- NZNOG - lists.nznog.org

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 05 May '26

05 May '26

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our *current* standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/2f6mf7q6nh1w For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 11 Mar '26

11 Mar '26

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our *current* standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/k9w616p9fjlf For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

Conference Updates
by Richard Nelson 05 Mar '26

05 Mar '26

* This year is now the most popular NZNOG conference by far. Previously the largest NZNOG was 199 conference registrations (2025). This year we already have 236. Registrations are currently capped at 250 but we are talking to the venue and may raise this slightly. * The 30 years of RADIUS in 3 hours presentation on Wednesday had sold out. We have changed the room and been able to add a few more spaces. * A second JetEX Flight Sim - Post NZNOG event has been added since the first one had sold out. * All but two of the talk descriptions are now on the website. Talk submissions have been well ahead of previous years. See https://www.nznog.org/conferences/nznog-2026/talks Richard Nelson, for NZNOG Trust

1 0

Fwd: [dns-operations] OARC 46 Call for Contributions
by Felipe Barbosa 22 Feb '26

22 Feb '26

Forwarding on behalf of OARC. -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580 ---------- Forwarded message --------- From: Cathy Almond <cathya(a)isc.org> Date: Fri, Feb 20, 2026 at 3:31 PM Subject: [dns-operations] OARC 46 Call for Contributions To: <dns-operations(a)lists.dns-oarc.net> This workshop will be a hybrid event. Date - 16-17 May 2026 Location - Edinburgh, Scotland Times - approximately 09:00-16:00 UTC (Local time BST is UTC +1 ) Adjacent to - RIPE 92 (18 - 22 May 2026, https://ripe92.ripe.net/) Deadline for Submissions - 2026-03-06 23:59 UTC https://indico.dns-oarc.net/event/56/abstracts/ All DNS-related subjects and discussion topics are welcome although we're particularly keen to hear more about operational and security related experiences, best practices and practical advice; both for newcomers to the DNS arena and those who have been around for longer who want to learn more about new features and opportunities to improve resilience, security and privacy. (These topics we think will complement the usual high-quality data-based research submissions we always hope to receive!) If you have something interesting to share with the community that lies outside of the focus above, please don't be put off - if it's good, we'll be happy to include it. If you'd like to offer a talk, but are not quite sure what to pick, here's a non-exhaustive list of ideas: 1. Operations & Deployment - Configuration management, deployment processes, and interoperability experiences. - Tools, tips, and making effective use of DNS software features. 2. Performance, Resilience & Scaling - Provisioning, load-balancing, and planning for resilience. - DNS performance management, efficiency improvements, and metrics. - Monitoring infrastructure: log pipelines, analytics, and anomaly detection. 3. Security, Privacy & Policy - DoS attacks, DNS abuse, DNSSEC signing and validation. - Privacy considerations, for example: encrypted transport, qname minimization, data anonymization. - Relevant global and regional policies, legislation, and compliance. 4. Research & Innovation - Data-driven testing, measurement, and analysis. - New protocols, protocol extensions, and next-generation namespace management. 5. Lessons & Learnings - Outage experiences, recovery stories, and cautionary tales For further details please see https://www.dns-oarc.net/oarc46 Cathy Almond, for the DNS-OARC Programme Committee _______________________________________________ dns-operations mailing list dns-operations(a)lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations

1 0

West Auckland fibre outage
by Paul Adshead 21 Feb '26

21 Feb '26

Does anyone have any insights into the huge West Auckland fibre outage? Area concerned, appears to be: Te Atatu - Piha - Helensville. Indicative fix time of 24h, means something substantial happened. Paul Adshead

2 1

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 18 Feb '26

18 Feb '26

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/dj76bh55sq04 For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

NZNOG 2026 registration now open
by NZNOG 28 Jan '26

28 Jan '26

NZNOG 2026 registration is now open. We have some great tutorials this year - BGP operations by Philip Smith from NSRC, RADIUS by Alan DeKok, and Containerlabs by the Nokia folks. Last year we did a social thing on the Friday which we are repeating with a couple of options. We recommend getting accomodation sorted soon - as Christchurch can fill up suddenly. We have had some great talks proposed so far which will be going up on the talks page soon, and are keen for more. If you've done an interesting project, had an interesting fault, or have some ideas you want to share, please submit! Don't just leave the talks to the "big" operators and vendors, we are keen to hear from everyone. Info for all of the above is on the website. Registration: https://nznog-2026.lilregie.com/ Conference website: https://www.nznog.org/conferences/nznog-2026 -- Nathan Ward on behalf of the NZNOG team

1 0

InternetNZ .nz DNSSEC KSK Standby Chain Rollover
by Felipe Barbosa 11 Dec '25

11 Dec '25

InternetNZ will begin a DNSSEC Key Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of three maintenance windows. In each window, we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first maintenance window will be: https://status.internetnz.nz/incidents/0rf46mdh9tdv For questions or issues, please contact registry(a)internetnz.net.nz. For updates, please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 2

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 01 Dec '25

01 Dec '25

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/6yjnwkgnnkvf For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

Minimizing the BGP Flap Storm risk in NZ ... can I ask a favor?
by Barry Greene 10 Nov '25

10 Nov '25

Hi Team, Some know me, some don’t. I’m asking as someone who has been around BGP security/resiliency for a while. We have a risk in the industry that we can all prevent - by deploying the BGP session security tools whenever we configure BGP sessions. Our Problem: We have ~274,000 BGP sessions open to anyone in the world who wishes to initiate a low-level DDoS attack to disrupt the BGP session. New Zealand currently has ~470 open BGP sessions. The Risk: A BGP Session knockdown risk model exists that can target an organization, an ISP, a whole country, or the entire Internet. Is this a serious risk? About a year ago, I conducted a Shadowserver Ops review with one of the major US broadband companies. I shared with my peers working there that they had ~60 BGP IPv6 sessions open to the risk (no iACLs, no ACL on the device, no control plane protection, no GTSM, etc). They have been part of tabletop exercises where “BGP Flap Storm” was used as one of the plays. Once informed, they resolved the issue within 40 minutes through an emergency ACL deployment. The ask: Deploy the basics of BGP Session Security on all your existing BGP Sessions. Talk to your peers on the other side of the BGP session to fix their BGP Session security (remember, BGP session re-establishment could happen from either side). Update your processes, procedures, and SCRIPTs to include BGP Session security (one of my theories is that people are using scripts to deploy that are not complete). If you need a complete breakdown of which routers on your network have their BGP session open, take the simple route and sign up for the Daily Shadowserver reports on your network. They are free for you. I’ve locked down many ISPs’ security risks just by using the Shadowserver reports. Just go to this link to subscribe: https://www.shadowserver.org/what-we-do/network-reporting/get-reports/ Sincerely, Barry Greene Old Security Geek WhatsApp/Signal +1 408 218 4669. PS - I’m asking this just in New Zealand right now because I live here (now) and wondering if we could knock out this risk …. Or is the potential of a BGP Flap Storm knocking out Telecom something we have to just live with? Resources to Review Shadowserver Dashboard Global https://dashboard.shadowserver.org/statistics/combined/time-series/?date_ra… Shodan Global BGP Dashboard https://www.shodan.io/search/report?query=product%3Abgp+port%3A%22179%22&ti… Advisory to FIRST Community - BGP Port 179 DDoS Risk Or How to cause unprecedented global chaos this week. https://docs.google.com/document/d/1oDD5-qlu0rlHUtjNZHKrfdug99ynSXHc2v dHPktTFH4/edit?usp=sharing Protecting BGP Sessions - Step-by-Step Guide to Prevent an Easy DDoS https://docs.google.com/document/d/13GoLbWmeypFerOJCh5Dp4-KcMu4BArXJP33PfYJ… Shadowserver Report: HIGH: Open BGP Service Report https://www.shadowserver.org/what-we-do/network-reporting/open-bgp-service-… Shadowserver Report: MEDIUM: Accessible BGP Service Report https://www.shadowserver.org/what-we-do/network-reporting/accessible-bgp-se…

1 0

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 09 Nov '25

09 Nov '25

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/gb1hdqdfh9jn For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

NZNOG2026 - Call for Presentations
by Richard Nelson 04 Nov '25

04 Nov '25

Here is the official call for presentations for next year's conference. This year we will be accepting in batches on an ongoing basis. This call will probably be repeated in the New Year to help get any extra presentations we need. Richard ** *NZNOG 2026 Call for Presentations* * The NZNOG Trustees invite presentation proposals for the 23rd NZNOG conference, to be hosted at the Te Pae Christchurch Convention Centre from 23–27 March 2026. Conference objective: The NZNOG conference, workshops and tutorials are an opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies, practices and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submissions on any aspect of networking are welcome however we are particularly interested in presentations that involve real world operational experience, particularly in New Zealand. Conference registration for accepted presenters will be free. Submit a proposal: Presenters are invited to submit presentation proposals. Talks will be reviewed and accepted (or rejected) as they are received. Often we will have a discussion with a potential presenter to refine the proposed content and ensure it is appropriate for our audience. We are also happy to have a chat about your idea before you make a proposal. Please provide your talk title, a short presenter bio and a description of the proposed presentation. Description should be no more than one page long and provide a summary of your networking related subject matter. Normally presentations are 30 min long, are video streamed live and slide decks are posted to the NZNOG website. If you want a different duration or other arrangements please let us know at submission time. To submit your proposal please e-mail: talks(a)nznog.org <mailto:talks@nznog.org> www.nznog.org *

1 0

APRICOT 2026: Call for Papers
by Mark 25 Sep '25

25 Sep '25

Hello NZNOG, The APRICOT 2026 Program Committee chairs are pleased to announce that the Call for Papers (CfP) has been published at the below URL: https://2026.apricot.net/programme/callforpresentations We look forward to receiving your submissions, noting that the APRICOT 2026 conference in Jakarta, Indonesia will be held one month earlier than is usually the case; 9th - 11th February, 2026. The sooner you can submit your presentation, the greater the chance it could make the final agenda. Any questions regarding the CfP please feel free to reach out to the PC team. Thank you. Mark Tinka, Mark Duffell & Achie Atienza APRICOT 2026 Programme Committee Chairs

1 0

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 10 Sep '25

10 Sep '25

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/mhsdtlp1s1nj For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

Spoofer Report for NZNOG for Aug 2025
by CAIDA Spoofer Project 08 Sep '25

08 Sep '25

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Aug 2025: none inferred Source Address Validation issues inferred during Aug 2025: ASN Name First-Spoofed Last-Spoofed 45177 DEVOLI 2025-08-23 2025-08-23 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

📢 Announcing: NZNOG 2026 in Christchurch!
by Richard Nelson 01 Sep '25

01 Sep '25

I'm very happy to announce that NZNOG 2026 will be held at Te Pae Christchurch Convention Centre from 23–27 March 2026. ✨ Format: Workshops & Tutorials: Monday 23 – Wednesday 25 March Conference Days: Thursday 26 & Friday 27 March Conference Dinner: Thursday night at the Air Force Museum of NZ, Wigram 🛏️ Accommodation options are listed here: https://www.nznog.org/conferences/nznog-2026/accommodation 🔧 Workshops & Tutorials – Call for ideas We’re looking for leaders to run 1-day or 3-day workshops. Got a topic in mind you’d love to see covered? Let us know — we may be able to match it with the right presenter. 💡 Sponsorship Our sponsorship prospectus will be sent out shortly. If your company hasn’t sponsored before and would like to be part of NZNOG 2026, email sponsorship(a)nznog.org for details. 🎤 Call for Presentations Coming soon! ✅ Registration will open once the workshop/tutorial programme is confirmed. We can’t wait to see you in Christchurch - Richard, on behalf of the NZNOG Trust

1 0

APRICOT 2026: Call for Volunteers (Programme Committee)
by Mark 31 Aug '25

31 Aug '25

Hi all, The APRICOT 2026 Organising Committee would like to welcome everyone to join us in Jakarta, Indonesia, from 5th - 12th February 2026. The APRICOT 2026 PC (Programme Committee) is responsible for the solicitation and selection of suitable presentations and tutorial content for the APRICOT 2026 conference (https://2026.apricot.net/) We are now seeking VOLUNTEERS from the community to join the APRICOT 2026 PC to assist with the development of the programme for APRICOT 2026. Eligible PC candidates must have attended recent APRICOT events, be active members of their local NOG (Network Operators Group) in the Asia Pacific region, have broad technical knowledge of Internet operations, and have good familiarity with the format of APRICOT. Having constructive opinions and ideas about how the programme content might be improved is of high value too. PC members are expected to work very actively to solicit content, follow-through with speaker updates and review submissions for technical merit. The PC meets by conference call, weekly in frequency during the three months prior to APRICOT. While participation in the weekly calls is not obligatory, active participation in content reviews is required at all times to help the PC reach consensus. PC members who are unable to fully participate in the programme development will be excused from the PC. If you are interested in joining the PC and meet the above eligibility criteria, please send a brief note to "pc-chairs at apricot.net". The note must include affiliation (if any) and a brief description about why you would make a good addition to the PC. The PC Chairs will accept nominations received by 17:00hrs UTC+8 on Sunday 7th September 2025, and will announce the new PC shortly thereafter. Many thanks! Mark Tinka, Achie Atienza & Mark Duffell APRICOT 2026 Programme Committee Chairs

1 0

InternetNZ .nz DNSSEC KSK Standby Chain Rollover
by Felipe Barbosa 06 Aug '25

06 Aug '25

InternetNZ will begin a DNSSEC Key Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of three maintenance windows. In each window, we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first maintenance window will be: https://status.internetnz.nz/incidents/668s3pjy9zpv For questions or issues, please contact registry(a)internetnz.net.nz. For updates, please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 2

OARC 45 Call for Contributions - CfP closes next Tuesday!
by Felipe Barbosa 27 Jul '25

27 Jul '25

Forwarding on behalf of OARC: ⏰ Only a few days left... What could you be doing this weekend? The Call for Presentations for OARC45 closes on July 29, 2025 at 23:59 UTC. All DNS-related subjects and discussion topics are encouraged, now’s the time to submit your proposal. Don't miss your chance to be part of the agenda in Stockholm. https://www.dns-oarc.net/oarc45 Hope to see you there! -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 0

Spoofer Report for NZNOG for Jun 2025
by CAIDA Spoofer Project 08 Jul '25

08 Jul '25

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Jun 2025: none inferred Source Address Validation issues inferred during Jun 2025: ASN Name First-Spoofed Last-Spoofed 9500 VODAFONE-TRANSIT 2025-03-19 2025-06-19 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Spoofer Report for NZNOG for May 2025
by CAIDA Spoofer Project 08 Jun '25

08 Jun '25

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during May 2025: none inferred Source Address Validation issues inferred during May 2025: ASN Name First-Spoofed Last-Spoofed 9500 VODAFONE-TRANSIT 2025-03-19 2025-05-29 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 05 Jun '25

05 Jun '25

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/dgmt15cqy4r7 For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

Call for Papers - APNIC 60
by Christopher Hawker 31 May '25

31 May '25

Hello everyone, The APNIC 60 Program Committee (PC) is seeking presentations for the APNIC 60 conference in Da Nang, Viet Nam. The three conference days will be held from 9 to 11 September 2025. We are looking for content that would suit technical sessions, tutorials, lightning talks, BoFs and panel discussions. APNIC 60 conference registration is free for selected speakers. Topics for conference sessions must be relevant to Internet operations and technologies. The following topics are examples of possible areas of interest. * IP core network routing, switching * IPv6 deployment and transition technologies * Access and transport networks including Cable/DSL, LTE/5G/6G, wireless, metro ethernet, fibre, segment routing * Cyber security, network security issues (NSP-SEC, DDoS, Anti-Spam, Anti-Malware) and BCPs * Software defined networking, network function virtualization and network automation * Content & service delivery (Multicast, Voice, Video, Telepresence, Gaming) and cloud computing * DNS / DNSSEC and RPKI * IXPs and Peering * Internet of Things (IoT) architectures, standards, services, security, addressability, and manageability * Smart Cities architecture, security, and addressing * Research on Internet operations and deployment * Quantum computing * AI in network operations Presentations are expected to last 20 minutes, and tutorials are expected to last 90 minutes. It's acceptable to submit a talk you've already given or have submitted to another conference. If you would like to submit a presentation, head over to https://submission.apnic.net/user/login.php?event=222. The final deadline for submissions is Monday 30 June 2025. More information can be found on https://conference.apnic.net/60/program/callforpresentations/index.html. If you have any questions or concerns, please do feel free to send an email to the Program Committee at apnic-pc(a)apnic.net<mailto:apnic-pc@apnic.net>. ----- Regards, Christopher Hawker On behalf of the APNIC 60 Program Committee

1 0

Spoofer Report for NZNOG for Apr 2025
by CAIDA Spoofer Project 08 May '25

08 May '25

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Apr 2025: none inferred Source Address Validation issues inferred during Apr 2025: ASN Name First-Spoofed Last-Spoofed 9500 VODAFONE-TRANSIT 2025-03-19 2025-04-29 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Fwd: [dns-operations] OARC 45 Call for Contributions
by Felipe Barbosa 30 Apr '25

30 Apr '25

Forwarding on behalf of OARC. -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580 ---------- Forwarded message --------- From: Cathy Almond <cathya(a)isc.org> Date: Wed, Apr 30, 2025 at 1:45 PM Subject: [dns-operations] OARC 45 Call for Contributions To: <dns-operations(a)lists.dns-oarc.net> The OARC 45 workshop Call for Contributions is now open! This workshop will be a hybrid event. Date - 7-8 October 2025 Location - Stockholm, Sweden Time - Approx 10:00 CEST (08:00 UTC) - 17:00 CEST (15:00 UTC) Adjacent to Netnod Tech Meeting 2025 (9 October 2025) (https://www.netnod.se/netnod-tech-meeting-2025) Deadline for Submissions - 2025-07-29 23:59 UTC https://indico.dns-oarc.net/event/55/abstracts/ All DNS-related subjects and discussion topics are welcome although we're particularly keen to hear more about operational and security related experiences, best practices and practical advice; both for newcomers to the DNS arena and those who have been around for longer who want to learn more about new features and opportunities to improve resilience, security and privacy. (These topics we think will complement the usual high-quality data-based research submissions we always hope to receive!) If you have something interesting to share with the community that lies outside of the focus above, please don't be put off - if it's good, we'll be happy to include it. If you'd like to offer a talk, but are not quite sure what to pick, here's a non-exhaustive list of ideas: 1. Operations & Deployment Configuration management, deployment processes, and interoperability experiences. Tools, tips, and making effective use of DNS software features. 2. Performance, Resilience & Scaling Provisioning, load-balancing, and planning for resilience. DNS performance management, efficiency improvements, and metrics. Monitoring infrastructure: log pipelines, analytics, and anomaly detection. 3. Security, Privacy & Policy DoS attacks, DNS abuse, DNSSEC signing and validation. Privacy considerations, for example: encrypted transport, qname minimization, data anonymization. Relevant global and regional policies, legislation, and compliance. 4. Research & Innovation Data-driven testing, measurement, and analysis. New protocols, protocol extensions, and next-generation namespace management. 5. Lessons & Learnings Outage experiences, recovery stories, and cautionary tales For further details please see https://www.dns-oarc.net/oarc45 Cathy Almond, for the DNS-OARC Programme Committee _______________________________________________ dns-operations mailing list dns-operations(a)lists.dns-oarc.net https://lists.dns-oarc.net/mailman/listinfo/dns-operations

1 0