Re: BFD for routes learned trough Route-servers in IXPs

2020-09-16 Thread Karsten Elfenbein
Am Mi., 16. Sept. 2020 um 02:57 Uhr schrieb Douglas Fischer : > > Time-to-time, in some IXP in the world some issue on the forwarding plane > occurs. > When it occurs, this topic comes back. > > The failures are not big enough to drop the BGP sessions between IXP > participants and route-servers.

Re: 4G / 5G backup

2020-07-12 Thread Karsten Elfenbein
Hi, you can take a look at Lancom CPE devices. They support BGP, have an internal mobile modem + external antenna connectors. I converted a few external sites to such a connectivity model already (IPv4). The FortiGate 30E-3G4G could also be worth looking into. Best regards, Karsten Am So., 12.

Re: rack rails

2020-03-30 Thread Karsten Elfenbein
Hi, something like https://www.opencompute.org/projects/rack-and-power comes into my mind for that. Mounting on 4 posts should be the default. It is insane what some vendors want to mount on 2 posts only. Regards, Karsten Am Mo., 30. März 2020 um 19:46 Uhr schrieb Baldur Norddahl : >> >> > > I h

Re: Time and Timing Servers

2019-07-11 Thread Karsten Elfenbein
I think you are referencing their chip scale atomic clocks. Which are very frequency stable. But still need phase alignment. (Mobile UPS anyone?) Maybe some peers can provide transparent or boundry clock support. Or someone close by in the DC can add an antenna splitter. Karsten Mike Hammett sc

Re: BGP prefix filter list

2019-05-17 Thread Karsten Elfenbein
Can you check the actual FIB usage? With 2m IPv4 divided into v4 and v6 * Fast ReRoute could hit the limit. Baldur Norddahl schrieb am Mi., 15. Mai 2019, 20:24: > Hello > > On Wed, May 15, 2019 at 3:56 PM Mike Hammett wrote: > >> What is the most common platform people are using with such limit

Re: BGP prefix filter list

2019-05-15 Thread Karsten Elfenbein
Hi, did you find https://labs.ripe.net/Members/emileaben/768k-day-will-it-happen-did-it-happen ? It has further links at the end as well. If you hit the 768k issue for IPv4 you might look at IPv6 as well as there might be a 64k limit on some tcam profiles. If there is no IPv6 in use (very sad fac

Re: Service Provider NetFlow Collectors

2018-12-31 Thread Karsten Elfenbein
An other tool worth looking into is Traffic Sentinel from inMon. Karsten Am Mo., 31. Dez. 2018 um 04:31 Uhr schrieb Erik Sundberg : > > Hi Nanog…. > > > > We are looking at replacing our Netflow collector. I am wonder what other > service providers are using to collect netflow data off their Cor

Re: How to choose a transit provider?

2018-12-14 Thread Karsten Elfenbein
Some points I have not seen so far are: - how do you connect? local cc in the dc or several other fiber runs to reach a different dc/city? (affects price, setup time, maintenance and debugging) - where is your traffic going to/from? how many intermediate ASs or long transfers are involved? - bgp co

Re: Monitoring service that has a human component?

2018-12-11 Thread Karsten Elfenbein
Hi, you could let them insert a custom string into the maintenance page. (I hope they are not writing it on demand) So the monitoring would be ok on status code 200-399 or custom string found. You could also use a different escalation chain when "maintenance" is found on an 503 error. Other than t

Re: USB Ethernet Adapters

2018-05-14 Thread Karsten Elfenbein
Hi, as you want to connect your laptop I would recommend something like a usb3 hub with ethernet. https://www.amazon.com/Anker-Aluminum-Portable-Gigabit-Ethernet/dp/B00PC07T02/ There are also displays with usb3 type-c connector that have an ethernet port. Karsten 2018-05-14 19:45 GMT+02:00 Col

Re: Bandwidth distribution per ip

2017-12-21 Thread Karsten Elfenbein
Hi, sounds like you are hosting the origin for the CDN which causes issues. Does the CDN care where it is pulling the data from? Could you place a cheaper origin somewhere else? Like AWS, Italy, Katar or Amsterdam? For 150k/month you can get a lot of bandwidth/storage/rack space somewhere else. An

Re: PCIe adapters supporting long distance 10GB fiber?

2017-06-20 Thread Karsten Elfenbein
Hi, most 10GE cards have either direct 10GBASE-T port(s)s or SFP+ slot(s). The SFP+ transceiver you plug in determines the range. (SMF/MMF, wavelength, link budget) Reading the optical parameters is a bit tricky on most NICs. Karsten 2017-06-15 11:10 GMT+02:00 chiel : > Hello, > > We are deploy

Re: UDP Amplification DDoS - Help!

2016-02-09 Thread Karsten Elfenbein
You could use multiple PAT addresses to find the source of information for the attacker and to reduce the impact by filtering/QOS. TCP connections PAT IP1 (block UDP before going to the 1G line) UDP connections PAT IP2 webservers connecting to api hosts - PAT IP3 webservers remaining connections

Re: strategies to mitigate DNS amplification attacks in ISP network

2015-12-02 Thread Karsten Elfenbein
Hi, depends on the type of ISP you are and the bandwidth used in the attack. If most attacks are targeted for www.example.com then you could design your net so that www.example.com is just a TCP service VIP that never needs any UDP. This would make it possible to place simple ACL on your edge to

Re: SFP Programmers

2015-03-22 Thread Karsten Elfenbein
Hi, we use stuff from https://www.flexoptix.net/en/ The programmer they/we use is the "flexbox". Karsten 2015-03-22 16:35 GMT+01:00 Mike Hammett : > Where are you guys picking up your SFP programmers? > > Also, is there a listing anywhere of the vendor codes needed? > > > > > - > Mike Hamme

Re: IPv6 allocation plan, security, and 6-to-4 conversion

2015-01-30 Thread Karsten Elfenbein
Hi, I would not recommend to run any nat over protocol versions for clients as you would need to break DNSsec. The clients creating connections should run dual-stack or dual-stack lite. The only useful thing for service providers would be to proxy/nat lets say an incoming IPv6 connection to still

Re: IPv6 allocation plan, security, and 6-to-4 conversion

2015-01-30 Thread Karsten Elfenbein
Hi, 2015-01-30 0:28 GMT+01:00 Eric Louie : > I'm putting together my first IPv6 allocation plan. The general layout: > /48 for customers universally and uniformly > /38 for larger regions on an even (/37) boundary > /39 for smaller regions on an even (/38) boundary > A few /48's for "internal use

Re: REMINDER: Leap Second

2015-01-25 Thread Karsten Elfenbein
Hi, Java had some issues with 100% CPU usage when NTP was running during the additional second in 2012. http://blog.wpkg.org/2012/07/01/java-leap-second-bug-30-june-1-july-2012-fix/ Google did something different to get the extra second in: http://googleblog.blogspot.de/2011/09/time-technology-an

Re: Brocade MLX Feedback

2015-01-14 Thread Karsten Elfenbein
Hi, the devices are good. Just read up about gen 1, gen1.1 and gen 2 modules in regard to backplane mode. Afaik Gen1 Modules are discontinued now so all modules should work in turbo mode. I don't know which cam profile is the current default so that needs repartitioning and default values adjusted

looking for an OTDR

2014-12-08 Thread Karsten Elfenbein
Hi, I'm looking for an OTDR. - single and multi mode fibers - good resolution as the the primary area of operation would be in the data center - a low learning curve and simple user interface What OTDRs / manufactures can you recommend? Thanks Karsten

Re: Seeking VPS providers for low volume network probe

2014-10-30 Thread Karsten Elfenbein
Hi, did you have a look at https://atlas.ripe.net/ ? They have two types of probes that are already in place. Best regards Karsten 2014-10-29 21:05 GMT+01:00 Eric Germann : > > > Greetings, > > I'm looking for recommendations on a reliable VPS Provider(s) who can > provide > > 1. Centos 6 > 2.

Re: IPv6 Default Allocation - What size allocation are you giving out

2014-10-09 Thread Karsten Elfenbein
2014-10-09 16:22 GMT+02:00 Daniel Corbe : > Has anyone successfully gotten a RIR to assign anything bigger than a > /32? I seem to recall in recent history someone tried to obtain a /31 > through ARIN and got smacked down. > > Even if you're assigning a /56 to every end user, that's still on the >

Re: 192.250.24.0/22 (as 23034) not reachable from Verizon, tinet, global crossing, XO

2014-09-18 Thread Karsten Elfenbein
am not sure why those 702 and 19294 old entries would still be > there. > > We have engaged 812 for help. > > Shall I assume cleaning up the old entries will solve the problems? > > > > -----Original Message- > From: Karsten Elfenbein [mailto:karsten.elfenb...@gmail

Re: 192.250.24.0/22 (as 23034) not reachable from Verizon, tinet, global crossing, XO

2014-09-18 Thread Karsten Elfenbein
the prefix should come up over the next day(s) Also get the more specific route objects removed which point to other AS. 192.250.24.0/23 AS702 192.250.24.0/24 AS19294 Karsten 2014-09-18 23:46 GMT+02:00 Karsten Elfenbein : > Hi, > > looks like you mainly use one transit provider (AS812)