- NZNOG - lists.nznog.org

Re: [nznog] Who's fibre?
by Stu Fleming 03 Dec '13

03 Dec '13

Jon Brewer: "That's hilarious. There's always a receptionist with keys to the basement or pabx room that will give up keys without asking questions if you've got an orange vest and a decent looking id card." That rules out Chorus then. They can't install anything in a shared building without a 90-day lead time and a mountain of consent paperwork. Also the procedure for obtaining a roof key is slightly more complex as it usually involves the receptionist first a) checking that you are in a happy, smiling mood and b) cautioning you sternly to "make sure you don't fall off"

2 1

Multi-homing without PI space
by Richard Hulse 30 Nov '13

30 Nov '13

Very late to the party... Matthew, if you want to contact me off list I'd be happy to share our experience with becoming an AS, multi-homing, anycast, self-hosting and anything else you might find useful. Cheers, Richard Radio New Zealand Disclaimer Emails sent by Radio New Zealand Limited (RNZ) or any related entity, including any attachments, may be confidential, protected by copyright and/or subject to privilege. If you receive an email from RNZ in error, please inform the sender immediately, delete it from your system and do not use, copy or disclose any of the information in that email for any purpose. Emails to/from RNZ may undergo email filtering and virus scanning, including by third party contractors. However, RNZ does not guarantee that any email or any attachment is secure, error-free or free of viruses or other unwanted or unexpected inclusions. The views expressed in any non-business email are not necessarily the views of RNZ www.radionz.co.nz<http://www.radionz.co.nz>

1 0

NZ download speed improvement
by Nicholas Lee 28 Nov '13

28 Nov '13

http://www.pcworld.co.nz/article/483086/new_zealand_ranks_43rd_online_downl… 25 May, 2010 "It found that over the past 30 days, Kiwis testing their connections on its two source sites recorded average *download speeds of 5.96 Mbit/s*. When it came to upload speeds, New Zealand ranked 42nd, with an average speed of 1.3 Mbit/s." There seems to have been a reasonable improvement: http://www.netindex.com/download/allcountries/ 42 New Zealand - 17.02 Mbps 49 Australia - 14.23 Mbps High density fibre installations like they have in HK would be nice: 1. Hong Kong - 71.01 Mbps Nicholas

1 0

Re: [nznog] Advertising /32 externally via BGP
by Tony Wicks 22 Nov '13

22 Nov '13

You need a high metric null route for that /32. Liam Farr <liamfarr(a)me.com> wrote: >Hi,I'verunintoabitofadumbproblem,hopefullysomeoneherecanpointmeintherightdirection.Ireceivearoutetoa/28fromamemberofmyBGPconfederation,(the/28isonadirectlyconnectedinterfaceofthisrouter)viaBGPtooneofmyedgerouters,andIwishtoadvertiseaspecific/32fromthis/28toanexternalBGPpeer(upstreamprovider)fromthisedgerouter.Icanuseroute-mapsandprefix-lists,todefineaBGPexportpolicytoonlyexportthe/32totheexternalneighborwithoutissue.WhereIgetstuckisgettingthe/32intomyroutetable,essentiallyIneedtode-aggregatethe/28downtoa/32?Isthereanaccepted"bestpractice"wayofdoingthis?Apologiesifthisisastupidquestion,I'veneverrunintothisissuebefore,andGoogleisn'tgivingmemuchhelp.CheersLiamFarr

1 0

Advertising /32 externally via BGP
by Liam Farr 22 Nov '13

22 Nov '13

Hi, I've run into a bit of a dumb problem, hopefully someone here can point me in the right direction. I receive a route to a /28 from a member of my BGP confederation, (the /28 is on a directly connected interface of this router) via BGP to one of my edge routers, and I wish to advertise a specific /32 from this /28 to an external BGP peer (upstream provider) from this edge router. I can use route-maps and prefix-lists, to define a BGP export policy to only export the /32 to the external neighbor without issue. Where I get stuck is getting the /32 into my route table, essentially I need to de-aggregate the /28 down to a /32? Is there an accepted "best practice" way of doing this? Apologies if this is a stupid question, I've never run into this issue before, and Google isn't giving me much help. Cheers Liam Farr

1 1

Orcon contact
by Geraint Jones 21 Nov '13

21 Nov '13

Can someone from orcin please contact me off list. Thanks

1 0

Thursday's security amusement!
by Tim Hoffman 21 Nov '13

21 Nov '13

This is vaguely operational and fairly amusing - one of our friendly LFC’s might want to sort their…ahem….levels of security fail! https://www.google.co.nz/search?q=inurl%3A%2F%2Fhttp%3A%2F%2Fwww.ultrafastf… And to keep it on topic - beer! Cheers, —hoff <views do not represent anyone I may or may not work for etc etc>

6 6

The New Threat: Targeted Internet Traffic Misdirection
by Sebastian Castro 19 Nov '13

19 Nov '13

The link below is an article from Renesys about prefix hijacking they've observed. So far until now, those events were not considered as attacks, but "misconfigurations". http://www.renesys.com/2013/11/mitm-internet-hijacking/ We've seen one of those events on our infrastructure, which lasted a few minutes, and it was detected by BGPmon. Is it moment to push RPKI? Topic to discuss during the next NZNOG meeting? Cheers, -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

2 1

Encryption of national/international information
by Juha Saarinen 19 Nov '13

19 Nov '13

Yahoo’s following Google’s example and will “encrypt all information that moves between our data centres by the end of Q1 2004” : http://yahoo.tumblr.com/post/67373852814/our-commitment-to-protecting-your-… Would this be permitted in NZ? -- Juha Saarinen twitter: juhasaarinen

6 7

Video about SFQ and uplinks
by Pieter De Wit 17 Nov '13

17 Nov '13

Hey List, A while ago someone posted to this list (I am sure it was....) a link to a youtube video about uplinks and why we should do QoS. I tried searching the archives but can't find. Would someone mind pointing me in the right direction for it please ? Thanks !

4 5