.org Technical Support.

An now I'm having to clean up various blacklistings thinking that my server
is
a spamvertised web site.

Anyone seen this before?  Any good techniques for combatting it?

Owen


No virus found in this incoming message.
Checked by AVG - www.avg.com 
Version: 9.0.725 / Virus Database: 270.14.123/2592 - Release Date: 01/08/10
01:35:00




RE: Cogent Outage?

2010-01-14 Thread Aaron Wendel
Sitting on hold with them now.  We lost them completely in Kansas City for
about 5 minutes.  We're back but connectivity through them is spotty.  Can't
even resolve google.com.  Same with other DCs in the area.



-Original Message-
From: Joe Johnson [mailto:j...@riversidecg.com] 
Sent: Thursday, January 14, 2010 11:31 AM
To: nanog@nanog.org
Subject: Cogent Outage?

We just lost Cogent across the country, along with several sister companies.
Can't get through to a support person. Any idea what's going on?

Joe Johnson
Chief Information Officer
Riverside Consulting Group, Ltd.
Phone: 708.442.6033 x3456
Fax: 708.442.9722
j...@riversidecg.com
www.riversidecg.com





No virus found in this incoming message.
Checked by AVG - www.avg.com 
Version: 9.0.725 / Virus Database: 270.14.140/2621 - Release Date: 01/14/10
06:39:00




Re: CNN LIVE stream?

2010-02-20 Thread Aaron Glenn
not care? if you honestly think you'd garner knowledge you didn't
already have from a CNN special...well, I don't know what to say.

On Sat, Feb 20, 2010 at 4:50 PM, andrew.wallace
 wrote:
> I am from the UK and don't know how to watch CNN Cyber Shockwave via an 
> internet live stream.
>
> The programme starts 8PM ET, 1AM UK.
>
> What do I do?
>
> Andrew
>
>
>
>
>
>
>



RE: Alaska IXP?

2010-03-04 Thread Aaron Wendel
We have very similar issues in Kansas City.  A couple years ago we set up a
local exchange point but it's had issues gaining traction due to a lack of
understanding more than anything else.  In these smaller markets people have
a hard time understanding how connecting to a competitor benefits them.  The
key is to get a few solid players on board and cross your fingers that
others will follow.

Aaron



-Original Message-
From: Jay Hanke [mailto:jha...@myclearwave.net] 
Sent: Thursday, March 04, 2010 10:33 AM
To: 'Andrew Hoyos'; 'Jared Mauch'; 'Sean Donelan'
Cc: nanog@nanog.org
Subject: RE: Alaska IXP?


On 3/4/10 8:57 AM, "Jay Hanke"  wrote:

>>
>> We've seen the same issues in Minnesota. Locally referred to as the
"Chicago
>>. Problem". Adding on to point 3, there is also a lack of neutral
facilities
>> with a sufficient amount of traffic to justify the next carrier
connecting.
>> In rural areas many times the two ISPs that provide services are enemies
at
>> the business level. A couple of us have started to talk about starting an
>> exchange point. With transit being so cheap it is sometimes difficult to
>> justify paying for the x-connects for a small piece of the routing table.
>>
>> Have you considered starting your own exchange point with some of the
local
>> players? Just having the connectivity in place may help with DR
situations
>> in addition to all of the benefits of an exchange point.
>
>Any interest by other anchor tenants in the area, such as the higher
>education facilities? In Madison, we have MadIX[1], an exchange point
hosted
>by the University of Wisconsin-Madison, with a presence in one of the
>neutral carrier hotels in Madison.
>
>That eliminates the carrier to carrier issues you run into in the smaller
>cities, also helps with the "Chicago Problem" which we are very familiar
>with here as well.
>
>[1] http://kb.wisc.edu/ns/page.php?id=6636
>
>Andrew

>From the looks of the link it looks like there is a bit of traction at the
MadIX. One of the other interested carriers has talked to the University of
MN and they showed some interest in participating. The trick is getting the
first couple of participants to get to critical mass. Is the MadIX using a
route server or is it strictly layer2?

Thanks,

Jay



No virus found in this incoming message.
Checked by AVG - www.avg.com 
Version: 9.0.733 / Virus Database: 271.1.1/2720 - Release Date: 03/03/10
13:34:00




Re: [NANOG] IOS rootkits

2008-05-25 Thread Aaron Glenn
On Sun, May 25, 2008 at 4:26 PM, Christian <[EMAIL PROTECTED]> wrote:
> any news of the presentation surfacing anywhere? interested to details of
> what was discussed

yeah. where's the beef?*




*not that I don't think said beef exists.



Re: NYC - 60 Hudson Problems?

2008-06-09 Thread Aaron Sawchuk
Is anyone aware if these L3 issues are affecting Burlington, Vermont again?

Regards,

Aaron


- Original Message -
From: Robert Blayzor <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
Sent: Mon Jun 09 08:35:16 2008
Subject: NYC - 60 Hudson Problems?

On this cheerful Monday morning around 3:40 EDT I'm seeing a few  
different service outages from Albany into NYC to 60 Hudson.  Our  
Level3 internet connection has gone down (again) and still down as of  
this time, and also noticing some dark fiber facilities we have going  
into 60 Husdon also have LoS.  Anyone know whats up?  We have tickets  
in with Level3 another the other dark fiber provider, but it's been  
pretty quiet..

-- 
Robert Blayzor, BOFH
INOC, LLC
[EMAIL PROTECTED]
http://www.inoc.net/~rblayzor/






Re: Ubiquity<->Mzima routing loop

2008-07-18 Thread Aaron Glenn
On Fri, Jul 18, 2008 at 12:27 PM, William Pitcock
<[EMAIL PROTECTED]> wrote:
> Hi,
>
> Can someone at Ubiquity or Mzima fix this routing loop:
>

How long ago did you contact Ubiquity or Mzima?



Re: Ubiquity<->Mzima routing loop

2008-07-18 Thread Aaron Glenn
On Fri, Jul 18, 2008 at 1:02 PM, William Pitcock
<[EMAIL PROTECTED]> wrote:
> Hi,
>
> Sadly, I don't have any contact with either one, but I do need to be
> able to access that server, and it's responsible admin is no where to be
> found.

common sense and courtesy says you should contact ubiquity, then mzima
before even thinking of hitting up nanog@
and, wild guess, it looks like it's probably on the ubiquity side of things.





Re: SBCglobal routing loop.

2008-07-18 Thread Aaron Glenn
On Fri, Jul 18, 2008 at 3:56 PM, Paul Wall <[EMAIL PROTECTED]> wrote:
> I think that's precisely the problem, that the issue could not have
> been handled "though other methods".

I think it should be clear to those posting here as a last ditch
effort that they should certainly outline the steps they've already
taken -- basically justifying their post to NANOG: "I tried X, waited
Y, got Z, and now I'm here"

> I agree NANOG is not a replacement for NOCs, but what about when the
> NOCs are utterly useless and the issue is global in scope?

that's definitely one of the reasons *I* think this mailing lists
exists. infact I bet if I wasn't lazy I could find something to that
effect in the charter or nanog.org site.

> Given the parties involved, I'd like to think that Logan tried to go
> through standard channels prior to posting.  Please realize this is no
> slight against nLayer, but rather, "the new AT&T" and their concept of
> customer service.

SBC/ATT/whatever peering ops was always my absolute favorite to work
with back when I actually worked in a NOC. hopefully that hasn't
changed much in the past year.

> Paul



Re: Software router state of the art

2008-07-28 Thread Aaron Glenn
On 7/28/08, Seth Mattinen <[EMAIL PROTECTED]> wrote:
>
> Junpier's J-series is a BSD based platform as far as I understand it.
> ImageStream is *much* more affordable for me, but is Linux-based, and I fear
...snip...

AFAIK, none of Juniper's Juniper kit rocks BSD outside of the
management interfaces and control plane (not even sure about the
latter, tbh).

someone feel free to correct me...



nanog@nanog.org

2008-08-13 Thread Aaron Wendel
I've been seeing the same thing on T-Mobil tonight.  

Aaron


-Original Message-
From: Robert E. Seastrom [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, August 13, 2008 9:17 PM
To: nanog@nanog.org
Cc: [EMAIL PROTECTED]
Subject: SMS hinkiness on AT&T?


Is anyone else seeing issues with multiple copies and delayed
originals for SMSes on the AT&T network?  I've been seeing this
behavior for about the past 24-36 hours.

This is phone-to-phone, not email-gateway stuff.  Includes both new
iPhones and people on T-Mobile as well as $random_att_handset.  Given
that our (royal we here) network monitoring is gatewayed directly via
a phone...  this is of some annoyance, to get interface transition and
other alarms hours after the fact.

I'm an old AT&T Blue customer if that makes a difference.

Anyone?  Bueller?

-r





Re: interger to I P address

2008-08-27 Thread Aaron Gifford
Ruby's IPAddr class is quite handy for IPv4 and IPv6 integer
representation conversions.

For IP to integer, whether IPv4 or IPv6, ruby code:

  require 'ipaddr'
  print "#{IPAddr.new('10.0.0.55').to_i}\n"
  print "#{IPAddr.new('2001:0db8:85a3:08d3:1319:8a2e:0370:7334').to_i}\n"

Results in:
  167772215
  42540766452641195744311209248773141300

And for integer to IPv4, ruby code:

  require "ipaddr"
  print "#{IPAddr.new(167772215,Socket::AF_INET)}\n"

Results in:
  10.0.0.55

And for integer to IPv6, ruby code:

  require 'ipaddr'
  print "#{IPAddr.new(42540766452641195744311209248773141300,
Socket::AF_INET6)}\n"

Results in:
  2001:0db8:85a3:08d3:1319:8a2e:0370:7334

Aaron out.



Re: 198.32.64.12 -- Harmless mis-route or potential exploit?

2008-09-02 Thread Aaron Glenn
On Tue, Sep 2, 2008 at 3:28 PM, Gadi Evron <[EMAIL PROTECTED]> wrote:
> My profile and resume: http://www.linkedin.com/in/gadievron

are you for real?



Re: Is the export policy selective under valley-free?

2008-09-02 Thread Aaron Glenn
On Tue, Sep 2, 2008 at 4:45 PM, Kai Chen <[EMAIL PROTECTED]> wrote:
> Just want to ask a direct question. Will an AS export all it gets from
> its customers and itself to its providers? Or even under valley-free,
> the BGP export policy is also selective?
>

that's the idea. but your use of valley-free in this context confuses
me. care to clarify?



Re: Force10 Gear - Opinions

2008-09-03 Thread Aaron Glenn
On Wed, Sep 3, 2008 at 5:38 PM, jim deleskie <[EMAIL PROTECTED]> wrote:
> This is an awesome thread... in the 18mts I tested F10 vs Juniper vs
> Cisco I need see my Cisco sales rep push this hard :)

it's easy to push this hard when you have empirical evidence on your side
but seriously, this is definitely a f10-nsp list thread and that place
could use some love



Re: a vernier of civilization...

2008-09-25 Thread Aaron Glenn
On Wed, Sep 24, 2008 at 10:48 PM, Jo Rhett <[EMAIL PROTECTED]> wrote:
> On Sep 24, 2008, at 7:24 PM, Randy Bush wrote:
>>
>> this way lies lynch mobs
>> shall we at least apply a vernier of civilization?
>
>
> Randy, I would agree if anything less had ever been effective.
>
> If you have a better idea, please explain to the rest of us.

"we are a nation of laws, not men"



RE: high latency ds3 issue on unloaded line

2008-09-26 Thread Aaron Wendel
Have you taken some traffic captures to see what kind of traffic's coming
through?  Could be an infected machine sending lots of small packets from
lots of spoofed addresses.  I've seen that kind of thing cause issues with
older routers before.



-Original Message-
From: mike [mailto:[EMAIL PROTECTED] 
Sent: Friday, September 26, 2008 11:04 AM
To: nanog@nanog.org
Subject: high latency ds3 issue on unloaded line

Hello,

I have a ds3 from qwest which has daily issues with insane 
point-to-point latencies sometimes exceeding 1000ms for hours on end, 
and which suddenly disappear, and does not appear to correspond with 
actual measured link utilization (less than 20mbps most days).

To make a long investigation short, the problem comes on during the 
day and then lets up late in the evening. I have tested and examined 
everything at the ip layer and no it's not high utilization, an ACL, 
router cpu or bad hardware, no line errors or other issues visible from 
interface or controller stats. yes I have flushed all hardware, and I 
have a 7204vxr/npe-400 with this single ds3. The only clue seems to be 
millions of 'output drops' from qwest's side. And at night I can hit 
popular ftp mirrors from a directly attached server and observe my 
interface reporting about %100 utilization combined with my users and 
customers, so yeah it really is a full line rate ds3. And historically 
Mrtg always shows around 20mbps or less utilization and it's only 
smokeping that goes off, usually in the afternoon when the point to 
point latencies between my router and qwest start heading north, and 
consistently at that. I also have another in house tool that takes 30 
second snapshots of my ds3 interface in order to catch short bursts that 
would be smoothed out with mrtg's 5 minute average, but during these 
high latency times there aren't any spikes noted. And for added 
confusion (or fun!), the latency can start at any utilization level - 
I've observed it while we were pulling just 12mbps, and I have not had 
it while we were doing 34mbps, only the time of day seems to be the 
common factor.

Qwest has not been able to identify the issue, only note that - 
yeah, this really is happening when there is otherwise no real load on 
the line - and I am certain we have done everything to rule out the ip 
layer. They have put in a 'request' to move me to another router, but I 
am not hopeful of a resolution that way as the router we're currently on 
doesn't appear otherwise to have the problem with any other subscriber.

What I want to know, is it possible that the underlaying atm/sonet 
that carries my ds3 from my facility is somehow oversubscribed or 
misconfigured? We have an OC12 fiber entrance and this is the only 
circuit provisioned on it, and in our small tiny town the only other 
user on the ring with us is comcast (according to the att network 
engineer who installed this). I don't know enough about atm/sonet to 
imagine conditions that would cause the issues I am seeing here , but 
every ip layer tool I have only ever tells me there isn't an ip issue 
here. I can issue ping from my router directly to the attached qwest 
router and get > 1000ms and then other times (out of the problem 
window), I am getting 4ms.

If anyone has laughs or beers to offer me, send 'em on cuz I could 
use both right about now

Mike-







Live.com admin

2008-09-29 Thread Childs, Aaron
If there is an admin/postmaster for live.com on this list could you please 
contact me off-list?

Thank you,
  Aaron

-
Aaron Childs
Assistant Director, Networking
Westfield State College
http://www.wsc.ma.edu/it/

"I would rather write 10,000 notes than one letter of the alphabet."
-- Beethoven



Re: Used (SONET) equipment sources/lists?

2008-10-02 Thread Aaron Glenn
On Thu, Oct 2, 2008 at 9:25 PM, Forrest W. Christian <[EMAIL PROTECTED]> wrote:
> I'm hoping someone can point me towards a reseller which specializes in this
> type of stuff, or another source I've overlooked.

I'm going to (slightly) hijack this by saying: if anyone knows of a
reseller that specializes in used/aftermarket DWDM gear, I'd love to
know.



Re: hosted PBX/VOIP thru VPN?

2008-11-12 Thread Aaron Wolfe
On Tue, Nov 11, 2008 at 9:17 PM, Lorell Hathcock <[EMAIL PROTECTED]> wrote:
> All:
>
>
>
> My customer wants to try to improve performance to his ATAs by creating a
> VPN from his network to the VOIP provider's network through the internet.
>
>
>
> I have to admit, the idea caught me flat footed.  At the outset, it seems
> like we would want to do it just to improve security for end users. However,
> my customer wants it because he thinks it will improve performance (i.e.
> voice quality).  We are suffering from poor VOIP quality due to the Sprint /
> Cogent depeering and subsequent squirming by our vendors.
>
>
>
> The only reason I can think that VOIP thru a VPN would help is that
> *perhaps* routers in the middle on ASNs I have no control over *may*
> prioritize VPN traffic higher than regular traffic.  They opposite could
> also be true.
>
>
>
> Specifically the ASNs in the middle are Level 3, Sprint and Time Warner.
>
>
>
> Thoughts?  Should I try to dissuade him from this if performance is his main
> motivator?
>

Your customer may have seen this article (or a similar one):

http://www.oreillynet.com/etel/blog/2006/03/strangely_ssl_vpns_can_help_vo.html

After reading it a year ago, I've found their discoveries to hold true
on my own (small) projects with voip.  In a nutshell:

"In every case, adding an SSL VPN to a VoIP call over a good broadband
network improved call quality. So in effect, wrapping a VoIP call in
SSL gives it more structure, kind of like the rind of good Brie. What
we had not counted on was the huge difference between what VoIP
requires (64Kbps) and a typical broadband connection of 500Kbps or
more. Because the broadband connection was so fast, TCP was able to
repair the impairments without reducing voice quality. "

May or may not apply to your situation, but if bandwidth isn't scarce
then I wouldn't be surprised if your customer is correct, at very
least they are not crazy :)

Good luck
-Aaron

>
>
> Thanks!
>
>
>
> Sincerely,
>
>
>
> Lorell Hathcock
>
>
>
> OfficeConnect.net | 832-665-3400 (o) | 713-992-2343 (f) |
> [EMAIL PROTECTED]
>
>
>
> ocbannerjoomla
>
>
>
>
>
>



Peering Personals BoF NANOG45, Attention Peering Coordinators

2008-12-03 Thread Aaron Hughes
Attention Peering Coordinators,

NANOG45 is approaching quickly and it's time to get our Peering Personals 
participants lined up for the Peering BoF.

Peering Personals is part of the Peering BoF (Birds Of a Feather) session and 
provides a forum for Peering Coordinators to meet each other with the goal of 
establishing peering relationships.

Participating Peering Coordinators will complete and email the form below to 
the Peering BOF moderator in advance of the BOF.

Peering Coordinators will have ~two minutes at the BOF to introduce themselves, 
their networks, where they currently peer and where they intend to be peering 
in the next several months, a little bit about what they require of potential 
peers and what they are looking for in a peering candidate. Peering 
Coordinators who would like to participate in Peering Introductions should 
e-mail the following information to [EMAIL PROTECTED] with the subject of 
"NANOG 45 Peering BOF" no later than Dec 31, 2008.:

Name: _
Company:__
AS#: _
Email Address: 
Peering Locations Today: __
Peering Locations in the next 3-6 months: 
Is your network more Content-Heavy or Access-Heavy ?
Do you source/sink more than 5Gbps of traffic?
Do you require Contracts for Peering?
Do you have an "Open Peering Policy (meaning you will peer with anyone in any 
single location), "Selective Peering Policy (meaning you will peer but have 
some prerequisites that must be met first)?, or "Restrictive Peering Policy 
(meaning you generally will not peer with anybody else)?"

If you have any questions, don't hesitate to send me an e-mail.

Cheers,

Aaron

-- 

Aaron Hughes 
[EMAIL PROTECTED]
(703) 244-0427
Key fingerprint = AD 67 37 60 7D 73 C5 B7 33 18 3F 36 C3 1C C6 B8
http://www.bind.com/



RE: Telecom Collapse?

2008-12-05 Thread Aaron Wendel
Hmm...  Florida and the entire Gulf Coast and probably Eastern US...
Hurricanes, and the West Coast, Earthquakes... and the northern US, severe
winter storms. Where does that leave?  Utah?  Everyone move to Utah!

Aaron


-Original Message-
From: Jack Bates [mailto:[EMAIL PROTECTED] 
Sent: Friday, December 05, 2008 9:34 AM
To: David Cantrell
Cc: nanog@nanog.org
Subject: Re: Telecom Collapse?

David Cantrell wrote:
> A "natural disaster prone location" would, by a normal person, be
> taken to be one where there is a high probability of being visited by
> nature's Fuckup Fairies.  Such as flood plains (eg much of the Thames
> estuary) and the sides of active volcanoes (Naples).  Most places have
> a very *low* probability of being visited by the fuckup fairy.

Yeah, I've been telling them for years that everyone should just vacate 
Oklahoma, and Kansas. Between tornados and severe storms, these states 
should be off limits. Of course, we all know people on the west coast 
are nuts. Must be the earthquakes shaking their brains around.


Jack




Peering Personals BoF NANOG45, Attention Peering Coordinators

2008-12-19 Thread Aaron Hughes
Peering Coordinators,

Reminder:

The deadline is approaching quickly and thus far, I have 4 companies that would 
like to introduce themselves.  Please be sure to send me your info if you are 
interested in introducing yourself or your network to the greater peering 
community.

For those of you who may be thinking . o O ("I've got until the end of the 
month"), please keep in mind that for many of you, today is that day with 
vacation time / the holidays.  So please spend 30 seconds sending the form to 
me today. :)

Thank you fellow peers!

Cheers,

Aaron

> Attention Peering Coordinators,
> 
> NANOG45 is approaching quickly and it's time to get our Peering Personals 
> participants lined up for the Peering BoF.
> 
> Peering Personals is part of the Peering BoF (Birds Of a Feather) session and 
> provides a forum for Peering Coordinators to meet each other with the goal of 
> establishing peering relationships.
> 
> Participating Peering Coordinators will complete and email the form below to 
> the Peering BOF moderator in advance of the BOF.
> 
> Peering Coordinators will have ~two minutes at the BOF to introduce 
> themselves, their networks, where they currently peer and where they intend 
> to be peering in the next several months, a little bit about what they 
> require of potential peers and what they are looking for in a peering 
> candidate. Peering Coordinators who would like to participate in Peering 
> Introductions should e-mail the following information to aar...@bind.com with 
> the subject of "NANOG 45 Peering BOF" no later than Dec 31, 2008.:
> 
> Name: _
> Company:__
> AS#: _
> Email Address: 
> Peering Locations Today: __
> Peering Locations in the next 3-6 months: 
> Is your network more Content-Heavy or Access-Heavy ?
> Do you source/sink more than 5Gbps of traffic?
> Do you require Contracts for Peering?
> Do you have an "Open Peering Policy (meaning you will peer with anyone in any 
> single location), "Selective Peering Policy (meaning you will peer but have 
> some prerequisites that must be met first)?, or "Restrictive Peering Policy 
> (meaning you generally will not peer with anybody else)?"
> 
> If you have any questions, don't hesitate to send me an e-mail.
> 
> Cheers,
> 
> Aaron
> 
> -- 
> 
> Aaron Hughes 
> aar...@bind.com
> (703) 244-0427
> Key fingerprint = AD 67 37 60 7D 73 C5 B7 33 18 3F 36 C3 1C C6 B8
> http://www.bind.com/

-- 

Aaron Hughes 
aar...@bind.com
(703) 244-0427
Key fingerprint = AD 67 37 60 7D 73 C5 B7 33 18 3F 36 C3 1C C6 B8
http://www.bind.com/



Single carrier multi-circuit asynchronous routing issue

2009-01-07 Thread Aaron Millisor
I am curious to know if anyone has else has hit a problem like the one I 
am running into right now.


I have two DS3 DIA's in my router, terminating on two separate routers 
at Sprint. We peer with BGP and I am prepending certain of my prefixes 
to balance the traffic load.


src  __dst
1.1.1.0 ||- ds3 #1 -| sprint 1 |--(  ) 2.2.2.0
--- |me  |( internet ) ---
||(  )
||   __   (  )
||- ds3 #2 -| sprint 2 |--(  )


If I were to prepend the network 1.1.1.0 to come in on 'sprint 1', but 
have a route to 2.2.2.0 via 'sprint 2' so that traffic comes in on one 
circuit but returns on the other, routing is broken. If I change my 
route so that packets directed to 2.2.2.0 return on the same circuit 
that the traffic is received on, everything works fine.


Has anyone else run into an issue like this before?


-- am




[no subject]

2009-01-11 Thread Aaron Imbrock
Stop

 



RE: Cogent Haiku v2.0

2009-01-12 Thread Aaron Wendel
NANOG has admins
They waste a lot of time now
Maybe paid to much


-Original Message-
From: Murphy, Jay, DOH [mailto:jay.mur...@state.nm.us] 
Sent: Monday, January 12, 2009 11:57 AM
To: Mike Bartz; neal rauhauser
Cc: nanog@nanog.org
Subject: RE: Cogent Haiku v2.0

Level 3 has gear.
Bleeding edge technology.
Get huge pipes right now.


Jay Murphy 
IP Network Specialist 
NM Department of Health 
ITSD - IP Network Operations 
Santa Fe, New Mexico 87502 
Bus. Ph.: 505.827.2851

"We move the information that moves your world." 






-Original Message-
From: Mike Bartz [mailto:m...@bartzfamily.net] 
Sent: Monday, January 12, 2009 10:54 AM
To: neal rauhauser
Cc: nanog@nanog.org
Subject: Re: Cogent Haiku v2.0

I like the haiku!  On a serious note, we are considering getting a
connection from Cogent.  We currently have connections to at&t, Level
3 and TW Telecom.  The low cost and high number of peer AS number's
seems appealing to us.  Every carrier has its issues, so I don't know
what to make of the apparent negativity that I am seeing in these
haiku threads.  I am looking for some first hand experiences to help
me make this decision.

Thanks for any assistance!

Mike


On Sun, Jan 11, 2009 at 9:59 PM, neal rauhauser 
wrote:
> Cogent makes a mess
> My phone rings and rings
> Unfornicate this!
>



-- 
Mike Bartz
m...@bartzfamily.net


__
This inbound email has been scanned by the MessageLabs Email Security
System.
__


Confidentiality Notice: This e-mail, including all attachments is for the
sole use of the intended recipient(s) and may contain confidential and
privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited unless specifically provided under the New Mexico
Inspection of Public Records Act. If you are not the intended recipient,
please contact the sender and destroy all copies of this message. -- This
email has been scanned by the Sybari - Antigen Email System. 








Re: Single carrier multi-circuit asynchronous routing issue

2009-01-20 Thread Aaron Millisor
Thank you both. Strict mode uRPF was indeed the problem. Took awhile for 
them to fix it for me, but at least it's fixed.


-- am

Anders Lindbäck wrote:

On 7 jan 2009, at 21.05, Niels Bakker wrote:

* aaron.milli...@bright.net (Aaron Millisor) [Wed 07 Jan 2009, 20:53 
CET]:

[..]
If I were to prepend the network 1.1.1.0 to come in on 'sprint 1', 
but have a route to 2.2.2.0 via 'sprint 2' so that traffic comes in 
on one circuit but returns on the other, routing is broken. If I 
change my route so that packets directed to 2.2.2.0 return on the 
same circuit that the traffic is received on, everything works fine.


You might be running into uRPF (unicast reverse path forward 
verification).



-- Niels.



Strict-mode uRPF will couse this, I am sure sprint support can help you 
with it..


--
Anders Lindbäck
anders.lindb...@dnz.se







Re: isprime DOS in progress

2009-01-21 Thread Aaron Hopkins

On Wed, 21 Jan 2009, Phil Rosenthal wrote:
This attack has been ongoing on 66.230.128.15/66.230.160.1 for about 24 hours 
now, and we are receiving roughly 5Gbit of attack packets from roughly 
750,000 hosts.


I'm only receiving NS queries for "." from spoofed 66.230.128.15 and
66.230.160.1 via above.net (of my three transit providers) and none from
peering.  This usually indicates a single source, such as one rooted machine
on non-BCP38 net spewing most of a gigabit.

Given the attack is still in progress, I can't really say much more publicly, 
but suffice to say, we're working on the situation.


Have you had any luck tracking back the source of the spoofed packets?If
me talking to above.net sounds useful, let me know.

    -- Aaron



Re: 97.128.0.0/9 allocation to verizon wireless

2009-02-08 Thread Aaron Glenn
On Sat, Feb 7, 2009 at 8:06 PM, Jeffrey Lyon
 wrote:
> Whatever happened to NAT?
>
> Jeff

NAT? why isn't Verizon 'It's the Network' Wireless using IPv6?
there should be a FOIA-like method to see large
allocation justifications



Re: 97.128.0.0/9 allocation to verizon wireless

2009-02-08 Thread Aaron Glenn
On Sun, Feb 8, 2009 at 4:07 PM, Mark Andrews  wrote:
>
>I don't see any reason to complain based on those numbers.
>It's just a extremely high growth period due to technology
>change over bring in new functionality.

so if they don't deploy IPv6 then ('extremely high growth period'),
when will they? I don't presume to speak for everyone who immediately
felt that tinge of surprise at reading of a /9 being allocated, but
the blame is being laid on vzw not doing something other than 'can we
have a /9 please?' --not ARIN and/or it's policies (another mailing
list, duly noted)



Re: Fiber cut in SF area

2009-04-09 Thread Aaron Hughes
200 Paul Ave is seeing several carriers down.  I am also in Santa Cruz and 
cannot make or receive long distance calls on my land lines.  Unconfirmed 
reports of Caltrain cut.

Cheers,

Aaron

On Thu, Apr 09, 2009 at 03:37:14PM +, Stefan Molnar wrote:
> 
> VZ in the South Bay (San Jose) is out.   As per news reports I watched at 6am 
> PDT.
> 
> 
> --Original Message--
> From: Craig Holland
> To: NANOG
> Subject: Fiber cut in SF area
> Sent: Apr 9, 2009 8:14 AM
> 
> Just dropping a note that there is a fiber cut in the SF area (I have a
> metro line down).  AboveNet is reporting issues and I've heard unconfirmed
> reports that ATT and VZW are affected as well.
> 
> Rgs,
> craig
> 
> 
> 
> 
> 
> 

-- 

Aaron Hughes 
aar...@bind.com
(703) 244-0427
Key fingerprint = AD 67 37 60 7D 73 C5 B7 33 18 3F 36 C3 1C C6 B8
http://www.bind.com/



Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-09 Thread Aaron Glenn
On Thu, Apr 9, 2009 at 4:55 PM, Rod Beck  wrote:
> Hold on. Who says this sabotage?

the hacksaw that was taken to two manholes within two hours of each
other? I'd love to see the RFO explaining an accident like that.



RE: Important New Requirement for IPv4 Requests

2009-04-20 Thread Aaron Wendel
I think this needlessly involves people who probably don't have a clue in an
area we may not really want them involved in.  I can hear the conversation
now:

Officer:  "Why do I have to sign this thing?"

Tech:  "Well your graciousness.  We are coming to the end of the available
address space and the gods at ARIN want to make you aware of that so you
might approve that request I made for new equipment to deploy IPv6 with."

Officer:  "Huh?  Do we need it?"

Tech: "Yes, we need the address space."

Officer: "And they're running out?"

Tech:  "Well out of the v4 space which is what we use now but we can move to
v6 space and..."

Officer:  "Hell, request 10x as much space!  I'll sign anything as long as
we don't run out and have to spend money!" 


For me, I request all the allocations and I'm also an officer of the company
so I'll just attest to my own stuff but I can see this would be a nightmare
in a larger company.

There was also an e-mail about outreach to the CEOs of all the companies
with resources.  At my company the CEO will hand it to me without even
opening it.  I assume that in many larger companies it "might" get glanced
at by the CEO or CEOs secretary before it gets shredded.

While I completely understand the reasons behind both initiatives I don't
think they'll have the desired effect.

Aaron




-Original Message-
From: Matthew Moyle-Croft [mailto:m...@internode.com.au] 
Sent: Monday, April 20, 2009 9:56 PM
To: Joe Greco
Cc: nanog@nanog.org
Subject: Re: Important New Requirement for IPv4 Requests

ARIN should ask companies to demonstrate:

- demonstration of routing of an IPv6 range/using IPv6 address space
- demonstration of services being offered over IPv6
- a plan to migrate customers to IPv6
- automatic allocation of IPv6 range instead of IPv4 for those who  
can't do so.

ie.  No more IPv4 for you until you've shown IPv6 clue.

Then people can't just get away with driving into the brick wall of  
IPv4-allocation fail.

(Not sure if I'm serious about this suggestion, but it's there now).

MMC


On 21/04/2009, at 9:09 AM, Joe Greco wrote:


>
> Let me see if I can understand this.
>
> We're running out of IPv4 space.
>
> Knowing that blatant lying about IP space justifications has been an
> ongoing game in the community, ARIN has decided to "do something"  
> about
> it.
>
> So now they're going to require an attestation.  Which means that they
> are going to require an "officer" to "attest" to the validity of the
> information.
>
> So the "officer," most likely not being a technical person, is going  
> to
> contact ...  probably the same people who made the request, ask them  
> if
> they need the space.  Right?
>
> And why would the answer be any different, now?
>
> ... JG
> -- 
> Joe Greco - sol.net Network Services - Milwaukee, WI - http://www.sol.net
> "We call it the 'one bite at the apple' rule. Give me one chance  
> [and] then I
> won't contact you again." - Direct Marketing Ass'n position on e- 
> mail spam(CNN)
> With 24 million small businesses in the US alone, that's way too  
> many apples.
>

-- 
Matthew Moyle-Croft
Networks, Internode/Agile
Level 5, 162 Grenfell Street, Adelaide, SA 5000 Australia
Email: m...@internode.com.auWeb: http://www.on.net
Direct: +61-8-8228-2909  Mobile: +61-419-900-366
Reception: +61-8-8228-2999Fax: +61-8-8235-6909





Re: 大和一家[00267] ニコ動の私の動画が消される…!

2009-04-28 Thread Aaron Finley
Yahoo!グループからの重要なお知らせがメール下部にございます。ご確認ください。
---
Bad day?

Steven Walker wrote:
> STOP SENDING ME BULLSHIT
> 
>> To: tamanoyam...@yahoogroups.jp
>> From: alamiki1...@yahoo.co.jp
>> Date: Tue, 28 Apr 2009 15:12:53 +0900
>> Subject: 大和一家[00240] ニコ動の私の動画が消される…!
>>
>> 日付 : 2009年02月03日 (火)
>> 件名 : ニコ動の私の動画が消される…!
>>    続けて書いちゃいますが。ずっと書きたかったこと。
>>
>>  
>> ニコニコ動画、みんな知ってますよね。著作者でJASRAC会員の私が推奨しちゃいけないけど、おもしろいから見てますよー。夫に無理矢理見せられてるのもあるけど。テレビ神奈川のアニメ『天体戦士サンレッド』。これおもしろいw
>>  テレビ神奈川は自ら放送済みのものをニコ動で流しているので何の問題もないです。テレビ神奈川偉い!
>>  
>> ヴァンプさん最高です!!(人が良くて天然でお料理好きで世話好きなところが、どうしても友達のゲイの子とキャラがかぶるんですが…)ピーちゃんも好き。リーサル・ウェポンだけど一度発動すると充電に8時間かかるとことか(笑)

ヘルプページ:   http://help.yahoo.co.jp/help/jp/groups/
グループページ: http://groups.yahoo.co.jp/group/TamanoYamato/ 
グループ管理者: mailto:tamanoyamato-ow...@yahoogroups.jp 
 

・モバイル: http://rd.yahoo.co.jp/egroups/050616info/1.html
・移行手続: http://rd.yahoo.co.jp/egroups/050616info/2.html
・利用規約: http://rd.yahoo.co.jp/egroups/050616info/3.html 
 
---
【Yahoo!グループからのお知らせ】Yahoo!グループは7月7日にリニューアルします。
詳しくは「お知らせ」をご覧下さい。
http://groups.yahoo.co.jp/local/notice/sw.html




RE: UCEProtect Level 3

2009-05-07 Thread Aaron Wendel
Yes.  Is that a problem?



-Original Message-
From: Raleigh Apple [mailto:rap...@rapidlink.com] 
Sent: Thursday, May 07, 2009 1:34 PM
To: nanog@nanog.org
Subject: UCEProtect Level 3

Is anyone else out there aware that the UCEProtect Level 3 email 
blacklist blocks entire AS?

r





Re: NPE-G2 vs. Sup720-3BXL

2009-05-15 Thread Aaron Millisor
We ran into a similar quandary and have about the same amount of traffic as your 
network. When purchasing gear a year ago we decided against 7200's with an 
NPE-G2 as insufficient for the load.  Have you looked at the 7304?


The Cisco 7304 with an NSE-150 processing engine on it offloads a lot of the 
packet processing to dedicated hardware, and doesn't have TCAM limitations for 
routes. You can hold several full feeds and do the amount of traffic you're 
talking about without breaking a sweat.


http://www.cisco.com/en/US/prod/collateral/routers/ps352/prod_bulletin0900aecd8060aac5.html

It is capable of supporting both legacy port adapters (from your Flexwan or 7200 
routers) and SPA cards with the right add-in modules, which IIRC is only a few 
hundred dollars.


I'd be glad to answer any questions you have about our implementation.

--am

David Storandt wrote:

We're stuck in an engineering pickle, so some experience from this
crew would be useful in tie-breaking...

We operate a business-grade FTTx ISP with ~75 customers and 800Mbps of
Internet traffic, currently using 6509/Sup2s for core routing and port
aggregation. The MSFC2s are under stress from 3x full route feeds,
pared down to 85% to fit the TCAM tables. One system has a FlexWAN
with an OC3 card and it's crushing the CPU on the MSFC2. System tuning
(stable IOS and esp. disabling SPD) helped a lot but still doesn't
have the power to pull through. Hardware upgrades are needed...

We need true full routes and more CPU horsepower for crunching BGP
(+12 smaller peers + ISIS). OC3 interfaces are going to be mandatory,
one each at two locations. Oh yeah, we're still a larger startup
without endless pockets. Power, rack space, and SmartNet are not
concerns at any location (on-site cold spares). We may need an
upstream OC12 in the future but that's a ways out and not a concern
here.

Our engineering team has settled on three $20k/node options:
- Sup720-3BXLs with PS and fan upgrades
- Sup2s as switches + ISIS + statics and no BGP, push BGP edge routing
off to NPE-G2s across a 2-3Gbps port-channel
- Sup2s as switches + ISIS + statics and no BGP, push BGP edge routing
off to a 12008 with E3 engines across a 2-3Gbps port-channel.

Ideas and constructive opinions welcome, especially software and
stability-related.

Many thanks,
-Dave




Re: NPE-G2 vs. Sup720-3BXL

2009-05-15 Thread Aaron Millisor
Yeah, as long as you're using the NSE-150 and are using features supported by 
the PXF such that it's not punting to the RP, the performance is really good.


--am

Brian Feeny wrote:


I have used the 7304 in the past and was happy with it.  In fact I still 
have a 6-port DS3 module for a 7304 which I need to find a home for if 
anyone has the need.


The 7304 originally had its own specific modules that went into it.  But 
they also sell carrier card for it so you can use standard PA's, as well 
as the SPA's which is nice.  Overall footprint is rather nice, and I use 
to use those 6-port DS3 cards which allowed for hefty DS3 termination.


Brian

On May 15, 2009, at 12:44 PM, Aaron Millisor wrote:

We ran into a similar quandary and have about the same amount of 
traffic as your network. When purchasing gear a year ago we decided 
against 7200's with an NPE-G2 as insufficient for the load.  Have you 
looked at the 7304?


The Cisco 7304 with an NSE-150 processing engine on it offloads a lot 
of the packet processing to dedicated hardware, and doesn't have TCAM 
limitations for routes. You can hold several full feeds and do the 
amount of traffic you're talking about without breaking a sweat.


http://www.cisco.com/en/US/prod/collateral/routers/ps352/prod_bulletin0900aecd8060aac5.html 



It is capable of supporting both legacy port adapters (from your 
Flexwan or 7200 routers) and SPA cards with the right add-in modules, 
which IIRC is only a few hundred dollars.


I'd be glad to answer any questions you have about our implementation.

--am

David Storandt wrote:

We're stuck in an engineering pickle, so some experience from this
crew would be useful in tie-breaking...
We operate a business-grade FTTx ISP with ~75 customers and 800Mbps of
Internet traffic, currently using 6509/Sup2s for core routing and port
aggregation. The MSFC2s are under stress from 3x full route feeds,
pared down to 85% to fit the TCAM tables. One system has a FlexWAN
with an OC3 card and it's crushing the CPU on the MSFC2. System tuning
(stable IOS and esp. disabling SPD) helped a lot but still doesn't
have the power to pull through. Hardware upgrades are needed...
We need true full routes and more CPU horsepower for crunching BGP
(+12 smaller peers + ISIS). OC3 interfaces are going to be mandatory,
one each at two locations. Oh yeah, we're still a larger startup
without endless pockets. Power, rack space, and SmartNet are not
concerns at any location (on-site cold spares). We may need an
upstream OC12 in the future but that's a ways out and not a concern
here.
Our engineering team has settled on three $20k/node options:
- Sup720-3BXLs with PS and fan upgrades
- Sup2s as switches + ISIS + statics and no BGP, push BGP edge routing
off to NPE-G2s across a 2-3Gbps port-channel
- Sup2s as switches + ISIS + statics and no BGP, push BGP edge routing
off to a 12008 with E3 engines across a 2-3Gbps port-channel.
Ideas and constructive opinions welcome, especially software and
stability-related.
Many thanks,
-Dave






RE: Why choose 120 volts?

2009-05-26 Thread Aaron Wendel
Our power is handed to us at 480v.  We then deliver it to the customer at 
whatever they need.  The nice thing about 120v is that everything uses it.  No 
odd cords (as mentioned before) or expensive PDUs.

I've had a lot of people suggest that running our servers at 240v would save us 
money because we'd use less amps.  Last time I looked at my bill I was being 
billed by the kWh, not amp and 240v at half the amps is still the same wattage. 
 I've been told this so many times though that I'm starting to doubt myself.  
If anyone can present a reason for me to switch to 240v I'd like to hear it.

Aaron


-Original Message-
From: Seth Mattinen [mailto:se...@rollernet.us] 
Sent: Tuesday, May 26, 2009 2:39 PM
To: nanog@nanog.org
Subject: Why choose 120 volts?

I have a pure curiosity question for the NANOG crowd here. If you run
your facility/datacenter/cage/rack on 120 volts, why?

I've been running my facility at 208 for years because I can get away
with lower amperage circuits. I'm curious about the reasons for using
high-amp 120 volt circuits to drive racks of equipment instead of
low-amp 208 or 240 volt circuits.

~Seth





AOL Postmaster

2009-06-01 Thread Aaron Wendel
Is anyone from AOL lurking on the list that could contact me of-list?  I'm
having some issues with mail being rejected because AOL believes our IPs are
dynamic.

Aaron





RE: AOL Postmaster

2009-06-01 Thread Aaron Wendel
Yes.  For the last 2 months I've been getting the nice auto reply/ticket
number but no other contact.

Aaron


-Original Message-
From: Mike Walter [mailto:mwal...@3z.net] 
Sent: Monday, June 01, 2009 12:23 PM
To: nanog@nanog.org
Subject: RE: AOL Postmaster

Have you been through http://postmaster.aol.com/?

Mike

-Original Message-
From: Aaron Wendel [mailto:aa...@wholesaleinternet.com] 
Sent: Monday, June 01, 2009 12:48 PM
To: nanog@nanog.org
Subject: AOL Postmaster

Is anyone from AOL lurking on the list that could contact me of-list?
I'm
having some issues with mail being rejected because AOL believes our IPs
are
dynamic.

Aaron








Re: Cogent input - no peering with Global Crossing in Europe [Re: NANOG Digest, Vol 17, Issue 46]

2009-06-18 Thread Aaron Glenn
On Wed, Jun 17, 2009 at 4:32 PM, Charles Wyble wrote:
> Ouch... latency must be awful.
>
> I suppose this is based on Cogents reputation but who knows. The whole
> peering aspect of the networking business is often a mystery.

I dont think it is any mystery Cogent doesn't have many friends in the
European IP market...



Re: tor

2009-06-25 Thread Aaron Porter
On Wed, Jun 24, 2009 at 8:50 PM, Suresh
Ramasubramanian wrote:
> Running what's effectively an anonymous open proxy is not a bright
> idea, even if there's security bundled on..
>
> John Gilmore found that out after Verio disconnected his perpetual
> open relay for example ..  and TOR is just as nutty a concept.
>
> Nothing less that I'd expect from the EFF, frankly speaking - but
> clued people (and you are clued, for sure) shouldnt be running it.

Would you feel better if instead of "Tor" it was called "Crowds" and
instead of those rapscallions at the EFF it was a nice respectable
AT&T Research project from Avi Ruben? I bet I still have my "Anonymity
Loves Company" shirt somewhere... Anonymous speech is a vital concept
if you expect Free speech.

http://avirubin.com/crowds.pdf



Re: cisco.com

2009-08-04 Thread Aaron Millisor
Not sure the ETA but the network that the address for cisco.com resolves 
to (198.133.219.0/24) is no longer in BGP.


--
-
Aaron Millisor




R. Benjamin Kessler wrote:
Hey Gang - 


I'm unable to get to cisco.com from multiple places on the 'net
(including downforeveryoneorjustme.com); any ideas on the cause and ETR?

Thanks,

Ben






Hurricane Electric AS6939

2020-10-13 Thread Aaron Gould
Do y’all like HE for Internet uplink?  I’m thinking about using them for 100gig 
in Texas.  It would be for my eyeballs ISP.  We currently have Spectrum, Telia 
and Cogent.

-Aaron


Re: 10g residential CPE

2020-12-26 Thread Aaron Wendel
We run MikroTik RB4011s for residential speeds between 1G and 10G or just 
supply a media converter.  For residential 40G and 100G we just drop in Arista 
or Extreme switches.  SMBs are normally just a media converter or direct fiber 
handoff.

https://mikrotik.com/product/rb4011igs_5hacq2hnd_in

There are not a lot of options for good, off the shelf 10G CPE equipment.  The 
handful of 10G residential customers we have seem to be happy with the tik.  
The couple that don’t use it have rolled their own solution.

Like anything, I’m sure once the major home broadband providers start to catch 
up with us smaller guys the vendors will catch up as well.

https://www.kcfiber.com/residential

Aaron


> On Dec 26, 2020, at 11:53 AM, Mel Beckman  wrote:
> 
> 
>> 
>> i really don't get what the problem is. it's like they're being deliberately 
>> obtuse. 
> 
> Michael,
> 
> If vendors saw a 10GbE CPE market, they would serve it. Obviously they don’t 
> see a market. Why don’t people insisting vendors build their hobby horse see 
> that? It’s like they’re being deliberately obtuse :)
> 
> -mel via cell
> 
>> On Dec 26, 2020, at 9:16 AM, Michael Thomas  wrote:
>> 
>> 
>>>> On 12/26/20 8:00 AM, Valdis Klētnieks wrote:
>>> 
>>> Anybody got a feel for what percent of the third-party gear currently sold 
>>> to
>>> consumers has sane bufferbloat support in 2020, when we've *known* that
>>> de-bufferbloated gear is a viable differentiatior if marketed right 
>>> (consider the
>>> percent of families that have at least one gamer who cares)?
>>> 
>> I don't know percentages, but just trying to find cpe that support it in 
>> their specs is depressingly small. considering that they're all using linux 
>> and queuing discipline software is ages old, i really don't get what the 
>> problem is. it's like they're being deliberately obtuse. given all of the 
>> zoom'ing happening now you think that somebody would hit them with the 
>> clue-bat that this is a marketing opportunity.
>> 
>> Mike
>> 


Re: 10g residential CPE

2020-12-28 Thread Aaron Wendel

Darin,

We charge a $300 one time install charge to cover our costs on the 1G 
service (which can be paid out at $25/mo if you can't afford $300 all at 
once).


The area we serve is mainly lower and lower-middle-class income with an 
80% transient population.  Seven years ago, when "digital divide" and 
"digital literacy" were the buzz words, we instituted our "free" 1G 
service in an effort to level the playing field for the population who, 
otherwise, can't afford internet at all, let alone at that speed.  Until 
recently we didn't charge for residential service at any tier.  Rather 
than putting in "income tiers", making people fill out applications for 
assistance, etc. we just made it free for everyone.  We also provide 
free 100G service to the local school district as well as free service 
to local government, police, fire stations (Firemen (and women) had to 
pay for their own internet to use while they were on duty before us), 
library, churches and other non-profits.


That's the why.  The how is that we control a LOT of fiber in the metro 
area that is in use by a lot of very large providers that everyone's 
heard of.  We make enough money doing that so we don't feel the need to 
charge the residences for a basic level of service.


Aaron


On 12/26/2020 12:48 PM, Darin Steffl wrote:

Aaron,

One simple question. Why on earth would you offer free internet 
service? How and why? Your site show 1 Gig symmetrical for free when 
you should be a minimum of $65 per month to be competitive.


On Sat, Dec 26, 2020, 12:31 PM Aaron Wendel 
mailto:aa...@wholesaleinternet.net>> wrote:


We run MikroTik RB4011s for residential speeds between 1G and 10G
or just supply a media converter.  For residential 40G and 100G we
just drop in Arista or Extreme switches.  SMBs are normally just a
media converter or direct fiber handoff.

https://mikrotik.com/product/rb4011igs_5hacq2hnd_in
<https://mikrotik.com/product/rb4011igs_5hacq2hnd_in>

There are not a lot of options for good, off the shelf 10G CPE
equipment.  The handful of 10G residential customers we have seem
to be happy with the tik.  The couple that don’t use it have
rolled their own solution.

Like anything, I’m sure once the major home broadband providers
start to catch up with us smaller guys the vendors will catch up
as well.

https://www.kcfiber.com/residential
<https://www.kcfiber.com/residential>

Aaron



On Dec 26, 2020, at 11:53 AM, Mel Beckman mailto:m...@beckman.org>> wrote:



i really don't get what the problem is. it's like they're being
deliberately obtuse.


Michael,

If vendors saw a 10GbE CPE market, they would serve it. Obviously
they don’t see a market. Why don’t people insisting vendors build
their hobby horse see that? It’s like they’re being deliberately
obtuse :)

-mel via cell


On Dec 26, 2020, at 9:16 AM, Michael Thomas mailto:m...@mtcc.com>> wrote:



On 12/26/20 8:00 AM, Valdis Klētnieks wrote:

Anybody got a feel for what percent of the third-party gear
currently sold to
consumers has sane bufferbloat support in 2020, when we've
*known* that
de-bufferbloated gear is a viable differentiatior if marketed
right (consider the
percent of families that have at least one gamer who cares)?


I don't know percentages, but just trying to find cpe that
support it in their specs is depressingly small. considering
that they're all using linux and queuing discipline software is
ages old, i really don't get what the problem is. it's like
they're being deliberately obtuse. given all of the zoom'ing
happening now you think that somebody would hit them with the
clue-bat that this is a marketing opportunity.

Mike



--

Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: 10g residential CPE

2020-12-28 Thread Aaron Wendel

One.  For an employee.  Primarily just to say we had done it. :)

Aaron


On 12/26/2020 4:15 PM, Lady Benjamin PD Cannon wrote:

Have you done any 100g Residential connections?

—L.B.

Lady Benjamin PD Cannon, ASCE
6x7 Networks & 6x7 Telecom, LLC
CEO
b...@6by7.net <mailto:b...@6by7.net>
"The only fully end-to-end encrypted global telecommunications company 
in the world.”

FCC License KJ6FJJ


On Dec 26, 2020, at 10:30 AM, Aaron Wendel 
mailto:aa...@wholesaleinternet.net>> wrote:


We run MikroTik RB4011s for residential speeds between 1G and 10G or 
just supply a media converter.  For residential 40G and 100G we just 
drop in Arista or Extreme switches.  SMBs are normally just a media 
converter or direct fiber handoff.


https://mikrotik.com/product/rb4011igs_5hacq2hnd_in 
<https://mikrotik.com/product/rb4011igs_5hacq2hnd_in>


There are not a lot of options for good, off the shelf 10G CPE 
equipment.  The handful of 10G residential customers we have seem to 
be happy with the tik.  The couple that don’t use it have rolled 
their own solution.


Like anything, I’m sure once the major home broadband providers start 
to catch up with us smaller guys the vendors will catch up as well.


https://www.kcfiber.com/residential <https://www.kcfiber.com/residential>

Aaron


On Dec 26, 2020, at 11:53 AM, Mel Beckman <mailto:m...@beckman.org>> wrote:



i really don't get what the problem is. it's like they're being 
deliberately obtuse.


Michael,

If vendors saw a 10GbE CPE market, they would serve it. Obviously 
they don’t see a market. Why don’t people insisting vendors build 
their hobby horse see that? It’s like they’re being deliberately 
obtuse :)


-mel via cell

On Dec 26, 2020, at 9:16 AM, Michael Thomas <mailto:m...@mtcc.com>> wrote:




On 12/26/20 8:00 AM, Valdis Klētnieks wrote:

Anybody got a feel for what percent of the third-party gear 
currently sold to
consumers has sane bufferbloat support in 2020, when we've *known* 
that
de-bufferbloated gear is a viable differentiatior if marketed 
right (consider the

percent of families that have at least one gamer who cares)?

I don't know percentages, but just trying to find cpe that support 
it in their specs is depressingly small. considering that they're 
all using linux and queuing discipline software is ages old, i 
really don't get what the problem is. it's like they're being 
deliberately obtuse. given all of the zoom'ing happening now you 
think that somebody would hit them with the clue-bat that this is a 
marketing opportunity.


Mike





--

Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: 10g residential CPE

2020-12-28 Thread Aaron Wendel

No.  Google still operates their plant in the KC area.

Aaron


On 12/27/2020 4:06 AM, Mark Tinka wrote:



On 12/26/20 20:30, Aaron Wendel wrote:



https://www.kcfiber.com/residential 
<https://www.kcfiber.com/residential>


Curious, any chance you took over Google's fibre project :-)?

Mark.


--
====
Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: 10g residential CPE

2020-12-28 Thread Aaron Wendel
Actually our free service doesn't have limitations, has an SLA, no 
time/term restrictions, a CPE, support, etc.  I explained the "why" in a 
different post so I won't go over it again.  98% of our residential 
customers are on the free plan.


Aaron


On 12/27/2020 4:38 AM, Mark Tinka wrote:



On 12/26/20 20:48, Darin Steffl wrote:


Aaron,

One simple question. Why on earth would you offer free internet 
service? How and why? Your site show 1 Gig symmetrical for free when 
you should be a minimum of $65 per month to be competitive.




For me, looks like a loss-leader to reel customers in, perhaps with 
some limitations, no guarantees, time/term restrictions, no CPE, no 
support, e.t.c., that make a "smooth" upgrade to 2Gbps or 3Gbps more 
sensible.


My theory would be that getting customers on to the platform is the 
hardest step. Once they're on, pivoting them isn't difficult, 
particularly if you nabbed them from a competitor that was charging 
them some $$ for 10Mbps.


Think about it, they don't offer a "Multi-Gigabit Wireless Router" 
with the 1Gbps service. Chances are the customers who choose this 
package either have a crappy device, or will likely buy a crappy 
device on their own. They'd never trouble the 1Gbps product, probably 
call KC Fiber for to complain about not getting 1Gbps, upon which KC 
Fiber recommend their own CPE, a more guaranteed package, e.t.c., and 
in comes the 2Gbps or higher, revenue-generating service.


One the network side, it's just the same port, different (cheap) 
optic. A cheap port in use for free is better than an unused port, if 
the switch and fibre are already installed, and at less than 60% take-up.


It's creative, I like it!



Mark.



--

Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: 10g residential CPE

2020-12-28 Thread Aaron Wendel
The $300 covers the equipment and the time to send someone out to a 
house to install it.  If $300 is too much you can pay in 12 installments 
of $25.


The TIK alone costs us about $250.

Aaron


On 12/27/2020 5:04 AM, Mark Tinka wrote:



On 12/26/20 20:48, Darin Steffl wrote:


Aaron,

One simple question. Why on earth would you offer free internet 
service? How and why? Your site show 1 Gig symmetrical for free when 
you should be a minimum of $65 per month to be competitive.


They also ask for no monthly fee after a single payment of US$300.

Considering the 2Gbps package costs US$49.95, you'd guess they'd value 
the 1Gbps service at, say US$27/month, give or take.


So that US$300 provides a bit of coverage, perhaps 1 year, in which 
time they'd have likely upgraded the customer.


Mark.


--
====
Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: 10g residential CPE

2020-12-28 Thread Aaron Wendel

Darin,

Our business support and residential support is the same department.  I 
have to pay those people to be in the office either way so it doesn't 
cost me any "more" to provide support for the residences. Yes, walking 
Grandma through getting her email can sometimes be a chore but that 
person is on the payroll whether he/she is helping Grandma or sitting 
there chatting with his/her co-worker.  If we dumped all the residential 
customers we would still have the same cost structure we do now.


Again, it's been free for the last 7 years at this point.  I've never 
been one to really do what I "should" anyway.


Aaron


On 12/28/2020 11:48 AM, Darin Steffl wrote:

Aaron,

The "Free" service doesn't cover your cost of support which is much 
higher for residential than any business customer. Our residential 
customers call at least 15x more often compared to business customers 
compared on a 1:1 ratio.


I honestly can't fathom providing free residential service because we 
make enough money on the business side of things. You should be 
charging something, at least $20-30 per month.


On Mon, Dec 28, 2020 at 11:15 AM Aaron Wendel 
mailto:aa...@wholesaleinternet.net>> wrote:


The $300 covers the equipment and the time to send someone out to a
house to install it.  If $300 is too much you can pay in 12
installments
    of $25.

The TIK alone costs us about $250.

Aaron


On 12/27/2020 5:04 AM, Mark Tinka wrote:
>
>
> On 12/26/20 20:48, Darin Steffl wrote:
>
>> Aaron,
>>
>> One simple question. Why on earth would you offer free internet
>> service? How and why? Your site show 1 Gig symmetrical for free
when
>> you should be a minimum of $65 per month to be competitive.
>
> They also ask for no monthly fee after a single payment of US$300.
>
> Considering the 2Gbps package costs US$49.95, you'd guess they'd
value
> the 1Gbps service at, say US$27/month, give or take.
>
> So that US$300 provides a bit of coverage, perhaps 1 year, in which
> time they'd have likely upgraded the customer.
>
> Mark.

-- 


Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com <http://www.wholesaleinternet.com>




--
Darin Steffl
Minnesota WiFi
www.mnwifi.com <http://www.mnwifi.com/>
507-634-WiFi
Like us on Facebook <http://www.facebook.com/minnesotawifi>


--

Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: 10g residential CPE

2020-12-28 Thread Aaron Wendel
We still build when needed. We're in the process of building to 700 new 
apartments so we can provide them with free service.  We're actually 
pulling 576 strands into the basement of one building to backhaul each 
apartment to it's own switch port in the new hut we just deployed to 
service that new development.  (we don't use a PON system.  Everyone has 
a dedicated switch port.)  Also, keep in mind that this isn't all we 
do.  This is a very small part of a much bigger pie.  So I agree with 
you.  If this was it then it would make no sense.  When you look at all 
the pieces together it makes perfect sense.


Aaron


On 12/28/2020 1:50 PM, Baldur Norddahl wrote:
I applaud your commitment to helping your local community. Just want 
to point out that this is a charity because it does not scale. Nobody 
could build out a FTTH network and make it free as a business case. 
But there are plenty of people that made a network for their neighbors 
and provided that for free. Maybe a person had a commercial fiber to 
his home and thought he could just as well share it. This might be on 
a bigger scale but it is the same.


Regards,

Baldur


On Mon, Dec 28, 2020 at 8:27 PM Aaron Wendel 
mailto:aa...@wholesaleinternet.net>> wrote:


Darin,

Our business support and residential support is the same
department.  I
have to pay those people to be in the office either way so it doesn't
cost me any "more" to provide support for the residences. Yes,
walking
Grandma through getting her email can sometimes be a chore but that
person is on the payroll whether he/she is helping Grandma or sitting
there chatting with his/her co-worker.  If we dumped all the
residential
customers we would still have the same cost structure we do now.

Again, it's been free for the last 7 years at this point. I've never
been one to really do what I "should" anyway.

Aaron


On 12/28/2020 11:48 AM, Darin Steffl wrote:
> Aaron,
>
> The "Free" service doesn't cover your cost of support which is much
> higher for residential than any business customer. Our residential
> customers call at least 15x more often compared to business
customers
> compared on a 1:1 ratio.
>
> I honestly can't fathom providing free residential service
because we
> make enough money on the business side of things. You should be
> charging something, at least $20-30 per month.
>
> On Mon, Dec 28, 2020 at 11:15 AM Aaron Wendel
> mailto:aa...@wholesaleinternet.net>
<mailto:aa...@wholesaleinternet.net
<mailto:aa...@wholesaleinternet.net>>> wrote:
>
>     The $300 covers the equipment and the time to send someone
out to a
>     house to install it.  If $300 is too much you can pay in 12
>     installments
>     of $25.
>
>     The TIK alone costs us about $250.
>
>     Aaron
>
>
>     On 12/27/2020 5:04 AM, Mark Tinka wrote:
>     >
>     >
>     > On 12/26/20 20:48, Darin Steffl wrote:
>     >
>     >> Aaron,
>     >>
>     >> One simple question. Why on earth would you offer free
internet
>     >> service? How and why? Your site show 1 Gig symmetrical
for free
>     when
>     >> you should be a minimum of $65 per month to be competitive.
>     >
>     > They also ask for no monthly fee after a single payment of
US$300.
>     >
>     > Considering the 2Gbps package costs US$49.95, you'd guess
they'd
>     value
>     > the 1Gbps service at, say US$27/month, give or take.
>     >
>     > So that US$300 provides a bit of coverage, perhaps 1 year,
in which
>     > time they'd have likely upgraded the customer.
>     >
>     > Mark.
>
>     --
>  
>     Aaron Wendel
>     Chief Technical Officer
>     Wholesale Internet, Inc. (AS 32097)
>     (816)550-9030
> http://www.wholesaleinternet.com
<http://www.wholesaleinternet.com>
<http://www.wholesaleinternet.com <http://www.wholesaleinternet.com>>
>  
>
>
>
> --
> Darin Steffl
> Minnesota WiFi
> www.mnwifi.com <http://www.mnwifi.com> <http://www.mnwifi.com/
<http://www.mnwifi.com/>>
> 507-634-WiFi
> Like us on Facebook <http://www.facebook.com/minnesotawifi
<http://www.facebook.com/minnesotawifi>>

-- 
==

Re: 10g residential CPE

2020-12-28 Thread Aaron Wendel
We prioritize calls based on severity.  If both Google and Grandma call 
and say they have a cut then we have people to service both at the same 
time.  If Google, Century Link, Verizon, AT&T and Grandma all call then 
Grandma gets to wait a day.  That being the case, it's not dependent on 
revenue. Emergency Services (911 and Police radio feeds) gets #1 
priority even though they're non-paying.


But yes, in extreme situations the residential customers would be 
delayed to service the paying customers.  We do have people cross 
trained from other parts of our businesses so we can allocate internally 
in emergencies.  In almost a decade though I can't think of a situation 
where someone had to wait for service because we didn't have the 
resources to service them.


Aaron


On 12/28/2020 2:02 PM, Mel Beckman wrote:

Darin,

Surely you at least give the paying customers priority over the 
non-paying? It’s one thing to say “I have to write paychecks no matter 
what”. It’s another to say “I’ll give away my support to free 
customers AND degrade support for paying customers as a result.” Your 
tech support guy “walking Grandma through getting her email” is 
necessarily not accessible for the duration to paying customers.


This means your staffing must be large enough to never have any 
queuing, or you’re giving away your paying customers' time to 
non-paying customers. Neither approach is scalable in a competitive 
business environment, because SOMEBODY is paying for all those 
resources, and if it’s your customers, they will buy elsewhere. Your 
approach only work until you run out of other people’s money.


  -mel

On Dec 28, 2020, at 11:50 AM, Baldur Norddahl 
mailto:baldur.nordd...@gmail.com>> wrote:


I applaud your commitment to helping your local community. Just want 
to point out that this is a charity because it does not scale. Nobody 
could build out a FTTH network and make it free as a business case. 
But there are plenty of people that made a network for their 
neighbors and provided that for free. Maybe a person had a commercial 
fiber to his home and thought he could just as well share it. This 
might be on a bigger scale but it is the same.


Regards,

Baldur


On Mon, Dec 28, 2020 at 8:27 PM Aaron Wendel 
mailto:aa...@wholesaleinternet.net>> wrote:


Darin,

Our business support and residential support is the same
department.  I
have to pay those people to be in the office either way so it
doesn't
cost me any "more" to provide support for the residences. Yes,
walking
Grandma through getting her email can sometimes be a chore but that
person is on the payroll whether he/she is helping Grandma or
sitting
there chatting with his/her co-worker.  If we dumped all the
residential
customers we would still have the same cost structure we do now.

Again, it's been free for the last 7 years at this point.  I've
never
been one to really do what I "should" anyway.

Aaron


On 12/28/2020 11:48 AM, Darin Steffl wrote:
> Aaron,
>
> The "Free" service doesn't cover your cost of support which is
much
> higher for residential than any business customer. Our residential
> customers call at least 15x more often compared to business
customers
> compared on a 1:1 ratio.
>
> I honestly can't fathom providing free residential service
because we
> make enough money on the business side of things. You should be
> charging something, at least $20-30 per month.
>
> On Mon, Dec 28, 2020 at 11:15 AM Aaron Wendel
> mailto:aa...@wholesaleinternet.net>
<mailto:aa...@wholesaleinternet.net
<mailto:aa...@wholesaleinternet.net>>> wrote:
>
>     The $300 covers the equipment and the time to send someone
out to a
>     house to install it.  If $300 is too much you can pay in 12
>     installments
>     of $25.
>
>     The TIK alone costs us about $250.
>
    >     Aaron
>
>
>     On 12/27/2020 5:04 AM, Mark Tinka wrote:
>     >
>     >
>     > On 12/26/20 20:48, Darin Steffl wrote:
>     >
>     >> Aaron,
>     >>
>     >> One simple question. Why on earth would you offer free
internet
>     >> service? How and why? Your site show 1 Gig symmetrical
for free
>     when
>     >> you should be a minimum of $65 per month to be competitive.
>     >
>     > They also ask for no monthly fee after a single payment
of US$300.
>     >
>     > Considering the 2Gbps package costs US$49.95, you'd guess
they'd
>     value
>     > the 1Gbps service at, say US$27/month, give or 

Re: 10g residential CPE

2020-12-29 Thread Aaron Wendel
Oh, we still get calls about speed issues. It's always wonderful when 
someone puts their own 10 year old Linksys WRT54G and double NATs behind 
our CPE then sends in a speed test wondering why they're only getting 
10Mbits on their Gbit line.  We get those ALL the time. :)


On 12/29/2020 1:28 AM, Mark Tinka wrote:



On 12/29/20 04:41, Keith Medcalf wrote:

Are you sure that is not related to "residential services" being of a 
generally lower quality than business services?  It has been my 
experience that shoddy service generates higher need for "support" 
than does "non-shoddy" service.  In this regard, the price for 
"business" services should be less than "residential service" by a 
couple of orders of magnitude since it costs orders of magnitude more 
money to "support" shoddy services than non-shoddy services.


Considering that Aaron said 98% of their residential customers are on 
the free plan, and that they use Active-E with every 1Gbps customer 
getting a proper switch port, I'd hazard the bulk of their support 
queries to be non-techie customers needing software support (grandma, 
et al), or fibres being cut.


It wouldn't seem like they'd be getting calls about "speed" issues, 
which are most annoying ones :-).


Mark.


--

Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: 10g residential CPE

2020-12-29 Thread Aaron Wendel
The majority of our customers are still on Brocade MLXs.  We're in the 
process of upgrading all our equipment to Arista switches to accommodate 
the increased demand for 40G and 100G ports as well as implement 400G ports.


Aaron


On 12/29/2020 3:33 AM, Jonathon Exley wrote:

Hi Aaron,

Just out of interest, what switch gear are you using? You must have a 
pretty good cost per port.


Jonathon.

On 29/12/2020 9:38 AM, Aaron Wendel  wrote:
We prioritize calls based on severity.  If both Google and Grandma call
and say they have a cut then we have people to service both at the same
time.  If Google, Century Link, Verizon, AT&T and Grandma all call then
Grandma gets to wait a day.  That being the case, it's not dependent on
revenue. Emergency Services (911 and Police radio feeds) gets #1
priority even though they're non-paying.

But yes, in extreme situations the residential customers would be
delayed to service the paying customers.  We do have people cross
trained from other parts of our businesses so we can allocate internally
in emergencies.  In almost a decade though I can't think of a situation
where someone had to wait for service because we didn't have the
resources to service them.

Aaron


On 12/28/2020 2:02 PM, Mel Beckman wrote:
> Darin,
>
> Surely you at least give the paying customers priority over the
> non-paying? It’s one thing to say “I have to write paychecks no matter
> what”. It’s another to say “I’ll give away my support to free
> customers AND degrade support for paying customers as a result.” Your
> tech support guy “walking Grandma through getting her email” is
> necessarily not accessible for the duration to paying customers.
>
> This means your staffing must be large enough to never have any
> queuing, or you’re giving away your paying customers' time to
> non-paying customers. Neither approach is scalable in a competitive
> business environment, because SOMEBODY is paying for all those
> resources, and if it’s your customers, they will buy elsewhere. Your
> approach only work until you run out of other people’s money.
>
>   -mel
>
>> On Dec 28, 2020, at 11:50 AM, Baldur Norddahl
>> mailto:baldur.nordd...@gmail.com>> wrote:
>>
>> I applaud your commitment to helping your local community. Just want
>> to point out that this is a charity because it does not scale. Nobody
>> could build out a FTTH network and make it free as a business case.
>> But there are plenty of people that made a network for their
>> neighbors and provided that for free. Maybe a person had a commercial
>> fiber to his home and thought he could just as well share it. This
>> might be on a bigger scale but it is the same.
>>
>> Regards,
>>
>> Baldur
>>
>>
>> On Mon, Dec 28, 2020 at 8:27 PM Aaron Wendel
>> mailto:aa...@wholesaleinternet.net>> 
wrote:

>>
>> Darin,
>>
>> Our business support and residential support is the same
>> department.  I
>> have to pay those people to be in the office either way so it
>> doesn't
>> cost me any "more" to provide support for the residences. Yes,
>> walking
>> Grandma through getting her email can sometimes be a chore but that
>> person is on the payroll whether he/she is helping Grandma or
>> sitting
>> there chatting with his/her co-worker.  If we dumped all the
>> residential
>> customers we would still have the same cost structure we do now.
>>
>> Again, it's been free for the last 7 years at this point.  I've
>> never
>> been one to really do what I "should" anyway.
>>
>> Aaron
>>
>>
>> On 12/28/2020 11:48 AM, Darin Steffl wrote:
>> > Aaron,
>> >
>> > The "Free" service doesn't cover your cost of support which is
>> much
>> > higher for residential than any business customer. Our residential
>> > customers call at least 15x more often compared to business
>> customers
>> > compared on a 1:1 ratio.
>> >
>> > I honestly can't fathom providing free residential service
>> because we
>> > make enough money on the business side of things. You should be
>> > charging something, at least $20-30 per month.
>> >
>> > On Mon, Dec 28, 2020 at 11:15 AM Aaron Wendel
>> > > <mailto:aa...@wholesaleinternet.net>
>> <mailto:aa...@wholesaleinternet.net
>> <mailto:aa...@wholesaleinternet.net>>> wrote:
>> >
>> >     The $300 covers the equipment and the time to send someone
>> out to a
>> >     house to install it.  If $300 is too much you can pay in 12
>&

Re: 10g residential CPE

2020-12-29 Thread Aaron Wendel
It does have wireless.  That doesn't prevent people from trying to use 
their old equipment in addition. ("My dad's uncle's cousin's former 
roommate works in IT and told me I just needed to plug my old router 
into your new router.")


On 12/29/2020 10:53 AM, Michael Thomas wrote:


On 12/29/20 8:42 AM, Aaron Wendel wrote:
Oh, we still get calls about speed issues. It's always wonderful when 
someone puts their own 10 year old Linksys WRT54G and double NATs 
behind our CPE then sends in a speed test wondering why they're only 
getting 10Mbits on their Gbit line.  We get those ALL the time. :)


Does your CPE not have wireless? If it's double NAT'ing it's at least 
a router. If it doesn't have wireless, wouldn't it be cheaper to add 
it so you don't get the support calls?


Mike



--

Aaron Wendel
Chief Technical Officer
Wholesale Internet, Inc. (AS 32097)
(816)550-9030
http://www.wholesaleinternet.com




Re: netflow in the core used for surveillance

2021-08-25 Thread Aaron Wendel

You know they do.

On 8/25/2021 4:13 PM, Randy Bush wrote:

https://www.vice.com/en/article/jg84yy/data-brokers-netflow-data-team-cymru

used to get dissidents, activists, and journos killed

at&t, comcast, ... zayo, please tell us you do not do this.

randy




  1   2   3   4   5   6   >