Re: south bay ops channel

2019-11-18 Thread Randy Bush
> dear lazynet. is there a list, irc, slack, ... for ops in the > southern bay area? need to find/discuss colo, hands, brains, ... fwiw, in seattle, the SIX chatter list would be a good example. randy

south bay ops channel

2019-11-18 Thread Randy Bush
dear lazynet. is there a list, irc, slack, ... for ops in the southern bay area? need to find/discuss colo, hands, brains, ... thanks. randy

Re: Iran cuts 95% of Internet traffic

2019-11-18 Thread Sean Donelan
Digging a little deeper, it looks like Iran's blocking is more complex than I've seen before. Consumer/mobile networks appear nearly completely blocked. However, many important business/financial networks and B2B traffic appear operating normally. I don't yet have good data about of the

Re: Recommended DDoS mitigation appliance?

2019-11-18 Thread Rabbi Rob Thomas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hello, NANOG! Thank you to all who have generously given your time to respond publicly and privately. I have a long list of things to research while configuring our shiny new Juniper routers. :) I'll summarize to the list shortly. Be well! Rob,

Re: AT released DANOS code to Linux Foundation

2019-11-18 Thread Jared Geiger
DANOS is using FRR in the opensource version at least. On Mon, Nov 18, 2019 at 1:15 PM Mike Hammett wrote: > Chances are, if there was a decision to be made, UBNT made the wrong > choice. > > That said, I've heard a lot of good about ZebOS. *shrugs* > > > > - > Mike Hammett > Intelligent

Re: AT released DANOS code to Linux Foundation

2019-11-18 Thread Ross Tajvar
For an additional point of reference - I run two Edgerouter Pros with multiple full tables (v4 and v6). One of them is fine, but one of them crashes and reboots about once a week. I'm currently trying to replace them, possibly with DANOS now that it's out. On Mon, Nov 18, 2019 at 4:23 PM Brielle

Re: AT released DANOS code to Linux Foundation

2019-11-18 Thread Brielle
On 11/18/2019 2:12 PM, Mike Hammett wrote: Chances are, if there was a decision to be made, UBNT made the wrong choice. That said, I've heard a lot of good about ZebOS.  *shrugs* Well, early on during the switch there was a few issues with the change. For example, I had to fix the support

Re: Iran cuts 95% of Internet traffic

2019-11-18 Thread Ross Tajvar
Do we have any ideas which prefixes are still accessible? On Mon, Nov 18, 2019 at 3:01 PM Scott Fisher wrote: > One would hope so, but I am I sure they will just threaten their > population on using it. Tyrannical regimes know no bounds. > > Thanks, > Scott Fisher > Team Cymru > > On 11/18/19

Re: AT released DANOS code to Linux Foundation

2019-11-18 Thread Mike Hammett
Chances are, if there was a decision to be made, UBNT made the wrong choice. That said, I've heard a lot of good about ZebOS. *shrugs* - Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP - Original Message - From: "Rubens Kuhl"

Re: AT released DANOS code to Linux Foundation

2019-11-18 Thread Rubens Kuhl
On Mon, Nov 18, 2019 at 5:55 PM Brielle wrote: > On 11/18/2019 1:31 PM, Jared Geiger wrote: > > This past Friday, the code for DANOS was released as open source to the > > Linux Foundation and published at https://github.com/danos > > This is pretty awesome news. > > From what I'm reading, it

Re: AT released DANOS code to Linux Foundation

2019-11-18 Thread Brielle
On 11/18/2019 1:31 PM, Jared Geiger wrote: This past Friday, the code for DANOS was released as open source to the Linux Foundation and published at https://github.com/danos This is pretty awesome news. From what I'm reading, it looks like the commercial support options will be able to use

AT released DANOS code to Linux Foundation

2019-11-18 Thread Jared Geiger
This past Friday, the code for DANOS was released as open source to the Linux Foundation and published at https://github.com/danos AT bought the Vyatta product from Brocade and developed on the DPDK Brocade Vyatta 5600 version. The software was renamed DANOS. So if it performs like other DPDK

Re: Iran cuts 95% of Internet traffic

2019-11-18 Thread Scott Fisher
One would hope so, but I am I sure they will just threaten their population on using it. Tyrannical regimes know no bounds. Thanks, Scott Fisher Team Cymru On 11/18/19 2:26 PM, Tony Wicks wrote: >>Implementation specifics vary. Most rely on state control of consumer > ISPs and implement a

OT: RE: Iran cuts 95% of Internet traffic

2019-11-18 Thread Scott Weeks
--- t...@wicks.co.nz wrote: From: "Tony Wicks" I guess all these governments who like to control... The wierd thing to me is the one thing governments are afraid of is people talking to each other without restriction. Not this or that, rather just people

RE: Iran cuts 95% of Internet traffic

2019-11-18 Thread Tony Wicks
>Implementation specifics vary. Most rely on state control of consumer ISPs and >implement a variety of systems at that layer. Many also have chokepoints for >>international connectivity as well. I guess all these governments who like to control access so tightly are going to be in a total

Re: Iran cuts 95% of Internet traffic

2019-11-18 Thread Matt Harris
On Mon, Nov 18, 2019 at 11:29 AM Scott Weeks wrote: > > > --- s...@donelan.com wrote: > From: Sean Donelan > > Its very practical for a country to cut 95%+ of its Internet connectivity. > Its not a complete cut-off, there is some limited connectivity. But for > most ordinary individuals, their

Re: Iran cuts 95% of Internet traffic

2019-11-18 Thread Scott Weeks
--- s...@donelan.com wrote: From: Sean Donelan Its very practical for a country to cut 95%+ of its Internet connectivity. Its not a complete cut-off, there is some limited connectivity. But for most ordinary individuals, their communication channels are cut-off.

Re: Hulu thinks all my IP addresses are "business class", how to reach them?

2019-11-18 Thread Blake Hudson
Doug, out of curiosity, what does Hulu do once they have classified your IP ranges as "business class"? Charge customers a different rate? Offer different content? Refuse service? Doug McIntyre wrote on 11/18/2019 10:41 AM: I've been offering residential and business ISP services for a long

Re: Hulu thinks all my IP addresses are "business class", how to reach them?

2019-11-18 Thread Brian Ellwood
Have you tried reaching out to ipad...@hulu.com? — Brian Ellwood Senior Systems Engineer INOC Data Centers O: 518-689-4350 > On Nov 18, 2019, at 11:41, Doug McIntyre wrote: > > I've been offering residential and business ISP services for a long time. > > Hulu recently blocked my customers

Re: Recommended DDoS mitigation appliance?

2019-11-18 Thread Tom Beecher
It's a logical evolution as botnets became less of a tool for lulz and more of a economic asset to certain segments of the world. No sense launching an orbital strike where a garden hose will do the job just as well. On Mon, Nov 18, 2019 at 9:05 AM Tom Hill wrote: > On 18/11/2019 13:50, Mike

Hulu thinks all my IP addresses are "business class", how to reach them?

2019-11-18 Thread Doug McIntyre
I've been offering residential and business ISP services for a long time. Hulu recently blocked my customers from accessing their service, because my ARIN IP address blocks are "business class" instead of residential. I've tried to find a contact for them as I am not a customer, the

Re: Recommended DDoS mitigation appliance?

2019-11-18 Thread Jeff Meyers
Hi Rabbi, a PoC quite a while ago with RioRey worked quite satisfying but we are working with Arbor since a couple of years. It works okay and is insanely expensive. Mostly because of the price I wouldn't recommend it but I'm not sure if there is anything in the market technically on the same

Re: Recommended DDoS mitigation appliance?

2019-11-18 Thread Töma Gavrichenkov
Peace, On Mon, Nov 18, 2019, 4:51 PM Mike Hammett wrote: > I would like the list to know that not all targets attract such large > attacks. > It is not that easily predictable. E.g. in case of reflection DDoS sometimes even the attacker has no good idea of how much of traffic s/he is

Re: Iran cuts 95% of Internet traffic

2019-11-18 Thread Wayne Bouchard
Though Iran's situation is hardly a new advent, it reminds me that more and more countries seem to be going for the centralized filter/control/kill option and what a sad development that is. It sure seems like this is going to vastly change how inter-nation traffic (or at least inter-continental)

Iran cuts 95% of Internet traffic

2019-11-18 Thread Sean Donelan
Its very practical for a country to cut 95%+ of its Internet connectivity. Its not a complete cut-off, there is some limited connectivity. But for most ordinary individuals, their communication channels are cut-off. https://twitter.com/netblocks/status/1196366347938271232

Re: Recommended DDoS mitigation appliance?

2019-11-18 Thread Tom Hill
On 18/11/2019 13:50, Mike Hammett wrote: > I would like the list to know that not all targets attract such large > attacks. I know many eyeball ISPs that encounter less than 10 gig > attacks, which can be reasonably absorbed\mitigated. Online gamers > looking to boot someone else from the game

Re: Recommended DDoS mitigation appliance?

2019-11-18 Thread Mike Hammett
I would like the list to know that not all targets attract such large attacks. I know many eyeball ISPs that encounter less than 10 gig attacks, which can be reasonably absorbed\mitigated. Online gamers looking to boot someone else from the game aren't generally committing >100 gigs of

Re: Recommended DDoS mitigation appliance?

2019-11-18 Thread Alexander Lyamin
Correct statement. You forgot one zero. On Mon, Nov 18, 2019 at 10:48 AM Denys Fedoryshchenko < nuclear...@nuclearcat.com> wrote: > On 2019-11-18 04:23, Richard wrote: > > I would say you are making some assumptions that are not fact based. > > The OP is very knowledgeable and would not mince

Re: Recommended DDoS mitigation appliance?

2019-11-18 Thread Denys Fedoryshchenko
On 2019-11-18 04:23, Richard wrote: I would say you are making some assumptions that are not fact based. The OP is very knowledgeable and would not mince words or waste bandwidth. Let us see what he has to say in regards to your remarks. He will be able to make this more clear once he has read