- NZNOG - lists.nznog.org

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 28 Apr '25

28 Apr '25

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/wh80pfs8w3z2 For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

Conference Programme and Lightning talks
by Richard Nelson 09 Apr '25

09 Apr '25

The conference starts tomorrow. The programme is at https://www.nznog.org/conferences/nznog-2025/programme There is a lightning talks session again so we will be looking for anyone with a quick five to ten minute presentation/talk/rant they would like to give in that session. If that is you, please email talks(a)nznog.org.

1 0

Fwd: [ih] In loving memory of (Mr. Bufferbloat) Dave Täht <3
by Brian E Carpenter 02 Apr '25

02 Apr '25

I think some people here will remember Dave. He was a powerhouse. Brian -------- Forwarded Message -------- Subject: [ih] In loving memory of (Mr. Bufferbloat) Dave Täht <3 Date: Tue, 1 Apr 2025 10:47:51 -0700 From: the keyboard of geoff goodfellow via Internet-history <internet-history(a)elists.isoc.org> Reply-To: the keyboard of geoff goodfellow <geoff(a)iconia.com> To: Internet-history <internet-history(a)elists.isoc.org> ---------- Forwarded message --------- From: Frantisek Borsik <frantisek.borsik(a)gmail.com> Date: Tue, Apr 1, 2025 at 7:27 PM Subject: In loving memory of Dave Täht <3 Hello to all, We’re devastated to announce that Dave Täht has passed away. <https://libreqos.io/2025/04/01/in-loving-memory-of-dave/> Dave was an amazing man, helping the world with FQ-CoDel and CAKE, fighting bufferbloat and trying to make the world a better place. Always willing to help, and without him – LibreQoS (and the other QoE solutions out there) wouldn’t exist. Dave was an inspiration, and we all miss him. We’re reaching out to family and close friends to see if there’s anything we can do to help. Dave was an inspiration to us. Dave’s contributions to Linux, FQ-CoDel, and CAKE improved internet connectivity around the world for millions of people. Because of him, millions of people now have access to reliable video calls – and in turn, access to loved ones, healthcare, and community. One of Robert’s ISP customers is a kind paraplegic woman who lives in a far-flung rural Colonia around El Paso, Texas. Her reliable access to her doctors through telemedicine, and to her family through FaceTime, was only made possible because of his algorithms. There are millions of cases like hers, where Dave’s contributions have silently enabled human connection and safety. Everything Dave contributed to the world of technology was free and open source, for the betterment of humanity. Dave is the reason that Starlink was able to tackle its latency issues – enabling a generation of young entrepreneurs across the developing world, such as these young folks pictured in the Phillipines, to start their own ISPs to expand internet access to their communities. Dave started work on FQ-CoDel in part because of his own journey working to expand internet access in Nicaragua, so we know he saw that his work had come full-circle and helped so many. We’re incredibly grateful to have Dave as our friend, mentor, and as someone who continuously inspired us – showing us that we could do better for each other in the world, and leverage technology to make that happen. He will be dearly missed. *PS: *Dave is forever in our hearts and souls, in our routers and...in production! *https://github.com/LibreQoE/LibreQoS/pull/684 <https://github.com/LibreQoE/LibreQoS/pull/684>* All the best, Frank Frantisek (Frank) Borsik https://www.linkedin.com/in/frantisekborsik Signal, Telegram, WhatsApp: +421919416714 iMessage, mobile: +420775230885 Skype: casioa5302ca frantisek.borsik(a)gmail.com -- Geoff.Goodfellow(a)iconia.com living as The Truth is True -- Internet-history mailing list Internet-history(a)elists.isoc.org https://elists.isoc.org/mailman/listinfo/internet-history

2 1

AusNOG 2025 - Call For Papers is open!
by Mark 02 Apr '25

02 Apr '25

Hello! AusNOG 2025 Call For Papers is now open! We are looking for presentations that an audience working predominantly in the network operating space will find interesting and useful. As always, we do not accept marketing or sales material as part of any presentation. The CFP will close on May 30th 2025. This allows time for the Program Committee to review papers and choose the program. Please express your interest and submit a short abstract of the topic you'd like to present, via our portal; https://cfp.ausnog.net/ausnog-2025/ Thank you, and see you in Melbourne, for AusNOG September 2025! Event dates and details here; https://www.ausnog.net/ Regards, Mark Duffell on behalf of the AusNOG PC (Jocelyn, Joe, Phil, James & Michael)

1 0

DNSSEC Root Key Signing Key (KSK) for the Domain Name System
by Christopher Hawker 28 Mar '25

28 Mar '25

Hello Everyone, As many of you may know, one of the functions of the Internet Assigned Numbers Authority (IANA) is the global coordination of the DNS Root Zone. One of the core components to DNS is DNSSEC. The Root Key Signing Key (KSK) acts as the trust anchor for DNSSEC for the Domain Name System, and this trust anchor is configured in DNSSEC-aware resolvers to facilitate validation of DNS data. This is how your DNS servers are able to cryptographically validate the authenticity of DNS records they receive and serve. For more information pertaining to DNSSEC, how it operates, the KSK and the relevant policies and procedures, I recommend visiting https://www.iana.org/dnssec for more info. In order to ensure the security of the KSK, IANA utilises Hardware Security Modules (HSM) to generate the KSK pair of public and private keys, which in turn are used to sign the Zone Signing Key (ZSK), that itself is used to sign DNS records (RRsets) within a DNS zone. As it currently stands, both of these HSMs currently reside in high-security Key Management Facilities (KMFs) in the USA, with one facility located in Culpeper VA, and the other in El Segundo CA. Now, while the locations of these HSMs are highly secure, both of them are located on US soil. As most people who are familiar with redundancy, this is not a good idea for a number of reasons (which I won't go into detail here as it's outside the scope of this email). What we as a community MUST DO, is look at the relocation of one of these HSMs to an alternate country such as Singapore or Switzerland (regarded as two safe countries) to ensure the continued integrity of the Root KSK. Unfortunately, section 4.2(b) of the IANA Naming Function Contract (https://pti.cdn.icann.org/resources/151/IANA_Naming_Function_Contract.pdf) between the Internet Corporation for Assigned Names and Numbers (ICANN) and Public Technical Identifiers (PTI) that govern how IANA performs its functions prohibits the operation of functions outside of the US. Given that the Internet is one of the most critical pieces of global (and not just US-based) infrastructure, I feel that this section of the contract must be reviewed (and deleted or modified to allow for PTI to perform the functions from Singapore, Switzerland or another safe jurisdiction) to maintain the integrity of the Domain Name System. The Second IANA Naming Function Review Team (IFRT2) have released an initial draft report of its analysis, issues and recommendations which also incorporates a review of the Contract between ICANN and PTI. The IFRT2 have opened a public call for comments on the draft report, before they submit their Final Report to ICANN's Board of Directors which they expect to do before June this year. The Public Comment period closes for submissions on 28 April 2025 at 23:59hrs UTC, and I strongly encourage everyone to read the report and provide input regarding support to relocating one of the Key Management Facilities across the Pacific or Atlantic Oceans. To view the report and submit a comment, please go to https://www.icann.org/en/public-comment/proceeding/second-iana-naming-funct…. In order to submit a comment on the report, you will need an account on https://account.icann.org/. In closing, I cannot stress one thing enough - this is in no way speaks to the professionalism of ICANN's staff. The team at ICANN perform some of the hardest work out there, ensuring the integrity and stability of the Internet as we know it today and for that they cannot be thanked enough. This recommendation to move one of the KMFs overseas is simply to help protect it from potential political instability, bias, and to encourage neutralism. We're already doing it with the operation of the DNS Root Zone, let's take it one step further and strengthen the security of DNSSEC and the Root KSK. If you have any questions, please do feel free to ask, either on-list or off-list. Regards, Christopher Hawker

1 0

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 10 Mar '25

10 Mar '25

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/x98psycvxphw For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

Internet pioneer David Dix has passd away
by Richard Haakma 25 Feb '25

25 Feb '25

Hi all. New Zealand Internet pioneer David Dix has passed away today, the 22nd of February 2025. David was the founder and owner of the KCBBS bulletin board system and KC Internet Company in the late 1980s. KC stands for Kappa Crucis, which is the tenth brightest object in the Southern Cross constellation, actually a star cluster also called the "Jewel Box" and came from David's other hobby, astronomy. David was involved with the Auckland Observatory and could get you a good deal on a telescope. KCBBS was built on 386BSD Unix which was a natural choice as the Unix operating system already had drivers for serial ports and multitasking which meant that it could support more than one user simultaneously. This was at a time when conventional BBS's running on MS-DOS supported one user only. Later the BBS was upgraded to a Sun workstation running SunOS. David wrote the BBS code himself in the C computer language. Unfortunately I believe the code was lost some years ago. The early Internet came to New Zealand via Waikato University and made its way to Auckland University, where KC first got a connection at 2400 bps. This was soon upgraded to 9600bps when David and friends discovered how to modify an asynchronous PC serial port to work on a synchronous data circuit. Curious KCBBS users could start to use email, but this was before hypertext and HTTP websites came in to use. Upgrades in speed and the change to actual router hardware, which was DEC hardware using licensed Cisco firmware, meant that the costs were growing. KC Internet was started to provide internet access to a few of David's mates in tech businesses for a fee to cover the budget. More customers were found and KC Internet became a commercial internet provider. Users of the KCBBS BBS program continued to use it for free. KC dropped the connection to Auckland University and became directly connected to Waikato University. When the universities wanted to get out of the chain of commercial internet activity the international service was handed over to a branch of Telecom and KC Internet became a customer of Telecom. David became interested in solar and wind power so installed a wind turbine and solar system which was large enough to run the ISP equipment 24/7 and no mains power. For a time KC Internet was the greenest ISP in New Zealand. The mains power would go off all up and down the street and David's place still had the lights on, making his neighbours curious. This was around the time of the great electricity crisis of Auckland CBD and KC internet was not affected. Getting data services installed to David's suburban basement became a problem and the core was moved to the CBD and away from the solar system, which meant that KC Internet was no longer the greenest ISP. Eventually health problems meant that David needed to step back from KC Internet and David had a quieter life and continued to benefit from that solar power system at home which is still working now. David passed away comfortably in North Shore Hospital. Regards, RH.

4 3

Re: Internet pioneer David Dix has passd away
by Richard Haakma 25 Feb '25

25 Feb '25

Hi. David's ashes will be scattered at Eucalyptus Grove Waikumete Cemetery at 11am 27 February, which is tomorrow. Regards, RH. On Tue, 2025-02-25 at 12:41 +0000, Stephen wrote: > Hi Richard, > > My condolences, is there a service planned? > > I did not know David personally, but have known of him for nearly 30 > years now. > > Thanks > > Stephen > > > On Saturday, February 22nd, 2025 at 6:58 PM, Richard Haakma via NZNOG > <nznog(a)lists.nznog.org> wrote: > > > > > > > Hi all. > > > > New Zealand Internet pioneer David Dix has passed away today, the > > 22nd > > of February 2025. > > > > David was the founder and owner of the KCBBS bulletin board system > > and > > KC Internet Company in the late 1980s. > > > > KC stands for Kappa Crucis, which is the tenth brightest object in > > the > > Southern Cross constellation, actually a star cluster also called > > the > > "Jewel Box" and came from David's other hobby, astronomy. David was > > involved with the Auckland Observatory and could get you a good > > deal on > > a telescope. > > > > KCBBS was built on 386BSD Unix which was a natural choice as the > > Unix > > operating system already had drivers for serial ports and > > multitasking > > which meant that it could support more than one user > > simultaneously. > > This was at a time when conventional BBS's running on MS-DOS > > supported > > one user only. Later the BBS was upgraded to a Sun workstation > > running > > SunOS. > > > > David wrote the BBS code himself in the C computer language. > > Unfortunately I believe the code was lost some years ago. > > > > The early Internet came to New Zealand via Waikato University and > > made > > its way to Auckland University, where KC first got a connection at > > 2400 > > bps. This was soon upgraded to 9600bps when David and friends > > discovered how to modify an asynchronous PC serial port to work on > > a > > synchronous data circuit. > > > > Curious KCBBS users could start to use email, but this was before > > hypertext and HTTP websites came in to use. > > Upgrades in speed and the change to actual router hardware, which > > was > > DEC hardware using licensed Cisco firmware, meant that the costs > > were > > growing. KC Internet was started to provide internet access to a > > few of > > David's mates in tech businesses for a fee to cover the budget. > > More > > customers were found and KC Internet became a commercial internet > > provider. > > > > Users of the KCBBS BBS program continued to use it for free. > > KC dropped the connection to Auckland University and became > > directly > > connected to Waikato University. When the universities wanted to > > get > > out of the chain of commercial internet activity the international > > service was handed over to a branch of Telecom and KC Internet > > became a > > customer of Telecom. > > > > David became interested in solar and wind power so installed a wind > > turbine and solar system which was large enough to run the ISP > > equipment 24/7 and no mains power. For a time KC Internet was the > > greenest ISP in New Zealand. The mains power would go off all up > > and > > down the street and David's place still had the lights on, making > > his > > neighbours curious. This was around the time of the great > > electricity > > crisis of Auckland CBD and KC internet was not affected. > > > > Getting data services installed to David's suburban basement became > > a > > problem and the core was moved to the CBD and away from the solar > > system, which meant that KC Internet was no longer the greenest > > ISP. > > > > Eventually health problems meant that David needed to step back > > from KC > > Internet and David had a quieter life and continued to benefit from > > that solar power system at home which is still working now. > > > > David passed away comfortably in North Shore Hospital. > > > > Regards, > > RH. > > > > _______________________________________________ > > NZNOG mailing list -- nznog(a)lists.nznog.org > > To unsubscribe send an email to nznog-leave(a)lists.nznog.org

1 0

NZNOG 2025 Registration and CFP
by Richard Nelson 24 Feb '25

24 Feb '25

Registration is now open for NZNOG2025 at https://nznog-2025.lilregie.com/booking/attendees/new. Also, remember the CFP is open. Thanks to those who submitted papers already but we definitely need more. https://www.nznog.org/conferences/nznog-2025/call-for-papers Richard

1 0

NZNOG Conference Call for Presentations
by Richard Nelson 09 Feb '25

09 Feb '25

** *NZNOG 2025 Call for Presentations* * The NZNOG Trustees invite presentation proposals for the 22nd NZNOG conference, to be hosted at the Napier War Memorial Centre on April 10 and 11, 2024. Conference objective: The NZNOG conference, workshops and tutorials are an opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies, practices and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submissions on any aspect of networking are welcome however we are particularly interested in presentations that involve real world operational experience, particularly in New Zealand. Conference registration for accepted presenters will be free. Submit a proposal: Presenters are invited to submit presentation proposals for consideration by 10 March, 2025. Talks maybe accepted as they are received. Please provide your talk title, a short presenter bio and a description of the proposed presentation. Description should be no more than one page long and provide a summary of your networking related subject matter. Normally presentations are 30 min long, are video streamed live and slide decks are posted to the NZNOG website. If you want a different duration or other arrangements please let us know at submission time. To submit your proposal please e-mail: talks(a)nznog.org <mailto:talks@nznog.org> If you have any ideas that you would like to discuss informally first, we are happy to have a discussion. www.nznog.org *

1 0

InternetNZ - DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 28 Jan '25

28 Jan '25

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/185cfqrcq00m For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

InternetNZ - DNSSEC NSEC3PARAM Change
by Felipe Barbosa 10 Jan '25

10 Jan '25

InternetNZ will change some NSEC3 parameters in the current standby chain. To be explicit, we will change two parameters, <Iterations> and <Salt length>, both to zero(0). These changes will be reflected in all our 16 zones. The status and scheduling will be posted to status.internetnz.nz. We will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz and school.nz The change window is on the following link: https://status.internetnz.nz/incidents/yvwv7sm636gf For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

InternetNZ - DNSSEC DS-SHA-1 Removal
by Felipe Barbosa 10 Jan '25

10 Jan '25

InternetNZ will remove the DS records with digest SHA-1 in our second-level zones in the current standby chain. To be explicit, we will remove SHA-1 DS records belongs our 15 domains: ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz and school.nz In total, 15 DS records will be removed. The status and scheduling will be posted to status.internetnz.nz. We will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz and school.nz The change window is on the following link: https://status.internetnz.nz/incidents/d0cpttn2htns For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 1

Do you need a satellite?
by Jonathan Brewer 17 Dec '24

17 Dec '24

Tēnā koutou, Are you in need of a satellite? If so I have a deal for you.* You may have bent my ear in Rotorua asking about creative and innovative options for a few tens of gigabits of dedicated capacity, priced in the high tens to low hundreds of millions of dollars. As we know, this is enough to be useful in times of earthquake or anchor-dragging accident. At the time of our conversation I had no real options. Times have changed! Please do reach out - this email or a call or text is fine. Ngā mihi nui, Jon * Space lasers not included

1 0

NZNOG 2025 Update
by Richard Nelson 15 Dec '24

15 Dec '24

** *Hopefully you all know that NZNOG - 2025 is going to be in Napier on April 10 and 11. Since we have moved to the April time, things run a little later than they did for the conferences in January. Here’s an update about what’s going on.* * Talks: This is a heads up that we will be issuing a Call for Papers in late Jan or early Feb. Please think about the great presentations you can give over the holiday period! Feel free to reach out and discuss any ideas you have with me or the other trustees. We are always interested in good NZ stories - tell us about something you’ve done recently, whether it’s gone well, or if there are mistakes we can all learn from. Sponsorship: NZNOG relies on our fantastic sponsors. We have had great response from sponsors already, and there are still a few spots left. If any one wants to sponsor and was missed in the mail out, please contact sponsorship(a)nznog.org <mailto:sponsorship@nznog.org>. Registration / Accommodation: Registration and accommodation information will be available in the new year. Systers: For the last several years, IAA has run an event called Systers in Australia, which aims to grow participation and support women and gender diverse people in our industry. Systers is a one day workshop that provides expert career advice, and helps build important soft skills that support career advancement, and participants then attend the conference in the following days. For the first time, NZNOG has teamed up with IAA to run IAASysters NZ the day before NZNOG. We are looking for both sponsors and participants in the workshop. Sponsorship helps run the workshop, and covers costs for selected participants to attend the workshop and NZNOG. If your organisation would be interested in sponsoring, if you want to attend, or think it would be useful for someone you know, more information can be found at https://internet.asn.au/iaasysters-nz/ <https://internet.asn.au/iaasysters-nz/>. Richard for NZNOG Trustees *

1 0

list.waikato.ac.nz Has Moved
by Donald Neal 12 Dec '24

12 Dec '24

NZNOG-People, I have just finished migrating all of the mailing lists held at The University of Waikato from one server to another. I don't have any reason to believe that anything's gone wrong, but please bear with me for today if it turns out that something has. - Donald Neal -- Donald Neal | Q: How many Aucklanders does it take to change Systems Programmer/Analyst | a light bulb? The University of Waikato | A: Pass me that candle and I'll tell you. Hamilton, New Zealand | --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

InternetNZ .nz DNSSEC ZSK Standby Chain Rollover
by Felipe Barbosa 25 Nov '24

25 Nov '24

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window is on the following link: https://status.internetnz.nz/incidents/tlq8b169727q For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 0

InternetNZ .nz DNSSEC KSK Standby Chain Rollover
by Felipe Barbosa 19 Nov '24

19 Nov '24

InternetNZ will begin a DNSSEC Key Signing Key rollover in our current standby chain. This should not affect the active chain used in DNS resolution for .nz. The status and scheduling will be posted to status.internetnz.nz. This will consist of three maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones: nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window will be tomorrow: https://status.internetnz.nz/incidents/10yq25ffq2z7 For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Ngā mihi Felipe Agnelli Barbosa DNS Specialist InternetNZ | Ipurangi Aotearoa We are the home of .nz and we work for an Internet that benefits all of Aotearoa. www.internetnz.nz GPG: 95C1 8BDC EFA7 9CAC 303D 003E A058 2449 D152 8580

1 0

BNZ Contact
by George Mitchinson 24 Oct '24

24 Oct '24

Apologies if this is not the correct forum, but if there is anyone from the BNZ team on the list could they please make contact. We have an Email issue we are trying to resolve and struggling to make contact with anyone from the BNZ to assist. Cheers, Mandos

2 2

APRICOT 2025: Call for Programme Committee Volunteers
by Mark 22 Oct '24

22 Oct '24

Hello! The APRICOT 2025 Organising Committee would like to welcome everyone to join us in Petaling Jaya, Malaysia, from 19th to 27th February 2025. The APRICOT 2025 Programme Committee is responsible for the solicitation and selection of suitable presentations and tutorial content for the APRICOT 2025 conference (https://2025.apricot.net/) We are now seeking VOLUNTEERS from the community to join the APRICOT 2025 PC to assist with the development of the programme for APRICOT 2025. Eligible PC candidates must have attended recent APRICOT events, have broad technical knowledge of Internet operations, and have good familiarity with the format of APRICOT. Having constructive opinions and ideas about how the programme content might be improved is of high value too. PC members are expected to work very actively to solicit content, follow through speaker updates and review submissions for technical merit . The PC meets by conference call, weekly in frequency during the three months prior to APRICOT. While participation in the weekly calls is not obligatory, active participation in content reviews is required at all times to help the PC reach consensus. PC members who are unable to fully participate in the programme development will be excused from the PC. If you are interested in joining the PC and meet the above eligibility criteria, please send a brief note to "pc-chairs at apricot.net". The note must include affiliation (if any) and a brief description about why you would make a good addition to the PC. The PC Chairs will accept nominations received by 17:00 UTC+8 on Sunday 27th October 2024, and will announce the new PC shortly thereafter. Many thanks! Mark Tinka, Achie Atienza & Mark Duffell APRICOT 2025 Programme Committee Chairs

1 0

InternetNZ .nz DNSSEC ZSK Standby Chain Rollover
by Josh Simpson 02 Oct '24

02 Oct '24

InternetNZ will begin a DNSSEC Zone Signing Key rollover in our standby chain, this should not affect the active chain used in DNS resolution for .nz, the status and scheduling will be posted to status.internetnz.nz. This will consist of two maintenance windows, in each window we will pause zone distribution to make changes, perform validation, and resume zone distribution for the following zones nz, ac.nz, co.nz, cri.nz, geek.nz, gen.nz, govt.nz, health.nz, iwi.nz, kiwi.nz, maori.nz, mil.nz, net.nz, org.nz, parliament.nz, and school.nz The first change window will be used to add new Zone Signing Keys. https://status.internetnz.nz/incidents/xlygrzg6d3tg The second change window will be used to remove inactive Zone Signing Keys. https://status.internetnz.nz/incidents/tftwdv101sz0 For questions or issues please contact registry(a)internetnz.net.nz, for updates please subscribe to the IRS Production > Zone Publish component of status.internetnz.nz -- Josh Simpson Product Infrastructure Lead InternetNZ | Ipurangi Aotearoa www.internetnz.nz

1 0

L4S
by Jay Daley 05 Sep '24

05 Sep '24

This is related to my day job at the IETF. If anyone here is considering or already implementing L4S and is willing to share their experiences for an industry briefing paper then please drop me a line. thanks Jay -- Jay Daley jay(a)daley.org.nz

1 0

Submit a paper for APIX30!
by Narelle Clark 29 Jul '24

29 Jul '24

Hi all! APIX#30 is scheduled for Tuesday 3 September 2024 and will be held alongside APNIC58 in Wellington, NZ. APIX is the Asia-Pacific Internet Exchange Association. The APIX Program Committee therefore invites presentations for the upcoming APIX#30 meeting. Suitable topics include:- * Internet Exchange ecosystem: topics related to the technical components of IXPs and their architectures * Internet Exchange operations: adopting new technology, monitoring and management of IXPs * Internet Exchange security: threats, mitigations and use cases in the IXP context * Internet Exchange growth and organisation: attracting new members, onboarding them and keeping them involved * Assessment and analysis of the impact of Internet Exchanges on the Internet ecosystem * Internet landscape generally: what big picture issues affect IXPs or their members * Data centre ecosystem: what trends are we seeing, what features and technology makes a DC a good home for an IXP? * Any other topics related to Internet and IXP operations. Presentations need to be of a practical orientation and directly assist the IXP community in establishing, running and growing IXPs. The intention is knowledge sharing and skill enhancement. Presentations aimed just at trying to sell services will not be accepted. Presentations can be in person or remote, you must tell us your preference. Hope to see you there -- Narelle Clark Chief Executive Officer Internet Association of Australia Ltd [cid:image001.png(a)01DAE1C7.1114FAA0] Suite 1.05, 150 Pacific Highway * North Sydney, NSW 2060 [Smart Phone with solid fill] +61 2 9037 6403 [Receiver outline] 1300 653 132 [Envelope with solid fill] ceo(a)internet.asn.au<mailto:ceo(a)internet.asn.au> [Earth globe: Asia and Australia with solid fill] www.internet.asn.au<http://www.internet.asn.au/> [cid:image006.jpg(a)01DAE1C7.1114FAA0]<https://internet.asn.au/events/nsw-ix-400gbps-ports/>

1 1

AS Number Management Study by TU Delft
by Nachiket Kondhalkar 18 Jul '24

18 Jul '24

Hello NZNOG community, APNIC and RIPE NCC have introduced an annual ASN maintenance fee from January 2025. As part of a research group currently studying AS Number management at TU Delft, we would like to understand the perspectives of network administrators in reference to this change. Your experience and expertise will help us understand and present the consensus of the community through our research. The link for the survey is : https://tudelft.fra1.qualtrics.com/jfe/form/SV_6DzjvsCOXjto8R0 For more information about the study: https://blog.apnic.net/2024/07/16/a-comprehensive-review-of-rir-policies-in… We would be grateful if you could take a few minutes to complete the survey. Your participation will help develop solutions for network operators. Thank you for your time and your input, Nachiket Kondhalkar TU Delft

1 0

nz DNSSEC KSK rollover - Standby Chain
by Josh Simpson 08 Jul '24

08 Jul '24

Kia ora koutou, InternetNZ is beginning its return to routine DNSSEC operations. Starting on 15-07-2024, we will begin our improved process, which incorporates changes from internal and external reviews following the DNSSEC incident in May 2023. This will consist of four short maintenance windows, in which we will pause zone distribution to make changes, perform validation, and resume zone distribution. The status and scheduling will be posted to status.internetnz.nz. To be notified, subscribe to IRS Production > Zone Publish Window 1 We will change the DS TTL in DNSSEC policy for the standby chain of second level domains. This change addresses the issues encountered in May 2023. Window 2 We will perform a KSK rollover on the standby DNSSEC chain for nz, ac.nz, co.nz, net.nz, gen.nz, org.nz, govt.nz, parliament.nz, geek.nz, school.nz, kiwi.nz, iwi.nz, maori.nz, cri.nz, health.nz, and mil.nz This will generate new DNSSEC keys and add them to the standby signing chain. Window 3 We will mark the keys generated in window 2 as active in the standby DNSSEC chain. Window 4 Window 4 will occur after the TTL safety period (2xTLL, 2 Days) has lapsed and DNSSEC RRSET validation is possible via both the old keys and new keys. The DNSSEC policies updated in Window 1 with the correct TTL timing will be enforced, this will result in the safe retirement of the old keys and allow us to remove redundant keys from the zones. The current standby chain key tags for each zone are as follows: nz: 49157, ac.nz: 5938, co.nz: 59176, cri.nz: 19190, geek.nz: 7171, gen.nz: 48574, govt.nz: 18181, health.nz: 33694, iwi.nz: 58454, kiwi.nz: 47464, maori.nz: 21689, mil.nz: 43906, net.nz: 25105, org.nz: 24626, parliament.nz: 49424, school.nz: 27382 We would like to emphasise that if you encounter any DNSSEC issues, please report them to us via registry(a)internetnz.net.nz. We will keep you updated, and provide a summary report at the conclusion of incident-related work. Ngā mihi Josh -- Josh Simpson Product Infrastructure Lead InternetNZ | Ipurangi Aotearoa www.internetnz.nz

1 0