- NZNOG - lists.nznog.org

Supporting RIPE Atlas
by Sebastian Castro 15 Jan '17

15 Jan '17

Hi everyone: On preparation for NZNOG 2017 next week, I'd like to pitch the RIPE Atlas project to this audience. RIPE Atlas https://atlas.ripe.net/ is global measurement network composed by hundreds of lightweight probes, that allow their users to run a variety of network measurements. The probes are small, powered by USB, and let you run Ping, Traceroute, lightweight HTTP, DNS lookups, etc. It provides the convenience of running measurements from different networks, very useful for troubleshooting and monitoring, as well as research. There are 82 active probes in New Zealand, and we would like to cover most of the active ASNs in the country with a probe. NZRS uses RIPE Atlas for some of our research work, like Detecting if NZ ISP are doing DNSSEC validation <http://blog.nzrs.net.nz/dnssec-validation-at-spark-nz/> or testing local ISP resolvers for centricity <http://blog.nzrs.net.nz/resolvers-centricity-detection/>, as well as our efforts to map the Internet topology of NZ that will be presented at the conference. Some NZNOG members are RIPE Atlas ambassadors, like Dean Pemberton or myself, we can get you a probe if you are interested on hosting one. I'll bring a few to Tauranga next week, feel free to contact me if you want one. If there is more demand than available probes, I can get a bunch directly from RIPE and post them to you later. Kind Regards, -- Sebastian Castro Technical Research Manager NZRS Ltd. desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Call For Presentations - DNS-OARC Workship 26, Madrid, 14-15 May 2017
by Geoff Huston 07 Jan '17

07 Jan '17

[with apologies to those who see this on multiple lists] Call For Presentations The DNS-OARC 26th Workshop will take place in Madrid, Spain on May 14th and 15th 2017, the Sunday and Monday following the ICANN GDD Industry Summit 2017. The Workshop's Program Committee is now requesting proposals for presentations. This workshop intends to build from previous strong DNS-OARC workshops, where both operational content and research are welcome. All DNS-related subjects are welcome. If you are an OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. A timeslot will be available for lightning talks (5-10 minutes) on Monday May 15th, for which submissions will be accepted during May 14th on a first-come first-served basis. Workshop Milestones: 6th January 2017, Call for Presentations posted and open for submissions 24th February 2017, Deadline for submission 17th March 2017, Draft Programme published 14th April 2017, Final Program published 28th April 2017, Final deadline for slideset submission Details for presentation submission will be published here: https://indico.dns-oarc.net/event/26/call-for-abstracts/ The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> Ray Bellis, for the OARC Programme Committee OARC depends on sponorship to fund its workshops and associated social events. Please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.)

1 0

Met Service
by Alan Maher 03 Jan '17

03 Jan '17

Merry Xmas all, Anyone have a contact with Met Service IT provider/manager/ help desk? http://www.metservice.com/ is running on complete go slow right now. "Someone" needs to take a look at it. Cheers Alan Maher --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

3 2

a bufferbloat-less christmas
by Dave Taht 22 Dec '16

22 Dec '16

I gave a talk at nznog about 2 years ago about bufferbloat and the fixes we had planned for it. I'm pleased to say that we've got it mostly fixed in the Linux kernel at this point. did the NZwrt idea ever get traction? In particular, the wifi fixes (fq_codel at the mac layer, and airtime fairness) have today, entered lede (formerly openwrt). There's full support for the ath9k and partial support for some ath10k chips. Builds should be popping out in a few hours. Most of these patches are now in the linux 4.10 mainline - and ATF is scheduled for 4.11. The sqm-scripts (in lede and openwrt, which also work on mainline linuxes) have long enabled fixing dsl, cable, fiber, ethernet - but *are not* required to fix wifi - with these patches, "wifi just works!" with far less bloat and more concurrency. There's a ton of ath9k/ath10k using products out there supported by lede. The Turris Omnia has all the sqm-scripts, fq_codel, and the ath9k/ath10k stuff either in it now, or rapidly pending. There's also some good stuff in the dsl-aware-autoconfig-ing http://evenroute.com/ (but not the wifi stuff as yet). A lot of people are liking the edgerouter-x... ... And there are dozens of other firmwares and products using fq_codel functionality - notably the ubnt edgerouter calls it what it is, but you'll see it also under names like "adaptive qos", and so on. For a good bit of research as to how fq_codel helps on slow connections (in this case, in australia across NBN's speed tiers), see: http://caia.swin.edu.au/reports/161107A/CAIA-TR-161107A.pdf for some details what went into fixing wifi, see: https://lwn.net/Articles/705884/ So... Have a bloat-free christmas! fix it for yourself, and then a friend, or two. My testing while I was in NZ last time seemed to indicate no particular tuning was needed for your country, but I remain curious as to what happens when you deploy this new stuff, there - and, if, over the last 2 years, you had been. Wish I was there, myself. Looks nice and warm. -- Dave Täht Let's go make home routers and wifi faster! With better software! http://blog.cerowrt.org

1 0

pool.ntp.org traffic gone wild
by Lincoln Reid 19 Dec '16

19 Dec '16

Hi, Is anyone else in NZ seeing their pool.ntp.org traffic volumes up by an order of magnitude over the last few days? 20mbps+ seems like quite a lot of NTP. Cheers, -- Lincoln Reid Head of Networks ACSData - AS18119 lincoln(a)acsdata.co.nz Phone: +64 4 939 2200 Fax: +64 4 939 2201

12 19

Certifications
by Lesley Longhurst 14 Dec '16

14 Dec '16

Hi all, As an all-purpose leading network bod for my company, what's a good certification strategy? I deal with a wide range of stuff from local LANs to international backbones, and it's high time I got myself a piece of paper to "prove" that I know some stuff. Is CCNA still a good starting point? Lesley Longhurst Opus International Consultants Ltd, 33 The Esplanade, Petone, Lower Hutt 5012, New Zealand PO Box 30 845, Lower Hutt 5040, New Zealand +64 4 471 7002 +64 21 244 3718 lesley.longhurst(a)opus.co.nz<mailto:lesley.longhurst(a)opus.co.nz> www.opus.co.nz<http://www.opus.co.nz/>

9 14

Re: [nznog] Certifications
by Kerry Milestone 13 Dec '16

13 Dec '16

You may also wish to look at some of the online MOOCs. For example, a certified course (you pay for, and get your work verified etc) in Digital Network Essentials but you've probably moved on already a bit from this particular one. https://www.edx.org/course/digital-networks-essentials-imtx-net01x "All about the IP, TCP and UDP Internet protocols and their properties (quality of service, congestion management, etc.)" Or slightly more esoteric and off the original topic but still interesting to do is this one, put together by some fairly clued up people in their field: https://www.edx.org/course/cyber-security-economics-delftx-secon101x "We discuss and apply different economic models that help determine the costs and benefits of security investments in network security." Looking at this one from Ivan Pepelnjak, the six week course covers quite a bit and certainly would expose the holes in your current knowledge you need filling. Playing First Packet in a network symphony orchestra would be a good place to progress from should you require to learn the specifics and intricacies of certain equipment. http://www.ipspace.net/Building_Network_Automation_Solutions "In the hands-on part of the course you’ll build your own lab, either using virtual devices or physical gear. If you decide to go with the virtual device approach, you can choose between Arista vEOS, Cisco VIRL, Cisco CSR, Cumulus VX, Juniper vSRX or Juniper vMX." >From a business perspective, I think it is more useful knowing the why rather than just the how which is what certificates themselves often can't portray and may become very clear in an interview or stressed (the internets are broken...) situation. On 14/12/16 09:45, nznog-request(a)list.waikato.ac.nz wrote: > > > Today's Topics: > > 1. Certifications (Lesley Longhurst) > 2. Re: Certifications (Nathan Ward) > 3. Re: Certifications (Criggie) > 4. Re: Certifications (Chris O'Donoghue) > 5. Re: Certifications (Lesley Longhurst) > 6. Re: Certifications (Dave Mill) > 7. Re: Certifications (Nathan Ward) > 8. Re: Certifications (Bill Walker) > 9. Re: Certifications (Joel Wir?mu Pauling)

1 0

Accommodation Early Bird Has Ended - Other Options
by Jesse Archer 12 Dec '16

12 Dec '16

Hi All, Just a heads up that the Trinity Wharf early bird pricing ended yesterday. Other options if you're looking to save some $$ are listed at the following link, but I wouldn't muck around (Tauranga is one of NZ's Summer hot spots). http://www.nznog.org/nznog17/venue Conference is selling nicely, if you're interested in the Workshop or Tutorials on offer, don't muck around - only a few spots left on those. Conference will finish at 4.30pm on Friday Jan 27. Your direct flight home options on this date include: *Auckland 5pm & 6:20pm* *Wellington 5:25pm* *Christchurch 4:00pm (transit via Wellington or Auckland available at 5:25pm or 6:20pm).* Check-in is 20 minutes before departure, I'd allow 30 minutes travel time from the venue to the airport just in case there is some peak Friday afternoon traffic on Hewletts Road (lots of traffic lights). Regards, Jesse Archer On Behalf Of The NZNOG Trustees

1 0

NZNOG 2017 Registrations are Open
by Dave Mill 04 Dec '16

04 Dec '16

Hi all A heads-up that we have just opened registrations to the NZNOG 2017 conference in Tauranga. Details are here - http://www.nznog.org/nznog17 . The conference is brought to you by Go Wireless NZ. We have placed information regarding our current workshop and tutorials on these pages: http://www.nznog.org/nznog17/nznog-2017-workshop http://www.nznog.org/nznog17/nznog-2017-tutorials (Note, we might have some Grandstream phone training available on the Wednesday as well - we are still firming up details) We'd encourage people to register early for the tutorials and workshops as some of these will have limited seats due to room availability. Also, a reminder that early bird accommodation rates at the conference venue will finish on December 12. Rooms are limited so again book your accommodation early. Check out accommodation options here - http://www.nznog.org/nznog17/venue A big thank you to all of our sponsors so far - http://www.nznog.org/nznog17/nznog-2017-sponsorship Hope to see you there! Cheers Dave (on behalf of the NZNOG Trust)

2 2

Strange issues in CHCH - Routing SYN Timeouts
by Brad Nightingale 01 Dec '16

01 Dec '16

Hi We are experiencing weird issues from out of our internet break out in CHCH. I don't want to drop our upstream in it so no names mentioned, but yes a ticket has been logged with them - this is just becoming urgent as it started . Since I have done this I have had reports from other IT Service Providers that say their customers are experiencing the same thing. Basically we can ping anything, but we cant web browse to wide range of certain sites (e.g. www.bnz.co.nz) - these would appear to be internationally hosted sites but I can't categorically state this. We are getting SYN Timeouts almost like there is async routing somewhere way up stream or some random MTU issue. I don't expect to have anyone solve the problem from this email, just a "yes there is an issue and we are experiencing it too and know XXX is working on it" would be helpful to know. Thanks Brad ________________________________ CAUTION: This communication, including any attachments are confidential. If you have received this communication in error, please advise the sender immediately and delete the message and any attachments. Nothing in this email designates an information system for the purposes of Section 11(a) of the New Zealand Electronic Transactions Act 2002, unless expressly stated otherwise.

1 0