Re: [AusNOG] Full Internet routing table router recommendation

Hi I have used CCR1072 + CCR1036, taken 4 full feeds from upstream. No a problem. the issue I found with the is convergence, the older models with routeros 6 from memory was single threaded bgp daemon. I believe in routeros 7 it was meant to have moved to multhreaded and faster convergence Alex

[AusNOG] TCP state

Hi Quick question is it normal or acceptable to finish a TCP session or I should say start to finish session with a fin ack packet. When I google TCP state I get it's just a fin packet not fin/ack Alex ___ AusNOG mailing list AusNOG@lists.ausnog.net ht

Re: [AusNOG] BGP rpki

etwork has internally split you down into /24's, and then leaked those, > any other networks that have implemented route origin validation would > reject them, as they're more specific than you allow. > > This is for ARIN, but the fields in each ROA should be the same for APNI

Re: [AusNOG] BGP rpki

> > Aftab A. Siddiqui > > > On Tue, 29 Sep 2020 at 18:46, Alex Samad wrote: > >> Hi >> >> Wondering how prevalent is RPKI in transit providers in Oz. Just got an >> email from exetel to say they are starting a rollout of it. >> >> Seems like my ROS

[AusNOG] BGP rpki

Hi Wondering how prevalent is RPKI in transit providers in Oz. Just got an email from exetel to say they are starting a rollout of it. Seems like my ROS routers don't have it, seems like they have been talking about back in 2014, still waiting on that feature to be added. Curious if all of my tr

Re: [AusNOG] DDOS cleaning / scrubbing services

Hi Thanks to everyone that replied help. I have taken this off line Thanks On Mon, 24 Aug 2020 at 10:36, Alex Samad wrote: > Hi > > Any recommendation on this. Sydney based, Maybe Global switch based. > > What would you expect to pay for 100M/s to 200Mb/s service ? &g

Re: [AusNOG] DDOS cleaning / scrubbing services

Whole network On Mon, 24 Aug 2020 at 11:17, Christian Heinrich < christian.heinr...@cmlh.id.au> wrote: > Alex, > > On Mon, 24 Aug 2020 at 10:37, Alex Samad wrote: > > Any recommendation on this. Sydney based, Maybe Global switch based. > > > > What would you ex

[AusNOG] DDOS cleaning / scrubbing services

Hi Any recommendation on this. Sydney based, Maybe Global switch based. What would you expect to pay for 100M/s to 200Mb/s service ? Thanks Alex ___ AusNOG mailing list AusNOG@lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] any news on the Oz Cyber attack ?

Not seeing anything ?? A ___ AusNOG mailing list AusNOG@lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Office 365 Outage

Hi Wondering if vocus is also part of commander - aren't they the same family now. also I think it was a SSO think at MS - there was some reddit thread about it. But around the same time commander went down for us, our voip was useless and trying to call commander guess what their number was down

Re: [AusNOG] dark fibre encryption

sec support. Arista is the other > option on major vendor options but there's a bunch of yumcha ones you can > get if you don't mind some foreign government's having your keys :-p > > > > On Wed, 8 Apr 2020, 5:30 pm Alex Samad, wrote: > >> > >> Q

Re: [AusNOG] dark fibre encryption

on't > mind some foreign government's having your keys :-p > > On Wed, 8 Apr 2020, 5:30 pm Alex Samad, wrote: > >> Quick check of my network vendor , the equipment that has it is out of >> price range :( >> >> A >> >> On Wed, 8 Apr 2020 a

Re: [AusNOG] dark fibre encryption

rotating keys or certs. Watch out bunch of platforms will HALVE or worse > the performance of your gear by turning on macsec. e.g. cisco rosco > > On Tue, 7 Apr 2020 at 10:36, Alex Samad wrote: > >> Hi >> >> I find myself in the situation that I need to look at purcha

Re: [AusNOG] dark fibre encryption

On 7 Apr 2020, at 10:16 am, Brad Peczka wrote: > > MACSEC is worth considering – it’s been baked into most switches and > routers, though some vendors still make it a licensed feature. > > Regards, > -Brad. > > *From:* AusNOG *On Behalf Of *Alex Samad > *Sent:* Tuesday,

Re: [AusNOG] dark fibre encryption

er option - > https://www.senetas.com/products/cn-encryptors/ > > Australian, ASX listed company if that matters. > > On Tue, 7 Apr 2020 at 10:36, Alex Samad wrote: > >> Hi >> >> I find myself in the situation that I need to look at purchasing some DC >> to DC.

[AusNOG] dark fibre encryption

Hi I find myself in the situation that I need to look at purchasing some DC to DC. But I find I am not that well informed about whats available. what people are doing as best practise. Quick google doesn't fill me with lots of options. So packetlight is the current recommended vendor (their 20

Re: [AusNOG] Software Defined Routers

Hi I thought there was some discussion on this list a while back about using x85 VM for BGP cluster - inserting / editing BGP tables where faster in a x86 VM. A On Tue, 8 Oct 2019 at 15:35, Kosh Naranek wrote: > VyOS is more or less just a router. > > I'm fairly certain the remote APIs are sti

Re: [AusNOG] Mikrotik IPv6 Vulnerability - Must Read if you have Public IPv6 Facing Mikrotik

Sigh, how long have they promised V7 ... Think it was coming soon 7years ago Multithreaded BGP ! " * There's a comment 'The fix is in v7' - theres a long running joke that v7 will never emerge (it probably never will, they've lost most of their senior engineers, and refuse to open source their co

Re: [AusNOG] Equinix SY1 gone dark?

Hi " This is why it’s always good to have dual fed equipment and send notices during the scheduled maintenance windows. " Different event. I had a power supply trip one of the circuits in my rack. Strangely it affected a server in the same rack - dual power supplied Dell server . for some reason

Re: [AusNOG] NBN Business grade services

Hi Any one you would recommend as a provider for this - say in sydney ? A On Tue, 29 Jan 2019 at 08:15, Philip Loenneker < philip.loenne...@tasmanet.com.au> wrote: > Exactly what Matt said. The only thing I have to add is that the business > grade services over NEBS (traditional NBN over FttP,

Re: [AusNOG] Assistance and Access Bill moves to PJCIS

Wondering what the implications of this bill and the recent China was stealing our traffic So in theory could china steal / sniff our traffic and because of these weakening of encryption allow china to snope on our stuff A On Fri, 23 Nov 2018 at 11:32, Paul Wilkins wrote: > Unfortunately,

[AusNOG] Friday question

Hi I asked this a long time ago. What tools do you carry around for work. Whats the oldest - krone tool ? Whats the newest Whats the most useful ! For me Krone tool vga grabber - for when you don't have a KVM serial to usb dongle happy friday! Alex

[AusNOG] linux tc ratelimiting

Hi Should be a simple one - think i have seen AUSNOG's posting about tc stuff before I want to rate limit on a linux box using tc to 10Mbps and drop any packets that go over. right now I have # Parent Class = Full speed of the link ? $TC class add dev $IF parent 1: classid 1:1 htb rate 10gbit ce

Re: [AusNOG] IPsec VPN over 4G telstra issue

Do we know what the issue is ? Is it just the IKE packets or are there other packets disappearing We use PA's ipsec vpn tech so ipsec inside udp from memory - wondering if they are filter / intercepting or ? A On Thu, 20 Sep 2018 at 09:46, Russell Langton wrote: > Thanks Mat, its being worked

Re: [AusNOG] Dutton decryption bill

I'm sure nothing could go wrong there... A On 14 August 2018 at 14:11, Mark Andrews wrote: > A quick reading of the exposure bill would allow for a scenario like this: > > Force a developer to modify the app to send a encrypted copy of the > traffic to > a given address and to issue a new versi

Re: [AusNOG] Mikrotik routers in HA environments

Hi Like them cheap and have been reliable - noted about the power supplies. I have 4 upstream full feeds . takes a very very long time to process. also the ccr's have a limitation not really mention 1 tcp stream can only go 1Gbs, the box can do more, its around the driver and the cpu setup - thi

Re: [AusNOG] Best practices on speeding up BGP convergence times

- My transit provider in Sydney uses localpref on their side to designate one session as “primary” and I am not able to change that. But I can and do send traffic out on both links as equal cost. Thats interesting, haven't had a vendor do that. I typically use med to preffer one path ove

Re: [AusNOG] Best practices on speeding up BGP convergence times

Hi Add in my experience. I have multiple upstreams, I advertise to all upstreams at the same time, I am not sure why you wouldn't do that. Maybe to control the reverse path. I preference by stuffing AS - seems to work well for us. But I ran into issue with convergence. 1) time it would take fo

Re: [AusNOG] 2nd EqualLogic arrays

controller changed in PS6010XS and drives replaced in PS6010XS and PS6010XS Note you can't get any more support for the PS6010 (7 years max), from memory we paid at the time roughly $50-60k for each unit Alex On 18 December 2017 at 10:07, Alex Samad wrote: > Hi > > I have a fe

Re: [AusNOG] 2nd EqualLogic arrays

09:44, Alex Samad wrote: > Hi > > I am in the process of decommissioning 3 EqualLogic arrays > PS6210XS > PS6110XS > PS6010XS > > Any one interested in these, please contact me off list > > Thanks > A > ___ AusNOG maili

[AusNOG] 2nd EqualLogic arrays

Hi I am in the process of decommissioning 3 EqualLogic arrays PS6210XS PS6110XS PS6010XS Any one interested in these, please contact me off list Thanks A ___ AusNOG mailing list AusNOG@lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] Fibre from Global Switch to ALC (Gore Hill)

Hi I have a run from Pipe, looking for another run which has to commonality with the Pipe Fibre. Tried vocus but there is some over lap. I was going to talk to optus next, then thought might try here. I have the option to use the long run around the bay with pipe, but wondering if there are oth

Re: [AusNOG] cost of rack in sydney

Hi Thanks to all the replies (Off list). Alex On 23 August 2017 at 09:55, Alex Samad wrote: > Hi > > Wondering what the ball park figure for a 4kw rack in sydney would be. > > > > Alex > ___ AusNOG mailing list AusN

[AusNOG] cost of rack in sydney

Hi Wondering what the ball park figure for a 4kw rack in sydney would be. Alex ___ AusNOG mailing list AusNOG@lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Solomon Islands loses landing rights for a cable in Sydney

Probably the right lubrication ... donation ... um bribe ... to their favourite party hasn't been forth coming . On 27 July 2017 at 18:00, Noel Butler wrote: > On 27/07/2017 17:43, Jonathan Brewer wrote: > > > On Thu, 27 Jul 2017 at 12:37, Mark Newton wrote: > >> A submarine cable connecting

Re: [AusNOG] Arista Palo Alto OSPF interop

Its a hardware. On 7 July 2017 at 16:25, Jason Ross wrote: > Hi Alex, > > Is it a hardware or virtual PAN firewall? > > Jason > >>> Alex Samad 6/07/2017 3:45 PM >>> > Hi > > wondering if any on the list has had issues with Arista and Palo Alto &g

Re: [AusNOG] Arista Palo Alto OSPF interop

Thats something I will looking I'm new to the Pa and arista world On 7 July 2017 at 16:38, Mark Smith wrote: > On 6 July 2017 at 15:45, Alex Samad wrote: > > Hi > > > > wondering if any on the list has had issues with Arista and Palo Alto > > interop around OS

[AusNOG] Arista Palo Alto OSPF interop

Hi wondering if any on the list has had issues with Arista and Palo Alto interop around OSPF. I have a stable OSPF connection, but the PA firewall is timing out OSPF firewall session and logging them, Interestingly its only the aristra's doing it as I have other OSPF neighbours connected. But t

Re: [AusNOG] QSFP cables

(40G + 10G) think 4x40G and 8 x 10G I will check out some of the recommended sites Back to the optical v's DAC... I have typically tried to use copper (DAC) in rack and optical out of rack connections. Are people doing optical inrack ? Thanks Alex On 17 June 2017 at 18:34, Alex Sama

[AusNOG] QSFP cables

Hi I'm looking to buy some 10G Direct attach cables and also some QSFP cables. Any recommendations around sydney / Oz ? Alex ___ AusNOG mailing list AusNOG@lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog

[AusNOG] Cisco bug

Hi Newish bug for the ASA5xxx series.. ARP functions fail after 213 days of uptime, drop with error 'punt-rate-limit-exceeded' CSCvd78303 A ___ AusNOG mailing list AusNOG@lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog