Re: ipv6 book recommendations?

2012-06-06 Thread Seth Mos
Op 5-6-2012 23:23, William Herrin schreef: On 6/5/12, David Hubbard wrote: Hi David, Instead of going the book route, I'd suggest getting some tunneled addresses from he.net and then working through http://ipv6.he.net/certification/ . They have the basics pretty well covered, it's interactive

Re: ipv6 book recommendations?

2012-06-06 Thread JORDI PALET MARTINEZ
One more (free) book: http://www.ipv6tf.org/index.php?page=news/newsroom&id=8281 (available in several languages) ** IPv4 is over Are you ready for the new Internet ? http://www.consulintel.es The IPv6 Company This electronic message contains inform

Re: IPv6 day and tunnels

2012-06-06 Thread valdis . kletnieks
On Tue, 05 Jun 2012 21:44:59 -0700, Owen DeLong said: > Second, you are correct. All L2 bridges for a given media type > should support the largest configurable MTU for that media > type, so, it is arguably a design flaw in the bridges. However, > in an environment where you have broken L2 devices

Re: ipv6 book recommendations?

2012-06-06 Thread Cutler James R
On Jun 5, 2012, at 5:23 PM, William Herrin wrote: > On 6/5/12, David Hubbard wrote: >> Does anyone have suggestions on good books to really get >> a thorough understanding of v6, subnetting, security practices, >> etc. Or a few books. Just turned up dual stack with our >> peers and a test netwo

Re: IPv6 day and tunnels

2012-06-06 Thread Joe Maimon
Owen DeLong wrote: > Given the combination of Moore's law and the deployment > lifecycle, designs we do today in this regard can be expected > to last ~12 years or more, so they should be prepared for > at least 16x. At 1,600 Gbps, that puts our target maximum > MTU up around 200M octets. > I

Re: IPv6 day and tunnels

2012-06-06 Thread Joe Maimon
Owen DeLong wrote: Really, no. The L3 MTU on an interface should be configured to the lowest MTU reachable via that link without crossing a router. It's just that simple. Anything else _IS_ a misconfiguration. Perhaps this should be thought of as a limitation, rather then a feature. Joe

.GW registrar?

2012-06-06 Thread Ben Carleton
Hello all, Does anyone have a contact at either DENIC or "Fundação IT & MEDIA Universidade de Bissao" that can advise if registrations are currently being accepted for .GW domain names? The IANA admin contact, ad...@register.gw, is at a domain with no valid MX records (or A records, for tha

Re: ipv6 book recommendations?

2012-06-06 Thread Anton Smith
On 6 June 2012 14:12, Cutler James R wrote: > > On Jun 5, 2012, at 5:23 PM, William Herrin wrote: > > > On 6/5/12, David Hubbard wrote: > >> Does anyone have suggestions on good books to really get > >> a thorough understanding of v6, subnetting, security practices, > >> etc.  Or a few books.  Ju

Re: Trouble viewing slides for Automated Configuration and Validation of a Large Scale Network

2012-06-06 Thread vijay gill
A non-cut off version is here: http://sdrv.ms/MeQl1L On Tue, Jun 5, 2012 at 6:49 PM, Smith, Courtney < courtney_sm...@cable.comcast.com> wrote: > I am having trouble view the slides for this morning's presentation by > Vijay Gill. It appears conversion from power point to a PDF cropped the > sli

AAAA's for www.netflix.com

2012-06-06 Thread Frank Bulk
I started monitoring IPv6 access to www.netflix.com after seeing this posting (http://www.personal.psu.edu/dvm105/blogs/ipv6/2012/06/netflix-is-back.html) and what I found, over the week, was that access was coming and going (www.premieronline.net/~fbulk/netflix.png). But not because of IPv6 conne

Re: Trouble viewing slides for Automated Configuration and Validation of a Large Scale Network

2012-06-06 Thread Saku Ytti
On (2012-06-06 06:57 -0700), vijay gill wrote: > A non-cut off version is here: http://sdrv.ms/MeQl1L For me provisioning automatically has always been quite trivial problem, system just has object representation of service with references to other objects and then those objects are used to fill

IPv6 /64 links (was Re: ipv6 book recommendations?)

2012-06-06 Thread Jean-Francois . TremblayING
Anton Smith a écrit sur 06/06/2012 09:53:02 AM : > Potentially silly question but, as Bill points out a LAN always > occupies a /64. > > Does this imply that we would have large L2 segments with a large > number of hosts on them? What about the age old discussion about > keeping broadcast segme

Re: .GW registrar?

2012-06-06 Thread Elmar K. Bins
Re Ben, b...@bencarleton.com (Ben Carleton) wrote: > Does anyone have a contact at either DENIC or "Fundação IT & MEDIA > Universidade de Bissao" that can advise if registrations are currently being > accepted for .GW domain names? The IANA admin contact, > ad...@register.gw, is at a domain wi

RE: IPv6 /64 links (was Re: ipv6 book recommendations?)

2012-06-06 Thread Chuck Church
Does anyone know the reason /64 was proposed as the size for all L2 domains? I've looked for this answer before, never found a good one. I thought I read there are some L2 technologies that use a 64 bit hardware address, might have been Bluetooth. Guaranteeing that ALL possible hosts could live t

Re: ipv6 book recommendations?

2012-06-06 Thread Cutler James R
On Jun 6, 2012, at 9:53 AM, Anton Smith wrote: > > Hi all, > > Potentially silly question but, as Bill points out a LAN always occupies a > /64. > > Does this imply that we would have large L2 segments with a large > number of hosts on them? What about the age old discussion about > keeping b

RE: IPv6 day and tunnels

2012-06-06 Thread Templin, Fred L
A few more words on MTU. What we are after is accommodation of MTU diversity - not any one specific size. Practical limit is (2^32 - 1) for IPv6, but we expect smaller sizes for the near term. Operators know how to configure MTUs appropriate for their links. 1280 is too small, and turns the IPv6 In

Re: IPv6 /64 links (was Re: ipv6 book recommendations?)

2012-06-06 Thread Dale W. Carder
Thus spake Chuck Church (chuckchu...@gmail.com) on Wed, Jun 06, 2012 at 10:58:05AM -0400: > Does anyone know the reason /64 was proposed as the size for all L2 domains? Some day eui-48 will "run out". So, just assume eui-64 now and map into it. Also, as you point out below, not all L2 is ethern

seeking older .com / .net zone files

2012-06-06 Thread Manish Karir
All, We are working on a project with the University of Michigan related with studying the evolution of .com/.net zones Does anyone have copies of .com / .net zone files around the beginning of 2011? Any help would be greatly appreciated. Thanks. -manish

RFC5549

2012-06-06 Thread Aris Lambrianidis
Hello all, In light of World IPv6 Launch day, I would like to raise awareness for RFC5549, "Advertising IPv4 Network Layer Reachability Information with an IPv6 Next Hop" (http://tools.ietf.org/html/rfc5549). As far as I'm aware of, this RFC has yet to be implemented by any vendors so far but

Re: ROVER routing security - its not enumeration

2012-06-06 Thread Doug Montgomery
On 6/5/12 3:40 PM, Randy Bush wrote: There are number of operational models that provide the needed routing protection without enumeration. I can see a use-case for something like: "Build me a prefix list from the RIR data" this requires a full data fetch, not doable in dns. and, at the oth

Re: seeking older .com / .net zone files

2012-06-06 Thread Joe Provo
On Wed, Jun 06, 2012 at 01:13:45PM -0400, Manish Karir wrote: > > All, > > We are working on a project with the University of Michigan related > with studying the evolution of .com/.net zones > Does anyone have copies of .com / .net zone files around the > beginning of 2011? > Any help would be g

Re: IPv6 /64 links (was Re: ipv6 book recommendations?)

2012-06-06 Thread Owen DeLong
It is because of IEEE EUI-64 standard. It was believed at the time of IPv6 development that EUI-48 would run out of numbers and IEEE had proposed going to EUI-64. While IEEE still hasn't quite made that change (though Firewire does appear to use EUI-64 already), it will likely occur prior to the E

Re: IPv6 /64 links (was Re: ipv6 book recommendations?)

2012-06-06 Thread Steve Clark
On 06/06/2012 03:05 PM, Owen DeLong wrote: It is because of IEEE EUI-64 standard. It was believed at the time of IPv6 development that EUI-48 would run out of numbers and IEEE had proposed going to EUI-64. While IEEE still hasn't quite made that change (though Firewire does appear to use EUI-64

Re: AAAA's for www.netflix.com

2012-06-06 Thread Ben Jencks
On Jun 6, 2012, at 10:05 AM, Frank Bulk wrote: > I started monitoring IPv6 access to www.netflix.com after seeing this > posting > (http://www.personal.psu.edu/dvm105/blogs/ipv6/2012/06/netflix-is-back.html) > and what I found, over the week, was that access was coming and going > (www.premieronli

Re: IPv6 /64 links (was Re: ipv6 book recommendations?)

2012-06-06 Thread Owen DeLong
On Jun 6, 2012, at 1:02 PM, Steve Clark wrote: > On 06/06/2012 03:05 PM, Owen DeLong wrote: >> >> It is because of IEEE EUI-64 standard. >> >> It was believed at the time of IPv6 development that EUI-48 would run out of >> numbers and IEEE had proposed going to EUI-64. While IEEE still hasn't >

Re: .GW registrar?

2012-06-06 Thread Doug Barton
On 06/06/2012 06:34, Ben Carleton wrote: > > > Hello all, > > Does anyone have a contact at either DENIC or "Fundação IT & MEDIA > Universidade de Bissao" that can advise if registrations are currently being > accepted for .GW domain names? The IANA admin contact, > ad...@register.gw, is at

Re: .GW registrar?

2012-06-06 Thread Ben Carleton
On 6/6/2012 9:34 AM, Ben Carleton wrote: > > Hello all, > > Does anyone have a contact at either DENIC or "Fundação IT & MEDIA > Universidade de Bissao" that can advise if registrations are currently being > accepted for .GW domain names? The IANA admin contact, > ad...@register.gw, is at a do

Re: IPv6 /64 links (was Re: ipv6 book recommendations?)

2012-06-06 Thread Masataka Ohta
Owen DeLong wrote: > It is because of IEEE EUI-64 standard. Right, so far. > It was believed at the time of IPv6 development that EUI-48 would run out of > numbers and IEEE had proposed going to EUI-64. While IEEE still hasn't > quite made that change (though Firewire does appear to use EUI-64 a

Re: IPv6 /64 links (was Re: ipv6 book recommendations?)

2012-06-06 Thread Karl Auer
On Wed, 2012-06-06 at 10:35 -0400, jean-francois.tremblay...@videotron.com wrote: > The ND noise generated is arguably higher than ARP because of DAD, > but I don't remember seeing actual numbers on this (anybody?). > I've seen links with up to 15k devices where ARP represented > a significant p

Re: ipv6 book recommendations?

2012-06-06 Thread valdis . kletnieks
On Wed, 06 Jun 2012 14:53:02 +0100, Anton Smith said: > Potentially silly question but, as Bill points out a LAN always occupies a > /64. > > Does this imply that we would have large L2 segments with a large > number of hosts on them? What about the age old discussion about > keeping broadcast se

Re: IPv6 day and tunnels

2012-06-06 Thread Masataka Ohta
Owen DeLong wrote: >> Because bigger packets makes it rather circuit switching than >> packet switching, which is the way to lose. > Er... No. It's attitudes like this that killed ATM. ATM committed suicide because its slow target speed (64Kbps voice) and inappropriate QoS theory required small

Re: AAAA's for www.netflix.com

2012-06-06 Thread Mark Andrews
In message <5f907bc1-9344-4187-ba12-ceaf7e1c3...@bjencks.net>, Ben Jencks write s: > On Jun 6, 2012, at 10:05 AM, Frank Bulk wrote: > > > I started monitoring IPv6 access to www.netflix.com after seeing this > > posting > > = > (http://www.personal.psu.edu/dvm105/blogs/ipv6/2012/06/netflix-is-bac

LinkedIn password database compromised

2012-06-06 Thread Lynda
Sorry to be the bearer of such bad tidings. Please note that I'm doing a quick copy/paste from a notification I received. I've edited it a bit. Please note that LinkedIn has weighed in with a carefully worded blog post: http://blog.linkedin.com/2012/06/06/linkedin-member-passwords-compromised/

Re: LinkedIn password database compromised

2012-06-06 Thread Marshall Eubanks
On Wed, Jun 6, 2012 at 9:33 PM, Lynda wrote: > Sorry to be the bearer of such bad tidings. Please note that I'm doing a > quick copy/paste from a notification I received. I've edited it a bit. > > Please note that LinkedIn has weighed in with a carefully worded blog post: > > http://blog.linkedin.

Re: LinkedIn password database compromised

2012-06-06 Thread Aaron C. de Bruyn
On Wed, Jun 6, 2012 at 7:19 PM, Marshall Eubanks wrote: > On Wed, Jun 6, 2012 at 9:33 PM, Lynda wrote: >> In other words, if you have a LinkedIn account, expect that the password has >> been stolen. Go change your password now. If you used that password >> elsewhere, you know the routine. In addi

Configuration Systems

2012-06-06 Thread Andrew Latham
Lurker speaking... beware... I have been talking with some folks from various industries about configuration systems ala Bcfg2, Puppet, Chef, and others. Many of them care far too much about the current nodes configuration status as some admin had logged in and changed something. I am authoring

Re: Configuration Systems

2012-06-06 Thread Andrew Latham
Jonathan That is the exact question I have asked myself many times. All of the major players in Configuration management have a "client" program that must run and at times requires some libraries that are newer than the platforms a company may need to support or that clients may wish supported.

Re: LinkedIn password database compromised

2012-06-06 Thread Jimmy Hess
On 6/6/12, Aaron C. de Bruyn wrote: [snip] > One local password used everywhere that can't be compromised through > website stupidity... One local password is an excellent idea of course. "Remote servers directly handling user created credentials" should be appended to the list of the worst ide

Re: LinkedIn password database compromised

2012-06-06 Thread Aaron C. de Bruyn
On Wed, Jun 6, 2012 at 8:34 PM, Jimmy Hess wrote: > Which digital id architecture should web sites implement, and what's > going to make them  all agree on one SSO system   and move from the > current state to one of the possible solutions though?  :) > >        A TLS + Client-Side X.509 Certifica

IPv6 on AWS

2012-06-06 Thread Grant Ridder
Hi, Is there anyone here from Amazon that knows when Amazon Web Services will support native IPv6? Thanks, Grant