- NZNOG - lists.nznog.org

internet research
by Jamie Baddeley 04 Feb '15

04 Feb '15

Folks, https://internetnz.nz/internet-research-forum I'd imagine there's some folks in the NZNOG community that might be interested in this. jamie

7 7

Recordings of 2015, and license
by Nick 02 Feb '15

02 Feb '15

I almost hesitate to bring it up again, last time there appeared to be no consensus about it, but... Do we know what, if any, license the recordings of this years NZNOG are? In theory, it should have been stipulated in the contract with the recording/streaming company, along with the speakers agreements. Cheers, Nick -- Nick 'Zaf' Clifford

1 0

Re: [nznog] racks for beer.
by Mark Frater 01 Feb '15

01 Feb '15

I have racks, not beer. 900D x 600W x 42U high. Contact me off list if interested. Mark From: Rob McDonald [mailto:r(a)l2.co.nz] Sent: Monday, 2 February 2015 12:08 p.m. To: Mark Frater Subject: Re: [nznog] racks for beer. You want racks or you got racks? On 2/02/2015 10:38 AM, "Mark Frater" <mark.frater(a)compass.net.nz<mailto:mark.frater(a)compass.net.nz>> wrote: Will swap 19" racks for beer. (No sides or doors - the racks I mean). Contact me if you're keen. Mark Frater Head of Design Compass Communications Limited _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz<mailto:NZNOG(a)list.waikato.ac.nz> http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Re: [nznog] Suggestions for router with 3G external antenna for remote site comms
by Laurence Bullivant 01 Feb '15

01 Feb '15

Afternoon, If you want something rock stable then i recommend the Cisco 88Xg series. They are fixed interface devices with either xDSL/HSNS/Ethernet WAN ports and inbuilt dual SIM 3G. They have dual antennas with N-Type connecters for low loss external antennas if needed. We have deployed these in the past for 3G failover on xDSL connections and they have always been extremely reliable. -Laurence Bullivant laurence(a)bullivant.co.nz On Sat, Jan 31, 2015 at 3:34 PM, Darren Moss <Darren.Moss(a)webhostnz.co.nz> wrote: > Hi All, > > We have a bunch of regional sites (weather probes) that run some > equipment, 2 PCs and are connected to the internet. > > At the moment it's dongle city which I would like to change over to > something a little better :) > > I am looking for suggestions on a decent (business grade) router with 3G > capability an external antenna connection. > > At each site, the equipment sits in a rack, inside a hut and signal > strength is reasonable (3/5). > > My thinking is to deploy a basic Cisco router with a 3G WIC then an > external antenna on the same mast where we collect weather data. > > Happy to hear suggestions and input. > > Many thanks > > > > Darren. > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog > >

1 0

Re: [nznog] racks for beer.
by Mark Frater 01 Feb '15

01 Feb '15

Will swap 19" racks for beer. (No sides or doors - the racks I mean). Contact me if you're keen. Mark Frater Head of Design Compass Communications Limited

1 0

Thanks NZNOG
by Terry Manderson 31 Jan '15

31 Jan '15

Hi NZNOGers, I'd just like to say thanks. Thanks for the hospitality extended to an Aussie. Thanks for a really nice 2 days of thought provoking and interesting speakers. Thanks to the current trustees for making it happen, and thanks to the sponsors for all the schwaag and subsiding the event (as they always do!). Mostly I'd like to give thanks to the exiting trustees Neil and Dean. Like previous trustees Joe and Andy they have given much of themselves, of their time, and their expertise to make the Internet a better place through NOG coordination. I know this first hand in my role with AusNOG. It's a tireless beast. Often without thanks. It chews up personal lives and makes employers look at you with raised eyebrows. People often comment "why bother", and question your sanity. But ultimately what you have done makes the Internet better, and each person who takes it on and makes such efforts to this amazing concoction of technology contributes to an entire world of "better". And it's with that sincere goal which you have both plainly embodied, that I offer you MY thanks and my appreciation for all you have done. You deserve more than just this email, more than the beer I will buy you when next we meet ... you deserve the recognition for those selfless efforts. Well done. Cheers Terry

3 2

Suggestions for router with 3G external antenna for remote site comms
by Darren Moss 31 Jan '15

31 Jan '15

Hi All, We have a bunch of regional sites (weather probes) that run some equipment, 2 PCs and are connected to the internet. At the moment it's dongle city which I would like to change over to something a little better :) I am looking for suggestions on a decent (business grade) router with 3G capability an external antenna connection. At each site, the equipment sits in a rack, inside a hut and signal strength is reasonable (3/5). My thinking is to deploy a basic Cisco router with a 3G WIC then an external antenna on the same mast where we collect weather data. Happy to hear suggestions and input. Many thanks Darren.

4 3

RFC 4084 Terminology for Describing Internet Connectivity
by Brian E Carpenter 29 Jan '15

29 Jan '15

As Dean requested http://tools.ietf.org/html/rfc4084 Regards Brian

1 0

Operators and the IETF
by Brian E Carpenter 29 Jan '15

29 Jan '15

Following up on the lightning talk I just gave in Rotorua: The IETF is concerned that we're not getting enough operator input at the time it counts: when specifications are being developed, years before they come out in software or hardware. There's been an effort to investigate the reasons for this problem, prior to trying to fix it. Everybody involved in Internet operations is welcome - indeed needed - to contribute. Full length presentation: http://www.ietf.org/proceedings/91/slides/slides-91-opsawg-0.pdf IETF draft: https://tools.ietf.org/html/draft-opsawg-operators-ietf Mailing list (anyone can join): http://snozzages.com/cgi-bin/mailman/listinfo/synergy Internet Society page: https://www.internetsociety.org/deploy360/operators-and-the-ietf/ How to get started with the IETF without further ado: http://www.ietf.org/newcomers.html Regards Brian Carpenter

2 1

Two interesting links from APNIC
by Dean Pemberton 29 Jan '15

29 Jan '15

IPv6 deployment status within NZ by ISP http://stats.labs.apnic.net/ipv6/NZ DNSSEC deployment status within NZ by ISP http://stats.labs.apnic.net/dnssec/NZ

1 0

Lightning talks
by Richard Nelson 29 Jan '15

29 Jan '15

We still have space to fit in a couple more lightning talks if anyone else has one to present. Richard.

1 0

NZNOG Video Feed?
by Tristram Cheer 29 Jan '15

29 Jan '15

Is R2 or someone livestreaming NZNOG this year? Tristram Cheer Network Architect - Most problems are the result of previous solutions... [Visit our Website]<http://www.uber.co.nz/> 09 438 5472 Ext 803 | 022 412 1985 | PO Box 5083, Whangarei, 0140 t(a)uber.co.nz<mailto:t(a)uber.co.nz> | www.ubergroup.co.nz<http://www.ubergroup.co.nz> [http://uber.co.nz/uploads/signatures/fb-s-v4.png]<http://ubergroup.co.nz/fb> [http://uber.co.nz/uploads/signatures/twitter-s-v4.png] <https://twitter.com/#!/ubergroupltd>

4 4

nznog 2015: Pic of who won puzzle
by Lin Nah 29 Jan '15

29 Jan '15

Since not all are on twitter, here's the pic of one of the group who won the puzzle. Not sure if the guys next to the winner is part of the group or just happened to be there. Go Wireless NZ @gowifi <https://twitter.com/gowifi> tweeted: Wohoo! Completed puzzle!! Great job guys! #nznog <https://twitter.com/search?q=%23nznog> http://ow.ly/i/8qIVj Tweet: https://twitter.com/gowifi/status/560597249663582208

2 1

Lightning talks
by Richard Nelson 28 Jan '15

28 Jan '15

If you want to present a lightning talk tomorrow in the conference, please send me an email or talk to me in a break. Talks should be around 5 minutes long and may or may not require presentation slides. If you have slides, upload them to owncloud.face.co.nz with username/password of nznog15. Put them in the Lightningtalks folder. Richard.

2 1

Beers tonight courtesy of vibe
by Callum Barr 27 Jan '15

27 Jan '15

Come down to Brew in eat street, rotovegas, meet and greet the vibe team and sample many fantastic beverages. We're here now until we expire. Call me if you get lost Callum +64275672746 -- Callum Barr me(a)callumb.com

1 0

bufferbloat talk at nznog friday
by Dave Taht 26 Jan '15

26 Jan '15

I am curious as to what aspects of bufferbloat I should cover more deeply in my upcoming talk at nznog this friday? http://www.nznog.org/home/2015-papers Most of my own personal focus has been on speeding up the edge of the internet, and now wifi, while I have a feeling I should touch upon more on island-to-world connectivity and satellite connectivity issues for this audience. We've given plenty of talks in the past. See talks by van jacobson, jim gettys, jesper dangaurd-bauer, Stephen hemminger, Eric Dumazet, Toke Hoiland Jorgensen, here: http://www.bufferbloat.net/projects/cerowrt/wiki/Bloat-videos And the manifesto for FQ+AQM here: https://gettys.wordpress.com/2013/07/10/low-latency-requires-smart-queuing-… So... To what extent do NZNOG folk already grok the causes and cures for bufferbloat? I'm perfectly willing to drop my usual detailed explanation of how tcp bandwidth probing works and talk abut new stuff going on, and wifi, if desired... talk more to bandwidth management and traffic engineering tools, etc. ... there is someone here today doing mikrotik training, and as yet only mikrotik only supports SFQ, not fq_codel. http://forum.mikrotik.com/viewtopic.php?f=1&t=89221 http://forum.mikrotik.com/viewtopic.php?f=2&t=63594 I have a pair of slides on the differences between SFQ and fq_codel. ... And so on. I'm here all week... I've borrowed a NZ vm, run a few experiments worldwide, am fiddling with some parameters... -- Dave Täht http://www.bufferbloat.net/projects/bloat/wiki/Upcoming_Talks

4 12

IPv6 support across NZ ISPs
by Lindsay Hill 26 Jan '15

26 Jan '15

After last year's IPv6 issues, I was wondering what the status is of IPv6 support across NZ ISPs. I couldn't find that data in any one place, so I've been pulling it together myself, into a Google Sheet: https://docs.google.com/spreadsheets/d/1KmhVGN_vPzerUzhpya8lBxdgHc1rCyuWIsY… This is primarily focused around residential ISPs, and the status of their IPv6 support for 'regular' customers. I'm interested in three things: * Is IPv6 supported - fully or trial? * What prefix lengths are given to customers * Are static allocations available?" I've got data on 11 ISPs so far, with requests out for another 3. This covers the majority of end-user connections in NZ. There are of course many more niche ISPs, and I'm happy to add their info. You can see that support is generally poor, which is probably why Google says we're only doing ~0.6% IPv6 traffic. Comments + Updates welcome. Once I've got a bit more data, this will probably go into a more permanent home. If we get enough data, we could break out into residential vs business vs co-location IPv6 support. I am aware of at least a couple of ISPs that are doing IPv6 trials, and when they go live, it will significantly shift the overall IPv6 penetration rate in NZ. But those trials are still mostly internal only, and you can only get on them if you know the right people. If the regular public can't get onto those trials, then I think they should be listed as "Unsupported" - too many ISPs have made noises about running trials years ago, but never got around to actually launching. You know who you are.

16 31

Re: [nznog] Chorus EUBA + IPV6
by Scott Pettit 26 Jan '15

26 Jan '15

On 26/01/15 21:37, "Brent Marquis" <Brent.Marquis(a)chorus.co.nz> wrote: >>Only affect PPPoE->PPPoA translation >This also means that IPv6 over VDSL (PTM) should be fine. >From: nznog-bounces(a)list.waikato.ac.nz >[mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Simon Allard >To summarise: >IPV6 doesn’t work on Chorus EUBA on some line card types >Only affect PPPoE->PPPoA translation >PPPoE end to end is fine. >Chorus say IPV6 not supported on EUBA >Customer numbers effected are smallish. Just to clarify, if a customer uses PVC 0/110 (Ethernet), there is no issue, right? We have lots of sites on EUBA using 0/110 and haven’t had any problems with IPv6, ditto for WVS. -Scott -- [https://s3-ap-southeast-2.amazonaws.com/e2emailsig/unnamed.png] Scott Pettit | Director +64 9 9502222 | SPettit(a)end2end.co.nz End 2 End Limited +64 9 9502220 205/100 Parnell Road, Parnell, Auckland 1052, New Zealand http://www.end2end.co.nz The content of this message and any attachments may be privileged, confidential or sensitive and is intended only for the use of the intended recipient(s). Any unauthorised used is prohibited. Views expressed in this message are those of the individual sender, except where stated otherwise with appropriate authority. All pricing provided is valid at the time of writing only and due to factors such as the exchange rate, may change without notice. Sales are made subject to our Terms & Conditions, available on our website or on request.

5 6

APE route flapping
by Tim Price 26 Jan '15

26 Jan '15

Hi All, Some of you may have noticed that there is some route flappage going on this morning and some of your Domestic/APE facing routing processes may be going haywire. It is probably an appropriate time to check your session route limits on APE and raise them to ~6000. Massey and Vocus; I note that your APE sessions are flapping with Vocus’s route updates causing the lions share of my issues this morning: http://nzix.net/cgi-bin/lg.cgi?query=bgp&protocol=IPv4&addr=neighbors+192.2 03.154.123&router=rs1.ape.nzix.net http://nzix.net/cgi-bin/lg.cgi?query=bgp&protocol=IPv4&addr=neighbors+192.2 03.154.62&router=rs1.ape.nzix.net Cheers, Tim.

1 0

Re: [nznog] IPv6 support across NZ ISPs [SECURITY=UNCLASSIFIED]
by HENDERSON MIKE, MR 26 Jan '15

26 Jan '15

Unfortunately, "those who have bothered to implement it" appear to be commercially inconsequential in the residential and mobile broadband markets. According to Andrew Cushen's recent blog post (at http://tinyurl.com/nvdxgh2) Spark, Vodafone and Callplus (= Orcon and Slingshot) between them own 94% of the residential broadband market, and of them Orcon says it has a 'trial' IPv6 offering, all the others Just Say No. Vodafone, Spark and two Degrees of course own 100% of the mobile broadband market, and none of them appear to offer IPv6. I'm afraid that v6 traffic is going to continue to be down amongst the noise until either Vodafone or Spark come to the IPv6 party Regards Mike Disclaimer: opinions expressed are mine and may not represent the position of my employer From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Pete Mundy Sent: Monday, 26 January 2015 5:37 p.m. To: nznog Subject: Re: [nznog] IPv6 support across NZ ISPs Agreed! Back-pats to those who have bothered to implement it. I know I base my purchasing decisions on it's availability. FWIW we went through a process of finding co-lo package providers that would provide IP space, bandwidth and physical hosting for our PBX equipment around 12 months ago and one of the pre-requisites was the ability to provision us IPv6 space. I was disappointed to find that only 3 of the 10 NZ providers we approached were able to offer it! Most said "it's on the roadmap, but not yet". Some just said "no". In the end we selected two of the providers that could, and we are very happy with the service from both. Hat tips to both Vibe and Unleash/Solarix; your IPv6 support was a significant part of what got you our custom :) Server colo (or VPS') are a different market than home DSL or UFB, but I think it could be interesting & useful to have some sort of matrix of IPv6 availability in that sector too. And 'business' UFB/HSNS/VSDL etc too for that matter. I do hope my 30% hit rate isn't an accurate indicator... Pete On 26/01/2015, at 10:38 AM, Alastair Johnson <aj(a)sneep.net<mailto:aj(a)sneep.net>> wrote: Nice work by FX. Keep it up. (and good work to the others that are offering IPv6 as compiled by Lindsay's list - also good work) The information contained in this Internet Email message is intended for the addressee only and may contain privileged information, but not necessarily the official views or opinions of the New Zealand Defence Force. If you are not the intended recipient you must not use, disclose, copy or distribute this message or the information in it. If you have received this message in error, please Email or telephone the sender immediately.

1 0

CloudFlare at AKL-IX doing some traffic!
by Michael Fincham 24 Jan '15

24 Jan '15

Hey all, Looks like ClareFlare have started moving some traffic at AKL-IX: <http://monitor.akl-ix.nz/cacti/graph.php?local_graph_id=18&rra_id=all> I look forward to seeing what happens next on this graph :) -- Michael Fincham

2 1

They're adding a "leap second" at Noon, Wednesday, 1 July 2015 NZ Standard Time {SECURITY=UNCLASSIFIED}
by HENDERSON MIKE, MR 15 Jan '15

15 Jan '15

Folks, Some of you may not have noticed this in the post-Christmas doze ... What will happen is that on 30th June [UTC time] the clock will go 23:59:59 > 23:59:60 > 00:00:00, instead of 23:59:59 > 00:00:00, i.e. an extra 'leap' second is inserted. It will cause the odd issue or two, depending on your environment and operating system.. For example, if you should happen to use RHEL you could start here https://access.redhat.com/articles/15145 There were certainly issues in other Linux distributions (including Oracle Linux and SLES) last time this happened on 30th June / 1st July 2012. Regards Mike ________________________________________ Press Coverage: This year will be slightly longer after the Paris Observatory announced that it was adding a "leap second" at midnight [UTC] on June 30 http://www.smh.com.au/technology/sci-tech/extra-second-to-be-added-to-2015-… Note: Midnight [UTC] on June 30 2015 is Noon, Wednesday, 1 July 2015 NZ Standard Time Official Announcement: INTERNATIONAL EARTH ROTATION AND REFERENCE SYSTEMS SERVICE (IERS) SERVICE INTERNATIONAL DE LA ROTATION TERRESTRE ET DES SYSTEMES DE REFERENCE SERVICE DE LA ROTATION TERRESTRE DE L'IERS OBSERVATOIRE DE PARIS 61, Av. de l'Observatoire 75014 PARIS (France) Tel. : 33 (0) 1 40 51 22 26 FAX : 33 (0) 1 40 51 22 91 e-mail : services.iers(a)obspm.fr<mailto:services.iers(a)obspm.fr> http://hpiers.obspm.fr/eop-pc Paris, 5 January 2015 Bulletin C 49 To authorities responsible for the measurement and distribution of time UTC TIME STEP on the 1st of July 2015 A positive leap second will be introduced at the end of June 2015. The sequence of dates of the UTC second markers will be: 2015 June 30, 23h 59m 59s 2015 June 30, 23h 59m 60s 2015 July 1, 0h 0m 0s The difference between UTC and the International Atomic Time TAI is: from 2012 July 1, 0h UTC, to 2015 July 1 0h UTC : UTC-TAI = - 35s from 2015 July 1, 0h UTC, until further notice : UTC-TAI = - 36s Leap seconds can be introduced in UTC at the end of the months of December or June, depending on the evolution of UT1-TAI. Bulletin C is mailed every six months, either to announce a time step in UTC or to confirm that there will be no time step at the next possible date. Daniel Gambis Head Earth Orientation Center of IERS Observatoire de Paris, France http://datacenter.iers.org/eop/-/somos/5Rgv/latest/16<http://datacenter.iers..org/eop/-/somos/5Rgv/latest/16> The information contained in this Internet Email message is intended for the addressee only and may contain privileged information, but not necessarily the official views or opinions of the New Zealand Defence Force. If you are not the intended recipient you must not use, disclose, copy or distribute this message or the information in it. If you have received this message in error, please Email or telephone the sender immediately.

2 1

APNIC Consultations at Conference - Wednesday
by Richard Nelson 14 Jan '15

14 Jan '15

Hostmaster consultations ------------------------ APNIC is offering free, individual Hostmaster consultation sessions at the NZNOG Conference. These will be available on Wednesday Jan 28. At these sessions you can ask about: - How to request IPv4, IPv6, and AS numbers from APNIC - How to transfer IPv4 addresses and AS numbers - Current policies for IP and AS number management in the APNIC region - How to maintain and update your resource registration record in the APNIC Whois Database - Any individual issues you might have To register for the Hostmaster consultations, please email: elly(a)apnic.net

1 0

New prefixes on WIX
by Tim Price 13 Jan '15

13 Jan '15

Heads up that ~700 new prefixes just appeared then vanished from WIX route reflector 2. This momentarily pushed the route totals up over 2000 which may have reset a few BGP sessions for anyone limiting their received prefixes to 2000 on that session. Cheers, Tim.

1 0

python network trace analysis tutorial at NZNOG 2014
by Nevil Brownlee 13 Jan '15

13 Jan '15

Hi all: I'm giving a tutorial on "analysing network traces with python" at NZNOG 2015. The tutorial will cover how to use my python-libtrace module, with lots of example python programs. However, the examples I can think up easily are mostly trivial. It would help me a lot to know what kinds of trace analysis ISPs would actually find useful! If/when you collect packet traces, what kinds of information or analysis would you like to get from them? Any suggestions would be much appreciated - please email me off-list, nevil(a)auckland.ac.nz Cheers, Nevil -- --------------------------------------------------------------------- Nevil Brownlee Computer Science Department Phone: +64 9 373 7599 x88941 The University of Auckland FAX: +64 9 373 7453 Private Bag 92019, Auckland 1142, New Zealand

1 0

Fwd: Re: [mailop] Wildcarding of AHBL public DNSbl lists on Jan 1st
by Thom Hooker 04 Jan '15

04 Jan '15

(Apologies if you've seen this notification from the mailop list already. ) See the post below re: the AHBL RBL wildcarding certain zones today. There are NZ ASs in the latest CSV lists in the link below (Vodafone NZ, ICONZ, HD & NZ Wireless), this change may affect mail flows. Regards Thom -------- Original Message -------- Subject: Re: [mailop] Wildcarding of AHBL public DNSbl lists on Jan 1st Date: Fri, 26 Dec 2014 16:26:34 -0700 From: Brielle Bruns <bruns(a)2mbit.com> To: mailop(a)mailop.org On 12/26/14 4:00 PM, Frank Bulk (iname.com) wrote: > Thanks, that's helpful. > > I'm not sure how many IPs you have, but Cymru's service might be an option: >https://www.team-cymru.org/Services/ip-to-asn.html > > I found some other options: >http://quaxio.com/bgp/ >http://ipinfo.io/ >http://dev.maxmind.com/geoip/legacy/geolite/ (usage described here: >https://stackoverflow.com/questions/13110386/ip-to-asn-mapping-algorithm) > Thanks. I threw together a shell script that handles the conversion for me based on the geoiplookup tool and the output is going here: http://www.ahbl.org/queries/ I have to generate the lists manually for now, but it should help those looking to figure out who on their network is doing queries. -- Brielle Bruns The Summit Open Source Development Group http://www.sosdg.org /http://www.ahbl.org _______________________________________________ mailop mailing list mailop(a)mailop.org http://chilli.nosignal.org/mailman/listinfo/mailop _____________________________________________________________________________ This email has been filtered by SMX. For more info visit http://smxemail.com _____________________________________________________________________________

1 0

BCP / Guidance on IPv6 prefix size to provide to customers
by Alexander Neilson 02 Jan '15

02 Jan '15

I wondered if anyone on here had any guidance on any current BCP (or BCOP) or some general guidance on IPv6 allocations to customers (I am speaking here only for casual day to day allocations to customers) Looking through email archives and discussions that have seen around there was fairly vigorous discussions but no real resolutions. I have seen suggestions of /48, /50, /56. I am inclined to allocate /56’s to each customer (providing 256 /64’s). I don’t want to prevent customers from having the flexibility to do what they need / want to do nor stymie future use cases. If there is some good guidance on a need for /48’s then I will look at it and will use those if needed. Also, is current operating practice amongst others for all links to be /64’s even for p2p links? It seems a lot of documentation / reference texts are a few years old now and some providers have told me that this advice is no longer current but I haven’t yet seen this codified. My /32 allocation is provisionally as follows: 16 bits of /56 allocations - 65,535 customer allocations 8 bits for internal (leaves me 255 /64’s for p2p links between routers) Currently using PPPoE for IPv4 authentication for bulk customers and bespoke routed configurations for the rest. I intend to continue the PPPoE at this stage and just provide dual stack to every customer when connecting. I am still open to any input people have or feedback about what contributed to their deployments. I have looked into archives but was unable to find clear guidance that wasn’t discussed at length to be out of date / disputed so I am primarily looking for what the current best practice is so I can take advantage of the best advise for rolling out the deployment (I know we are late to this party but better late than never) Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

7 13

Re: [nznog] Whole of Domain Web Harvest 2015
by emma h 23 Dec '14

23 Dec '14

for those wishing to block, the apache rewrite rule is; RewriteEngine on RewriteRule ^(.*)$ http:/your.domain.co.nz [R=301,L] RewriteCond %{HTTP_USER_AGENT} ^(.*)NLNZ_IAHarvester2015(.*)$ RewriteRule ^(.*)$ http://tinyurl.com/NLNZ-IAHarvester2015 merry festivus. -- em

2 1

AUI 10BaseT transceiver
by Gareth Fletcher 23 Dec '14

23 Dec '14

Hi team Is anyone near Auckland CBD/Ponsonby and have one of these they'd be willing to part with this afternoon/next week? We seem to have trashed all ours years ago... Please reply off-list, with beer of choice of course :) Cheers! Gareth

1 0

Whole of Domain Web Harvest 2015
by Jay Gattuso 23 Dec '14

23 Dec '14

Hi NZNoggers, I write to let you know of our intent to commence the next NZ Whole of Domain web harvest on the 12th of Jan 2015. The crawl will take approximately 3 weeks to complete. We will be following the same model as previous years, with the Internet Archive acting on our behalf to undertake the crawl. We will be adhering to robots.txt in the main, however when content blocked by robots.txt is embedded in a page that’s not blocked by robots.txt we will attempt to capture that content. The metadata the crawler will be using is:- metadata.userAgentTemplate=Mozilla/5.0 (compatible; NLNZ_IAHarvester2015 +(a)OPERATOR_CONTACT_URL@) metadata.operatorContactUrl=https://natlib.govt.nz/publishers-and-authors/web-harvesting/domain-harvest The contact URL gives some information that describes why we are doing this, and what we’re doing. If you have any questions or concerns, please drop me a line – I’ll be monitoring this email address over the Xmas period. Many thanks, Jay Jay Gattuso | Digital Preservation Analyst | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467 Wellington 6140 New Zealand | +64 (0)4 474 3064 jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)natlib.govt.nz>

1 0

Fwd: Estonian IPv6 deployment report
by Brian E Carpenter 23 Dec '14

23 Dec '14

An example from far away... -------- Original Message -------- Subject: Estonian IPv6 deployment report Date: Mon, 22 Dec 2014 17:27:23 +0200 From: Tarko Tikan <tarko(a)lanparty.ee> To: IPv6 Ops list <ipv6-ops(a)lists.cluenet.de> hey, Some time ago, many people noticed rapid IPv6 deployment growth in Estonia (from 0% to 5% in 4 weeks). We at 3249/Elion/Estonian Telecom were behind this, other operators don't have any serious IPv6 deployments at the moment. We rolled out v6 to everyone (both business and residential customers) with last-gen CPE, there was no hop-in our hop-out program - aim was to do it perfectly and without customers even noticing. I'm happy to say that we achieved this goal :) To satisfy general interest, I promised small (somehow it turned out longer than I expected) technical writeup how we enabled v6 for our subscribers. If you have any other questions, feel free to ask and I do my best to answer them. You can also skip the technical content and there are some statistics below. Our access network is mix of DSL/GPON/wimax/p2p-ETH and broadband service is deployed in shared service vlans. IPv6 traffic shares vlan with IPv4. Service vlans are transported over MPLS metro network using pseudowires and terminated in geo-clustered Alcatel 7750 BNG routers. Each subscriber is allocated up to 4 mixed v4 and v6 IP hosts. For v4 we are using the usual DHCP, for IPv6 we are using DHCPv6 with IA_PD only, no IA_NA is provided. Unfortunately DHCPv6 provides no way to signal IPv6 default-route thus we have to fall back to RA for default-route. RA does not include any on-link prefixes or DNS information. RAs are L2 unicasted to CPE MAC so no other CPE in service vlan picks up those RAs. To ensure rapid switchover between BNG routers, we are signalling virtual link-local address as default-route. We are using ALU internal DHCP/DHCPv6 servers to allocate leases but we also signal IP information from radius (in such case BNG "fakes" DHCP server) for static IP customers. Provided IPv6 prefix is always /56 and we keep the old lease for 24h even if the CPE is turned off (actual lease time is 30min). Unfortunately, IPv6 LDRA is not available on most of our access platforms so we have to rely on IPv4 session information for authentication. This linking is done in the radius server during subscriber authentication (excellent radiator + quite awful SQL queries :) - if subscriber has IPv4 session (that has been authenticated using DHCP opt82), same MAC address is allowed to have IPv6 session on exactly the same virtual BNG port. IPv4 and v6 session are both tied to same subscriber and share shapers, QOS etc. We were able to enable IPv6 only on our last-gen Inteno CPEs. They run modified OpenWrt and because it's linux - everything is possible :) In CPE, /56 is divided up to /64s, first one is currently reserved but we will configure it on loopback interface and use it for CPE management. Second /64 is configured on LAN and third is configured on public wifi SSID (if you choose to enable this option). In the LAN, IPv6 config is provided by RAs, we also support RDNSS and stateless DHCPv6 for DNS. There is also ingress IPv6 firewall in the CPE and configuration is modifiable by user. To make deployment as smooth as possible, we rolled out IPv6 capable CPE software first. Then, during the BNG platform refresh, we deployed L2 ACLs that dropped all IPv6 traffic based on 0x86dd ethertype. We then deployed IPv6 config to all BNGs and could verify everything before single v6 lease was handed out to the subscribers. Then, interface by interface, we replaced L2 ACL with one that only allowed 0x86dd for certain, supported, OUIs. This is the current situation and we are investigating ways to support 3rd party CPEs - main problem is unreliable IPv6 config in CPEs. Many don't enable DHCPv6 (or enable NA but no PD) but still pick up default-route from RA and happily signal it to LAN. Some others hammer our BNGs with NA request every 0.1 seconds etc. As statistics go, there are 30000+ active IPv6 subscribers (almost 15% of our customer base, based on our public numbers), 81% of them have have at least one IPv6 enabled device in the LAN, 70% have more than one. Most IPv6 traffic is generated by Google+Youtube, Facebook and Akamai. Not bad for a country with 1.3M people. Next up: mobile network :) -- tarko

2 1

Primary access method
by Brian E Carpenter 21 Dec '14

21 Dec '14

Hi, In answer to a ticket entitled "Not getting an IPv6 prefix today", here is what the help desk told me: > Currently XXX have IPv6 services turned off due to some ongoing investigations > with this service. > > Once this is turned back on you will be able to get an IPv6 address again. and in response to my follow-up bleat > As IPv6 is not the Primary access method we offer on our connections this does > not need to be updated on the network status page. > > IPv6 is not a fully released product therefore it is still going through testing > and this is why we are currently unable to apply static IPv6 address (I didn't ask about a static address and don't want one.) This morning, I still have no IPv6 service and the XXX status page still says "OK - No Known Network Problems". Now, since I've had stable IPv6 service for a long time and it often gives me better response times than IPv4, I was a bit annoyed by this. Isn't it time that people consider IPv6 to be the primary access method, and IPv4 to be a legacy solution? Grumble. I need to fire up SixXs again, then. Brian

9 14

Akamai at APE
by Scott Pettit 19 Dec '14

19 Dec '14

Hoping someone knows/can share more info about the Akamai APE peer. It's been there a couple of months now but I can't find any announcement or info in regards to what those caches are serving. I'm seeing a small amount of largely corporate-ish content coming off it (e.g. Cisco.com content seems to come from there) but wondered whether it also provides media content like iTunes movies? Does anyone have detail on how large it is and what it's there for? -Scott

2 1

Multicast traffic replication issue
by Ben Cornish 18 Dec '14

18 Dec '14

Hi All, Curious if anyone has seen this issue previously or could offer any advice on the issue: We have a VLL/EOMPLS with Pipe from Sydney to NZ which then utilises a City Link QinQ service across town in Auckland. We've had an issue ongoing for some time and it only relates to multicast traffic traversing the path. Essentially this issue started when we couldn't establish a OSPF session over the link - yet all other traffic flows as expected. When we broke this link down to basics (laptop either end) we send one multicast packet in the Sydney end - we then receive that same packet 97 times out the Auckland end. (Over the Pipe and City link path) We see this issue when we ping 224.0.0.5 over the link and get that same exact packet 97 times on the other end. We've seen this when doing WireShark captures on the port. The captures show the exact same packet 97 times (ie same payload/sequence number). Pipe seem to be running out of ideas to track the issue. Being a EoMPLS circuit I doubt the issue is on the Pipe side but more on the City Link side. When CityLink were engaged in the issue they did what they referred to as an RFC test - as I understand it, unicast testing only and never engaged further. This issue only seems to effect link local multicast traffic - ie 224.0.0.x/24 All other traffic appears to flow normally/as expected. Obviously we are chasing pipe to test each side individually to work out who is doing the packet replication - however I am curious if anyone has had issues forming OSPF sessions over a City link service ?? Or if anyone can offer advice or seen a similar issue ? My brain boggles thinking how this is even possible or what would cause it. Ben Cornish General Manager [Description: Description: cid:image001.png(a)01CCB4C2.B40A97F0] Over the Wire Pty Ltd - An Impirical Company Level 3, 24 Little Edward St, Spring Hill QLD 4000 t +61 7 3847 9292 m +61 417 617 204 e ben.cornish(a)overthewire.com.au<mailto:ben.cornish(a)overthewire.com.au> www.overthewire.com.au<http://www.overthewire.com.au/>

3 4

Call for Presentations - DNS-OARC Spring Workshop, May 2015
by Sebastian Castro 18 Dec '14

18 Dec '14

NOTE: Previous message contained the right information, but with the subject referring to the wrong year. Apologies for the noise. The next OARC Spring Workshop will take place in Amsterdam on May 9th and 10th, the weekend before RIPE70. OARC is requesting proposals for presentations, with a preference for DDoS attack reports and mitigation techniques. Reports and field stories can cover DNS-based DDoS attacks, attacks to DNS infrastructure or side effects suffered by cache resolver operators. This workshop intends to build from previous strong OARC workshops, where operational content and research is welcome. Presentations from DNS operators are particularly welcome, as well as from DNS researchers. All DNS-related subjects are accepted, introduction to new tools, visualizations, DNSSEC and novel uses of the DNS. If you are an OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. Adopting practice from other conferences, a timeslot for lighting talks will be available for short presentations (5 to 10 minutes). Workshop Milestones * 18 December 2014, Call for Presentations posted * 8 January 2015, Open for submissions * 5 March 2015, Deadline for submission * 26 March 2015, Final Program published * 7 May 2015, Final deadline for slideset submission Details for abstract submission will be published here: https://indico.dns-oarc.net//conferenceCFA.py?confId=21 The workshop will be organized on different tracks, depending on the topics and the timing of each presentation. If you are interested in a lightning talk, let us know at the time of submission. You can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> if you have questions or concerns. Sebastian Castro, for the OARC Programme Committee OARC is also seeking sponsorship for this workshop, please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Sebastian Castro Technical Research Manager .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Call for Presentations - DNS-OARC Spring Workshop, May 2014
by Sebastian Castro 18 Dec '14

18 Dec '14

The next OARC Spring Workshop will take place in Amsterdam on May 9th and 10th, the weekend before RIPE70. OARC is requesting proposals for presentations, with a preference for DDoS attack reports and mitigation techniques. Reports and field stories can cover DNS-based DDoS attacks, attacks to DNS infrastructure or side effects suffered by cache resolver operators. This workshop intends to build from previous strong OARC workshops, where operational content and research is welcome. Presentations from DNS operators are particularly welcome, as well as from DNS researchers. All DNS-related subjects are accepted, introduction to new tools, visualizations, DNSSEC and novel uses of the DNS. If you are an OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. Adopting practice from other conferences, a timeslot for lighting talks will be available for short presentations (5 to 10 minutes). Workshop Milestones * 18 December 2014, Call for Presentations posted * 8 January 2015, Open for submissions * 5 March 2015, Deadline for submission * 26 March 2015, Final Program published * 7 May 2015, Final deadline for slideset submission Details for abstract submission will be published here: https://indico.dns-oarc.net//conferenceCFA.py?confId=21 The workshop will be organized on different tracks, depending on the topics and the timing of each presentation. If you are interested in a lightning talk, let us know at the time of submission. You can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> if you have questions or concerns. Sebastian Castro, for the OARC Programme Committee OARC is also seeking sponsorship for this workshop, please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Sebastian Castro Technical Research Manager .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Re: [nznog] New IXs in NZ - discussion
by Stu Fleming 17 Dec '14

17 Dec '14

Coming very late to the party on this, but I wanted to wait until announcements (both press and BGP) were out there: On 11 November 13:18, Tim Hoffman <tim(a)hoffman.net.nz> >We've had some interesting announcements of Megaport and IX Australia building internet >exchanges into NZ over the last week or so. I've been a bit surprised at how little chatter there >has been around this on the list. I've just completed standing up our (WICNZ AS38437) peering with APE and hope to complete megaport IX peering in the next couple of days. We're peering IPv4 and IPv6 on both. Our peering record is at http://www.peeringdb.com/view.php?asn=38437 NOC contact: Stu 021 993 125 stewart(a)wic.co.nz I've noted with interest the migration away from Sky Tower to 220 Queen St in particular and the healthy participation by a large number of operators on APE. See below for how you can help me :-) >It's interesting looking at the differences between the 3 IXs we're about to have. >Citylink, who have the critical mass of all the peers, are in the most locations, and are the most >expensive. They've also got a product set around metro ethernet, dark fibre, and have a CDN >running. And they're doing some interesting things around a "SDN driven IX". An announcement in the last few days which seems to have been overlooked on NOG is the relaunch of the Dunedin Peering Exchange: http://www.scoop.co.nz/stories/BU1412/S00637/citylink-tech-boost-for-dunedi… As you will probably all know (to varying degrees of snark), Dunedin won the Chorus Gigatown competition, providing gigabit speeds on UFB at the retail level. As such, we're expecting higher than normal traffic volumes and hopefully an associated increase in exchanges between providers. I would strongly encourage any operator with a presence in Dunedin to connect to the Dunedin Exchange when it becomes available. We're committed to peering there and hope to see others connecting! Regards, Stu

1 0

Re: [nznog] FW: Primary access method
by Scott Pettit 17 Dec '14

17 Dec '14

> On 17/12/14 11:20 pm, "Joel van Velden" <joel(a)tpnz.co.nz> wrote: >There is no NZ ISP that fully supports IPv6 on DSL/UFB that I am aware >of. We (vorco.net) do support IPv6 on all connections and it's on by default. All customers are assigned a static /56 via DHCPv6 PD, so all that's required is enabling it on the CPE and it is a "production" feature. We officially test and support it on Cisco 867VAE, all 880's, 890's and anything upwards of that and provide template config for these. We have also tested and know it works with Netcomm NF4V (on firmware RB017 and RB019) but don't provide support for those. We've gone to great lengths to pester anyone we connect to with broken IPv6 and as at right now are not aware of any outstanding issues. -Scott

1 0

Re: [nznog] Primary access method
by Pete Mundy 17 Dec '14

17 Dec '14

On 18/12/2014, at 12:20 PM, Joel van Velden <joel(a)tpnz.co.nz> wrote: > There is no NZ ISP that fully supports IPv6 on DSL/UFB that I am aware of. Let's change that awareness then! :) http://www.sinch.co.nz/support-centre.html Very first question on their list: "Can I get IPv6?" Answer: "I'm so glad you asked, yes all our plans are IPv6 enabled." That statement makes me think they seem pretty supportive. *disclaimer - I am not a customer of Sinch, nor have I ever used their products. I simply had their service pointed out to me recently, and I think I maybe I'll get a test circuit from them sometime next year. Pete

1 0

AKL-IX and domestic vs. international
by Dave Mill 11 Dec '14

11 Dec '14

Hi all (Note, I'm not trying to place blame at any party here. Just interested in people's thoughts on this situation) We, Inspire/AS17705, recently peered at AKL-IX. I was interested in using this peering exchange as much as possible so we have tended to prefer AKL-IX routes over any other peering exchange (though we still prefer bi-lats, private interconnects, etc, over AKL-IX). Simple stuff.. We learnt a lot of routes off AKL-IX. We started sending traffic out via. AKL-IX. Cue customer complaints. In general, we were sending all traffic to AS4826/Vocus out via AKL-IX. I believe if another ISP had Vocus as an international provider the traffic would ingress that ISP via their international pipe. This led to one customer having packet loss over a VPN (I'd assume the far end had congested international) and another customer getting billed for this traffic as international. We ceased learning Vocus routes from the AKL-IX. Problem solved... Except, this doesn't really sound ideal to me. If Vocus are announcing routes to AKL-IX (their choice) I would like to be free to use them. What should we be doing in a situation like this? What should Vocus be doing? Am I just making a mountain out of a molehill here and should I just shut-up and leave my current fix in place? Cheers Dave

6 12

Cloudflare on the APE
by Jamie Baddeley 07 Dec '14

07 Dec '14

With N4L joining the APE the fun keeps coming.. New CDN in town and it's a win for NZ. http://www.scoop.co.nz/stories/BU1412/S00034/ape-brings-the-world-closer-to… At an operational level I'm sure the CloudFlare guys will provide an update soon. regards jamie

19 31

Re: [nznog] Licence NZNOG video recordings
by Richard Naylor 02 Dec '14

02 Dec '14

At 01:48 p.m. 2/12/2014, Nick wrote: >A woefully inadequate search of the archives does not produce an >answer to this, so tempting all fate, I submit a possibly list >relevant query... > >What is the copyright licencing on the r2 recordings of NZNOG? Each >page clearly displays their copyright, which is fair and makes >sense, but there appears to be no distribution licence (eg Creative Commons?) The copyright is held by R2 (2011) Ltd and all rights are reserved. We use that statement whenever a client fails to advise what rights they would like to assert. This is to protect the client's interests despite their ignorance - if that makes sense. We have only 2 clients who (usually) advise what rights to assert and they are usually a form of CC. On the funny side - even Creative Commons NZ don't advise, even after 7 years of waiting, so we hold the rights on their launch in NZ ! http://www.r2.co.nz/20071027/

7 7

Megaport event in Auckland
by Denver Maddux 02 Dec '14

02 Dec '14

Hi all, Just a heads up that Megaport will be hosting a small get together next week in Auckland. Date: Tuesday, 9 December Time: 3:00 - 5:00pm Venue: Gallery 1, Pullman Hotel Auckland Cnr Princes St and Waterloo Quadrant, Auckland City 1010 Our event will highlight: - What is Megaport? - What is MegaDirect? - What is MegaIX? - How does it work? - Who is on it? - How can I connect? - Come and meet the team! Whilst most of you probably understand the Megaport model it would be great for at least me to just meet some of you. And I’m buying drinks just after the session. :) Along with me, Mitchell Warden, Michael Glynn, and Joshua Munro will be leading the session from Megaport. If anyone is interested in attending, shoot me a direct email and I’ll make sure your name is on the list. Thanks, Denver Maddux Megaport

2 2

Fwd: Operators and the IETF - Thank You and Next Steps
by Jamie Baddeley 02 Dec '14

02 Dec '14

of interest to folks? Brian - I saw your name mentioned in dispatches - would be keen to get your perspective as an active Kiwi IETF'er. cheers jamie ---------- Forwarded message ---------- *From: *Chris Grundemann <grundemann(a)isoc.org> *Subject: **Operators and the IETF - Thank You and Next Steps* *Date: *3 December 2014 11:14:58 am NZDT *To: *DL Deploy360 Team <deploy360(a)isoc.org> Hello! Thanks again for completing the Internet Society’s “Operators and the IETF <http://www.internetsociety.org/deploy360/projects/operators-and-the-ietf/>” survey! For those of you who are interested, this message provides some follow up information. I want to make sure that you’re all aware of what we’ve done with the data we collected, what we plan to do next, and how you can get (or stay) involved should you want to. We collected, analyzed, and synthesized all of the responses collected in the first 6 months of 2014. This is currently published in an IETF Internet-Draft <https://tools.ietf.org/html/draft-opsawg-operators-ietfaft-opsawg-operators…> . The results were further condensed into a presentation that was given during the OpsAWG meeting at IETF 91. You can view the video <http://recordings.conf.meetecho.com/Playout/watch.jsp?recording=IETF91_OPSA…> (the Operators and the IETF bit starts at about 01:07:00) and check out the slides <http://www.slideshare.net/Deploy360/operators-ietf-ietf91> if you like. For more information on what all happened in relation to this effort during the most recent IETF meeting, check out this blog post <http://www.internetsociety.org/deploy360/blog/2014/11/operators-and-the-iet…> . As for next steps, we have a couple things in mind. Several of us are going to try to start hosting an “IETF help desk” at the major NOG/NOF meetings around the world. First up to try are NANOG 63, APRICOT 2014, and RIPE 70. This desk will have an IETF banner on it and be manned by volunteers with IETF clue. The idea is to answer folks’ questions on the spot, providing easier access to the IETF process for everyone. The helpdesk and all other future efforts to bring these two communities closer together and help ensure that operational realities inform the development of key technologies will be (at least initially) discussed on a new mailing list: http://snozzages.com/cgi-bin/mailman/listinfo/synergy I highly encourage anyone receiving this message to sign up, if you’d like to be involved in this continuing discussion. Either way, thank you for your participation thus far! Cheers, ~Chris -- Chris Grundemann Director, Deployment & Operationalization Internet Society (ISOC)

2 1

IPv6 troubleshooting for Residential ISP Helpdesks - a document
by Dean Pemberton 02 Dec '14

02 Dec '14

Andy just poked this under my nose. Great looking resource! They are looking for feedback if you've got any. ---------- At IPv6 WG session in London, we discussed the most recent version of the "IPv6 Troubleshooting for Residential ISP Helpdesks" document. The proposed plan of action was to reach the consensus on the technical details of the document and then publish it (as combined IPv6 WG and BCOP TF effort). This email announces the working group last call for the "IPv6 Troubleshooting for Residential ISP Helpdesks" document. Please read the most recent version of it: https://www.ripe.net/ripe/groups/tf/bcop/ipv6-troubleshooting-for-residenti… and provide your comments to the list *until 23:59 Fri Dec 19th 2014*. ---------

1 0

Cooling Pads for Juniper SRX?
by Skeeve Stevens 01 Dec '14

01 Dec '14

Hi all, I have an issue with some Juniper SRX100's overheating. I've seen them get hot before, especially placed on something similar (i.e. another SRX100)... and given warnings of overheating, but never shut down.... but this situation is different. These SRX100's are shutting down as they are reaching a core temperature of 70c as they are located in racks that are outside in the sun and on particularly hot days - around 32c-36c they overheat and turn themselves off. Some might say this is understandable... and I sort of agree. Although their operating system says they are good to 40c, that doesn't really seem to be the case. The SRX110's are a little more tolerant given they are bigger units - but have the same operating environmentals (along with the EX2200-C). But at the moment I have the SRX100's and would prefer not to swap them out as it will cost significantly. Then one of my staff had (what I think) a good idea today... to use cooling pads... maybe like the ones you use for laptops or something. So I am wondering if anyone has been some solid - not $20 junk or such.. but something that runs off mains, and works well 24x7x365 - maybe even something that only kicks in once a certain temperature has been reached. I thought if anywhere, a couple of these mailing lists might have had some experience with these kinds of things - especially for those who have built regional pops and have had to cool some equipment. Thanks all! ...Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.co.nz ; www.eintellegonetworks.co.nz Phone: +612 8014 7398; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/theispguy ; blog: www.theispguy.com The Experts Who The Experts Call Juniper - Cisco - Cloud - Consulting - IPv4 Brokering

1 0

Licence NZNOG video recordings
by Nick 01 Dec '14

01 Dec '14

A woefully inadequate search of the archives does not produce an answer to this, so tempting all fate, I submit a possibly list relevant query... What is the copyright licencing on the r2 recordings of NZNOG? Each page clearly displays their copyright, which is fair and makes sense, but there appears to be no distribution licence (eg Creative Commons?) Cheers, Nick -- Nick 'Zaf' Clifford

1 0

Spots available on NZITF DDoS training next week in Wellington
by Dean Pemberton 30 Nov '14

30 Nov '14

Hi All, Wellington is going to be the centre of all things Security next week, with Kiwicon happening on the 11th and 12th. In advance of that NZITF have Krassi Tzvetanov (currently at A10 Networks previously at Cisco) visiting that week and running some training while he is here on the 10th December. We don't normally open training up to non-NZITF members, but as this is on DDoS Mitigation and some NZNOG'ers are liable to be in town anyway for Kiwicon, I thought I'd pass the info on. This training will cover different types of DoS attacks that are currently popular and will explain in detail how they work and how in some cases the underlying technology is exploited to produce the desired effect by the attacker. More details available here. http://nzitf.org.nz/pdf/141228-DDoS-Mitigation.pdf Regards, Dean

1 0

Re: [nznog] Letter to Network Operators 24 Nov 2014
by Ray Taylor 30 Nov '14

30 Nov '14

Dean that's a brilliant idea They should definitely be *required* to make a presentation in rotorua and have a q&a session. Ray Taylor Taylor Communications ray(a)ruralkiwi.com Ph 021-483-280 Network status 06-929-9082 Description: header_logo

1 0

FW: Letter to Network Operators 24 Nov 2014
by Ray Taylor 29 Nov '14

29 Nov '14

I am assuming this refers to notifications about equipment changes, vendor suppliers etc? It may come as a surprise to these people but most network operators create standards and stick to them! Ray Taylor Taylor Communications <mailto:ray(a)ruralkiwi.com> ray(a)ruralkiwi.com Ph 021-483-280 Network status 06-929-9082 Description: header_logo From: TICSA [mailto:TICSA(a)ncsc.govt.nz] Sent: Monday, 24 November 2014 3:21 p.m. To: TICSA Subject: Letter to Network Operators 24 Nov 2014 Dear Network Operator Please find attached a letter to all network operators. This letter shares our surprise at the low number of notifications received from registered network operators to date. We want to reinforce that we are here to support you in meeting your obligations under the TICSA. We thank those network operators who have actively engaged with us under the TICSA since May. Kind regards >From the TICSA Team _____ This electronic message, together with any attachments, contains information that is provided in confidence and may be subject to legal privilege. Any classification markings must be adhered to. If you are not the intended recipient, you must not peruse, disclose, disseminate, copy or use the message in any way. If you have received this message in error, please notify us immediately by return email and then destroy the original message. The Government Communications Security Bureau (GCSB) accepts no responsibility for changes to this e-mail, or to any attachments, after its transmission from GCSB. Thank you. _____ This email has been filtered by SMX. For more information visit smxemail.com <http://smxemail.com/>

8 8