Re: IP Address Management IPAM software for small ISP

2012-12-27 Thread Eric
I ran Zenoss for a network with about 5k - 7k switches/APs, about 100 L3 devices (routers, firewalls), and about 50 servers/appliances without any polling problems. This was a few years ago on the open source product. With that said, we were reluctant to expand this to monitor the rest of our

really facebook?

2012-12-27 Thread mike
I reloaded their app (yes, I know... sew me) and got this warning: IP address: 2600:100f:b119:c6bc:bd6f:fabb:ff30:2a3d Estimated location: Livingston, NJ, US Which seems pretty bizarre. I'm guessing they must be getting it from whois or something based on the address block for

Re: really facebook?

2012-12-27 Thread joel jaeggli
On 12/27/12 9:04 AM, mike wrote: I reloaded their app (yes, I know... sew me) and got this warning: IP address: 2600:100f:b119:c6bc:bd6f:fabb:ff30:2a3d Estimated location: Livingston, NJ, US That's a rather good estimation of where many verizon wireless customers appear to come from.

Netflix transit preference?

2012-12-27 Thread randal k
Hey NANOG! I work at a datacenter in southern Colorado that is the upstream bandwidth provider for several regional ISPs. We have been investigating our ever-growing bandwidth usage and have found that out of transits (Level3,Cogent,HE) that Netflix always seems to come in via Hurricane Electric.

Re: Netflix transit preference?

2012-12-27 Thread Patrick W. Gilmore
On Dec 27, 2012, at 13:19 , randal k na...@data102.com wrote: I work at a datacenter in southern Colorado that is the upstream bandwidth provider for several regional ISPs. We have been investigating our ever-growing bandwidth usage and have found that out of transits (Level3,Cogent,HE) that

Re: really facebook?

2012-12-27 Thread mike
On 12/27/12 9:25 AM, joel jaeggli wrote: On 12/27/12 9:04 AM, mike wrote: I reloaded their app (yes, I know... sew me) and got this warning: IP address: 2600:100f:b119:c6bc:bd6f:fabb:ff30:2a3d Estimated location: Livingston, NJ, US That's a rather good estimation of where many

Re: Netflix transit preference?

2012-12-27 Thread Jeff Kell
On 12/27/2012 1:26 PM, Patrick W. Gilmore wrote: On Dec 27, 2012, at 13:19 , randal k na...@data102.com wrote: (We move ~1.4gbps to Netflix, and are thus not a candidate for peering. And they have no POP close.) Why don't you ask Netflix? And why not ask them for kit to put on-net?

Re: really facebook?

2012-12-27 Thread David Swafford
This can't mean that all of their v6 traffic is backhauled to NJ, right? Nah, that would be really lame for performance -- I'm pretty sure they treat V4/V6 equally :-D. david. On Thu, Dec 27, 2012 at 1:29 PM, mike m...@mtcc.com wrote: On 12/27/12 9:25 AM, joel jaeggli wrote: On 12/27/12 9:04

Re: really facebook?

2012-12-27 Thread joel jaeggli
On 12/27/12 10:29 AM, mike wrote: On 12/27/12 9:25 AM, joel jaeggli wrote: On 12/27/12 9:04 AM, mike wrote: I reloaded their app (yes, I know... sew me) and got this warning: IP address: 2600:100f:b119:c6bc:bd6f:fabb:ff30:2a3d Estimated location: Livingston, NJ, US That's a rather

Re: Netflix transit preference?

2012-12-27 Thread randal k
Hey Patrick, Thanks for your prompt response. Yes, we are trying to determine where/how we receive it ... not necessarily influence it, as there isn't so much we can do there as Netflix' egress policy is theirs and theirs alone (interestingly, nobody has communities to influence Netflix' AS2906

Re: Netflix transit preference?

2012-12-27 Thread Patrick W. Gilmore
On Dec 27, 2012, at 13:46 , randal k na...@data102.com wrote: Thanks for your prompt response. Yes, we are trying to determine where/how we receive it ... not necessarily influence it, as there isn't so much we can do there as Netflix' egress policy is theirs and theirs alone (interestingly,

Re: Netflix transit preference?

2012-12-27 Thread Patrick W. Gilmore
More silliness was pointed out to me. I was looking at Jeff Kell's from: address and looked up UTC.edu to get your location, forgetting you mentioned Colorado in your original post. I'm going to sign off and enjoy the holidays since I clearly am not doing anyone any good here. -- TTFN,

RE: Netflix transit preference?

2012-12-27 Thread Steve Dodd
Perhaps you could get some subset of RMIX to approach Netflix collectively. -Steve -Original Message- From: Jeff Kell [mailto:jeff-k...@utc.edu] Sent: Thursday, December 27, 2012 11:33 AM To: Patrick W. Gilmore Cc: NANOG list Subject: Re: Netflix transit preference? On 12/27/2012 1:26

Re: Netflix transit preference?

2012-12-27 Thread Carlos Alcantar
I'M they would be more then willing to work with you on the open connect appliance, specifically if you offered to pay for the hardware which I'M sure would come in a lot cheaper then transport/transit over 12 months. Carlos Alcantar Race Communications / Race Team Member 1325 Howard Ave. #604,

SSL Certificates and ... Providers

2012-12-27 Thread Blake Pfankuch
Ok, so this might be a little off topic but I am trying to validate something a vendor is telling me and hoping some people here have expertise in this area... I am working with a SSL certificate provider. I am trying to purchase a quantity of wildcard SSL certificates to cover about 60 FQDN's

Re: SSL Certificates and ... Providers

2012-12-27 Thread Peter Kristolaitis
Yes, some SSL providers (mostly the overpriced ones) like to license their certs on a per-server basis. If you read the contract language, this is how it's written. However, this is strictly a contractual issue, not a technical one. It's just a way to squeeze more money out of people who

Re: SSL Certificates and ... Providers

2012-12-27 Thread John Adams
Many vendors do this and I highly recommend someone like Digicert that won't play the per-machine licensing game with you. Sent from my iPhone On Dec 27, 2012, at 11:47 AM, Blake Pfankuch bl...@pfankuch.me wrote: Ok, so this might be a little off topic but I am trying to validate something

Re: SSL Certificates and ... Providers

2012-12-27 Thread Andrew Latham
On Thu, Dec 27, 2012 at 2:47 PM, Blake Pfankuch bl...@pfankuch.me wrote: Ok, so this might be a little off topic but I am trying to validate something a vendor is telling me and hoping some people here have expertise in this area... I am working with a SSL certificate provider. I am trying

Re: SSL Certificates and ... Providers

2012-12-27 Thread Larry LaBas
I did and it was vendor dependent which is why I switched a year and a half ago. TTFN, Larry http://www.linkedin.com/in/llabas On Dec 27, 2012, at 11:47, Blake Pfankuch bl...@pfankuch.me wrote: Ok, so this might be a little off topic but I am trying to

Re: SSL Certificates and ... Providers

2012-12-27 Thread William Herrin
On Thu, Dec 27, 2012 at 2:47 PM, Blake Pfankuch bl...@pfankuch.me wrote: Vendor is telling me that the Wildcard certificates are licensed per physical device it is installed on. If you stay at a $200 hotel, you pay an extra $10 for Internet access. If you stay at a $40 motel, Internet is

RE: SSL Certificates and ... Providers

2012-12-27 Thread Blake Pfankuch
Thanks everyone for the quick responses. Our stuff is currently through Verisign because of the reliability of the name and the nature of the industry. Any suggestions for who I should look at to replace them with? I know I will be saving money, but looking to keep the name reliability as

Re: Netflix transit preference?

2012-12-27 Thread randal k
Steve, Yep, we are a member of the RMIX already incidentally, and we have an email in to the maintainer, CoreSite, to see if they can talk to Netflix about perhaps setting up shop in Denver. Or even about linking the Denver exchange to the LA or NY exchanges? I'm certain that a LOT of the west

Re: SSL Certificates and ... Providers

2012-12-27 Thread Ken A
I've found rapidssl wildcards are generally the cheapest (~$120), and are not limited to a number of servers. In practice, neither are the other brands. Ken On 12/27/2012 1:47 PM, Blake Pfankuch wrote: Ok, so this might be a little off topic but I am trying to validate something a vendor is

Re: Netflix transit preference?

2012-12-27 Thread Robert E. Seastrom
Jeff Kell jeff-k...@utc.edu writes: On 12/27/2012 1:26 PM, Patrick W. Gilmore wrote: On Dec 27, 2012, at 13:19 , randal k na...@data102.com wrote: (We move ~1.4gbps to Netflix, and are thus not a candidate for peering. And they have no POP close.) Why don't you ask Netflix? And why not ask

Re: SSL Certificates and ... Providers

2012-12-27 Thread Jimmy Hess
On 12/27/12, Blake Pfankuch bl...@pfankuch.me wrote: It does make no sense, and I would say it is an unusual restriction, but a CA can put any certificate usage restriction they want in their policy, and technically, they have likely included a right to audit and issue out a revokation/CRL for

Re: SSL Certificates and ... Providers

2012-12-27 Thread Christopher Morrow
On Thu, Dec 27, 2012 at 3:37 PM, Blake Pfankuch bl...@pfankuch.me wrote: Our stuff is currently through Verisign because of the reliability of the name and the nature of the industry. verisign sold this business (like 2+ years ago?), maybe it's time to find someone else with a reliable name?

Re: SSL Certificates and ... Providers

2012-12-27 Thread Grant Ridder
Yes the Verisign auth stuff is done by Symantic as of 2010. -Grant On Thursday, December 27, 2012, Christopher Morrow wrote: On Thu, Dec 27, 2012 at 3:37 PM, Blake Pfankuch bl...@pfankuch.mejavascript:; wrote: Our stuff is currently through Verisign because of the reliability of the name