Re: Heads-Up: GoDaddy Broke the Interwebs...

2012-09-11 Thread Naveen Nathan
> we do not know what happened. we have an apology, not an explanation or > reasonable post mortem. all else is conjecturbation. Agreed. And as Chris and Kyle pointed out, there is no indication that the problems were present in the BGP DFT, and the issues could've occured over iBGP. I completel

Re: Heads-Up: GoDaddy Broke the Interwebs...

2012-09-11 Thread Naveen Nathan
> Well, mostly I'm taking GoDaddy at their word that this was not a DoS attack. > > I also believe it was related to BGP, and am happy to get more info. But we > are discussing Anonymous vs. Self-inflicted wound here. I'm skeptical, BGPlay (http://bgplay.routeviews.org/) doesn't show any withd

Re: Books for the NOC guys...

2010-05-09 Thread Naveen Nathan
Secretary - ISOC-NY - http://isoc-ny.org > > --- > > -- > - Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid Support > - > - $24/pm+GST entry-level VPSes w/ capped bandwidth charges available in WA - > > -- Naveen Nathan To understand the human mind, understand self-deception. - Anon

Re: dnscurve and DNS hardening, was Re: Dan Kaminsky

2009-08-05 Thread Naveen Nathan
Ben, Thanks for the cogent comparison between the two security systems for DNS. > DNSCurve requires more CPU power on nameservers (for the more > extensive crypto); DNSSEC requires more memory (for the additional > DNSSEC payload). This is only true for the initial (Elliptic Curve) Diffie-Hell

Re: dnscurve and DNS hardening, was Re: Dan Kaminsky

2009-08-05 Thread Naveen Nathan
On Wed, Aug 05, 2009 at 09:17:01PM -0400, John R. Levine wrote: > ... > > It seems to me that the situation is no worse than DNSSEC, since in both > cases the software at each hop needs to be aware of the security stuff, or > you fall back to plain unsigned DNS. I might misunderstand how dnscurv

BGPSEC & soBGP

2009-01-16 Thread Naveen Nathan
e is a new initiative for another technology to secure BGP. -- Naveen Nathan

Re: Failover solution using BGP

2008-12-30 Thread Naveen Nathan
Thank to everyone that took the time to respond with their ideas. To those who asked, the client didn't provide details on the application. However they were insistent that it wasn't possible to have it run in an active/active configuration, so load balancing at either the application or BGP level

Failover solution using BGP

2008-12-30 Thread Naveen Nathan
l process. -- Naveen Nathan To understand the human mind, understand self-deception. - Anon

Re: Advice requested for OpenBSD vs. Linux/OpenBGP vs. Quagga router deployment.

2008-12-20 Thread Naveen Nathan
Hi Marc, > We are a software development firm that currently delivers our install ISOs > via Sourceforge. We need to start serving them ourselves for marketing > reasons and are therefore increasing our bandwidth and getting a 2nd ISP in > our datacenter. Both ISPs will be delivering 100mbit/

Re: Software router state of the art

2008-07-23 Thread Naveen Nathan
> The Endace DAG cards claim they can move 7 gbps over a PCI-X bus from > the NIC to main DRAM. They claim a full 10gbps on a PCIE bus. I wonder, has anyone heard of this used for IDS? I've been looking at building a commodity SNORT solution, and wondering if a powerful network card will help, or