- NZNOG - lists.nznog.org

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 04 May '26

04 May '26

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our *current* standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/2f6mf7q6nh1w For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 11 Mar '26

11 Mar '26

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our *current* standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/k9w616p9fjlf For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

Conference Updates
by Richard Nelson 04 Mar '26

04 Mar '26

* This year is now the most popular NZNOG conference by far. Previously the largest NZNOG was 199 conference registrations (2025). This year we already have 236. Registrations are currently capped at 250 but we are talking to the venue and may raise this slightly. * The 30 years of RADIUS in 3 hours presentation on Wednesday had sold out. We have changed the room and been able to add a few more spaces. * A second JetEX Flight Sim - Post NZNOG event has been added since the first one had sold out. * All but two of the talk descriptions are now on the website. Talk submissions have been well ahead of previous years. See https://www.nznog.org/conferences/nznog-2026/talks Richard Nelson, for NZNOG Trust

1 0

Fwd: [dns-operations] OARC 46 Call for Contributions
by Felipe Barbosa 22 Feb '26

22 Feb '26

Forwarding on behalf of OARC. -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580 ---------- Forwarded message --------- From: Cathy Almond <cathya(a)isc.org> Date: Fri, Feb 20, 2026 at 3:31 PM Subject: [dns-operations] OARC 46 Call for Contributions To: <dns-operations(a)lists.dns-oarc.net> This workshop will be a hybrid event. Date - 16-17 May 2026 Location - Edinburgh, Scotland Times - approximately 09:00-16:00 UTC (Local time BST is UTC +1 ) Adjacent to - RIPE 92 (18 - 22 May 2026, https://ripe92.ripe.net/) Deadline for Submissions - 2026-03-06 23:59 UTC https://indico.dns-oarc.net/event/56/abstracts/ All DNS-related subjects and discussion topics are welcome although we're particularly keen to hear more about operational and security related experiences, best practices and practical advice; both for newcomers to the DNS arena and those who have been around for longer who want to learn more about new features and opportunities to improve resilience, security and privacy. (These topics we think will complement the usual high-quality data-based research submissions we always hope to receive!) If you have something interesting to share with the community that lies outside of the focus above, please don't be put off - if it's good, we'll be happy to include it. If you'd like to offer a talk, but are not quite sure what to pick, here's a non-exhaustive list of ideas: 1. Operations & Deployment - Configuration management, deployment processes, and interoperability experiences. - Tools, tips, and making effective use of DNS software features. 2. Performance, Resilience & Scaling - Provisioning, load-balancing, and planning for resilience. - DNS performance management, efficiency improvements, and metrics. - Monitoring infrastructure: log pipelines, analytics, and anomaly detection. 3. Security, Privacy & Policy - DoS attacks, DNS abuse, DNSSEC signing and validation. - Privacy considerations, for example: encrypted transport, qname minimization, data anonymization. - Relevant global and regional policies, legislation, and compliance. 4. Research & Innovation - Data-driven testing, measurement, and analysis. - New protocols, protocol extensions, and next-generation namespace management. 5. Lessons & Learnings - Outage experiences, recovery stories, and cautionary tales For further details please see https://www.dns-oarc.net/oarc46 Cathy Almond, for the DNS-OARC Programme Committee _______________________________________________ dns-operations mailing list dns-operations(a)lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations

1 0

West Auckland fibre outage
by Paul Adshead 20 Feb '26

20 Feb '26

Does anyone have any insights into the huge West Auckland fibre outage? Area concerned, appears to be: Te Atatu - Piha - Helensville. Indicative fix time of 24h, means something substantial happened. Paul Adshead

2 1

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 18 Feb '26

18 Feb '26

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/dj76bh55sq04 For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

NZNOG 2026 registration now open
by NZNOG 28 Jan '26

28 Jan '26

NZNOG 2026 registration is now open. We have some great tutorials this year - BGP operations by Philip Smith from NSRC, RADIUS by Alan DeKok, and Containerlabs by the Nokia folks. Last year we did a social thing on the Friday which we are repeating with a couple of options. We recommend getting accomodation sorted soon - as Christchurch can fill up suddenly. We have had some great talks proposed so far which will be going up on the talks page soon, and are keen for more. If you've done an interesting project, had an interesting fault, or have some ideas you want to share, please submit! Don't just leave the talks to the "big" operators and vendors, we are keen to hear from everyone. Info for all of the above is on the website. Registration: https://nznog-2026.lilregie.com/ Conference website: https://www.nznog.org/conferences/nznog-2026 -- Nathan Ward on behalf of the NZNOG team

1 0

InternetNZ .nz DNSSEC KSK Standby Chain Rollover
by Felipe Barbosa 11 Dec '25

11 Dec '25

InternetNZ will begin a DNSSEC Key Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of three maintenance windows. In each window, we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first maintenance window will be: https://status.internetnz.nz/incidents/0rf46mdh9tdv For questions or issues, please contact registry(a)internetnz.net.nz. For updates, please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 2

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 30 Nov '25

30 Nov '25

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/6yjnwkgnnkvf For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

Minimizing the BGP Flap Storm risk in NZ ... can I ask a favor?
by Barry Greene 10 Nov '25

10 Nov '25

Hi Team, Some know me, some don’t. I’m asking as someone who has been around BGP security/resiliency for a while. We have a risk in the industry that we can all prevent - by deploying the BGP session security tools whenever we configure BGP sessions. Our Problem: We have ~274,000 BGP sessions open to anyone in the world who wishes to initiate a low-level DDoS attack to disrupt the BGP session. New Zealand currently has ~470 open BGP sessions. The Risk: A BGP Session knockdown risk model exists that can target an organization, an ISP, a whole country, or the entire Internet. Is this a serious risk? About a year ago, I conducted a Shadowserver Ops review with one of the major US broadband companies. I shared with my peers working there that they had ~60 BGP IPv6 sessions open to the risk (no iACLs, no ACL on the device, no control plane protection, no GTSM, etc). They have been part of tabletop exercises where “BGP Flap Storm” was used as one of the plays. Once informed, they resolved the issue within 40 minutes through an emergency ACL deployment. The ask: Deploy the basics of BGP Session Security on all your existing BGP Sessions. Talk to your peers on the other side of the BGP session to fix their BGP Session security (remember, BGP session re-establishment could happen from either side). Update your processes, procedures, and SCRIPTs to include BGP Session security (one of my theories is that people are using scripts to deploy that are not complete). If you need a complete breakdown of which routers on your network have their BGP session open, take the simple route and sign up for the Daily Shadowserver reports on your network. They are free for you. I’ve locked down many ISPs’ security risks just by using the Shadowserver reports. Just go to this link to subscribe: https://www.shadowserver.org/what-we-do/network-reporting/get-reports/ Sincerely, Barry Greene Old Security Geek WhatsApp/Signal +1 408 218 4669. PS - I’m asking this just in New Zealand right now because I live here (now) and wondering if we could knock out this risk …. Or is the potential of a BGP Flap Storm knocking out Telecom something we have to just live with? Resources to Review Shadowserver Dashboard Global https://dashboard.shadowserver.org/statistics/combined/time-series/?date_ra… Shodan Global BGP Dashboard https://www.shodan.io/search/report?query=product%3Abgp+port%3A%22179%22&ti… Advisory to FIRST Community - BGP Port 179 DDoS Risk Or How to cause unprecedented global chaos this week. https://docs.google.com/document/d/1oDD5-qlu0rlHUtjNZHKrfdug99ynSXHc2v dHPktTFH4/edit?usp=sharing Protecting BGP Sessions - Step-by-Step Guide to Prevent an Easy DDoS https://docs.google.com/document/d/13GoLbWmeypFerOJCh5Dp4-KcMu4BArXJP33PfYJ… Shadowserver Report: HIGH: Open BGP Service Report https://www.shadowserver.org/what-we-do/network-reporting/open-bgp-service-… Shadowserver Report: MEDIUM: Accessible BGP Service Report https://www.shadowserver.org/what-we-do/network-reporting/accessible-bgp-se…

1 0

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 09 Nov '25

09 Nov '25

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/gb1hdqdfh9jn For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

NZNOG2026 - Call for Presentations
by Richard Nelson 04 Nov '25

04 Nov '25

Here is the official call for presentations for next year's conference. This year we will be accepting in batches on an ongoing basis. This call will probably be repeated in the New Year to help get any extra presentations we need. Richard ** *NZNOG 2026 Call for Presentations* * The NZNOG Trustees invite presentation proposals for the 23rd NZNOG conference, to be hosted at the Te Pae Christchurch Convention Centre from 23–27 March 2026. Conference objective: The NZNOG conference, workshops and tutorials are an opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies, practices and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submissions on any aspect of networking are welcome however we are particularly interested in presentations that involve real world operational experience, particularly in New Zealand. Conference registration for accepted presenters will be free. Submit a proposal: Presenters are invited to submit presentation proposals. Talks will be reviewed and accepted (or rejected) as they are received. Often we will have a discussion with a potential presenter to refine the proposed content and ensure it is appropriate for our audience. We are also happy to have a chat about your idea before you make a proposal. Please provide your talk title, a short presenter bio and a description of the proposed presentation. Description should be no more than one page long and provide a summary of your networking related subject matter. Normally presentations are 30 min long, are video streamed live and slide decks are posted to the NZNOG website. If you want a different duration or other arrangements please let us know at submission time. To submit your proposal please e-mail: talks(a)nznog.org <mailto:talks@nznog.org> www.nznog.org *

1 0

APRICOT 2026: Call for Papers
by Mark 25 Sep '25

25 Sep '25

Hello NZNOG, The APRICOT 2026 Program Committee chairs are pleased to announce that the Call for Papers (CfP) has been published at the below URL: https://2026.apricot.net/programme/callforpresentations We look forward to receiving your submissions, noting that the APRICOT 2026 conference in Jakarta, Indonesia will be held one month earlier than is usually the case; 9th - 11th February, 2026. The sooner you can submit your presentation, the greater the chance it could make the final agenda. Any questions regarding the CfP please feel free to reach out to the PC team. Thank you. Mark Tinka, Mark Duffell & Achie Atienza APRICOT 2026 Programme Committee Chairs

1 0

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 09 Sep '25

09 Sep '25

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/mhsdtlp1s1nj For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

Spoofer Report for NZNOG for Aug 2025
by CAIDA Spoofer Project 08 Sep '25

08 Sep '25

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Aug 2025: none inferred Source Address Validation issues inferred during Aug 2025: ASN Name First-Spoofed Last-Spoofed 45177 DEVOLI 2025-08-23 2025-08-23 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

📢 Announcing: NZNOG 2026 in Christchurch!
by Richard Nelson 01 Sep '25

01 Sep '25

I'm very happy to announce that NZNOG 2026 will be held at Te Pae Christchurch Convention Centre from 23–27 March 2026. ✨ Format: Workshops & Tutorials: Monday 23 – Wednesday 25 March Conference Days: Thursday 26 & Friday 27 March Conference Dinner: Thursday night at the Air Force Museum of NZ, Wigram 🛏️ Accommodation options are listed here: https://www.nznog.org/conferences/nznog-2026/accommodation 🔧 Workshops & Tutorials – Call for ideas We’re looking for leaders to run 1-day or 3-day workshops. Got a topic in mind you’d love to see covered? Let us know — we may be able to match it with the right presenter. 💡 Sponsorship Our sponsorship prospectus will be sent out shortly. If your company hasn’t sponsored before and would like to be part of NZNOG 2026, email sponsorship(a)nznog.org for details. 🎤 Call for Presentations Coming soon! ✅ Registration will open once the workshop/tutorial programme is confirmed. We can’t wait to see you in Christchurch - Richard, on behalf of the NZNOG Trust

1 0

APRICOT 2026: Call for Volunteers (Programme Committee)
by Mark 31 Aug '25

31 Aug '25

Hi all, The APRICOT 2026 Organising Committee would like to welcome everyone to join us in Jakarta, Indonesia, from 5th - 12th February 2026. The APRICOT 2026 PC (Programme Committee) is responsible for the solicitation and selection of suitable presentations and tutorial content for the APRICOT 2026 conference (https://2026.apricot.net/) We are now seeking VOLUNTEERS from the community to join the APRICOT 2026 PC to assist with the development of the programme for APRICOT 2026. Eligible PC candidates must have attended recent APRICOT events, be active members of their local NOG (Network Operators Group) in the Asia Pacific region, have broad technical knowledge of Internet operations, and have good familiarity with the format of APRICOT. Having constructive opinions and ideas about how the programme content might be improved is of high value too. PC members are expected to work very actively to solicit content, follow-through with speaker updates and review submissions for technical merit. The PC meets by conference call, weekly in frequency during the three months prior to APRICOT. While participation in the weekly calls is not obligatory, active participation in content reviews is required at all times to help the PC reach consensus. PC members who are unable to fully participate in the programme development will be excused from the PC. If you are interested in joining the PC and meet the above eligibility criteria, please send a brief note to "pc-chairs at apricot.net". The note must include affiliation (if any) and a brief description about why you would make a good addition to the PC. The PC Chairs will accept nominations received by 17:00hrs UTC+8 on Sunday 7th September 2025, and will announce the new PC shortly thereafter. Many thanks! Mark Tinka, Achie Atienza & Mark Duffell APRICOT 2026 Programme Committee Chairs

1 0

InternetNZ .nz DNSSEC KSK Standby Chain Rollover
by Felipe Barbosa 06 Aug '25

06 Aug '25

InternetNZ will begin a DNSSEC Key Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of three maintenance windows. In each window, we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first maintenance window will be: https://status.internetnz.nz/incidents/668s3pjy9zpv For questions or issues, please contact registry(a)internetnz.net.nz. For updates, please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 2

OARC 45 Call for Contributions - CfP closes next Tuesday!
by Felipe Barbosa 27 Jul '25

27 Jul '25

Forwarding on behalf of OARC: ⏰ Only a few days left... What could you be doing this weekend? The Call for Presentations for OARC45 closes on July 29, 2025 at 23:59 UTC. All DNS-related subjects and discussion topics are encouraged, now’s the time to submit your proposal. Don't miss your chance to be part of the agenda in Stockholm. https://www.dns-oarc.net/oarc45 Hope to see you there! -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 0

Spoofer Report for NZNOG for Jun 2025
by CAIDA Spoofer Project 08 Jul '25

08 Jul '25

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Jun 2025: none inferred Source Address Validation issues inferred during Jun 2025: ASN Name First-Spoofed Last-Spoofed 9500 VODAFONE-TRANSIT 2025-03-19 2025-06-19 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Spoofer Report for NZNOG for May 2025
by CAIDA Spoofer Project 08 Jun '25

08 Jun '25

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during May 2025: none inferred Source Address Validation issues inferred during May 2025: ASN Name First-Spoofed Last-Spoofed 9500 VODAFONE-TRANSIT 2025-03-19 2025-05-29 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 05 Jun '25

05 Jun '25

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/dgmt15cqy4r7 For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

Call for Papers - APNIC 60
by Christopher Hawker 31 May '25

31 May '25

Hello everyone, The APNIC 60 Program Committee (PC) is seeking presentations for the APNIC 60 conference in Da Nang, Viet Nam. The three conference days will be held from 9 to 11 September 2025. We are looking for content that would suit technical sessions, tutorials, lightning talks, BoFs and panel discussions. APNIC 60 conference registration is free for selected speakers. Topics for conference sessions must be relevant to Internet operations and technologies. The following topics are examples of possible areas of interest. * IP core network routing, switching * IPv6 deployment and transition technologies * Access and transport networks including Cable/DSL, LTE/5G/6G, wireless, metro ethernet, fibre, segment routing * Cyber security, network security issues (NSP-SEC, DDoS, Anti-Spam, Anti-Malware) and BCPs * Software defined networking, network function virtualization and network automation * Content & service delivery (Multicast, Voice, Video, Telepresence, Gaming) and cloud computing * DNS / DNSSEC and RPKI * IXPs and Peering * Internet of Things (IoT) architectures, standards, services, security, addressability, and manageability * Smart Cities architecture, security, and addressing * Research on Internet operations and deployment * Quantum computing * AI in network operations Presentations are expected to last 20 minutes, and tutorials are expected to last 90 minutes. It's acceptable to submit a talk you've already given or have submitted to another conference. If you would like to submit a presentation, head over to https://submission.apnic.net/user/login.php?event=222. The final deadline for submissions is Monday 30 June 2025. More information can be found on https://conference.apnic.net/60/program/callforpresentations/index.html. If you have any questions or concerns, please do feel free to send an email to the Program Committee at apnic-pc(a)apnic.net<mailto:apnic-pc@apnic.net>. ----- Regards, Christopher Hawker On behalf of the APNIC 60 Program Committee

1 0

Spoofer Report for NZNOG for Apr 2025
by CAIDA Spoofer Project 08 May '25

08 May '25

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Apr 2025: none inferred Source Address Validation issues inferred during Apr 2025: ASN Name First-Spoofed Last-Spoofed 9500 VODAFONE-TRANSIT 2025-03-19 2025-04-29 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Fwd: [dns-operations] OARC 45 Call for Contributions
by Felipe Barbosa 30 Apr '25

30 Apr '25

Forwarding on behalf of OARC. -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580 ---------- Forwarded message --------- From: Cathy Almond <cathya(a)isc.org> Date: Wed, Apr 30, 2025 at 1:45 PM Subject: [dns-operations] OARC 45 Call for Contributions To: <dns-operations(a)lists.dns-oarc.net> The OARC 45 workshop Call for Contributions is now open! This workshop will be a hybrid event. Date - 7-8 October 2025 Location - Stockholm, Sweden Time - Approx 10:00 CEST (08:00 UTC) - 17:00 CEST (15:00 UTC) Adjacent to Netnod Tech Meeting 2025 (9 October 2025) (https://www.netnod.se/netnod-tech-meeting-2025) Deadline for Submissions - 2025-07-29 23:59 UTC https://indico.dns-oarc.net/event/55/abstracts/ All DNS-related subjects and discussion topics are welcome although we're particularly keen to hear more about operational and security related experiences, best practices and practical advice; both for newcomers to the DNS arena and those who have been around for longer who want to learn more about new features and opportunities to improve resilience, security and privacy. (These topics we think will complement the usual high-quality data-based research submissions we always hope to receive!) If you have something interesting to share with the community that lies outside of the focus above, please don't be put off - if it's good, we'll be happy to include it. If you'd like to offer a talk, but are not quite sure what to pick, here's a non-exhaustive list of ideas: 1. Operations & Deployment Configuration management, deployment processes, and interoperability experiences. Tools, tips, and making effective use of DNS software features. 2. Performance, Resilience & Scaling Provisioning, load-balancing, and planning for resilience. DNS performance management, efficiency improvements, and metrics. Monitoring infrastructure: log pipelines, analytics, and anomaly detection. 3. Security, Privacy & Policy DoS attacks, DNS abuse, DNSSEC signing and validation. Privacy considerations, for example: encrypted transport, qname minimization, data anonymization. Relevant global and regional policies, legislation, and compliance. 4. Research & Innovation Data-driven testing, measurement, and analysis. New protocols, protocol extensions, and next-generation namespace management. 5. Lessons & Learnings Outage experiences, recovery stories, and cautionary tales For further details please see https://www.dns-oarc.net/oarc45 Cathy Almond, for the DNS-OARC Programme Committee _______________________________________________ dns-operations mailing list dns-operations(a)lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations

1 0

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 27 Apr '25

27 Apr '25

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/wh80pfs8w3z2 For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

Conference Programme and Lightning talks
by Richard Nelson 08 Apr '25

08 Apr '25

The conference starts tomorrow. The programme is at https://www.nznog.org/conferences/nznog-2025/programme There is a lightning talks session again so we will be looking for anyone with a quick five to ten minute presentation/talk/rant they would like to give in that session. If that is you, please email talks(a)nznog.org.

1 0

Fwd: [ih] In loving memory of (Mr. Bufferbloat) Dave Täht <3
by Brian E Carpenter 02 Apr '25

02 Apr '25

I think some people here will remember Dave. He was a powerhouse. Brian -------- Forwarded Message -------- Subject: [ih] In loving memory of (Mr. Bufferbloat) Dave Täht <3 Date: Tue, 1 Apr 2025 10:47:51 -0700 From: the keyboard of geoff goodfellow via Internet-history <internet-history(a)elists.isoc.org> Reply-To: the keyboard of geoff goodfellow <geoff(a)iconia.com> To: Internet-history <internet-history(a)elists.isoc.org> ---------- Forwarded message --------- From: Frantisek Borsik <frantisek.borsik(a)gmail.com> Date: Tue, Apr 1, 2025 at 7:27 PM Subject: In loving memory of Dave Täht <3 Hello to all, We’re devastated to announce that Dave Täht has passed away. <https://libreqos.io/2025/04/01/in-loving-memory-of-dave/> Dave was an amazing man, helping the world with FQ-CoDel and CAKE, fighting bufferbloat and trying to make the world a better place. Always willing to help, and without him – LibreQoS (and the other QoE solutions out there) wouldn’t exist. Dave was an inspiration, and we all miss him. We’re reaching out to family and close friends to see if there’s anything we can do to help. Dave was an inspiration to us. Dave’s contributions to Linux, FQ-CoDel, and CAKE improved internet connectivity around the world for millions of people. Because of him, millions of people now have access to reliable video calls – and in turn, access to loved ones, healthcare, and community. One of Robert’s ISP customers is a kind paraplegic woman who lives in a far-flung rural Colonia around El Paso, Texas. Her reliable access to her doctors through telemedicine, and to her family through FaceTime, was only made possible because of his algorithms. There are millions of cases like hers, where Dave’s contributions have silently enabled human connection and safety. Everything Dave contributed to the world of technology was free and open source, for the betterment of humanity. Dave is the reason that Starlink was able to tackle its latency issues – enabling a generation of young entrepreneurs across the developing world, such as these young folks pictured in the Phillipines, to start their own ISPs to expand internet access to their communities. Dave started work on FQ-CoDel in part because of his own journey working to expand internet access in Nicaragua, so we know he saw that his work had come full-circle and helped so many. We’re incredibly grateful to have Dave as our friend, mentor, and as someone who continuously inspired us – showing us that we could do better for each other in the world, and leverage technology to make that happen. He will be dearly missed. *PS: *Dave is forever in our hearts and souls, in our routers and...in production! *https://github.com/LibreQoE/LibreQoS/pull/684 <https://github.com/LibreQoE/LibreQoS/pull/684>* All the best, Frank Frantisek (Frank) Borsik https://www.linkedin.com/in/frantisekborsik Signal, Telegram, WhatsApp: +421919416714 iMessage, mobile: +420775230885 Skype: casioa5302ca frantisek.borsik(a)gmail.com -- Geoff.Goodfellow(a)iconia.com living as The Truth is True -- Internet-history mailing list Internet-history(a)elists.isoc.org https://elists.isoc.org/mailman/listinfo/internet-history

2 1

AusNOG 2025 - Call For Papers is open!
by Mark 02 Apr '25

02 Apr '25

Hello! AusNOG 2025 Call For Papers is now open! We are looking for presentations that an audience working predominantly in the network operating space will find interesting and useful. As always, we do not accept marketing or sales material as part of any presentation. The CFP will close on May 30th 2025. This allows time for the Program Committee to review papers and choose the program. Please express your interest and submit a short abstract of the topic you'd like to present, via our portal; https://cfp.ausnog.net/ausnog-2025/ Thank you, and see you in Melbourne, for AusNOG September 2025! Event dates and details here; https://www.ausnog.net/ Regards, Mark Duffell on behalf of the AusNOG PC (Jocelyn, Joe, Phil, James & Michael)

1 0

DNSSEC Root Key Signing Key (KSK) for the Domain Name System
by Christopher Hawker 27 Mar '25

27 Mar '25

Hello Everyone, As many of you may know, one of the functions of the Internet Assigned Numbers Authority (IANA) is the global coordination of the DNS Root Zone. One of the core components to DNS is DNSSEC. The Root Key Signing Key (KSK) acts as the trust anchor for DNSSEC for the Domain Name System, and this trust anchor is configured in DNSSEC-aware resolvers to facilitate validation of DNS data. This is how your DNS servers are able to cryptographically validate the authenticity of DNS records they receive and serve. For more information pertaining to DNSSEC, how it operates, the KSK and the relevant policies and procedures, I recommend visiting https://www.iana.org/dnssec for more info. In order to ensure the security of the KSK, IANA utilises Hardware Security Modules (HSM) to generate the KSK pair of public and private keys, which in turn are used to sign the Zone Signing Key (ZSK), that itself is used to sign DNS records (RRsets) within a DNS zone. As it currently stands, both of these HSMs currently reside in high-security Key Management Facilities (KMFs) in the USA, with one facility located in Culpeper VA, and the other in El Segundo CA. Now, while the locations of these HSMs are highly secure, both of them are located on US soil. As most people who are familiar with redundancy, this is not a good idea for a number of reasons (which I won't go into detail here as it's outside the scope of this email). What we as a community MUST DO, is look at the relocation of one of these HSMs to an alternate country such as Singapore or Switzerland (regarded as two safe countries) to ensure the continued integrity of the Root KSK. Unfortunately, section 4.2(b) of the IANA Naming Function Contract (https://pti.cdn.icann.org/resources/151/IANA_Naming_Function_Contract.pdf) between the Internet Corporation for Assigned Names and Numbers (ICANN) and Public Technical Identifiers (PTI) that govern how IANA performs its functions prohibits the operation of functions outside of the US. Given that the Internet is one of the most critical pieces of global (and not just US-based) infrastructure, I feel that this section of the contract must be reviewed (and deleted or modified to allow for PTI to perform the functions from Singapore, Switzerland or another safe jurisdiction) to maintain the integrity of the Domain Name System. The Second IANA Naming Function Review Team (IFRT2) have released an initial draft report of its analysis, issues and recommendations which also incorporates a review of the Contract between ICANN and PTI. The IFRT2 have opened a public call for comments on the draft report, before they submit their Final Report to ICANN's Board of Directors which they expect to do before June this year. The Public Comment period closes for submissions on 28 April 2025 at 23:59hrs UTC, and I strongly encourage everyone to read the report and provide input regarding support to relocating one of the Key Management Facilities across the Pacific or Atlantic Oceans. To view the report and submit a comment, please go to https://www.icann.org/en/public-comment/proceeding/second-iana-naming-funct…. In order to submit a comment on the report, you will need an account on https://account.icann.org/. In closing, I cannot stress one thing enough - this is in no way speaks to the professionalism of ICANN's staff. The team at ICANN perform some of the hardest work out there, ensuring the integrity and stability of the Internet as we know it today and for that they cannot be thanked enough. This recommendation to move one of the KMFs overseas is simply to help protect it from potential political instability, bias, and to encourage neutralism. We're already doing it with the operation of the DNS Root Zone, let's take it one step further and strengthen the security of DNSSEC and the Root KSK. If you have any questions, please do feel free to ask, either on-list or off-list. Regards, Christopher Hawker

1 0

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 10 Mar '25

10 Mar '25

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/x98psycvxphw For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

Internet pioneer David Dix has passd away
by Richard Haakma 25 Feb '25

25 Feb '25

Hi all. New Zealand Internet pioneer David Dix has passed away today, the 22nd of February 2025. David was the founder and owner of the KCBBS bulletin board system and KC Internet Company in the late 1980s. KC stands for Kappa Crucis, which is the tenth brightest object in the Southern Cross constellation, actually a star cluster also called the "Jewel Box" and came from David's other hobby, astronomy. David was involved with the Auckland Observatory and could get you a good deal on a telescope. KCBBS was built on 386BSD Unix which was a natural choice as the Unix operating system already had drivers for serial ports and multitasking which meant that it could support more than one user simultaneously. This was at a time when conventional BBS's running on MS-DOS supported one user only. Later the BBS was upgraded to a Sun workstation running SunOS. David wrote the BBS code himself in the C computer language. Unfortunately I believe the code was lost some years ago. The early Internet came to New Zealand via Waikato University and made its way to Auckland University, where KC first got a connection at 2400 bps. This was soon upgraded to 9600bps when David and friends discovered how to modify an asynchronous PC serial port to work on a synchronous data circuit. Curious KCBBS users could start to use email, but this was before hypertext and HTTP websites came in to use. Upgrades in speed and the change to actual router hardware, which was DEC hardware using licensed Cisco firmware, meant that the costs were growing. KC Internet was started to provide internet access to a few of David's mates in tech businesses for a fee to cover the budget. More customers were found and KC Internet became a commercial internet provider. Users of the KCBBS BBS program continued to use it for free. KC dropped the connection to Auckland University and became directly connected to Waikato University. When the universities wanted to get out of the chain of commercial internet activity the international service was handed over to a branch of Telecom and KC Internet became a customer of Telecom. David became interested in solar and wind power so installed a wind turbine and solar system which was large enough to run the ISP equipment 24/7 and no mains power. For a time KC Internet was the greenest ISP in New Zealand. The mains power would go off all up and down the street and David's place still had the lights on, making his neighbours curious. This was around the time of the great electricity crisis of Auckland CBD and KC internet was not affected. Getting data services installed to David's suburban basement became a problem and the core was moved to the CBD and away from the solar system, which meant that KC Internet was no longer the greenest ISP. Eventually health problems meant that David needed to step back from KC Internet and David had a quieter life and continued to benefit from that solar power system at home which is still working now. David passed away comfortably in North Shore Hospital. Regards, RH.

4 3

Re: Internet pioneer David Dix has passd away
by Richard Haakma 25 Feb '25

25 Feb '25

Hi. David's ashes will be scattered at Eucalyptus Grove Waikumete Cemetery at 11am 27 February, which is tomorrow. Regards, RH. On Tue, 2025-02-25 at 12:41 +0000, Stephen wrote: > Hi Richard, > > My condolences, is there a service planned? > > I did not know David personally, but have known of him for nearly 30 > years now. > > Thanks > > Stephen > > > On Saturday, February 22nd, 2025 at 6:58 PM, Richard Haakma via NZNOG > <nznog(a)lists.nznog.org> wrote: > > > > > > > Hi all. > > > > New Zealand Internet pioneer David Dix has passed away today, the > > 22nd > > of February 2025. > > > > David was the founder and owner of the KCBBS bulletin board system > > and > > KC Internet Company in the late 1980s. > > > > KC stands for Kappa Crucis, which is the tenth brightest object in > > the > > Southern Cross constellation, actually a star cluster also called > > the > > "Jewel Box" and came from David's other hobby, astronomy. David was > > involved with the Auckland Observatory and could get you a good > > deal on > > a telescope. > > > > KCBBS was built on 386BSD Unix which was a natural choice as the > > Unix > > operating system already had drivers for serial ports and > > multitasking > > which meant that it could support more than one user > > simultaneously. > > This was at a time when conventional BBS's running on MS-DOS > > supported > > one user only. Later the BBS was upgraded to a Sun workstation > > running > > SunOS. > > > > David wrote the BBS code himself in the C computer language. > > Unfortunately I believe the code was lost some years ago. > > > > The early Internet came to New Zealand via Waikato University and > > made > > its way to Auckland University, where KC first got a connection at > > 2400 > > bps. This was soon upgraded to 9600bps when David and friends > > discovered how to modify an asynchronous PC serial port to work on > > a > > synchronous data circuit. > > > > Curious KCBBS users could start to use email, but this was before > > hypertext and HTTP websites came in to use. > > Upgrades in speed and the change to actual router hardware, which > > was > > DEC hardware using licensed Cisco firmware, meant that the costs > > were > > growing. KC Internet was started to provide internet access to a > > few of > > David's mates in tech businesses for a fee to cover the budget. > > More > > customers were found and KC Internet became a commercial internet > > provider. > > > > Users of the KCBBS BBS program continued to use it for free. > > KC dropped the connection to Auckland University and became > > directly > > connected to Waikato University. When the universities wanted to > > get > > out of the chain of commercial internet activity the international > > service was handed over to a branch of Telecom and KC Internet > > became a > > customer of Telecom. > > > > David became interested in solar and wind power so installed a wind > > turbine and solar system which was large enough to run the ISP > > equipment 24/7 and no mains power. For a time KC Internet was the > > greenest ISP in New Zealand. The mains power would go off all up > > and > > down the street and David's place still had the lights on, making > > his > > neighbours curious. This was around the time of the great > > electricity > > crisis of Auckland CBD and KC internet was not affected. > > > > Getting data services installed to David's suburban basement became > > a > > problem and the core was moved to the CBD and away from the solar > > system, which meant that KC Internet was no longer the greenest > > ISP. > > > > Eventually health problems meant that David needed to step back > > from KC > > Internet and David had a quieter life and continued to benefit from > > that solar power system at home which is still working now. > > > > David passed away comfortably in North Shore Hospital. > > > > Regards, > > RH. > > > > _______________________________________________ > > NZNOG mailing list -- nznog(a)lists.nznog.org > > To unsubscribe send an email to nznog-leave(a)lists.nznog.org

1 0

NZNOG 2025 Registration and CFP
by Richard Nelson 24 Feb '25

24 Feb '25

Registration is now open for NZNOG2025 at https://nznog-2025.lilregie.com/booking/attendees/new. Also, remember the CFP is open. Thanks to those who submitted papers already but we definitely need more. https://www.nznog.org/conferences/nznog-2025/call-for-papers Richard

1 0

NZNOG Conference Call for Presentations
by Richard Nelson 09 Feb '25

09 Feb '25

** *NZNOG 2025 Call for Presentations* * The NZNOG Trustees invite presentation proposals for the 22nd NZNOG conference, to be hosted at the Napier War Memorial Centre on April 10 and 11, 2024. Conference objective: The NZNOG conference, workshops and tutorials are an opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies, practices and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submissions on any aspect of networking are welcome however we are particularly interested in presentations that involve real world operational experience, particularly in New Zealand. Conference registration for accepted presenters will be free. Submit a proposal: Presenters are invited to submit presentation proposals for consideration by 10 March, 2025. Talks maybe accepted as they are received. Please provide your talk title, a short presenter bio and a description of the proposed presentation. Description should be no more than one page long and provide a summary of your networking related subject matter. Normally presentations are 30 min long, are video streamed live and slide decks are posted to the NZNOG website. If you want a different duration or other arrangements please let us know at submission time. To submit your proposal please e-mail: talks(a)nznog.org <mailto:talks@nznog.org> If you have any ideas that you would like to discuss informally first, we are happy to have a discussion. www.nznog.org *

1 0

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 28 Jan '25

28 Jan '25

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/185cfqrcq00m For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

InternetNZ - DNSSEC NSEC3PARAM Change
by Felipe Barbosa 10 Jan '25

10 Jan '25

InternetNZ will change some NSEC3 parameters in the current standby chain. To be explicit, we will change two parameters, <Iterations> and <Salt length>, both to zero(0). These changes will be reflected in all our 16 zones. The status and scheduling will be posted to status.internetnz.nz. We will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz and school.nz The change window is on the following link: https://status.internetnz.nz/incidents/yvwv7sm636gf For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

InternetNZ - DNSSEC DS-SHA-1 Removal
by Felipe Barbosa 09 Jan '25

09 Jan '25

InternetNZ will remove the DS records with digest SHA-1 in our second-level zones in the current standby chain. To be explicit, we will remove SHA-1 DS records belongs our 15 domains: ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz and school.nz In total, 15 DS records will be removed. The status and scheduling will be posted to status.internetnz.nz. We will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz and school.nz The change window is on the following link: https://status.internetnz.nz/incidents/d0cpttn2htns For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

Do you need a satellite?
by Jonathan Brewer 17 Dec '24

17 Dec '24

Tēnā koutou, Are you in need of a satellite? If so I have a deal for you.* You may have bent my ear in Rotorua asking about creative and innovative options for a few tens of gigabits of dedicated capacity, priced in the high tens to low hundreds of millions of dollars. As we know, this is enough to be useful in times of earthquake or anchor-dragging accident. At the time of our conversation I had no real options. Times have changed! Please do reach out - this email or a call or text is fine. Ngā mihi nui, Jon * Space lasers not included

1 0

NZNOG 2025 Update
by Richard Nelson 15 Dec '24

15 Dec '24

** *Hopefully you all know that NZNOG - 2025 is going to be in Napier on April 10 and 11. Since we have moved to the April time, things run a little later than they did for the conferences in January. Here’s an update about what’s going on.* * Talks: This is a heads up that we will be issuing a Call for Papers in late Jan or early Feb. Please think about the great presentations you can give over the holiday period! Feel free to reach out and discuss any ideas you have with me or the other trustees. We are always interested in good NZ stories - tell us about something you’ve done recently, whether it’s gone well, or if there are mistakes we can all learn from. Sponsorship: NZNOG relies on our fantastic sponsors. We have had great response from sponsors already, and there are still a few spots left. If any one wants to sponsor and was missed in the mail out, please contact sponsorship(a)nznog.org <mailto:sponsorship@nznog.org>. Registration / Accommodation: Registration and accommodation information will be available in the new year. Systers: For the last several years, IAA has run an event called Systers in Australia, which aims to grow participation and support women and gender diverse people in our industry. Systers is a one day workshop that provides expert career advice, and helps build important soft skills that support career advancement, and participants then attend the conference in the following days. For the first time, NZNOG has teamed up with IAA to run IAASysters NZ the day before NZNOG. We are looking for both sponsors and participants in the workshop. Sponsorship helps run the workshop, and covers costs for selected participants to attend the workshop and NZNOG. If your organisation would be interested in sponsoring, if you want to attend, or think it would be useful for someone you know, more information can be found at https://internet.asn.au/iaasysters-nz/ <https://internet.asn.au/iaasysters-nz/>. Richard for NZNOG Trustees *

1 0

list.waikato.ac.nz Has Moved
by Donald Neal 11 Dec '24

11 Dec '24

NZNOG-People, I have just finished migrating all of the mailing lists held at The University of Waikato from one server to another. I don't have any reason to believe that anything's gone wrong, but please bear with me for today if it turns out that something has. - Donald Neal -- Donald Neal | Q: How many Aucklanders does it take to change Systems Programmer/Analyst | a light bulb? The University of Waikato | A: Pass me that candle and I'll tell you. Hamilton, New Zealand | --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

InternetNZ .nz DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 25 Nov '24

25 Nov '24

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/tlq8b169727q For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 0

InternetNZ .nz DNSSEC KSK Standby Chain Rollover
by Felipe Barbosa 18 Nov '24

18 Nov '24

InternetNZ will begin a DNSSEC Key Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of three maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window will be tomorrow: https://status.internetnz.nz/incidents/10yq25ffq2z7 For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 0

BNZ Contact
by George Mitchinson 24 Oct '24

24 Oct '24

Apologies if this is not the correct forum, but if there is anyone from the BNZ team on the list could they please make contact. We have an Email issue we are trying to resolve and struggling to make contact with anyone from the BNZ to assist. Cheers, Mandos

2 2

APRICOT 2025: Call for Programme Committee Volunteers
by Mark 21 Oct '24

21 Oct '24

Hello! The APRICOT 2025 Organising Committee would like to welcome everyone to join us in Petaling Jaya, Malaysia, from 19th to 27th February 2025. The APRICOT 2025 Programme Committee is responsible for the solicitation and selection of suitable presentations and tutorial content for the APRICOT 2025 conference (https://2025.apricot.net/) We are now seeking VOLUNTEERS from the community to join the APRICOT 2025 PC to assist with the development of the programme for APRICOT 2025. Eligible PC candidates must have attended recent APRICOT events, have broad technical knowledge of Internet operations, and have good familiarity with the format of APRICOT. Having constructive opinions and ideas about how the programme content might be improved is of high value too. PC members are expected to work very actively to solicit content, follow through speaker updates and review submissions for technical merit . The PC meets by conference call, weekly in frequency during the three months prior to APRICOT. While participation in the weekly calls is not obligatory, active participation in content reviews is required at all times to help the PC reach consensus. PC members who are unable to fully participate in the programme development will be excused from the PC. If you are interested in joining the PC and meet the above eligibility criteria, please send a brief note to "pc-chairs at apricot.net". The note must include affiliation (if any) and a brief description about why you would make a good addition to the PC. The PC Chairs will accept nominations received by 17:00 UTC+8 on Sunday 27th October 2024, and will announce the new PC shortly thereafter. Many thanks! Mark Tinka, Achie Atienza & Mark Duffell APRICOT 2025 Programme Committee Chairs

1 0

InternetNZ .nz DNSSEC ZSK Standby Chain Rollover
by Josh Simpson 01 Oct '24

01 Oct '24

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our standby chain, this should not affect the active chain used in DNS resolution for .nz, the status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window will be used to add new Zone Signing Keys. https://status.internetnz.nz/incidents/xlygrzg6d3tg The second change window will be used to remove inactive Zone Signing Keys. https://status.internetnz.nz/incidents/tftwdv101sz0 For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Josh Simpson Product Infrastructure Lead InternetNZ | Ipurangi Aotearoa www.internetnz.nz

1 0

L4S
by Jay Daley 05 Sep '24

05 Sep '24

This is related to my day job at the IETF. If anyone here is considering or already implementing L4S and is willing to share their experiences for an industry briefing paper then please drop me a line. thanks Jay -- Jay Daley jay(a)daley.org.nz

1 0

Submit a paper for APIX30!
by Narelle Clark 28 Jul '24

28 Jul '24

Hi all! APIX#30 is scheduled for Tuesday 3 September 2024 and will be held alongside APNIC58 in Wellington, NZ. APIX is the Asia-Pacific Internet Exchange Association. The APIX Program Committee therefore invites presentations for the upcoming APIX#30 meeting. Suitable topics include:- * Internet Exchange ecosystem: topics related to the technical components of IXPs and their architectures * Internet Exchange operations: adopting new technology, monitoring and management of IXPs * Internet Exchange security: threats, mitigations and use cases in the IXP context * Internet Exchange growth and organisation: attracting new members, onboarding them and keeping them involved * Assessment and analysis of the impact of Internet Exchanges on the Internet ecosystem * Internet landscape generally: what big picture issues affect IXPs or their members * Data centre ecosystem: what trends are we seeing, what features and technology makes a DC a good home for an IXP? * Any other topics related to Internet and IXP operations. Presentations need to be of a practical orientation and directly assist the IXP community in establishing, running and growing IXPs. The intention is knowledge sharing and skill enhancement. Presentations aimed just at trying to sell services will not be accepted. Presentations can be in person or remote, you must tell us your preference. Hope to see you there -- Narelle Clark Chief Executive Officer Internet Association of Australia Ltd [cid:image001.png(a)01DAE1C7.1114FAA0] Suite 1.05, 150 Pacific Highway * North Sydney, NSW 2060 [Smart Phone with solid fill] +61 2 9037 6403 [Receiver outline] 1300 653 132 [Envelope with solid fill] ceo(a)internet.asn.au<mailto:ceo(a)internet.asn.au> [Earth globe: Asia and Australia with solid fill] www.internet.asn.au<http://www.internet.asn.au/> [cid:image006.jpg(a)01DAE1C7.1114FAA0]<https://internet.asn.au/events/nsw-ix-400gbps-ports/>

1 1

AS Number Management Study by TU Delft
by Nachiket Kondhalkar 18 Jul '24

18 Jul '24

Hello NZNOG community, APNIC and RIPE NCC have introduced an annual ASN maintenance fee from January 2025. As part of a research group currently studying AS Number management at TU Delft, we would like to understand the perspectives of network administrators in reference to this change. Your experience and expertise will help us understand and present the consensus of the community through our research. The link for the survey is : https://tudelft.fra1.qualtrics.com/jfe/form/SV_6DzjvsCOXjto8R0 For more information about the study: https://blog.apnic.net/2024/07/16/a-comprehensive-review-of-rir-policies-in… We would be grateful if you could take a few minutes to complete the survey. Your participation will help develop solutions for network operators. Thank you for your time and your input, Nachiket Kondhalkar TU Delft

1 0

nz DNSSEC KSK rollover - Standby Chain
by Josh Simpson 07 Jul '24

07 Jul '24

Kia ora koutou, InternetNZ is beginning its return to routine DNSSEC operations. Starting on 15-07-2024, we will begin our improved process, which incorporates changes from internal and external reviews following the DNSSEC incident in May 2023. This will consist of four short maintenance windows, in which we will pause zone distribution to make changes, perform validation, and resume zone distribution. The status and scheduling will be posted to status.internetnz.nz. To be notified, subscribe to IRS Production > Zone Publish Window 1 We will change the DS TTL in DNSSEC policy for the standby chain of second level domains. This change addresses the issues encountered in May 2023. Window 2 We will perform a KSK rollover on the standby DNSSEC chain for nz, ac.nz, co.nz, net.nz, gen.nz, org.nz, govt.nz, parliament.nz, geek.nz, school.nz, kiwi.nz, iwi.nz, maori.nz, cri.nz, health.nz, and mil.nz This will generate new DNSSEC keys and add them to the standby signing chain. Window 3 We will mark the keys generated in window 2 as active in the standby DNSSEC chain. Window 4 Window 4 will occur after the TTL safety period (2xTLL, 2 Days) has lapsed and DNSSEC RRSET validation is possible via both the old keys and new keys. The DNSSEC policies updated in Window 1 with the correct TTL timing will be enforced, this will result in the safe retirement of the old keys and allow us to remove redundant keys from the zones. The current standby chain key tags for each zone are as follows: nz: 49157, ac.nz: 5938, co.nz: 59176, cri.nz: 19190, geek.nz: 7171, gen.nz: 48574, govt.nz: 18181, health.nz: 33694, iwi.nz: 58454, kiwi.nz: 47464, maori.nz: 21689, mil.nz: 43906, net.nz: 25105, org.nz: 24626, parliament.nz: 49424, school.nz: 27382 We would like to emphasise that if you encounter any DNSSEC issues, please report them to us via registry(a)internetnz.net.nz. We will keep you updated, and provide a summary report at the conclusion of incident-related work. Ngā mihi Josh -- Josh Simpson Product Infrastructure Lead InternetNZ | Ipurangi Aotearoa www.internetnz.nz

1 0

Webinar on LibreQos June 14rh
by Dave Taht 09 Jun '24

09 Jun '24

<blatant advert> We are doing an hour long deep dive webinar on LibreQos June 14th, courtesy of the APNIC Academy, with an astounding 196 signups so far. We are pushing multiple terabits of traffic around the world through it now, not just for ISPs, but for MDUs, post VPN processing, upstream DIY circuits, on everything from DSL to fiber. As an open source, eBPF based transparent bridge, it only takes a few minutes to install in-band, and be able to pull stats about your networks' behaviors that you've never seen before, and then apply the best shaping and bufferbloat-beating code in the world to it. Sign up here: https://academy.apnic.net/en/events?id=a0BOc000000Pgk1MAC - especially if you have been deploying fq_codel or cake, replacing brittle policers, etc, etc. We have a very popular chat too: https://chat.libreqos.io/join/fvu3cerayyaumo377xwvpev6/ PS The upcoming v1.5 release of libreqos is about 30% faster (example: pushing over 60Gbits through a $1500 Ryzen box), which is enough for 10s of thousands of customer networks on the other side of it. We have the ability to model and debloat complicated networks 8 hops deep, or along a troublesome edge, new support for emitting netflow, and quite a few other useful things in that release. and we hope to put it into beta by the end of this month, or earlier. Please come to the webinar to see the latest code, live, in production! https://github.com/LibreQoE/LibreQoS/tree/develop </blatant advert> I am in general deliriously happy with the stability, and performance of this stuff and the growth of uptake worldwide over the last 6 months, (and also watching starlink get thoroughly debloated a few months back was a real high, tho they just used fq and something codel-ly not LibreQos) Y'all are just minutes and minor CAPEX away from a vastly better internet. -- https://www.linkedin.com/feed/update/urn:li:activity:7203400057172180992/ Donations Drive. Dave Täht CSO, LibreQos

1 0

Spoofer Report for NZNOG for May 2024
by CAIDA Spoofer Project 08 Jun '24

08 Jun '24

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during May 2024: ASN Name Fixed-By 38299 REANNZ-CORP-NZ-AP 2024-05-12 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during May 2024: none inferred Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

NZNOG 2024 Post Conference Survey
by Nathan Ward 19 May '24

19 May '24

Apologies if you have received this through other channels. NZNOG 2024 was held in Nelson in April. Each year we produce a survey. This is very useful, for example it helps us to: - Give feedback to speakers - Get feedback ourselves around the conference in general, and programme - Plan future NZNOG conferences Please help us out by completing our survey, at the following URL: https://www.surveymonkey.com/r/B6GS7MT Even if you did not attend, please have a look - you can of course skip the sections about feedback for 2024, and provide feedback to help us plan future conferences. -- Nathan Ward for the NZNOG Trustees

1 0

Spoofer Report for NZNOG for Apr 2024
by CAIDA Spoofer Project 08 May '24

08 May '24

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Apr 2024: ASN Name Fixed-By 38299 REANNZ-CORP-NZ-AP 2024-04-14 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Apr 2024: ASN Name First-Spoofed Last-Spoofed 38299 REANNZ-CORP-NZ-AP 2024-01-28 2024-04-28 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

APNIC 58 Conference - Call for Presentations
by Terry Sweetser 24 Apr '24

24 Apr '24

_____________________________________________________________________ APNIC 58 Conference - Call for Presentations _____________________________________________________________________ The APNIC Program Committee (PC) is seeking presentations for the APNIC 58 conference in Wellington, New Zealand from 30 August to 6 September 2024. The PC is looking for content that would suit technical sessions, tutorials, lightning talks, and panel discussions. Topics for the conference sessions must be relevant to Internet operations and technologies. For possible areas of topics and submission details, please see: https://conference.apnic.net/58/program/callforpresentations/index.html Key dates --------- Call for presentations opens: Wednesday, 24 April 2024 First round acceptance: Monday, 27 May 2024 Final deadline for submissions: Thursday, 27 June 2024 Final round acceptance: Saturday, 27 July 2024 Please take note of the key dates so that the program can be announced early. APNIC 58 conference registration is free for selected speakers, however speakers must fund their own travel if presenting in-person. The PC will give preference to in-person presentations over remote presentations. Prospective presenters should note that the majority of speaking slots will be filled well before the final submission deadline. The PC will retain a limited number of slots up to the final submission deadline for presentations that are exceptionally timely, important, or of critical operational importance. If you have any other ideas or proposals for panel or BoF sessions, please feel free to submit your ideas via the submission system. If you have any questions, please email the PC at: apnic-pc(a)apnic.net For more information about APNIC 58, please see: https://conference.apnic.net/58/index.html Sent on behalf of the APNIC 58 PC ________________________________________________________________________ APNIC Secretariat e: secretariat(a)apnic.net p: +61 7 3858 3100 www.apnic.net ________________________________________________________________________

1 0

Spoofer Report for NZNOG for Mar 2024
by CAIDA Spoofer Project 08 Apr '24

08 Apr '24

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Mar 2024: none inferred Source Address Validation issues inferred during Mar 2024: ASN Name First-Spoofed Last-Spoofed 38299 REANNZ-CORP-NZ-AP 2024-01-28 2024-03-31 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

NZNOG Conference Talks
by Richard Nelson 01 Apr '24

01 Apr '24

In case anyone is undecided about the conference, most of the talks descriptions are now available on the NZNOG website. I have a draft program. There is still room for one or two more talks if anyone thought they were too late to submit or has a last minute idea. There will be a slot for Lightning talks this year so if you have anything interesting but quick or you want to have a short rant about -work out what you want to say and maybe put together a couple of slides. Richard

1 0

In-Region APNIC Training
by Terry Sweetser 25 Mar '24

25 Mar '24

Hello (AU|NZ|Pac)NOG, We have a few training events coming up in the Oceania region. https://academy.apnic.net/en/events?id=a0BOc000000FTJRMA4 (RPKI at NZNOG) https://academy.apnic.net/en/events?id=a0BOc000000FTEbMAO (IPv6 at NZNOG) https://academy.apnic.net/en/events?id=a0BOc000000IwVNMA0 (RPKI at Everything Open, Gladstone, Qld) https://academy.apnic.net/en/events?id=a0BOc000000IyddMAC (IPv6 at Everything Open, Gladstone, Qld) https://academy.apnic.net/en/events?id=a0BOc000000H14XMAS (IPv6 in Port Vila, Vanuatu) https://academy.apnic.net/en/events?id=a0BOc000000H11JMAS (DNS/DNSSEC in Port Vila, Vanuatu) And don't miss our self-paced courses at https://academy.apnic.net/ when you sign up 😊 Terry Sweetser Training Delivery Manager South Asia and Oceania e: terry.sweetser(a)apnic.net p: +61 7 3858 3100 www.apnic.net

1 0

IANA AS Numbers Registry Update
by Selina Harrington 22 Mar '24

22 Mar '24

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following block to LACNIC: 273821-274844 Assigned by LACNIC 2024-03-22 You can find the registry at: https://www.iana.org/assignments/as-numbers/ The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Best Regards, Selina Harrington IANA Operations Manager

1 0

APNIC 58 Conference - Call for PC Nominations
by Terry Sweetser 21 Mar '24

21 Mar '24

________________________________________________________________________ APNIC 58 Conference - Call for PC Nominations ________________________________________________________________________ The APNIC Secretariat is seeking nominations from the community to join the APNIC 58 Program Committee (PC) to assist with developing the APNIC 58 conference program. https://conference.apnic.net/58/ The APNIC 58 PC is responsible for soliciting and selecting suitable keynotes, presentation and tutorial content for the conference. Eligible PC members are those who have recently attended APNIC (or APRICOT and sub-regional NOG) conferences, have broad technical knowledge of Internet operations, familiarity with APNIC conferences, and are well connected in the Internet community. Highly valued are constructive opinions and ideas about how the program content may be improved. PC members are expected to work actively to solicit content, review submissions for technical merit and join the fortnightly PC conference calls to shortlist the submissions. Deadline -------- You have until Wednesday, 10 April 2024 at 23:00 (UTC +10) to submit your nomination to join the PC. Interested in joining? ---------------------- If you are interested in joining the PC and meet the eligibility criteria outlined above, please visit this URL to submit your interest. https://www.research.net/r/D36W566 The APNIC Secretariat will announce the selected PC members soon after the deadline. ________________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Tel: +61 7 3858 3100 https://www.apnic.net ________________________________________________________________________

1 0

Spoofer Report for NZNOG for Feb 2024
by CAIDA Spoofer Project 08 Mar '24

08 Mar '24

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Feb 2024: none inferred Source Address Validation issues inferred during Feb 2024: ASN Name First-Spoofed Last-Spoofed 38299 REANNZ-CORP-NZ-AP 2024-01-28 2024-02-25 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

AusNOG Call for Papers 2024
by J Bateman 03 Mar '24

03 Mar '24

Hi NZNOG, The Program Committee is very happy to announce that the *AusNOG 2024 Call For Papers is now open!* We are looking for presentations that an audience working predominantly in the network operating space will find interesting and useful. As always, we do not accept marketing or sales material as part of any presentation. The CFP will close on *May 30th 2024*. This allows time for the Program Committee to review papers and choose the program, so we can hopefully have it published online much earlier this year. Please express your interest and a description of the topic you'd like to present, via our new portal. https://cfp.ausnog.net/ausnog-2024/ Thank you, and see you in Sydney, for AusNOG 2024! Kind Regards, *Program Chair,* *Australian Network Operators Group (AusNOG)* *o/b/o Jocelyn, Joe, Mark, Phil, James, Michael*

1 0

NZNOG 2024 Reminders
by Richard Nelson 22 Feb '24

22 Feb '24

Just a reminder that earlybird pricing for NZNOG ends on 1 March - that is Friday next week. From Saturday March 2, registration will be an extra $100. You can register at https://nznog-2024.lilregie.com/booking/attendees/new Also a reminder that we are looking for more presentations for the conference. The call for presentations is at https://www.nznog.org/conferences/nznog-2024/call-for-papers Richard

1 0

If you haven't had the time, energy or money to try libreqos
by Dave Taht 05 Feb '24

05 Feb '24

These folk are putting out some grant money. We (libreqos) are very interested in seeing what can be done to replace brittle policers, and improve wireless long and short haul networks and would love to see someone attempting an ISP or IXP sized deployment down there... https://apnic.foundation/2024-isif-asia-applications-now-open/ -- 40 years of net history, a couple songs: https://www.youtube.com/watch?v=D9RGX6QFm5E Dave Täht CSO, LibreQos

1 0

NZNOG 2024 Call for Presentations
by Richard Nelson 01 Feb '24

01 Feb '24

The NZNOG Trustees invite presentation proposals for the 21th NZNOG conference, to be hosted at the Rutherford Hotel in Nelson on April 11 and 12, 2024. Conference objective The NZNOG conference, workshops and tutorials are an opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies, practices and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submissions on any aspect of networking are welcome however we are particularly interested in presentations that involve real world deployment experience, particularly in New Zealand. We are intending that this conference is an in-person event. We would like to maintain the high level of NZ based presenters and content that we had in 2023. We will also be accepting presentations from overseas speakers who can attend NZNOG in person. We do reserve the option of video presentation for highly valuable presentations but this is not our preference. Conference registration for accepted presenters will be free. Submit a proposal Presenters are invited to submit presentation proposals for consideration by 28 February, 2024. Talks may be accepted as they are received. Please provide your talk title, a short presenter bio and a description of the proposed presentation. Description should be no more than one page long and provide a summary of your networking related subject matter. Normally presentations are 30 min long, are video streamed live and slide decks are posted to the NZNOG website. If you want a different duration or other arrangements please let us know at submission time. To submit your proposal please e-mail:talks(a)nznog.org <https://www.nznog.org/conferences/nznog-2024/talks(a)nznog.org> www.nznog.org <https://www.nznog.org/conferences/nznog-2024/www.nznog.org>

1 0

NZNOG Registrations
by Richard Nelson 17 Jan '24

17 Jan '24

Now the main holiday season is behind us it is time to think about the NZNOG Conference. Just a reminder that this year it is in Nelson on April 11 and 12 with Workshops and Tutorials earlier in the week. Registrations are now open. Go to https://nznog-2024.lilregie.com/ . There is a discount for getting in early. Details of accommodation and social events are on the NZNOG web pages https://www.nznog.org/conferences/nznog-2024. The Call for Papers is also available. We will be announcing that more formally next week.

1 0

IETF 119 in March 2024 will be in Brisbane
by Jay Daley 17 Jan '24

17 Jan '24

This is a heads-up that the IETF will be returning to the region after a 20+ year absence, meeting in Brisbane 16-22 March 2024. For those that don’t know, the IETF is the premier Internet standards development organisation, responsible for standards such as IPv6, RPKI, QUIC, WebRTC and plenty more. Anyone can participate, no membership is required and most participation is free as it takes place on mailing lists. The IETF is arranged by areas and Network Operators tend to find the Ops and Routing areas the most relevant. Work happens within Working Groups and the list of those for the Ops area can be found here: https://datatracker.ietf.org/wg/#OPS and the Routing are here: https://datatracker.ietf.org/wg/#RTG The IETF meets three times a year for the various Working Groups to push their work forward and this is the only time a fee is charged, to cover the cost of the meetings, but a remote participation fee waiver option is available for those that cannot afford the fee. I’ll post details about this meeting when registration opens. Jay -- Jay Daley jay(a)daley.org.nz +64 21 678840

1 1

Routing Security - APRICOT - Call for Papers
by J Bateman 10 Jan '24

10 Jan '24

Dear NOG members, *Routing Security - Special Interest Group (SIG) - Call for Papers!* When: APRICOT, Bangkok, Thailand February 29th 9.30-11am Topics: Routing Security. Interested in everything from real world deployments, operations and maintenance, research, or new ideas. Call For Presentations Open: Now Deadline for Submission: February 1st 2024 Acceptance Notification: February 7th 2024 https://2024.apricot.net/ Please submit the presentation by email to sig-routingsecurity-chair(a)apnic.net Kind Regards, APNIC Routing Security SIG Chairs

2 1

Re: sigs wanted for a response to the fcc's NOI for faster broadband speeds
by Dave Taht 02 Dec '23

02 Dec '23

On Fri, Dec 1, 2023 at 6:21 PM Tom Samplonius <tom(a)samplonius.org> wrote: > > > > https://docs.google.com/document/d/19ADByjakzQXCj9Re_pUvrb5Qe5OK-QmhlYRLMBY… > > > > Us bufferbloat folk have been putting together a response to the FCC's > > NOI (notice of inquiry) asking for feedback as to increasing the > > broadband speeds beyond 100/20 Mbit. > > > The era of “buffer bloat” has passed. Buffer bloat is just about jitter, and jitter mitigation is just better now. I am really not sure what world you live in. Certainly the problem has got much better since 2010, but nearly every network I ever explore still has vast amounts of it. The global south, every coffee shop, and every hotel I have been in, all have major issues here. I make a habit of testing the conference wifi and posting results at every talk. The apartment complex I am staying in this week has a completely saturated backhaul and oversubscribed wifi, with tremendous amounts of delay and packet loss, where more constructive packet loss would help. Google docs is nearly unusable most of the day... and so it goes. I do hope the solutions for bloat continue to roll out globally and we cross this chasm in the next few years. > I don’t think jitter needs to be part of public policy. Congress has mandated a report from the FCC every year about the state of the internet, which is what this attempt at a constructive policy change of focus was about. > > Tom -- :( My old R&D campus is up for sale: https://tinyurl.com/yurtlab Dave Täht CSO, LibreQos

1 0

Re: sigs wanted for a response to the fcc's NOI for faster broadband speeds
by Dave Taht 01 Dec '23

01 Dec '23

On Fri, Dec 1, 2023 at 1:55 PM Mel Beckman <mel(a)beckman.org> wrote: > > bufferbloat is rarely fatal This task will put me in my grave, sooner rather than later! > > > LOL! I know one person taht may disagree with that :) > > -mel > > On Dec 1, 2023, at 9:41 AM, Tom Mitchell <tmitchell(a)netelastic.com> wrote: > > > Not sure we need the FCC telling us how to build products or run networks. Seat belts are life-or-death, but bufferbloat is rarely fatal ;-) Let it be a point of differentiation. > > -- Tom > > > On Thu, Nov 30, 2023 at 4:56 PM Dave Taht <dave.taht(a)gmail.com> wrote: >> >> Over here: >> >> https://docs.google.com/document/d/19ADByjakzQXCj9Re_pUvrb5Qe5OK-QmhlYRLMBY… >> >> Us bufferbloat folk have been putting together a response to the FCC's >> NOI (notice of inquiry) asking for feedback as to increasing the >> broadband speeds beyond 100/20 Mbit. >> >> "Calls for further bandwidth increases are analogous to calling for >> cars to have top speeds of 100, 200, or 500 miles per hour. Without >> calling also for better airbags, bumpers, brakes, or steering wheels, >> (or roads designed to minimize travel delay), these initiatives will >> fail (and are failing) to meet the needs of present and future users >> of the internet." >> >> Comments (and cites) welcomed also! The text is still somewhat in flux... >> >> >> -- >> :( My old R&D campus is up for sale: https://tinyurl.com/yurtlab >> Dave Täht CSO, LibreQos -- :( My old R&D campus is up for sale: https://tinyurl.com/yurtlab Dave Täht CSO, LibreQos

1 0

Re: sigs wanted for a response to the fcc's NOI for faster broadband speeds
by Dave Taht 01 Dec '23

01 Dec '23

On Fri, Dec 1, 2023 at 12:46 PM Shane Ronan <shane(a)ronan-online.com> wrote: > > If you want money from the government to subsidize your network, you'll follow their rules... It is the misguided focus on too many too simple things from the regulator and Congress, without even understanding what a packet is, and enormous subsidies for things that don't matter, and great mis-understanding of the things that do, that bothers me the most. Anyway, for 14 years, I have been trying to get bufferbloat fixed, universally, and great progress is being made. I felt that with one political push like this, it might begin to turn the tide. We are accepting signatures on the FCC filing until 2PM EST today. https://docs.google.com/document/d/19ADByjakzQXCj9Re_pUvrb5Qe5OK-QmhlYRLMBY… > On Fri, Dec 1, 2023 at 12:39 PM Tom Mitchell <tmitchell(a)netelastic.com> wrote: >> >> Not sure we need the FCC telling us how to build products or run networks. Seat belts are life-or-death, but bufferbloat is rarely fatal ;-) Let it be a point of differentiation. >> >> -- Tom >> >> >> On Thu, Nov 30, 2023 at 4:56 PM Dave Taht <dave.taht(a)gmail.com> wrote: >>> >>> Over here: >>> >>> https://docs.google.com/document/d/19ADByjakzQXCj9Re_pUvrb5Qe5OK-QmhlYRLMBY… >>> >>> Us bufferbloat folk have been putting together a response to the FCC's >>> NOI (notice of inquiry) asking for feedback as to increasing the >>> broadband speeds beyond 100/20 Mbit. >>> >>> "Calls for further bandwidth increases are analogous to calling for >>> cars to have top speeds of 100, 200, or 500 miles per hour. Without >>> calling also for better airbags, bumpers, brakes, or steering wheels, >>> (or roads designed to minimize travel delay), these initiatives will >>> fail (and are failing) to meet the needs of present and future users >>> of the internet." >>> >>> Comments (and cites) welcomed also! The text is still somewhat in flux... >>> >>> >>> -- >>> :( My old R&D campus is up for sale: https://tinyurl.com/yurtlab >>> Dave Täht CSO, LibreQos -- :( My old R&D campus is up for sale: https://tinyurl.com/yurtlab Dave Täht CSO, LibreQos

2 1

sigs wanted for a response to the fcc's NOI for faster broadband speeds
by Dave Taht 30 Nov '23

30 Nov '23

Over here: https://docs.google.com/document/d/19ADByjakzQXCj9Re_pUvrb5Qe5OK-QmhlYRLMBY… Us bufferbloat folk have been putting together a response to the FCC's NOI (notice of inquiry) asking for feedback as to increasing the broadband speeds beyond 100/20 Mbit. "Calls for further bandwidth increases are analogous to calling for cars to have top speeds of 100, 200, or 500 miles per hour. Without calling also for better airbags, bumpers, brakes, or steering wheels, (or roads designed to minimize travel delay), these initiatives will fail (and are failing) to meet the needs of present and future users of the internet." Comments (and cites) welcomed also! The text is still somewhat in flux... -- :( My old R&D campus is up for sale: https://tinyurl.com/yurtlab Dave Täht CSO, LibreQos

1 0

Your Input Needed: Can ROA Replace LOA? – Short Survey (7 mins)
by Christopher Hawker 15 Nov '23

15 Nov '23

Hello everyone, Aftab Siddiqui is currently exploring the possibility of using Route Object Authorisations (ROAs) as a potential replacement to LOAs. Separate to this (and unknowing of Aftab's research), I had started a discussion on the RPKI Community guild on Discord (https://discord.gg/9jYcqpbdRE) discussing the usage of ROAs instead of LOAs. An LOA, or "Letter of Authority" / "Letter of Authorization," is a formal document granting permission for third parties to take specific actions regarding network resources or services. In the service provider industry, its primary use is for advertising address resources (IPv4/v6 and ASN). When an organization intends to announce its IP prefixes through its own or a transit provider's ASN to the global internet, it typically needs to provide an LOA to their transit provider, confirming their custodianship or ownership of the resources. RPKI ROA, stands for "Resource Public Key Infrastructure Route Origin Authorization," is part of a security framework designed to validate the authenticity of internet routing information. It involves a digitally signed object that specifies which Autonomous Systems (ASes) are permitted to announce specific IP address prefixes. Could you please take a moment to fill out our brief survey? Your feedback will play a crucial role in our understanding of this topic. Survey Link: https://www.surveymonkey.com/r/JCHLWBB Thanks, Christopher Hawker

1 0

The Guardian report on Optus Outage
by Mark Foster 14 Nov '23

14 Nov '23

https://www.theguardian.com/business/2023/nov/13/optus-network-outage-cause… A spokesperson confirmed on Monday that the cause of the outage was changes to routing information from an international peering network after a routine software upgrade at 4.05am on Wednesday. "These routing information changes propagated through multiple layers in our network and exceeded preset safety levels on key routers which could not handle these. This resulted in those routers disconnecting from the Optus IP Core network to protect themselves," a spokesperson said. "The restoration required a large-scale effort of the team and in some cases required Optus to reconnect or reboot routers physically, requiring the dispatch of people across a number of sites in Australia. This is why restoration was progressive over the afternoon." There's a meme about how it's always 'one of you three' that came immediately to mind... Mark.

1 0

Re: NZNOG Digest, Vol 248, Issue 5
by William Tiʻitiʻi Asiata Hura 07 Nov '23

07 Nov '23

Please unsubscribe me from your mailing list. On Tue, 24 Oct 2023 at 00:00, <nznog-request(a)list.waikato.ac.nz> wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via email, send a message with subject or > body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > Today's Topics: > > 1. Re: DiscountDomains (Shane Langley) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 23 Oct 2023 07:35:27 +0000 > From: Shane Langley <shane(a)webtastix.net> > Subject: [nznog] Re: DiscountDomains > To: Criggie <criggie(a)criggie.org.nz>, Craig Whitmore > <lennon(a)orcon.net.nz> > Cc: "nznog(a)list.waikato.ac.nz" <nznog(a)list.waikato.ac.nz> > Message-ID: <5faa61d8ce254bf68729a7232f78d834(a)webtastix.net> > Content-Type: text/plain; charset="utf-8" > > Nope, they have been incredibly quiet since that > > -----Original Message----- > From: Criggie <criggie(a)criggie.org.nz> > Sent: Friday, October 20, 2023 12:44 PM > To: Craig Whitmore <lennon(a)orcon.net.nz> > Cc: nznog(a)list.waikato.ac.nz > Subject: [nznog] Re: DiscountDomains > > > On Sep 29, 2023, at 11:03 AM, Shane Langley wrote: > > Just wondering if anyone from DD is on here? Am curious whatÃ¢Â€Â™s > > happened to their nameservers today as theres no updates on the > > network status page but all domains are giving SERVFAIL errors > > Craig Whitmore wrote: > > There is a discussion on : geekzone.co.nz But it's all third party . > > Did anyone ever get any kind of RCA or explanation of what went wrong at > DD that day, three weeks ago? > > Their web site simply says its fixed, without detail. > > > > > > _______________________________________________ > NZNOG mailing list -- nznog(a)list.waikato.ac.nz To unsubscribe send an > email to nznog-leave(a)list.waikato.ac.nz > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > NZNOG mailing list -- nznog(a)list.waikato.ac.nz > To unsubscribe send an email to nznog-leave(a)list.waikato.ac.nz > https://list.waikato.ac.nz/postorius/lists/nznog.list.waikato.ac.nz > > > ------------------------------ > > End of NZNOG Digest, Vol 248, Issue 5 > ************************************* >

1 0

IPv6 status in ANZ
by Mark Prior 06 Nov '23

06 Nov '23

It's been about seven years since I last nagged at AusNOG about the poor state of IPv6 adoption in Oz and it hasn't got any better since :-( And I don't mean the plumbing, I mean the services, I have recently rewritten the script I use to look for IPv6 services (web, mail, dns, ntp, xmpp and sip) and as part of that process I leveraged PeeringDB to find all the domains that claim to connect to an IX in either Australia or New Zealand. As a result I now have two sections on the web page that collect them all together. As an added bonus I also look for DNSSEC, and its deployment makes IPv6 look like a roaring success! The Australian IX member section is <https://www.mrp.net/ipv6_survey/#auix> and the New Zealand IX member section is <https://www.mrp.net/ipv6_survey/#nzix> Of course there will be organisations in both lists but I only probe them once (a day). Start from the top of the page if you want a better understanding of what is being checked (and see some graphs) and check out the link under the domain name to find "diagnostics" about the tests. Regards, Mark.

1 0

APRICOT 2024: Call for Presentations
by Mark 30 Oct '23

30 Oct '23

APRICOT 2024 21st February - 1st March, Bangkok, Thailand https://2024.apricot.net CALL FOR PRESENTATIONS ================= The APRICOT 2024 Programme Committee is now seeking contributions for Presentations and Tutorials for the APRICOT 2024 Conference. We are looking for presenters who would: - Offer a technical tutorial on an appropriate topic; - Participate in the technical conference sessions as a speaker; - Convene and chair panel sessions of relevant topics; - Lead informal Birds of Feather break out sessions. Please submit on-line at: https://papers.apricot.net/user/login.php?event=186 CONFERENCE MILESTONES ---------------------------------- Call for Papers Opens: Now Outline Programme Published: As Papers Confirmed Final Deadline for Submissions: 29th January 2024 Final Program Published: 5th February 2024 Final Slides Received: 19th February 2024 *SLOTS ARE FILLED ON A FIRST COME, FIRST SERVED BASIS, REGARDLESS OF PUBLISHED DEADLINES* PROGRAMME CONTENT ----------------------------- The APRICOT Conference Programme consists of three parts, these being Tutorials, the Peering Forum, and Conference Sessions. Topics proposed must be relevant to Internet Operations and Technologies, for example: - IPv4 / IPv6 Routing and Operations - Routing Security, including RPKI and MANRS - Internet backbone operations - Peering, Interconnects and IXPs - Content Distribution Network technology & operations - Research on Internet Operations and Deployment - Network Virtualisation - Network Automation/Programming - Network Infrastructure security - IPv6 deployment on fixed and Wireless/Cellular networks - DNS / DNSSEC and KINDNS - Access and Transport Technologies - Technical application of Web 3.0, public blockchains and cryptocurrency - Content & Service Delivery and "Cloud Computing" - 400G ZR, ZR+ & Open ROADM - Submarine cables - ChatGPT CfP SUBMISSION --------------------- Draft slides for both tutorials and conference sessions MUST be provided with CfP submissions otherwise the submission will be rejected immediately. For work in progress, the most current information available at the time of submission is acceptable. All draft and complete slides must be submitted in PDF format only. Slides must be of original work, with all company confidential marks removed. Any marketing, sales and vendor proprietary content in a presentation is against the spirit of APRICOT and it is strictly prohibited. Note that proper credit must be given for all content taken from other sources. Evidence of plagiarism is grounds for rejection. Final slides are to be provided by the specified deadline for publication on the APRICOT website. Prospective presenters should note that the majority of speaking slots will be filled well before the final submission deadline. The PC may, at their discretion, retain a limited number of slots up to the final submission deadline for presentations that are exceptionally timely, important, or of critical operational importance. Every year we turn away submissions, due to filling up all available programme slots before the deadline. Presenters should endeavour to get material to the PC sooner rather than later. Any questions or concerns should be addressed to the Programme Committee Chairs by e-mail at: pc-chairs at apricot.net We look forward to receiving your presentation proposals. Mark Tinka, Achie Atienza & Mark Duffell APRICOT 2024 Programme Committee Chairs

1 0

OARC 42 Call for Presentations
by Manu Bretelle 23 Oct '23

23 Oct '23

OARC 42 will be a two-day hybrid meeting and the dates are *8th and 9th February 2024,* to be co-located with NANOG 90 in *Charlotte, North Carolina, USA.* The Programme Committee is seeking contributions from the community. All DNS-related subjects and suggestions for discussion topics are welcome. For inspiration, we provide a non-exhaustive list of ideas: *Operations*: Any operational gotchas, lessons learned from an outage, details/reasons for a recent outage (how to improve TTR, tooling). *Deployment*: DNS config management and release process. *Monitoring*: Log ingestion pipeline, analytics infrastructure, anomaly detection. *Scaling*: DNS performance management and metrics. Increasing DNS Server Efficiency *Security/Privacy*: DNSSEC signing and validation, key storage, rollovers, qname minimization, DoH/DoT The presentations can be either 10 or 20 minutes in length (plus 5 minutes for Q&A). Proposals for in-person lightning presentations will be opened closer to the Workshop dates. Workshop Milestones: 2023-09-07 Submissions open via Indico *2023-11-22 Deadline for submission (23:59 UTC)* 2023-11-29 Preliminary list of contributions published 2023-12-13 Full agenda published 2024-01-10 Deadline for slideset submission and Rehearsal 2024-02-08 OARC 42 Workshop - Day1 2024-02-09 OARC 42 Workshop - Day2 The Registration page and details for presentation submission are published at: <https://www.dns-oarc.net/oarc42> To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. Example guidelines for presentation slides: https://www.grammarly.com/blog/presentation-tips/ Additional information for speakers of OARC 42 your talk will be broadcast live and recorded for future reference your presentation slides will be available for delegates and others to download and refer to, before, during and after the meeting Remote speakers have mandatory rehearsal (Date and Time TBD). It would be very useful to have your slides (even if draft) ready for this. Note: DNS-OARC provides registration fee waivers for the workshop to support those who are part of underrepresented groups to speak at and/or attend DNS-OARC. More details will be provided when registration opens. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via submissions(a)dns-oarc.net *Manu Bretelle, for the DNS-OARC Programme Committee* OARC depends on sponsorship to fund its workshops and associated social events. Please contact sponsor(a)dns-oarc.net if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.)

7 8

2talk
by Paul Willard 12 Oct '23

12 Oct '23

Hey 2 talk, It's been 11 hours since your power outage. I've left you alone all day and not called or emailed, but now I have to face up to the local hospitals, doctors surgeries, vet clinics ... all of whom have LEGAL requirements to be available by phone. Sheesh 😳 Any news would great ... anything I too, am an old school sys admin .. I understand it's a stressful day for you guys .. but come on .. communicate with your resellers! I'm getting a bit fucking stressed here.

1 0

APRICOT 2024: Call for Programme Committee Volunteers
by Mark 12 Oct '23

12 Oct '23

The APRICOT 2024 Organising Committee would like to welcome everyone to join us in Bangkok, Thailand, from 21st February to 1st March 2024. The APRICOT 2024 Programme Committee is responsible for the solicitation and selection of suitable presentation and tutorial content for the APRICOT 2024 conference (https://2024.apricot.net/) We are now seeking nominations from the community to join the APRICOT 2024 PC to assist with the development of the programme for APRICOT 2024. Eligible PC candidates must have attended recent APRICOT events, have broad technical knowledge of Internet operations, and have good familiarity with the format of APRICOT. Having constructive opinions and ideas about how the programme content might be improved is of high value too. PC members are expected to work actively to solicit content and review submissions for technical merit. The PC meets by conference call, weekly in frequency during the three months prior to APRICOT. If you are interested in joining the PC and meet the above eligibility criteria, please send a brief note to "pc-chairs at apricot.net". The note must include affiliation (if any) and a brief description about why you would make a good addition to the PC. The PC Chairs will accept nominations received by 17:00 UTC+8 on Friday 20th October 2023, and will announce the new PC shortly thereafter. Cheers! Mark Tinka, Mark Duffell & Achie Atienza For the APRICOT 2024 Organising Committee

1 0

DNSSEC chain validation issue for .nz: independent report
by Josh Simpson 08 Oct '23

08 Oct '23

Kia ora koutou Following the DNSSEC chain validation issue for .nz domains <https://internetnz.nz/news-and-articles/dnssec-chain-validation-issue-for-n…> on 29-31 May 2023, we have now published the independent review on the InternetNZ website <https://internetnz.nz/assets/Archives/External-report-on-nz-DNSSEC-chain-va…>. The InternetNZ Council commissioned this independent review to examine the events leading up to the incident, and our response, and to make recommendations to prevent similar failures in the future. The report affirms our internal technical analysis <https://internetnz.nz/news-and-articles/dnssec-chain-validation-issue-techn…> of why the incident happened and it will be discussed at the InternetNZ Council meeting this Friday. Please reach out to office(a)internetnz.net.nz if you have any questions about the report. Ngā mihi Josh -- *Josh Simpson* .nz Operations Manager *InternetNZ | Ipurangi Aotearoa* Helping New Zealanders harness the power of the Internet www.internetnz.nz *M* +64 21 783 399 *O* +64 4 555 0124 *GPG:* 542B 26CA 6CF6 00B1 6E6B 6D84 058C 8FE5 CEEF 5FAB [image: InternetNZ]

1 0

NZNOG 2024 Conference
by Richard Nelson 01 Oct '23

01 Oct '23

Hi all, The NZNOG Trust wishes to announce the NZNOG 2024 conference. We will host this on April 11 and 12, in Nelson at the Rutherford Hotel. As usual, the conference will be on Thursday and Friday, with tutorials available on Wednesday 10th and a workshop from Monday to Wednesday. A dinner will be held on the Thursday night of the conference. Further details on the conference will be posted to our website when available. Expect a call for papers and an announcement when registrations open. We are seeking sponsors and will shortly send out our sponsorship document for NZNOG 2024. For details contact sponsorship(a)nznog.org. www.nznog.org/conferences/nznog-2024 Richard Nelson On behalf of the NZNOG Trust

1 0

Fw: [AusNOG] new net neutrality/title ii mailing list
by Christopher Hawker 30 Sep '23

30 Sep '23

Hi all, Felt this was worth sharing, for those who are interested... CH. ________________________________ From: AusNOG <ausnog-bounces(a)lists.ausnog.net> on behalf of Dave Taht <dave.taht(a)gmail.com> Sent: Sunday, October 1, 2023 1:47 PM To: NANOG <nanog(a)nanog.org>; <ausnog(a)lists.ausnog.net> <ausnog(a)lists.ausnog.net> Subject: [AusNOG] new net neutrality/title ii mailing list Since network neutrality and title ii regulation is back in the news, and the issues so fraught with technical and political mis-conceptions, I have started a new mailing list to discuss it, and try (for once) to feed back valid techical feedback into the FCC´s normal processes. I kind of expect some EU-derived regulatory ideas to emerge, in particular. Sign up here: https://lists.bufferbloat.net/listinfo/nnagain The FCC chair has put out the following statement, and is circulating a proposed NPRM to be released Oct 19th. https://docs.fcc.gov/public/attachments/DOC-397257A1.pdf ... There is another FCC effort on a cybersecurity label due october 6th, which amazingly, a FCC commissioner had reached out to hackernews on, and got back loads of wonderful feedback. https://news.ycombinator.com/item?id=37392676 -- Oct 30: https://netdevconf.info/0x17/news/the-maestro-and-the-music-bof.html Dave Täht CSO, LibreQos _______________________________________________ AusNOG mailing list AusNOG(a)lists.ausnog.net https://lists.ausnog.net/mailman/listinfo/ausnog

1 0

Re: DiscountDomains
by Shane Langley 28 Sep '23

28 Sep '23

Yep same collective, FreeParking have an outage listed on their status page https://status.freeparking.co.nz/ From: Don Gould <don(a)bowenvale.co.nz> Sent: Friday, September 29, 2023 12:17 PM To: Shane Langley <shane(a)webtastix.net>; Christopher Hawker <chris(a)thesysadmin.dev>; Mark Foster <blakjak(a)blakjak.net>; nznog(a)list.waikato.ac.nz Subject: RE: [nznog] Re: DiscountDomains Guys is this tied into the free parking are they part of the stack as well because I'm just looking at a client's site currently that's in the free parking control panel and their databases are all offline I'm wondering if it's the same Collective D -- Don Gould 5 Cargill Place Richmond 8013 Christchurch, New Zealand Mobile/Telegram: + 64 21 114 0699 www.bowenvale.co.nz<http://www.bowenvale.co.nz> -------- Original message -------- From: Shane Langley <shane(a)webtastix.net<mailto:shane(a)webtastix.net>> Date: 29/09/23 12:09 pm (GMT+12:00) To: Christopher Hawker <chris(a)thesysadmin.dev<mailto:chris(a)thesysadmin.dev>>, Mark Foster <blakjak(a)blakjak.net<mailto:blakjak(a)blakjak.net>>, nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz> Subject: [nznog] Re: DiscountDomains Apparently from their support they have no access to any systems as its all offline so likely they cant access their emails at the moment either From: Christopher Hawker <chris(a)thesysadmin.dev<mailto:chris(a)thesysadmin.dev>> Sent: Friday, September 29, 2023 11:56 AM To: Mark Foster <blakjak(a)blakjak.net<mailto:blakjak(a)blakjak.net>>; nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz> Subject: [nznog] Re: DiscountDomains If people have domains they need to urgently manage, it may be possible to e-mail their support team and request an EPP/UDAI code to move these to an alternate provider, where one can then change their nameservers to an alternate provider (*cough* Cloudflare *cough*)... They will still have access to login to their registry portal to manually process these requests, regardless of their DNS system status. Be persistent. If you ask for a code, they have to give you a code. I'm aware this is made mandatory by DNC NZ for the .nz ccTLD, however for gTLDs it may be more of a challenge. Regards, Christopher H. ________________________________ From: Mark Foster <blakjak(a)blakjak.net<mailto:blakjak(a)blakjak.net>> Sent: Friday, September 29, 2023 8:43 AM To: nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz> <nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz>> Subject: [nznog] Re: DiscountDomains Their Network Status Message https://www.discountdomains.co.nz/network-status has finally had an update in the last hour. Basically says 'aware, investigating'. But there's a whole boatload of important infrastructure down and unreachable right now, and a lot of very anxious customers waiting for further information. Mark. On 29/09/2023 11:30 am, Craig Whitmore wrote: There is a discussion on : geekzone.co.nz<https://www.geekzone.co.nz/forums.asp?forumid=49&topicid=309215> [cid:image001.png(a)01D9F2CF.1C1301A0]<https://www.geekzone.co.nz/forums.asp?forumid=49&topicid=309215> But it's all third party . Thanks On Sep 29, 2023, at 11:03 AM, Shane Langley <shane(a)webtastix.net><mailto:shane(a)webtastix.net> wrote: Morning, Just wondering if anyone from DD is on here? Am curious what’s happened to their nameservers today as theres no updates on the network status page but all domains are giving SERVFAIL errors Thanks _______________________________________________ NZNOG mailing list -- nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz> To unsubscribe send an email to nznog-leave(a)list.waikato.ac.nz<mailto:nznog-leave(a)list.waikato.ac.nz> _______________________________________________ NZNOG mailing list -- nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz> To unsubscribe send an email to nznog-leave(a)list.waikato.ac.nz<mailto:nznog-leave(a)list.waikato.ac.nz>

2 1

Vocus / 2degrees NOC for ASN9790
by Paul Willard 17 Sep '23

17 Sep '23

Hey peoples, I've moved my IPs from Vocus/2D to Devoli. I'd like Vocus/2D to stop advertising my IPs from ASN9790. I have removed all routes from APNIC .. so I guess it's not super important, but for the sake of tidiness .... Vocus/2D are not responding to emails. Anyone on the list that can help? -- Paul Willard. ____ *M.* 021 638223 *E.* paul(a)paulwillard.nz

1 1

Re: [SANOG] APNIC By-law Reform Resolutions PASSED
by Christopher Hawker 15 Sep '23

15 Sep '23

Hi Suresh, Fortunately, I believe the wider community has been able to read between the lines and understand what could have happened if these did not pass, and were able to prevent it from happening. The community has trust and faith in the current system and only ever intends to further strengthen and protect APNIC, the EC and the wider community. All members should be proud of this historic achievement. Hi Gaurav, I couldn’t have said it any better myself. The community has the utmost trust and faith, and I believe this was demonstrated through the significant percentage of votes in favour for all 5 resolutions (in wanting to protect what the community has built over the last 3 decades). This is by no means the end of our work; if anything it is just the beginning. We all must continue moving forward, doing what we do and further continuing to protect the internet. Regards, Christopher Hawker Sent from my iPhone On 16 Sep 2023, at 1:26 pm, Suresh Ramasubramanian <suresh(a)hserus.net> wrote: There have been previous attempts by others to play politics in running for the apnic EC .. none have worked so far Congratulations to APNIC both as a team and as a community --srs ________________________________ From: sanog <sanog-bounces(a)sanog.org> on behalf of Gaurav Kansal via sanog <sanog(a)sanog.org> Sent: Saturday, September 16, 2023 9:25:56 AM To: Christopher Hawker <chris(a)thesysadmin.dev> Cc: nznog(a)list.waikato.ac.nz <nznog(a)list.waikato.ac.nz>; sanog(a)sanog.org <sanog(a)sanog.org>; pacnog(a)pacnog.org <pacnog(a)pacnog.org> Subject: Re: [SANOG] APNIC By-law Reform Resolutions PASSED This by-laws reforms update proves that APNIC community is very strong and has full faith in the present APNIC structure and leadership. Kudos again to all. Thanks. Gaurav On 14-Sep-2023, at 12:33, sanog(a)sanog.org wrote: Hello all, The APNIC By-law Reforms Resolutions that were voted on over the last few weeks have successfully passed. All 5 resolutions were passed by a significant number of votes. These reforms further strengthen and protect the integrity of APNIC. Our communities and its members are to be congratulated for making their voices heard and voting to protect APNIC. This will go a long way in ensuring that APNIC can continue to serve the community for many years to come. Regards, Christopher Hawker _______________________________________________ sanog mailing list sanog(a)sanog.org<mailto:sanog(a)sanog.org> https://lists.sanog.org/mailman/listinfo/sanog

1 0

APNIC By-law Reform Resolutions PASSED
by Christopher Hawker 14 Sep '23

14 Sep '23

Hello all, The APNIC By-law Reforms Resolutions that were voted on over the last few weeks have successfully passed. All 5 resolutions were passed by a significant number of votes. These reforms further strengthen and protect the integrity of APNIC. Our communities and its members are to be congratulated for making their voices heard and voting to protect APNIC. This will go a long way in ensuring that APNIC can continue to serve the community for many years to come. Regards, Christopher Hawker

1 0

The Stability and Security of APNIC - Proposed By-law Reforms
by Christopher Hawker 13 Sep '23

13 Sep '23

Hello all, For all of our fellow APNIC members as you may or may not be aware, an important vote is currently taking place. This vote is critical to protecting the governance of APNIC, and to protect its integrity supporting over 9000 members, over another 10,000 indirect members (through NIRs) as well as the countless millions of people who rely on the internet today. The APNIC Proposed By-law Reform 2023 contains some of the most important changes to the APNIC By-laws that have been put forward to date. These proposed reforms can be found here on the APNIC website (https://www.apnic.net/about-apnic/organization/structure/proposed-by-law-re…) , however, in short they are: * Resolution 1 - A resolution to introduce new eligibility criteria for nominees in Executive Council elections, * Resolution 2 - A resolution to preserve the independence and geographic representation of the Executive Council, * Resolution 3 - A resolution to prevent individuals involved in litigation against APNIC from being nominees in Executive Council elections, * Resolution 4 - A resolution to limit the control one organisation (or corporate group) can have on the Executive Council, and * Resolution 5 - A resolution to introduce a new independent body, the Electoral Committee, to have oversight of nominee eligibility and conduct in Executive Council elections. These resolutions were proposed by Karl Kloppenborg, shared far and wide, and were drafted in response to community feedback APNIC received during the last EC election in March this year. They are designed to protect, strengthen and support not only the EC and APNIC members, but the wider internet community as a whole. It is important that each APNIC member uses their vote (and in turn their voice) to vote in favor of these resolutions and to be heard on these important matters pertaining to the security of APNIC and its ability to service the Asia-Pacific region. Please, don't just vote for the sake of voting or because I am asking you to. Read through the proposed reforms, gain an understanding of their wording and how they affect the by-laws and then cast your vote. Voting closes today at 14:30 (UTC+9:00), which is 17:30 NZST. I implore you to please use your voice and cast your vote as the stability of APNIC may very well depend on it. Should you have any questions, please feel free to reach out to me either on or off-list, or via iMessage (chris(a)thesysadmin.dev) for those who are use Apple iOS devices. Regards, Christopher Hawker

1 0

EdgeIX Auckland SoonTM
by Joe Wooller 10 Sep '23

10 Sep '23

Hola NZNOG people, I am heading over to Auckland on the 19th September to install EdgeIX-AKL (www.edgeix.net<http://www.edgeix.net>), I will be attending the Vetta wholesale customer event that evening at My Bar Auckland, with their permission I would like to invite you all down for a drink or two from 7:30pm. If you are unable to make it, Callum and the Devoli folks have offered to host a catchup at their office on the 20th from 5:00pm. We can then kick on for some dinner. If you'd like to attend either please send me an email so I have an indication of numbers. Thanks Joe

1 0

Maxnet Email Hosting
by Shane Langley 02 Aug '23

02 Aug '23

Hi, am trying to get hold of the spf records for maxnet as we have a customer that has thier email hosted by them, the phone support told me they dont provide any records but of course gmail and other hosts require domains to have spf setup They did say we could use 123.100.67.225 which would cover it but two of the bounce messages have been routed through different servers than that (123.100.67.191,123.100.67.196) so needing to find out the correct details that we need to add

2 2

Mynxnet
by Pete Mundy 28 Jul '23

28 Jul '23

Hi list Is there anyone from Mynxnet on here or anyone with a contact at their mothership (Devoli)? I've tried emailing support and loding a ticket and just wanted to let them know that their website has been offline for weeks... Looks like an orphaned CNAME. Maybe no one cares? Bigger fish to fry :) Pete

1 1

.nz Second Level DNSSEC issue
by Josh Simpson 23 Jul '23

23 Jul '23

Hi all As at 2023-05-29 10:45 PM we have identified an interaction in our DNSSEC signing of the .nz second level domains which depending on recursive resolver cache state may invalidate second level zones. If you encounter issues on recursive resolvers such as SERVFAIL relating to any of the .nz second levels, flushing the resolver cache for the respective zones should allow DNS services to resume functioning. Flushing . net.nz first is recommended. https://status.internetnz.nz/incidents/gq1c6slz3198 will contain updates. Regards Josh -- *Josh Simpson* .nz Operations Manager *InternetNZ | Ipurangi Aotearoa* Helping New Zealanders harness the power of the Internet www.internetnz.nz *M* +64 21 783 399 *O* +64 4 555 0124 *GPG:* 542B 26CA 6CF6 00B1 6E6B 6D84 058C 8FE5 CEEF 5FAB [image: InternetNZ]

1 3

Community consultation on increasing availability of critical APNIC services
by Elly Tawhai 12 Jun '23

12 Jun '23

________________________________________________________________________ Community consultation on increasing availability of critical APNIC services ________________________________________________________________________ Hi NZNOG Community, APNIC is always looking to maintain the highest possible level of availability of its online services to Members and the community. Last year, APNIC began assessing the technical and process improvements required to increase availability of its critical services to a high level, beyond 99.99%. Significant financial and resource investments in people and infrastructure would need to be made to achieve this. The opinions of APNIC Members and the community on this work are essential. Your input will help APNIC determine the scope, feasibility and appetite for further investments in critical service availability. As part of the consultation process, APNIC has developed a short online consultation form you can access below. Provide your feedback --------------------- https://www.research.net/r/BLSXVBL APNIC appreciates any feedback you can provide. We also encourage you discuss this with colleagues in your organization to capture their thoughts (or have them complete this form as well). The form will remain open for feedback until Wednesday, 21 June at 17:30 (UTC +10). In addition, APNIC is conducting interviews with Members and other stakeholders as part of the process, with the results of the community consultation to be shared publicly in the coming months. Please participate if you can – we value your thoughts! ________________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net<mailto:secretariat(a)apnic.net> Asia Pacific Network Information Centre (APNIC) Tel: +61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: +61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net ________________________________________________________________________

1 0

OARC 41 - Call for Contribution -- deadline extension
by Manu Bretelle 09 Jun '23

09 Jun '23

Deadline for OARC 41 abstract submission is extended to June 20th, 23:59 UTC. Please note that, we are looking for contributions and remote participation is actively supported ********************************* OARC 41 will be a two-day hybrid meeting and the dates are 6th and 7th September to be co-located with ICANN DNS Symposium in Da Nang, Vietnam. The Programme Committee is seeking contributions from the community. All DNS-related subjects and suggestions for discussion topics are welcome. For inspiration, we provide a non-exhaustive list of ideas: - Operations: Any operational gotchas, lessons learned from an outage, details/reasons for a recent outage (how to improve TTR, tooling). - Deployment: DNS config management and release process. - Monitoring: Log ingestion pipeline, analytics infrastructure, anomaly detection. - Scaling: DNS performance management and metrics. Increasing DNS Server Efficiency - Security/Privacy: DNSSEC signing and validation, key storage, rollovers, qname minimization, DoH/DoT The presentations can be either 10 or 20 minutes in length (plus 5 minutes for Q&A). Proposals for in-person lightning presentations will be opened at the Workshop. Workshop Milestones: 2023-04-16 Submissions open via Indico 2023-06-20 Deadline for submission (23:59 UTC) 2023-06-27 Preliminary list of contributions published 2023-07-11 Full agenda published 2023-08-08 Deadline for slideset submission and Rehearsal 2023-09-06 OARC 41 Workshop - Day1 2023-09-07 OARC 41 Workshop - Day2 The Registration page and details for presentation submission are published at: <https://www.dns-oarc.net/oarc41> To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. Example guidelines for presentation slides: https://www.grammarly.com/blog/presentation-tips/ Additional information for speakers of OARC 41 - your talk will be broadcast live and recorded for future reference - your presentation slides will be available for delegates and others to download and refer to, before, during and after the meeting - Remote speakers have mandatory rehearsal on 2023-08-08 at 14:00 UTC. It would be very useful to have your slides (even if draft) ready for this. Note: DNS-OARC provides registration fee waivers for the workshop to support those who are part of underrepresented groups to speak at and/or attend DNS-OARC. More details will be provided when registration opens. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via submissions(a)dns-oarc.net Manu Bretelle, for the DNS-OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact sponsor(a)dns-oarc.net if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.)

1 0

.ac.nz. DNS issues
by Diego Circelli 28 May '23

28 May '23

Hi everyone, Earlier today there was a problem with InternetNZ which has resulted in several providers failing to resolve names ending in .ac.nz for their customers (apparently an issue while resigning the zone from what I heard). Some providers that we've contacted directly have been able to resolve the issue by either clearing the cache or restarting their recursive resolvers. Could you please check whether your resolvers are affected and take appropriate action? Thanks, Diego

1 0

IETF 117 coming up in San Francisco, July 22-28
by Jay Daley 12 May '23

12 May '23

As previously discussed, here’s a brief note about the upcoming IETF meeting in San Francisco in July. For those that don’t know, the IETF is the premier Internet standards development organisation, responsible for standards such as IPv6, SMTP, QUIC, WebRTC and plenty more. Anyone can participate, no membership is required and most participation is free as it takes place on mailing lists. The IETF is arranged by areas and Network Operators tend to find the Ops area the most relevant. Work happens within Working Groups and the list of those for the Ops area can be found here: https://datatracker.ietf.org/wg/#OPS The IETF meets three times a year for the various Working Groups to push their work forward and this is the only time a fee is charged, to cover the cost of the meetings, but a remote participation fee waiver option is available for those that cannot afford the fee. Details of the meeting here: https://www.ietf.org/how/meetings/117/ Please feel free to contact me directly if you have any questions. Jay (using my personal email as that’s how I’m subscribed to this list, but my dayjob is IETF Executive Director) -- Jay Daley jay(a)daley.org.nz +64 21 678840

1 0

IANA AS Numbers Registry Update
by Selina Harrington 10 May '23

10 May '23

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following blocks to APNIC: 151866-152889 Assigned by APNIC 2023-05-10 152890-153913 Assigned by APNIC 2023-05-10 You can find the registry at: https://www.iana.org/assignments/as-numbers/ The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Best Regards, Selina Harrington IANA Operations Manager

1 0

AUSNOG 2023! *Cross post kinda*
by Joe 02 May '23

02 May '23

Hey NZNOG People, Hope you don’t mind me flicking this through to you folks, the NZNOG conference of 2023 was fantastic and I am hoping I can get some of that talent to come present at AUSNOG 2023. :) AusNOG 2023 will be held at the Sea World Conference Centre on the Gold Coast (Yes this is not a typo, it is not in Sydney or Melbourne this year) on the 7th & 8th of September, 2023. The Program (was Programme) Committee is seeking submissions from people wishing to present at the conference. Please note that AusNOG 2023 is a technical conference so presentations must be of a technical nature (i.e. no sales or marketing presentations). Preference will be given to presentations that result in actual operational outcomes. We plan on recording presentations for release after the event for those who are unable to attend, please don’t let that deter you from submitting, if your presentation can not be published let us know and we will ensure to not record it. For further information, details of important dates, or to make a submission please see the website at the URL https://www.ausnog.net/events/ausnog-2023 Lastly a big thank you to the PC committee; Jocelyn (Program Chair), Belynda, Mark and Phil. Joe

1 0

NZNOG 2023 post-conference survey
by Nathan Ward 25 Apr '23

25 Apr '23

Apologies if you have received this through other channels. NZNOG 2023 was held in Rotorua in late March. Each year we produce a survey. This is very useful, for example it helps us to: - Give feedback to speakers - Get feedback ourselves around the conference in general, and programme - Plan future NZNOG conferences Please help us out by completing our survey, at the following URL: https://www.surveymonkey.com/r/FRP898D Even if you did not attend, please have a look - you can of course skip the sections about feedback for 2023, and provide feedback to help us plan future conferences. -- Nathan Ward for the NZNOG Trustees

1 0

OARC 41 - Call for Contribution
by Manu Bretelle 24 Apr '23

24 Apr '23

OARC 41 will be a two-day hybrid meeting and the tentative dates are between 4-8th September to be co-located with ICANN DNS Symposium.in Asia. The Programme Committee is seeking contributions from the community. All DNS-related subjects and suggestions for discussion topics are welcome. For inspiration, we provide a non-exhaustive list of ideas: - Operations: Any operational gotchas, lessons learned from an outage, details/reasons for a recent outage (how to improve TTR, tooling). - Deployment: DNS config management and release process. - Monitoring: Log ingestion pipeline, analytics infrastructure, anomaly detection. - Scaling: DNS performance management and metrics. Increasing DNS Server Efficiency - Security/Privacy: DNSSEC signing and validation, key storage, rollovers, qname minimization, DoH/DoT The presentations can be either a full-length presentation - 20 mins (+5 mins Q/A) or a lightning presentation - 10 mins (+5 mins for Q/A) *Workshop Milestones:* 2023-04-16 Submissions open via Indico 2023-06-10 Deadline for submission (23:59 UTC) 2023-06-27 Preliminary list of contributions published 2023-07-11 Full agenda published 2023-08-08 Deadline for slideset submission and Rehearsal 2023-09-<> OARC 41 Workshop - Day1 2023-09-<> OARC 41 Workshop - Day2 The Registration page and details for presentation submission are published at: <https://www.dns-oarc.net/oarc41> To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. Example guidelines for presentation slides: https://www.grammarly.com/blog/presentation-tips/ Additional information for speakers of OARC 41 - your talk will be broadcast live and recorded for future reference - your presentation slides will be available for delegates and others to download and refer to, before, during and after the meeting - *Remote speakers have mandatory rehearsal on 2023-08-08 at 14:00 UTC.* It would be very useful to have your slides (even if draft) ready for this. Note: DNS-OARC provides registration fee waivers for the workshop to support those who are part of underrepresented groups to speak at and/or attend DNS-OARC. More details will be provided when registration opens. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via submissions(a)dns-oarc.net Manu Bretelle, for the DNS-OARC Programme Committee OARC depends on sponsorship to fund its workshops and associated social events. Please contact sponsor(a)dns-oarc.net if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.)

1 0