November 2023 - NZNOG - lists.nznog.org

list.waikato.ac.nz Has Moved
by Donald Neal 12 Dec '24

12 Dec '24

NZNOG-People, I have just finished migrating all of the mailing lists held at The University of Waikato from one server to another. I don't have any reason to believe that anything's gone wrong, but please bear with me for today if it turns out that something has. - Donald Neal -- Donald Neal | Q: How many Aucklanders does it take to change Systems Programmer/Analyst | a light bulb? The University of Waikato | A: Pass me that candle and I'll tell you. Hamilton, New Zealand | --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

IETF 119 in March 2024 will be in Brisbane
by Jay Daley 17 Jan '24

17 Jan '24

This is a heads-up that the IETF will be returning to the region after a 20+ year absence, meeting in Brisbane 16-22 March 2024. For those that don’t know, the IETF is the premier Internet standards development organisation, responsible for standards such as IPv6, RPKI, QUIC, WebRTC and plenty more. Anyone can participate, no membership is required and most participation is free as it takes place on mailing lists. The IETF is arranged by areas and Network Operators tend to find the Ops and Routing areas the most relevant. Work happens within Working Groups and the list of those for the Ops area can be found here: https://datatracker.ietf.org/wg/#OPS and the Routing are here: https://datatracker.ietf.org/wg/#RTG The IETF meets three times a year for the various Working Groups to push their work forward and this is the only time a fee is charged, to cover the cost of the meetings, but a remote participation fee waiver option is available for those that cannot afford the fee. I’ll post details about this meeting when registration opens. Jay -- Jay Daley jay(a)daley.org.nz +64 21 678840

1 1

Your Input Needed: Can ROA Replace LOA? – Short Survey (7 mins)
by Christopher Hawker 15 Nov '23

15 Nov '23

Hello everyone, Aftab Siddiqui is currently exploring the possibility of using Route Object Authorisations (ROAs) as a potential replacement to LOAs. Separate to this (and unknowing of Aftab's research), I had started a discussion on the RPKI Community guild on Discord (https://discord.gg/9jYcqpbdRE) discussing the usage of ROAs instead of LOAs. An LOA, or "Letter of Authority" / "Letter of Authorization," is a formal document granting permission for third parties to take specific actions regarding network resources or services. In the service provider industry, its primary use is for advertising address resources (IPv4/v6 and ASN). When an organization intends to announce its IP prefixes through its own or a transit provider's ASN to the global internet, it typically needs to provide an LOA to their transit provider, confirming their custodianship or ownership of the resources. RPKI ROA, stands for "Resource Public Key Infrastructure Route Origin Authorization," is part of a security framework designed to validate the authenticity of internet routing information. It involves a digitally signed object that specifies which Autonomous Systems (ASes) are permitted to announce specific IP address prefixes. Could you please take a moment to fill out our brief survey? Your feedback will play a crucial role in our understanding of this topic. Survey Link: https://www.surveymonkey.com/r/JCHLWBB Thanks, Christopher Hawker

1 0

The Guardian report on Optus Outage
by Mark Foster 14 Nov '23

14 Nov '23

https://www.theguardian.com/business/2023/nov/13/optus-network-outage-cause… A spokesperson confirmed on Monday that the cause of the outage was changes to routing information from an international peering network after a routine software upgrade at 4.05am on Wednesday. "These routing information changes propagated through multiple layers in our network and exceeded preset safety levels on key routers which could not handle these. This resulted in those routers disconnecting from the Optus IP Core network to protect themselves," a spokesperson said. "The restoration required a large-scale effort of the team and in some cases required Optus to reconnect or reboot routers physically, requiring the dispatch of people across a number of sites in Australia. This is why restoration was progressive over the afternoon." There's a meme about how it's always 'one of you three' that came immediately to mind... Mark.

1 0

Re: NZNOG Digest, Vol 248, Issue 5
by William Tiʻitiʻi Asiata Hura 07 Nov '23

07 Nov '23

Please unsubscribe me from your mailing list. On Tue, 24 Oct 2023 at 00:00, <nznog-request(a)list.waikato.ac.nz> wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via email, send a message with subject or > body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > Today's Topics: > > 1. Re: DiscountDomains (Shane Langley) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 23 Oct 2023 07:35:27 +0000 > From: Shane Langley <shane(a)webtastix.net> > Subject: [nznog] Re: DiscountDomains > To: Criggie <criggie(a)criggie.org.nz>, Craig Whitmore > <lennon(a)orcon.net.nz> > Cc: "nznog(a)list.waikato.ac.nz" <nznog(a)list.waikato.ac.nz> > Message-ID: <5faa61d8ce254bf68729a7232f78d834(a)webtastix.net> > Content-Type: text/plain; charset="utf-8" > > Nope, they have been incredibly quiet since that > > -----Original Message----- > From: Criggie <criggie(a)criggie.org.nz> > Sent: Friday, October 20, 2023 12:44 PM > To: Craig Whitmore <lennon(a)orcon.net.nz> > Cc: nznog(a)list.waikato.ac.nz > Subject: [nznog] Re: DiscountDomains > > > On Sep 29, 2023, at 11:03 AM, Shane Langley wrote: > > Just wondering if anyone from DD is on here? Am curious whatÃ¢Â€Â™s > > happened to their nameservers today as theres no updates on the > > network status page but all domains are giving SERVFAIL errors > > Craig Whitmore wrote: > > There is a discussion on : geekzone.co.nz But it's all third party . > > Did anyone ever get any kind of RCA or explanation of what went wrong at > DD that day, three weeks ago? > > Their web site simply says its fixed, without detail. > > > > > > _______________________________________________ > NZNOG mailing list -- nznog(a)list.waikato.ac.nz To unsubscribe send an > email to nznog-leave(a)list.waikato.ac.nz > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > NZNOG mailing list -- nznog(a)list.waikato.ac.nz > To unsubscribe send an email to nznog-leave(a)list.waikato.ac.nz > https://list.waikato.ac.nz/postorius/lists/nznog.list.waikato.ac.nz > > > ------------------------------ > > End of NZNOG Digest, Vol 248, Issue 5 > ************************************* >

1 0

IPv6 status in ANZ
by Mark Prior 06 Nov '23

06 Nov '23

It's been about seven years since I last nagged at AusNOG about the poor state of IPv6 adoption in Oz and it hasn't got any better since :-( And I don't mean the plumbing, I mean the services, I have recently rewritten the script I use to look for IPv6 services (web, mail, dns, ntp, xmpp and sip) and as part of that process I leveraged PeeringDB to find all the domains that claim to connect to an IX in either Australia or New Zealand. As a result I now have two sections on the web page that collect them all together. As an added bonus I also look for DNSSEC, and its deployment makes IPv6 look like a roaring success! The Australian IX member section is <https://www.mrp.net/ipv6_survey/#auix> and the New Zealand IX member section is <https://www.mrp.net/ipv6_survey/#nzix> Of course there will be organisations in both lists but I only probe them once (a day). Start from the top of the page if you want a better understanding of what is being checked (and see some graphs) and check out the link under the domain name to find "diagnostics" about the tests. Regards, Mark.

1 0