- NZNOG - lists.nznog.org

2821 ipv4 table size
by Bill Walker 30 Dec '13

30 Dec '13

Hate to post this but my google foo is failing me anyone know the ipv4 max table size on a 2821? Would be running eBGP with two peers. Sent from my iPhone

2 2

Fraud Calls
by Davey Goode 27 Dec '13

27 Dec '13

Hi All, I hope everyone is having a good break ! If anyone out there has had any of their customers PBX's hacked recently (in the last 2 - 3 weeks) and have experienced a large call flow to say Somalia or some other dodgy destination id be keen to hear from you, I'm after the destination numbers they are dialling. replies off list would be great. cheers davey

3 2

How often does NZRS root reload?
by Skeeve Stevens 18 Dec '13

18 Dec '13

Hey all, Just registered a co.nz domain and it is registered and visible in whois. But ;; AUTHORITY SECTION: co.nz. 3285 IN SOA loopback.dns.net.nz. soa.nzrs.net.nz. 2013121964 900 300 604800 3600 How often does this server refresh its data? ...Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.com ; www.eintellegonetworks.com Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/theispguy ; blog: www.theispguy.com The Experts Who The Experts Call Juniper - Cisco - Cloud

3 4

NZNOG 2014 Update
by Dean Pemberton 16 Dec '13

16 Dec '13

Hi Everyone. Registrations have been open for the conference for a while now and I'm pleased to say that they are at an unprecedented level for this time of year. Given that we've only just released the program, thats an outstanding achievement. With some great help from InternetNZ the conference is shaping up to be as awesome as usual. First up I'd like to thank the sponsors who have signed on thus far: Go Wireless - Gold Network Hardware Resale - Gold Vocus - Gold CityLink - Gold GKC - Silver Brocade - Silver Arbor Networks - Silver APNIC - Silver Extreme Networks - Silver Kordia - Bandwidth Sponsor We have more slots open for sponsorship as well as the much coveted Platinum sponsor position. If you would like to ensure that your organisation gets high visability at the event then contact sponsorship(a)nznog.org for a sponsorship pack. We know that the program is an important part of convincing your organisations that you need to attend. This year we've got a wide range of speakers lined up along with some great Workshops and tutorials. Program: International Keynotes: Tom Paseka (CloudFlare) - NZ Perspectives from a global CDN Roland Dobbins (Arbor Networks) - TBA Conference Presentations: Geoff Huston (APNIC) - Measuring DNSSEC Jamie Baddeley (Citylink) - NZIX2/Citylink SDN Sam Russell (REANNZ) - Building a better Skype with WebRTC, SIP, and ENUM Barry Brailey (DNC) .nz DNSSEC programme Jean-Sébastien Fontana (Extreme Networks) - Introduction to TRILL Gerard Creamer (Netspace) - Experiences with dual A records vs anycasting Beatty Lane-Davis (Cyan) - SDN & NFV Michael Fincham (Unleash) - RPKI Peter Gent (MBIE) - 5GHz Wireless Links Jan Jorz (ISOC) - BCOP Project Quintin Russ (SiteHost) - IPv6 deployment in the cloud InternetNZ Update APNIC update WAND update Lightning Talks Workshops: Network Infrastructure Security BGP Routing Tutorials: OpenDNSSEC Installation and Configuration (1/2 day) SDN/OpenFlow Installation (1/2 day) Mikrotik Routing (full day) APNIC Internet Resource Management (1/2 day) We'd suggest you register now. At least this side of Xmas. Flights, Accommodation etc will likely be easier and cheaper the sooner you do it. Better than doing it in a panic in mid January. For more information on how to register, head off to http://www.nznog.org/register See you all there. Dean

1 0

Keeping it local
by Martin Kealey 15 Dec '13

15 Dec '13

I have a question which I'm hoping the NZNOG community can help me with. Within NZ, what is the maximum number of hops from APE to any consumer's interface device? (smarty-phone, ADSL modem, whatever)? Or more pragmatically, let's say the 99th percentile, as in, fewer than 1% of customers are more than X hops away from APE. If this information is already available, I'd appreciate a pointer, otherwise... If you are an ISP could you give me an indicative number of hops from APE to your customers' CPE. If you can include a prefix length reflecting the number of affected customers that would help too. (Ideally the maximum across all your customers, but if you have a few oddball customers with longer paths, just the 99% will do.) If you're an ISP customer and would like to tell me your hop-count to APE (counting from your CPE, not from your computer) and your ISP's name, that would also be appreciated. Replies off-list and I will summarize back to the list. Here's the background: I'm investigating ways of limiting traffic so that it does not leave New Zealand, that can be configured on an application-by-application basis. Obviously if one has an upstream to "global" and a separate upstream to APE or WIX, then it's simple to filter traffic at those egresses. However for the average end-user, it's difficult to get multiple VLANs to their provider, let alone multiple physical links. In an ideal world, one would simply set some QoS bits and your upstream would understand them and do the filtering based on *their* egress, but in practice I haven't heard of any suppliers offering such a service. So I'm looking at DIY options ... In particular, I'm looking at setting the TTL on outgoing packets. We know how many hops it is from "our" hosts to APE, and I guestimate no more than 2 hops from a consumers border device (modem, whatever) to their client devices; So far it looks like setting the TTL so that it's down to 5 at APE will mean most of NZ is reachable, and most of the rest of the world isn't, assuming the international provider is as many hops from me as APE. But I'd really like to get a firmer idea of "how much of NZ will be unreachable given an egress hop limit of X?" (The idea is to find X where the list of exception prefixes is small enough to manage manually, while still blocking the majority of foreign traffic.) What I'd like to find out from the NZNOG community is the distribution of customers at various hop-counts from APE. -Martin

3 3

ISC/F-Root has returned to APE...
by Peter Losher 11 Dec '13

11 Dec '13

FYI - the Auckland node of F.ROOT-SERVERS.NET has been offline for the past couple of years due to HW failure, access issues @SkyTower, changes with our hosts (contacts and access to said data center). I am happy to report that the node is finally back online and advertising F's prefixes to the APE fabric as I type... So come and send your DNS root server queries locally instead of sending them off-shore. We are AS23710 @APE, so if you don't peer with us already, pop us a note at peering(a)isc.org. Yes, Telecom NZ, I am looking at you. Yes, you... (a guy can dream, even if it is hopeless) ;) There are many folks to thank as ISC could not do it alone including: - NZRS (Jay, Sebastian and Dave) for sponsoring the new server gear. - APNIC for sponsoring the new routers. (sorry to see the old Juniper kit go though) - Sebastian and Mike Jager for dealing with my numerous remote hands requests from the other side of the world. - The Kiwi Internet Mafia (Joe Abley, AJ, Jonny) for their support and access to their contacts to keep things moving. - Vodafone NZ and FX Networks for (now redundant) transit over IPv4 and IPv6. - Our peers at APE that have put up with us for being down so long... :) O.k., commercial over; back to serving packets again. Best Wishes - Peter -- [ plosher(a)isc.org | Senior Operations Architect | ISC | PGP E8048D08 ]

5 5

Web Servers: Dual-homing or DNAT/Port Forwarding?
by Christoph Berthoud 10 Dec '13

10 Dec '13

Hi All, I'm curious to know which of the following methods is more widely used/accepted today for publishing web servers to the Internet. 1) Dual-home the server - place one NIC on the internet and a second NIC on an internal network for administration, or 2) DNAT/Port Forward my external IP to my internal IP 3) Both - Dual home the server onto two private subnets (external/internal) and DNAT/Port Forward the public IP to the external subnet IP In either case: a) I will be hiding behind a dedicated firewall appliance and not relying on the OS firewalls b) the internal network will still be in its own subnet firewalled away from the rest of the network c) Only HTTP/HTTPS will be permitted from the internet, no RDP, SSH etc d) I will be deploying IPv6 to this machine in the next 12 months which makes option 1 more attractive I personally like option 1 but I'm looking to see if theres any facepalm reasons I shouldn't do it this way. Happy holidays! -- Thanks Christoph

9 10

JANOG 33 Program Published
by Daniel Griggs 09 Dec '13

09 Dec '13

Dear Colleagues, We have published the program for JANOG 33 and welcome you to join us in Beppu City, Japan, from 23rd-24th Jan 2014. Most sessions are in Japanese only but there are a few sessions in English. You are also welcome to connect with us through facebook and twitter for updates in English. The JANOG SNS accounts are open to everyone, including those who are not able to attend the meeting. See you in Beppu. Cheers, Shinichi Yamamoto, Chin Sze Yih, Izumi Okutani JANOG Internationalization team for JANOG 33 ----- JANOG 33 Program : ------------------------ The Program is available in English at: http://www.janog.gr.jp/en/index.php?JANOG33%20Programs%2FJANOG33%20Program%… Translations of the program titles and abstracts were supported by volunteers on the best efforts basis. Note: During the meeting, there will be no official interpretations in English, except for the sessions marked as (English session). Registration : ------------------------ You can register online at: https://regist.e-side.co.jp/product_info.php?products_id=427&language=en 　Deadline: 10th Jan 2014 JST 15:00 SNS Accounts : ------------------------ Facebook : https://www.facebook.com/janogmeetingi18n Twitter : https://twitter.com/janog_i18n -- Daniel Griggs e + j: daniel(a)pch.net c: +64 (21) 845158

1 0

Re: [nznog] Help block out China please.
by Pete Mundy 08 Dec '13

08 Dec '13

A story along a similar line that reinforces this view: I put a phone on public IP space a few weeks back, then got sidetracked while configuring it. Before I had even returned to enter a new admin password and the correct SIP details (only 1/2hr later!), the phone had already been attempting to dial out on it's own. Turns out a robot had found it on it's public IP with port 80 open and started issuing it dial commands before I even had a chance to go about locking it down. It was unable to dial out as it hadn't had the correct SIP server or login details configured, but it just goes to show that the device really need to be locked down _before_ being put on any publicly accessible IP space, even if just for provisioning purposes! Pete On 8/12/2013, at 3:17 PM, "Dobbins, Roland" <rdobbins(a)arbor.net> wrote: > > On Dec 8, 2013, at 8:46 AM, Don Gould <don(a)bowenvale.co.nz> wrote: > >> Clearly you can't even put a quick and dirty box in place to just prove a concept without having to bolt it down. > > Correct - it simply isn't viable to expose an unpatched/unsecured box to the Internet at all, due to all the automated scanning/hacking activities taking place. > > +1 to the other folks who recommended more workable solutions - 'GeoIP' isn't exact at all, and not all bad nodes (of any nationality) are in China. > > Roland Dobbins

9 9

Re: [nznog] Help block out China please.
by Regan Murphy 07 Dec '13

07 Dec '13

Build the box behind a firewall and don't open incoming ports until its ready to go. Sent from my Windows Phone ________________________________ From: Don Gould<mailto:don(a)bowenvale.co.nz> Sent: ‎8/‎12/‎2013 9:54 p.m. To: nznog(a)list.waikato.ac.nz<mailto:nznog(a)list.waikato.ac.nz> Subject: Re: [nznog] Help block out China please. How do I download the current patch set for Windows 2012 R2 so I can apply it before putting the box on the network? This seems a bit chicken and egg. (And yes I agree this really is a Geekzone or Whirlpool type question now, but I'm a bit interested in what advice operators are keen for us to be dishing to folk.) Beer. D On 8/12/2013 4:36 p.m., Pete Mundy wrote: > locked down_before_ being put on any publicly accessible IP space > -- > Don Gould > 31 Acheson Ave > Mairehau > Christchurch, New Zealand > Ph: + 64 3 348 7235 > Mobile: + 64 21 114 0699 > Ph: +61 3 9111 1821 (Melb) > > I'M COLLECTING COFFEE CUPS FOR PROJECT COFFEE CUP. > > Deja vue (missing the French accent mark) - literally means already seen, that sense of haven't we been here before. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Help block out China please.
by Don Gould 07 Dec '13

07 Dec '13

Hi, I've got a machine that's been hacked twice in the past week from IP ranges in China. I have it behind a Mikrotik router. There is no reason for anything outside of NZ and AU to be looking at this box so I'm keen to just block the rest of the world from it. I'm currently thinking an address list to just block out the world or an address list to include Au and Nz. Keen for ideas. D -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb) I'M COLLECTING COFFEE CUPS FOR PROJECT COFFEE CUP. Deja vue (missing the French accent mark) - literally means already seen, that sense of haven't we been here before.

5 7

SoapUI with WOMBL?
by Michael Fincham 04 Dec '13

04 Dec '13

Afternoon all, Has anyone managed to get Chorus's WOMBL B2B test environment working in SoapUI? One complimentary beer, redeemable at NZNOG 2014, for anyone who can share the settings in SoapUI required to make this work :) -- Michael Fincham

1 1

Domain registration scammers
by LRW Longhurst 04 Dec '13

04 Dec '13

Hi all, Sorry, and "beer" because this is more of an Aussie question, maybe someone can direct me to somewhere more appropriate. One of our execs received one of those "domain name available" letters in the form of an invoice, inviting him to register a name in .net.au that's similar to another name we own. This seems to have come via snail-mail but it invites payment at domainnamegroup.com.au. Do we do anything about such scammers? Suing them for wasting our time springs to mind, but I'm thinking more in terms of reporting to an authority. I know this practice has been around for a while but it's the first time I've encountered it directly. -- Lesley Longhurst (previously Walker) Linux Systems Administrator Opus International Consultants Ltd Email lesley.longhurst(a)opus.co.nz Tel +64 4 471 7002, Fax +64 4 473 3017 http://www.opus.co.nz Level 9 Majestic Centre, 100 Willis Street, PO Box 12 343 Wellington, New Zealand

6 5

Need C2T breakout cable in sky tower kinda urgent
by Alexander Neilson 03 Dec '13

03 Dec '13

Hey Everyone Beer, as required (and a big beer - or drink of choice - for my saviour) I am up working in our racks in sky tower and was doing a scheduled reboot of a server to move some power cables. Now the machine won’t complete booting and I suspect the CMOS battery may have died and the complete removal of power has lost the cmos settings stopping at least part of the boot cycle. I have a keyboard, mouse and screen here but it seems to use a C2D breakout cable to connect up to what looks like a larger than normal DVI port. Does anyone have a cable to get a standard VGA monitor signal out of an IBM eServer xSeries 335 machine anywhere in auckland (nearer sky tower the better) and even better if I can come grab it now. It seems to be one of two adapters I don’t have in my kit with me (this will be fixed) but any white knights would be really appreciated. Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

1 0

Request for IPv4 /23
by Daniel Watson 03 Dec '13

03 Dec '13

G'day Noggers Thought i would bring this topic back alive as we are still actively looking for a /24 preferably even a /23 but at good pricing. If you have available space your willing to sell at a good price, I'd love to hear from you Even if you have space you would be willing to lease/rent I'd like to hear from you TIA Daniel

1 0

Who's fibre?
by Paul Adshead 03 Dec '13

03 Dec '13

A new fibre install has just showed up in a shared basement riser. It's currently not connected and no-one in the building is claiming it's theirs. The only identifying mark (written in pen on electrical tape) is "VS-42xxx" (xxx are numbers). Would anyone know which fibre company tags their new installs with labels in this format? We've been told fibre would be unavailable for years at this location, so would really like to get a circuit from that cable, if I only knew who to call.... Thanks Paul Adshead

4 4

Re: [nznog] Who's fibre?
by Stu Fleming 03 Dec '13

03 Dec '13

Jon Brewer: "That's hilarious. There's always a receptionist with keys to the basement or pabx room that will give up keys without asking questions if you've got an orange vest and a decent looking id card." That rules out Chorus then. They can't install anything in a shared building without a 90-day lead time and a mountain of consent paperwork. Also the procedure for obtaining a roof key is slightly more complex as it usually involves the receptionist first a) checking that you are in a happy, smiling mood and b) cautioning you sternly to "make sure you don't fall off"

2 1

Multi-homing without PI space
by Richard Hulse 30 Nov '13

30 Nov '13

Very late to the party... Matthew, if you want to contact me off list I'd be happy to share our experience with becoming an AS, multi-homing, anycast, self-hosting and anything else you might find useful. Cheers, Richard Radio New Zealand Disclaimer Emails sent by Radio New Zealand Limited (RNZ) or any related entity, including any attachments, may be confidential, protected by copyright and/or subject to privilege. If you receive an email from RNZ in error, please inform the sender immediately, delete it from your system and do not use, copy or disclose any of the information in that email for any purpose. Emails to/from RNZ may undergo email filtering and virus scanning, including by third party contractors. However, RNZ does not guarantee that any email or any attachment is secure, error-free or free of viruses or other unwanted or unexpected inclusions. The views expressed in any non-business email are not necessarily the views of RNZ www.radionz.co.nz<http://www.radionz.co.nz>

1 0

NZ download speed improvement
by Nicholas Lee 28 Nov '13

28 Nov '13

http://www.pcworld.co.nz/article/483086/new_zealand_ranks_43rd_online_downl… 25 May, 2010 "It found that over the past 30 days, Kiwis testing their connections on its two source sites recorded average *download speeds of 5.96 Mbit/s*. When it came to upload speeds, New Zealand ranked 42nd, with an average speed of 1.3 Mbit/s." There seems to have been a reasonable improvement: http://www.netindex.com/download/allcountries/ 42 New Zealand - 17.02 Mbps 49 Australia - 14.23 Mbps High density fibre installations like they have in HK would be nice: 1. Hong Kong - 71.01 Mbps Nicholas

1 0

Re: [nznog] Advertising /32 externally via BGP
by Tony Wicks 22 Nov '13

22 Nov '13

You need a high metric null route for that /32. Liam Farr <liamfarr(a)me.com> wrote: >Hi,I'verunintoabitofadumbproblem,hopefullysomeoneherecanpointmeintherightdirection.Ireceivearoutetoa/28fromamemberofmyBGPconfederation,(the/28isonadirectlyconnectedinterfaceofthisrouter)viaBGPtooneofmyedgerouters,andIwishtoadvertiseaspecific/32fromthis/28toanexternalBGPpeer(upstreamprovider)fromthisedgerouter.Icanuseroute-mapsandprefix-lists,todefineaBGPexportpolicytoonlyexportthe/32totheexternalneighborwithoutissue.WhereIgetstuckisgettingthe/32intomyroutetable,essentiallyIneedtode-aggregatethe/28downtoa/32?Isthereanaccepted"bestpractice"wayofdoingthis?Apologiesifthisisastupidquestion,I'veneverrunintothisissuebefore,andGoogleisn'tgivingmemuchhelp.CheersLiamFarr

1 0

Advertising /32 externally via BGP
by Liam Farr 22 Nov '13

22 Nov '13

Hi, I've run into a bit of a dumb problem, hopefully someone here can point me in the right direction. I receive a route to a /28 from a member of my BGP confederation, (the /28 is on a directly connected interface of this router) via BGP to one of my edge routers, and I wish to advertise a specific /32 from this /28 to an external BGP peer (upstream provider) from this edge router. I can use route-maps and prefix-lists, to define a BGP export policy to only export the /32 to the external neighbor without issue. Where I get stuck is getting the /32 into my route table, essentially I need to de-aggregate the /28 down to a /32? Is there an accepted "best practice" way of doing this? Apologies if this is a stupid question, I've never run into this issue before, and Google isn't giving me much help. Cheers Liam Farr

1 1

Orcon contact
by Geraint Jones 21 Nov '13

21 Nov '13

Can someone from orcin please contact me off list. Thanks

1 0

Thursday's security amusement!
by Tim Hoffman 21 Nov '13

21 Nov '13

This is vaguely operational and fairly amusing - one of our friendly LFC’s might want to sort their…ahem….levels of security fail! https://www.google.co.nz/search?q=inurl%3A%2F%2Fhttp%3A%2F%2Fwww.ultrafastf… And to keep it on topic - beer! Cheers, —hoff <views do not represent anyone I may or may not work for etc etc>

6 6

The New Threat: Targeted Internet Traffic Misdirection
by Sebastian Castro 19 Nov '13

19 Nov '13

The link below is an article from Renesys about prefix hijacking they've observed. So far until now, those events were not considered as attacks, but "misconfigurations". http://www.renesys.com/2013/11/mitm-internet-hijacking/ We've seen one of those events on our infrastructure, which lasted a few minutes, and it was detected by BGPmon. Is it moment to push RPKI? Topic to discuss during the next NZNOG meeting? Cheers, -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

2 1

Encryption of national/international information
by Juha Saarinen 19 Nov '13

19 Nov '13

Yahoo’s following Google’s example and will “encrypt all information that moves between our data centres by the end of Q1 2004” : http://yahoo.tumblr.com/post/67373852814/our-commitment-to-protecting-your-… Would this be permitted in NZ? -- Juha Saarinen twitter: juhasaarinen

6 7

Video about SFQ and uplinks
by Pieter De Wit 17 Nov '13

17 Nov '13

Hey List, A while ago someone posted to this list (I am sure it was....) a link to a youtube video about uplinks and why we should do QoS. I tried searching the archives but can't find. Would someone mind pointing me in the right direction for it please ? Thanks !

4 5

[OT] Racks / routers and switches wanted
by Alexander Neilson 16 Nov '13

16 Nov '13

Sorry for the off list nature of the below. Sunday beer post as an apology ;-) Off list direct replies please to avoid clogging the list up. Phone calls / txt ok to my cellphone numbers below as I am on the road. Is anyone getting rid of any racks at the moment. I am trying to get hold of 2 or 3 42RU+ racks. Prefer solid outer sides and grill front and back doors (but any racks looked at. I am currently getting ready to drive from Christchurch to Auckland in a ute with a trailer on the back so I have room to collect. South Island is today and north island tomorrow. We will consider purchasing the right racks if people want some money for the racks. Also I am looking for some switch / routing / firewall hardware that people want to give away (out of warranty / out of contract is all good) as I am looking for some test hardware for my home lab to learn on. I will have room in the vehicle and will consider any functional hardware available on the route. I don't have money personally to buy this hardware so looking for give aways only (but I will haul it away) Regards Alexander Alexander Neilson Neilson Productions Ltd Alexander(a)Neilson.net.nz 021 329 681

1 0

Fibre suppliers
by Alexander Neilson 13 Nov '13

13 Nov '13

Hey list. Can anyone advise a good supplier of fibre patch leads. Single mode is all we care about. We are looking today for at least one LCA-LCA patch lead 5M+ today. But we also need to get stock for various types and lengths in the near future and we are looking for a good quality supplier. Off list replies (or suggestions on list if people think it would be helpful) Regards Alexander *Alexander Neilson* *Neilson Productions Limited* *alexander(a)neilson.net.nz <alexander(a)neilson.net.nz>* *021 329 681*

3 2

NSA, QUANTUM and packet injection
by Juha Saarinen 13 Nov '13

13 Nov '13

Potentially operational content… http://www.wired.com/opinion/2013/11/this-is-how-the-internet-backbone-has-… -- Juha Saarinen twitter: juhasaarinen

1 0

[OT] Boxes in Wellington?
by Alexander Neilson 11 Nov '13

11 Nov '13

Off Topic, so Beer! Does anyone in Wellington have some empty computer / server / large monitor boxes they are wanting to clear out? I am moving this friday and I am a few boxes short. Please message me off list and I will try accept any useful boxes and come collect them. Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

1 0

So what're people using to label ethernet cables these days?
by Mark Foster 09 Nov '13

09 Nov '13

I've got a project underway with a large amount of fresh-install ethernet cabling and i'd like to 'do it right' with respects to cable labelling. The old does-everything Dymo Label Printer is doable, for a while, but in datacentre environments the labels degrade and fall off eventually, which isn't ideal. I've also used 'kabelflags' before but I would prefer something I can print with a machine, I think. That said i'd be interested in what people are doing, or what they 'should' be doing... ? Cheers Mark.

9 9

Multi-homing without PI space
by Matthew Poole 07 Nov '13

07 Nov '13

A "small company wanting to play big company" question: My employer is investigating options for network redundancy as having a functional internet connection is critical to our operation. We're not in any position to even try applying for PI IPv4 space from APNIC (only using a /28), and are in no way close to being ready to think about going to pure IPv6. Clients push to us, so we need to have functional DNS as well as link fail-over. We also have multiple public-facing servers offering the same services, so moving to *shudder* NAT or some kind of port proxying isn't an easy option (clients' internal bureaucracies to get firewall ports opened, client configuration, blah blah blah). So, my question, what are our operational course of action for multi-homing when becoming an AS on the global tubes isn't on the cards? Cheers -- Matthew Poole "The difference between theory and practice is that practice is easier in theory than theory is in practice"

25 46

APRICOT 2014 call for papers is now open
by Dean Pemberton 04 Nov '13

04 Nov '13

Hi everyone, We have just released the call for presentations for APRICOT 2014. Please consider presenting at APRICOT, or encourage a colleague or friend to do so. Also we'd really appreciate it if you would help inform members of your local operations community about this CfP. Many thanks! Philip, Mark, Dean APRICOT PC Chairs -- Asia Pacific Regional Internet Conference on Operational Technologies (APRICOT) 18 - 28 February 2014, Bangkok, Thailand https://2014.apricot.net CALL FOR PAPERS =============== The APRICOT 2014 Programme Committee is now seeking contributions for Presentations and Tutorials for APRICOT 2014. We are looking for presenters who would: - Offer a technical tutorial on an appropriate topic; - Participate in the technical conference sessions as a speaker; - Convene and chair panel sessions of relevant topics. Please submit on-line at: http://papers.apricot.net/user/login.php?event=6 CONFERENCE MILESTONES --------------------- Call for Papers Opens: 1 November 2013 First Draft Programme Published: 6 December 2013 Final Deadline for Submissions: 7 February 2014 Final Programme Published: 14 February 2014 Final Slides Received: 21 February 2014 PROGRAMME MATERIAL ------------------ The APRICOT Programme is organised in three parts, including workshops, tutorials and the conference. Topics for tutorials and the conference must be relevant to Internet Operations and Technologies: - IPv4 / IPv6 Routing and operations - IPv6 deployment and transition technologies - Internet backbone operations - ISP and Carrier services - IXPs and Peering - Research on Internet Operations and Deployment - Thai Internet - Network security issues (NSP-SEC, DDoS, Anti-Spam, Anti-Malware) - DNS / DNSSEC - Internet policy (Security, Regulation, Content Management, Addressing, etc) - Access and Transport Technologies, including Cable/DSL, 3G/LTE, wireless, metro ethernet, fibre, MPLS - Content & Service Delivery (Multicast, Voice, Video, "telepresence", Gaming) and Cloud Computing CfP SUBMISSION -------------- Draft slides for both tutorials and conference sessions MUST be provided with CfP submissions otherwise the Programme Committee will be unable to review the submission. For work in progress, the most current information available at time of submission is acceptable. All draft and complete slides must be submitted in PDF format only. Final slides are to be provided by the specified deadline for publication on the APRICOT website. Prospective presenters should note that the majority of speaking slots will be filled well before the final submission deadline. The PC will retain a limited number of slots up to the final submission deadline for presentations that are exceptionally timely, important, or of critical operational importance. Please submit on-line at: http://papers.apricot.net/user/login.php?event=6 Any questions or concerns should be addressed to the Programme Committee by e-mail at: pc-chairs at apricot.net We look forward to receiving your presentation proposals. Dean Pemberton, Mark Tinka & Philip Smith Co-Chairs, APRICOT Programme Committee pc-chairs(a)apricot.net

1 0

Off Topic: IEC cable C13 to 2xC14
by Joel van Velden 02 Nov '13

02 Nov '13

Off topic I know, but has anyone ever come across an IEC C13 "jug-plug splitting" cable with two male (C14) ends, the sort of cable you'd want to use if you had two power supplies in a rack but only one power socket available? I'm after a supplier near Auckland. I can source from US but i'm wanting them this week. Cheers, Joel van Velden

7 8

Calling all Mirror Providers
by Daniel Watson 01 Nov '13

01 Nov '13

Gday Guys I'm setting up a new project today that will benefit a lot of providers out there in the market, I will be creating brand new mirrorlists for all the major repo's out there in the internet If you operate a mirror of any software, I would appreciate if you could take a few minutes to reply to this email with your URL of your mirror. I already am aware of a fair few out there already but i am not aware of them all The way that this will be setup will require you to let me know if your mirror operates only on Australian shores or if you also have mirror's in other locations, Please specify the location of the mirror also. Looking forward to your responses. D.

1 0

Help / Advise tweaking BGP settings
by Alexander Neilson 31 Oct '13

31 Oct '13

Hey All We have recently made some major changes at $DAYJOB with our connectivity to the outside world and our peering. One of the things we have taken on is a 1Gbps APE peering port and Upgraded out WIX port to 100Mbps. While I find often our inbound traffic takes a fairly efficient path (usually - tho $TRANSITPROVIDER seems to cut prepends and possibly even disaggregates some prefixes (tho this could be something hanging around)) our outbound does seem to be less efficient, especially where APE is concerned. I am currently testing an adaption where I only accept shorter prefixes from $TRANSITPROVIDER and a default route (to avoid blackholing) the domestic transit doesn’t have a “default route” option and I want to avoid pushing domestic traffic over International if it only has a long prefix to match and isn’t peered. Would anyone be willing to provide me some tips / tricks / advise / examples of what they do with BGP (or some good resources) that I can use to improve the routing table I use in the network? Also does anyone have NZ Provider looking glass servers (not the NZIX as I know and use them) where I can see how other domestic providers see my announced routes and how it appears to them (so I can make changes and test but also see what I am being seen as)? Thank you very much in advance for any help. Off list replies are welcomed and possibly better to avoid clogging up the list if people think this is too basic a request for here. Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

4 4

NZNOG 2014 - Registrations now open
by Neil Fenemor 31 Oct '13

31 Oct '13

NZNOG 2014 - registrations open ============================= Registrations for New Zealand's pre-eminent technical Internet networking conference - NZNOG 2014 - are now open. Hosted by the New Zealand Network Operators Group, NZNOG 2014 is the country's only technical networking conference, and features a host of plenary sessions, practical workshops and tutorials. Spaces are limited, so register now and join your fellow ICT specialists for a feast of information sharing, technical up-skilling and professional networking. To register, please visit http://www.nznog.org/register What: NZNOG 2014 When: 27 - 31 January 2014 Where: Rutherford Hotel, Nelson ---- Conference structure NZNOG 2014 incorporates two three-day practical workshops, a one-day of technical tutorials and the conference-proper. Workshops: 27 to 29 January, 2014 Network Infrastructure Security BGP routing Tutorial: 29 January, 2014 Mikrotik 1-day workshop OpenDNSSEC Fundamentals SDN/OpenFlow Installation Conference-proper: 30 - 31 January, 2014 Confirmed so far: International Speaker Tom Paseka (CloudFlare) "NZ Perspectives from a global CDN" Geoff Huston (APNIC) "Measuring DNSSEC" Jamie Baddeley (Citylink) "NZIX2/Citylink SDN Gerard Creamer (Netspace Services) "Experiences with dual A records vs anycasting" Barry Brailey (.nz) DNSSEC programme Sam Russell (REANNZ) "Building better Skype with WebRTC, SIP, and ENUM Jamie Horrell "Statistical methods for Network Analysis" A range of pricing options are available, including a heavily-discounted student registration: Main conference (waged) - $150.00 Main conference (student) - $25.00 Practical workshop - $150.00 Practical workshop (student) - $25.00 Tutorial - $25.00 ---- More information More information about NZNOG 2014 can be found at www.nznog.org. For sponsorship opportunities please contact sponsorship(a)nznog.org Cheers, neil for the NZNOG Trustees

2 1

Anycast node swap NZ / UK
by Nat Morris 21 Oct '13

21 Oct '13

Hi, We're looking for someone to swap a low bandwidth DNS server with in New Zealand. We run an anycast setup and announce the same /24 + /48 from a dedicated ASN from multiple locations around the globe. Would be looking for a single CPU with 512mb + 20gb disc running Debian x64, only special thing it needs is a BGP session so we can announce our address space (you only need provide it with a default route, not full table!). We can provide the same in return in the UK :) Cheers, Nat, -- Nat Morris Esgob Ltd http://www.esgob.com

1 0

JANOG 33 Call for Papers
by Daniel Griggs 10 Oct '13

10 Oct '13

Hello, I am sending this on behalf of the JANOG community. JANOG is making a call for presentation until 24th Oct. It is a networks operators group in Japan with 400+ participants at meetings, and + 6,000 mailing list subscribers as of June 2013. Our Meetings are in Japanese but we have had several non-Japanese speakers presenting at JANOG. We are looking forward to your proposals for presentations. Cheers, Shinichi Yamamoto, Chin Sze (James) Yih, Izumi Okutani JANOG Internationalization team for JANOG 33 ----- JANOG 33 Call for Papers ----------- The JApan Network Operators' Group (JANOG) will hold its 33th meeting in Beppu, Japan on January 23-24, 2014. Yahoo Japan will host JANOG 33. We invite presentations highlighting issues relating to technology already deployed or soon-to-be deployed in the Internet. Submissions are welcome via the e-mail at:"meeting-33[at]janog.gr.jp". ABOUT JANOG ----------- A JANOG Web Page in English can be found at: http://www.janog.gr.jp/en/ THE KEY DATE FOR JANOG 33 SUBMISSIONS ------------------------------------- CFP Deadline : October 24 23:59 JST The Program Committee will notify applicants after 8th Nov on their decision about the submissions. HOW TO PRESENT -------------- If you are interested to give a presentation but do not have someone to help you with the language, try consulting us at: "meeting-33[at]janog.gr.jp". Although we cannot guarantee, we may be able to help you on volunteer basis. The detail of presentation guidelines can be found under JANOG 33 Web Page in English. http://www.janog.gr.jp/en/index.php?JANOG33%20Programs Let us know if you have any questions meeting-33[at]janog.gr.jp -- Daniel

1 0

.nz namespace to be flattened!
by Andy Linton 10 Oct '13

10 Oct '13

https://internetnz.net.nz/news/media-releases/2013/New-level-Internet-domai…

10 10

Reminder - Call for Papers for NZNOG 2014
by Mike Jager 09 Oct '13

09 Oct '13

A reminder that submissions for presentations at NZNOG 2014 are due in the next couple of weeks. Don't forget that the best local paper will win a trip to APRICOT 2014 in Bangkok, Thailand. As they say, you've gotta be in to win! ---- The NZNOG organising committee invites papers for its 13th annual conference, to be hosted at the Rutherford Hotel, Nelson, New Zealand from 27 – 31 January 2014. There will the three day Workshops 27 – 29 January, a day of tutorials on 29 January with the main conference on 30 – 31 January. The best local conference paper as judged by the trustees in association with the programme committee will win a trip to APRICOT 2014, to be held in Bangkok, Thailand, 18-28 February 2014. So, get writing! Conference objective: The NZNOG conference, workshops and tutorials are a once-a-year opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies practises and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submit a paper: Presenters are invited to submit abstracts of their paper for consideration by Monday 21st October. Abstracts should be no more than one page long and provide a summary of your networking-related subject matter. Please note that full slide decks will be required by 18th November. To submit your paper please e-mail: talks(a)nznog.org When considering a presentation, remember that the NZNOG audience is mainly comprised of technical network operators and engineers with a wide range of experience levels from beginners to multi-year experience. There is a strong orientation to offer core skills and basic knowledge in SIGs and to address issues relevant to the day-to-day operations of ISPs and network operators in the conference sessions. Note: The inclusion of a title, bio, topic, abstract, and slides with proposals is not compulsory but will help us determine the quality of your proposal and increase the likelihood it will be accepted. The organising committee will evaluate abstracts based on fit with the conference’s objective and its ability to stimulate lively discussions around the current state of New Zealand networking. The best local paper will be judged by a selection of the trustees and the programme committee. Return flights from New Zealand, accommodation, and conference fees will be covered. It will be expected the best paper is submitted by the winner for presentation at APRICOT. More details on paper submission can be found at http://www.nznog.org/call-for-papers For more information about the conference visit www.nznog.org or contact: talks(a)nznog.org

1 0

Arbor Networks 9th Annual Infrastructure Security Survey
by Sockrider, Gary 08 Oct '13

08 Oct '13

_______________________________________________________________________ Arbor Networks 9th Annual Infrastructure Security Survey Now Open _______________________________________________________________________ Arbor Networks would like to invite you to participate in our annual infrastructure security survey, an important initiative that touches service providers, enterprises, government agencies, universities and other network operators around the world. Please go here to participate in the 2013 survey: https://www.surveymonkey.com/s/FGY6KJD We are requesting that you complete and submit the survey by October 31, 2013. The purpose of the survey is to gauge and report on general security issues, practices, procedures and observations from the industry. All data gathered from the survey will be compiled, analyzed and reported in Arbor's 9th annual Worldwide Infrastructure Security Report which will be published in early 2014. Individual responses will be treated anonymously and no respondent names or company names will appear in the report or accompanying presentations and/or marketing materials. For your reference, our 8th annual Worldwide Infrastructure Security Report, issued earlier this year and based on responses to last year's survey is available here: http://pages.arbornetworks.com/rs/arbor/images/WISR2012_EN.pdf Your industry perspectives are important to Arbor and we value your input. Thank you, in advance, for your participation. With best regards, Arbor Networks

1 0

National Vs International Traffic
by Shane Hanson 07 Oct '13

07 Oct '13

Hello All I'm sure this question has been asked a number of times before but a quick search through the list and a Google pretty much draws a blank. I'm working for a service provider (Mothership) and we're trying to differentiate between national and international traffic. Any pointers? Thanks SHANE lE <mailto:shane(a)mothership.co.nz> shane(a)mothership.co.nz lW <http://mothership.co.nz/> mothership.co.nz lA PO Box 99814, Newmarket lM +64 21 623 903

5 5

Re: [nznog] Speaking of IPv6
by Brad Cowie 02 Oct '13

02 Oct '13

Hello, I don't run the machine that hosts the list, but figure I should chime in since I can provide the most up to date information. Waikato has a fully working IPv6 upstream and our own prefix (2001:df0:4::/48) we at Wand make good use of v6. The downside is that I haven't seen any other departments on campus adopt IPv6 yet, apart from our HPC group and Music group. list.waikato.ac.nz is a campus-wide service run by our ITS division, I haven't heard much about ITS's IPv6 deployment plans, but I'm not sure that will help much in this case considering our email vendor (postini in this case) doesn't have IPv6 support. I'm pretty sure we'll have to move off postini soon considering Google is planning to close that service down at some point. Hopefully our new email vendor has IPv6 support? Feel free to flick me any other questions on or off list and I'll attempt to provide answers. Cheers, Brad Cowie -- Systems Administrator Wand Group Department of Computer Science The University of Waikato Mobile: +64 27 5888 103 | Office: G.1.32 From: Dean Pemberton <nznog(a)deanpemberton.com> > Date: 2 October 2013 19:24 > Subject: Re: [nznog] Speaking of IPv6 > To: Juha Saarinen <juha(a)saarinen.org> > Cc: "nznog(a)list.waikato.ac.nz" <NZNOG(a)list.waikato.ac.nz> > > > Aww man thats harsh.... but fair. > > Someone from Waikato how are you looking for IPv6 deployment? > > On Wed, Oct 2, 2013 at 6:26 PM, Juha Saarinen <juha(a)saarinen.org> wrote: > > $ host -6 -v list.waikato.ac.nz > > Trying "list.waikato.ac.nz" > > ;; connection timed out; no servers could be reached > > > > $ host list.waikato.ac.nz > > list.waikato.ac.nz has address 130.217.66.63 > > list.waikato.ac.nz mail is handled by 400 > > list.waikato.ac.nz.s200b2.psmtp.com. > > list.waikato.ac.nz mail is handled by 100 > > list.waikato.ac.nz.s200a1.psmtp.com. > > list.waikato.ac.nz mail is handled by 200 > > list.waikato.ac.nz.s200a2.psmtp.com. > > list.waikato.ac.nz mail is handled by 300 > > list.waikato.ac.nz.s200b1.psmtp.com. > > > > -- > > Juha Saarinen > > twitter: juhasaarinen >

1 0

Re: [nznog] "What's the hourly price for a /24?"
by Scott Weeks 02 Oct '13

02 Oct '13

--- jlaundry(a)jlaundry.com wrote: From: Jed Laundry <jlaundry(a)jlaundry.com> Pardon my ignorance of the APNIC list discussions, but is the point to: 1. allow /24s to be used by different ASes for short periods of time to handle peak demands? I can only think of mobile IP providers in different timezones being a "sensible" example of this. 2. to allow ASes to claim a need for addresses based on short term customer uses? This is an edge case; I've run a couple of events where I needed a /26 for a weekend, which was taken from the provider's existing pool. 3. to mark addresses as leased (i.e. cloud servers) to avoid blacklist hell for the next poor unfortunate soul to use them? (glhf?) ------------------------------------------------------- You forgot 4. to spam. Sorta like hourly rates at a motel... >;-) scott _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Refurb Cisco Kit (inside) in NZ
by Skeeve Stevens 02 Oct '13

02 Oct '13

Hi, Could some people sell Refurbished Cisco kit in NZ contact me, or someone give me some contacts. I'm hoping for someone who is already in NZ so I can have to deal with the extra costs of import duties, shipping, risk, etc. ...Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.com ; www.eintellegonetworks.com Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/theispguy ; blog: www.theispguy.com The Experts Who The Experts Call Juniper - Cisco - Cloud

1 0

"What's the hourly price for a /24?"
by Dean Pemberton 01 Oct '13

01 Oct '13

Hi All, The subject line is a question I posed to Geoff Huston years ago in response to us both musing what the price to purchase address space would be. I suggested that if it really got that bad, people would be asking about leasing by the hour rather than buying outright. That time looks to be upon us. While not explicitly allowed, nor disallowed by APNIC policy, IP address leasing is becoming a hot topic of discussion on relevant APNIC lists. Should it be allowed? Should it be disallowed? It it were disallowed would that actually stop it? What mechanisms need to be in place to keep it sane? A 'whowas' server for eg Should someone be able to be allocated addresses under a needs based policy just so they can make money leasing them? Does leasing addresses mean that you no longer need them? Should you be required to return the ? These and many more issues are questions I'd like you all to give me feed back on. This topic will come up in APRICOT 2014 in Thailand. I'd like to know a lot more about what you all think about it before I take the mic. Regards Dean -- -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz To protect and promote the Internet for New Zealand.

20 41

Speaking of IPv6
by Juha Saarinen 01 Oct '13

01 Oct '13

$ host -6 -v list.waikato.ac.nz Trying "list.waikato.ac.nz" ;; connection timed out; no servers could be reached $ host list.waikato.ac.nz list.waikato.ac.nz has address 130.217.66.63 list.waikato.ac.nz mail is handled by 400 list.waikato.ac.nz.s200b2.psmtp.com. list.waikato.ac.nz mail is handled by 100 list.waikato.ac.nz.s200a1.psmtp.com. list.waikato.ac.nz mail is handled by 200 list.waikato.ac.nz.s200a2.psmtp.com. list.waikato.ac.nz mail is handled by 300 list.waikato.ac.nz.s200b1.psmtp.com. -- Juha Saarinen twitter: juhasaarinen

2 1

UFB Right Performing
by Jonathon Exley 01 Oct '13

01 Oct '13

Hi all, Chorus have been developing new UFB service templates through the Right Performing process. The main focus has been on increasing burst sizes to permit better TCP performance, and a corresponding relaxation of the delay and jitter SLA. The latest version has been submitted to the TCF for approval this week. Just in case you don't participate in the TCF, you can download a copy from https://db.tt/RgaqMjYL. If you have any comments/abuse please share them (but don't hassle me about the maths - I didn't write it) [cid:image001.jpg(a)01CEBF8D.35452160] Jonathon Exley Network Specialist Layer 2 T +64 4 498 5602 M +64 27 514 8048 E jonathon.exley(a)chorus.co.nz Level 3, Deloitte House, 10 Brandon Street P O Box 632, Wellington www.chorus.co.nz<http://www.chorus.co.nz> Aon Hewitt Best Employer in Australasia 2013 P Please consider the environment before printing this e-mail ________________________________ This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002.

1 0

Wellington OpenStack meet up tonight
by Andrew Ruthven 29 Sep '13

29 Sep '13

Hey, Is it the last Monday of the month already?! Time for the second OpenStack users group meeting in Wellington! For this meetup we'll have Bruno Lago from Catalyst IT doing an overview of OpenStack. He will describe all the core projects and show them working from the Horizon interface, command line tools and APIs. The Q&A session is an excellent opportunity for people to clarify their questions and share ideas with other OpenStackers. Where? Level 3, Catalyst House, 150 Willis St Time? 6pm, presentation starting at 6:30pm The front door locks at 6pm, but we'll have a sign down there with a contact phone number. Due to popular demand, an Auckland group is in the works. Cheers! -- Andrew Ruthven Wellington, New Zealand At home: andrew(a)etc.gen.nz | linux.conf.au 2014 | Come swan on the Swan River | http://linux.conf.au

1 0