- NZNOG - lists.nznog.org

Comcom/Samknows broadband testing from a different perspective
by Dylan Hall 26 Sep '18

26 Sep '18

Hi all, I'm wearing my REANNZ hat today. I thought I'd share what we're seeing hosting the M-Lab [1] nodes in NZ that the new Comcom/Samknows [2] broadband testing are using for some of their tests. For a start, it looks like the testing has been ramping up over the last week (see attached graph), in particular during the evening (6pm-midnight). I had assumed the testing would be evenly spread out throughout the day, but it looks like they're concentrating the testing during the busy evening period. If anyone is interested in following how that traffic grows we have publicly available graphs for the two M-Lab nodes: AKL: https://weathermap.reannz.co.nz/node.php?src=and01&int=xe_0_0_9 WLG: https://weathermap.reannz.co.nz/node.php?src=and02&int=xe_0_2_7 If you want to try out the M-Lab nodes themselves, type "speedtest" into a Google search box and there is a "Run Speed Test" option that uses M-Lab (at least in my copy of Chrome, your mileage may vary). The nodes each consist of 4 x Dell servers front ended by a Juniper QFX switch. They're connected at 10Gbps. The nodes are fully run by M-Lab, we're just providing some address space and capacity. If anyone is concerned about their connectivity to REANNZ, we're on all the major NZ exchanges (APE, WIX, CHIX, AKL-IX) where we peer with the route servers. I note Comcom have posted a FAQ [3] on their website with some more details. The nodes are also IPv6 connected with addresses allocated from 2404:138::/32. It's worth noting we've been hosting M-Lab nodes for around 5 years now, but no one from Comcom or Samknows has spoken to us about the testing so it's all come as a bit of a surprise to us. If you have any interesting information to share, we'd like to know more :) [1] https://www.measurementlab.net [2] https://comcom.govt.nz/regulated-industries/telecommunications/monitoring-t… [3] https://comcom.govt.nz/__data/assets/pdf_file/0032/98276/SamKnows-technical… Thanks, Dylan

1 0

Hello Hurricane Electric, doubling the size of our domestic table?
by Michael Fincham 18 Sep '18

18 Sep '18

Hi all, So my domestic tables now have some 76,000 prefixes in them, as of ~ 6:30 last night. I guess hello HE and welcome to AKL-IX? Domestic table for NZ was more like ~ 10,000 prefixes not that long ago! -- Michael

14 30

Juniper Lab
by Jesse Archer 16 Sep '18

16 Sep '18

Hi All, I've got some config that I'd like to lab but my own kit is tied up in a transition. Wondering if anyone has a spare MX5-MX80 they would be willing to fire up to allow me to perform some tests. Unfortunately, vMX doesn't quite work in this case. *Jesse Archer* *General Manager*Full Flavour *p. *07 577 0099 *ddi*. 07 281 1391 *s*. Skype "myfullflavour" *e*. jesse(a)fullflavour.nz <jesse(a)fullflavourmedia.co.nz> *w*. fullflavour.nz <http://www.fullflavourmedia.co.nz/> *a. *Basestation, 148 Durham Street, Tauranga *a*. PO Box 13403, Tauranga Central, Tauranga 3141, New Zealand

1 0

VPS with BGP
by Mehmet Akcin 08 Sep '18

08 Sep '18

Hello NZNOG Friends, long time. I am looking for a VPS hosting firm which support BGP advertisements for DNS anycast (for my experiement) 200GB Disk, 16 GB Memory , 4core cpu and small bandwidth running 18.04 Ubuntu Please contact me offlist if you are able offer this. thank you -- Mehmet +1-424-298-1903

1 0

Spoofer Report for NZNOG for Aug 2018
by CAIDA Spoofer Project 08 Sep '18

08 Sep '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Aug 2018: none inferred Source Address Validation issues inferred during Aug 2018: ASN Name First-Spoofed Last-Spoofed 4764 wideband-as-au 2018-08-16 2018-08-17 131291 LANWORXLIMITED 2018-08-24 2018-08-24 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

RFC 8145 Root Trust Anchor Reports
by Matthew Luckie 06 Sep '18

06 Sep '18

>From http://root-trust-anchor-reports.research.icann.org/ : The ICANN org is publishing the IP addresses that are sending RFC 8145 telemetry ostensibly indicating that a resolver at the reported address (or another resolver that is forwarding through the resolver at the address) is validating using only KSK-2010 as a trust anchor. Publishing these addresses allows ISPs and other organizations who know who operates resolvers at those addresses to contact the resolver operator and notify them of the need to update their DNSSEC trust anchors. Without further action, these resolvers will stop working after the root KSK is rolled on 11 October 2018. http://root-trust-anchor-reports.research.icann.org/rfc8145-addresses.txt The following ASes have their country recorded as NZ in whois, and are in the ICANN list. The following resolvers may or may not be operated by the ASN identified. 4771 Spark 122.56.234.219 122-56-234-219.mobile.spark.co.nz. 122.57.192.56 122-57-192-56-adsl.sparkbb.co.nz. 122.61.118.222 122-61-118-222-adsl.sparkbb.co.nz. 219.88.186.152 rns6.xtra.co.nz. 222.153.3.78 222-153-3-78-fibre.sparkbb.co.nz. 222.154.149.63 222-154-149-63-fibre.sparkbb.co.nz. 9500 Vodafone 203.96.208.52 akrdns2.akl.vf.net.nz. 203.96.208.61 akrdns3.akl.vf.net.nz. 203.96.208.62 akrdns4.akl.vf.net.nz. 203.96.208.91 cbrdns1.chc.vf.net.nz. 203.96.208.92 cbrdns2.chc.vf.net.nz. 210.246.17.115 210-246-17-115.dsl.dyn.ihug.co.nz. 2407:7000:ff00:5382:bd9d::1 2407:7000:ff00:5382:bd9d::2 49.224.251.45 45.251.224.49.dyn.cust.vf.net.nz. 23655 SNAP 111.69.178.254 254.178.69.111.dynamic.snap.net.nz. 111.69.195.153 153.195.69.111.dynamic.snap.net.nz. 24183 DTS 202.174.180.228 38793 2degrees 118.148.149.52 52-149-148-118.nzcomms.co.nz. 118.149.151.121 121-151-149-118.nzcomms.co.nz. 45177 Vibe 45.64.48.2 cdns-02.as45177.net. 45179 SiteHost 103.250.234.202 103-250-234-202.static.webslice.co.nz. 45267 Lightwire 114.134.0.194 114-134-0-194.lightwire.co.nz. 132347 MikiPro 2404:ab00:6:1::6 132692 GlobiCom 103.18.58.198 vpn2.torguardvpnaccess.com. 133607 Web Connect 103.51.101.28 135069 Feenix 103.208.143.164 103-208-143-164.feenix.co.nz. Further information is available at the ICANN site, and it might pay for other operators on NZNOG to double check the ICANN list. http://root-trust-anchor-reports.research.icann.org Matthew

1 0

NZNOG 2019 Workshop/Tutorials
by Dave Mill 03 Sep '18

03 Sep '18

Hi all As part of NZNOG we normally offer a 3 day workshop (Mon to Wed) and a few tutorials on the Wednesday. APNIC have the following workshops/tutorials offered at the moment. https://training.apnic.net/courses/ We're seeking feedback (on or off list) on what people may want. Note, most recently we've had a 1 day Network Security tutorial (Queenstown) and a 3 day MPLS workshop (Tauranga). Ideas for next year: -3 day Network Security -3 day Routing I -3 day SDN (5 days condensed in to 3 days) -3 day DNSSEC -1 day IPv6 essentials -1 day DNSSEC -1/2 day BGP techniques Or, what else would people like to see at NZNOG (workshop and tutorial wise) that APNIC don't offer? On-list discussion encouraged :) Cheers Dave

9 14

CFP AINTEC 2018 (in coop. with SIGCOMM), November 12 - 14, 2018 Bangkok, Thailand - Abstract registration due on August 18, 2018
by William Liu 10 Aug '18

10 Aug '18

Call for Papers 14th Asian Internet Engineering Conference (AINTEC) 2018, in cooperation with ACM SIGCOMM, November 12 - 14, 2018. Pullman Bangkok King Power Hotel, Bangkok, Thailand Website: http://www.interlab.ait.ac.th/aintec2018/ Paper submission: http://www.interlab.ait.ac.th/aintec2018/paper-submission.php Important dates ------------------------------ Abstract registration: August 18, 2018 Full paper submission: September 2, 2018 Acceptance notification: October 15, 2018 Camera-ready due: October 24, 2018 Conference dates: November 12-14, 2018 (Right after IETF 103 in Bangkok) IETF 103 Information: https://www.ietf.org/how/meetings/103/ The 14th Asian Internet Engineering Conference (AINTEC), in cooperation with ACM SIGCOMM, provides an international technical forum for experts from industry and academia. AINTEC especially aims at addressing issues pertinent to the Asia and Pacific region, with vast diversities of socio-economic and networking conditions, while inviting high quality and recent research results from the Internet research community at large. AINTEC 2018 follows the previous ten successful editions held in Thailand. The conference is single-track and features a technical program with significant opportunities for individual and small-group discussions among a diverse set of participants. The technical sessions will include invited talks by leading experts, presentations of papers, demos, posters. A student author of the AINTEC Best Paper Award affiliated in an Asian institution is eligible for the ACM SIGCOMM geo-diversity grant program to attend ACM SIGCOMM 2019. AINTEC 2018 solicits high quality papers that improve digital communications in diverse situations including, but not limited to: * Future Internet architectures and technologies * Networking technologies in developing regions * Internet measurement, analysis and modelling * Disaster networking, including experience with earthquakes and tsunamis * Sensor networking and applications * Wireless, mobile and ad hoc networks * Delay and disruption tolerant networks * Location management and positioning * Content diffusion with P2P, CDN or ICN * Multimedia systems and applications * Network operations and management * Quantum networking * Social networks * Network security * Cloud Computing and Services * Internet of Things * Network Acceleration * Blockchain Technology and Applications Paper submission ------------------------ Submissions must be original, unpublished work, and not have been submitted to another conference or journal for publication. Paper length cannot exceed 8 pages in the 10pts ACM SIGCOMM format. AINTEC 2018 proceedings will be included in the ACM Digital Library. Papers must be submitted in electronic format following the instructions provided on the AINTEC Web site: http://www.interlab.ait.ac.th/aintec2018/ Submission of a paper implies that should the paper be accepted for publication in the conference proceedings, at least one of the authors will register and present the paper in the conference. Authors of accepted papers must pay for their registration on or before the camera ready version deadline. Important dates ------------------------------ Abstract registration: August 18, 2018 Full paper submission: September 2, 2018 Acceptance notification: October 15, 2018 Camera-ready due: October 24, 2018 Conference dates: November 12-14, 2018 (Right after IETF 103 in Bangkok) Scientific Advisory Committee: Randy Bush, Internet Initiative Japan Inc., USA Erol Gelenbe, Imperial College, UK Jun Murai, WIDE Project and Keio University, Japan Keith W. Ross, Polytechnic Institute of NYU, USA Dario Rossi, Telecom ParisTech, France Surasak Sanguanpong, APAN-TH, Thailand Steering Committee: Kenjiro Cho, IIJ and WIDE Project, Japan Serge Fdida, UPMC, France Philippe Jacquet, INRIA, France Kanchana Kanchanasut, Asian Institute of Technology, Thailand Giovanni Pau, UPMC, France Aruna Seneviratne, NICTA, Australia Rodney Van Meter, WIDE Project, Keio University, Japan General Chair: Sukumal Kitisin, Kasetsart University, Thailand Kunwadee Sripanidkulchai, Chulalongkorn University, Thailand Technical Program Committee Co-Chairs: Cristel Pelsser, University of Strasbourg/ICube laboratory, France Shigeya Suzuki, WIDE Project, Keio University, Japan Technical Program Committee: Ignacio Castro, Queen Mary University of London, UK Roderick Fanou, CAIDA/UC San Diego, USA Kensuke Fukuda, National Institute of Informatics Japan, Japan Kei Hiroi, Nagoya University, Japan Pan Hui, University of Helsinki, Finland & HKUST, Hong Kong Oana Iova, INSA Lyon, France Kotaro Kataoka, IIT Hyderabad, India Andra Lutu, Simula, Norway Matthew Luckie, University of Waikato, New Zealand Kanae Matsui, Tokyo Denki University, Japan Shinichiro Matsuo, Georgetown University, USA Florian Michahelles, Siemens USA, USA Ryo Nakamura, The University of Tokyo, Japan Anant Shah, Verizon Digital Media Services., USA Keiichi Shima, IIJ-II, Japan Anna Sperotto, University of Twente, NL Joe Touch, The Aerospace Corp., USA Wantanee Viriyasitavat, Google, USA Vasaka Visoottiviseth, Mahidol University, Thailand Tat-Chee Wan, Universiti Sains Malaysia, Malaysia Publicity Committee: Wantanee Viriyasitavat, Google, USA Local Organizers: Rey Padilla, AIT, Thailand Glaziel Kae Tagamolila, AIT, Thailand Wutjanun Muttitanon, Mahidol University , Thailand

1 0

Spoofer Report for NZNOG for Jul 2018
by CAIDA Spoofer Project 08 Aug '18

08 Aug '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nzl. Inferred improvements during Jul 2018: ASN Name Fixed-By 45267 LIGHTWIRE 2018-07-08 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Jul 2018: none inferred Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nzl&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Invitation to APNIC 46
by Elly Tawhai 06 Aug '18

06 Aug '18

Hi NZNOG Community, It is our pleasure to invite your organisation to attend APNIC 46 meeting a week of workshops, tutorials, policy and operational discussions, and social events. Connectivity and network security in the Pacific will be key themes to be discussed at the upcoming APNIC 46 conference in Nouméa, New Caledonia, from 6 to 13 September 2018. Keynote presenter John Brewer shares his expertise on the explosion of new submarine and satellite infrastructure connecting the remote islands of the Pacific, joining Raja Azrina Raja Othman, who will talk about security, privacy, and safety in this age of interconnectedness. Full speakers list here: < https://conference.apnic.net/46/program/speakers/#/> There are direct flights to Noumea from Auckland. Hope to see you there! Kind regards, Elly APNIC

1 0