- NZNOG - lists.nznog.org

RE: [nznog] I think a rubber band just fell off.
by Simon Allard 19 Jun '05

19 Jun '05

Yea, we are. Lost a huge amount of UBS users and a lot of our SI pops. > -----Original Message----- > From: jamie.baddeley(a)vpc.co.nz [mailto:jamie.baddeley(a)vpc.co.nz] > Sent: Monday, 20 June 2005 11:15 a.m. > To: nznog(a)list.waikato.ac.nz > Subject: [nznog] I think a rubber band just fell off. > > any one else seeing a *large* number of Telecom NZ outages? > > FR/PON/DSL/Dial etc etc > > > > jamie > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

RE: [nznog] Help requested - Netscreen IP Sec VPN over DSL
by Philip D'Ath 19 Jun '05

19 Jun '05

I wear the other hat (use hardware VPN). We run large numbers of VPNs over DSL (Telecom and TelstraClear) and don't experience any issues. It wont be the hardware used in the Exchanges (baring a hardware issue, such as a bad port). Assuming your ISP is not running out of bandwidth, it wont be your ISP. Your first guess, the DSL router at the CPE end is the most likely culprit. If your using UDP encapsulation you may find it is deleting the NAT translations. If you have an option to turn on ISAKMP keep alives, try that. -----Original Message----- > Can anyone please give me a pointer as to why I am having big problems > with using a Safenet VPN client (conecting to) -> Netscreen VPN/FW appliance via > Jetstart / UBS / Jetstream ? This is happening on multiple disassociated / > unrelated networks. ... Its just barely possible that this also applies to the hardware used in the exchanges and ISPs.

1 0

Re: [nznog] Help requested - Netscreen IP Sec VPN over DSL
by neil gardner 19 Jun '05

19 Jun '05

I used to be Netscreen support for Renaissance NZ and while I saw a few strange issues I never saw a problem with IPSEC VPNs specifically over ADSL. Without knowing where the device in question was sourced from, I can't be totally specific, but assuming it was purchased through a NZ retailer / SI / Supplier, You should get in touch with them - and if you have no luck, phone Lan1 or Renaissance. Remember that the suppliers generally only provide support to resellers, but they both have some talented people that might help you out - I know both have operated some form of professional services department at some point. I'd echo Steve's general thoughts that it's more likely to be a router issue than an ADSL issue (unless you're trying to do something over PON or whatever Telecom call that now). Best of luck. N. Neil Gardner Product Manager - Product Line Management Allied Telesyn Research Ltd New Zealand +64 3 339-9509 (ph) +64 3 339-3001 (fax) >>> Steve Wray <stevew-lists(a)catalyst.net.nz> 20/06/2005 8:00 a.m. >>> Felix Tsang wrote: > Can anyone please give me a pointer as to why I am having big problems with > using a Safenet VPN client (conecting to) -> Netscreen VPN/FW appliance via > Jetstart / UBS / Jetstream ? This is happening on multiple disassociated / > unrelated networks. > > I am using mostly Dynalink RTA300 DSL Modems, and Netscreen 5XT / GT boxes. > I believe it is something to do with the NZ DSL network as this type of VPN > setup has worked well for over 1/2 years until it start to become more and > more unreliable. Can anyone help or suggest a solution? I've recently been doing some research trying to isolate a problem with a clients multiple Linux-based IPSec VPNs running through consumer-grade ADSL routers. (I would guess that your Safenet/Netscreen devices are using some form of IPSec VPN). My findings were unusual; the more recent the model of ADSL router used, the more unreliable the VPNs became when under load. For me, this was only the case when running multiple VPNs. Older model ADSL routers performed admirably (the Nokia M1122 was fantastic) while later model ADSL routers ranged from some models reliably crashing after 30 seconds of load to other models seeming ok on the bench but performing very badly in the field. Some brands actually got worse with more recent firmware upgrades or chipsets. Some googling revealed that there may be problems routing ESP traffic for multiple IPSec VPNs through cheaper, less well engineered ADSL routers. I am guessing that modern consumer grade ADSL routers fall into the "less well engineered than they used to be" category. Its just barely possible that this also applies to the hardware used in the exchanges and ISPs. Just a guess. For what its worth, we are moving away from IPSec to openvpn. Unfortunately, once you've bought into a hardware VPN solution, it becomes somewhat harder to make that sort of change... _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research.

2 1

OT datacenter racks
by Barry Murphy 16 Jun '05

16 Jun '05

Hey guys, I know this is a bit off topic, but did I mention it's Friday and time to drink BEER! Can someone reply to me off list if they provide rack space (full racks) with swipe card access and layer 2 to APE in Auckland. I know maxnet does this and they the only ones I know about that have swipe cards, but their pricing is a bit up there so am looking for alternatives. Thanks Barry

1 0

Webcasting Update - UK Lions Rugby
by Richard Naylor 15 Jun '05

15 Jun '05

Wearing my R2.co.nz hat..... Several of the Radio stations that R2 carries, are doing live commentaries of the Rugby games involving the UK Lions. We are experiencing viewer/listener numbers roughly 3 times our usual "high-water" mark and are aware that the stations (and presumably ISPs) are getting some complaints about the streams buffering or not being accessible. The mid week games seem to produce the highest load, probably because TV3 isn't carrying delayed broadcasts of these matches, so radio is the only "free to air " option, other than Sky which isn't free of course.. International fans have no choice at all and the streams are their only source of live comentary As our servers are still somewhat under loaded (the streams are only 16kbps each) and many complaints are from overseas, we are making some changes over the next week in anticipation of the Test matches and likely audience numbers. We have for some months now been spreading load between WIX and APE connected servers. Today we have started altering our routing and will be directing all connection requests that are not from APE or WIX peers, to servers in the USA. Some traffic will still be available via our existing international bandwidth, but this seems to be the major congestion point. The USA servers are cheaper than increasing our bandwidth and also allows us to serve overseas clients more efficiently. We are talking in the 10,000s of clients - these are not small events. I'm sorry if Operators Help Desks have already been receiving calls of complaint. Peered Operators won't have noticed any effect. Non-peered Operators probably have. The introduction of the US servers, should reduce these calls, although you may see an increase in international traffic. It should be minor as each stream is quite small, but please take this as a warning - we are seeing high client numbers - much much higher than the LOTR Premiere (numerically we do a higher figure daily now). Peering at APE or WIX will of course reduce this international bandwidth. If Operators need help peering at APE or WIX, Andy at CityLink is happy to assist. Be aware the tests are getting closer...... If time allows we will commission a server at PNIX next week. Operators close to Palmerston North should consider peering there to save national bandwidth. These changes are pretty well permanent, although may be adjusted slightly or optimized. Later in the month there will be some more content released, which is expected to raise traffic levels even higher. These streams will not be small. Thanks for your time. Rich

1 0

Notification of NZRR Database changes
by NZRR Database Notifications 09 Jun '05

09 Jun '05

Dear Colleague, This is to notify you that some object(s) in NZRR database which you either maintain or are listed as to-be-notified have been added, deleted or changed. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. --- OBJECT BELOW CREATED: aut-num: AS24324 as-name: NZRR-AS24324 descr: BCL descr: APE peering at '192.203.154.20' descr: see Citylink RT job #2568 admin-c: RPA1-NZRR tech-c: RPA1-NZRR import: from AS9560 accept ANY AND NOT fltr-bogons export: to AS9560 announce AS24324 notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: sainesh.singh(a)bclnz.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050610 source: NZRR --- OBJECT BELOW CREATED: route-set: AS9560:RS-ROUTES:AS24324 descr: Route set advertised to AS9560 by BCL - AS24324 members: 202.49.128.0/24^24-29, 202.49.135.0/24^24-29, 202.49.133.0/29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: sainesh.singh(a)bclnz.com mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20050610 source: NZRR

1 0

random versus deterministic netflow sampling
by Rich Groves 07 Jun '05

07 Jun '05

Hello All: I wanted to ask what version of Netflow sampling the bulk of NZ networks employ today. If Netflow is not used is it due to its overhead on equipment and or its complexity to administer? Thanks Rich Groves WAND Research Group

2 1

TelstraClear 'transit' service
by Lincoln Reid 06 Jun '05

06 Jun '05

Hi, Many thanks for all the replies to my request for Microwave operators in Lower Hutt. Unfortunately the operator of the network we were having issues with remains a complete mystery, so we have changed polarity to resolve our issue. Secondly has anyone here requested TelstraClear's paid domestic peering product ( er transit, whatever ) delivered across Citylink in Wellington? I would be interested in hearing of your experience. It seems that due to a complete lack of rate limiting on their Citylink facing interface they are unwilling to deliver the capacity we have requested. If we were willing to buy 1000mbit of capacity ( or whatever their Citylink port runs at ) we could avoid this little problem for them =) Regards, -- Lincoln Reid Systems Engineer LinuxNet - AS18119 lincoln(a)linuxnet.co.nz Phone: +64 4 939 2200 Fax: +64 4 939 2201

1 0

New microwave kit in Lower Hutt
by Lincoln Reid 31 May '05

31 May '05

Hi, Could anyone who I haven't talked to yesterday who has installed any 5.8Ghz microwave equipment in the Lower Hutt CBD in the last week or so get in touch with either me or Daniel on our office number 04 9392200. Regards, -- Lincoln Reid Systems Engineer LinuxNet - AS18119 lincoln(a)linuxnet.co.nz Phone: +64 4 939 2200 Fax: +64 4 939 2201

1 0

Fw: [nznog] Computerworld Gupta story pulled?
by Paul_Brislen＠computerworld.co.nz 30 May '05

30 May '05

Hi All, Before conspiracy theorists start chiming in ... We've pulled the story because it was about matters before the youth court. The story was originally posted accidentally, which is why it's now been removed (at our decision, I should add). Computerworld, obviously, is more interested in technical and regulatory matters rather than the legal process now unfolding. I suspect this is also well off topic for NOG anyway. I do, however, feel the need for a beer Cheers, Paul

2 2