Re: Chinese root CA issues rogue/fake certificates

2016-09-07 Thread George William Herbert
> On Sep 1, 2016, at 3:10 AM, Matt Palmer wrote: > > How the hell do you get from "the world does not work that way" to "please > pitch me your consulting services"? You appear ignorant of what real DR / resiliency can do, as do your local providers if they said that.

Re: Chinese root CA issues rogue/fake certificates

2016-09-07 Thread George William Herbert
> On Sep 1, 2016, at 3:19 AM, Stephane Bortzmeyer wrote: > > On Thu, Sep 01, 2016 at 11:36:57AM +1000, > Matt Palmer wrote > a message of 45 lines which said: > >> I'd be surprised if most business continuity people could even name >> their cert

Re: Optical transceiver question

2016-09-07 Thread Nicolas Cortes
The typical situation of the vendor is that the link-budget of the transceiver considers the worst scenario for TX and loss of dBs generated by time of operation of the laser, standard attenuation of the fiber, how it changes in how old it is,... in other ways, the calc ispessimistic. In my

Re: Optical transceiver question

2016-09-07 Thread Nick Hilliard
Frank Bulk wrote: > We recently purchased some generic optics from a reputable reseller that > were marketed to reach 60 km. transceivers don't work like that. They are sold with a specific optical budget, normally rated in dB at a specific wavelength. The km equivalent is usually based on

Re: Chinese root CA issues rogue/fake certificates

2016-09-07 Thread Eric Kuhnke
Further update on all known suspicious activity from Wosign: https://wiki.mozilla.org/CA:WoSign_Issues Seriously, what level of malice and/or incompetence does one have to rise to in order to be removed from the Mozilla (and hopefully Microsoft and Chrome) trusted root CA store? Is this not

RE: Optical transceiver question

2016-09-07 Thread Jameson, Daniel
There are a bunch of variables that impact actual power needed vs. road-miles, number of cross-connects, type of fiber, amount of slack, type of connectors, frequency, dispersion, etc. The km notation simplifies the naming convention. As a general rule 40Km budget 20db, 60km budget 24db,

Re: Optical transceiver question

2016-09-07 Thread Olivier Benghozi
It's a bit like car fuel efficiency values, even with reputable brands :) In this industry, the number of kms for such optics is a best case approximation of the combination of (most notably) those elements: worst case power budget, capability to deal with chromatic scattering on this length

RE: Optical transceiver question

2016-09-07 Thread Robert Jacobs
Not buying fresh veggies here... All optics have about a 5 db range that the vendor will say it is good. The better venders stamp the output power on the optics but not all do this... What he said is to achieve the 60 Km selling point you would have to have all the optic be on the high side of

Re: Optical transceiver question

2016-09-07 Thread Jared Mauch
We have seen cases where the patches introduce enough loss to cause a lot of loss. Have you done an OTDR on each link? Jared Mauch > On Sep 7, 2016, at 4:23 PM, Frank Bulk wrote: > > We recently purchased some generic optics from a reputable reseller that > were marketed to

Re: Optical transceiver question

2016-09-07 Thread Eric Kuhnke
What you're saying is if you purchase ten identical optics with the same SKU, and put them on a few hundred meters of coiled SC/UPC to SC/UPC simplex fiber and an optical power meter on the other end, they're showing varying real world Tx powers from between +0 to +5dBm? That's not right at all,

Optical transceiver question

2016-09-07 Thread Frank Bulk
We recently purchased some generic optics from a reputable reseller that were marketed to reach 60 km. But what we found, based on the spec sheets, is that it could only reach that distance if the optics were transmitting on the high side of the transmit power range. For example, if the TX

Security Track @ NANOG 68 Call for Participation

2016-09-07 Thread John Kristoff
[ Apologies if you saw this elsewhere already - jtk ] Friends, colleagues, fellow operators, The network security track, formerly known as the ISP security BoF, may be on the agenda at NANOG 68 in Dallas October 17-19 and if we can put together a reasonable agenda I may be your track

Re: Outdoor ADSL2+/VDSL/G.Fast NIU

2016-09-07 Thread Carlos Alcantar
The calix 844g is not an outdoor rated unit just a heads up. Typically now xdsl modems have integrated router and wireless which brings them into indoor rated type of equipment. I'm sure outdoor is out there but probably not something that's off the shelf and highly deployed. ​ Carlos