July 2024 - NZNOG - lists.nznog.org

list.waikato.ac.nz Has Moved
by Donald Neal 12 Dec '24

12 Dec '24

NZNOG-People, I have just finished migrating all of the mailing lists held at The University of Waikato from one server to another. I don't have any reason to believe that anything's gone wrong, but please bear with me for today if it turns out that something has. - Donald Neal -- Donald Neal | Q: How many Aucklanders does it take to change Systems Programmer/Analyst | a light bulb? The University of Waikato | A: Pass me that candle and I'll tell you. Hamilton, New Zealand | --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

Submit a paper for APIX30!
by Narelle Clark 29 Jul '24

29 Jul '24

Hi all! APIX#30 is scheduled for Tuesday 3 September 2024 and will be held alongside APNIC58 in Wellington, NZ. APIX is the Asia-Pacific Internet Exchange Association. The APIX Program Committee therefore invites presentations for the upcoming APIX#30 meeting. Suitable topics include:- * Internet Exchange ecosystem: topics related to the technical components of IXPs and their architectures * Internet Exchange operations: adopting new technology, monitoring and management of IXPs * Internet Exchange security: threats, mitigations and use cases in the IXP context * Internet Exchange growth and organisation: attracting new members, onboarding them and keeping them involved * Assessment and analysis of the impact of Internet Exchanges on the Internet ecosystem * Internet landscape generally: what big picture issues affect IXPs or their members * Data centre ecosystem: what trends are we seeing, what features and technology makes a DC a good home for an IXP? * Any other topics related to Internet and IXP operations. Presentations need to be of a practical orientation and directly assist the IXP community in establishing, running and growing IXPs. The intention is knowledge sharing and skill enhancement. Presentations aimed just at trying to sell services will not be accepted. Presentations can be in person or remote, you must tell us your preference. Hope to see you there -- Narelle Clark Chief Executive Officer Internet Association of Australia Ltd [cid:image001.png(a)01DAE1C7.1114FAA0] Suite 1.05, 150 Pacific Highway * North Sydney, NSW 2060 [Smart Phone with solid fill] +61 2 9037 6403 [Receiver outline] 1300 653 132 [Envelope with solid fill] ceo(a)internet.asn.au<mailto:ceo(a)internet.asn.au> [Earth globe: Asia and Australia with solid fill] www.internet.asn.au<http://www.internet.asn.au/> [cid:image006.jpg(a)01DAE1C7.1114FAA0]<https://internet.asn.au/events/nsw-ix-400gbps-ports/>

1 1

AS Number Management Study by TU Delft
by Nachiket Kondhalkar 18 Jul '24

18 Jul '24

Hello NZNOG community, APNIC and RIPE NCC have introduced an annual ASN maintenance fee from January 2025. As part of a research group currently studying AS Number management at TU Delft, we would like to understand the perspectives of network administrators in reference to this change. Your experience and expertise will help us understand and present the consensus of the community through our research. The link for the survey is : https://tudelft.fra1.qualtrics.com/jfe/form/SV_6DzjvsCOXjto8R0 For more information about the study: https://blog.apnic.net/2024/07/16/a-comprehensive-review-of-rir-policies-in… We would be grateful if you could take a few minutes to complete the survey. Your participation will help develop solutions for network operators. Thank you for your time and your input, Nachiket Kondhalkar TU Delft

1 0

nz DNSSEC KSK rollover - Standby Chain
by Josh Simpson 07 Jul '24

07 Jul '24

Kia ora koutou, InternetNZ is beginning its return to routine DNSSEC operations. Starting on 15-07-2024, we will begin our improved process, which incorporates changes from internal and external reviews following the DNSSEC incident in May 2023. This will consist of four short maintenance windows, in which we will pause zone distribution to make changes, perform validation, and resume zone distribution. The status and scheduling will be posted to status.internetnz.nz. To be notified, subscribe to IRS Production > Zone Publish Window 1 We will change the DS TTL in DNSSEC policy for the standby chain of second level domains. This change addresses the issues encountered in May 2023. Window 2 We will perform a KSK rollover on the standby DNSSEC chain for nz, ac.nz, co.nz, net.nz, gen.nz, org.nz, govt.nz, parliament.nz, geek.nz, school.nz, kiwi.nz, iwi.nz, maori.nz, cri.nz, health.nz, and mil.nz This will generate new DNSSEC keys and add them to the standby signing chain. Window 3 We will mark the keys generated in window 2 as active in the standby DNSSEC chain. Window 4 Window 4 will occur after the TTL safety period (2xTLL, 2 Days) has lapsed and DNSSEC RRSET validation is possible via both the old keys and new keys. The DNSSEC policies updated in Window 1 with the correct TTL timing will be enforced, this will result in the safe retirement of the old keys and allow us to remove redundant keys from the zones. The current standby chain key tags for each zone are as follows: nz: 49157, ac.nz: 5938, co.nz: 59176, cri.nz: 19190, geek.nz: 7171, gen.nz: 48574, govt.nz: 18181, health.nz: 33694, iwi.nz: 58454, kiwi.nz: 47464, maori.nz: 21689, mil.nz: 43906, net.nz: 25105, org.nz: 24626, parliament.nz: 49424, school.nz: 27382 We would like to emphasise that if you encounter any DNSSEC issues, please report them to us via registry(a)internetnz.net.nz. We will keep you updated, and provide a summary report at the conclusion of incident-related work. Ngā mihi Josh -- Josh Simpson Product Infrastructure Lead InternetNZ | Ipurangi Aotearoa www.internetnz.nz

1 0