- NZNOG - lists.nznog.org

CallPlus Routes / Akamai Coming via Vocus / AKL-IX??
by Liam Farr 22 Jul '15

22 Jul '15

Hey, Anyone else seeing this, routes to CallPlus are being advertised to AKL-IX by Vocus rather than by CallPlus direct. As an example this is breaking 'www.stuff.co.nz' for me. The path by Vocus seems really 'fucked' (like its aggressively shaped down to nothing) so HTTP takes forever to load. Liams-MacBook-Pro:~ liamfarr$ traceroute www.stuff.co.nz > traceroute: Warning: www.stuff.co.nz has multiple addresses; using > 119.224.143.41 > traceroute to a1784.g.akamai.net (119.224.143.41), 64 hops max, 52 byte > packets > 1 192.168.6.1 (192.168.6.1) 0.710 ms 0.394 ms 0.332 ms > 2 unallocated.maxumdata.net (103.247.154.2) 0.427 ms 0.434 ms 0.397 > ms > 3 vl0901.core2.qs220.maxumdata.net (103.247.154.141) 0.585 ms 0.651 > ms 0.586 ms > 4 vl0233.edge1.qs220.maxumdata.net (103.247.154.38) 0.645 ms 0.672 > ms 0.613 ms > 5 43.243.21.6 (43.243.21.6) 1.580 ms 1.459 ms 1.529 ms > 6 ten-0-1-0-2.cor01.akl05.akl.vocus.net.nz (114.31.202.122) 2.139 ms > 2.088 ms 2.294 ms > 7 bundle-10.bdr02.akl05.akl.vocus.net.nz (114.31.202.101) 2.560 ms > 2.764 ms 2.314 ms > 8 as4610.cust.bdr02.akl05.akl.vocus.net.nz (175.45.102.66) 24.271 ms > 24.166 ms 24.251 ms > 9 pts-n.cpcak4-r1.tranzpeer.net (101.98.5.20) 2.297 ms 2.175 ms > 2.254 ms > 10 p1.akamai.callplus.net.nz (119.224.143.1) 1.488 ms 1.633 ms 2.441 > ms > 11 p41.akamai.callplus.net.nz (119.224.143.41) 1.624 ms 2.116 ms > 2.334 ms liam(a)QS220-EDGE1:~$ show ip bgp 119.224.143.41 > BGP routing table entry for 119.224.142.0/23 > Paths: (4 available, best #3, table Default-IP-Routing-Table) > Advertised to non peer-group peers: > 103.247.154.37 103.247.154.42 103.247.154.186 192.203.154.150 > 2403:4d00:fff:ffff:ffff:ffff:20:2 > 45177 4610 9790 > 103.247.152.241 from 103.247.152.241 (14.1.32.4) > Origin IGP, localpref 50, valid, external > Community: 55785:502 > Extended Community: RT:45177:1117 > Last update: Thu Jul 9 06:37:46 2015 > 45177 4610 9790 > 103.247.152.213 from 103.247.152.213 (14.1.32.4) > Origin IGP, localpref 50, valid, external > Community: 55785:502 > Extended Community: RT:45177:1117 > Last update: Thu Jul 9 06:34:55 2015 > > > > > * 4826 4610 9790 43.243.21.6 from 43.243.21.1 (43.243.21.1) > Origin IGP, localpref 100, valid, external, best Community: 55785:202 > Last update: Wed Jun 24 04:15:20 2015* > 23655 9560 9790 > 111.69.34.225 from 111.69.34.225 (43.225.200.2) > Origin IGP, localpref 90, valid, external > Community: 55785:302 > Last update: Sat Mar 28 03:36:00 2015 As CallPlus peer on AKL-IX I would have expected to see them advertising their own routes, rather than just advertising these to Vocus who are then 'breaking them'. Perhaps someone from CallPlus could fix their advertisements, and someone from Vocus could either fix their 'bottleneck' or stop advertising the routes. -- Kind Regards Liam Farr Maxum Data +64-9-950-5302

8 8

Junos and RPKI validation
by Dave Mill 16 Jul '15

16 Jul '15

Hi all NZNOG, and especially Michael Fincham and Tim Hoffman, had done a big push both at our conferences and on this list to get people using RPKI route validation. We were a test customer using the NZRS service at http://validator.rpki.net.nz/rtr-sessions . Someone with an observant eye may have noticed that we silently stopped using this validator a few weeks ago. We hit a 'minor' issue where Junos would restart _all_ routing daemons and produce a core dump when running a session to a RPKI validator. It affects 12.3R9 12.3X48-D10 13.3R4 14.1R3 14.2R1 15.1R1 and happens on J-series, M-series, T-series, MX-series, EX Series, SRX Series. PR for those with a Juniper login - https://prsearch.juniper.net/InfoCenter/index?page=prcontent&id=PR1010216 Upgrade to a recent release of your choosing to fix. Just figured I'd share for anyone else who is doing RPKI validation on one of these releases. For now we've stopped doing RPKI validation until we can arrange an upgrade of the routers involved. Cheers Dave

2 1

dual sim (3g) routers
by Jodi Thomson 12 Jul '15

12 Jul '15

Hi Folks We're on the hunt for a dual-sim (3g) router. Have done some googling but not sure what may or may not work with our 3/4G networks. Primary objective is to have 2nd 3G link as failover to second network (eg spark -> vodafone), but aggregation would be helpful also if networks support it (eg vodafone-vodafone) Wondering if anyone on the list knows what is available in NZ? Off list replies welcome to prevent clutter Cheers Jodi PS Beer -- Jodi Thomson Systems & Networks Web Connect Ltd Unit 1, 501 Heretaunga Street West Hastings, 4122 Ph: (06) 281 2324 (ext 802) http://www.webconnect.nz

1 1

Whither NzWrt?
by Dave Taht 12 Jul '15

12 Jul '15

I am curious if the NZWrt idea ever got any traction? It certainly seemed saner for me for a set of ISPs to agree on one specific hardware type, get software that met their needs, make it stable as heck, and to maintain it themselves.... -- Dave Täht worldwide bufferbloat report: http://www.dslreports.com/speedtest/results/bufferbloat And: What will it take to vastly improve wifi for everyone? https://plus.google.com/u/0/explore/makewififast

3 2

NZ TCF very bad SSL FYI
by Tony Wicks 08 Jul '15

08 Jul '15

HI guys, one of my users reported being unable access the IPMS platform this morning and it appears Firefox and Chrome are calling bul### on the really bad SSL on the TCF website and blocking access. IE still works but really shouldn't. Anyone on the TCF on this list, please sort your your technical people, this is just not good enough ! https://www.ssllabs.com/ssltest/analyze.html?d=ipms-prod.tcf.org.nz

1 1

4-wire SHDSL routers in NZ
by Dmitry Konchanin 06 Jul '15

06 Jul '15

Hi all We are suddenly in need of a couple 4-wire SHDSL EFM routers. There is basically no retail market for shdsl devices, ones we found are only 2-wires or have to be ordered with a lead time of couple of weeks (except pricy Cisco 888E option). If somebody has an access to stocked supply of such devices, could you please contact me off the list. -- Kind regards, Dmitry Konchanin

3 2

Intac program
by Dean Pemberton 02 Jul '15

02 Jul '15

Hi all, The Programme for this year's InTAC is now up: http://2015.nethui.nz/programme/day-0-intac This year there is a focus on "The Netflix Effect; Organic Growth or Step Change?" What does the changing face of user demand look like? What happens when people who previously only used their home connections for email and web, start using it for multiple 4-5Mbps streams? What happens when everyone on their street does that? Take a drive down any New Zealand street and look at all the Sky dishes on the roof â€“ what if every one of those houses was trying to pull 20Mbps during primetime instead? What would our network do with all that demand? We take a look at his problem, from the people at one end to the content delivery at the other. Registrations for this and the rest of the NetHui programme are still open here: https://nethui2015.lilregie.com/step1 See you next week! Dean -- -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz To promote the Internet's benefits and uses, and protect its potential.

2 1

Fwd: [PAG] Fwd: InternetNZ deeply disappointed with Global Mode withdrawal
by Joel Wirāmu Pauling 23 Jun '15

23 Jun '15

FYI; ---------- Forwarded message ---------- From: Jordan Carter <jordan(a)internetnz.net.nz> Date: 23 June 2015 at 16:48 Subject: [PAG] Fwd: InternetNZ deeply disappointed with Global Mode withdrawal To: Policy Advisory Group <pag(a)mailman.internetnz.net.nz> ---------- Forwarded message ---------- From: *Aimee Whitcroft* <news(a)meltwaterpress.com> Date: Tuesday, 23 June 2015 Subject: InternetNZ deeply disappointed with Global Mode withdrawal To: jordan(a)internetnz.net.nz A better world through a better Internet InternetNZ deeply disappointed with Global Mode withdrawal InternetNZ is deeply disappointed at announcements today that the Global Mode service is being withdrawn from New Zealand. "Global Mode was a great example of Internet-based innovation that challenged traditional content distribution models. It was by no means clear that the service was illegal, and we were keen to see the matter go before the courts to provide users and the industry with clarity." said InternetNZ Chief Executive Jordan Carter. The removal of this service means that New Zealanders have fewer options to pay for content. Restricting consumer access to paid content services on the basis of geographic content monopolies seems the wrong answer to resolving copyright concerns. "Withdrawing the service and settling before court seems a worse outcome for all concerned. The media companies have said that they wanted to clarify their own legal rights over content - a settlement doesn't achieve this, and leaves us all none the wiser." "There remains a number of questions that will now go unanswered due to this withdrawal. Internet users and innovation have taken a back seat to entrenched old media interests." "This outcome makes it ever more important that we review New Zealand copyright law, to ensure that the interests of consumers and creators are appropriately balanced." said Carter. *ENDS* For more information, please contact Andrew Cushen, Acting Chief Executive: - 021 346 408 - andrew(a)internetnz.nz www.internetnz.net.nz *Disclaimer: *If you do not wish to receive further news/releases from Internet NZ, please click the following link: [Remove Me] <http://app.meltwaterpress.com/mpress/removeme.html?cId=3507196&sId=171920&c…>. Requests will take a maximum of 2 business days to process. Contact information: Aimee Whitcroft, Internet NZ, Grand Arcade Tower, 16 Willis Street, Wellington, 6011 -- Jordan Carter Chief Executive, InternetNZ +64-21-442-649 | jordan(a)internetnz.net.nz Sent on the run, apologies for brevity _______________________________________________ Pag mailing list Pag(a)mailman.internetnz.net.nz http://mailman.internetnz.net.nz/mailman/listinfo/pag

1 0

Call for Presentations - DNS-OARC Fall Workshop, Oct 2015
by Sebastian Castro 17 Jun '15

17 Jun '15

The next DNS-OARC Fall Workshop will take place in Montreal on Oct 3rd and 4th, the weekend before NANOG65. DNS-OARC is requesting proposals for presentations, with a preference for DNSSEC work. We are looking for the whole spectrum, from measurement work using passive and active techniques, to applications and potential new uses of DNSSEC. This workshop intends to build from previous strong DNS-OARC workshops, where operational content and research is welcome. Presentations from DNS operators are particularly welcome, as well as from DNS researchers. All DNS-related subjects are accepted, introduction to new tools, visualizations, data analysis, DNSSEC and novel uses of the DNS. If you are an DNS-OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. Time will be available for lighting talks to fit short presentations (5 to 10 minutes). Workshop Milestones 17 June 2015, Call for Presentations posted 17 June 2015, Open for submissions 30 July 2015, Deadline for submission 20 August 2015, Final Program published 1 October 2015, Final deadline for slideset submission Details for abstract submission will be published here: https://indico.dns-oarc.net/event/24/call-for-abstracts/ The workshop will be organized on different tracks, depending on the topics and the timing of each presentation. If you are interested in a lightning talk, let us know at the time of submission. You can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> if you have questions or concerns. Sebastian Castro, for the DNS-OARC Programme Committee DNS-OARC is also seeking sponsorship for this workshop, please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that DNS-OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -- Sebastian Castro Technical Research Manager .nz Registry Services (New Zealand Domain Name Registry Limited) desk: +64 4 495 2337 mobile: +64 21 400535

1 0

Onsite Cisco Switch Install - Tomorrow - lunchtime-ish (Auckland)
by Skeeve Stevens 16 Jun '15

16 Jun '15

Hi all, I need a Cisco switch installed in Auckland tomorrow. It is already onsite and will need to be wiped (if anything is on it) and the config provided loaded, then installed into a rack. If you can assist, please let me know off-list with availability (tomorrow obviously) and rates. As usual I get a dozen responses... I will accept the first appropriate one, but sorry if I don't reply to everyone. ...Skeeve *Skeeve Stevens - Founder & Chief Network Architect* eintellego Networks Pty Ltd Email: skeeve(a)eintellegonetworks.nz ; Web: eintellegonetworks.nz Phone: +612 8014 7398 ; Cell +61 (0)414 753 383 ; Skype: skeeve Facebook: eintellegonetworks <http://facebook.com/eintellegonetworks> ; Twitter: eintellego <https://twitter.com/eintellego> LinkedIn: /in/skeeve <http://linkedin.com/in/skeeve> ; Expert360: Profile <https://expert360.com/profile/d54a9> The Experts Who The Experts Call Juniper - Arista - Cisco - Cumulus Linux - Cloud - Consulting - IPv4 Brokering

2 1