Re: Current diameter of the Internet?

Somewhere I have a first edition of Steven's TCP/IP Illustrated, in some box of books I can't find. Strangely, "3600 seconds" is one timeout value which doesn't exist in that chapter (or TCP). Yep, ISPs and middleware boxes use that value, often incorrectly. On Mon, 22 Jul 2024, Mel

Re: lots of internet starting at ~3 a.m. cst

>Xbox will also auto push out updates to games very soon after their release, even with the console being off Auto updates with the console "off" has been a thing since the launch of the Xbox One (nov 2013) and the relatable Playstation. Newer Xbox/Playstation continue to have this. I don't

Re: lots of internet starting at ~3 a.m. cst

understood.  today's ~3:00 a.m traffic increase, is similar to what I saw 1/23/2024... nice of them to at least start it during lowest use time of the day. https://mailman.nanog.org/pipermail/nanog/2024-January/224671.html -Aaron On 7/23/2024 12:33 PM, Tom Beecher wrote: No, because

Re: lots of internet starting at ~3 a.m. cst

No, because there's no set schedule for these things. Some publishers / consoles get content/patches up in advance to allow user to pre-load. This can smooth out the bandwidth hits, but only if the users enable the pre-load feature. Many don't. Other publishers just enable the updates at once for

Re: lots of internet starting at ~3 a.m. cst

You're right on and most of us don't monitor for shifts between direct peering and transit very well. we monitor for bw threshold. Paul Bradford Lead Network Engineer AS11776 C: 814-203-0699 E: pbradf...@breezeline.com Breezeline.com 2875 Rt 764 Suite 2, Duncansville, PA 16635 On

Re: lots of internet starting at ~3 a.m. cst

On 7/23/24 16:15, Bryan Holloway wrote: What irks me is that we have direct PNIs with -- without naming names -- the "big guys" delivering this content, and yet the majority of this traffic is coming over our public IX connections and transit. Kinda defeats the purpose of a PNI ... anyone

Re: lots of internet starting at ~3 a.m. cst

There was an issue in a Fortnite update yesterday for Xbox causing the update to be over 80gb (usually 20gb or less) on that platform. Xbox will also auto push out updates to games very soon after their release, even with the console being off. Brandon Ambrose On Jul 23, 2024 at 10:17 AM

Re: lots of internet starting at ~3 a.m. cst

Not seeing the same here in Houston, the influx of 54113 traffic was coming in on PNI. Most of my traffic from the other “big guy” is coming in on transit instead of PNI, but I’ve been told that is due to some issues with their POP in the market. > On Jul 23, 2024, at 9:15 AM, Bryan Holloway

Re: lots of internet starting at ~3 a.m. cst

What irks me is that we have direct PNIs with -- without naming names -- the "big guys" delivering this content, and yet the majority of this traffic is coming over our public IX connections and transit. Kinda defeats the purpose of a PNI ... anyone else seeing this? - bryan

Re: lots of internet starting at ~3 a.m. cst

I see a mix of Akamai, Amazon, Apple (iOS/macOS updates?), Edgio, Fastly for direct peers. I haven't dug into transit but I see spikes on Arelion and Cogent. Quick search is showing me multiple possibilities: Fallout 76 update, PS5 firmware update, possibly Fortnite update. On Tue, Jul 23, 2024

Re: lots of internet starting at ~3 a.m. cst

thanks Peter, et al.  Is there some sort of website, traffic stats, gaming update schedule page for me to proactively see if/when this type of thing will occur?  I mean, this is a significant uptick on all 3 of my internet uplinks... would be nice to know beforehand -Aaron On 7/23/2024 9:02

Re: lots of internet starting at ~3 a.m. cst

Considering at least the top 4 IPs you've listed are CDN providers (Edgio and Fastly), this definitely sounds like game updates or something of the sort. Nothing unusual really for 3am on a weekday morning especially for an eyeball network. Kind regards, Peter On Tue, Jul 23, 2024 at 9:57 AM

Re: lots of internet starting at ~3 a.m. cst

Playstation 5 system updates kicked off around then: https://www.reddit.com/r/PS5/comments/1ea1dii/ps5_firmware_update_released_for_july_23_patch/ On Tue, Jul 23, 2024 at 9:57 AM Aaron Gould wrote: > Thanks Jason, updates for what? I was hoping any other eyeball network > operators may have

Re: lots of internet starting at ~3 a.m. cst

Thanks Jason, updates for what? I was hoping any other eyeball network operators may have been seeing "lots of internet" usage like me and may be able to share what they know. I'm always suspicious about the typical game update that tends to cause something like this. someone unicasted me a

Re: lots of internet starting at ~3 a.m. cst

Yes, looks like all the families with young/middle aged teens are downloading updates. On 7/23/24 09:03, Aaron Gould wrote: Anyone else see a lot of Internet traffic starting at 3 a.m. and continuing even now?  Seems to be spiky tcp.

Re: lots of internet starting at ~3 a.m. cst

Do you have *any* sort of additional information about this? Which source and destination ASNs, how much "a lot" is, etc? This sounds like a typical game update release cycle though without any information not a whole lot of networks would be able to confirm anything. Kind regards, Peter On

Re: Current diameter of the Internet?

According to speedtest.net (Akamai has apparently stop publishing its data) Fixed Broadband (Global median): 93 Mbps (download) / 47 Mbps (upload) Mobile Broadband (Global median): 56 Mbps (download) / 11 Mbps (upload) By Country (fixed broadband) 1. Singapore 285 Mbps 159. Cuba 2.7

Re: Current diameter of the Internet?

Hmm, made me curious,... What is the bisection bandwidth of the Internet today? -- //Shrikumar ---Original Message--- > From: Sean Donelan > Date: Mon, 22 Jul 2024 11:46:00 -0400 (EDT) > To: nanog@nanog.org > Subject: Re: Current diameter of the Internet? > > > Ac

Re: Current diameter of the Internet?

conds (1 hour). For a detailed explanation, refer to Richard Stevens TCP/IP Illustrated, Chapter 14 .TCP Timeout and Retransmission. -mel From: Sean Donelan Sent: Monday, July 22, 2024 2:05 PM To: Mel Beckman Cc: nanog@nanog.org Subject: Re: Current diameter of t

Re: Current diameter of the Internet?

On Mon, 2024-07-22 at 17:57 -0400, Josh Luthman wrote: > Right, that's why I asked where the 3 days come from. > > I found an India website and I'm located in Ohio.  That's pretty > close to the opposite side of the world.  I'm assuming it's a > terrestrial service.  My results are comparable to

Re: Current diameter of the Internet?

Right, that's why I asked where the 3 days come from. I found an India website and I'm located in Ohio. That's pretty close to the opposite side of the world. I'm assuming it's a terrestrial service. My results are comparable to others in this thread, 200-280 ms on the higher end. If you start

Re: Current diameter of the Internet?

On Mon, 2024-07-22 at 17:05 -0400, Sean Donelan wrote: > > OMG, Not trying to solve Einstein's General Theory of Relativity. > > Just trying to choose reasonable timeouts for my TCP packets > :-) To quote someone I respect I have a bridge loop here for you. :D

Re: Current diameter of the Internet?

OMG, Not trying to solve Einstein's General Theory of Relativity. Just trying to choose reasonable timeouts for my TCP packets :-) Middleware boxes suck -- its IETF week. On Mon, 22 Jul 2024, Mel Beckman wrote: *A. Einstein, Relativity: The Special and General Theory, authorized

Re: pgp keyservers

>> very intentionally wearing my end luser hat, i did not find a simple >> hkps://entry to put in my `~/.gnupg/gpg.conf`. probably my fault. > > That’s a fair point and we’d be open to ideas on how to improve that > aspect to make it more accessible to end users, especially the less >

Re: pgp keyservers

> On Jul 22, 2024, at 09:48, Randy Bush wrote: > > i did a mild descent through the links on that web page. > > very intentionally wearing my end luser hat, i did not find a simple > hkps://entry to put in my `~/.gnupg/gpg.conf`. probably my fault. > > randy That’s a fair point and we’d be

Re: pgp keyservers

> While the sks-keyservers.net domain and many of the old hostnames that > powered it are dead & gone, the actual SKS keyserver network does in > fact live on, complete with new & improved DOS mitigations and active > development of the underlying server software powering it, Hockeypuck. > More

Re: Current diameter of the Internet?

According to Cloudflare Latency under average utilization by continent North America 41 ms South America 46 ms Europe 34 ms Africa 108 ms Asia 84 ms Oceania 35 ms Not clear what is included in Cloudflare "continents." Oceania is listed with the 2nd

Re: pgp keyservers

nanog.org wrote: > > Message: 15 > Date: Sun, 21 Jul 2024 20:23:43 -0400 > From: Matt Corallo mailto:na...@as397444.net>> > To: Randy Bush mailto:ra...@psg.com>>, North American Network > Operators' > Group mailto:nanog@nanog.org>> > Subject: Re: pgp ke

Re: pgp keyservers

> On Jul 22, 2024, at 10:00, John Kristoff wrote: > > * https://keys.openpgp.org/ keys.openpgp.org is the only key server I’ve ever used, but I’m wondering if it’s one of the “hipster” key servers referred to earlier.

Re: pgp keyservers

On Sun, 21 Jul 2024 16:25:17 -0700 Randy Bush wrote: > are there any old keyservers still working? or only the new hipster > ones? i tried three and no love The current version of the PGP/GnuPG doc hosted by FIRST.org lists the following additional servers you might try, and appear to be

Re: Current diameter of the Internet?

For a more academic treatment: “The crucial problem of how to synchronize clocks and measure the one-way speed of light was originally discussed by Poincaré and Einstein. After being neglected for many decades, the Poincaré-Einstein problem of synchronization revived in 1977 with the work of

Re: pgp keyservers

On Sun, Jul 21, 2024 at 08:29:06PM -0500, J. Hellenthal via NANOG wrote: > I hate to say it but I really think pgp could benefit from a blockchain > implementation keeping it distributed among peers versus its current status. Absent a description of exactly how what you're proposing meaningfully

Re: pgp keyservers

On Sun, Jul 21, 2024, 18:31 J. Hellenthal via NANOG wrote: > > > On Jul 21, 2024, at 19:28, Randy Bush wrote: > >  > > I think the hipster thing to do now, though, is --auto-locate-key with > > the Web Key Distribution or the DNSSEC Key Distribution mechanism. > > > i have done wkd for a fair

Re: Current diameter of the Internet?

Well...it gets complicated :) https://www.youtube.com/watch?v=pTn6Ewhb27k On Sunday, 21/07/2024 at 20:15 Josh Luthman wrote: Whoops, that should have said radio waves travel faster than fiber (more so in a vacuum). On Sun, Jul 21, 2024 at 8:07 PM Chris Adams wrote: Once upon a time,

Re: pgp keyservers

> On Jul 21, 2024, at 19:28, Randy Bush wrote: > >  >> >> I think the hipster thing to do now, though, is --auto-locate-key with >> the Web Key Distribution or the DNSSEC Key Distribution mechanism. > > i have done wkd for a fair while. but some folk like to pull keyrings, > so i try to

Re: pgp keyservers

> I think the hipster thing to do now, though, is --auto-locate-key with > the Web Key Distribution or the DNSSEC Key Distribution mechanism. i have done wkd for a fair while. but some folk like to pull keyrings, so i try to keep them updated. randy --- ra...@psg.com `gpg

Re: pgp keyservers

pgp.mit.edu has been sporadically available for me over the last while, but yea AFAIU sks-keyservers shut down after the DoS drama, as did most of the old servers in the pool. I believe keyserver.ubuntu.com generally works and doesn't strip all the signatures and whatnot off keys when they

Re: Current diameter of the Internet?

Whoops, that should have said radio waves travel faster than fiber (more so in a vacuum). On Sun, Jul 21, 2024 at 8:07 PM Chris Adams wrote: > Once upon a time, Josh Luthman said: > > Voyager is using radio waves, which travel faster than the speed of light > > (in a vacuum, too!). > > No... >

Re: Current diameter of the Internet?

Once upon a time, Josh Luthman said: > Voyager is using radio waves, which travel faster than the speed of light > (in a vacuum, too!). No... -- Chris Adams

Re: Current diameter of the Internet?

Easy. Bridge loop. -mel via cell On Jul 21, 2024, at 4:06 PM, Josh Luthman wrote:  Mel, Voyager is using radio waves, which travel faster than the speed of light (in a vacuum, too!). But my point is more Earth to outside the solar system is ~24 hours so where did circumnavigating the

Re: Current diameter of the Internet?

On Sun, 2024-07-21 at 16:10 -0700, Michael Thomas wrote: > > > > > On 7/21/24 4:05 PM, Josh Luthman wrote: > > > > > Mel, > > > > > > > > Voyager is using radio waves, which travel faster than the speed of > > light (in a vacuum, too!).  But my point is more Earth to outside > > the

Re: Current diameter of the Internet?

If worst-case is an option, there are some interesting routing policies between certain places. One example is a Australia to China--take Perth to Chongqing as an example. They're at about the same longitude, but RTT is routinely greater than 500 ms. Packets travel to Singapore, then cross the

Re: Current diameter of the Internet?

On 7/21/24 4:05 PM, Josh Luthman wrote: Mel, Voyager is using radio waves, which travel faster than the speed of light (in a vacuum, too!).  But my point is more Earth to outside the solar system is ~24 hours so where did circumnavigating the globe get three days of latency? ::Albert

Re: Current diameter of the Internet?

Mel, Voyager is using radio waves, which travel faster than the speed of light (in a vacuum, too!). But my point is more Earth to outside the solar system is ~24 hours so where did circumnavigating the globe get three days of latency? On Sun, Jul 21, 2024 at 2:29 PM Mel Beckman wrote: >

Re: Current diameter of the Internet?

Keeping this within the realm of TCP/IP, i.e. within Earth terresterial links and the sphere of Earth geostationary orbits (maybe Lagrange points, I don't know what communication protocols far-earth satellites use). I'm not including inter-planetary or inter-stellar communication

Re: Current diameter of the Internet?

Chris, Of course I do. -mel > On Jul 21, 2024, at 8:55 AM, Chris Adams wrote: > > Once upon a time, Mel Beckman said: >> Because the speed of light is different in different mediums. It depends on >> the index of refraction. Most of the Internet is on fiber optics, and the >> speed of

Re: Current diameter of the Internet?

Once upon a time, Mel Beckman said: > Because the speed of light is different in different mediums. It depends on > the index of refraction. Most of the Internet is on fiber optics, and the > speed of light in glass fiber is dramatically slower than in a vacuum. Long > distance single-mode

Re: Current diameter of the Internet?

Josh, Because the speed of light is different in different mediums. It depends on the index of refraction. Most of the Internet is on fiber optics, and the speed of light in glass fiber is dramatically slower than in a vacuum. Long distance single-mode communication fiber typically has a core

Re: Current diameter of the Internet?

See https://voyager.jpl.nasa.gov/mission/status/ Thanks, Donald === Donald E. Eastlake 3rd d3e...@gmail.com On Sun, Jul 21, 2024 at 10:46 AM Josh Luthman wrote: > Where do you get 3 days? > > Voyager 1 is about 15.2B miles or 22.665707 hours at the speed of

Re: Current diameter of the Internet?

Where do you get 3 days? Voyager 1 is about 15.2B miles or 22.665707 hours at the speed of light. On Sat, Jul 20, 2024 at 7:12 PM Nathan Angelacos wrote: > On Sat, 2024-07-20 at 00:58 -0500, Stas Bilder wrote: > > Pity we can’t ping Voyagers. > > S. > > > > ROTFL, you actually had me pull

Re: Current diameter of the Internet?

On Sat, 2024-07-20 at 00:58 -0500, Stas Bilder wrote: > Pity we can’t ping Voyagers. > > S. ROTFL,   you actually had me pull out Star Trek - The Movie... Wow... what a blast from 1979. So yeah ... According to our media outlets, RTT of the internet is ... um 3 days.

Re: Current diameter of the Internet?

On 7/20/24 14:08, Matt Corallo wrote: Geosync is probably the highest unloaded latency, but add in a little bufferbloat and you can easily get way more latency...I've definitely seen a minute+ pings on a plane, which is almost all queuing. I assume airplanes are not the only place with

Re: Current diameter of the Internet?

On 7/19/24 8:44 PM, joel jaeggli wrote: On 7/19/24 15:07, Sean Donelan wrote: What is the current estimated diameter of the Internet? Maximum (worst-case) RTT edge-to-edge? Most public latency data is now edge-to-cloud, not edge-to-edge. Cloud engineers have done a great job, and

Re: Current diameter of the Internet?

Pity we can’t ping Voyagers. S. > On Jul 19, 2024, at 19:45, joel jaeggli wrote: > >  > > >> On 7/19/24 15:07, Sean Donelan wrote: >> >> What is the current estimated diameter of the Internet? >> >> Maximum (worst-case) RTT edge-to-edge? >> >> Most public latency data is now

Re: Current diameter of the Internet?

On 7/19/24 15:07, Sean Donelan wrote: What is the current estimated diameter of the Internet? Maximum (worst-case) RTT edge-to-edge? Most public latency data is now edge-to-cloud, not edge-to-edge. Cloud engineers have done a great job, and edge-to-cloud less than 1-sec RTT. Where have

Re: Compiling RTG on EL9

Hi Nick On 13.07.2024 00:19, Nick Hilliard wrote: Whoa, that's some blast from the past. At the time of the latest release in 2003, rtg was still duking it out with mrtg and cricket, which was used by the cool kids.  Still some good memories there. Who knew we could be part of the cool kids

Re: Coherent 100G in QSFP28

On 3/1/23 15:56, Jared Brown wrote: On 2/28/23, Pascal Masha wrote: How much will these cost? ADVA said 4ish grand each. Probably less than five. - Jared So delayed again, as I understand it, due to challenges in achieving the power class targets, especially for the high-power

RE: Compiling RTG on EL9

...@unlimitednet.us Sent: Friday, July 12, 2024 9:29 PM To: nanog@nanog.org Subject: Re: Compiling RTG on EL9 Total blast from the past, Nick! We're using rtg2 on our network and John, I appreciate you sending this link over with the update. Just discussing internally that we need to get this server

Re: Compiling RTG on EL9

Total blast from the past, Nick! We're using rtg2 on our network and John, I appreciate you sending this link over with the update.  Just discussing internally that we need to get this server updated and not sure how that'll all go over. Best wishes, Drew! Best Regards, Jason On 7/12/24

Re: Compiling RTG on EL9

Have you tried the rtg2 fork on github? https://github.com/synergycp/RTG2 Its still pretty old, like 2009, but there was an update made just 2 years ago with MariaDB support. I stopped using rtg/rtg2 around 2015, but I was always a huge fan of it. -John > On Jul 12, 2024, at 6:19 PM, Nick

Re: Compiling RTG on EL9

Drew Weaver wrote on 12/07/2024 14:37: I am just curious with the demise of EL7 if anyone else is working on trying to compile RTG for EL9. If you don’t know what RTG is it’s just an old SNMP poller/graph plotter that some networks have found useful in the past. Drew, Whoa, that's some

Re: IRR mirrors de-sync from ARIN or irrd4 bug or ARIN streaming is broken?

>From the CAIDA study on this : "In October 2021, we found matching Route Origin Authorization objects (ROAs) for around 20% of RADB IRR records, and a consistency of 38% and 60% in v4 and v6." Do think much

Re: eero outage

On Wed, Jul 10, 2024 at 06:10:24PM -0700, Warren Kumari wrote: >On Wed, Jul 10, 2024 at 5:56 PM, Niels Bakker <[1]niels=na...@bakker.net> >wrote: > > * [2]war...@kumari.net (Warren Kumari) [Wed 10 Jul 2024, 23:03 CEST]: > >More seriously, erm, you mean Eero like the wireless

Re: Dissecting the FCC’s Proposal to Improve BGP Security

> On Jul 11, 2024, at 11:02, t...@pelican.org wrote: > As a not-security person trying to get to grips with this, am I > mis-understanding the type of attack that this is pushing to mitigate? > My current understanding: > -Bad guys announce space for Facebook / Amazon / banks / whatever > -Some

RE: Dissecting the FCC’s Proposal to Improve BGP Security

On Thursday, 11 July, 2024 07:23, "Hank Nussbacher" said: > [ > https://www.kentik.com/blog/dissecting-the-fccs-proposal-to-improve-bgp-security/ > ]( > https://www.kentik.com/blog/dissecting-the-fccs-proposal-to-improve-bgp-security/ > ) As a not-security person trying to get to grips with

Re: IRR mirrors de-sync from ARIN or irrd4 bug or ARIN streaming is broken?

On Wed, Jul 10, 2024 at 07:10:48PM -0400, Aliaksei Sheshka wrote: > nothing! I suspect the mirror is out of sync. > > Now NTT mirror: Seems reloading helped: $ date Thu Jul 11 03:50:22 UTC 2024 $ whois -h rr.ntt.net 199.52.73.0/24 route: 199.52.73.0/24 origin: AS132055 descr:

Re: IRR mirrors de-sync from ARIN or irrd4 bug or ARIN streaming is broken?

On Wed, Jul 10, 2024 at 09:37:22PM -0400, Aliaksei Sheshka wrote: > On Wed, Jul 10, 2024 at 9:26 PM Job Snijders via NANOG > wrote: > > > Indeed, it appears both NTT’s and RADB’s mirror instances are > > desynchronized in relationship to ARIN’s IRR. Both NTT and RADB > > should do a database

Re: IRR mirrors de-sync from ARIN or irrd4 bug or ARIN streaming is broken?

On Wed, Jul 10, 2024 at 9:26 PM Job Snijders via NANOG wrote: > > > Aliaksei, > > Indeed, it appears both NTT’s and RADB’s mirror instances are > desynchronized in relationship to ARIN’s IRR. Both NTT and RADB should do a > database reload to rectify the issue. > > Desynchronisation can happen

Re: IRR mirrors de-sync from ARIN or irrd4 bug or ARIN streaming is broken?

Rubens, ARIN-NONAUTH was deprecated two years ago: https://www.arin.net/vault/announcements/20220404-irr/ Aliaksei, Indeed, it appears both NTT’s and RADB’s mirror instances are desynchronized in relationship to ARIN’s IRR. Both NTT and RADB should do a database reload to rectify the issue.

Re: IRR mirrors de-sync from ARIN or irrd4 bug or ARIN streaming is broken?

If you look at TC, you will see that this object is part of ARIN-NONAUTH: https://bgp.net.br/whois.html?q=199.52.73.0%2F24 route: 199.52.72.0/22 descr: Ernst & Young, Gurgaon Cyberpark, India origin: AS132055 mnt-by: MNT-EYL changed:

Re: eero outage

On Wed, Jul 10, 2024 at 5:56 PM, Niels Bakker wrote: > * war...@kumari.net (Warren Kumari) [Wed 10 Jul 2024, 23:03 CEST]: > > More seriously, erm, you mean Eero like the wireless devices? Aren't they > supposed to be mesh wifi thingies, and so traffic is local? Like, if eero. > com / an eero

Re: eero outage

One post says it was working an hour ago. https://www.reddit.com/r/amazoneero/comments/1e07nlj/eero_up_down/ On Wed, Jul 10, 2024 at 5:56 PM Niels Bakker wrote: > * war...@kumari.net (Warren Kumari) [Wed 10 Jul 2024, 23:03 CEST]: > >More seriously, erm, you mean Eero like the wireless devices?

Re: eero outage

* war...@kumari.net (Warren Kumari) [Wed 10 Jul 2024, 23:03 CEST]: More seriously, erm, you mean Eero like the wireless devices? Aren't they supposed to be mesh wifi thingies, and so traffic is local? Like, if eero.com / an eero service goes down, well, … ¯\_(ツ)_/¯? From what I can tell from

Re: eero outage

On Wed, Jul 10, 2024 at 3:06 PM, Jared Mauch wrote: > Does anyone know about the big eero outage going on? > If only there was some sort of outages list, where big outages would be discussed…[0] More seriously, erm, you mean Eero like the wireless devices? Aren't they supposed to be mesh wifi

Re: Akamai connectivity issue across several states

Hello, just saw this - I'll ping you off-list. On Mon, Jul 08, 2024 at 04:07:09PM +, Schylar Utley wrote: >We are seeing significant connectivity issues across several states to >what appears to be only Akamai served websites. > > > >Most of all the traceroutes to

Re: Netrality NOC contact?

Thank you to everyone who responded off-list. Finally got things sorted out. Nothing like losing a line-card on a holiday weekend ...  On 7/6/24 16:36, Bryan Holloway wrote: Trying to get a hold of a meat-popsicle in Netrality's NOC. Their web-site only lists an e-mail address and no

Re: Out-of-Bailiwick DNS?

On 2024-07-06 14:57, Crist Clark wrote: If you’re LG, you own the software, you do cert pinning. Also, realize many (most? almost all?) are going to outsource the management of their vanity TLD to one of the existing companies in that market. Think of a brand that sells, I don’t know, shoes.

Re: Out-of-Bailiwick DNS? (Was: HE.net problem)

On 7/5/24 3:53 AM, Jeroen Massar via NANOG wrote: And... we all still have ICANN as an ultimate power, and the TLD itself, next to the above registrar. If you recall the facebook outage from last year, one of the interesting things from it was they are their own registrar for their domains.

Re: HE.net problem

On Thu 04 Jul 2024 18:16:28 GMT, Randy Bush wrote: > hak whacked me to add > http://dns.measurement-factory.com/tools/nagios-plugins/check_zone_rrsig_expiration.html > to my nagios deployment. > > anyone have some known sick in various ways dns zones against which to > test? Those domains are

Re: Out-of-Bailiwick DNS? (Was: HE.net problem)

FWIW I think TLDs should cost much more, like millions, other than where they provide legitimate internationalization or specific community service functions (TBD.) 1. They're just polluting the name space, many seem frivolous like .RODEO or .FISHING (yeah those are real.) 2. Vanity corporate

Re: Out-of-Bailiwick DNS?

On 7/6/24 8:06 PM, Robert McKay via NANOG wrote: On 2024-07-06 21:11, John Von Essen wrote: Ok…. now a rabbit hole. I looked at some vanity TLDs, and it appears the ALOT of big companies have their names as TLDs, but almost none of them are using it for anything. Why is that? Is it just a

Re: Out-of-Bailiwick DNS?

On 07/07/2024, 01:06:59, "Robert McKay via NANOG" wrote: People aren't used to URLs not ending in .com or possibly their local ccTLD. Anything else looks suspicious or isn't even recognised as a URL and less people will visit it. True but when you are multinational you probably have a

Re: Out-of-Bailiwick DNS? (Was: HE.net problem)

> If I have an LG TV and it wants to update to .LG and LG is > DNSSEC signing the whole chain, that sure seems more likely to be legit > than .lg.tv or some such. .lg and .he were mentioned as possible brand TLDs, but those are not allowed, because they are reserved for possible ccTLDs. gTLDs are

Re: Out-of-Bailiwick DNS?

On 2024-07-06 21:11, John Von Essen wrote: Ok…. now a rabbit hole. I looked at some vanity TLDs, and it appears the ALOT of big companies have their names as TLDs, but almost none of them are using it for anything. Why is that? Is it just a copyright play to protect the name from some else

Re: Out-of-Bailiwick DNS? (Was: HE.net problem)

According to Bill Woodcock : >-=-=-=-=-=- > > > >> On Jul 6, 2024, at 22:41, Paul Ebersman wrote: >> I've been surprised that none of the folks that got TLDs seem to be >> leveraging the technical/security brand protection like they could. > >A few are. A very few. SNCF. A few banks. I can't

Re: Out-of-Bailiwick DNS? (Was: HE.net problem)

It appears that Bill Woodcock said: >-=-=-=-=-=- > >> On Jul 6, 2024, at 22:11, John Von Essen wrote: >> I saw something online that said $250,000 but that didn’t make sense if its >> all paperwork. > >Heh. I see you are unfamiliar with ICANN. They’ve said that same paperwork >is likely to

Re: Out-of-Bailiwick DNS? (Was: HE.net problem)

If you’re LG, you own the software, you do cert pinning. Also, realize many (most? almost all?) are going to outsource the management of their vanity TLD to one of the existing companies in that market. Think of a brand that sells, I don’t know, shoes. Running a TLD is not part of their core

Re: Out-of-Bailiwick DNS? (Was: HE.net problem)

> On Jul 6, 2024, at 22:41, Paul Ebersman wrote: > I've been surprised that none of the folks that got TLDs seem to be > leveraging the technical/security brand protection like they could. A few are. A very few. SNCF. A few banks. > If I have an LG TV and it wants to update to .LG and LG

Re: Out-of-Bailiwick DNS? (Was: HE.net problem)

essen> I saw something online that said $250,000 but that didn't make essen> sense if its all paperwork. woody> Heh. I see you are unfamiliar with ICANN. They've said that woody> same paperwork is likely to cost $375k in ICANN staff time for woody> the next round. Because, you know, inflation

Re: Out-of-Bailiwick DNS? (Was: HE.net problem)

> On Jul 6, 2024, at 22:11, John Von Essen wrote: > I saw something online that said $250,000 but that didn’t make sense if its > all paperwork. Heh. I see you are unfamiliar with ICANN. They’ve said that same paperwork is likely to cost $375k in ICANN staff time for the next round.

Re: Out-of-Bailiwick DNS? (Was: HE.net problem)

I've found this conversation hugely of interest… The below isn't really a question, more of a high level clarification/further thinking. First, what actually happened and the impact (correct me if any of this is wrong): A stupid phishing complaint to NetSol by a 3rd party got he.net put into

Re: getting the memo, Out-of-Bailiwick DNS? (Was: HE.net problem)

See how little it has been necessary for me to pay attention to them since my net handle was assigned back in the early 90s or maybe late 80s? ;-) Cheers, -- jra3 On July 6, 2024 11:11:50 AM EDT, John Levine wrote: >According to Jay R. Ashworth : >>data I heard that that *was* a registry-side

Re: getting the memo, Out-of-Bailiwick DNS? (Was: HE.net problem)

According to Jay R. Ashworth : >data I heard that that *was* a registry-side hold (and hence it didn't matter >that it was NetSol). Or perhaps that NetSol was still the registry for .net -- >that's out of date now, isn't it? Uh, yeah, Verisign spun off the NetSol registrar over 20 years ago in

Re: Out-of-Bailiwick DNS? (Was: HE.net problem)

- Original Message - > From: "Robert L Mathews" > > However, if "example.com" uses "ns1.he.net" and "ns2.he.net" as its > nameservers, > having the second of those instead be "ns2.he.org" will keep "www.example.com" > reachable if he.net is placed on clientHold. > > That was presumably

Re: TLD jingle mail, Out-of-Bailiwick DNS? (Was: HE.net problem)

On Fri, Jul 5, 2024 at 6:25 PM John Levine wrote: > > Also, getting your own TLD doesn't necessarily make your risks less, it just > makes them different. You now have a direct relationship with the registry > back end provider that you have to not screw up, and due to ICANN's rules, > there is

Re: TLD jingle mail, Out-of-Bailiwick DNS? (Was: HE.net problem)

It appears that Bill Woodcock said: >ICANN’s going to open another round of TLD applications, and I expect a lot of >companies to go into that with their eyes more >open than last time, knowing why they’re doing it. It’s not about brand >protection, it’s about disintermediating the root >of

Re: Out-of-Bailiwick DNS? (Was: HE.net problem)

no risk of our domain names getting put on clientHold, but I still don't trust the *registry* not to put one of our domain names on their equivalent "serverHold". We provide nameservers for our customers in .net, .biz and .org (run by separate companies) to mitigate that risk. And

Re: Out-of-Bailiwick DNS? (Was: HE.net problem)

ebersman> - don't have all your business critical domains under the same ebersman> registrar (unless it's of the CSC/markmonitor class) jeroen> There is always going to be single point of failures in a jeroen> hierarchical tree like that. Everything in internet/infrastructure is risk tradeoffs

Re: Out-of-Bailiwick DNS? (Was: HE.net problem)

> On Jul 5, 2024, at 09:53, Jeroen Massar via NANOG wrote: > Please note that: > - Markmonitor is owned by Newfold Digital / Endurance International [1] > - Network Solutions is owned by Web.com [2] > - Web.com is... owned by Newfold Digital [3] > > And...

Re: HE.net problem

>> what foss dns monitoring tools do folk use to alert of >> - iminent delegation expiry >> - inconsistent service (lame, soa mismatches, ...) >> - dnssec signing and timer issues >> - etc. > https://github.com/berthubert/simplomon thanks. may play hak whacked me to add

  1   2   3   4   5   6   7   8   9   10   >