- NZNOG - lists.nznog.org

Can't see 117.121.247.0/24. Do we have a local looking glass
by Don Gould 10 Sep '15

10 Sep '15

Hi Sorry for an operation issue on list on a Friday ;) We just moved an IP range in us this morning and I can't see it via DTS currently. I've been asked to find a local looking glass. Can anyone assist? D -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) I'M COLLECTING COFFEE CUPS FOR PROJECT COFFEE CUP. Deja vue (missing the French accent mark) - literally means already seen, that sense of haven't we been here before.

2 2

APNIC 40 - Webcast Sessions taking place today
by Elly Tawhai 09 Sep '15

09 Sep '15

Hi NZNOG Community, You may be aware that APNIC 40 has started. You can participate remotely in discussions, ask the presenter questions, and voice your opinion. To watch live webcast go to: https://conference.apnic.net/40/program#webcasts Some topics under discussion include: * The Status of APNIC’s IPv4 Resources: Exhaustion & Transfers * IPv4: Mining Strategic Reserves * prop-114: Modification in the ASN eligibility criteria * prop-113: Modification in the IPv4 eligibility criteria * prop-115: Registration of detailed assignment information in Whois DB * APNIC Member Meeting See you online! Kind regards, Elly APNIC

1 0

ISIF Asia Internet Operations Research Grants
by Elly Tawhai 08 Sep '15

08 Sep '15

Hi NZNOG Community, APNIC has established the ISIF Asia Internet Operations Research Grants: a 60,000 AUD fund to support independent research on Internet operations, infrastructure and related protocols. Members of Network Operators Groups (NOGs), members/partners of IXPs, operators of rootservers, and academics and postgraduate students are encouraged to apply. The fund is open to all relevant topics of interest, however applicants may wish to prepare research proposals in the following areas: * Network measurement and analysis * IPv6 deployment * BGP routing * Network security * Peering and interconnection Applicants can apply for an amount between AUD 5,000 and AUD 60,000 based on the research needs, a realistic timeframe and a detailed budget. Successful applicants will also receive mentoring and support from the selection committee members to encourage knowledge generation and collaboration. Grants applications open 9 September 2015 and close 15 October 2015. Visit http://isif.asia/researchgrant for full terms and conditions, and the online application form. Kind regards, Elly APNIC

1 0

Internet Data Portal
by Jay Daley 08 Sep '15

08 Sep '15

Hi We’ve recently gone live with an open data site to publish whatever .nz related data that we can publish and any other useful Internet data - https://idp.nz For some years we’ve published IPv6 and DNSSEC stats but we decided it was time to publish that in a more useful way and include as much other data as we could. Initially we only have four datasets on the site: = .nz registrations data - a daily count of domains in each state and each transaction going back a few years (182,511 rows) = .nz Zonescan data - metrics from the monthly scan of all nameservers delegated to by the .nz zone (7,723 rows) This is where the IPv6 and DNSSEC stats come from. = ISPs - the Statistics NZ annual survey of ISPs sizes etc in a more usable format = Internet Connections - the Statistics NZ annual survey of ISP connections, datacaps etc in a more usable format If there’s any other data that we have that you think we could publish then please let us know and if you have any useful Internet related datasets that you’d like published then please get in touch as we’d be keen to help. cheers Jay -- Jay Daley Chief Executive NZRS Ltd desk: +64 4 931 6977 mobile: +64 21 678840 linkedin: www.linkedin.com/in/jaydaley

1 0

Re: [nznog] Appeal to bigger brains
by Andrew McBeath 08 Sep '15

08 Sep '15

Thanks to everyone who offered advice - turns out the IBM server connect module in bay 2 of the chassis was the issue. Removing it from the chassis resolved all problems. It had nothing connected to it and all ports were disabled so I can only guess that its faulty. Thanks again, Andrew From: Andrew McBeath Sent: Tuesday, 8 September 2015 9:53 p.m. To: 'nznog(a)list.waikato.ac.nz' <nznog(a)list.waikato.ac.nz> Subject: Appeal to bigger brains I'm throwing this out there because I'm at a loss to figure out whats happening in our lab. I realise it's a bit outside the scope of this forum but as the subject line says I'm looking for some bigger brains - Beers are involved. We have an IBM blade chassis - only 4 blades at present - with a management VLAN 50 (192.168.10.0/24) and a data vlan 100 (10.10.10.10.0/24) hooked up to our prod network (10.10.1.0 and 11.11.1.0 -Yes I know this is BAD but I inherited the network and haven't been able to change it as yet) via a juniper SRX. Blades are running VMware 5.5 - no nic teaming as yet. All blades and AMM module (all on 192.168.10 addresses) can get to all parts of the network VMWare machine (Only one so far - on 10.10.10.0 network - can ping host, can ping external firewall, CAN ONLY PING ODD OR EVEN NUMBERED IP's DEPENDING ON WETHER IT HAS AN ODD\EVEN IP) ie if its forth octet is .125 it can ping .1, .3, .5 but if I change it to .126 it can only ping .2, .4, .6 Everything I've found online points to NIC teams in certain situations but none apply as the blades only have a single NIC enabled and the VM only has one NIC assigned. Appreciate any feedback Cheers, Andrew McBeath

1 0

Appeal to bigger brains
by Andrew McBeath 08 Sep '15

08 Sep '15

I'm throwing this out there because I'm at a loss to figure out whats happening in our lab. I realise it's a bit outside the scope of this forum but as the subject line says I'm looking for some bigger brains - Beers are involved. We have an IBM blade chassis - only 4 blades at present - with a management VLAN 50 (192.168.10.0/24) and a data vlan 100 (10.10.10.10.0/24) hooked up to our prod network (10.10.1.0 and 11.11.1.0 -Yes I know this is BAD but I inherited the network and haven't been able to change it as yet) via a juniper SRX. Blades are running VMware 5.5 - no nic teaming as yet. All blades and AMM module (all on 192.168.10 addresses) can get to all parts of the network VMWare machine (Only one so far - on 10.10.10.0 network - can ping host, can ping external firewall, CAN ONLY PING ODD OR EVEN NUMBERED IP's DEPENDING ON WETHER IT HAS AN ODD\EVEN IP) ie if its forth octet is .125 it can ping .1, .3, .5 but if I change it to .126 it can only ping .2, .4, .6 Everything I've found online points to NIC teams in certain situations but none apply as the blades only have a single NIC enabled and the VM only has one NIC assigned. Appreciate any feedback Cheers, Andrew McBeath

4 5

Re: [nznog] Appeal to bigger brains
by Scott Weeks 08 Sep '15

08 Sep '15

--- andrew(a)base-2.co.nz wrote: From: Andrew McBeath <andrew(a)base-2.co.nz> VMWare machine (Only one so far - on 10.10.10.0 network - can ping host, can ping external firewall, CAN ONLY PING ODD OR EVEN NUMBERED IP's DEPENDING ON WETHER IT HAS AN ODD\EVEN IP) ie if its forth octet is .125 it can ping .1, .3, .5 but if I change it to .126 it can only ping .2, .4, .6 ---------------------------------------- It's a longshot, but is there VRRP/HSRP on the router where the default gateways point to? They could have two VRRP sessions and forcing odd IPs to one and even IPs to another. scott _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

FW: Appeal to bigger brains
by Andrew McBeath 07 Sep '15

07 Sep '15

Didn’t hit reply all. From: Andrew McBeath Sent: Tuesday, 8 September 2015 10:19 p.m. To: 'Alexander Neilson' <alexander(a)neilson.net.nz> Subject: RE: [nznog] Appeal to bigger brains Thanks Alexander, Its an E1000e with vmware tools installed – I have seen quirky behaviour from them before but it seems to have been much better of late. I will try ripping it out and assigning a VMXNET3 adapter. In response to earlier replies. Kyle -No LACP – single uplink from the blade IO module to a single EX2200 Dylan/Liam – Exactly my first thoughts but 2 of us have been through every bit of kit between the VM and the rest of the network trying to spot what the other missed and are both at a loss. It’s not a complicated network. Will update tomorrow after I change the NIC. Appreciate the feedback – Glad to know it strikes others as odd too Andrew From: Alexander Neilson [mailto:alexander(a)neilson.net.nz] Sent: Tuesday, 8 September 2015 10:05 p.m. To: Andrew McBeath <andrew(a)base-2.co.nz<mailto:andrew(a)base-2.co.nz>> Subject: Re: [nznog] Appeal to bigger brains Which network interface type is on each VM Guest? (or is your issue with the host?) VMXNET3 is recommended however you probably need VMWare tools installed to use it. The E1000 and E1000e interfaces have some weird issues in network operation but not that I have seen as even and odd interfaces. On your network configuration in VMWare how many underlying interfaces are assigned to each V Switch? can you screenshot the V switches and the individual network config screens under properties. Sounds like their might be some odd check box or interface involvement that causes this issue. Regards Alexander On 8/09/2015, at 9:53 PM, Andrew McBeath <andrew(a)base-2.co.nz<mailto:andrew(a)base-2.co.nz>> wrote: I’m throwing this out there because I’m at a loss to figure out whats happening in our lab. I realise it’s a bit outside the scope of this forum but as the subject line says I’m looking for some bigger brains – Beers are involved. We have an IBM blade chassis – only 4 blades at present – with a management VLAN 50 (192.168.10.0/24) and a data vlan 100 (10.10.10.10.0/24) hooked up to our prod network (10.10.1.0 and 11.11.1.0 –Yes I know this is BAD but I inherited the network and haven’t been able to change it as yet) via a juniper SRX. Blades are running VMware 5.5 - no nic teaming as yet. All blades and AMM module (all on 192.168.10 addresses) can get to all parts of the network VMWare machine (Only one so far – on 10.10.10.0 network - can ping host, can ping external firewall, CAN ONLY PING ODD OR EVEN NUMBERED IP’s DEPENDING ON WETHER IT HAS AN ODD\EVEN IP) ie if its forth octet is .125 it can ping .1, .3, .5 but if I change it to .126 it can only ping .2, .4, .6 Everything I’ve found online points to NIC teams in certain situations but none apply as the blades only have a single NIC enabled and the VM only has one NIC assigned. Appreciate any feedback Cheers, Andrew McBeath _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz<mailto:NZNOG(a)list.waikato.ac.nz> http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Software defined networking seminar in Auckland (28th September - 10:30am-12:30pm)
by Ian Welch 07 Sep '15

07 Sep '15

Hi all, Victoria University is running a free seminar on software defined networking in Auckland on the 28th September from 10:30-12:30 at the Victoria University Auckland Office, Level 4, the Chancery, 50 Kitchener Street, Auckland. Bryan Ng will be doing a gentle introduction to SDN and leading a hands-on session. More information is available here: http://sdn-vuw.blogspot.co.nz/2015/09/come-to-our-auckland-event-at-end-of.… RSVP by Wednesday 23 September to suzan.hall(a)vuw.ac.nz with ‘SDN seminar’ in the subject line. We also have some scholarship opportunities for Masters projects on software defined networking topics, more information here: http://sdn-vuw.blogspot.co.nz/2015/08/scholarships-available-to-work-on.html Thanks, Ian

1 0

Contribution for the IANA Stewardship Transition proposal
by Elly Tawhai 07 Sep '15

07 Sep '15

Hi NZNOG Community, The Numbers community is one of the key operational communities called on to develop its own proposal for the IANA stewardship transition. The below video relates to IANA Stewardship Transition: https://www.youtube.com/watch?v=t-x2nQxyDrU How you can contribute: ----------------------- 1. The CRISP team is seeking community response to its statement on the ICG plan, as announced at: https://www.nro.net/pipermail/ianaxfer/2015-August/000642.html The CRISP statement provides an excellent summary of the ICG proposal and how it satisfies the expectations expressed by the Numbers community. 2. The NRO has also recently called for community support of the ICG proposals, at: https://www.nro.net/news/iana-stewardship-transition-coordination-group-icg… 3. We encourage you to send an email to the ICG (public-comments(a)ianacg.org) to express your support for the ICG’s transition proposal. Kind regards, Elly APNIC

2 1

SDN APE, and IX stats from Citylink
by Tim Hoffman 03 Sep '15

03 Sep '15

Greetings, There was some discussion over the last couple of years with the NZNOG community at conferences and on the mailing list about Citylink doing a SDN based IX. This was to include with it Citylink releasing statistics of the aggregated traffic over their IX - a measure (published by most IXs) that many use to decide if it's worth connecting to an IX. Given the public nature of this discussion so far, and the fact that it's died off, can a representative of Citylink please confirm to the list; 1/ Is there an intention to move to some sort of SDN driven IX still, and if so what the timeframe for this will be? If this project has been abandoned, how will the IXs be developed in place of this project? 2/ Do they have any intention to publish an aggregated traffic on their IXs, and if so what the timeframe for this will be? I am sure many of us in the peering community will be eager to hear the answers to these questions.... Cheers, Hoff

12 21

APNIC Policy Proposal 114
by Jamie Baddeley 03 Sep '15

03 Sep '15

Folks, Saw this: https://www.apnic.net/policy/proposals/prop-114 Whilst the proposal does its best to outline pros and cons, I feel that from a policy perspective it removes the direct incentive to establish interconnectivity with IXP's (or some other mechanism for Multihoming). You gain an ASN but you are not compelled to increase the resilience of the Internet. To me that is a disadvantage that has not been stated. To me, having a network with an ASN means fundamentally you are participating in the mesh. On the solution: An organisation is eligible for an ASN assignment if: - they are currently multi-homed, OR - have previous allocated provider independent address space by APNIC, AND intend to multi-home in the future It seems to suggest a policy tilted towards incumbents or those who've been around long enough to have some PI space? The problem statement: The policy seems to imply that both requirements i.e. multi-homing and clearly defined single routing policy must be met simultaneously, this has created much confusion in interpreting the policy. Suggests that removing the confusing or conflicting elements of the current policy is wise, but I'm not convinced the proposed solution does that without undermining what I think is a important characteristic of the Internet which is a highly interconnected mesh. As an alternate, is it not better to strengthen the process to determine whether the applicant did indeed multi-home? There are downsides in that of course. It does place overhead on an entity to test that but what matters more? Ease of access into the ASN club or ensuring high levels of interconnectivity? What do others think? jamie

3 2

Routing changes for AS17746 (Orcon)
by Simon Allard 02 Sep '15

02 Sep '15

Hi NZNog Thursday 3rd Sept 00:00 -> 0600 we will be making some changes to the way AS17746 Peers. Currently AS17746 has APE/WIX Peering. We decommissioning AS17746 APE peering and advertising AS17746 via Callplus AS9790. Orcons WIX peering will eventually become AS9790 but that’s a few weeks off yet but for the mean time we will prepend AS paths to make the AS paths equal. AS9790 Peers at APE/AKL-IX and Megaport, so there will be increased peering traffic and prefixes due to the extra routes in AKL-IX and Megaport. Any questions please drop me an email Cheers, Si [cid:imagea22279.PNG(a)4001d0ff.41a0d19e] Simon Allard // Senior Network Architect D: 09 550 2790 M: 020 100 0790 F: www.callplus.co.nz<http://www.callplus.co.nz> | www.slingshot.co.nz<http://www.slingshot.co.nz> | www.flip.co.nz<http://www.flip.co.nz> | www.orcon.net.nz<http://www.orcon.net.nz> This message and any attachments contain privileged and confidential information. If you are not the intended recipient of this message, you are hereby notified that any use, dissemination, distribution or reproduction of this message is prohibited. If you have received this message in error please notify the sender immediately via email and then destroy this message and any attachments.

1 1

IANA IPv4 Recovered Address Space registry updated
by Selina Harrington 01 Sep '15

01 Sep '15

Hi, ICANN has updated the IANA IPv4 Recovered Address Space registry according to the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA. The policy states that in each IPv4 allocation period, each RIR will receive a single IPv4 allocation unit from ICANN. An IPv4 allocation period is defined as a 6-month period following 1 March or 1 September in each year. The address space selection software can be downloaded from: https://github.com/icann/ The list of allocations can be found at: https://www.iana.org/assignments/ipv4-recovered-address-space/ Kind regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

1 0

Rural Fibre Deployment
by Jesse Archer 31 Aug '15

31 Aug '15

Hi, Does anyone from recent (last 1-2 years) experience have a ballpark figure of what it costs to run fibre privately in a rural setting these days? Indicative price per meter for planning, consents, trenching, installing the duct and then blowing the fibre through? *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 16306, Bethlehem 3176, New Zealand

5 4

AS45177 Peering on APE
by Callum Barr 31 Aug '15

31 Aug '15

Hi All, Hope you are well, etc... We (Vibe Communications / Layer2Co / Intellipath / AS45177) are going to be dropping our peering at APE sometime this week or early next. We have found that the traffic levels have dropped to the point where it is no longer economic to peer at the current port pricing, aswell as having AS9560 in the AS-PATH making some 'interesting' traffic paths happen. If you currently have a bilateral peer with us over the APE fabric, this will disappear. You can re-establish this peer with a direct cable run at a datacenter that we are both at, or via the fabric at AKL-IX or Megaport AKL. Our PeeringDB entry is located here ( http://www.peeringdb.com/view.php?asn=45177) Kind regards, *Callum Barr* / *Network Architect / Vibe Communications* +64 27 567 2746 / callum(a)vibecommunications.co.nz Office: +64 9 222 0000 / Fax: 0800 842 326 Level 2, 155 K Rd, Auckland, New Zealand Web: www.vibecommunications.co.nz / Peering: AS45177 <http://www.peeringdb.com/view.php?asn=45177>

1 0

issue with xtra mail
by Daniel Christie 31 Aug '15

31 Aug '15

Hey all, Is there anyone here who is an admin of the xtra mail servers for custom domains? I simply want to know why an email being sent from an email server to xtras would get this showing up in SMTP logs of the sending server 210.54.141.1 [1224] 12:52:37 Client session <<< 553 Authentication is required to send mail as user(a)domain.com<mailto:user(a)domain.com> I'm trying to go through normal spark support channels but they are trying to ask me questions about the email server I administer which are ridiculous and very frustrating. I'm fairly sure (with my knowledge of SMTP) the issue is that our server is saying its sending an email from an email account that is hosted on xtra servers and trying to send to the same email/account without first specifying auth I have given them more than enough information about the issue already and just not getting anywhere. Daniel Christie Systems Engineer/Application Specialist PHONE +64 7 853 6060<tel:+64-7-853-6060> | FAX +64 7 854 9052<tel:+64-7-854-9052> | www.enlighten.co.nz<http://www.enlighten.co.nz>

10 10

UFB - DHCP Relay and Packet Fragmentation
by Brent Marquis 26 Aug '15

26 Aug '15

Hi All, This is a little bit late for getting the info into this community sorry, I was tied down with ensuring we had the fix out there. I thought it was important to ensure that anyone who is affected, but may not have seen the informer(s), knows that as of tomorrow you can commence migrations, remove workarounds and re-instate config, etc I've attached our informer for the Fragmented Packet issue, as it has all the info - but the main details are below. We are currently upgrading all of our 'new' (introduced earlier this year) ONTs, due to 2 issues. 1) DHCP Relay packets being discarded - where DHCP requests have src and dst port of 67. 2) Fragmented packets being discarded - any fragmented packets passing through the ONT in either direction (including NGA Voice) The upgrade has been progressing over the last few nights, OLT by OLT and will be completed overnight tonight - this was done under BAU Service Event notifications, which you probably all saw. In short, neither of these issues will exist from tomorrow onwards. Where normal service for any users affected by these issues can resume. Thanks to all the RSPs who helped us identify, troubleshoot and test over the past few weeks. As always - give me a shout if you have any questions/concerns. Thanks, Brent This communication, including any attachments, is confidential and may be legally privileged. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. No confidentiality or privilege is waived or lost by any mis-transmission or error. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002.

2 1

alibi routing
by Jodi Thomson 25 Aug '15

25 Aug '15

Came across this while reading soylent news - thought it interesting http://spectrum.ieee.org/tech-talk/telecom/internet/system-routes-internet-… https://alibi.cs.umd.edu/ Cheers JT -- Jodi Thomson Systems & Networks Web Connect Ltd 501 Heretaunga Street West Hastings, 4122 Ph: (06) 281 2324 (ext 802) http://www.webconnect.nz

1 0

UFB Upload Issues
by Dave Mill 20 Aug '15

20 Aug '15

Hi all If any RSPs currently have any reports of 100/20 UFB Right Performing customers having only 2M upload could you contact me offlist? If you do contact me I'm really interested in where your BNG is and where your customers are with the issue. If any end users are on 100/20 with only 2M upload also feel free to contact me. I'm more interested in your location and your ISP in this case. Cheers Dave (representing Inspire Net in this post)

17 34

mx.clear.net.nz help please
by Don Gould 20 Aug '15

20 Aug '15

Hi guys, Sorry to say but one of my customers got their computer compromised and it caused a spam dump via one of my servers which now seems to be blocked by clear.net.nz Can someone have a look for me and unblock mx.yournet.co.nz? I can provided more full transcript but I've removed customer details for the public list. Thanks D *From: *MAILER-DAEMON(a)mx.yournet.co.nz <mailto:MAILER-DAEMON(a)mx.yournet.co.nz> (Mail Delivery System) *Subject: **Undelivered Mail Returned to Sender* *Date: *20 August 2015 18:23:47 NZST zzz(a)clear.net.nz <mailto:s.t.ebranch(a)clear.net.nz>>: host mx.clear.net.nz <http://mx.clear.net.nz>[203.97.33.212] refused to talk to me: 554 mxin2-orange.clear.net.nz <http://mxin2-orange.clear.net.nz> xxx host mx.paradise.net.nz <http://mx.paradise.net.nz>[203.97.33.212] refused to talk to me: 554 mxin3-orange.clear.net.nz <http://mxin3-orange.clear.net.nz> xxx host mx.paradise.net.nz <http://mx.paradise.net.nz>[203.97.33.212] refused to talk to me: 554 mxin3-orange.clear.net.nz <http://mxin3-orange.clear.net.nz> Reporting-MTA: dns; mx.yournet.co.nz <http://mx.yournet.co.nz> X-Postfix-Queue-ID: B9B6ED669B X-Postfix-Sender: rfc822; Arrival-Date: Mon, 17 Aug 2015 17:54:26 +1200 (NZST) Final-Recipient: rfc822; xxx <mailto:s.t.ebranch(a)clear.net.nz> Original-Recipient: rfc822;xxx <mailto:s.t.ebranch(a)clear.net.nz> Action: failed Status: 4.0.0 Remote-MTA: dns; mx.clear.net.nz <http://mx.clear.net.nz> Diagnostic-Code: smtp; 554 mxin2-orange.clear.net.nz <http://mxin2-orange.clear.net.nz> Final-Recipient: rfc822; xxx Original-Recipient: rfc822;xxx Action: failed Status: 4.0.0 Remote-MTA: dns; mx.paradise.net.nz <http://mx.paradise.net.nz> Diagnostic-Code: smtp; 554 mxin3-orange.clear.net.nz <http://mxin3-orange.clear.net.nz> Final-Recipient: rfc822; xxx Original-Recipient: rfc822;xxx Action: failed Status: 4.0.0 Remote-MTA: dns; mx.paradise.net.nz <http://mx.paradise.net.nz> Diagnostic-Code: smtp; 554 mxin3-orange.clear.net.nz <http://mxin3-orange.clear.net.nz> -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) I'M COLLECTING COFFEE CUPS FOR PROJECT COFFEE CUP. Deja vue (missing the French accent mark) - literally means already seen, that sense of haven't we been here before.

1 0

Twitter peering in Sydney
by Tim Hoffman 17 Aug '15

17 Aug '15

Greetings, AS13414 is now peering in Australia. We invite AU/NZ eyeball networks to peer with us on the Equinix, IX Australia, and Megaport IXs in Sydney. Please find our details at http://as13414.peeringdb.com, and contact peering(a)twitter.com if this is of interest to you. Cheers, Tim -- Tim Hoffman | Twitter, Inc. 1355 Market St. | San Francisco, CA | 94103

1 0

Apricot 16
by Jamie Baddeley 15 Aug '15

15 Aug '15

Hey folks, We said in Rotorua we'd be keen to subsidise Apricot attendance in 2016. And if memory serves correctly it was for any of the diehard Noggers that always turn up to our conference. We must have had a rush of blood to the head at the time because it turns out we could do that and probably burn out the NZNOG Trust fund at the same time. That's not wise. Now that we've thought about it, what we can do is make 5K NZD available to those who $deserve a subsidy. What we have not worked out is how to define $deserve. But I'm sure we'll work that out. We can update you on that later. There will be some kind of metric related to how much of diehard Nogger you are I guess. Maybe in the meantime you could entertain the list about just how diehard you are. Perhaps the subsidies go to the ones who create the most mirth (whilst staying within the list AUP of course). On a more serious note - just thought we should keep you updated, and we'll advise more a little later as things firm up. cheers Jamie of behalf of the NZNOG Trustees

2 2

Win10 downloads causing UFB congestion?
by Juha Saarinen 13 Aug '15

13 Aug '15

Hello NZNOG, I was reading this: http://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=11495508 <http://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=11495508> just now, which says the Windows 10 upgrade is overwhelming capacity on the UFB (which bit of it?). It’s a single source however, and I was wondering if there are other data points for the traffic increase to look at? Not sure if this is operational as such, so please email me off-list if so. Thanks — Juha

8 8

Re: [nznog] Win10 downloads causing UFB congestion?
by Regan Murphy 11 Aug '15

11 Aug '15

Chris Keall wrote up this in the NBR yesterday with a "yeah....nah". (paywalled) http://www.nbr.co.nz/opinion/digital-island-windows-10-upgrades-are-congest… -- Regan ________________________________ From: Juha Saarinen<mailto:juha(a)saarinen.org> Sent: ‎8/‎12/‎2015 9:17 AM To: nznog<mailto:NZNOG(a)list.waikato.ac.nz> Subject: [nznog] Win10 downloads causing UFB congestion? Hello NZNOG, I was reading this: http://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=11495508 <http://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=11495508> just now, which says the Windows 10 upgrade is overwhelming capacity on the UFB (which bit of it?). It’s a single source however, and I was wondering if there are other data points for the traffic increase to look at? Not sure if this is operational as such, so please email me off-list if so. Thanks — Juha _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Re: [nznog] Win10 downloads causing UFB congestion?
by Scott Weeks 11 Aug '15

11 Aug '15

--- scott(a)scottpettit.nz wrote: From: Scott Pettit <scott(a)scottpettit.nz> puff piece designed to spread FUD for Digital Island's own -------------------------------------- Funny, I worked for another Digital Island that existed in Hawaii from the mid-1990s to ~2002. We had PoPs all over the world including NZ. It was bought by C&W and these guys took up the name 2 years later according to their "about us" page. Until now I never heard of them... scott _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Traffic on Akl-IX
by Jesse Archer 09 Aug '15

09 Aug '15

Hey all, A quick heads up about our experience on Akl-IX (community IX based in Auckland, presence in 220 Queen and Vocus Albany). This past week we've seen our traffic coming in via the IX double, in part thanks to Microsoft peering and the Windows 10 updates that are hammering everyone's networks right now :) Also recent growth in peers - I see Compass are on-boarding and a couple of other operators I've spoken with are peering shortly. There are some large content providers on the IX, either directly connected or via "host member ISPs" - so if you've been considering peering and access to content might be a driver for on-boarding and you would like some more info, please speak to Joe Wooller of WAIA on peering(a)akl-ix.nz or you can drop me an email. If you're from: Voyager ICONZ Trade Me Sitehost HD Mediaworks ...I'd love to see you on the IX as we do a bit of traffic each day and the current inbound and outbound paths are not as optimal as they could be. *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 16306, Bethlehem 3176, New Zealand

8 9

Some name server changes, SkyTV and Paymark
by paul tinson 09 Aug '15

09 Aug '15

Hi There, I wanted to notify the list that anyone operating recursive resolvers would be wise to flush the following zones from the cache: *.skytv.co.nz *.paymarkclick.co.nz Lastnight the name servers for these where switched to ns1, ns2 and ns3.spark.co.nz. The TTL on the NS record was 24hrs at the time of change so these could still be in cache as the old record. Regards Paul

2 2

Chorus CCIL availability
by Jonathon Exley 05 Aug '15

05 Aug '15

Hi NOGers, The Chorus Co-Innovation Lab (CCIL) is being upgraded to a new software release in preparation for a UFB production upgrade later this year. The Wellington and Auckland nodes will bounce several times today and tomorrow, as we exercise the upgrade and rollback procedures. [cid:image001.jpg(a)01CF4F55.0ABA26E0] Jonathon Exley Network Specialist Layer 2 T +64 4 896 4190 M +64 27 514 8048 E jonathon.exley(a)chorus.co.nz<mailto:jonathon.exley(a)chorus.co.nz> Level 8, State Insurance Tower, 1 Willis Street Wellington www.chorus.co.nz<http://www.chorus.co.nz/> Aon Hewitt Best Employer in Australasia 2012 & 2013 P Please consider the environment before printing this e-mail This communication, including any attachments, is confidential and may be legally privileged. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. No confidentiality or privilege is waived or lost by any mis-transmission or error. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002.

2 2

Chorus EUBA + IPV6
by Simon Allard 02 Aug '15

02 Aug '15

Since it seems to be ipv6 month here at NZNog I thought I would bring this up. Some of you have commented that Orcon is in trial mode for IPv6 and are probably wondering why we haven’t progressed. We have had IPV6 enabled for a while and have a good number of ipv6 customers online now. However we found an issue on the Chorus network which stopped us rolling it out further. (UFB ipv6 was another battle which requires beer!) What we found was some Chrous DSLAMS with certain card types would drop IPV6CP packets in one direction when doing the PPPoE->PPPoA conversation. It would seem that these cards don’t support Ipv6. Weirdly enough it would seem it is the newer card types used for Broadband IP. (citation needed). This in itself isn’t a major but we also found our NFV4 modem would reset its entire PPPoE stack if the IPV6CP conversation started but didn’t complete as expected, so customers would constantly be disconnected and cycle around. (The Genius modem works well with ipv6) The NFV4 issue aside (we are resolving with the Vendor). We approached the Chorus tech team and they helped identify the issue but that’s is where its hit a brick wall. The Chorus op team are not keen on fixing the issue nationwide as it involves new code versions, a massive amount of testing and a long rollout program. (I can understand where they are coming from). To summarise: IPV6 doesn’t work on Chorus EUBA on some line card types Only affect PPPoE->PPPoA translation PPPoE end to end is fine. Chorus say IPV6 not supported on EUBA Customer numbers effected are smallish. We will fix the NFV4 issue, but keen to rollout more IPV6 to all customers, not just the lucky ones on card types which work. Has any other ISP’s (the bigger ones especially) noticed this? As it will require some pressure to get some progress. Cheers, Simon Allard Orcon/Callplus [cid:image92256e.PNG(a)016ea4ce.48a80470] Simon Allard // Senior Network Architect D: 09 550 2790 M: 020 100 0790 F: www.callplus.co.nz<http://www.callplus.co.nz> | www.slingshot.co.nz<http://www.slingshot.co.nz> | www.flip.co.nz<http://www.flip.co.nz> | www.orcon.net.nz<http://www.orcon.net.nz> This message and any attachments contain privileged and confidential information. If you are not the intended recipient of this message, you are hereby notified that any use, dissemination, distribution or reproduction of this message is prohibited. If you have received this message in error please notify the sender immediately via email and then destroy this message and any attachments.

5 5

ARP _request_ with Target Protocol Address = 255.255.255.255
by Ewen McNeill 02 Aug '15

02 Aug '15

On the off chance that someone else has seen this before and knows what causes it, does anyone know of any software that generates ARP _Requests_ with the Target Protocol Address (TPA) of 255.255.255.255 (all ones). Such that results in this sort of log message from picky switches: <188> Jul 29 10:47:13 [SWITCH] ARP[ipMapForwarding]: ipmap_arp_api.c(1147) 1021154 %% Received ARP Request on interface Vl1 with bad target IP address 255.255.255.255. Sender IP is [REALIP], sender MAC is [REALMAC]. As far as I can tell they happen _approximately_ every 5 minutes, but definitely not to the second. I'm told the Sender IP is a relatively old Windows host, but the Windows admins don't know of anything installed which would do that. Searching the Internet doesn't turn up much. I did find UNARP (https://tools.ietf.org/html/rfc1868) but that's supposed to be an unsolicited ARP _Reply_, and this is a Request; and besides this isn't the scenario UNARP was invented for anyway. The only other speculation I can find is maybe it's a gratuitous ARP that doesn't follow RFC5227 (https://tools.ietf.org/html/rfc5227; which says that Target Protocol Address should be set to the address you want to claim), but that also seems implausible (especially since the DHCP leases at this site are longer than 5/10 minutes). Any thoughts as to what might be generating it welcomed. Ewen PS: This is not the ARP being _broadcast_ to the all address 255.255.255.255; that happens all the time on requests. This is asking "who-has 255.255.255.255"!

2 3

gnodal switches
by Rob McDonald 28 Jul '15

28 Jul '15

Hi, Slightly OT maybe. Not an operational issue. But where else would you ask? Has anyone heard of what happened to gnodal? They sprang up, released some fairly impressive switches, went into receivership then were purchased by Cray computing... 18 months later you can buy their hardware on ebay... $5000 kiwi landed for a 72port 10gig SFP+ chassis? Has anyone made use of this kit? Cheers Rob

1 0

Call for Presentations - DNS-OARC Fall Workshop, Oct 2015 -- Deadline Extended
by Sebastian Castro 28 Jul '15

28 Jul '15

The next DNS-OARC Fall Workshop will take place in Montreal on Oct 3rd and 4th, the weekend before NANOG65. DNS-OARC is requesting proposals for presentations, with a preference for DNSSEC work. We are looking for the whole spectrum, from measurement work using passive and active techniques, to applications and potential new uses of DNSSEC. This workshop intends to build from previous strong DNS-OARC workshops, where operational content and research is welcome. Presentations from DNS operators are particularly welcome, as well as from DNS researchers. All DNS-related subjects are accepted, introduction to new tools, visualizations, data analysis, DNSSEC and novel uses of the DNS. If you are an DNS-OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. Time will be available for lighting talks to fit short presentations (5 to 10 minutes). Workshop Milestones 17 June 2015, Call for Presentations posted 17 June 2015, Open for submissions 14 August 2015, Deadline for submission (Deadline extended by two weeks) 20 August 2015, Final Program published 1 October 2015, Final deadline for slideset submission Details for abstract submission will be published here: https://indico.dns-oarc.net/event/24/call-for-abstracts/ The workshop will be organized on different tracks, depending on the topics and the timing of each presentation. If you are interested in a lightning talk, let us know at the time of submission. You can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> if you have questions or concerns. Sebastian Castro, for the DNS-OARC Programme Committee DNS-OARC is also seeking sponsorship for this workshop, please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that DNS-OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Sebastian Castro Technical Research Manager .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Android "stagefright" bug, aka "The Android End Times"
by Mike Forbes 27 Jul '15

27 Jul '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Seems this is pretty hot right now. Basically every single android device - and it seems very difficult to imagine a scenario where all those devices could be patched. Suggestions for mitigating include disabling the "Auto download / Auto retrieve" portion of your MMS app and/or disabling the MMS APN in your mobile settings. Though, of course the vulnerability is in the media library so assume the malicious code could be sent via other means. In talking to @jduck (he's a Kiwicon regular!) he's openly commented that this exploit could be definitely wormable. Sources: http://arstechnica.com/security/2015/07/950-million-android-phones-can-be-h… http://blog.zimperium.com/experts-found-a-unicorn-in-the-heart-of-android/ -----BEGIN PGP SIGNATURE----- iQQcBAEBCgAGBQJVtrdXAAoJENoDRsDWj78uMxwf/0AmB3LCWaPN7JT+9dlyQfUR YGppVe9ehpLXg0hhZod9//IJ0GXXhO1TeYwXVgO3E5fPKjNCy1DBv4eCrp/HAnBS 13r04j+H7H4tFy+KjPUHj546+U0KxAk8K4R08NGsyhpnSL4vIrm4m8D2MsOzlU/n YuiVHqCsxyO3YQ+FZDh24tLGCnoy+HrhFa+ry/i1KNOPdRFZmtrHwET5BBKX9q0I n/Dfgo1z4Lbfs6D5QmH1A2AhHXQx8fUiW0mNdOfd/SW4Thmwj7xPJVo36PGimYPQ 8qznIlLJLX9BgFZ10uVmCJaQEH2M1ZD1cV8WhnAgznSISTx8oopo5A3Qgk/D3Ltg LXApd09pv8fQbjq15fUmDc1buAYB/On7lkpboWxFSo2UHV3ua5YK0rz9Yag4TaBU Ii3+6a2dwW933qUQlLn7JR0ibv+yKsHeK/zjnd0WC8iaDGb+I33hdf+fL9DU7re/ DF0k0ku7E8Uf7209A+yz+2kW0qrE9guldvn4M3mGC4ptG0QQvRPEiTynxARO9pjW iWTix+zDkD8qlyUw2aiK9yTaXhdYQRUHcoBmVrs+HCQABLgQmpdZ/8FBZGFE3F0F KHRmLaPuhTeeKprHti2JoVU98/5OYGNMzYrRs13jV1I399vJSVP6grUIPIpk7M8i zI8vqsXmBNAK2CYK++WHINccjkFfZf6hJ1V59Ajv1VjeSkmFfuEveO2+AIjOvrBr Bv3ZcflxTZsmqxHrOhrU/VclpT8qprc8GoFYMLSpLmQsLqGG5H9ih5vLhz8H7wXe lDuwjXZbtRmAh4BtfCGZoR20KJExNipgoZlFN0zD46Y91F/CFYvMGOlQlmi978i/ 1CrQ6MAU/7krFGPGUXnf4ChXfDzxH41E90Sb02xHsl6542Cf21z9yjdTqavGln2R z6nnDhIM+FfbGdh/IxdBBQT334Dlaby+HDnHfv9z8NzmA+g6l4rnZn7g04O0r5oq 68odwxL59mUyC1Uhp1NIxcTSxgD+Rj8ZWs98auQkYFOrUoW2QlsmIAvqbZIQY0sT /isSYpsP/pO74mBt62fjz/dcrDwiPypDdT0iZxmgfeD+Jjlo78KxoVCpLxxBtKUw ykxvD3yhqsY4nJf6KkyRMJ3CgkNTNifmdJ/LhJ+0pbO9+zh8gL0kWO/S5WLg2nt4 CtRfOeQ4WwPX7PEmmtSs38L1oA3YUcRBYq2eseg0915WFO6tXjx/9Ej/Fj3lZ0jZ vWzF/PcTxkohBZk2CrnWBXxhbAgGtSNPzHzxDFMcu2kkLrDR0dn7efd5TDbbzRTe Dur1XFAmcGMh8KuW2HxqkOMu/fPLmbgufjxNcy7PG2CWZy7Xn8TwnGAyNnrvcCI= =cyK6 -----END PGP SIGNATURE-----

1 0

Any 2talk NOC lurking?
by Pete Mundy 27 Jul '15

27 Jul '15

Hi 2talk Just on the off-chance any of your guys are lurking on this list? You seem to have dropped a route and all traffic bound to your NS is going nowhere as of shortly after 6am today. I've tried lookups and pings from connections on quite a range of ISPs and they all show the same thing. Some traceroute examples are included below just as a reference. It's not the first time the route to the network hosting your NS has dropped. Have you ever considered having a tertiary NS elsewhere, say maybe on AWS or something? Just a thought. Anyway just a heads up since I can't access your live portal to lodge a ticket ;) (and a warning for others on list in case they are affected by it too). Cheers, Pete [from a Spark link] Host Loss% Snt Last Avg Best Wrst StDev 1. dsl-router.lan 0.0% 3 1.5 1.4 1.3 1.5 0.1 2. 122-56.78-178.n4l.sparkdigital.co.nz 0.0% 3 59.1 24.6 7.2 59.1 29.9 3. 122-56-99-251.n4l.sparkdigital.co.nz 0.0% 3 15.0 30.4 15.0 60.8 26.3 4. 122-56-99-250.n4l.sparkdigital.co.nz 0.0% 3 15.5 17.6 15.5 21.6 3.5 5. 122-56-99-253.n4l.sparkdigital.co.nz 0.0% 3 15.8 15.4 14.9 15.8 0.5 6. ??? 7. ae8-10.akbr6.global-gateway.net.nz 0.0% 2 25.8 25.8 25.8 25.8 0.0 8. ??? [from a Snap link] fpl-rpi17 (0.0.0.0) Tue Jul 28 07:16:35 2015 Keys: Help Display mode Restart statistics Order of fields quit Packets Pings Host Loss% Snt Last Avg Best Wrst StDev 1. fritz.box 0.0% 6 1.0 1.0 1.0 1.1 0.1 2. 133.7.69.111.static.snap.net.nz 0.0% 6 2.8 5.1 2.8 13.5 4.2 3. ??? [from a Solarix link] vvm2.fiberphone.co.nz (0.0.0.0) Tue Jul 28 07:17:14 2015 Keys: Help Display mode Restart statistics Order of fields quit Packets Pings Host Loss% Snt Last Avg Best Wrst StDev 1. ge-1-1-1-340.core-0.ive.chc.unleash.net.nz 0.0% 6 1.0 1.0 0.6 2.1 0.6 2. ae1-22.core-0.sho.chc.unleash.net.nz 0.0% 6 1.1 1.5 0.8 3.3 0.9 3. ae0-3221.core-0.que.akl.unleash.net.nz 0.0% 6 17.1 17.3 16.8 18.3 0.5 4. 116.90.129.203 0.0% 5 17.8 17.2 16.7 17.8 0.4 5. ten-0-3-0-500.bdr01.akl05.akl.VOCUS.net.nz 0.0% 5 17.1 17.4 17.1 17.5 0.2 6. ???

3 2

National Broadband Map launched yesterday
by Sebastian Castro 23 Jul '15

23 Jul '15

Hello members of the NZNOG community: NZRS launched the National Broadband Map (https://broadbandmap.nz) yesterday with the participation of Hon. Amy Adams. We had an overwhelming response and our team had to clock some extra hours to scale up everything nicely to cope with the load. We are getting calls and messages noting the accuracy in certain border cases. We are working with our data suppliers to ensure the information we're presenting is as accurate as possible, and new data will be added in the next weeks to improve it. We are open to receiving your comments and feedback, and definitely planning a presentation about the process for the next NZNOG meeting. Kind Regards, -- Sebastian Castro Technical Research Manager NZRS Ltd. desk: +64 4 495 2337 mobile: +64 21 400535

2 1

CallPlus Routes / Akamai Coming via Vocus / AKL-IX??
by Liam Farr 22 Jul '15

22 Jul '15

Hey, Anyone else seeing this, routes to CallPlus are being advertised to AKL-IX by Vocus rather than by CallPlus direct. As an example this is breaking 'www.stuff.co.nz' for me. The path by Vocus seems really 'fucked' (like its aggressively shaped down to nothing) so HTTP takes forever to load. Liams-MacBook-Pro:~ liamfarr$ traceroute www.stuff.co.nz > traceroute: Warning: www.stuff.co.nz has multiple addresses; using > 119.224.143.41 > traceroute to a1784.g.akamai.net (119.224.143.41), 64 hops max, 52 byte > packets > 1 192.168.6.1 (192.168.6.1) 0.710 ms 0.394 ms 0.332 ms > 2 unallocated.maxumdata.net (103.247.154.2) 0.427 ms 0.434 ms 0.397 > ms > 3 vl0901.core2.qs220.maxumdata.net (103.247.154.141) 0.585 ms 0.651 > ms 0.586 ms > 4 vl0233.edge1.qs220.maxumdata.net (103.247.154.38) 0.645 ms 0.672 > ms 0.613 ms > 5 43.243.21.6 (43.243.21.6) 1.580 ms 1.459 ms 1.529 ms > 6 ten-0-1-0-2.cor01.akl05.akl.vocus.net.nz (114.31.202.122) 2.139 ms > 2.088 ms 2.294 ms > 7 bundle-10.bdr02.akl05.akl.vocus.net.nz (114.31.202.101) 2.560 ms > 2.764 ms 2.314 ms > 8 as4610.cust.bdr02.akl05.akl.vocus.net.nz (175.45.102.66) 24.271 ms > 24.166 ms 24.251 ms > 9 pts-n.cpcak4-r1.tranzpeer.net (101.98.5.20) 2.297 ms 2.175 ms > 2.254 ms > 10 p1.akamai.callplus.net.nz (119.224.143.1) 1.488 ms 1.633 ms 2.441 > ms > 11 p41.akamai.callplus.net.nz (119.224.143.41) 1.624 ms 2.116 ms > 2.334 ms liam(a)QS220-EDGE1:~$ show ip bgp 119.224.143.41 > BGP routing table entry for 119.224.142.0/23 > Paths: (4 available, best #3, table Default-IP-Routing-Table) > Advertised to non peer-group peers: > 103.247.154.37 103.247.154.42 103.247.154.186 192.203.154.150 > 2403:4d00:fff:ffff:ffff:ffff:20:2 > 45177 4610 9790 > 103.247.152.241 from 103.247.152.241 (14.1.32.4) > Origin IGP, localpref 50, valid, external > Community: 55785:502 > Extended Community: RT:45177:1117 > Last update: Thu Jul 9 06:37:46 2015 > 45177 4610 9790 > 103.247.152.213 from 103.247.152.213 (14.1.32.4) > Origin IGP, localpref 50, valid, external > Community: 55785:502 > Extended Community: RT:45177:1117 > Last update: Thu Jul 9 06:34:55 2015 > > > > > * 4826 4610 9790 43.243.21.6 from 43.243.21.1 (43.243.21.1) > Origin IGP, localpref 100, valid, external, best Community: 55785:202 > Last update: Wed Jun 24 04:15:20 2015* > 23655 9560 9790 > 111.69.34.225 from 111.69.34.225 (43.225.200.2) > Origin IGP, localpref 90, valid, external > Community: 55785:302 > Last update: Sat Mar 28 03:36:00 2015 As CallPlus peer on AKL-IX I would have expected to see them advertising their own routes, rather than just advertising these to Vocus who are then 'breaking them'. Perhaps someone from CallPlus could fix their advertisements, and someone from Vocus could either fix their 'bottleneck' or stop advertising the routes. -- Kind Regards Liam Farr Maxum Data +64-9-950-5302

8 8

Junos and RPKI validation
by Dave Mill 16 Jul '15

16 Jul '15

Hi all NZNOG, and especially Michael Fincham and Tim Hoffman, had done a big push both at our conferences and on this list to get people using RPKI route validation. We were a test customer using the NZRS service at http://validator.rpki.net.nz/rtr-sessions . Someone with an observant eye may have noticed that we silently stopped using this validator a few weeks ago. We hit a 'minor' issue where Junos would restart _all_ routing daemons and produce a core dump when running a session to a RPKI validator. It affects 12.3R9 12.3X48-D10 13.3R4 14.1R3 14.2R1 15.1R1 and happens on J-series, M-series, T-series, MX-series, EX Series, SRX Series. PR for those with a Juniper login - https://prsearch.juniper.net/InfoCenter/index?page=prcontent&id=PR1010216 Upgrade to a recent release of your choosing to fix. Just figured I'd share for anyone else who is doing RPKI validation on one of these releases. For now we've stopped doing RPKI validation until we can arrange an upgrade of the routers involved. Cheers Dave

2 1

dual sim (3g) routers
by Jodi Thomson 12 Jul '15

12 Jul '15

Hi Folks We're on the hunt for a dual-sim (3g) router. Have done some googling but not sure what may or may not work with our 3/4G networks. Primary objective is to have 2nd 3G link as failover to second network (eg spark -> vodafone), but aggregation would be helpful also if networks support it (eg vodafone-vodafone) Wondering if anyone on the list knows what is available in NZ? Off list replies welcome to prevent clutter Cheers Jodi PS Beer -- Jodi Thomson Systems & Networks Web Connect Ltd Unit 1, 501 Heretaunga Street West Hastings, 4122 Ph: (06) 281 2324 (ext 802) http://www.webconnect.nz

1 1

Whither NzWrt?
by Dave Taht 12 Jul '15

12 Jul '15

I am curious if the NZWrt idea ever got any traction? It certainly seemed saner for me for a set of ISPs to agree on one specific hardware type, get software that met their needs, make it stable as heck, and to maintain it themselves.... -- Dave Täht worldwide bufferbloat report: http://www.dslreports.com/speedtest/results/bufferbloat And: What will it take to vastly improve wifi for everyone? https://plus.google.com/u/0/explore/makewififast

3 2

NZ TCF very bad SSL FYI
by Tony Wicks 08 Jul '15

08 Jul '15

HI guys, one of my users reported being unable access the IPMS platform this morning and it appears Firefox and Chrome are calling bul### on the really bad SSL on the TCF website and blocking access. IE still works but really shouldn't. Anyone on the TCF on this list, please sort your your technical people, this is just not good enough ! https://www.ssllabs.com/ssltest/analyze.html?d=ipms-prod.tcf.org.nz

1 1

4-wire SHDSL routers in NZ
by Dmitry Konchanin 06 Jul '15

06 Jul '15

Hi all We are suddenly in need of a couple 4-wire SHDSL EFM routers. There is basically no retail market for shdsl devices, ones we found are only 2-wires or have to be ordered with a lead time of couple of weeks (except pricy Cisco 888E option). If somebody has an access to stocked supply of such devices, could you please contact me off the list. -- Kind regards, Dmitry Konchanin

3 2

Intac program
by Dean Pemberton 02 Jul '15

02 Jul '15

Hi all, The Programme for this year's InTAC is now up: http://2015.nethui.nz/programme/day-0-intac This year there is a focus on "The Netflix Effect; Organic Growth or Step Change?" What does the changing face of user demand look like? What happens when people who previously only used their home connections for email and web, start using it for multiple 4-5Mbps streams? What happens when everyone on their street does that? Take a drive down any New Zealand street and look at all the Sky dishes on the roof â€“ what if every one of those houses was trying to pull 20Mbps during primetime instead? What would our network do with all that demand? We take a look at his problem, from the people at one end to the content delivery at the other. Registrations for this and the rest of the NetHui programme are still open here: https://nethui2015.lilregie.com/step1 See you next week! Dean -- -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz To promote the Internet's benefits and uses, and protect its potential.

2 1

Fwd: [PAG] Fwd: InternetNZ deeply disappointed with Global Mode withdrawal
by Joel Wirāmu Pauling 23 Jun '15

23 Jun '15

FYI; ---------- Forwarded message ---------- From: Jordan Carter <jordan(a)internetnz.net.nz> Date: 23 June 2015 at 16:48 Subject: [PAG] Fwd: InternetNZ deeply disappointed with Global Mode withdrawal To: Policy Advisory Group <pag(a)mailman.internetnz.net.nz> ---------- Forwarded message ---------- From: *Aimee Whitcroft* <news(a)meltwaterpress.com> Date: Tuesday, 23 June 2015 Subject: InternetNZ deeply disappointed with Global Mode withdrawal To: jordan(a)internetnz.net.nz A better world through a better Internet InternetNZ deeply disappointed with Global Mode withdrawal InternetNZ is deeply disappointed at announcements today that the Global Mode service is being withdrawn from New Zealand. "Global Mode was a great example of Internet-based innovation that challenged traditional content distribution models. It was by no means clear that the service was illegal, and we were keen to see the matter go before the courts to provide users and the industry with clarity." said InternetNZ Chief Executive Jordan Carter. The removal of this service means that New Zealanders have fewer options to pay for content. Restricting consumer access to paid content services on the basis of geographic content monopolies seems the wrong answer to resolving copyright concerns. "Withdrawing the service and settling before court seems a worse outcome for all concerned. The media companies have said that they wanted to clarify their own legal rights over content - a settlement doesn't achieve this, and leaves us all none the wiser." "There remains a number of questions that will now go unanswered due to this withdrawal. Internet users and innovation have taken a back seat to entrenched old media interests." "This outcome makes it ever more important that we review New Zealand copyright law, to ensure that the interests of consumers and creators are appropriately balanced." said Carter. *ENDS* For more information, please contact Andrew Cushen, Acting Chief Executive: - 021 346 408 - andrew(a)internetnz.nz www.internetnz.net.nz *Disclaimer: *If you do not wish to receive further news/releases from Internet NZ, please click the following link: [Remove Me] <http://app.meltwaterpress.com/mpress/removeme.html?cId=3507196&sId=171920&c…>. Requests will take a maximum of 2 business days to process. Contact information: Aimee Whitcroft, Internet NZ, Grand Arcade Tower, 16 Willis Street, Wellington, 6011 -- Jordan Carter Chief Executive, InternetNZ +64-21-442-649 | jordan(a)internetnz.net.nz Sent on the run, apologies for brevity _______________________________________________ Pag mailing list Pag(a)mailman.internetnz.net.nz http://mailman.internetnz.net.nz/mailman/listinfo/pag

1 0

Call for Presentations - DNS-OARC Fall Workshop, Oct 2015
by Sebastian Castro 17 Jun '15

17 Jun '15

The next DNS-OARC Fall Workshop will take place in Montreal on Oct 3rd and 4th, the weekend before NANOG65. DNS-OARC is requesting proposals for presentations, with a preference for DNSSEC work. We are looking for the whole spectrum, from measurement work using passive and active techniques, to applications and potential new uses of DNSSEC. This workshop intends to build from previous strong DNS-OARC workshops, where operational content and research is welcome. Presentations from DNS operators are particularly welcome, as well as from DNS researchers. All DNS-related subjects are accepted, introduction to new tools, visualizations, data analysis, DNSSEC and novel uses of the DNS. If you are an DNS-OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. Time will be available for lighting talks to fit short presentations (5 to 10 minutes). Workshop Milestones 17 June 2015, Call for Presentations posted 17 June 2015, Open for submissions 30 July 2015, Deadline for submission 20 August 2015, Final Program published 1 October 2015, Final deadline for slideset submission Details for abstract submission will be published here: https://indico.dns-oarc.net/event/24/call-for-abstracts/ The workshop will be organized on different tracks, depending on the topics and the timing of each presentation. If you are interested in a lightning talk, let us know at the time of submission. You can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> if you have questions or concerns. Sebastian Castro, for the DNS-OARC Programme Committee DNS-OARC is also seeking sponsorship for this workshop, please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that DNS-OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Sebastian Castro Technical Research Manager .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Onsite Cisco Switch Install - Tomorrow - lunchtime-ish (Auckland)
by Skeeve Stevens 16 Jun '15

16 Jun '15

Hi all, I need a Cisco switch installed in Auckland tomorrow. It is already onsite and will need to be wiped (if anything is on it) and the config provided loaded, then installed into a rack. If you can assist, please let me know off-list with availability (tomorrow obviously) and rates. As usual I get a dozen responses... I will accept the first appropriate one, but sorry if I don't reply to everyone. ...Skeeve *Skeeve Stevens - Founder & Chief Network Architect* eintellego Networks Pty Ltd Email: skeeve(a)eintellegonetworks.nz ; Web: eintellegonetworks.nz Phone: +612 8014 7398 ; Cell +61 (0)414 753 383 ; Skype: skeeve Facebook: eintellegonetworks <http://facebook.com/eintellegonetworks> ; Twitter: eintellego <https://twitter.com/eintellego> LinkedIn: /in/skeeve <http://linkedin.com/in/skeeve> ; Expert360: Profile <https://expert360.com/profile/d54a9> The Experts Who The Experts Call Juniper - Arista - Cisco - Cumulus Linux - Cloud - Consulting - IPv4 Brokering

2 1

IANA AS Numbers registry update
by Selina Harrington 11 Jun '15

11 Jun '15

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following block to RIPE NCC in June 2015: 202240-203263 Assigned by RIPE NCC 2015-06-11 203264-204287 Assigned by RIPE NCC 2015-06-11 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

1 0

Re: [nznog] racks for beer.
by Stuart Pigneguy 10 Jun '15

10 Jun '15

I also have two 19" server racks (with doors) no longer required and can be exchanged for beer. I believe they are 42U, available for pick up in Auckland on Monday 22nd. Otherwise they'll be scrapped! - please reply off list Cheers, Stuart NZNOG lurker since 2001

1 0

DEI bit on Fortigate D series
by Dan BAJARCA 09 Jun '15

09 Jun '15

Hi All, Just sharing a bit of knowledge around issues we've had with Fortigate firewalls on UFB Accelerate plans. Some of our customers reported slow download speeds (generally close to 2Mbps) when using Fortigate D series firewalls on UFB 200/100 (tested with 30, 60 and 90 models). The issue is caused by the units dropping inbound packets with the DEI bit set and showed up on 5.0 and 5.2 software. After some extensive troubleshooting with Fortinet they've eventually acknowledged the fault and moved it to their bug queue. Hopefully a fix isn't too far away. If you're currently battling this issue, a tested workaround would be to configure the circuit as untagged. Chorus should also be able to disable the DEI bit marking on a per service provider basis but better think twice before requesting it. Cheers, Dan

1 0

Assistence with Brocade CNA
by Tristram Cheer 09 Jun '15

09 Jun '15

Hi All, I've run out of options for an issue we've got with some brocade 1020's we're using in a pinch, Is there anyone who's familiar with the 1020's and vmware on the list who's able to drop me a message off-list? I'm hoping it's a simple thing and some beer for your efforts. Cheers Tristram Cheer Network Architect - Most problems are the result of previous solutions... [Visit our Website]<http://www.uber.co.nz/> 09 438 5472 Ext 803 | 022 412 1985 | PO Box 5083, Whangarei, 0140 t(a)uber.co.nz<mailto:t(a)uber.co.nz> | www.ubergroup.co.nz<http://www.ubergroup.co.nz> [http://uber.co.nz/uploads/signatures/fb-s-v4.png]<http://ubergroup.co.nz/fb> [http://uber.co.nz/uploads/signatures/twitter-s-v4.png] <https://twitter.com/#!/ubergroupltd>

1 0

Where can congestion occur on a UFB (GPON) network?
by Joel van Velden 03 Jun '15

03 Jun '15

Hi all, At Auckland Thursday Night Curry I asked what I thought was a simple enough question: "In this this new world of GPON fibre that is UFB, /where can congestion occur/?" Obviously at handovers, no question, but where else? From what I can figure, given a hypothetical GPON network using a 24-way optical split (seems to be number quoted in a NZ context) Standard GPON suggests 2.488 Gbps down, so split 24 ways is 103.7 Mbps (Not sure what packet sizes) So if all customers behind a splitter are provisioned at a maximum of 100Mbps down, there could be /no/ congestion? Obviously this is not the case with 200 and 1000 down being sold. Are there other possible points of congestion between the point of handover and the GPON switch? (forgive me I'm not up with the exact terminology. OLT?) What have I got wrong? -- Regards, Joel van Velden

1 0

RE Legal Text on TICSA - Visit to Wellington/ Seeking input
by Beau Murrah 27 May '15

27 May '15

Hello NZNOG list, Some months ago I emailed to the list about my plan to produce a legal manual/critical to guide to the TICSA legislation for network operators/the list. I got some feedback from people on this list and outside of it that there was interest in such analysis and some highlighted a number of particular issues to look into/affecting them. My original hope was to have it completely edited and ready to share to the list about this time - I know updated guidance was/is planned to be released by the NCSC soon (or has already been released). Well, Im still going at it but it is proving difficult topic to write about and finish into a usable and credible form. My text is currently 6500+ words - and I think there are definitely some genuinely some useful or novel things for consideration but it is also all over the place. Initial feedback on the very rough draft was that it doesn’t seem clear exactly exactly who I am writing for - seeming like a mix of legal academic essay and direct practical consideration for network operators and also partly political content about the nature of bureaucracy in this area (the latter Ive decided to cut out as much as possible. I believe writing about this topic is difficult because I realised I don’t know much about what the worklife of a network operator of a truly large network is actually like at all. I have read/seen most all of the publicly available information - close reading of the legislation and related legislation, NCSC guidance, information from this list and so on. None of the technical people I know are network operators. It is hard to gauge what the level/type of interaction with the Agency is actually like broadly. I really don’t want to inadvertently publish any bullcrap technical claims and there is plenty of cyber-paranoid stuff out there already. So, I digress- I am visiting Wellington later this month (28th-31st May) and I would love to get insight from a network operator(s) over beer/coffee/water. I am actually less interested in what TICSA compliance has been like for you - and I don’t expect or want you to “leak” anything or disclose anything - but to hear more about the worklife of a network operator in general day to day that would come under examination in any potential legal proceeding under TICSA. To give a quick preview of my text, it focuses on the fundamental importance of good faith in the legislation to protecting you from any worst case scenario from alleged non-compliance. It considers what remaining in good faith could look like in a situation of alleged non-compliance and what variety of reasons or events could lead to non-compliance while good faith has been retained by the network operator. This depends on a lot on getting an understanding your workflow and obligations and what kind of people are you expected to report to and way that evidence accumulates in your day - much like in any employment situation or potential examination/dispute. There is very limited legal precedent to what Good Faith actually is from legislation and case law around the issue of employment and law and collective bargaining. How good faith might be interpreted involving network operators dealings with the Agency is a very open question and something all network operators ultimately have an interest in. I will say that the guidance provided to you by the NCSC guidance is not legal binding guidance and makes particular assumptions about the nature of good faith. It is very possible that this entire law will never effectively see a day in court if the narrative that this regulation is intrinsically a piece of national security and good faith flatly means following the Agency’s commands or striving to meet their interpretation of compliance. I do not think this is correct nor is anyway certain. I will add though, an actual Court case under this legislation’s confidentiality and evidential provisions will attempt to turn a civil court into a “Secret Court” like FISA this Country has never really seen and will intimidate the most experienced of lawyers, Judges and Court staff - there is a huge impetus to avoid this situation, and hopefully this can be put more in the network operators favour, rather than to scare them. I invite you to email me off-list if you want to meet, or to email on-list to propose a venue/time on-list for people to chat as a group. Happy Budget day, ___________ Beau Murrah Ph: +64 27 375 7897 Email: bmurrah(a)icloud.com <mailto:bmurrah(a)icloud.com> - PGP: https://keybase.io/airbridge <https://keybase.io/airbridge> Linkedin: https://www.linkedin.com/in/bmorganmurrah <https://www.linkedin.com/in/bmorganmurrah> Enrolled Barrister and Solicitor of the High Court of New Zealand (NB: not a lawyer <https://www.lawsociety.org.nz/for-lawyers/joining-the-legal-profession/admi…>)

2 1

Re: [nznog] Need assistance troubleshooting a DNS issue
by Glen Eustace 27 May '15

27 May '15

To satisfy the curious and to provide some closure on this incident, I have included a statement from Ryan Joe. The incident began approx last Oct/Nov and was resolved last week. I would like to thank Peter Lambrechtsen for getting the right people at Spark to contact me and for their perseverance working through what turned out to be more than one non-trivial issue. The impact, unfortunately, was not wide spread and hence had gone largely un-noticed but had the potential to impact a lot more people. I don’t believe that it is my place to go into the details of the issues, what was found and how they were fixed. Perhaps a Spark engineer would be prepared to do so as I believe it would be of interest to many on this list. "As discussed on Friday, this email is to acknowledge that Spark experienced a problem with our DNS which resulted in some Spark customers being intermittently unable to access content hosted at godzone.net.nz <http://godzone.net.nz/>. I’d like to sincerely apologise for any frustration or inconvenience caused by this – we have now fully resolved the issue” Ryan Joe Senior Product Manager - xDSL -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Glen and Rosanne Eustace, GodZone Internet Services, a division of AGRE Enterprises Ltd., P.O. Box 8020, Palmerston North, New Zealand 4446 Ph: +64 6 357 8168 <tel:%2B64%206%20357%208168>, Fax: +64 6 357 8165 <tel:%2B64%206%20357%208165>, Mob: +64 27 542 4015 <tel:%2B64%2027%20542%204015> "Specialising in providing low-cost professional Internet Services since 1997"

1 0

Random number generators
by Nathan Ward 25 May '15

25 May '15

Hi all, As we all know, random numbers are an important part of cryptography, which is required for tools that are important to network operators like the widely deployed RPKI. Most systems today generate random numbers using a PRNG, rather than a dedicated hardware random number generator. A PRNG is only as good as its entropy source - if you have a small amount of entropy, an attacker can start to predict the output of your system’s PRNG, which is obviously bad. There are a number of existing tools for generating entropy: - HAVEGE implementations (i.e. http://www.issihosts.com/haveged/) - Audio/video sources (audio_entropyd and video_entropyd) - Some other things like mouse/keyboard input (i.e. when you wiggle your mouse over that window in whatever that app was that generated keys, puttygen maybe?) - Network interrupts is also a common source A week or two back I was a little hungover and didn’t want to do any real work, and decided to write my own entropy harvesting tool, and have the code available at the below URL: https://github.com/nward/trueentropy I strongly encourage you NOT to run this on production systems, until it has been certified (a good standard to shoot for would be NIST SP 800-90B perhaps), but I would like to get feedback, so please read the code and suggest improvements. Perhaps you have some additional sources of entropy data that would be useful. I would particularly like a good way to “boil down” the entropy generated. The Linux kernel by default can take up to 4096 bits, and this provides far, far more than that, which just seems like a bit of overkill. Please feel free to submit pull requests with ideas for that - it would be a great project to learn a bit of Python. Generally, entropy should not be sourced from a system you don’t control, or sourced over a network you don’t control, for obviously reasons. However, the quality of the data is so good in this case that I believe it negates those concerns. The data is also fetched with HTTPS, so as long as the source doesn't also starting using this as their entropy source (known as entroception) we should be OK - see my recommendation about production systems. -- Nathan Ward (opinions all my own, blah blah blah)

8 14

Dark fibre in the outer wilderness of... Parnell
by Matthew Poole 24 May '15

24 May '15

Hi all I'm getting discouraging information on the availability of dark fibre around the bottom end of St George's Bay Rd in Parnell, near Xero and the Textile Centre. Seems that nobody has any, or at least nobody is mentioning any. If anyone knows of dark fibre capacity in that area could they please contact me off-list. Cheers -- Matthew Poole "The difference between theory and practice is that practice is easier in theory than theory is in practice"

3 3

Re: [nznog] Random number generators
by Nathan Ward 23 May '15

23 May '15

> On 24/05/2015, at 15:12, Dean Pemberton <dean(a)deanpemberton.com> wrote: > > > I can't imagine that if you were an ISP you wouldn't know exactly where any TrueNet probes were in your network. That is possibly true if you’ve paid TrueNet for probes. If your customers have opted to have one without your involvement (which I assume is possible, given ComCom give them money to do just that across NZ) then that’s unlikely. > The only question then is which of the following strategies you employ. > > 1) do nothing. > 2) make this user the best on your network > 3) randomise the results > 4) tweek the results to spell out "what is six times nine” As I’m sure you can imagine, I’m keen to work on solutions to implement (4) if any network providers who have TrueNet portal access are keen for some fun. > Nathan, have you had a look at any other systems (SamKnows) to see if they are any closer to measuring Internet Good-ness? Briefly, but not in a while. My understanding is that SamKnows is much the same as TrueNet - a set of contrived tests, though they do a much better simulation of a web page load than TrueNet and it’s use of “URL Downloads using the WGET command” - but I don’t believe it’s anywhere near perfect in today’s javascript heavy world, where clients cache static content etc. etc. -- Nathan Ward

1 0

Anyone else having GGIS speed problems?
by Nathan Ward 19 May '15

19 May '15

Hi all, Beware, operational content. A couple of hours ago I started noticing weird things getting to stuff overseas. Looks like GGIS have some sort of path flapping that doesn’t care about IP flows. I see RTT to sites in the US jump from ~125ms to ~160ms several times per second, which to me is indicative of going the short and long way around the SXC network, respectively. # hping3 -S -p 80 216.146.46.10 HPING 216.146.46.10 (eth0 216.146.46.10): S set, 40 headers + 0 data bytes len=46 ip=216.146.46.10 ttl=55 DF id=33739 sport=80 flags=SA seq=0 win=65535 rtt=129.1 ms len=46 ip=216.146.46.10 ttl=55 DF id=47972 sport=80 flags=SA seq=1 win=65535 rtt=132.3 ms len=46 ip=216.146.46.10 ttl=53 DF id=48561 sport=80 flags=SA seq=2 win=65535 rtt=159.6 ms len=46 ip=216.146.46.10 ttl=55 DF id=35481 sport=80 flags=SA seq=3 win=65535 rtt=128.1 ms len=46 ip=216.146.46.10 ttl=54 DF id=49791 sport=80 flags=SA seq=4 win=65535 rtt=158.7 ms len=46 ip=216.146.46.10 ttl=55 DF id=36729 sport=80 flags=SA seq=5 win=65535 rtt=132.2 ms len=46 ip=216.146.46.10 ttl=53 DF id=50960 sport=80 flags=SA seq=6 win=65535 rtt=158.8 ms len=46 ip=216.146.46.10 ttl=55 DF id=37839 sport=80 flags=SA seq=7 win=65535 rtt=129.1 ms len=46 ip=216.146.46.10 ttl=55 DF id=38397 sport=80 flags=SA seq=8 win=65535 rtt=129.2 ms len=46 ip=216.146.46.10 ttl=54 DF id=39075 sport=80 flags=SA seq=9 win=65535 rtt=158.8 ms The above example is a bunch of SYN packets so are different L4 flows so it’d be *sort of* reasonable for them to go different ways. However, you see plenty of out of order TCP packets if you do a long running flow (like say trying to load a web page with large objects, such as speedtest.net) Out of order packets means TCP cries a bunch and goes slow. This is the effect I see. Note also the TTL differences and correlation to RTT. I do not see the TTL hopping around when looking at a single TCP stream, though I do see different TTLs on two concurrent streams, so I suspect that’s some other ECMP happening that isn’t a problem. Who knows where that might be, but I don’t believe it’s important. This particular host I have tested to is the speedtest.net main web server. I see the out of order packets when doing a regular speedtest.net test to the Sonic.net endpoint in California (I think San Jose?). Here is what mtr sees when tracing to the same host as above. It is unclear to me why hop 9 doesn’t see the same weird latency. It sees it sometimes, but not all the time. Perhaps there’s something about the way mtr sends packets that means the hashing is different over some sort of aggregate interface/ECMP thing. Maybe that’s where our TTL difference from above happens. I *always* see the frequent latency changes (jitter, I guess) on hop 8. 7.|-- ae1-10.tkbr12.global-gate 0.0% 10 3.3 3.5 2.2 5.3 0.7 8.|-- xe-0-0-7-3.sjbr3.global-g 0.0% 10 130.5 136.1 126.3 163.1 14.2 9.|-- ae0.pabr5.global-gateway. 0.0% 10 154.8 154.7 154.1 155.9 0.5 Here are some more samples that show the differences in later hops, but always hop 8 having jitter: 7.|-- 202.50.232.37 0.0% 10 3.5 3.2 1.5 4.1 0.7 8.|-- 122.56.127.22 0.0% 10 160.2 148.0 127.7 160.2 15.0 9.|-- 122.56.127.25 0.0% 10 158.2 148.6 132.2 166.9 14.3 10.|-- 203.96.120.74 10.0% 10 159.0 159.0 158.2 160.0 0.4 11.|-- 4.28.172.109 0.0% 10 167.6 171.3 166.3 207.7 12.8 7.|-- 202.50.232.37 0.0% 10 2.9 3.3 2.7 4.2 0.3 8.|-- 122.56.127.22 10.0% 10 159.3 147.1 126.6 168.7 17.1 9.|-- 122.56.127.25 10.0% 10 158.7 146.9 132.5 166.3 13.8 10.|-- 203.96.120.74 10.0% 10 159.7 158.8 158.0 159.7 0.0 11.|-- 4.28.172.109 20.0% 10 167.0 167.4 166.8 168.1 0.0 At least two providers have (or are in the process of) logging faults, so I figured it’s appropriate to bring it on to the list. Is anyone else seeing this behaviour? Do you have any feedback from GGIS yet? Have you had any customers complain about poor speeds/user experience? -- Nathan Ward

1 0

Situations Vacant: Network Operations Team Leader
by Mark Foster 07 May '15

07 May '15

'evening folks. A quick 'sits vacant' advertisement; my Network Operations Team Leader is heading across the ditch for a new role shortly and I'm beginning the recruiting process to replace him. Looking for someone who speaks BGP and MPLS reasonably fluently and can help manage our network, managed security and datacentre operations, and also has some leadership potential (with two direct-reports to manage, in addition to the technical skills sought). If you're interested or know someone who might be, please contact me off-list for further information (keeping this deliberately light on advertisey-type-speak). The role is located in the Auckland CBD. Thanks, Mark. -- Mark Foster Technical Services Manager - Australia & New Zealand [Description: Description: Description: Description: Description: iconz-webvisions-logo-png] www.iconz-webvisions.com<http://www.iconz-webvisions.com/> Follow us on LinkedIn<https://www.linkedin.com/company/iconz-webvisions-group?trk=company_logo>

1 0

Bitcoin/DDoS Ransoms
by Dean Pemberton 06 May '15

06 May '15

Hi all, Wearing my NZITF hat this time. We've put out a release this morning to get the message our about the latest round of "Pay us Bitcoin or your network gets DDoSed' You can see the release here: http://nzitf.org.nz/news.html But why I really wanted to address this audience was that one of our suggestions to organisations is... · Establish points of contact with your Internet Service Providers (ISP) in the event that you need them to perform traffic filtering. Defence against many attack types is most effective when performed before it reaches your network. To date NZITF has had reports of organisations being able to handle these attacks effectively through collaboration with their ISPs. And I wanted to make sure that all the Network Operators on the list had a heads up that A) Organisations might call you asking for help and B) you should work out what you'd do to help them. In fact free to take the release, tweek it and send it out to your customers if that helps. Regards, Dean

3 3

Cisco Fellow Fred Baker - OpenStack on IPv6: Authorization vs Routing
by Nathan Ward 05 May '15

05 May '15

Hi, Apologies to those who are on InternetNZ members-discuss who’re seeing this for a second time. This looks like it would be fairly interesting for some people on the list. I’d be going myself if I’d known about it sooner! Thanks to Hamish MacEwan for posting it originally. -- Fri, May 8, 10:00 – 12:00 Cotton Club, Cotton 350 ECS Seminars Description Fred Baker will discuss concepts and a project in an architecture for OpenStack/IPv6, with a view to simplification and scaling in large datacenters, multi datacenter operations, multi-administration projects, and hybrid datacenters. Bio: Cisco Fellow Fred Baker has been involved in data communications since 1978 and the development of the Internet since the 1980's. He has been involved in standards development in the IETF, both contributing technically and managing processes. His current interests are in routing, the management of latency and data flow, the universal deployment of IPv6 (especially in OpenStack data centers), and the public policy implications these issues bring with them. http://ecs.victoria.ac.nz/Events/Seminars?rm=details&id=973 -- Nathan Ward

1 0

APNIC 40 Conference - Call for Papers
by Elly Tawhai 29 Apr '15

29 Apr '15

________________________________________________________________________ APNIC 40 Conference - Call for Papers ________________________________________________________________________ Hi NZNOG Community, The APNIC 40 Program Committee is now seeking presentations for the APNIC 40 Conference in Jakarta, Indonesia. We are looking for content that would suit the APOPS Plenary, technical conference sessions, lightning talks and Birds of Feather (BoF) sessions. Key Dates --------- The timeline for submissions is: Call for Papers Opens Now First Round Paper Acceptance 17 July 2015 Final Deadline for Submissions 14 August 2015 Final Round Paper Acceptance 21 August 2015 Final Slides Received 4 September 2015 Submitting Proposals -------------------- http://submission.apnic.net/user/login.php?event=28 Program Material ---------------- The technical sessions at APNIC 40 will include presentations relevant to Internet operations and technologies. The following topics are examples of possible areas of interest. - ISP and Carrier Services - IXPs and Peering - Network and infrastructure security - Access and Transport Technologies - Content and Service Delivery - Software Defined Networking and Network Function Virtualization If you have any other ideas or proposals for panel or BoF sessions, please feel free to submit your ideas via the submission system. If you have any questions, please email the Programme Committee: pc-chairs(a)apricot.net For more information about APNIC 40, please visit: https://conference.apnic.net/40 On behalf of: ________________________________________________________________________ Dean Pemberton & Mike Jager APNIC 40 Program Committee Co-chairs ________________________________________________________________________

1 0

IANA AS Numbers registry update
by Selina Harrington 29 Apr '15

29 Apr '15

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following block to ARIN in April 2015: 64198-64296 Assigned by ARIN 2015-04-29 394240-395164 Assigned by ARIN 2015-04-29 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

1 0

Re: [nznog] Looking for data on how much Netflix/SVOD data NZ ISPs are seeing
by Richard Naylor 28 Apr '15

28 Apr '15

At 09:23 a.m. 29/04/2015, Barry Murphy wrote: >Obviously the cache fill that happens between >midnight and mid-day consumes some bandwidth, we >find the fill capacity (after the initial fill) >is about 1.2gbps for on average 2-4 hours per day. >We currently share our cache on Megaport IX >Auckland, in doing so we find weâre filling a >few other providers caches so they donât have >to fetch it from AU, so this may be helping some providers. Thanks Barry - Thats REALLY useful. I'm involved in downstream activity in 2 areas. First - Uploading We have a current project moving some older videos from a server in NZ to Vimeo. Theres a weekly 20GB limit on uploads and an ugly web uploader (no restarts and a break means a complete re work). Using ADSL its pretty ugly. It takes 3.5 days to get 20-30GB up and ADSL 'breaks' make life a real pain. So I pay a local church to use their UFB. We find that uploading during the day conflicts with US based uploaders, so only get 10Mbps upload. If I wait until 5pm, we get a pretty good 100Mbps and the 20GB is up in about an hour. The first time we did it a 2.5G file that took 12 hours ( and failed) on ADSL went up in 4 minutes. Looking at the graph, it seems we have a nice window between 5pm and 8 or 9pm to do our uploads. Thats great to know. The second issue - Live feeds. We're doing quite a bit of live TV feeding using the net now. We have RX points with both TVNZ and TV3 - and also Sky Sport UK. The local TV companies are OK - its local (bounces out of SYD) and only SD and they don't really trust this IP stuff. Sky UK is different. We send them HD at 4Mbps and after some small adjustments for latency, can do live crosses with 3 sec delay (4 sec total allowing for return audio for the talent earpiece). NZ to UK is pretty solid. The other night we tried UK to NZ. NZ RX was via ADSL. We found we could only get a 1Mbps feed going. (vs 4Mbps going the other way) We need to do more testing as there are feed aggregation points and they are different depending on direction, but we have been wondering if there was congestion along the way causing the issue. If so we need to avoid doing crosses during the 'flix' peak. We are also going to test where we do the feed aggregation to see if that helps. Currently NZ to UK has aggregation in London, while UK to NZ has aggregation in LAX. We think its the LAX to NZ leg that suffers. More testing required. Richard

1 0

Looking for data on how much Netflix/SVOD data NZ ISPs are seeing
by Dean Pemberton 28 Apr '15

28 Apr '15

Hi Everyone. Following recent media articles making mention of "the Netflix effect" and broadband slowdowns at peak times, we've had a number of requests to see if we could pull together some facts from NZ ISPs detailing what they are actually seeing. So the question is... How much Netflix/SVOD traffic are you seeing, either as a direct measurement or percentage of total traffic. Does this percentage change at all during the day/week. I realise that this may be considered commercially sensitive but I'm sure we can find a way to make it work. If you're happy to give number on the list that would be great. Good on you for sharing. If you're not comfortable with that then drop me a line and we can discuss how you might feel more comfortable about sharing the facts. I'm happy to agree to only give an aggregated number from people who contact me privately for eg "ISPs are seeing between X and Y % SVOD traffic" Or you could just tell me and I'll keep it to myself (not quite as helpful but I can use it for context). You could also tell me "we have no way of knowing" and I guess that's a data point too :). Thanks -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz To promote the Internet's benefits and uses, and protect its potential.

2 1

Need assistance troubleshooting a DNS issue
by Glen Eustace 26 Apr '15

26 Apr '15

>From about October/November last year we have been getting the odd call from some of our customers to report that our servers are ‘not found’. So far, each report has been from an Xtra broadband user. When investigating these reports we have found that the servers were fine and DNS lookups from various sources (except Xtra) were as well. Last night the issue happened to a member of the family so I was able to jump onto their computer using Teamviewer and do some more thorough diagnostics. My results were; Name servers in use: ns1.xtra.co.nz <http://ns1.xtra.co.nz/> and ns2.xtra.co.nz <http://ns2.xtra.co.nz/> Name servers pingable from PC: Yes Does smtp.godzone.net.nz <http://smtp.godzone.net.nz/> resolve: No, times out Do other resources in our DNS resolve: No, time out Do resources in other DNS servers resolve: Yes Are all 4 of our name servers pingable from PC: Yes, 2 in NZ and 2 offshore Use nslookup to query our name servers directly, does smtp.godzone.net.nz <http://smtp.godzone.net.nz/> resolve: Yes Use nslookup to query our name servers using 8.8.8.8, does smtp.godzone.net.nz <http://smtp.godzone.net.nz/> resolve: Yes To fix the issue on the PC, I manually set the name servers to 8.8.8.8 and 8.8.4.4, all our services were then resolvable and useable. So, whats going on ? How are our servers different ? Well, we are one of the few ISPs that are using DNSSec to sign zones. Is DNSSec broken ? Not according to dnsviz.net <http://dnsviz.net/> The problem is also intermittent, I have heard that the two Xtra servers are actually LB VIPs in front of a farm of name servers. With the intermittent nature of the issue I wonder whether one server in the farm might be broken/misconfigured, just a thought. I have tried, without success to contact appropriate people at Xtra to either comment or assist and have failed to get past the level one helpdesk people. Their only response being “Sorry we can’t help you”. I am not saying this is an issue with Xtra’s internal recursive DNS servers but so far I have been unable to replicate the issue and have had no reports from any of our other customers using alternative broadband suppliers. I have run out of ideas now on how to continue to investigate this and just changing to Google’s DNS servers might work but isn’t a great solution. If anyone has any suggestions I’d appreciate hearing from you. Glen. -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Glen and Rosanne Eustace, GodZone Internet Services, a division of AGRE Enterprises Ltd., P.O. Box 8020, Palmerston North, New Zealand 4446 Ph: +64 6 357 8168 <tel:%2B64%206%20357%208168>, Fax: +64 6 357 8165 <tel:%2B64%206%20357%208165>, Mob: +64 27 542 4015 <tel:%2B64%2027%20542%204015> "Specialising in providing low-cost professional Internet Services since 1997"

8 12

MyRepublic Hamilton Outage
by Laurence Bullivant 26 Apr '15

26 Apr '15

Morning, This is more of a curiosity post then anything else, but does anyone know what is going on with the MyRepublic outage in Hamilton? Its gone past 72hours now and the only thing that is being said is that its a fault with the UFF handover. I don't know about anyone else but the idea of upstream provided having a fault that could take down an entire region for more then three days makes me a little nervous. Time to go check those SLA's anyone? -- Laurence Bullivant laurence(a)bullivant.co.nz 021 909 906

1 1

Fibre tails in NZ
by Sam Sarkis-UIP 24 Apr '15

24 Apr '15

Hi All, We have a customer looking to get 50/50M and some 30M/10M tails in NZ but we need to deliver them to Sydney happy to do something over Megaport. Can anyone who can assist please contact me off list. The tails are in Auckland and Christchurch. Kind regards Sam

1 0

Entries open for the 2015 ANZIA awards
by Dean Pemberton 23 Apr '15

23 Apr '15

New Zealand is the host of this year's Australia and New Zealand Internet Awards, the ANZIAs! The ANZIAs will be held on 27 August, in Auckland at St Matthews in the City. The ANZIAs are a collaboration between auDA (www.auda.org.au) and InternetNZ. An annual event celebrating the achievements of organisations, businesses and individuals who excel in delivering accessible, innovative, informative and secure resources to a diverse and wide community on the Internet. ANZIAs are awarded to categories covering six areas: Security & Online Safety, Access & Digital Skills, Information, Diversity, Innovation and in 2014 we introduced The Leonie Dunbar Memorial Award for Community Websites. But more importantly, entries are open now! And you can get nominating right here: http://www.internetawards.org.au/how-to-enter/ Winners receive recognition as industry leaders that have set new standards for making the Internet a more inclusive, accessible and safe place. The awards offer public exposure, media coverage, networking opportunities, optimisation of future grant applications, recognition for hardworking staff and volunteers and a cash prize. Since InternetNZ is hosting the ANZIAs this year, it is an excellent opportunity for us to host the very best in New Zealand Internet innovations. So – get applying, get the word out, and we will see you at the ANZIAs -- -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz To promote the Internet's benefits and uses, and protect its potential.

1 0

Re: [nznog] Need assistance troubleshooting a DNS issue
by Glen Eustace 23 Apr '15

23 Apr '15

> On 24/04/2015, at 7:52 am, manning bill <bmanning(a)isi.edu> wrote: > > anything inline that is sensitive to IPv4 UDP packets that are: ) larger than 512 bytes, ) fragmented. > do these replies have IPv6 or DNSSEC data in the RRsets? I would say yes, as all our hosts have both A and AAAA records. Assuming the above, that moves the issue back in my direction. I am seeing requests from a number of the rNS servers and the issue is intermittent so still more trouble shooting needed I think :-) Glen

1 0

Re: [nznog] Need assistance troubleshooting a DNS issue
by Glen Eustace 23 Apr '15

23 Apr '15

> On 24/04/2015, at 7:14 am, manning bill <bmanning(a)isi.edu> wrote: > > tosses MTU issues into the mix. IPv6 & DNSSEC make for large UDP replies, which tend to choke some infrastructure kit... 2 of our 4 name servers are fully dual stack but the queries I do see coming from the Xtra rNS farm are all IPv4. Glen.

1 0

Baseband IP
by Dave Mill 20 Apr '15

20 Apr '15

Hi all If there are any other providers out there actively using Baseband IP I would love to hear from you. Could you email me off-list? Just very interested if you experience a similar issue/symptom to us (Inspire). I'm already talking to Chorus about this as well. Cheers Dave

1 0

BGP Map 2015 edition
by Blair Harrison 18 Apr '15

18 Apr '15

Hi All I've just made up a new version of my DFZ Map, taking routeviews data and making it somewhat visible.. FWIW there is about 20Mb of json data on the page, so you probably don't want to load it from your phone. http://jedi.school.nz/sg2015/ Note, I haven't included anything other than routeviews.org data so the APE/WIX/etc peerings aren't included in this version. There was a bit of feedback from the last version that it would be good to search by ASN as well as name, so you can do that in this version. All feedback welcome on or offlist. Cheers, Blair

3 3

Re: [nznog] BGP Map 2015 edition
by michael.sutton 18 Apr '15

18 Apr '15

Sent from Samsung tablet -------- Original message -------- From: Dean Pemberton <nznog(a)deanpemberton.com> Date: 19/04/2015 17:13 (GMT+12:00) To: Blair Harrison <nznog(a)jedi.school.nz> Cc: NZNOG <nznog(a)list.waikato.ac.nz> Subject: Re: [nznog] BGP Map 2015 edition Heh - Awesome. You've even managed to get New Zealand at the top of the smudge =P On Sat, Apr 18, 2015 at 5:17 PM, Blair Harrison <nznog(a)jedi.school.nz> wrote: > Hi All > > I've just made up a new version of my DFZ Map, taking routeviews data and > making it somewhat visible.. > > FWIW there is about 20Mb of json data on the page, so you probably don't > want to load it from your phone. > > http://jedi.school.nz/sg2015/ > > Note, I haven't included anything other than routeviews.org data so the > APE/WIX/etc peerings aren't included in this version. > > There was a bit of feedback from the last version that it would be good to > search by ASN as well as name, so you can do that in this version. > > All feedback welcome on or offlist. > > Cheers, > Blair > > > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

BCP for BGP
by Jamie Baddeley 17 Apr '15

17 Apr '15

HI Folks, One of our colleagues from AUSNOG mentioned this, and I thought it'd be worth reposting here as I'd imagine it's required reading for many of you (which I'm sure you have of course!). Cheers jamie RFC7454 - "BGP Operations and Security" https://tools.ietf.org/html/rfc7454 "Abstract The Border Gateway Protocol (BGP) is the protocol almost exclusively used in the Internet to exchange routing information between network domains. Due to this central nature, it is important to understand the security measures that can and should be deployed to prevent accidental or intentional routing disturbances. This document describes measures to protect the BGP sessions itself such as Time to Live (TTL), the TCP Authentication Option (TCP-AO), and control-plane filtering. It also describes measures to better control the flow of routing information, using prefix filtering and automation of prefix filters, max-prefix filtering, Autonomous System (AS) path filtering, route flap dampening, and BGP community scrubbing."

3 2

New RIPE Atlas anchor in New Zealand
by Sebastian Castro 16 Apr '15

16 Apr '15

Dear community: We'd like to announce that the first of two RIPE Atlas [1] anchors [2] sponsored by NZRS has been installed in Auckland North Shore, and became active this morning. The anchor support both v4 and v6. This is the second anchor in New Zealand, the first hosted at Waikato University. The second anchor will be installed in Wellington at a later time, once some network architecture work is completed. NZRS is committed to support Internet research and network measurement, we are also Atlas ambassadors and we have Atlas Probes [3] available to distribute. If you are interested on hosting one for your own benefit and the benefit of the community, please contact me. We are currently using the Atlas probes located in New Zealand to conduct a topology discovery experiment from which you will hear in the coming weeks. [1] https://atlas.ripe.net/about/ [2] https://atlas.ripe.net/get-involved/become-an-anchor-host/ [3] https://atlas.ripe.net/get-involved/become-a-host/ Cheers -- Sebastian Castro Technical Research Manager NZRS Ltd. desk: +64 4 495 2337 mobile: +64 21 400535

1 0

beating bufferbloat with better hardware
by Dave Taht 08 Apr '15

08 Apr '15

When I was at the nznog conference there was a lot of despair about a lot of aspects of the fiber deployment, and the quality of the home gateways, and what seemed to be promising plans to try to get openwrt with fq_codel running on nzwrt... did you all despair completely? I talked about all the great things we could do to improve our devices with openwrt, and and beat bufferbloat in particular with fq_codel in my talk... and since then I have worked to get fq_codel in more and more OSes and hardware. UBNT has added configuration tools for it in their upcoming edgerouter 1.7 release. VyOS just added it. It is in click. It is in fedora 22. It is spreading (And of course, already in all modern linuxes, openwrt, dd-wrt, ipfire, shorewall, etc). There was no sign of a pulse at tilera or mikrotik, but I will keep trying. Still... to one day get hardware that has low latency and good queue management at gigE speeds or higher requires better hardware offloading techniques than the bulk notions like GRO and TSO that exist today. And it has long been obvious that the rate limiting + fq_codel techniques we use successfully at sub 200mbit speeds do not scale higher. So the algorithms need to move into hardware, also. *******so... a brief commercial interruption***** I think the open source design method has worked spectacularly for software, and I think the same methods can work for hardware if only we can pull together larger communities to do the work, worldwide. There are only 24 hours left on this kickstarter - we CAN *start* to take back the edge of the internet - if we can only find another 5k of funding. https://www.kickstarter.com/projects/onetswitch/onetswitch-open-source-hard… This FPGA board´s pcie interface and switch design - and the split memory interfaces between the programmable logic and the onboard dual A9 core - and reducing the cost from 7000 to 700 bucks - are the important parts to why the community needs this board - in my case - so that more of htb + fq_codel can move into hardware that anyone can build and use - in other cases? who knows what could be done with it!? One day, we could move the logic into asics, and finally have open source, blob-free hardware to work with for any network purpose. There are people on these lists with money, and there are those with talent and time, and it would be great if more of those people could line up with each other. I put in all I could spare (8500 dollars) into this kickstarter. I have one of their high end boards, already. It´s great. There is a get one give one program that I asked meshsr to put in to try and enable that event. If there is anyone here that would like to help hack together the next generation of edge network hardware, after this kickstarter completes, let me know. I return you now to your normal despair about vendors not listening, and crappy OSes you can´t otherwise fix. -- Dave Täht We CAN make better hardware, ourselves, beat bufferbloat, and take back control of the edge of the internet! If we work together, on making it: https://www.kickstarter.com/projects/onetswitch/onetswitch-open-source-hard…

2 1

SNMP for Mako / SecureME
by Tom Henderson 08 Apr '15

08 Apr '15

Wondering if anyone here knows if Mako routers (Spark's SecureME offering) can be monitored with SNMP? We use observium to monitor our servers and existing Cisco gear, but so far it looks like I can only monitor these from the SecureME web portal. Cheers Tom Henderson IT Manager | Pack & Company | 027 461 4403 | tom(a)pack.co.nz -- ---------------------------------------------------------------------------If you are not the intended recipient of this email, you must not disclose, copy, or distribute any information contained in or attached to it, or take any action/inaction based on it. Please contact us immediately, and delete this email from your system. Any views or opinions presented in this email are solely those of the author and not of Pack & Company (NZ) Limited (the "Company"), however any intellectual property contained in or attached to this email is the property of the Company. Thank you.

2 1

Call for presentations for AusNOG 2015
by Jamie Baddeley 06 Apr '15

06 Apr '15

A Call for Presentations from our mates across the ditch. Cue comments about Cricket, Currency Parity, Phar Lap, Pavlovas, Russell Crowe, Crowded House, Underarm bowling, etc etc.. Cheers Jamie ---------- Forwarded message ---------- From: Terry Manderson <terry(a)terrym.net> Date: 1 April 2015 at 05:39 Subject: [AusNOG] Call for presentations for AusNOG 2015 To: ausnog <ausnog(a)lists.ausnog.net> Call for presentations for AusNOG 2015 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Langham Hotel Melbourne 27 & 28 August 2015 Topics =-=-=- Internet operations can be a broad topic and the programme committee will be short-listing presentations in the following focus areas: * Improving the redundancy/resiliency/sustainability of your network * Making leaps in service or network availability * Taking the network operations BCP to the next level * Using 'offline' communications tools to keep the network working * How technology is changing network architectures * Evolution in network architectures and scaling issues * Analysis of relevant major operational events of the year Additional topics that are of interest to the network operator community are also welcome at AusNOG 2015. Naturally, presentations of a marketing nature are not welcome at this technical event. Notes to presenters =-=-=-=-=-=-=-=-=-= Preference will be given to presentations that result in actual operational outcomes. Session speakers should be prepared to present for 30 minutes. Keynote speakers will be expected to present for 45 minutes to 1 hour. Short presentations of strong operational content are also acceptable. Once the final slides are submitted, changes will only be permitted where the presentation requires the most up to date information or data. By submitting a presentation for consideration in the AusNOG 2015 programme, and if selected the presenter will allow AusNOG to: * Take photographs of the presentation and presenter * Record and rebroadcast video and audio of the presentation and presenter * Redistribute the presentation slides, audio, video, and photographs electronically, on the AusNOG website, or otherwise but leaving all intellectual property in the hands of presenter or rightful property holder[1]. Deadlines =-=-=-=-= 04 June: Submission of presentation title, presentation description (300 words), and presenter biography (200-400 words) 02 July: Presenters notified of their acceptance status as an AusNOG 2015 presentation. 20 August: Submission of final presentation slides as Portable Document Format (pdf), PowerPoint, or Keynote. Provision of a recent digital photograph (<500k) of the presenter. All submissions must be sent by email to organisers AT ausnog DOT net. A separate call for lightning talks will be made closer to the AusNOG 2015 event. As in previous years you must be registered to attend AusNOG 2015 in order to be considered for a lightning talk. [1]: AusNOG accepts that some speakers are unable to allow us to archive their presentation due to company or corporate policy, and if the situation arises AusNOG will delete all copies in its possession after the presentation. Lightning Talks =-=-=-=-=-=-=-=-= Have something awesome or cool to share that isn't a full presentation? New to presenting, and still want give back to the community? Why not consider a lightning talk? Lightning talks are short (max 10 minute) presentations on topical material. There is no requirement for any slides! A call for lighting talks will be made nearer to AusNOG 2015. Cheers Terry (For the AusNOG Board)

1 0

Hosting for test server - recommendations?
by Richard Nelson 24 Mar '15

24 Mar '15

Hi, We want to perform some testing of consumer broadband connections over the next three months. We are looking for somewhere to host a server for throughput testing. Happy to pay. The main requirements are for a neutral site well connected to all the major ISPs and for a network connection to easily handle (i.e. not limit) throughput for consumer speed connections - up to 200Mb/s (not gigatown). The testing will be for about 5 mins worth of streams per hour from an equal mix of ADSL, VDSL and UFB with tests staggered to occur one at a time. Testing repeats every hour. We can lease or provide our own server. If we get really lucky we'd like one site in Auckland and one not in Auckland. Any suggestions would be gratefully received. Thanks, Richard Nelson WAND Network Research Group.

1 0

ICT Equip Gensets & Ubiquity NZ for Vanuatu
by Andy Linton 20 Mar '15

20 Mar '15

Big ups to Primo Wireless in New Plymouth - this kit is on its way to Vanuatu. -- Andy Linton Mobile: +64 22 474 7156 Skype: asjlnz

3 3

Are you `asnet2' or `202.7.1.239' on the WIX?
by Michael Fincham 19 Mar '15

19 Mar '15

Whoever you are, it seems you're announcing some busted routes to the route servers, with an AS path of "429010481". -- Michael

2 1

ratelimiting/aqm/FQ on mikrotik/routerOS info
by Dave Taht 18 Mar '15

18 Mar '15

I am curious as to any existing support for ratelimiting and AQM/FQ on the tilera gear they have? Policing? anything? Keep hoping to make progress on this: http://forum.mikrotik.com/viewtopic.php?p=473253#p473253 -- Dave Täht Let's make wifi fast, less jittery and reliable again! https://plus.google.com/u/0/107942175615993706558/posts/TVX3o84jjmb

2 1

Vanuatu CYCLONE RECOVERY PROJECT
by Andy Linton 17 Mar '15

17 Mar '15

>From one of the .VU government coordinators: We urgently need the following. Can anyone supply and where from. I can assist with logistics from Auckland, Brisbane, Sydney. Please reply ASAP Item Quantity Spec USB RF Power Meter 1 Agilent U2041XA Cable and Antenna Analyser 1 Sitemaster PDR48 calibration kit 1 Sitemaster Transmission Analyser 1 JDSU MTS-5800 Please contact me and I'll put you in touch if you can help -- Andy Linton Mobile: +64 22 474 7156 Skype: asjlnz

1 0

Re: [nznog] openwrt capable routers for NZ?
by Ray Taylor 16 Mar '15

16 Mar '15

I understand as its generic firmware, I assume there will be many different compatible hardware options. The big thing though is the voip needs to be capable which may reduce your compatibility list. The market in NZ has dramatically changed with computer stores selling less and less routers, and the home users just using the router issued free from their ISP. And to make it work for an ISP in a fibre world, it needs to have a built in voip ATA Software: - WAN/LAN bridge mode - uPNP - IPv4 / IPv6 - Programmable 0.0.0.0/0 or gateway address when lan + wan in bridge mode - voip must work when in bridge mode. Have had problems with zyxel and others having no gateway address breaking voip when in bridge mode - router must be accessible from behind another nat gateway via a port forward. Enabling WAN admin access doesn’t always make this work with many routers Hardware: - Price point of $40-$50 so we can issue them free with service - A higher priced, higher speed option would be good for fibre based services - 3dbi antenna, 18db tx power - 802.11n 2.4ghz option. We don’t see the need for ac for at least 3 years There was recently a project between geekzone and telecom to build a "standard router for NZ" which was designed to be the perfect one with all the features that the GZ community wanted, could be issued for free by telecom and was capable of being used for DSL and fibre. They got as far as taking bids for the project from companies like huawei and the likes. Most of the features that the GZ community were proposing I found to be useless as an isp supplied router, but it would be worth looking at the feature list. I think a bit of googling might be needed to get to the feature voting page in the forums - it may have been deleted. Ray Taylor Taylor Communications ray(a)ruralkiwi.com Ph 021-483-280 Network status 06-929-9082 -----Original Message----- From: Dave Taht [mailto:dave.taht(a)gmail.com] Sent: Tuesday, 10 March 2015 11:45 a.m. To: Ray Taylor Subject: Re: [nznog] openwrt capable routers for NZ? always helpful to have that list. And have that list discussed publicly. This is the only public talk I have given about wifi... see second half. https://www.youtube.com/watch?v=Wksh2DPHCDI On Mon, Mar 9, 2015 at 3:43 PM, Ray Taylor <ray(a)ruralkiwi.com> wrote: > Im keen to take part > Wouldn’t know anything about designing firmware other than the list of features that I need. > > > > Ray Taylor > Taylor Communications > ray(a)ruralkiwi.com > > Ph 021-483-280 > Network status 06-929-9082 > > > > -----Original Message----- > From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Dave Taht > Sent: Tuesday, 10 March 2015 11:14 a.m. > To: Jed Laundry > Cc: NZNOG(a)list.waikato.ac.nz > Subject: Re: [nznog] openwrt capable routers for NZ? > > I see this thread has kind of died... I am looking for people willing to participate in the upcoming make-wifi-fast project. Along the way, we'll probably build a pretty good firmware for general use on some off-the-shelves piece of hardware, and it would be good to be able to test with your upcoming fiber deployment(s) as well as on the WISP sides of things. > > Please let me and jim gettys know if you are interested in helping out on this. > > -- > Dave Täht > Let's make wifi fast, less jittery and reliable again! > > https://plus.google.com/u/0/107942175615993706558/posts/TVX3o84jjmb > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > -- Dave Täht Let's make wifi fast, less jittery and reliable again! https://plus.google.com/u/0/107942175615993706558/posts/TVX3o84jjmb

5 5

Re: [nznog] NZNOG Digest, Vol 147, Issue 16
by Bevan McNaughton 16 Mar '15

16 Mar '15

We have 2x NanoStation M5's spare - let us know if you want them. Bevan On 17 March 2015 at 12:00, <nznog-request(a)list.waikato.ac.nz> wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. Ubiquiti gear for Vanuatu (Andy Linton) > 2. Re: Ubiquiti gear for Vanuatu (Dean Pemberton) > 3. Re: Ubiquiti gear for Vanuatu > (Matthew Harrison - PrimoWireless Ltd) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 17 Mar 2015 11:53:20 +1300 > From: Andy Linton <asjl(a)nsrc.org> > To: NZNOG List <nznog(a)list.waikato.ac.nz> > Subject: [nznog] Ubiquiti gear for Vanuatu > Message-ID: > <CALS-_Orno8qXbJUY78nNPBcTig+v6= > XkM5nzzmZOYPUneSHj4Q(a)mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > Here's what they're going to need. > On Tue, Mar 17, 2015 at 11:01 AM, Jethro Webston wrote: > > > Hi Andy, thank you for your assistance. We use NanoBridge, NanoBeam, and > > NanoStation M2 & M5. > > > > Cheers > > > > > > > Jethro > > We've had a number of offers already but if you have spares of these please > record them at: > > http://aidez.vu > > Be specific with models and quantities if you can. Remember they will need > power supplies and Ethernet cables as well. Fortunately .VU uses the same > plugs as .NZ > -- > Mail: asjl(a)nsrc.org > Mobile: +64 22 474 7156 >

1 0

Ubiquiti gear for Vanuatu
by Andy Linton 16 Mar '15

16 Mar '15

Here's what they're going to need. On Tue, Mar 17, 2015 at 11:01 AM, Jethro Webston wrote: > Hi Andy, thank you for your assistance. We use NanoBridge, NanoBeam, and > NanoStation M2 & M5. > > Cheers > > > Jethro We've had a number of offers already but if you have spares of these please record them at: http://aidez.vu Be specific with models and quantities if you can. Remember they will need power supplies and Ethernet cables as well. Fortunately .VU uses the same plugs as .NZ -- Mail: asjl(a)nsrc.org Mobile: +64 22 474 7156

3 3

The URL for help for Vanuatu
by Andy Linton 15 Mar '15

15 Mar '15

It's been a long day! I've sent the wrong URL twice. The urls to use are now: http://aidez.vu or http://help.vu Vanuatu is bilingual and we thought we should do the same! Forget about the flatnet one - I clearly can't remember it so why should you.

1 0

Vanuatu Update & Support
by Jonathan Brewer 15 Mar '15

15 Mar '15

Hi All, This morning I spoke with a friend from Vanuatu Government and to another who is CTO for Telsat Pacific, the largest TV operator & #2 ISP. Things are in pretty poor shape, but on the bright side: - Both cellular networks are fine in Port Vila - Internet and email from Telecom Vanuatu is working in Port Vila This makes life a lot easier for coordinating support - which will be needed: - Communication to remote islands is gone. It was all C-band satellite and those big dishes did not fare well. - Telsat lost four towers (that they know about) including their primary transmission site - though they expect to have some connectivity restored today or tomorrow. Vanuatu Government is going to nominate a central point of contact for offers of assistance relating to ICT. When that information is available and when they are ready for contact from you it will be posted here. Thanks to those who have already offered hardware and engineering resources - those offers have probably made the days of a few people in Vanuatu today. Thanks, Jon P.S. I'm in the wrong timezone for this (GMT -1) so it may not be me posting with an update.

3 3

Generators for Vanuatu
by Andy Linton 15 Mar '15

15 Mar '15

Someone form Primo Wireless in New Plymouth offered some generators via http://ushahidi.flatnet.net.nz Can they contact me directly? andy

1 1

"If you want to be an ISP and want your infrastructure to last more than five years...
by Juha Saarinen 15 Mar '15

15 Mar '15

… you’re already deploying IPv6,” said the ARIN chief exec John Curran. http://www.itnews.com.au/News/401627,ipv6-laggards-to-face-tough-questions-… <http://www.itnews.com.au/News/401627,ipv6-laggards-to-face-tough-questions-…> TL;DR: CGNAT’s bad and IPv4 addresses are getting scarce and expensive, Curran says. Would be interested to hear arguments to the contrary off list (or on list if it’s OK with TEH MORDERATOR) if there are any. -- Juha Saarinen twitter: juhasaarinen <http://twitter.com/juhasaarinen>

2 1

Re: [nznog] Vanuatu Update & Support
by Scott Weeks 14 Mar '15

14 Mar '15

--- jon.brewer(a)gmail.com wrote: From: Jonathan Brewer <jon.brewer(a)gmail.com> Things are in pretty poor shape, ---------------------------------- It's going to brush the very northern tip of NZ: http://www.stormsurfing.com/cgi/display_alt.cgi?a=spac_slp It currently has 85 MPH winds. http://earth.nullschool.net/#current/wind/surface/level/orthographic=-183.0… Hopefully, it misses all together. scott _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

NZNOG NOC List Updates
by Dave Mill 13 Mar '15

13 Mar '15

Hi all After our recent discussions on the (lack of) updates to the NZNOG website NOC contact list I have (foolishly?) volunteered to help. The URL of the page is http://www.nznog.org/noc-list . If you have any updates, or if you have previous updates that haven't been handled, then please pass them on to noc(a)nznog.org . I will do my best to update in a timely manner. Also, if you're aware of anything on the contact list that is blatantly wrong (perhaps you're still listed against a company where you no longer work) then let me know. I'll do my best to correct the information or chase up relevant contacts. If I fail in my duties I'll produce a beer for you at the next NZNOG conference dinner.. Cheers Dave

11 11

DNSSEC validation at Spark NZ
by Sebastian Castro 09 Mar '15

09 Mar '15

Hi: We'd like to share a short technical blog post from NZRS about Spark NZ enabling DNSSEC validation for part of their customers. In brief, DNSSEC related traffic coming from Spark NZ resolvers suffered a massive increase back on Dec 16th, Spark NZ also added new DNS backends for their service, and they are using load balancing to share the load. The article https://nzrs.net.nz/content/dnssec-validation-spark-nz Feedback and questions are welcomed! Cheers, -- Sebastian Castro Technical Research Manager NZRS Ltd. desk: +64 4 495 2337 mobile: +64 21 400535

1 0

openwrt capable routers for NZ?
by Dave Taht 09 Mar '15

09 Mar '15

at the end of my talk someone asked me what routers I would recomend to try this stuff on here, and I sort of dodged the question. If you can come up with a list of routers available here (meet me later?), I can tell you what I know about each chipset. (I have evaluated dozens of these over the last year...) In general ath9k based gear is currently best (entirely open wifi driver), with nearly every manufacturer shipping stuff based on that. I see there is a lot of ubnt here, and most of their older products are well supported by openwrt. There is some good work beginning on the latest round of chipsets, but by and large the firmware for 802.11ac is closed.... And so on. I should also point out that there are plenty of other OSes available, and that I'm opposed to a monoculture of any hardware/software combination. See: https://gettys.wordpress.com/2014/10/06/bufferbloat-and-other-challenges/ for more details. -- Dave Täht thttp://www.bufferbloat.net/projects/bloat/wiki/Upcoming_Talks

6 10

Internet in the upper south island
by lenz 07 Mar '15

07 Mar '15

Hi, I am currently trying to figure out if I can get anything else than a weak 3G signal in terms of internet just outside of St Arnaud. The address is 62 Alpine Meadows Drive, Saint Arnaud There is a phone line as well as a few other houses but the Chorus website tells me that they don't have any services there. I tried a few of the bigger providers and many tell me I can have VDSL but either don't come back to me or turn around and say "sorry, mate, can't" Anyone on the list that knows someone who might get anything faster than a 3G link to that address? Happy to shout beers on top of being a very grateful customer :) Thanks heaps cheers

1 1

Orcon Helpdesk
by Keith Davidson 06 Mar '15

06 Mar '15

Is there anyone from Orcon technical subscribed to this list who could contact me offlist please? Cheers Keith

10 10

Call for Presentations - DNS-OARC Spring Workshop, May 2015 -- Deadline Extended
by Sebastian Castro 05 Mar '15

05 Mar '15

NOTE: Previous message contained the right information, but with the subject referring to the wrong year. Apologies for the noise. The next OARC Spring Workshop will take place in Amsterdam on May 9th and 10th, the weekend before RIPE70. OARC is requesting proposals for presentations, with a preference for DDoS attack reports and mitigation techniques. Reports and field stories can cover DNS-based DDoS attacks, attacks to DNS infrastructure or side effects suffered by cache resolver operators. This workshop intends to build from previous strong OARC workshops, where operational content and research is welcome. Presentations from DNS operators are particularly welcome, as well as from DNS researchers. All DNS-related subjects are accepted, introduction to new tools, visualizations, DNSSEC and novel uses of the DNS. If you are an OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. Adopting practice from other conferences, a timeslot for lighting talks will be available for short presentations (5 to 10 minutes). Workshop Milestones * 18 December 2014, Call for Presentations posted * 8 January 2015, Open for submissions * 12 March 2015, Deadline for submission. Please note deadline was extended for an extra week. * 26 March 2015, Final Program published * 7 May 2015, Final deadline for slideset submission Details for abstract submission will be published here: https://indico.dns-oarc.net//conferenceCFA.py?confId=21 The workshop will be organized on different tracks, depending on the topics and the timing of each presentation. If you are interested in a lightning talk, let us know at the time of submission. You can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> if you have questions or concerns. Sebastian Castro, for the OARC Programme Committee OARC is also seeking sponsorship for this workshop, please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Sebastian Castro Technical Research Manager .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Re: [nznog] [Cerowrt-devel] ping loss "considered harmful"
by Dave Taht 05 Mar '15

05 Mar '15

I had spoken to someone at nznog that promised to combine mrtg + smokeping or cacti + smokeping so as to be able to get long term latency and bandwidth numbers on one graph. cc added. On Thu, Mar 5, 2015 at 12:38 PM, Matt Taggart <matt(a)lackof.org> wrote: > Dave Taht writes: > >> wow. It never registered to me that users might make a value judgement >> based on the amount of ping *loss*, rather than latency, and in looking back in time, I can >> think of multiple people that have said things based on their >> perception that losing pings was bad, and that sqm-scripts was "worse >> than something else because of it." > > This thread makes me realize that my standard method of measuring latency > over time might have issues. I use smokeping > > http://oss.oetiker.ch/smokeping/ in sqm-scripts's case, possibly, all you have been collecting is largely worst case behavior, which I don't mind collecting as it tends to be pretty good. :) However, I have been unclear. In the main (modern - I don't know what version you have) sqm code, IF you enable dscp squashing on inbound (the default), you do end up with a single fq_codel queue, not 3, no classification or ping prioritization. (it is the default because of all the re-marking I have seen from comcast) So if you are, as I am, monitoring your boxes from the outside, there is no classification and prioritization present for ping. do a tc -s qdisc show ifbwhatever (varies by platform) to see how many queues you have. Example of a single queued inbound rate limiter + fq_codel (yea! packet drop AND ecn working great!) root(a)lorna-gw:~# tc -s qdisc show dev ifb4ge00 qdisc htb 1: root refcnt 2 r2q 10 default 10 direct_packets_stat 0 direct_qlen 32 Sent 168443514948 bytes 334370551 pkt (dropped 0, overlimits 143273498 requeues 0) backlog 0b 0p requeues 0 qdisc fq_codel 110: parent 1:10 limit 1001p flows 1024 quantum 300 target 5.0ms interval 100.0ms ecn Sent 168443514948 bytes 334370551 pkt (dropped 17480, overlimits 0 requeues 0) backlog 0b 0p requeues 0 maxpacket 1514 drop_overlimit 0 new_flow_count 125872421 ecn_mark 1044 new_flows_len 0 old_flows_len 1 root(a)lorna-gw:~# uptime 12:45:35 up 54 days, 22:33, load average: 0.05, 0.05, 0.04 dscp classification in general, is only useful from within your own network, going outside. > which is a really nice way of measuring and visualizing packet loss and > variations in latency. I am using the default probe type which uses fping > (ICMP http://www.fping.org/ ). I LOVE smokeping and wish very much we had a way to combine it with mrtg data to see latency AND bandwidth at the same time. > > It has been working well, I set it up for a site in advance of setting up > SQM and then afterwards I can see the changes and determine if more tuning > is needed. But if ICMP is having it's priority adjusted (up or down), then > the results might not reflect the latency of other services. > > Fortunately the nice thing is that many other probe types exist > > http://oss.oetiker.ch/smokeping/probe/index.en.html > > So which probe types would be good to use for bufferbloat measurement? I > guess the answer is "whatever is important to you", but I also suspect > there is a set of things that ISPs are known to mess with. > HTTP? But also maybe HTTPS in case they are doing some sort of transparent > proxy? > DNS? > SIP? > I suppose you could even do explicit checks for things like Netflix (but > then it's easy to go off on a tangent of building a net neutrality > observatory). > > On a somewhat related note, I was once using smokeping to measure a fiber > link to a bandwidth provider and had it configured to ping the router IP on > the other side of the link. In talking to one of their engineers, I learned > that they deprioritize ICMP when talking _with_ their routers, so my > measurement weren't valid. (I don't know if they deprioritize ICMP traffic > going _through_ their routers) I do strongly recomend deprioritizing ping slightly, and as I noted, I have seen many a borken script that actually prioritized it, which is foolish, at best. I keep hoping multiple (many!) someones here will go have lunch with their company's oft lonely, oft starving sysadmin(s), to ask them what they are doing as to firewalling, QoS and traffic shaping. Most of the ones I have talked are quite eager to show off their work, which is unfortunately often of wildly varying quality and complexity. I find that an offer of saki and sushi are most conducive to getting that conversation started. I certainly would like to see more default corporate firewall/QoS/shaping rules than I have personally, for various platforms. Someone's got to have some good ideas in them... and it would be nice to know how far the bad ones, have propagated. > -- > Matt Taggart > matt(a)lackof.org > > -- Dave Täht Let's make wifi fast, less jittery and reliable again! https://plus.google.com/u/0/107942175615993706558/posts/TVX3o84jjmb

1 0

Job: NEXTDC - Product Manager of Networks (SYD.AU)
by Skeeve Stevens 03 Mar '15

03 Mar '15

Hi all, Passing this to the mailing list NEXTDC is looking for a Product Manager of Network Services - related to their recent announcement of Azure Express-Route and other related products. Ideally you would be working for an existing Telco and understand networking products well. Check out the advert below. https://dl.dropboxusercontent.com/u/11825822/NEXTDC%20-%20Product%20Manager… Thanks all. ...Skeeve *Skeeve Stevens - Founder & Chief Network Architect* eintellego Networks Pty Ltd Email: skeeve(a)eintellegonetworks.nz ; Web: eintellegonetworks.nz Phone: +612 8014 7398 ; Cell +61 (0)414 753 383 ; Skype: skeeve Facebook: eintellegonetworks <http://facebook.com/eintellegonetworks> ; Twitter: eintellego <https://twitter.com/eintellego> LinkedIn: /in/skeeve <http://linkedin.com/in/skeeve> ; Expert360: Profile <https://expert360.com/profile/d54a9> The Experts Who The Experts Call Juniper - Cisco - Cumulus Linux - Cloud - Consulting - IPv4 Brokering

1 1

IANA IPv4 Recovered Address Space registry updated
by Selina Harrington 02 Mar '15

02 Mar '15

Hi, ICANN has updated the IANA IPv4 Recovered Address Space registry according to the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA. The policy states that in each IPv4 allocation period, each RIR will receive a single IPv4 allocation unit from ICANN. An IPv4 allocation period is defined as a 6-month period following 1 March or 1 September in each year. The address space selection software can be downloaded from: https://github.com/icann/ The list of allocations can be found at: https://www.iana.org/assignments/ipv4-recovered-address-space/ipv4-recovere… Regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

1 0

Re: [nznog] "The GCSB?s brake on innovation"
by Beau Murrah 25 Feb '15

25 Feb '15

Thanks! Ill keep plodding away and get a draft to the list and yourself to attach. --- Me: nz.linkedin.com/in/bmmurrah Ph: +6427 375 7897 Email: bmurrah(a)icloud.com PGP: https://keybase.io/airbridge > On 26/02/2015, at 1:48 pm, Stephen Quayle <stephenwq(a)gmail.com> wrote: > > Hey, > Bit of a nzlog list lurker, I'd just like to give some support for this idea you're proposing. > > Any further information about this act is greatly welcomed. > > I'm particularly curious on what might changes might typically be required to give notification of, and what might not. > We've already seem some implications for research based set ups, and possibly some hint of the difficulty of certifying open source instead of vendor supplied solutions. > > An area of interest was what this means for universities and where they might fall into it, as that's a bit different to your average business, or your average telco, yet i believe they could fall under broad ISP or carrier terms for general users. Often their networks and resources can be fairly public and they can have research arms that might struggle with the same issues as REANNZ. > > Just like to say thanks for anything you can provide in terms of knowledge and interpretation to the community, even if it just starts discussion. > > Cheers, > Stephen

1 0

"The GCSB’s brake on innovation"
by Michael Fincham 24 Feb '15

24 Feb '15

<http://techliberty.org.nz/the-gcsbs-brake-on-innovation/> Excerpt: Trying to do the same in NZ, but govt's TICSA legislation makes deploying SDN/NFV in backbone networks challenging http://t.co/91MUpxfOnw — Steve Cotter (@SteveCotter) February 22, 2015 [...] So this is a statement by the CEO of a government owned company whose purpose is to "establish and operate the Advanced Network in order to promote education, research and innovation for the benefit of New Zealand" saying that they can't do the research and development work they need to do because the bureaucrats in the NCSC at the GCSB are holding them back. -- Michael

2 1

APNIC Training Survey - We need your feedback!
by Elly Tawhai 22 Feb '15

22 Feb '15

Hi NZNOG Community, APNIC’s regional training program is designed to grow the skills of network operators to effectively deploy and manage network technology in the Asia Pacific. APNIC is currently assessing the training needs and requirements of the Asia Pacific Internet community to help plan and improve its training program so it can meet the community's future requirements. You can help us by taking part in the Training Survey below: https://www.apnic.net/trainingsurvey As an added incentive, anyone completing the survey before 7 March 2015 will be entered into a prize draw for an iPad Air 2. There will be a further draw for another iPad Air 2 after the survey closes on 20 March 2015, so early birds have two chances to win! All responses provided will remain confidential and will only be used by APNIC for the purposes of planning its training and technical assistance programs. Thank you for helping APNIC improve its training services. Kind regards, _______________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: +61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: +61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net _______________________________________________________________________

1 0

openwrt on mikrotiks (rb750, rb951) with openvswitch
by Sam Russell 19 Feb '15

19 Feb '15

After getting carried away coding at the SDN workshop this week I've gone and flashed an RB750 with the latest openwrt (chaos calmer), and discovered that the package/dependency management lacks the finesse of something like debian/ubuntu: root(a)OpenWrt:~# opkg install openvswitch Installing openvswitch (2.3.1-0dfed4ba9c8a16a1f316d709b7831a4e139472d4) to root... Downloading http://downloads.openwrt.org/snapshots/trunk/ar71xx/mikrotik/packages/packa…. Collected errors: * satisfy_dependencies_for: Cannot satisfy the following dependencies for openvswitch: * kmod-udptunnel4 * kmod-udptunnel6 * * opkg_install_cmd: Cannot install package openvswitch. digging deeper, it appears that kmod-udptunnel is built for ar71xx/nand (https://downloads.openwrt.org/snapshots/trunk/ar71xx/nand/packages/base/) but not for the mikrotik fork (https://downloads.openwrt.org/snapshots/trunk/ar71xx/mikrotik/packages/base/) questions: - has anyone got this running? im going to build kmod-udptunnel from source and then opkg install openvswitch, but was hoping i wouldn't have to - does anyone have a preference for ar71xx-mikrotik over ar71xx-nand? i know Dean has deployed ovs from source on older mikrotiks running attitude adjustment, who else is playing in this space? cheers sam

2 1

Loading of IRD.govt.nz taking 30-50 seconds of late
by Barry Murphy 19 Feb '15

19 Feb '15

Morning all, Wondering if anyone else is noticing that the ird website is taking quite some time to load, has been happening since late last week or earlier this week judging from reports. Tested from our network and also on 4G from Spark, same issue. Looking at a debug of the page, we get a 301 after 25 seconds, then we get a 24 second delay for a 200 OK then things start loading a bit later out of a cache from the looks. If anyone that looks after the IRD infrastructure is on the list, feel free to reply offlist. Many thanks -- Kind regards, Barry Murphy / Chief Operating Officer

3 2

increasing number of blacklisted NZ public IP addresses
by Daniel Christie 18 Feb '15

18 Feb '15

Hello all, I'm working for a small web/mail hosting company. I've recently noticed a lot of blacklisted IP addresses from NZ based ISPs being dished out, part of our intrusion prevention methods involve denying connections from these addresses. How do these blacklisted IP addresses get unlisted? Is it the responsibility of the customers of these ISPs or it is the responsibility of the ISP? Daniel Christie

5 5

ATS Switch for 1-3 Devices
by Mark Foster 17 Feb '15

17 Feb '15

Hiya folks, Looking for a cost-effective solution to automatically switch a non-redundantly-powered device between redundant power supplies. For example running a single switch between a UPS-backed power supply and a direct-mains power supply, so that I have some tolerance should the mains supply to the UPS fail (or the UPS itself). Essentially something like this: http://www.cdlnz.com/index.html?do=viewproduct&p=NR605&code=RP-ATS But i'm looking for something relatively small and for a relatively low number of devices (say anywhere from 1 to 3). I'm also not necessarily looking for >10A 240V; the gear that'll be being run, is quite low current. Anyone got any recommendations? Thanks Mark.

3 2

Job: Head of Network Operations - NEXTDC - Sydney Australia - 457 Available
by Skeeve Stevens 16 Feb '15

16 Feb '15

Hi all, On Seek.com.au <http://seek.com.au/> - http://www.seek.com.au/job/28150202?pos=1&type=standout I know a bit about this role, so feel free to chat to me offline if you are wondering if you are suitable.... or just apply directly :) I'm helping them find the right person... hardest thing is knowing who is out there and looking for a role like this. I will be in Japan at the Apricot/APNIC conference in a couple of weeks if you're there and you are interested in the role and would like to catch-up and chat about it. ...Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.co.nz ; www.eintellegonetworks.co.nz Phone: +612 8014 7398; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/theispguy ; blog: www.theispguy.com The Experts Who The Experts Call Juniper - Cisco - Cumulus Linux - Cloud - Consulting - IPv4 Brokering

1 0

Re: [nznog] Can anyone help
by Glen Eustace 16 Feb '15

16 Feb '15

Our issue has been going on now for a couple of weeks now but has been getting slowly worse. I don’t believe the issue reported in the Herald about mobile is related (but who knows :-) > On 12/02/2015, at 7:39 am, Robert M <robert(a)kneedrag.org> wrote: > > Spark has been having issues, apprently they have been resolved this morning. > > Don't have the details off hand. > > Regards, > > Rob > > On 12/02/2015 7:09 AM, "Glen Eustace" <geustace(a)godzone.net.nz <mailto:geustace(a)godzone.net.nz>> wrote: > Hi, > > I am wearing my Massey Uni hat and we are struggling with an intermittent number (though its growing) of random SIP telephone call failures from the PSTN. I realise that this isn’t a telephony support line but with the proliferation of VoIP I am hoping some of the people on the list might be able to help. > > We are getting call failures to completely random Massey DDI’s, Spark have traced the calls and are confident they leave their network and Vodafone are doing the same and do not believe the calls enter theirs. The call’s terminate on a system which plays the following voice prompt twice and then ends the call. > > “Your alternative network call is unable to proceed at this time, please try again later”. > > The voice is a pleasant Kiwi (though I’m not a linguist so might not be) female. > > If anyone can put their hand up and say, "yes that’s one of ours" or anyone has heard or know where this recording might be coming from it might help. The calls are definitely going somewhere and if we, Massey/Spark/Vodafone can work out the where it might help pinpoint the how. > > I know this is a long shot but we are running out of ideas. > > Thanks > > Glen > > > > -- > =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= > Glen and Rosanne Eustace, > GodZone Internet Services, a division of AGRE Enterprises Ltd., > P.O. Box 8020, Palmerston North, New Zealand 4446 > Ph: +64 6 357 8168 <tel:%2B64%206%20357%208168>, Fax: +64 6 357 8165 <tel:%2B64%206%20357%208165>, Mob: +64 27 542 4015 <tel:%2B64%2027%20542%204015> > > "Specialising in providing low-cost professional Internet Services since 1997" > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz <mailto:NZNOG(a)list.waikato.ac.nz> > http://list.waikato.ac.nz/mailman/listinfo/nznog <http://list.waikato.ac.nz/mailman/listinfo/nznog> >

2 4

Bi-lateral peering sessions
by Tim Hoffman 15 Feb '15

15 Feb '15

Kind folk of New Zealand, A while ago, when I was at Citylink, we had some very interesting discussions on what the community believed the role of the route server infrastructure was in our exchanges. At the time, Citylink had announced that they were no longer going to require every operator to submit prefix lists to them for enforcement. In my opinion, Citylink moved to the correct way of acting; not providing a level of route filtering for the community, but instead putting it onto each ISP to enforce their own BGP security. It was interesting to me how much people had placed a reliance on the route servers and their enforcing a route policy on behalf of them, rather than taking responsibility for this themselves. I recall that in this discussion on the list Dean Pemberton, Michael Fincham, and Andy Linton made some excellent points about this. One of the interesting things about New Zealand and IXs is the lack of bi-lats or routing control used across the peering exchanges. In many IXs worldwide, the route servers are only considered to be the initial stage of setting up on an IX (if you used them at all). An ISP or content provider would reach out to all the peers that they did any level of traffic to and request a bi-lateral BGP session, which they would enforce their own route policies on, and filter routes in both directions on this session to appropriately manipulate traffic. In light of the issues this afternoon on APE, I wonder all of us putting some effort into bi-lats with our major peers is worthy of discussion? Also interesting is the attached graph of aggregate traffic on AKL-IX, showing the value of having multiple IXs in Auckland for resiliency. Cheers, Hoff [image: Inline image 2]

1 0

Can anyone help
by Glen Eustace 11 Feb '15

11 Feb '15

Hi, I am wearing my Massey Uni hat and we are struggling with an intermittent number (though its growing) of random SIP telephone call failures from the PSTN. I realise that this isn’t a telephony support line but with the proliferation of VoIP I am hoping some of the people on the list might be able to help. We are getting call failures to completely random Massey DDI’s, Spark have traced the calls and are confident they leave their network and Vodafone are doing the same and do not believe the calls enter theirs. The call’s terminate on a system which plays the following voice prompt twice and then ends the call. “Your alternative network call is unable to proceed at this time, please try again later”. The voice is a pleasant Kiwi (though I’m not a linguist so might not be) female. If anyone can put their hand up and say, "yes that’s one of ours" or anyone has heard or know where this recording might be coming from it might help. The calls are definitely going somewhere and if we, Massey/Spark/Vodafone can work out the where it might help pinpoint the how. I know this is a long shot but we are running out of ideas. Thanks Glen -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Glen and Rosanne Eustace, GodZone Internet Services, a division of AGRE Enterprises Ltd., P.O. Box 8020, Palmerston North, New Zealand 4446 Ph: +64 6 357 8168 <tel:%2B64%206%20357%208168>, Fax: +64 6 357 8165 <tel:%2B64%206%20357%208165>, Mob: +64 27 542 4015 <tel:%2B64%2027%20542%204015> "Specialising in providing low-cost professional Internet Services since 1997"

1 0

nz Registrar
by Ryan Finnesey 10 Feb '15

10 Feb '15

For the members of the group that have gone though the authorisation as a .nz Registrar process I was wondering if you would be willing to share there exsperence on or offlist. Cheers Ryqn Sent using OWA for iPad

1 0

Palmerston North Wireless - Frequency conflict
by Dave Mill 10 Feb '15

10 Feb '15

Hi all If anyone in Palmerston North (or nearby) has recently fired up a 40Mhz wide channel centered around 5640Mhz could you please get in contact. It's very likely we could save each other a lot of grief. Cheers Dave

1 0

Help with Internet / Wireless connectivity near Whangamata
by Darren Moss 09 Feb '15

09 Feb '15

Evening All, I have a location which can see Whangamata, however there is no DSL service and I need to setup some repeater equipment at this location with decent connectivity to relay data. Is there anybody on-list (or someone you know, WISP, etc) who can help with a wireless link from (pretty much anywhere in) Whangamata back to this location about 15klms north ? We are elevated and can see Whangamata. Happy to setup WiFi type equipment, etc. Many thanks, Darren.

1 0

Internetnz conference attendance funding round
by Dean Pemberton 09 Feb '15

09 Feb '15

Hi all This is to let you know that the conference attendance funding round that is currently open, will now stay open until Friday. InternetNZ provides support for attendance at conferences where that attendance will assist in the achieving of InternetNZ’s Objects and where it will grow the pool of expertise in particular areas in NZ. To find out more about the criteria and to apply, visit: https://internetnz.nz/conference-attendance-funding-round Thanks Dean -- -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz To promote the Internet's benefits and uses, and protect its potential.

1 0

Cloudflare IPv6 MTU
by Brian E Carpenter 08 Feb '15

08 Feb '15

Just a factoid: as far as I can see from Wiresharking, Cloudflare at APE is configured with an outbound IPv6 MTU of 1280. Not a complaint, just an observation. It's safer that way. Regards Brian Carpenter

11 17

First weekend on APE
by Jesse Archer 08 Feb '15

08 Feb '15

https://pbs.twimg.com/media/B9W33Q4CEAAs5cY.png Not bad. Digging down and pretty much everyone (excluding AS4768) is on APE. Would like to see more local networks pop up on AKL-IX & Megaport IX Auckland. Don't forget to update your listing on http://peeringdb.com. A few of you show up on the looking glasses but your peeringdb listing is non-existent. If anyone who works for AS4768 is on this list, I'd love to stop sending traffic to you via international paths and improve the experience for your customers. *Jesse Archer* *General Manager*Full Flavour *p. *07 929 7111 *ddi*. 07 281 1391 *s*. Skype username "myfullflavour" *e*. jesse(a)fullflavour.co.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.co.nz <http://www.fullflavourmedia.co.nz/> *a. *Tauranga Business Centre, 50 Devonport Road, Tauranga *a*. PO Box 16306, Bethlehem 3176, New Zealand

2 1

The SDN Workshop - 18 & 19 February 2015 in Wellington
by Dean Pemberton 08 Feb '15

08 Feb '15

Given that the SDN tutorial at NZNOG was packed, I thought this might be of interest to people. There are a few seats left and on Friday it's being opened up to students. If you're interested then get in touch via the email below. ---------- http://ecs.victoria.ac.nz/Events/SDNWorkshop Future generation networking systems will require a paradigm shift in how they are networked, organised, configured, optimized, and recovered automatically based on their operating situation. With the emergence of Software Defined Networks (SDN), context awareness and dynamic adaptive services and application are gaining much attention since they allow automatic configuration of devices and their parameters, systems, services, and applications to user's context change. In addition, context awareness, with the help of software defined and cognitive systems, allows customisation of operating parameters of devices, users, applications, and networks based on the current context. This first workshop intends to introduce software defined networking concepts and practice for people new to the field. The workshop will also be a forum for practitioners from industry, academia and government to exchange ideas, present new results and provide future vision on these topics. The morning sessions will consist of talks, while the afternoon sessions will be more hands-on. To make the most of the afternoon sessions, you should have some basic programming experience (we will be using Python) and you need to bring a laptop. ________________________________ Date: 18th and 19th February 2015 Venue : Room 413, Railway building, Pipitea Campus, 1 Bunny Street, Wellington. Time: 9a.m - 5p.m (both days). Registration cost: NZD 50.00 per participant. Refreshments will be provided.

1 0

Fwd: [Cerowrt-devel] OpenWrt conference survey
by Dave Taht 05 Feb '15

05 Feb '15

The prpl foundation is attempting to become an umbrella arm of the openwrt folk and reaching out for feedback. ---------- Forwarded message ---------- From: Eric Schultz <eschultz(a)prplfoundation.org> Date: Fri, Feb 6, 2015 at 8:41 AM Subject: [Cerowrt-devel] OpenWrt conference survey To: "cerowrt-devel(a)lists.bufferbloat.net" <cerowrt-devel(a)lists.bufferbloat.net> tl;dr: prpl is gauging interest in an OpenWrt conference via a short survey at http://bit.ly/1BWKWFP -- All, My name's Eric Schultz and I'm the Community Manager at prpl Foundation. I've created a survey to gauge the community's interest in prpl Foundation organizing an OpenWrt conference. Since CeroWrt is based on OpenWrt, I think folks in the CeroWrt community might also be interested in an OpenWrt conference. As background, prpl participates in the OpenWrt community through our members directly as well as our working group, prplwrt. Organizing an OpenWrt conference is one more way in which we can support and strengthen the OpenWrt community. We'd like to know if there's support in the community for a conference dedicated to OpenWrt. Topics at a conference could include: * How to develop your own flavor of OpenWrt (like CeroWrt) * Securing OpenWrt * Question and answer with the core OpenWrt team We're excited at the prospect of organizing a conference for the community. If you have any interest in an OpenWrt conference, please complete the survey at your earliest convenience. The survey is at http://bit.ly/1BWKWFP Thanks for your time and your commitment to CeroWrt. If you have any questions, don't hesitate to contact me. Eric -- Eric Schultz, Community Manager, prpl Foundation http://www.prplfoundation.org eschultz(a)prplfoundation.org cell: 920-539-0404 skype: ericschultzwi @EricPrpl _______________________________________________ Cerowrt-devel mailing list Cerowrt-devel(a)lists.bufferbloat.net https://lists.bufferbloat.net/listinfo/cerowrt-devel -- Dave Täht thttp://www.bufferbloat.net/projects/bloat/wiki/Upcoming_Talks

1 0

internet research
by Jamie Baddeley 04 Feb '15

04 Feb '15

Folks, https://internetnz.nz/internet-research-forum I'd imagine there's some folks in the NZNOG community that might be interested in this. jamie

7 7

Recordings of 2015, and license
by Nick 02 Feb '15

02 Feb '15

I almost hesitate to bring it up again, last time there appeared to be no consensus about it, but... Do we know what, if any, license the recordings of this years NZNOG are? In theory, it should have been stipulated in the contract with the recording/streaming company, along with the speakers agreements. Cheers, Nick -- Nick 'Zaf' Clifford

1 0

Re: [nznog] racks for beer.
by Mark Frater 01 Feb '15

01 Feb '15

I have racks, not beer. 900D x 600W x 42U high. Contact me off list if interested. Mark From: Rob McDonald [mailto:r(a)l2.co.nz] Sent: Monday, 2 February 2015 12:08 p.m. To: Mark Frater Subject: Re: [nznog] racks for beer. You want racks or you got racks? On 2/02/2015 10:38 AM, "Mark Frater" <mark.frater(a)compass.net.nz<mailto:mark.frater(a)compass.net.nz>> wrote: Will swap 19" racks for beer. (No sides or doors - the racks I mean). Contact me if you're keen. Mark Frater Head of Design Compass Communications Limited _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz<mailto:NZNOG(a)list.waikato.ac.nz> http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Re: [nznog] Suggestions for router with 3G external antenna for remote site comms
by Laurence Bullivant 01 Feb '15

01 Feb '15

Afternoon, If you want something rock stable then i recommend the Cisco 88Xg series. They are fixed interface devices with either xDSL/HSNS/Ethernet WAN ports and inbuilt dual SIM 3G. They have dual antennas with N-Type connecters for low loss external antennas if needed. We have deployed these in the past for 3G failover on xDSL connections and they have always been extremely reliable. -Laurence Bullivant laurence(a)bullivant.co.nz On Sat, Jan 31, 2015 at 3:34 PM, Darren Moss <Darren.Moss(a)webhostnz.co.nz> wrote: > Hi All, > > We have a bunch of regional sites (weather probes) that run some > equipment, 2 PCs and are connected to the internet. > > At the moment it's dongle city which I would like to change over to > something a little better :) > > I am looking for suggestions on a decent (business grade) router with 3G > capability an external antenna connection. > > At each site, the equipment sits in a rack, inside a hut and signal > strength is reasonable (3/5). > > My thinking is to deploy a basic Cisco router with a 3G WIC then an > external antenna on the same mast where we collect weather data. > > Happy to hear suggestions and input. > > Many thanks > > > > Darren. > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > >

1 0

Re: [nznog] racks for beer.
by Mark Frater 01 Feb '15

01 Feb '15

Will swap 19" racks for beer. (No sides or doors - the racks I mean). Contact me if you're keen. Mark Frater Head of Design Compass Communications Limited

1 0

Thanks NZNOG
by Terry Manderson 31 Jan '15

31 Jan '15

Hi NZNOGers, I'd just like to say thanks. Thanks for the hospitality extended to an Aussie. Thanks for a really nice 2 days of thought provoking and interesting speakers. Thanks to the current trustees for making it happen, and thanks to the sponsors for all the schwaag and subsiding the event (as they always do!). Mostly I'd like to give thanks to the exiting trustees Neil and Dean. Like previous trustees Joe and Andy they have given much of themselves, of their time, and their expertise to make the Internet a better place through NOG coordination. I know this first hand in my role with AusNOG. It's a tireless beast. Often without thanks. It chews up personal lives and makes employers look at you with raised eyebrows. People often comment "why bother", and question your sanity. But ultimately what you have done makes the Internet better, and each person who takes it on and makes such efforts to this amazing concoction of technology contributes to an entire world of "better". And it's with that sincere goal which you have both plainly embodied, that I offer you MY thanks and my appreciation for all you have done. You deserve more than just this email, more than the beer I will buy you when next we meet ... you deserve the recognition for those selfless efforts. Well done. Cheers Terry

3 2

Suggestions for router with 3G external antenna for remote site comms
by Darren Moss 31 Jan '15

31 Jan '15

Hi All, We have a bunch of regional sites (weather probes) that run some equipment, 2 PCs and are connected to the internet. At the moment it's dongle city which I would like to change over to something a little better :) I am looking for suggestions on a decent (business grade) router with 3G capability an external antenna connection. At each site, the equipment sits in a rack, inside a hut and signal strength is reasonable (3/5). My thinking is to deploy a basic Cisco router with a 3G WIC then an external antenna on the same mast where we collect weather data. Happy to hear suggestions and input. Many thanks Darren.

4 3

RFC 4084 Terminology for Describing Internet Connectivity
by Brian E Carpenter 29 Jan '15

29 Jan '15

As Dean requested http://tools.ietf.org/html/rfc4084 Regards Brian

1 0

Operators and the IETF
by Brian E Carpenter 29 Jan '15

29 Jan '15

Following up on the lightning talk I just gave in Rotorua: The IETF is concerned that we're not getting enough operator input at the time it counts: when specifications are being developed, years before they come out in software or hardware. There's been an effort to investigate the reasons for this problem, prior to trying to fix it. Everybody involved in Internet operations is welcome - indeed needed - to contribute. Full length presentation: http://www.ietf.org/proceedings/91/slides/slides-91-opsawg-0.pdf IETF draft: https://tools.ietf.org/html/draft-opsawg-operators-ietf Mailing list (anyone can join): http://snozzages.com/cgi-bin/mailman/listinfo/synergy Internet Society page: https://www.internetsociety.org/deploy360/operators-and-the-ietf/ How to get started with the IETF without further ado: http://www.ietf.org/newcomers.html Regards Brian Carpenter

2 1

Two interesting links from APNIC
by Dean Pemberton 29 Jan '15

29 Jan '15

IPv6 deployment status within NZ by ISP http://stats.labs.apnic.net/ipv6/NZ DNSSEC deployment status within NZ by ISP http://stats.labs.apnic.net/dnssec/NZ

1 0

Lightning talks
by Richard Nelson 29 Jan '15

29 Jan '15

We still have space to fit in a couple more lightning talks if anyone else has one to present. Richard.

1 0

NZNOG Video Feed?
by Tristram Cheer 29 Jan '15

29 Jan '15

Is R2 or someone livestreaming NZNOG this year? Tristram Cheer Network Architect - Most problems are the result of previous solutions... [Visit our Website]<http://www.uber.co.nz/> 09 438 5472 Ext 803 | 022 412 1985 | PO Box 5083, Whangarei, 0140 t(a)uber.co.nz<mailto:t(a)uber.co.nz> | www.ubergroup.co.nz<http://www.ubergroup.co.nz> [http://uber.co.nz/uploads/signatures/fb-s-v4.png]<http://ubergroup.co.nz/fb> [http://uber.co.nz/uploads/signatures/twitter-s-v4.png] <https://twitter.com/#!/ubergroupltd>

4 4

nznog 2015: Pic of who won puzzle
by Lin Nah 29 Jan '15

29 Jan '15

Since not all are on twitter, here's the pic of one of the group who won the puzzle. Not sure if the guys next to the winner is part of the group or just happened to be there. Go Wireless NZ @gowifi <https://twitter.com/gowifi> tweeted: Wohoo! Completed puzzle!! Great job guys! #nznog <https://twitter.com/search?q=%23nznog> http://ow.ly/i/8qIVj Tweet: https://twitter.com/gowifi/status/560597249663582208

2 1

Lightning talks
by Richard Nelson 28 Jan '15

28 Jan '15

If you want to present a lightning talk tomorrow in the conference, please send me an email or talk to me in a break. Talks should be around 5 minutes long and may or may not require presentation slides. If you have slides, upload them to owncloud.face.co.nz with username/password of nznog15. Put them in the Lightningtalks folder. Richard.

2 1

Beers tonight courtesy of vibe
by Callum Barr 27 Jan '15

27 Jan '15

Come down to Brew in eat street, rotovegas, meet and greet the vibe team and sample many fantastic beverages. We're here now until we expire. Call me if you get lost Callum +64275672746 -- Callum Barr me(a)callumb.com

1 0

bufferbloat talk at nznog friday
by Dave Taht 26 Jan '15

26 Jan '15

I am curious as to what aspects of bufferbloat I should cover more deeply in my upcoming talk at nznog this friday? http://www.nznog.org/home/2015-papers Most of my own personal focus has been on speeding up the edge of the internet, and now wifi, while I have a feeling I should touch upon more on island-to-world connectivity and satellite connectivity issues for this audience. We've given plenty of talks in the past. See talks by van jacobson, jim gettys, jesper dangaurd-bauer, Stephen hemminger, Eric Dumazet, Toke Hoiland Jorgensen, here: http://www.bufferbloat.net/projects/cerowrt/wiki/Bloat-videos And the manifesto for FQ+AQM here: https://gettys.wordpress.com/2013/07/10/low-latency-requires-smart-queuing-… So... To what extent do NZNOG folk already grok the causes and cures for bufferbloat? I'm perfectly willing to drop my usual detailed explanation of how tcp bandwidth probing works and talk abut new stuff going on, and wifi, if desired... talk more to bandwidth management and traffic engineering tools, etc. ... there is someone here today doing mikrotik training, and as yet only mikrotik only supports SFQ, not fq_codel. http://forum.mikrotik.com/viewtopic.php?f=1&t=89221 http://forum.mikrotik.com/viewtopic.php?f=2&t=63594 I have a pair of slides on the differences between SFQ and fq_codel. ... And so on. I'm here all week... I've borrowed a NZ vm, run a few experiments worldwide, am fiddling with some parameters... -- Dave Täht http://www.bufferbloat.net/projects/bloat/wiki/Upcoming_Talks

4 12

IPv6 support across NZ ISPs
by Lindsay Hill 26 Jan '15

26 Jan '15

After last year's IPv6 issues, I was wondering what the status is of IPv6 support across NZ ISPs. I couldn't find that data in any one place, so I've been pulling it together myself, into a Google Sheet: https://docs.google.com/spreadsheets/d/1KmhVGN_vPzerUzhpya8lBxdgHc1rCyuWIsY… This is primarily focused around residential ISPs, and the status of their IPv6 support for 'regular' customers. I'm interested in three things: * Is IPv6 supported - fully or trial? * What prefix lengths are given to customers * Are static allocations available?" I've got data on 11 ISPs so far, with requests out for another 3. This covers the majority of end-user connections in NZ. There are of course many more niche ISPs, and I'm happy to add their info. You can see that support is generally poor, which is probably why Google says we're only doing ~0.6% IPv6 traffic. Comments + Updates welcome. Once I've got a bit more data, this will probably go into a more permanent home. If we get enough data, we could break out into residential vs business vs co-location IPv6 support. I am aware of at least a couple of ISPs that are doing IPv6 trials, and when they go live, it will significantly shift the overall IPv6 penetration rate in NZ. But those trials are still mostly internal only, and you can only get on them if you know the right people. If the regular public can't get onto those trials, then I think they should be listed as "Unsupported" - too many ISPs have made noises about running trials years ago, but never got around to actually launching. You know who you are.

16 31

Re: [nznog] Chorus EUBA + IPV6
by Scott Pettit 26 Jan '15

26 Jan '15

On 26/01/15 21:37, "Brent Marquis" <Brent.Marquis(a)chorus.co.nz> wrote: >>Only affect PPPoE->PPPoA translation >This also means that IPv6 over VDSL (PTM) should be fine. >From: nznog-bounces(a)list.waikato.ac.nz >[mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Simon Allard >To summarise: >IPV6 doesn’t work on Chorus EUBA on some line card types >Only affect PPPoE->PPPoA translation >PPPoE end to end is fine. >Chorus say IPV6 not supported on EUBA >Customer numbers effected are smallish. Just to clarify, if a customer uses PVC 0/110 (Ethernet), there is no issue, right? We have lots of sites on EUBA using 0/110 and haven’t had any problems with IPv6, ditto for WVS. -Scott -- [https://s3-ap-southeast-2.amazonaws.com/e2emailsig/unnamed.png] Scott Pettit | Director +64 9 9502222 | SPettit(a)end2end.co.nz End 2 End Limited +64 9 9502220 205/100 Parnell Road, Parnell, Auckland 1052, New Zealand http://www.end2end.co.nz The content of this message and any attachments may be privileged, confidential or sensitive and is intended only for the use of the intended recipient(s). Any unauthorised used is prohibited. Views expressed in this message are those of the individual sender, except where stated otherwise with appropriate authority. All pricing provided is valid at the time of writing only and due to factors such as the exchange rate, may change without notice. Sales are made subject to our Terms & Conditions, available on our website or on request.

5 6

APE route flapping
by Tim Price 26 Jan '15

26 Jan '15

Hi All, Some of you may have noticed that there is some route flappage going on this morning and some of your Domestic/APE facing routing processes may be going haywire. It is probably an appropriate time to check your session route limits on APE and raise them to ~6000. Massey and Vocus; I note that your APE sessions are flapping with Vocus’s route updates causing the lions share of my issues this morning: http://nzix.net/cgi-bin/lg.cgi?query=bgp&protocol=IPv4&addr=neighbors+192.2 03.154.123&router=rs1.ape.nzix.net http://nzix.net/cgi-bin/lg.cgi?query=bgp&protocol=IPv4&addr=neighbors+192.2 03.154.62&router=rs1.ape.nzix.net Cheers, Tim.

1 0

Re: [nznog] IPv6 support across NZ ISPs [SECURITY=UNCLASSIFIED]
by HENDERSON MIKE, MR 26 Jan '15

26 Jan '15

Unfortunately, "those who have bothered to implement it" appear to be commercially inconsequential in the residential and mobile broadband markets. According to Andrew Cushen's recent blog post (at http://tinyurl.com/nvdxgh2) Spark, Vodafone and Callplus (= Orcon and Slingshot) between them own 94% of the residential broadband market, and of them Orcon says it has a 'trial' IPv6 offering, all the others Just Say No. Vodafone, Spark and two Degrees of course own 100% of the mobile broadband market, and none of them appear to offer IPv6. I'm afraid that v6 traffic is going to continue to be down amongst the noise until either Vodafone or Spark come to the IPv6 party Regards Mike Disclaimer: opinions expressed are mine and may not represent the position of my employer From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Pete Mundy Sent: Monday, 26 January 2015 5:37 p.m. To: nznog Subject: Re: [nznog] IPv6 support across NZ ISPs Agreed! Back-pats to those who have bothered to implement it. I know I base my purchasing decisions on it's availability. FWIW we went through a process of finding co-lo package providers that would provide IP space, bandwidth and physical hosting for our PBX equipment around 12 months ago and one of the pre-requisites was the ability to provision us IPv6 space. I was disappointed to find that only 3 of the 10 NZ providers we approached were able to offer it! Most said "it's on the roadmap, but not yet". Some just said "no". In the end we selected two of the providers that could, and we are very happy with the service from both. Hat tips to both Vibe and Unleash/Solarix; your IPv6 support was a significant part of what got you our custom :) Server colo (or VPS') are a different market than home DSL or UFB, but I think it could be interesting & useful to have some sort of matrix of IPv6 availability in that sector too. And 'business' UFB/HSNS/VSDL etc too for that matter. I do hope my 30% hit rate isn't an accurate indicator... Pete On 26/01/2015, at 10:38 AM, Alastair Johnson <aj(a)sneep.net<mailto:aj(a)sneep.net>> wrote: Nice work by FX. Keep it up. (and good work to the others that are offering IPv6 as compiled by Lindsay's list - also good work) The information contained in this Internet Email message is intended for the addressee only and may contain privileged information, but not necessarily the official views or opinions of the New Zealand Defence Force. If you are not the intended recipient you must not use, disclose, copy or distribute this message or the information in it. If you have received this message in error, please Email or telephone the sender immediately.

1 0

CloudFlare at AKL-IX doing some traffic!
by Michael Fincham 24 Jan '15

24 Jan '15

Hey all, Looks like ClareFlare have started moving some traffic at AKL-IX: <http://monitor.akl-ix.nz/cacti/graph.php?local_graph_id=18&rra_id=all> I look forward to seeing what happens next on this graph :) -- Michael Fincham

2 1

They're adding a "leap second" at Noon, Wednesday, 1 July 2015 NZ Standard Time {SECURITY=UNCLASSIFIED}
by HENDERSON MIKE, MR 15 Jan '15

15 Jan '15

Folks, Some of you may not have noticed this in the post-Christmas doze ... What will happen is that on 30th June [UTC time] the clock will go 23:59:59 > 23:59:60 > 00:00:00, instead of 23:59:59 > 00:00:00, i.e. an extra 'leap' second is inserted. It will cause the odd issue or two, depending on your environment and operating system.. For example, if you should happen to use RHEL you could start here https://access.redhat.com/articles/15145 There were certainly issues in other Linux distributions (including Oracle Linux and SLES) last time this happened on 30th June / 1st July 2012. Regards Mike ________________________________________ Press Coverage: This year will be slightly longer after the Paris Observatory announced that it was adding a "leap second" at midnight [UTC] on June 30 http://www.smh.com.au/technology/sci-tech/extra-second-to-be-added-to-2015-… Note: Midnight [UTC] on June 30 2015 is Noon, Wednesday, 1 July 2015 NZ Standard Time Official Announcement: INTERNATIONAL EARTH ROTATION AND REFERENCE SYSTEMS SERVICE (IERS) SERVICE INTERNATIONAL DE LA ROTATION TERRESTRE ET DES SYSTEMES DE REFERENCE SERVICE DE LA ROTATION TERRESTRE DE L'IERS OBSERVATOIRE DE PARIS 61, Av. de l'Observatoire 75014 PARIS (France) Tel. : 33 (0) 1 40 51 22 26 FAX : 33 (0) 1 40 51 22 91 e-mail : services.iers(a)obspm.fr<mailto:services.iers(a)obspm.fr> http://hpiers.obspm.fr/eop-pc Paris, 5 January 2015 Bulletin C 49 To authorities responsible for the measurement and distribution of time UTC TIME STEP on the 1st of July 2015 A positive leap second will be introduced at the end of June 2015. The sequence of dates of the UTC second markers will be: 2015 June 30, 23h 59m 59s 2015 June 30, 23h 59m 60s 2015 July 1, 0h 0m 0s The difference between UTC and the International Atomic Time TAI is: from 2012 July 1, 0h UTC, to 2015 July 1 0h UTC : UTC-TAI = - 35s from 2015 July 1, 0h UTC, until further notice : UTC-TAI = - 36s Leap seconds can be introduced in UTC at the end of the months of December or June, depending on the evolution of UT1-TAI. Bulletin C is mailed every six months, either to announce a time step in UTC or to confirm that there will be no time step at the next possible date. Daniel Gambis Head Earth Orientation Center of IERS Observatoire de Paris, France http://datacenter.iers.org/eop/-/somos/5Rgv/latest/16<http://datacenter.iers..org/eop/-/somos/5Rgv/latest/16> The information contained in this Internet Email message is intended for the addressee only and may contain privileged information, but not necessarily the official views or opinions of the New Zealand Defence Force. If you are not the intended recipient you must not use, disclose, copy or distribute this message or the information in it. If you have received this message in error, please Email or telephone the sender immediately.

2 1

APNIC Consultations at Conference - Wednesday
by Richard Nelson 14 Jan '15

14 Jan '15

Hostmaster consultations ------------------------ APNIC is offering free, individual Hostmaster consultation sessions at the NZNOG Conference. These will be available on Wednesday Jan 28. At these sessions you can ask about: - How to request IPv4, IPv6, and AS numbers from APNIC - How to transfer IPv4 addresses and AS numbers - Current policies for IP and AS number management in the APNIC region - How to maintain and update your resource registration record in the APNIC Whois Database - Any individual issues you might have To register for the Hostmaster consultations, please email: elly(a)apnic.net

1 0

New prefixes on WIX
by Tim Price 13 Jan '15

13 Jan '15

Heads up that ~700 new prefixes just appeared then vanished from WIX route reflector 2. This momentarily pushed the route totals up over 2000 which may have reset a few BGP sessions for anyone limiting their received prefixes to 2000 on that session. Cheers, Tim.

1 0

python network trace analysis tutorial at NZNOG 2014
by Nevil Brownlee 13 Jan '15

13 Jan '15

Hi all: I'm giving a tutorial on "analysing network traces with python" at NZNOG 2015. The tutorial will cover how to use my python-libtrace module, with lots of example python programs. However, the examples I can think up easily are mostly trivial. It would help me a lot to know what kinds of trace analysis ISPs would actually find useful! If/when you collect packet traces, what kinds of information or analysis would you like to get from them? Any suggestions would be much appreciated - please email me off-list, nevil(a)auckland.ac.nz Cheers, Nevil -- --------------------------------------------------------------------- Nevil Brownlee Computer Science Department Phone: +64 9 373 7599 x88941 The University of Auckland FAX: +64 9 373 7453 Private Bag 92019, Auckland 1142, New Zealand

1 0

Fwd: Re: [mailop] Wildcarding of AHBL public DNSbl lists on Jan 1st
by Thom Hooker 04 Jan '15

04 Jan '15

(Apologies if you've seen this notification from the mailop list already. ) See the post below re: the AHBL RBL wildcarding certain zones today. There are NZ ASs in the latest CSV lists in the link below (Vodafone NZ, ICONZ, HD & NZ Wireless), this change may affect mail flows. Regards Thom -------- Original Message -------- Subject: Re: [mailop] Wildcarding of AHBL public DNSbl lists on Jan 1st Date: Fri, 26 Dec 2014 16:26:34 -0700 From: Brielle Bruns <bruns(a)2mbit.com> To: mailop(a)mailop.org On 12/26/14 4:00 PM, Frank Bulk (iname.com) wrote: > Thanks, that's helpful. > > I'm not sure how many IPs you have, but Cymru's service might be an option: >https://www.team-cymru.org/Services/ip-to-asn.html > > I found some other options: >http://quaxio.com/bgp/ >http://ipinfo.io/ >http://dev.maxmind.com/geoip/legacy/geolite/ (usage described here: >https://stackoverflow.com/questions/13110386/ip-to-asn-mapping-algorithm) > Thanks. I threw together a shell script that handles the conversion for me based on the geoiplookup tool and the output is going here: http://www.ahbl.org/queries/ I have to generate the lists manually for now, but it should help those looking to figure out who on their network is doing queries. -- Brielle Bruns The Summit Open Source Development Group http://www.sosdg.org /http://www.ahbl.org _______________________________________________ mailop mailing list mailop(a)mailop.org http://chilli.nosignal.org/mailman/listinfo/mailop _____________________________________________________________________________ This email has been filtered by SMX. For more info visit http://smxemail.com _____________________________________________________________________________

1 0

BCP / Guidance on IPv6 prefix size to provide to customers
by Alexander Neilson 02 Jan '15

02 Jan '15

I wondered if anyone on here had any guidance on any current BCP (or BCOP) or some general guidance on IPv6 allocations to customers (I am speaking here only for casual day to day allocations to customers) Looking through email archives and discussions that have seen around there was fairly vigorous discussions but no real resolutions. I have seen suggestions of /48, /50, /56. I am inclined to allocate /56’s to each customer (providing 256 /64’s). I don’t want to prevent customers from having the flexibility to do what they need / want to do nor stymie future use cases. If there is some good guidance on a need for /48’s then I will look at it and will use those if needed. Also, is current operating practice amongst others for all links to be /64’s even for p2p links? It seems a lot of documentation / reference texts are a few years old now and some providers have told me that this advice is no longer current but I haven’t yet seen this codified. My /32 allocation is provisionally as follows: 16 bits of /56 allocations - 65,535 customer allocations 8 bits for internal (leaves me 255 /64’s for p2p links between routers) Currently using PPPoE for IPv4 authentication for bulk customers and bespoke routed configurations for the rest. I intend to continue the PPPoE at this stage and just provide dual stack to every customer when connecting. I am still open to any input people have or feedback about what contributed to their deployments. I have looked into archives but was unable to find clear guidance that wasn’t discussed at length to be out of date / disputed so I am primarily looking for what the current best practice is so I can take advantage of the best advise for rolling out the deployment (I know we are late to this party but better late than never) Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

7 13

Re: [nznog] Whole of Domain Web Harvest 2015
by emma h 23 Dec '14

23 Dec '14

for those wishing to block, the apache rewrite rule is; RewriteEngine on RewriteRule ^(.*)$ http:/your.domain.co.nz [R=301,L] RewriteCond %{HTTP_USER_AGENT} ^(.*)NLNZ_IAHarvester2015(.*)$ RewriteRule ^(.*)$ http://tinyurl.com/NLNZ-IAHarvester2015 merry festivus. -- em

2 1

AUI 10BaseT transceiver
by Gareth Fletcher 23 Dec '14

23 Dec '14

Hi team Is anyone near Auckland CBD/Ponsonby and have one of these they'd be willing to part with this afternoon/next week? We seem to have trashed all ours years ago... Please reply off-list, with beer of choice of course :) Cheers! Gareth

1 0

Whole of Domain Web Harvest 2015
by Jay Gattuso 23 Dec '14

23 Dec '14

Hi NZNoggers, I write to let you know of our intent to commence the next NZ Whole of Domain web harvest on the 12th of Jan 2015. The crawl will take approximately 3 weeks to complete. We will be following the same model as previous years, with the Internet Archive acting on our behalf to undertake the crawl. We will be adhering to robots.txt in the main, however when content blocked by robots.txt is embedded in a page that’s not blocked by robots.txt we will attempt to capture that content. The metadata the crawler will be using is:- metadata.userAgentTemplate=Mozilla/5.0 (compatible; NLNZ_IAHarvester2015 +(a)OPERATOR_CONTACT_URL@) metadata.operatorContactUrl=https://natlib.govt.nz/publishers-and-authors/web-harvesting/domain-harvest The contact URL gives some information that describes why we are doing this, and what we’re doing. If you have any questions or concerns, please drop me a line – I’ll be monitoring this email address over the Xmas period. Many thanks, Jay Jay Gattuso | Digital Preservation Analyst | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467 Wellington 6140 New Zealand | +64 (0)4 474 3064 jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)natlib.govt.nz>

1 0

Fwd: Estonian IPv6 deployment report
by Brian E Carpenter 23 Dec '14

23 Dec '14

An example from far away... -------- Original Message -------- Subject: Estonian IPv6 deployment report Date: Mon, 22 Dec 2014 17:27:23 +0200 From: Tarko Tikan <tarko(a)lanparty.ee> To: IPv6 Ops list <ipv6-ops(a)lists.cluenet.de> hey, Some time ago, many people noticed rapid IPv6 deployment growth in Estonia (from 0% to 5% in 4 weeks). We at 3249/Elion/Estonian Telecom were behind this, other operators don't have any serious IPv6 deployments at the moment. We rolled out v6 to everyone (both business and residential customers) with last-gen CPE, there was no hop-in our hop-out program - aim was to do it perfectly and without customers even noticing. I'm happy to say that we achieved this goal :) To satisfy general interest, I promised small (somehow it turned out longer than I expected) technical writeup how we enabled v6 for our subscribers. If you have any other questions, feel free to ask and I do my best to answer them. You can also skip the technical content and there are some statistics below. Our access network is mix of DSL/GPON/wimax/p2p-ETH and broadband service is deployed in shared service vlans. IPv6 traffic shares vlan with IPv4. Service vlans are transported over MPLS metro network using pseudowires and terminated in geo-clustered Alcatel 7750 BNG routers. Each subscriber is allocated up to 4 mixed v4 and v6 IP hosts. For v4 we are using the usual DHCP, for IPv6 we are using DHCPv6 with IA_PD only, no IA_NA is provided. Unfortunately DHCPv6 provides no way to signal IPv6 default-route thus we have to fall back to RA for default-route. RA does not include any on-link prefixes or DNS information. RAs are L2 unicasted to CPE MAC so no other CPE in service vlan picks up those RAs. To ensure rapid switchover between BNG routers, we are signalling virtual link-local address as default-route. We are using ALU internal DHCP/DHCPv6 servers to allocate leases but we also signal IP information from radius (in such case BNG "fakes" DHCP server) for static IP customers. Provided IPv6 prefix is always /56 and we keep the old lease for 24h even if the CPE is turned off (actual lease time is 30min). Unfortunately, IPv6 LDRA is not available on most of our access platforms so we have to rely on IPv4 session information for authentication. This linking is done in the radius server during subscriber authentication (excellent radiator + quite awful SQL queries :) - if subscriber has IPv4 session (that has been authenticated using DHCP opt82), same MAC address is allowed to have IPv6 session on exactly the same virtual BNG port. IPv4 and v6 session are both tied to same subscriber and share shapers, QOS etc. We were able to enable IPv6 only on our last-gen Inteno CPEs. They run modified OpenWrt and because it's linux - everything is possible :) In CPE, /56 is divided up to /64s, first one is currently reserved but we will configure it on loopback interface and use it for CPE management. Second /64 is configured on LAN and third is configured on public wifi SSID (if you choose to enable this option). In the LAN, IPv6 config is provided by RAs, we also support RDNSS and stateless DHCPv6 for DNS. There is also ingress IPv6 firewall in the CPE and configuration is modifiable by user. To make deployment as smooth as possible, we rolled out IPv6 capable CPE software first. Then, during the BNG platform refresh, we deployed L2 ACLs that dropped all IPv6 traffic based on 0x86dd ethertype. We then deployed IPv6 config to all BNGs and could verify everything before single v6 lease was handed out to the subscribers. Then, interface by interface, we replaced L2 ACL with one that only allowed 0x86dd for certain, supported, OUIs. This is the current situation and we are investigating ways to support 3rd party CPEs - main problem is unreliable IPv6 config in CPEs. Many don't enable DHCPv6 (or enable NA but no PD) but still pick up default-route from RA and happily signal it to LAN. Some others hammer our BNGs with NA request every 0.1 seconds etc. As statistics go, there are 30000+ active IPv6 subscribers (almost 15% of our customer base, based on our public numbers), 81% of them have have at least one IPv6 enabled device in the LAN, 70% have more than one. Most IPv6 traffic is generated by Google+Youtube, Facebook and Akamai. Not bad for a country with 1.3M people. Next up: mobile network :) -- tarko

2 1

Primary access method
by Brian E Carpenter 21 Dec '14

21 Dec '14

Hi, In answer to a ticket entitled "Not getting an IPv6 prefix today", here is what the help desk told me: > Currently XXX have IPv6 services turned off due to some ongoing investigations > with this service. > > Once this is turned back on you will be able to get an IPv6 address again. and in response to my follow-up bleat > As IPv6 is not the Primary access method we offer on our connections this does > not need to be updated on the network status page. > > IPv6 is not a fully released product therefore it is still going through testing > and this is why we are currently unable to apply static IPv6 address (I didn't ask about a static address and don't want one.) This morning, I still have no IPv6 service and the XXX status page still says "OK - No Known Network Problems". Now, since I've had stable IPv6 service for a long time and it often gives me better response times than IPv4, I was a bit annoyed by this. Isn't it time that people consider IPv6 to be the primary access method, and IPv4 to be a legacy solution? Grumble. I need to fire up SixXs again, then. Brian

9 14

Akamai at APE
by Scott Pettit 19 Dec '14

19 Dec '14

Hoping someone knows/can share more info about the Akamai APE peer. It's been there a couple of months now but I can't find any announcement or info in regards to what those caches are serving. I'm seeing a small amount of largely corporate-ish content coming off it (e.g. Cisco.com content seems to come from there) but wondered whether it also provides media content like iTunes movies? Does anyone have detail on how large it is and what it's there for? -Scott

2 1

Multicast traffic replication issue
by Ben Cornish 18 Dec '14

18 Dec '14

Hi All, Curious if anyone has seen this issue previously or could offer any advice on the issue: We have a VLL/EOMPLS with Pipe from Sydney to NZ which then utilises a City Link QinQ service across town in Auckland. We've had an issue ongoing for some time and it only relates to multicast traffic traversing the path. Essentially this issue started when we couldn't establish a OSPF session over the link - yet all other traffic flows as expected. When we broke this link down to basics (laptop either end) we send one multicast packet in the Sydney end - we then receive that same packet 97 times out the Auckland end. (Over the Pipe and City link path) We see this issue when we ping 224.0.0.5 over the link and get that same exact packet 97 times on the other end. We've seen this when doing WireShark captures on the port. The captures show the exact same packet 97 times (ie same payload/sequence number). Pipe seem to be running out of ideas to track the issue. Being a EoMPLS circuit I doubt the issue is on the Pipe side but more on the City Link side. When CityLink were engaged in the issue they did what they referred to as an RFC test - as I understand it, unicast testing only and never engaged further. This issue only seems to effect link local multicast traffic - ie 224.0.0.x/24 All other traffic appears to flow normally/as expected. Obviously we are chasing pipe to test each side individually to work out who is doing the packet replication - however I am curious if anyone has had issues forming OSPF sessions over a City link service ?? Or if anyone can offer advice or seen a similar issue ? My brain boggles thinking how this is even possible or what would cause it. Ben Cornish General Manager [Description: Description: cid:image001.png(a)01CCB4C2.B40A97F0] Over the Wire Pty Ltd - An Impirical Company Level 3, 24 Little Edward St, Spring Hill QLD 4000 t +61 7 3847 9292 m +61 417 617 204 e ben.cornish(a)overthewire.com.au<mailto:ben.cornish(a)overthewire.com.au> www.overthewire.com.au<http://www.overthewire.com.au/>

3 4

Call for Presentations - DNS-OARC Spring Workshop, May 2015
by Sebastian Castro 18 Dec '14

18 Dec '14

NOTE: Previous message contained the right information, but with the subject referring to the wrong year. Apologies for the noise. The next OARC Spring Workshop will take place in Amsterdam on May 9th and 10th, the weekend before RIPE70. OARC is requesting proposals for presentations, with a preference for DDoS attack reports and mitigation techniques. Reports and field stories can cover DNS-based DDoS attacks, attacks to DNS infrastructure or side effects suffered by cache resolver operators. This workshop intends to build from previous strong OARC workshops, where operational content and research is welcome. Presentations from DNS operators are particularly welcome, as well as from DNS researchers. All DNS-related subjects are accepted, introduction to new tools, visualizations, DNSSEC and novel uses of the DNS. If you are an OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. Adopting practice from other conferences, a timeslot for lighting talks will be available for short presentations (5 to 10 minutes). Workshop Milestones * 18 December 2014, Call for Presentations posted * 8 January 2015, Open for submissions * 5 March 2015, Deadline for submission * 26 March 2015, Final Program published * 7 May 2015, Final deadline for slideset submission Details for abstract submission will be published here: https://indico.dns-oarc.net//conferenceCFA.py?confId=21 The workshop will be organized on different tracks, depending on the topics and the timing of each presentation. If you are interested in a lightning talk, let us know at the time of submission. You can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> if you have questions or concerns. Sebastian Castro, for the OARC Programme Committee OARC is also seeking sponsorship for this workshop, please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Sebastian Castro Technical Research Manager .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Call for Presentations - DNS-OARC Spring Workshop, May 2014
by Sebastian Castro 18 Dec '14

18 Dec '14

The next OARC Spring Workshop will take place in Amsterdam on May 9th and 10th, the weekend before RIPE70. OARC is requesting proposals for presentations, with a preference for DDoS attack reports and mitigation techniques. Reports and field stories can cover DNS-based DDoS attacks, attacks to DNS infrastructure or side effects suffered by cache resolver operators. This workshop intends to build from previous strong OARC workshops, where operational content and research is welcome. Presentations from DNS operators are particularly welcome, as well as from DNS researchers. All DNS-related subjects are accepted, introduction to new tools, visualizations, DNSSEC and novel uses of the DNS. If you are an OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. Adopting practice from other conferences, a timeslot for lighting talks will be available for short presentations (5 to 10 minutes). Workshop Milestones * 18 December 2014, Call for Presentations posted * 8 January 2015, Open for submissions * 5 March 2015, Deadline for submission * 26 March 2015, Final Program published * 7 May 2015, Final deadline for slideset submission Details for abstract submission will be published here: https://indico.dns-oarc.net//conferenceCFA.py?confId=21 The workshop will be organized on different tracks, depending on the topics and the timing of each presentation. If you are interested in a lightning talk, let us know at the time of submission. You can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> if you have questions or concerns. Sebastian Castro, for the OARC Programme Committee OARC is also seeking sponsorship for this workshop, please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Sebastian Castro Technical Research Manager .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Re: [nznog] New IXs in NZ - discussion
by Stu Fleming 17 Dec '14

17 Dec '14

Coming very late to the party on this, but I wanted to wait until announcements (both press and BGP) were out there: On 11 November 13:18, Tim Hoffman <tim(a)hoffman.net.nz> >We've had some interesting announcements of Megaport and IX Australia building internet >exchanges into NZ over the last week or so. I've been a bit surprised at how little chatter there >has been around this on the list. I've just completed standing up our (WICNZ AS38437) peering with APE and hope to complete megaport IX peering in the next couple of days. We're peering IPv4 and IPv6 on both. Our peering record is at http://www.peeringdb.com/view.php?asn=38437 NOC contact: Stu 021 993 125 stewart(a)wic.co.nz I've noted with interest the migration away from Sky Tower to 220 Queen St in particular and the healthy participation by a large number of operators on APE. See below for how you can help me :-) >It's interesting looking at the differences between the 3 IXs we're about to have. >Citylink, who have the critical mass of all the peers, are in the most locations, and are the most >expensive. They've also got a product set around metro ethernet, dark fibre, and have a CDN >running. And they're doing some interesting things around a "SDN driven IX". An announcement in the last few days which seems to have been overlooked on NOG is the relaunch of the Dunedin Peering Exchange: http://www.scoop.co.nz/stories/BU1412/S00637/citylink-tech-boost-for-dunedi… As you will probably all know (to varying degrees of snark), Dunedin won the Chorus Gigatown competition, providing gigabit speeds on UFB at the retail level. As such, we're expecting higher than normal traffic volumes and hopefully an associated increase in exchanges between providers. I would strongly encourage any operator with a presence in Dunedin to connect to the Dunedin Exchange when it becomes available. We're committed to peering there and hope to see others connecting! Regards, Stu

1 0

Re: [nznog] FW: Primary access method
by Scott Pettit 17 Dec '14

17 Dec '14

> On 17/12/14 11:20 pm, "Joel van Velden" <joel(a)tpnz.co.nz> wrote: >There is no NZ ISP that fully supports IPv6 on DSL/UFB that I am aware >of. We (vorco.net) do support IPv6 on all connections and it's on by default. All customers are assigned a static /56 via DHCPv6 PD, so all that's required is enabling it on the CPE and it is a "production" feature. We officially test and support it on Cisco 867VAE, all 880's, 890's and anything upwards of that and provide template config for these. We have also tested and know it works with Netcomm NF4V (on firmware RB017 and RB019) but don't provide support for those. We've gone to great lengths to pester anyone we connect to with broken IPv6 and as at right now are not aware of any outstanding issues. -Scott

1 0

Re: [nznog] Primary access method
by Pete Mundy 17 Dec '14

17 Dec '14

On 18/12/2014, at 12:20 PM, Joel van Velden <joel(a)tpnz.co.nz> wrote: > There is no NZ ISP that fully supports IPv6 on DSL/UFB that I am aware of. Let's change that awareness then! :) http://www.sinch.co.nz/support-centre.html Very first question on their list: "Can I get IPv6?" Answer: "I'm so glad you asked, yes all our plans are IPv6 enabled." That statement makes me think they seem pretty supportive. *disclaimer - I am not a customer of Sinch, nor have I ever used their products. I simply had their service pointed out to me recently, and I think I maybe I'll get a test circuit from them sometime next year. Pete

1 0

AKL-IX and domestic vs. international
by Dave Mill 11 Dec '14

11 Dec '14

Hi all (Note, I'm not trying to place blame at any party here. Just interested in people's thoughts on this situation) We, Inspire/AS17705, recently peered at AKL-IX. I was interested in using this peering exchange as much as possible so we have tended to prefer AKL-IX routes over any other peering exchange (though we still prefer bi-lats, private interconnects, etc, over AKL-IX). Simple stuff.. We learnt a lot of routes off AKL-IX. We started sending traffic out via. AKL-IX. Cue customer complaints. In general, we were sending all traffic to AS4826/Vocus out via AKL-IX. I believe if another ISP had Vocus as an international provider the traffic would ingress that ISP via their international pipe. This led to one customer having packet loss over a VPN (I'd assume the far end had congested international) and another customer getting billed for this traffic as international. We ceased learning Vocus routes from the AKL-IX. Problem solved... Except, this doesn't really sound ideal to me. If Vocus are announcing routes to AKL-IX (their choice) I would like to be free to use them. What should we be doing in a situation like this? What should Vocus be doing? Am I just making a mountain out of a molehill here and should I just shut-up and leave my current fix in place? Cheers Dave

6 12

Cloudflare on the APE
by Jamie Baddeley 07 Dec '14

07 Dec '14

With N4L joining the APE the fun keeps coming.. New CDN in town and it's a win for NZ. http://www.scoop.co.nz/stories/BU1412/S00034/ape-brings-the-world-closer-to… At an operational level I'm sure the CloudFlare guys will provide an update soon. regards jamie

19 31

Re: [nznog] Licence NZNOG video recordings
by Richard Naylor 02 Dec '14

02 Dec '14

At 01:48 p.m. 2/12/2014, Nick wrote: >A woefully inadequate search of the archives does not produce an >answer to this, so tempting all fate, I submit a possibly list >relevant query... > >What is the copyright licencing on the r2 recordings of NZNOG? Each >page clearly displays their copyright, which is fair and makes >sense, but there appears to be no distribution licence (eg Creative Commons?) The copyright is held by R2 (2011) Ltd and all rights are reserved. We use that statement whenever a client fails to advise what rights they would like to assert. This is to protect the client's interests despite their ignorance - if that makes sense. We have only 2 clients who (usually) advise what rights to assert and they are usually a form of CC. On the funny side - even Creative Commons NZ don't advise, even after 7 years of waiting, so we hold the rights on their launch in NZ ! http://www.r2.co.nz/20071027/

7 7

Megaport event in Auckland
by Denver Maddux 02 Dec '14

02 Dec '14

Hi all, Just a heads up that Megaport will be hosting a small get together next week in Auckland. Date: Tuesday, 9 December Time: 3:00 - 5:00pm Venue: Gallery 1, Pullman Hotel Auckland Cnr Princes St and Waterloo Quadrant, Auckland City 1010 Our event will highlight: - What is Megaport? - What is MegaDirect? - What is MegaIX? - How does it work? - Who is on it? - How can I connect? - Come and meet the team! Whilst most of you probably understand the Megaport model it would be great for at least me to just meet some of you. And I’m buying drinks just after the session. :) Along with me, Mitchell Warden, Michael Glynn, and Joshua Munro will be leading the session from Megaport. If anyone is interested in attending, shoot me a direct email and I’ll make sure your name is on the list. Thanks, Denver Maddux Megaport

2 2

Fwd: Operators and the IETF - Thank You and Next Steps
by Jamie Baddeley 02 Dec '14

02 Dec '14

of interest to folks? Brian - I saw your name mentioned in dispatches - would be keen to get your perspective as an active Kiwi IETF'er. cheers jamie ---------- Forwarded message ---------- *From: *Chris Grundemann <grundemann(a)isoc.org> *Subject: **Operators and the IETF - Thank You and Next Steps* *Date: *3 December 2014 11:14:58 am NZDT *To: *DL Deploy360 Team <deploy360(a)isoc.org> Hello! Thanks again for completing the Internet Society’s “Operators and the IETF <http://www.internetsociety.org/deploy360/projects/operators-and-the-ietf/>” survey! For those of you who are interested, this message provides some follow up information. I want to make sure that you’re all aware of what we’ve done with the data we collected, what we plan to do next, and how you can get (or stay) involved should you want to. We collected, analyzed, and synthesized all of the responses collected in the first 6 months of 2014. This is currently published in an IETF Internet-Draft <https://tools.ietf.org/html/draft-opsawg-operators-ietfaft-opsawg-operators…> . The results were further condensed into a presentation that was given during the OpsAWG meeting at IETF 91. You can view the video <http://recordings.conf.meetecho.com/Playout/watch.jsp?recording=IETF91_OPSA…> (the Operators and the IETF bit starts at about 01:07:00) and check out the slides <http://www.slideshare.net/Deploy360/operators-ietf-ietf91> if you like. For more information on what all happened in relation to this effort during the most recent IETF meeting, check out this blog post <http://www.internetsociety.org/deploy360/blog/2014/11/operators-and-the-iet…> . As for next steps, we have a couple things in mind. Several of us are going to try to start hosting an “IETF help desk” at the major NOG/NOF meetings around the world. First up to try are NANOG 63, APRICOT 2014, and RIPE 70. This desk will have an IETF banner on it and be manned by volunteers with IETF clue. The idea is to answer folks’ questions on the spot, providing easier access to the IETF process for everyone. The helpdesk and all other future efforts to bring these two communities closer together and help ensure that operational realities inform the development of key technologies will be (at least initially) discussed on a new mailing list: http://snozzages.com/cgi-bin/mailman/listinfo/synergy I highly encourage anyone receiving this message to sign up, if you’d like to be involved in this continuing discussion. Either way, thank you for your participation thus far! Cheers, ~Chris -- Chris Grundemann Director, Deployment & Operationalization Internet Society (ISOC)

2 1

IPv6 troubleshooting for Residential ISP Helpdesks - a document
by Dean Pemberton 02 Dec '14

02 Dec '14

Andy just poked this under my nose. Great looking resource! They are looking for feedback if you've got any. ---------- At IPv6 WG session in London, we discussed the most recent version of the "IPv6 Troubleshooting for Residential ISP Helpdesks" document. The proposed plan of action was to reach the consensus on the technical details of the document and then publish it (as combined IPv6 WG and BCOP TF effort). This email announces the working group last call for the "IPv6 Troubleshooting for Residential ISP Helpdesks" document. Please read the most recent version of it: https://www.ripe.net/ripe/groups/tf/bcop/ipv6-troubleshooting-for-residenti… and provide your comments to the list *until 23:59 Fri Dec 19th 2014*. ---------

1 0

Cooling Pads for Juniper SRX?
by Skeeve Stevens 01 Dec '14

01 Dec '14

Hi all, I have an issue with some Juniper SRX100's overheating. I've seen them get hot before, especially placed on something similar (i.e. another SRX100)... and given warnings of overheating, but never shut down.... but this situation is different. These SRX100's are shutting down as they are reaching a core temperature of 70c as they are located in racks that are outside in the sun and on particularly hot days - around 32c-36c they overheat and turn themselves off. Some might say this is understandable... and I sort of agree. Although their operating system says they are good to 40c, that doesn't really seem to be the case. The SRX110's are a little more tolerant given they are bigger units - but have the same operating environmentals (along with the EX2200-C). But at the moment I have the SRX100's and would prefer not to swap them out as it will cost significantly. Then one of my staff had (what I think) a good idea today... to use cooling pads... maybe like the ones you use for laptops or something. So I am wondering if anyone has been some solid - not $20 junk or such.. but something that runs off mains, and works well 24x7x365 - maybe even something that only kicks in once a certain temperature has been reached. I thought if anywhere, a couple of these mailing lists might have had some experience with these kinds of things - especially for those who have built regional pops and have had to cool some equipment. Thanks all! ...Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.co.nz ; www.eintellegonetworks.co.nz Phone: +612 8014 7398; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/theispguy ; blog: www.theispguy.com The Experts Who The Experts Call Juniper - Cisco - Cloud - Consulting - IPv4 Brokering

1 0

Licence NZNOG video recordings
by Nick 01 Dec '14

01 Dec '14

A woefully inadequate search of the archives does not produce an answer to this, so tempting all fate, I submit a possibly list relevant query... What is the copyright licencing on the r2 recordings of NZNOG? Each page clearly displays their copyright, which is fair and makes sense, but there appears to be no distribution licence (eg Creative Commons?) Cheers, Nick -- Nick 'Zaf' Clifford

1 0

Spots available on NZITF DDoS training next week in Wellington
by Dean Pemberton 30 Nov '14

30 Nov '14

Hi All, Wellington is going to be the centre of all things Security next week, with Kiwicon happening on the 11th and 12th. In advance of that NZITF have Krassi Tzvetanov (currently at A10 Networks previously at Cisco) visiting that week and running some training while he is here on the 10th December. We don't normally open training up to non-NZITF members, but as this is on DDoS Mitigation and some NZNOG'ers are liable to be in town anyway for Kiwicon, I thought I'd pass the info on. This training will cover different types of DoS attacks that are currently popular and will explain in detail how they work and how in some cases the underlying technology is exploited to produce the desired effect by the attacker. More details available here. http://nzitf.org.nz/pdf/141228-DDoS-Mitigation.pdf Regards, Dean

1 0

Re: [nznog] Letter to Network Operators 24 Nov 2014
by Ray Taylor 30 Nov '14

30 Nov '14

Dean that's a brilliant idea They should definitely be *required* to make a presentation in rotorua and have a q&a session. Ray Taylor Taylor Communications ray(a)ruralkiwi.com Ph 021-483-280 Network status 06-929-9082 Description: header_logo

1 0

FW: Letter to Network Operators 24 Nov 2014
by Ray Taylor 29 Nov '14

29 Nov '14

I am assuming this refers to notifications about equipment changes, vendor suppliers etc? It may come as a surprise to these people but most network operators create standards and stick to them! Ray Taylor Taylor Communications <mailto:ray(a)ruralkiwi.com> ray(a)ruralkiwi.com Ph 021-483-280 Network status 06-929-9082 Description: header_logo From: TICSA [mailto:TICSA(a)ncsc.govt.nz] Sent: Monday, 24 November 2014 3:21 p.m. To: TICSA Subject: Letter to Network Operators 24 Nov 2014 Dear Network Operator Please find attached a letter to all network operators. This letter shares our surprise at the low number of notifications received from registered network operators to date. We want to reinforce that we are here to support you in meeting your obligations under the TICSA. We thank those network operators who have actively engaged with us under the TICSA since May. Kind regards >From the TICSA Team _____ This electronic message, together with any attachments, contains information that is provided in confidence and may be subject to legal privilege. Any classification markings must be adhered to. If you are not the intended recipient, you must not peruse, disclose, disseminate, copy or use the message in any way. If you have received this message in error, please notify us immediately by return email and then destroy the original message. The Government Communications Security Bureau (GCSB) accepts no responsibility for changes to this e-mail, or to any attachments, after its transmission from GCSB. Thank you. _____ This email has been filtered by SMX. For more information visit smxemail.com <http://smxemail.com/>

8 8

Re: [nznog] Network for Learning APE Peering
by Peter Lambrechtsen 28 Nov '14

28 Nov '14

Let's not forget that N4L is run by Spark Digital aka Gen-I and is completely separate infrastructure from the Retail broadband stack. For all intensive purposes they are separate companies. > -------- Original message -------- > From: Tony Wicks <tony(a)wicks.co.nz> > Date: 29/11/2014 8:59 AM (GMT+12:00) > To: "'nznog(a)list.waikato.ac.nz'" <NZNOG(a)list.waikato.ac.nz> > Subject: Re: [nznog] Network for Learning APE Peering > > > Yes, and it also goes to highlight that there is no reason whatsoever why the rest could not be peered ! > > > >Subject: Re: [nznog] Network for Learning APE Peering > > > > > > >That'll be a royal truck-load of daytime traffic moving from domestic transit links to peering links! > > > > >I think much kudos should go to the N4L team for bringing some 5000+(*) addresses of Spark's IP space into being openly peered at APE. This is a fantastic move! > > > > >Well done guys :)

1 0

Network for Learning APE Peering
by Clayton Hubbard 28 Nov '14

28 Nov '14

Hi Noggers.. Network for Learning has just completed peering with APE. If you provide services to schools in NZ and have any suboptimal routing, please contact me off-list to investigate. Thanks, *Clayton Hubbard* Senior Engineer, The Network for Learning Ltd D: 09 972 2906 | M: 022 043 0155 | W: http://www.n4l.co.nz A: Suite 306, Geyser Building, 100 Parnell Road, Parnell, Auckland 1052 P: PO Box 37118, Parnell, Auckland 1151 <http://www.n4l.co.nz> <https://twitter.com/@N4LNZ/> <https://www.facebook.com/NetworkForLearning> <https://plus.google.com/104649004276520409744/about> <http://www.linkedin.com/company/the-network-for-learning-ltd-n4l->

3 2

Re: [nznog] FW: Letter to Network Operators 24 Nov 2014
by Revel N 25 Nov '14

25 Nov '14

Completely agree. My interpretation of the guidance is the same (i.e. "continuing to use the exact same systems as were decided on and deployed prior to 11 May would not require a notice and replacing dead hardware with the same thing doesn't require this notice either"). As such, I'd be surprised if there had been a large number of submissions from every operator within 6 months. On 26 November 2014 at 12:00, <nznog-request(a)list.waikato.ac.nz> wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. Re: FW: Letter to Network Operators 24 Nov 2014 > (Alexander Neilson) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 25 Nov 2014 12:12:41 +1300 > From: Alexander Neilson <alexander(a)neilson.net.nz> > To: Dave Mill <dave(a)mill.net.nz> > Cc: "nznog(a)list.waikato.ac.nz" <nznog(a)list.waikato.ac.nz> > Subject: Re: [nznog] FW: Letter to Network Operators 24 Nov 2014 > Message-ID: <3B4DF5F6-1C93-4023-AE3E-D5D483D7CC0A(a)neilson.net.nz> > Content-Type: text/plain; charset="utf-8" > > What I think is missing here is where providers have a standard system > they have used with the same hardware before May 11th. > > These were decisions made beforehand, no change to deployment, or not > covered by an area of specified security interest. > > How many people on this list would have changed the manufacturer / type of > equipment used in the NOC / core network that meets the threshold in 6 > months? > > IANAL > > However from my lay reading of the guidance and exemptions continuing to > use the exact same systems as were decided on and deployed prior to 11 May > would not require a notice and replacing dead hardware with the same thing > doesn?t require this notice either. > > So I am not sure that a low number of notifications is an odd thing unless > people had major changes to their core and a short run time to make these > changes. > > Others may want to chime in with their experiences. > > Regards > Alexander > > Alexander Neilson > Neilson Productions Limited > > alexander(a)neilson.net.nz > 021 329 681 > 022 456 2326 > > > On 25/11/2014, at 11:51 am, Dave Mill <dave(a)mill.net.nz> wrote: > > > > I'm actually surprised that our GCSB overlords haven't done something > like this sooner. To me it seems pretty obvious that not all network > providers are using/following the new guidelines. And much better an email > like this one than a proper slap by the NCSC/GCSB. > > > > To explain my logic without giving too much away. > > > > We are a small ISP. We have submitted proposals under this new law. Lets > call our number of proposals X. > > > > At a technical conference recently the GCSB were able to share with us > their rough total number of proposals. That number was also reasonably > obvious from the proposal numbering system the NCSC use. Lets call this > number Y. > > > > Y wasn't that much bigger than X. I'm talking 5 or 6 times bigger from > memory. > > > > We have spent a lot of time and effort in following this new > legislation. I think its only fair that others do also (lets not debate > whether we needed the legislation here). And with the numbers talked about > so far I think its pretty clear that some organisations out there aren't > following this new legislation. > > > > At the very least (based on Ray's comments) most network operators > should be submitting at least 5 - 10 standard builds each IMHO. > > > > Cheers > > Dave > > > > > > On Mon, Nov 24, 2014 at 8:30 PM, Ray Taylor <ray(a)ruralkiwi.com <mailto: > ray(a)ruralkiwi.com>> wrote: > > I am assuming this refers to notifications about equipment changes, > vendor suppliers etc? > > > > It may come as a surprise to these people but most network operators > create standards and stick to them! > > > > > > > > > > > > > > > > Ray Taylor > > > > Taylor Communications > > > > ray(a)ruralkiwi.com <mailto:ray(a)ruralkiwi.com> > > > > > > Ph 021-483-280 > > > > Network status 06-929-9082 > > > > > > > > <image001.png> > > > > > > > > From: TICSA [mailto:TICSA(a)ncsc.govt.nz <mailto:TICSA(a)ncsc.govt.nz>] > > Sent: Monday, 24 November 2014 3:21 p.m. > > To: TICSA > > Subject: Letter to Network Operators 24 Nov 2014 > > > > > > > > Dear Network Operator > > > > > > > > Please find attached a letter to all network operators. This letter > shares our surprise at the low number of notifications received from > registered network operators to date. We want to reinforce that we are here > to support you in meeting your obligations under the TICSA. > > > > > > > > We thank those network operators who have actively engaged with us under > the TICSA since May. > > > > > > > > > > > > Kind regards > > > > From the TICSA Team > > > > > > > > > > > > This electronic message, together with any attachments, contains > information that is provided in confidence and may be subject to legal > privilege. Any classification markings must be adhered to. If you are not > the intended recipient, you must not peruse, disclose, disseminate, copy or > use the message in any way. If you have received this message in error, > please notify us immediately by return email and then destroy the original > message. > > The Government Communications Security Bureau (GCSB) accepts no > responsibility for changes to this e-mail, or to any attachments, after its > transmission from GCSB. Thank you. > > > > This email has been filtered by SMX. For more information visit > smxemail.com <http://smxemail.com/> > > _______________________________________________ > > NZNOG mailing list > > NZNOG(a)list.waikato.ac.nz <mailto:NZNOG(a)list.waikato.ac.nz> > > http://list.waikato.ac.nz/mailman/listinfo/nznog < > http://list.waikato.ac.nz/mailman/listinfo/nznog> > > > > > > _______________________________________________ > > NZNOG mailing list > > NZNOG(a)list.waikato.ac.nz > > http://list.waikato.ac.nz/mailman/listinfo/nznog > >

1 0

ntp.net.nz Update
by Josh Simpson 24 Nov '14

24 Nov '14

Hi NZNOG, Time for an update with regards to ntp.net.nz servers. On the morning of Saturday Nov 22, ntp3.ntp.net.nz failed with a similar issue to that of ntp2.ntp.net.nz, this happened just a few weeks short of the new ntp2 go live. Due to this event we have pushed the new ntp2 appliance into service as well as reconfiguring another new appliance that was to be ntp4 as a ntp3 replacement. Both of these went live on Nov 22 at 18:06 hours, along with reverting the DNS ntp2 -> ntp3 redirection changes that were made in the July 14th email. As part of this the IP addresses for ntp2 and ntp3 have changed to the following ntp2.ntp.net.nz: 202.46.178.18 ntp3.ntp.net.nz: 202.46.179.18 ntp2 was unavailable via IPv6 prior to the failure, we have plans to resolve this in the near future. ntp3 is now unavailable via IPv6 due to the short time span of the work on Saturday, we hope to have this resolved in the coming weeks. We will update the list when IPv6 is back up and running. If you had previously used the IP addresses in your configs be sure to update them. We do recommend using the DNS names specified at https://ntp.net.nz to avoid this issue in the future. If you need any further information, please contact us at support(a)nzrs.net.nz Cheers Josh -- Josh Simpson Systems Administrator .nz Registry Services M: +64 21 783 399 P: +64 4 555 0124 GPG: 6516 B4EA 413B CAED 57B5 0956 124C 8AC3 A362 8080 www.nzrs.net.nz

2 1

Network Monitoring VPS in exchange for VPS from us in return.
by daniel＠glovine.com.au 23 Nov '14

23 Nov '14

Hi Noggers, I was wondering if a couple of providers whom wouldn't mind swapping a small VPS for a small VPS from us, in order for us to run a couple of external network monitoring tools from, Looking for providers whom are on MegaPort Sydney IX Looking for providers whom are on NSW IX Looking for providers whom are not on Vocus transit These requirements above are not all necessary to meet, a mix would be handy and dandy :D, Would even consider providers in QLD, Perth, Melbourne Pritty much Australia wide even NZ is a consideration If you wouldn't mind and you are interested please shoot me an off-list reply for further details and discussions TIA Daniel

1 0

FW: FW: Letter to Network Operators 24 Nov 2014
by Ray Taylor 23 Nov '14

23 Nov '14

Unclassified Have forwarded to you Ray Taylor Taylor Communications <mailto:ray(a)ruralkiwi.com> ray(a)ruralkiwi.com Ph 021-483-280 Network status 06-929-9082 Description: header_logo From: Rob McDonald [mailto:r(a)l2.co.nz] Sent: Monday, 24 November 2014 8:38 p.m. To: Ray Taylor Subject: Re: [nznog] FW: Letter to Network Operators 24 Nov 2014 Hey Ray, Is the text of the actual letter under any confidentiality? If not would you forward it to me? Im quite interested. Could be a gem considering the terse nature of the email. Cheers R On 24/11/2014 8:31 PM, "Ray Taylor" <ray(a)ruralkiwi.com> wrote: I am assuming this refers to notifications about equipment changes, vendor suppliers etc? It may come as a surprise to these people but most network operators create standards and stick to them! Ray Taylor Taylor Communications ray(a)ruralkiwi.com Ph 021-483-280 Network status 06-929-9082 Description: header_logo From: TICSA [mailto:TICSA(a)ncsc.govt.nz] Sent: Monday, 24 November 2014 3:21 p.m. To: TICSA Subject: Letter to Network Operators 24 Nov 2014 Dear Network Operator Please find attached a letter to all network operators. This letter shares our surprise at the low number of notifications received from registered network operators to date. We want to reinforce that we are here to support you in meeting your obligations under the TICSA. We thank those network operators who have actively engaged with us under the TICSA since May. Kind regards >From the TICSA Team _____ This electronic message, together with any attachments, contains information that is provided in confidence and may be subject to legal privilege. Any classification markings must be adhered to. If you are not the intended recipient, you must not peruse, disclose, disseminate, copy or use the message in any way. If you have received this message in error, please notify us immediately by return email and then destroy the original message. The Government Communications Security Bureau (GCSB) accepts no responsibility for changes to this e-mail, or to any attachments, after its transmission from GCSB. Thank you. _____ This email has been filtered by SMX. For more information visit smxemail.com <http://smxemail.com/> _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Generating a default route
by Dylan Hall 20 Nov '14

20 Nov '14

Hi all, I'm curious what other people are doing to generate a default route. The config I'm familiar with lists a set of networks, and if any of them are present then the default route is created. Is that how everyone does it? How are people choosing the set of networks? Do you just use Google and Facebook, after all, if they're present that's pretty much the whole internet? Do you use networks that your transit supplier originates? How many networks do you rely on? If I've lost 50% of my full route table in a fault, am I better off not generating default and letting my multi-homed customers use their backup supplier? Comments welcome on and off list :) Thanks, Dylan

1 0

Outdoor Plant Cabinet
by Alexander Neilson 20 Nov '14

20 Nov '14

Hey All We have been caught a little short on availability of our normal outside plant cabinet and I thought I might pop a call out to the list to see if anyone had advice or a spare lying around We are looking for a cabinet with front and back doors, 13RU internal 19” usable rack space (or an 18/19 RU one door rack) We need 600mm depth for the design. Does anyone have a cabinet sitting spare meeting these requirements or a company they have worked with for external cabinets who may have one in their showroom that could be mobilised or has space on a production line. We are looking for availability in 2-3 weeks so quite a tight timeframe. I can offer beer as a finders fee for successful outcome (plus we can buy a cabinet if someone has it spare at their place) *note not asking for loaner cabinets as the plan is to set in a concrete pad where the mounting pole is* Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

1 0

Netflix launch in NZ (and Australia) March 2015
by Jesse Archer 18 Nov '14

18 Nov '14

https://pr.netflix.com/WebClient/getNewsSummary.do?newsId=1751 Will be interesting to see if they turn up on Megaport IX Auckland, Auckland IX or APE. *Jesse Archer* *General Manager*Full Flavour *p. *07 929 7111 *ddi*. 07 281 1391 *s*. Skype username "myfullflavour" *e*. jesse(a)fullflavour.co.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.co.nz <http://t.sigopn02.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJW7t5XZs2zqjsKN…> *a. *Tauranga Business Centre, 50 Devonport Road, Tauranga *a*. PO Box 16306, Bethlehem 3176, New Zealand

6 6

Re: [nznog] Netflix launch in NZ (and Australia) March 2015
by Jesse Archer 18 Nov '14

18 Nov '14

Netflix will supply the appliances. http://oc.nflxvideo.net/docs/OpenConnect-Deployment-Guide.pdf Expect to have 1-2Gbps between Sydney & NZ tied up each night for 10 hours filling the caches with content. *Jesse Archer* *General Manager*Full Flavour *p. *07 929 7111 *ddi*. 07 281 1391 *s*. Skype username "myfullflavour" *e*. jesse(a)fullflavour.co.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.co.nz <http://t.sigopn02.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJW7t5XZs2zqjsKN…> *a. *Tauranga Business Centre, 50 Devonport Road, Tauranga *a*. PO Box 16306, Bethlehem 3176, New Zealand On Wed, Nov 19, 2014 at 2:47 PM, Simon Allard <Simon.Allard(a)callplus.co.nz> wrote: > Netflix does have its own CDN which they deploy in ISP networks. Looks > like the ISP supplies the hardware and they supply the software. > > > > https://openconnect.itp.netflix.com/ > > > > In the past they have never let anyone outside of the regions they service > use these. So will be interesting to see what they expect of NZ/AU ISP’s > now. > > > > Do we need to deploy CDN nodes? or will they come in with their own CDN > and peer? How will they handle non-peering ISP’s? > > > > March isn’t that far away with a big nice brownout/blackout period in the > middle. > > > > > > > > *From:* nznog-bounces(a)list.waikato.ac.nz [mailto: > nznog-bounces(a)list.waikato.ac.nz] *On Behalf Of *Jesse Archer > *Sent:* Wednesday, 19 November 2014 11:56 a.m. > *To:* nznog(a)list.waikato.ac.nz > *Subject:* [nznog] Netflix launch in NZ (and Australia) March 2015 > > > > https://pr.netflix.com/WebClient/getNewsSummary.do?newsId=1751 > > Will be interesting to see if they turn up on Megaport IX Auckland, > Auckland IX or APE. > > > > > > > *Jesse Archer * > *General Manager *Full Flavour > > *p. *07 929 7111 *ddi*. 07 281 1391 > *s*. Skype username "myfullflavour" > *e*. jesse(a)fullflavour.co.nz <jesse(a)fullflavourmedia.co.nz> > *w*. fullflavour.co.nz > <http://t.sigopn02.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJW7t5XZs2zqjsKN…> > *a. *Tauranga Business Centre, 50 Devonport Road, Tauranga > *a*. PO Box 16306, Bethlehem 3176, New Zealand > > > > Simon Allard // > Senior Network Architect > > *D:* 09 550 2790* M:* 020 100 0790* F:* > > > > www.callplus.co.nz | www.slingshot.co.nz | www.flip.co.nz | > www.orcon.net.nz > > > This message and any attachments contain privileged and confidential > information. If you > are not the intended recipient of this message, you are hereby notified > that any use, > dissemination, distribution or reproduction of this message is prohibited. > If you have received this message in error please notify the sender > immediately via email > and then destroy this message and any attachments. > >

1 0

New IXs in NZ - discussion
by Bevan Slattery 17 Nov '14

17 Nov '14

Hi Joe, [snip] IX Australia are the only independent Internet Exchange operator in Australasia, with 16 years experience running exchanges throughout the region. Unlike all other Internet Exchanges in the region, we are not for profit, and seek to serve our members, not our shareholders. We're already very far down the path of bringing some very interesting content providers and large NSPs online. [/snip] Interesting to see IX-Australia following Megaport lead again and it¹s great to see competition. However, a few points regarding your statement above: 1. It is a misrepresentation to say that WAIA/IX-Australia is the only independent provider of IX Services in Australasia 2. Its generally known that IX-Australia provides services to organisations that aren¹t members of WAIA/IX-Australia. which apart from a contravention of its constitution means the statement above isn¹t quite factually correct. Can you confirm WAIA only provide services to registered members under its constitution? I can think of a handful that aren¹t. 3. The constitution of WAIA only provides for WAIA/IX Australia to service Australia, so I¹m not sure whether the announcement is simply a reaction to Megaports announcement, not approved by members/amended in the constitution or part of a plan to expand (not foreshadowed at the recent AGM which would have been the time to amend the constitution?) 4. WAIA is Incorporated in WA which actually only really provides for the delivery of services in Western Australia (there is a pathway to delivering nationally through Incorporation under ASIC), but certainly is not able to provide services outside of Australia. Operation outside of Australia may lead to issues regarding WAIA¹s incorporated status. Despite some persistent rumours that IX-Australia is perhaps being taken advantage of by a particular commercial carrier to hinder Megaports success, I would like to think otherwise, but this reaction to step outside the legal operational jurisdiction makes me think there is merit to same. So ultimately, from a Network Operations perspective it would be helpful to understand whether WAIA as an Incorporated Association in Western Australia is legally able to operate outside of Australia in the first instance though (even if the Constitution allowed it which I don¹t think it does). Your clarification to the list would be helpful. Cheers [b] WAIA 2013 Constitution https://www.waia.asn.au/node/83

3 4

Megaport Auckland
by Denver Maddux 17 Nov '14

17 Nov '14

Hi NZNOGers, First off, I’m new to the NZNOG list, but far from new to NOGs in general. I’ve recently stepped into the CEO role at Megaport and expect to be more actively engaging the community regionally as we expand the business into New Zealand, but I’ve been a long-time active member of NANOG, GPF, EPF, and APF groups. I’ve been trying to catch-up on the NZNOG list via the archives over the past couple of weeks to get some context for the community and I’m really happy to see how active the list has been as of late. Second, I wanted to just drop a note that Megaport is now live in 220 Queen St. As many of you have seen, we are partnered with Vibe in NZ, but users can also sign up directly with Megaport now in The Data Centre. This is for the full index of Megaport services, including IX, as has been heavily discussed on this list recently. We will also be expanding into Datacom Orbit Dr in the next month or so. http://www.megaport.com Feel free to email me direct if you have questions, or flames. :) Denver Maddux CEO Megaport denver.maddux(a)megaport.com<mailto:denver.maddux(a)megaport.com>

2 1

Reminder of NZNOG list AUP
by Simon Lyall 12 Nov '14

12 Nov '14

Just a reminder to everyone that the list AUP includes: 6. Blatant product or service marketing is unacceptable. so please try not to overdo it. The full AUP is here: http://www.nznog.org/mailing-list Simon. NZNOG list co-moderator. -- Simon Lyall | Very Busy | Web: http://www.simonlyall.com/ "To stay awake all night adds a day to your life" - Stilgar

12 13

New IXs in NZ - discussion
by Tim Hoffman 12 Nov '14

12 Nov '14

All, We’ve had some interesting announcements of Megaport and IX Australia building internet exchanges into NZ over the last week or so. I’ve been a bit surprised at how little chatter there has been around this on the list. I thought I’d put some thoughts down (as someone who has worked for a bunch of networks in NZ and is now overseas working for big content) with hope of kicking off a discussion. At a 10,000 foot view, New Zealand has had a reasonably successful operation of IXs over the last 10-15 years. All of y’all except for the two big operators openly peer. This is awesome! However, as has been discussed in other posts recently; 1/ More and more of the internet is becoming about connectivity from CDNs to users. 2/ More and more CDNs are coming to New Zealand and Australia 3/ Trans-tasman capacity isn’t hugely expensive Addressing points (1) and (2), as content comes into New Zealand, we have to remember that on a global scale, New Zealand is absolutely tiny. It’s a hard business case to get a POP there as a content provider. Content providers that do come are likely just going to put in a single location - Auckland. So while WIX may make sense for ISPs in NZ peering with each other, for the bulk of the *interesting* content on the internet that you can get through peering, you’re going to have to get it in Auckland. Networks have outages, planned works, etc. So assuming that most of NZ’s interesting content is in Auckland (with a bit more over the Tasman, which isn’t too expensive to get to these days), it makes sense to have multiple (redundantly built and managed) ways of getting at this content. It’s interesting looking at the differences between the 3 IXs we’re about to have. Citylink, who have the critical mass of all the peers, are in the most locations, and are the most expensive. They’ve also got a product set around metro ethernet, dark fibre, and have a CDN running. And they’re doing some interesting things around a “SDN driven IX”. Megaport, who have placed huge focus on their “Virtual Cross Connect” product and being able to configure this on the fly, but also have run a pretty successful IX. IX Australia, who are very IX focused, and have gone to great pains to ensure that that’s their only product, making them the most “independent”. IX Australia also have public graphs of traffic levels through their IX (i.e. for NSW-iX http://monitor.nsw.ix.asn.au/cacti/graph_image.php?action=view&local_graph_… <http://monitor.nsw.ix.asn.au/cacti/graph_image.php?action=view&local_graph_…>) - which is commendable (it would be nice to see Megaport and Citylink follow suit on this one) I suspect you’re going to find that most of the content will try to get to all 3. It’s my hope that most of the bigger ISPs try to get to all three, then the smaller ones can go to a couple, get most NZ routes reliantly over peering, and then transit the rest if it has to happen. It would be disappointing if we didn’t see the top 5-6 IXs + all the content providers on all of them. Also it’ll be important to ensure that the result isn’t just that we have 3 split IX communities, all with different content/users on them without crossover, as this would cause a huge barrier to entry to smaller players if they have to connect to all 3. For the community, having this competition is going to be a win. It won’t kill APE, which has huge critical mass, and has done a great job in it’s long history, but will ensure that all 3 IXs keep each other honest. What will be interesting to see is who turns up at which IX and how they all grow together. What’s everyone else’s thoughts? It would be interesting particularly if there is anyone from Citylink, or any of the big ISPs, who could comment on their take on these developments in the market and where they will be peering? Cheers, Hoff

16 19

Non Commercial request for Hardware (learning kit)
by Alexander Neilson 11 Nov '14

11 Nov '14

Hey All Sorry if this is rude of me to ask and I apologise if so. Does anyone have old routers / switches / firewalls / spare parts or modules for same lying around that are still function (or slightly broken) that they are looking at flicking on or long term loaning? I am looking for any gear that would help me get greater exposure to other hardware / configurations and that can be used in my home lab. I currently have a single Cisco 2821 that was pulled from production, and a Cisco Catalyse 2900XL plus on long term loan I have two Juniper J2320’s. The 2821 has a very loud dying fan that I would like to replace (flatmates aren’t so understanding about my learning noises) and I would like to get some more experience with Cisco and other manufacturers. I do also have a copy of GNS3 that I will be trying to use more but I have always preferred to grab actual physical hardware and wire it up and play around with configs etc. I am wellington based so hardware locally would be a bonus but if its something exciting to learn I would probably try save up shipping. Also I don’t have massive space so while some hardware would be awesome to experience I will likely decline for space reasons. Thank you all in advance. Apologies for any noise on the list. Off list replies are probably best. Please note for future people seeing this in the archive, if you want to take a look / have a play any of the hardware I receive would be available for learning loan to others. Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

2 1

Load balance appliances
by Jodi Thomson 11 Nov '14

11 Nov '14

Hi All Just wondering what people are using these days for dedicated load balance appliances. Last ones I had anything to do with were the Alteon Ace Directors going back 7-8 yrs so am a little out of touch with whats in use today. Cheers Jodi -- Jodi Thomson Systems & Networks Big Noise Group Ltd 501 Heretaunga Street West, Hastings 4122 Cell (021) 903712 Ph: (06) 876 9661 Fax: (06) 876 9668 Skype: jodit1 Web : http://www.bignoisegroup.com

6 8

Filming a server room
by Ross Ozarka 11 Nov '14

11 Nov '14

Hello members of NZNOG, My name is Ross Ozarka. I'm a filmmaker who is making a documentary about wire. I'm collecting shots of wires put to different uses, and I'd love to show off the wiring of a server room. The shoot will take about ten minutes, and whoever lets me film their server room will receive an Associate Producer credit. Takers, please get in touch with me at ross.ozarka(a)gmail.com so we can set up a day that works best for you. Warm Regards, Ross Ozarka

1 0

UFB 1 gig plans for retail and impact they have
by Barry Murphy 08 Nov '14

08 Nov '14

Hey guys, I just wondered what people thought of the implications around 1gbps residential / business plans now becoming more and more common. I¹m seeing requests from wholesalers and retail asking about this gigatown thing and how they can get a 1Gbps service, especially unlimited. While I know 1gbps is not too common yet, the 200mbps plan is becoming more and more common and it won¹t be long before there is pressure to do 1gbps I know the unlimited part is easy to justify to the client around Œinternational & domestic¹ transit pricing, but some ask why can we not do user to user or peering traffic at 1gbps. I¹m not sure if it¹s still true, but I recall from the Chorus documentation that you could LAG a maximum of 8x10g circuits in a handover region and that was the max, so theoretically 80gbps handover. For the sake of ease and because 10Gbps holes are not cheap in high end routers like ALU 7750 SR-7¹s which we run, we will consider the average provider has a single 10g or maybe 2 per region right now. If you had say 10 or 20 users on the 1Gbps plan or even 100-200 users on the 200mbps plan and they had misconfigured routers (consider they could do 200mbps upload) opening them up to the likes of DNS amplifications etc. Now those users are maxing out the upload capacity of the handover, you have no ability to QoS the malicious users as the QoS would need to come before hitting the handover, I.e. On the CPE. Suddenly everyone on the handover is impacted from a handful of users that wanted the faster speed just because it was available and affordable. The only way to stop the attack affecting everyone would be to isolate and disconnect the end users causing the damage, be it IPOE or PPPoE, if the user was on a direct /30 IP then things are even harder to manage. The DNS amplifications that hurt Spark for a whole weekend, I can only assume was caused by such a large amount of affected devices filling up the handovers and also because it was targeted at their DNS. Imagine an attack of that magnitude, 10s of thousands of end users on 200 or even 100mbps circuits filling up a 10gig or even at this point a 80gbps handover LAG. When you talk about regional handovers up and down the country then the problem gets worse as you then obviously need to backhaul that capacity to Auckland before getting out to the internet, so this also has to be considered too. Any thoughts on the matter. Many thanks Kind regards, Barry Murphy / Chief Operating Officer +64 27 490 9712 / barry(a)vibecommunications.co.nz <http://www.vibecommunications.co.nz/> <https://www.facebook.com/VibeCom> <https://twitter.com/vibecomnz> <https://www.linkedin.com/company/1941512> Office: +64 9 222 0000 / Fax: 0800 842 326 Unit A7, 1 Beresford Square, Auckland, New Zealand Web: www.vibecommunications.co.nz <http://www.vibecommunications.co.nz/> / Peering: AS45177 <http://www.peeringdb.com/view.php?asn=45177> This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002.

19 36

Network Operators Around the World Demonstrate Their Commitment to a Secure and Resilient Internet
by Dean Pemberton 06 Nov '14

06 Nov '14

This Interesting release via ISOC kinda fits in with the recent conversation around how to protect the Internet from edge originating ause. Any comment from New Zealand Network Operators (thats all of you!) as to whether you see a benefit in this initiative? Anyone want to publically add their name to the list of operators who "have taken one or several of the expected actions defined by the MANRS framework." Interested in peoples thoughts on this. ---------- Mutually Agreed Norms for Routing Security (MANRS) recommendations provide a coordinated approach to improve global routing system [Washington, D.C., USA and Geneva, Switzerland] - 6 November 2014 - Leading network operators around the world today announced that they have implemented a package of recommended measures that help improve the security and resilience of the global Internet. Working together, network operators have developed a tightly defined set of concrete actions to improve the global Internet routing system. The recommendations, called Mutually Agreed Norms for Routing Security (MANRS), recognize the interdependent nature of the global routing system and integrate best current practices related to routing security and resilience. More network operators from across the globe are encouraged to sign onto the movement and participate by visiting the website at www.manrs.org <http://www.manrs.org> and completing the signup form. Organized by the Internet Society, and building on the demonstrated success of coordinated industry activities such as World IPv6 Day and World IPv6 Launch, MANRS represents a significant step forward towards building a more resilient and secure Internet infrastructure. "The security of the Internet as a network of networks often relies on specific collaborative action. This initiative increases the security of the Internet by improving resiliency and stability of the underlying routing infrastructure," commented Olaf Kolkman, the Internet Society's Chief Internet Technology Officer. "Participating network operators committed to the MANRS initiative are taking actions that address problems with incorrect routing information and spoofed traffic, demonstrating their collective responsibility to a healthy and secure Internet ecosystem. We encourage and look forward to other network operators around the world publicly taking these steps." Participating network operators have taken one or several of the expected actions defined by the MANRS framework. These include preventing propagation of incorrect routing information, preventing traffic with spoofed IP addresses, and facilitating global operational communication and coordination between network operators. Committed network operators are: ● CERNET ● Claranet ● Comcast ● KPN ● Level 3 ● NTT ● RUNNet ● SpaceNet ● SURFnet Several of the participating network operators commented on their actions and today's announcement: "Adherence to MANRS is an important commitment that operators make back to the Internet community. Together we aim to remove the havens from which miscreants maintain the freedom and anonymity to attack our network and our customers." - David Freedman, Claranet Group "Comcast is committed to helping drive improvements to the reliability of the Internet ecosystem. We are thrilled to be engaged with other infrastructure participants across the spectrum and around the globe in pursuit of these goals." - Jason Livingood, Vice President, Internet Services, Comcast "Good network routing practice is the fundamental requirement for trust between providers, and ultimately creates a safer and stronger Internet for customers. KPN is committed to providing secure and trustworthy communications, and by joining partners in MANRS, we continue to improve security and resiliency for all." - Jaya Baloo, Chief Information Security Officer, KPN "As one of the most connected Internet providers in the world, security of the Internet is top-of-mind at Level 3 Communications. We are dedicated to supporting and protecting the Internet ecosystem and work each day to safeguard customers' critical communications. The Internet is a shared responsibility, and only through these important collaborative efforts can we continue to ensure the protection of this collective infrastructure." - Dale Drew, Senior Vice President, Chief Security Officer at Level 3 Communications "SURFnet is a big supporter of these initiatives to make the Internet more secure. Committing to the actions as outlined in the MANRS document will make routing on the Internet safer. This impacts every day usage of the Internet and helps with a free, open, and more secure Internet for all users." - Erik Huizer, CTO, SURFnet For more information about MANRS and the Routing Resilience Manifesto visit: http://www.manrs.org <http://www.manrs.org>

3 2

AKL-IX Launching Soon
by Joe Wooller 06 Nov '14

06 Nov '14

Hey All, It looks like NZ is the place to be! I am proud to announce that we have launched a new Internet Exchange in Auckland NZ, AKL-IX! We have just put a place holder page up with some information at http://www.akl-ix.nz <http://www.akl-ix.nz/> IX Australia are the only independent Internet Exchange operator in Australasia, with 16 years experience running exchanges throughout the region. Unlike all other Internet Exchanges in the region, we are not for profit, and seek to serve our members, not our shareholders. We're already very far down the path of bringing some very interesting content providers and large NSPs online. We seek further participants who wish to take part during our start-up phase of operation. During the start-up phase no charges will apply to participants. We are in the process of connecting a number of peers currently. Peers will need to be present at 220 Queen St as this is our first live site. Interested parties can contact peering(a)akl-ix.nz to learn how to take part. For a list of participants will be available on the above website and on PeeringDB (http://bit.ly/1vRAvgZ <http://bit.ly/1vRAvgZ>) If you have any questions please feel free to contact me. Regards Joe

2 2

Who's looking at peering on the new Intellipath / Megaport IX service?
by Jesse Archer 06 Nov '14

06 Nov '14

I see www.Intellipath.co.nz just launched. Anyone else looking at coming on-board? http://www.reseller.co.nz/article/558524/megaport-partners-vibe-break-down-… We've ordered a port at MDR and will VxC to a couple of other networks we do a lot of traffic to. The Megaport IX service in Auckland looks like a credible alternative to Citylink's APE - depends on who comes on-board. I'd be happy if Callplus & Mediaworks on-boarded. *Jesse Archer* *General Manager*Full Flavour *p. *07 929 7111 *ddi*. 07 281 1391 *s*. Skype username "myfullflavour" *e*. jesse(a)fullflavour.co.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.co.nz <http://t.signauxsept.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJW7t5XZs2zqj…> *a. *Tauranga Business Centre, 50 Devonport Road, Tauranga *a*. PO Box 16306, Bethlehem 3176, New Zealand

4 3

Chorus UBA price changes for 1st December 2014
by Barry Murphy 05 Nov '14

05 Nov '14

Hey guys, What are other telcos opinions on the proposed chorus price changes that are to take effect on 1st December 2014? Reduction of naked services and increased of clothed services on UBA, yet none of the pricing is 'confirmed' and nor is the POTS reduction pricing. How can the commerce commission or Telecommunications minister allow for something so big to happen so close to a brown out date and with such short notice. It's now the 6th of November and with the proposed changes happening in about 24 days surely it's against their T&C's to give such short notice. We have been provided with 'draft' but that is just not good enough to give to downstream customers and wholesalers, questions we ask go unanswered meaning we can't advise customers of pricing before its out of draft. We had a meeting booked in with Chorus 'Billing resource' to explain the changes, yet this has just been cancelled because things are not yet confirmed internally. My account manager just called me while I was typing this email and said "they still haven't confirmed things internally as they don't know how they are to implement things into their systems". He also advises we are the first customer in the queue to have a billing resource meting to discuss the changes. I then proceeded to ask about the pricing of ADSL install +-$270 vs VDSL install +-$170 and he is even unsure. Just wondering how well or badly other Telcos in the same position are taking this. Cheers Kind regards, Barry Murphy / Chief Operating Officer +64 27 490 9712 / barry(a)vibecommunications.co.nz<mailto:barry(a)vibecommunications.co.nz> [3sparks llc]<http://www.vibecommunications.co.nz/> [Vibe Communications] <https://www.facebook.com/VibeCom> [Vibe Communications] <https://twitter.com/vibecomnz> [Vibe Communications] <https://www.linkedin.com/company/1941512> Office: +64 9 222 0000 / Fax: 0800 842 326 Unit A7, 1 Beresford Square, Auckland, New Zealand Web: www.vibecommunications.co.nz<http://www.vibecommunications.co.nz/> / Peering: AS45177<http://www.peeringdb.com/view.php?asn=45177> This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002.

3 3

Re: [nznog] UFB 1 gig plans for retail and impact they have
by Mark Foster 04 Nov '14

04 Nov '14

Blocking outbound port 25 blocks the vast majority of non authenticated smtp. The remainder being authenticated (or channelled via the same service provider, who can trace you by your IP, dynamic or not), provides some accountability and makes spam much easier to trace... acknowledging that much spam comes from compromised machines on residential grade connectivity (on port 25). Blocking port 25 outbound (with an opt out option) makes sense if you can't quickly deal with offenders on your network (as often seems to be the case with big players). This doesnt the provide those players with an excuse to under-resource abuse@ (as the remaining spam is finding another way out) but this does seem to happen regardless... so its not even close to a silver bullet but it does helo more than hinder. Mark. Sent from a mobile device. -------- Original message -------- From: Steve Holdoway <steve(a)greengecko.co.nz> Date:05/11/2014 14:56 (GMT+12:00) To: Peter Lambrechtsen <Peter.Lambrechtsen(a)spark.co.nz> Cc: nznog <nznog(a)list.waikato.ac.nz> Subject: Re: [nznog] UFB 1 gig plans for retail and impact they have On Wed, 2014-11-05 at 14:14 +1300, Peter Lambrechtsen wrote: > Have to say that blocking inbound port 25 and 53 is highly recommended > for all RSPs. Plus blocking outbound port 25 to only SMTP servers you > run if you wanted a sense of if customers are using their connections > for mass spamming. With an opt out of course. Given that mail servers also listen on 587 ( thanks billg ) and 465, isn't blocking just 25/tcp just a bit pointless? Steve -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

3 2

Re: [nznog] An 'end to end' Internet (was Re: UFB 1 gig plans for retail and impact they have)
by Scott Weeks 03 Nov '14

03 Nov '14

--- mcdonald.richards(a)gmail.com wrote: From: McDonald Richards <mcdonald.richards(a)gmail.com> I should point out that I mean it purely as an "any service to any service from any host to any host" type of scenario :) Maybe I should have phrased it as the days of unfiltered and unfettered provision of default residential services is coming to an end. ------------------------------------------ I hope not. That'd be the beginning of the slow death of the internet innovation we have seen over the past couple of decades. We will be the new dinosaur. Maybe the homenet WG in IETF will come up with something. <crossing fingers> scott > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Re: [nznog] UFB 1 gig plans for retail and impact they have
by Scott Weeks 03 Nov '14

03 Nov '14

--- ben(a)meh.net.nz wrote: From: Ben <ben(a)meh.net.nz> My biggest concern ATM over DDOS, is when IPV6 starts becoming widely used - a lot of people use NAT as a firewall, and when they implement IPV6 don't protect their hosts properly. --------------------------------------------- Homenet in the IETF is attempting to address that among other things in the home networks: https://datatracker.ietf.org/wg/homenet/charter <quote> End-to-end communication is both an opportunity and a concern as it enables new applications but also exposes nodes in the internal networks to receipt of unwanted traffic from the Internet. Firewalls that restrict incoming connections may be used to prevent exposure, however, this reduces the efficacy of end-to-end connectivity that IPv6 has the potential to restore. Home networks need to provide the tools to handle these situations in a manner accessible to all users of home networks. Manual configuration is rarely, if at all, possible, as the necessary skills and in some cases even suitable management interfaces are missing. The purpose of this working group is to focus on this evolution, in particular as it addresses the introduction of IPv6, by developing an architecture addressing this full scope of requirements: o prefix configuration for routers o managing routing o name resolution o service discovery o network security </quote> scott _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

2 1

Re: [nznog] CloudFlare Peering Blog
by McDonald Richards 02 Nov '14

02 Nov '14

Mobile in Australia is an oligarchy. Since the collapse of ISPone there seems to be an active effort being put in by the 3 mobile carriers (Telstra, Optus, VHA) to protect their margins and make it as difficult as possible for MVNOs to start up. Prepaid plans should not be that expensive - I have had worse experiences in Germany. Your home Internet is a different story. The caps exist to support the limited resource. Unlimited has been tried and is always abused. The wholesale access charges within Australia require ISP's set limits or it's the same as everyone leaving their taps running and lights on. Cloudflare's experience with Australian bandwidth pricing will be related to the costs charged by the tier 1 carriers (Optus, Telstra and AAPT [note: AAPT may have started peering; I am a little out of the game there now]). They will be seeking direct access to eyeballs and being charged for the privilege, much the same as the issues Netflix is facing with eyeball carriers in the USA. On the cost front, the underlying delivery cost for some of these networks is higher, as they try to keep consistent pricing across all regions of Australia. People in small towns pay the same prices as people in the largest cities. The country is big and the population density is low. Contrast that to Europe, and carriers there have a much easier time making money. Despite all of this, negotiating peering (paid or otherwise) in Europe with their incumbent carriers is just as difficult and costly as in Australia :) - unless you are Cloudflare-size and have hit that critical mass of outbound content that makes you attractive to these incumbents. Macca On Mon, Nov 3, 2014 at 8:04 PM, Petri Ojala <petri.ojala(a)gmail.com> wrote: > > We spend our winter in Sydney. While not directly related to the carrier > bandwidth costs, my mobile charges will triple and broadband internet cost > will be seven fold. > > In addition to the increased costs the services will be slower and I’m > getting data caps, which I don’t have in Europe. The offerings are > crippled by mandatory landlines, 24-month contracts and various other > requirements and fees. While one can get Telstra Cable without a minimum > contract, it comes with a mandatory landline that has penalties if > terminated too early. I won’t even go into details about the customer > experience getting the broadband.. > > I think it tells a story if CloudFare pays the same amount for Australia > as they do for all of Europe. I was actually thinking about buying Telstra > stock simply because it’s de-facto monopoly in the country and not much > light at the other end of the tunnel. > > Petri > > On 3 November 2014 at 10:14:21, McDonald Richards ( > mcdonald.richards(a)gmail.com) wrote: > > Keep in mind that this refers to "Benchmark pricing" with $10 being the > benchmark for the USA. > > Do your own math and draw conclusions from that extrapolation :) > > Macca > > On Mon, Nov 3, 2014 at 7:47 AM, Dean Pemberton <nznog(a)deanpemberton.com> > wrote: > >> Interesting article from CloudFlare... >> >> >> http://blog.cloudflare.com/the-relative-cost-of-bandwidth-around-the-world/ >> >> While NZ isn't mentioned I'm picking we get lumped in with Australia >> for which they have this to say... >> >> "Australia >> >> Australia is the most expensive region in which we operate, but for an >> interesting reason. We peer with virtually every ISP in the region >> except one: Telstra. Telstra, which controls approximately 50% of the >> market, and was traditionally the monopoly telecom provider, charges >> some of the highest transit pricing in the world — 20x the benchmark >> ($200/Mbps). Given that we are able to peer approximately half of our >> traffic, the effective bandwidth benchmark price is $100/Mbps. >> >> To give you some sense of how out-of-whack Australia is, at CloudFlare >> we pay about as much every month for bandwidth to serve all of Europe >> as we do to for Australia. That’s in spite of the fact that >> approximately 33x the number of people live in Europe (750 million) >> versus Australia (22 million). >> >> If Australians wonder why Internet and many other services are more >> expensive in their country than anywhere else in the world they need >> only look to Telstra. What's interesting is that Telstra maintains >> their high pricing even if only delivering traffic inside the country. >> Given that Australia is one large land mass with relatively >> concentrated population centers, it's difficult to justify the pricing >> based on anything other than Telstra's market power. In regions like >> North America where there is increasing consolidation of networks, >> Australia's experience with Telstra provides a cautionary tale." >> _______________________________________________ >> NZNOG mailing list >> NZNOG(a)list.waikato.ac.nz >> http://list.waikato.ac.nz/mailman/listinfo/nznog >> > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > >

2 2

CloudFlare Peering Blog
by Dean Pemberton 02 Nov '14

02 Nov '14

Interesting article from CloudFlare... http://blog.cloudflare.com/the-relative-cost-of-bandwidth-around-the-world/ While NZ isn't mentioned I'm picking we get lumped in with Australia for which they have this to say... "Australia Australia is the most expensive region in which we operate, but for an interesting reason. We peer with virtually every ISP in the region except one: Telstra. Telstra, which controls approximately 50% of the market, and was traditionally the monopoly telecom provider, charges some of the highest transit pricing in the world — 20x the benchmark ($200/Mbps). Given that we are able to peer approximately half of our traffic, the effective bandwidth benchmark price is $100/Mbps. To give you some sense of how out-of-whack Australia is, at CloudFlare we pay about as much every month for bandwidth to serve all of Europe as we do to for Australia. That’s in spite of the fact that approximately 33x the number of people live in Europe (750 million) versus Australia (22 million). If Australians wonder why Internet and many other services are more expensive in their country than anywhere else in the world they need only look to Telstra. What's interesting is that Telstra maintains their high pricing even if only delivering traffic inside the country. Given that Australia is one large land mass with relatively concentrated population centers, it's difficult to justify the pricing based on anything other than Telstra's market power. In regions like North America where there is increasing consolidation of networks, Australia's experience with Telstra provides a cautionary tale."

3 2

Call for Papers - APRICOT 2015
by Dean Pemberton 02 Nov '14

02 Nov '14

Asia Pacific Regional Internet Conference on Operational Technologies (APRICOT) 24th February - 6th March 2015, Fukuoka, Japan https://2015.apricot.net CALL FOR PAPERS =============== The APRICOT 2015 Programme Committee is now seeking contributions for Presentations and Tutorials for APRICOT 2015. We are looking for presenters who would: - Offer a technical tutorial on an appropriate topic; - Participate in the technical conference sessions as a speaker; - Convene and chair panel sessions of relevant topics. Please submit on-line at: http://papers.apricot.net/user/login.php?event=19 CONFERENCE MILESTONES --------------------- Call for Papers Opens: 1 November 2014 First Draft Program Published: 6 December 2014 Final Deadline for Submissions: 7 February 2015 Final Program Published: 14 February 2015 Final Slides Received: 21 February 2015 PROGRAMME MATERIAL ------------------ The APRICOT Programme is organised in three parts, including workshops, tutorials and the conference. Topics for tutorials and the conference must be relevant to Internet Operations and Technologies: - IPv4 / IPv6 Routing and operations - IPv6 deployment and transition technologies - Internet backbone operations - ISP and Carrier services - IXPs and Peering - Research on Internet Operations and Deployment - Japan Internet - Software Defined Networking / Network Function Virtualisaton - Network security issues (NSP-SEC, DDoS, Anti-Spam, Anti-Malware) - DNS / DNSSEC - Internet policy (Security, Regulation, Content Management, Addressing, etc) - Access and Transport Technologies, including Cable/DSL, 3G/LTE, wireless, metro ethernet, fibre, MPLS - Content & Service Delivery (Multicast, Voice, Video, "telepresence", Gaming) and Cloud Computing CfP SUBMISSION -------------- Draft slides for both tutorials and conference sessions MUST be provided with CfP submissions otherwise the Programme Committee will be unable to review the submission. For work in progress, the most current information available at time of submission is acceptable. All draft and complete slides must be submitted in PDF format only. Final slides are to be provided by the specified deadline for publication on the APRICOT website. Prospective presenters should note that the majority of speaking slots will be filled well before the final submission deadline. The PC will retain a limited number of slots up to the final submission deadline for presentations that are exceptionally timely, important, or of critical operational importance. Please submit on-line at: http://papers.apricot.net/user/login.php?event=19 Any questions or concerns should be addressed to the Programme Committee by e-mail at: pc-chairs at apricot.net We look forward to receiving your presentation proposals. Mark Tinka, Raphael Ho & Dean Pemberton Co-Chairs, APRICOT Programme Committee

1 0

Cableways rack - offer me beer and it's yours (Auckland)
by David Robb 28 Oct '14

28 Oct '14

I have a surplus-to-requirements cableways rack available to a good home. It’s in Auckland (Blockhouse Bay), and you have to come and pick it up. https://paradise.gen.nz/stuff/rack.jpg If you want to give me money for it, that’d be great, if the best offer is someone who’ll just take it away, that’ll do. Thanks, David

1 0

Moving Phone Lines
by Skeeve Stevens 28 Oct '14

28 Oct '14

Hey all, I have a site in Albany NZ that is merging with a site in the city. They have multiple indials - could be ISDN, I am not sure... they also have multiple 0800's and another 0508 number. We aren't really sure how these are delivered and by who. Does anyone know how I could find this out? ...Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.co.nz ; www.eintellegonetworks.co.nz Phone: +612 8014 7398; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/theispguy ; blog: www.theispguy.com The Experts Who The Experts Call Juniper - Cisco - Cloud - Consulting - IPv4 Brokering

2 1

NZNOG Power Leads and Multiboards
by Mark Foster 28 Oct '14

28 Oct '14

Hi Folks I'm trying to track down the NZNOG pool of power leads and multiboards; i'm hoping to borrow these if possible. Queries to the NZNOG conference team don't seem to be going anywhere and i'm not sure who the organisers for this year are, to ping them personally. Does anyone know the wherabouts of these? Offlist responses perhaps most appropriate. Thanks Mark.

1 1