- NZNOG - lists.nznog.org

New RIPE Atlas anchor in New Zealand
by Sebastian Castro 16 Apr '15

16 Apr '15

Dear community: We'd like to announce that the first of two RIPE Atlas [1] anchors [2] sponsored by NZRS has been installed in Auckland North Shore, and became active this morning. The anchor support both v4 and v6. This is the second anchor in New Zealand, the first hosted at Waikato University. The second anchor will be installed in Wellington at a later time, once some network architecture work is completed. NZRS is committed to support Internet research and network measurement, we are also Atlas ambassadors and we have Atlas Probes [3] available to distribute. If you are interested on hosting one for your own benefit and the benefit of the community, please contact me. We are currently using the Atlas probes located in New Zealand to conduct a topology discovery experiment from which you will hear in the coming weeks. [1] https://atlas.ripe.net/about/ [2] https://atlas.ripe.net/get-involved/become-an-anchor-host/ [3] https://atlas.ripe.net/get-involved/become-a-host/ Cheers -- Sebastian Castro Technical Research Manager NZRS Ltd. desk: +64 4 495 2337 mobile: +64 21 400535

1 0

beating bufferbloat with better hardware
by Dave Taht 08 Apr '15

08 Apr '15

When I was at the nznog conference there was a lot of despair about a lot of aspects of the fiber deployment, and the quality of the home gateways, and what seemed to be promising plans to try to get openwrt with fq_codel running on nzwrt... did you all despair completely? I talked about all the great things we could do to improve our devices with openwrt, and and beat bufferbloat in particular with fq_codel in my talk... and since then I have worked to get fq_codel in more and more OSes and hardware. UBNT has added configuration tools for it in their upcoming edgerouter 1.7 release. VyOS just added it. It is in click. It is in fedora 22. It is spreading (And of course, already in all modern linuxes, openwrt, dd-wrt, ipfire, shorewall, etc). There was no sign of a pulse at tilera or mikrotik, but I will keep trying. Still... to one day get hardware that has low latency and good queue management at gigE speeds or higher requires better hardware offloading techniques than the bulk notions like GRO and TSO that exist today. And it has long been obvious that the rate limiting + fq_codel techniques we use successfully at sub 200mbit speeds do not scale higher. So the algorithms need to move into hardware, also. *******so... a brief commercial interruption***** I think the open source design method has worked spectacularly for software, and I think the same methods can work for hardware if only we can pull together larger communities to do the work, worldwide. There are only 24 hours left on this kickstarter - we CAN *start* to take back the edge of the internet - if we can only find another 5k of funding. https://www.kickstarter.com/projects/onetswitch/onetswitch-open-source-hard… This FPGA board´s pcie interface and switch design - and the split memory interfaces between the programmable logic and the onboard dual A9 core - and reducing the cost from 7000 to 700 bucks - are the important parts to why the community needs this board - in my case - so that more of htb + fq_codel can move into hardware that anyone can build and use - in other cases? who knows what could be done with it!? One day, we could move the logic into asics, and finally have open source, blob-free hardware to work with for any network purpose. There are people on these lists with money, and there are those with talent and time, and it would be great if more of those people could line up with each other. I put in all I could spare (8500 dollars) into this kickstarter. I have one of their high end boards, already. It´s great. There is a get one give one program that I asked meshsr to put in to try and enable that event. If there is anyone here that would like to help hack together the next generation of edge network hardware, after this kickstarter completes, let me know. I return you now to your normal despair about vendors not listening, and crappy OSes you can´t otherwise fix. -- Dave Täht We CAN make better hardware, ourselves, beat bufferbloat, and take back control of the edge of the internet! If we work together, on making it: https://www.kickstarter.com/projects/onetswitch/onetswitch-open-source-hard…

2 1

SNMP for Mako / SecureME
by Tom Henderson 08 Apr '15

08 Apr '15

Wondering if anyone here knows if Mako routers (Spark's SecureME offering) can be monitored with SNMP? We use observium to monitor our servers and existing Cisco gear, but so far it looks like I can only monitor these from the SecureME web portal. Cheers Tom Henderson IT Manager | Pack & Company | 027 461 4403 | tom(a)pack.co.nz -- ---------------------------------------------------------------------------If you are not the intended recipient of this email, you must not disclose, copy, or distribute any information contained in or attached to it, or take any action/inaction based on it. Please contact us immediately, and delete this email from your system. Any views or opinions presented in this email are solely those of the author and not of Pack & Company (NZ) Limited (the "Company"), however any intellectual property contained in or attached to this email is the property of the Company. Thank you.

2 1

Call for presentations for AusNOG 2015
by Jamie Baddeley 06 Apr '15

06 Apr '15

A Call for Presentations from our mates across the ditch. Cue comments about Cricket, Currency Parity, Phar Lap, Pavlovas, Russell Crowe, Crowded House, Underarm bowling, etc etc.. Cheers Jamie ---------- Forwarded message ---------- From: Terry Manderson <terry(a)terrym.net> Date: 1 April 2015 at 05:39 Subject: [AusNOG] Call for presentations for AusNOG 2015 To: ausnog <ausnog(a)lists.ausnog.net> Call for presentations for AusNOG 2015 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Langham Hotel Melbourne 27 & 28 August 2015 Topics =-=-=- Internet operations can be a broad topic and the programme committee will be short-listing presentations in the following focus areas: * Improving the redundancy/resiliency/sustainability of your network * Making leaps in service or network availability * Taking the network operations BCP to the next level * Using 'offline' communications tools to keep the network working * How technology is changing network architectures * Evolution in network architectures and scaling issues * Analysis of relevant major operational events of the year Additional topics that are of interest to the network operator community are also welcome at AusNOG 2015. Naturally, presentations of a marketing nature are not welcome at this technical event. Notes to presenters =-=-=-=-=-=-=-=-=-= Preference will be given to presentations that result in actual operational outcomes. Session speakers should be prepared to present for 30 minutes. Keynote speakers will be expected to present for 45 minutes to 1 hour. Short presentations of strong operational content are also acceptable. Once the final slides are submitted, changes will only be permitted where the presentation requires the most up to date information or data. By submitting a presentation for consideration in the AusNOG 2015 programme, and if selected the presenter will allow AusNOG to: * Take photographs of the presentation and presenter * Record and rebroadcast video and audio of the presentation and presenter * Redistribute the presentation slides, audio, video, and photographs electronically, on the AusNOG website, or otherwise but leaving all intellectual property in the hands of presenter or rightful property holder[1]. Deadlines =-=-=-=-= 04 June: Submission of presentation title, presentation description (300 words), and presenter biography (200-400 words) 02 July: Presenters notified of their acceptance status as an AusNOG 2015 presentation. 20 August: Submission of final presentation slides as Portable Document Format (pdf), PowerPoint, or Keynote. Provision of a recent digital photograph (<500k) of the presenter. All submissions must be sent by email to organisers AT ausnog DOT net. A separate call for lightning talks will be made closer to the AusNOG 2015 event. As in previous years you must be registered to attend AusNOG 2015 in order to be considered for a lightning talk. [1]: AusNOG accepts that some speakers are unable to allow us to archive their presentation due to company or corporate policy, and if the situation arises AusNOG will delete all copies in its possession after the presentation. Lightning Talks =-=-=-=-=-=-=-=-= Have something awesome or cool to share that isn't a full presentation? New to presenting, and still want give back to the community? Why not consider a lightning talk? Lightning talks are short (max 10 minute) presentations on topical material. There is no requirement for any slides! A call for lighting talks will be made nearer to AusNOG 2015. Cheers Terry (For the AusNOG Board)

1 0

Hosting for test server - recommendations?
by Richard Nelson 24 Mar '15

24 Mar '15

Hi, We want to perform some testing of consumer broadband connections over the next three months. We are looking for somewhere to host a server for throughput testing. Happy to pay. The main requirements are for a neutral site well connected to all the major ISPs and for a network connection to easily handle (i.e. not limit) throughput for consumer speed connections - up to 200Mb/s (not gigatown). The testing will be for about 5 mins worth of streams per hour from an equal mix of ADSL, VDSL and UFB with tests staggered to occur one at a time. Testing repeats every hour. We can lease or provide our own server. If we get really lucky we'd like one site in Auckland and one not in Auckland. Any suggestions would be gratefully received. Thanks, Richard Nelson WAND Network Research Group.

1 0

ICT Equip Gensets & Ubiquity NZ for Vanuatu
by Andy Linton 20 Mar '15

20 Mar '15

Big ups to Primo Wireless in New Plymouth - this kit is on its way to Vanuatu. -- Andy Linton Mobile: +64 22 474 7156 Skype: asjlnz

3 3

Are you `asnet2' or `202.7.1.239' on the WIX?
by Michael Fincham 19 Mar '15

19 Mar '15

Whoever you are, it seems you're announcing some busted routes to the route servers, with an AS path of "429010481". -- Michael

2 1

ratelimiting/aqm/FQ on mikrotik/routerOS info
by Dave Taht 18 Mar '15

18 Mar '15

I am curious as to any existing support for ratelimiting and AQM/FQ on the tilera gear they have? Policing? anything? Keep hoping to make progress on this: http://forum.mikrotik.com/viewtopic.php?p=473253#p473253 -- Dave Täht Let's make wifi fast, less jittery and reliable again! https://plus.google.com/u/0/107942175615993706558/posts/TVX3o84jjmb

2 1

Vanuatu CYCLONE RECOVERY PROJECT
by Andy Linton 17 Mar '15

17 Mar '15

>From one of the .VU government coordinators: We urgently need the following. Can anyone supply and where from. I can assist with logistics from Auckland, Brisbane, Sydney. Please reply ASAP Item Quantity Spec USB RF Power Meter 1 Agilent U2041XA Cable and Antenna Analyser 1 Sitemaster PDR48 calibration kit 1 Sitemaster Transmission Analyser 1 JDSU MTS-5800 Please contact me and I'll put you in touch if you can help -- Andy Linton Mobile: +64 22 474 7156 Skype: asjlnz

1 0

Re: [nznog] openwrt capable routers for NZ?
by Ray Taylor 16 Mar '15

16 Mar '15

I understand as its generic firmware, I assume there will be many different compatible hardware options. The big thing though is the voip needs to be capable which may reduce your compatibility list. The market in NZ has dramatically changed with computer stores selling less and less routers, and the home users just using the router issued free from their ISP. And to make it work for an ISP in a fibre world, it needs to have a built in voip ATA Software: - WAN/LAN bridge mode - uPNP - IPv4 / IPv6 - Programmable 0.0.0.0/0 or gateway address when lan + wan in bridge mode - voip must work when in bridge mode. Have had problems with zyxel and others having no gateway address breaking voip when in bridge mode - router must be accessible from behind another nat gateway via a port forward. Enabling WAN admin access doesn’t always make this work with many routers Hardware: - Price point of $40-$50 so we can issue them free with service - A higher priced, higher speed option would be good for fibre based services - 3dbi antenna, 18db tx power - 802.11n 2.4ghz option. We don’t see the need for ac for at least 3 years There was recently a project between geekzone and telecom to build a "standard router for NZ" which was designed to be the perfect one with all the features that the GZ community wanted, could be issued for free by telecom and was capable of being used for DSL and fibre. They got as far as taking bids for the project from companies like huawei and the likes. Most of the features that the GZ community were proposing I found to be useless as an isp supplied router, but it would be worth looking at the feature list. I think a bit of googling might be needed to get to the feature voting page in the forums - it may have been deleted. Ray Taylor Taylor Communications ray(a)ruralkiwi.com Ph 021-483-280 Network status 06-929-9082 -----Original Message----- From: Dave Taht [mailto:dave.taht(a)gmail.com] Sent: Tuesday, 10 March 2015 11:45 a.m. To: Ray Taylor Subject: Re: [nznog] openwrt capable routers for NZ? always helpful to have that list. And have that list discussed publicly. This is the only public talk I have given about wifi... see second half. https://www.youtube.com/watch?v=Wksh2DPHCDI On Mon, Mar 9, 2015 at 3:43 PM, Ray Taylor <ray(a)ruralkiwi.com> wrote: > Im keen to take part > Wouldn’t know anything about designing firmware other than the list of features that I need. > > > > Ray Taylor > Taylor Communications > ray(a)ruralkiwi.com > > Ph 021-483-280 > Network status 06-929-9082 > > > > -----Original Message----- > From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Dave Taht > Sent: Tuesday, 10 March 2015 11:14 a.m. > To: Jed Laundry > Cc: NZNOG(a)list.waikato.ac.nz > Subject: Re: [nznog] openwrt capable routers for NZ? > > I see this thread has kind of died... I am looking for people willing to participate in the upcoming make-wifi-fast project. Along the way, we'll probably build a pretty good firmware for general use on some off-the-shelves piece of hardware, and it would be good to be able to test with your upcoming fiber deployment(s) as well as on the WISP sides of things. > > Please let me and jim gettys know if you are interested in helping out on this. > > -- > Dave Täht > Let's make wifi fast, less jittery and reliable again! > > https://plus.google.com/u/0/107942175615993706558/posts/TVX3o84jjmb > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > -- Dave Täht Let's make wifi fast, less jittery and reliable again! https://plus.google.com/u/0/107942175615993706558/posts/TVX3o84jjmb

5 5

Re: [nznog] NZNOG Digest, Vol 147, Issue 16
by Bevan McNaughton 16 Mar '15

16 Mar '15

We have 2x NanoStation M5's spare - let us know if you want them. Bevan On 17 March 2015 at 12:00, <nznog-request(a)list.waikato.ac.nz> wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. Ubiquiti gear for Vanuatu (Andy Linton) > 2. Re: Ubiquiti gear for Vanuatu (Dean Pemberton) > 3. Re: Ubiquiti gear for Vanuatu > (Matthew Harrison - PrimoWireless Ltd) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 17 Mar 2015 11:53:20 +1300 > From: Andy Linton <asjl(a)nsrc.org> > To: NZNOG List <nznog(a)list.waikato.ac.nz> > Subject: [nznog] Ubiquiti gear for Vanuatu > Message-ID: > <CALS-_Orno8qXbJUY78nNPBcTig+v6= > XkM5nzzmZOYPUneSHj4Q(a)mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > Here's what they're going to need. > On Tue, Mar 17, 2015 at 11:01 AM, Jethro Webston wrote: > > > Hi Andy, thank you for your assistance. We use NanoBridge, NanoBeam, and > > NanoStation M2 & M5. > > > > Cheers > > > > > > > Jethro > > We've had a number of offers already but if you have spares of these please > record them at: > > http://aidez.vu > > Be specific with models and quantities if you can. Remember they will need > power supplies and Ethernet cables as well. Fortunately .VU uses the same > plugs as .NZ > -- > Mail: asjl(a)nsrc.org > Mobile: +64 22 474 7156 >

1 0

Ubiquiti gear for Vanuatu
by Andy Linton 16 Mar '15

16 Mar '15

Here's what they're going to need. On Tue, Mar 17, 2015 at 11:01 AM, Jethro Webston wrote: > Hi Andy, thank you for your assistance. We use NanoBridge, NanoBeam, and > NanoStation M2 & M5. > > Cheers > > > Jethro We've had a number of offers already but if you have spares of these please record them at: http://aidez.vu Be specific with models and quantities if you can. Remember they will need power supplies and Ethernet cables as well. Fortunately .VU uses the same plugs as .NZ -- Mail: asjl(a)nsrc.org Mobile: +64 22 474 7156

3 3

The URL for help for Vanuatu
by Andy Linton 15 Mar '15

15 Mar '15

It's been a long day! I've sent the wrong URL twice. The urls to use are now: http://aidez.vu or http://help.vu Vanuatu is bilingual and we thought we should do the same! Forget about the flatnet one - I clearly can't remember it so why should you.

1 0

Vanuatu Update & Support
by Jonathan Brewer 15 Mar '15

15 Mar '15

Hi All, This morning I spoke with a friend from Vanuatu Government and to another who is CTO for Telsat Pacific, the largest TV operator & #2 ISP. Things are in pretty poor shape, but on the bright side: - Both cellular networks are fine in Port Vila - Internet and email from Telecom Vanuatu is working in Port Vila This makes life a lot easier for coordinating support - which will be needed: - Communication to remote islands is gone. It was all C-band satellite and those big dishes did not fare well. - Telsat lost four towers (that they know about) including their primary transmission site - though they expect to have some connectivity restored today or tomorrow. Vanuatu Government is going to nominate a central point of contact for offers of assistance relating to ICT. When that information is available and when they are ready for contact from you it will be posted here. Thanks to those who have already offered hardware and engineering resources - those offers have probably made the days of a few people in Vanuatu today. Thanks, Jon P.S. I'm in the wrong timezone for this (GMT -1) so it may not be me posting with an update.

3 3

Generators for Vanuatu
by Andy Linton 15 Mar '15

15 Mar '15

Someone form Primo Wireless in New Plymouth offered some generators via http://ushahidi.flatnet.net.nz Can they contact me directly? andy

1 1

"If you want to be an ISP and want your infrastructure to last more than five years...
by Juha Saarinen 15 Mar '15

15 Mar '15

… you’re already deploying IPv6,” said the ARIN chief exec John Curran. http://www.itnews.com.au/News/401627,ipv6-laggards-to-face-tough-questions-… <http://www.itnews.com.au/News/401627,ipv6-laggards-to-face-tough-questions-…> TL;DR: CGNAT’s bad and IPv4 addresses are getting scarce and expensive, Curran says. Would be interested to hear arguments to the contrary off list (or on list if it’s OK with TEH MORDERATOR) if there are any. -- Juha Saarinen twitter: juhasaarinen <http://twitter.com/juhasaarinen>

2 1

Re: [nznog] Vanuatu Update & Support
by Scott Weeks 14 Mar '15

14 Mar '15

--- jon.brewer(a)gmail.com wrote: From: Jonathan Brewer <jon.brewer(a)gmail.com> Things are in pretty poor shape, ---------------------------------- It's going to brush the very northern tip of NZ: http://www.stormsurfing.com/cgi/display_alt.cgi?a=spac_slp It currently has 85 MPH winds. http://earth.nullschool.net/#current/wind/surface/level/orthographic=-183.0… Hopefully, it misses all together. scott _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

NZNOG NOC List Updates
by Dave Mill 13 Mar '15

13 Mar '15

Hi all After our recent discussions on the (lack of) updates to the NZNOG website NOC contact list I have (foolishly?) volunteered to help. The URL of the page is http://www.nznog.org/noc-list . If you have any updates, or if you have previous updates that haven't been handled, then please pass them on to noc(a)nznog.org . I will do my best to update in a timely manner. Also, if you're aware of anything on the contact list that is blatantly wrong (perhaps you're still listed against a company where you no longer work) then let me know. I'll do my best to correct the information or chase up relevant contacts. If I fail in my duties I'll produce a beer for you at the next NZNOG conference dinner.. Cheers Dave

11 11

DNSSEC validation at Spark NZ
by Sebastian Castro 09 Mar '15

09 Mar '15

Hi: We'd like to share a short technical blog post from NZRS about Spark NZ enabling DNSSEC validation for part of their customers. In brief, DNSSEC related traffic coming from Spark NZ resolvers suffered a massive increase back on Dec 16th, Spark NZ also added new DNS backends for their service, and they are using load balancing to share the load. The article https://nzrs.net.nz/content/dnssec-validation-spark-nz Feedback and questions are welcomed! Cheers, -- Sebastian Castro Technical Research Manager NZRS Ltd. desk: +64 4 495 2337 mobile: +64 21 400535

1 0

openwrt capable routers for NZ?
by Dave Taht 09 Mar '15

09 Mar '15

at the end of my talk someone asked me what routers I would recomend to try this stuff on here, and I sort of dodged the question. If you can come up with a list of routers available here (meet me later?), I can tell you what I know about each chipset. (I have evaluated dozens of these over the last year...) In general ath9k based gear is currently best (entirely open wifi driver), with nearly every manufacturer shipping stuff based on that. I see there is a lot of ubnt here, and most of their older products are well supported by openwrt. There is some good work beginning on the latest round of chipsets, but by and large the firmware for 802.11ac is closed.... And so on. I should also point out that there are plenty of other OSes available, and that I'm opposed to a monoculture of any hardware/software combination. See: https://gettys.wordpress.com/2014/10/06/bufferbloat-and-other-challenges/ for more details. -- Dave Täht thttp://www.bufferbloat.net/projects/bloat/wiki/Upcoming_Talks

6 10

Internet in the upper south island
by lenz 07 Mar '15

07 Mar '15

Hi, I am currently trying to figure out if I can get anything else than a weak 3G signal in terms of internet just outside of St Arnaud. The address is 62 Alpine Meadows Drive, Saint Arnaud There is a phone line as well as a few other houses but the Chorus website tells me that they don't have any services there. I tried a few of the bigger providers and many tell me I can have VDSL but either don't come back to me or turn around and say "sorry, mate, can't" Anyone on the list that knows someone who might get anything faster than a 3G link to that address? Happy to shout beers on top of being a very grateful customer :) Thanks heaps cheers

1 1

Orcon Helpdesk
by Keith Davidson 06 Mar '15

06 Mar '15

Is there anyone from Orcon technical subscribed to this list who could contact me offlist please? Cheers Keith

10 10

Call for Presentations - DNS-OARC Spring Workshop, May 2015 -- Deadline Extended
by Sebastian Castro 05 Mar '15

05 Mar '15

NOTE: Previous message contained the right information, but with the subject referring to the wrong year. Apologies for the noise. The next OARC Spring Workshop will take place in Amsterdam on May 9th and 10th, the weekend before RIPE70. OARC is requesting proposals for presentations, with a preference for DDoS attack reports and mitigation techniques. Reports and field stories can cover DNS-based DDoS attacks, attacks to DNS infrastructure or side effects suffered by cache resolver operators. This workshop intends to build from previous strong OARC workshops, where operational content and research is welcome. Presentations from DNS operators are particularly welcome, as well as from DNS researchers. All DNS-related subjects are accepted, introduction to new tools, visualizations, DNSSEC and novel uses of the DNS. If you are an OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. Adopting practice from other conferences, a timeslot for lighting talks will be available for short presentations (5 to 10 minutes). Workshop Milestones * 18 December 2014, Call for Presentations posted * 8 January 2015, Open for submissions * 12 March 2015, Deadline for submission. Please note deadline was extended for an extra week. * 26 March 2015, Final Program published * 7 May 2015, Final deadline for slideset submission Details for abstract submission will be published here: https://indico.dns-oarc.net//conferenceCFA.py?confId=21 The workshop will be organized on different tracks, depending on the topics and the timing of each presentation. If you are interested in a lightning talk, let us know at the time of submission. You can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> if you have questions or concerns. Sebastian Castro, for the OARC Programme Committee OARC is also seeking sponsorship for this workshop, please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Sebastian Castro Technical Research Manager .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Re: [nznog] [Cerowrt-devel] ping loss "considered harmful"
by Dave Taht 05 Mar '15

05 Mar '15

I had spoken to someone at nznog that promised to combine mrtg + smokeping or cacti + smokeping so as to be able to get long term latency and bandwidth numbers on one graph. cc added. On Thu, Mar 5, 2015 at 12:38 PM, Matt Taggart <matt(a)lackof.org> wrote: > Dave Taht writes: > >> wow. It never registered to me that users might make a value judgement >> based on the amount of ping *loss*, rather than latency, and in looking back in time, I can >> think of multiple people that have said things based on their >> perception that losing pings was bad, and that sqm-scripts was "worse >> than something else because of it." > > This thread makes me realize that my standard method of measuring latency > over time might have issues. I use smokeping > > http://oss.oetiker.ch/smokeping/ in sqm-scripts's case, possibly, all you have been collecting is largely worst case behavior, which I don't mind collecting as it tends to be pretty good. :) However, I have been unclear. In the main (modern - I don't know what version you have) sqm code, IF you enable dscp squashing on inbound (the default), you do end up with a single fq_codel queue, not 3, no classification or ping prioritization. (it is the default because of all the re-marking I have seen from comcast) So if you are, as I am, monitoring your boxes from the outside, there is no classification and prioritization present for ping. do a tc -s qdisc show ifbwhatever (varies by platform) to see how many queues you have. Example of a single queued inbound rate limiter + fq_codel (yea! packet drop AND ecn working great!) root(a)lorna-gw:~# tc -s qdisc show dev ifb4ge00 qdisc htb 1: root refcnt 2 r2q 10 default 10 direct_packets_stat 0 direct_qlen 32 Sent 168443514948 bytes 334370551 pkt (dropped 0, overlimits 143273498 requeues 0) backlog 0b 0p requeues 0 qdisc fq_codel 110: parent 1:10 limit 1001p flows 1024 quantum 300 target 5.0ms interval 100.0ms ecn Sent 168443514948 bytes 334370551 pkt (dropped 17480, overlimits 0 requeues 0) backlog 0b 0p requeues 0 maxpacket 1514 drop_overlimit 0 new_flow_count 125872421 ecn_mark 1044 new_flows_len 0 old_flows_len 1 root(a)lorna-gw:~# uptime 12:45:35 up 54 days, 22:33, load average: 0.05, 0.05, 0.04 dscp classification in general, is only useful from within your own network, going outside. > which is a really nice way of measuring and visualizing packet loss and > variations in latency. I am using the default probe type which uses fping > (ICMP http://www.fping.org/ ). I LOVE smokeping and wish very much we had a way to combine it with mrtg data to see latency AND bandwidth at the same time. > > It has been working well, I set it up for a site in advance of setting up > SQM and then afterwards I can see the changes and determine if more tuning > is needed. But if ICMP is having it's priority adjusted (up or down), then > the results might not reflect the latency of other services. > > Fortunately the nice thing is that many other probe types exist > > http://oss.oetiker.ch/smokeping/probe/index.en.html > > So which probe types would be good to use for bufferbloat measurement? I > guess the answer is "whatever is important to you", but I also suspect > there is a set of things that ISPs are known to mess with. > HTTP? But also maybe HTTPS in case they are doing some sort of transparent > proxy? > DNS? > SIP? > I suppose you could even do explicit checks for things like Netflix (but > then it's easy to go off on a tangent of building a net neutrality > observatory). > > On a somewhat related note, I was once using smokeping to measure a fiber > link to a bandwidth provider and had it configured to ping the router IP on > the other side of the link. In talking to one of their engineers, I learned > that they deprioritize ICMP when talking _with_ their routers, so my > measurement weren't valid. (I don't know if they deprioritize ICMP traffic > going _through_ their routers) I do strongly recomend deprioritizing ping slightly, and as I noted, I have seen many a borken script that actually prioritized it, which is foolish, at best. I keep hoping multiple (many!) someones here will go have lunch with their company's oft lonely, oft starving sysadmin(s), to ask them what they are doing as to firewalling, QoS and traffic shaping. Most of the ones I have talked are quite eager to show off their work, which is unfortunately often of wildly varying quality and complexity. I find that an offer of saki and sushi are most conducive to getting that conversation started. I certainly would like to see more default corporate firewall/QoS/shaping rules than I have personally, for various platforms. Someone's got to have some good ideas in them... and it would be nice to know how far the bad ones, have propagated. > -- > Matt Taggart > matt(a)lackof.org > > -- Dave Täht Let's make wifi fast, less jittery and reliable again! https://plus.google.com/u/0/107942175615993706558/posts/TVX3o84jjmb

1 0

Job: NEXTDC - Product Manager of Networks (SYD.AU)
by Skeeve Stevens 03 Mar '15

03 Mar '15

Hi all, Passing this to the mailing list NEXTDC is looking for a Product Manager of Network Services - related to their recent announcement of Azure Express-Route and other related products. Ideally you would be working for an existing Telco and understand networking products well. Check out the advert below. https://dl.dropboxusercontent.com/u/11825822/NEXTDC%20-%20Product%20Manager… Thanks all. ...Skeeve *Skeeve Stevens - Founder & Chief Network Architect* eintellego Networks Pty Ltd Email: skeeve(a)eintellegonetworks.nz ; Web: eintellegonetworks.nz Phone: +612 8014 7398 ; Cell +61 (0)414 753 383 ; Skype: skeeve Facebook: eintellegonetworks <http://facebook.com/eintellegonetworks> ; Twitter: eintellego <https://twitter.com/eintellego> LinkedIn: /in/skeeve <http://linkedin.com/in/skeeve> ; Expert360: Profile <https://expert360.com/profile/d54a9> The Experts Who The Experts Call Juniper - Cisco - Cumulus Linux - Cloud - Consulting - IPv4 Brokering

1 1