- NZNOG - lists.nznog.org

Re: [nznog] Counting Teredo traffic...
by Nathan Ward 21 Feb '10

21 Feb '10

Sorry, I know you replied off list but you're not the first person to talk about these sorts of things with me so I'm replying on list so more people benefit. On 22/02/2010, at 11:04 PM, Joel Wiramu Pauling wrote: >> No. >> Teredo servers are using for essentially control traffic. >> Teredo relays move data to/from the native IPv6 network (non-Teredo). >> >> Unless you really really know what you're doing, don't run a Teredo server. Run a Teredo *relay*. > > Sure, but you might want to do both so you can both: > > a) Grab the control traffic so it does not leave the network for > instances where it's impracticle to specify a teredo server to edge > clients. > b) Tell it to use your relay -> Feed into your native v6 > infrastructure and benefit from not having potentially long inefficent > routes. > c) This would work where you have v6 but for whatever reason can't get > it out to the edge. And don't want to push a tunnel client etc out. > (not ideal but, it's just another option in the whole transition > ecosystem). No, that won't work. 1) Your customer sends an ICMPv6 echo request to a web server, through your Teredo server (but they really mean to sent it elsewhere) 2) You send it to some server of yours that is configured to respond to every ICMPv6 echo request, with the source address set to the destination address of the request. 3) ICMPv6 echo reply goes through your Teredo relay, and then to the customer. 4) Customer's Teredo stack detects your relay's IPv4 and UDP port. 5) Customer sends a TCP SYN to the web server, through your relay. 6) Your relay decapsulates it, and sends it on to the IPv6 network, probably over a longer path than it would take than an automatically discovered relay would use. 7) No worry though, because the SYN+ACK will come back through the better relay. 8) Your customer will detect the IPv4 address and UDP port of the new, better relay. Don't try to shoe horn Teredo in to doing these things, it's designed to be hard for ISPs to control, quite intentionally. Install a relay when you roll out your native IPv6 network and move on. > It's essentially your TUI box idea, with dns hacks. ;-) Not really, the only thing that the Tui boxes do with Teredo is relay. They aren't Teredo servers. You could probably configure one to be because they just have Miredo inside, but that's not what they're for. The Tui boxes are also 6to4 relays, and they build a peering mesh over IPv4 best-paths between other Tui boxes. The only similarities between what you're proposing, and Tui, is that they both implement parts of Teredo. -- Nathan Ward

2 2

Counting Teredo traffic...
by Joel Wiramu Pauling 21 Feb '10

21 Feb '10

So, what is the best way to count teredo traffic on their networks, assume I just want packet counts and nothing else. * I know that if I have netflows I can look for the 2001:0000: address marker inside packets, but this is a) resource intensive, b) assumes I have full netflows. * I can also count traffic originating from the various teredo relays/servers... but this again would require being able to mark a full flow and track things Does anyone know of a better way or at least other techniques? Kind regards -JoelW

3 4

Re: [nznog] Proxy/online voting for APNIC EC election opens today
by jamie baddeley 18 Feb '10

18 Feb '10

Calling all APNIC account holders! Vote early! vote often! One of the names below will be strangely familiar to you. pass it on. jamie On Fri, 2010-02-19 at 19:26 +1100, Secretariat wrote: > _______________________________________________________________________ > > Proxy/online voting for APNIC EC election opens today > _______________________________________________________________________ > > > Online and proxy voting for the APNIC Executive Council (EC) election > opens today. The online/proxy voting period is only open until 09:00 > (UTC+8, Kuala Lumpur time), 3 March 2010. The EC Members whose > positions > are up for re-election are: > > - Akinori Maemura > - Che-Hoo Cheng > - Ma Yan > > The current nominees are: > > - Ma Yan > - Vinh Ngo > - Akinori Maemura > - Ravi Shanker > - Che-Hoo Cheng > - Jonny Martin > > APNIC Member organizations can vote using MyAPNIC. > > Online voting is available to APNIC Member Corporate Contacts and > Member Contacts with voting rights. By default, all Corporate Contacts > have voting rights, and can assign voting rights to other contacts. > > MyAPNIC (https://myapnic.net/) > > Full details of the election, including profiles of the candidates > and alternative voting methods are available at: > > http://meetings.apnic.net/29/elections/ec > > If you have any questions or need further assistance, please contact: > > helpdesk(a)apnic.net > > > _______________________________________________________________________ > > APNIC Secretariat > secretariat(a)apnic.net > Asia Pacific Network Information Centre (APNIC) Tel: +61 7 3858 3100 > PO Box 2131 Milton, QLD 4064 Australia Fax: +61 7 3858 3199 > Level 1, 33 Park Road, Milton, QLD http://www.apnic.net > _______________________________________________________________________ > To remove yourself from this email list click here >

1 0

IPv6 NZ name and shame page.
by Joel Wiramu Pauling 18 Feb '10

18 Feb '10

A while back there was a page which was querying major .nz sites for various ipv6 reachability. What happened to this page does it still exist, and if so can someone please furnish me with the URL. Kind regards -Joel W Pauling

3 2

Telecom interconnection
by Simon Lyall 18 Feb '10

18 Feb '10

I believe this is a followup to something that was mentioned at NZNOG. ---- Telecom to restart IP interconnection talks Telecom is signalling a restart to interconnection talks ahead of a planned December 2011 launch for IP interconnection charging. [..] http://computerworld.co.nz/news.nsf/telecommunications/telecom-to-restart-i… -- Simon Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT.

5 4

Have your say on the APNIC Meeting Program and win!
by Elly Tawhai 17 Feb '10

17 Feb '10

_______________________________________________________________________ Have your say on the APNIC Meeting Program and win! _______________________________________________________________________ Hi NZNOG Community, As you may know, APNIC conferences are held twice a year, one in collaboration with APRICOT, and the other, stand-alone. It is important that APNIC present content that reflects what you consider as the most up-to-date and relevant for your work. APNIC invites you to share your feedback on what topics we should present in our conference so that we can continue to offer a valuable and content-rich program for our Members and other delegates. Please participate in this important exercise, whether or not you are an APNIC Member, or have attended a previous APNIC conference. To express our appreciation for your time and effort, APNIC will provide a fantastic prize to one randomly picked respondent. You can Participate in the survey at https://www.surveymonkey.com/s/ConferenceProgramSurvey With sincere thanks in advance for your assistance. _______________________________________________________________________ APNIC Secretariat Asia Pacific Network Information Centre (APNIC) Tel: +61-7-3858-3100 PO Box 2131 Milton, QLD 4064 Australia Fax: +61-7-3858-3199 Level 1, 33 Park Road, Milton, QLD http://www.apnic.net _______________________________________________________________________

1 0

SNMPv3
by Nathan Ward 17 Feb '10

17 Feb '10

I'm doing some work for a customer that involves SNMP stuff, and we've been talking about SNMPv3 and there was a comment that while $tool and $elements can use SNMPv3 they haven't done it yet. It's made me wonder about how pervasive SNMPv3 is, and the skill level out there of people who understand SNMP in general. So, quick survey that might inspire a choreographed rant from me at the next NZNOG. If you can't answer one or two questions that's OK, SNMP can be a bit weird. - Are you using SNMPv3? - Why/Why not? - Are you using contexts? - Auth, privacy, both? - Does your organisation have much SNMP(1|2c|3) skill - do you know how to interpret MIB files, do queries, do one-off short-term real-time monitoring of devices, and things like that? - Do you have your own enterprise ID (PEN)? Do you write your own MIB files? -- Nathan Ward

1 0

50/8 and 107/8 allocated to ARIN
by Leo Vegoda 16 Feb '10

16 Feb '10

Hi, The IANA IPv4 registry has been updated to reflect the allocation of two /8 IPv4 blocks to ARIN in February 2010: 50/8 and 107/8. You can find the IANA IPv4 registry at: http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.txt Please update your filters as appropriate. There are 22 unallocated unicast IPv4 /8s. Regards, Leo Vegoda Number Resources Manager, IANA ICANN

1 0

DIA Filters
by Tony Wicks 16 Feb '10

16 Feb '10

I don't suppose anyone is prepared to comment on If particular ISP's intend to adopt whatever this is ? http://www.zdnet.com.au/news/communications/soa/NZ-s-filter-starts-next- month/0,130061791,339301140,00.htm Tony Wicks | Network Architect Team Leader DDI +64 9 978 8328 | Mobile +64 21 965362 <<Picture (Device Independent Bitmap)>> The information contained in this e-mail is confidential and may be legally privileged. If you have received it in error, you may not read, use, copy or disclose this email. If you are not the intended recipient, please let us know by reply e-mail immediately and then delete this email from your system. We shall not be responsible for any changes to, or interception of, this email or any attachment after it leaves our information systems. We accept no responsibility for viruses or defects in this email or any attachments.

11 12

Mail filters - vector.co.nz
by Simon Lyall 16 Feb '10

16 Feb '10

A very literal filter. ------------------- A mail from you (nznog-bounces(a)list.waikato.ac.nz) to (xxxx(a)vector.co.nz) was stopped and Quarantined because it contains objectionable content. objectionable content (file 234443, line 5, weight 100) ------------------- Translation: It is blocking the phrase "objectionable content" -- Simon Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT.

1 0