Re: validating reachability via an ISP

2018-04-05 Thread Andy Litzinger
in the case where I'm not peering with your route server but my ISP is. Do you query the IRR DB to recurse from the ISP AS to my AS and validate route objects there? thanks! -andy On Thu, Apr 5, 2018 at 12:49 AM, Andy Davidson <a...@nosignal.org> wrote: > > > > > > On

Re: validating reachability via an ISP

2018-04-04 Thread Andy Litzinger
wrote: > On Wed, Mar 28, 2018 at 7:22 PM, Andy Litzinger > <andy.litzinger.li...@gmail.com> wrote: > > Hi all, > > I have an enterprise network and do not provide transit. In one of our > > datacenters we have our own prefixes and rely on two ISPs as BGP > neigh

Re: validating reachability via an ISP

2018-04-04 Thread Andy Litzinger
get-all-paths method will return the set of active paths for selected >> prefix. >> >> >> 2018-03-29 2:22 GMT+03:00 Andy Litzinger <andy.litzinger.li...@gmail.com> >> : >> >>> Hi all, >>> I have an enterprise network and do not provid

validating reachability via an ISP

2018-03-28 Thread Andy Litzinger
Hi all, I have an enterprise network and do not provide transit. In one of our datacenters we have our own prefixes and rely on two ISPs as BGP neighbors to provide global reachability for our prefixes. One is a large regional provider and the other is a large global provider. Recently we took

Re: Validating possible BGP MITM attack

2017-08-31 Thread Andy Litzinger
31477 making up the paths. And not seen wider on the Internet. We'll work on making sure that cases like this will not cause bgpmon alerts going forward, by detecting these false alerts better." -andy On Thu, Aug 31, 2017 at 7:01 AM, Andy Litzinger < andy.litzinger.li...@gmail.com> wrote:

Re: Validating possible BGP MITM attack

2017-08-31 Thread Andy Litzinger
ituut.net> wrote: > > Hi Andy, > > It smells like someone in 38478 or 131477 is using Noction or some other > BGP "optimizer" that injects hijacks for the purpose of traffic > engineering. :-( > > Kind regards, > > Job > > On Thu, 31 Aug 2017 at 19:38, And

Validating possible BGP MITM attack

2017-08-31 Thread Andy Litzinger
Hello, we use BGPMon.net to monitor our BGP announcements. This morning we received two possible BGP MITM alerts for two of our prefixes detected by a single BGPMon probe located in China. I've reached out to BGPMon to see how much credence I should give to an alert from a single probe

BGP per-flow load balancing between eBGP and iBGP learned prefix

2014-09-18 Thread Andy Litzinger
Hello, I have a Load Balancer that uses a default route to a VRRP IP hosted between two Juniper MX80 routers. Each MX router has a single BGP feed from the same provider and each session is currently receiving only a default route. I'd like to load balance my outbound traffic across the two

Advice on v4 NAT for farm of file transfer clients

2013-12-03 Thread Andy Litzinger
Hi all, We have a pool of around 100 file transfer clients. They reach out to publicly addressed servers on the net to get and put files. Rather than burn 100 public v4 addresses for the clients, we've traditionally had these guys behind a firewall performing source NAT/PAT overloading

RE: tools and techniques to pinpoint and respond to loss on a path

2013-07-16 Thread Andy Litzinger
a thousand messages and they open a ticket with us. I'd like to be able to show them some good data on the path during the blip so we back a discussion along the lines of live with it, or pay to privately connect to us. -andy -Blake On Mon, Jul 15, 2013 at 4:18 PM, Andy Litzinger andy.litzin

tools and techniques to pinpoint and respond to loss on a path

2013-07-15 Thread Andy Litzinger
Hi, Does anyone have any recommendations on how to pinpoint and react to packet loss across the internet? preferably in an automated fashion. For detection I'm currently looking at trying smoketrace to run from inside my network, but I'd love to be able to run traceroutes from my edge

RE: AS numbers and multiple site best practices

2011-02-02 Thread Andy Litzinger
I've had trouble finding any technical reason not to use it. What is important to you about having QA and Corporate use separate AS numbers? Does using the same AS number result in a reduction of separation? For my part it's mostly a desire to make sure that changes to QA or Corp BGP

AS numbers and multiple site best practices

2011-02-01 Thread Andy Litzinger
Are there any best practices or guidelines surrounding whether or not one should use the same or unique AS numbers when advertising via BGP from 2 or more physically separate locations? Each location would be advertising at least their own unique /24. My specific scenario is that we are

RE: How not to make an error page (was: OT: www.Amazon.com down?)

2008-06-06 Thread Andy Litzinger
I've no idea what Amazon uses for Load Balancers, but I'm pretty sure that error message is the default error message served up by a Netscaler LB if no web services are available in the pool... -andy -Original Message- From: Kevin Day [mailto:[EMAIL PROTECTED] Sent: Friday, June 06,