- NZNOG - lists.nznog.org

Your Input Needed: Can ROA Replace LOA? – Short Survey (7 mins)
by Christopher Hawker 16 Nov '23

16 Nov '23

Hello everyone, Aftab Siddiqui is currently exploring the possibility of using Route Object Authorisations (ROAs) as a potential replacement to LOAs. Separate to this (and unknowing of Aftab's research), I had started a discussion on the RPKI Community guild on Discord (https://discord.gg/9jYcqpbdRE) discussing the usage of ROAs instead of LOAs. An LOA, or "Letter of Authority" / "Letter of Authorization," is a formal document granting permission for third parties to take specific actions regarding network resources or services. In the service provider industry, its primary use is for advertising address resources (IPv4/v6 and ASN). When an organization intends to announce its IP prefixes through its own or a transit provider's ASN to the global internet, it typically needs to provide an LOA to their transit provider, confirming their custodianship or ownership of the resources. RPKI ROA, stands for "Resource Public Key Infrastructure Route Origin Authorization," is part of a security framework designed to validate the authenticity of internet routing information. It involves a digitally signed object that specifies which Autonomous Systems (ASes) are permitted to announce specific IP address prefixes. Could you please take a moment to fill out our brief survey? Your feedback will play a crucial role in our understanding of this topic. Survey Link: https://www.surveymonkey.com/r/JCHLWBB Thanks, Christopher Hawker

1 0

The Guardian report on Optus Outage
by Mark Foster 14 Nov '23

14 Nov '23

https://www.theguardian.com/business/2023/nov/13/optus-network-outage-cause… A spokesperson confirmed on Monday that the cause of the outage was changes to routing information from an international peering network after a routine software upgrade at 4.05am on Wednesday. "These routing information changes propagated through multiple layers in our network and exceeded preset safety levels on key routers which could not handle these. This resulted in those routers disconnecting from the Optus IP Core network to protect themselves," a spokesperson said. "The restoration required a large-scale effort of the team and in some cases required Optus to reconnect or reboot routers physically, requiring the dispatch of people across a number of sites in Australia. This is why restoration was progressive over the afternoon." There's a meme about how it's always 'one of you three' that came immediately to mind... Mark.

1 0

Re: NZNOG Digest, Vol 248, Issue 5
by William Tiʻitiʻi Asiata Hura 08 Nov '23

08 Nov '23

Please unsubscribe me from your mailing list. On Tue, 24 Oct 2023 at 00:00, <nznog-request(a)list.waikato.ac.nz> wrote: > Send NZNOG mailing list submissions to > nznog(a)list.waikato.ac.nz > > To subscribe or unsubscribe via email, send a message with subject or > body 'help' to > nznog-request(a)list.waikato.ac.nz > > You can reach the person managing the list at > nznog-owner(a)list.waikato.ac.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NZNOG digest..." > > Today's Topics: > > 1. Re: DiscountDomains (Shane Langley) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 23 Oct 2023 07:35:27 +0000 > From: Shane Langley <shane(a)webtastix.net> > Subject: [nznog] Re: DiscountDomains > To: Criggie <criggie(a)criggie.org.nz>, Craig Whitmore > <lennon(a)orcon.net.nz> > Cc: "nznog(a)list.waikato.ac.nz" <nznog(a)list.waikato.ac.nz> > Message-ID: <5faa61d8ce254bf68729a7232f78d834(a)webtastix.net> > Content-Type: text/plain; charset="utf-8" > > Nope, they have been incredibly quiet since that > > -----Original Message----- > From: Criggie <criggie(a)criggie.org.nz> > Sent: Friday, October 20, 2023 12:44 PM > To: Craig Whitmore <lennon(a)orcon.net.nz> > Cc: nznog(a)list.waikato.ac.nz > Subject: [nznog] Re: DiscountDomains > > > On Sep 29, 2023, at 11:03 AM, Shane Langley wrote: > > Just wondering if anyone from DD is on here? Am curious whatÃ¢Â€Â™s > > happened to their nameservers today as theres no updates on the > > network status page but all domains are giving SERVFAIL errors > > Craig Whitmore wrote: > > There is a discussion on : geekzone.co.nz But it's all third party . > > Did anyone ever get any kind of RCA or explanation of what went wrong at > DD that day, three weeks ago? > > Their web site simply says its fixed, without detail. > > > > > > _______________________________________________ > NZNOG mailing list -- nznog(a)list.waikato.ac.nz To unsubscribe send an > email to nznog-leave(a)list.waikato.ac.nz > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > NZNOG mailing list -- nznog(a)list.waikato.ac.nz > To unsubscribe send an email to nznog-leave(a)list.waikato.ac.nz > https://list.waikato.ac.nz/postorius/lists/nznog.list.waikato.ac.nz > > > ------------------------------ > > End of NZNOG Digest, Vol 248, Issue 5 > ************************************* >

1 0

IPv6 status in ANZ
by Mark Prior 07 Nov '23

07 Nov '23

It's been about seven years since I last nagged at AusNOG about the poor state of IPv6 adoption in Oz and it hasn't got any better since :-( And I don't mean the plumbing, I mean the services, I have recently rewritten the script I use to look for IPv6 services (web, mail, dns, ntp, xmpp and sip) and as part of that process I leveraged PeeringDB to find all the domains that claim to connect to an IX in either Australia or New Zealand. As a result I now have two sections on the web page that collect them all together. As an added bonus I also look for DNSSEC, and its deployment makes IPv6 look like a roaring success! The Australian IX member section is <https://www.mrp.net/ipv6_survey/#auix> and the New Zealand IX member section is <https://www.mrp.net/ipv6_survey/#nzix> Of course there will be organisations in both lists but I only probe them once (a day). Start from the top of the page if you want a better understanding of what is being checked (and see some graphs) and check out the link under the domain name to find "diagnostics" about the tests. Regards, Mark.

1 0

APRICOT 2024: Call for Presentations
by Mark 31 Oct '23

31 Oct '23

APRICOT 2024 21st February - 1st March, Bangkok, Thailand https://2024.apricot.net CALL FOR PRESENTATIONS ================= The APRICOT 2024 Programme Committee is now seeking contributions for Presentations and Tutorials for the APRICOT 2024 Conference. We are looking for presenters who would: - Offer a technical tutorial on an appropriate topic; - Participate in the technical conference sessions as a speaker; - Convene and chair panel sessions of relevant topics; - Lead informal Birds of Feather break out sessions. Please submit on-line at: https://papers.apricot.net/user/login.php?event=186 CONFERENCE MILESTONES ---------------------------------- Call for Papers Opens: Now Outline Programme Published: As Papers Confirmed Final Deadline for Submissions: 29th January 2024 Final Program Published: 5th February 2024 Final Slides Received: 19th February 2024 *SLOTS ARE FILLED ON A FIRST COME, FIRST SERVED BASIS, REGARDLESS OF PUBLISHED DEADLINES* PROGRAMME CONTENT ----------------------------- The APRICOT Conference Programme consists of three parts, these being Tutorials, the Peering Forum, and Conference Sessions. Topics proposed must be relevant to Internet Operations and Technologies, for example: - IPv4 / IPv6 Routing and Operations - Routing Security, including RPKI and MANRS - Internet backbone operations - Peering, Interconnects and IXPs - Content Distribution Network technology & operations - Research on Internet Operations and Deployment - Network Virtualisation - Network Automation/Programming - Network Infrastructure security - IPv6 deployment on fixed and Wireless/Cellular networks - DNS / DNSSEC and KINDNS - Access and Transport Technologies - Technical application of Web 3.0, public blockchains and cryptocurrency - Content & Service Delivery and "Cloud Computing" - 400G ZR, ZR+ & Open ROADM - Submarine cables - ChatGPT CfP SUBMISSION --------------------- Draft slides for both tutorials and conference sessions MUST be provided with CfP submissions otherwise the submission will be rejected immediately. For work in progress, the most current information available at the time of submission is acceptable. All draft and complete slides must be submitted in PDF format only. Slides must be of original work, with all company confidential marks removed. Any marketing, sales and vendor proprietary content in a presentation is against the spirit of APRICOT and it is strictly prohibited. Note that proper credit must be given for all content taken from other sources. Evidence of plagiarism is grounds for rejection. Final slides are to be provided by the specified deadline for publication on the APRICOT website. Prospective presenters should note that the majority of speaking slots will be filled well before the final submission deadline. The PC may, at their discretion, retain a limited number of slots up to the final submission deadline for presentations that are exceptionally timely, important, or of critical operational importance. Every year we turn away submissions, due to filling up all available programme slots before the deadline. Presenters should endeavour to get material to the PC sooner rather than later. Any questions or concerns should be addressed to the Programme Committee Chairs by e-mail at: pc-chairs at apricot.net We look forward to receiving your presentation proposals. Mark Tinka, Achie Atienza & Mark Duffell APRICOT 2024 Programme Committee Chairs

1 0

OARC 42 Call for Presentations
by Manu Bretelle 23 Oct '23

23 Oct '23

OARC 42 will be a two-day hybrid meeting and the dates are *8th and 9th February 2024,* to be co-located with NANOG 90 in *Charlotte, North Carolina, USA.* The Programme Committee is seeking contributions from the community. All DNS-related subjects and suggestions for discussion topics are welcome. For inspiration, we provide a non-exhaustive list of ideas: *Operations*: Any operational gotchas, lessons learned from an outage, details/reasons for a recent outage (how to improve TTR, tooling). *Deployment*: DNS config management and release process. *Monitoring*: Log ingestion pipeline, analytics infrastructure, anomaly detection. *Scaling*: DNS performance management and metrics. Increasing DNS Server Efficiency *Security/Privacy*: DNSSEC signing and validation, key storage, rollovers, qname minimization, DoH/DoT The presentations can be either 10 or 20 minutes in length (plus 5 minutes for Q&A). Proposals for in-person lightning presentations will be opened closer to the Workshop dates. Workshop Milestones: 2023-09-07 Submissions open via Indico *2023-11-22 Deadline for submission (23:59 UTC)* 2023-11-29 Preliminary list of contributions published 2023-12-13 Full agenda published 2024-01-10 Deadline for slideset submission and Rehearsal 2024-02-08 OARC 42 Workshop - Day1 2024-02-09 OARC 42 Workshop - Day2 The Registration page and details for presentation submission are published at: <https://www.dns-oarc.net/oarc42> To allow the Programme Committee to make objective assessments of submissions, so as to ensure the quality of the workshop, submissions SHOULD include slides. Draft slides are acceptable on submission. Example guidelines for presentation slides: https://www.grammarly.com/blog/presentation-tips/ Additional information for speakers of OARC 42 your talk will be broadcast live and recorded for future reference your presentation slides will be available for delegates and others to download and refer to, before, during and after the meeting Remote speakers have mandatory rehearsal (Date and Time TBD). It would be very useful to have your slides (even if draft) ready for this. Note: DNS-OARC provides registration fee waivers for the workshop to support those who are part of underrepresented groups to speak at and/or attend DNS-OARC. More details will be provided when registration opens. If you have questions or concerns you can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via submissions(a)dns-oarc.net *Manu Bretelle, for the DNS-OARC Programme Committee* OARC depends on sponsorship to fund its workshops and associated social events. Please contact sponsor(a)dns-oarc.net if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.)

7 8

2talk
by Paul Willard 13 Oct '23

13 Oct '23

Hey 2 talk, It's been 11 hours since your power outage. I've left you alone all day and not called or emailed, but now I have to face up to the local hospitals, doctors surgeries, vet clinics ... all of whom have LEGAL requirements to be available by phone. Sheesh 😳 Any news would great ... anything I too, am an old school sys admin .. I understand it's a stressful day for you guys .. but come on .. communicate with your resellers! I'm getting a bit fucking stressed here.

1 0

APRICOT 2024: Call for Programme Committee Volunteers
by Mark 12 Oct '23

12 Oct '23

The APRICOT 2024 Organising Committee would like to welcome everyone to join us in Bangkok, Thailand, from 21st February to 1st March 2024. The APRICOT 2024 Programme Committee is responsible for the solicitation and selection of suitable presentation and tutorial content for the APRICOT 2024 conference (https://2024.apricot.net/). We are now seeking nominations from the community to join the APRICOT 2024 PC to assist with the development of the programme for APRICOT 2024. Eligible PC candidates must have attended recent APRICOT events, have broad technical knowledge of Internet operations, and have good familiarity with the format of APRICOT. Having constructive opinions and ideas about how the programme content might be improved is of high value too. PC members are expected to work actively to solicit content and review submissions for technical merit. The PC meets by conference call, weekly in frequency during the three months prior to APRICOT. If you are interested in joining the PC and meet the above eligibility criteria, please send a brief note to "pc-chairs at apricot.net". The note must include affiliation (if any) and a brief description about why you would make a good addition to the PC. The PC Chairs will accept nominations received by 17:00 UTC+8 on Friday 20th October 2023, and will announce the new PC shortly thereafter. Cheers! Mark Tinka, Mark Duffell & Achie Atienza For the APRICOT 2024 Organising Committee

1 0

DNSSEC chain validation issue for .nz: independent report
by Josh Simpson 08 Oct '23

08 Oct '23

Kia ora koutou Following the DNSSEC chain validation issue for .nz domains <https://internetnz.nz/news-and-articles/dnssec-chain-validation-issue-for-n…> on 29-31 May 2023, we have now published the independent review on the InternetNZ website <https://internetnz.nz/assets/Archives/External-report-on-nz-DNSSEC-chain-va…>. The InternetNZ Council commissioned this independent review to examine the events leading up to the incident, and our response, and to make recommendations to prevent similar failures in the future. The report affirms our internal technical analysis <https://internetnz.nz/news-and-articles/dnssec-chain-validation-issue-techn…> of why the incident happened and it will be discussed at the InternetNZ Council meeting this Friday. Please reach out to office(a)internetnz.net.nz if you have any questions about the report. Ngā mihi Josh -- *Josh Simpson* .nz Operations Manager *InternetNZ | Ipurangi Aotearoa* Helping New Zealanders harness the power of the Internet www.internetnz.nz *M* +64 21 783 399 *O* +64 4 555 0124 *GPG:* 542B 26CA 6CF6 00B1 6E6B 6D84 058C 8FE5 CEEF 5FAB [image: InternetNZ]

1 0

NZNOG 2024 Conference
by Richard Nelson 01 Oct '23

01 Oct '23

Hi all, The NZNOG Trust wishes to announce the NZNOG 2024 conference. We will host this on April 11 and 12, in Nelson at the Rutherford Hotel. As usual, the conference will be on Thursday and Friday, with tutorials available on Wednesday 10th and a workshop from Monday to Wednesday. A dinner will be held on the Thursday night of the conference. Further details on the conference will be posted to our website when available. Expect a call for papers and an announcement when registrations open. We are seeking sponsors and will shortly send out our sponsorship document for NZNOG 2024. For details contact sponsorship(a)nznog.org. www.nznog.org/conferences/nznog-2024 Richard Nelson On behalf of the NZNOG Trust

1 0