[swinog] Re: Sicherheit von SS7 - mit Schweiz-Bezug

[Fredy Kuenzler via swinog]

Inside-IT did an interview with Andreas Fink (German). He considers himself as the scapegoat for the large security issue SS7 has, and that many mobile operators don't give enough attention to necessary security measures.https://www.inside-it.ch/der-basler-mit-dem-globalen-spionageservice-20230609--Fredy KünzlerInit7 (Switzerland) Ltd.Technoparkstrasse 5CH-8406 Winterthurhttps://www.init7.net/Am 11.05.2023 um 10:18 schrieb Fredy Kuenzler :A similar article has been published by several newspapers of the TX group (german, paywall).Please note that Andreas Fink is a long term and valued member of our SwiNOG community and probably the person with the most SS7 knowledge. I suppose he is subscribed to this mailing list.Weltweite Angriffe auf Telecominfrastruktur – Schweizer ETH-Ingenieur beliefert die Spionage-Industrietagesanzeiger.ch--Fredy KünzlerInit7 (Switzerland) Ltd.Technoparkstrasse 5CH-8406 Winterthurhttps://www.init7.net/Am 11.05.2023 um 09:56 schrieb Matthias Leisi via swinog :

(Resend von der richtigen Absender-Adresse)https://www.haaretz.com/israel-news/security-aviation/2023-05-10/ty-article-magazine/.premium/global-surveillance-the-secretive-swiss-dealer-enabling-israeli-spy-firms/0188-0005-dc7e-a3fe-22cdf290The Secretive Swiss Dealer Enabling Israeli Spy Firms(…)It leads from the Americas to Africa to South-East Asia, but also to Basel, a mediaeval town on the banks of the Rhine and the unassuming home of Andreas Fink, a Swiss telecom expert whose unusual skills have placed him at the centre of this industry.(…)reveal how Fink's systems have served as a conduit for probing and attacking phone networks across the globe(…)When contacted by this investigation, Fink admitted to working with companies and “legally entitled government agencies” as a provider of surveillance services.(…)Fink's request to Robert was for "SS7 access" and "a bunch of global titles". In other words, he wanted a list of phone numbers, belonging to Robert's phone company, which could be used to send queries to other networks in other countries. (…)-- Matthias LeisiKatzenrütistrasse 68, 8153 RümlangMobile +41 79 377 04 43matth...@leisi.net___swinog mailing list -- swinog@lists.swinog.chTo unsubscribe send an email to swinog-le...@lists.swinog.ch___
swinog mailing list -- swinog@lists.swinog.ch
To unsubscribe send an email to swinog-le...@lists.swinog.ch

[swinog] Re: Sudden RTT drops after changing fiber OTO plug

[Fredy Kuenzler via swinog]

You sure that the change didn‘t happen from plug 2 to 1?!

Plug 2 is (mostly) using Swisscom‘s BBCS infrastructure, while plug 1 belongs 
to ewz and is used by other service providers (Disclaimer #1: this applies only 
to Zurich, other locations may differ; Disclaimer #2: Init7 is using both plug 
1 and 2 in Zurich for Fiber7, but not BBCS).

The latency drop could explain if your connection is no longer on BBCS, as it 
usually adds about 5 to 10ms.

--
Fredy Künzler

Init7 (Switzerland) Ltd.
Technoparkstrasse 5
CH-8406 Winterthur
https://www.init7.net/

> Am 29.11.2022 um 12:49 schrieb Fabian Wenk via swinog 
> :
> 
> Hello Mat
> 
>> On 29.11.2022 10:41, Mat Kowalski via swinog wrote:
>> For interested, here are 3 graphs presenting the drop. For every graph the 
>> left side is OTO#1 and the right is OTO#2. Monday morning was the time of 
>> changing the line:
>> 1) https://i.ibb.co/qRL1Hyb/1.png 
> 
> I do have a connection on OTO Plug 1 in Zürich, even with the EWZ provided 
> Fiber/Ethernet bridge (4 Ethernet-Ports), with one port used for a line to 
> Cyberlink (1 Gbit/s).
> External physical systems within Switzerland are mostly 2 - 2.5 ms with IPv4, 
> IPv6 sometimes slightly more.
> The DNS at 8.8.8.8 / 2001:4860:4860:: has 1.8 ms.
> And the VM I have at ungleich.ch, has 4.7 ms (IPv4), and 5.2 ms (IPv6).
> 
> Almost a decade ago I had a MC2-based (copper) line with 10 Mbit/s from 
> Cyberlink and I do remember that for systems within Switzerland it was also 
> at ~3 ms.
> I also have a Sunrise/UPC Cable connection with IPv4 only, there the latency 
> is ~21.5 ms and 25.4 ms (for the VM). But during the night (since around end 
> of August) it is significantly higher, sometimes even above 50 ms. This is 
> not the first time and it usually does improve again after a few month, e.g. 
> when they split the cable segment into smaller areas.
> 
> So for me it seems that your ISP probably has the most influence for the 
> latency of your line with their infrastructure and transit behind.
> 
> 
> Best regards,
> Fabian
> ___
> swinog mailing list -- swinog@lists.swinog.ch
> To unsubscribe send an email to swinog-le...@lists.swinog.ch
___
swinog mailing list -- swinog@lists.swinog.ch
To unsubscribe send an email to swinog-le...@lists.swinog.ch

[swinog] Re: 15% IPv6 drop in Switzerland

[Fredy Kuenzler]

I don‘t think the measurements are correct. Either false values or false 
calculations.

For us Init7 AS13030 they assume only 15% IPv6 adoption.

The reality: We provide native IPv6 to *all* broadband customers by default. I 
believe that only a handful (less than 100) legacy customers on the ewz Zürinet 
infrastructure don‘t get IPv6, which are not yet migrated to our own hardware.

«Wer misst, misst Mist.» (works only in German, sorry).

--
Fredy Künzler

Init7 (Switzerland) Ltd.
Technoparkstrasse 5
CH-8406 Winterthur
https://www.init7.net/

> Am 10.04.2022 um 14:50 schrieb Jeroen Massar :
> 
> 
> 
>> On 10 Apr 2022, at 14:26, Nico Schottelius  
>> wrote:
>> 
>> 
>> Salut everyone,
>> 
>> on this sunny Sunday, is anyone else wondering why we had a drop of
>> about 15% points from 2021 to 2022 of detected IPv6 usage
> 
> No, as it is sunny go enjoy the good weather :)
> 
> But as you bring it up...
> 
>> I am referring to https://stats.labs.apnic.net/ipv6/CH which shows it
>> quite impressive.
>> 
>> Is this due to UPC/Sunrise merger? It seems lise AS6730 "lost" a lot of
>> IPv6 traffic since end of May 2021:
> 
> There are per-AS stats, and Swisscom (which is the majority of samples) has a 
> graph that is equal to the drop:
> 
> https://stats.labs.apnic.net/ipv6/AS3303?c=CH&p=1&v=1&w=30&x=1
> 
> but indeed, the decline is also in 6730:
> 
> https://stats.labs.apnic.net/ipv6/AS6730?c=CH&p=1&v=1&w=30&x=1
> 
> 
> while 6830 actually gained a wee bit:
> 
> https://stats.labs.apnic.net/ipv6/AS6830?c=CH&p=1&v=1&w=30&x=1
> 
> 
> but even 15600 has a bit of a dip that is similar-ish:
> https://stats.labs.apnic.net/ipv6/AS15600?c=CH&p=1&v=1&w=30&x=1
> 
> 
> 
> Please note that the methodology of the test is based on ads, thus if 
> somebody starts blocking ads, or otherwise breaks the path for those ads, 
> then the test will fail.
> 
> Also note that if some browser OS accidentally breaks/de-prefers IPv6 in some 
> way, these numbers go down too, the advertising agencies are in control.
> 
> France has a similar dip:
> https://stats.labs.apnic.net/ipv6/FR
> 
> Greets,
> Jeroen
> 
> (Funny to realize that 6730 and 6830 will merge at one point, just 100 ASNs 
> diff)
> 
> ___
> swinog mailing list -- swinog@lists.swinog.ch
> To unsubscribe send an email to swinog-le...@lists.swinog.ch
___
swinog mailing list -- swinog@lists.swinog.ch
To unsubscribe send an email to swinog-le...@lists.swinog.ch

[swinog] OVH datacenter SBG2 in Strasbourg on fire 🔥

[Fredy Kuenzler]

Very sad day for our colleagues at OVH AS16276 as they lost their datacenter 
SBG-2 in Strasbourg completly („everything is destroyed“) in a fire 🔥 and the 
neighboring SBG1/SBG3/SBG4 at least temporary.

https://www.dna.fr/amp/faits-divers-justice/2021/03/10/strasbourg-important-incendie-dans-une-entreprise-situee-sur-un-site-seveso-au-port-du-rhin

--
Fredy Künzler

Init7 (Switzerland) Ltd.
Technoparkstrasse 5
CH-8406 Winterthur
https://www.init7.net/
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Fwd: AW: FDV Technische Vorschriften Netzqualität

[Fredy Kuenzler]

Lying to the customer is seldom sustainable. To setup some sort of «QoS» to 
fake the results would be detected sooner or later and will end up in negative 
press.

While I agree with your proposal of the automated test scenarios I think it‘s 
rather an illusion to achieve it.

Note that BAKOM refuses to discuss the topic with the SWINOG community despite 
the accumulated expertise (where else then here?) which I think is wrong.

At least we should try to achieve a fair and unspoiled setup unlike in Germany. 
My proposal is a point to start the discussion.

--
Fredy Künzler

Init7 (Switzerland) Ltd.
Technoparkstrasse 5
CH-8406 Winterthur
https://www.init7.net/

> Am 12.06.2020 um 23:51 schrieb Jeroen Massar :
> 
>> On 2020-06-12 20:16, Fredy Künzler wrote:
>> Dear all,
>> Please see below my communication with BAKOM (OFCOM) regarding the
>> official speed test measurement system which is proposed in the FDV
>> (Fernmeldedienstverordnung).
> 
> So I guess that all these providers will apply nice "QoS" to the well known 
> speedtest prefix, while still applying negative "QoS" for the competition, or 
> by not doing proper peering etc etc etc...
> 
> What is the point of doing this, when it will never match reality?
> 
> 
> Also, it seems that there are monopoly providers who are present at IXs and 
> won't peer then with other ISPs, thus not very useful all that, as the 
> speedtest will be amazing, but the actual packets to the other ISP will fly 
> over timbooktoo...
> 
> 
> Thus maybe, next to speedtests to standardized sinkholes, doing speedtests 
> between ISPs is a good idea; of course, with changing IPs.
> 
> That is: if you participate in this speedtest setup, you host a bunch of 
> nodes in your network, which automatically do speedtests & traceroutes all 
> the time.
> 
> Something akin to RIPE's RIS system, or NLNOG Ring or heck Sam Knows, but 
> then a non-corrupt version of that ;)
> 
> Greets,
> Jeroen


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] SafeHost AS21217 accused to leak routes for two hours to China Telecom AS4134 - anyone from SafeHost to comment?

[Fredy Kuenzler]

https://blog.apnic.net/2019/06/07/large-european-routing-leak-sends-traffic-through-china-telecom/

--
Fredy Kuenzler
Init7 (Switzerland) Ltd.
Technoparkstrasse 5
CH-8406 Winterthur
Switzerland

http://www.init7.net/


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Init7 is about to reconnect SwissIX

[Fredy Kuenzler]

As some may know Init7 decided to leave SwissIX at the end of 2018
mainly to protest against the recent policy of the not-for-profit
SwissIX association.

A decade ago SwissIX was completely volunteer driven, offering peering
infrastructure for no recurring fee. This had changed over time and
ended in an very high fee for a 10gig port of CHF 750 per month
(including a 2nd port for redundancy), which is a lot of money,
comparing other exchanges with similar size and structure such as LONAP
and considering current hardware pricing.

As a matter of fact, SwissIX ports were twice as expensive as the
commercial internet exchange of Equinix in Zürich.

This resulted in accumulation of cash on SwissIX bank account, as well
as rather high consulting fees paid to people which apparently abandoned
the community volunteering idea of the association.

For more details please refer to
http://lists.swinog.ch/public/swinog/2018-December/007105.html


What happend since then:

The SwissIX board reconsidered their price policy quicker than expected
and lowered port prices to a reasonable level with effect of beginning
of 2019. After all Init7's protest leave was for good, as everybody has
to pay less ... you may show your gratitude by sending a 10pack of your
favorite beer to Winterthur - delivery address in the footer ;-)

Init7 is now back and currently reconnecting with two redundant 10gig:
in the recently established site of green.ch in Lupfig, along with
e-shelter in Rümlang. The connections should be ready in a few days, as
we are waiting for cross connect delivery.

A few words about our peering policy - please consider before sending a
request:

1. Init7 AS13030 is not peering with SwissIX Route Servers

2. Init7 is not peering with transit customers or customer customers

3. Init7 expects you to setup 4 BGP sessions (v4, v6 to each router)
without MD5

4. Init7 expects you to have an up-to-date PeeringDB record

5. Any peering request should be sent to peering at init7 dot net
exclusively

6. If there is more traffic than a few hundred Mbps, Init7 expects you
to setup at least one preferred PNI in any common location to offload
traffic and dependency from public infrastructure

7. Init7 expects you to send beer - ehm no


So here we are again, because peering matters.

Happy peering!

Fredy on behalf of Init7, SwissIX President 2004 - 2009

-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
Technoparkstrasse 5
CH-8406 Winterthur
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] New BÜPF / VÜPF: Technical, Organisational and Administrative Requirements, March 1, 2019

[Fredy Kuenzler]

Did anyone notice and read the new BÜPF / VÜPF Technical, Organisational
and Administrative Requirements, valid from March 1, 2019?

To my understanding FDAs with reduced requirements don't have to do
anything.

Press release in DE/FR/IT

DE
https://www.admin.ch/gov/de/start/dokumentation/medienmitteilungen.msg-id-73716.html

FR
https://www.admin.ch/gov/fr/accueil/documentation/communiques.msg-id-73716.html

IT
https://www.admin.ch/gov/it/pagina-iniziale/documentazione/comunicati-stampa.msg-id-73716.html

-- 
Fredy Kuenzler
Init7 (Switzerland) Ltd.
AS13030
Technoparkstrasse 5
CH-8406 Winterthur
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Byebye SwissIX, hello Equinix Zurich Exchange

[Fredy Kuenzler]

More than 10 years ago Init7 unplugged from the Exchange formerly known
as TIX Telehouse Internet Exchange in Zurich.

When we decided to do this, it was evident that SwissIX was offering
much more value for money, in fact, SwissIX offered ports without
recurring monthly fees. SwissIX was completely community driven and a
lot of volunteer work made it happen. The fact of free ports made
SwissIX big in the number of participants. (Disclaimer: I was president
of the SwissIX association between 2004 and 2009).

This has changed. The SwissIX association decided to charge for ports
above 1 Gigabit a few years ago, in order to renew the infrastructure
and to pay a salary for operations (to my knowledge SwissIX pays one
part time employee). I respect that decision, while I was not supporting
it. Consequently Init7 downgraded to 1 Gigabit then and did not accept
new peers ever since.

The price for a 10 Gigabit port apparently was lowered recently to CHF
750 per month. Which sums up to CHF 9000 per year. The 2nd port is
cheaper: CHF 400 per month. Details can be found here:
https://www.swissix.ch/participation

I made a quick count of the ports and found ~100 ports with 10 Gigabit
and two 100 Gigabit ports (according to PeeringDB). Assuming that 50%
are secondary ports a quick estimate of the association revenue adds up
to this sum:

50* CHF 750  = CHF 45
50* CHF 400  = CHF 24
2*  CHF 2600 = CHF  62400

Total≃ CHF 75 per year, not including membership fees

I suppose that this amount is sufficient to buy the complete equipment
required to operate the SwissIX peering mesh twice a year (yes, gear
gets cheaper these days; though it's an absurd example) and still
includes the salary of the one part time employee.

Since such a charging and revenue scheme is in force for several years I
suppose SwissIX has accumulated a seven-digit fortune. However it seems
that no one really knows about it, as the association of SwissIX didn't
make financial reports accessible on the website (I assume they have
been presented on the yearly General Meetings only, though it's not
possible for all association members to be part of it). So the question
remains for many of us: Where did the money go? SwissIX is hardly
visible in the international community, so I guess "money was spent for
Marketing" is not a valid answer.

SwissIX port fees are today among the most expensive in Europe (not
including any membership fees), and all of these Exchanges are way
bigger in terms of traffic and marketing efforts:

LINX 750£ + 424£ (1st, 2nd)
AMS-IX 720€
DE-CIX - no price list published anymore, depends on your negotiation
skills...
Equinix Paris: €400
MIX Milano €750 which includes 1/3 cabinet and power

SwissIX claims to be "Not for Profit". Equinix, in contrary, is listed
on the stock market. Still, the first 10 Gigabit port on Equinix Zurich
Exchange costs CHF 400 per month and includes a cross connect. That's
about half of the cost of the Not-for-Profit SwissIX.

More than 10 years ago, Init7 unplugged from the Exchange formerly known
as TIX Telehouse Internet Exchange in Zurich. Now we are reverting this
decision, as preconditions have reverted too. Init7 has cancelled it's
membership of the SwissIX association to the end of 2018 and will unplug
the remaining 1 Gigabit port anytime soon.

We are happy to accept new peering sessions at Equinix Exchange Zurich
as long as the requirements are met (no peering with customers or
customers of customers). We are also happy to accept new PNI peers in
any common location, if resources are available. Please send inquiries
to peering at init7 dot net.

Happy Peering and good luck, SwissIX.


PS. some useful URLs:

History of SwissIX: https://www.swissix.ch/about
Where it all started - SwiNOG 1: https://www.swinog.ch/meetings/swinog1/

-- 
Fredy Kuenzler
Init7 (Switzerland) Ltd.
AS13030
Technoparkstrasse 5
CH-8406 Winterthur
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Announcing mirror.init7.net

[Fredy Kuenzler]

As SWITCH has announced the sunset of http://mirror.switch.ch/ a while
ago we are happy to announce a successor mirror.init7.net.

https://mirror.init7.net

By supporting IPv6 and legacy IPv4 and https as well as legacy http we
hope to be able to support the Opensource- and Internet-Community in the
future.

In case your DNS resolver is broken we gave mirror.init7.net nice and
easy to memorize IP addresses:

https://2001:1620::1620
https://109.202.202.202

We would like to express our gratitude to SWITCH for providing a mirror
service for much longer than a decade.


PS. a hint for Debian and Ubuntu users - please ensure you have the
package apt-transport-https installed to use https.

-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
Technoparkstrasse 5
CH-8406 Winterthur
Twitter: @init7
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Fwd: mirror.switch.ch to be closed down

[Fredy Kuenzler]

Update: PCTipp made the news public to a broader audience and established the 
hashtag: #SaveSwitchMirror 

http://m.pctipp.ch/news/artikel/nach-jahrzehnten-switch-schaltet-mirror-services-ab-90387/

--
Fredy Kuenzler
Init7 (Switzerland) Ltd.
Technoparkstrasse 5
CH-8406 Winterthur
Switzerland

http://www.init7.net/


Anfang der weitergeleiteten Nachricht:

> Von: Fredy Kuenzler 
> Datum: 22. August 2018 um 15:40:10 MESZ
> An: swi...@swinog.ch
> Betreff: mirror.switch.ch to be closed down
> 
> SWITCH announced that they plan to close down mirror.switch.ch. See
> announcement http://mirror.switch.ch/
> 
> I personally think this is very sad. In the name of the community I
> would like to thank SWITCH for their support over all these years.
> 
> However I would like to start the discussion how we can keep
> mirror.switch.ch alive as a community effort.
> 
> Can the decision makers at SWITCH please explain the preconditions?
> Funding for new hardware? Throw in some bandwidth? Colocation? Server
> management?
> 
> Please discuss.
> 
> -- 
> Fredy Kuenzler
> Init7
> 

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] mirror.switch.ch to be closed down

[Fredy Kuenzler]

SWITCH announced that they plan to close down mirror.switch.ch. See
announcement http://mirror.switch.ch/

I personally think this is very sad. In the name of the community I
would like to thank SWITCH for their support over all these years.

However I would like to start the discussion how we can keep
mirror.switch.ch alive as a community effort.

Can the decision makers at SWITCH please explain the preconditions?
Funding for new hardware? Throw in some bandwidth? Colocation? Server
management?

Please discuss.

-- 
Fredy Kuenzler
Init7



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] google.ch high latency

[Fredy Kuenzler]

To our knowledge google is doing some planned maintenance in their
Zurich Interxion site. Should take several hours.

Sit back, drink tea, wait.

Everything will be back to normal.



On 28.11.2017 18:43, Silvan M. Gebhardt wrote:
> I have lost the peering with google on SwissIX for some reason
> 
> 
> 
> - Ursprüngliche Mail -
> Von: "Nico Schottelius" 
> An: "Kägi Adrian" 
> CC: swinog@lists.swinog.ch
> Gesendet: Dienstag, 28. November 2017 18:06:14
> Betreff: Re: [swinog] google.ch high latency
> 
> Hey Adrian,
> 
> various E-Mails are delayed from our site today and also latency to
> google is a bit higher than usual:
> 
> [18:05] feder:~% ssh mirror.datacenterlight.ch " ping -c3 www.google.ch; ping 
> -c3 euler.ethz.ch"
> PING www.google.ch (216.58.205.99) 56(84) bytes of data.
> 64 bytes from mil04s26-in-f3.1e100.net (216.58.205.99): icmp_seq=1 ttl=54 
> time=23.1 ms
> 64 bytes from mil04s26-in-f3.1e100.net (216.58.205.99): icmp_seq=2 ttl=54 
> time=23.3 ms
> 64 bytes from mil04s26-in-f3.1e100.net (216.58.205.99): icmp_seq=3 ttl=54 
> time=23.2 ms
> 
> --- www.google.ch ping statistics ---
> 3 packets transmitted, 3 received, 0% packet loss, time 2002ms
> rtt min/avg/max/mdev = 23.159/23.245/23.308/0.139 ms
> PING euler.ethz.ch (129.132.71.59) 56(84) bytes of data.
> 64 bytes from hpc-euler-lb.ethz.ch (129.132.71.59): icmp_seq=1 ttl=50 
> time=7.28 ms
> 64 bytes from hpc-euler-lb.ethz.ch (129.132.71.59): icmp_seq=2 ttl=50 
> time=7.84 ms
> 64 bytes from hpc-euler-lb.ethz.ch (129.132.71.59): icmp_seq=3 ttl=50 
> time=7.36 ms
> 
> --- euler.ethz.ch ping statistics ---
> 3 packets transmitted, 3 received, 0% packet loss, time 2003ms
> rtt min/avg/max/mdev = 7.281/7.498/7.846/0.248 ms
> [18:05] feder:~%
> 
> Best,
> 
> Nico
> 
> 
> Kägi Adrian  writes:
> 
>> Hi all
>> We’re face high latency of google.ch (and other European tlds) from our 
>> AS203732
>> $ ping www.google.ch 95ms
>> $ ping www.google.fr 80ms
>> $ ping www.google.de<http://www.google.de> 90ms
>>
>>
>> -> % traceroute www.google.ch
>> traceroute to www.google.ch (216.58.205.131), 30 hops max, 60 byte packets
>> 1  192.168.11.1 (192.168.11.1)  0.116 ms  0.151 ms  0.124 ms
>> 2  dvbnre01-po8-2g.dvbern.ch (185.125.164.2)  0.456 ms  0.568 ms  0.889 ms
>> 3  i64beb-011-ten0-2-0-2x136.bb.ip-plus.net (193.247.169.41)  1.622 ms  
>> 1.312 ms  1.354 ms
>> 4  i64beb-010-ten2-5.bb.ip-plus.net (138.187.157.36)  1.179 ms 
>> i64beb-000-ten2-5.bb.ip-plus.net (138.187.157.22)  1.057 ms 
>> i64beb-010-ten2-5.bb.ip-plus.net (138.187.157.36)  0.877 ms
>> 5  i79zhb-005-ten0-5-0-4-7.bb.ip-plus.net (138.187.130.46)  3.332 ms 
>> i62bsw-025-ten0-1-0-5.bb.ip-plus.net (138.187.130.44)  5.882 ms 
>> i79zhb-005-ten0-5-0-4-7.bb.ip-plus.net (138.187.130.46)  3.312 ms
>> 6  i00mil-005-ae1.bb.ip-plus.net (138.187.129.27)  7.605 ms 
>> i00dcx-005-hun2-0-0.bb.ip-plus.net (138.187.129.83)  6.340 ms 
>> i00mil-005-ae1.bb.ip-plus.net (138.187.129.27)  6.922 ms
>> 7  de-cix.fra.google.com (80.81.192.108)  8.945 ms google.mix-it.net 
>> (217.29.66.96)  45.949 ms de-cix.fra.google.com (80.81.192.108)  8.862 ms
>> 8  108.170.251.208 (108.170.251.208)  8.786 ms 108.170.251.144 
>> (108.170.251.144)  16.055 ms 108.170.252.19 (108.170.252.19)  8.986 ms
>> 9  108.170.229.168 (108.170.229.168)  9.417 ms 209.85.242.79 (209.85.242.79) 
>>  9.364 ms 216.239.42.13 (216.239.42.13)  56.092 ms
>> 10  mil04s27-in-f131.1e100.net (216.58.205.131)  58.975 ms  59.013 ms 
>> 209.85.254.61 (209.85.254.61)  14.983 ms
>>
>> Providers: Swisscom, UPC, Cyberlink
>>
>> Does anyone facing same issues?
>>
>> Cheers Adrian
>>
>> Adrian Kägi
>> Senior System Engineer
>>
>> DV Bern AG | Nussbaumstrasse 21 | Postfach 106 | CH-3000 Bern 22
>> T +41 31 378 24 24 | D +41 31 378 24 60
>> www.dvbern.ch<http://www.dvbern.ch>

-- 
Fredy Kuenzler

-
Fiber7. No Limits.
https://www.fiber7.ch
-

Init7 (Switzerland) Ltd.
AS13030
Technoparkstrasse 5
CH-8406 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Pinging a SALT Mobile IP Engineer (AS15796)

[Fredy Kuenzler]

Please contact me offlist. Thanks.

--
Fredy Kuenzler
Init7 (Switzerland) Ltd.
Technoparkstrasse 5
CH-8406 Winterthur
Switzerland

http://www.init7.net/



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] SmokePing 3.0 Project

[Fredy Kuenzler]

Tobi,

Sounds like a plan! I suggest do make a project on any international accepted 
crowdfunding plattform for the 50k (plus some reserve), we spread the link via 
all *NOG lists and social media and I'm confident that money will be raised in 
no time.

On behalf of the international network community I would like to express my 
appreciation for all your work and effort you made so far.

--
Fredy Kuenzler
Init7 (Switzerland) Ltd.
St.-Georgen-Strasse 70
CH-8400 Winterthur
Switzerland

http://www.init7.net/


> Am 21.11.2016 um 09:02 schrieb Tobias Oetiker :
> 
> Good Morning 
> 
> At SwiNOG-30, I was approached by several people, praising the merits of 
> SmokePing and also wondering when version 3 will come out. I was happy for 
> the praise, but did not have any concrete announcements for a new version, 
> beyond bugfixes. 
> 
> So that got me thinking ... would there be sufficient support among SwiNOG 
> members to raise the money for writing Smokeping version 3?
> 
> 
> Here is my feature shortlist: 
> 
> * non-blocking polling engine - by using an event loop at the heart of the 
> polling engine, smokeping becomes much more scaleable, as it can wait for 
> many probes to return information in parallel without forking, thus reducing 
> the memory impact.
> 
> * interactive charts as shown in the demo at SwiNOG without
> 
> * a responsive UI working with mobile devices
> 
> * the ability to pull in target information from a database
> 
> My current estimate creating this rewrite of is around 50k CHF.
> 
> If you are willing to chip in, and if you have requirements of your own, 
> please be in touch.
> 
> cheers
> tobi
> 
> -- 
> Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland
> www.oetiker.ch t...@oetiker.ch +41 62 775 9902
> 
> 
> ___
> swinog mailing list
> swinog@lists.swinog.ch
> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] DDOS >1Tbps - Swiss-wide (regional) BGP propagation?!

[Fredy Kuenzler]

On 01.10.2016 17:35, Gert Doering wrote:
> I think this is an awesome idea.
> 
> The situation is similar here in DE - nobody could stand an 1 Tbit 
> DDoS attack, and a large number of content offerings are targeted 
> only to german speaking customers, so if DE/A/CH work, 99% of the 
> customers are still able to reach the site.

Maybe we should widen the approach and define a collaborative BGP
community "do announce only in country X", when X is some ISO-3166
country number? A prefix then can contain multiple communities, i.E. to
cover the whole DACH region.

https://de.wikipedia.org/wiki/ISO-3166-1-Kodierliste

> I'm not really sure how this would work in your example - what if
> you have two customers in a given BGP announcement, one of them
> *does* want to be reached world-wide (like, corporate VPNs) and the
> other one is attacked?  Split the aggregate, or bit the bullet and
> have all of them with limited reach, for the time being?

I suppose the e-commerces using such a mechanism would be able to afford
their own /24 and a decent block of IPv6 space (in other words: buy
legacy PI or become LIR). Another option is new business for managed
hosting "DDOS bullet proof Switzerland Hosting", where the hoster
dedicates a /24 or bigger for permanent limited propagation.

-- 
Fredy Kuenzler

-
Fiber7. No Limits.
https://www.fiber7.ch
-

Init7 (Switzerland) Ltd.
AS13030
St.-Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] DDOS >1Tbps - Swiss-wide (regional) BGP propagation?!

[Fredy Kuenzler]

Since we see >1Tbps DDOS attacs in the wild, I suppose out-of-the-box
DDOS mitigation suppliers have lost this race. There is no operator in
Switzerland which can handle 1Tbps DDOS attacks.

When we saw DDOS against digitec.ch and others earlier this year, I was
a bit surprised that none of the so called "experts" proposed regional
BGP propagation as a remedy.

Given that e-commerce such as digitec.ch is assumingly making 99.9% of
the revenue within Switzerland, their prefix doesn't need to reachable
from all over the world. If the prefix of a Swiss e-commerce would be
reachable from Swiss broadband providers only, the DDOS is mitigated, as
the vast majority of the botnet is lacking a route to the targeted
victim IP address.

To achieve this I think we need a collaborative community effort setting
up a common procedure and define a BGP communitiy with the effect "do
not announce beyond Switzerland".

An e-commerce should be able to hit the button injecting this defined
BGP community when under attack (or permanently, of course).

I suppose to make this idea a success we need to have all major
operators in Switzerland on board (3303, 6730, 6830) and I suppose the
smaller operators will follow in their own interest to avoid blackholes.

Anyone? I think it's good if a somewhat "neutral body" with decent BGP
knowledge could take the lead for such a working group, maybe SWITCH or
SwissIX?

--
Fredy Kuenzler

-
Fiber7. No Limits.
https://www.fiber7.ch
-

Init7 (Switzerland) Ltd.
AS13030
St.-Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Brocade MLXe: Random Linecard Reboot - anyone else?

[Fredy Kuenzler]

Friday night we observed several Brocade MLXe linecards rebooting (several 
locations, i.e. Amsterdam, Frankfurt, Geneva), which caused network instability 
due to flapping iBGP etc.

As of now we know that iWay and nine.ch suffered from similar issues in the 
same time window, and we believe that they use also Brocade MLXe.

Tonight around 4 a.m. symptoms occurred again, on a lesser degree. nine.ch 
reports it too.

For reference the tickets:
http://www.init7.net/de/status/?ticket=10348
https://status.nine.ch/en/messages/544
https://www.iway.ch/iway/status/

Did anyone else observed similar symptoms?

Since these routers operate in various locations and ASNs but are the same 
make/model I suppose it's a software security issue. Can malicious packets 
force a linecard reboot?

Regards,

--
Fredy Kuenzler
Init7 (Switzerland) Ltd.
St.-Georgen-Strasse 70
CH-8400 Winterthur
Switzerland

http://www.init7.net/




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Swisscom now peering with Netflix

[Fredy Kuenzler]

In case you missed it: Swisscom now peering with Netflix after big
shitstorm in social media and general media yesterday and today.

http://pastebin.com/sgwD3qfh

I suppose the peering policy of Swisscom is now obsolete, as well as
their monetizing OTT strategy.

It's a good day for real netneutrality, not the crippled version of some
larger Swiss operators.

-- 
Fredy Kuenzler

-
Fiber7. No Limits.
https://www.fiber7.ch
-

Init7 (Switzerland) Ltd.
AS13030
St.-Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Cablecom and OVH speed problems since years

[Fredy Kuenzler]

I guess the reason for the poor performance is the broken peering policy of UPC 
AS6830. Traffic ratio between OVH and UPC is likely around 10:1 and therefore 
UPC is not willing to upgrade unless OVH pays them a fortune. 

Despite that UPC customers request the traffic from OVH servers (they are 
supposed to do so, as they pay their broadband connection), UPC still does not 
provide enough bandwidth, since they want to force a double-sided revenue 
stream.

On the other side, I'm pretty sure that OVH would immediately upgrade 
interconnects with UPC based on zero settlement.

That means: UPC is to blame, not OVH. The only adequate answer is: cancel your 
UPC subscription, if you have a choice. But be aware, that the Swiss incumbent 
is not any better in their policy; exchanching UPC with SC is like out of the 
frying pan into the fire...

This story goes on an on for at least 10 years, you can only exchange actor 
names: UPC, SC, DTAG, FT, Telefonica, Comcast, Verizon... vs. OVH, Netflix, 
Hetzner, Cogent... and Init7, too.

--
Fredy Kuenzler
Init7 (Switzerland) Ltd.
St.-Georgen-Strasse 70
CH-8400 Winterthur
Switzerland

http://www.init7.net/


> Am 06.07.2015 um 07:26 schrieb JACOT-DESCOMBES Antoine 
> :
> 
> Hi Marco,
> 
> Maybe try to contact Octave (Founder & CTO of OVH) at o...@ovh.net 
> 
> Best regards,
> Antoine
> 
> 
> De : swinog-boun...@lists.swinog.ch [mailto:swinog-boun...@lists.swinog.ch] 
> De la part de Marco Näf
> Envoyé : dimanche 5 juillet 2015 21:20
> À : swinog@lists.swinog.ch
> Objet : [swinog] Cablecom and OVH speed problems since years
> 
> Hello Everyone
> 
> I'm having speed problems when I want to download files with my 250mbit 
> Cablecom home connection from OVH. The files are loading with a maximum of 
> 300kb/s. A MTR shows that all data is transfered via a private peering 
> directly from OVH.
> As it's very difficult to get someone from the Cablecom network departement 
> via telephone or email support and I've seen there are people from Cablecom 
> on this mailing list, I would like to ask someone from cablecom to contact me 
> about this issue at marco AT naefmarco dot ch for more information.
> 
> Thank you.
> 
> --
> Best Regards
> Marco Näf
> AS201882
> 
> 
> ___
> swinog mailing list
> swinog@lists.swinog.ch
> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] SAVE THE DATE - 15.10.2015

[Fredy Kuenzler]

Dear Core Team,

On behalf of the community I would like to thank you for putting together 
another great Swinog event.

Re save the date: not sure whether you really want to have Swinog in the middle 
of most autumn school holidays. Please reconsider Oct. 15. Many of us have 
families...

Thanks,

Fredy/Init7

--
Fredy Kuenzler
Init7 (Switzerland) Ltd.
St.-Georgen-Strasse 70
CH-8400 Winterthur
Switzerland

http://www.init7.net/


> Am 06.05.2015 um 20:40 schrieb Simon Ryf :
> 
> Dear SwiNOGers
>  
> Thank you for a great day, lots of input and your support!!
> We don’t have yet the confirmation for the Gurten but don’t want to let you 
> wait any longer :-P
>  
> Save the date for SwiNOG #29 – 15.10.2015
>  
> We’ll keep you posted.
> I wish you a save trip home and looking forward to seeing you soon.
>  
> Br
> Simon
> SwiNOG
>  
> P.S. This is no CFP but that doesn’t mean that you can’t already submit Ideas 
> :)
> 
> ___
> swinog mailing list
> swinog@lists.swinog.ch
> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] PI address space needed

[Fredy Kuenzler]

Am 13.04.2015 um 08:38 schrieb Andre Timmermann:
> currently we (local.ch) are hosted in two different datacenters,
> each with a dedicated uplink.
> 
> In order to improve the reliability and to dissolve single points of 
> failure I want to do a proper BGP setup.
> 
> One step of the whole thing is getting a PI space. As I do not want
> to become a LIR (too tedious, too much work) we want to buy a /24 for
> our setup.
> 
> Can anyone point me into the right direction (or even sell a /24 ;))?

PI is history since Sept. 14, 2012.
https://www.ripe.net/internet-coordination/ipv4-exhaustion

You may want to talk to any of the v4 broker or become LIR nevertheless,
which is rather easy in fact.

-- 
Fredy Kuenzler

-
Fiber7. No Limits.
https://www.fiber7.ch
-

Init7 (Switzerland) Ltd.
AS13030
St.-Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Swisscom Webserver via IPv6 down?

[Fredy Kuenzler]

We assumed a nasty 512k CAM issue in the first place but it seems that
the Swisscom Webserver is not accessible via IPv6. Anyone else?

F.



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] swinog Digest, Vol 115, Issue 3

[Fredy Kuenzler]

Am 09.08.2014 12:20, schrieb Florian Bruhin:
> * berquet matthieu  [2014-08-09 12:01:18 +0200]:
>> *
>> Compte de messagerie inexistant.
>> *
> 
> Since this seems to be an automated message: Could someone please 
> remove that address from the list or take some other appropriate 
> action?

User has been set to moderated.

-- 
Fredy Kuenzler

-
Fiber7. No Limits.
https://www.fiber7.ch
-

Init7 (Switzerland) Ltd.
AS13030
St.-Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] 3G Repeater

[Fredy Kuenzler]

Is anyone familiar with 3G repeater gear? I'm asking for a neighbor whose 
family owns a cottage in a Swiss mountain valley with poor 3G reception.

Any recommendation for gear which is easily installable, more or less 
plug-n-play, not too expensive (less than CHF 1000) and last but not least 
legal to operate would be appreciated.

--
Fredy Kuenzler
Init7 (Switzerland) Ltd.
St.-Georgen-Strasse 70
CH-8400 Winterthur
Switzerland

http://www.init7.net/



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Swinog BE132 ZRH

[Fredy Kuenzler]

Am 05.05.2014 17:34, schrieb Roger Buchwalder:
> Since nobody will come to the Swinog BE, I will cancel the event. :(

Is SwiNOG dead yet?!

-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
St. Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Lösung für eine SMS-Notfallalarmierung und Statuswebseite

[Fredy Kuenzler]

http://www.dolphin.ch/ bietet solche Services ab Stange.

Wenn das nicht passt, frag mal Andreas Fink, er ist der SMS Guru. 
http://www.fink.org

Wir selber haben eine sälberglismete Lösung im Einsatz, basierend auf Kannel, 
mit SMS-Flatrate-Simkarten, günstig und effizient. Die 3G Böxli sind glaub von 
Siemens, der genaue Typ müsste ich aber erst raussuchen.

--
Fredy Kuenzler
Init7 (Switzerland) Ltd.
St.-Georgen-Strasse 70
CH-8400 Winterthur
Switzerland

http://www.init7.net/


> Am 17.04.2014 um 10:24 schrieb Andy Christen :
> 
> Grüezi und hoi
> 
> Wir suchen für unsere Firma eine Lösung für eine SMS-Notfallalarmierung.
> Leider haben wir für diese Situation kein passendes öffentliches Angebot 
> finden können,
> darum gelange ich an die Swinog-Mailingliste und hoffe, dass jemand von 
> Ihnen/euch
> eine annähernd gleiche Lösung für sich selbst oder Kunden im Einsatz hat.
> 
> Hier also die Anforderungen die wir haben:
> Anforderungen:
> Upload von Natelnummern auf ein Portal/Webseite mit Möglichkeit einer 
> Gruppierung der Einträge.
> Versand von Info-/Status-SMS an die eingetragenen SMS-Gruppen per Webseite 
> (admin) und/oder SMS-Forward.
> Status-Webseite öffentlich über dasselbe Portal einfach aufruf- und wartbar - 
> ev. Status mit SMS updatebar
> Beispiel Inhalt Webseite/Statusseite:
> 14.04.2014 09:54  E-Mail Service läuft wieder
> 14.04.2014 08:01  E-Mail läuft nicht. Wir sind dran.
> 01.04.2014 00:01  Kein Scherz: alle Systeme grün.
> 
> Vielen Dank schon im voraus und allen schöne und wo möglich ruhige Ostertage.
> 
> enGruess, Andy Christen
> 
> -- 
> andreas.chris...@ergon.ch,   +41 44 268 8927,   
> http://www.ergon.ch.
> Ergon Informatik AG,  Kleinstrasse 15,  8008 Zuerich, 
> Switzerland.
> 
> e r g o nsmart people - smart software 
> 
> 
> 
> ___
> swinog mailing list
> swinog@lists.swinog.ch
> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] More Specifics (was: 84.253.0.0/19 (bluewin, old cybernet space) badly routed)

[Fredy Kuenzler]

Am 16.04.2014 13:08, schrieb Jeroen Massar:
> More specifics are evil and give weird routing in various locations.

Not always. When Init7 started to propagate more specifics to it's four
/19 and /18, about 2gig of inbound traffic switched from transit links
to peering links. This is real money and IMHO a valid reason to
propagate selectivly more specific prefixes (i.E. two /20 for one /19).

Massiv deaggregation however is indeed evil, and there are just too many
networks out there which do it unconsciously in a very stupid way.

Init7 is filtering away more than 1 more specific prefixes from
transit. To explain this a bit further I'd like to point to a
presentation I gave a while ago during NANOG 54.

https://www.nanog.org/meetings/nanog54/presentations/Monday/Kuenzler.pdf

-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
St. Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] SwiNOG #27 - Call for Papers

[Fredy Kuenzler]

Steven, all,

Am 31.01.2014 22:57, schrieb Steven Glogger:
> The 27th meeting of the Swiss Network Operators Group (SwiNOG) will
> be held in Berne on top of the Gurten on April 9th 2014.

This is the week of GPF9... I guess some folks will be in Whistler, BC.

-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
St. Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Anyone round Zurich with an OTDR and a little bit of time?

[Fredy Kuenzler]

André,

We are investigating what went wrong. As far as I know this is a special
case and we are reselling a simple darkfiber of Sunrise (very uncommon),
and it seems that a ticket has been opened with Sunrise a while ago. As
it's a Layer-1 service we are unable to check the functionality.

Someone from our team will get back to you offlist once we have further
information.

Sorry for the issue.

Best regards,
Fredy / Init7


Am 03.12.2013 13:53, schrieb Andre Timmermann:
> Hi List
> 
> I'm trying to debug a fiber connection between two datacenters in 
> Zurich. Unfortunately the other companies involved are not very 
> responsive. And please bear with me, I am not a network engineer, I
> am just the poor guy who got this thingie on his desk...
> 
> Here is what I am trying to achieve:
> 
> In each datacenter we got an Arista DCS-7050T-52 with each an SFP 
> 1000BASE-LX which supports up to 10km links on single-mode and 550m
> on multi-mode fiber.
> 
> We got a 1Gbps "dedicated Layer2 Connection incl. Managed Switch"
> from Init7. As far as I know, they are using Sunrise as partner to
> provide the connection. We are connecting to a SMF with 1310nm.
> 
> If I put everything together, I still see a "notconnect" on the 
> switchport. Unfortunately the "Platin" support seems to be more like
> "Bronze", we do not get a proper response right now.
> 
> Currently I can't tell if there is something wrong within our setup
> or within the setup of our provider.
> 
> I would like to get a third party with a proper testing device (and
> more experience than me) to meet me in the datacenter(s) and help me
> to find evidence what the heck is going on.
> 
> Best regards,
> Andre Timmermann
> 


-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
St. Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] OFFTOPIC: Hardware needed

[Fredy Kuenzler]

Am 26.09.2013 17:24, schrieb Silvan M. Gebhardt:
> Anyone got a recommendation where to look at? I don't like to have to
> go to oracle directly

noone home at Oracle, they all went sailing *scnr*

F.



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Scenic route of the day: L3 towards UPC

[Fredy Kuenzler]

Am 26.09.2013 12:33, schrieb Jeroen Massar:
>> Anyone else seeing this... do we have a new peering spat or is it
>> just a random routing issue?
> 
> Looks to be just that prefix, as for instance:

Actually we've seen more than 300 prefixes with the same path. Meanwhile
the journey to california and back is history. Apparently there was just
a BGP session down between L3(GBLX) and UPC. Not much n+1, though...

Nevermind and sorry for the noise.

-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
St. Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Scenic route of the day: L3 towards UPC

[Fredy Kuenzler]

Anyone else seeing this... do we have a new peering spat or is it just a
random routing issue?

Regards,
Fredy



traceroute to 84.116.204.234 (84.116.204.234), 30 hops max, 60 byte packets
 1  r1zlz1.core.init7.net (77.109.136.233) [AS13030]  23.682 ms  23.741
ms  23.775 ms
 2  r1zrh1.core.init7.net (77.109.128.209) [AS13030]  0.188 ms
r1zrh2.core.init7.net (77.109.128.74) [AS13030]  0.199 ms
r1zrh1.core.init7.net (77.109.128.209) [AS13030]  0.193 ms
 3  r1bas1.core.init7.net (77.109.128.130) [AS13030]  1.090 ms  1.129 ms
r1fra1.core.init7.net (77.109.128.250) [AS13030]  38.806 ms
 4  r1fra2.core.init7.net (77.109.128.133) [AS13030]  5.997 ms  5.988 ms
 6.016 ms
 5  TenGigabitEthernet8-1.ar2.FRA4.gblx.net (64.213.54.33) [AS3549]
6.653 ms  6.134 ms  6.673 ms
 6  ae7.edge2.SanJose3.level3.net (4.68.62.177) [AS3356]  153.420 ms
152.925 ms  153.399 ms
 7  vlan70.csw2.SanJose1.Level3.net (4.69.152.126) [AS3356]  161.564 ms
vlan90.csw4.SanJose1.Level3.net (4.69.152.254) [AS3356]  161.054 ms
vlan70.csw2.SanJose1.Level3.net (4.69.152.126) [AS3356]  161.807 ms
 8  ae-71-71.ebr1.SanJose1.Level3.net (4.69.153.5) [AS3356]  160.948 ms
ae-61-61.ebr1.SanJose1.Level3.net (4.69.153.1) [AS3356]  160.512 ms
160.433 ms
 9  ae-2-2.ebr2.NewYork1.Level3.net (4.69.135.186) [AS3356]  161.355 ms
 161.310 ms  161.509 ms
10  ae-47-47.ebr2.NewYork2.Level3.net (4.69.201.34) [AS3356]  161.949 ms
4.69.201.38 (4.69.201.38) [AS3356]  161.581 ms  161.724 ms
11  ae-1-100.ebr1.NewYork2.Level3.net (4.69.135.253) [AS3356]  162.124
ms  161.121 ms  161.658 ms
12  4.69.201.85 (4.69.201.85) [AS3356]  161.126 ms 4.69.201.93
(4.69.201.93) [AS3356]  161.524 ms 4.69.201.85 (4.69.201.85) [AS3356]
161.193 ms
13  ae-72-72.csw2.Washington1.Level3.net (4.69.134.150) [AS3356]
161.151 ms  161.558 ms ae-82-82.csw3.Washington1.Level3.net
(4.69.134.154) [AS3356]  161.627 ms
14  ae-33-80.car3.Washington1.Level3.net (4.69.149.133) [AS3356]
185.388 ms ae-43-90.car3.Washington1.Level3.net (4.69.149.197) [AS3356]
 263.449 ms ae-23-70.car3.Washington1.Level3.net (4.69.149.69) [AS3356]
 264.054 ms
15  UPC-BROADBA.car3.Washington1.Level3.net (4.79.168.202) [AS3356]
161.118 ms  161.109 ms  160.838 ms
16  84.116.134.61 (84.116.134.61) [AS6830]  167.752 ms  167.674 ms
159.751 ms
17  at-vie15a-ra1-xe-2-2-0.aorta.net (84.116.130.245) [AS6830]  160.584
ms  161.327 ms 84-116-130-62.aorta.net (84.116.130.62) [AS6830]  160.749 ms
18  hu-bud02a-ra3-xe-1-1-0.aorta.net (84.116.130.194) [AS6830]  161.284
ms  160.877 ms ch-zrh02a-ra1-xe-2-0-0.aorta.net (84.116.130.226)
[AS6830]  160.285 ms
19  84.116.204.234 (84.116.204.234) [AS6830]  160.346 ms  160.831 ms
160.272 ms


-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
St. Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Domain ip-plus.net hijacked?

[Fredy Kuenzler]

It seems that the Domain ip-plus.net got hijacked by some domain grabber:
http://www.ip-plus.net/

Traceroutes to any Swisscom host look rather ugly.

-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
St. Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Domain ip-plus.net hijacked?

[Fredy Kuenzler]

It seems that the Domain ip-plus.net got hijacked by some domain grabber:
http://www.ip-plus.net/

Traceroutes to any Swisscom host look rather ugly.

-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
St. Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] UPC AS6830 Looking Glass / Traceroute?

[Fredy Kuenzler]

Is anyone aware of a UPC AS6830 Looking Glass and/or Traceroute? Or
could anyone give us shell access to a host which is within AS6830?

Thanks,

-- 
Fredy Kuenzler

Init7 (Switzerland) Ltd.
AS13030
St. Georgen-Strasse 70
CH-8400 Winterthur
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7 / @kuenzler
http://www.init7.net/



signature.asc
Description: OpenPGP digital signature

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Replacement Fan for C2950-T-24?

[Fredy Kuenzler]

Try Pusterla at Hohlstrasse. They used to have all kinds of electronic 
components a couple of years ago. Just walk in with the broken fan and ask for 
a spare part...

Von meinem iPhone gesendet

Am 25.06.2013 um 19:33 schrieb Andre Oppermann :

> Does anyone know a good source for replacement fans for the Cisco 2950-T-24?
> 
> A "silent" version would be preferred.  The fan is 40x20mm and has a 3-pin
> connector.  Yes, I've already checked Digitec but they don't seem to have
> anything that matches.
> 
> Thanks
> -- 
> Andre
> 
> 
> ___
> swinog mailing list
> swinog@lists.swinog.ch
> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Fwd: Technical Instructor for AXIS Project

[Fredy Kuenzler]

FYI - pour les romands: who can help and give a French training to our 
colleagues in the African Internet community? It's rather short term (you 
likely will need a visa for Burkina Faso, please hurry) ... I'm sure that 
Michuki can answer any questions.


Regards,
Fredy



 Original Message 
Subject:[Euro-IX-Members] Technical Instructor for AXIS Project
Date:   Thu, 21 Feb 2013 16:14:44 +
From:   Bijal Sanghani 
To: EURO-IX Members List 



Dear Members,

Michuki Mwangi of ISOC is looking for a French speaking technical
trainer to help with the AXIS project, details about the AXIS project
can be found here:
http://www.internetsociety.org/news/african-unionau-selects-internet-society-support-establishment-internet-exchange-points-across

The Technical Workshop is scheduled for 4 - 8 March in Burkina Faso.

The course covers the following topics:

* Internet, TCP/IP and Routing
* Routing Protocols
* OSPF and BGP for Internet Service Providers (ISPs)
* BGP, Attributes, Policy
* BGP Scaling and Multi-homing
* IXP design, set-up and operation
* IXP Laboratory Exercises

ISOC through the AXIS project will cover the travel and
accommodation expenses for the instructor and assist with the logistics.
 If you are interested and available during this time and would like
more information please contact either myself or Michuki (cc'd).

Kind regards,

Bijal Sanghani
Head of Secretariat
Euro-IX


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] (secret) ITU conference in Dubai: Swiss Delegation?

[Fredy Kuenzler]

Links and pictures of the Swiss delegation:

Am 28.11.2012 00:37, schrieb Fredy Kuenzler:

Mr Frédéric RIEHL, Chef des Affaires Internationales, OFCOM (Suisse) /
BAKOM, frederic dot riehl at bakom dot admin dot ch


http://www.bakom.admin.ch/org/organisation/00537/00944/index.html?lang=en


Mr Rolf WEBER, Professor, Faculty of Law, University of Zurich


http://www.rwi.uzh.ch/lehreforschung/alphabetisch/weberr/person.html

F.



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] (secret) ITU conference in Dubai: Swiss Delegation?

[Fredy Kuenzler]

Am 27.11.2012 22:37, schrieb Fredy Kuenzler:

Does anyone know the Swiss delegate of the upcoming ITU conference in
Dubai? [...]


In response to my tweet pointing to this email in the SwiNOG mailinglist 
archive I got a response with five names of the Swiss Delegation:



There was the accreditation list mailed to some ISOC list last week, 5
people on the Swiss delegation:

Mr Frédéric RIEHL, Chef des Affaires Internationales, OFCOM (Suisse) /
BAKOM, frederic dot riehl at bakom dot admin dot ch

Mr Hassane MAKKI, Affaires Internationales, Federal Office of
Communications - OFCOM, hassane dot makki at bakom dot admin dot ch

Mr Raphael SCHERRER, Conseiller Economiste, OFCOM (Suisse) / BAKOM,
raphael dot scherrer at bakom dot admin dot ch

Mr Dirk-Olivier VON DER EMDEN, Conseiller juridique, Office Fédéral de la
Communication (OFCOM/BAKOM), dirk-olivier dot von-der-emden at bakom dot
admin dot ch

Mr Rolf WEBER, Professor, Faculty of Law, University of Zurich

First one is flagged as Head of delegation, second one is deputy.


So we know now that mainly BAKOM/OFCOM people are traveling to Dubai.

Please all individuals refrain from sending personal emails the delegation! 
They don't need geeky comments or even stupid insulting.


I'd rather suggest that the SwiNOG core team is going to formulate a clear 
statement to the Swiss ITU delegation (please note that I left the SwiNOG 
core team >1y ago). SwiNOG needs to speak in a united voice in this matter.


I also hope that general interest media (Swiss television, Tages-Anzeiger, 
Blick et.al.) would pick this out as a central theme, along with special 
interest media (computer/telecommunication). It would be simply great to 
read a large interview with the delegates, where they commit themselves to 
stand for the self-regulated bottom-up Internet as we know and love. Support 
not only from this community but also from general media and us, the Swiss 
people, would strenghten their position... so please, dear journalists 
around, make a move :-) It will have an impact not only in Switzerland, but 
also in neighbouring countries.


Except from heise.de I haven't seen much yet about the ITU conference in 
special interest media (computers/telecommunications). Not sure why, I guess 
inside-it.ch et.al. have some backlog... *hint*


Meanwhile I hope everyone would help to share the link and video I mentioned 
in my previous mail:


https://www.whatistheitu.org/
http://www.youtube.com/watch?v=XzNQarkk95Q

Also I would like to include the link to the slides of SwiNOG #25 of Arnold 
Nipper with some unbiased information:

http://www.swinog.ch/meetings/swinog25/p/11_SwiNOG25-WCIT-20121107.pdf

Thanks for listening and sharing!

--
Fredy Künzler

Init7 (Switzerland) AG
AS13030
Elias-Canetti-Strasse 7
CH-8050 Zürich
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7
http://www.init7.net/


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] (secret) ITU conference in Dubai: Swiss Delegation?

[Fredy Kuenzler]

Does anyone know the Swiss delegate of the upcoming ITU conference in Dubai? It 
would be appropriate if the delegate of our democratic country actually has a 
known face and we all know how he/she is going to vote.

The topics in this conference are a real threat to the Internet we know and 
love (refer to the SwiNOG #25 slides of Arnold). 

If you are not familiar yet with the topic, watch (and share) this website and 
video:

https://www.whatistheitu.org/
http://www.youtube.com/watch?v=XzNQarkk95Q

Regards,
Fredy Künzler / Init7



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Routing problems @ cablecom?

[Fredy Kuenzler]

Am 26.05.2012 16:43, schrieb Benoît Panizzon:

I'm not able to reach any address @as6772 from cablecom. Anyone else
experiencing such Problems?


We just see only about 40% of the normal traffic load between UPC Cablecom
and Init7 since appx. 15:00 CET. Maybe an issue in the UPC-Cablecom backbone?

--
Fredy Künzler

Init Seven AG
AS13030
Elias-Canetti-Strasse 7
CH-8050 Zürich
Skype:   flyingpotato
Phone:   +41 44 315 4400
Fax: +41 44 315 4401
Twitter: @init7
http://www.init7.net/


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] What GeoIP Locator service do srf.ch, bluewin.ch and iTunes use?

[Fredy Kuenzler]

Am 26.01.2012 15:59, schrieb Steven Glogger:

as far as I heard akamai is doing the stuff for SRF. but i'm sure fredy
knows more about it.


hey... :-)

I can only speak for the SRF radio streams which are distributed by Init7.
Most, actually almost all of them, don't have any geolocation based blocking.

Am 26.01.2012 16:26, schrieb Benoit Panizzon:

The Problem was solved. They use an offline version of the wipmania.com
GeoIP Database. They added our range to their offline database and we
have also submitted the range to wipmania.com as it was flagged
'unknown'.


I wasn't aware of WIPmania. It doesn't look too promising though, as they
claim on there website:


25 Mai 2011 - Letzte Änderung der WorldIP Datenbank

added or changed 8140 networks
100.749.550 IP addresses changed
total 91423 networks


37.17.232.0/21 which was recently allocated to Init7 Germany is also
missing, for example. I submitted this range now. It seems that WIPmania is
not importing new allocation automatically.

Large blocks such as 37.50.0.0/15 and 37.80.0.0/12 which have been allocated
to T-Mobile three days ago should appear immediately, or at least as soon as
they show up in the routing table.

Best regards,

Fredy Künzler
Init7 / AS13030


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Swisscom VDSL -> TELIA -> USA problem

[Fredy Kuenzler]

>> Responsetime of hop 12 (80.91.251.98) is much higher than hop 11 
>> (80.91.249.113) and a ping test did show lost packets on hop 12 but not on 
>> hop 11.
>> 
>> 
>> 11  prs-bb1-link.telia.net (80.91.249.113) [AS1299]  25.882 ms  125.402 ms  
>> 25.827 ms
>> 12  ash-bb1-link.telia.net (80.91.251.98) [AS1299]  108.584 ms  113.053 ms 
>> ash-bb1-link.telia.net (80.91.252.36) [AS1299]  158.407 ms

Hop 11 is in Paris, hop 12 in Ashburn. I don't see anomalies considering the 
latency, as the atlantic is in between.

The path seems to be multipath, but this is still ok. The loss / congestion 
could be on the return path, for proper diagnosis you need a traceroute from 
the other end, too.

Check return pathes to proxies and compare them to the direct link... and, as 
Victor already said, don't expect guaranteed latecy on a xDSL service...

HTH,
F.

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] New list for jobs

[Fredy Kuenzler]

Am 23.08.2011 08:20, schrieb Per Jessen:

To answer some little unhappyness from Viktor, Per and Stanislav,

It is to allow more offers to be posted, especially from job-agencies.
We have done this because we were asked by an agency to regularly post
on the general list and we refused.


Okay, that makes a lot more sense.  Perhaps the list would have been
better named "jobads" :-)


The community should decide. If noone would subscribe to swinog-jobs, it
simply would die again. But it seems that quite a big chunk of the community
is interested in job advertising. As of now 72 subscribers are registered at
swinog-jobs. For comparison: swinog has 917 subscribers.

F.


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Open Position @ Init7: Network Engineer

[Fredy Kuenzler]

Dear all,

Init7 has an open position - we are looking for a network engineer:
http://www.init7.net/jobs/

Best regards,
Fredy Künzler


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] for sale: 3* Cisco 7301 Router

[Fredy Kuenzler]

We have 3* Cisco 7301 router for sale (incl. 1Gig ram for full BGP table). 
Please contact me offlist with a quote if you are interested. The boxes are 
available for pickup in Zurich Oerlikon, and we need to charge VAT (if this 
matters for you).


Regards,
Fredy



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] use your voting rights: RIPE NCC general meeting

[Fredy Kuenzler]

Dear all,

As I consider it important to use the democratic rights, I think noone 
should miss the chance of voting at the RIPE NCC general meeting on May 4, 
2011 in Amsterdam:

https://www.ripe.net/lir-services/ncc/gm/may-2011

Any LIR representative who cannot attend in person can either vote 
electronically or pass on his voting right to a proxy. If you think that 
electronic voting is too much hassle, I can offer myself as your proxy 
voter. All you have to do is to fill in this form

http://www.blogg.ch/uploads/ripe-proxyvote-form-fku.pdf
and fax or email it to a...@ripe.net (and please cc me).

Best regards,

Fredy Künzler
Init7 / AS13030


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] IP network not reachable from switzerland - 69.162.65.122, but from outside, eg belarus/brasil

[Fredy Kuenzler]

Am 07.04.2011 17:40, schrieb Stephan Wolf:

we can NOT reach the upper IP from:

- swisscom mobile
- cablecom.biz
- cablecom home
- swissix

but:
from our brasilian firewall I can ping host and reach smtp / http sockets
- also from a belarus provider.

and also from a testsite, hosted in germany / hetzner, the IP is
reachable.

but effectively from not any switzerland ISP reachable :-(


not particularly true...


sad is, that reverse.lstn.net is dropping ICMP packets / traceroutes not
possible in any case

so host 69.162.65.122 is only answering to ICMP echo requests, and
listens to tcp25 and tcp80

could you be so kind and check, if you can connect to this host, and tell
me, via which ISP / peering ?


We have the prefix in our table and are advertising it to Hetzner, I 
suppose. Check our LG in case: http://www.init7.net/looking-glass/index.php


BGP routing table entry for 69.162.64.0/18
Paths: (1 available, best #1, table Default-IP-Routing-Table)
  Not advertised to any peer
  6461 46475
213.144.128.179 from 213.144.129.65 (213.144.128.179)
  Origin IGP, metric 1, localpref 150, valid, internal, best
  Community: 13030:1 13030:1017 13030:51202
  Originator: 213.144.128.179, Cluster list: 213.144.128.177
  Last update: Thu Apr  7 06:30:31 2011

Best regards,

Fredy Künzler
Init7 / AS13030


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Bluewin dynamic IP-ranges

[Fredy Kuenzler]

Am 09.03.2011 08:02, schrieb steven.glog...@swisscom.com:

'sh ip bgp regexp _44038_' would help, I assume. But note there are
plenty of more-specifics for traffic engineering.


actually you get too much - not only bluewin ,-)


... and after the next Swisscom reorganisation you get less if you stick to
AS44038

*scnr*

F.


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Bluewin dynamic IP-ranges

[Fredy Kuenzler]

Am 07.03.2011 13:02, schrieb Philip Iezzi:

Can someone from Bluewin/Swisscom please provide me with a list of all
possible dynamic IP-ranges Bluewin offers to its customers? I need this
for a firewall rule that should give access to a service for all Bluewin
customers.


'sh ip bgp regexp _44038_' would help, I assume. But note there are plenty
of more-specifics for traffic engineering.

F.


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] IPv4 already exhausted at IANA ?

[Fredy Kuenzler]

Am 03.12.2010 00:27, schrieb Guillaume Leclanche:

I noticed on this list no special reaction to the fact that IANA has only
7*/8 left after the allocations on Nov. 30th. So I thought I'd start a
thread to share my thoughts on the fact that IPv4 is in reality _already_
exhausted at IANA.

[...]


Good summary, thanks for this.


Now if you have not thought yet about how your network will reach the
networks that will be IPv6-only starting middle of next year, well ...
I'm sure a lot of people on the list are ready to help :)


I'd say some have to cancel christmas holiday and network freeze periods...
too bad. Anyway, I thought I share the links of the latest versions my
presentations I gave earlier in various occations, which may be a start to
make the network IPv6 ready.

http://www.blogg.ch/uploads/IPv6-deployment-for-the-IPv4-clueful-heise-ipv6-conference.pdf
http://www.blogg.ch/uploads/Native-IPv6-via-xdsl-how-to-tweak-your-LNS.pdf

Good luck to all v6 newbies!

F.


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] No moderation of the list queue

[Fredy Kuenzler]

Just a quick note regarding the mailinglist of swi...@swinog.ch:

There is _no_ moderation. Any message which is stuck in the queue is going 
straight to /dev/null. Reason: too much spam arriving in the queue, and no 
time to fish for any legitimate message.


If you happen that your message to the list is not distributed (i.e. showing 
up in the archive http://lists.swinog.ch/public/swinog/), it is discarded. 
Ensure that your sending parameters are correct and resend.


F.


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] BGP Origin ASN Validation

[Fredy Kuenzler]

Am 15.11.2010 12:39, schrieb Roque Gagliano:

I believe Tim has a point in this comment, we already analyze it
positively internally to add that capability.

When all of these starts rolling-out, you would have a huge percentage of
"not-found", that is why you would not want to deny those. There you can
see the importance of generating your ROAs, although you are not
particularly interested in filtering.


While from a technical perspective the BGP Origin ASN Validation is a good
approach, it loads a burden to the system itself and to the BGP engineers
around the globe, just because Pakistan Telecom's network engineer is not
capable to type 'set community no-export' and PCCW (Upstream of Pakistan
Telecom) f***ed up the prefix list (copy-paste for other example, replace
names).

Why should we change a generally good working system just because some
network rookies don't know better? Fix the problem by the source, don't
circumvent it.

My CHF 0.05,
Fredy



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Init7 is hiring: Linux SystemadministratorIn / Web ProgrammiererIn

[Fredy Kuenzler]

http://www.init7.net/jobs-webprogrammierer100.php


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Datenschutzbeauftragter

[Fredy Kuenzler]

Am 14.10.2010 09:24, schrieb Radek Mrskos:

Would this be an opportunity for you?

http://stadt.winterthur.ch/info/jobs/job-detail/job/datenschutzbeauftragten-2493/


No, I don't qualify:

"Sie besitzen einen juristischen Hochschulabschluss und insbesondere
gute Kenntnisse im Datenschutz- sowie im Staats- und Verwaltungsrecht."

As a member of the city parlament of Winterthur, which is the election
committee, it would not be possible to vote for myself...

Some insight on this job: it was actually quite a bit of work in the
commission to make this position independent again from the general
administration of the city of Winterthur. I'm looking forward to work on the
level of the parlament with someone competent which understands the issues
of todays data protection. To those in this list with juristic background:
please apply for the job :-)

Best regards,
Fredy Künzler


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Save the date: SwiNOG #21 - Nov 11, 2010

[Fredy Kuenzler]

Dear all,

Please mark in your agenda Nov 11, 2010 for SwiNOG #21. Details will follow.

Best regards,

Fredy Künzler for SwiNOG Core


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] BÜPF...again ;)

[Fredy Kuenzler]

Am 19.08.2010 22:27, schrieb Pascal Gloor:

I thought I'd say some words for all small and medium sized ISPs while I
had the SDA/ATS journalist on the phone.

in German:
http://www.tagesanzeiger.ch/digital/internet/berwachungswahn-der-Beamten-in-Bern/story/12403271

 in French: http://www.romandie.com/infos/news2/201008181800060AWPCH.asp

in Italian: http://new.ticinonews.ch/articolo.aspx?id=200533&rubrica=14


Pascal, much appreciated. I already blogged about:
http://www.blogg.ch/index.php?/archives/833-Tages-Anzeiger-SDA-UEberwachungswahn-der-Beamten-in-Bern.html
All: Spread the word! We are going to face a referendum about this...

F.


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Best Sales 2010!

[Fredy Kuenzler]

Am 10.08.2010 13:05, schrieb Andy Davidson:

Disagree. This is the first spam in the list for years. If you find at
least three volounteers to moderate the list with guaranteed response
time we can talk about moderation, but even then I don't think it's
necessary. This list became rather low volume in the recent past,
despite that it has today 863 subscribers, and there is not much noise
either.


Half way house. :-)  It should be possible to configure the MLM to pass
messages from subscribed members instantly, and hold posts from
unsubscribed individuals for moderation.


This is already the case. Only that 'moderation' equals 'delete everything'.

F.


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Best Sales 2010!

[Fredy Kuenzler]

Am 10.08.2010 09:03, schrieb Viktor Steinmann:

IMHO the time for moderation has arrived...


Disagree. This is the first spam in the list for years. If you find at least 
three volounteers to moderate the list with guaranteed response time we can 
talk about moderation, but even then I don't think it's necessary. This list 
became rather low volume in the recent past, despite that it has today 863 
subscribers, and there is not much noise either.


F.



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Fwd: AS 7575 announcing 2400::/12

[Fredy Kuenzler]

 Original-Nachricht 
Betreff: AS 7575 announcing 2400::/12
Datum: Fri, 4 Jun 2010 12:31:42 +1000
Von: Geoff Huston 
An: nanog list , aus...@lists.ausnog.net

Hi,

As part of some ongoing collaborative research work in looking at the "dark" 
traffic in IPv6, APNIC has requested AARNet to originate a supernet 
advertisement of the IPv6 prefix 2400::/12 for the next two weeks. The 
originating AS is AS7575. We would appreciate it if you could adjust your 
routing filters to permit this advertisement if you are actively filtering 
IPv6 routing advertisements.


Reports from previous  work in the IPv4 space can be found at 
http://www.potaroo.net/studies/ - we hope to add to this with a report 
describing data collected about the level (and type) of background traffic 
seen in this part of IPv6.


We would also be grateful if other operational lists received this 
notification - so please forward this as appropriate (but preferably only once!)


Many thanks,

   Geoff Huston, George Michaelson
   APNIC







___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Geolocating IP's

[Fredy Kuenzler]

Am 27.04.2010 10:15, schrieb Stefan Renner:

Is anybody of you aware, how the most popular services (Google, Zattoo,
Facebook, etc) are matching geographic locations to ip-adresses ?

Our AS (41666) is located in CH, so also all the ripe objects are
registered with country-code CH.

Now we have a customer located in Germany, so I created a inetnum-block
with his subnet in ripe-db with country-code DE. This was a week ago.
The customer is still complaining that he is constantly redirected to
the swiss-versions of all the services.

Does anybody of you experienced a similar problem ? Does anybody knows
proper solution ?


At the time when I was with Zattoo (until Sept. 2008) Maxmind database was
used and was updated every few weeks. I don't think much has changed since then.

Check your IP block using the Maxmind database. I assume you need to assign
at least a /24 to a certain country, smaller blocks will probably not be
recognised.

Be patient. If the range doesn't get updated at Maxmind, write to them and
ask for assistance.

Once Maxmind is up-to-date, be patient again for a few weeks, and if Zattoo
is still not in sync, you may ask their support for help.

HTH,
Fredy


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Could please check anyone from AS3303 the propagation of 194.56.8.0/24

[Fredy Kuenzler]

Hi,

Could please check anyone from AS3303 the propagation of 194.56.8.0/24 to 
their transits (maybe you have to fix the route object?). We have customer 
complaints and see


show ip bgp 194.56.8.0
% Network not in table

and Level(3) hasn't got the prefix either:

Show Level 3 (Zurich, Switzerland) BGP routes for 194.56.8.0/24

No matching routes found for 194.56.8.0/24.

Many thanks and best regards,

Fredy Künzler
Init Seven AG


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] looking for Telco Rack 600*300

[Fredy Kuenzler]

Dear all,

I'm looking for Telco rack which fits the space 600*300 (frame is ok, no 
doors required) - please contact me offlist, if you have a spare one in your 
storage. Would pay in beer ...


Regards,
Fredy


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Somebody have experience with Cogent ?

[Fredy Kuenzler]

Guazzoni Daniele, CH schrieb:

Their price plans are pretty low but I didn't got any business experience
with them yet. So I thought I'll ask around...


Considering Cogents depeering history I would not use them singlehomed.
http://www.blogg.ch/index.php?/archives/116-De-Peering-History-von-Cogent-AS174.html

http://www.blogg.ch/index.php?/archives/779-De-Peering-n-Cogent-AS174-vs.-Sprint-AS1239.html

http://www.blogg.ch/index.php?/archives/732-Cogent-AS174-und-TeliaSonera-AS1299-de-peeren-sich.html

(and about 10 articles more - search for 'cogent' at blogg.ch)

F.


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Init7 AS13030 is leaving Equinix Zurich Exchange aka TIX

[Fredy Kuenzler]

Dear all,

Init7 AS13030 is leaving Equinix Zurich Exchange aka TIX by Thursday, Jan 7, 
2010. Please deconfigure any BGP sessions with the following IP addresses:


194.42.48.10
194.42.48.16
2001:7f8:c:8235:194:42:48:10
2001:7f8:c:8235:194:42:48:16

We continue to peer on various other exchanges such as SwissIX, DE-CIX etc. 
and are also open for private interconnects. Please see our details at 
http://as13030.peeringdb.com/ and contact peering at init7 dot net if you 
think we should peer elsewhere.


Many thanks for peering over all these years - I believe Init7 AS13030 got 
connected 1999 or 2000 to TIX Telehouse Internet Exchange. This was the time 
when a Cisco 2900 switch took all the load of the "big peering switch 
fabric" and the v4 routing table was as small as 6 routes.


Best regards,

Fredy Künzler
Init Seven AG
http://www.init7.net/


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Init7 peering

[Fredy Kuenzler]

Alexandre Egger schrieb:
> This being said, here is a tip how to get faster peering:
> http://www.blogg.ch/index.php?/archives/816-Der-charmanteste-Peering-Request.html
> (not to mention, it's Fredy's log :)
> 
> Would a pie help Fredy? :)

yes but only if it doesn't contain any raisins :-P

F.

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Init7 peering

[Fredy Kuenzler]

Hi Alexandre,

Alexandre Egger schrieb:
> Could anyone responsible for the peering at Init7 (AS13030) contact me in
>  directly off-list.
> 
> We keep trying to reach your NOC by email with no results :(

you are on the pending request list ...

On Mon, 26 Oct 2009 14:57:26 +0100, Alexandre Egger 
wrote:
> We Neocarrier Communications LTD (AS48885 - 
> http://swissix.org/peeringdetails.php?as=48885) would like to peer with 
> you.

and yes the list is long, I'm afraid. So please be patient (it sometimes
takes years to get a peer)...

Best regards,

Fredy Künzler
Init Seven AG




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Netzwoche

[Fredy Kuenzler]

Mateo Meier schrieb:
> Does anyone knows someone @Netzwoche ?

try desk at netzwoche dot ch

HTH
F.

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Vorratsdatenspeicherung

[Fredy Kuenzler]

JIm Romaguera schrieb:
> Referencing WoZ...funny that UMTS & GSM Online surfing is excluded - 
> reasons almost certainly being the untold gazillions (financial impact) 
> needed to technically achieve that goal - whilst the financial impact 
> for small/middle ISPs seems to carry no weight (according to Mr Piatti 
> of EJPD)

Indeed. Seems that Sunrise/Orange/Swisscom do have a stong lobby at the 
former DBA now ISC-EJPD.

F.

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Vorratsdatenspeicherung

[Fredy Kuenzler]

ueli heuer schrieb:
>> Der Entwurf wurde gar nie öffentlich gemacht. Zudem war keine
>> Gesetzesänderung nötig. Es basiert vollständig auf dem bisherigen BÜPF.
>> Über eine neue Verordnung zum Gesetz wird die technische Umsetzung
>> erweitert.
> 
> Die Wochenzeitung (WOZ) wird in der Ausgabe von morgen dieses Thema
> aufgreifen. Der Artikel kann auch Online gelesen werden [1]
> 
> Wer die Dokumente - um die es hier geht - lesen will kann sie am ende des
> WOZ-Artikel runterladen.
> 
> [1] http://www.woz.ch/artikel/2009/nr29/schweiz/18143.html

Zum Glück gibts die WOZ. Ich habe darüber gebloggt:

http://www.blogg.ch/index.php?/archives/808-Die-WOZ-zur-geplanten-Real-Time-Internet-UEberwachung-durch-das-EJPD.html

Es ist IMHO wichtig, dass auf breite Front gegen die neuen Richtlinien
opponiert wird. Auch 20min hat berichtet:

http://www.20min.ch/news/schweiz/story/12978259

F.


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] [Fwd: SwiNOG #18 - please cancel your registration if you cannot attend ...]

[Fredy Kuenzler]

REMINDER - sorry for bothering :-(

We still have 15 people on the waiting list and it would be great if we 
could squeeze them all in, so please help to have a non-show rate of 0%.

Many thanks,
Fredy


 Original-Nachricht 
Betreff: [swinog] SwiNOG #18 - please cancel your registration if you cannot 
attend ...
Datum: Tue, 31 Mar 2009 16:24:03 +0200
Von: Fredy Kuenzler 
Organisation: Init Seven AG - http://www.init7.net/
An: swi...@swinog.ch

Dear all,

SwiNOG #18 is approaching. If you happen to be registered and you're unable
to attend, please inform swinog-core at swinog dot ch NOW and vacate your
seat. We still have a waiting list of ~20 and we would like to get all of
them a chance to attend.

http://www.spale.com/cgi-bin/swinogreg

Best regards,
Fredy



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] SwiNOG #18 - please cancel your registration if you cannot attend ...

[Fredy Kuenzler]

Dear all,

SwiNOG #18 is approaching. If you happen to be registered and you're unable 
to attend, please inform swinog-core at swinog dot ch NOW and vacate your 
seat. We still have a waiting list of ~20 and we would like to get all of 
them a chance to attend.

http://www.spale.com/cgi-bin/swinogreg

Best regards,
Fredy

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] BGP over xDSL ... is evil? says who?

[Fredy Kuenzler]

Lukas Beeler schrieb:
> On Thu, Mar 5, 2009 at 19:08, Fredy Kuenzler  wrote:
>> Remember http://www.swinog.ch/meetings/swinog7/BGP_filtering-swinog.ppt
>> - in
> 
> I just skimmed through that, and i wonder if it's still current.

Yes it is. Of course BOGONs are outdated, but the concept is still valid.

> There's some talk about requiring about 128MB of memory, and budget 
> concerns of smaller ISPs.
> 
> Now, even expensive FB-DIMM memory by vendors like HP and IBM only costs
> around 360 CHF for 4 GB. And even small two way x86 boxes max out at
> around 32 - 48 GB. Even if Cisco and Juniper charge 10x as much, that'd
> still be only 3600 CHF.
> 
> I understand that routers use ASICs and probably faster memory than 
> servers, but i can't really imagine it to be a problem to pop 4GB memory
> into a router that's connected directly to the internet.
> 
> Now, where am i mistaken?

You assume that all gear can actually handle the memory, but a Cisco 3640
can only address 128MB, a Cisco7206VXR-NPE300 can address 256M - both
considered as BGP routers for smaller networks until just recently, and they
still run in many smaller networks.

Even a state-of-the-art Foundry MLX-4 is not able to handle more than 25
fullfeeds (either up or downstream) for memory limitations.

F.

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] BGP over xDSL ... is evil? says who?

[Fredy Kuenzler]

Reza Kordi schrieb:
> Thank you all for the cool ideas and even better quotes that I received 
> today.
> 
> Of course I understand that some comments were coming from those who are 
> making their profits specially on BGP interconnects.
> 
> "If you need BGP buy my expensive LL is the wrong idea pal."

To clarify: I don't consider BGP over xDSL a bad idea because xDSL gives
less revenue. It's purely from a technical perspective. BGP over xDSL will
flap way more often than any other connectivity. Think of 1 geeks
globally get their ASN and PI space and cannot afford proper connectivty and
get it done via xDSL - we will see a massive increase of BGP updates in the
global routing table, which requires stronger routing boxes. That's the only
reason why we don't sell it, even though we could have made quite some money
in the past.

Everybody: please don't offer BGP over DSL polluting the BGP table for CHF
20 or 40 net revenue. There are other redundancy options and backup
solutions using xDSL.

The BGP table contains today ~275k prefixes, and is still growing. Common
routers like Cisco 7206VXR cannot hold the table for ages anymore, and
filtering techniques with all the disadvantages need to be implemented.
Remember http://www.swinog.ch/meetings/swinog7/BGP_filtering-swinog.ppt - in
case you haven't experienced the old times of a 70k-BGP table.

F.


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] BGP over xDSL ... is evil

[Fredy Kuenzler]

Stanislav Sinyagin schrieb:
> Fredy, if I remember it right, about a year ago you mentioned that Init7
>  is deploying the ULL presence?

We considered it after doing the ULL pilot, but due to business opportunity
considerations we cancelled ULL (copper) deployments.

F.

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] BGP over xDSL ... is evil

[Fredy Kuenzler]

Reza Kordi schrieb:
> Do you know if anybody offers a VDSL upstream with BGP dynamic routing?
> 
> Customer is in ZUG city.

how evil ... serious: BGP over L2TP dial up infrastructure (yes, xDSL over
BBCS _is_ dialup) should not be implemented. We got several inquiries in the
past years and refused them all. A customer which believes to be in need of
BGP for redundancy should be able to afford a proper leased line | fibre
service.

F.

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] IPV6 Go (lazy providers)

[Fredy Kuenzler]

Stanislav Sinyagin schrieb:
>> If you don't get extra v4 space in 1000 days, don't even consider
>> to complain. You have been warned.
>> 
>> I would very much worry, if my most important resource to maintain
>> my business would dry out in less than 1000 days. That's why we
>> fixed IPv6 in AS13030.
> 
> Fredy, how many residential customers do you have and how many of
> them have moved to pure ipv6?

Noone moves to pure IPv6 these days. I don't consider this question serious.

Init7 carries ~60 v6 prefixes via BGP and has ~20 /48 customer
assignments, mainly to colocation and carrier ethernet customers. This
is not too much yet, but it's a start.

Regarding residentials (xDSL via BBCS) - we have an open task, and we
will deliver native v6 "soon(TM)" ...

F.

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] IPV6 Go (lazy providers)

[Fredy Kuenzler]

Stanislav Sinyagin schrieb:
> The fact that Andreas or Tonnere is able to configure ipv6 at home
> does not create a business case. Go look at your nearest
> Interdiscount or Fust shop -- how many of the consumer
> routers/firewalls/modems would support ipv6? How many of the shop
> salesmen would ever hear such word?

That's the main issue why IPv6 is not really growing. Too many people
think IPv6 needs to have a short term business case.

Think back 15 years. Internet would not exist as it is known today if
people then only thought about the business case.

If you don't get extra v4 space in 1000 days, don't even consider to
complain. You have been warned.

I would very much worry, if my most important resource to maintain my
business would dry out in less than 1000 days. That's why we fixed IPv6
in AS13030.

F.


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] [Fwd: Fw: [torix-members] Bill Norton's Peering papers (fwd)]

[Fredy Kuenzler]

FYI ... drpeering.net happend to be a beer idea which came up at the GPF 
4.0 in Punta Cana, Dominican Republic.

Regards,
F.


-- Forwarded Message ---
From: "William F. Maton Sotomayor" 
To: torix-memb...@torix.net
Sent: Sun, 8 Feb 2009 19:57:24 -0500 (EST)
Subject: [torix-members] Bill Norton's Peering papers (fwd)

(Forwarded from a posting I sent to OttIX members)

Hi all,

Bill Norton of NANOG and Equinix fame has put together a web site
dedicating to IX peering, complete with his famous whitepapers.  I used 
a couple of very old versions way back when to convince people at my day 
job of the value of establishing an IX, and after some searching I found 
Jake's original web page describing something called OttIX.

There have been a lot of updates to his white papers over the years and 
I'm sure everyone here will find them to be of interest:

  http://drpeering.net/index.html

Of course I'm preaching to the converted, but if anyone here encounters 
folks who have heard of Internet exchanges, IXs or exchange points and 
hesitate about connecting to any, the whitepapers might help.

Thanks,

wfms

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] PI-Range RIPE, ARIN etc?

[Fredy Kuenzler]

Silvan Michael Gebhardt schrieb:
> I suppose instead, contact the people behind the libGeoIP,
> 
> http://www.maxmind.com/
> 
> and afair is geoIP THE library to get the people and their
> corresponding IPs
> 
> Doesn't Zattoo e.g use it?

Yes.

> Am 12.01.2009 um 15:37 schrieb nos...@linuxnet.ch
>> How can this situation be solved? Is it possible to register the
>> piece of the overall IP range to ARIN (and only this piece) ? 
>> According to the customer it is not possible to register again 
>> ip-ranges at ARIN etc. there're too many impacts in his network 
>> infrastructure etc.

RIPE space is not transferable to ARIN, APNIC etc. and vice versa.

Get your RIPE entries done correctly with country information and ping
Maxmind and other GeoIP database to fix your entries.

You of course could apply for separate IP space at ARIN, APNIC etc. and 
renumber, but this is a) expensive and b) requires a lot of labor - 
probably not the favourite way to go.

HTH,
F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Netclean - news

[Fredy Kuenzler]

Markus Wild schrieb:
> Excuse my ignorance, since I didn't make it to last SWINOG... the 
> description on their web site implies the system is using BGP to 
> distribute the black list. Assuming this just distributes IP 
> addresses of web servers hosting questionable content, by blocking 
> those, will that not block content of ALL hostings hosted on that IP 
> address? What about hosters who also host other services on that IP 
> address, like perhaps DNS and mail services? I recall a time where an
> email RBL was implemented using BGP blackholing, and we can into 
> exactly those problems...

From
http://www.blogg.ch/index.php?/archives/785-Netclean-Whitebox-effektive-Methode-gegen-Kinderpornografie-im-Netz.html

> Netclean Whitebox funktioniert zweistufig: 1. wird via BGP4 die Liste
> der verdächtigen IP Adressen in die Routingtabelle eingepflegt. 
> Derzeit sind das um die 450 IP Adressen. Traffic von diesen Websites 
> wird auf die Whitebox umgeleitet. Auf dieser erfolgt 2. die DNS resp.
> HTTP Inspection, und die Whitebox ist damit in der Lage, zwischen 
> illegalem und harmlosen Inhalt zu unterscheiden, der sich zufällig an
> der selben IP Adresse befindet.

F.

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Netclean - news

[Fredy Kuenzler]

Peter Keel schrieb:
> * on the Wed, Dec 10, 2008 at 09:54:11AM +0100, Marc Hauswirth wrote:
>> After the presentation of "Netclean whitebox" at last Swinog 
>> meeting from Pascal Seeger and Grégoire Galland, we are pleased to 
>> announce that now two ISP in Switzerland are using it to filter 
>> their Internet access to block pedophile content.
> 
> The opposite of "good" is "good intent".

As said earlier, IMHO the authorities should purchase the system for all
serviceproviders. This is not a matter of marketing, this is too serious.

http://www.blogg.ch/index.php?/archives/785-Netclean-Whitebox-effektive-Methode-gegen-Kinderpornografie-im-Netz.html

F.

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Netz 194.242.34.0

[Fredy Kuenzler]

[EMAIL PROTECTED] schrieb:
> its now a while as the 194.242.34.0/24 is not properly announced .. 
> is there any explain or actionplan? the IRC server is not reachable
> form a lot networks.
> 
> even swiss networks are affected like the "largest" ISP Bluewin i
> fear to even mention about my satelitte link from embratel ;-)

It's common practice that the IP range of internet exchanges are not
routed globally. Recently some IP of this range suffered a DDOS attack,
therefore SwissIX decided not to announce this /24 any longer. Don't
expect it to come back anytime soon.

F.

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] SwiNOG #17 debriefing ... and Pingsta, jittered.

[Fredy Kuenzler]

Dear all,

Thanks everybody for attending SwiNOG #17, I hope you consider it a 
successful gathering like me.

Unfortunately the people from Pingsta couldn't make it to Berne, we got 
the following email from Peter, CEO of Pingsta:

 >  Original-Nachricht 
 > Betreff: Re: [swinog-core] SwiNOG-17 - Pingsta Team Stuck in Paris en
 > Route Bern
 > Datum:   Wed, 22 Oct 2008 03:05:20 -0700 (PDT)
 > Von: Peter Alfred-Adekeye
 >
 > Dear Paschal, Fredy, Nicole & Michel,
 >
 > Due to circumstances beyond our control, we are stuck in Paris en
 > route Bern and unless a miracle happens, we would most likely not be
 > able to get to Bern on time today. As such, would it be possible to
 > deliver my speech over skype video instead? If no, I guess we may
 > have to reschedule the Pingsta presentation to SwiNOG 18 or 19?
 >
 > Once again, please accept our sincere apologies for the rather short
 > notice. In the meantime, please feel free to give away the Pingsta
 > T-shrts and wish the entire SwiNOG team and participants well for us.
 >
 > Danke
 > Peter  :(
 >
 > Peter Alfred-Adekeye
 > CEO, Pingsta

Peter: thanks for the explanation, we have been a bit surprised and 
disapointed that you couldn't make it - unfortunately your mail was read 
only after the gathering ... we enjoyed the early beer and ignored 
waiting emails ;-) ... nevermind, packets sometimes arrive with latency, 
get lost or show up jittered. The Pingsta t-shirts in fact made it right 
on time to Berne and nevertheless got distributed to the crowd ... many 
thanks!

We are happy to reserve a slot in the upcoming SwiNOG #18 in Spring 
2009, but at this time we don't have a scheduled date. Please make sure 
that you are subscribed to the SwiNOG list that you don't miss the 
announcement.

Best regards ... until SwiNOG #18!

Fredy Künzler
SwiNOG Core Team

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] SwiNOG-17 (details for tomorrow)

[Fredy Kuenzler]

Steven Glogger schrieb:
> some information for SwiNOG-17:

And please: if you are registered and can't make it to Berne, please 
cancel immediately by mailing to swinog-core at swinog dot ch, to free 
your seat for those on the waitlist. All non-shows will be prosecuted in 
public! :-)

Thanks,

Fredy
SwiNOG Core team.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] RIPE NCC LIR training course in Berne: Oct 23 (the day after SwiNOG #17)

[Fredy Kuenzler]

Dear all,

please note that we organised a RIPE NCC LIR training course in Berne 
the day after SwiNOG #17), hosted at colobern by NTS (thanks Nik).

Please register at https://lirportal.ripe.net/ using your RIPE login 
data. Also please note that only 2 participants per LIR are allowed.

Regards,
Fredy
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] bittorent on bluewin ADSL trigger 30% large frame drop

[Fredy Kuenzler]

Nicolas Mayor schrieb:
> Zorg 421 wrote:
>> I have a strange occurance of a bluewin ADSL connection on which,
>> if you start a bittorent doing some p2p activity, the second node
>> in bluewin network start to drop large (1000-1400B) frames at a
>> rate of 30-35% ! Amazed what the heck can trigger that ! (the
>> bittorent is shaped at 120kB down / 20 kB up, it's not congesting 
>> the link)
> 
> Maybe you discovered the swiss version of this :
> 
> http://arstechnica.com/news.ars/post/20071019-evidence-mounts-that-comcast-is-targeting-bittorrent-traffic.html

Swisscom made an official statement regarding traffic shaping of P2P and
net neutrality. It's included in my latest blog posting (German, sorry):

http://www.blogg.ch/index.php?/archives/751-Bittorrent-P2P-und-Swisscom-und-der-Blick-ueber-den-Teich-Comcast-vs.-FCC.html

F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] name-server slowdown?

[Fredy Kuenzler]

Claudio Jeker schrieb:
> On Wed, Jul 16, 2008 at 11:44:46AM +0200, Per Jessen wrote:
>> Starting Monday this week, we've seen a significant delays and
>> timeouts on our upstream name-servers.  We saw something similar on
>> our Hetzner servers, but it seems to have gone away now. Has anyone
>> else seen/experienced name-server issues in the last 2-3 days?
>> 
>> I know about the BIND patch from last week, could that somehow be 
>> involved?
> 
> Not sure if this is your problem but the bind patch was released
> mostly untested. The new mode allocates tons of filedescriptors and
> fails in various freaky ways. The result is delayed resolving and
> various other failures plus an increased load on the nameserver
> itself.

I thought there was also a recent change in some root nameserver
addressing, so I'd suggest to update the root.hints file.

F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Interxion Stromausfall?

[Fredy Kuenzler]

[EMAIL PROTECTED] schrieb:

But inteXion's homepage tells nothing about this...


This was communicated from InterXion earlier today:


*Date: 27th May 2008 09:14 AM CEST*

Re: Power Disruption  – ZUR1 Data Centre [Zurich, Switzerland]*

Dear Valued Customer,

Following on previous disruption, all settings have been verified and
the maintenance IX-1412587 has now resumed.

Further updates to follow.


F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[Fwd: [swinog] SwiNOG #16 Questionaire]

[Fredy Kuenzler]

REMINDER: if you haven't done it, please fill in the SwiNOG #16 
questionaire.


IMPORTANT: if you could not attend, please fill it in nevertheless. We 
especially want to know how many could not attend because the 
registration was already full.


http://www.surveymonkey.com/s.aspx?sm=X0yt16xSyV6I39PzlqosLQ_3d_3d

Thanks,
Fredy

 Original-Nachricht 
Betreff: [swinog] SwiNOG #16 Questionaire
Datum: Fri, 16 May 2008 02:30:03 +0200
Von: Fredy Kuenzler <[EMAIL PROTECTED]>
Antwort an: [EMAIL PROTECTED]
Organisation: Init Seven AG - http://www.init7.net/
An: [EMAIL PROTECTED]

Dear all,

Please take a few minutes and fill in the 10 questions about SwiNOG #16:
http://www.surveymonkey.com/s.aspx?sm=X0yt16xSyV6I39PzlqosLQ_3d_3d

If you did not attend SwiNOG #16 (because the registration has been full
or for any other reason), please do it also, and skip the questions
which don't apply.

The SwiNOG-Core team would like to learn what could be done better, such
as "beer was too warm" ehm ... such as "location is too small" and "WLAN
did not provide IPv6". Oh, it's late. This is my first surveymonky thingi.

Your answers are very valuable, so please be honest. It's completly
anonymous unless you're leaving your name in the comment field.

Many thanks from the SwiNOG Core Team!
Fredy

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] SwiNOG #16 Questionaire

[Fredy Kuenzler]

Dear all,

Please take a few minutes and fill in the 10 questions about SwiNOG #16:
http://www.surveymonkey.com/s.aspx?sm=X0yt16xSyV6I39PzlqosLQ_3d_3d

If you did not attend SwiNOG #16 (because the registration has been full 
or for any other reason), please do it also, and skip the questions 
which don't apply.


The SwiNOG-Core team would like to learn what could be done better, such 
as "beer was too warm" ehm ... such as "location is too small" and "WLAN 
did not provide IPv6". Oh, it's late. This is my first surveymonky thingi.


Your answers are very valuable, so please be honest. It's completly 
anonymous unless you're leaving your name in the comment field.


Many thanks from the SwiNOG Core Team!
Fredy
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] fw change on bluewin adsl accounts today?

[Fredy Kuenzler]

Schenkel Martin schrieb:
Well, the only good solution to this ugly attack is to do what Goetz 
suggested; As an ISP inbound filter the offending IP address. This is

what we did several hours ago and all is fine since then.


BTW AS44066 which propagates the offending IP address claims spoofing.

Firewalls of all type of models have/had issues with this attack. On 
some you might be able to turn on a SYN flood attack feature which 
will then blacklist the IP locally on the firewall.


Not only firewalls, I think it affects also APC remote power switches.

F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] SwissIX: 10Gig Plattform now active

[Fredy Kuenzler]

Dear all,

SwissIX finally reached the summit: the 10Gig ports on the new RX-8
plattform of Foundry Networks (sponsored by SWITCH and Init7) are now
active. Please see the press release below and maybe my blog entry too:
http://www.blogg.ch/index.php?/archives/738-SwissIX-goes-10Gig.html
(all German, sorry).

If you consider to upgrade to 10Gig too, here are the conditions. 10Gig
ports remain free of recurring charges, however, as hardware is
expensive, we have to charge one-time fees to cover the costs of future
expansion.

10Gig SR (Multimode) = CHF 12000.00 (one time)
10Gig LR (Singlemode) = CHF 13500.00 (one time)
(note that the required cabling is on participants expense)

Currently 10Gig is available at Equinix 1 (also known as Telehouse
Zurich, Hardstrasse 235). We are preparing InterXion Glattbrugg too as
soon as possible, but we require some more funding at this point.

If you are considering to join SwissIX with 100M or 1Gig, please follow
this proceudure: http://www.swissix.ch/how_to_get_connected.php

Happy Peering!

Fredy Künzler
SwissIX President
http://www.swissix.ch/



Medienmitteilung SwissIX vom 9. April 2008
--
SwissIX - Swiss Internet Exchange - eine distributed Peering Plattform
für Internet Service Provider, Carrier, Content Anbieter und Enterprise
Netzwerke ist neu mit einer 10-Gigabit Plattform ausgerüstet. Damit ist
SwissIX mit der schweizweit grössten Zahl an partizipierenden Netzwerken
gerüstet für die Zukunft.

Applikationen wie Online-TV und Video-Downloads verlangen nach immer
grösseren Bandbreiten, und diese Anforderungen gehen auch an Internet
Exchanges nicht spurlos vorbei. Waren vor 3 Jahren 1-Gigabit-Ports noch
eher die Ausnahme, sind heute 10-Gigabit-Anschlüsse schon bald Standard,
und es ist bezeichnend, dass der IP-TV Anbieter Zattoo einer der ersten
drei Teilnehmer ist, die neu mit 10 Gigabit an die Peering-Plattform
angeschlossen sind.

Dank grosszügigem Sponsoring im Wert von mehreren 10'000 Franken vom
Hochschulnetz SWITCH und dem Business- und Wholesale-Internet
Serviceprovider Init7 konnte die State-of-the-Art Peering-Infrastruktur
von Foundry Networks beschafft werden.

SwissIX ist, im Gegensatz zu anderen Internet Exchanges, ein Non-Profit
Projekt und wird vom Verein "SwissIX Internet Exchange" betrieben.
Finanziert wird SwissIX, abgesehen von Mitgliederbeiträgen, komplett
durch Sachsponsorings. Der Betrieb erfolgt durch ehrenamtliches
Engagement qualifizierter Techniker der Schweizer Internet-Community,
und der Anschluss an SwissIX verursacht keinen wiederkehrenden Kosten
für die Teilnehmer.

Weitere Informationen:
http://www.swissix.ch/



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Anyone else lost traffic around 15:10?

[Fredy Kuenzler]

Matthias Hertzog schrieb:

Situation is back to normal again, but we saw decreased incoming
traffic here. Anyone else?


We had a ugly DDOS to a customer's network, situation is resolved now,
customer is offline ...

Sorry for the circumstances.

F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] SwiNOG #16: Call for Presentations

[Fredy Kuenzler]

SwiNOG #16 is approaching ... May 14, 2008:
http://www.swinog.ch/meetings/swinog16/index.asp
If you haven't registered yet, please do it now, there are only 21 
places left.


The agenda isn't full yet, and we would like to ask fellow SwiNOG'ers to 
give a technical presentation. The community feels that in the recent 
past we've had to many vendors presenting, and we would like to change this.


So don't be shy ... even a short speech of 10 or 15 minuts would be 
appreciated. Ideas: IPv6 experience, SFlow/Netflow stuff, VPN, SIP, DDOS 
 mitigation, AntiSpam techniques, research results  ... or maybe you 
have a cool monitoring script to share?


Please submit proposals to swinog-core at swinog.

For the Core Team:
Fredy

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] Zattoo is hiring: Linux Sysadmin

[Fredy Kuenzler]

Zattoo is hiring one or two Linux Sysadmins:

https://zattoo.com/jobs_biz
https://zattoo.com/images/pdfs/Linux_Sys_Admin.pdf

Kind regards,

Fredy Künzler
Zattoo Europe Ltd.
http://www.zattoo.com/

___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Re: [swinog] Swisscom outage - details?

[Fredy Kuenzler]

Silvan Gebhardt schrieb:

Am 21.11.2007 um 22:51 schrieb Nik Hug:

mmh - can I see this somewhere "within the internet" ? I checked 
traffic-graphs from the major IXs ... also checked sans.org and so 
on - didn't see anything unusual elsewhere. Nothing on nanog.


Through this the IP+ service from Swisscom is also


you mean - "good luck DDNS exist. they can make every outtage "not 
our problem""


I don't believe the DDOS story. Yes, some DDOS may have occurred, but
it's not the real reason.

My theory:
http://www.blogg.ch/index.php?/archives/697-Statt-Buffertainment-ein-Backbone-Domino-der-Supergau-im-Swisscom-Backbone.html

And no, I'm not feeling schadenfreude.

F.
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] SwiNOG #15: Dec 4, 2008 - Registration and Call for Presentations

[Fredy Kuenzler]

Dear all,

The registration for SwiNOG #15 on Tuesday Dec 4, 2007 is now open:

http://www.swinog.ch/meetings/swinog15/index.asp

As ususal, the location is Altes Tramdepot in Berne and will be 
presented by Global Crossing. Social event is again T-Systems, while 
WLAN is offerd by TheNet. Thanks to all sponsors!


If you would like to share a presentation, please mail to swinog-core at 
swinog dot ch.


Best regards from the SwiNOG core team,
Fredy
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

[swinog] SwissIX goes 10Gig!

[Fredy Kuenzler]

SwissIX goes 10Gig!


Dear all,

The generous offering of SWITCH (AS559) to participate in the cost of a 
new shiny 10Gig capable platform enables us to go ahead with upgrading 
the peering infrastructure of SwissIX http://www.swissix.ch/ while 
maintaining the idea of a community-driven, non-profit and free internet 
exchange.


FastE and GigE ports will remain with a free setup (except at two 
locations a small fee for cabling expenses is charged). However the 
SwissIX board decided to charge a bigger setup fee for 10Gig ports:


CHF 12000.00 one time fee incl. SR Xenpak
or
CHF 13500.00 one time fee incl. LR Xenpak

(Prices are valid until further notice, and note that cabling cost of 
the colocation is not included in the price mentioned.)


This fee is payable to SwissIX (currently w/o VAT) and will help to grow 
the hardware platform. Please note that SwissIX is charging only a 
one-time fee for 10Gig, there are


*NO RECURRING COSTS*

for all ports. (Association membership is optional but encouraged - see 
http://www.swissix.ch/memberappl.php)


If you are interested in a 10Gig port, please contact me offlist.

We hope to get the 10Gig platform up and running in Q4 2007 in the first 
location (Equinix Zurich 1, formerly known as IXEurope Zurich 1, 
formerly known as Telehouse Facilities, Hardstrasse 235, CH-8050 
Zurich). For the 2nd location InterXion Glattbrugg is forseen, but to 
achieve this, more funding is needed.


If you would like to join SwissIX please follow the setup procedure:
http://www.swissix.ch/how_to_get_connected.php

Of course we are always looking for more sponsors and members - if you 
would like to support the SwissIX project, please contact me offlist.


Best regards,

Fredy Künzler
SwissIX President

http://www.swissix.ch/
___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog