- NZNOG - lists.nznog.org

OOB - Vocus DC, 7A Parkhead Pl, Albany
by Bruce Forster 26 Apr '17

26 Apr '17

Hi Noggers, Looking for a 2/10mb OOB link in Vocus DC, 7A Parkhead Pl, Albany Can someone please email me off list with some pricing? -- Regards, Bruce

1 0

Re: [nznog] Alcatel IPv6 PPPoE
by JORDI PALET MARTINEZ 24 Apr '17

24 Apr '17

Sorry, wrong paste … https://www.sinog.si/docs/draft-IPv6pd-BCOP-v1.pdf Regards, Jordi -----Mensaje original----- De: JORDI PALET MARTINEZ <jordi.palet(a)consulintel.es> Fecha: lunes, 24 de abril de 2017, 23:49 Para: <nznog(a)list.waikato.ac.nz> Asunto: Re: [nznog] Alcatel IPv6 PPPoE This may be useful. Is work in progress, but we believe that we will reach consensus in the next RIPE meeting adding some suggestions that we got in the last weeks: º ALBARÁN.......: 02643/2557863 SERVICIO........: Ecommerce FECHA............: 20/04/2017 CLIENTE RECOGIDA.: MOREMAR SL CLIENTE ENTREGA.: ANA SUBIRATS RODRÍGUEZ CLIENTE ABONADO..: MOREMAR SL LOCALIDAD ENTREGA: IGUALADA OBS. ENTREGA TTM: HEMOS LLAMADO DURANTE TODA LA TARDE Y NADIE HA CONTESTADO, TENIAMOS 2 TELEFONOS Y NAD A -DESTINATARIO AUSENTE/CERRADO : X Regards, Jordi -----Mensaje original----- De: <nznog-bounces(a)list.waikato.ac.nz> en nombre de Brian E Carpenter <brian.e.carpenter(a)gmail.com> Organización: University of Auckland Responder a: <brian.e.carpenter(a)gmail.com> Fecha: lunes, 24 de abril de 2017, 22:35 Para: Pieter De Wit <pieter(a)insync.za.net>, <nznog(a)list.waikato.ac.nz> Asunto: Re: [nznog] Alcatel IPv6 PPPoE On 25/04/2017 07:51, Pieter De Wit wrote: > Good Morning List, > > I was wondering if anyone out here (there :)) has a working config for > an Alcatel 7750 to give out IPv6 to subscribers. We would like to > allocate /112's as a link net between the CPE and the BNG. We then want > to route a /64 or /48 over this link net. Please don't hand out /64s. That prevents people subnetting their IPv6 in their home or office. You can always hand out /56 if you really think /48 is too much. > All of this is configured in > Radius. > > The link-nets are configure using the "wan-host" option under the > subscriber interface. The /64 or /48 subnets is part of a /36 configured > as the "pd" option. > > From what I was reading, it appears as if the link-nets needs to be > /64...surely not ? Not unless your vendor has a pointless restriction. The only RFC in the area is https://tools.ietf.org/html/rfc6164 which recommends /127 but there's nothing to prevent /112 from working if that's what you want. Regards Brian _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz https://list.waikato.ac.nz/mailman/listinfo/nznog ********************************************** IPv4 is over Are you ready for the new Internet ? http://www.consulintel.es The IPv6 Company This electronic message contains information which may be privileged or confidential. The information is intended to be for the use of the individual(s) named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, including attached files, is prohibited.

1 0

Xtra and SPF
by Glen Eustace 19 Apr '17

19 Apr '17

Hi, We have started receiving complaints from several of our customers for whom we are the MX for their domain. Some addresses in the domain are delivered locally, some are relayed to other mailboxes e.g. gmail and xtra. It seems that there are folks who still believe that SPF is a good thing and have ‘-all’ on their record. Xtra it would appear is now enforcing the rejection on email we relay to them. We are placed in an awkward position. Our customer wants us to fix something that we are not really able to. The SPF policy belongs to the sender and Xtra are doing the rejection. I have come across another add on technology for postfix called SRS for rewriting senders but that seems to be broken from all accounts as well. Is anyone else having these sort of issues, is there something I should be doing in the ‘relay’ process that will prevent the rejections I’d love to hear. Glen -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Glen Eustace, GodZone Internet Services, a division of AGRE Enterprises Ltd., P.O. Box 8020, Palmerston North, New Zealand 4446 Ph +64 6 357 8168, Mob +64 27 542 4015 “Specialising in providing low-cost professional Internet Services since 1997"

13 16

Interesting issue with iperf3 and UDP
by Dylan Hall 30 Mar '17

30 Mar '17

I stumbled across an issue with iperf3 and it's UDP mode recently that I thought was worth sharing. In short it's very bursty and in my opinion broken. Use iperf (2.0.x) instead. The interesting detail: I recently got UFB at home (200/100 plan) and wanted to put it through it's paces. I did the usual TCP tests and it all looked good, so I decided to try UDP to look for packet loss. Even with fairly low rates (10-50 Mbps) I was seeing loss vary from 5% to 50%. I tried a number of different hosts around NZ, and one in the US and although each reported different amounts of loss there was always loss. I ran the tests with "-l 1400" as an option to force 1400 byte packets. Without this iperf sends 8kB packets that get fragmented which confuses the loss figures somewhat. I repeated the tests with iperf rather than iperf3 and everything worked perfectly. Focusing on one testing host, a 10G connected server near my ISP to minimise transit network in the way. The following is a little piece of a packet capture from the sending host using iperf (2.0.5). The rate was set to 15 Mbps. I've added the Delta field which is the time since the last packet was seen in micro seconds. 23:27:57.979021 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 746 23:27:57.979766 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 745 23:27:57.980511 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 745 23:27:57.981254 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 743 23:27:57.982001 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 747 23:27:57.982749 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 748 23:27:57.983492 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 743 23:27:57.984238 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 746 23:27:57.984986 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 748 23:27:57.985731 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 745 23:27:57.986478 IP x.x.x.x.56460 > y.y.y.y.5001: UDP, length 1400 Delta: 747 The packets are very evenly spaced. The following is using iperf3 (3.1.3) also at 15 Mbps. 23:28:23.913489 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 8 23:28:23.913496 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 7 23:28:23.913505 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 9 23:28:23.913513 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 8 23:28:23.913520 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 7 23:28:23.913529 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 9 23:28:23.913537 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 8 23:28:24.012445 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 98908 23:28:24.012458 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 13 23:28:24.012468 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 10 23:28:24.012475 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 7 23:28:24.012483 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 8 23:28:24.012492 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 9 23:28:24.012499 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 7 23:28:24.012508 IP x.x.x.x.49233 > y.y.y.y.5201: UDP, length 1400 Delta: 9 It appears to send a burst of very closely spaced packets, then take a break, then repeat. The cycle is about 100ms. Applying some hopefully correct maths, it appears to send about 187kB of data in just over 1ms, then rest for almost 99ms. This gives is about the right average rate (15 Mbps), but for that first 1 ms it's sending at about 1.4 Gbps. I assume that the loss I'm seeing is either buffers over flowing somewhere in the path or the Chorus rate-limit on UFB discarding the packets. The old version of iperf uses a busy loop in the sender to achieve the very precise timing for UDP mode which has the side effect of causing 100% CPU while sending. I wonder if the change in iperf3 is an attempt to make it more efficient. Had I Googled the issue at the beginning I would have found this is a known problem: https://github.com/esnet/iperf/issues/296 https://github.com/esnet/iperf/issues/386 Hopefully this will save someone else from a couple hours of confusion :) Thanks, Dylan

3 2

Re: [nznog] AS-path changes on nzix.net route-servers
by Sid Jones 29 Mar '17

29 Mar '17

We’ve largely finished making the changes to the AS-path for those that have requested it on the APE and the WIX. We’ve not seen any issues so far. If you wish to schedule a change, please email us at peering(a)citylink.co.nz<mailto:peering(a)citylink.co.nz>

1 1

Bulk .nz whois
by Simon Lyall 20 Mar '17

20 Mar '17

One if the guys at $work is working to clean up our domains (mostly .nz) . We have a few hundred that are registered all over the place at various times, by different people, etc that we are hoping to consolidate. Problem is we need to get whois data for them but we ran into the dnc's limits. Any way to get around the limits? We tried reaching out to them but all they could suggest was going via a registrar. Simon Lyall | simon(a)darkmere.gen.nz | http://simonlyall.com Sent from a phone that cost more than my car

2 2

AS-path changes on nzix.net route-servers
by Sid Jones 12 Mar '17

12 Mar '17

Reminder, the NZIX changes will start being applied from today. We’re starting the changes on the WIX. APE changes will be in the next few days. Please contact us if you see any issues - faults(a)citylink.co.nz<mailto:faults(a)citylink.co.nz> or 0800 424 895

1 0

Anyone near AKL cbd have spare 3 x 1000Base-LX/LH (cisco coded GLC-LH-SMD) SFPs?
by Gareth Fletcher 05 Mar '17

05 Mar '17

that they would want to sell or give away (or for beer!!)! Please contact me off list :) In a pinch and my china order hasn't arrived yet. it's a nice hot day in Akl, you could be drinking cool beer this afternoon :) Today is your lucky day. Cheers Gareth

1 0

looking for 2U rackspace close to IX in NZ
by lenz 01 Mar '17

01 Mar '17

Hi, a bunch of friends of mine would like to extend their anycast cluster to NZ and were asking me if I know anyone who would have 2U of secure rack space with two separate uplinks and BGP-peering they could rent. Preferably close to one of the exchanges here, they are not too fuzzed where as they would only deal with the boxes remotely anyway. Company is reputable german company and there is beer for a successful referral :) Answers or pointers off-list would be the preferred comms channel :) cheers Lenz -- Lenz Gschwendtner geek, mentor, punk co-founder iwantmyname and others lnz.me/about

1 1

IRD Contact - Issue with services.ird.govt.nz
by Alexander Neilson 01 Mar '17

01 Mar '17

Hi NZNOG If there is someone in network operations from IRD on list or anyone has a contact could they please make contact off list. At $DAYJOB I have a customer who can load and interact with the main ird.govt.nz site but trying anything that touches https://services.ird.govt.nz is timing out. I have tested from two other IP Addresses in the same /24 and both other sites are loading correctly. (All three sites resolve / connect to 222.153.202.43) Same router is being used at all sites and the firewall rules that are different are not recording any matches during testing. SYN is sent but no SYN/ACK received. Customer has spoken to IRD but was told by IRD vague "Firewall issues" so I am looking for a contact to understand whats being seen from IRD side to resolve. Regards Alexander alexander(a)neilson.net.nz 021 329 681

2 2

Re: [nznog] Citylink IX communication
by Richard Naylor 01 Mar '17

01 Mar '17

At 11:18 p.m. 27/02/2017, Dylan Hall wrote: >Disclaimer: I worked for CityLink a while back so feel free to >consider the following biased or well informed as you see fit :) > >I think one aspect of this discussion that is often overlooked is >who participates in the peering exchanges. It's not just a handful >of large ISP's and content providers. > >Take a look at: > ><http://nzix.net/ape-peers.html>http://nzix.net/ape-peers.html >http://nzix.net/wix-peers.html > >We have a huge range of participants: universities, schools, >government, data centres, finance, researchers, broadcasters, etc. >Very few of these organisations operate networks as their core business. > >If it's so important to convince them all to opt-in to the change >what are we doing to explain why they should make that change? >Pointing at an RFC and yelling loudly hardly seems likely to be >accepted as a convincing argument outside of the networking community. Similar Disclaimer: I worked for CityLink a while back so feel free to consider the following biased or well informed as you see fit :) The original name WIX was "Wellington Information Exchange" back in 1996 to 1998. In 1997 (roughly) there was trial work done with Fore ATM switches because there was significant interest in " video" peering and "E1-peering", between Govt agencies. Of course VoIP-peering does a better job but has made less progress. WIX may lack the traffic volumes and number of carriers/ISPs but WIX is a more interesting exchange in terms of economic development in a community. Of course it does by-pass "service providers" in doing a lot of that. Some of the applications that (in theory) run include page ads for newspapers where the bank can update the interest rate in the ad for each edition of a newspaper. The ads used to cross town via cycle courier. WIX enabled that to be via FTP, without traffic charges. ( and couriers). So many of the WIX peers were on private AS numbers and often had someone else manage a simple peering router. This B2B peering is why there was a focus on having as many regional IXs as possible.

1 0

IANA IPv4 Recovered Address Space registry updated
by Paula Wang 01 Mar '17

01 Mar '17

Hi, An update has been made to the IANA IPv4 Recovered Address Space registry according to the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA (https://www.icann.org/resources/pages/allocation-ipv4-post-exhaustion-2012-…) The list of allocations can be found at: https://www.iana.org/assignments/ipv4-recovered-address-space/ Kind regards, Paula Wang IANA Services Specialist PTI

1 0

Citylink IX communication
by Tim Hoffman 26 Feb '17

26 Feb '17

Greetings, Given the importance of Citylink's IX services in the community, I feel that it is valuable to notify this communication from them to the entire list. I would note that they are explicitly stating in this communication they will not ever forcibly require consistent behavior. I would note that this is in direct violation of RFC7947; *2.2.2.1. Route Server AS_PATH Management* * As a route server does not participate in the process of forwarding* * data between client routers, and because modification of the AS_PATH* * attribute could affect the route server client BGP Decision Process,* * the route server SHOULD NOT prepend its own AS number to the AS_PATH* * segment nor modify the AS_PATH segment in any other way.* I would like to encourage (publicly) that Citylink implement this consistently, rather than in a haphazard way that varies customer by customer. Consistency is the key to supporting the NZ internet effectively *(Note, RFC7947 doesn't say "do this when your customer can be bothered")*. Additionally, I would like to encourage Citylink to communicate with the NZNOG community when publishing updates that could have an operational impact on the internet in NZ as a whole. Cheers, Tim ####### FOREWARDED MESSAGE BELOW ####### Dear REDACTED CityLink would like to inform you of some exciting NZIX developments that concern your existing ExchangeNET connection(s). We’re introducing some changes to the way we operate the NZIX route servers in order to improve our compliance with recent proposed standards (RFC7947 and RFC7948), and to minimise the disruption caused by routine administrative changes going forward. *Background* CityLink provides two route servers at each of the NZIX exchanges - currently Auckland (APE), Hamilton (HIX), Wellington (WIX), Christchurch (CHIX) and Dunedin (DPE). The route servers facilitate multilateral interconnection between the participants at each exchange by simplifying the BGP configuration and admin overhead otherwise needed to exchange routing information between multiple eBGP speakers. The NZIX route servers have traditionally prepended the exchange’s Autonomous System (AS) number to the AS path of the prefixes they advertise back out to peers. *What is changing?* A number of ExchangeNET customers have expressed a preference that the NZIX route servers no longer prepend the exchange AS number to the AS path of advertisements sent to them. This preference is consistent with recent proposed standards (RFC7947 and RFC7948), and is the recommended best current practice for Internet exchange route server operation. However, in order to put this change into effect, ExchangeNET customers who peer with the NZIX route servers may need to make a (potentially disruptive) change to their existing BGP configuration. While CityLink would prefer all ExchangeNET customers peering with the NZIX route servers to support this alignment with best current practice, we recognise that the timing to implement such changes may differ based on your individual business needs. Therefore, we have decided to implement the changes on a per-participant basis, and we invite those ExchangeNET customers who would like to “opt-in” to the changes (that is, for the NZIX route servers to no longer prepend the exchange AS number to the AS path of the advertisements sent to them), to contact us. We will endeavor to accommodate requests for configuration changes to be made at times convenient for each ExchangeNET customer, commencing from *13th March 2017* onwards. *Note:* We will *not* be changing the configuration of any existing sessions without that participant’s agreement. *What are the implications of the change?* · ExchangeNET customers who peer with the NZIX route servers will see the AS path for prefixes received shortened by one hop (the exchange AS number). This may alter the current choice of best path for those prefixes. · If you had been using the presence of an exchange AS in the AS path to influence your organisation’s routing policy, you may need to amend your configuration in order to achieve your routing policy objectives. It may not be quite so obvious that a given route has been learnt from a particular NZIX exchange point going forward. · Your router may need to be configured with its equivalent of *no bgp enforce-first-as* to restore its BGP session(s) with the NZIX route servers after the change is made. *I’d like to “opt-in” to the change. What do I need to do?* If you’d like us to remove the exchange AS number from the AS path of the advertisements you receive from the NZIX route servers, please email us at *peering(a)citylink.co.nz <peering(a)citylink.co.nz>* with your AS number, the contact details for the person(s) from your organisation that will be involved in making the changes, and an initial indication of when you’d like to implement the change (if known). Changes will only be implemented at a mutually-agreed time to minimise any disruption, commencing from *13th March 2017* onwards. *I’d prefer not to “opt-in” to the change right now. Do I need to do anything?* If you’d prefer that the NZIX route servers continue prepending the exchange AS number to the AS path of advertisements sent to you, you don’t need to take any action right now. However, we would appreciate a return email confirming the contact details for the most suitable person(s) from your organisation whom we should engage with on these matters going forward. *I’d prefer not to “opt-in” to the change at all. Will I be encouraged to eventually?* It is hoped that over time all ExchangeNET customers will choose to “opt-in” and thus support CityLink’s efforts to align the NZIX exchanges with best current practices, to the benefit of the wider NZ Internet community. *What will be the “default” configuration for new ExchangeNET customers?* Going forward, all new BGP sessions configured on the NZIX route servers will conform to the recommend best current practice (that is, the route servers will *not* prepend the exchange AS number to the AS path of prefixes sent to peers). *Is anything else changing?* Yes! The method by which configuration changes have historically been “pushed” to the NZIX route servers has necessitated a “hard reset” of the BGP session(s) with all existing peers. Although the two route servers at each exchange are reloaded independently (ensuring that each peer has an established session with at least one NZIX route server at all times), the overheads associated with performing the hard reset are higher than they need to be. In order to minimise the impact of routine administrative changes going forward, we are changing the way in which configuration changes are pushed to the route servers. Note that changes will continue to be applied to each route server independently, however, thereby ensuring optimal availability for NZIX. *I have a question about these changes. Who should I contact?* Please email us at *peering(a)citylink.co.nz <peering(a)citylink.co.nz>* in the first instance. We’ll be happy to help! Kind Regards, [image: CityLink Ltd] <http://www.citylink.co.nz/> *Toll Free* 0800 424 895 Level 6, 25 Cambridge Terrace *www.citylink.co.nz <http://www.citylink.co.nz/>* Wellington 6011 This mail message contains information that is confidential and which may be subject to legal privilege. If you are not the intended recipient, you must not use, distribute or copy this message. If you have received this message in error, please notify the sender immediately and erase this mail and its attachments.

7 10

Re: [nznog] Xtra and SPF
by Glen Eustace 20 Feb '17

20 Feb '17

> On 8/02/2017, at 1:15 PM, Criggie <criggie(a)criggie.org.nz> wrote: > > Its not really an answer, but SPF is doing what its told. Agreed. > > So either you have to convince Xtra's mail to disable their rejections > (unlikely) or you have to get something into the customer's SPF record > to permit your hosts to send. The domains with the hard fail SPFs are not my customers so I have no control over them at all. The issue is people emailing from those domains to domains we do host and they are getting the bounce and blaming us. (perhaps rightly so, but this has only become an issue in the last week and even then for only 2 customers) > Dirty hack that won't work much is to IPv6-enable your mail relay. There > seem to be fewer restrictions on that side, at least google is a little > more accepting. Already fully IPv6 enabled. So it looks like I need to go back and have another look at SRS. It would seem that either few organisations hosting email are ‘relaying’ like we do or have already implemented SRS. If that is the case, I’d be interested in knowing whether SRS creates its own set of problems.

12 11

NZNOG 2017 Videos
by Dave Mill 20 Feb '17

20 Feb '17

Hi all We have made the talks available from NZNOG 2017. Day 1 : https://www.youtube.com/playlist?list=PLeAkos2dldO5EmOe5zPbSuQzXoq4s Jeos Day 2 : https://www.youtube.com/playlist?list=PLeAkos2dldO5vjrg6vS0rYEPIvRs8 naAA Thanks to our A/V guys for doing the work behind this. Cheers Dave

2 1

Upcoming APNIC elections
by Tim Hoffman 20 Feb '17

20 Feb '17

Hi New Zealand internet community! I wanted to remind everyone that the APNIC elections <https://www.apnic.net/community/participate/elections/ec/ec-election-proces…> are coming up, with voting <https://www.apnic.net/community/participate/elections/ec/voting/> now closing in 6 days (3pm Monday, 27 February 2017). It's important that we all get involved in the democratic process that APNIC has and vote - those elected will determine policies that impact us all (for instance around IP address transfers and justification of IP space as we ramp down IPv4). Specifically, I wanted to highlight two candidates from the list of nominees <https://2017.apricot.net/elections/nominations/> that you may want to consider voting for to represent us. Both have had ties to the New Zealand internet community for over a decade, understand the challenges we face, and I believe would represent our needs well. Jon Brewer <https://2017.apricot.net/elections/nominations/jonathan-brewer/> is well known to our community. Wellington based, he founded Araneo and ran this company for some years, then since selling Araneo to TeamTalk has focused on helping developing communities (particularly in the pacific islands) establish better connectivity locally and to the world. *Gaurab Raj Upadhaya* <https://2017.apricot.net/elections/nominations/gaurab-raj-upadhaya/> has had involvement in many countries whose internet infrastructures have been developing over the past decade. He has strong ties to the networking community in New Zealand; these began in the early FX days. Starting his career in Nepal, he has experienced challenges greater than those we face in New Zealand around being a remote internet community connected to a US-centric internet first hand. He now leads the network organization at Limelight. *Don't forget to vote!* Cheers Tim -- Tim Hoffman | Twitter, Inc. 1355 Market St. | San Francisco, CA | 94103

2 1

Drinks - Auckland CBD 14/2
by Fraser McGlinn 13 Feb '17

13 Feb '17

Hi Guys, I'll be over in NZ (Auckland) early next week with the boss and thought a few beers were in order to catch up with people that we may not have seen in a while as well as to meet more of the NZNOG folk. We'll be putting on a few drinks at The Bluestone Room (9-11 Durham Ln, Auckland) on the 14th Feb from about 5:30pm, feel free to come down and join us for a few beers. Cheers, Fraser Drinks - Auckland CBD 14/2 Fraser McGlinn - Senior Network Operations Officer Web: www.anycast.com.au<http://www.anycast.com.au/> Peering: AS58511<https://www.peeringdb.com/asn/58511> Main Office: +61356224600 Level 1, 5/15 Phoenix Street Warragul, Victoria 3820, Australia [cid:image001.png(a)01D272FA.31833AC0] This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it.

7 7

AWS Sydney
by Jed Laundry 08 Feb '17

08 Feb '17

Hey, Is anyone else noticing high packet loss to AWS Sydney this morning? PING ap-southeast-2.console.aws.amazon.com (54.240.195.68) 56(84) bytes of data. 64 bytes from 54.240.195.68 (54.240.195.68): icmp_seq=12 ttl=240 time=40.4 ms 64 bytes from 54.240.195.68 (54.240.195.68): icmp_seq=17 ttl=240 time=39.6 ms 64 bytes from 54.240.195.68 (54.240.195.68): icmp_seq=20 ttl=240 time=40.7 ms 64 bytes from 54.240.195.68 (54.240.195.68): icmp_seq=32 ttl=240 time=161 ms 64 bytes from 54.240.195.68 (54.240.195.68): icmp_seq=34 ttl=240 time=40.2 ms 64 bytes from 54.240.195.68 (54.240.195.68): icmp_seq=39 ttl=240 time=294 ms 64 bytes from 54.240.195.68 (54.240.195.68): icmp_seq=41 ttl=240 time=40.7 ms 64 bytes from 54.240.195.68 (54.240.195.68): icmp_seq=47 ttl=240 time=40.4 ms 64 bytes from 54.240.195.68 (54.240.195.68): icmp_seq=54 ttl=240 time=65.5 ms Thanks, Jed.

10 9

Re: [nznog] Xtra and SPF
by Glen Eustace 07 Feb '17

07 Feb '17

> On 8/02/2017, at 1:03 PM, Jasper Bryant-Greene <jbg(a)rf.net.nz> wrote: > > SRS is the solution to this and is a standard, available on most mail systems. SPF is a good idea according to most of the internet, and is very widely implemented, so I suggest just getting with the times and fixing your mail relay to rewrite sender addresses according to the SRS standard rather than claiming to send mail for domains it's not authorized to do so for. I have found several articles saying that SRS is, like SPF, basically broken in that it doesn’t handle any situation where multiple relays are involved (not prepared to comment on whether that is right or not), hence my reluctance at this stage to using it. I agree that in principal SPF is a good idea but it breaks mailing lists, forwarding and relays. It has been my believe that using ~all (soft fail) is better than -all (hard fail) so that various anti-spam systems can use the soft fail as a contributing weighting, along with other things to determine what should be done with a message and to not rely on just the SPF.

1 0

NZIX / AKL-IX feedback
by Chris Browning 26 Jan '17

26 Jan '17

Hi All, With NZIX being a Not-for-profit that is overseen by a committee of its members, there a number of idea's bouncing around the of things that we could/should do with NZIX and the membership funds coming in. The NZIX committee is really interested in feedback on how we are going and where we should be heading to ensure that we steer the exchanges in the direction that best serves our members and the New Zealand Internet. NZIX has made a short survey to attempt to get some feedback on what we should be focusing on which can be found here https://www.surveymonkey.com/r/NZIX2017. Cheers Chris

1 0

Our poor Aussie mate
by Tim Hoffman 25 Jan '17

25 Jan '17

Hey all, Gav has lost his laptop at NZNOG, if anyone finds a backpack with megaport, AMS-IX, and PTC16 stickers, with a "Gavin tweedie" business card on it send me or him a message. Sorry for the aussie! Tim Sent from my iPhone

1 0

NZNOG 2017 Live Stream from Tauranga
by Jesse Archer 25 Jan '17

25 Jan '17

Morning, For those that can't make it... We're now streaming! http://www.nznog.org/nznog17/stream Recordings of each talk will also be posted on the NZNOG website after the event. *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

3 4

NZNOG Conference 2017 - SOLD OUT!
by Jesse Archer 24 Jan '17

24 Jan '17

On behalf of the trustees, thanks to everyone who's registered for NZNOG 2017 in Tauranga. Welcome to those already in Tauranga for the workshop/tutorials - and safe travels for everyone else coming over the next 24 hours - we'll see you tomorrow! *Just a quick note that tickets have sold out. * Because we're so close to conference getting underway and as ticket sales have already exceeded our expectations, we won't be operating a waitlist. Ticket name changes with a small admin fee are permitted. Thanks! *Jesse Archer*

3 3

Lightning Talks
by Richard Nelson 24 Jan '17

24 Jan '17

Hi, Could anybody who would like to give a lightning talk please send an email to talks(a)nznog.org. Please give the topic of your talk and the time you expect to take. Thanks, Richard

1 0

Internet at the conference
by Nathan Ward 22 Jan '17

22 Jan '17

Hi, I’m in Tauranga for the week for work, and am staying at Trinity where the conference is being held. I’m attending on Thurs/Fri (now that I’ve registered having prev. forgotten haha). The wifi here, at least in the rooms, is abysmal - I’ve stayed here a few times before, and it’s always the same - and is the same now. Anywhere from 10-25% loss, and 100-500ms std-dev when ARPing the gateway at various times. I note that there’s an NZNOG SSID - is this using the same wifi equipment? MACs seem similar, but reception is poor, so maybe it’s just in the conference area? If you have an ethernet adapter, you can plug in to the lower of the two RJ45 holes in your room, get 100mbit link, auth with the captive portal, and get 2% loss instead, much better RTT though. Seems I can get around 8mbit/s out of it. Of course, if this is how it is without a bunch of nerds, it’s not going to get any better at the tail end of the week ! Long story short - unless the conf. organisers are sorting something else out, bring some 4G if you need to be online reliably - 4G on VFNZ seems to be OK here and has been a life saver for me when staying here in the past. Cheers, -- Nathan Ward

2 1

Amazon Prime Cache
by Mark Frater 19 Jan '17

19 Jan '17

Does anyone know what the story is with caching Amazon Prime traffic? Do they have an ISP programme for rolling out caches like the Netflix Open Connect Appliances?

1 0

looking for rack mount ears - HP 1920 series
by Terry Hughes 18 Jan '17

18 Jan '17

sorry, I know this is way off-topic, but I'm out of options. I need to re-work a small rack with a few 1920 OfficeConnect switches in it, and the original installer threw out the mounting ears and just sat the switches on top of some old equipment. The holes don't match any of the generic mounting kits I've got, and HP don't list the mounts as spares. Does anyone have a couple of mounting kits, or at least the ears? Fair compensation no problem. I'm in Wellington, but know how couriers work... thanks, Terry (long time lurker etc) 021 575715

1 0

NZNOG Conference Begins Next Week
by Jamie Baddeley 16 Jan '17

16 Jan '17

Hi Folks, Welcome to 2017 and another edition of the 'Nog. Next week the conference http://www.nznog.org/nznog17 begins! http://www.nznog.org/nznog17/nznog-2017-workshop http://www.nznog.org/nznog17/nznog-2017-tutorials http://www.nznog.org/nznog17/conference-programme It's not too late to register - the programme is looking good - thanks to the Programme Committee and the Presenters that have put their names forward and made the time to give back to the NZNOG community. For those of you attending the Social on Thursday Night - pack something warm/decent shoes - the event is outside and so far the summer has been pretty meh. Conference attendance is looking good, we look forward to seeing you all there next week! If any of you fancy putting your hand up for some random work to help with odd jobs at the conference let us know (and when you'd be available) at info(a)nznog.org - we'd appreciate it. Cheers Jamie on behalf of the NZNOG Trustees.

1 0

Supporting RIPE Atlas
by Sebastian Castro 15 Jan '17

15 Jan '17

Hi everyone: On preparation for NZNOG 2017 next week, I'd like to pitch the RIPE Atlas project to this audience. RIPE Atlas https://atlas.ripe.net/ is global measurement network composed by hundreds of lightweight probes, that allow their users to run a variety of network measurements. The probes are small, powered by USB, and let you run Ping, Traceroute, lightweight HTTP, DNS lookups, etc. It provides the convenience of running measurements from different networks, very useful for troubleshooting and monitoring, as well as research. There are 82 active probes in New Zealand, and we would like to cover most of the active ASNs in the country with a probe. NZRS uses RIPE Atlas for some of our research work, like Detecting if NZ ISP are doing DNSSEC validation <http://blog.nzrs.net.nz/dnssec-validation-at-spark-nz/> or testing local ISP resolvers for centricity <http://blog.nzrs.net.nz/resolvers-centricity-detection/>, as well as our efforts to map the Internet topology of NZ that will be presented at the conference. Some NZNOG members are RIPE Atlas ambassadors, like Dean Pemberton or myself, we can get you a probe if you are interested on hosting one. I'll bring a few to Tauranga next week, feel free to contact me if you want one. If there is more demand than available probes, I can get a bunch directly from RIPE and post them to you later. Kind Regards, -- Sebastian Castro Technical Research Manager NZRS Ltd. desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Call For Presentations - DNS-OARC Workship 26, Madrid, 14-15 May 2017
by Geoff Huston 07 Jan '17

07 Jan '17

[with apologies to those who see this on multiple lists] Call For Presentations The DNS-OARC 26th Workshop will take place in Madrid, Spain on May 14th and 15th 2017, the Sunday and Monday following the ICANN GDD Industry Summit 2017. The Workshop's Program Committee is now requesting proposals for presentations. This workshop intends to build from previous strong DNS-OARC workshops, where both operational content and research are welcome. All DNS-related subjects are welcome. If you are an OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. A timeslot will be available for lightning talks (5-10 minutes) on Monday May 15th, for which submissions will be accepted during May 14th on a first-come first-served basis. Workshop Milestones: 6th January 2017, Call for Presentations posted and open for submissions 24th February 2017, Deadline for submission 17th March 2017, Draft Programme published 14th April 2017, Final Program published 28th April 2017, Final deadline for slideset submission Details for presentation submission will be published here: https://indico.dns-oarc.net/event/26/call-for-abstracts/ The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Ray Bellis, for the OARC Programme Committee OARC depends on sponorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.)

1 0

Met Service
by Alan Maher 03 Jan '17

03 Jan '17

Merry Xmas all, Anyone have a contact with Met Service IT provider/manager/ help desk? http://www.metservice.com/ is running on complete go slow right now. "Someone" needs to take a look at it. Cheers Alan Maher --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

3 2

a bufferbloat-less christmas
by Dave Taht 22 Dec '16

22 Dec '16

I gave a talk at nznog about 2 years ago about bufferbloat and the fixes we had planned for it. I'm pleased to say that we've got it mostly fixed in the Linux kernel at this point. did the NZwrt idea ever get traction? In particular, the wifi fixes (fq_codel at the mac layer, and airtime fairness) have today, entered lede (formerly openwrt). There's full support for the ath9k and partial support for some ath10k chips. Builds should be popping out in a few hours. Most of these patches are now in the linux 4.10 mainline - and ATF is scheduled for 4.11. The sqm-scripts (in lede and openwrt, which also work on mainline linuxes) have long enabled fixing dsl, cable, fiber, ethernet - but *are not* required to fix wifi - with these patches, "wifi just works!" with far less bloat and more concurrency. There's a ton of ath9k/ath10k using products out there supported by lede. The Turris Omnia has all the sqm-scripts, fq_codel, and the ath9k/ath10k stuff either in it now, or rapidly pending. There's also some good stuff in the dsl-aware-autoconfig-ing http://evenroute.com/ (but not the wifi stuff as yet). A lot of people are liking the edgerouter-x... ... And there are dozens of other firmwares and products using fq_codel functionality - notably the ubnt edgerouter calls it what it is, but you'll see it also under names like "adaptive qos", and so on. For a good bit of research as to how fq_codel helps on slow connections (in this case, in australia across NBN's speed tiers), see: http://caia.swin.edu.au/reports/161107A/CAIA-TR-161107A.pdf for some details what went into fixing wifi, see: https://lwn.net/Articles/705884/ So... Have a bloat-free christmas! fix it for yourself, and then a friend, or two. My testing while I was in NZ last time seemed to indicate no particular tuning was needed for your country, but I remain curious as to what happens when you deploy this new stuff, there - and, if, over the last 2 years, you had been. Wish I was there, myself. Looks nice and warm. -- Dave Täht Let's go make home routers and wifi faster! With better software! http://blog.cerowrt.org

1 0

pool.ntp.org traffic gone wild
by Lincoln Reid 19 Dec '16

19 Dec '16

Hi, Is anyone else in NZ seeing their pool.ntp.org traffic volumes up by an order of magnitude over the last few days? 20mbps+ seems like quite a lot of NTP. Cheers, -- Lincoln Reid Head of Networks ACSData - AS18119 lincoln(a)acsdata.co.nz Phone: +64 4 939 2200 Fax: +64 4 939 2201

12 19

Certifications
by Lesley Longhurst 14 Dec '16

14 Dec '16

Hi all, As an all-purpose leading network bod for my company, what's a good certification strategy? I deal with a wide range of stuff from local LANs to international backbones, and it's high time I got myself a piece of paper to "prove" that I know some stuff. Is CCNA still a good starting point? Lesley Longhurst Opus International Consultants Ltd, 33 The Esplanade, Petone, Lower Hutt 5012, New Zealand PO Box 30 845, Lower Hutt 5040, New Zealand +64 4 471 7002 +64 21 244 3718 lesley.longhurst(a)opus.co.nz<mailto:lesley.longhurst(a)opus.co.nz> www.opus.co.nz<http://www.opus.co.nz/>

9 14

Re: [nznog] Certifications
by Kerry Milestone 13 Dec '16

13 Dec '16

You may also wish to look at some of the online MOOCs. For example, a certified course (you pay for, and get your work verified etc) in Digital Network Essentials but you've probably moved on already a bit from this particular one. https://www.edx.org/course/digital-networks-essentials-imtx-net01x "All about the IP, TCP and UDP Internet protocols and their properties (quality of service, congestion management, etc.)" Or slightly more esoteric and off the original topic but still interesting to do is this one, put together by some fairly clued up people in their field: https://www.edx.org/course/cyber-security-economics-delftx-secon101x "We discuss and apply different economic models that help determine the costs and benefits of security investments in network security." Looking at this one from Ivan Pepelnjak, the six week course covers quite a bit and certainly would expose the holes in your current knowledge you need filling. Playing First Packet in a network symphony orchestra would be a good place to progress from should you require to learn the specifics and intricacies of certain equipment. http://www.ipspace.net/Building_Network_Automation_Solutions "In the hands-on part of the course you’ll build your own lab, either using virtual devices or physical gear. If you decide to go with the virtual device approach, you can choose between Arista vEOS, Cisco VIRL, Cisco CSR, Cumulus VX, Juniper vSRX or Juniper vMX." >From a business perspective, I think it is more useful knowing the why rather than just the how which is what certificates themselves often can't portray and may become very clear in an interview or stressed (the internets are broken...) situation. On 14/12/16 09:45, nznog-request(a)list.waikato.ac.nz wrote: > > > Today's Topics: > > 1. Certifications (Lesley Longhurst) > 2. Re: Certifications (Nathan Ward) > 3. Re: Certifications (Criggie) > 4. Re: Certifications (Chris O'Donoghue) > 5. Re: Certifications (Lesley Longhurst) > 6. Re: Certifications (Dave Mill) > 7. Re: Certifications (Nathan Ward) > 8. Re: Certifications (Bill Walker) > 9. Re: Certifications (Joel Wir?mu Pauling)

1 0

Accommodation Early Bird Has Ended - Other Options
by Jesse Archer 12 Dec '16

12 Dec '16

Hi All, Just a heads up that the Trinity Wharf early bird pricing ended yesterday. Other options if you're looking to save some $$ are listed at the following link, but I wouldn't muck around (Tauranga is one of NZ's Summer hot spots). http://www.nznog.org/nznog17/venue Conference is selling nicely, if you're interested in the Workshop or Tutorials on offer, don't muck around - only a few spots left on those. Conference will finish at 4.30pm on Friday Jan 27. Your direct flight home options on this date include: *Auckland 5pm & 6:20pm* *Wellington 5:25pm* *Christchurch 4:00pm (transit via Wellington or Auckland available at 5:25pm or 6:20pm).* Check-in is 20 minutes before departure, I'd allow 30 minutes travel time from the venue to the airport just in case there is some peak Friday afternoon traffic on Hewletts Road (lots of traffic lights). Regards, Jesse Archer On Behalf Of The NZNOG Trustees

1 0

NZNOG 2017 Registrations are Open
by Dave Mill 04 Dec '16

04 Dec '16

Hi all A heads-up that we have just opened registrations to the NZNOG 2017 conference in Tauranga. Details are here - http://www.nznog.org/nznog17 . The conference is brought to you by Go Wireless NZ. We have placed information regarding our current workshop and tutorials on these pages: http://www.nznog.org/nznog17/nznog-2017-workshop http://www.nznog.org/nznog17/nznog-2017-tutorials (Note, we might have some Grandstream phone training available on the Wednesday as well - we are still firming up details) We'd encourage people to register early for the tutorials and workshops as some of these will have limited seats due to room availability. Also, a reminder that early bird accommodation rates at the conference venue will finish on December 12. Rooms are limited so again book your accommodation early. Check out accommodation options here - http://www.nznog.org/nznog17/venue A big thank you to all of our sponsors so far - http://www.nznog.org/nznog17/nznog-2017-sponsorship Hope to see you there! Cheers Dave (on behalf of the NZNOG Trust)

2 2

Strange issues in CHCH - Routing SYN Timeouts
by Brad Nightingale 01 Dec '16

01 Dec '16

Hi We are experiencing weird issues from out of our internet break out in CHCH. I don't want to drop our upstream in it so no names mentioned, but yes a ticket has been logged with them - this is just becoming urgent as it started . Since I have done this I have had reports from other IT Service Providers that say their customers are experiencing the same thing. Basically we can ping anything, but we cant web browse to wide range of certain sites (e.g. www.bnz.co.nz) - these would appear to be internationally hosted sites but I can't categorically state this. We are getting SYN Timeouts almost like there is async routing somewhere way up stream or some random MTU issue. I don't expect to have anyone solve the problem from this email, just a "yes there is an issue and we are experiencing it too and know XXX is working on it" would be helpful to know. Thanks Brad ________________________________ CAUTION: This communication, including any attachments are confidential. If you have received this communication in error, please advise the sender immediately and delete the message and any attachments. Nothing in this email designates an information system for the purposes of Section 11(a) of the New Zealand Electronic Transactions Act 2002, unless expressly stated otherwise.

1 0

Network Status/Anecdotes from #eqnz
by Joel Wirāmu Pauling 13 Nov '16

13 Nov '16

Hi all, Hope everyone is safe; thoughts are with everyone back home. As I went through the call list of friends and family this morning ; from the considerably less shakey Eastern Canada - my mind turned to work and network operators. Have a fairly rag-tag list of info mostly anecdotal from users on a variety of places (twitter/reddit/g+) about loss of services from ISP's (Nelson area seems pretty hard hit) Wondering how everyone's networks have held up and if there are any pain points, am sure the people at the forefront are already hard at work and sharing resources as required. But if there is anything people can and/or are willing to share it would be appreciated. -Joel

1 0

Re: [nznog] NZNOG Digest, Vol 167, Issue 2
by Logan Douglas 07 Nov '16

07 Nov '16

Try Jason Foden - General manager of Ondemand. He can point you in the right direction. I think his email is jason.foden(a)tvnz.co.nz Will confirm. Logan @ Live Motorsport NZ On Tue, Nov 8, 2016 at 12:00 PM, <nznog-request(a)list.waikato.ac.nz> wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > https://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. TVNZ onDemand Contact (Tristram Cheer) > 2. Re: TVNZ onDemand Contact (Jesse Archer) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 7 Nov 2016 03:05:50 +0000 > From: Tristram Cheer <t(a)uber.co.nz> > To: "nznog(a)list.waikato.ac.nz" <nznog(a)list.waikato.ac.nz> > Subject: [nznog] TVNZ onDemand Contact > Message-ID: > <PS1PR03MB16598F6295DE95103FAE52B096A70(a)PS1PR03MB1659. > apcprd03.prod.outlook.com> > > Content-Type: text/plain; charset="us-ascii" > > Hi All, > > I'm looking for someone in charge over at TVNZ who works on their Ondemand > platform, Helpdesk and noc so far are stuck and I need someone to work on a > widespread issue with their platform. > > > Cheers > > > TRISTRAM CHEER > UBER GROUP LIMITED > NETWORK ARCHITECT - MOST PROBLEMS ARE THE RESULT OF PREVIOUS SOLUTIONS... > > [Facebook]<https://www.facebook.com/UberGroup?_rdr=p> [Twitter] < > https://twitter.com/ubergroupltd> > > E: t(a)uber.co.nz<mailto:t(a)uber.co.nz> > P: 09 438 5472 Ext 803 | M: 022 412 1985 | W: www.uber.co.nz<http://www. > uber.co.nz> > 53 PORT ROAD | PO BOX 5083 | WHANGAREI | NEW ZEALAND > > > > >

1 0

TVNZ onDemand Contact
by Tristram Cheer 06 Nov '16

06 Nov '16

Hi All, I'm looking for someone in charge over at TVNZ who works on their Ondemand platform, Helpdesk and noc so far are stuck and I need someone to work on a widespread issue with their platform. Cheers TRISTRAM CHEER UBER GROUP LIMITED NETWORK ARCHITECT - MOST PROBLEMS ARE THE RESULT OF PREVIOUS SOLUTIONS... [Facebook]<https://www.facebook.com/UberGroup?_rdr=p> [Twitter] <https://twitter.com/ubergroupltd> E: t(a)uber.co.nz<mailto:t(a)uber.co.nz> P: 09 438 5472 Ext 803 | M: 022 412 1985 | W: www.uber.co.nz<http://www.uber.co.nz> 53 PORT ROAD | PO BOX 5083 | WHANGAREI | NEW ZEALAND

2 1

NZNOG 2017 Sponsorship and Conference Update
by Dave Mill 02 Nov '16

02 Nov '16

Hi all First of all, I'd like to welcome aboard Go Wireless NZ as our naming and Platinum sponsor for NZNOG 2017. NZNOG conferences just wouldn't be possible without sponsors like Go Wireless NZ so I'd strongly encourage you all to support them. Check out their website - https://www.gowifi.co.nz/ At the moment we haven't had as many sponsors come on-board as we would have hoped for. If you have been considering sponsoring NZNOG but haven't made contact yet please do so. If you know any companies that might consider sponsoring NZNOG please encourage them also. sponsorship(a)nznog.org is the email address for any sponsorship inquiries. If we don't get more sponsors on-board we may have to consider raising conference fees slightly. We'd really hope to not do this and to keep NZNOG at its standard low cost. We have a $1000 community sponsor level available so even having a few more companies/organisations coming on-board at that level would help a lot. We have a call for papers for the conference out. Richard Nelson posted this on Oct 13 to the list - its also available at http://www.nznog.org/call-for-papers . We have just locked in our first workshop (23 - 25 Jan) and tutorial (25 Jan) and hope to have more options soon. We'll aim to release some more details on these soon. Finally, we've had a few people book in accommodation at our venue nice and early which is great to see. A reminder, this conference is in Tauranga in the height of summer and accommodation will be at a premium. Some accommodation options are available here - http://www.nznog.org/nznog17/venue . Look forward to seeing you next year. Cheers Dave (on behalf of the NZNOG trust) http://www.nznog.org/nznog17

1 0

Juniper EX4600 "process switching"?
by Ewen McNeill 24 Oct '16

24 Oct '16

Does anyone have any suggestions for how to investigate what looks like certain paths of inter-virtual-router layer 3 switching (routing, via routes leaked into the VR) on a Juniper EX4600 (and I'd guess QFX5100) being sent via the supervisor CPU? Searching online turns up lots of advice for investigating, eg, "process switching" on Cisco (eg, http://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-software-r…) but I'm not finding much documented for Juniper :-( From the customer point of view the most obvious symptom is approximately 10-20 ms additional latency on a local routed path (VLAN A on VR 1 to VLAN B on VR 2), but apparently only in one direction (ie, if we bypass the EX4600 in the problematic direction then it "seems to be okay". It happens even when there's basically no traffic (eg, under 1Mbps on a 1Gbps link), and only a couple of dozen devices on each VLAN. (At times we've seen the latency as high as 1000+ ms -- so over 1s, for local traffic -- but that was at a busier site.) From an internal point of view, the most obvious symptom is that the forwarding-options analzyer shows ingress/egress on one of the VLANs, but only ingress on the other VLAN; and "monitor traffic ..." shows only the missing egress traffic. Since I'd understood "monitor traffic" to only see traffic that goes via the supervisor CPU, I'm starting to wonder if the latency is coming due to the packet flow in that direction going through the processor CPU -- for some unknown reason. This is happening at two sites, but they're basically identical EX4600s facing basically identical switches, and equivalently configured routing instances in each. The two VLANs are sub-interfaces on the same aggregation (ae1) to the same switch, so it's sort of hairpinned, but via leaked static routes in the two routing instances. The on-VLAN hardware at each site is pretty similar too. So we're guessing the cause is the same, but don't know what it is. We've already tried testing with the aggregation down to a single link, and it appears to make no difference. We've also forced ethernet flow control off at both ends, without making a difference. Any thoughts, particularly to see what path through the EX4600 packets are taking, welcomed. Or documentation for how the EX4600/QFX5100 packet forwarding engine architecture works (I can find M/T/MX documents, but not the one I want...). Thanks, Ewen

2 3

[Job] The National Library of New Zealand is looking for an experienced Digital Preservation Web Engineer [Closes 28th Oct]
by Jay Gattuso 24 Oct '16

24 Oct '16

The National Library of New Zealand is looking for an experienced Digital Preservation Web Engineer to lead its web archiving programme. You will be responsible for the strategic and operational management of the Library's web archiving programme. The primary purpose of the Digital Preservation Web Engineer is to define, implement and support the efficient acquisition, preservation and discovery/delivery of web based digital content subject to the Library's legislated mandate. This includes harvesting via the Library's selective and whole-of-domain web archiving programmes and the design, deployment and implementation of mechanisms for storing, indexing and providing access (including data mining) to the web collections. You will be working within a team of 8 digital preservation specialists in the Preservation Research & Consultancy team and be responsible for: * developing a world class approach to the gathering, preservation, dissemination and interrogation of web based collections. * drafting a business case for indexing, search and delivery for the Library approx 80Tb of web archives. * contributing to the development of the strategic direction of the National Library with particular emphasis on the Library's digital (web) collection building, preservation and access roles. * working closely with national and international peers, related teams within the department and with external vendors. Working at the Department of Internal Affairs, you'll have the opportunity to make a real difference in the lives of New Zealanders. The National Library of New Zealand sits within the Information and Knowledge Services branch, the Department's epicentre of information management. Our branch is all about collecting, storing and preserving important things that are precious to New Zealand. You will have substantial practical experience in an IT environment with specific emphasis on web framework technologies and protocols, and preferably also demonstrated experience in web archiving. You will be a self-driven specialist, ideally with a tertiary qualification in information technology, computer science or information science or its equivalent. This role also requires you to be legally entitled to work in New Zealand. If you want to join a team of smart, committed people who do spectacular work for New Zealand - then this might be the right job for you. Applications close: 5PM, Friday 28 October 2016 For more information please contact: Steve Knight, Programme Director Preservation Research on +64 21 490 503 or steve.knight(a)dia.govt.nz<mailto:steve.knight(a)dia.govt.nz> Job description: To review the full job description, please click here<http://www.bfound.net/Company/164-20160916152621.pdf> Applications: To apply for this role at the National Library of New Zealand, please click here<https://www.bfound.net/loginbox.aspx?loginState=3&jobId=136955&CoId=164>

1 0

NZNOG17 - Call for Papers
by Richard Nelson 12 Oct '16

12 Oct '16

The NZNOG organising committee invites papers for its 14th annual conference, to be hosted at Trinity Wharf, Tauranga, New Zealand from 23 - 27th January 2017. There will the three day Workshops 23 – 25 January, a day of tutorials on 25 January with the main conference on 26 – 27 January. Conference objective: The NZNOG conference, workshops and tutorials are a once-a-year opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies practices and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submit a paper: Presenters are invited to submit abstracts of their paper for consideration by Monday 28th November. Abstracts should be no more than one page long and provide a summary of your networking-related subject matter. To submit your paper please e-mail: talks(a)nznog.org When considering a presentation, remember that the NZNOG audience is mainly comprised of technical network operators and engineers with a wide range of experience levels from beginners to multi-year experience. There is a strong orientation to offer core skills and basic knowledge in SIGs and to address issues relevant to the day-to-day operations of ISPs and network operators in the conference sessions. Note: The inclusion of a title, bio, topic, abstract, and slides with proposals is not compulsory but will help us determine the quality of your proposal and increase the likelihood it will be accepted. The organising committee will evaluate proposals based on fit with the conference’s objective and its ability to stimulate lively discussions around the current state of New Zealand networking. This call for submissions can also be found at: http://www.nznog.org/call-for-papers For more information about the conference visit www.nznog.org or contact: talks(a)nznog.org

1 0

APNIC 42 has started - participate remotely!
by Elly Tawhai 03 Oct '16

03 Oct '16

________________________________________________________________________ APNIC 42 has started - participate remotely! ________________________________________________________________________ Hi NZNOG Community, If you can't attend a session in person, you can participate remotely using our online participation tools. We provide an Adobe Connect virtual conference room with live video, audio, transcript, chat, and real-time slides and YouTube live, allowing you to virtually attend and participate in APNIC 42 online. https://conference.apnic.net/42/remote Policy SIG ---------- If you want to play a part in how Internet number resources are managed, be sure to participate at the three Policy SIG sessions. As well as the proposals under discussion, there will also be interesting presentations on whois data quality and accuracy, and IPv4 transfers. https://conference.apnic.net/42/policy First TC Security Session ------------------------- With cyber security threats on the rise, it's important to keep up to date on Internet security vulnerabilities, mitigation techniques, and ways the Internet community can work together to find solutions. Check out the FIRST Technical Colloquia sessions to hear from regional and international Internet security experts share their real-world experiences. https://conference.apnic.net/42/program#/schedule/day/8/first-tc-security-s… Thanks to our sponsors ---------------------- Huge thanks go to our APNIC 42 sponsors. We really appreciate your support! https://conference.apnic.net/42/sponsor#sponsors Keep in touch ------------- Stay up to date with what's happening at the conference by subscribing to the APNIC Blog and following us on our social networks. http://blog.apnic.net https://www.apnic.net/about-APNIC/social-media ________________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: 61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: 61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net ________________________________________________________________________

1 0

Huawei AR160 - Chorus VDSL config anyone?
by Mike Taylor 26 Sep '16

26 Sep '16

Just thought I'd chuck this out there, as my Google-fu seems to be failing. Does anyone have a known good, Chorus Wholesale, VDSL config for an Huawei AR160 router? (The look like a Cisco 800 series, NOT the white,plastic consumer version) Specifically, I'm having an issue where PPPoE Active Discovery is working. The ISP core starts sending PPPoE LCP requests, and the Huawei _seems_ to think it's sending replies, but I'm wiresharking it in our core, and PPPoE frames are NOT making it back to us... Cheers, Mike -- Mike Taylor The Total Team 0800 888 326 / +64 3 3779050

4 4

[Job] Telcos job opportunities
by Pierre-Emmanuel Goiffon 21 Sep '16

21 Sep '16

Hi NZNog, Please apologize if I breach any mailing-list rule with this email. I recently joined this mailing-list and I would like to introduce myself as I am actively looking for a job in telcos here. I have 14 years’ experience in the telecommunication Industry in Europe - in different types of companies like Renater (French equivalent to REANNZ), BT, Orange Business Services, Level 3 Communications - in different types of environments : Integrator, Telecommunications provider, Consultancy - in different types of positions : network engineer, contract manager, project manager, sales engineer I recently relocated in New Zealand for family reason, and I'm now actively looking for a Job here. As I found my last position in France via the FRNOG Community, I though it would make sense to contact the NZNOG Community here :) I am mainly looking for presales or project manager positions, but I am opened to hear about any vacancy that could match my profile. My CV is available here: https://www.dropbox.com/s/a7v3e16fvaokgqi/GOIFFON-CV_Sept2016.pdf?dl=0 Please reply off-list. Best Regards, Pierre-Emmanuel Goiffon

1 0

[Job posting] Digital Preservation Web Engineer
by Jay Gattuso 19 Sep '16

19 Sep '16

The National Library of New Zealand is looking for an experienced Digital Preservation Web Engineer to lead its web archiving programme. https://www.bfound.net/detail.aspx?jobId=136955&CoId=164&rq=5 You will be responsible for the strategic and operational management of the Library's web archiving programme. The primary purpose of the Digital Preservation Web Engineer is to define, implement and support the efficient acquisition, preservation and discovery/delivery of web based digital content subject to the Library's legislated mandate. This includes harvesting via the Library's selective and whole-of-domain web archiving programmes and the design, deployment and implementation of mechanisms for storing, indexing and providing access (including data mining) to the web collections. You will be working within a team of 8 digital preservation specialists in the Preservation Research & Consultancy team and be responsible for: * developing a world class approach to the gathering, preservation, dissemination and interrogation of web based collections. * drafting a business case for indexing, search and delivery for the Library approx 80Tb of web archives. * contributing to the development of the strategic direction of the National Library with particular emphasis on the Library's digital (web) collection building, preservation and access roles. * working closely with national and international peers, related teams within the department and with external vendors. Working at the Department of Internal Affairs, you'll have the opportunity to make a real difference in the lives of New Zealanders. The National Library of New Zealand sits within the Information and Knowledge Services branch, the Department's epicentre of information management. Our branch is all about collecting, storing and preserving important things that are precious to New Zealand. You will have substantial practical experience in an IT environment with specific emphasis on web framework technologies and protocols, and preferably also demonstrated experience in web archiving. You will be a self-driven specialist, ideally with a tertiary qualification in information technology, computer science or information science or its equivalent. This role also requires you to be legally entitled to work in New Zealand. If you want to join a team of smart, committed people who do spectacular work for New Zealand - then this might be the right job for you. Jay Gattuso | Digital Preservation Analyst | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467 Wellington 6140 New Zealand | +64 (0)4 474 3064 jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)natlib.govt.nz>

1 0

PCH peering survey 2016
by Bill Woodcock 14 Sep '16

14 Sep '16

Background: Five years ago PCH conducted the first, and to date only, comprehensive survey characterizing Internet peering agreements. The document that resulted can be found here: https://www.pch.net/resources/Papers/peering-survey/PCH-Peering-Survey-2011… <https://www.pch.net/resources/Papers/peering-survey/PCH-Peering-Survey-2011…> That document was one of the principal inputs to an important document that the OECD publishes every five years, one that recommends communications regulatory policy to OECD member nations: http://www.oecd.org/officialdocuments/publicdisplaydocumentpdf/?cote=DSTI/I… <http://www.oecd.org/officialdocuments/publicdisplaydocumentpdf/?cote=DSTI/I…> The survey had several useful findings which hadn’t previously been established as fact—most notably the portion of peering relationships that are “handshake” agreements, without written contract. These findings have improved the regulatory environments in which many of us operate our networks. At the time of the 2011 survey, we committed to repeating the survey every five years, so as to provide an ongoing indication of the direction peering trends take. It’s now five years later, so we’re repeating the survey. The survey is global in scope, and our goal is to reflect the diversity of peering agreements in the world; we’re interested in large ISPs and small ISPs, ISPs in Afghanistan and in Zimbabwe, bilateral agreements and multilateral, private and public. Our intent is to be as comprehensive as possible. In 2011, the responses we received represented 86% of all of the world’s ISPs and 96 countries. We would like to be at least as inclusive this time. Privacy: In 2011, we promised to collect the smallest set of data necessary to answer the questions, to perform the analysis immediately, and not to retain the data after the analysis was accomplished. In that way, we ensured that the privacy of respondents was fully protected. We did as we said, no data was leaked, and the whole community benefited from the trust that was extended to us. We ask for your trust again now as we make the same commitment to protect the privacy of all respondents, using the same process as last time. We are asking for no more data than is absolutely necessary. We will perform the analysis immediately upon receiving all of the data. We will delete the data once the analysis has been performed. The Survey: We would like to know the following five pieces of information relative to each Autonomous System you peer with: • Your ASN • Your peer’s ASN (peers only, not upstream transit providers or downstream customers) • Whether a written and signed peering agreement exists (the alternative being a less formal arrangement, such as a "handshake agreement") • Whether the terms are roughly symmetric (the alternative being that they describe an agreement with different terms for each of the two parties, such as one compensating the other, or one receiving more or fewer than full customer routes) • Whether a jurisdiction of governing law is defined • Whether IPv6 routes are being exchanged (this year, we’ll still assume that IPv4 are) The easiest way for us to receive the information is as a tab-text or CSV file or an Excel spreadsheet, consisting of rows with the following columns: Your ASN: Integer Peer ASN: Integer Written agreement: Boolean Symmetric: Boolean Governing Law: ISO 3166 two-digit country-code, or empty IPv6 Routes: Boolean For instance: 42 <tab> 715 <tab> false <tab> true <tab> us <tab> true <cr> 42 <tab> 3856 <tab> true <tab> true <tab> us <tab> true <cr> We are asking for the ASNs only so we can avoid double-counting a single pair of peers when we hear from both of them, and so that when we hear about a relationship in responses from both peers we can see how closely the two responses match, an important check on the quality of the survey. As soon as we've collated the data, we'll strip the ASNs to protect privacy, and only the final aggregate statistics will be published. We will never disclose any ASN or any information about any ASN. We already have more than 8,000 ASN-pair relationships documented, and we hope to receive as many more as possible. We'd like to finish collecting data by the end of September, about two weeks from now. If you’re peering with an MLPA route-server, you’re welcome to include just the route-server’s ASN, if that’s easiest, rather than trying to include each of the peer ASNs on the other side of the route-server. Either way is fine. If all of your sessions have the same characteristics, you can just tell us what those characteristics are once, your own ASN once, and give us a simple list of your peer ASNs. If your number of peers is small enough to be pasted or typed into an email, rather than attached as a file, and that’s simpler, just go ahead and do that. If you have written peering agreements that are covered by non-disclosure agreements, or if your organizational policy precludes disclosing your peers, but you’d still like to participate in the survey, please let us know, and we’ll work with whatever information you’re able to give us and try to ensure that your practices are statistically represented in our results. If you're able to help us, please email me the data in whatever form you can. If you need a non-disclosure, we're happy to sign one. Finally, if there are any other questions you’d like to see answered in the future, please let us know so that we can consider addressing them in the 2021 survey. The question about IPv6 routing in this year’s survey is there because quite a few of the 2011 respondents asked us to include it this time. Please respond by replying to this email, before the end of September. Thank you for considering participating. We very much appreciate it, and we look forward to returning the results to the community. -Bill Woodcock Executive Director Packet Clearing House

1 0