Re: nexus N3K-C3064PQ vs juniper ex4500 in order to protect against ddos

2016-10-02 Thread joel jaeggli
On 9/30/16 12:42 PM, Pedro wrote: > > Hello, > > I have some idea to put switch before bgp router in order to terminate > isp 10G uplinks on switch, not router. Main reason is that could be some > kind of 1st level of defence against ddos, second reason, less > important, save cost of router

Re: ARIN legacy block transfer process

2016-10-02 Thread John Curran
On 30 Sep 2016, at 1:34 PM, Bryan Fields wrote: > > On 9/30/16 1:22 PM, William Herrin wrote: >> Note that you can't sell the block as an "owned asset" and have ARIN >> recognize the change. ARIN does not recognize ownership of IP address >> blocks, they only recognize

Re: ARIN legacy block transfer process

2016-10-02 Thread John Curran
On 30 Sep 2016, at 1:42 PM, Jim Mercer wrote: > > On Fri, Sep 30, 2016 at 01:22:19PM -0400, William Herrin wrote: >> 1. Buyer gets approved by ARIN for a specified transfer in the amount >> to be purchased. Signs RSA. >> 2. Legacy registrant (seller) signs the LRSA, proves

Re: ARIN legacy block transfer process

2016-10-02 Thread John Curran
On 30 Sep 2016, at 1:47 PM, Enno Rey wrote: > ... > Note also there's voices recommending not to sign an RSA for legacy space (in > certain situations, at least), see > http://ipv4marketgroup.com/dont-sign-an-rsa-during-your-82-ipv4-transfer/. Probably best to talk to a variety

Re: ARIN legacy block transfer process

2016-10-02 Thread John Curran
On 30 Sep 2016, at 12:49 PM, Bryan Fields wrote: > > I'm trying to find a place on ARIN's website where this is addressed, but > coming up short. I'm not the seller or buyer in this, but basically someone > has a legacy block allocated by Postel and wants to sell the

Re: Request for comment -- BCP38

2016-10-02 Thread Jay Hennigan
On 9/26/16 9:37 AM, Hugo Slabbert wrote: On Mon 2016-Sep-26 12:25:58 -0400, John R. Levine wrote: I gather the usual customer response to this is "if you don't want our $50K/mo, I'm sure we can find another ISP who does." I myself am talking about the latter and included

Re: Request for comment -- BCP38

2016-10-02 Thread Stephen Satchell
On 10/01/2016 06:39 PM, Jay R. Ashworth wrote: You *can* do BCP38 egress filtering on your network, but that filter would *be in control of the Bad Guys* whom we're trying to kill off. I don't see how you arrive at this conclusion. For an aggregating router, the Bad Guys(tm) don't get

Re: Request for comment -- BCP38

2016-10-02 Thread Florian Weimer
* Jay R. Ashworth: > - Original Message - >> From: "Florian Weimer" > >> * Jason Iannone: > >>> Are urpf and bcp38 interchangeable terms in this discussion? It seems >>> impractical and operationally risky to implement two unique ways to dos >>> customers. What are

Re: Request for comment -- BCP38

2016-10-02 Thread Octavio Alvarez
On 09/26/2016 08:47 AM, Laszlo Hanyecz wrote: >> If you have links from both ISP A and ISP B and decide to send traffic >> out ISP A's link sourced from addresses ISP B allocated to you, ISP A >> *should* drop that traffic on the floor. There is no automated or >> scalable way for ISP A to

Re: Kudos to Rogers Wireless on IPv6 deployment

2016-10-02 Thread Theodore Baschak
I'm also seeing IPv6 on Rogers 4g/LTE on an Android in Winnipeg! Looks like I'm part of 2605:8d80:400::/38 Theodore Baschak - AS395089 - Hextet Systems https://ciscodude.net/ - https://hextet.systems/ http://mbix.ca/ > On Oct 1, 2016, at 10:37 PM, Hugo Slabbert wrote: > > So