- NZNOG - lists.nznog.org

BCP for BGP
by Jamie Baddeley 17 Apr '15

17 Apr '15

HI Folks, One of our colleagues from AUSNOG mentioned this, and I thought it'd be worth reposting here as I'd imagine it's required reading for many of you (which I'm sure you have of course!). Cheers jamie RFC7454 - "BGP Operations and Security" https://tools.ietf.org/html/rfc7454 "Abstract The Border Gateway Protocol (BGP) is the protocol almost exclusively used in the Internet to exchange routing information between network domains. Due to this central nature, it is important to understand the security measures that can and should be deployed to prevent accidental or intentional routing disturbances. This document describes measures to protect the BGP sessions itself such as Time to Live (TTL), the TCP Authentication Option (TCP-AO), and control-plane filtering. It also describes measures to better control the flow of routing information, using prefix filtering and automation of prefix filters, max-prefix filtering, Autonomous System (AS) path filtering, route flap dampening, and BGP community scrubbing."

3 2

New RIPE Atlas anchor in New Zealand
by Sebastian Castro 16 Apr '15

16 Apr '15

Dear community: We'd like to announce that the first of two RIPE Atlas [1] anchors [2] sponsored by NZRS has been installed in Auckland North Shore, and became active this morning. The anchor support both v4 and v6. This is the second anchor in New Zealand, the first hosted at Waikato University. The second anchor will be installed in Wellington at a later time, once some network architecture work is completed. NZRS is committed to support Internet research and network measurement, we are also Atlas ambassadors and we have Atlas Probes [3] available to distribute. If you are interested on hosting one for your own benefit and the benefit of the community, please contact me. We are currently using the Atlas probes located in New Zealand to conduct a topology discovery experiment from which you will hear in the coming weeks. [1] https://atlas.ripe.net/about/ [2] https://atlas.ripe.net/get-involved/become-an-anchor-host/ [3] https://atlas.ripe.net/get-involved/become-a-host/ Cheers -- Sebastian Castro Technical Research Manager NZRS Ltd. desk: +64 4 495 2337 mobile: +64 21 400535

1 0

beating bufferbloat with better hardware
by Dave Taht 08 Apr '15

08 Apr '15

When I was at the nznog conference there was a lot of despair about a lot of aspects of the fiber deployment, and the quality of the home gateways, and what seemed to be promising plans to try to get openwrt with fq_codel running on nzwrt... did you all despair completely? I talked about all the great things we could do to improve our devices with openwrt, and and beat bufferbloat in particular with fq_codel in my talk... and since then I have worked to get fq_codel in more and more OSes and hardware. UBNT has added configuration tools for it in their upcoming edgerouter 1.7 release. VyOS just added it. It is in click. It is in fedora 22. It is spreading (And of course, already in all modern linuxes, openwrt, dd-wrt, ipfire, shorewall, etc). There was no sign of a pulse at tilera or mikrotik, but I will keep trying. Still... to one day get hardware that has low latency and good queue management at gigE speeds or higher requires better hardware offloading techniques than the bulk notions like GRO and TSO that exist today. And it has long been obvious that the rate limiting + fq_codel techniques we use successfully at sub 200mbit speeds do not scale higher. So the algorithms need to move into hardware, also. *******so... a brief commercial interruption***** I think the open source design method has worked spectacularly for software, and I think the same methods can work for hardware if only we can pull together larger communities to do the work, worldwide. There are only 24 hours left on this kickstarter - we CAN *start* to take back the edge of the internet - if we can only find another 5k of funding. https://www.kickstarter.com/projects/onetswitch/onetswitch-open-source-hard… This FPGA board´s pcie interface and switch design - and the split memory interfaces between the programmable logic and the onboard dual A9 core - and reducing the cost from 7000 to 700 bucks - are the important parts to why the community needs this board - in my case - so that more of htb + fq_codel can move into hardware that anyone can build and use - in other cases? who knows what could be done with it!? One day, we could move the logic into asics, and finally have open source, blob-free hardware to work with for any network purpose. There are people on these lists with money, and there are those with talent and time, and it would be great if more of those people could line up with each other. I put in all I could spare (8500 dollars) into this kickstarter. I have one of their high end boards, already. It´s great. There is a get one give one program that I asked meshsr to put in to try and enable that event. If there is anyone here that would like to help hack together the next generation of edge network hardware, after this kickstarter completes, let me know. I return you now to your normal despair about vendors not listening, and crappy OSes you can´t otherwise fix. -- Dave Täht We CAN make better hardware, ourselves, beat bufferbloat, and take back control of the edge of the internet! If we work together, on making it: https://www.kickstarter.com/projects/onetswitch/onetswitch-open-source-hard…

2 1

SNMP for Mako / SecureME
by Tom Henderson 08 Apr '15

08 Apr '15

Wondering if anyone here knows if Mako routers (Spark's SecureME offering) can be monitored with SNMP? We use observium to monitor our servers and existing Cisco gear, but so far it looks like I can only monitor these from the SecureME web portal. Cheers Tom Henderson IT Manager | Pack & Company | 027 461 4403 | tom(a)pack.co.nz -- ---------------------------------------------------------------------------If you are not the intended recipient of this email, you must not disclose, copy, or distribute any information contained in or attached to it, or take any action/inaction based on it. Please contact us immediately, and delete this email from your system. Any views or opinions presented in this email are solely those of the author and not of Pack & Company (NZ) Limited (the "Company"), however any intellectual property contained in or attached to this email is the property of the Company. Thank you.

2 1

Call for presentations for AusNOG 2015
by Jamie Baddeley 06 Apr '15

06 Apr '15

A Call for Presentations from our mates across the ditch. Cue comments about Cricket, Currency Parity, Phar Lap, Pavlovas, Russell Crowe, Crowded House, Underarm bowling, etc etc.. Cheers Jamie ---------- Forwarded message ---------- From: Terry Manderson <terry(a)terrym.net> Date: 1 April 2015 at 05:39 Subject: [AusNOG] Call for presentations for AusNOG 2015 To: ausnog <ausnog(a)lists.ausnog.net> Call for presentations for AusNOG 2015 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Langham Hotel Melbourne 27 & 28 August 2015 Topics =-=-=- Internet operations can be a broad topic and the programme committee will be short-listing presentations in the following focus areas: * Improving the redundancy/resiliency/sustainability of your network * Making leaps in service or network availability * Taking the network operations BCP to the next level * Using 'offline' communications tools to keep the network working * How technology is changing network architectures * Evolution in network architectures and scaling issues * Analysis of relevant major operational events of the year Additional topics that are of interest to the network operator community are also welcome at AusNOG 2015. Naturally, presentations of a marketing nature are not welcome at this technical event. Notes to presenters =-=-=-=-=-=-=-=-=-= Preference will be given to presentations that result in actual operational outcomes. Session speakers should be prepared to present for 30 minutes. Keynote speakers will be expected to present for 45 minutes to 1 hour. Short presentations of strong operational content are also acceptable. Once the final slides are submitted, changes will only be permitted where the presentation requires the most up to date information or data. By submitting a presentation for consideration in the AusNOG 2015 programme, and if selected the presenter will allow AusNOG to: * Take photographs of the presentation and presenter * Record and rebroadcast video and audio of the presentation and presenter * Redistribute the presentation slides, audio, video, and photographs electronically, on the AusNOG website, or otherwise but leaving all intellectual property in the hands of presenter or rightful property holder[1]. Deadlines =-=-=-=-= 04 June: Submission of presentation title, presentation description (300 words), and presenter biography (200-400 words) 02 July: Presenters notified of their acceptance status as an AusNOG 2015 presentation. 20 August: Submission of final presentation slides as Portable Document Format (pdf), PowerPoint, or Keynote. Provision of a recent digital photograph (<500k) of the presenter. All submissions must be sent by email to organisers AT ausnog DOT net. A separate call for lightning talks will be made closer to the AusNOG 2015 event. As in previous years you must be registered to attend AusNOG 2015 in order to be considered for a lightning talk. [1]: AusNOG accepts that some speakers are unable to allow us to archive their presentation due to company or corporate policy, and if the situation arises AusNOG will delete all copies in its possession after the presentation. Lightning Talks =-=-=-=-=-=-=-=-= Have something awesome or cool to share that isn't a full presentation? New to presenting, and still want give back to the community? Why not consider a lightning talk? Lightning talks are short (max 10 minute) presentations on topical material. There is no requirement for any slides! A call for lighting talks will be made nearer to AusNOG 2015. Cheers Terry (For the AusNOG Board)

1 0

Hosting for test server - recommendations?
by Richard Nelson 24 Mar '15

24 Mar '15

Hi, We want to perform some testing of consumer broadband connections over the next three months. We are looking for somewhere to host a server for throughput testing. Happy to pay. The main requirements are for a neutral site well connected to all the major ISPs and for a network connection to easily handle (i.e. not limit) throughput for consumer speed connections - up to 200Mb/s (not gigatown). The testing will be for about 5 mins worth of streams per hour from an equal mix of ADSL, VDSL and UFB with tests staggered to occur one at a time. Testing repeats every hour. We can lease or provide our own server. If we get really lucky we'd like one site in Auckland and one not in Auckland. Any suggestions would be gratefully received. Thanks, Richard Nelson WAND Network Research Group.

1 0

ICT Equip Gensets & Ubiquity NZ for Vanuatu
by Andy Linton 20 Mar '15

20 Mar '15

Big ups to Primo Wireless in New Plymouth - this kit is on its way to Vanuatu. -- Andy Linton Mobile: +64 22 474 7156 Skype: asjlnz

3 3

Are you `asnet2' or `202.7.1.239' on the WIX?
by Michael Fincham 19 Mar '15

19 Mar '15

Whoever you are, it seems you're announcing some busted routes to the route servers, with an AS path of "429010481". -- Michael

2 1

ratelimiting/aqm/FQ on mikrotik/routerOS info
by Dave Taht 18 Mar '15

18 Mar '15

I am curious as to any existing support for ratelimiting and AQM/FQ on the tilera gear they have? Policing? anything? Keep hoping to make progress on this: http://forum.mikrotik.com/viewtopic.php?p=473253#p473253 -- Dave Täht Let's make wifi fast, less jittery and reliable again! https://plus.google.com/u/0/107942175615993706558/posts/TVX3o84jjmb

2 1

Vanuatu CYCLONE RECOVERY PROJECT
by Andy Linton 17 Mar '15

17 Mar '15

>From one of the .VU government coordinators: We urgently need the following. Can anyone supply and where from. I can assist with logistics from Auckland, Brisbane, Sydney. Please reply ASAP Item Quantity Spec USB RF Power Meter 1 Agilent U2041XA Cable and Antenna Analyser 1 Sitemaster PDR48 calibration kit 1 Sitemaster Transmission Analyser 1 JDSU MTS-5800 Please contact me and I'll put you in touch if you can help -- Andy Linton Mobile: +64 22 474 7156 Skype: asjlnz

1 0