- NZNOG - lists.nznog.org

Advisory - D-root is changing its IPv4 address on the 3rd of January
by Sebastian Castro 13 Dec '12

13 Dec '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Original message can be found here https://lists.dns-oarc.net/pipermail/dns-operations/2012-December/009428.ht… - ------------------------------------------- Advisory ? D-root is changing its IPv4 address on the 3rd of January. This is advance notice that there is a scheduled change to the IPv4 address for one of the authorities listed for the DNS root zone and the .ARPA TLD. The change is to D.ROOT-SERVERS.NET, which is administered by the University of Maryland. The new IPv4 address for this authority is 199.7.91.13 The current IPv6 address for this authority is 2001:500:2d::d and it will continue to remain unchanged. This change is anticipated to be implemented in the root zone on 3 January 2013, however the new address is currently operational. It will replace the previous IP address of 128.8.10.90 (also once known as TERP.UMD.EDU) We encourage operators of DNS infrastructure to update any references to the old IP address, and replace it with the new address. In particular, many DNS resolvers have a DNS root ?hints? file. This should be updated with the new IP address. New hints files will be available at the following URLs once the change has been formally executed: http://www.internic.net/domain/named.root http://www.internic.net/domain/named.cache The old address will continue to work for at least six months after the transition, but will ultimately be retired from service. - --------------------------------------------------- Kind Regards, - -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlDLakMACgkQWyqRrHcQWTmrzQCfeDQ0SZX9Wlf3unUUgu5f0pVZ ODQAn3ETzMd0WsaynqnJzX2bHPlPOF8y =5dXZ -----END PGP SIGNATURE-----

1 0

NZ scores first OpenFlow controlled connection to an IX
by Dean Pemberton 10 Dec '12

10 Dec '12

Hi all, Just wanted to share with you all what we think is a world first, right here in New Zealand. Today New Zealand can boast the first SDN controlled OpenFlow switch BGP peering with a public Internet Exchange. Because you're all geeks, I've decided to write the rest of the email as a FAQ: Q: What is SDN and/or OpenFlow? A: It's a new way of thinking about and building network devices. It stands for Software Defined Networking. It's basically a way to separate the control plane from the data plane in order to allow you unprecedented control over what your network can do, while still keeping it blindingly fast. You let the Software do what it's good for (running routing protocols, making policy decisions) and you let the Hardware do what it's good at (forwarding stuff at wire speed, zoooooom!). A match made in heaven Have a look at the wikipedia page http://en.wikipedia.org/wiki/Software-defined_networking Or this presentation from OpenFlow http://www.openflow.org/documents/OpenFlow_2011.pps Q: Why do I care? A: SDN and OpenFlow allow you much more control and flexibility over your network. It's a new technology however, and people are yet to begin playing with it. Q: Sounds like one of those scary technologies like IPv6 and DNSSEC. A: Well if you mean that other people are doing it while you're ignoring it and hoping that it will go away... Then you're right. =) Just like IPv6, before we saw people willing to deploy it on their networks they needed to get some experience with how it worked. We're at that stage with SDNs at the moment. It is because of this need for more experience and public awareness that we've gone ahead with this little project. Q: So what exactly have you done. A: We've deployed an OpenFlow controlled switch on the WIX and along with an OpenFlow controller built a BGP capable router. Q: Details? A: From the WIX looking glass Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 202.7.0.119 4 9483 24345 27397 0 0 0 07:21:59 1 Q: So what? Is that it? A: Hardly. We've got some more phases that we want to develop, so I guess this is a watch this space. Over the next few months, we'll be working on extending past this single box with a view to demonstrating to the NZ Internet community, and beyond, whats really possible with an SDN. Basically we don't want New Zealand falling behind whats happening in the rest of the world. Q: We're not ready for this. It's scary, poke it with a stick!!! A: Thats fine. We've chosen to use New Zealand as the initial production deployment here. But if it looks like thats not going to get the traction needed, then there are other places which this would work in. Lets make this a good Kiwi development moment though. Remember how we're so proud of telling people we had EFTPOS so long before anyone else. Q: Pfffft I've heard of this. It doesn't work! It's not production ready A: Hi, Welcome to the conversation. You're just the sort of person we need paying attention. We're doing this so that people arn't LISTENING about SDN, but are actually seeing it WORK. In a real world production setting. We hope you can stay for the rest of the show. Q: So who else does SDNs. This sounds a little too much like witchcraft to me. A: Well from back in the days of the Juniper M-Series people have been separating Routing Engines from Packet Forwarding Engines. We then started to see multi chassis versions. This is just an extension of the same sort of concept. There are some organisations which run huge-scale SDN style networks. Maybe you've used a search engine or mail platform from one... Q: This sounds like a pretty heavy sales pitch. What are you pushing? A: CYNIC! Nothing. Just like the reason I'm pushing people to think about IPv6 and DNSSEC, I want to see the New Zealand Internet community as a technology innovator, not just someone who swallows down the latest vendor slide-ware. And hey if SDN doesn't work then at least New Zealand still gets to write the book on it. Q: Sounds cool, can I help? A: Sure, anyone's welcome to come and learn along with the rest of us. Drop me a line if you think you can help and we'll see where we can fit you in. As a starter I'm looking for between 1 and 3U of space in Auckland with access to the APE. Q: Where can I hear more. A: If you're lucky I might do a lightning talk on where we've got to and where we're going at the NZNOG conference. Thanks to Prophecy Networks, REANNZ, VUW, Waikato University, Citylink, FX Networks and others, for their contributions and support in getting the project to where it is today and for not wanting it to stop there! Regards, Dean

3 4

Commsday: Russia, allies back off proposal to extend regulation across Internet
by Skeeve Stevens 10 Dec '12

10 Dec '12

Hey all, This was in this mornings Commsday. Seems like great news ...Skeeve ============================================== *Russia, allies back off proposal to extend regulation across Internet* * * In an extraordinary development late last night, Russia and its allies China, Saudi Arabia, Sudan, Egypt and the United Arab Emirates withdrew a radical proposal to overhaul international telecommunications regulations which would have given national governments sweeping new powers to regulate global ICT service providers such as Facebook and Twitter as well as Internet governance. CommsDay was told by sources that International Telecommunications Union secretary-general Hamadoun Toure personally intervened to persuade the Russians to withdraw their proposal following American threats to walk out of the World Conference on International Telecommunications if the revisions were considered for ratification. In a fast moving night:  United States delegation chief Ambassador Terry Kramer denied comments attributed to him by Dow Jones that his country would walk out of the conference if it sought to regulate Internet content. CommsDay has confirmed with Dow Jones that he made the comments now denied.  Russia withdrew, without explanation, a proposal with China, Saudi Arabia, Sudan, Egypt and the United Arab Emirates that would massively increase the ambit of international telecommunications regulations to cover almost all telecommunications and Internet activities. The proposal, leaked on Saturday, was disowned by a member of the Egyptian delegation which last night made a strong statement in favour of Internet freedom. This hinted at serious dysfunction behind the Russian-led coordination efforts.  A steering committee was immediately convened to get the conference, in danger of collapse, back on track. There was reportedly applause in the committee room as progress was made, especially on the detail of who the revised regulations might apply to. However access to the room was blocked by guards. Previously there were concerns that loose wording could extend the ambit of the regulations as far as users of virtual private networks and ham radio operators. The secretive machinations of a working group—the so-called Committee 5—will now apparently give way to open plenary sessions. Observers tell CommsDay that the radical Russian proposals had the effect of galvanising the conference into action. Although Russia and allies have formally withdrawn their proposed treaty revision, other countries may still attempt to advance some of the main points. Australian delegate Dr Bob Horton is believed to have played a major role last night, chairing an ad hoc meeting attempting to resolve the arguWCIT bombshell: SG averts collapse of conference LEAKED: The Russia-led proposalent over how Internet traffic is charged. African states and their supporters seek to restore the old voice traffic settlements regime for Internet traffic to provide a revenue source. The result of these efforts was unclear as we went to press 5AM Australian Eastern Summer Time. CommsDay was told last night that secretary general Toure personally called top Russians and asked them to back off because this would split the conference nproductively. “The head of delegation, considered a young tyro, apparently acted on his own and they shot him down. Partial confirmation is that Touré personally delivered the news to regional meetings before it was announced.” our source said, emphasising this was not officially confirmed. CommsDay sources say that the US delegation’s hundred-plus members fanned out to meet with almost every participating country in a last ditch effort to block the Russia-led move over the weekend. On sheer numbers, the Russia-led proposal would probably win a majority vote but there is an overriding preference by the ITU to forge a consensus on the eventual outcome. The alternative was a walkout by the US delegation and potentially some of its core allies. According to the .nxt website, Poland had also threatened to walk from the event. Australia generally supports the US position backing the status quo on Internet governance. CIVIL SOCIETY OBJECTS: Meanwhile, a group of civil society organisations from the US, Europe, India and Africa has slammed the ITU and WCIT process for a lack of transparency and input from outside groups. In a letter to the ITU, they state “Now that the conference is in session, we wish to call your attention to three immediate and pressing matters: the lack of any official standing to the public comments solicited prior to WCIT at the ITU’s invitation; the lack of access to and transparency of working groups, particularly the working groups of Committee 5; and the absence of mechanisms to encourage independent civil society participation.” ======== To subscribe to Commsday, please visit: http://www.commsday.com/ * * *Skeeve Stevens, CEO - *eintellego Pty Ltd <http://www.commsday.com/> <http://www.commsday.com/> <http://www.commsday.com/>skeeve(a)eintellego.net ; www.eintellego.net Phone: 1300 753 383; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellego ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/networkceoau ; blog: www.network-ceo.net The Experts Who The Experts Call Juniper - Cisco – IBM - Brocade - Cloud ----- Check out our Juniper promotion website! eintellego.mx Free Apple products during this promotion!!!

1 0

.nz Second Key Generation Procedure
by Sebastian Castro 06 Dec '12

06 Dec '12

To the Technical Community: On December 5th 2012, NZRS successfully carried out the Second Key Generation Procedure. During this event, the cryptographic keys required to sign the .nz zones with DNSSEC for the next year were created. During the procedure NZRS also purged the keys that were not longer needed due to key rollovers. More details and links to the documentation trail created by the procedure can be found at https://nzrs.net.nz/content/second-key-generation If you have any questions, feel free to reply to this message or contact us privately. Have a great weekend, -- Sebastian Castro DNS Specialist .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0

O/T: Request for hardware - 0.5m or 1m Mini SAS 36-Mini SAS 36
by James Baker 06 Dec '12

06 Dec '12

Sorry for the O/T; we're in a bit of a bind and need to find some internal 0.5m or 1m Mini SAS 36-Mini SAS 36 cables ( http://ultracartcgm.s3.amazonaws.com/TMCSC/1876/sas/internal/minisas36-mini… ) I need 4 but stocks seems to be 1 or less. Or a looong lead time. Does anyone know of any stock or does anyone have any handy? Thanks James

1 0

Telstra / Android updates - CDN issues?
by Leon Strong 04 Dec '12

04 Dec '12

Anyone else using any Telstra ip's that are being served by the Telstra/Google/CDN and noticing all android apps are failing? Notice on the redirector that i'm being directed to tnz1, seems to work fine on any other network. Any telstra peeps reading this hear anything from your side? _____________________________________________________________________________ This email has been filtered by SMX. For more information visit smxemail.com _____________________________________________________________________________

2 2

dmzglobal.ape.nzix.net - Packet Filtered
by Chris Hodgetts 03 Dec '12

03 Dec '12

Hello, I know this might not be the correct forum, but thought I would ask. I am trying to get to a govt. departments website, and its VERY slow.. I am seeing this on a ping and traceroute: chris(a)molly:~$ ping rsm.govt.nz PING rsm.govt.nz (116.89.228.176) 56(84) bytes of data. >From dmzglobal.ape.nzix.net (192.203.154.118) icmp_seq=1 Packet filtered >From dmzglobal.ape.nzix.net (192.203.154.118) icmp_seq=2 Packet filtered >From dmzglobal.ape.nzix.net (192.203.154.118) icmp_seq=4 Packet filtered Traceroute: 1. 192.168.100.1 0.0% 25 0.2 0.2 0.2 0.3 0.0 2. 192.168.1.1 0.0% 25 0.5 1.1 0.5 1.6 0.5 3. llu.bng1.nct.orcon.net.nz 0.0% 25 16.2 18.2 14.2 24.4 3.2 4. xe-2-2-0.cre1.nct.orcon.net.nz 0.0% 25 14.3 19.8 13.7 64.4 13.5 5. ge-0-3-0-0.cre1.sky.orcon.net.nz 0.0% 25 15.5 21.2 13.9 111.3 22.0 6. ??? Not sure if it's me, but it appears to be leaving my network OK .. and either getting lost leaving orcon, or having issues at WIX? Might be MED/RSM but is it normal to have nzix doing that? Cheers, and back to beer on such a lovely day..

3 4

DNS format error: their fault or mine?
by Richard Hector 29 Nov '12

29 Nov '12

Sorry if this is off topic. I'm seeing a bunch of this (and have been for ages) in my bind logs: http://pastebin.com/ydL0RhG4 (sample line for archives, when paste goes away: Nov 28 23:14:58 jet named[28427]: DNS format error from 120.204.202.200#53 resolving ns-os1.qq.com/AAAA: invalid response ) My understanding is qq.com is a Chinese IM service (which my flatmate uses). Dig doesn't tell me about any error; it merely doesn't return any AAAA records. Any suggestions on: - whether I should care, or just filter it out of my logcheck email - whether there's something I can fix - whether there's something I can do to figure out in more detail what's happening Note that this is my caching NS, on my home network (behind NAT) Thanks, Richard

6 9

Fw: [members-discuss] Invitation: The untold history of the Internet by Martin Geddes
by Donald Clark 26 Nov '12

26 Nov '12

Hopefully you'll forgive the cross posting. but if anyone out there wants to defend the honour of TCP, they may want to turn up to this… Lots of Martin's stuff is available on SlideShare if you want to explore... Forwarded message: > From: Vikram Kumar <vikram(a)internetnz.net.nz> > Reply To: InternetNZ Members Discussion List <members-discuss(a)mailman.internetnz.net.nz> > To: InternetNZ Members Discussion List <members-discuss(a)mailman.internetnz.net.nz> > Date: Tuesday, 27 November 2012 3:13:23 PM > Subject: [members-discuss] Invitation: The untold history of the Internet by Martin Geddes > > Hi, > > We are organising a talk by Martin Geddes in Wellington at 5 pm on Tuesday, 11th Dec, at InternetNZ's office. > > Martin will tells us the untold history of the Internet, and the unfortunate design errors now baked into every network router. He will also answer a series of provocative questions about the future. > > Details at https://internetnz.net.nz/news/blog/2012/Invitation-untold-history-Internet… > > We will have pizza after the talk to keep the discussion going. > > Please RSVP if you are coming so there is enough pizza for everyone. Please also invite anyone you think might be interested. > > Thanks and hope to see you then, > Vikram >

2 2

Re: [nznog] NZNOG Digest, Vol 119, Issue 14
by Sean Linton 24 Nov '12

24 Nov '12

Thanks, Sam, David, and Dean - Nothing specific motivated my enquiry. Its good to hear some of your thoughts on the issue. And good to see nznog, and in2security had a presence at NetHui_South over the weekend. Cheers, sean On 19 November 2012 12:00, <nznog-request(a)list.waikato.ac.nz> wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via the World Wide Web, visit > http://list.waikato.ac.nz/mailman/listinfo/nznog > or, via email, send a message with subject or body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > > Today's Topics: > > 1. please keep an eye out (Richard Naylor) > 2. Re: youth outreach? (Sam Sargeant) > 3. Re: youth outreach? (David Robinson) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sun, 18 Nov 2012 19:41:24 +1300 > From: Richard Naylor <richard.naylor(a)R2.co.nz> > To: nznog(a)list.waikato.ac.nz > Subject: [nznog] please keep an eye out > Message-ID: <20121118064123.BD29B2A061(a)sif.iconz.co.nz> > Content-Type: text/plain; charset="us-ascii"; format=flowed > > > Just a small advisory. I bought 1.5km of fiber for NetHui this week > and it was stolen from the supplier (Corys/Mastertrade) before I got > there to collect it. Its 12 core D-series, single mode LSZH cable > cut as 2x750m. The CCTV footage shows it stolen from the loading bay. > > So if you get offered some cheap fiber, I'm sure Corys would be very > pleased to hear from you. > > Replacement fiber arrived friday pm in one length. After a lot of > winding and splicing, the van is all loaded ready to roll tomorrow. > > I was suspicious that the folks mad keen on cable laying through the > roaring 40's to South America, had nicked it as a part of their project. > > Richard > > > > ------------------------------ > > Message: 2 > Date: Mon, 19 Nov 2012 09:33:39 +1300 > From: Sam Sargeant <sam.sargeant(a)gmail.com> > To: Sean Linton <sean(a)lpnz.org> > Cc: nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] youth outreach? > Message-ID: <3D1F2ED3-22BD-4D20-93A8-5B2D3B926153(a)gmail.com> > Content-Type: text/plain; charset="us-ascii" > > On 17/11/2012, at 11:21 AM, Sean Linton <sean(a)lpnz.org> wrote: > > > How has the NZNOG community previously ensured that when a few key > people decide to do something else the organisation doesn't get into > trouble, so new blood keeps coming through? > > Hi Sean, > > Aside from the team of trustees and conference helpers there's no other > organisation to speak of so I'm assuming that's what we're talking about. > > From what I can see there are a couple of trustees who have been appointed > in the last year. If you missed it during the last NZNOG in Christchurch > I'm sure they'll be happy to introduce themselves. On the organising > committee there have been 3-4 new faces in the last two years before I > stopped doing any of the conference work. > > I don't think these have been community efforts; people on the team have > organised themselves quietly enough that I'd guess the wider community was > unaware of any changes. Perhaps you and the list could give feedback on > this approach? I'm wondering if there was something specific that triggered > your question. > > Sam. > >

1 0