- NZNOG - lists.nznog.org

Great Firewall of China misconfig; traffic re-routed
by Juha Saarinen 22 Jan '14

22 Jan '14

Somewhat operational, with amusement potential and besides, it’s too early for beer (surely???): http://www.itnews.com.au/News/370324,great-firewall-mishap-reroutes-chinese… Has anyone seen a more detailed explanation as to what happened? — Juha

1 0

Acceptable levels of packet loss
by Matthew Poole 21 Jan '14

21 Jan '14

Been running SmokePing for a little while now, building up a statistical sample, and wondering what's an acceptable level of loss to be seeing through the provider's core, both to targets foreign and domestic and also from the premises to the first hop in the provider's network. Obviously I'm seeing a non-zero level (averages are in the zero-point-something range, but some of the maximums are above 0), so want to know what people consider to be the point where I go from "unreasonable customer" to "customer with a justified concern"? -- Matthew Poole "The difference between theory and practice is that practice is easier in theory than theory is in practice"

8 10

IPv4 Brokering and Availability Announcements
by Skeeve Stevens 19 Jan '14

19 Jan '14

Hi all, I will keep this brief. After many comments to us where people have had to deal with US companies to acquire IPv4, eintellego Networks has decided formalise a service offering IP Brokering. After facilitating and consulting for over a dozen transactions in different countries (including NZ) under the APNIC region - including NZ, we thought it would be good to have a service available locally by someone you know. For more information: http://eintellegonetworks.com/site/ipbrokering/ So, rather than trolling lists when ranges become available or we have a client looking to sell a block, I've setup an announcement list so that I can let interested parties know when a range is available. If you wish to join this list and receive these announcements, please visit: http://eintellegonetworks.com/site/v4announce/ to sign-up. FYI, eintellego Networks has just launched in NZ as a locally registered foreign company to mainly do other business including hardware/consulting and network operations. Also, eintellego Networks is the only APNIC registered<http://www.apnic.net/services/become-a-member/manage-your-membership/transf…>IPv4 broker that is based in the APNIC region (all the other are presently American). Any questions, feel free to let me know off-list. ...Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.co.nz ; www.eintellegonetworks.co.nz Phone: +612 8014 7398; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/theispguy ; blog: www.theispguy.com The Experts Who The Experts Call Juniper - Cisco - Cloud - Consulting - IPv4 Brokering

2 3

Do you stream video?
by Dean Pemberton 14 Jan '14

14 Jan '14

Hi Everyone, Due to unforeseen circumstances our usual video streaming company of choice (R2) is unable to stream NZNOG live this year. They are able to record the session and have it available for streaming later on, It's just the live streaming they can't provide. Is there anyone in the community who does this sort of thing and wants to step forward and have a go? Just email krystal(a)internetnz.net.nz and let her know. The provisio is that it has to be drama free and this isn't an opportunity to 'try things out'. If you haven't done this sort of thing/scale before, then you might be best to give it a miss. If no one comes forward, then record-for-later-streaming it is.

1 0

NZNOG 2014 Social Events
by Dean Pemberton 13 Jan '14

13 Jan '14

Hi Everyone. Another conference update. THURSDAY NIGHT CONFERENCE DINNER Conference Dinner on the Thursday night will be a buffet style dinner has been organised for the Thursday night dinner, 6:30pm at the Mercure Monaco Marquette. Buses will leave from The Rutherford hotel at 6pm and return on the hour from 9 to 11pm. There is even a pub across the road called The Honest Lawyer for those who feel the need to move on. http://www.monacoresort.co.nz/ WEDNESDAY NIGHT I've also been asked what the plan is for the Wednesday evening. As it happens, nothing. In the mists of time, Wednesday night was always informally organised. Often involving food from the sub-continent. Everyone split the bill and basically it was Thursday Night Curry on a Wednesday night! Like Christmas in July! In more recent years, a specific spondsor kindly funded drinks and nibbles on the Wednesday at many a well respected establishment. With this in mind we placed the position of "Networking Drinks" on the sponsorship document in case someone wanted to take up the opportunity. So far this year none of our sponsors have indicated that they would like to take up this offer, so we will return to the default informal arrangement of the past. That being said there are options. If you are a potential sponsor who would like to fund an event on the Wednesday night, our events person Krystal (krystal(a)internetnz.net.nz) would be more than happy to talk through the opportunities with you. I'm also told there are some nice Indian places in Nelson http://www.menus.co.nz/restaurants/indian/nelson/ Failing that there are places that sell beer. http://maps.google.com/maps/ms?ie=UTF8&hl=en&msa=0&msid=1017353080318029218… Basically at the moment it will be up to people to arrange their own food/fun on Wednesday, but being the well adjusted social people I know you all are, I'm sure this won't be a problem. If we do get a benevolent sponsor come forward to save the Wednes-Day we'll be sure to let you know ASAP. Regards, Dean

1 0

Full Programme for NZNOG 2014
by Dean Pemberton 12 Jan '14

12 Jan '14

Hi Everyone, We've just shuffled together all the great talks we've got planned for the conference. The programme as it currently stands is here: http://www.nznog.org/home/nznog-2014-conference-programme You can download an ICS from the link of the bottom of that page. Don't forget to register. The SDN/OpenFlow Tutorial is now full (Although there is a waitlist, email krystal(a)internetnz.net.nz) but there are plenty of other cool things to attend. Don't forget to register! See you all there. Dean

1 0

Plea for help - Ethernet cables.
by Dean Pemberton 10 Jan '14

10 Jan '14

So it turns out that the SDN OpenFlow tutorial has turned into a bit if a thing. While it was going to use mainly VMs and simulators, Citylink has supplied 20 mikrotik routerboards for the class to actually configure into an openflow controlled data plane. On ya guys, much appreciated, great NZNOG and SDN supporters as always. What I'm after now however is the around 60 Ethernet cables to hook it all together. If anyone could help me out so that I don't need to buy them that would be awesome. Yes you get then back afterwards. Thanks heaps. It should be an awesome tut. Dean

1 0

Situations Vacant: Senior Network Engineer
by Mark Foster 09 Jan '14

09 Jan '14

Greetings, ICONZ-Webvisions currently have a vacancy for a Senior Network Engineer, to be based at the iWV offices in Auckland. We're looking for an experienced Cisco engineer with experience working on ASR, 2800/2900/3700/6500/7200 series devices, with exposure to the ISP world preferred. Other acronyms you'd be familiar with at a senior level would include MPLS, VRF, BGP, OSPF, QoS, VoIP. CCNP or equivalent experience is the listed minimum qualification. If you are interested, or know anyone who might be, please have them drop me a note ASAP - we're already interviewing likely candidates and will need to make an offer fairly soon. Off-list questions, or expressions of interest, are welcomed in the meantime. Thanks, Mark.

1 0

Want a free NZNOG 2014 conference ticket?
by Dean Pemberton 06 Jan '14

06 Jan '14

Krystal is looking for one or 2 more volunteers to help with registration and pack up. Duties will be - manning the registration desk on Thursday Morning (8am - 9.30am) and helping pack up gear to be shipped back in INZ on Friday after conference ends (4.00 - 6.00). If you put your hand up then we're happy to comp you a ticket, they may miss a couple of talks - but you should still manage to attend the bulk of the conference. If you're interested then please email krystal(a)internetnz.net.nz and let her know. If there is a huge influx of interest then some advanced algorithm will be used to determine those accepted. =)

2 1

Call for Presentations - DNS-OARC Spring Workshop, May 2014
by Sebastian Castro 05 Jan '14

05 Jan '14

Call for Presentations - DNS-OARC Spring Workshop, May 2014 Next OARC Spring Workshop will take place in Warsaw, Poland on May 10th and 11th, the weekend before RIPE68. OARC is requesting proposals for presentations, with a preference for DNS privacy and confidentiality work and ideas, and DNS over alternative (non UDP) transports. This workshop continues OARC's tradition of having meetings include a strong operational component. Presentations from DNS operators are particularly welcome. We'll also gladly accept talks from DNS researchers, as well as any other DNS-related subjects such as tools, visualizations and data analysis. If you are an OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. Adopting practice from other conferences, a section of lightning talks will be added for short presentations. Workshop Milestones * 20 December 2013, Call for Presentations posted * 6 January 2014, Open for submissions * 1 March 2014, Deadline for submission * 28 March 2014, Final Program published * May 9 2014, Final deadline for slideset submission Details for abstract submission are be published here: https://indico.dns-oarc.net/event/workshop-2014-05 If you consider submitting a presentation, please let the Programme Committee know in advance to help us organize the presentations tracks. You can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via submissions(a)dns-oarc.net if you have questions or concerns. Sebastian Castro, for the OARC Programme Committee (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.)

1 0

CARDIGAN implements RPKI - Cleanliness of prefixes onWIX
by Dean Pemberton 05 Jan '14

05 Jan '14

Hi All, CARDIGAN has just finished implementing RPKI Origin Validation on its WIX peering connection. What this effectively does is finds out if ASs are permitted to announce the IP addresses that they are advertising to the exchange. CARDIGAN then makes a decision on wether to allow invalid announcements to be turned into OpenFlow rules. So I thought you'd all be interested in the state of the prefixes on the exchange. The following table has removed all the routes for which no RPKI information was found. This leaves two conditions: Lines which start with a "V" have a valid RPKI ROA. That means that the AS originating the prefix has been explicitly authorised by the IP resource owner to do so. Likes which start with an "I" have an RPKI ROA which is different to the route seen. This means that the AS originating the prefix has been explicitly disallowed from doing so by the IP resource owner. These are explicit authorisations as the IP Resource owner has had to go to an RPKI trust anchor (normally the RIRs) and request certification of the ASs allowed to originate the prefix (or subnet of the prefix). For most of us (who are APNIC members) this is as simple as logging into the MyAPNIC portal and creating an ROA. APNIC handles everything else for you. Anything that turns up as an "I" on this list, I'm going to be looking at pretty carefully before I prefer into the CARDIGAN network. Anyone with more questions about RPKI, how it works, what it means, how to get it going. Feel free to post/email me. Network Next Hop Metric LocPrf Weight Path V* 58.28.0.0/16 202.7.1.22 30 0 9439 17435 i V*> 202.7.1.22 30 0 9439 17435 i V* 103.10.233.0/24 202.7.0.190 30 0 9439 132003 i V*> 202.7.0.190 30 0 9439 132003 i V* 103.23.16.0/22 202.7.0.222 30 0 9439 132040 i V*> 202.7.0.221 30 0 9439 132040 i I* 103.23.16.0/24 202.7.0.222 10 0 9439 132040 i I*> 202.7.0.221 10 0 9439 132040 i I* 103.23.17.0/24 202.7.0.222 10 0 9439 132040 i I*> 202.7.0.221 10 0 9439 132040 i I* 103.23.18.0/23 202.7.0.222 10 0 9439 132040 i I*> 202.7.0.221 10 0 9439 132040 i V* 113.197.96.0/22 202.7.0.211 30 0 9439 45831 45831 i V*> 202.7.0.211 30 0 9439 45831 45831 i I* 113.197.96.0/28 202.7.0.211 10 0 9439 45831 i I*> 202.7.0.211 10 0 9439 45831 i I* 113.197.96.32/27 202.7.0.211 10 0 9439 45831 i I*> 202.7.0.211 10 0 9439 45831 i I* 113.197.96.96/28 202.7.0.211 10 0 9439 45831 i I*> 202.7.0.211 10 0 9439 45831 i I* 113.197.96.112/28 202.7.0.211 10 0 9439 45831 i I*> 202.7.0.211 10 0 9439 45831 i I* 113.197.96.168/29 202.7.0.211 10 0 9439 45831 i I*> 202.7.0.211 10 0 9439 45831 i I* 113.197.98.32/29 202.7.0.211 10 0 9439 45831 i I*> 202.7.0.211 10 0 9439 45831 i I* 113.197.98.64/27 202.7.0.211 10 0 9439 45831 i I*> 202.7.0.211 10 0 9439 45831 i I* 116.90.130.16/29 202.7.0.176 10 0 9439 38477 i I*> 202.7.0.176 10 0 9439 38477 i I* 116.90.130.96/29 202.7.0.176 10 0 9439 38477 i I*> 202.7.0.176 10 0 9439 38477 i I* 116.90.135.0/24 202.7.0.176 10 0 9439 38477 45641 i I*> 202.7.0.176 10 0 9439 38477 45641 i V* 116.90.139.0/24 202.7.0.176 30 0 9439 38477 i V*> 202.7.0.176 30 0 9439 38477 i I* 116.90.139.0/29 202.7.0.176 10 0 9439 38477 i I*> 202.7.0.176 10 0 9439 38477 i I* 116.90.139.8/29 202.7.0.176 10 0 9439 38477 i I*> 202.7.0.176 10 0 9439 38477 i I* 116.90.139.16/29 202.7.0.176 10 0 9439 38477 i I*> 202.7.0.176 10 0 9439 38477 i I* 116.90.139.24/29 202.7.0.176 10 0 9439 38477 i I*> 202.7.0.176 10 0 9439 38477 i I* 116.90.139.64/27 202.7.0.176 10 0 9439 38477 i I*> 202.7.0.176 10 0 9439 38477 i I* 116.90.139.144/29 202.7.0.176 10 0 9439 38477 i I*> 202.7.0.176 10 0 9439 38477 i V* 118.90.0.0/16 202.7.1.22 30 0 9439 17435 i V*> 202.7.1.22 30 0 9439 17435 i 202.7.0.76 20 0 9439 24006 i V* 182.154.0.0 202.7.1.22 30 0 9439 17435 i V*> 202.7.1.22 30 0 9439 17435 i 202.7.0.168 20 0 9439 i I* 198.48.0.0/23 202.7.0.222 10 0 9439 132040 i I*> 202.7.0.221 10 0 9439 132040 i I* 198.48.2.0 202.7.0.222 10 0 9439 132040 132001 i I*> 202.7.0.221 10 0 9439 132040 132001 i I* 198.48.3.0 202.7.0.222 10 0 9439 132040 i I*> 202.7.0.221 10 0 9439 132040 i I* 202.7.4.0 202.7.0.222 10 0 9439 132040 23755 i I*> 202.7.0.221 10 0 9439 132040 23755 i I* 202.7.5.0 202.7.0.222 10 0 9439 132040 23755 i I*> 202.7.0.221 10 0 9439 132040 23755 i I* 202.7.6.0 202.7.0.222 10 0 9439 132040 23755 i I*> 202.7.0.221 10 0 9439 132040 23755 i I* 202.7.7.0 202.7.0.222 10 0 9439 132040 23755 i I*> 202.7.0.221 10 0 9439 132040 23755 i V* 203.119.88.0/23 202.7.1.253 30 0 9439 42 187 i V*> 202.7.1.253 30 0 9439 42 187 i 202.7.1.252 20 0 9439 i 202.7.0.147 20 0 9439 24183 45563 i 202.7.0.147 20 0 9439 24183 ? 202.7.0.128 20 0 9439 i 202.7.0.107 20 0 9439 i

2 3

2821 ipv4 table size
by Bill Walker 30 Dec '13

30 Dec '13

Hate to post this but my google foo is failing me anyone know the ipv4 max table size on a 2821? Would be running eBGP with two peers. Sent from my iPhone

2 2

Fraud Calls
by Davey Goode 27 Dec '13

27 Dec '13

Hi All, I hope everyone is having a good break ! If anyone out there has had any of their customers PBX's hacked recently (in the last 2 - 3 weeks) and have experienced a large call flow to say Somalia or some other dodgy destination id be keen to hear from you, I'm after the destination numbers they are dialling. replies off list would be great. cheers davey

3 2

How often does NZRS root reload?
by Skeeve Stevens 18 Dec '13

18 Dec '13

Hey all, Just registered a co.nz domain and it is registered and visible in whois. But ;; AUTHORITY SECTION: co.nz. 3285 IN SOA loopback.dns.net.nz. soa.nzrs.net.nz. 2013121964 900 300 604800 3600 How often does this server refresh its data? ...Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.com ; www.eintellegonetworks.com Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/theispguy ; blog: www.theispguy.com The Experts Who The Experts Call Juniper - Cisco - Cloud

3 4

NZNOG 2014 Update
by Dean Pemberton 16 Dec '13

16 Dec '13

Hi Everyone. Registrations have been open for the conference for a while now and I'm pleased to say that they are at an unprecedented level for this time of year. Given that we've only just released the program, thats an outstanding achievement. With some great help from InternetNZ the conference is shaping up to be as awesome as usual. First up I'd like to thank the sponsors who have signed on thus far: Go Wireless - Gold Network Hardware Resale - Gold Vocus - Gold CityLink - Gold GKC - Silver Brocade - Silver Arbor Networks - Silver APNIC - Silver Extreme Networks - Silver Kordia - Bandwidth Sponsor We have more slots open for sponsorship as well as the much coveted Platinum sponsor position. If you would like to ensure that your organisation gets high visability at the event then contact sponsorship(a)nznog.org for a sponsorship pack. We know that the program is an important part of convincing your organisations that you need to attend. This year we've got a wide range of speakers lined up along with some great Workshops and tutorials. Program: International Keynotes: Tom Paseka (CloudFlare) - NZ Perspectives from a global CDN Roland Dobbins (Arbor Networks) - TBA Conference Presentations: Geoff Huston (APNIC) - Measuring DNSSEC Jamie Baddeley (Citylink) - NZIX2/Citylink SDN Sam Russell (REANNZ) - Building a better Skype with WebRTC, SIP, and ENUM Barry Brailey (DNC) .nz DNSSEC programme Jean-Sébastien Fontana (Extreme Networks) - Introduction to TRILL Gerard Creamer (Netspace) - Experiences with dual A records vs anycasting Beatty Lane-Davis (Cyan) - SDN & NFV Michael Fincham (Unleash) - RPKI Peter Gent (MBIE) - 5GHz Wireless Links Jan Jorz (ISOC) - BCOP Project Quintin Russ (SiteHost) - IPv6 deployment in the cloud InternetNZ Update APNIC update WAND update Lightning Talks Workshops: Network Infrastructure Security BGP Routing Tutorials: OpenDNSSEC Installation and Configuration (1/2 day) SDN/OpenFlow Installation (1/2 day) Mikrotik Routing (full day) APNIC Internet Resource Management (1/2 day) We'd suggest you register now. At least this side of Xmas. Flights, Accommodation etc will likely be easier and cheaper the sooner you do it. Better than doing it in a panic in mid January. For more information on how to register, head off to http://www.nznog.org/register See you all there. Dean

1 0

Keeping it local
by Martin Kealey 15 Dec '13

15 Dec '13

I have a question which I'm hoping the NZNOG community can help me with. Within NZ, what is the maximum number of hops from APE to any consumer's interface device? (smarty-phone, ADSL modem, whatever)? Or more pragmatically, let's say the 99th percentile, as in, fewer than 1% of customers are more than X hops away from APE. If this information is already available, I'd appreciate a pointer, otherwise... If you are an ISP could you give me an indicative number of hops from APE to your customers' CPE. If you can include a prefix length reflecting the number of affected customers that would help too. (Ideally the maximum across all your customers, but if you have a few oddball customers with longer paths, just the 99% will do.) If you're an ISP customer and would like to tell me your hop-count to APE (counting from your CPE, not from your computer) and your ISP's name, that would also be appreciated. Replies off-list and I will summarize back to the list. Here's the background: I'm investigating ways of limiting traffic so that it does not leave New Zealand, that can be configured on an application-by-application basis. Obviously if one has an upstream to "global" and a separate upstream to APE or WIX, then it's simple to filter traffic at those egresses. However for the average end-user, it's difficult to get multiple VLANs to their provider, let alone multiple physical links. In an ideal world, one would simply set some QoS bits and your upstream would understand them and do the filtering based on *their* egress, but in practice I haven't heard of any suppliers offering such a service. So I'm looking at DIY options ... In particular, I'm looking at setting the TTL on outgoing packets. We know how many hops it is from "our" hosts to APE, and I guestimate no more than 2 hops from a consumers border device (modem, whatever) to their client devices; So far it looks like setting the TTL so that it's down to 5 at APE will mean most of NZ is reachable, and most of the rest of the world isn't, assuming the international provider is as many hops from me as APE. But I'd really like to get a firmer idea of "how much of NZ will be unreachable given an egress hop limit of X?" (The idea is to find X where the list of exception prefixes is small enough to manage manually, while still blocking the majority of foreign traffic.) What I'd like to find out from the NZNOG community is the distribution of customers at various hop-counts from APE. -Martin

3 3

ISC/F-Root has returned to APE...
by Peter Losher 11 Dec '13

11 Dec '13

FYI - the Auckland node of F.ROOT-SERVERS.NET has been offline for the past couple of years due to HW failure, access issues @SkyTower, changes with our hosts (contacts and access to said data center). I am happy to report that the node is finally back online and advertising F's prefixes to the APE fabric as I type... So come and send your DNS root server queries locally instead of sending them off-shore. We are AS23710 @APE, so if you don't peer with us already, pop us a note at peering(a)isc.org. Yes, Telecom NZ, I am looking at you. Yes, you... (a guy can dream, even if it is hopeless) ;) There are many folks to thank as ISC could not do it alone including: - NZRS (Jay, Sebastian and Dave) for sponsoring the new server gear. - APNIC for sponsoring the new routers. (sorry to see the old Juniper kit go though) - Sebastian and Mike Jager for dealing with my numerous remote hands requests from the other side of the world. - The Kiwi Internet Mafia (Joe Abley, AJ, Jonny) for their support and access to their contacts to keep things moving. - Vodafone NZ and FX Networks for (now redundant) transit over IPv4 and IPv6. - Our peers at APE that have put up with us for being down so long... :) O.k., commercial over; back to serving packets again. Best Wishes - Peter -- [ plosher(a)isc.org | Senior Operations Architect | ISC | PGP E8048D08 ]

5 5

Web Servers: Dual-homing or DNAT/Port Forwarding?
by Christoph Berthoud 10 Dec '13

10 Dec '13

Hi All, I'm curious to know which of the following methods is more widely used/accepted today for publishing web servers to the Internet. 1) Dual-home the server - place one NIC on the internet and a second NIC on an internal network for administration, or 2) DNAT/Port Forward my external IP to my internal IP 3) Both - Dual home the server onto two private subnets (external/internal) and DNAT/Port Forward the public IP to the external subnet IP In either case: a) I will be hiding behind a dedicated firewall appliance and not relying on the OS firewalls b) the internal network will still be in its own subnet firewalled away from the rest of the network c) Only HTTP/HTTPS will be permitted from the internet, no RDP, SSH etc d) I will be deploying IPv6 to this machine in the next 12 months which makes option 1 more attractive I personally like option 1 but I'm looking to see if theres any facepalm reasons I shouldn't do it this way. Happy holidays! -- Thanks Christoph

9 10

JANOG 33 Program Published
by Daniel Griggs 09 Dec '13

09 Dec '13

Dear Colleagues, We have published the program for JANOG 33 and welcome you to join us in Beppu City, Japan, from 23rd-24th Jan 2014. Most sessions are in Japanese only but there are a few sessions in English. You are also welcome to connect with us through facebook and twitter for updates in English. The JANOG SNS accounts are open to everyone, including those who are not able to attend the meeting. See you in Beppu. Cheers, Shinichi Yamamoto, Chin Sze Yih, Izumi Okutani JANOG Internationalization team for JANOG 33 ----- JANOG 33 Program : ------------------------ The Program is available in English at: http://www.janog.gr.jp/en/index.php?JANOG33%20Programs%2FJANOG33%20Program%… Translations of the program titles and abstracts were supported by volunteers on the best efforts basis. Note: During the meeting, there will be no official interpretations in English, except for the sessions marked as (English session). Registration : ------------------------ You can register online at: https://regist.e-side.co.jp/product_info.php?products_id=427&language=en 　Deadline: 10th Jan 2014 JST 15:00 SNS Accounts : ------------------------ Facebook : https://www.facebook.com/janogmeetingi18n Twitter : https://twitter.com/janog_i18n -- Daniel Griggs e + j: daniel(a)pch.net c: +64 (21) 845158

1 0

Re: [nznog] Help block out China please.
by Pete Mundy 08 Dec '13

08 Dec '13

A story along a similar line that reinforces this view: I put a phone on public IP space a few weeks back, then got sidetracked while configuring it. Before I had even returned to enter a new admin password and the correct SIP details (only 1/2hr later!), the phone had already been attempting to dial out on it's own. Turns out a robot had found it on it's public IP with port 80 open and started issuing it dial commands before I even had a chance to go about locking it down. It was unable to dial out as it hadn't had the correct SIP server or login details configured, but it just goes to show that the device really need to be locked down _before_ being put on any publicly accessible IP space, even if just for provisioning purposes! Pete On 8/12/2013, at 3:17 PM, "Dobbins, Roland" <rdobbins(a)arbor.net> wrote: > > On Dec 8, 2013, at 8:46 AM, Don Gould <don(a)bowenvale.co.nz> wrote: > >> Clearly you can't even put a quick and dirty box in place to just prove a concept without having to bolt it down. > > Correct - it simply isn't viable to expose an unpatched/unsecured box to the Internet at all, due to all the automated scanning/hacking activities taking place. > > +1 to the other folks who recommended more workable solutions - 'GeoIP' isn't exact at all, and not all bad nodes (of any nationality) are in China. > > Roland Dobbins

9 9

Re: [nznog] Help block out China please.
by Regan Murphy 07 Dec '13

07 Dec '13

Build the box behind a firewall and don't open incoming ports until its ready to go. Sent from my Windows Phone ________________________________ From: Don Gould<mailto:don(a)bowenvale.co.nz> Sent: ‎8/‎12/‎2013 9:54 p.m. To: nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz> Subject: Re: [nznog] Help block out China please. How do I download the current patch set for Windows 2012 R2 so I can apply it before putting the box on the network? This seems a bit chicken and egg. (And yes I agree this really is a Geekzone or Whirlpool type question now, but I'm a bit interested in what advice operators are keen for us to be dishing to folk.) Beer. D On 8/12/2013 4:36 p.m., Pete Mundy wrote: > locked down_before_ being put on any publicly accessible IP space > -- > Don Gould > 31 Acheson Ave > Mairehau > Christchurch, New Zealand > Ph: + 64 3 348 7235 > Mobile: + 64 21 114 0699 > Ph: +61 3 9111 1821 (Melb) > > I'M COLLECTING COFFEE CUPS FOR PROJECT COFFEE CUP. > > Deja vue (missing the French accent mark) - literally means already seen, that sense of haven't we been here before. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Help block out China please.
by Don Gould 07 Dec '13

07 Dec '13

Hi, I've got a machine that's been hacked twice in the past week from IP ranges in China. I have it behind a Mikrotik router. There is no reason for anything outside of NZ and AU to be looking at this box so I'm keen to just block the rest of the world from it. I'm currently thinking an address list to just block out the world or an address list to include Au and Nz. Keen for ideas. D -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) I'M COLLECTING COFFEE CUPS FOR PROJECT COFFEE CUP. Deja vue (missing the French accent mark) - literally means already seen, that sense of haven't we been here before.

5 7

SoapUI with WOMBL?
by Michael Fincham 04 Dec '13

04 Dec '13

Afternoon all, Has anyone managed to get Chorus's WOMBL B2B test environment working in SoapUI? One complimentary beer, redeemable at NZNOG 2014, for anyone who can share the settings in SoapUI required to make this work :) -- Michael Fincham

1 1

Domain registration scammers
by LRW Longhurst 04 Dec '13

04 Dec '13

Hi all, Sorry, and "beer" because this is more of an Aussie question, maybe someone can direct me to somewhere more appropriate. One of our execs received one of those "domain name available" letters in the form of an invoice, inviting him to register a name in .net.au that's similar to another name we own. This seems to have come via snail-mail but it invites payment at domainnamegroup.com.au. Do we do anything about such scammers? Suing them for wasting our time springs to mind, but I'm thinking more in terms of reporting to an authority. I know this practice has been around for a while but it's the first time I've encountered it directly. -- Lesley Longhurst (previously Walker) Linux Systems Administrator Opus International Consultants Ltd Email lesley.longhurst(a)opus.co.nz Tel +64 4 471 7002, Fax +64 4 473 3017 http://www.opus.co.nz Level 9 Majestic Centre, 100 Willis Street, PO Box 12 343 Wellington, New Zealand

6 5

Need C2T breakout cable in sky tower kinda urgent
by Alexander Neilson 03 Dec '13

03 Dec '13

Hey Everyone Beer, as required (and a big beer - or drink of choice - for my saviour) I am up working in our racks in sky tower and was doing a scheduled reboot of a server to move some power cables. Now the machine won’t complete booting and I suspect the CMOS battery may have died and the complete removal of power has lost the cmos settings stopping at least part of the boot cycle. I have a keyboard, mouse and screen here but it seems to use a C2D breakout cable to connect up to what looks like a larger than normal DVI port. Does anyone have a cable to get a standard VGA monitor signal out of an IBM eServer xSeries 335 machine anywhere in auckland (nearer sky tower the better) and even better if I can come grab it now. It seems to be one of two adapters I don’t have in my kit with me (this will be fixed) but any white knights would be really appreciated. Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

1 0

Request for IPv4 /23
by Daniel Watson 03 Dec '13

03 Dec '13

G'day Noggers Thought i would bring this topic back alive as we are still actively looking for a /24 preferably even a /23 but at good pricing. If you have available space your willing to sell at a good price, I'd love to hear from you Even if you have space you would be willing to lease/rent I'd like to hear from you TIA Daniel

1 0

Who's fibre?
by Paul Adshead 03 Dec '13

03 Dec '13

A new fibre install has just showed up in a shared basement riser. It's currently not connected and no-one in the building is claiming it's theirs. The only identifying mark (written in pen on electrical tape) is "VS-42xxx" (xxx are numbers). Would anyone know which fibre company tags their new installs with labels in this format? We've been told fibre would be unavailable for years at this location, so would really like to get a circuit from that cable, if I only knew who to call.... Thanks Paul Adshead

4 4

Re: [nznog] Who's fibre?
by Stu Fleming 03 Dec '13

03 Dec '13

Jon Brewer: "That's hilarious. There's always a receptionist with keys to the basement or pabx room that will give up keys without asking questions if you've got an orange vest and a decent looking id card." That rules out Chorus then. They can't install anything in a shared building without a 90-day lead time and a mountain of consent paperwork. Also the procedure for obtaining a roof key is slightly more complex as it usually involves the receptionist first a) checking that you are in a happy, smiling mood and b) cautioning you sternly to "make sure you don't fall off"

2 1

Multi-homing without PI space
by Richard Hulse 30 Nov '13

30 Nov '13

Very late to the party... Matthew, if you want to contact me off list I'd be happy to share our experience with becoming an AS, multi-homing, anycast, self-hosting and anything else you might find useful. Cheers, Richard Radio New Zealand Disclaimer Emails sent by Radio New Zealand Limited (RNZ) or any related entity, including any attachments, may be confidential, protected by copyright and/or subject to privilege. If you receive an email from RNZ in error, please inform the sender immediately, delete it from your system and do not use, copy or disclose any of the information in that email for any purpose. Emails to/from RNZ may undergo email filtering and virus scanning, including by third party contractors. However, RNZ does not guarantee that any email or any attachment is secure, error-free or free of viruses or other unwanted or unexpected inclusions. The views expressed in any non-business email are not necessarily the views of RNZ www.radionz.co.nz<http://www.radionz.co.nz>

1 0

NZ download speed improvement
by Nicholas Lee 28 Nov '13

28 Nov '13

http://www.pcworld.co.nz/article/483086/new_zealand_ranks_43rd_online_downl… 25 May, 2010 "It found that over the past 30 days, Kiwis testing their connections on its two source sites recorded average *download speeds of 5.96 Mbit/s*. When it came to upload speeds, New Zealand ranked 42nd, with an average speed of 1.3 Mbit/s." There seems to have been a reasonable improvement: http://www.netindex.com/download/allcountries/ 42 New Zealand - 17.02 Mbps 49 Australia - 14.23 Mbps High density fibre installations like they have in HK would be nice: 1. Hong Kong - 71.01 Mbps Nicholas

1 0

Re: [nznog] Advertising /32 externally via BGP
by Tony Wicks 22 Nov '13

22 Nov '13

You need a high metric null route for that /32. Liam Farr <liamfarr(a)me.com> wrote: >Hi,I'verunintoabitofadumbproblem,hopefullysomeoneherecanpointmeintherightdirection.Ireceivearoutetoa/28fromamemberofmyBGPconfederation,(the/28isonadirectlyconnectedinterfaceofthisrouter)viaBGPtooneofmyedgerouters,andIwishtoadvertiseaspecific/32fromthis/28toanexternalBGPpeer(upstreamprovider)fromthisedgerouter.Icanuseroute-mapsandprefix-lists,todefineaBGPexportpolicytoonlyexportthe/32totheexternalneighborwithoutissue.WhereIgetstuckisgettingthe/32intomyroutetable,essentiallyIneedtode-aggregatethe/28downtoa/32?Isthereanaccepted"bestpractice"wayofdoingthis?Apologiesifthisisastupidquestion,I'veneverrunintothisissuebefore,andGoogleisn'tgivingmemuchhelp.CheersLiamFarr

1 0

Advertising /32 externally via BGP
by Liam Farr 22 Nov '13

22 Nov '13

Hi, I've run into a bit of a dumb problem, hopefully someone here can point me in the right direction. I receive a route to a /28 from a member of my BGP confederation, (the /28 is on a directly connected interface of this router) via BGP to one of my edge routers, and I wish to advertise a specific /32 from this /28 to an external BGP peer (upstream provider) from this edge router. I can use route-maps and prefix-lists, to define a BGP export policy to only export the /32 to the external neighbor without issue. Where I get stuck is getting the /32 into my route table, essentially I need to de-aggregate the /28 down to a /32? Is there an accepted "best practice" way of doing this? Apologies if this is a stupid question, I've never run into this issue before, and Google isn't giving me much help. Cheers Liam Farr

1 1

Orcon contact
by Geraint Jones 21 Nov '13

21 Nov '13

Can someone from orcin please contact me off list. Thanks

1 0

Thursday's security amusement!
by Tim Hoffman 21 Nov '13

21 Nov '13

This is vaguely operational and fairly amusing - one of our friendly LFC’s might want to sort their…ahem….levels of security fail! https://www.google.co.nz/search?q=inurl%3A%2F%2Fhttp%3A%2F%2Fwww.ultrafastf… And to keep it on topic - beer! Cheers, —hoff <views do not represent anyone I may or may not work for etc etc>

6 6

The New Threat: Targeted Internet Traffic Misdirection
by Sebastian Castro 19 Nov '13

19 Nov '13

The link below is an article from Renesys about prefix hijacking they've observed. So far until now, those events were not considered as attacks, but "misconfigurations". http://www.renesys.com/2013/11/mitm-internet-hijacking/ We've seen one of those events on our infrastructure, which lasted a few minutes, and it was detected by BGPmon. Is it moment to push RPKI? Topic to discuss during the next NZNOG meeting? Cheers, -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

2 1

Encryption of national/international information
by Juha Saarinen 19 Nov '13

19 Nov '13

Yahoo’s following Google’s example and will “encrypt all information that moves between our data centres by the end of Q1 2004” : http://yahoo.tumblr.com/post/67373852814/our-commitment-to-protecting-your-… Would this be permitted in NZ? -- Juha Saarinen twitter: juhasaarinen

6 7

Video about SFQ and uplinks
by Pieter De Wit 17 Nov '13

17 Nov '13

Hey List, A while ago someone posted to this list (I am sure it was....) a link to a youtube video about uplinks and why we should do QoS. I tried searching the archives but can't find. Would someone mind pointing me in the right direction for it please ? Thanks !

4 5

[OT] Racks / routers and switches wanted
by Alexander Neilson 16 Nov '13

16 Nov '13

Sorry for the off list nature of the below. Sunday beer post as an apology ;-) Off list direct replies please to avoid clogging the list up. Phone calls / txt ok to my cellphone numbers below as I am on the road. Is anyone getting rid of any racks at the moment. I am trying to get hold of 2 or 3 42RU+ racks. Prefer solid outer sides and grill front and back doors (but any racks looked at. I am currently getting ready to drive from Christchurch to Auckland in a ute with a trailer on the back so I have room to collect. South Island is today and north island tomorrow. We will consider purchasing the right racks if people want some money for the racks. Also I am looking for some switch / routing / firewall hardware that people want to give away (out of warranty / out of contract is all good) as I am looking for some test hardware for my home lab to learn on. I will have room in the vehicle and will consider any functional hardware available on the route. I don't have money personally to buy this hardware so looking for give aways only (but I will haul it away) Regards Alexander Alexander Neilson Neilson Productions Ltd Alexander(a)Neilson.net.nz 021 329 681

1 0

Fibre suppliers
by Alexander Neilson 13 Nov '13

13 Nov '13

Hey list. Can anyone advise a good supplier of fibre patch leads. Single mode is all we care about. We are looking today for at least one LCA-LCA patch lead 5M+ today. But we also need to get stock for various types and lengths in the near future and we are looking for a good quality supplier. Off list replies (or suggestions on list if people think it would be helpful) Regards Alexander *Alexander Neilson* *Neilson Productions Limited* *alexander(a)neilson.net.nz <alexander(a)neilson.net.nz>* *021 329 681*

3 2

NSA, QUANTUM and packet injection
by Juha Saarinen 13 Nov '13

13 Nov '13

Potentially operational content… http://www.wired.com/opinion/2013/11/this-is-how-the-internet-backbone-has-… -- Juha Saarinen twitter: juhasaarinen

1 0

[OT] Boxes in Wellington?
by Alexander Neilson 11 Nov '13

11 Nov '13

Off Topic, so Beer! Does anyone in Wellington have some empty computer / server / large monitor boxes they are wanting to clear out? I am moving this friday and I am a few boxes short. Please message me off list and I will try accept any useful boxes and come collect them. Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

1 0

So what're people using to label ethernet cables these days?
by Mark Foster 09 Nov '13

09 Nov '13

I've got a project underway with a large amount of fresh-install ethernet cabling and i'd like to 'do it right' with respects to cable labelling. The old does-everything Dymo Label Printer is doable, for a while, but in datacentre environments the labels degrade and fall off eventually, which isn't ideal. I've also used 'kabelflags' before but I would prefer something I can print with a machine, I think. That said i'd be interested in what people are doing, or what they 'should' be doing... ? Cheers Mark.

9 9

Multi-homing without PI space
by Matthew Poole 07 Nov '13

07 Nov '13

A "small company wanting to play big company" question: My employer is investigating options for network redundancy as having a functional internet connection is critical to our operation. We're not in any position to even try applying for PI IPv4 space from APNIC (only using a /28), and are in no way close to being ready to think about going to pure IPv6. Clients push to us, so we need to have functional DNS as well as link fail-over. We also have multiple public-facing servers offering the same services, so moving to *shudder* NAT or some kind of port proxying isn't an easy option (clients' internal bureaucracies to get firewall ports opened, client configuration, blah blah blah). So, my question, what are our operational course of action for multi-homing when becoming an AS on the global tubes isn't on the cards? Cheers -- Matthew Poole "The difference between theory and practice is that practice is easier in theory than theory is in practice"

25 46

APRICOT 2014 call for papers is now open
by Dean Pemberton 04 Nov '13

04 Nov '13

Hi everyone, We have just released the call for presentations for APRICOT 2014. Please consider presenting at APRICOT, or encourage a colleague or friend to do so. Also we'd really appreciate it if you would help inform members of your local operations community about this CfP. Many thanks! Philip, Mark, Dean APRICOT PC Chairs -- Asia Pacific Regional Internet Conference on Operational Technologies (APRICOT) 18 - 28 February 2014, Bangkok, Thailand https://2014.apricot.net CALL FOR PAPERS =============== The APRICOT 2014 Programme Committee is now seeking contributions for Presentations and Tutorials for APRICOT 2014. We are looking for presenters who would: - Offer a technical tutorial on an appropriate topic; - Participate in the technical conference sessions as a speaker; - Convene and chair panel sessions of relevant topics. Please submit on-line at: http://papers.apricot.net/user/login.php?event=6 CONFERENCE MILESTONES --------------------- Call for Papers Opens: 1 November 2013 First Draft Programme Published: 6 December 2013 Final Deadline for Submissions: 7 February 2014 Final Programme Published: 14 February 2014 Final Slides Received: 21 February 2014 PROGRAMME MATERIAL ------------------ The APRICOT Programme is organised in three parts, including workshops, tutorials and the conference. Topics for tutorials and the conference must be relevant to Internet Operations and Technologies: - IPv4 / IPv6 Routing and operations - IPv6 deployment and transition technologies - Internet backbone operations - ISP and Carrier services - IXPs and Peering - Research on Internet Operations and Deployment - Thai Internet - Network security issues (NSP-SEC, DDoS, Anti-Spam, Anti-Malware) - DNS / DNSSEC - Internet policy (Security, Regulation, Content Management, Addressing, etc) - Access and Transport Technologies, including Cable/DSL, 3G/LTE, wireless, metro ethernet, fibre, MPLS - Content & Service Delivery (Multicast, Voice, Video, "telepresence", Gaming) and Cloud Computing CfP SUBMISSION -------------- Draft slides for both tutorials and conference sessions MUST be provided with CfP submissions otherwise the Programme Committee will be unable to review the submission. For work in progress, the most current information available at time of submission is acceptable. All draft and complete slides must be submitted in PDF format only. Final slides are to be provided by the specified deadline for publication on the APRICOT website. Prospective presenters should note that the majority of speaking slots will be filled well before the final submission deadline. The PC will retain a limited number of slots up to the final submission deadline for presentations that are exceptionally timely, important, or of critical operational importance. Please submit on-line at: http://papers.apricot.net/user/login.php?event=6 Any questions or concerns should be addressed to the Programme Committee by e-mail at: pc-chairs at apricot.net We look forward to receiving your presentation proposals. Dean Pemberton, Mark Tinka & Philip Smith Co-Chairs, APRICOT Programme Committee pc-chairs(a)apricot.net

1 0

Off Topic: IEC cable C13 to 2xC14
by Joel van Velden 02 Nov '13

02 Nov '13

Off topic I know, but has anyone ever come across an IEC C13 "jug-plug splitting" cable with two male (C14) ends, the sort of cable you'd want to use if you had two power supplies in a rack but only one power socket available? I'm after a supplier near Auckland. I can source from US but i'm wanting them this week. Cheers, Joel van Velden

7 8

Calling all Mirror Providers
by Daniel Watson 01 Nov '13

01 Nov '13

Gday Guys I'm setting up a new project today that will benefit a lot of providers out there in the market, I will be creating brand new mirrorlists for all the major repo's out there in the internet If you operate a mirror of any software, I would appreciate if you could take a few minutes to reply to this email with your URL of your mirror. I already am aware of a fair few out there already but i am not aware of them all The way that this will be setup will require you to let me know if your mirror operates only on Australian shores or if you also have mirror's in other locations, Please specify the location of the mirror also. Looking forward to your responses. D.

1 0

Help / Advise tweaking BGP settings
by Alexander Neilson 31 Oct '13

31 Oct '13

Hey All We have recently made some major changes at $DAYJOB with our connectivity to the outside world and our peering. One of the things we have taken on is a 1Gbps APE peering port and Upgraded out WIX port to 100Mbps. While I find often our inbound traffic takes a fairly efficient path (usually - tho $TRANSITPROVIDER seems to cut prepends and possibly even disaggregates some prefixes (tho this could be something hanging around)) our outbound does seem to be less efficient, especially where APE is concerned. I am currently testing an adaption where I only accept shorter prefixes from $TRANSITPROVIDER and a default route (to avoid blackholing) the domestic transit doesn’t have a “default route” option and I want to avoid pushing domestic traffic over International if it only has a long prefix to match and isn’t peered. Would anyone be willing to provide me some tips / tricks / advise / examples of what they do with BGP (or some good resources) that I can use to improve the routing table I use in the network? Also does anyone have NZ Provider looking glass servers (not the NZIX as I know and use them) where I can see how other domestic providers see my announced routes and how it appears to them (so I can make changes and test but also see what I am being seen as)? Thank you very much in advance for any help. Off list replies are welcomed and possibly better to avoid clogging up the list if people think this is too basic a request for here. Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

4 4

NZNOG 2014 - Registrations now open
by Neil Fenemor 31 Oct '13

31 Oct '13

NZNOG 2014 - registrations open ============================= Registrations for New Zealand's pre-eminent technical Internet networking conference - NZNOG 2014 - are now open. Hosted by the New Zealand Network Operators Group, NZNOG 2014 is the country's only technical networking conference, and features a host of plenary sessions, practical workshops and tutorials. Spaces are limited, so register now and join your fellow ICT specialists for a feast of information sharing, technical up-skilling and professional networking. To register, please visit http://www.nznog.org/register What: NZNOG 2014 When: 27 - 31 January 2014 Where: Rutherford Hotel, Nelson ---- Conference structure NZNOG 2014 incorporates two three-day practical workshops, a one-day of technical tutorials and the conference-proper. Workshops: 27 to 29 January, 2014 Network Infrastructure Security BGP routing Tutorial: 29 January, 2014 Mikrotik 1-day workshop OpenDNSSEC Fundamentals SDN/OpenFlow Installation Conference-proper: 30 - 31 January, 2014 Confirmed so far: International Speaker Tom Paseka (CloudFlare) "NZ Perspectives from a global CDN" Geoff Huston (APNIC) "Measuring DNSSEC" Jamie Baddeley (Citylink) "NZIX2/Citylink SDN Gerard Creamer (Netspace Services) "Experiences with dual A records vs anycasting" Barry Brailey (.nz) DNSSEC programme Sam Russell (REANNZ) "Building better Skype with WebRTC, SIP, and ENUM Jamie Horrell "Statistical methods for Network Analysis" A range of pricing options are available, including a heavily-discounted student registration: Main conference (waged) - $150.00 Main conference (student) - $25.00 Practical workshop - $150.00 Practical workshop (student) - $25.00 Tutorial - $25.00 ---- More information More information about NZNOG 2014 can be found at www.nznog.org. For sponsorship opportunities please contact sponsorship(a)nznog.org Cheers, neil for the NZNOG Trustees

2 1

Anycast node swap NZ / UK
by Nat Morris 21 Oct '13

21 Oct '13

Hi, We're looking for someone to swap a low bandwidth DNS server with in New Zealand. We run an anycast setup and announce the same /24 + /48 from a dedicated ASN from multiple locations around the globe. Would be looking for a single CPU with 512mb + 20gb disc running Debian x64, only special thing it needs is a BGP session so we can announce our address space (you only need provide it with a default route, not full table!). We can provide the same in return in the UK :) Cheers, Nat, -- Nat Morris Esgob Ltd http://www.esgob.com

1 0

JANOG 33 Call for Papers
by Daniel Griggs 10 Oct '13

10 Oct '13

Hello, I am sending this on behalf of the JANOG community. JANOG is making a call for presentation until 24th Oct. It is a networks operators group in Japan with 400+ participants at meetings, and + 6,000 mailing list subscribers as of June 2013. Our Meetings are in Japanese but we have had several non-Japanese speakers presenting at JANOG. We are looking forward to your proposals for presentations. Cheers, Shinichi Yamamoto, Chin Sze (James) Yih, Izumi Okutani JANOG Internationalization team for JANOG 33 ----- JANOG 33 Call for Papers ----------- The JApan Network Operators' Group (JANOG) will hold its 33th meeting in Beppu, Japan on January 23-24, 2014. Yahoo Japan will host JANOG 33. We invite presentations highlighting issues relating to technology already deployed or soon-to-be deployed in the Internet. Submissions are welcome via the e-mail at:"meeting-33[at]janog.gr.jp". ABOUT JANOG ----------- A JANOG Web Page in English can be found at: http://www.janog.gr.jp/en/ THE KEY DATE FOR JANOG 33 SUBMISSIONS ------------------------------------- CFP Deadline : October 24 23:59 JST The Program Committee will notify applicants after 8th Nov on their decision about the submissions. HOW TO PRESENT -------------- If you are interested to give a presentation but do not have someone to help you with the language, try consulting us at: "meeting-33[at]janog.gr.jp". Although we cannot guarantee, we may be able to help you on volunteer basis. The detail of presentation guidelines can be found under JANOG 33 Web Page in English. http://www.janog.gr.jp/en/index.php?JANOG33%20Programs Let us know if you have any questions meeting-33[at]janog.gr.jp -- Daniel

1 0

.nz namespace to be flattened!
by Andy Linton 10 Oct '13

10 Oct '13

https://internetnz.net.nz/news/media-releases/2013/New-level-Internet-domai…

10 10

Reminder - Call for Papers for NZNOG 2014
by Mike Jager 09 Oct '13

09 Oct '13

A reminder that submissions for presentations at NZNOG 2014 are due in the next couple of weeks. Don't forget that the best local paper will win a trip to APRICOT 2014 in Bangkok, Thailand. As they say, you've gotta be in to win! ---- The NZNOG organising committee invites papers for its 13th annual conference, to be hosted at the Rutherford Hotel, Nelson, New Zealand from 27 – 31 January 2014. There will the three day Workshops 27 – 29 January, a day of tutorials on 29 January with the main conference on 30 – 31 January. The best local conference paper as judged by the trustees in association with the programme committee will win a trip to APRICOT 2014, to be held in Bangkok, Thailand, 18-28 February 2014. So, get writing! Conference objective: The NZNOG conference, workshops and tutorials are a once-a-year opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies practises and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submit a paper: Presenters are invited to submit abstracts of their paper for consideration by Monday 21st October. Abstracts should be no more than one page long and provide a summary of your networking-related subject matter. Please note that full slide decks will be required by 18th November. To submit your paper please e-mail: talks(a)nznog.org When considering a presentation, remember that the NZNOG audience is mainly comprised of technical network operators and engineers with a wide range of experience levels from beginners to multi-year experience. There is a strong orientation to offer core skills and basic knowledge in SIGs and to address issues relevant to the day-to-day operations of ISPs and network operators in the conference sessions. Note: The inclusion of a title, bio, topic, abstract, and slides with proposals is not compulsory but will help us determine the quality of your proposal and increase the likelihood it will be accepted. The organising committee will evaluate abstracts based on fit with the conference’s objective and its ability to stimulate lively discussions around the current state of New Zealand networking. The best local paper will be judged by a selection of the trustees and the programme committee. Return flights from New Zealand, accommodation, and conference fees will be covered. It will be expected the best paper is submitted by the winner for presentation at APRICOT. More details on paper submission can be found at http://www.nznog.org/call-for-papers For more information about the conference visit www.nznog.org or contact: talks(a)nznog.org

1 0

Arbor Networks 9th Annual Infrastructure Security Survey
by Sockrider, Gary 09 Oct '13

09 Oct '13

_______________________________________________________________________ Arbor Networks 9th Annual Infrastructure Security Survey Now Open _______________________________________________________________________ Arbor Networks would like to invite you to participate in our annual infrastructure security survey, an important initiative that touches service providers, enterprises, government agencies, universities and other network operators around the world. Please go here to participate in the 2013 survey: https://www.surveymonkey.com/s/FGY6KJD We are requesting that you complete and submit the survey by October 31, 2013. The purpose of the survey is to gauge and report on general security issues, practices, procedures and observations from the industry. All data gathered from the survey will be compiled, analyzed and reported in Arbor's 9th annual Worldwide Infrastructure Security Report which will be published in early 2014. Individual responses will be treated anonymously and no respondent names or company names will appear in the report or accompanying presentations and/or marketing materials. For your reference, our 8th annual Worldwide Infrastructure Security Report, issued earlier this year and based on responses to last year's survey is available here: http://pages.arbornetworks.com/rs/arbor/images/WISR2012_EN.pdf Your industry perspectives are important to Arbor and we value your input. Thank you, in advance, for your participation. With best regards, Arbor Networks

1 0

National Vs International Traffic
by Shane Hanson 07 Oct '13

07 Oct '13

Hello All I'm sure this question has been asked a number of times before but a quick search through the list and a Google pretty much draws a blank. I'm working for a service provider (Mothership) and we're trying to differentiate between national and international traffic. Any pointers? Thanks SHANE lE <mailto:shane(a)mothership.co.nz> shane(a)mothership.co.nz lW <http://mothership.co.nz/> mothership.co.nz lA PO Box 99814, Newmarket lM +64 21 623 903

5 5

Re: [nznog] Speaking of IPv6
by Brad Cowie 02 Oct '13

02 Oct '13

Hello, I don't run the machine that hosts the list, but figure I should chime in since I can provide the most up to date information. Waikato has a fully working IPv6 upstream and our own prefix (2001:df0:4::/48) we at Wand make good use of v6. The downside is that I haven't seen any other departments on campus adopt IPv6 yet, apart from our HPC group and Music group. list.waikato.ac.nz is a campus-wide service run by our ITS division, I haven't heard much about ITS's IPv6 deployment plans, but I'm not sure that will help much in this case considering our email vendor (postini in this case) doesn't have IPv6 support. I'm pretty sure we'll have to move off postini soon considering Google is planning to close that service down at some point. Hopefully our new email vendor has IPv6 support? Feel free to flick me any other questions on or off list and I'll attempt to provide answers. Cheers, Brad Cowie -- Systems Administrator Wand Group Department of Computer Science The University of Waikato Mobile: +64 27 5888 103 | Office: G.1.32 From: Dean Pemberton <nznog(a)deanpemberton.com> > Date: 2 October 2013 19:24 > Subject: Re: [nznog] Speaking of IPv6 > To: Juha Saarinen <juha(a)saarinen.org> > Cc: "nznog(a)list.waikato.ac.nz" <NZNOG(a)list.waikato.ac.nz> > > > Aww man thats harsh.... but fair. > > Someone from Waikato how are you looking for IPv6 deployment? > > On Wed, Oct 2, 2013 at 6:26 PM, Juha Saarinen <juha(a)saarinen.org> wrote: > > $ host -6 -v list.waikato.ac.nz > > Trying "list.waikato.ac.nz" > > ;; connection timed out; no servers could be reached > > > > $ host list.waikato.ac.nz > > list.waikato.ac.nz has address 130.217.66.63 > > list.waikato.ac.nz mail is handled by 400 > > list.waikato.ac.nz.s200b2.psmtp.com. > > list.waikato.ac.nz mail is handled by 100 > > list.waikato.ac.nz.s200a1.psmtp.com. > > list.waikato.ac.nz mail is handled by 200 > > list.waikato.ac.nz.s200a2.psmtp.com. > > list.waikato.ac.nz mail is handled by 300 > > list.waikato.ac.nz.s200b1.psmtp.com. > > > > -- > > Juha Saarinen > > twitter: juhasaarinen >

1 0

Re: [nznog] "What's the hourly price for a /24?"
by Scott Weeks 02 Oct '13

02 Oct '13

--- jlaundry(a)jlaundry.com wrote: From: Jed Laundry <jlaundry(a)jlaundry.com> Pardon my ignorance of the APNIC list discussions, but is the point to: 1. allow /24s to be used by different ASes for short periods of time to handle peak demands? I can only think of mobile IP providers in different timezones being a "sensible" example of this. 2. to allow ASes to claim a need for addresses based on short term customer uses? This is an edge case; I've run a couple of events where I needed a /26 for a weekend, which was taken from the provider's existing pool. 3. to mark addresses as leased (i.e. cloud servers) to avoid blacklist hell for the next poor unfortunate soul to use them? (glhf?) ------------------------------------------------------- You forgot 4. to spam. Sorta like hourly rates at a motel... >;-) scott _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Refurb Cisco Kit (inside) in NZ
by Skeeve Stevens 02 Oct '13

02 Oct '13

Hi, Could some people sell Refurbished Cisco kit in NZ contact me, or someone give me some contacts. I'm hoping for someone who is already in NZ so I can have to deal with the extra costs of import duties, shipping, risk, etc. ...Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.com ; www.eintellegonetworks.com Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/theispguy ; blog: www.theispguy.com The Experts Who The Experts Call Juniper - Cisco - Cloud

1 0

"What's the hourly price for a /24?"
by Dean Pemberton 02 Oct '13

02 Oct '13

Hi All, The subject line is a question I posed to Geoff Huston years ago in response to us both musing what the price to purchase address space would be. I suggested that if it really got that bad, people would be asking about leasing by the hour rather than buying outright. That time looks to be upon us. While not explicitly allowed, nor disallowed by APNIC policy, IP address leasing is becoming a hot topic of discussion on relevant APNIC lists. Should it be allowed? Should it be disallowed? It it were disallowed would that actually stop it? What mechanisms need to be in place to keep it sane? A 'whowas' server for eg Should someone be able to be allocated addresses under a needs based policy just so they can make money leasing them? Does leasing addresses mean that you no longer need them? Should you be required to return the ? These and many more issues are questions I'd like you all to give me feed back on. This topic will come up in APRICOT 2014 in Thailand. I'd like to know a lot more about what you all think about it before I take the mic. Regards Dean -- -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz To protect and promote the Internet for New Zealand.

20 41

Speaking of IPv6
by Juha Saarinen 01 Oct '13

01 Oct '13

$ host -6 -v list.waikato.ac.nz Trying "list.waikato.ac.nz" ;; connection timed out; no servers could be reached $ host list.waikato.ac.nz list.waikato.ac.nz has address 130.217.66.63 list.waikato.ac.nz mail is handled by 400 list.waikato.ac.nz.s200b2.psmtp.com. list.waikato.ac.nz mail is handled by 100 list.waikato.ac.nz.s200a1.psmtp.com. list.waikato.ac.nz mail is handled by 200 list.waikato.ac.nz.s200a2.psmtp.com. list.waikato.ac.nz mail is handled by 300 list.waikato.ac.nz.s200b1.psmtp.com. -- Juha Saarinen twitter: juhasaarinen

2 1

UFB Right Performing
by Jonathon Exley 01 Oct '13

01 Oct '13

Hi all, Chorus have been developing new UFB service templates through the Right Performing process. The main focus has been on increasing burst sizes to permit better TCP performance, and a corresponding relaxation of the delay and jitter SLA. The latest version has been submitted to the TCF for approval this week. Just in case you don't participate in the TCF, you can download a copy from https://db.tt/RgaqMjYL. If you have any comments/abuse please share them (but don't hassle me about the maths - I didn't write it) [cid:image001.jpg(a)01CEBF8D.35452160] Jonathon Exley Network Specialist Layer 2 T +64 4 498 5602 M +64 27 514 8048 E jonathon.exley(a)chorus.co.nz Level 3, Deloitte House, 10 Brandon Street P O Box 632, Wellington www.chorus.co.nz<http://www.chorus.co.nz> Aon Hewitt Best Employer in Australasia 2013 P Please consider the environment before printing this e-mail ________________________________ This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002.

1 0

Wellington OpenStack meet up tonight
by Andrew Ruthven 29 Sep '13

29 Sep '13

Hey, Is it the last Monday of the month already?! Time for the second OpenStack users group meeting in Wellington! For this meetup we'll have Bruno Lago from Catalyst IT doing an overview of OpenStack. He will describe all the core projects and show them working from the Horizon interface, command line tools and APIs. The Q&A session is an excellent opportunity for people to clarify their questions and share ideas with other OpenStackers. Where? Level 3, Catalyst House, 150 Willis St Time? 6pm, presentation starting at 6:30pm The front door locks at 6pm, but we'll have a sign down there with a contact phone number. Due to popular demand, an Auckland group is in the works. Cheers! -- Andrew Ruthven Wellington, New Zealand At home: andrew(a)etc.gen.nz | linux.conf.au 2014 | Come swan on the Swan River | http://linux.conf.au

1 0

Re: [nznog] Mail admins for dmzglobal, yahoo and ihug
by Robert 27 Sep '13

27 Sep '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi Don, I saw you were looking for admins for iHug/Vodafone/TCL. Give me a shout I will be able to help you with that. Regards, Rob. -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.20 (Darwin) Comment: GPGTools - https://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCgAGBQJSRnBBAAoJELLoL7phT5laZbAP/i2GWO7aR0nhNK2TwTQU2Nyj G+SQl/sCFBsRJvht91Axi30ChUL6yeohxqyqxuEXkyaPe/mVC3VC1QvdNR6Vw72o QpQVKTv5oiCz/D2ZBp6X7BB2CwA4Qfzx+wm0eCX+UdxFwsfMu4aMsIqsCSZ6FQiO i+x6KxAKqUsG/C3i5yPDXcKl848kbuAPpbk1RAaZCGr4kYI/k7DmXYfR+4r9C05L HaIBmHNuqYFHX4zyBM0ZmH9S5R3ZwVQX/WejUWZFnrM01+GPsmeYKra8pIdbd9cH zwiJFW7i7lFl2+UyNU3v/L6Em3ukBL7Z63+nVPj94Mzs9rHXsYNOHMnsRaVP6IqG /1gVNsXtm4Dedfrc6FeC8CBTLfpGpJpiv1V0kJQT/deBXh+TJNFCDEi9MWN3kKww FSzhzIJU6CLZnRTkKO4rPlViID5C6bwiJHAHe2Y/GUMm+TmKWZm+k+8AKu3RXozv OYvOvsQTgfHoUwjbTiGtQP8EGElIB8CAZqze1luHSoJEWWkMLWCP0+wuWw/Gryp/ 7cVKUdm1feFcBzkPsQ8HkGEah5P8r1qQ93WvtkOzJ9XQF3TWUb8XiKYGyCvB+5YR bp5mFdfsOAJWPM6/EkFjCA5WzrS4+6WUZM7wRn+m9+owp0ESgJajy++zCFsRaPn0 O7C8yRlZ0Elw/hDmulOu =6Gqc -----END PGP SIGNATURE-----

1 0

TelstraVodaHug core lag
by Matthew Poole 24 Sep '13

24 Sep '13

Hi all Breaking with recent tradition and discussing something related to the operation of the NZ tubes... My employer has a TVH business fibre connection, and since around midnight Saturday/Sunday the latency to 8.8.8.8 (one of my Smokeping test subjects) has been consistently > 160ms. mtr tells me: |------------------------------------------------------------------------------------------| | WinMTR statistics | | Host - % | Sent | Recv | Best | Avrg | Wrst | Last | |------------------------------------------------|------|------|------|------|------|------| | firewall - 0 | 124 | 124 | 0 | 0 | 1 | 0 | | 203.167.222.5 - 1 | 120 | 119 | 0 | 2 | 51 | 51 | | ge-0-2-0-1.xcore1.acld.telstraclear.net - 0 | 124 | 124 | 0 | 3 | 62 | 1 | |ge-0-2-0-914.xcore2.acld.telstraclear.net - 0 | 124 | 124 | 0 | 3 | 48 | 2 | | gi1-2.akl-grafton-bdr2.ihug.net - 0 | 124 | 124 | 1 | 2 | 29 | 11 | | No response from host - 100 | 24 | 0 | 0 | 0 | 0 | 0 | | tu20232901.akl-grafton-core1.ihug.net - 0 | 124 | 124 | 129 | 132 | 192 | 164 | | 209.85.249.5 - 0 | 124 | 124 | 176 | 178 | 242 | 200 | | 209.85.250.63 - 0 | 124 | 124 | 176 | 187 | 252 | 195 | | 72.14.232.63 - 0 | 124 | 124 | 181 | 183 | 246 | 199 | | 72.14.233.200 - 0 | 124 | 124 | 189 | 191 | 251 | 213 | | 216.239.48.165 - 0 | 124 | 124 | 179 | 182 | 244 | 197 | | No response from host - 100 | 24 | 0 | 0 | 0 | 0 | 0 | | google-public-dns-a.google.com - 0 | 124 | 124 | 179 | 183 | 246 | 200 | |________________________________________________|______|______|______|______|______|______| The sudden latency jump at akl-grafton-core1.ihug.net kinda leaps out. Is anyone else seeing this? And is this something that the TVH admins are aware of? Please don't make me deal with helpdesk! Cheers -- Matthew Poole "The difference between theory and practice is that practice is easier in theory than theory is in practice"

25 44

Email Evolution: 40 years of changing engines in mid-flight
by Brian E Carpenter 19 Sep '13

19 Sep '13

May be of interest if in Auckland on 14/10... City campus = University of Auckland Symonds St/Princes St 303-561 = seminar room on top floor of Computer Science -------- Original Message -------- Subject: [Computer Science Staff] Advance notice of October's Departmental Seminar - NOTE Occurs on a MONDAY not on regular day!!!!! Date: Fri, 20 Sep 2013 12:35:53 +1200 From: Mike Barley <mbar098(a)cs.auckland.ac.nz> Reply-To: Mike Barley <mbar098(a)cs.auckland.ac.nz> To: <staff(a)cs.auckland.ac.nz> CC: Mike Barley <mbar098(a)cs.auckland.ac.nz> Advance Departmental Seminar Announcement Title: Email Evolution: 40 years of changing engines in mid-flight Time: Monday, 14 October, 12:00 - 1:00 Venue: City campus, room 303-561 Speaker: Dave Crocker Affiliation: Brandenburg InternetWorking Host: Brian Carpenter Abstract: The first networked email was sent 42 years ago. Surprisingly, messages from the early 70s look similar to the basic text email we send today. In fact, the current Internet Mail service has been in continuous operation longer than the Internet, with such enhancements as addressing, multi-media and security, while growing from a few hundred users to a few billion. Email is the ultimate distributed application and one of the few true peer-to-peer services on the Internet. The talk with explore this history, successful approaches for making major architectural enhancements while preserving an installed base, and current challenges for global email use. Short Bio of Speaker: David H. Crocker is a principal with Brandenburg InternetWorking, developing network-based applications businesses and designing system architectures for them. Over the past 40 years he contributed to early Internet research, led product development efforts and founded several startups, serving as CEO for one. Dave created and operated two national email services, designed two others, and was CEO of a community non-profit ISP. His product, service and standards efforts cover knowledge management, email, instant messaging, facsimile and EDI, as well as Internet security, commerce, domain name service, emergency services, and even some TCP and IP enhancements. He has authored more than 50 Internet technical specification. Dave served as an Area Director for the Internet Engineering Task Force, variously overseeing network management, middleware and the IETF standards process, and has served on the IETF's administrative committee, as well as chairing a working group on reputation. He is also a senior adviser for the industry's Messaging Anti-Abuse Working Group and is on the board of the non-profit Trusted Domain Project. Dave is a co-recipient of the 2004 IEEE Internet award for his work on email. - Mike -- Regards Brian Carpenter http://orcid.org/0000-0001-7924-6182

1 0

Re: [nznog] NZNOG Digest, Vol 129, Issue 1
by Jonathan Spence 17 Sep '13

17 Sep '13

Hi Paul,Thanks for the assistance and pointing out a glaringly obvious problem :S. NS records are all fixed but not seeing the delegation still. Should this happen now automatically or do Orcon still need to do something? I've now learnt how to use the Dig command but can't figure out how to trace it like in other posts. Thanks,Jonathan Jonathan Spence Chief Information Officer Mobile: +64-21-1055634 Work: +64-9-9503306 Web: power-business.co.nz The information contained in this message is privileged and intended only for the recipient names. If the reader is not a representative of the intended recipient, any review, dissemination or copying of this message or the information it contains is prohibited. Views expressed in this message may notnecessarily be those of Power Business Services Limited. If you have received this message in error, please immediately notify the sender, and delete the original message and attachments. ---------------------------------------- From: nznog-request(a)list.waikato.ac.nz Sent: Monday, September 2, 2013 12:00 PM To: nznog(a)list.waikato.ac.nz Subject: NZNOG Digest, Vol 129, Issue 1 Send NZNOG mailing list submissions to nznog(a)list.waikato.ac.nz To subscribe or unsubscribe via the World Wide Web, visit http://list.waikato.ac.nz/mailman/listinfo/nznog or, via email, send a message with subject or body 'help' to nznog-request(a)list.waikato.ac.nz You can reach the person managing the list at nznog-owner(a)list.waikato.ac.nz When replying, please edit your Subject line so it is more specific than "Re: Contents of NZNOG digest..." Today's Topics: 1. Orcon IPv6 rDNS delegation (Jonathan Spence) 2. Re: Orcon IPv6 rDNS delegation (Leo Vegoda) 3. Re: Orcon IPv6 rDNS delegation (Paul Tinson) 4. Re: Orcon IPv6 rDNS delegation (Paul Tinson) ---------------------------------------------------------------------- Message: 1 Date: Mon, 2 Sep 2013 02:08:47 +1200 From: "Jonathan Spence" <jonathan.spence(a)power-business.co.nz> To: <nznog(a)list.waikato.ac.nz> Subject: [nznog] Orcon IPv6 rDNS delegation Message-ID: <7d59cc8$6fc11687$642d0766$(a)xtracta.com> Content-Type: text/plain; charset="us-ascii" Hi everyone, Google have just started enforcing PTR records for IPv6 addresses delivering to Gmail. Our IPv6 works great with Orcon but having serious issues getting delegation back to our nameservers setup. I have been told a few times that everything is setup on their end but I don't think it is. Our IP space: 2400:4800:4017::/48 is meant to be sent to ns1.power-business.co.nz and ns2.power-business.co.nz. However it doesn't seem to. For example our website is:2400:4800:4017:200:250:56ff:fe90:82f If I query ns1.power-business.co.nz from my home computer is works fine: -----command----- C:\Users\Jonathan Spence>nslookup 2400:4800:4017:0200:0250:56ff:fe90:082f 60.234.77.213 Server: UnKnown Address: 60.234.77.213 Name: midas.power-business.co.nz Address: 2400:4800:4017:200:250:56ff:fe90:82f ------ end command ----- However other hosts don't resolve this. When using this tool it doesn't work failing when reaching Orcon's nameserver: http://www.simpledns.com/lookup-dg.aspx Can anyone comment? Thanks, Jonathan ------- output ------- Received referral response - DNS servers for "0.4.2.ip6.arpa": -> ns4.apnic.net (no IP address) -> apnic1.dnsnode.net (no IP address) -> ns3.apnic.net (no IP address) -> tinnie.arin.net (no IP address) -> ns2.lacnic.net (no IP address) -> sec1.authdns.ripe.net (no IP address) -> ns1.apnic.net (no IP address) ---------------------------------------- Attempting to resolve DNS server name "apnic1.dnsnode.net" (details not logged) ---------------------------------------- Resolved DNS server name "apnic1.dnsnode.net" to IP address 194.146.106.106 ---------------------------------------- Sending request to "apnic1.dnsnode.net" (194.146.106.106) ---------------------------------------- Received referral response - DNS servers for "0.0.8.4.0.0.4.2.ip6.arpa": -> ns1.orcon.net.nz (no IP address) -> ns2.orcon.net.nz (no IP address) ---------------------------------------- Attempting to resolve DNS server name "ns2.orcon.net.nz" (details not logged) ---------------------------------------- Resolved DNS server name "ns2.orcon.net.nz" to IP address 210.55.12.2 ---------------------------------------- Sending request to "ns2.orcon.net.nz" (210.55.12.2) ---------------------------------------- Received authoritative (AA) response: -> Header: Non-Existent Domain ----- end output ----- Jonathan Spence Chief Information Officer Mobile: +64-21-1055634 Work: +64-9-9503306 Web: power-business.co.nz The information contained in this message is privileged and intended only for the recipient names. If the reader is not a representative of the intended recipient, any review, dissemination or copying of this message or the information it contains is prohibited. Views expressed in this message may notnecessarily be those of Power Business Services Limited. If you have received this message in error, please immediately notify the sender, and delete the original message and attachments.

4 7

CFP: Sysadmin Miniconf at Linux.conf.au 2014
by Simon Lyall 14 Sep '13

14 Sep '13

Call for Presentations Linux.conf.au 2014 Systems Administration Miniconf As part of the linux.conf.au conference in Perth, Australia in January 2014 we will be holding a one day mini conference oriented to Linux Systems Administration. The organisers of the Systems Administration Miniconf would like to invite proposals for presentations to be delivered at the Miniconf. Please forward this CFP to your colleagues, social networks, and other relevant mailing lists. This is our 8th year at Linux.conf.au. To see presentations from our previous years, see the miniconf website http://sysadmin.miniconf.org/. Presentation Topics =================== Topics for presentations could include (but are not limited to): Systems Administration, Virtualisation, Cloud computing, Devops, Monitoring, Dealing with "Bring Your Own Device", Configuration Management, Backups, Security, Troubleshooting, Buying Decisions, Identity Management, Two Factor Authentication, Web and Email management, Wiki, Clustering and High Availability, Log Management, Spam and Virus Filtering, VOIP, Ticketing systems, Bootstrapping and automated installation, Packaging and Provisioning, Keeping legacy systems functioning. We strongly welcome topics on best practice, new developments in systems administration and cutting edge techniques to better manage Linux hosts and environments. Presentations should be of a technical nature and speakers should assume that members of the audience have at least a couple of years experience in Unix/Linux administration. Format of Presentations ======================= We are now seeking proposals for presentations at the mini-conference. We have openings for: 45 minute double-length presentations 20 minute full presentations 10-20 minute "How we do things" presentations 5-10 minute "lightning talks" Please note, due to the single day available, we expect the majority of available timeslots to be 20 minutes long or less. The 10-20 minute "How we do things" presentations are intended for people to talk about their sites. Information could include: Servers, talks, tools, people and roles, experiences, software, operating systems, monitoring, alerting, provisioning etc. The intent is to give attendees a picture of what is happening in the "real world" and some understanding of how other sites work, as well as offer you a chance to get suggestions on other tools and practices that might help your site. Discussion of "lessons learned" through really trying to use some of these things are especially welcomed. Submitting talks ================ Please note that in order to give a presentation or attend the miniconf you must be signed up for the main linux.conf.au conference. Presenting at the Miniconf does not entitle you to discounted or free registration at the main conference nor priority with registration. Unfortunately the Miniconf has no budget for sponsorship of speakers. Submissions should be made via: http://sysadmin.miniconf.org/proposal14.html Questions should be sent to: lca2014 @ sysadmin.miniconf.org Dates and Deadlines =================== To encourage early submissions priority (both of inclusion and scheduling) will be given to presentations submitted before the 6th of October. 2013-10-06 - Deadline for early submissions 2013-10-13 - Early submissions confirmation 2013-11-01 - Deadline for submissions 2013-11-15 - Confirmation of all presentations 2013-01-06 - Start of Miniconf and 1st day on linxu.conf.au Contact and Questions ===================== Please see our website at http://sysadmin.miniconf.org for more information on the miniconf, past presentations and presenting at it. If you have any questions please feel free to email the organisers at: lca2014 @ sysadmin.miniconf.org

1 0

OT: copper pricing (deadline 5pm today)
by Brian E Carpenter 12 Sep '13

12 Sep '13

Anyone who wants to make a submission, for example commenting on the Coalition for Fair Internet Pricing submission, can do so by email before 5pm today, Friday 13 September 2013, sent to telcoreview(a)mbie.govt.nz. URLs: http://www.med.govt.nz/sectors-industries/technology-communication/communic… http://beehive.govt.nz/release/review-provide-certainty-consumers-industry-0 http://www.consumer.org.nz/news/view/coalition-says-no-to-600-million-inter… Regards Brian Carpenter

1 0

One block of AS Numbers allocated to APNIC
by Leo Vegoda 11 Sep '13

11 Sep '13

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of one block of 1,024 AS Numbers to APNIC in September 2013: 63488-63999 Assigned by APNIC whois.apnic.net 2013-09-11 133120-133631 Assigned by APNIC whois.apnic.net 2013-09-11 You can find the IANA AS Numbers registry at: https://www.iana.org/assignments/as-numbers/ The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/en/resources/policy/global-addressing/global-polic y-asn-blocks-21sep10-en.htm Regards, Leo Vegoda ICANN IANA

1 0

OT - APNIC / Google Compliance Scam Calls
by Liam Farr 10 Sep '13

10 Sep '13

FYI Someone is calling through business in Auckland as a "representative" of APNIC. They are asking to talk to the IT Manager of the organization called, regarding "Google Compliance Errors". The scammer's caller ID was 19542831741, which if correct belongs to: <?xml version='1.0'?> <filtermessage> <api_version>1.01</api_version> <prefix>1954283</prefix> <destination> <iso3166>US</iso3166> <country>United States</country> <region>Pompano Beach, FL</region> <short_name>United States</short_name> </destination> <type> <id>FIX</id> <description>geographic</description> </type> <registrar> <name>Intermedia Communications Inc. - Fl</name> <range_status>t</range_status> </registrar> <meta> <lookuptime>-0.496342</lookuptime> </meta> </filtermessage> Cheers Liam

5 4

InternetNZ to host APRICOT 2016 in Auckland!
by Dean Pemberton 10 Sep '13

10 Sep '13

It's my pleasure to announce that InternetNZ has been awarded the hosting rights for the 2016 APRICOT conference. The conference will be held at SkyCity and Auckland University of Technology in February 2016. The press release at the following link has some more information. https://internetnz.net.nz/news/media-releases/2013/New-Zealand-host-Asia-Pa… Needless to say this is a big opportunity for the networking community within New Zealand and we look forward to getting you all involved before, during and after the event. Regards, Dean -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz To protect and promote the Internet for New Zealand.

1 0

IPSec vendor interoperability war stories
by Mark Goldfinch 10 Sep '13

10 Sep '13

Hi everyone, I have a business need to support IPSEC tunnels with many different vendors as we don't get to select our partner's equipment vendors. We've had some recent problems with our existing equipment. At the moment we're look at whether whether software upgrades will help our current situation. While we're doing that we're also looking at what other options exist. I'd appreciate anyone's operational experiences between different IPSec vendors, either on-list or to me directly if you want to protect the identities of the not so innocent :-) Beer for those who can offer their experiences! Thanks, -- * *Mark Goldfinch | Systems Team Leader MODICA GROUP nz: +64 4 498 6000

6 7

Vodafone RBI Tower Cosite
by Jonathan Brewer 10 Sep '13

10 Sep '13

Hi Folks, Anyone want to share their experiences co-siting on one of Vodafone's new RBI funded towers? As I understand there are fixed prices for co-site, backhaul from Chorus, etc.. It should be a pretty sweet deal. If there's anyone from Vodafone listening, I'd appreciate a pointer to a location list, rate card, and application form. I can't find them online. Cheers, Jon

1 0

Xtra mail admin and ptr records...
by Don Gould 10 Sep '13

10 Sep '13

From:<gillian.halkett(a)nzvanlines.co.nz <mailto:gillian.halkett(a)nzvanlines.co.nz>> SIZE=50696 Tue 2013-09-10 15:27:37: [126020:1] <-- 250 2.1.0 Ok Tue 2013-09-10 15:27:37: [126020:1] --> RCPT To:<jenna(a)christchurchapartments.co.nz <mailto:jenna(a)christchurchapartments.co.nz>> Tue 2013-09-10 15:27:38: [126020:1] <-- 553 5.7.1 <222-154-247-46.adsl.xtra.co.nz <http://adsl.xtra.co.nz>[222.154.247.46]>: Client host rejected: AUTO_[A|X]DSL We aren't accept direct connection not from dedicated SMTP servers. Please use your internet provider SMTP Server. Tue 2013-09-10 15:27:38: [126020:1] --> QUIT We're rejecting mail from nzvanlines.co.nz because they're running their smtp server on a service with a|x|vdsl in the ptr record. I think we've had this discussion on list before, and iirc we decided that we just get providers to update ptr records, but I'm a bit scared to ring L1HD and ask for a ptr change. Is there an admin on list from Telecom who can work with your customer to fix this for as I doubt it's only us it's impacting? D -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb)

5 6

Fwd: [PAG] Fwd: [isoc-advisory-council] STATEMENT: Internet Society Responds to Reports of the U.S. Government’s Circumvention of Encryption Technology
by Dean Pemberton 09 Sep '13

09 Sep '13

Given that protocols and standards effect NZ network operators, this seems to be on topic. Seeing how IETF handles these issues and rebuilds trust will be interesting. ---------- Forwarded message ---------- From: Alicia Jackson <jackson(a)isoc.org> Date: 10 September 2013 08:03 Subject: [isoc-advisory-council] STATEMENT: Internet Society Responds to Reports of the U.S. Government’s Circumvention of Encryption Technology To: "isoc-advisory-council(a)elists.isoc.org" <isoc-advisory-council(a)elists.isoc.org> Internet Society Responds to Reports of the U.S. Government’s Circumvention of Encryption Technology The Internet Society is alarmed by continuing reports alleging systematic United States government efforts to circumvent Internet security mechanisms. The Internet Society President and CEO, Lynn St. Amour, said, “If true, these reports describe government programmes that undermine the technical foundations of the Internet and are a fundamental threat to the Internet’s economic, innovative, and social potential. Any systematic, state-level attack on Internet security and privacy is a rejection of the global, collaborative fabric that has enabled the Internet's growth to extend beyond the interests of any one country.” The Internet Society believes that global interoperability and openness of the Internet are pre-requisites for confidence in online interaction, they unlock the Internet as a forum for economic and social progress, and they are founded on basic assumptions of trust. We are deeply concerned that these principles are being eroded and that users' legitimate expectations of online security are being treated with contempt. As the institutional home of the Internet Engineering Task Force (IETF), we believe that open and transparent processes are essential for security standardization, and result in better outcomes than any alternative approach. For example, protocols developed by the IETF are open for all to see, inspect, and verify, as are the open and inclusive processes by which they are specified. IETF Chairman Jari Arkko has strongly reiterated the IETF’s commitment to improving security in the Internet, and to seeking ways of improving security protocols in light of these new revelations and security threats. “The IETF has a long-standing commitment to openness and transparency in developing security protocols for the Internet, and sees this as critical to confidence in their use and implementation.” To read more, visit: http://www.ietf.org/blog/2013/09/security-and-pervasive-monitoring/. However, the open development of robust technical specifications is just one link in the chain. Security standards must be properly implemented and used. This is a wake-up call for technology developers and adopters alike, to reexamine what we can do to ensure that all links in the chain are equally strong. This is key to helping restore public trust and confidence in the Internet. The Internet has tremendous potential for economic and social good, but unless all stakeholders trust the Internet as a safe place for business, social interaction, academic enquiry, and self-expression, those economic and social benefits are put at risk. To fulfill its potential, the Internet must be underpinned by the right combination of technology, operational processes, legislation, policy, and governance. The recent reports suggest that U.S. Government programmes have systematically undermined some or all of those measures, and that is why we view the revelations with such grave concern. With this mind, we issue these calls to action for the global community: • To every citizen of the Internet: let your government representatives know that, even in matters of national security, you expect privacy, rule of law, and due process in any handling of your data. Security is a collective responsibility that involves multiple stakeholders. In this regard, we call on: •Those involved in technology research and development: use the openness of standards processes like the IETF to challenge assumptions about security specifications. •Those who implement the technology and standards for Internet security: uphold that responsibility in your work, and be mindful of the damage caused by loss of trust. •Those who develop products and services that depend on a trusted Internet: secure your own services, and be intolerant of insecurity in the infrastructure on which you depend. •To every Internet user: ensure you are well informed about good practice in online security, and act on that information. Take responsibility for your own security. At the Internet Society, we remain committed to advancing work in areas such as browser security, privacy settings, and digital footprint awareness in order to help users understand and manage their privacy and security. The citizens of the Internet deserve a global and open platform for communication built on solid foundations of security and privacy. _______________________________________________ Isoc-advisory-council mailing list Isoc-advisory-council(a)elists.isoc.org https://elists.isoc.org/mailman/listinfo/isoc-advisory-council

6 7

One block of AS Numbers allocated to the RIPE NCC
by Leo Vegoda 09 Sep '13

09 Sep '13

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of one block of 1,024 AS Numbers to the RIPE NCC in September 2013: 61952-62463 Assigned by RIPE NCC whois.ripe.net 2013-09-09 199680-200191 Assigned by RIPE NCC whois.ripe.net 2013-09-09 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/ Regards, Leo Vegoda ICANN IANA

1 0

Maxnet/Vocus Colo - sublet
by Skeeve Stevens 08 Sep '13

08 Sep '13

Hey all, I am looking for about 5RU in the Maxnet/Vocus DC. I think they only sell in minimum half racks - which is excessive for our needs. Does anyone have some space they are subletting? I am also looking for a quote on a cross-connect from Maxnet DC to SkyTower. Responses off-list please (via email only!) ...Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.com ; www.eintellegonetworks.com Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco - Cloud

1 0

Mail admins for dmzglobal, yahoo and ihug
by Don Gould 04 Sep '13

04 Sep '13

Could mail admins for dmzglobal, yahoo and ihug please make them selves known off list please. I have a client who is having trouble getting mail to some of your customers. I've run a trace on our log files and proven that your mail systems are accepting mail from our server on behalf of our client. I can provide mail logs, but I'll do that directly off list. Thanks D -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb)

1 0

Kiwicon 7 CFP
by Mike Forbes 02 Sep '13

02 Sep '13

HI NZNOG FRIENDS Just advising the list the Kiwicon 7 CFP is out. We welcome submissions from our networky chums. https://www.kiwicon.org/cfp2013.txt -- On behalf of the Kiwicon Crüe

1 0

Orcon IPv6 rDNS delegation
by Jonathan Spence 01 Sep '13

01 Sep '13

Hi everyone, Google have just started enforcing PTR records for IPv6 addresses delivering to Gmail. Our IPv6 works great with Orcon but having serious issues getting delegation back to our nameservers setup. I have been told a few times that everything is setup on their end but I don't think it is. Our IP space: 2400:4800:4017::/48 is meant to be sent to ns1.power-business.co.nz and ns2.power-business.co.nz. However it doesn't seem to. For example our website is:2400:4800:4017:200:250:56ff:fe90:82f If I query ns1.power-business.co.nz from my home computer is works fine: -----command----- C:\Users\Jonathan Spence>nslookup 2400:4800:4017:0200:0250:56ff:fe90:082f 60.234.77.213 Server: UnKnown Address: 60.234.77.213 Name: midas.power-business.co.nz Address: 2400:4800:4017:200:250:56ff:fe90:82f ------ end command ----- However other hosts don't resolve this. When using this tool it doesn't work failing when reaching Orcon's nameserver: http://www.simpledns.com/lookup-dg.aspx Can anyone comment? Thanks, Jonathan ------- output ------- Received referral response - DNS servers for "0.4.2.ip6.arpa": -> ns4.apnic.net (no IP address) -> apnic1.dnsnode.net (no IP address) -> ns3.apnic.net (no IP address) -> tinnie.arin.net (no IP address) -> ns2.lacnic.net (no IP address) -> sec1.authdns.ripe.net (no IP address) -> ns1.apnic.net (no IP address) ---------------------------------------- Attempting to resolve DNS server name "apnic1.dnsnode.net" (details not logged) ---------------------------------------- Resolved DNS server name "apnic1.dnsnode.net" to IP address 194.146.106.106 ---------------------------------------- Sending request to "apnic1.dnsnode.net" (194.146.106.106) ---------------------------------------- Received referral response - DNS servers for "0.0.8.4.0.0.4.2.ip6.arpa": -> ns1.orcon.net.nz (no IP address) -> ns2.orcon.net.nz (no IP address) ---------------------------------------- Attempting to resolve DNS server name "ns2.orcon.net.nz" (details not logged) ---------------------------------------- Resolved DNS server name "ns2.orcon.net.nz" to IP address 210.55.12.2 ---------------------------------------- Sending request to "ns2.orcon.net.nz" (210.55.12.2) ---------------------------------------- Received authoritative (AA) response: -> Header: Non-Existent Domain ----- end output ----- Jonathan Spence Chief Information Officer Mobile: +64-21-1055634 Work: +64-9-9503306 Web: power-business.co.nz The information contained in this message is privileged and intended only for the recipient names. If the reader is not a representative of the intended recipient, any review, dissemination or copying of this message or the information it contains is prohibited. Views expressed in this message may notnecessarily be those of Power Business Services Limited. If you have received this message in error, please immediately notify the sender, and delete the original message and attachments.

3 3

DNS hijacking of a few domains
by Blair Harrison 27 Aug '13

27 Aug '13

Hi Folks, Seems like there has been a bit of DNS hijacking happening today - NYTimes.com as one of the targets - you may wish to look at flushing your recursive nameserver caches.. See this dns-oarc post for more details. https://lists.dns-oarc.net/pipermail/dns-operations/2013-August/010617.html Cheers, Blair

1 0

Colo in SkyTower
by Skeeve Stevens 26 Aug '13

26 Aug '13

Hey all, I am wondering who is offering Colo in Sky Tower. I am looking at 2 or 3RU. Just feeling out pricing for a project I am scoping out. ...Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.com ; www.eintellegonetworks.com Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco - Cloud

3 3

APNIC 36 - Join the Webcast
by Elly Tawhai 25 Aug '13

25 Aug '13

Hi NZNOG Community, APNIC 36 Webcast is going to start in 15 minutes. There will be two parallel live webcasts. You can access then from here http://conference.apnic.net/36/program#broadcast Hope you can all join the webcast to take part in APNIC 36 sessions from Xian, China. See you online! Kind regards, Elly APNIC

1 0

Deep rack available in Auckland
by Alexander Neilson 17 Aug '13

17 Aug '13

I am looking for a large (42RU or taller) and deep (900mm) 19" rack lying around in Auckland (or for sale, in stock, in Auckland) We can't wait for standard lead times sorry so looking for someone with an empty one wanting to get it hauled away for free and re used or someone who sells / supplies them based in Auckland holding stock on premises. Looking for off list replies / suggestions / options Thank you all Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

1 0

Fibre / Connectivity issues - Sky Tower?
by Barry Murphy 12 Aug '13

12 Aug '13

Hey guys Anyone seeing any issues with GGI / Chorus, particularly Sky Tower. We lost Chorus Auckland UFB for 8 minutes, physical interface down. We lost a 1Gb GGI International circuit to one of our clients in Sky Tower but no traffic passing. Also had reports of some other fibre circuits having issues that terminate to Sky & MDR though these have not been confirmed. Many thanks Barry Murphy

1 1

Call for Papers for NZNOG 2014
by Dean Pemberton 08 Aug '13

08 Aug '13

Call for papers - NZNOG 2014 Doing something interesting in the Internetworking space? Submit an NZNOG conference paper and you could win a trip to the next APRICOT meeting in Bangkok Thailand! ---- The NZNOG organising committee invites papers for its 13th annual conference, to be hosted at the Rutherford Hotel, Nelson, New Zealand from 27 – 31 January 2014. There will the three day Workshops 27 – 29 January, a day of tutorials on 29 January with the main conference on 30 – 31 January. The best local conference paper as judged by the trustees in association with the programme committee will win a trip to APRICOT 2014, to be held in Bangkok, Thailand, 18-28 February 2014. So, get writing! Conference objective: The NZNOG conference, workshops and tutorials are a once-a-year opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies practises and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submit a paper: Presenters are invited to submit abstracts of their paper for consideration by Monday 21st October. Abstracts should be no more than one page long and provide a summary of your networking-related subject matter. Please note that full slide decks will be required by 18th November. To submit your paper please e-mail: talks(a)nznog.org When considering a presentation, remember that the NZNOG audience is mainly comprised of technical network operators and engineers with a wide range of experience levels from beginners to multi-year experience. There is a strong orientation to offer core skills and basic knowledge in SIGs and to address issues relevant to the day-to-day operations of ISPs and network operators in the conference sessions. Note: The inclusion of a title, bio, topic, abstract, and slides with proposals is not compulsory but will help us determine the quality of your proposal and increase the likelihood it will be accepted. The organising committee will evaluate abstracts based on fit with the conference’s objective and its ability to stimulate lively discussions around the current state of New Zealand networking. The best local paper will be judged by a selection of the trustees and the programme committee. Return flights from New Zealand, accommodation, and conference fees will be covered. It will be expected the best paper is submitted by the winner for presentation at APRICOT. More details on paper submission can be found at http://www.nznog.org/call-for-papers For more information about the conference visit www.nznog.org or contact: talks(a)nznog.org

1 0

Call for NZNOG 2014 Programme Committee participants
by Dean Pemberton 08 Aug '13

08 Aug '13

Afternoon everyone, The NZNOG 2014 Programme Committee is responsible for the solicitation and selection of suitable presentation and tutorial content for the NZNOG 2014 conference (www.nznog.org) The NZNOG Trustees selects a new Programme Committee each year and is now seeking nominations from the community. Eligible PC candidates are those who have attended NZNOG conferences in the recent past, have broad technical knowledge of Internet operations, and have reasonable familiarity with the format of NZNOG conferences. Having constructive opinions and ideas about how the programme content might be improved is of high value too. PC members are expected to work actively to solicit content for the event and review submissions for technical merit. The PC will meet by regular conference calls, during the months prior to the event. If you are interested in joining the PC send a brief note to "trustees at nznog.org". The note should include affiliation (if any) and contact details (including e-mail address), and a brief description of why you would make a good addition to the PC. PC members receive complimentary registration for the event. The NZNOG Trustees will accept nominations received by the end of Friday 30th August, 2013, and will announce the new PC shortly thereafter. Many thanks! NZNOG Trustees

1 0

Policy Proposals at APNIC36
by Dean Pemberton 07 Aug '13

07 Aug '13

Hi all, There are currently 3 policies for consideration at the APNIC 36 meeting Xi'an at the end of August. They are: prop-108 Suggested changes to the APNIC Policy Development Process prop-107 AS number transfer policy proposal prop-105 Distribution of returned IPv4 address (Modification of prop-088) I'll go through briefly what the proposals and where appropriate what I think about them. I'm going to be one of the NZers at the meeting, if there is a point of view that you'd like me to keep in mind during the discussion there then just drop me a line. Regards, Dean prop-108 Suggested changes to the APNIC Policy Development Process ----- Proposed by Dean Pemberton[1] and Izumi Okutani (JPNIC) This proposal seeks to clarify a set of 3 issues with the current PDP which were highlighted during the last meeting in Singapore. The issues are: **Timing Requirements for the Policy-SIG chairs to announce consensus** in the Open Policy Meeting (OPM)** At the moment the Chair calls for consensus on proposals during the OPM and then moves to immediately gauge if consensus has been reached. Due to the nebulous nature of gauging consensus, the Chairs have expressed a desire to be allowed an opportunity to discuss among themselves if consensus has been reached. This proposal seeks to give them this ability as long as a determination on consensus is delivered before the end of the OPM. **Requiring for consensus to be called and demonstrated at the AMM** A historical artefact from the days when there were multiple SIGs within APNIC all producing policy requires that proposals not only gain consensus at their individual OPMs, but also again when the whole membership comes together a day later at the APNIC Members Meeting. This was done to ensure that if there were conflicting policies produced by two SIGs at the same meeting, this would become obvious during the second call for consensus at the AMM and resolved. Now that the Policy-SIG is the only policy-generating body within APNIC, this is no longer necessary and creates confusion as to why a second consensus call is required. This proposal seeks to remove the requirement for a second call for consensus at the AMM unless the SIG Chair deems that it is necessary for any reason. **The length of the required comment period for successful policy proposals after the AMM** Once a policy proposal has gained consensus at the OPM/AMM, it is returned to the mailing list for a comment period lasting 8 weeks. This was historically to allow members not at the OPM/AMM to contribute on the mailing list. In practice there is little to no comment during this time, with all comment on a proposal happening before the OPM. This has the effect of delaying any policy implementations for 8 weeks. This proposal seeks to shorten this comment period to a minimum of 2 weeks unless the SIG Chair deems that it should be longer. Pros: Streamlines the process and removes some of the things which make the PDP a pain Cons: Some members may feel that it gives the Policy-SIG power to implement policy without AMM oversight. In practice this isn't the case as the APNIC exec council has the final decision on policy introduction. prop-107 AS number transfer policy proposal ----- Proposed by Tomohiro Fujisaki There have been a lot of policies dealing with the transfer of IPv4 addresses as RIRs reached exhaustion. What has not been dealt with however are any policies around transferring AS numbers either between APNIC members, or between APNIC members and members of other RIRs. While this is not a huge problem in terms of demand (actual numbers are hard to get, but I’ve been told there are a non-zero number of applicants), it would be good to close this gap in current policy. Generally I'm supportive. Pros: Makes a level playing field between AS numbers and other IP resources in relation to transfer policy Cons: More policy for an area which doesn’t have a significant demand. prop-105 Distribution of returned IPv4 address (Modification of prop-088) ----- Proposed by Tomohiro Fujisaki This one is a bit more contentious. At present APNIC is operating under a policy of only giving a single block of 1024 IPv4 addresses out to any existing or new members. This is basically because they are all gone. Once you get this special last block (being called a 'last slash-8 block') you can never get any more IPv4 addresses. The thing is... IANA has a few more numbers which they can give out. These are dregs which other people have given back to IANA and they are preparing to hand them out to the RIRs. So the question is, what should APNIC do with those addresses? There aren’t THAT many of them (probably about 4 million, but don't quote me), certainly not enough to go back to the old way of allocating them (they would last less than a few months). Should they just be placed into the current pool and treated the same as the 'last slash-8' addresses, or, as this proposal suggests, should APNIC members be allowed a second bite at the cherry? This policy proposes that members be allowed one allocation from the 'last slash-8' and then an additional allocation from any addresses returned by IANA. Opinion is divided here. Some feel that it gives people one last hope for IPv4 when they should be concentrating on deploying IPv6, while others say that they need just a few more addresses to tide them over. Still others say that it should only be available to developing nations or organisations with small allocations already. I'm on the fence here, but I think that the framework we would need to put in place to administer this would outweigh the benefit gained from offering another allocation to members. I'm currently in favour of just putting them in the existing pool and carrying on as we do today. I’ll be meeting with the author in Xi’an to see if there is any convincing argument the other way. If anyone has any feedback on this one let me know. Pros: Gets addresses out to people who need them Cons: Gives an inaccurate impression that there are any more IPv4 addresses left. People should be moving their large IP address demands to IPv6 [1] While I have strived for balance in this assessment, readers should be aware that I am a co-author of the proposal. -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz To protect and promote the Internet for New Zealand.

1 0

smilecity.co.nz routing issue
by Alexander Neilson 06 Aug '13

06 Aug '13

Hi Everyone Can anyone on here (or someone from smilycity ops) contact me please. >From inside our network I am seeing trace routes like this: Serenity:Dude alexander$ traceroute smilecity.co.nz traceroute to smilecity.co.nz (202.177.214.122), 64 hops max, 52 byte packets 1 172.31.2.1 (172.31.2.1) 0.510 ms 0.331 ms 0.295 ms 2 192.168.1.1 (192.168.1.1) 0.456 ms 0.381 ms 0.306 ms 3 113.197.96.18 (113.197.96.18) 3.943 ms 3.854 ms 4.531 ms 4 103.9.216.18 (103.9.216.18) 10.741 ms 10.409 ms 10.276 ms 5 103.9.216.17 (103.9.216.17) 10.374 ms 10.706 ms 10.324 ms 6 203.167.223.89 (203.167.223.89) 16.319 ms 15.262 ms 16.715 ms 7 ge-0-2-0-914.xcore1.acld.telstraclear.net (203.98.42.17) 15.760 ms 11.881 ms 20.355 ms 8 * unknown.telstraglobal.net (134.159.174.37) 21.230 ms 16.681 ms 9 i-0-0-4-1.sydo-core02.bx.telstraglobal.net (202.84.142.149) 40.901 ms 46.391 ms 39.776 ms 10 tengige0-1-0-11.oxf-gw1.sydney.telstra.net (203.50.13.165) 37.536 ms 38.606 ms 40.730 ms 11 bundle-ether2.oxf-gw2.sydney.telstra.net (203.50.6.86) 39.208 ms 45.322 ms 38.338 ms 12 bundle-ether1.chw-core2.sydney.telstra.net (203.50.6.89) 37.451 ms 43.868 ms 42.258 ms 13 10gigabitethernet7-1.chw45.sydney.telstra.net (203.50.20.183) 44.120 ms 37.368 ms 45.299 ms 14 equini3.lnk.telstra.net (139.130.117.214) 46.450 ms 43.879 ms 38.092 ms 15 ge-3-2.br103.sy1.ap.equinix.com (27.111.240.158) 41.385 ms 37.662 ms 40.540 ms 16 ge-3-1.br101.sy1.ap.equinix.com (202.177.217.181) 45.515 ms 37.164 ms 48.858 ms 17 * * * 18 * * * ^C Serenity:Dude alexander$ traceroute smilecity.co.nz traceroute to smilecity.co.nz (202.177.214.122), 64 hops max, 52 byte packets 1 172.31.2.1 (172.31.2.1) 0.536 ms 0.325 ms 0.363 ms 2 192.168.1.1 (192.168.1.1) 0.438 ms 0.451 ms 0.451 ms 3 113.197.96.18 (113.197.96.18) 3.944 ms 4.262 ms 4.055 ms 4 103.9.216.18 (103.9.216.18) 10.531 ms 10.460 ms 10.452 ms 5 103.9.216.17 (103.9.216.17) 10.377 ms 10.452 ms 10.407 ms 6 203.167.223.89 (203.167.223.89) 12.253 ms 19.681 ms 11.798 ms 7 ge-0-2-0-914.xcore1.acld.telstraclear.net (203.98.42.17) 11.325 ms 12.228 ms 17.588 ms 8 unknown.telstraglobal.net (134.159.174.37) 12.124 ms unknown.telstraglobal.net (134.159.174.41) 16.676 ms unknown.telstraglobal.net (134.159.174.37) 17.402 ms 9 * i-0-0-4-1.sydo-core02.bx.telstraglobal.net (202.84.142.149) 37.856 ms 38.422 ms 10 tengige0-1-0-11.oxf-gw1.sydney.telstra.net (203.50.13.165) 40.765 ms 41.609 ms 39.188 ms 11 bundle-ether2.oxf-gw2.sydney.telstra.net (203.50.6.86) 39.683 ms 40.859 ms 39.406 ms 12 bundle-ether1.chw-core2.sydney.telstra.net (203.50.6.89) 37.026 ms 41.156 ms 44.457 ms 13 10gigabitethernet7-1.chw45.sydney.telstra.net (203.50.20.183) 38.273 ms 38.520 ms 37.169 ms 14 equini3.lnk.telstra.net (139.130.117.214) 43.372 ms 42.876 ms 40.542 ms 15 ge-3-2.br103.sy1.ap.equinix.com (27.111.240.158) 50.179 ms 49.605 ms 48.397 ms 16 ge-3-1.br101.sy1.ap.equinix.com (202.177.217.181) 50.201 ms 47.475 ms 54.071 ms 17 * * * 18 * * * ^C However from kcbbs.gen.nz trace route tool I see: traceroute to smilecity.co.nz (202.177.214.122), 30 hops max, 40 byte packets 1 f0-1-0-15-c7507-1.kc.net.nz (202.27.217.193) 0.608 ms 0.552 ms 1.452 ms 2 domr1.kci.net.nz (202.27.217.135) 0.739 ms 0.873 ms 0.678 ms 3 vocus1.ape.nzix.net (192.203.154.123) 1.047 ms 1.005 ms 0.983 ms 4 ten-0-2-0-400.bdr01.akl01.akl.VOCUS.net.au (114.31.202.43) 24.834 ms 25.714 ms 25.57 ms 5 ten-0-1-0-0.cor01.alb01.akl.VOCUS.net.nz (114.31.202.86) 25.069 ms ten-0-1-0-1.cor01.alb01.akl.VOCUS.net.nz (114.31.202.67) 26.103 ms ten-0-1-0-0.cor01.alb01.akl.VOCUS.net.nz (114.31.202.86) 25.668 ms 6 ten-0-0-0-2.cor03.syd03.nsw.VOCUS.net.au (114.31.199.116) 25.569 ms 25.356 ms 25.368 ms 7 ten-0-1-0-3.cor01.syd04.nsw.VOCUS.net.au (175.45.72.225) 25.556 ms ten-0-5-0-1.cor01.syd04.nsw.VOCUS.net.au (175.45.72.118) 24.679 ms ten-0-1-0-3.cor01.syd04.nsw.VOCUS.net.au (175.45.72.225) 25.096 ms 8 ge-0-0-0.bdr02.syd04.nsw.VOCUS.net.au (175.45.72.78) 24.974 ms ip-123.72.45.175.VOCUS.net.au (175.45.72.123) 24.761 ms ge-0-0-1.bdr02.syd04.nsw.VOCUS.net.au (175.45.72.80) 24.471 ms 9 ip-194.73.45.175.VOCUS.net.au (175.45.73.194) 26.621 ms 38.67 ms 25.987 ms 10 xe-0-1-1.gw101.sy1.ap.equinix.com (27.111.240.144) 26.464 ms 25.811 ms 25.527 ms 11 ge-3-2.br101.sy1.ap.equinix.com (27.111.240.154) 31.744 ms 26.245 ms 26.222 ms 12 202.177.214.66 (202.177.214.66) 26.129 ms 25.577 ms 26.983 ms 13 202.177.214.122 (202.177.214.122) 26.725 ms 25.909 ms 25.476 ms and down for everyone or just me tells me its up for others. We don't have a vocus pipe for me to re route though or test from this location. This has been happening for a while and is not a new issue today. traffic is coming from 113.197.96.0/22 I will be raising it with Telstra NOC but as the loss seems to happen inside Equinix I wondered if anyone from smile city themselves may be able to help Will be cross posted to AUSNOG re: equinix Off list replies welcomed. Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

2 1

Commsday: New NSA training deck reveals servers in ANZ
by Skeeve Stevens 01 Aug '13

01 Aug '13

Hey all, I haven't seen any discussion on AUSNOG/NZNOG about the details revealed in the XKeyscore presentation ( http://www.theguardian.com/world/interactive/2013/jul/31/nsa-xkeyscore-prog… ). If, as expected, more revelations and details emerge, then there might be ISPs and carriers in the ANZ region who are complicit in assisting in this programme... In Australia I am expecting the Internet Society in Australia, the Australian Privacy Foundation, the EFA, and others to be having something to say about this. This is from 2008... I'd hate to think to what extent their capabilities are now. Discussion? ;-) ----- New NSA training deck reveals servers in ANZ A NSA presentation newly leaked by former government employee Edward Snowden detailing a global online surveillance system clearly shows infrastructure inside the borders of Australia and New Zealand. According to a map shown in the 2008 training presentation on a program called XKeyscore, there are at least four surveillance nodes in Australia and at least one in New Zealand. The actual map does not specify the exact location of the nodes, but they roughly correspond to coordinates near Darwin, Perth, Sydney, and Alice Springs. The document also explicitly names Australia and New Zealand, along with Canada and Great Britain in its footnotes although their exact roles remained unclear. At the time the presentation was created, XKeyscore covered “approximately 150 sites” and operated “over 700 servers.” According to the presentation, XKeyscore used the servers to gather data on internet activity by users. The data is then catalogued by different variables, including phone numbers, email addresses, log ins and user activity through the use of metadata tables. Once indexed, the information is searchable by NSA operatives via different parameters, such as geography, encryption, language, and even web searches, the material asserted. The author of the presentation said XKeyscore has led to the arrest of 300 terrorists. But Australia’s Pirate Party, which has put forth two candidates for Senate in Queensland and New South Wales, warns the revelation could have far wider implications for Australians. “The implications of all these revelations are troubling and it should concern all Australians that Australian spy agencies may be using US surveillance programs and information-sharing agreements to bypass local restrictions and safeguards,” the Pirate Party said in a release. “As Australians, the US agencies see us as ‘foreign’ and thus not even the minimal safeguards that apply to US citizens would apply to Australians under these programs.” Tony Chan ----- Remember... Read it first in Commsday - www.commsday.com.au - Subscribe today. .Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.com ; www.eintellegonetworks.com Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco - Cloud

1 0

Inaugral Meeting of the NZ OpenStack Users Group
by Andrew Ruthven 29 Jul '13

29 Jul '13

Hey, A bunch of us who are working with OpenStack in New Zealand are putting together a users group. If you're working with or on OpenStack, or even if you just want to, then we'd love to hear from you. What is OpenStack? OpenStack is a global collaboration of developers and cloud computing technologists producing the ubiquitous open source cloud computing platform for public and private clouds. The project aims to deliver solutions for all types of clouds by being simple to implement, massively scalable, and feature rich. The technology consists of a series of interrelated projects delivering various components for a cloud infrastructure solution. [0] The first meeting is to determine where everyone is at with OpenStack. Do you have a 3 node or a 10,000 node cluster*[1]? Are you a core developer on an OpenStack project, or do you want to be? (Does that thought terrify you? That's okay as well.) >From this initial meeting we'd like to work out what topic areas are of interest to the larger group, and who is willing to talk about their areas of interest. Practical details: When: 6pm on 26 August Duration: Probably an hour and a half Website: http://www.meetup.com/New-Zealand-OpenStack-User-Group Location: Level 3 Catalyst House 150 Willis Street Wellington The front door of Catalyst House locks at 6pm, there'll be a sign on the door with someones' phone number on it. There'll be beer, non-beer and nibbles. [2] Cheers! [0] Pinched from http://www.openstack.org [1] You don't need to have a cluster to come along, that's okay, we can help there as well. [2] Thank you to Catalyst IT for sponsoring this event. -- Andrew Ruthven, Wellington, New Zealand At home: andrew(a)etc.gen.nz | linux.conf.au 2014 | Come swan on the Swan River | http://lca2014.linux.org.au -- Andrew Ruthven, Wellington, New Zealand At home: andrew(a)etc.gen.nz | linux.conf.au 2014 | Come swan on the Swan River | http://lca2014.linux.org.au

1 0

Want to go to Bali?
by Dean Pemberton 24 Jul '13

24 Jul '13

Hi all, I wanted to make sure you know that applications are open for InternetNZ fellowships to attend the Global Internet Governance Forum (IGF) to be held in Bali, Indonesia 21-25 October 2013. About the IGF: The IGF is the global multistakeholder Internet event, which brings together people from all over the world to talk about Internet issues and policy. Find out more here: http://www.intgovforum.org/cms/aboutigf Regional and national IGF initatives, such as our very own event NetHui, are ideal to feed into the global event. InternetNZ is keen to encourage the Internet community to attend, especially as this year's IGF is relatively close to us, in the Asia-Pacific region, being held in Bali Indonesia. Find out more about the event here: http://igf2013.or.id/ What's on offer: These fellowships are designed to enable NetHui participants and the wider Internet Community to join in the discussions and proceedings this year in Bali. InternetNZ is seeking to award Fellowships across the wide range of interests and topics under discussion at the IGF. InternetNZ will provide fellowship funding to up to 4 New Zealanders to attend. Fellowship funding is limited to no more than $2,500, which will probably require some additional funding to be secured or provided by the applicant. Applications close tomorrow 26 July so get an application quick if you are interested! https://internetnz.net.nz/content/InternetNZ-IGF-Bali-Fellowships -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz To protect and promote the Internet for New Zealand.

1 0

Global IPv6 Deployment Survey- Still Open for Participation
by Elly Tawhai 23 Jul '13

23 Jul '13

________________________________________________________________________ Global IPv6 Deployment Survey ________________________________________________________________________ Hi NZNOG Community, The 2013 Global IPv6 Deployment Survey is still open for participation to Wednesday, 31 July. Please take a few minutes to complete the survey at: https://www.surveymonkey.com/s/GlobalIPv6survey2013 The purpose of the survey is to better understand what can be done to increase IPv6 adoption in the Asia Pacific region and worldwide. We appreciate your time and interest in completing this survey. If you have any questions concerning the survey, please send an email to: info(a)gnksconsult.com Kind regards, Elly APNIC

1 0

★ Nznog, Jonas Bergler left a message for you
by Blendr 19 Jul '13

19 Jul '13

Jonas Bergler left a message for you Its sender and content will be shown only to you and you can delete it at any time. You can instantly reply to it, using the message exchange system. To find out what was written to you, just follow this link: http://eu1.blendr.com/0330934130/in/jfXbUxCNn08/?lang_id=3&g=57&m=63&mid=51… If clicking the links in this message does not work, copy and paste them into the address bar of your browser. This email is a part of delivering a message sent by Jonas Bergler on the system. If you received this email by mistake, please just ignore it. After a short time the message will be removed from the system. Have fun! The Blendr Team Blendr is powered by Badoo. You have received this email from Badoo Trading Limited (postal address below). If you do not wish to receive further email communications from Badoo click here to opt out: http://eu1.blendr.com/impersonation.phtml?lang_id=3&email=nznog%40list.waik… Badoo Trading Limited is a limited company registered in England and Wales under CRN 7540255 with its registered office at Media Village, 131 - 151 Great Titchfield Street, London, W1W 5BB.

1 0

Simon Hackett talks about Australia's NBN
by Andy Linton 17 Jul '13

17 Jul '13

This was posted on the PICISOC list. NBN ~= UFB? If you've got a spare 20 minutes, this is worth a read and a watch: http://simonhackett.com/2013/07/17/nbn-fibre-on-a-copper-budget/

1 0

iSky
by Jesse Archer 17 Jul '13

17 Jul '13

Anyone from Sky TV NOC on this list? We've got users on our new network reporting they can't use iSky services. We'd like to find a solution so if you are from Sky TV NOC or can point me towards someone who can help, that would be great.

1 0

DNS Specialist position available at NZRS
by Sebastian Castro 16 Jul '13

16 Jul '13

Hi: I'll be leaving my position as DNS Specialist to move into Technical Research within NZRS, opening up a vacant. An updated draft of the job description is attached. If you have any questions about the role, feel free to contact me privately. If you see yourself as the right fit and want to talk about the hiring process, please contact our CEO, Jay Daley(jay(a)nzrs.net.nz) Cheers, -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0

OT - 1/3 Rack Cabinet Manufacturers
by Liam Farr 12 Jul '13

12 Jul '13

Hi, Can anyone recommend a Manufacturer of 1/3 (think 12 RU ish) rack cabinets that has NZ distribution? Particularly ones that are solid enough to be stacked / bolted together? (Not the wall mount type). So far I have just found the Eaton (Wright Line) Vantage range, but I don't believe there is local stock. Cheers Liam

6 6

Off List Replies Please: Quotes for IP Transit
by Alexander Neilson 03 Jul '13

03 Jul '13

Slightly early for Beer O'clock but, Beer We have reached the cap of our existing IP Transit capabilities and have requesting pricing and lead time from our existing provider for increased capacity. If anyone on list is providing IP Transit and can handover to us in SkyTower L48 we would be interested in seeing price per Mbps for Domestic and also for International. This is a pricing comparison as we are very happy with the service level of our existing provider. Price advantage would need to be substantial to more or possibly a backup feed etc. Please can any replies be sent directly to me and not to the list. Simply posted here to invite to treat. Looking for pricing in the few 100's of Mbps each of Domestic and International transit. Thank you Now back to the regular Beer Schedule (I mean intense discussions of network operations) Regards Alexander

1 0

Douglas Englebart - inventor of the mouse
by Richard Naylor 03 Jul '13

03 Jul '13

http://www.washingtonpost.com/blogs/wonkblog/wp/2013/07/03/the-inventor-of-…

1 0

4th Global IPv6 Deployment Survey
by Dean Pemberton 01 Jul '13

01 Jul '13

Hi All, The 4th Global IPv6 Deployment Survey is open and will collect information until July 31st The survey is available at https://www.surveymonkey.com/s/GlobalIPv6survey2013 and just to save people from having to goto the page to read about it here is the blurb: --------------- We are conducting the 4th Global IPv6 Deployment Survey between 1 July 2013 - 31 July 2013. Results will be compared with the results of the earlier Global Surveys, which will help to better understand the developments with regards to IPv6 preparedness and deployment. This survey is designed by GNKS Consult BV in collaboration with TNO and the Regional Internet Registries, based on a design originally by ARIN/CAIDA in 2008, and has been carried out in 2009 with the support of RIPE NCC and APNIC, and globally, with support from the African Network Information Center (AFRINIC), the American Registry for Internet Numbers (ARIN), the Asia Pacific Network Information Centre (APNIC), the Latin American and Caribbean Internet Addresses Registry (LACNIC) and RIPE NCC , in 2010, 2011 and 2012. The 2013 survey is supported by the EU IPv6 Observatory project (for more information see http://www.ipv6observatory.eu/) In 2012 more than 90% of respondents indicated they would be willing to participate again, this year. The survey is secure and GNKS Consult will keep all data confidential. The data will be used for analysis on IPv6 deployment by ISPs and other stakeholders in the RIR communities around the world, and only presented in summary form. The data will be made available for analysis to the RIRs as well under this same confidentiality clause. It will take about 15 minutes to fill in the survey. We appreciate your time in taking this survey. The results will be made available via the websites of the NRO, the participating RIRs and http://www.gnksconsult.com. For questions or remarks, please send an email to info(a)gnksconsult.com.

1 0

Tools found at Sky Tower
by Simon Paterson 23 Jun '13

23 Jun '13

Hi, While at Sky Tower today, I noticed a small zip-up tool case left on level 48, in a slightly out of the way location. It is still sitting where I saw it. If it's yours, but aren't sure exactly where you left it, reply to me with a description of it, and I'll let you know exactly where it is. Cheers, Simon

1 0

APNIC 36 Call for Papers
by Srinivas Chendi 20 Jun '13

20 Jun '13

________________________________________________________________________ APNIC 36 Conference - Call for Papers ________________________________________________________________________ The APNIC 36 Programme Committee is now seeking tutorials and presentations for the APNIC 36 Conference to be held in Xi'an, China, from 26 - 30 August 2013. We are looking for content which would suit the APOPS Plenary, the technical conference sessions and the tutorials. Key Dates --------- The timeline for submissions is: Call for Papers Opens Now First Round Paper Acceptance 12 July 2013 Final Deadline for Submissions 12 August 2013 Final Round Paper Acceptance 18 August 2013 Final Slides Received 25 August 2013 Submitting Proposals -------------------- http://submission.apnic.net/paper/submit/user/login.php?event=1 Programme Material ------------------ The technical sessions at APNIC 36 will include presentations relevant to Internet operations and technologies. The following topics are examples of possible areas of interest. - IPv4 exhaustion / IPv6 deployment and operations - IPv6 transition / IPv4 prolongation technologies - ISP and Carrier Services - IXPs and Peering - Network security - Access and Transport Technologies - Content and Service Delivery If you have any another ideas or proposals for panel or Birds of Feather sessions, please feel free to submit your ideas via the submission system. If you have any questions, please email the Programme Committee at: program(a)apricot.net For more information about APNIC 36, please visit: http://conference.apnic.net/36 On behalf of: APNIC 36 Programme Committee Co-chairs: Philip Smith, Mark Tinka & Dean Pemberton

1 1

InTAC Conference - Come along, Get Involved, Do Something
by Dean Pemberton 18 Jun '13

18 Jun '13

*Look for the helping opportunity near the end of the message* Hi Everyone, This year, InTAC is being held in Wellington as part of NetHui 2013. You can register online at http://nethui.eventbrite.co.nz. What: InTAC (the Internet Technical Architecture Conference) When: Monday 8 July, 2013 Where: Wellington Town Hall Cost: Free (Registration required) Why should I attend? The New Zealand Internet is like a huge super tanker. The bad news is that it takes a long time to change course if you don't like the direction you're headed. The good news is the earlier you start making those changes the smaller the changes need to make. The InTAC conference will be more than just a collection of technology presentations. This year InTAC will be a collaborative environment designed to focus on outcomes as well as the discussions needed to bring them about. InTAC this year will take a long term view driven by short term actions. The focus of the conference will be around answering the following questions: "What do we want the New Zealand Internet to look like in 5 years?” “What are the 5 actions the industry can perform in the next 5 months to make that future more likely?" Don't miss out on your chance to be part of the technical decisions facing the direction of the New Zealand Internet for the next 5 years. *** Helping opportunity *** I'm also looking for people/organisations to show the attendees a little bit about what they are doing across the next 5 years. To that end if you want to produce me a 2 minute youtube video of any of the following topics, I'll select some to play during the day in order to get attendees heads into that forward looking mode: . What you're up to which has something to do with the Internet (even if it's just a blog to help people find lost cats) . What you need the NZ Internet to provide you (what doesn't it do at the moment that you need it to?) . What you'd be able to provide others if the NZ Internet was just a little different (If it did this, I could save more cats.) . Anything else you think the conference might like to know/hear *** For those keen to stick around for NetHui - being held 8 to 10 July in Wellington - we encourage you to also register for this at http://nethui.eventbrite.co.nz Looking forward to seeing you there. Regards, Dean Pemberton Technical Policy Advisor InternetNZ

1 0

Tender issued for construction of new Trans-Tasman Cable
by Gaurab Raj Upadhaya 14 Jun '13

14 Jun '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I thought this is good development in the context of the discussion on NZNOG a few months ago. http://www.voxy.co.nz/business/tender-issued-construction-new-telecommunica… Excerpt: Thursday, 13 June, 2013 - 09:05 The three telecommunications companies that intend to co-invest in a new submarine cable between New Zealand and Australia have issued a tender for the cable’s construction. Several international submarine cable contractors have been invited to tender for the Tasman Global Access (TGA) Cable and all have indicated strong interest in responding. - -gaurab - -- http://www.gaurab.org.np/ -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.19 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlG7SPUACgkQSo7fU26F3X26HQCfRIrG/QyigTdt1Onfz+e1LLkk 1ogAoJa02TDgQupChaqC9Dm1yHvRdyk+ =r3U0 -----END PGP SIGNATURE-----

1 0

IANA AS Numbers registry update
by Leo Vegoda 11 Jun '13

11 Jun '13

Hi, The IANA AS Numbers registry has been updated to reflect two changes. LACNIC has returned the range 61440-62463 in exchange for a block composed of two non-contiguous ranges: 61440-61951 263168-263679 Both ranges were allocated today. You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers Regards, Leo Vegoda leo.vegoda(a)icann.org ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

1 0

Fwd: [outages] Open Resolver Project
by Joe Abley 11 Jun '13

11 Jun '13

There seem to be a non-trivial number of open resolvers in the few NZ ASes I just checked. It would be good if there was a concerted effort into shutting them down, or otherwise neutering them so that they can't be effective amplifiers for DDoS attacks. This is last decade's open mail relay problem, except with less spam, more packet love. Begin forwarded message: > From: Jared Mauch <jared(a)puck.nether.net> > Subject: [outages] Open Resolver Project > Date: 7 May 2013 10:52:53 EDT > To: "outages(a)outages.org" <outages(a)outages.org> > X-Mailer: Apple Mail (2.1503) > > The Open Resolver Project made a mistake in the automation process of the weekly data import. If you're unaware of what it is, I suggest looking at the website - openresolverproject.org > > If you operate a DNS server, or are a network operator, you should check your IP space for Open Resolvers. These are used in DDoS attacks and pose a significant risk to the global network. > > The website has been restored to operation, but please take a moment and check your IPv4 space. > > If you want a report based on your ASN, please e-mail dns-scan(a)puck.nether.net from a corporate e-mail address or something matching the RIR database entry. > > Thanks, > > - jared > _______________________________________________ > Outages mailing list > Outages(a)outages.org > https://puck.nether.net/mailman/listinfo/outages

14 28

Re: [nznog] [outages] Open Resolver Project
by Pete Mundy 10 Jun '13

10 Jun '13

If you don't like the answers, don't query the server? > On 11/06/2013, at 9:13 PM, Sebastian Castro <sebastian(a)nzrs.net.nz> wrote: > >> Please please avoid to do this at all costs... I've seen those "clever >> tricks" before and they cause more breakage than desired. Specially >> those deploying v6 networks see those tricks as a pain, because A >> records are rewritten but not AAAA records >

1 0

Re: [nznog] [outages] Open Resolver Project
by Pete Mundy 10 Jun '13

10 Jun '13

I can confirm that Mac OS X at least does this (it only queries the resolvers of your highest priority IPv4 interface as defined by the 'Set Service Order' option in the Network section of System Preferences). No beer required for sharing this feedback ;) Pete On 11/06/2013, at 8:41 PM, Nathan Ward <nznog(a)daork.net> wrote: > If you receive (via DHCP) a DNS server over the wireless network, are modern operating systems intelligent enough to only send queries to that DNS server out that interface?

1 0

Re: [nznog] NZNOG Digest, Vol 126, Issue 3
by Rowan Smith 09 Jun '13

09 Jun '13

Speaking from personal experience in Wellington around 2005-2006, I found Unlimited Potential http://up.org.nz/ a great way to meet people that work around the industry and hear what it's really like on the ground and also what hiring managers look for in a candidate. The most important thing I learned from this experience is not to expect any handouts, but take comfort in the fact that most people are very supportive and willing to hear and share ideas. The hard news to take, is that no matter how good you are, you generally have to start somewhere simple and prove yourself for some years. This is definitely true for larger employers, but the more people you talk to the more opportunities you will discover. Feel free to message me off list with any questions, always happy to use my experiences in helping others on a similar path. Rowan Smith Cheers Rowan On 10 June 2013 12:00, <nznog-request(a)list.waikato.ac.nz> wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. Re: Mentoring Groups (Jed Laundry) > 2. Re: Mentoring Groups (Dean Pemberton) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sun, 9 Jun 2013 16:25:29 +1200 > From: Jed Laundry <jlaundry(a)jlaundry.com> > To: Jonathan Robins <jonathan(a)tron.net.nz> > Cc: nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] Mentoring Groups > Message-ID: > <CALYPt1RtG4OttpSUJxbpvVnvLTQ+Mn_JBPJCfP=Lr6yA= > EtYkw(a)mail.gmail.com> > Content-Type: text/plain; charset="iso-8859-1" > > Hey, > > Nothing that I know of; are you volunteering to organise? > > Thanks, > Jed. > > Sent from a small screen. > On 7/06/2013 4:42 PM, "Jonathan Robins" <jonathan(a)tron.net.nz> wrote: > > > Hi, > > > > Would be interested to know if anyone is aware of any mentoring groups > out > > there that are targeted at High School leavers to help guide those that > are > > keen to join the telecommunications industry? > > > > Cheers > > > > Jonathan > > > > ______________________________**_________________ > > NZNOG mailing list > > NZNOG(a)list.waikato.ac.nz > > http://list.waikato.ac.nz/**mailman/listinfo/nznog< > http://list.waikato.ac.nz/mailman/listinfo/nznog> > > >

1 0

Zone and host scanning by NZRS
by Jay Daley 09 Jun '13

09 Jun '13

Hi Sorry no beer here. Once a month we run a scan on the .nz zone to collect some IPv6 stats which are then provided to the IPv6 taskforce. This has been going for a while with no problems reported. We now plan to expand this scanning, partly to provide better stats on the use of DNS, like this above, and partly to help .nz run better. For example by detecting lame delegations and telling our registrars about this. As well as more DNS scanning we are also planning web site home page scanning for a very limited set of data related to .nz. For example finding out how many web sites in .nz use an SSL cert and would benefit from moving to storing details about these in DNS (see the IETF DANE WG for details - http://datatracker.ietf.org/wg/dane/charter/) Before we expand our scanning we've published a draft practice statement that sets out in detail what we are doing, why we are doing it and how we will do it and we want to hear what people have to say about that. We're not aware of anyone else creating and publishing a doc like this so this is very much new ground. The practice statement is here: http://nzrs.net.nz/dns/zone-and-host-scanning and we welcome comments on it. cheers Jay

1 0

Mentoring Groups
by Jonathan Robins 09 Jun '13

09 Jun '13

Hi, Would be interested to know if anyone is aware of any mentoring groups out there that are targeted at High School leavers to help guide those that are keen to join the telecommunications industry? Cheers Jonathan

3 2

Level One GVT-1000 SFP Media Converter in Trendnet TFC-1600 Fibre Chassis
by Alexander Neilson 06 Jun '13

06 Jun '13

I have a Level One GVT-1000 SFP to 1Gbps transceiver that looks like it should fit inside my TrendNET TFC-1600 chassis system http://www.flickr.com/photos/30026567(a)N04/8975140328/in/set-7215763398094… Top is the Level One and bottom is a TrendNET known compatible (but not useful in this situation) media converter. Has anyone got any experience using this hardware together? if so was is compatible / successful? I can use it stand alone if it won't work but I mainly want to avoid blowing it up. It would be a waste to use it stand alone (and a lot messier in the POP) if I can use the perfectly good chassis already waiting there for me. I will test it and come back with results if anyone else would like to know Off list replies are welcomed. Apologies if this breaches the charter. I had a read and felt it was close enough but happy to accept any feedback. Also if somebody knows of a supplier with in country supplies of chassis / standalone TrendNET and Transition Networks media converters (fixed laser and SFP Types) could they please let me know off list. Regards Alexander

3 3

Re: [nznog] Another Brocade question for my favorite mailing list
by McDonald Richards 04 Jun '13

04 Jun '13

CES/CER can handle 1000 LSPs (lsp tunnels) before they stop making new ones. This can be an issue if you're letting your entire Cisco LDP domain pollute them. MLX would be a good order of magnitude larger but I don't have a specific figure. Have tested and used MTUs of 9000+ for VLL with no issues. Have tested and used MTUs of 4000+ for VPLS with some issues although this is the smaller CES platform and there may have been some feature gap in the Ironware version I was using at the time (MLX will have more features around this). QinQ works fine if you do port mode VLLs. Also have tested it working in a "raw" VPLS environment (port mode again). In case that’s not clear, port mode would be where you have all client ports as untagged. Raw mode every time if you ever want to do inter-op. This will set the VC-type to 5 and indicates that the port is transparent – from memory Cisco have this as a default in IOS. Macca From: Sam Russell <sam.h.russell(a)gmail.com<mailto:sam.h.russell(a)gmail.com>> Date: Tuesday, 4 June 2013 12:05 PM To: "nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz>" <nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz>> Subject: [nznog] Another Brocade question for my favorite mailing list Hi, The interop stuff was a resounding success, and the details are at http://pieknywidok.blogspot.co.nz/2013/06/brocade-and-juniper-interop-ospf-… if anyone is interested. I'm now trying to engineer it so we can add Juniper devices while changing as little Brocade config as possible. Can anyone help me with the following questions: - How many LSPs can a Brocade MLX4/MLX8 handle before it falls over? We have a mesh of 15 chassis, and the output of "show mpls memory" looks like this: Mem-Type Alloc BytesAlloc TotalAlloc TotalFree AllocPeak AllocFail FreeFail LSP 28 25760 369 341 28 0 0 Does this mean that it's full? The documentation is sparse, I'm hoping someone else has gone down that rabbit hole and found an answer for me :) - What MTU are people using for VLL/VPLS? - Has anyone got QinQ working with VLL/VPLS on a Brocade? - Does anyone have a preference for raw mode vs tagged mode for VLL and VPLS? Cheers Sam

2 1

Another Brocade question for my favorite mailing list
by Sam Russell 03 Jun '13

03 Jun '13

Hi, The interop stuff was a resounding success, and the details are at http://pieknywidok.blogspot.co.nz/2013/06/brocade-and-juniper-interop-ospf-… if anyone is interested. I'm now trying to engineer it so we can add Juniper devices while changing as little Brocade config as possible. Can anyone help me with the following questions: - How many LSPs can a Brocade MLX4/MLX8 handle before it falls over? We have a mesh of 15 chassis, and the output of "show mpls memory" looks like this: Mem-Type Alloc BytesAlloc TotalAlloc TotalFree AllocPeak AllocFail FreeFail LSP 28 25760 369 341 28 0 0 Does this mean that it's full? The documentation is sparse, I'm hoping someone else has gone down that rabbit hole and found an answer for me :) - What MTU are people using for VLL/VPLS? - Has anyone got QinQ working with VLL/VPLS on a Brocade? - Does anyone have a preference for raw mode vs tagged mode for VLL and VPLS? Cheers Sam

1 0

IANA AS Numbers registry update
by Selina Harrington 30 May '13

30 May '13

The IANA AS Numbers registry has been updated to reflect the allocation of 1 block to ARIN in 2013-05-30: 62464-63487 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml Regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

1 0

Fwd: [wellylug] Next meeting 17th Jun 6pm
by Hugh Davenport 28 May '13

28 May '13

-------- Original Message -------- Subject: [wellylug] Next meeting 17th Jun 6pm Date: 2013-05-23 13:01 From: Hugh Davenport <hugh(a)davenport.net.nz> To: Wellington Linux Users Group <wellylug(a)lists.wellylug.org.nz> Reply-To: Hi All, Thank you heaps for those who came to the social meetup the other week. I caught a few of you there when I finally arrived, and you seemed like a interesting bunch of people. I'm happy to announce that I have scheduled a technical meeting for next month. It will be on Monday 17th of June, at 6pm. The location is Level 3 Catalyst House. The front doors lock at 6pm, so best to come earlier, but there will be a number on the wall to get someone to come let you in. Future meetings will be on the third Monday of every month and will hopefully be pizza and beverages supplied (this one should as well!). I would be interested if anyone would like to present any material, let me know if you would like to. I will send a follow up closer with details of the talks on the night. tl;dr, come to lvl 3 catalyst house 6pm 17th june, email me to speak. Cheers, Hugh

1 0

Juniper and Brocade VPLS interop - any horror stories?
by Sam Russell 26 May '13

26 May '13

We've got a mix of Brocade MLX and Juniper MX chassis on our network and I'm working on getting VPLS standing up between them with LDP signalling (RSVP underneath for the base MPLS). Everything seems okay except for the odd quirk (Brocade can't do OSPF with jumbo frames, Juniper doesn't automatically strip VLAN tags when sending into the VPLS cloud) but otherwise it's standing up. I just wanted to see if anyone else has this sort of setup, and whether there's anything I should be looking for that might trip me up? My logic so far is as long as I don't try and make the Brocades do BGP then I should be safe, is this about right? Thanks in advance Sam

4 4

Global Gateway support details
by Tristram Cheer 24 May '13

24 May '13

Hi All, I'm in need of the GG support number, Google and APNIC Whois is turning up dead numbers. Thanks -- Tristram Cheer Network Architect - Most problems are the result of previous solutions... [cid:image001.jpg(a)01CE594D.F453A780] Tel. 09 438 5472 Ext 803 | Mobile. 022 412 1985 | PO Box 5083, Whangarei, 0140 tristram.cheer(a)ubergroup.co.nz<mailto:tristram.cheer(a)ubergroup.co.nz> |www.ubergroup.co.nz<http://www.ubergroup.co.nz> [cid:image003.png(a)01CE594E.D0F0B480]<http://ubergroup.co.nz/fb> [cid:image005.png(a)01CE594E.D0F0B480] <https://twitter.com/#!/ubergroupltd>

2 1

ISP provided routers
by Mauricio Freitas 23 May '13

23 May '13

So, which ISP is providing Tenda modem/routers to users? >From http://www.geekzone.co.nz/forums.asp?forumid=49&topicid=119152 "I installed a Tenda W150D at a friends place 2 weeks ago and their internet usage jumped from 200-600MB/day to 2-15GB/day." This had default DNS responder, open web administration and telnet visible from the WAN side. Cheers Mauricio Freitas www.geekzone.co.nz<http://www.geekzone.co.nz> www.freitasm.com<http://www.freitasm.com> www.twitter.com/freitasm<http://www.twitter.com/freitasm>

2 2

Vodafone/TelstraClear routes to AU
by Mauricio Freitas 23 May '13

23 May '13

Something is going on again... Pings to cdn.geekzone.co.nz (Sydney) went from 35ms to 165ms now... Any ideas? Cheers Mauricio Freitas www.geekzone.co.nz<http://www.geekzone.co.nz> www.freitasm.com<http://www.freitasm.com> www.twitter.com/freitasm<http://www.twitter.com/freitasm>

3 5

Re: [nznog] Wanganui ADSL
by Gerard Linstrom 22 May '13

22 May '13

Please advise nature of problem & who is affected and where. Will look into it. [cid:image001.jpg(a)01CE57C2.D811A4F0] Gerard Linstrom Industry & Communications Mgr T +64 4 382 5178 (extn 46178) M +64 27 490 9515 F +64 4 471 0013 E Gerard.Linstrom(a)chorus.co.nz Level 8, Datacom House, 68-86 Jervois Quay Wellington Twitter: @chorusvan<http://twitter.com/@chorusvan> www.chorus.co.nz<http://www.chorus.co.nz> Aon Hewitt Best Employer in Australasia 2012 P Please consider the environment before printing this e-mail ________________________________ This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002.

1 0

Wanganui ADSL
by Bart van der Wee 22 May '13

22 May '13

Morning NZNOG peeps, Does anyone have more information about current issues with ADSL in Wanganui? 24 hours+ down for a number of customers and answers from support desks are not very enlightening. Cheers, Bart

1 0

APNIC 36 Fellowships Now Open
by Srinivas Chendi 21 May '13

21 May '13

_______________________________________________________________________ APNIC 36 Fellowships Now Open _______________________________________________________________________ APNIC is committed to supporting Internet growth in developing Asia Pacific economies, and we understand that it may be difficult for our Members and stakeholders from these economies to attend APNIC Conferences. In response, APNIC provides several Fellowship awards to enable people to attend and participate in the APNIC Conference free of charge. Benefits of APNIC Fellowships ----------------------------- - Acquire hands-on experience in key deployments, such as IPv6 transition strategies - Attend all workshops and tutorials at the APNIC 36 Conference - Participate in policy discussions that will affect how your organization accesses Internet number resources - Network and meet with a wide range of Internet industry members from around the world APNIC promotes gender equality and creates opportunities for all. The APNIC Fellowship program encourages women in the Internet industry to participate and contribute during the Conference, including the APNIC Policy Development Process (PDP). For more information about the Fellowship award packages, selection process, and applications, please visit the APNIC 36 website: http://conference.apnic.net/36/fellowship Deadline -------- The deadline for Fellowship applications is Wednesday, 19 June 2013 at 23:59 (UTC +10). ________________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: +61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: +61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net ________________________________________________________________________ * Sent by email to save paper. Print only if necessary.

1 0

APNIC 36 Workshops are announced!
by Srinivas Chendi 16 May '13

16 May '13

_______________________________________________________________________ Registration for APNIC 36 opens in early June! ________________________________________________________________________ Attend the APNIC 36 Workshops and Conference, and be directly involved with Internet growth and development in the Asia Pacific region. http://conference.apnic.net/36 - Learn first-hand about the latest developments in Internet networking trends from the shared insights and practical experiences of regional and international experts http://conference.apnic.net/36/program - Directly contribute to discussions on Internet resource distribution and management policies http://conference.apnic.net/36/policy - Participate in hands-on training sessions and intensive workshops to expand your knowledge and skills for key deployments such as IPv6 - Attend networking events to exchange ideas and expand your contact base Confirmed topics for the Workshop week, 20 to 24 August 2013 ------------------------------------------------------------ These are technical workshops, with a mixture of lecture and hands-on labs. Participants need to have hands-on experience at configuring network equipment such as routers and switches. BGP (Border Gateway Protocol) Participants will learn the OSPF/ISIS and BGP skills required to configure and operate a large-scale network. This course will benefit technical staff who are now building or operating a wide area service provider network with international and/or multi-provider connectivity, or those considering participation at an Internet Exchange Point. Network Security and DNSSEC This workshop covers the key elements of network infrastructure security and DNSSEC. It will benefit network engineers who are responsible for engineering and architecting reliable networks, as well as network operators who are responsible for mitigating attacks or managing DNS infrastructure. This course will benefit staff from ISP, enterprise, or government organizations who are responsible for engineering and operating a secure IPv4/IPv6 network infrastructure. IPv6 Participants will learn the IPv6 skills required to deploy IPv6 on their network infrastructure. The course will benefit technical staff working for ISP, enterprise, academic or government networks, and those who are now building or operating a wide area network with international and/or multi-provider connectivity. Please view the website for more details ----------------------------------------- We are currently negotiating special accommodation rates at the Westin and nearby hotels. Booking forms will be available shortly. http://conference.apnic.net/36/travel Important dates --------------- Sponsorship is now open: http://conference.apnic.net/36/sponsorship Fellowship applications: opens in May http://conference.apnic.net/36/fellowship Call for Papers: opens in June Policy proposals: due 17 July 2013 ________________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: +61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: +61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net ________________________________________________________________________ * Sent by email to save paper. Print only if necessary.

1 0

Correlation between governance and reputation of IP allocations
by Matthew Luckie 15 May '13

15 May '13

http://www.caida.org/research/policy/country-level-ip-reputation/ We recently analyzed the reputation of a country's Internet (IPv4) addresses by examining the number of blacklisted IPv4 addresses that geolocate to a given country. We compared this indicator with two qualitative measures of each country's governance. We hypothesized that countries with more transparent, democratic governmental institutions would harbor a smaller fraction of misbehaving (blacklisted) hosts. The available data confirms this hypothesis. A similar correlation exists between perceived corruption and fraction of blacklisted IP addresses. NZ at the edge of the graph (CPI: very clean) but has a slightly higher fraction of spamming hosts than Australia.

3 2

IPv6 works!
by Sebastian Castro 13 May '13

13 May '13

Hi NZnogers: It's a strange subject, which replicates the conclusion from Cisco while deploying/operating a large wireless IPv6 network for Cisco Live 2013. Slides are here https://ripe66.ripe.net/presentations/113-CiscoLive-IPv6-RIPE.pdf Cheers, -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Service status page, generic
by LRW Longhurst 12 May '13

12 May '13

Hi all, In case I'm going too far off-topic, reply direct to me unless you think it is of value to the list. Also, Beer. I've been asked to set up a "service status" page for some internal services at my place of work. Not being a web developer, it occurs to me to wonder, is there some piece of free/open code I could use as a starting point, or do ISPs/ASPs generally just roll their own? My options at this point are pretty broad, ranging from a mini-blog to something more automated, perhaps using Nagios as an input. Lesley Longhurst Geek from way back

4 3

Blip on NZ Internet
by Mauricio Freitas 09 May '13

09 May '13

So what happened at 10:10am 10th May? Geekzone servers at Datacom Orbit were unreachable from overseas while Snap, Vodafone services were up/down for a couple of minutes. Ideas? Cheers Mauricio Freitas www.geekzone.co.nz<http://www.geekzone.co.nz> www.freitasm.com<http://www.freitasm.com> www.twitter.com/freitasm<http://www.twitter.com/freitasm>

6 6

Re: [nznog] TICS bill passing under urgency
by Dean Pemberton 09 May '13

09 May '13

Hi Everyone. Great to see that there is a growing awareness of this bill on the list. It's certainly drawn a range of critical responses. InternetNZ is in the process of establishing a working group to deal with it in some detail, to establish an InternetNZ position and to have a response ready on what promises to be quite a tight legislative timetable. You're all welcome to attend an initial meeting which will be held late next week, either Thursday or Friday. I'd ask those who are interested in direct participation and available for such a meeting to give me a heads-up. I'll get back later today or Monday with details. Regards, Dean > > Hi list(s) > > The Government is pushing through this amended bill under urgency - along > with the GCSB Amendment bill. > > I've only had a quick read but it already made me feel pretty angry. > Instead of just bitching about it on IRC and twitter and at bus stops to > confused elderly people, I thought I'd try and do something - and I had a > chance to speak with Clare Curran (Labour MP) recently about it. > She suggested she would support fighting / commenting against this bill, > with help and advice. >

1 0

TICS bill passing under urgency
by Mike Forbes 09 May '13

09 May '13

Hi list(s) The Government is pushing through this amended bill under urgency - along with the GCSB Amendment bill. I've only had a quick read but it already made me feel pretty angry. Instead of just bitching about it on IRC and twitter and at bus stops to confused elderly people, I thought I'd try and do something - and I had a chance to speak with Clare Curran (Labour MP) recently about it. She suggested she would support fighting / commenting against this bill, with help and advice. The problem is most people voting for it have no idea what it means or is for. We (you - Network Operators and IT Professionals, hi!) need to advise and talk and share information about what these changes really mean - and if they're good. The Tech Liberty NZ website has some good reading and a bit of a summary on the TICS Bill - http://techliberty.org.nz/govt-proposes-gcsb-control-over-nz-communications… and the scoop links to the full bills are here: http://img.scoop.co.nz/media/pdfs/1305/Telecommunications_InterceptionCapab… http://img.scoop.co.nz/media/pdfs/1305/wstGovernment_Communications_Securit… TL;DR: The new TICS bill has some changes that could impact the way you do networking in New Zealand - and if you care you should say something. Beers, -- // Mike

4 4

SDN users group
by Josh Bailey 08 May '13

08 May '13

Hi all; I'm thinking of starting an SDN users group in Wellington (meeting approx once a month). To save time, especially the time of those that have no interest, there would be a modest entry requirement - members would have to demonstrate a working SDN device to participate. If you assert that it's not possible so sorry to trouble you - you won't hear from me again. :-) If you would be interested in such a group please send me mail directly - we are fortunate to have a number of research activities ongoing in NZ and I invite your participation. Thanks,

5 5

FYI : ANZIA - Australia & New Zealand Internet Awards
by Elly Tawhai 08 May '13

08 May '13

Hi NZNOG Community, Entries are now open for the 2013 Australia and New Zealand Internet (ANZIA) Awards. If you would like to make a nomination on behalf of your organization, or another in Australia or New Zealand, please submit by 28 June 2013. The categories for the 2013 ANZIAs are: - Security and Privacy - Internet Access & Digital Skills - Information - Diversity - Innovation ANZIA winners receive recognition for setting new standards in making the Internet a more inclusive, accessible, and safe place. The Awards also offer winners public and industry exposure, positive media coverage, networking opportunities, and recognition of the hard work undertaken by staff or volunteers. Eligible winners are awarded AUD 2500. For more information about ANZIA 2013, please visit: http://www.internetawards.org.au Kind regards, Elly APNIC

1 0

12 minute blips?
by Simon Lyall 07 May '13

07 May '13

Anyone else seeing a drop in traffic every 12 minutes today? I'm seeing it on domestic hits going in to both my POPs. The Pop that is datacom->Orcon is seeing it a worse than the Telstraclear connected one. Really shows up when I look at 60.234.0.0/16 (Orcon) which goes almost to zero for a minute or two. -- Simon Lyall | Very Busy | Web: http://www.simonlyall.com/ "To stay awake all night adds a day to your life" - Stilgar | eMT.

3 3

Underwater exchange
by Kyle Carter 07 May '13

07 May '13

I'm getting farmed off by a support desk for some connection issues into the Orcon datacentre. They claim there's a telecom exchange underwater up that way and that's why they are having issues. Sounds very fishy as I'm not aware of any other issues. They can't provide details. Sent from my iPhone

4 3

APE issues 6th May 2013
by Sid Jones 07 May '13

07 May '13

Citylink are aware that there are issues on the APE this morning. We're currently working with our vendor to resolve the issue. I'll update when I have more.

2 1

Fwd: [AusNOG] AusNOG 2013 Call For Presentations
by Mark Prior 06 May '13

06 May '13

Hopefully some of you are interested in presenting at AusNOG in September. Mark. Sent from my iPhone Begin forwarded message: > From: Gavin Tweedie <gav(a)narx.net> > Date: 7 May 2013 12:02:54 AM GMT+03:00 > To: ausnog(a)lists.ausnog.net > Subject: [AusNOG] AusNOG 2013 Call For Presentations > > Call for presentations for AusNOG 2013 > =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- > > Swissotel > **Sydney** > 5 & 6 September, 2013 > > Notes > =-=-=- > > AusNOG 2013 is being held in Sydney after a successful event in Melbourne last year. We hope some of our new attendees from last year are able to follow us back to Sydney this year! > > Topics > =-=-=-= > > Internet operations can be a broad topic and the presentation selection > committee will be short-listing presentations in the following focus areas: > > * Improving the redundancy/resiliency/sustainability of your network > * Making leaps in service or network availability > * Taking the network operations BCP to the next level > * Using 'offline' communications tools to keep the network working > * How technology is changing network architectures > * Evolution in network architectures and scaling issues > * Analysis of relevant major operational events of the year > > Other topics which are of interest to the network operator community are also welcome at AusNOG 2013. Naturally, presentations of a marketing nature are not welcome at this technical event. > > Notes to presenters > =-=-=-=-=-=-=-=-=-= > > Preference will be given to presentations that result in actual operational outcomes. > > Session speakers should be prepared to present for 30 minutes. Keynote > speakers will be expected to present for 45 minutes to 1 hour. Short > presentations of strong operational content are also acceptable. > > Once the final slides are submitted, changes will only be permitted where the presentation requires the most up to date information or data. > > By submitting a presentation for consideration in the AusNOG 2013 programme, and if selected the presenter will allow AusNOG to: > > * Take photographs of the presentation and presenter. > * Record and rebroadcast video and audio of the presentation > and presenter. > * Redistribute, the presentation slides, audio, video, and photographs > electronically, on the AusNOG website, or otherwise but leaving > all intellectual property in the hands of presenter or rightful > property holder where possible[1]. > > Deadlines > =-=-=-=-=- > > 10 June: Submission of presentation title, presentation description > (300 words), and presenter biography (200-400 words) > > 01 July: Presenters notified of their acceptance status as an > AusNOG 2013 presentation. > > 28 August: Submission of final presentation slides as Portable Document > Format (pdf), PowerPoint, or Keynote. Provision of a > recent digital photograph (<500k) of the presenter. > > All submissions must be sent to organisers at ausnog.net. > > A separate call for lightning talks will be made closer to the AusNOG 2013 event. > > [1]: AusNOG accepts that some speakers are unable to allow us to archive their presentation due to company or corporate policy, and if the situation arises AusNOG will delete all copies in its possession after the presentation. > > Gavin > For the AusNOG Board > _______________________________________________ > AusNOG mailing list > AusNOG(a)lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog

1 0

Hazard Notification - ntp3.ntp.net.nz unreachable due to power shut down
by Sebastian Castro 01 May '13

01 May '13

To the NZNOG Community: NZRS would like to inform that ntp3.ntp.net.nz will be unreachable from Friday May 3rd at 4:00pm until Monday May 6th at 8:00am due to power work being carried out in the building where it's located. Although backup power is available for the computer room, the planned work exceeds the generator's autonomous runtime, so we've decided to shut the power down for the duration of the event. ntp1.ntp.net.nz and ntp2.net.ntp.nz will continue to work as usual. We apologize in advance for any inconvenience this may cause. Kind Regards, -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

4 3

Mumbai: Carrier Neutral Datacentres
by Bill Walker 26 Apr '13

26 Apr '13

Hi All, We are looking to put a rack's worth of tin in Mumbai and are looking for a well connected carrier Neutral DC to put it in. We haven't had much luck so far, our local vendor contacts pointed us at TATA and Sify. Anyone got any ideas? Thanks, Bill

4 3

Fwd: [wellylug] WellyLUG Social Meetup
by Hugh Davenport 25 Apr '13

25 Apr '13

Sorry for the cross posting. See below for details of the first WellyLUG meeting in a while... 15 year anniversary as well -------- Original Message -------- Subject: [wellylug] WellyLUG Social Meetup Date: 2013-04-26 11:35 From: Hugh Davenport <hugh(a)davenport.net.nz> To: Wellington Linux Users Group <wellylug(a)lists.wellylug.org.nz> Reply-To: Wellington Linux Users Group <wellylug(a)lists.wellylug.org.nz> Hi All, I'm organising a social meetup for WellyLUG, with a meeting planned for the month after. As the first ever WellyLUG meeting was on 13th of May 15 years ago [1], I suggest having the meeting then. Unfortunately I won't be available then (I'll be pretending to be harry potter wearing a gown with some pansy colours...), but can join later in said gown. If you all gather around a popular beer bar called LBQ [2] any time after 5pm. They have excellent food [3], and many drinks. I shall aim to join at ... some point later ... but I'm sure you can make social niceties by yourselves. Make this meeting a good one, as it is the 15th Anniversary of the start of WellyLUG!!! Cheers, Hugh [1] https://groups.google.com/d/topic/nz.reg.wellington.general/b2rvWgTSBCU/dis… [2] http://littlebeerquarter.co.nz/

1 0

Sydney data centre
by Gerard Creamer 25 Apr '13

25 Apr '13

Hi there, We're looking for a rack of space in Sydney. Preferably carrier neutral. With actual useful smart hands. They all sound awesome from their web pages. They all have 100% uptime and are mega helpful. Interestingly, they are all better than each other. I'd really appreciate some quick pointers from local companies who have taken space in Sydney about who is actually useful and who actually has good power. Thanks, Gerard

2 1

Fwd: [wellylug] WellyLUG Social Meetup
by Hugh Davenport 25 Apr '13

25 Apr '13

Sorry for the cross posting. See below for details of the first WellyLUG meeting in a while... 15 year anniversary as well -------- Original Message -------- Subject: [wellylug] WellyLUG Social Meetup Date: 2013-04-26 11:35 From: Hugh Davenport <hugh(a)davenport.net.nz> To: Wellington Linux Users Group <wellylug(a)lists.wellylug.org.nz> Reply-To: Wellington Linux Users Group <wellylug(a)lists.wellylug.org.nz> Hi All, I'm organising a social meetup for WellyLUG, with a meeting planned for the month after. As the first ever WellyLUG meeting was on 13th of May 15 years ago [1], I suggest having the meeting then. Unfortunately I won't be available then (I'll be pretending to be harry potter wearing a gown with some pansy colours...), but can join later in said gown. If you all gather around a popular beer bar called LBQ [2] any time after 5pm. They have excellent food [3], and many drinks. I shall aim to join at ... some point later ... but I'm sure you can make social niceties by yourselves. Make this meeting a good one, as it is the 15th Anniversary of the start of WellyLUG!!! Cheers, Hugh [1] https://groups.google.com/d/topic/nz.reg.wellington.general/b2rvWgTSBCU/dis… [2] http://littlebeerquarter.co.nz/

1 0

Office 365 Hong Kong issue?
by Daniel Siva 23 Apr '13

23 Apr '13

Hi all, Is anyone noticing issues connecting to mailboxes at their Hong Kong DC? We have users spread between Singapore & Hong Kong, most of the users on hkxprd0310.outlook.com cannot connect. We have been on hold to M$ for awhile now, & would just like to know if anyone else has any feedback... Cheers! - Daniel

5 4

New prefix at APE, WIX and CHIX: 202.12.3.0/24
by Michael Fincham 22 Apr '13

22 Apr '13

Hi everyone, (cross-posted to NZNOG since nzix-route-announce still seems pretty much dead...) We intend to begin announcing the prefix 202.12.3.0/24 to the APE, WIX and CHIX in approximately 2 weeks. This prefix will be originated from AS132255 (our customer Primo Wireless). This will bring our total set of (le 24) announced IPv4 prefixes to: 114.23.96.0/22 originated from AS38477 113.130.120.0/22 originated from AS38294 path: 38477 38294 116.90.128.0/20 originated from AS38477 202.6.116.0/23 originated from AS38477 192.138.251.0/24 originated from AS38590 path: 38477 38590 182.50.160.0/22 originated from AS45641 path: 38477 45641 116.90.135.0/24 originated from AS45641 path: 38477 45641 202.37.124.0/23 originated from AS38477 131.203.133.0/24 originated from AS56102 path: 38477 56102 131.203.134.0/23 originated from AS56102 path: 38477 56102 202.44.60.0/22 originated from AS56214 path: 38477 56214 202.50.102.0/24 originated from AS38477 103.11.124.0/22 originated from AS38477 103.246.250.0/24 originated from AS38477 122.102.108.0/23 originated from AS38477 103.8.232.0/22 originated from AS132255 path: 38477 132255 202.12.3.0/24 originated from AS132255 path: 38477 132255 103.247.56.0/24 originated from AS38477 103.245.172.0/22 originated from AS38477 Thanks, -- -Michael Fincham System Administrator, Unleash www.unleash.co.nz Phone: 0800 750 250

1 0

Brief downtime on Wellington route-servers Sunday 21/4/2103
by Sid Jones 19 Apr '13

19 Apr '13

We're upgrading the software on the hosting platform and there will likely be one brief outage to each route-server as we perform the upgrade then restart. Window for the changes is expected to be between 9pm and 11pm.

1 0

Chorus B2B for transferring a SME phone line
by Barry Murphy 15 Apr '13

15 Apr '13

Hey guys, Sorry if this is off topic but I'm pulling my hair out which chorus B2B system and chorus don't even know what the cause is. I'm sure there may be someone on this list that has implemented the chorus B2B system to transfer phone lines from one provider to another, if so please contact me off-list. Every time I send the request to transfer an SME phone line, I get the following error even though I have provided the details: At least one row of Individual Line Reassignment details required pstnIsdnDetails/individualLineDetails If anyone has an example of the data required to be sent it would be much appreciated. Many thanks Barry Murphy

1 0

Help locating water monitoring contact
by Travis Baird 15 Apr '13

15 Apr '13

Hi all, Apologies for the irrelevant post but I am trying to locate someone I spoke to at NZNOG 2013 who was working with water monitoring over IP for irrigation systems. I think they were based in the lower north island somewhere. If anyone has any contact information can they please pass it on, or if you're the person I spoke to please contact me off list. Regards Travis

1 0

Office 365 DNS changes
by Lloyd Parkes 09 Apr '13

09 Apr '13

Hi all, This is just a heads up. Microsoft's DNS server[1] handling the mail.eo.outlook.com domain was updated a few days ago to reject DNS requests coming from privileged ports. Apparently this is an effort to encourage folks on the internet to use source port randomisation for their DNS requests. If, for some reason, you are not able to use an unprivileged source port for your DNS requests, then you will not be able to send email to any person or company using Microsoft's Office 365 email system. A workaround is to hand off your DNS resolution to Google's DNS recursive resolvers at 8.8.8.8. Cheers, Lloyd [1] Yes, that's "server" in the singular. They have two NS records with two names, but only one IP address. It might be a cluster of servers using one IP address but it looks different from the rest of Microsoft's DNS infrastructure, so I wouldn't bet on it.

2 1

IANA AS Numbers registry update
by Selina Harrington 09 Apr '13

09 Apr '13

The IANA AS Numbers registry has been updated to reflect the allocation of 1 block to LACNIC in 2013-04-08: 61440-62463 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml Regards, Selina Harrington IANA Request Specialist ICANN

1 0

Re: [nznog] notable events
by Andy Linton 08 Apr '13

08 Apr '13

On Sat, Apr 6, 2013 at 11:18 PM, Richard Naylor <richard.naylor(a)r2.co.nz> wrote: > 22 May is the 40th for Ethernet - when Robert Metcalf wrote his memo > outlining ethernet to his Boss. This memo shows that we may be a little premature (see date of 5 March 1974) and said boss didn't think much of the idea! They were working on this in 1973 but the patent wasn't file until 1975.

2 1

Is content getting "closer"?
by Jed Laundry 07 Apr '13

07 Apr '13

Hey, The AWS Sydney region has been available for 5 months now and, since it became available, the chatter about the importance of another wet string for competitive reasons has gone (mostly) quiet. Are these events correlated? Is content getting closer (and by that I mean avg(rtt) over a large sample of connections)? Has anyone done an internal study of their transit? Does WAND have a dataset they're analysing? Thanks, Jed.

1 0

NZNOG Trustees: Act on NZNOG Website
by Jonathan Brewer 07 Apr '13

07 Apr '13

Hi All, Two months ago we had a conference in Wellington. Since then the website has still not been updated to reflect the programme on the day. Previous conference websites have disappeared from the Internet. I understand the trustees have funds at their disposal, and I call on them to take one of the following actions: 1.) Hire someone to sort out the site 2.) Find someone who will do it for free 3.) (or) step down and appoint someone who cares Sorry guys, I like you as people, but your performance here has been abysmal. Fix it please. If you don't want to do anything, I put my hand up for taking over a trustee seat. -JB

18 19

Re: [nznog] notable events
by Michael NEWBERY 07 Apr '13

07 Apr '13

On 8/04/13 12:55 PM, "Don Stokes" <don(a)daedalus.co.nz> wrote: >Definitely. > >Ethernet in particular, but cellphones too, have changed beyond all >recognition. Bob Metcalfe's Ethernet ran at 3 Mbps, over a single thick >co-axial cable, with shared access via CSMA/CD, Carrier Sense, Multiple >Access with Collision Detection, with Manchester encoding to run the >same bits per second as the fundamental frequency. > >From memory, it's actually HALF the fundamental frequency. I.e., 3Mbps required 6MHz. That's because bits are signaled by transitions. The advantage is that it's self clocking. -- Michael Newbery IP Architect IT&P: Architecture Vodafone New Zealand Ltd. ----------------------------------------------------------------------------------------------- Unless otherwise stated, any views or opinions expressed are solely those of the author and do not represent those of Vodafone New Zealand Limited.

2 1

[::] APNIC IPv6 Workshop AUCKLAND, NEW ZEALAND 6-8 MAY 2013
by Elly Tawhai 07 Apr '13

07 Apr '13

Hi NZNOG Community, APNIC is pleased to announce that we will be conducting the following training course in AUCKLAND, NEW ZEALAND. Course: IPv6 Workshop (3 days) Dates: MAY 6 - 8, 2013 Venue: Level 3, 110 Symonds Street CallPlus Business Centre Auckland CBD, New Zealand For registration and course information, please go to: http://training.apnic.net/events/2013/workshop-ipv6-6may13 If you have any queries please contact <training(a)apnic.net> ------------------------------------------------------------------------ APNIC Training training(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: +61-7-3858-3100 PO Box 3646 Fax: +61-7-3858-3199 6 Cordelia Street, South Brisbane, QLD 4101 Australia http://www.apnic.net/training ------------------------------------------------------------------------

1 0

notable events
by Richard Naylor 07 Apr '13

07 Apr '13

According to some media the cell phone turns 40 this month. EE Times has some articles on it or Google Marty Cooper. 22 May is the 40th for Ethernet - when Robert Metcalf wrote his memo outlining ethernet to his Boss. Both sound like good reasons for more beer.

2 1

public consultation on root zone KSK rollover
by Joe Abley 03 Apr '13

03 Apr '13

Hi all, As advised a month or so ago, the following public comment period is open: http://www.icann.org/en/news/public-comment/root-zone-consultation-08mar13-… We have received a small number of responses which are accessible from that page. The topic at hand and the specific questions that have been asked as part of the consultation are important ones; the decisions taken will have operational consequences to any user of the Internet who validates DNS responses with DNSSEC. If you have experience, opinions or expertise to contribute, it would be greatly appreciated. The window for being able to submit comments closes on 12 April 2013 at 23:59 UTC. Many thanks, Joe

1 0

Re: [nznog] NZNOG Digest, Vol 124, Issue 2
by Alan Maher 01 Apr '13

01 Apr '13

I also observe AusNOG, where there is a considerable amount of discussion (sometimes superfluous) and a great reporting system for network outages and so on. And now they have a page for the sale of surplus equipment. Along with some great direct recruitment stuff, that probably never makes the*popular press*. Surely this is a measure of an active community of interest. Activity levels on NZNOG have been somewhat muted in recent times. Does this imply that everything is fine and dandy, and the pills are working quite well, thank you? I will open an alternative discussion to try and break the ice-jam. Can anyone give me some best experience on a cost effective/IPV6 capable consumer router, aside from a Fritz box? Are the PACE boxes from Telecom/Chorus any good? Do they do IPV6? They seem to do almost anything, judging by their tech spin. ADSL/VDSL/Fibre etc. Lets get some debate going people. Alan Maher On 2/04/2013 12:00 p.m., nznog-request(a)list.waikato.ac.nz wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. NZNOG Trustees: Act on NZNOG Website (Jonathan Brewer) > 2. Re: NZNOG Trustees: Act on NZNOG Website (jamie baddeley) > 3. Re: NZNOG Trustees: Act on NZNOG Website (Andy Linton) > 4. Re: NZNOG Trustees: Act on NZNOG Website (Stephen Sheehan) > 5. Re: NZNOG Trustees: Act on NZNOG Website (Daniel Richards) > 6. Re: NZNOG Trustees: Act on NZNOG Website (Juha Saarinen) > 7. Re: NZNOG Trustees: Act on NZNOG Website (Peter Mott) > 8. Re: NZNOG Trustees: Act on NZNOG Website (Ian Batterbee) > 9. Re: NZNOG Trustees: Act on NZNOG Website (Tim Hoffman) > 10. Re: NZNOG Trustees: Act on NZNOG Website (Tim Price) > 11. Re: NZNOG Trustees: Act on NZNOG Website (Jay Daley) > 12. Re: NZNOG Trustees: Act on NZNOG Website (Michael Fincham) > 13. Re: NZNOG Trustees: Act on NZNOG Website (Joe Abley) > 14. Re: NZNOG Trustees: Act on NZNOG Website (Sam Sargeant) > 15. Re: NZNOG Trustees: Act on NZNOG Website (Richard Naylor) > 16. Re: NZNOG Trustees: Act on NZNOG Website (Joel Wir?mu Pauling) > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog

2 1

route servers
by Blair Harrison 01 Apr '13

01 Apr '13

Hello List In order to create some discussion (as Andy seems to think there isn't any) .. I note that using regexp ^ as an option on the ape/wix/chix/hix route servers looking glass no longer gives a full list of routes.. it seems somewhat truncated. At some point in the past it gave a full list, but perhaps now the number of routes has exceeded the limit set on the software? It would be appreciated if this could be adjusted so that I (and anyone else who might be interested) might continue my academic musings on the state of the routing table :) Cheers, Blair

2 1

NZNOG 2013 live stream
by Kris Price 31 Mar '13

31 Mar '13

Is there going to be a live stream of the conference somewhere? I couldn't find mention of one on the website. Thanks Kris

10 11

Alcatel-Lucent cable ship in port
by Kris Price 26 Mar '13

26 Mar '13

I noticed there was an Alcatel-Lucent cable ship in Wellington. Anyone got a clue on what this might be related to? Some new cable being laid in NZ waters or is it just stopping by? Cheers Kris

2 1

iconz ipv6?
by Blair Harrison 24 Mar '13

24 Mar '13

Hi guys, Anyone else having issues getting to ICONZ's IPV6 nameservers? Blair:~ blair$ dig iconz.co.nz @2405:6000:2:1::1 ; <<>> DiG 9.8.3-P1 <<>> iconz.co.nz @2405:6000:2:1::1 ;; global options: +cmd ;; connection timed out; no servers could be reached Blair:~ blair$ dig iconz.co.nz @2405:6000:2:2::1 ; <<>> DiG 9.8.3-P1 <<>> iconz.co.nz @2405:6000:2:2::1 ;; global options: +cmd ;; connection timed out; no servers could be reached --- 2405:6000:2:1::1 ping6 statistics --- 5 packets transmitted, 0 packets received, 100.0% packet loss ICONZ - if you're publishing ipv6 glue, you might want to make sure it works... Also, the glue you're publishing seems to be different to your AAAA records for ns1/ns2 ?? ...... ns_name_01: ns1.iconz.co.nz ns_ip6_01: 2405:6000:2:3::1 ns_name_02: ns2.iconz.co.nz ns_ip6_02: 2405:6000:2:2::2 Might want to fix that.. or at the very least revoke your ipv6 glue, if you aren't going to make your ipv6 work properly? Cheers, Blair

2 1

The Internet research botnet
by Juha Saarinen 24 Mar '13

24 Mar '13

A friend sent a link this morning to what appeared to be the usual dry research stuff but as the coffee kicked in, my jaw dropped. Here's the story I wrote: http://www.itnews.com.au/News/337259,researcher-builds-enormous-global-botn… There was an earlier mass-compromise of DSL routers in Brazil: http://www.itnews.com.au/News/317529,millions-of-dsl-modems-hacked-in-brazi… Would I be right in assuming that the vulnerable devices situation is similar in NZ and Australia? Hei konā mai, -- Juha Saarinen AITTP Twitter: juhasaarinen http://juha.saarinen.org

7 7

Videos from NZNOG 2013
by Richard Naylor 19 Mar '13

19 Mar '13

Videos from NZNOG 2013 are now available at http://www.r2.co.nz/20130124/ early viewers will find a slow response time while the videos load into the CDN. Our uplink capacity is currently maxed out with other users. Once loaded the files will play fine from the CDN. The videos can also be downloaded. As there was no printed programme that listed all speakers correctly, we've had to guess on some names and titles. Please think of this as a crowd sourcing task and advise me of any corrections. We may also be missing a speaker as there doesn't seem to be a complete list. If you want a file REALLY badly, try a download with a twist. Get the URL from the web page and change it to use www.r2.co.nz instead of 2012.r2.co.nz, which is the CDN. The origin server is peered on WIX and should perform well locally. The reason for using an international CDN is that even NZNOG gets more viewers from outside NZ than inside NZ., which is why we are always working on getting better quality in presentations. You folks are famous internationally. Rich

1 0

Can anyone recommend a DNS registrar?
by Lloyd Parkes 17 Mar '13

17 Mar '13

Hi all, With Swizzlestick closing down I need to find a new DNS registrar, and my shortlist from http://dnc.org.nz//story/authorised-registrars is still pretty long. I require IPv6 glue and a self service web interface, but I don't need any hosting. I have an irrationally strong desire to deal with a NZ based company and I don't want to deal with a company that only seems to know how to sell xDSL. That latter point is the one I need the most help with. If keeping the DNS running isn't operational enough for the list charter, then "beer". Cheers, Lloyd

5 4

Beer
by Jamie Baddeley 14 Mar '13

14 Mar '13

Citylink is hiring! http://www.citylink.co.nz/network-engineer Would appreciate it if you folks could pass this on to anyone who might be interested.. We've an open mind on the kind of person. Could be 5yrs+ experience, could be fresh out of varsity etc. Do want someone from (or aspires to be from) the design end of engineering rather than operations end of engineering…MPLS experience nice to have, SDN/Openflow interest nice to have… There's some cool developments going on. Maybe you or someone you know could be a part of that. cheers jamie

1 0

Completely non-operational but Obi Wan you're my only hope.
by Geraint Jones 13 Mar '13

13 Mar '13

Like I say completely non-operational. We are in desperate need of some licensing for an old Nortel Contivity 17x0. If anyone out there maybe has a set of keys for one they have retired we would like to hear from you, or maybe you know someone in the IT salvage world who may be able to help. Any ideas would be most welcome. We have pots of gold on offer or beer (now its operational) Thanks for your time!

1 0

WellyLUG rekindling
by Hugh Davenport 12 Mar '13

12 Mar '13

Hey, Some of you may know me, and some may not. My name is Hugh, I used to work at Catalyst IT, and have recently moved to Aura RedEye Security as the development manager. I have a big interest in the open source world, and have been meaning on getting WellyLUG set up again for a while now... WellyLUG is/was the Wellington Linux Users Group, which ran monthly, but hasn't happened in a while. This email is just to get a sense of who would be interested in starting up meetings again, and what days suit everyone. Also, if you can help sponsor a room/beer/pizza etc, that would be good as well, though I may be able to get that covered on my front. So, if you are keen, reply :D Cheers, Hugh original message at http://lists.wellylug.org.nz/pipermail/wellylug/2013-March/020972.html

1 0

ntp.net.nz update
by Jay Daley 10 Mar '13

10 Mar '13

Hi A brief update on the status of our public NTP service. For those of you unaware of this service then details are at http://ntp.net.net - We have new firmware on the boxes that fixes previous IPv6 issues so ntp1.ntp.net.nz and ntp3 are now properly accessible over IPv6. ntp2 has a provider IPv6 issue that is still waiting to be fixed. - We believe this firmware also fixes the autokey issues but we are still testing that before enabling it. - Currently each server independently takes its reference time from differential GPS, which is very slightly different from official NZ time. We spoken to the people from IRL responsible for official NZ time and we have agreed a long term plan that will see the differences between GPS and NZ time sent directly to our servers from the IRL atomic clocks, which will condition our servers very close to official NZ time. - We're considering adding one more server to the network, definitely not a Symmetricom this time. We've spoken to Tekron International, a Lower Hutt company who make GPS timing kit about possibly using one of their products but are still researching alternatives. We hardly ever get any feedback on this service and so assume it is working fine, but now's your chance to tell us what you think or if there is anything more we could be doing to make this service more beneficial. cheers Jay -- Jay Daley Chief Executive .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 931 6977 mobile: +64 21 678840 linkedin: www.linkedin.com/in/jaydaley

4 5

NZ ISP level rate limiting to Office365
by Blair Robson 10 Mar '13

10 Mar '13

Hiyas, I'm not sure if this is the right place to ask...but I want to know if ISPs are setting any rules around upload traffic to office365? At the moment I'm just looking for a route....any route that is going to give me more than 60k up... (the most common is 40k...) Tried Orcon, Vodafone, HD and getting either 40k rated or 60k rated upload speed to Office 365. If this is the wrong place, can anyone suggest somewhere more appropriate? (already talking to Microsoft) Thanks Blair Robson I Engineer I Maclean Ph: 09 950 2592 Fx: 09 369 1560 Wb: maclean.co.nz<http://www.maclean.co.nz/> Level 2, 25 Union St, Auckland 1010 PO Box 90 400, Victoria St West, Auckland 1142 [cid:image001.gif(a)01CE1BE5.C23447F0] [cid:image002.png(a)01CE1BE5.C23447F0]<http://www.linkedin.com/companies/maclean-computing?trk=copro_tab> Attention: This email message and/or attachment may contain information that is confidential and subject to privilege. If you are not the intended recipient, you are notified that any use, dissemination, distribution or copying of this message or data is prohibited. If you have received this in error, please contact the sender, delete the material from any system and destroy any copies. This e-mail message has been scanned for Viruses and Content and cleared by NetIQ MailMarshal ______________________________________________________________________ This email has been scanned by the Maclean Email & Web Security Service ______________________________________________________________________

4 3

public consultation on root zone KSK rollover
by Joe Abley 08 Mar '13

08 Mar '13

Hi all, The following ICANN public comment period opened today: http://www.icann.org/en/news/public-comment/root-zone-consultation-08mar13-… The questions relate to DNSSEC rollover in the root zone, and hence are relevant to anybody doing DNSSEC validation. Your responses to the questions presented above would be most welcome. Please feel very free to pass on the link to anybody you think might be interested in this topic. Joe

1 0

PCAP of APE issues last night?
by Tim Hoffman 06 Mar '13

06 Mar '13

Greetings all, Following last night's issues on the APE, Dylan and I were wondering wondering if any APE participants managed to take a pcap of the traffic they were seeing on their interfaces facing the exchange. If any of you did and are willing to share this would be incredibly useful to us - drop us a message off-list. Many thanks, Tim

1 0

Re: [nznog] [AusNOG] IPv4 - Where is the training?
by Elly Tawhai 05 Mar '13

05 Mar '13

Hi Don, There is not currently any APNIC IPv6 training scheduled for Christchurch. However we will be conducting an IPv6 Workshop in Auckland, which will be held on 6 - 8 May. For more information and registration please visit: http://training.apnic.net/events/2013/workshop-ipv6-6may13 If you have any queries please contact <training(a)apnic.net> (apologies for cross list posting thought this maybe of interest to those on NZNOG list) Kind regards, Elly APNIC Don Gould wrote: > On 5/03/2013 4:23 p.m., jason andrade wrote: >> From: Elly Tawhai <elly(a)apnic.net> >> To: "ausnog(a)ausnog.net" <ausnog(a)ausnog.net> >> Subject: [AusNOG] [::] APNIC IPv6 Workshop BRISBANE, AUSTRALIA 13-15 >> Mar 2013 >> > Thanks. Sorry, I missed seeing a post about APNIC running the some > training in Christchurch? > > Have they been running this sort of training in all the smaller centres > like Christchurch, around the region? > > D >

2 2

IPv6 peering at APE
by Sid Jones 05 Mar '13

05 Mar '13

There is quite a significant disparity between the number of active peers on the two APE IPv6 route servers. [ You can see this at http://nzix.net/cgi-bin/lg.cgi ] e.g. There are 68 IPv6 peers configured on both the route servers. I see 44 established IPv6 peering sessions on rs1.ape.nzix.net, yet only 24 sessions on rs2.ape.nzix.net. If we can assist in anyway to get more of these sessions established please let us know.

1 1

Best local presentation at NZNOG2013
by Gerard Creamer 04 Mar '13

04 Mar '13

Hi all, Thanks to everyone who came to NZNOG last week, it was great to have you all there. And thanks to all of you who helped out, and especially to all of our sponsors. This year we added an incentive to local presenters - the best local presentation would win travel and accommodation to APRICOT in Singapore and a complementary registration. The paper would be submitted to the APRICOT programme comittee and the winner might get to present at the event. There was quite a lot of discussion about who should win, and we have selected Donald Love's presentation on UFB Realities as the best local presentation at NZNOG 2013 for it's combination of technically interesting content and 'good honest truth' delivery. Congratulations to Donald and a big thank you to all of our local presenters for the interesting and engaging presentations. If you have something technically interesting worth sharing start planning your submission for NZNOG 2014 now :^) NZNOG 2014 will be held January 27-31 2014 in Nelson, New Zealand, and a Call for Papers will be issued to this list later in the year. Cheers, Gerard

6 6

Re: [nznog] [AusNOG] IPv4 - Where is the training?
by Don Gould 04 Mar '13

04 Mar '13

Karl, If we can have 50 posts about 23 IP phones on list, then I'm sure some discussion about IPv6 training can be endured even if there are parties with a commercial interest. I am interested and I wonder how many more folk in my area would also be interested (Christchurch) hence why I've copied the NZNOG in as well. What the discussion over the past few days has highlighted for me is I clearly don't know enough and if the messages in my inbox are anything to go by, then there must be others in the same boat. I'd like to understand what the training I need might cost me. How much people think I need to invest in myself to get myself on track. I'd be interested to hear from others, on or off list who might also be interested in some more help to get up to v6 speed. D On 5/03/2013 4:35 p.m., Karl Auer wrote: > Hi Don. This message is not to the list, but you should feel free to > quote it there if you wish. I hope you will not interpret it as spam. > I specialise in IPv6, and I specialise in IPv6 training - see > www.into6.com.au. Let me know if you are interested. It is > comprehensive, highly customisable and I would be happy to do a > workshop (where we get down and just do some stuff in your network for > a few hours). Or we could set up a network together - whatever you > want or need. I'm also happy to come to New Zealand, especially if you > can get a few other people together. and I use a Mikrotik in my SOHO > network :-) >> If I find it over whelming, then I wonder how many others are in the >> same boat? > Lots. I've trained over 300 people in the last few years. But think of > it this way - if you had had to absorb all of IPv4 at once, that would > have been overwhelming too! Luckily 90% of IPv6 is the same as IPv4 - > you don't need to relearn it, you just need to recognise it. > >> How do we trim all this down to subsets that I actually need to know >> just to operate? > Our courses concentrate on concepts that you can apply to any hardware, > any network. We don't teacj Cisco, Juniper or Mikrotik, we teach IPv6. > >> This needs to be in 20 pages, not the 200+ that you just linked. > Wellll... for a home network maybe. Just. > >> I need pictures. I use a GUI configuration tool, not CLI. > You'll be amazed how little needs configuring. A few router interfaces - > if you have a GUI, it should be able to do IPv6. Then it's just a case > of knowing what to configure, and our courses leave you confidently > knowing that. > > Regards, K. > -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699

1 0

Network device discovery
by Paul Adshead 04 Mar '13

04 Mar '13

Hi guys. I'm looking for software that will discover network devices site-wide, as the start-point for an asset management db. Looking for MAC and IP primarily, but if manufacturer\model would be great too. Having command line execution, connectivity diagram output and being opensource\free, would all be a bonus. Not looking forward to having to do it manually, so what's out there to make life easier? Almost time for a beer. Thanks, Paul.

4 3

Fibre / Network connectivity
by Darren Moss 04 Mar '13

04 Mar '13

Hi Noggers, We are looking for some internet connectivity into a new support centre in the Auckland CBD. There is an existing fibre box and a bunch of DSL style ports. Needs to connect with our DC networks in Airedale Street and Rosedale. International connectivity a must. Please contact me off list. Many thanks, Darren.

1 0

APNIC Slashes Costs for New Members
by Skeeve Stevens 01 Mar '13

01 Mar '13

Hey everyone, APNIC has slashed the "IP Resource Allocation Fee" from AU$3500 (ex-GST) to AU$1750 (ex-GST). This means a new member can sign-up and get access to IP resources of up to a /22 of IPv4, IPv6 space and AS numbers. The cost of becoming a new member (with resources) is now: AU$2425 (ex-GST for Australians) which is: AU$675 (ex-GST) + AU$1750 (ex-GST). Please see the official announcement here: http://www.apnic.net/publications/news/2013/ip-resource-application-fee-red… ...Skeeve <http://www.apnic.net/publications/news/2013/ip-resource-application-fee-red…> *Skeeve Stevens - *eintellego Networks Pty Ltd <http://www.apnic.net/publications/news/2013/ip-resource-application-fee-red…> <http://www.apnic.net/publications/news/2013/ip-resource-application-fee-red…> <http://www.apnic.net/publications/news/2013/ip-resource-application-fee-red…> skeeve(a)eintellegonetworks.com ; www.eintellegonetworks.com Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco - Cloud

1 0

New Trans-Tasman submarine cable
by Kris Price 20 Feb '13

20 Feb '13

Oh, looky, a new cable: http://www.telecom-media.co.nz/releases_detail.asp?id=3880&page=index I'm curious about something though, maybe someone on the list can share a bit of history. Is Tasman-2 still active in some capacity? I had always assumed it was shutdown after southern cross was built, but it's still shown often on cable maps such as the one in that press release: http://twitpic.com/c4wu2k Cheers Kris

5 6

Re: [nznog] New Trans-Tasman submarine cable
by Peter Lambrechtsen 19 Feb '13

19 Feb '13

So wouldn't a larger population buy more data due to size and thus get a better discount? Isn't that how typical economics works. Or am I missing something? So wasn't that my main argument about population or lack thereof? ----- Reply message ----- From: "Jay Daley" <jay(a)nzrs.net.nz> To: "Peter Lambrechtsen" <Peter.Lambrechtsen(a)telecom.co.nz> Cc: "nznog(a)list.waikato.ac.nz" <nznog(a)list.waikato.ac.nz> Subject: [nznog] New Trans-Tasman submarine cable Date: Wed, Feb 20, 2013 9:31 am On 20/02/2013, at 7:16 AM, Peter Lambrechtsen <Peter.Lambrechtsen(a)telecom.co.nz> wrote: > How are prices high when it costs the same to land data on SCCN NZ-US as it does AU-US and there is 3 cables going into AU? List prices are the same but the unlisted discounts are significant and they favour the stronger buyers. AU buyers are generally much stronger because they buy more bandwidth and they can shop around between cables for prices. Jay > > NZ is a small population with a low wage economy spread across a very mountainous geography that the vast majority of people only use less than 30gb of data.... > > Fix those issues and we will all have cheaper internet. > > Sent from my HTC Wildfire S on Telecom's XT mobile network. > > ----- Reply message ----- > From: "Chris Hodgetts" <chris(a)archnetnz.com> > To: "nznog(a)list.waikato.ac.nz" <nznog(a)list.waikato.ac.nz> > Subject: [nznog] New Trans-Tasman submarine cable > Date: Tue, Feb 19, 2013 11:15 pm > > > > Yes - more cables does equal good... > > However, given the three Telco's involved... does it still mean high > prices? > > > > On Tue, 19 Feb 2013 00:32:43 +0000, Christian Nielsen > <cnielsen(a)microsoft.com> wrote: > > More Cables = Good. > > > > This is a pretty good site. Still shows Tasman-2. > > http://submarinecablemap.com/ > > > > Christian > > > > -----Original Message----- > > From: nznog-bounces(a)list.waikato.ac.nz > > [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Kris Price > > Sent: Monday, February 18, 2013 4:29 PM > > To: nznog(a)list.waikato.ac.nz > > Subject: [nznog] New Trans-Tasman submarine cable > > > > Oh, looky, a new cable: > > > > http://www.telecom-media.co.nz/releases_detail.asp?id=3880&page=index > > > > I'm curious about something though, maybe someone on the list can share > a > > bit of history. Is Tasman-2 still active in some capacity? > > > > I had always assumed it was shutdown after southern cross was built, but > > it's still shown often on cable maps such as the one in that press > release: > > > > http://twitpic.com/c4wu2k > > > > > > Cheers > > Kris > > _______________________________________________ > > NZNOG mailing list > > NZNOG(a)list.waikato.ac.nz > > http://list.waikato.ac.nz/mailman/listinfo/nznog > > _______________________________________________ > > NZNOG mailing list > > NZNOG(a)list.waikato.ac.nz > > http://list.waikato.ac.nz/mailman/listinfo/nznog > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog -- Jay Daley Chief Executive .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 931 6977 mobile: +64 21 678840 linkedin: www.linkedin.com/in/jaydaley<http://www.linkedin.com/in/jaydaley>

8 7

Re: [nznog] New Trans-Tasman submarine cable
by Peter Lambrechtsen 19 Feb '13

19 Feb '13

And the other important part is SCCN "could" charge more to NZ due to the monopoly. But they don't. Plus talking about 1gb plans. That is by far and above the edge cases. We have to remember this is bb for the masses. Most OECD countries have an average GB usage below 40 or so... And they have far more options in the online video content space. So NZ isn't *that* different in that respect. Plus in many of those countries have underground ducting that is reused unlike NZ which makes a massive impact on costs. Last of all much of it gets run by the government so issues with the RMA doesn't apply. Sent from my HTC Wildfire S on Telecom's XT mobile network. ----- Reply message ----- From: "Mauricio Freitas" <freitasm(a)geekzone.co.nz> To: "dean(a)deanpemberton.com" <dean(a)deanpemberton.com>, "Peter Lambrechtsen" <Peter.Lambrechtsen(a)telecom.co.nz> Cc: "nznog(a)list.waikato.ac.nz" <nznog(a)list.waikato.ac.nz> Subject: [nznog] New Trans-Tasman submarine cable Date: Wed, Feb 20, 2013 9:19 am Peter was saying that SCX charges the same to NZ companies as they charge AU companies, even though one could obviously say there is a much bigger market in AU. In effect we are paying the (lower) Australian prices for the SCX data. Cheers Mauricio Freitas (@freitasm) www.geekzone.co.nz<http://www.geekzone.co.nz> www.freitasm.com<http://www.freitasm.com> www.twitter.com/freitasm<http://www.twitter.com/freitasm> -----Original Message----- From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Dean Pemberton Sent: Wednesday, 20 February 2013 08:58 To: Peter Lambrechtsen Cc: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] New Trans-Tasman submarine cable On Wed, Feb 20, 2013 at 7:16 AM, Peter Lambrechtsen <Peter.Lambrechtsen(a)telecom.co.nz> wrote: > How are prices high when it costs the same to land data on SCCN NZ-US > as it does AU-US and there is 3 cables going into AU? > Sorry I don't get what you're saying here. Probably just me being dense, could you expand? > NZ is a small population with a low wage economy spread across a very > mountainous geography that the vast majority of people only use less > than 30gb of data.... Thats true, but it changes. At one point it was impossible to imagine that people would even require 1gb/month. You want the speed of capability to keep pace with the speed of demand. The problem is that capability is always slower to accelerate. > > Fix those issues and we will all have cheaper internet. I don't necessarily want cheaper. I want one which matches my expectations more. =) Dean _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Re: [nznog] New Trans-Tasman submarine cable
by Peter Lambrechtsen 19 Feb '13

19 Feb '13

How are prices high when it costs the same to land data on SCCN NZ-US as it does AU-US and there is 3 cables going into AU? NZ is a small population with a low wage economy spread across a very mountainous geography that the vast majority of people only use less than 30gb of data.... Fix those issues and we will all have cheaper internet. Sent from my HTC Wildfire S on Telecom's XT mobile network. ----- Reply message ----- From: "Chris Hodgetts" <chris(a)archnetnz.com> To: "nznog(a)list.waikato.ac.nz" <nznog(a)list.waikato.ac.nz> Subject: [nznog] New Trans-Tasman submarine cable Date: Tue, Feb 19, 2013 11:15 pm Yes - more cables does equal good... However, given the three Telco's involved... does it still mean high prices? On Tue, 19 Feb 2013 00:32:43 +0000, Christian Nielsen <cnielsen(a)microsoft.com> wrote: > More Cables = Good. > > This is a pretty good site. Still shows Tasman-2. > http://submarinecablemap.com/ > > Christian > > -----Original Message----- > From: nznog-bounces(a)list.waikato.ac.nz > [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Kris Price > Sent: Monday, February 18, 2013 4:29 PM > To: nznog(a)list.waikato.ac.nz > Subject: [nznog] New Trans-Tasman submarine cable > > Oh, looky, a new cable: > > http://www.telecom-media.co.nz/releases_detail.asp?id=3880&page=index > > I'm curious about something though, maybe someone on the list can share a > bit of history. Is Tasman-2 still active in some capacity? > > I had always assumed it was shutdown after southern cross was built, but > it's still shown often on cable maps such as the one in that press release: > > http://twitpic.com/c4wu2k > > > Cheers > Kris > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

5 4

APNIC EC election online voting and proxy appointment open
by Dean Pemberton 17 Feb '13

17 Feb '13

Morning all, If you're an APNIC member then it's time to exercise your voting powers. Online voting is now open for the upcoming Executive Council elections. There are four seats open, so you will get a number of votes. Here's a very cut down version of the biographies (wording taken from http://conference.apnic.net/35/elections#nominees) if you're still undecided. James Spenceley James founded Vocus, now one of the largest IP backbone providers in Australia and New Zealand. James has successfully managed Vocus into the awarded fastest growing technology company in Australia. Vocus now listed on the Australian Stock Market offers IP transit, fibre and data centre services in three markets (Australia, New Zealand, Singapore Hong Kong and USA) giving James a strong perspective on operating an Internationally diverse operation and valuable experience in technical and financial matters and corporate governance. James is also a founding director of AusNOG (Australian Network Operators Group), defining the company structure and not for profit nature of the AusNOG orgaisation. Since it's founding in 2007 AusNOG has held six annual conferences which regularly exceed 200 attendees. Guarab Raj Upadhaya Presently employed by Limelight Networks (LLNW) as Network Architect on their backbone engineering team, Gaurab supports Limelight's high speed backbone in Asia, Europe and North America. Gaurab previously worked for Packet Clearing House (PCH) as Senior Internet Analyst Gaurab is one of the 14 global Trusted Community Representatives who cryptographically sign the root of the domain name system in ICANN Root DNSSEC Key ceremonies. During his career, he has spoken and presented at INET, APRICOT, SANOG, APNIC, NZNOG, MENOG, AUSNOG, PHNOG, JANOG, AfNOG, NANOG, ICANN conferences as well as RIPE and LINX Meetings. Kenny Huang Dr. Huang's contributions have been acknowledged especially in the development of Internet technology. Dr. Kenny Huang is the co-author of RFC3743 of the IETF, the Co-Chair of JET (Joint Engineering Team, formed by JPNIC, KRNIC, CNNIC, TWNIC), Advisor of CDNC (Chinese Domain Name Consortium). Dr. Huang is working closely with government departments in developing technology policies. Wei Zhao Deputy Director of Operation Management Department,CNNIC, responsible for IP services, related external cooperation and innovation. At APNIC community, she has been involved in policy developing and other community events since she joined CNNIC. She was served as NIR SIG co-chair in 2009 to 2010, and elected as APNIC Executive Council in 2011. Lengchheang Hong Lengchheang Hong began his career at AsiaForm where he was a network administrator. He then moved on to become a Senior Customer Solutions Support Officer for ONLINE before moving up and becoming the Key Account Manager. He became the Technical Support Manager for SINET-MOOV in March 2010 and was responsible for NOC ISP and its branches' operations. ________________________________________________________________________ Proxy appointment/online voting for 2013 APNIC EC election open now ________________________________________________________________________ Online voting and proxy appointment for the APNIC Executive Council (EC) election opens today, Wednesday, 13 February 2013 for a two-week period until 09:00 (UTC +8), Wednesday, 27 February 2013. The EC members whose positions are up for re-election are: - Kenny Huang - James Spenceley - Guarab Raj Upadhaya - Wei Zhao The nominees are: - Lengchheang Hong - Kenny Huang - Guarab Raj Upadhaya - James Spenceley - Wei Zhao Online voting is available to APNIC Member Corporate Contacts and Member Contacts with voting rights via MyAPNIC. By default, all Corporate Contacts have voting rights, and they can assign voting rights to other contacts in MyAPNIC. https://myapnic.net Full details of the election and alternative voting methods are available at: http://conference.apnic.net/35/elections If you have any questions or need further assistance, please contact: helpdesk(a)apnic.net ________________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: +61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: +61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net ________________________________________________________________________ * Sent by email to save paper. Print only if necessary.

1 0

Fwd: [ECS Seminars] 2013-02-20 Fred Baker - Buffer Bloat!
by Andy Linton 16 Feb '13

16 Feb '13

---------- Forwarded message ---------- From: ECS Seminar Notification <seminar-admin(a)ecs.vuw.ac.nz> Date: Fri, Feb 15, 2013 at 10:30 AM Subject: [ECS Seminars] 2013-02-20 Fred Baker - Buffer Bloat! To: ecs-seminars(a)ecs.vuw.ac.nz Date: Wednesday 20th February 2013 Time: 11:00 AM - 12:30 PM Location: Cotton Club, Cotton 350 Fred Baker is scheduled to present a seminar about: Buffer Bloat! School of Engineering and Computer Science Seminar Abstract: The networking industry has looked at Quality of Service numbers times, resulting in the Integrated and Differentiated Services Architectures and numerous papers and articles on the topic. In the past few years, the topic has been popularly renamed "Buffer Bloat", and looked at again from the view of autoconfiguration and deployment. In this talk, we will look at Buffer Bloat in access networks, multistage networks such as WiFi, and data centers, each of which has unique issues and requirements. Bio: Cisco Fellow Fred Baker has been involved in data communications since 1978 and the development of the Internet since the 1980's. He participated in early development of IEEE 802.1d switching and IP routing. He has served as the Chair of the Internet Engineering Task Force, chaired several working groups, and written or edited numerous RFCs. He now chairs the IETF's IPv6 Operations Working Group, working with the operational community on IPv6 deployment issues. He also contributes to the Broadband Internet Technical Advisory Group (BITAG). At Cisco, he works with researchers within the company, and with university researchers outside, on various projects. He also advises management and technologists on technical direction. Any queries about this seminar, please email Qiang.Fu(a)ecs.vuw.ac.nz ============================================================================= This message was automatically generated by the ECS Seminars System. View seminars at http://ecs.victoria.ac.nz/Events/Seminars Sub/unsub at http://ecs.victoria.ac.nz/mailman/listinfo/ecs-seminars

3 2

ihug Ultra and Proxy Caching
by neals5 12 Feb '13

12 Feb '13

In order to defeat a patent troll, I'm looking for someone who can tell me from their own experience when ihug starting using proxy caching in conjunction with their Ultra satellite service. Unless we've all used so much caffeine our memories don't stretch back to last century? Any replies to me off list, please. I'll be happy to summarise. - Donald Neal

1 0

Transit in Sky Tower for OOB
by Cameron Ferdinands 10 Feb '13

10 Feb '13

Hi All, I'm looking for transit in Sky Tower for OOB access, we're on Level 48, Window 16. looking for anyone on the same level or willing to help do a copper cross-connect between floors Thanks,

1 0

Traceroute question
by Andy Linton 10 Feb '13

10 Feb '13

What do you see if you: $ traceroute 216.81.59.173 with maxhops > 30?

10 10

NZNOG2013
by Patrick Sharp 06 Feb '13

06 Feb '13

Hi, In the aftermath of the NZNOG conference this year, we got sent a portable Optoma Projector. It's not ours which presumably means that someone else is missing it. If it's yours, can you email me and I'll arrange to get it back to you? Cheers, Patrick Sharp CityLink patrick.sharp(a)citylink.co.nz<mailto:patrick.sharp(a)citylink.co.nz> 021 2269 269

1 0

InternetNZ position on APNIC prop-106-v001: Restricting excessive IPv4 address transfers under the final /8 block
by Dean Pemberton 05 Feb '13

05 Feb '13

Here is the InternetNZ position on the second policy for discussion in Singapore. The original policy text can be found here: http://www.apnic.net/__data/assets/text_file/0009/56871/prop-106-v001.txt ------------------------------------------------------------------------ InternetNZ position on prop-106-v001: Restricting excessive IPv4 address transfers under the final /8 block ------------------------------------------------------------------------ Authors: Dean Pemberton dean(a)internetnz.net.nz <javascript:;> 1. Executive Summary -------------------- Prop-106 suggests that based on observations of APNIC IP resource transfer history records, some LIRs seems to be collecting IPv4 address blocks from the ‘final /8’ (103/8). It also suggests that this is being accomplished through the use of multiple accounts to apply for individual /22s, and then transferring these blocks to a single account and that this kind of behaviour is against the spirit of the final /8 policy (prop-088). Prop-106 intends to restrict IPv4 address transfers which were allocated/assigned from the final /8 block. In assessing whether Iupport, oppose, or adopt a position of neutrality on a particular policy proposal, three questions are considered: 1. Does this policy seek to address a well-defined, well-accepted problem? 2. Will the solutions outlined within the proposal effectively mitigate the stated problem? 3. Does the policy proposal fit with InternetNZ policy principles? After consideration the questions above, InternetNZ believes that: 1. Based on information provided by the APNIC secretariat, there is no evidence supporting a threat to exploit any perceived loophole in the APNIC transfer policy. As such this proposal does not address a well-defined, well-accepted problem. 2. The options presented within this policy proposal will have no material effect on the sorts of IP resource hoarding activity being suggested to occur in the problem statement. 3. This policy proposal does not fit within several of InternetNZ policy principles, namely those of: Openness, Market competition, Working with the architecture of the internet and accessibility of the internet for all. As such InternetNZ opposes the adoption of APNIC prop-106 as presented in version 001. 2. Does this policy seek to address a well-defined, well-accepted problem? ------------------------------------------------------------------------ Prop-106 states: "The current APNIC IPv4 address transfer policy allows to obtain a maximum of /22 distribution(s) per each APNIC account holder. We propose add a restriction to IPv4 address transfer policy to restricting excessive IPv4 address transfers under the final /8 block." This proposal looks to close a perceived loophole in APNIC's transfer policy that is suggested would allow a single actor to obtain, through mergers and acquisitions (M&As), more than their allowed /22 from the final /8. Prop-106 suggests that this activity has already been observed and as such a policy is required to close the perceived loophole. In considering if this perceived loophole exists and is actually being exploited, InternetNZ has used information provided by the APNIC secretariat. There are 16,384 /22 blocks available from 103/8. APNIC has made 2,110 (12.9%[1]) delegations so far. Of those delegations, 32 (1.5% of allocations, or 0.2% of the total available) have been transferred. This consists of 24 standard transfers and 8 M&A transfers. 15 APNIC members have more than a single /22 from 103/8 associated with their account. The highest number is 5 x /22s in one account. These five /22 blocks represent 0.03% of the address space within 103/8. It would appear, based on this information, that there is not currently a large amount of activity looking to exploit any perceived loophole in existing APNIC transfer policy. As such, InternetNZ does not believe that this proposal seeks to address a well-defined, well-accepted problem. 3. Will the solutions outlined within the proposal effectively mitigate the stated problem? ------------------------------------------------------------------------ Prop-106 suggests two options that claim to close the perceived loophole in APNIC's transfer policy: Option 1: Restrict IPv4 address transfers under the final /8 address block for two years. Option 2: Set a deposit for transfers under the final /8 range. Pay ten years of APNIC's annual fees for transferred address block[s] in advance when receiving the final /8 address range by address transfer or account name change. Both of these options seek to dissuade an actor from transferring 103/8 addresses from multiple shell companies to a single APNIC account. It should be noted however, that there is nothing to stop such an actor from registering and using the same addresses and wilfully failing to notify APNIC. In such a scenario the actor would have access to multiple /22s from the 103/8 block, but the APNIC registration database would reflect that these were held by different entities. The options presented in prop-106 are intended to influence the behaviour of actors that are operating outside the intent of the last /8 policy. InternetNZ suggests that if such actors exist, and are seeking to operate outside APNIC policy, they are unlikely to comply with the proposed policy presented here. As such, InternetNZ believes that this proposed policy will have no material effect on the sorts of IP resource-hoarding activity that is suggested in the problem statement. 4. Does the policy proposal fit within InternetNZ policy principles? ------------------------------------------------------------------------ A set of eight policy principles[2] underpin the work of InternetNZ and help ensure that our approach to Internet-related public and technical policy is transparent and predictable. Internally, the principles guide the development of policy positions and statements. Externally, they explain the basis of InternetNZ’s views to our stakeholders and to the general public. Any proposal that InternetNZ takes a position on is evaluated against these principles. Six of the eight principles apply with respect to prop-106. They are the following: ** Principle No. 1 The Internet should be open and uncapturable. ** In considering a policy proposal using this principle, InternetNZ looks to see if there will be a material effect to openness and/or non capturability. Openness -------- As stated above, there is a material concern that one outcome of this policy would be to discourage actors to from interacting with APNIC during merger & acquisition activity (regardless of their intentions for procuring the addresses). Such a move would have a material effect on the openness of the Internet through an erosion of trust in the ability of the APNIC database to accurately represent the ownership of IP resources. Uncapturable ------------ There is a small chance that an actor could register multiple companies, gain /22 resources and then acquire them. Information provided by the APNIC secretariat shows that this situation is either not occurring, or is occurring at such a low level as to not pose a material threat to the capturability of the Internet. It is accepted that should this situation change in the future that intervention may be required and a watching brief should be kept on the situation. ** Principle No. 2 Internet markets should be competitive. ** For a market to be competitive it must not place any significant barriers on new entrants, nor should it place significant barriers on the natural growth of organisations through M&As. As stated above, prop-106 proposes to place barriers on any entity looking to complete M&A activity involving IP resources from 103/8. If these actors have benign intent and wish to operate within APNIC policies, these barriers will place an undue burden on them. If on the other hand the actors have malicious intent, there are numerous ways for them to avoid the burdens imposed by these policies and achieve their outcomes. As such InternetNZ believes that this policy will have a negative impact on the competition within the Internet market. ** Principle No. 3 Internet governance should be determined by open, multi-stakeholder processes. ** APNIC has an open, multi-stakeholder policy development process. This proposal does nothing to alter that. ** Principle No. 4 Laws and policies should work with the architecture of the Internet, not against it. ** By placing barriers in the way of all M&A activity, APNIC may discourage actors from updating IP resource usage in the APNIC database. This would cause a loss of trust in the integrity of the information in the APNIC database. As this information is used to make decisions related to security, incident response and even routing decisions on the Internet, InternetNZ believes that the effects of this proposal could act against the architecture of the Internet. ** Principle No. 6 The Internet should be accessible by and inclusive of everyone. ** The Internet is undergoing a significant period of growth, especially in developing markets (such as BRIC[3]). While it is an established fact that IPv4 addresses have all but been exhausted and IPv6 represents the only sustainable future direction, access to IPv4 resources is currently a major requirement for the rapid deployment of Internet access throughout these growing economies. InternetNZ believes that placing barriers such as those proposed by prop-106 on M&A activities may have a negative effect on Internet deployment and growth within developing economies in the region. ** Principle No. 7 Technology changes quickly, so laws and policies should focus on activity. ** There is clear evidence of significant activity in terms of Internet growth within the region. This is shown through the allocation of 11-12% of the final /8 in a relatively short period of time. Given that IPv6 is accepted as the only clear future deployment direction for the Internet, yet there is a clear short-term demand for IPv4 resources, InternetNZ believes that barriers should not be placed in the way of getting these resources to those who require them to provide solutions to current technical problems. 5. Summary ---------- After consideration of the material above, InternetNZ believes that: 1. Based on information provided by the APNIC secretariat, there is no evidence supporting a threat to exploit any perceived loophole in the APNIC transfer policy. As such this proposal does not address a well-defined, well-accepted problem. 2. The options presented within this policy proposal will have no material effect on the sorts of IP resource hoarding activity being suggested to occur in the problem statement. 3. This policy proposal does not fit within several of InternetNZ policy principles, namely those of: Openness, Market competition, Working with the architecture of the internet and accessibility of the internet for all. As such InternetNZ opposes the adoption of APNIC prop-106 as presented in version 001. Dean Pemberton Policy Advisor InternetNZ dean(a)internetnz.net.nz <javascript:;> ________________ [1] Some delegations are of smaller size (/24 or /23) so the utilisation is actually closer to 11%. [2] https://internetnz.net.nz/content/Policy-Principles [3] http://en.wikipedia.org/wiki/BRIC

1 0

InternetNZ position on APNIC prop-105-v001: Distribution of returned IPv4 address blocks
by Dean Pemberton 05 Feb '13

05 Feb '13

Morning all, There are two policy proposals for discussion at the upcoming APNIC conference in Singapore. They are in addition to the presentation Elly made at the conference (They came in late). InternetNZ has reviewed the proposals and made a submission on each. The first one is prop-105. The original text of the proposal can be found here: http://www.apnic.net/__data/assets/text_file/0010/56872/prop-105-v001.txt ------------------------------------------------------------------------ InternetNZ position on prop-105-v001: Distribution of returned IPv4 address blocks (Modification of prop-088) ------------------------------------------------------------------------ Authors: Dean Pemberton dean(a)internetnz.net.nz <javascript:;> 1. Executive Summary -------------------- Prop-105 highlight the fact that under current APNIC policy, any future IPv4 address resources made available via IANA (or any other mechanism) would be subject to allocation purely based on the guidelines within the ‘last /8’ policy (prop-088). Prop-105 suggests that, based on the demonstrated need for IPv4 addresses (citing that 70% of the respondents to a recent survey expressed a need to receive additional IPv4 address space), any additional APNIC allocations should be handled outside prop-088 guidelines. The central issue prop-105 has with the prop-088 guidelines is that once an APNIC member has applied to recieve a blocst /8 (currently a /22), they are not eligible for any additional address space. Prop-105 seeks to amend prop-088 to allow members to receive a single block from 103/8 (the last /8) in additional to a single block from any space which APNIC might receive subsequently. In assessing whether InternetNZ will support, oppose, or adopt a position of neutrality on a particular policy proposal, three questions are considered. 1. Does this policy seek to address a well defined, well accepted problem? 2. Will the solutions outlined within the proposal effectively mitigate the stated problem? 3. Does the policy proposal fit with InternetNZ policy principles? After consideration of the questions above, InternetNZ: 1. believes that even though there is a demonstrated demand for IPv4 addresses, it does not accept that a situation exists whereby changes are required to prop-088 for APNIC to cater for additional IPv4 resources from IANA. 2. does not believe that allowing APNIC members to receive additional allocations from small blocks received from IANA will make a material difference to the demand for IPv4 addressing. 3. believes that the proposal has the potential to send the wrong message with regard to the importance of IPv6 adoption as opposed to continued IPv4 deployment. 4. This policy proposal does not fit within several of InternetNZ policy principles, namely those of: Working with the architecture of the Internet and focusing on technical activity. As such InternetNZ opposes the adoption of APNIC prop-105 as presented in version 001. 2. Does this policy seek to address a well-defined, well-accepted problem? ------------------------------------------------------------------------ Prop-105 states: “While rapid implementation of IPv6 is in progress throughout the APNIC region, demands for IPv4 address still continue. According to our survey conducted to the APNIC community, over 70% of the respondents expressed the needs to receive IPv4 address space, if a separate distribution policy is defined from the final /8 policy. In May 2012, the global policy “Global Policy for Post Exhaustion: IPv4 Allocation Mechanisms by the IANA” was ratified by ICANN board, and it will be implemented soon. Based on this policy, IPv4 address space returned to IANA will be distributed to RIRs, and its size is not expected to be so large but substantial enough to be able to consider an additional minimum allocation for APNIC members.” The APNIC secretariat states that they have so far pre-approved 43 requests, for a total space of 1,717,504 IP addresses (this equates to roughly just over half a /12 worth of address space). The study cited in prop-105, coupled with the stats from the APNIC secretariat clearly demonstrates a demand for IPv4 resources, what is unclear however, is if a situation will ever exist under which this policy will become relevant. It can be effectively argued that it is uncertain if IANA will ever allocate a meaningful amount of additional IPv4 address space to APNIC for LIR allocation. In the absence of that occurring, this problem this policy seeks to solve would not exist. As such, InternetNZ accepts that there is a demonstrated demand for IPv4 addresses, but does not accept that a situation exists whereby changes are required to prop-088 for APNIC to cater for additional IPv4 resources from IANA. 3. Will the solutions outlined within the proposal effectively mitigate the stated problem? ------------------------------------------------------------------------ Prop-105 presents the following as a solution to the the perceived problem: “Modify prop-088 to distribute non-103 IPv4 address blocks to APNIC account holders who meet the IPv4 distribution criteria define in APNIC policies. If APNIC account holder, who was allocated an /22 from final /8 pool, needs an additional IPv4 address block, they are eligible to receive another distribution of IPv4 block. The same policy as the final /8 policy will be applied in terms of the criteria and the size of the distribution given the requestor has utilized a total of /22 block from 103/8.” This is assumed to mean that APNIC members are free to obtain a /22 from 103/8 as well as an additional /22 from any subsequent block of IPv4 addresses that APNIC might obtain from IANA (or other mechanisms). While at a high level this might appear to be a solution to the stated problem, it does not accurately present itself as a standalone policy, nor does it reference the parts of prop-88 which would need to change, nor any suggested replacement text. Prop-105 also neglects to define conditions such as the minimum size of additional allocation under which this policy would be enacted. The ICANN policy referred to by the author states: “The purpose of the proposal is to enable ICANN, as the IANA Functions Operator, to allocate IPv4 blocks returned by the RIRs. ICANN would place IPv4 blocks returned by the RIRs in a Recovered IPv4 Pool. This Pool would be declared active when one RIR has less than half its last /8 left, approximately 8m IPv4 addresses. The IANA Functions Operator would then allocate an "IPv4 allocation unit" (minimum size /24) to each RIR, if the Pool size so permits. If the space available in the Pool is too limited, allocation would be deferred in 6 month intervals until space is available.” It is clear from this wording that ICANN envisages small addresses being handed back to RIRs (evident by the use of a minimum /24 size reference). If for example APNIC were to receive a /20 from IANA (equivalent to 4 /22s) it would be hard to see how a change to the existing prop-088 policy would be justified. If on the other hand APNIC were to receive an additional /8 from IANA, then there may be a case to justify allowing members an additional allocation from this block. While all these are technical possibilities, InternetNZ in defining its position must take into account the probability of each event occurring. While it is impossible to predict the future, InternetNZ feels that it is far more likely that a number of small (<= /20) blocks, if any, will be made available from IANA rather than any significantly large blocks (<= /16). It should also be noted that it was the intent of prop-088 that an APNIC member’s allocation from the last /8 be used to facilitate adoption of and transition to IPv6. It was not intended to be used for day to day operational purposes. As such, InternetNZ does not believe that allowing APNIC members to receive additional allocations from small blocks received from IANA will make a material difference to the demand for IPv4 addressing. InternetNZ also believes that it has the potential to send the wrong message with regard to the importance of IPv6 adoption as opposed to continued IPv4 deployment. 4. Does the policy proposal fit within InternetNZ policy principles? ------------------------------------------------------------------------ A set of eight policy principles[1] underpin the work of InternetNZ and help ensure that our approach to Internet-related public and technical policy is transparent and predictable. Internally, the principles guide the development of policy positions and statements. Externally, they explain the basis of InternetNZ’s views to our stakeholders and to the general public. Any proposal that InternetNZ takes a position on is evaluated against these principles. Five of the eight principles apply with respect to prop-105. They are the following: ** Principle No. 2 Internet markets should be competitive. ** Allowing existing APNIC members to receive additional allocations from subsequent IANA allocations will reduce the ability of new entrants to receive initial allocations under the existing prop-088 framework. While this is a possibility, the amount of address space envisaged to be allocated by IANA is expected to be so small as for this effect to be considered minor. As such InternetNZ believes that this policy will have a negligible impact on the competition within the Internet market. ** Principle No. 3. Internet governance should be determined by open, multi-stakeholder processes. ** APNIC has an open, multi-stakeholder policy development process. This proposal does nothing to alter that. ** Principle No. 4. Laws and policies should work with the architecture of the Internet, not against it. ** InternetNZ believes that the future of Internet deployment is with IPv6. Anything which artificially prolongs the life of IPv4 at the expense of wide scale IPv6 adoption is seen to be acting against the architecture of the Internet. The intent of prop-088 was that an APNIC member’s allocation from the last /8 was to be used to facilitate adoption of and transition to IPv6. As such InternetNZ believes that this proposal acts against the architecture of the Internet, by prolonging members reliance on IPv4 resources. ** Principle No. 6 The Internet should be accessible by and inclusive of everyone. ** InternetNZ accepts that in order to ensure that the Internet is accessible to and inclusive of everyone that APNIC members require access to IPv4 resources while they transition to using IPv6. It is our position however that this access is already catered for under the existing prop-088 mechanism. If a situation exists under which a member requires additional IPv4 resources, then this can be accomplished through existing APNIC address transfer mechanisms and the growing IPv4 marketplace. As such, InternetNZ does not believe that the adoption of this proposal is required to ensure the accessibility of the Internet. ** Principle No. 7. Technology changes quickly, so laws and policies should focus on activity. ** InternetNZ accepts that there is a current demand for IPv4 addresses, it believes however that the appropriate mechanism for the fulfilment of this demand is: 1. Allocation of a final /22 from the last /8 as per prop-088 guidelines. 2. Timely adoption of IPv6 delivered services 3. Any additional IPv4 resources sourced through existing transfer policies and recorded accurately in the APNIC database. 5. Summary ---------- After consideration the questions above, InternetNZ: 1. believes that even though there is a demonstrated demand for IPv4 addresses, it does not accept that a situation exists whereby changes are required to prop-088 for APNIC to cater for additional IPv4 resources from IANA. 2. does not believe that allowing APNIC members to receive additional allocations from small blocks received from IANA will make a material difference to the demand for IPv4 addressing. 3. believes that the proposal has the potential to send the wrong message with regard to the importance of IPv6 adoption as opposed to continued IPv4 deployment. 4. This policy proposal does not fit within several of InternetNZ policy principles, namely those of: Working with the architecture of the Internet and focusing on technical activity. As such InternetNZ opposes the adoption of APNIC prop-105 as presented in version 001. Dean Pemberton Policy Advisor InternetNZ dean(a)internetnz.net.nz <javascript:;> ________________ [1] https://internetnz.net.nz/content/Policy-Principles

1 0

NLNZ 2013 Harvest Underway
by Jay Gattuso 04 Feb '13

04 Feb '13

Hi All, Just a quick note to let you know the NLNZ 2013 national domain crawl and the NLNZ .nz domain survey crawl has begun. We anticipate the national domain crawl will run for a period of two weeks followed by a week or two of patching/QA. The survey crawl is slash page only and will conclude sooner. Please let me know if you experience any issues as a result of this crawl, or if you have any questions. Best, Jay Jay Gattuso | Digital Preservation Analyst | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467 Wellington 6140 New Zealand | +64 (0)4 474 3064 jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)natlib.govt.nz>

1 0

Has nznog.org done something to offend google?
by Andrew Jones 04 Feb '13

04 Feb '13

I was searching for the site to look at some conference presentations, but it looks like the site has fallen off the google index. https://www.google.com.au/search?q=site:nznog.org Cheers, Andrew

4 3

New prefixes at APE, WIX and CHIX: 103.245.172.0/22 and 2406:1700::/32
by Michael Fincham 31 Jan '13

31 Jan '13

Hi everyone, (cross-posted to NZNOG since nzix-route-announce still seems pretty much dead...) We intend to begin announcing the prefixes 103.245.172.0/22 and 2406:1700::/32 to the APE, WIX and CHIX in approximately 2 weeks. These prefix will be originated from AS38477. This will bring our total set of (le 24) announced IPv4 prefixes to: 114.23.96.0/22 originated from AS38477 113.130.120.0/22 originated from AS38294 path: 38477 38294 116.90.128.0/20 originated from AS38477 202.6.116.0/23 originated from AS38477 192.138.251.0/24 originated from AS38590 path: 38477 38590 182.50.160.0/22 originated from AS45641 path: 38477 45641 116.90.135.0/24 originated from AS45641 path: 38477 45641 202.37.124.0/23 originated from AS38477 131.203.133.0/24 originated from AS56102 path: 38477 56102 131.203.134.0/23 originated from AS56102 path: 38477 56102 202.44.60.0/22 originated from AS56214 path: 38477 56214 202.50.102.0/24 originated from AS38477 103.11.124.0/22 originated from AS38477 103.246.250.0/24 originated from AS38477 122.102.108.0/23 originated from AS38477 103.8.232.0/22 originated from AS132255 path: 38477 132255 103.247.56.0/24 originated from AS38477 103.245.172.0/22 originated from AS38477 And our v6 prefixes: 2401:f000::/32 from AS38477 2406:1e00:6000::/35 from AS38477 2407:2400::/32 from AS45641 2400:C000::/32 from AS38294 2001:df0:dc::/48 from AS38590 2403:B700::/32 from AS132255 2406:1700::/32 from AS38477 These prefixes are being announced in cooperation with Orca Communications Ltd. -- -Michael Fincham System Administrator, Unleash www.unleash.co.nz Phone: 0800 750 250

1 0

Re: [nznog] Best local presentation at NZNOG2013
by donald＠resolveware.com 30 Jan '13

30 Jan '13

I appreciate the feedback. NZNOG are a great group. I've put a copy at http://www.resolveware.com/UFB_Realities.pptx Regards, Donald Love On Tue, Jan 29, 2013 at 9:59 PM, Joel van Velden wrote: > Are there any presenters' slides available online? > > Regards, > Joel van Velden ______________________________________________ NZNOG mailing list <mailto:NZNOG(a)list.waikato.ac.nz> NZNOG(a)list.waikato.ac.nz <http://list.waikato.ac.nz/mailman/listinfo/nznog> http://list.waikato.ac.nz/mailman/listinfo/nznog

2 1

Re: [nznog] Best local presentation at NZNOG2013
by Andy Linton 29 Jan '13

29 Jan '13

On Wed, Jan 30, 2013 at 9:25 AM, Gerard Linstrom <Gerard.Linstrom(a)chorus.co.nz> wrote: > Congratulations Don, > > A well deserved win. > I'll second that!

1 0

Re: [nznog] Best local presentation at NZNOG2013
by Gerard Linstrom 29 Jan '13

29 Jan '13

Congratulations Don, A well deserved win. Regards Gerard Linstrom Chorus -----Original Message----- From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of nznog-request(a)list.waikato.ac.nz Sent: Wednesday, 30 January 2013 12:00 p.m. To: nznog(a)list.waikato.ac.nz Subject: NZNOG Digest, Vol 121, Issue 19 Send NZNOG mailing list submissions to nznog(a)list.waikato.ac.nz To subscribe or unsubscribe via the World Wide Web, visit http://list.waikato.ac.nz/mailman/listinfo/nznog or, via email, send a message with subject or body 'help' to nznog-request(a)list.waikato.ac.nz You can reach the person managing the list at nznog-owner(a)list.waikato.ac.nz When replying, please edit your Subject line so it is more specific than "Re: Contents of NZNOG digest..." Today's Topics: 1. NLNZ WOD 2013 Update (Jay Gattuso) 2. Best local presentation at NZNOG2013 (Gerard Creamer) 3. Re: Best local presentation at NZNOG2013 (Joel van Velden) ---------------------------------------------------------------------- Message: 1 Date: Tue, 29 Jan 2013 00:12:43 +0000 From: Jay Gattuso <Jay.Gattuso(a)dia.govt.nz> To: "nznog(a)list.waikato.ac.nz" <nznog(a)list.waikato.ac.nz> Subject: [nznog] NLNZ WOD 2013 Update Message-ID: <178721665.17254.1359418364413.JavaMail.root(a)s111-0006-lnv06> Content-Type: text/plain; charset="windows-1257" Hi All, Thank you for your patience and accommodation of the whole of domain harvest thus far. We have concluded the initial crawl, and are currently poised to move into the harvest proper. I initially informed you of our intent to commence the main crawl on the 4th Feb, we are actually ready to start the full harvest today, and we may ask the IA to start the harvest slightly ahead of schedule. I also wondered if there was any useful / interesting stats or data on the harvest I could provide for you during runtime? I intend to send a round up message to this group when the harvest is completed (including some of the key information points) - but if there is interest in more frequent updates I'm happy to oblige. As ever, if anyone has any questions or concerns, please feel free to drop me a line or reply on the list. Many thanks Jay Jay Gattuso | Digital Preservation Analyst | Preservation, Research and Consultancy National Library of New Zealand | Te Puna M?tauranga o Aotearoa PO Box 1467 Wellington 6140 New Zealand | +64 (0)4 474 3064 jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)natlib.govt.nz>

1 0

NLNZ WOD 2013 Update
by Jay Gattuso 28 Jan '13

28 Jan '13

Hi All, Thank you for your patience and accommodation of the whole of domain harvest thus far. We have concluded the initial crawl, and are currently poised to move into the harvest proper. I initially informed you of our intent to commence the main crawl on the 4th Feb, we are actually ready to start the full harvest today, and we may ask the IA to start the harvest slightly ahead of schedule. I also wondered if there was any useful / interesting stats or data on the harvest I could provide for you during runtime? I intend to send a round up message to this group when the harvest is completed (including some of the key information points) - but if there is interest in more frequent updates I'm happy to oblige. As ever, if anyone has any questions or concerns, please feel free to drop me a line or reply on the list. Many thanks Jay Jay Gattuso | Digital Preservation Analyst | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467 Wellington 6140 New Zealand | +64 (0)4 474 3064 jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)natlib.govt.nz>

1 0

NZNOG-13 Webcast
by Richard Naylor 26 Jan '13

26 Jan '13

For those intrerested, NZNOG-13 was a little quieter than NZNOG-12. Audience was 1714 viewers from 21 countries. Total data shifted was 220GBytes. This doesn't include mobile viewers - there were roughly 790 of them. Its a different CDN and doesn't give a lot of stats Videos will be online asap, but we're just starting a 7 day event, with a large audience. Rich

1 0

NZIX survey
by Jamie Baddeley 24 Jan '13

24 Jan '13

Hi There, For those of you at the conference yesterday that saw the Citylink update you may recall a survey I mentioned. In case you forgot the link, here it is again.. http://surveymonkey.com/s/nzix Cheers jamie

1 0

Tshirts are here, cash is preferred, come collect from me if you're at the venue
by Sam Russell 24 Jan '13

24 Jan '13

-- Sam Russell Network Engineer Research & Education Advanced Network NZ Ltd ddi: +64 4 913 6365 mob: +64 21 750 819 fax: +64 4 916 0064 http://www.reannz.co.nz

1 0

Lightening Talks
by Richard Nelson 24 Jan '13

24 Jan '13

We are now looking for lightening talks for tomorrows session at the conference. If anyone would like to present a talk lasting 5 min or so could you please send an email to either me or talks(a)nznog.org. Thanks, Richard Nelson

1 1