Newbie Concern: (BGP) AS-Path Oscillation

2022-11-27 Thread Pirawat WATANAPONGSE via NANOG
Dear Guru(s), My apologies upfront if this question has already been asked. If that’s the case, please kindly point me to the solution|thread so that the mailing list bandwidth is not wasted. Situation: On one of our prefixes, we are detecting continuous “BGP AS-Path Changes” in the order of

RE: Newbies Question: Do I really need to sacrifice Prefix-aggregation to do BGP Load-sharing?

2022-10-20 Thread Pirawat WATANAPONGSE via NANOG
Dear all, Before all else: thank you all for the lightning-fast responses (even taking the time zone advantage into account). I really, really, really appreciate all your recommendations. Virtually all of you recommend prepending as the first choice. I also get the feeling that you guys

Newbies Question: Do I really need to sacrifice Prefix-aggregation to do BGP Load-sharing? (the case of Multi-homed + Multi-routers + Multi-upstreams)

2022-10-19 Thread Pirawat WATANAPONGSE via NANOG
Dear Guru(s), My apologies if these questions have already been asked; in that case, please kindly point me to the answer(s). I hope the following information sufficiently describes my current "context": - Single customer: ourselves - One big IPv4 block + one big IPv6 block - Native Dual-Stack,

Newbie x Cisco IOS-XR x ROV: BCP to not harassing peer(s) and upstream(s)

2022-05-11 Thread Pirawat WATANAPONGSE via NANOG
Dear Guru(s), We used to run our ‘Gateway Router’ with ROV turned on. Then, we “upgraded” it to a Cisco NCS-55A1 (5500 Series) running IOS-XR just a few weeks ago. Consequently, during my rummage through Google for a (the?) best (ROV) configuration template for the new router, I found a

Re: Newbie Questions: How-to monitor/control unauthorized uses of our IPs and DNS zones?

2021-08-19 Thread Pirawat WATANAPONGSE via NANOG
it? -- Pirawat. On Thu, Aug 19, 2021 at 9:45 PM Bill Woodcock wrote: > > > > On Aug 19, 2021, at 4:05 PM, Pirawat WATANAPONGSE via NANOG < > nanog@nanog.org> wrote: > > Background Information Part: > > We rent an IP Address Block and a DNS zone. > &

Newbie Questions: How-to monitor/control unauthorized uses of our IPs and DNS zones?

2021-08-19 Thread Pirawat WATANAPONGSE via NANOG
Dear Gurus, Background Information Part: We rent an IP Address Block and a DNS zone. [We have to pay the annual fees, so they are renting, yes? :-) ] We run our own DNS authoritative server, with DNSsec on. We register our IP block on both IRR and ROA, and monitor them both for ‘poisoning

Anyone from REACH IRR on this list?

2021-05-15 Thread Pirawat WATANAPONGSE via NANOG
Dear REACH admins, >From the email address in Merit’s IRR Directory [Reference: http://www.irr.net/docs/list.html#REACH ], I contacted you at dbad...@telstraglobal.net regarding taking-down a fake IRR entry of my prefix [original email attached below], but got the response from Gmail saying that

ROVv6 does not behave the same way as ROVv4: What rookie mistake(s) did I make?

2021-03-02 Thread Pirawat WATANAPONGSE via NANOG
Dear all, We just turned on our RPKI Route Origin Validation yesterday, then something weird happened: [Reference: We are running NLnet Labs’ Routinator 3000, feeding a Cisco ASR 1000 Series router. I know, I know, we haven’t started a second validator yet.] When we tested against the two

Newbie Question: Is anyone actually using the Null MX (RFC 7505)?

2021-02-26 Thread Pirawat WATANAPONGSE via NANOG
Dear all, I put the “Null MX” Record (RFC 7505) into one of my domains yesterday, then those online mail diagnostic tools out there start getting me worried: It looks like most of those tools do not recognize the Null MX as a special case; they just complain that they cannot find the mail