Re: FCC proposes higher speed goals (100/20 Mbps) for USF providers

2022-06-06 Thread Casey Russell via NANOG
Is it?  I mean, as an industry, we already recognize that the average user
downloads approx. 5 times more than they upload.  In fact, we use it to
bash users who want a synchronous speed... tell them that's unreasonable.

I get your point, that if you try to use the outliers corner cases as your
"measure", that's a problem.  And I agree that game companies might get
lazier in terms of efficiency and distribution methods.  I'm just saying we
need to be careful to have the conversations, and be open to them.  We need
to provide good, well-thought-out reasons, and justify our reluctance to
hit "low profit" areas.  Especially when we work in a sector that's being
provided billions of dollars a year to do that very thing.  Short quips
like "Downloading is a really bad thing to use as a reason" overly simplify
the (real) problems and needs down to insulting sound bytes when talking to
the public.

I realize you're talking to an in-group here, and might not have said the
same publicly, so I'm not being overly critical, it's just an observation
to clarify my own point

Sincerely,
Casey Russell
Network Engineer
<http://www.kanren.net>
785-856-9809
2029 Becker Drive, Suite 282
Lawrence, Kansas 66047
XSEDE Campus Champion
Certified Software Carpentry Instructor
need support? 



On Mon, Jun 6, 2022 at 12:12 PM Michael Thomas  wrote:

>
> On 6/6/22 7:56 AM, Casey Russell via NANOG wrote:
>
>
>> For a long time now...
>>
>> I have had the opinion that we have reached the age of "peak
>> bandwidth", that nearly nobody's 4 person home needs more than 50Mbit
>> with good queue management. Certainly increasing upload
>> speeds dramatically (and making static IP addressing and saner
>> firewalling feasible) might shift some resources from the cloud, which
>> I'd like (anyone using tailscale here?), but despite
>> 8k video (which nobody can discern), it's really hard to use up >
>> 50Mbit for more than a second or three with current applications.
>>
>>
> One single digital game download to a console (xbox, playstation, etc.)
> can be over 80Gb of data.  That's half of your Saturday just waiting to
> play a game.  That assumes you'r'e getting the full 50Mbit (your provider
> isn't oversubscribing) to yourself in the home.  It also assumes your
> console (and all the games on it) is fully updated when you fired it up to
> download that new game. Hope you didn't want a couple of new games (after
> Christmas or a birthday).  I admit, it's not a daily activity, and it might
> not look like much in a monthly average.  But I'd argue there are plenty of
> applications where 50Mbit equals HOURS of download wait for "average
> families" already today, not seconds.
>
> And gig everywhere would just encourage them to make 8000GB downloads.
> Downloading is a really bad thing to use as a reason.
>
> Mike
>


Re: FCC proposes higher speed goals (100/20 Mbps) for USF providers

2022-06-06 Thread Casey Russell via NANOG
To be honest, I don't know, I'm not a money person, I just turn knobs.  But
apparently it costs more than $130 billion dollars.  In the US alone.
That's what USAC has distributed to carriers in the US in the last 20
years.  Last year was north of 8 billion.  That's just USAC and that's just
for getting high speed to rural areas, underserved communities, and
Community anchor institutions.  I don't know if that's too much or not
enough, but it seems like a lot to me as a taxpayer when I consider how
hard dozens of us had to fight to get ANY carrier to bring fiber to our
community anchor institutions 6 or so years ago.

But my point was only that if we keep arguing against change and against
pushing barriers, then we are what customers (or members) say we are.
obstinate, greedy, uncooperative, and unsupportive of their goals.  I don't
think you're any of those things, I just think we need to stop setting
limits FOR customers and be open to a conversation about how to get to
(insert wild and crazy, super cool goal here).  All the time being as
realistic as we can about how to do that.

Sincerely,
Casey Russell
Network Engineer
<http://www.kanren.net>
785-856-9809
2029 Becker Drive, Suite 282
Lawrence, Kansas 66047
XSEDE Campus Champion
Certified Software Carpentry Instructor
need support? 



On Mon, Jun 6, 2022 at 10:03 AM Jason Canady  wrote:

> On 6/6/22 10:56 AM, Casey Russell via NANOG wrote:
>
>
>> For a long time now...
>>
>> I have had the opinion that we have reached the age of "peak
>> bandwidth", that nearly nobody's 4 person home needs more than 50Mbit
>> with good queue management. Certainly increasing upload
>> speeds dramatically (and making static IP addressing and saner
>> firewalling feasible) might shift some resources from the cloud, which
>> I'd like (anyone using tailscale here?), but despite
>> 8k video (which nobody can discern), it's really hard to use up >
>> 50Mbit for more than a second or three with current applications.
>>
>>
> One single digital game download to a console (xbox, playstation, etc.)
> can be over 80Gb of data.  That's half of your Saturday just waiting to
> play a game.  That assumes you'r'e getting the full 50Mbit (your provider
> isn't oversubscribing) to yourself in the home.  It also assumes your
> console (and all the games on it) is fully updated when you fired it up to
> download that new game. Hope you didn't want a couple of new games (after
> Christmas or a birthday).  I admit, it's not a daily activity, and it might
> not look like much in a monthly average.  But I'd argue there are plenty of
> applications where 50Mbit equals HOURS of download wait for "average
> families" already today, not seconds.
>
> At what price, is that worth though, Casey?  Simply set the game to
> download overnight.  It's better than standing in line outside of a store!
>


Re: FCC proposes higher speed goals (100/20 Mbps) for USF providers

2022-06-06 Thread Casey Russell via NANOG
>
>
> For a long time now...
>
> I have had the opinion that we have reached the age of "peak
> bandwidth", that nearly nobody's 4 person home needs more than 50Mbit
> with good queue management. Certainly increasing upload
> speeds dramatically (and making static IP addressing and saner
> firewalling feasible) might shift some resources from the cloud, which
> I'd like (anyone using tailscale here?), but despite
> 8k video (which nobody can discern), it's really hard to use up >
> 50Mbit for more than a second or three with current applications.
>
>
One single digital game download to a console (xbox, playstation, etc.) can
be over 80Gb of data.  That's half of your Saturday just waiting to play a
game.  That assumes you'r'e getting the full 50Mbit (your provider isn't
oversubscribing) to yourself in the home.  It also assumes your console
(and all the games on it) is fully updated when you fired it up to download
that new game. Hope you didn't want a couple of new games (after Christmas
or a birthday).  I admit, it's not a daily activity, and it might not look
like much in a monthly average.  But I'd argue there are plenty of
applications where 50Mbit equals HOURS of download wait for "average
families" already today, not seconds.


Re: massive facebook outage presently

2021-10-04 Thread Casey Russell via NANOG
>>  In other news worker productivity is up 100% today.

For everyone except IT workers.

Although, I suppose if you're just counting the number of tickets they can
quickly clear by sending out a "It's the internet, not us".  You could
count that as increased productivity.

Sincerely,
Casey Russell
Network Engineer
<http://www.kanren.net>
785-856-9809
2029 Becker Drive, Suite 282
Lawrence, Kansas 66047
XSEDE Campus Champion
Certified Software Carpentry Instructor
need support? 



On Mon, Oct 4, 2021 at 12:14 PM richey goldberg 
wrote:

> In other news worker productivity is up 100% today.
>
>
>
> -richey
>
>
>
> *From: *NANOG  on
> behalf of Jason Kuehl 
> *Date: *Monday, October 4, 2021 at 12:45 PM
> *To: *Mel Beckman 
> *Cc: *nanog@nanog.org list 
> *Subject: *Re: massive facebook outage presently
>
> Looks like they run there own nameservers and I see the soa records are
> even missing.
>
>
>
> On Mon, Oct 4, 2021, 12:23 PM Mel Beckman  wrote:
>
> Here’s a screenshot:
>
>
>
> *Error! Filename not specified.*
>
>  -mel beckman
>
>
>
> On Oct 4, 2021, at 9:06 AM, Eric Kuhnke  wrote:
>
> 
>
> https://downdetector.com/status/facebook/
>
>
>
> Normally not worth mentioning random $service having an outage here, but
> this will undoubtedly generate a large volume of customer service calls.
>
>
>
> Appears to be failure in DNS resolution.
>
>
>
>


Re: Juniper configuration recommendations/BCP

2020-10-08 Thread Casey Russell via NANOG
Forrest,

Between Jason and Justin, (and now others probably) they've captured what I
was already typing.  Basically, that as soon as you create a loopback
interface (with a L3 IP) you need to start planning your firewall filter
for it.  Most of it is as simple as creating filters for SSH and other
administrative access to the loopback address, but some of it is not at all
intuitive if you're coming from a Cisco/Brocade world.

The loopback filter protects the RE, and, can, in many cases affect traffic
flowing across transit interfaces, in a way that in a Cisco shop you would
never have never considered.  On a Juniper, if it will be processed in just
about any way by the routing engine (even just a few packets in the flow)
you need to account for that.  It's not as daunting as it sounds, but it
needs to be accounted for.  I'll let their comments fill in the rest,
because others have already provided good resources.

Sincerely,
Casey Russell
Network Engineer
[image: KanREN] <http://www.kanren.net>
[image: phone]785-856-9809
2029 Becker Drive, Suite 282
Lawrence, Kansas 66047
XSEDE Campus Champion
Certified Software Carpentry Instructor
[image: linkedin]
<https://www.linkedin.com/company/92399?trk=tyah&trkInfo=clickedVertical%3Acompany%2CclickedEntityId%3A92399%2Cidx%3A1-1-1%2CtarId%3A1440002635645%2Ctas%3AKanREN>
[image:
twitter] <https://twitter.com/TheKanREN> [image: twitter]
<http://www.kanren.net/feed/> need support? 



On Thu, Oct 8, 2020 at 4:39 AM Forrest Christian (List Account) <
li...@packetflux.com> wrote:

> 
> After nearly 30 years of being a cisco shop, I'm working on configuring
> our first pair of Juniper MX204's to replace our current provider-edge
> cisco.
>
> I've worked through enough of the Juniper documentation/books to have a
> fairly good handle on how to configure these, but I wanted to check with
> the list to see if there are any Juniper-Specific gotchas I might run into
> that isn't documented well.
>
> I've done a bit of googling and am either finding stuff that is largely
> Cisco-specific or which is generic - all of which I'm rather familiar with
> based on my past history.   Is there anything I should worry about which is
> Juniper-specific?
>
> --
> - Forrest
>


Re: sending again in case Zoom didn't email it correctly

2019-03-15 Thread Casey Russell
Good grief how embarrassing is that?

Sorry for the noise.  My apologies on not checking the autocomplete when
entering the email addresses.  Nothing like broadcasting a zoom link to
half the operators in the country on accident.

Sincerely,
Casey Russell
Network Engineer
[image: KanREN] <http://www.kanren.net>
[image: phone]785-856-9809
2029 Becker Drive, Suite 282
Lawrence, Kansas 66047
[image: linkedin]
<https://www.linkedin.com/company/92399?trk=tyah&trkInfo=clickedVertical%3Acompany%2CclickedEntityId%3A92399%2Cidx%3A1-1-1%2CtarId%3A1440002635645%2Ctas%3AKanREN>
[image:
twitter] <https://twitter.com/TheKanREN> [image: twitter]
<http://www.kanren.net/feed/> need support? 



On Fri, Mar 15, 2019 at 1:56 PM Casey Russell  wrote:

> SIP failover call.
>
> Casey Russell is inviting you to a scheduled Zoom meeting. Join Zoom
> Meeting https://kanren.zoom.us/j/7858569809
> <https://www.google.com/url?q=https%3A%2F%2Fkanren.zoom.us%2Fj%2F7858569809&sa=D&ust=1553108115014000&usg=AFQjCNHlrLfQSB_lHRrNOwNncYY3qrhJPw>
> One tap mobile +16699006833,,7858569809# US (San Jose)
> +16465588656,,7858569809# US (New York) Dial by your location +1 669 900
> 6833 US (San Jose) +1 646 558 8656 US (New York) Meeting ID: 785 856 9809
> Find your local number: https://zoom.us/u/adjAi5zj6Y
> <https://www.google.com/url?q=https%3A%2F%2Fzoom.us%2Fu%2FadjAi5zj6Y&sa=D&ust=1553108115014000&usg=AFQjCNGJZRvOi1UKEsVrfoIkZntDzvw4KQ>
>
>
> Sincerely,
> Casey Russell
> Network Engineer
> [image: KanREN] <http://www.kanren.net>
> [image: phone]785-856-9809
> 2029 Becker Drive, Suite 282
> Lawrence, Kansas 66047
> [image: linkedin]
> <https://www.linkedin.com/company/92399?trk=tyah&trkInfo=clickedVertical%3Acompany%2CclickedEntityId%3A92399%2Cidx%3A1-1-1%2CtarId%3A1440002635645%2Ctas%3AKanREN>
>  [image:
> twitter] <https://twitter.com/TheKanREN> [image: twitter]
> <http://www.kanren.net/feed/> need support? 
>
>


sending again in case Zoom didn't email it correctly

2019-03-15 Thread Casey Russell
SIP failover call.

Casey Russell is inviting you to a scheduled Zoom meeting. Join Zoom
Meeting https://kanren.zoom.us/j/7858569809
<https://www.google.com/url?q=https%3A%2F%2Fkanren.zoom.us%2Fj%2F7858569809&sa=D&ust=1553108115014000&usg=AFQjCNHlrLfQSB_lHRrNOwNncYY3qrhJPw>
One tap mobile +16699006833,,7858569809# US (San Jose)
+16465588656,,7858569809# US (New York) Dial by your location +1 669 900
6833 US (San Jose) +1 646 558 8656 US (New York) Meeting ID: 785 856 9809
Find your local number: https://zoom.us/u/adjAi5zj6Y
<https://www.google.com/url?q=https%3A%2F%2Fzoom.us%2Fu%2FadjAi5zj6Y&sa=D&ust=1553108115014000&usg=AFQjCNGJZRvOi1UKEsVrfoIkZntDzvw4KQ>


Sincerely,
Casey Russell
Network Engineer
[image: KanREN] <http://www.kanren.net>
[image: phone]785-856-9809
2029 Becker Drive, Suite 282
Lawrence, Kansas 66047
[image: linkedin]
<https://www.linkedin.com/company/92399?trk=tyah&trkInfo=clickedVertical%3Acompany%2CclickedEntityId%3A92399%2Cidx%3A1-1-1%2CtarId%3A1440002635645%2Ctas%3AKanREN>
[image:
twitter] <https://twitter.com/TheKanREN> [image: twitter]
<http://www.kanren.net/feed/> need support? 


Re: Network Speed Testing and Monitoring Platform

2019-01-16 Thread Casey Russell
I don't think a raspberry pi will reliably fill a full Gig and keep it full
(maybe that's not required in this scenario), but I've installed a Linux
based OS with the PerfSONAR tools (including iperf) on a couple of
different mini PCs in the "few hundred dollars" price range.

The last one was the Liva X from ECS.  It was more than capable of filling
1G circuits with traffic and keeping them full without loss or wonky
results due to things like CPU overrun or other processes causing bus
contention.  I'm pretty sure the Liva X is retired now, but their current
gen should suffice as should a number of comparable competitors.

Sincerely,
Casey Russell
Network Engineer
[image: KanREN] <http://www.kanren.net>
[image: phone]785-856-9809
2029 Becker Drive, Suite 282
Lawrence, Kansas 66047
[image: linkedin]
<https://www.linkedin.com/company/92399?trk=tyah&trkInfo=clickedVertical%3Acompany%2CclickedEntityId%3A92399%2Cidx%3A1-1-1%2CtarId%3A1440002635645%2Ctas%3AKanREN>
[image:
twitter] <https://twitter.com/TheKanREN> [image: twitter]
<http://www.kanren.net/feed/> need support? 



On Wed, Jan 16, 2019 at 1:27 PM Chris Kimball 
wrote:

> Would a raspberry pi work for this?
>
>
>
> Could 3D print a nice case with your logo for it.
>
>
>
> *From:* NANOG  *On Behalf Of *Colton Conor
> *Sent:* Wednesday, January 16, 2019 2:16 PM
> *To:* David Guo 
> *Cc:* NANOG 
> *Subject:* Re: Network Speed Testing and Monitoring Platform
>
>
>
> Last time I setup Iperf3 it was semi difficult, and would be impossible
> trying to coach a soccer mom on how to setup over the phone.
>
>
>
> I am leaning towards a CPE that has speed test built in, or a low cost,
> sub $100 device we could ship to the customer to install. Anyone know of
> something like that?
>
>
>
> On Wed, Jan 16, 2019 at 10:55 AM David Guo  wrote:
>
> We ask our customers use iperf3 to test speed.
>
>
>
> Get Outlook for iOS <https://aka.ms/o0ukef>
>
>
> --
>
> *From:* NANOG  on behalf of Colton Conor <
> colton.co...@gmail.com>
> *Sent:* Thursday, January 17, 2019 00:54
> *To:* NANOG
> *Subject:* Network Speed Testing and Monitoring Platform
>
>
>
> As an internet service provider with many small business and residential
> customers, our most common tech support calls are speed related. Customers
> complaining on slow speeds, slowdowns, etc.
>
>
>
> We have a SNMP and ping monitoring platform today, but that mainly tells
> us up-time and if data is flowing across the interface. We can of course
> see the link speed, but customer call in saying the are not getting that
> speed.
>
>
>
> We are looking for a way to remotely test customers internet connections
> besides telling the customer to go to speedtest.net, or worse sending a
> tech out with a laptop to do the same thing.
>
>
>
> What opensource and commercial options are out there?
>
>
>
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> - - - - - -
>
> The information contained in this electronic message may be confidential,
> and the message is for the use of intended recipients only. If you are not
> the intended recipient, do not disseminate, copy, or disclose this
> communication or its contents. If you have received this communication in
> error, please immediately notify me by replying to the email or call MIS
> Alliance at 617-500-1700 and permanently delete this communication.
>


Re: Internet diameter?

2018-11-26 Thread Casey Russell
It's not exactly a measurement of "user to content" but CAIDA has swarms of
Raspberry Pi nodes all over the world, that constantly measure... well, a
lot of things, but they continually also monitor traceroute paths to each
other.  If you're looking for a "average length from any one node to any
other node on the Internet" you'd likely find some good data points here.

https://www.caida.org/projects/ark/statistics/

Sincerely,
Casey Russell
Network Engineer
[image: KanREN] <http://www.kanren.net>
[image: phone]785-856-9809
2029 Becker Drive, Suite 282
Lawrence, Kansas 66047
[image: linkedin]
<https://www.linkedin.com/company/92399?trk=tyah&trkInfo=clickedVertical%3Acompany%2CclickedEntityId%3A92399%2Cidx%3A1-1-1%2CtarId%3A1440002635645%2Ctas%3AKanREN>
[image:
twitter] <https://twitter.com/TheKanREN> [image: twitter]
<http://www.kanren.net/feed/> need support? 



On Sun, Nov 25, 2018 at 11:10 AM Christopher Morrow 
wrote:

>
>
> On Sat, Nov 24, 2018 at 8:48 PM Hal Murray <
> hgm+na...@ip-64-139-1-69.sjc.megapath.net> wrote:
>
>>
>> Keith Medcalf  said:
>> > "just static content" would be more accurate ...
>>
>>   and using http rather than https
>>
>> > There were many attempts at this by Johhny-cum-lately ISPs back in the
>> 90's
>> > -- particularly Telco and Cableco's -- with their "transparent poxies".
>> > Eventually they discovered that it was more cost efficient to actually
>> > provide the customer with what the customer had purchased.
>>
>> One of the complications in this area is an extra layer of logging which
>> could
>> turn into privacy invasion.
>>
>> I'm pretty sure it was Comcast, but a quick search didn't find a good
>> reference.  Many years ago, there were a lot of complaints when customers
>>
>
> did you mean the 'sandvine experiment' that happened ~10 yrs back?
> or did you mean the plan verizon had to proxy all http/https traffic from
> consumer (fios/dsl) links through their gear so they could replace ad
> content and such?
> or did you mean the various (barefruit/nominim/paxfire) dns fake-answer
> companies that dropped your customer on their "search platform" for
> monetization?
>
> fairly much all of those are a wreck for consumer privacy :(
>
>
>> discovered that their transparent proxy web site traffic was getting
>> logged.
>> Comcast said they weren't using it for anything beyond normal operations
>> work,
>> but nobody believed them.  Shortly after that, they gave up on proxying.
>>
>> I'm sure the general reputation of modern Telcos and Cablecos for privacy
>> invasion didn't help.
>>
>>
> it's a rough business to be in, they say... but invading privacy of their
> users makes things seem a heck of a lot worse.
>
>
>>
>> --
>> These are my opinions.  I hate spam.
>>
>>
>>
>>


Re: improving signal to noise ratio from centralized network syslogs

2018-01-26 Thread Casey Russell
 +1 for Graylog, you can pour ALL your syslog data into it, and then
configure what are called streams.  Streams are a way to whittle down the
incoming log flows and see something LESS than everything.  You can create
a stream that only shows these 6 devices, or one that only shows log info
from the RPD daemon on your Juniper routers.

 In your case, you could use the stream rules to create a stream that
filters out the background noise with regex expressions.  You're not losing
anything, you still have the full log data captured, and you can see it in
the portal, but if you click on one of your streams, you see filtered data
based, on your rulesets.  We've been using it for about 2 years now I
think.

 It's open source, easy to set up, supports LDAP, multiple input types
(beyond just udp syslog), and the community is pretty solid.


Sincerely,
Casey Russell
Network Engineer
[image: KanREN] <http://www.kanren.net>
[image: phone]785-856-9809
2029 Becker Drive, Suite 282
Lawrence, Kansas 66047
[image: linkedin]
<https://www.linkedin.com/company/92399?trk=tyah&trkInfo=clickedVertical%3Acompany%2CclickedEntityId%3A92399%2Cidx%3A1-1-1%2CtarId%3A1440002635645%2Ctas%3AKanREN>
[image:
twitter] <https://twitter.com/TheKanREN> [image: twitter]
<http://www.kanren.net/feed/> need support? 


On Fri, Jan 26, 2018 at 10:41 AM, Alain Hebert  wrote:

> ELK stack.
>
> Java RAM devoring monster but Kibana makes indexing easy.
>
> -
> Alain Hebertaheb...@pubnix.net
> PubNIX Inc.
> 50 boul. St-Charles
> <https://maps.google.com/?q=50+boul.+St-Charles&entry=gmail&source=g>
> P.O. Box 26770 Beaconsfield, Quebec H9W 6G7
> Tel: 514-990-5911  http://www.pubnix.netFax: 514-990-9443
>
>
> On 01/26/18 01:01, Michael Loftis wrote:
>
>> On Thu, Jan 25, 2018 at 8:11 PM Joe Maimon  wrote:
>>
>> Hey All,
>>>
>>> Centralized logging is a good thing. However, what happens is that every
>>> repetitive, annoying but not (usually) important thing fills up the log
>>> with reams of what you are not looking for.
>>>
>>> Networks are a noisy place and silencing every logged condition is
>>> impractical and sometimes undesirable.
>>>
>>> What I am interested in is an automated zoom-in zoom-out tool to mask
>>> the repetition of "normal" events and allow the unusual to stand out.
>>>
>>> Add to that an ability to identify gaps in the background noise. (The
>>> dog that didnt bark)
>>>
>>> What I am not interested in are solutions based upon preconfigured
>>> filters and definitions and built in analysis for supported
>>> (prepopulated definitions) platforms, this is all about pattern
>>> mining/masking and should be self discoverable. Ideally a command tool
>>> to generate static versions of the analysis coupled with a web platform
>>> (with zoom +- buttons)  for realtime.
>>>
>>> I made a crude run of it with SLCT, using its generated patterns to grep
>>> -v, and that in and of itself was useful, but needs a bit of work. Also,
>>> its not quite real time.
>>>
>>> Any ideas would be greatly appreciated.
>>>
>>
>> Not cheap, but Splunk comes to mind.
>>
>>
>>> Joe
>>>
>>>
>


Re: IPv6 oddness in Comcast land...

2017-03-20 Thread Casey Russell
(I first sent this directly to Valdis instead of the list, so my apologies
to Valdis for getting this twice)

Greetings,

I'm afraid I can't hand the ultimate solution, but I can point you in a
direction.

 Sounds like you probably have an IPv6 neighbor discovery problem.
Most likely (since that's where the change occurred) it's between your WRT
and the Comcast CPE (I assume a cable modem) or the first active piece of
the upstream cable plant.  But It'll be the first Comcast device actually
speaking Ipv6 to your WRT.

 I've seen this happen several times in new (or changed) peering links
with other providers (where dissimilar equipment, or new ACLs) are
involved.  Typically what's happening is that an ACL or firewall rule on
one device isn't allowing that devices interface to speak fully over the
new link, and that's preventing IPv6 neighbor discovery from happening
properly between two adjacent devices.  (In this case those devices are
likely your WRT and the first upstream Comcast device speaking IPv6).

 Since it's your device that changed, you likely won't have a lot of
luck convincing comcast to dig too deep into this issue, especially since
their device "worked" before and these providers have few engineers
on-staff that really understand v6.  It's not that there's no one at
comcast who can fix it, it'll just take you a while to find them.

 So without knowing your equipment, I can only offer a few general
tips.  Look for troubleshooting commands that will show you the ipv6
neighbor discovery status on your device interfaces.  See what the status
is before a traceroute (when things are broken) and after a traceroute
(when things are fixed).  If it appears I'm right, go to that Interface and
create ACLs or firewall rules to allow the actual ipv6 addresse(s) on that
interface to speak (outward) to their local subnet.

 Be sure to remember you may need to create a rule for the global
(permanent, public) address, and also for the link-local address.  Some
vendors will put the link-local address in the ND solicitation and others
will use the global unicast (if it's already been assigned).  The RFC
suggests the link-local, but also says that the source and destination
addresses in the messages need be only "An address assigned to the
interface from which the advertisement is sent."

 If that does help, remember to tighten those new ACLs as much as you
can and still have things work.  If it doesn't, you'll likely have to
engage comcast about the issue, as it may, or may not be this at all.

:-)  good luck




Sincerely,
Casey Russell
Network Engineer
[image: KanREN] <http://www.kanren.net>
[image: phone]785-856-9809
2029 Becker Drive, Suite 282
Lawrence, Kansas 66047
[image: linkedin]
<https://www.linkedin.com/company/92399?trk=tyah&trkInfo=clickedVertical%3Acompany%2CclickedEntityId%3A92399%2Cidx%3A1-1-1%2CtarId%3A1440002635645%2Ctas%3AKanREN>
[image:
twitter] <https://twitter.com/TheKanREN> [image: twitter]
<http://www.kanren.net/feed/> need support? 

On Sun, Mar 19, 2017 at 6:16 PM,  wrote:

> Trying to figure out what the heck is going on here.  Any good
> explanations cheerfully accepted.
>
> Background:  Home internet router is a Linksys WRT1200AC that had been
> running OpenWRT 15.05.01. IPv6 worked just fine - Comcast handed me a /60
> via DHCP-PD and no issues.  I reflashed it to Lede 17.01, and after doing
> all the reconfig, I'm hitting a really strange IPv6 issue.
>
> Symptoms - IPv6 still configures correctly, but IPv6 packets appear to go
> out
> and disappear into the ether when they leave the Linksys.  Doing a
> traceroute
> to any IPv6 destination makes things work again - for a while (from 15
> minutes
> to an hour or two).
>
> As seen from my laptop (I have the matching tcpdump from the outbound
> interface on the Linksys):
>
> [~] ping -6 -c 3 listserv.vt.edu
> PING listserv.vt.edu(listserv.ipv6.vt.edu 
> (2001:468:c80:2105:211:43ff:feda:d769))
> 56 data bytes
>
> --- listserv.vt.edu ping statistics ---
> 3 packets transmitted, 0 received, 100% packet loss, time 2070ms
>
> [~] traceroute -6 listserv.vt.edu
> traceroute to listserv.vt.edu (2001:468:c80:2105:211:43ff:feda:d769), 30
> hops max, 80 byte packets
>  1  2601:5c0:c001:69e2::1 (2601:5c0:c001:69e2::1)  2.417 ms  3.077 ms
> 5.358 ms
>  2  * * *
>  3  * * *
>  4  * * *
>  5  * * *
>  6  * hu-0-10-0-7-pe04.ashburn.va.ibone.comcast.net (2001:558:0:f5c1::2)
> 31.478 ms  31.975 ms
>  7  2001:559::d16 (2001:559::d16)  32.406 ms  17.102 ms  24.751 ms
>  8  2001:550:2:2f::a (2001:550:2:2f::a)  23.245 ms  23.519 ms  22.185 ms
>  9  2607:b400:f0:2003::f0 (2607:b400:f0:2003::f0)  29.782 ms  28.604 ms
> 29.891 ms
> 10  2607:b400:90:ff05::f1 (2607:b4

Re: Oh dear, we've all been made redundant...

2016-03-24 Thread Casey Russell
>>Just goes to show the vast range of technical issues that can be
>>readily righted with little more than a good thump with a hammer.

We always referred to that as "percussive maintenance"

Casey Russell
Network Engineer
Kansas Research and Education Network

2029 Becker Drive, Suite 282

Lawrence, KS  66047
(785)856-9820  ext 9809
cruss...@kanren.net

On Mon, Mar 21, 2016 at 3:19 AM, Wayne Bouchard  wrote:

> On Sun, Mar 20, 2016 at 11:00:36PM -0500, Larry Sheldon wrote:
> > On 3/19/2016 18:16, Warren Kumari wrote:
> > > Found on Staple's website:
> > >
> http://www.staples.com/NetReset-Automated-Power-Cycler-for-Modems-and-Routers/product_1985686
> > >
> > > Fixes all issues, less downtime, less stress...
> >
> > etc...
> > ...
> > 
> > ...and so forth
> > 
> > .
> > ..and so on.
> >
> > > Resetting allows equipment to auto-correct issues
> >
> > Recalls to mind years ago in the Toll testroom where I work, the
> > evenings equipment man (charged with and assigned to the task of
> > repairing equipment that had been "patched out" by the day shift) would,
> > when he arrived for work each day, retrieve the piece of 2 X 4 from its
> > hiding place and whack each bay of relay-rich equipment as he walked in
> > the area.
> >
> > Then, after some coffee and a cigarette, he would go through the
> > trouble-ticket collection, retest the item, mark the ticket "NTF" and
> > proceed to the next item.
>
> I love that!
>
> Just goes to show the vast range of technical issues that can be
> readily righted with little more than a good thump with a hammer.
>
> -Wayne
>
> ---
> Wayne Bouchard
> w...@typo.org
> Network Dude
> http://www.typo.org/~web/
>


Re: Broadband Router Comparisons

2015-12-28 Thread Casey Russell
>
> After the last week or so, I wouldn’t trust a service provider who
> insisted on installing juniper at my site.


Gotta be careful with that attitude.  You can't have Cisco either if you
really mean that.  (or most any other enterprise provider really).


http://arstechnica.com/security/2015/09/malicious-cisco-router-backdoor-found-on-79-more-devices-25-in-the-us/
http://www.infoworld.com/article/2608141/internet-privacy/snowden--the-nsa-planted-backdoors-in-cisco-products.html



Casey Russell
Network Engineer
Kansas Research and Education Network

2029 Becker Drive, Suite 282

Lawrence, KS  66047
(785)856-9820  ext 9809
cruss...@kanren.net


Re: bad announcement taxonomy

2015-11-18 Thread Casey Russell
I think Tony's on the right track here.  I vote we call this "Route
Laundering", the people who do it "Route Launderers", and the routes
themselves "Laundered Routes".

I actually had a little trouble spelling the different forms of
laundering.  So I looked them up..


"I can't believe what a bunch of nerds we are. We're looking up "money
laundering" in a dictionary."

Casey Russell
Network Engineer
Kansas Research and Education Network

2029 Becker Drive, Suite 282

Lawrence, KS  66047
(785)856-9820  ext 9809
cruss...@kanren.net

On Wed, Nov 18, 2015 at 4:40 AM, Tony Finch  wrote:

> Randy Bush  wrote:
> >
> > leak - i receive P and send it on to folk to whom i should not send
> >it for business reasons (transit, peer, ...)
> >
> > 7007 - i receive P (or some sub/superset), process it in some way
> >(likely through my igp), and re-originate it, or part of it,
> >as my own
> >
> > we need a name for 7007 other then vinnie
>
> Laundered leak?
>
> Tony.
> --
> f.anthony.n.finchhttp://dotat.at/
> German Bight, Humber, Thames, Dover: West or northwest, backing southwest
> for
> a time, 6 to gale 8, increasing severe gale 9 at times, perhaps storm 10
> later
> in German Bight and Humber. Rough or very rough, occasionally high later in
> German Bight and Humber. Rain at times. Good, occasionally poor.
>