January 2013 - NZNOG - lists.nznog.org

National Library of New Zealand Web Harvest 2013
by Jay Gattuso 18 Jan '13

18 Jan '13

Hi All, This email is to inform you of the NLNZ intent to undertake its 3rd Whole of Domain Web Harvest. The planned dates for this exercise are the 4th to the 22nd of February 2013. The harvest will be undertaken by the Internet Archive<http://archive.org/index.php> on our behalf, More details can be found on the web harvest website: http://natlib.govt.nz/publishers-and-authors/web-harvesting/2013-nz-web-har… If anyone has any specific concerns, requests or questions, please do not hesitate to contact me directly: jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)dia.govt.nz> or via the project email address: Web.Archive(a)dia.govt.nz<mailto:Web.Archive(a)dia.govt.nz?Subject=About%20the%202013%20Web%20Harvest> If anyone wants to discuss this further on the mailing list I am happy to do so. King regards, Jay Jay Gattuso | Digital Preservation Analyst | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467 Wellington 6140 New Zealand | +64 (0)4 474 3064 jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)natlib.govt.nz>

5 5

Microsoft at APE and WIX
by Kevin Epperson 16 Jan '13

16 Jan '13

Hello Good folks of NZNOG - After following several recent threads on this list and other forums regarding Microsoft performance issues in New Zealand, I am pleased to now be in a position to solicit peering sessions at both APE and WIX (details below.) We are also peering with the route servers at both exchanges. Please feel free to email me directly with any related questions and also be on the look out for a Microsoft network engineer at NZNOG next week. Microsoft Details: AS macro: AS-MICROSOFT Suggested max prefixes : 250 Prefer no MD5. NOC E-mail: ioc(a)microsoft.com NOC Phone : 1-425-705-2686 Peering: peering(a)microsoft.com ASN: 12076 APEv4: 192.203.154.162 APEv6: 2001:07FA:0004:c0cb::9aa2 WIXv4: 202.7.0.220 WIXv6: 2001:07FA:0003:ca07::00dc Full details at http://as8075.peeringdb.com To establish a session please set up your side and reply with the details below to peering(a)microsoft.com ASN: IPv4 address: IPv6 address: Approx number of IPv4 prefixes: Approx number of IPv6 prefixes: AS macro: NOC email: NOC phone: Peering email: Regards, -Kevin

1 0

NZNOG13 Update - Space still available in workshops and tutorials
by NZNOG Announcements 14 Jan '13

14 Jan '13

*NZNOG13 RegistrationsThis year, the 10th year of standalone NZNOG meetups is looking to be a cracker. The conference itself is now sold out but we do have a waitlist and some places may become available. You can sign up to the conference waitlist at: http://nznog.org/register We still have places on the tutorials and workshops, so if you are interested you might want to get in sooner than later. Tutorials - Wednesday the 23rd of January - Mikrotik wireless and routing systems (full day) - APNIC - Internet Resource Management IRMe (half day) - APNIC - DNSSEC (half day) - IPv6 Security - Karl Auer, Into6 (half day with morning and afternoon sessions) - Out of Band Management - OpenGear (half day) Workshops - Monday the 21st - Wednesday the 23rd JanuaryIPV6 BGP Routing - Philip Smith (APNIC) and Daniel Griggs (PCH) This workshop is targeted at engineers and network administrators from both ISPs and SOHO/enterprise networks. - ISP network topology overview - ISP IP Addressing Plan - Introduction of Internet routing infrastructure - 2 Byte and 4 Byte AS Numbers - BGP operation - Understanding BGP metric and path selection process - Configuring BGP within an AS [iBGP, route reflector] - Configuring BGP between ASes [eBGP] - Controlling routing update traffic [prefix list, distribute list, route map] - Route Summarization with BGP - BGP Traffic engineering [MED, Local Pref, AS-Path prepend] It is highly recommended that participants bring their own laptop computers (At least Pentium 4, 1gb Ram, DVD drive, with administrative access to system) to practice the lessons learned during the workshops. DNSSec Workshop - Phil Regnauld (NSRC) and Joe AbleyThe course is designed for network engineers, systems administrators, and anyone who is involved in managing DNS operations. - DNS concepts - BIND (DNS server) and Resolver (DNS client) configurations - Reverse DNS - DNS Security - TSIG - DNS security extensions (DNSSEC) - DNS and IPv6 It's more DNSSEC centric than a DNS operations 101 course. Goals - Learn about the real world threats that exploit DNS weaknesses - Understand the risks you run when your DNS isn't secured - Learn about the security extensions for DNS: DNSSEC - Enable signing & validation in the organisation - Learn about the impact of DNSSEC on one's DNS infrastructure - Help participants take the next step, whether it involves deploying their own signing solution, acquiring a vendor based solution, or using a third party service Topics zone signature, key management, automated DNSSEC management using BIND & OpenDNSSEC, Hardware Security Modules (HSM) presentation on key ceremonies, DNSSEC Practice Statements Sponsors NZNOG are grateful for the support we receive from our sponsors. Platinum Sponsor - Vocus Communications Gold Sponsors - Go Wireless NZ - Internet New Zealand - Network Hardware Resale - Alcatel Lucent - Citylink - Kordia - FX Networks - REANNZ Silver Sponsors - Fortinet - Opengear - Brocade - ISPANZ Bronze Sponsors - Allied Telesis Workshop Sponsor - Internet New Zealand For further information: To register: http://www.nznog.org/register Follow us on Twitter: @NZNOG Susbscribe to the NZNOG mailing list: http://www.nznog.org/mailing-list Visit the conference website: http://nznog.org <http://2012.nznog.org.nz/> For general enquiries info(a)nznog.org*

1 0

National Library of New Zealand - Whole of Domain Web Harvest 2013
by Jay Gattuso 14 Jan '13

14 Jan '13

Hi All, This is a quick reminder that the National Library of New Zealand about to embark on its 2013 Whole of Domain Web Harvest. Our partners, the Internet Archive will be commencing a test harvest within the next 24 hours. This test harvest is expected to last a few days, and will attempt to complete a basic resources discovery for all the URIs included in the seedlist for the harvest. >From this test we expect to identify: (1) URIs that are no-longer active, (2) robust approximations for storage requirements and (3) URIs that could result in significant quantities of resources being harvested. These results will be used to hone the seed list in preparation for the harvest proper (running between the 4th and 22nd of February 2013). Please refer to this link for more information: http://natlib.govt.nz/publishers-and-authors/web-harvesting/2013-nz-web-har… Or feel free to drop me a line if you have any questions. Best, Jay Gattuso Jay Gattuso | Digital Preservation Analyst | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467 Wellington 6140 New Zealand | +64 (0)4 474 3064 jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)natlib.govt.nz>

1 0

[offer] Accommodation NZNOG
by Joel Wirāmu Pauling 13 Jan '13

13 Jan '13

Kia ora, just putting out an offer of (free) accommodation for this years conference. We have 1 queen guest bedroom and a bed settee . Reply off list it you want to take up the offer. -Joel http://linkedin.com/in/aenertia http://couchsurfing.org/people/aenertia

1 0

Call for APNIC 35 Policy Proposals
by Skeeve Stevens 12 Jan '13

12 Jan '13

Dear Colleagues, Is there something in APNIC's policies that you think needs an update, could be improved or changed for the better? If so, then why don't you submit a policy proposal for APNIC 35? If you are not sure whether your policy idea has merit or is covered by an existing one, please seek some advice from the Chairs or the community in general by posting to this mailing list. You never know until you ask. Policy proposals will need to be submitted before Wednesday 30 January 2013 to be considered for consensus at the APNIC 35 Policy SIG in Singapore 25 February - 1 March 2013. There are two ways to submit a policy proposal: 1. Use the online form at: http://www.apnic.net/community/policy/proposals/submit 2. Send your proposal in TEXT format to <policy at apnic dot net>. We encourage you to submit proposals well before the deadline. This gives the community more time to consider your proposal and gives you the opportunity to amend your proposal, if needed, based on the community's feedback. More information ---------------- APNIC's policy development process is explained at: http://www.apnic.net/policy View current and past policy proposals at: http://www.apnic.net/policy/proposals Learn more about APNIC 35 at: http://conference.apnic.net/35 We look forward to seeing you in Singapore APNIC Policy SIG Chairs Andy, Skeeve, and Masato * * *Skeeve Stevens, CEO - *eintellego Pty Ltd skeeve(a)eintellego.net ; www.eintellego.net Phone: 1300 753 383; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellego ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco – IBM - Brocade - Cloud ----- Check out our Juniper promotion website! eintellego.mx Free Apple products during this promotion!!!

1 0

Looking for Juniper person experienced with vlan bridging on J Series
by Bryan Tabb 09 Jan '13

09 Jan '13

Hi As subject mentions looking to get some help with what is possible, if what is envisaged is a good or bad idea and some config. Suspect this will only take an hour or two. If interested please drop me a line with contact details. Thanks Bryan Tabb

1 0

NZIX OpenFlow adventures phase 2
by Dean Pemberton 09 Jan '13

09 Jan '13

Hi Everyone, So the OpenFlow router has been up for a wee white now so it seemed about time to let you all poke at it. Phase 2 of the project is to: Deploy an OF switch on an exchange point which can function as a route server. This switch should be able to BGP peer with any peers which currently use the exchange and allow for the exchange of IPv4 prefixes as required. I've used the information on the WIX Peer list webpage (http://wix.nzix.net/peers.html) to pre-configure passive[1] BGP peering sessions for all existing WIX participants. So feel free to use your existing WIX IP addresses and AS numbers to connect to IP: 202.7.0.119 Aut-num: 9483 Things to look for: 1) It should pass you the routes that it learns from the route servers with the Flatnet AS in the path but with the original next hops. This longer path should mean that you won't explicitly prefer the routes from me. Bit of safety there. 2) It will pass you any other routes that people pass me directly. As I mentioned before we've got a few more plans. The next phase will start to take us a bit beyond what the current exchanges offer. In the new year we are going to deploy a similar switch at the APE. This hardware will become part of the single SDN controlled switch that we currently have in Wellington. When you peer with the OpenFlow switch at the WIX you'll get APE prefixes as well. Peer at the APE, you'll get WIX prefixes. Once we can get some traffic on the fabric and a presence at multiple places then we can really start to innovate. . BGP prefix communities based on the millisecond difference between your peering port and the prefix next hop . BGP aware RPF on the exchange (solves the pointing default problem) Got any other ideas. Throw them in the mix and we'll see what we can do. Have a Merry Christmas everyone. Regards, Dean [1] Passive means that I'll never reach out and initiate a session with you. You need to initiate the session with me. Just safer incase people think that I'm TCP Port 179 hax0r-ing them.

8 14

NZNOG13 - Register now and get a free Mikrotik Access Point
by NZNOG Announcements 08 Jan '13

08 Jan '13

*NZNOG13 Is Upon Us Register early for NZNOG13 and receive a free Mikrotik wireless access point and router!! The New Zealand Network Operators Group (NZNOG) is holding their annual conference and training workshops and tutorials in Wellington from the 21st to 25th January 2012. Training workshops and tutorials run from the 21st to the 23rd of January. The conference is then held on the 24th and 25th of January. Our annual conference provides both an opportunity to exchange technical information, and a high-value opportunity for NZ’s networking staff to ‘network’ amongst themselves. This is New Zealand’s only technical networking conference. The event will be held at the Mecure Hotel in Wellington. Accommodation is available on site at a discounted rate for conference attendees as well as in the immediate area. Registrations are open. The cost of attendance has been confirmed at $250, students receive a 60% discount and a fellowship scheme exists should you require assistance to attend. Conference Presentations 24-25th January Confirmed presenters for NZNOG13 include: Scott Bartlett (Orcon) - UFB one year in Andrew McDonald (Vodafone) - RBI Wholesale 12 months. Colin Dyer (GeoNet) and Ewen McNeill (Naos, Consultant) - Geonet: 1pps to 10,000 hits/second. Beatty Lane-Davis - SDN: accelerating the pace of evolution in packet and transport networks Sam Russell (REANNZ) - Thimble: OpenFlow-enabled device David Brownlie (REANNZ) - perfSONAR for measuring performance, and troubleshooting. Donald Love - UFB realities Philip Smith (APNIC) - IPv4 / IPv6 route table analysis for NZ Phil Regnauld (NSRC) - DNSSEC George Michaelson (APNIC) - Last words on IPv6 Stu Fleming (WIC) - On being a WISP Plus updates from NZRS, APNIC, CityLink, IPv6 Task Force, WAND and InternetNZ. Tutorials - 23rd January - Mikrotik wireless and routing systems (full day) - APNIC - Internet Resource Management IRMe (half day) - APNIC - DNSSEC (half day) - IPv6 Security - Karl Auer IPv6Now (half day) - Out of Band Management (TBC) Workshops - 21st - 23rd January IPV6 BGP Routing - Philip Smith (APNIC)This workshop is targeted at engineers and network administrators from both ISPs and SOHO/enterprise networks. - ISP network topology overview - ISP IP Addressing Plan - Introduction of Internet routing infrastructure - 2 Byte and 4 Byte AS Numbers - BGP operation - Understanding BGP metric and path selection process - Configuring BGP within an AS [iBGP, route reflector] - Configuring BGP between ASes [eBGP] - Controlling routing update traffic [prefix list, distribute list, route map] - Route Summarization with BGP - BGP Traffic engineering [MED, Local Pref, AS-Path prepend] It is highly recommended that participants bring their own laptop computers (At least Pentium 4, 1gb Ram, DVD drive, with administrative access to system) to practice the lessons learned during the workshops. DNSSec Workshop - Phil RegnauldThe course is designed for network engineers, systems administrators, and anyone who is involved in managing DNS operations. - DNS concepts - BIND (DNS server) and Resolver (DNS client) configurations - Reverse DNS - DNS Security - TSIG - DNS security extensions (DNSSEC) - DNS and IPv6 Social Events Wednesday Night EventThe Southern Cross<http://www.thecross.co.nz/>bar on Abel Smith Street has been confirmed for the networking event sponsored by Network Hardware Resale. The Southern Cross (affectionately known as 'The Cross') is somewhat of an icon in Wellington with unique decor and an impressive range of boutique beers - not to mention their legendary stone grills and Kiwiana inspired menus. Kick off will be 6PM, Wednesday the 23rd of January. Thursday Night Conference DinnerOne of the highlights of the NZNOG conferences each year is the conference dinner which provides an opportunity for attendees to get together, relax and enjoy a night out. The 2013 event will be held at Zealandia: The Karori Wildlife Experience<http://www.visitzealandia.com/what-is-zealandia/zealandia-in-a-nutshell/>and promises to be a great night! Buses will leave the conference venue for Zealandia at 6PM on Thursday the 24th of January. Accommodation Options Mercure is offering an exclusive room rate for NZNOG attendees starting from: $115.00 room only $135.00 bed and breakfast for one guest, 1 room $155.00 bed and breakfast for two guests, 1 room * Rates include GST. * Rates are per room per night, based on single, double or twin share occupancy To book contact Dean on Dean.Grocott(a)accor.com and mention you are with attending NZNOG 2013 http://www.accorhotels.com/gb/hotel-1991-mercure-wellington/index.shtml Multiple other accommodation options within Wellington exist. Sponsors NZNOG are grateful for the support we receive from our sponsors. Platinum Sponsor - Vocus Communications Gold Sponsors - Go Wireless NZ - Internet New Zealand - Network Hardware Resale - Alcatel Lucent - Citylink - Kordia - FX Networks - REANNZ Silver Sponsors - Fortinet - Opengear - Brocade - ISPANZ Bronze Sponsors - Allied Telesis Workshop Sponsor - Internet New Zealand For further information: To register: hhttp://www.nznog.org/register Follow us on Twitter: @NZNOG Susbscribe to the NZNOG mailing list: http://www.nznog.org/mailing-list Visit the conference website: <http://nznog.org.nz/>http://nznog.org<http://2012.nznog.org.nz/> For information in fellowships info(a)nznog.org*

3 2

Re: [nznog] NZIX OpenFlow adventures phase 2
by Josh Bailey 08 Jan '13

08 Jan '13

Hi Nathan; Hardware flows != OpenFlow flows. OpenFlow is an API. Some reflection on these statements may suggest an answer. Thanks, == If you hit the limit of number of flows, what happens? Does it reject the flow, or does it delete older ones to make room for it? Given there is no default route, what happens if you get a packet that doesn't match a flow? Does it drop it, or punt it to the controller? (ie. is there a default flow to drop) If it deletes older flows, and punts non-matching packets to the controller, that sounds like there's a potential for really bad performance spikes as you approach the upper limits of the flow table. If it deletes older flows and drops non-matching packets, then that's worse. If you simply reject new flows, then that's a bit better, but you've got to make sure that the route reflectors never re-advertise prefixes unless they're installed in to the flow tables successfully, or you drop packets, or punt them to the controller as above. Some interesting issues to consider! Agreed re. VPLS/etc. - but you've got to make sure your switches have reliable connectivity to your controller(s). In a network like WIX, that might be hard, not sure.

4 4