RE: Residential CPE suggestions

2014-05-13 Thread Deepak Jain
Thanks to everyone who responded. The picture/spec on this page shows a single SFP, not dual. Hopefully they will come out with something that supports dual SFP. I am looking for something suitable for an active Ethernet fiber-to-X deployment. The Ubiquiti routers don't support dual SFP

Re: level3 dia egress filtering?

2014-05-13 Thread Mark Tinka
On Monday, May 12, 2014 11:58:20 PM Petter Bruland wrote: We contacted Level3 a few weeks back, and were told that they do not provide any filtering service. I've not been able to confirm this from anyone else, besides the Level3 customer service rep we spoke with. We've received such

Re: Observations of an Internet Middleman (Level3) (was: RIP Network Neutrality)

2014-05-13 Thread Joel M Snyder
Shouldn't there be a rule against using RIP in the subject line of a NANOG post? Every time I see that, a shudder goes down *my* spine. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 j...@opus1.com

New Zealand Spy Agency To Vet Network Builds, Provider Staff

2014-05-13 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I realize that New Zealand is *not* in North America (hence NANOG), but I figure that some global providers might be interested here. This sounds rather... dire (probably not the right word). The new Telecommunications (Interception Capability and

Re: New Zealand Spy Agency To Vet Network Builds, Provider Staff

2014-05-13 Thread George Michaelson
It got a pretty firefight discussion at the NZNOG. None of the ISPs feel comfortable with it, but in avoiding a shoot-the-messenger syndrome they tried to give good feedback to the reps from GCSB who came to talk. Basically, a lot of post-act variations are expected to clarify what changes do and

Re: New Zealand Spy Agency To Vet Network Builds, Provider Staff

2014-05-13 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 So is there just reluctant acceptance of this law, or is there push-back and plans to repeal, or...? I guess my question is something along the lines of Are people just reluctantly accepting that government surveillance micromanagement of private

Re: level3 dia egress filtering?

2014-05-13 Thread Blake Dunlap
I would personally look at leaving Level 3 over that kind of response. I consider it basic service to throw a 1 line acl on an interface temporarily in exceptional circumstances. Transit guys can argue if they wish, but it won't change my expectations as a customer. Eventually I'll find a carrier

Re: level3 dia egress filtering?

2014-05-13 Thread Paul S.
You can't really have your cake, and eat it too. If this is a deal breaker for anyone, getting it in writing within the contract should be the most basic of steps to undertake. Asking beforehand will also actually let you know who will and won't do this, thus avoid surprises like these

Re: New Zealand Spy Agency To Vet Network Builds, Provider Staff

2014-05-13 Thread George Michaelson
I can't speak to that Paul. I attended NZNOG as a guest, I'm from Australia. Others will have to say how the NZ industry is approaching this, I'd get it wrong if I tried! -G On Tue, May 13, 2014 at 3:49 PM, Paul Ferguson fergdawgs...@mykolab.comwrote: -BEGIN PGP SIGNED MESSAGE- Hash:

Re: New Zealand Spy Agency To Vet Network Builds, Provider Staff

2014-05-13 Thread Mark Tinka
On Tuesday, May 13, 2014 03:49:09 PM Paul Ferguson wrote: I am purposefully making a distinction here between the U.S. CALEA [1] and NSLs [2] and a NZ spy agency getting ...to decide on network equipment procurement and design decisions. The latter seems like a bit of an overreach? I have

Re: level3 dia egress filtering?

2014-05-13 Thread Mark Tinka
On Tuesday, May 13, 2014 03:51:56 PM Blake Dunlap wrote: I would personally look at leaving Level 3 over that kind of response. I consider it basic service to throw a 1 line acl on an interface temporarily in exceptional circumstances. Transit guys can argue if they wish, but it won't change

NANOG 61 hotel

2014-05-13 Thread Jon Lewis
The Hyatt appears to have filled up. :( Anyone have alternate hotel recommendations? -- Jon Lewis, MCP :) | I route | therefore you are _ http://www.lewis.org/~jlewis/pgp for

Re: NANOG 61 hotel

2014-05-13 Thread Hugo Slabbert
On Tue 2014-May-13 10:32:48 -0400, Jon Lewis jle...@lewis.org wrote: The Hyatt appears to have filled up. :( Anyone have alternate hotel recommendations? I put together a list when I was making my pitch to go down: ! --- ! Westin Bellevue

Re: New Zealand Spy Agency To Vet Network Builds, Provider Staff

2014-05-13 Thread Owen DeLong
Yep… If I had infrastructure in NZ, that would be enough to cause me to remove it. Owen On May 13, 2014, at 6:33 AM, Paul Ferguson fergdawgs...@mykolab.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I realize that New Zealand is *not* in North America (hence NANOG), but I

Re: New Zealand Spy Agency To Vet Network Builds, Provider Staff

2014-05-13 Thread Patrick W. Gilmore
Don't get me wrong, I'm not a fan of this. But at least they did it in the open, unlike the NSA (where you live). -- TTFN, patrick On May 13, 2014, at 12:12 , Owen DeLong o...@delong.com wrote: Yep… If I had infrastructure in NZ, that would be enough to cause me to remove it. Owen On

Re: New Zealand Spy Agency To Vet Network Builds, Provider Staff

2014-05-13 Thread Aaron
I live in the USA and have not been forced to register with the government as a network operator or have them vet my staff. On 5/13/2014 11:34 AM, Patrick W. Gilmore wrote: Don't get me wrong, I'm not a fan of this. But at least they did it in the open, unlike the NSA (where you live). --

This is me venting.... OVH/lvl3

2014-05-13 Thread Mr. Queue
Almost a week of this now.. OVH/lvl3 at dal-1-6k. Thank you sir may I have another.. http://weathermap.ovh.net/usa

FYI: Unbreakable VPN using Vyatta/VyOS -HOW TO-

2014-05-13 Thread Naoto MATSUMOTO
Hi all! We wrote TIPS memo about the Basic Idea for inter-cloud networking using Virtual Router (a.k.a Brocade Vyatta vRotuer and VyOS) with High Availability Concept. Please enjoy it if you interest in ;-) Unbreakable VPN using Vyatta/VyOS -HOW TO- http://slidesha.re/1lryGVU Best

CERT and ISO 27001

2014-05-13 Thread DjinnS C.
Hi, I'm searching a service/company doing continuos review of security alerts for various tools, software and hardware (Apache, PHP, Cisco IOS, Juniper JunOS, Netapp Ontap, etc ...). I think the right way is to use a CERT offering commercial services with daily notifications about a list of

Re: Observations of an Internet Middleman (Level3) (was: RIP Network Neutrality)

2014-05-13 Thread coy . hile
It could be worse! Somebody might have thrown a 'v1' in there, too, Joel! Sent from my iPhone On May 13, 2014, at 8:08, Joel M Snyder joel.sny...@opus1.com wrote: Shouldn't there be a rule against using RIP in the subject line of a NANOG post? Every time I see that, a shudder goes down

Re: This is me venting.... OVH/lvl3

2014-05-13 Thread staticsafe
On 5/12/2014 20:25, Mr. Queue wrote: Almost a week of this now.. OVH/lvl3 at dal-1-6k. Thank you sir may I have another.. http://weathermap.ovh.net/usa Looks fine. -- staticsafe https://asininetech.com

Re: New Zealand Spy Agency To Vet Network Builds, Provider Staff

2014-05-13 Thread Owen DeLong
I didn’t see the NSA telling us what we had to buy are demanding advance approval rights on our maintenance procedures. Owen On May 13, 2014, at 9:34 AM, Patrick W. Gilmore patr...@ianai.net wrote: Don't get me wrong, I'm not a fan of this. But at least they did it in the open, unlike the

Re: Observations of an Internet Middleman (Level3) (was: RIP Network Neutrality)

2014-05-13 Thread Łukasz Bromirski
On 13 May 2014, at 14:17, coy.h...@coyhile.com wrote: It could be worse! Somebody might have thrown a 'v1' in there, too, Joel! Well - just imagine that network without mask. On public list. Horrible. Thankfully, we have civilization stuff, so nothing like that couldn’t have had happened.

Re: New Zealand Spy Agency To Vet Network Builds, Provider Staff

2014-05-13 Thread Tom Hill
On 13/05/14 19:01, Owen DeLong wrote: I didn’t see the NSA telling us what we had to buy are demanding advance approval rights on our maintenance procedures. Because they didn't (don't) need to...? Tom

Re: New Zealand Spy Agency To Vet Network Builds, Provider Staff

2014-05-13 Thread Patrick W. Gilmore
Exactly. They just broke in and left a trail of open doors behind. Again, not saying either is good, just saying at least NZ is being above board. -- TTFN, patrick On May 13, 2014, at 14:01 , Owen DeLong o...@delong.com wrote: I didn’t see the NSA telling us what we had to buy are demanding

RE: New Zealand Spy Agency To Vet Network Builds, Provider Staff

2014-05-13 Thread Tony Wicks
To: Paul Ferguson Cc: NANOG Subject: Re: New Zealand Spy Agency To Vet Network Builds, Provider Staff I can't speak to that Paul. I attended NZNOG as a guest, I'm from Australia. Others will have to say how the NZ industry is approaching this, I'd get it wrong if I tried! The industry in New

RE: New Zealand Spy Agency To Vet Network Builds, Provider Staff

2014-05-13 Thread Tony Wicks
Cc: NANOG list Subject: Re: New Zealand Spy Agency To Vet Network Builds, Provider Staff I didn't see the NSA telling us what we had to buy are demanding advance approval rights on our maintenance procedures. Owen Try to get approval to land a submarine cable onto US soil using Huawei DWDM kit

Re: New Zealand Spy Agency To Vet Network Builds, Provider Staff

2014-05-13 Thread Patrick W. Gilmore
On May 13, 2014, at 17:47 , Tony Wicks t...@wicks.co.nz wrote: Cc: NANOG list Subject: Re: New Zealand Spy Agency To Vet Network Builds, Provider Staff I didn't see the NSA telling us what we had to buy are demanding advance approval rights on our maintenance procedures. Owen Try to

Re: New Zealand Spy Agency To Vet Network Builds, Provider Staff

2014-05-13 Thread Zaid Ali Kahn
On May 13, 2014, at 4:52 PM, Patrick W. Gilmore patr...@ianai.net wrote: - Warning the world about Chinese surveillance could have been one of the motives behind the US government's claims that Chinese devices cannot be trusted. But an equally important motive seems to have been

Re: New Zealand Spy Agency To Vet Network Builds, Provider Staff

2014-05-13 Thread Jared Mauch
On May 13, 2014, at 6:24 PM, Zaid Ali Kahn z...@zaidali.com wrote: Case in point on Sprint/Softbank merger http://www.theverge.com/2013/3/28/4155714/us-wants-sprint-softbank-deal-to-avoid-chinese-network-equipment/in/3252625 Any such deal would also be subject to CFIUS and mandatory 5-year

IPAM DDI Software, Subscriber Management, CMDB and Per Customer VLANs

2014-05-13 Thread Kyle Leissner
I would like recommendations on the following software/hardware elements required to run an access network. Assume you are building a greenfield network using a combination of access technologies such as DSL, GPON, AE, and WiFi. IPAM / DDI Solution: Needs full support for IPv6, Customer VLANs,

Re: Observations of an Internet Middleman (Level3) (was: RIP Network Neutrality

2014-05-13 Thread Daniel Staal
--As of May 12, 2014 3:02:28 PM +0200, Nick Hilliard is alleged to have said: On 10/05/2014 22:34, Randy Bush wrote: imiho think vi hart has it down simply and understandable by a lay person. http://vihart.com/net-neutrality-in-the-us-now-what/. my friends in last mile providers disagree.