- NZNOG - lists.nznog.org

IANA AS Numbers registry update
by Selina Harrington 29 Apr '15

29 Apr '15

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following block to ARIN in April 2015: 64198-64296 Assigned by ARIN 2015-04-29 394240-395164 Assigned by ARIN 2015-04-29 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

1 0

Re: [nznog] Looking for data on how much Netflix/SVOD data NZ ISPs are seeing
by Richard Naylor 28 Apr '15

28 Apr '15

At 09:23 a.m. 29/04/2015, Barry Murphy wrote: >Obviously the cache fill that happens between >midnight and mid-day consumes some bandwidth, we >find the fill capacity (after the initial fill) >is about 1.2gbps for on average 2-4 hours per day. >We currently share our cache on Megaport IX >Auckland, in doing so we find weâre filling a >few other providers caches so they donât have >to fetch it from AU, so this may be helping some providers. Thanks Barry - Thats REALLY useful. I'm involved in downstream activity in 2 areas. First - Uploading We have a current project moving some older videos from a server in NZ to Vimeo. Theres a weekly 20GB limit on uploads and an ugly web uploader (no restarts and a break means a complete re work). Using ADSL its pretty ugly. It takes 3.5 days to get 20-30GB up and ADSL 'breaks' make life a real pain. So I pay a local church to use their UFB. We find that uploading during the day conflicts with US based uploaders, so only get 10Mbps upload. If I wait until 5pm, we get a pretty good 100Mbps and the 20GB is up in about an hour. The first time we did it a 2.5G file that took 12 hours ( and failed) on ADSL went up in 4 minutes. Looking at the graph, it seems we have a nice window between 5pm and 8 or 9pm to do our uploads. Thats great to know. The second issue - Live feeds. We're doing quite a bit of live TV feeding using the net now. We have RX points with both TVNZ and TV3 - and also Sky Sport UK. The local TV companies are OK - its local (bounces out of SYD) and only SD and they don't really trust this IP stuff. Sky UK is different. We send them HD at 4Mbps and after some small adjustments for latency, can do live crosses with 3 sec delay (4 sec total allowing for return audio for the talent earpiece). NZ to UK is pretty solid. The other night we tried UK to NZ. NZ RX was via ADSL. We found we could only get a 1Mbps feed going. (vs 4Mbps going the other way) We need to do more testing as there are feed aggregation points and they are different depending on direction, but we have been wondering if there was congestion along the way causing the issue. If so we need to avoid doing crosses during the 'flix' peak. We are also going to test where we do the feed aggregation to see if that helps. Currently NZ to UK has aggregation in London, while UK to NZ has aggregation in LAX. We think its the LAX to NZ leg that suffers. More testing required. Richard

1 0

Looking for data on how much Netflix/SVOD data NZ ISPs are seeing
by Dean Pemberton 28 Apr '15

28 Apr '15

Hi Everyone. Following recent media articles making mention of "the Netflix effect" and broadband slowdowns at peak times, we've had a number of requests to see if we could pull together some facts from NZ ISPs detailing what they are actually seeing. So the question is... How much Netflix/SVOD traffic are you seeing, either as a direct measurement or percentage of total traffic. Does this percentage change at all during the day/week. I realise that this may be considered commercially sensitive but I'm sure we can find a way to make it work. If you're happy to give number on the list that would be great. Good on you for sharing. If you're not comfortable with that then drop me a line and we can discuss how you might feel more comfortable about sharing the facts. I'm happy to agree to only give an aggregated number from people who contact me privately for eg "ISPs are seeing between X and Y % SVOD traffic" Or you could just tell me and I'll keep it to myself (not quite as helpful but I can use it for context). You could also tell me "we have no way of knowing" and I guess that's a data point too :). Thanks -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz To promote the Internet's benefits and uses, and protect its potential.

2 1

Need assistance troubleshooting a DNS issue
by Glen Eustace 26 Apr '15

26 Apr '15

>From about October/November last year we have been getting the odd call from some of our customers to report that our servers are ‘not found’. So far, each report has been from an Xtra broadband user. When investigating these reports we have found that the servers were fine and DNS lookups from various sources (except Xtra) were as well. Last night the issue happened to a member of the family so I was able to jump onto their computer using Teamviewer and do some more thorough diagnostics. My results were; Name servers in use: ns1.xtra.co.nz <http://ns1.xtra.co.nz/> and ns2.xtra.co.nz <http://ns2.xtra.co.nz/> Name servers pingable from PC: Yes Does smtp.godzone.net.nz <http://smtp.godzone.net.nz/> resolve: No, times out Do other resources in our DNS resolve: No, time out Do resources in other DNS servers resolve: Yes Are all 4 of our name servers pingable from PC: Yes, 2 in NZ and 2 offshore Use nslookup to query our name servers directly, does smtp.godzone.net.nz <http://smtp.godzone.net.nz/> resolve: Yes Use nslookup to query our name servers using 8.8.8.8, does smtp.godzone.net.nz <http://smtp.godzone.net.nz/> resolve: Yes To fix the issue on the PC, I manually set the name servers to 8.8.8.8 and 8.8.4.4, all our services were then resolvable and useable. So, whats going on ? How are our servers different ? Well, we are one of the few ISPs that are using DNSSec to sign zones. Is DNSSec broken ? Not according to dnsviz.net <http://dnsviz.net/> The problem is also intermittent, I have heard that the two Xtra servers are actually LB VIPs in front of a farm of name servers. With the intermittent nature of the issue I wonder whether one server in the farm might be broken/misconfigured, just a thought. I have tried, without success to contact appropriate people at Xtra to either comment or assist and have failed to get past the level one helpdesk people. Their only response being “Sorry we can’t help you”. I am not saying this is an issue with Xtra’s internal recursive DNS servers but so far I have been unable to replicate the issue and have had no reports from any of our other customers using alternative broadband suppliers. I have run out of ideas now on how to continue to investigate this and just changing to Google’s DNS servers might work but isn’t a great solution. If anyone has any suggestions I’d appreciate hearing from you. Glen. -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Glen and Rosanne Eustace, GodZone Internet Services, a division of AGRE Enterprises Ltd., P.O. Box 8020, Palmerston North, New Zealand 4446 Ph: +64 6 357 8168 <tel:%2B64%206%20357%208168>, Fax: +64 6 357 8165 <tel:%2B64%206%20357%208165>, Mob: +64 27 542 4015 <tel:%2B64%2027%20542%204015> "Specialising in providing low-cost professional Internet Services since 1997"

8 12

MyRepublic Hamilton Outage
by Laurence Bullivant 26 Apr '15

26 Apr '15

Morning, This is more of a curiosity post then anything else, but does anyone know what is going on with the MyRepublic outage in Hamilton? Its gone past 72hours now and the only thing that is being said is that its a fault with the UFF handover. I don't know about anyone else but the idea of upstream provided having a fault that could take down an entire region for more then three days makes me a little nervous. Time to go check those SLA's anyone? -- Laurence Bullivant laurence(a)bullivant.co.nz 021 909 906

1 1

Fibre tails in NZ
by Sam Sarkis-UIP 24 Apr '15

24 Apr '15

Hi All, We have a customer looking to get 50/50M and some 30M/10M tails in NZ but we need to deliver them to Sydney happy to do something over Megaport. Can anyone who can assist please contact me off list. The tails are in Auckland and Christchurch. Kind regards Sam

1 0

Entries open for the 2015 ANZIA awards
by Dean Pemberton 23 Apr '15

23 Apr '15

New Zealand is the host of this year's Australia and New Zealand Internet Awards, the ANZIAs! The ANZIAs will be held on 27 August, in Auckland at St Matthews in the City. The ANZIAs are a collaboration between auDA (www.auda.org.au) and InternetNZ. An annual event celebrating the achievements of organisations, businesses and individuals who excel in delivering accessible, innovative, informative and secure resources to a diverse and wide community on the Internet. ANZIAs are awarded to categories covering six areas: Security & Online Safety, Access & Digital Skills, Information, Diversity, Innovation and in 2014 we introduced The Leonie Dunbar Memorial Award for Community Websites. But more importantly, entries are open now! And you can get nominating right here: http://www.internetawards.org.au/how-to-enter/ Winners receive recognition as industry leaders that have set new standards for making the Internet a more inclusive, accessible and safe place. The awards offer public exposure, media coverage, networking opportunities, optimisation of future grant applications, recognition for hardworking staff and volunteers and a cash prize. Since InternetNZ is hosting the ANZIAs this year, it is an excellent opportunity for us to host the very best in New Zealand Internet innovations. So – get applying, get the word out, and we will see you at the ANZIAs -- -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz To promote the Internet's benefits and uses, and protect its potential.

1 0

Re: [nznog] Need assistance troubleshooting a DNS issue
by Glen Eustace 23 Apr '15

23 Apr '15

> On 24/04/2015, at 7:52 am, manning bill <bmanning(a)isi.edu> wrote: > > anything inline that is sensitive to IPv4 UDP packets that are: ) larger than 512 bytes, ) fragmented. > do these replies have IPv6 or DNSSEC data in the RRsets? I would say yes, as all our hosts have both A and AAAA records. Assuming the above, that moves the issue back in my direction. I am seeing requests from a number of the rNS servers and the issue is intermittent so still more trouble shooting needed I think :-) Glen

1 0

Re: [nznog] Need assistance troubleshooting a DNS issue
by Glen Eustace 23 Apr '15

23 Apr '15

> On 24/04/2015, at 7:14 am, manning bill <bmanning(a)isi.edu> wrote: > > tosses MTU issues into the mix. IPv6 & DNSSEC make for large UDP replies, which tend to choke some infrastructure kit... 2 of our 4 name servers are fully dual stack but the queries I do see coming from the Xtra rNS farm are all IPv4. Glen.

1 0

Baseband IP
by Dave Mill 20 Apr '15

20 Apr '15

Hi all If there are any other providers out there actively using Baseband IP I would love to hear from you. Could you email me off-list? Just very interested if you experience a similar issue/symptom to us (Inspire). I'm already talking to Chorus about this as well. Cheers Dave

1 0

BGP Map 2015 edition
by Blair Harrison 18 Apr '15

18 Apr '15

Hi All I've just made up a new version of my DFZ Map, taking routeviews data and making it somewhat visible.. FWIW there is about 20Mb of json data on the page, so you probably don't want to load it from your phone. http://jedi.school.nz/sg2015/ Note, I haven't included anything other than routeviews.org data so the APE/WIX/etc peerings aren't included in this version. There was a bit of feedback from the last version that it would be good to search by ASN as well as name, so you can do that in this version. All feedback welcome on or offlist. Cheers, Blair

3 3

Re: [nznog] BGP Map 2015 edition
by michael.sutton 18 Apr '15

18 Apr '15

Sent from Samsung tablet -------- Original message -------- From: Dean Pemberton <nznog(a)deanpemberton.com> Date: 19/04/2015 17:13 (GMT+12:00) To: Blair Harrison <nznog(a)jedi.school.nz> Cc: NZNOG <nznog(a)list.waikato.ac.nz> Subject: Re: [nznog] BGP Map 2015 edition Heh - Awesome. You've even managed to get New Zealand at the top of the smudge =P On Sat, Apr 18, 2015 at 5:17 PM, Blair Harrison <nznog(a)jedi.school.nz> wrote: > Hi All > > I've just made up a new version of my DFZ Map, taking routeviews data and > making it somewhat visible.. > > FWIW there is about 20Mb of json data on the page, so you probably don't > want to load it from your phone. > > http://jedi.school.nz/sg2015/ > > Note, I haven't included anything other than routeviews.org data so the > APE/WIX/etc peerings aren't included in this version. > > There was a bit of feedback from the last version that it would be good to > search by ASN as well as name, so you can do that in this version. > > All feedback welcome on or offlist. > > Cheers, > Blair > > > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

BCP for BGP
by Jamie Baddeley 17 Apr '15

17 Apr '15

HI Folks, One of our colleagues from AUSNOG mentioned this, and I thought it'd be worth reposting here as I'd imagine it's required reading for many of you (which I'm sure you have of course!). Cheers jamie RFC7454 - "BGP Operations and Security" https://tools.ietf.org/html/rfc7454 "Abstract The Border Gateway Protocol (BGP) is the protocol almost exclusively used in the Internet to exchange routing information between network domains. Due to this central nature, it is important to understand the security measures that can and should be deployed to prevent accidental or intentional routing disturbances. This document describes measures to protect the BGP sessions itself such as Time to Live (TTL), the TCP Authentication Option (TCP-AO), and control-plane filtering. It also describes measures to better control the flow of routing information, using prefix filtering and automation of prefix filters, max-prefix filtering, Autonomous System (AS) path filtering, route flap dampening, and BGP community scrubbing."

3 2

New RIPE Atlas anchor in New Zealand
by Sebastian Castro 16 Apr '15

16 Apr '15

Dear community: We'd like to announce that the first of two RIPE Atlas [1] anchors [2] sponsored by NZRS has been installed in Auckland North Shore, and became active this morning. The anchor support both v4 and v6. This is the second anchor in New Zealand, the first hosted at Waikato University. The second anchor will be installed in Wellington at a later time, once some network architecture work is completed. NZRS is committed to support Internet research and network measurement, we are also Atlas ambassadors and we have Atlas Probes [3] available to distribute. If you are interested on hosting one for your own benefit and the benefit of the community, please contact me. We are currently using the Atlas probes located in New Zealand to conduct a topology discovery experiment from which you will hear in the coming weeks. [1] https://atlas.ripe.net/about/ [2] https://atlas.ripe.net/get-involved/become-an-anchor-host/ [3] https://atlas.ripe.net/get-involved/become-a-host/ Cheers -- Sebastian Castro Technical Research Manager NZRS Ltd. desk: +64 4 495 2337 mobile: +64 21 400535

1 0

beating bufferbloat with better hardware
by Dave Taht 08 Apr '15

08 Apr '15

When I was at the nznog conference there was a lot of despair about a lot of aspects of the fiber deployment, and the quality of the home gateways, and what seemed to be promising plans to try to get openwrt with fq_codel running on nzwrt... did you all despair completely? I talked about all the great things we could do to improve our devices with openwrt, and and beat bufferbloat in particular with fq_codel in my talk... and since then I have worked to get fq_codel in more and more OSes and hardware. UBNT has added configuration tools for it in their upcoming edgerouter 1.7 release. VyOS just added it. It is in click. It is in fedora 22. It is spreading (And of course, already in all modern linuxes, openwrt, dd-wrt, ipfire, shorewall, etc). There was no sign of a pulse at tilera or mikrotik, but I will keep trying. Still... to one day get hardware that has low latency and good queue management at gigE speeds or higher requires better hardware offloading techniques than the bulk notions like GRO and TSO that exist today. And it has long been obvious that the rate limiting + fq_codel techniques we use successfully at sub 200mbit speeds do not scale higher. So the algorithms need to move into hardware, also. *******so... a brief commercial interruption***** I think the open source design method has worked spectacularly for software, and I think the same methods can work for hardware if only we can pull together larger communities to do the work, worldwide. There are only 24 hours left on this kickstarter - we CAN *start* to take back the edge of the internet - if we can only find another 5k of funding. https://www.kickstarter.com/projects/onetswitch/onetswitch-open-source-hard… This FPGA board´s pcie interface and switch design - and the split memory interfaces between the programmable logic and the onboard dual A9 core - and reducing the cost from 7000 to 700 bucks - are the important parts to why the community needs this board - in my case - so that more of htb + fq_codel can move into hardware that anyone can build and use - in other cases? who knows what could be done with it!? One day, we could move the logic into asics, and finally have open source, blob-free hardware to work with for any network purpose. There are people on these lists with money, and there are those with talent and time, and it would be great if more of those people could line up with each other. I put in all I could spare (8500 dollars) into this kickstarter. I have one of their high end boards, already. It´s great. There is a get one give one program that I asked meshsr to put in to try and enable that event. If there is anyone here that would like to help hack together the next generation of edge network hardware, after this kickstarter completes, let me know. I return you now to your normal despair about vendors not listening, and crappy OSes you can´t otherwise fix. -- Dave Täht We CAN make better hardware, ourselves, beat bufferbloat, and take back control of the edge of the internet! If we work together, on making it: https://www.kickstarter.com/projects/onetswitch/onetswitch-open-source-hard…

2 1

SNMP for Mako / SecureME
by Tom Henderson 08 Apr '15

08 Apr '15

Wondering if anyone here knows if Mako routers (Spark's SecureME offering) can be monitored with SNMP? We use observium to monitor our servers and existing Cisco gear, but so far it looks like I can only monitor these from the SecureME web portal. Cheers Tom Henderson IT Manager | Pack & Company | 027 461 4403 | tom(a)pack.co.nz -- ---------------------------------------------------------------------------If you are not the intended recipient of this email, you must not disclose, copy, or distribute any information contained in or attached to it, or take any action/inaction based on it. Please contact us immediately, and delete this email from your system. Any views or opinions presented in this email are solely those of the author and not of Pack & Company (NZ) Limited (the "Company"), however any intellectual property contained in or attached to this email is the property of the Company. Thank you.

2 1

Call for presentations for AusNOG 2015
by Jamie Baddeley 06 Apr '15

06 Apr '15

A Call for Presentations from our mates across the ditch. Cue comments about Cricket, Currency Parity, Phar Lap, Pavlovas, Russell Crowe, Crowded House, Underarm bowling, etc etc.. Cheers Jamie ---------- Forwarded message ---------- From: Terry Manderson <terry(a)terrym.net> Date: 1 April 2015 at 05:39 Subject: [AusNOG] Call for presentations for AusNOG 2015 To: ausnog <ausnog(a)lists.ausnog.net> Call for presentations for AusNOG 2015 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Langham Hotel Melbourne 27 & 28 August 2015 Topics =-=-=- Internet operations can be a broad topic and the programme committee will be short-listing presentations in the following focus areas: * Improving the redundancy/resiliency/sustainability of your network * Making leaps in service or network availability * Taking the network operations BCP to the next level * Using 'offline' communications tools to keep the network working * How technology is changing network architectures * Evolution in network architectures and scaling issues * Analysis of relevant major operational events of the year Additional topics that are of interest to the network operator community are also welcome at AusNOG 2015. Naturally, presentations of a marketing nature are not welcome at this technical event. Notes to presenters =-=-=-=-=-=-=-=-=-= Preference will be given to presentations that result in actual operational outcomes. Session speakers should be prepared to present for 30 minutes. Keynote speakers will be expected to present for 45 minutes to 1 hour. Short presentations of strong operational content are also acceptable. Once the final slides are submitted, changes will only be permitted where the presentation requires the most up to date information or data. By submitting a presentation for consideration in the AusNOG 2015 programme, and if selected the presenter will allow AusNOG to: * Take photographs of the presentation and presenter * Record and rebroadcast video and audio of the presentation and presenter * Redistribute the presentation slides, audio, video, and photographs electronically, on the AusNOG website, or otherwise but leaving all intellectual property in the hands of presenter or rightful property holder[1]. Deadlines =-=-=-=-= 04 June: Submission of presentation title, presentation description (300 words), and presenter biography (200-400 words) 02 July: Presenters notified of their acceptance status as an AusNOG 2015 presentation. 20 August: Submission of final presentation slides as Portable Document Format (pdf), PowerPoint, or Keynote. Provision of a recent digital photograph (<500k) of the presenter. All submissions must be sent by email to organisers AT ausnog DOT net. A separate call for lightning talks will be made closer to the AusNOG 2015 event. As in previous years you must be registered to attend AusNOG 2015 in order to be considered for a lightning talk. [1]: AusNOG accepts that some speakers are unable to allow us to archive their presentation due to company or corporate policy, and if the situation arises AusNOG will delete all copies in its possession after the presentation. Lightning Talks =-=-=-=-=-=-=-=-= Have something awesome or cool to share that isn't a full presentation? New to presenting, and still want give back to the community? Why not consider a lightning talk? Lightning talks are short (max 10 minute) presentations on topical material. There is no requirement for any slides! A call for lighting talks will be made nearer to AusNOG 2015. Cheers Terry (For the AusNOG Board)

1 0

Hosting for test server - recommendations?
by Richard Nelson 24 Mar '15

24 Mar '15

Hi, We want to perform some testing of consumer broadband connections over the next three months. We are looking for somewhere to host a server for throughput testing. Happy to pay. The main requirements are for a neutral site well connected to all the major ISPs and for a network connection to easily handle (i.e. not limit) throughput for consumer speed connections - up to 200Mb/s (not gigatown). The testing will be for about 5 mins worth of streams per hour from an equal mix of ADSL, VDSL and UFB with tests staggered to occur one at a time. Testing repeats every hour. We can lease or provide our own server. If we get really lucky we'd like one site in Auckland and one not in Auckland. Any suggestions would be gratefully received. Thanks, Richard Nelson WAND Network Research Group.

1 0

ICT Equip Gensets & Ubiquity NZ for Vanuatu
by Andy Linton 20 Mar '15

20 Mar '15

Big ups to Primo Wireless in New Plymouth - this kit is on its way to Vanuatu. -- Andy Linton Mobile: +64 22 474 7156 Skype: asjlnz

3 3

Are you `asnet2' or `202.7.1.239' on the WIX?
by Michael Fincham 19 Mar '15

19 Mar '15

Whoever you are, it seems you're announcing some busted routes to the route servers, with an AS path of "429010481". -- Michael

2 1

ratelimiting/aqm/FQ on mikrotik/routerOS info
by Dave Taht 18 Mar '15

18 Mar '15

I am curious as to any existing support for ratelimiting and AQM/FQ on the tilera gear they have? Policing? anything? Keep hoping to make progress on this: http://forum.mikrotik.com/viewtopic.php?p=473253#p473253 -- Dave Täht Let's make wifi fast, less jittery and reliable again! https://plus.google.com/u/0/107942175615993706558/posts/TVX3o84jjmb

2 1

Vanuatu CYCLONE RECOVERY PROJECT
by Andy Linton 17 Mar '15

17 Mar '15

>From one of the .VU government coordinators: We urgently need the following. Can anyone supply and where from. I can assist with logistics from Auckland, Brisbane, Sydney. Please reply ASAP Item Quantity Spec USB RF Power Meter 1 Agilent U2041XA Cable and Antenna Analyser 1 Sitemaster PDR48 calibration kit 1 Sitemaster Transmission Analyser 1 JDSU MTS-5800 Please contact me and I'll put you in touch if you can help -- Andy Linton Mobile: +64 22 474 7156 Skype: asjlnz

1 0

Re: [nznog] openwrt capable routers for NZ?
by Ray Taylor 16 Mar '15

16 Mar '15

I understand as its generic firmware, I assume there will be many different compatible hardware options. The big thing though is the voip needs to be capable which may reduce your compatibility list. The market in NZ has dramatically changed with computer stores selling less and less routers, and the home users just using the router issued free from their ISP. And to make it work for an ISP in a fibre world, it needs to have a built in voip ATA Software: - WAN/LAN bridge mode - uPNP - IPv4 / IPv6 - Programmable 0.0.0.0/0 or gateway address when lan + wan in bridge mode - voip must work when in bridge mode. Have had problems with zyxel and others having no gateway address breaking voip when in bridge mode - router must be accessible from behind another nat gateway via a port forward. Enabling WAN admin access doesn’t always make this work with many routers Hardware: - Price point of $40-$50 so we can issue them free with service - A higher priced, higher speed option would be good for fibre based services - 3dbi antenna, 18db tx power - 802.11n 2.4ghz option. We don’t see the need for ac for at least 3 years There was recently a project between geekzone and telecom to build a "standard router for NZ" which was designed to be the perfect one with all the features that the GZ community wanted, could be issued for free by telecom and was capable of being used for DSL and fibre. They got as far as taking bids for the project from companies like huawei and the likes. Most of the features that the GZ community were proposing I found to be useless as an isp supplied router, but it would be worth looking at the feature list. I think a bit of googling might be needed to get to the feature voting page in the forums - it may have been deleted. Ray Taylor Taylor Communications ray(a)ruralkiwi.com Ph 021-483-280 Network status 06-929-9082 -----Original Message----- From: Dave Taht [mailto:dave.taht(a)gmail.com] Sent: Tuesday, 10 March 2015 11:45 a.m. To: Ray Taylor Subject: Re: [nznog] openwrt capable routers for NZ? always helpful to have that list. And have that list discussed publicly. This is the only public talk I have given about wifi... see second half. https://www.youtube.com/watch?v=Wksh2DPHCDI On Mon, Mar 9, 2015 at 3:43 PM, Ray Taylor <ray(a)ruralkiwi.com> wrote: > Im keen to take part > Wouldn’t know anything about designing firmware other than the list of features that I need. > > > > Ray Taylor > Taylor Communications > ray(a)ruralkiwi.com > > Ph 021-483-280 > Network status 06-929-9082 > > > > -----Original Message----- > From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Dave Taht > Sent: Tuesday, 10 March 2015 11:14 a.m. > To: Jed Laundry > Cc: NZNOG(a)list.waikato.ac.nz > Subject: Re: [nznog] openwrt capable routers for NZ? > > I see this thread has kind of died... I am looking for people willing to participate in the upcoming make-wifi-fast project. Along the way, we'll probably build a pretty good firmware for general use on some off-the-shelves piece of hardware, and it would be good to be able to test with your upcoming fiber deployment(s) as well as on the WISP sides of things. > > Please let me and jim gettys know if you are interested in helping out on this. > > -- > Dave Täht > Let's make wifi fast, less jittery and reliable again! > > https://plus.google.com/u/0/107942175615993706558/posts/TVX3o84jjmb > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > > -- Dave Täht Let's make wifi fast, less jittery and reliable again! https://plus.google.com/u/0/107942175615993706558/posts/TVX3o84jjmb

5 5

Re: [nznog] NZNOG Digest, Vol 147, Issue 16
by Bevan McNaughton 16 Mar '15

16 Mar '15

We have 2x NanoStation M5's spare - let us know if you want them. Bevan On 17 March 2015 at 12:00, <nznog-request(a)list.waikato.ac.nz> wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. Ubiquiti gear for Vanuatu (Andy Linton) > 2. Re: Ubiquiti gear for Vanuatu (Dean Pemberton) > 3. Re: Ubiquiti gear for Vanuatu > (Matthew Harrison - PrimoWireless Ltd) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 17 Mar 2015 11:53:20 +1300 > From: Andy Linton <asjl(a)nsrc.org> > To: NZNOG List <nznog(a)list.waikato.ac.nz> > Subject: [nznog] Ubiquiti gear for Vanuatu > Message-ID: > <CALS-_Orno8qXbJUY78nNPBcTig+v6= > XkM5nzzmZOYPUneSHj4Q(a)mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > Here's what they're going to need. > On Tue, Mar 17, 2015 at 11:01 AM, Jethro Webston wrote: > > > Hi Andy, thank you for your assistance. We use NanoBridge, NanoBeam, and > > NanoStation M2 & M5. > > > > Cheers > > > > > > > Jethro > > We've had a number of offers already but if you have spares of these please > record them at: > > http://aidez.vu > > Be specific with models and quantities if you can. Remember they will need > power supplies and Ethernet cables as well. Fortunately .VU uses the same > plugs as .NZ > -- > Mail: asjl(a)nsrc.org > Mobile: +64 22 474 7156 >

1 0

Ubiquiti gear for Vanuatu
by Andy Linton 16 Mar '15

16 Mar '15

Here's what they're going to need. On Tue, Mar 17, 2015 at 11:01 AM, Jethro Webston wrote: > Hi Andy, thank you for your assistance. We use NanoBridge, NanoBeam, and > NanoStation M2 & M5. > > Cheers > > > Jethro We've had a number of offers already but if you have spares of these please record them at: http://aidez.vu Be specific with models and quantities if you can. Remember they will need power supplies and Ethernet cables as well. Fortunately .VU uses the same plugs as .NZ -- Mail: asjl(a)nsrc.org Mobile: +64 22 474 7156

3 3

The URL for help for Vanuatu
by Andy Linton 15 Mar '15

15 Mar '15

It's been a long day! I've sent the wrong URL twice. The urls to use are now: http://aidez.vu or http://help.vu Vanuatu is bilingual and we thought we should do the same! Forget about the flatnet one - I clearly can't remember it so why should you.

1 0

Vanuatu Update & Support
by Jonathan Brewer 15 Mar '15

15 Mar '15

Hi All, This morning I spoke with a friend from Vanuatu Government and to another who is CTO for Telsat Pacific, the largest TV operator & #2 ISP. Things are in pretty poor shape, but on the bright side: - Both cellular networks are fine in Port Vila - Internet and email from Telecom Vanuatu is working in Port Vila This makes life a lot easier for coordinating support - which will be needed: - Communication to remote islands is gone. It was all C-band satellite and those big dishes did not fare well. - Telsat lost four towers (that they know about) including their primary transmission site - though they expect to have some connectivity restored today or tomorrow. Vanuatu Government is going to nominate a central point of contact for offers of assistance relating to ICT. When that information is available and when they are ready for contact from you it will be posted here. Thanks to those who have already offered hardware and engineering resources - those offers have probably made the days of a few people in Vanuatu today. Thanks, Jon P.S. I'm in the wrong timezone for this (GMT -1) so it may not be me posting with an update.

3 3

Generators for Vanuatu
by Andy Linton 15 Mar '15

15 Mar '15

Someone form Primo Wireless in New Plymouth offered some generators via http://ushahidi.flatnet.net.nz Can they contact me directly? andy

1 1

"If you want to be an ISP and want your infrastructure to last more than five years...
by Juha Saarinen 15 Mar '15

15 Mar '15

… you’re already deploying IPv6,” said the ARIN chief exec John Curran. http://www.itnews.com.au/News/401627,ipv6-laggards-to-face-tough-questions-… <http://www.itnews.com.au/News/401627,ipv6-laggards-to-face-tough-questions-…> TL;DR: CGNAT’s bad and IPv4 addresses are getting scarce and expensive, Curran says. Would be interested to hear arguments to the contrary off list (or on list if it’s OK with TEH MORDERATOR) if there are any. -- Juha Saarinen twitter: juhasaarinen <http://twitter.com/juhasaarinen>

2 1

Re: [nznog] Vanuatu Update & Support
by Scott Weeks 14 Mar '15

14 Mar '15

--- jon.brewer(a)gmail.com wrote: From: Jonathan Brewer <jon.brewer(a)gmail.com> Things are in pretty poor shape, ---------------------------------- It's going to brush the very northern tip of NZ: http://www.stormsurfing.com/cgi/display_alt.cgi?a=spac_slp It currently has 85 MPH winds. http://earth.nullschool.net/#current/wind/surface/level/orthographic=-183.0… Hopefully, it misses all together. scott _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

NZNOG NOC List Updates
by Dave Mill 13 Mar '15

13 Mar '15

Hi all After our recent discussions on the (lack of) updates to the NZNOG website NOC contact list I have (foolishly?) volunteered to help. The URL of the page is http://www.nznog.org/noc-list . If you have any updates, or if you have previous updates that haven't been handled, then please pass them on to noc(a)nznog.org . I will do my best to update in a timely manner. Also, if you're aware of anything on the contact list that is blatantly wrong (perhaps you're still listed against a company where you no longer work) then let me know. I'll do my best to correct the information or chase up relevant contacts. If I fail in my duties I'll produce a beer for you at the next NZNOG conference dinner.. Cheers Dave

11 11

DNSSEC validation at Spark NZ
by Sebastian Castro 09 Mar '15

09 Mar '15

Hi: We'd like to share a short technical blog post from NZRS about Spark NZ enabling DNSSEC validation for part of their customers. In brief, DNSSEC related traffic coming from Spark NZ resolvers suffered a massive increase back on Dec 16th, Spark NZ also added new DNS backends for their service, and they are using load balancing to share the load. The article https://nzrs.net.nz/content/dnssec-validation-spark-nz Feedback and questions are welcomed! Cheers, -- Sebastian Castro Technical Research Manager NZRS Ltd. desk: +64 4 495 2337 mobile: +64 21 400535

1 0

openwrt capable routers for NZ?
by Dave Taht 09 Mar '15

09 Mar '15

at the end of my talk someone asked me what routers I would recomend to try this stuff on here, and I sort of dodged the question. If you can come up with a list of routers available here (meet me later?), I can tell you what I know about each chipset. (I have evaluated dozens of these over the last year...) In general ath9k based gear is currently best (entirely open wifi driver), with nearly every manufacturer shipping stuff based on that. I see there is a lot of ubnt here, and most of their older products are well supported by openwrt. There is some good work beginning on the latest round of chipsets, but by and large the firmware for 802.11ac is closed.... And so on. I should also point out that there are plenty of other OSes available, and that I'm opposed to a monoculture of any hardware/software combination. See: https://gettys.wordpress.com/2014/10/06/bufferbloat-and-other-challenges/ for more details. -- Dave Täht thttp://www.bufferbloat.net/projects/bloat/wiki/Upcoming_Talks

6 10

Internet in the upper south island
by lenz 07 Mar '15

07 Mar '15

Hi, I am currently trying to figure out if I can get anything else than a weak 3G signal in terms of internet just outside of St Arnaud. The address is 62 Alpine Meadows Drive, Saint Arnaud There is a phone line as well as a few other houses but the Chorus website tells me that they don't have any services there. I tried a few of the bigger providers and many tell me I can have VDSL but either don't come back to me or turn around and say "sorry, mate, can't" Anyone on the list that knows someone who might get anything faster than a 3G link to that address? Happy to shout beers on top of being a very grateful customer :) Thanks heaps cheers

1 1

Orcon Helpdesk
by Keith Davidson 06 Mar '15

06 Mar '15

Is there anyone from Orcon technical subscribed to this list who could contact me offlist please? Cheers Keith

10 10

Call for Presentations - DNS-OARC Spring Workshop, May 2015 -- Deadline Extended
by Sebastian Castro 05 Mar '15

05 Mar '15

NOTE: Previous message contained the right information, but with the subject referring to the wrong year. Apologies for the noise. The next OARC Spring Workshop will take place in Amsterdam on May 9th and 10th, the weekend before RIPE70. OARC is requesting proposals for presentations, with a preference for DDoS attack reports and mitigation techniques. Reports and field stories can cover DNS-based DDoS attacks, attacks to DNS infrastructure or side effects suffered by cache resolver operators. This workshop intends to build from previous strong OARC workshops, where operational content and research is welcome. Presentations from DNS operators are particularly welcome, as well as from DNS researchers. All DNS-related subjects are accepted, introduction to new tools, visualizations, DNSSEC and novel uses of the DNS. If you are an OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. Adopting practice from other conferences, a timeslot for lighting talks will be available for short presentations (5 to 10 minutes). Workshop Milestones * 18 December 2014, Call for Presentations posted * 8 January 2015, Open for submissions * 12 March 2015, Deadline for submission. Please note deadline was extended for an extra week. * 26 March 2015, Final Program published * 7 May 2015, Final deadline for slideset submission Details for abstract submission will be published here: https://indico.dns-oarc.net//conferenceCFA.py?confId=21 The workshop will be organized on different tracks, depending on the topics and the timing of each presentation. If you are interested in a lightning talk, let us know at the time of submission. You can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> if you have questions or concerns. Sebastian Castro, for the OARC Programme Committee OARC is also seeking sponsorship for this workshop, please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Sebastian Castro Technical Research Manager .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Re: [nznog] [Cerowrt-devel] ping loss "considered harmful"
by Dave Taht 05 Mar '15

05 Mar '15

I had spoken to someone at nznog that promised to combine mrtg + smokeping or cacti + smokeping so as to be able to get long term latency and bandwidth numbers on one graph. cc added. On Thu, Mar 5, 2015 at 12:38 PM, Matt Taggart <matt(a)lackof.org> wrote: > Dave Taht writes: > >> wow. It never registered to me that users might make a value judgement >> based on the amount of ping *loss*, rather than latency, and in looking back in time, I can >> think of multiple people that have said things based on their >> perception that losing pings was bad, and that sqm-scripts was "worse >> than something else because of it." > > This thread makes me realize that my standard method of measuring latency > over time might have issues. I use smokeping > > http://oss.oetiker.ch/smokeping/ in sqm-scripts's case, possibly, all you have been collecting is largely worst case behavior, which I don't mind collecting as it tends to be pretty good. :) However, I have been unclear. In the main (modern - I don't know what version you have) sqm code, IF you enable dscp squashing on inbound (the default), you do end up with a single fq_codel queue, not 3, no classification or ping prioritization. (it is the default because of all the re-marking I have seen from comcast) So if you are, as I am, monitoring your boxes from the outside, there is no classification and prioritization present for ping. do a tc -s qdisc show ifbwhatever (varies by platform) to see how many queues you have. Example of a single queued inbound rate limiter + fq_codel (yea! packet drop AND ecn working great!) root(a)lorna-gw:~# tc -s qdisc show dev ifb4ge00 qdisc htb 1: root refcnt 2 r2q 10 default 10 direct_packets_stat 0 direct_qlen 32 Sent 168443514948 bytes 334370551 pkt (dropped 0, overlimits 143273498 requeues 0) backlog 0b 0p requeues 0 qdisc fq_codel 110: parent 1:10 limit 1001p flows 1024 quantum 300 target 5.0ms interval 100.0ms ecn Sent 168443514948 bytes 334370551 pkt (dropped 17480, overlimits 0 requeues 0) backlog 0b 0p requeues 0 maxpacket 1514 drop_overlimit 0 new_flow_count 125872421 ecn_mark 1044 new_flows_len 0 old_flows_len 1 root(a)lorna-gw:~# uptime 12:45:35 up 54 days, 22:33, load average: 0.05, 0.05, 0.04 dscp classification in general, is only useful from within your own network, going outside. > which is a really nice way of measuring and visualizing packet loss and > variations in latency. I am using the default probe type which uses fping > (ICMP http://www.fping.org/ ). I LOVE smokeping and wish very much we had a way to combine it with mrtg data to see latency AND bandwidth at the same time. > > It has been working well, I set it up for a site in advance of setting up > SQM and then afterwards I can see the changes and determine if more tuning > is needed. But if ICMP is having it's priority adjusted (up or down), then > the results might not reflect the latency of other services. > > Fortunately the nice thing is that many other probe types exist > > http://oss.oetiker.ch/smokeping/probe/index.en.html > > So which probe types would be good to use for bufferbloat measurement? I > guess the answer is "whatever is important to you", but I also suspect > there is a set of things that ISPs are known to mess with. > HTTP? But also maybe HTTPS in case they are doing some sort of transparent > proxy? > DNS? > SIP? > I suppose you could even do explicit checks for things like Netflix (but > then it's easy to go off on a tangent of building a net neutrality > observatory). > > On a somewhat related note, I was once using smokeping to measure a fiber > link to a bandwidth provider and had it configured to ping the router IP on > the other side of the link. In talking to one of their engineers, I learned > that they deprioritize ICMP when talking _with_ their routers, so my > measurement weren't valid. (I don't know if they deprioritize ICMP traffic > going _through_ their routers) I do strongly recomend deprioritizing ping slightly, and as I noted, I have seen many a borken script that actually prioritized it, which is foolish, at best. I keep hoping multiple (many!) someones here will go have lunch with their company's oft lonely, oft starving sysadmin(s), to ask them what they are doing as to firewalling, QoS and traffic shaping. Most of the ones I have talked are quite eager to show off their work, which is unfortunately often of wildly varying quality and complexity. I find that an offer of saki and sushi are most conducive to getting that conversation started. I certainly would like to see more default corporate firewall/QoS/shaping rules than I have personally, for various platforms. Someone's got to have some good ideas in them... and it would be nice to know how far the bad ones, have propagated. > -- > Matt Taggart > matt(a)lackof.org > > -- Dave Täht Let's make wifi fast, less jittery and reliable again! https://plus.google.com/u/0/107942175615993706558/posts/TVX3o84jjmb

1 0

Job: NEXTDC - Product Manager of Networks (SYD.AU)
by Skeeve Stevens 03 Mar '15

03 Mar '15

Hi all, Passing this to the mailing list NEXTDC is looking for a Product Manager of Network Services - related to their recent announcement of Azure Express-Route and other related products. Ideally you would be working for an existing Telco and understand networking products well. Check out the advert below. https://dl.dropboxusercontent.com/u/11825822/NEXTDC%20-%20Product%20Manager… Thanks all. ...Skeeve *Skeeve Stevens - Founder & Chief Network Architect* eintellego Networks Pty Ltd Email: skeeve(a)eintellegonetworks.nz ; Web: eintellegonetworks.nz Phone: +612 8014 7398 ; Cell +61 (0)414 753 383 ; Skype: skeeve Facebook: eintellegonetworks <http://facebook.com/eintellegonetworks> ; Twitter: eintellego <https://twitter.com/eintellego> LinkedIn: /in/skeeve <http://linkedin.com/in/skeeve> ; Expert360: Profile <https://expert360.com/profile/d54a9> The Experts Who The Experts Call Juniper - Cisco - Cumulus Linux - Cloud - Consulting - IPv4 Brokering

1 1

IANA IPv4 Recovered Address Space registry updated
by Selina Harrington 02 Mar '15

02 Mar '15

Hi, ICANN has updated the IANA IPv4 Recovered Address Space registry according to the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA. The policy states that in each IPv4 allocation period, each RIR will receive a single IPv4 allocation unit from ICANN. An IPv4 allocation period is defined as a 6-month period following 1 March or 1 September in each year. The address space selection software can be downloaded from: https://github.com/icann/ The list of allocations can be found at: https://www.iana.org/assignments/ipv4-recovered-address-space/ipv4-recovere… Regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

1 0

Re: [nznog] "The GCSB?s brake on innovation"
by Beau Murrah 25 Feb '15

25 Feb '15

Thanks! Ill keep plodding away and get a draft to the list and yourself to attach. --- Me: nz.linkedin.com/in/bmmurrah Ph: +6427 375 7897 Email: bmurrah(a)icloud.com PGP: https://keybase.io/airbridge > On 26/02/2015, at 1:48 pm, Stephen Quayle <stephenwq(a)gmail.com> wrote: > > Hey, > Bit of a nzlog list lurker, I'd just like to give some support for this idea you're proposing. > > Any further information about this act is greatly welcomed. > > I'm particularly curious on what might changes might typically be required to give notification of, and what might not. > We've already seem some implications for research based set ups, and possibly some hint of the difficulty of certifying open source instead of vendor supplied solutions. > > An area of interest was what this means for universities and where they might fall into it, as that's a bit different to your average business, or your average telco, yet i believe they could fall under broad ISP or carrier terms for general users. Often their networks and resources can be fairly public and they can have research arms that might struggle with the same issues as REANNZ. > > Just like to say thanks for anything you can provide in terms of knowledge and interpretation to the community, even if it just starts discussion. > > Cheers, > Stephen

1 0

"The GCSB’s brake on innovation"
by Michael Fincham 24 Feb '15

24 Feb '15

<http://techliberty.org.nz/the-gcsbs-brake-on-innovation/> Excerpt: Trying to do the same in NZ, but govt's TICSA legislation makes deploying SDN/NFV in backbone networks challenging http://t.co/91MUpxfOnw — Steve Cotter (@SteveCotter) February 22, 2015 [...] So this is a statement by the CEO of a government owned company whose purpose is to "establish and operate the Advanced Network in order to promote education, research and innovation for the benefit of New Zealand" saying that they can't do the research and development work they need to do because the bureaucrats in the NCSC at the GCSB are holding them back. -- Michael

2 1

APNIC Training Survey - We need your feedback!
by Elly Tawhai 22 Feb '15

22 Feb '15

Hi NZNOG Community, APNIC’s regional training program is designed to grow the skills of network operators to effectively deploy and manage network technology in the Asia Pacific. APNIC is currently assessing the training needs and requirements of the Asia Pacific Internet community to help plan and improve its training program so it can meet the community's future requirements. You can help us by taking part in the Training Survey below: https://www.apnic.net/trainingsurvey As an added incentive, anyone completing the survey before 7 March 2015 will be entered into a prize draw for an iPad Air 2. There will be a further draw for another iPad Air 2 after the survey closes on 20 March 2015, so early birds have two chances to win! All responses provided will remain confidential and will only be used by APNIC for the purposes of planning its training and technical assistance programs. Thank you for helping APNIC improve its training services. Kind regards, _______________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: +61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: +61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net _______________________________________________________________________

1 0

openwrt on mikrotiks (rb750, rb951) with openvswitch
by Sam Russell 19 Feb '15

19 Feb '15

After getting carried away coding at the SDN workshop this week I've gone and flashed an RB750 with the latest openwrt (chaos calmer), and discovered that the package/dependency management lacks the finesse of something like debian/ubuntu: root(a)OpenWrt:~# opkg install openvswitch Installing openvswitch (2.3.1-0dfed4ba9c8a16a1f316d709b7831a4e139472d4) to root... Downloading http://downloads.openwrt.org/snapshots/trunk/ar71xx/mikrotik/packages/packa…. Collected errors: * satisfy_dependencies_for: Cannot satisfy the following dependencies for openvswitch: * kmod-udptunnel4 * kmod-udptunnel6 * * opkg_install_cmd: Cannot install package openvswitch. digging deeper, it appears that kmod-udptunnel is built for ar71xx/nand (https://downloads.openwrt.org/snapshots/trunk/ar71xx/nand/packages/base/) but not for the mikrotik fork (https://downloads.openwrt.org/snapshots/trunk/ar71xx/mikrotik/packages/base/) questions: - has anyone got this running? im going to build kmod-udptunnel from source and then opkg install openvswitch, but was hoping i wouldn't have to - does anyone have a preference for ar71xx-mikrotik over ar71xx-nand? i know Dean has deployed ovs from source on older mikrotiks running attitude adjustment, who else is playing in this space? cheers sam

2 1

Loading of IRD.govt.nz taking 30-50 seconds of late
by Barry Murphy 19 Feb '15

19 Feb '15

Morning all, Wondering if anyone else is noticing that the ird website is taking quite some time to load, has been happening since late last week or earlier this week judging from reports. Tested from our network and also on 4G from Spark, same issue. Looking at a debug of the page, we get a 301 after 25 seconds, then we get a 24 second delay for a 200 OK then things start loading a bit later out of a cache from the looks. If anyone that looks after the IRD infrastructure is on the list, feel free to reply offlist. Many thanks -- Kind regards, Barry Murphy / Chief Operating Officer

3 2

increasing number of blacklisted NZ public IP addresses
by Daniel Christie 18 Feb '15

18 Feb '15

Hello all, I'm working for a small web/mail hosting company. I've recently noticed a lot of blacklisted IP addresses from NZ based ISPs being dished out, part of our intrusion prevention methods involve denying connections from these addresses. How do these blacklisted IP addresses get unlisted? Is it the responsibility of the customers of these ISPs or it is the responsibility of the ISP? Daniel Christie

5 5

ATS Switch for 1-3 Devices
by Mark Foster 17 Feb '15

17 Feb '15

Hiya folks, Looking for a cost-effective solution to automatically switch a non-redundantly-powered device between redundant power supplies. For example running a single switch between a UPS-backed power supply and a direct-mains power supply, so that I have some tolerance should the mains supply to the UPS fail (or the UPS itself). Essentially something like this: http://www.cdlnz.com/index.html?do=viewproduct&p=NR605&code=RP-ATS But i'm looking for something relatively small and for a relatively low number of devices (say anywhere from 1 to 3). I'm also not necessarily looking for >10A 240V; the gear that'll be being run, is quite low current. Anyone got any recommendations? Thanks Mark.

3 2

Job: Head of Network Operations - NEXTDC - Sydney Australia - 457 Available
by Skeeve Stevens 16 Feb '15

16 Feb '15

Hi all, On Seek.com.au <http://seek.com.au/> - http://www.seek.com.au/job/28150202?pos=1&type=standout I know a bit about this role, so feel free to chat to me offline if you are wondering if you are suitable.... or just apply directly :) I'm helping them find the right person... hardest thing is knowing who is out there and looking for a role like this. I will be in Japan at the Apricot/APNIC conference in a couple of weeks if you're there and you are interested in the role and would like to catch-up and chat about it. ...Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.co.nz ; www.eintellegonetworks.co.nz Phone: +612 8014 7398; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/theispguy ; blog: www.theispguy.com The Experts Who The Experts Call Juniper - Cisco - Cumulus Linux - Cloud - Consulting - IPv4 Brokering

1 0

Re: [nznog] Can anyone help
by Glen Eustace 16 Feb '15

16 Feb '15

Our issue has been going on now for a couple of weeks now but has been getting slowly worse. I don’t believe the issue reported in the Herald about mobile is related (but who knows :-) > On 12/02/2015, at 7:39 am, Robert M <robert(a)kneedrag.org> wrote: > > Spark has been having issues, apprently they have been resolved this morning. > > Don't have the details off hand. > > Regards, > > Rob > > On 12/02/2015 7:09 AM, "Glen Eustace" <geustace(a)godzone.net.nz <mailto:geustace(a)godzone.net.nz>> wrote: > Hi, > > I am wearing my Massey Uni hat and we are struggling with an intermittent number (though its growing) of random SIP telephone call failures from the PSTN. I realise that this isn’t a telephony support line but with the proliferation of VoIP I am hoping some of the people on the list might be able to help. > > We are getting call failures to completely random Massey DDI’s, Spark have traced the calls and are confident they leave their network and Vodafone are doing the same and do not believe the calls enter theirs. The call’s terminate on a system which plays the following voice prompt twice and then ends the call. > > “Your alternative network call is unable to proceed at this time, please try again later”. > > The voice is a pleasant Kiwi (though I’m not a linguist so might not be) female. > > If anyone can put their hand up and say, "yes that’s one of ours" or anyone has heard or know where this recording might be coming from it might help. The calls are definitely going somewhere and if we, Massey/Spark/Vodafone can work out the where it might help pinpoint the how. > > I know this is a long shot but we are running out of ideas. > > Thanks > > Glen > > > > -- > =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= > Glen and Rosanne Eustace, > GodZone Internet Services, a division of AGRE Enterprises Ltd., > P.O. Box 8020, Palmerston North, New Zealand 4446 > Ph: +64 6 357 8168 <tel:%2B64%206%20357%208168>, Fax: +64 6 357 8165 <tel:%2B64%206%20357%208165>, Mob: +64 27 542 4015 <tel:%2B64%2027%20542%204015> > > "Specialising in providing low-cost professional Internet Services since 1997" > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz <mailto:NZNOG(a)list.waikato.ac.nz> > http://list.waikato.ac.nz/mailman/listinfo/nznog <http://list.waikato.ac.nz/mailman/listinfo/nznog> >

2 4

Bi-lateral peering sessions
by Tim Hoffman 15 Feb '15

15 Feb '15

Kind folk of New Zealand, A while ago, when I was at Citylink, we had some very interesting discussions on what the community believed the role of the route server infrastructure was in our exchanges. At the time, Citylink had announced that they were no longer going to require every operator to submit prefix lists to them for enforcement. In my opinion, Citylink moved to the correct way of acting; not providing a level of route filtering for the community, but instead putting it onto each ISP to enforce their own BGP security. It was interesting to me how much people had placed a reliance on the route servers and their enforcing a route policy on behalf of them, rather than taking responsibility for this themselves. I recall that in this discussion on the list Dean Pemberton, Michael Fincham, and Andy Linton made some excellent points about this. One of the interesting things about New Zealand and IXs is the lack of bi-lats or routing control used across the peering exchanges. In many IXs worldwide, the route servers are only considered to be the initial stage of setting up on an IX (if you used them at all). An ISP or content provider would reach out to all the peers that they did any level of traffic to and request a bi-lateral BGP session, which they would enforce their own route policies on, and filter routes in both directions on this session to appropriately manipulate traffic. In light of the issues this afternoon on APE, I wonder all of us putting some effort into bi-lats with our major peers is worthy of discussion? Also interesting is the attached graph of aggregate traffic on AKL-IX, showing the value of having multiple IXs in Auckland for resiliency. Cheers, Hoff [image: Inline image 2]

1 0

Can anyone help
by Glen Eustace 11 Feb '15

11 Feb '15

Hi, I am wearing my Massey Uni hat and we are struggling with an intermittent number (though its growing) of random SIP telephone call failures from the PSTN. I realise that this isn’t a telephony support line but with the proliferation of VoIP I am hoping some of the people on the list might be able to help. We are getting call failures to completely random Massey DDI’s, Spark have traced the calls and are confident they leave their network and Vodafone are doing the same and do not believe the calls enter theirs. The call’s terminate on a system which plays the following voice prompt twice and then ends the call. “Your alternative network call is unable to proceed at this time, please try again later”. The voice is a pleasant Kiwi (though I’m not a linguist so might not be) female. If anyone can put their hand up and say, "yes that’s one of ours" or anyone has heard or know where this recording might be coming from it might help. The calls are definitely going somewhere and if we, Massey/Spark/Vodafone can work out the where it might help pinpoint the how. I know this is a long shot but we are running out of ideas. Thanks Glen -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Glen and Rosanne Eustace, GodZone Internet Services, a division of AGRE Enterprises Ltd., P.O. Box 8020, Palmerston North, New Zealand 4446 Ph: +64 6 357 8168 <tel:%2B64%206%20357%208168>, Fax: +64 6 357 8165 <tel:%2B64%206%20357%208165>, Mob: +64 27 542 4015 <tel:%2B64%2027%20542%204015> "Specialising in providing low-cost professional Internet Services since 1997"

1 0