Re: ISP best practices

2009-06-28 Thread Dennis Dayman
On May 21, 2009, at 3:38 PM, Philip Lavine wrote: To all, I am sure this has been asked 10 to the 1 millionth power times, however may be the rules have changed. I am looking to set up a really small ISP with a few /24's. I want to host DNS as well. Is there any whitepapers/howtos/best pra

Re: ISP best practices

2009-06-28 Thread Steve Bertrand
Barry Raveendran Greene wrote: > The best training available on the Net for a small ISP to learn from the > best is available . At www.nanog.org! > > All the NANOGs are on VOD. Just go to the presentation archive: > http://www.nanog.org/presentations/archive/. Put in a keyword to search (say >

Re: ISP best practices

2009-06-28 Thread randal k
I agree with this whole heartedly. Phil Smith's presentations and papers are fantastic. I'm certain that a sizable portion of the Internet operates because of the material that he has, and continues to, put together. Cheers, Randal On Sun, Jun 28, 2009 at 6:20 AM, Gregoire Villain wrote: >> O Hai

RE: ISP best practices

2009-06-28 Thread Barry Raveendran Greene
pcorn, and sit back and enjoy the session. > -Original Message- > From: Gregoire Villain [mailto:na...@greg.net] > Sent: Sunday, June 28, 2009 5:21 AM > To: nanog@nanog.org > Subject: Re: ISP best practices > > > On May 21, 2009, at 3:38 PM, Philip Lavine w

Re: ISP best practices

2009-06-28 Thread Suresh Ramasubramanian
On Sun, Jun 28, 2009 at 5:50 PM, Gregoire Villain wrote: > I would highly advise you have a read at any presentation by Phil Smith: > ftp://ftp-eng.cisco.com/pfs/seminars (anonymous login) > Read as much as you can from here 1st thing 1st - this is all solid ground > knowledge. And Philip / Barry'

Re: ISP best practices

2009-06-28 Thread Gregoire Villain
On May 21, 2009, at 3:38 PM, Philip Lavine wrote: To all, I am sure this has been asked 10 to the 1 millionth power times, however may be the rules have changed. I am looking to set up a really small ISP with a few /24's. I want to host DNS as well. Is there any whitepapers/howtos/best

Re: ISP best practices

2009-05-21 Thread Lamar Owen
On Thursday 21 May 2009 10:14:00 am Roland Dobbins wrote: > On May 21, 2009, at 8:45 PM, Steve Bertrand wrote: > > Securing IP Network Traffic Planes: > > - http://www.ciscopress.com/bookstore/product.asp?isbn=1587053365 > > I can't recommend this book enough - it's the current canonical > referenc

Re: ISP best practices

2009-05-21 Thread Seth Mattinen
Adam Kennedy wrote: > Bind is fully capable of IPv6. When combined with Webmin (www.webmin.com), > I'm not sure how much easier Bind can get. Webmin will also keep DNSSEC keys > up to date with changes, so long as you make those changes from within > Webmin. If you make changes in CLI, you can tell

Re: ISP best practices

2009-05-21 Thread Shane Ronan
p you learn. You can have webmin do it and then look at the config to learn. Justin From: Jason Bertoch Date: Thu, 21 May 2009 16:48:42 -0400 To: Subject: RE: ISP best practices -Original Message- From: Adam Kennedy [mailto:akenn...@cyberlinktech.com] Sent: Thursday, May 21, 2009 4:

Re: ISP best practices

2009-05-21 Thread Justin Wilson - MTIN
We have several clients using Webmin. If you donĀ¹t know command line Webmin is another tool to help you learn. You can have webmin do it and then look at the config to learn. Justin From: Jason Bertoch Date: Thu, 21 May 2009 16:48:42 -0400 To: Subject: RE: ISP best practices

RE: ISP best practices

2009-05-21 Thread Jason Bertoch
> -Original Message- > From: Adam Kennedy [mailto:akenn...@cyberlinktech.com] > Sent: Thursday, May 21, 2009 4:41 PM > To: NANOG > Subject: Re: ISP best practices > > ...When combined with Webmin (www.webmin.com), Jason A. Bertoch Network Administrator ja...@elec

Re: ISP best practices

2009-05-21 Thread Shane Ronan
Apologies, this should have said I learned BGP initially not DNS. Sorry!! On May 21, 2009, at 4:38 PM, Shane Ronan wrote: I learned DNS initially by reading some great documents by Avi Freedman, they are a little out dated, but still very relevant and posted on his website @ http://www.free

Re: ISP best practices

2009-05-21 Thread Adam Kennedy
Bind is fully capable of IPv6. When combined with Webmin (www.webmin.com), I'm not sure how much easier Bind can get. Webmin will also keep DNSSEC keys up to date with changes, so long as you make those changes from within Webmin. If you make changes in CLI, you can tell Webmin to rehash the keys m

Re: ISP best practices

2009-05-21 Thread Shane Ronan
I learned DNS initially by reading some great documents by Avi Freedman, they are a little out dated, but still very relevant and posted on his website @ http://www.freedman.net/ On May 21, 2009, at 9:38 AM, Philip Lavine wrote: To all, I am sure this has been asked 10 to the 1 millionth

Re: ISP best practices

2009-05-21 Thread Curtis Maurand
You're correct on the blanket statement. apologies. --C Joe Abley wrote: On 21-May-2009, at 11:06, Curtis Maurand wrote: Check out www.powerdns.com as an alternative to bind. Its faster, more secure, does IPV6 and easier to maintain. I have heard lots of good things about PowerDNS, and

Re: ISP best practices

2009-05-21 Thread Joe Abley
On 21-May-2009, at 12:14, bmann...@vacation.karoshi.com wrote: ...done IPv6 for the better part of a decade... well yeah, for some very loose definition of "doing IPv6" You no doubt have greater expectations than I in that regard :-) Joe

Re: ISP best practices

2009-05-21 Thread bmanning
On Thu, May 21, 2009 at 12:00:58PM -0400, Joe Abley wrote: > > However, you're not necessarily doing anybody any favours in making > statements like "faster", "more secure" and "does IPv6". DNS servers > are complicated beasts, and simplistic comparisons are not useful for > much (it'd be tr

Re: ISP best practices

2009-05-21 Thread Joe Abley
On 21-May-2009, at 11:06, Curtis Maurand wrote: Check out www.powerdns.com as an alternative to bind. Its faster, more secure, does IPV6 and easier to maintain. I have heard lots of good things about PowerDNS, and I'm quite prepared to believe that it's a natural choice for a DNS hosting

Re: ISP best practices

2009-05-21 Thread Ben Cooper
If you want to go down the BIND route, I'd recommend using xname as a frontend (http://source.xname.org/). Paul E wrote: > cmaurand> Check out www.powerdns.com as an alternative to bind. Its > cmaurand> faster, more secure, does IPV6 and easier to maintain. > > This is purely opinion. > > BIND

Re: ISP best practices

2009-05-21 Thread Ben Cooper
Yeah, it was a while back, but as far as I can remember it's fairly straight forward. I think I just replaced the icons and altered the CSS or PHP. Ben Brandon Galbraith wrote: > Ben, > > Is poweradmin easy to skin? Happy with the interface? We currently have > several hundred domains and tens o

Re: ISP best practices

2009-05-21 Thread Paul E
cmaurand> Check out www.powerdns.com as an alternative to bind. Its cmaurand> faster, more secure, does IPV6 and easier to maintain. This is purely opinion. BIND has warts, just as any large piece of code in wide spread use and with lots of features will have. However, that's also one of its ad

Re: ISP best practices

2009-05-21 Thread Cody Appleby
Have to agree on PowerDNS and PowerAdmin. Very easy to setup, Pretty secure out of the box and management is a breeze! ./cwa On Thu, 21 May 2009 16:29:57 +0100, Ben Cooper wrote: > I've deployed PowerDNS before, along with PowerAdmin > (https://www.poweradmin.org/trac/). Very easy to set up and

Re: ISP best practices

2009-05-21 Thread Ben Cooper
I've deployed PowerDNS before, along with PowerAdmin (https://www.poweradmin.org/trac/). Very easy to set up and manage. Ben For system or network support, please email supp...@hns.net Curtis Maurand wrote: > > Check out www.powerdns.com as an alternative to bind. Its faster, more > secure, do

Re: ISP best practices

2009-05-21 Thread Bret Clark
While BGP can become a rather complex protocol to implement as a network grows, basic BGP peering between two providers isn't really that complex...probably talking 10 config lines at most (excluding bogon/filtering). The first thing you want to make sure is that you're upstream providers are imple

Re: ISP best practices

2009-05-21 Thread Curtis Maurand
Check out www.powerdns.com as an alternative to bind. Its faster, more secure, does IPV6 and easier to maintain. Curtis Philip Lavine wrote: To all, I am sure this has been asked 10 to the 1 millionth power times, however may be the rules have changed. I am looking to set up a really smal

Re: ISP best practices

2009-05-21 Thread Steve Bertrand
Jon Lewis wrote: > Still, it's > better to get your config done right than rely on your providers to > ignore what you shouldn't be advertising. I have to agree completely with Jon here. As a small SP, it is prudent to do everything you can to be a good 'netizen. Apply your outbound prefix lis

Re: ISP best practices

2009-05-21 Thread Joel Jaeggli
The African Network Operators Group has quite a good set of workshop materials for both isp routing (including v6) and DNS (seperate workshops) weeklong course materials for the routing track are here: http://www.ws.afnog.org/afnog2009/sie/detail.html Bryan Campbell wrote: > This is the Nanog

Re: ISP best practices

2009-05-21 Thread Justin Wilson - MTIN
Date: Thu, 21 May 2009 09:45:13 -0400 To: Philip Lavine Cc: Subject: Re: ISP best practices Philip Lavine wrote: > To all, > > I am sure this has been asked 10 to the 1 millionth power times, however may be the rules have changed. I am looking to set up a really small ISP with a few

Re: ISP best practices

2009-05-21 Thread Roland Dobbins
On May 21, 2009, at 8:45 PM, Steve Bertrand wrote: Securing IP Network Traffic Planes: - http://www.ciscopress.com/bookstore/product.asp?isbn=1587053365 I can't recommend this book enough - it's the current canonical reference on opsec-related BCPs for network infrastructure, IMHO (full d

Re: ISP best practices

2009-05-21 Thread Bryan Campbell
This is the Nanog list . . . How about some Nanog resources . . . http://www.nanog.org/resources/tutorials/ And, yes, hiring a consultant is a good idea. But, being an informed consumer is also a good idea. Read lots! Ask lots of questions! Cheers! bbc On Thu, 2009-05-21 at 06:38 -0700,

RE: ISP best practices

2009-05-21 Thread Bradley Freeman
. Bradley -Original Message- From: Philip Lavine [mailto:source_ro...@yahoo.com] Sent: 21 May 2009 14:39 To: nanog@nanog.org Subject: ISP best practices To all, I am sure this has been asked 10 to the 1 millionth power times, however may be the rules have changed. I am looking to set up a

Re: ISP best practices

2009-05-21 Thread Jon Lewis
On Thu, 21 May 2009, Philip Lavine wrote: I am sure this has been asked 10 to the 1 millionth power times, however may be the rules have changed. I am looking to set up a really small ISP with a few /24's. I want to host DNS as well. Is there any whitepapers/howtos/best practices on setting up

Re: ISP best practices

2009-05-21 Thread Steve Bertrand
Philip Lavine wrote: > To all, > > I am sure this has been asked 10 to the 1 millionth power times, however may > be the rules have changed. I am looking to set up a really small ISP with a > few /24's. I want to host DNS as well. Is there any whitepapers/howtos/best > practices on setting up m

Re: ISP best practices

2009-05-21 Thread Dan White
Philip Lavine wrote: To all, I am sure this has been asked 10 to the 1 millionth power times, however may be the rules have changed. I am looking to set up a really small ISP with a few /24's. I want to host DNS as well. Is there any whitepapers/howtos/best practices on setting up multihomed

ISP best practices

2009-05-21 Thread Philip Lavine
To all, I am sure this has been asked 10 to the 1 millionth power times, however may be the rules have changed. I am looking to set up a really small ISP with a few /24's. I want to host DNS as well. Is there any whitepapers/howtos/best practices on setting up multihomed BGP and DNS with BIND