Re: AboveNet Global Routing issue

2008-02-29 Thread Daniel Roesen
On Thu, Feb 28, 2008 at 12:28:39PM -0700, Blake Pfankuch wrote: > AboveNet is experiencing a network event. Why does that remind me of "rain event" in http://youtube.com/watch?v=DagVklB4VHQ http://youtube.com/watch?v=UjKciefHo38 ? :-) Sorry for off-topic, best regards, Daniel -- CLUE-RIPE --

Re: YouTube IP Hijacking

2008-02-24 Thread Daniel Roesen
On Sun, Feb 24, 2008 at 07:19:07PM -0500, Paul Stewart wrote: > Very nice.. is there an ARIN equal that anyone knows of OR can you use > the RIPE one for ARIN registered space? as the homepage states: "MyASN is open to be used by anyone. You don't have to be a Local Internet Registry (LIR) and y

Re: YouTube IP Hijacking

2008-02-24 Thread Daniel Roesen
On Sun, Feb 24, 2008 at 10:41:26PM +, Paul Ferguson wrote: > The best you can _probably_ hope for is a opt-in mechanism in > which you are alerted that prefixes you have "registered" with the > aforementioned system are being originated by an ASN which is not > authorized to originate them. h

Re: Charter.com DNS Administrator

2008-01-19 Thread Daniel Roesen
On Fri, Jan 18, 2008 at 06:39:14PM -0800, S. Ryan wrote: > Anyone know how one would get a hold of a Charter.com DNS Administrator? $ dig charter.com soa +short ns1.charter.com. ipaddressing.chartercom.com. 2008017401 7200 3600 604800 86400 Try [EMAIL PROTECTED] Regards, Daniel -- CLUE-RIPE

Re: IPv4 BGP Table Reduction Analysis - Prefixes Filter by RIRs Minimum Allocations Boundaries

2007-11-30 Thread Daniel Roesen
On Fri, Nov 30, 2007 at 11:24:58AM +0100, Elmar K. Bins wrote: > Before anyone asks: I do get defaults from my transits ;) Measuring traffic following the defaults before and after implementation of the filters could be interesting... Best regards, Daniel -- CLUE-RIPE -- Jabber: [EMAIL PROTECT

Re: Cisco CRS-1 vs Juniper 1600 vs Huawei NE5000E

2007-08-03 Thread Daniel Roesen
On Fri, Aug 03, 2007 at 07:47:44PM -0300, Giuliano (UOL) wrote: > It has excellent performance under MPLS, BGP and Multicast Networks. But a CLI/config as modern as a grammophone. If only they would copy JunOS instead of IOS... sigh. > But ... I never saw it under extreme conditions with IPv6 ..

Re: Juniper M10i sufficient for BGP, or go with M20?

2007-05-17 Thread Daniel Roesen
On Wed, May 16, 2007 at 12:16:03AM -0400, Warren Kumari wrote: > [0] -- You haven't lived until you have spent 4 hours in the middle > of the night trying to figure out why the command that you typed (and > that shows up in the config) doesn't work -- only to be told "Oh, > that doesn't exis

Re: NNTP feed.

2006-09-05 Thread Daniel Roesen
On Tue, Sep 05, 2006 at 10:27:29PM -0400, Justin M. Streiner wrote: > providing good news service requires tons of disk space and loads > of network bandwidth, I'm getting the impression that providing good news service doesn't need that, only providing good warez service does (and this includes

Re: Multihomed to 2 ISPs - Load Balance?

2006-06-25 Thread Daniel Roesen
On Mon, Jun 26, 2006 at 02:06:03AM +, Christopher L. Morrow wrote: > There is a flag on one vendor I believe to force it to send 'all paths', How so? BGP as protocol doesn't allow that, unless you use e.g. route distinguisher to... distinguish them. But them we're firmly into the "special hac

Re: Problem With the Real Player Stream?

2006-06-05 Thread Daniel Roesen
On Mon, Jun 05, 2006 at 08:08:59AM -1000, Scott Weeks wrote: > I can't hear anything on the Real Player stream due to a > very loud hum. Is it me or can something be done? Same here, together with ~30% packet loss. Best regards, Daniel -- CLUE-RIPE -- Jabber: [EMAIL PROTECTED] -- [EMAIL PROT

Re: How do you (not how do I) calculate 95th percentile?

2006-02-23 Thread Daniel Roesen
On Wed, Feb 22, 2006 at 05:46:01PM -0500, Russell, David wrote: > I personally think that 5 minute sampling is so last century s/5 minute sampling/polling/ RWSL[1] do deliver their accounting data via scp or FTP to collector hosts by themselves. Push instead of pull/poll. SNMP counter polling f

Re: protocols that don't meet the need...

2006-02-15 Thread Daniel Roesen
On Tue, Feb 14, 2006 at 01:47:31PM -0800, David Meyer wrote: > IETF). Now, while many in the IETF argue that there is no > such thing as an "operator community", I personally see > it differently, and there are many of us who think that > operator input is sorely missing fr

Re: do bogon filters still help?

2006-01-11 Thread Daniel Roesen
On Thu, Jan 12, 2006 at 12:21:30AM +0100, Florian Weimer wrote: > > Hi, here's a member of 'the folks at bit.nl'. Just a quick note to > > say that we have been sourcing IPv4 packets from 192.88.99.1 at a rate > > of 2.000 to 10.000 packets per second since early 2003, so I'm guessing > > we hav

Re: metric 0 vs 'no metric at all'

2006-01-03 Thread Daniel Roesen
On Tue, Jan 03, 2006 at 08:21:43AM +0100, Alexander Koch wrote: > I was wondering if someone had done any or some research on > this before... Yup, when troubleshooting the ERXes former wrong handling of "no MED". :-) > basically I am not sure with all the many > implementations of BGP and all t

Re: Addressing versus Routing (Was: Deploying IPv6 in a datacenter)

2005-12-27 Thread Daniel Roesen
; that will it still go fine? I will only care about problems which MIGHT come up in 25 years if there is a compelling rationale that we won't be able to cope with it THEN. :-) > Daniel Roesen wrote: > > Uhm, sorry, but that's wrong. /24s are widely(!) accepted and only very &g

Re: #nanog: was Re: http://weblog.disgu.st down

2005-12-21 Thread Daniel Roesen
On Thu, Dec 22, 2005 at 04:06:02AM +0200, Gadi Evron wrote: > >>I'd like to see a useful #nanog where network operators could chat. > > > >That channel does exist but is not NANOG-related. Some #nanog folks who > >do want to finally chat on-topic hang out there. Quote from one of them: > >"dude, t

Re: Deploying IPv6 in a datacenter (Was: Awful quiet?)

2005-12-21 Thread Daniel Roesen
On Wed, Dec 21, 2005 at 07:59:15PM -0600, Kevin Day wrote: > I admit, my experiences are with only a tiny number of users, so I > may have just had bad luck. But, I had trouble finding any of our > IPv6 guinea pigs that didn't take a perceptibly slower route to us > over 6 than they do for 4

Re: Addressing versus Routing (Was: Deploying IPv6 in a datacenter)

2005-12-21 Thread Daniel Roesen
On Wed, Dec 21, 2005 at 06:11:17PM -0500, Hannigan, Martin wrote: > > Correct. And there you have minimum frame spacing requirements (IFG) > > and (e.g. with 10Base2 networks) minimum distance between stations > > attached to the bus to allow CSMA/CD work correctly. > > Interframe gap has no depe

Re: [ipv6-wg] New IPv6 Address Block Allocated to the RIPE NCC

2005-12-21 Thread Daniel Roesen
On Wed, Dec 21, 2005 at 02:54:37PM +0100, Pim van Pelt wrote: > | The RIPE NCC received the IPv6 address range 2A01:::/16 from > | the IANA in December 2005. > Yaay, finally decently sized chunks to RIRs. Well done. You're jumping to conclusions. As Jeroen mentioned, it could be just someone

Re: Addressing versus Routing (Was: Deploying IPv6 in a datacenter)

2005-12-21 Thread Daniel Roesen
On Wed, Dec 21, 2005 at 04:43:58PM -0600, [EMAIL PROTECTED] wrote: > > Really? Where are the limits of BGP? Can you show me any numbers? > > You'd be the first. I'm not aware of any protocol inherent scaling > > brickwalls like with other protocols where certain timing constraints > > place limits

Re: #nanog: was Re: http://weblog.disgu.st down

2005-12-21 Thread Daniel Roesen
On Wed, Dec 21, 2005 at 02:30:18PM -0600, Albert Meyer wrote: > I'd like to see a useful #nanog where network operators could chat. That channel does exist but is not NANOG-related. Some #nanog folks who do want to finally chat on-topic hang out there. Quote from one of them: "dude, this is proll

Re: Addressing versus Routing (Was: Deploying IPv6 in a datacenter)

2005-12-21 Thread Daniel Roesen
On Wed, Dec 21, 2005 at 08:34:06PM +0100, Jeroen Massar wrote: > The issue with announcing say a /48 is though that networks which filter > will filter it out and will only reach you over the aggregate. Of course > that is their choice, just like yours is to try to announce the /48's in > IPv6, or

Re: Deploying IPv6 in a datacenter (Was: Awful quiet?)

2005-12-21 Thread Daniel Roesen
On Wed, Dec 21, 2005 at 07:50:14AM -0600, Kevin Day wrote: > 1) IPv6 on the internet overall seems a bit unreliable at the moment. > Entire /32's disappear and reappear, gone for days at a time. That's certainly true for people not doing it "in production". But that ain't a problem as they aren

Re: IPv6 transition to cost U.S. Government $75B

2005-12-15 Thread Daniel Roesen
On Thu, Dec 15, 2005 at 09:32:05AM -0500, Steven M. Bellovin wrote: > http://www.internetnews.com/infra/article.php/3570211 Well, vendors like Juniper were quick to add extra charges for IPv6 to get more out of this budget. :-) or better :-( Vendors know that .gov HAS to buy the IPv6 license, th

Re: Level 3 RFO

2005-10-24 Thread Daniel Roesen
On Mon, Oct 24, 2005 at 01:25:23PM +0200, Florian Weimer wrote: > >> Are there any configuration tweaks which can locally confine such an > >> event? Something like the hard prefix limit for BGP, perhaps. > > > > JunOS: > > set protocols ospf prefix-export-limit > > set protocols isis level pre

Re: Level 3 RFO

2005-10-23 Thread Daniel Roesen
On Sun, Oct 23, 2005 at 09:48:58PM +0200, Florian Weimer wrote: > This isn't the first time this has happened to an ISP. 8-( Indeed. > Are there any configuration tweaks which can locally confine such an > event? Something like the hard prefix limit for BGP, perhaps. JunOS: set protocols ospf

Re: h-root-servers.net (Level3 Question)

2005-10-23 Thread Daniel Roesen
On Sun, Oct 23, 2005 at 08:00:10PM +0200, Florian Weimer wrote: > > On Sun, Oct 23, 2005 at 11:59:15AM +0200, Peter Dambier wrote: > >> I means, here in germany we cannot see h.root-servers.net > > > > Nonsense. There is nothing like "geopolitical routing". > > I wouldn't call it "geopolitical ro

Re: h-root-servers.net (Level3 Question)

2005-10-23 Thread Daniel Roesen
On Sun, Oct 23, 2005 at 11:59:15AM +0200, Peter Dambier wrote: > I means, here in germany we cannot see h.root-servers.net Nonsense. There is nothing like "geopolitical routing". > Ok, it is only one of the root servers. But have a look who > h.root-servers.net is. It is one of the originals not

Re: IPv6 news

2005-10-15 Thread Daniel Roesen
On Fri, Oct 14, 2005 at 09:52:19PM -0700, Tony Li wrote: > The alternative is a multihoming scheme that does not require a > prefix per site. But that doesn't match the stated requirement of > 'conventional', 'proven', 'working' [sic], 'feature-complete'. Those weren't the "stated requiremen

Re: IPv6 news

2005-10-14 Thread Daniel Roesen
On Fri, Oct 14, 2005 at 10:21:58PM -0500, Chris Adams wrote: > For some equipment, it still works out to "forklift your network". > For example, our current dialup gear doesn't support IPv6 (and AFAIK > no upgrades are available or planned to add it). How does that hinder your backbone, leased li

Re: IPv6 news

2005-10-14 Thread Daniel Roesen
On Sat, Oct 15, 2005 at 03:15:45AM +, Christopher L. Morrow wrote: > > But I think the discussion is mood. IETF decided on their goal, and > > it's superfluous trying to change that. While watching shim6 we carry > > on hoping that we'll get IPv6 multihoming going in the conventional, > > prov

Re: Deploying 6to4 outbound routes at the border (was Re: IPv6 news)

2005-10-14 Thread Daniel Roesen
On Fri, Oct 14, 2005 at 10:45:33PM -0400, Todd Vierling wrote: > Maybe to start -- but again, what kind of 6to4 traffic level are we > expecting yet? Peak or average? Think twice before answering. :-) I'm told there are 6to4 relays seeing in excess of 100mbps. Not bursts. Can you imagine trying

Re: Deploying 6to4 outbound routes at the border (was Re: IPv6 news)

2005-10-14 Thread Daniel Roesen
On Fri, Oct 14, 2005 at 06:06:03PM -0400, Todd Vierling wrote: > That said, even such a distant gateway would be fine for v6 *eyeballs* if > organizations would voluntarily set up 6to4 outbound relays for their own v6 > networks. It's as simple as setting up a route to 2002::/16 at the border > w

Re: shim6 (was Re: IPv6 news)

2005-10-14 Thread Daniel Roesen
On Fri, Oct 14, 2005 at 01:11:18PM -0700, Crist Clark wrote: > Actually, doing multihoming and getting PI space are orthogonal in > shim6 last I knew. That is, you could get address space from your N > providers and have one of the providers, say Provider X, to be the > ULID for the end points. Sh

Re: shim6 (was Re: IPv6 news)

2005-10-14 Thread Daniel Roesen
On Fri, Oct 14, 2005 at 07:27:37PM +, [EMAIL PROTECTED] wrote: > the kicker here is that the applications then need some > serious smarts to do proper source address selection. Nope. The ULID is supposed to be static, globally unique. Just not globally routed. Seperating topology

Re: IPv6 news

2005-10-14 Thread Daniel Roesen
On Fri, Oct 14, 2005 at 11:50:33AM -0400, Joe Abley wrote: > I think it is far too early to judge how many end sites might find > shim6 an acceptable solution, however -- I'd wait for some > measurement and modelling before I made declarations about that, You mean in some 5-10 years? When fin

Re: IPv6 news

2005-10-14 Thread Daniel Roesen
On Fri, Oct 14, 2005 at 10:57:59AM -0400, Joe Abley wrote: > The big gap in the multi-homing story for v6 is for end sites, since > those are specifically excluded by all the RIRs' policies on PI > addressing right now. Shim6 is intended to be a solution for end sites. But isn't a solution fo

Re: IPv6 news

2005-10-14 Thread Daniel Roesen
On Fri, Oct 14, 2005 at 12:32:29AM +, Christopher L. Morrow wrote: > A few folks that have a deployment going are ahead of the curve, hopefully > they can keep the parts they have running and upgrade away from the 7507 > that is their current solution :) The larger EU/US ISPs that have real d

Re: IPv6 news

2005-10-12 Thread Daniel Roesen
On Thu, Oct 13, 2005 at 01:41:26AM +0200, JORDI PALET MARTINEZ wrote: > As I know, BT and P2P (some apps), already are using IPv6 ;-) I know of no official BitTorrent supporting IPv6... unfortunately. There were patches floating around, but to my understanding incompatible, and problems with BT s

Re: IPv6 news

2005-10-12 Thread Daniel Roesen
On Wed, Oct 12, 2005 at 11:13:12AM -1000, Randy Bush wrote: > also to be noted is that rir statistics on who has what space are > not in the best of shape, ripe's being particularly obfuscated. *raising an eyebrow* Would you care to elaborate on that? Best regards, Daniel -- CLUE-RIPE -- Jab

Re: Cogent/Level 3 depeering

2005-10-05 Thread Daniel Roesen
On Wed, Oct 05, 2005 at 03:51:34PM -0400, Patrick W. Gilmore wrote: > I think you and I have a different definition of "deny" and "decision". I agree that my usage of words was highly suboptimal to express what I wanted to express. See my other answer. > Cogent was connected to L3. Level 3 TOOK

Re: Cogent/Level 3 depeering

2005-10-05 Thread Daniel Roesen
On Wed, Oct 05, 2005 at 03:44:10PM -0400, Charles Gucker wrote: > > On Wed, Oct 05, 2005 at 02:08:01PM -0400, Richard A Steenbergen wrote: > > > You can only be a "tier 1" and maintain global reachability if you peer > > > with every other tier 1. Level 3 is obviously the real thing, and Cogent >

Re: Cogent/Level 3 depeering

2005-10-05 Thread Daniel Roesen
On Wed, Oct 05, 2005 at 02:08:01PM -0400, Richard A Steenbergen wrote: > You can only be a "tier 1" and maintain global reachability if you peer > with every other tier 1. Level 3 is obviously the real thing, and Cogent > is "close enough" (at least in their own minds :P) that they won't buy >

Re: OT - Vint Cerf joins Google

2005-09-12 Thread Daniel Roesen
On Mon, Sep 12, 2005 at 05:58:15PM +0300, Joe Abley wrote: > There are a few exchanges who isolate v6 and v4 traffic on separate > VLANs. Stats based on VLAN are a little easier to come by. Yeah, a few. Dying quickly. The most relevant IXPs or the IPv6 world aren't, they run real dual-AFI in a

Re: OT - Vint Cerf joins Google

2005-09-12 Thread Daniel Roesen
On Mon, Sep 12, 2005 at 06:28:22PM +0700, Randy Bush wrote: > those who see full stats at ixes, v4/6 isps, etc will tell you that > actual v6 traffic is miniscule. Not contesting the quantification, but what typical IXP switches can do stats based on ethertype? Given that most relevant IPv6 playe

Re: Fwd: Cisco crapaganda

2005-08-10 Thread Daniel Roesen
On Wed, Aug 10, 2005 at 11:13:42AM +0100, [EMAIL PROTECTED] wrote: > The root of all these vulnerabilities is our inability to write > complex software that is free of bugs. Inability? I'd rather say it's an economic question. Would you want to pay for proven bug-free software? Think twice (and l

Re: /8 end user assignment?

2005-08-05 Thread Daniel Roesen
On Fri, Aug 05, 2005 at 06:25:00PM +0100, Brandon Butterworth wrote: > But we could trade putting content on V6 for them if they make their > network do multicast for us. > > Deal? IPv6 multicast with embedded RP? Deal! Regards, Daniel -- CLUE-RIPE -- Jabber: [EMAIL PROTECTED] -- [EMAIL PROT

Re: /8 end user assignment?

2005-08-04 Thread Daniel Roesen
On Thu, Aug 04, 2005 at 09:26:48PM +0100, Stephen J. Wilcox wrote: > > So you ask folks to resort to hacks like NAT or force IPv6-only to > > their users when there is still a lack-of-content problem there? > > Can you show me your business plan draft for that? I'm curious. :-) > > ok, thats not

Re: /8 end user assignment?

2005-08-04 Thread Daniel Roesen
On Thu, Aug 04, 2005 at 07:35:24PM +0100, Stephen J. Wilcox wrote: > 1. Softbank BB is not on my radar of likely /8 candidates (of course, > geography may be the reason for that) Indeed, ASPAC is off most of our radars. :) Given the size of Softbanks subscriber base, I'm not surprised about the

Re: /8 end user assignment?

2005-08-04 Thread Daniel Roesen
On Thu, Aug 04, 2005 at 02:54:07PM -0400, Joe Abley wrote: > (slightly queasy, imagining the backscatter and worm probe love you'd > suddenly attract when you advertised your yet-to-be-used /8 for the > first time) I would guesstimate about 8 Terabyte per day, judging from the traffic I saw tow

Re: IPv6 push doesn't have much pull in U.S

2005-07-15 Thread Daniel Roesen
On Sat, Jul 16, 2005 at 01:57:06AM +, Fergie (Paul Ferguson) wrote: > Someone's been listening: > > http://www.eetimes.com/showArticle.jhtml?articleID=165702734 The only interesting bit in this article is the complete ignorance regarding Europe. Regards, Daniel -- CLUE-RIPE -- Jabber: [

Re: OMB: IPv6 by June 2008

2005-07-09 Thread Daniel Roesen
On Fri, Jul 08, 2005 at 09:05:29PM -0400, Joe Abley wrote: > Other failure modes require a full table (e.g. link failure between > the ISP and its upstream, or some other partial withdrawal of > connectivity). That's absolutely correct. I've overseen this failure mode. Consider me embarassed. :

Re: OMB: IPv6 by June 2008

2005-07-08 Thread Daniel Roesen
On Sat, Jul 09, 2005 at 12:52:35AM +0200, Andre Oppermann wrote: > >Multihomed end sites usually get away with receiving only default route > >or some partial routes from their upstreams. So technically you can > >BGP multihome with Cisco 1600 or even smaller easily (dunno where BGP > >support is

Re: OMB: IPv6 by June 2008

2005-07-08 Thread Daniel Roesen
On Sat, Jul 09, 2005 at 12:08:08AM +0200, Andre Oppermann wrote: > On the other hand a large DFZ routing table would simply dampen its > growth by itself. If it gets to costly to multihome because of the > hardware requirements only few would be able to so. Ergo we have a > negative feedback sys

Re: OMB: IPv6 by June 2008

2005-07-06 Thread Daniel Roesen
On Thu, Jul 07, 2005 at 12:34:53AM +0200, Iljitsch van Beijnum wrote: > But it certainly looks like a small DFZ table and portable address > space are fundamentally incompatible. At least if you want all the advantages that real BGP multihoming has. Not surprising. :-) Best regards, Daniel -

Re: Fundamental changes to Internet architecture

2005-07-01 Thread Daniel Roesen
On Fri, Jul 01, 2005 at 11:48:06AM +0100, [EMAIL PROTECTED] wrote: > I think Dave Clark is talking about something more fundamental than > simply IPv6 and also more far reaching. Also, the experience with > retrofitting most of IPv6's new features into IPv4 shows that it > is good to have role mod

Re: Fundamental changes to Internet architecture

2005-07-01 Thread Daniel Roesen
On Fri, Jul 01, 2005 at 11:28:31AM +0100, [EMAIL PROTECTED] wrote: > http://www.wired.com/news/infostructure/0,1377,68004,00.html?tw=wn_6techhead > > Dave Clark is proposing that the NSF should fund a new demonstration > network that implements a fundamentally new architecture at many levels. I

Re: PAIX Outages

2005-04-29 Thread Daniel Roesen
On Fri, Apr 29, 2005 at 02:08:13PM +0200, Alexander Koch wrote: > With public peering you simply never know how much spare > capacity your peer has free. You also never know with private peering: Backbone links. Regards, Daniel -- CLUE-RIPE -- Jabber: [EMAIL PROTECTED] -- [EMAIL PROTECTED] --

Re: Schneier: ISPs should bear security burden

2005-04-27 Thread Daniel Roesen
On Wed, Apr 27, 2005 at 11:08:42AM -0700, Dan Hollis wrote: > Malicious packets now account for a significant percentage of all ip > traffic. As a data point: An unused, never before used or even just announced /21 currently draws an average of 112pps und 70kbit/s, translating to about 1GB (1 Gi

Re: Internet2

2005-04-26 Thread Daniel Roesen
On Tue, Apr 26, 2005 at 02:07:15PM -0700, Vicky Rode wrote: > Basically I meant to say not congested as the current Internet is. It is? Regards, Daniel -- CLUE-RIPE -- Jabber: [EMAIL PROTECTED] -- [EMAIL PROTECTED] -- PGP: 0xA85C8AA0

Re: Getting a BGP table in to a lab

2005-04-21 Thread Daniel Roesen
On Thu, Apr 21, 2005 at 11:36:03PM +0200, Andre Oppermann wrote: > The only missing thing there [in OpenBGPD] is full filtering > capabilities which are under development currently. Oh, and other very basic things like IPv4-multicast, IPv6-unicast and IPv6-multicast AFI/SAFI support. Regards, D

New international IPv6 operators forum

2005-04-14 Thread Daniel Roesen
Dear NANOGers, people were missing a global mailing list (not regional RIR/NOG) dedicated to _operational_ matters of the global IPv6 (production, not 6BONE) Internet. To fill this void I've created such a mailing list: http://lists.cluenet.de/mailman/listinfo/ipv6-ops/ So if you're taking part

Re: OpenTransit (france telecom) depeers cogent

2005-04-14 Thread Daniel Roesen
On Fri, Apr 15, 2005 at 12:36:22AM +0200, Daniel Roesen wrote: > On Thu, Apr 14, 2005 at 05:29:46PM -0400, Patrick W Gilmore wrote: > > Is Cogent filtering the prefixes they get from Verio? Or is Verio > > filtering what they send to Cogent? Does it matter? > >

Re: OpenTransit (france telecom) depeers cogent

2005-04-14 Thread Daniel Roesen
On Thu, Apr 14, 2005 at 06:52:49PM -0400, German Martinez wrote: > > Or OT tagging their announcements to Sprint in a way that prevents them > > being announced to Cogent in order to force Cogent into buying transit. > > For people interested hereafter our route-server: > > telnet://route-serve

Re: OpenTransit (france telecom) depeers cogent

2005-04-14 Thread Daniel Roesen
On Thu, Apr 14, 2005 at 05:29:46PM -0400, Patrick W Gilmore wrote: > Is Cogent filtering the prefixes they get from Verio? Or is Verio > filtering what they send to Cogent? Does it matter? Or OT tagging their announcements to Sprint in a way that prevents them being announced to Cogent in orde

Re: Disappointment at DENIC over Poor Rating in .net Procedure

2005-04-02 Thread Daniel Roesen
On Sat, Apr 02, 2005 at 01:48:51PM +0200, Elmar K. Bins wrote: > The other: ICMP has been rate-limited. It might not be the way to > test those locations. An mtr output would be more interesting :) mtr uses ICMP too. Regards, Daniel -- CLUE-RIPE -- Jabber: [EMAIL PROTECTED] -- [EMAIL PROTECTE

Re: Heads up: Long AS-sets announced in the next few days

2005-03-01 Thread Daniel Roesen
On Wed, Mar 02, 2005 at 01:27:31AM +, James A. T. Rice wrote: > What exactly are you attempting to do here? Those announcements will get > dropped on the floor at least in this AS right away: > > route-map peers-in deny 5 > match as-path 109 AS-Sets, not AS-Paths... Regards, Daniel --

Re: Rapidly-variable routing on the time scale of seconds to minutes?

2005-01-31 Thread Daniel Roesen
On Tue, Feb 01, 2005 at 08:17:03AM +0100, Daniel Roesen wrote: > I'm not sure for the GSR platform, but as far as I remember, it's not > supported at all on Engine 2 line cards, and has a performance penalty > otherwise. Found some reference on that: http://www.cisco.co

Re: Rapidly-variable routing on the time scale of seconds to minutes?

2005-01-31 Thread Daniel Roesen
On Mon, Jan 31, 2005 at 09:59:39PM -0500, Charles Shen wrote: > From the responses, the answer to "the rapidly-variable routing on > the time scale of seconds to minutes" seems to be: > > 1. It could be link layer load balancing, with the two interfaces >belonging to the same router. > 2. It

Re: Rapidly-variable routing on the time scale of seconds to minutes?

2005-01-31 Thread Daniel Roesen
On Mon, Jan 31, 2005 at 10:08:39PM -0500, James wrote: > AFAIK, multiple routers showing up in a single-hop in traceroute response is > a sign of packet-by-packet load balancing, not flow based. Not necessarily, and in most cases probably not a fact. Don't forget that standard UNIX traceroute use

Re: Rapidly-variable routing on the time scale of seconds to minutes?

2005-01-31 Thread Daniel Roesen
On Mon, Jan 31, 2005 at 04:20:31AM -0500, Charles Shen wrote: > We did a "traceroute" end-to-end routing measurement in 2004 and found about > 5-10% of measuremnts exhibiting rapidly-variable routing on the time scale > of a single traceroute (seconds to minutes). In other words, the packets > bel

Re: again: how to get an IP from EP.net

2005-01-26 Thread Daniel Roesen
On Wed, Jan 26, 2005 at 03:10:58PM +0100, Fredy Kuenzler wrote: > > wrt IPv6... why not? > > > another thing the world does not need > So why do you peer IPv6 at NYIIX, AMSIX and probably other IXPs as well? What strikes me odd is that PAIX-* still uses crufty 6BONE 3ffe space for their peeri

Re: IBGP Question --- Router Reflector or iBGP Mesh

2005-01-11 Thread Daniel Roesen
On Tue, Jan 11, 2005 at 09:51:36PM +1000, Philip Smith wrote: > Many of the ISPs I've worked with around the world have followed this > path - and they are quite happy. I really think there is absolutely no > need to consider full mesh iBGP any more. I wouldn't go as far as saying > it's histor

Re: IPv6, IPSEC and deep packet inspection

2004-12-31 Thread Daniel Roesen
On Fri, Dec 31, 2004 at 02:35:49PM -0800, william(at)elan.net wrote: > ipv6 tunnels are seen as good thing (rightly so) Eh? Not really. Perhaps in developing countries regarding IPv6, but other regions have moved on to native deployment. :-P And now off to some new year's eve partying... :-)

Re: IPv6, IPSEC and deep packet inspection

2004-12-31 Thread Daniel Roesen
On Fri, Dec 31, 2004 at 10:46:56AM -0800, Merike Kaeo wrote: > An IPv6 network is sufficiently different from IPv4 that I encourage > folks to not simply slap an IPv4 security model onto future IPv6 > networks. Can you elaborate on "sufficiently different" please? Especially on details which m

Re: 16 vs 32 bit ASNs [Re: BBC does IPv6 ;) (Was: large multi-site enterprises and PI]

2004-11-29 Thread Daniel Roesen
On Mon, Nov 29, 2004 at 11:13:55AM +0100, Iljitsch van Beijnum wrote: > We really don't want to arrive at a situation > where it becomes increasingly difficult to obtain an AS number for > those who legitimately need one. What will be interesting is the definition of "legitimate" in this contex

Re: ULA and RIR cost-recovery

2004-11-29 Thread Daniel Roesen
On Sat, Nov 27, 2004 at 02:42:55PM +0100, Måns Nilsson wrote: > > The current problem is that the RIR membership has self-selected to a > > state where they set policies that ensure the end customer has no > > alternative except to be locked into their provider's address space. > > Do note that,

Re: BBC does IPv6 ;) (Was: large multi-site enterprises and PI

2004-11-28 Thread Daniel Roesen
On Sun, Nov 28, 2004 at 08:14:12PM +0100, Cliff Albert wrote: > I am looking from a RIPE point of view. Lately I see ISPs popping out of > the ground requesting ASNs and having actually only 1 upstream (there > are 2 upstreams in the routing database, but in the real world there is > only 1 upstre

Re: BBC does IPv6 ;) (Was: large multi-site enterprises and PI

2004-11-28 Thread Daniel Roesen
On Sun, Nov 28, 2004 at 02:13:17PM +0100, Henning Brauer wrote: > there are a lot of organizations now having PI without having an ASN > and beeing multihomed. a transition to v6 with this policy would make > things much worse for them, so why should they? Agreed, but currently we are at "no PI

Re: BBC does IPv6 ;) (Was: large multi-site enterprises and PI

2004-11-28 Thread Daniel Roesen
On Sun, Nov 28, 2004 at 01:21:05PM +0100, Henning Brauer wrote: > * Cliff Albert <[EMAIL PROTECTED]> [2004-11-28 13:13]: > > Therefore I also agree with daniel that there is not really a problem > > with the 1 ASN == 1 IPv6 Prefix. > > unless I miss something in that proposal that means that we'l

Re: BBC does IPv6 ;) (Was: large multi-site enterprises and PI

2004-11-27 Thread Daniel Roesen
On Sat, Nov 27, 2004 at 10:04:08PM -0500, Leo Bicknell wrote: > I find it interesting that no operators are screaming that there will be > too many routes, but that all the IPv6 researchers are bringing forth > this view. ACK. All the "oh our IPv4 DFZ table explodes today" is similarily unfounded

Re: BBC does IPv6 ;) (Was: large multi-site enterprises and PI prefix [Re: who gets a /32)

2004-11-25 Thread Daniel Roesen
On Thu, Nov 25, 2004 at 08:20:01PM +, Ryan O'Connell wrote: > > On 25/11/2004 17:47, Owen DeLong wrote: > > >Why do people keep talking about 200 sites? This is a fallacy. > > If you're not assigning IP addresses to other users, (I.e. you're an > Enterprise rather than an ISP) you need 20

Re: who gets a /32 [Re: IPV6 renumbering painless?]

2004-11-14 Thread Daniel Roesen
On Sun, Nov 14, 2004 at 07:55:56PM -0800, Randy Bush wrote: > > in august 2002 there were no v6 isp's. > > you're kidding, right? let's not be too americocentric. > i assure you there were. ACK, just look at the "Allocated" column at: http://www.sixxs.net/tools/grh/tla/ripe/ http://www.sixxs.n

Re: who gets a /32 [Re: IPV6 renumbering painless?]

2004-11-14 Thread Daniel Roesen
On Sun, Nov 14, 2004 at 07:43:18PM -0500, Richard Jimmerson wrote: > Most of the existing IPv6 policy set went into effect August 1, 2002, > in the ARIN region. The provisional IPv6 policy set in place before > that did not exclude end-sites from obtaining IPv6 address space from > ARIN. And this

Re: IPV6 renumbering painless?

2004-11-12 Thread Daniel Roesen
On Fri, Nov 12, 2004 at 05:06:17PM -0800, Owen DeLong wrote: > >OK, but this doesn't have any effect on your "Listen", > >"NameVirtualHost" and "" statements of your httpd.conf, > >"ListenAddress" in sshd.conf, "Bind" in proftpd.conf, "*-source" and > >"listen-on*" in named.conf, [...] > > > True.

Re: The Cidr Report

2004-11-12 Thread Daniel Roesen
On Fri, Nov 12, 2004 at 04:23:29PM -0800, Austin Schutz wrote: > > > ASnumNetsNow NetsAggr NetGain % Gain Description > > > > > > AS18566 7516 74599.2% CVAD Covad Communications > > > are these numbers what i think, but hope not, they are? > > > > e.g. is AS1856

Re: IPV6 renumbering painless?

2004-11-12 Thread Daniel Roesen
On Fri, Nov 12, 2004 at 05:19:36PM +0100, Simon Leinen wrote: > > "specified the entire 128 bits"... how do you specify only part of > > it? > > On Solaris, you would use the "token" option (see the extract from > "man ifconfig" output below). You can simply put "token ::1234:5678" > into /etc/h

Re: IPV6 renumbering painless?

2004-11-11 Thread Daniel Roesen
On Thu, Nov 11, 2004 at 12:05:26PM -0800, Tony Hain wrote: > > "fixed" as in "now using stateless autoconfig"? Fun... change NIC and > > you need to change DNS. Thanks, but no thanks. Not for non-mobile > > devices which need to be reachable with sessions initiated from remote > > (basically: serv

Re: IPV6 renumbering painless?

2004-11-11 Thread Daniel Roesen
On Thu, Nov 11, 2004 at 07:28:13PM -0500, Joe Abley wrote: > >There is currently no PI in IPv6 unless you're an internet exchange or > >a root server. Whether there will be is anyone's guess, but it's not > >currently in the pipeline. > > ... or you're an organisation who plans to delegate addr

Re: IPV6 renumbering painless?

2004-11-11 Thread Daniel Roesen
On Thu, Nov 11, 2004 at 08:44:57AM -0800, Kevin Oberman wrote: > We have renumbered IPv6 space a couple of times when we were developing > our addressing plan. (We have a /32.) Renumbering was pretty trivial for > most systems, but servers requiring a fixed address were usually > configured with a

Re: Important IPv6 Policy Issue -- Your Input Requested

2004-11-08 Thread Daniel Roesen
On Mon, Nov 08, 2004 at 05:56:58PM -0500, Joe Maimon wrote: > To all of us happily using ip4 does ipv6 offer anything valuable other > than more space? Depends on who you are. > Do net admins who dread troubleshooting real networks with > unrecognizable and unmemorizable addresses exist? Actu

Re: Important IPv6 Policy Issue -- Your Input Requested

2004-11-08 Thread Daniel Roesen
On Mon, Nov 08, 2004 at 01:22:07PM -0800, Randy Bush wrote: > let me see if i understand. you propose a technical cluster > with which we are already horrifyingly familiar to fix > an administrative problem? have i got it right? No, you didn't. I didn't propose anything, and especially not NAT

Re: Important IPv6 Policy Issue -- Your Input Requested

2004-11-08 Thread Daniel Roesen
On Mon, Nov 08, 2004 at 03:46:05PM -0500, Daniel Senie wrote: > Reason #3: A separate set of blocks should be set aside for use ONLY in > documentation. inet6num: 2001:0DB8::/32 netname: IPV6-DOC-AP descr:IPv6 prefix for documentation purpose [...] remarks: This address ran

Re: Important IPv6 Policy Issue -- Your Input Requested

2004-11-08 Thread Daniel Roesen
On Mon, Nov 08, 2004 at 01:04:28PM -0800, Randy Bush wrote: > > I must admint, I'm really not up on the more subtle aspects of v6 > > addressing nor have I read the drafts you posted, but I've never > > understood why we needed a new set of RFC1918-like IPv6 space. > > because there is not enough

Re: Question for WHOIS query

2004-11-03 Thread Daniel Roesen
On Thu, Nov 04, 2004 at 02:05:27AM +0100, Arnold Nipper wrote: > >On Wed, Nov 03, 2004 at 04:50:10PM -0800, Dan Lockwood wrote: > >>Where can a person go to get a "one stop" WHOIS query for AS and prefix > >>information instead of trying ARIN, then RIPE, etc? > > > >RADB. http://www.radb.net/ > >

Re: Question for WHOIS query

2004-11-03 Thread Daniel Roesen
On Wed, Nov 03, 2004 at 04:50:10PM -0800, Dan Lockwood wrote: > Where can a person go to get a "one stop" WHOIS query for AS and prefix > information instead of trying ARIN, then RIPE, etc? RADB. http://www.radb.net/ HTH & Regards, Daniel -- CLUE-RIPE -- Jabber: [EMAIL PROTECTED] -- [EMAIL PR

Re: IPv6 support for com/net zones on October 19, 2004

2004-10-28 Thread Daniel Roesen
On Thu, Oct 28, 2004 at 01:45:28PM +0200, Niels Bakker wrote: > Anyone else care to comment? The hop count is suspiciously lower for > IPv6 than for IPv4, and has twice the latency (coming from Europe too). > But again, this is traceroute `wisdom'. One problem with IPv6 traceroute is, that Cisco

Re: IPv6 support for com/net zones on October 19, 2004

2004-10-27 Thread Daniel Roesen
On Wed, Oct 27, 2004 at 09:43:08PM +0200, Daniel Roesen wrote: > > On Wed, Oct 27, 2004 at 03:21:44PM -0400, Joe Abley wrote: > > Maybe Verisign needs more (reliable) v6 transit. > > Something is broken in several colors here. I'm seeing AS_PATHs > like 6830 6175 109

Re: IPv6 support for com/net zones on October 19, 2004

2004-10-27 Thread Daniel Roesen
On Wed, Oct 27, 2004 at 03:21:44PM -0400, Joe Abley wrote: > Maybe Verisign needs more (reliable) v6 transit. Something is broken in several colors here. I'm seeing AS_PATHs like 6830 6175 109 7018 26415 (Sprint, Cisco, AT&T, Verisign) but a traceroute is going straight from 6830 to AT&T and dyin

Re: aggregation & table entries

2004-10-14 Thread Daniel Roesen
On Thu, Oct 14, 2004 at 08:35:50PM +0200, Iljitsch van Beijnum wrote: > >And what do you do with a BGP customer which sends you traffic from > >prefixes he doesn't want to announce to you? There are such customers. > > The whole point of BCP38 is that this isn't supposed to happen. Unfortunately

  1   2   >