- NZNOG - lists.nznog.org

Re: [nznog] "The GCSB?s brake on innovation"
by Beau Murrah 25 Feb '15

25 Feb '15

Thanks! Ill keep plodding away and get a draft to the list and yourself to attach. --- Me: nz.linkedin.com/in/bmmurrah Ph: +6427 375 7897 Email: bmurrah(a)icloud.com PGP: https://keybase.io/airbridge > On 26/02/2015, at 1:48 pm, Stephen Quayle <stephenwq(a)gmail.com> wrote: > > Hey, > Bit of a nzlog list lurker, I'd just like to give some support for this idea you're proposing. > > Any further information about this act is greatly welcomed. > > I'm particularly curious on what might changes might typically be required to give notification of, and what might not. > We've already seem some implications for research based set ups, and possibly some hint of the difficulty of certifying open source instead of vendor supplied solutions. > > An area of interest was what this means for universities and where they might fall into it, as that's a bit different to your average business, or your average telco, yet i believe they could fall under broad ISP or carrier terms for general users. Often their networks and resources can be fairly public and they can have research arms that might struggle with the same issues as REANNZ. > > Just like to say thanks for anything you can provide in terms of knowledge and interpretation to the community, even if it just starts discussion. > > Cheers, > Stephen

1 0

"The GCSB’s brake on innovation"
by Michael Fincham 24 Feb '15

24 Feb '15

<http://techliberty.org.nz/the-gcsbs-brake-on-innovation/> Excerpt: Trying to do the same in NZ, but govt's TICSA legislation makes deploying SDN/NFV in backbone networks challenging http://t.co/91MUpxfOnw — Steve Cotter (@SteveCotter) February 22, 2015 [...] So this is a statement by the CEO of a government owned company whose purpose is to "establish and operate the Advanced Network in order to promote education, research and innovation for the benefit of New Zealand" saying that they can't do the research and development work they need to do because the bureaucrats in the NCSC at the GCSB are holding them back. -- Michael

2 1

APNIC Training Survey - We need your feedback!
by Elly Tawhai 22 Feb '15

22 Feb '15

Hi NZNOG Community, APNIC’s regional training program is designed to grow the skills of network operators to effectively deploy and manage network technology in the Asia Pacific. APNIC is currently assessing the training needs and requirements of the Asia Pacific Internet community to help plan and improve its training program so it can meet the community's future requirements. You can help us by taking part in the Training Survey below: https://www.apnic.net/trainingsurvey As an added incentive, anyone completing the survey before 7 March 2015 will be entered into a prize draw for an iPad Air 2. There will be a further draw for another iPad Air 2 after the survey closes on 20 March 2015, so early birds have two chances to win! All responses provided will remain confidential and will only be used by APNIC for the purposes of planning its training and technical assistance programs. Thank you for helping APNIC improve its training services. Kind regards, _______________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: +61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: +61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net _______________________________________________________________________

1 0

openwrt on mikrotiks (rb750, rb951) with openvswitch
by Sam Russell 19 Feb '15

19 Feb '15

After getting carried away coding at the SDN workshop this week I've gone and flashed an RB750 with the latest openwrt (chaos calmer), and discovered that the package/dependency management lacks the finesse of something like debian/ubuntu: root(a)OpenWrt:~# opkg install openvswitch Installing openvswitch (2.3.1-0dfed4ba9c8a16a1f316d709b7831a4e139472d4) to root... Downloading http://downloads.openwrt.org/snapshots/trunk/ar71xx/mikrotik/packages/packa…. Collected errors: * satisfy_dependencies_for: Cannot satisfy the following dependencies for openvswitch: * kmod-udptunnel4 * kmod-udptunnel6 * * opkg_install_cmd: Cannot install package openvswitch. digging deeper, it appears that kmod-udptunnel is built for ar71xx/nand (https://downloads.openwrt.org/snapshots/trunk/ar71xx/nand/packages/base/) but not for the mikrotik fork (https://downloads.openwrt.org/snapshots/trunk/ar71xx/mikrotik/packages/base/) questions: - has anyone got this running? im going to build kmod-udptunnel from source and then opkg install openvswitch, but was hoping i wouldn't have to - does anyone have a preference for ar71xx-mikrotik over ar71xx-nand? i know Dean has deployed ovs from source on older mikrotiks running attitude adjustment, who else is playing in this space? cheers sam

2 1

Loading of IRD.govt.nz taking 30-50 seconds of late
by Barry Murphy 19 Feb '15

19 Feb '15

Morning all, Wondering if anyone else is noticing that the ird website is taking quite some time to load, has been happening since late last week or earlier this week judging from reports. Tested from our network and also on 4G from Spark, same issue. Looking at a debug of the page, we get a 301 after 25 seconds, then we get a 24 second delay for a 200 OK then things start loading a bit later out of a cache from the looks. If anyone that looks after the IRD infrastructure is on the list, feel free to reply offlist. Many thanks -- Kind regards, Barry Murphy / Chief Operating Officer

3 2

increasing number of blacklisted NZ public IP addresses
by Daniel Christie 18 Feb '15

18 Feb '15

Hello all, I'm working for a small web/mail hosting company. I've recently noticed a lot of blacklisted IP addresses from NZ based ISPs being dished out, part of our intrusion prevention methods involve denying connections from these addresses. How do these blacklisted IP addresses get unlisted? Is it the responsibility of the customers of these ISPs or it is the responsibility of the ISP? Daniel Christie

5 5

ATS Switch for 1-3 Devices
by Mark Foster 17 Feb '15

17 Feb '15

Hiya folks, Looking for a cost-effective solution to automatically switch a non-redundantly-powered device between redundant power supplies. For example running a single switch between a UPS-backed power supply and a direct-mains power supply, so that I have some tolerance should the mains supply to the UPS fail (or the UPS itself). Essentially something like this: http://www.cdlnz.com/index.html?do=viewproduct&p=NR605&code=RP-ATS But i'm looking for something relatively small and for a relatively low number of devices (say anywhere from 1 to 3). I'm also not necessarily looking for >10A 240V; the gear that'll be being run, is quite low current. Anyone got any recommendations? Thanks Mark.

3 2

Job: Head of Network Operations - NEXTDC - Sydney Australia - 457 Available
by Skeeve Stevens 16 Feb '15

16 Feb '15

Hi all, On Seek.com.au <http://seek.com.au/> - http://www.seek.com.au/job/28150202?pos=1&type=standout I know a bit about this role, so feel free to chat to me offline if you are wondering if you are suitable.... or just apply directly :) I'm helping them find the right person... hardest thing is knowing who is out there and looking for a role like this. I will be in Japan at the Apricot/APNIC conference in a couple of weeks if you're there and you are interested in the role and would like to catch-up and chat about it. ...Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.co.nz ; www.eintellegonetworks.co.nz Phone: +612 8014 7398; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/theispguy ; blog: www.theispguy.com The Experts Who The Experts Call Juniper - Cisco - Cumulus Linux - Cloud - Consulting - IPv4 Brokering

1 0

Re: [nznog] Can anyone help
by Glen Eustace 16 Feb '15

16 Feb '15

Our issue has been going on now for a couple of weeks now but has been getting slowly worse. I don’t believe the issue reported in the Herald about mobile is related (but who knows :-) > On 12/02/2015, at 7:39 am, Robert M <robert(a)kneedrag.org> wrote: > > Spark has been having issues, apprently they have been resolved this morning. > > Don't have the details off hand. > > Regards, > > Rob > > On 12/02/2015 7:09 AM, "Glen Eustace" <geustace(a)godzone.net.nz <mailto:geustace(a)godzone.net.nz>> wrote: > Hi, > > I am wearing my Massey Uni hat and we are struggling with an intermittent number (though its growing) of random SIP telephone call failures from the PSTN. I realise that this isn’t a telephony support line but with the proliferation of VoIP I am hoping some of the people on the list might be able to help. > > We are getting call failures to completely random Massey DDI’s, Spark have traced the calls and are confident they leave their network and Vodafone are doing the same and do not believe the calls enter theirs. The call’s terminate on a system which plays the following voice prompt twice and then ends the call. > > “Your alternative network call is unable to proceed at this time, please try again later”. > > The voice is a pleasant Kiwi (though I’m not a linguist so might not be) female. > > If anyone can put their hand up and say, "yes that’s one of ours" or anyone has heard or know where this recording might be coming from it might help. The calls are definitely going somewhere and if we, Massey/Spark/Vodafone can work out the where it might help pinpoint the how. > > I know this is a long shot but we are running out of ideas. > > Thanks > > Glen > > > > -- > =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= > Glen and Rosanne Eustace, > GodZone Internet Services, a division of AGRE Enterprises Ltd., > P.O. Box 8020, Palmerston North, New Zealand 4446 > Ph: +64 6 357 8168 <tel:%2B64%206%20357%208168>, Fax: +64 6 357 8165 <tel:%2B64%206%20357%208165>, Mob: +64 27 542 4015 <tel:%2B64%2027%20542%204015> > > "Specialising in providing low-cost professional Internet Services since 1997" > > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz <mailto:NZNOG(a)list.waikato.ac.nz> > http://list.waikato.ac.nz/mailman/listinfo/nznog <http://list.waikato.ac.nz/mailman/listinfo/nznog> >

2 4

Bi-lateral peering sessions
by Tim Hoffman 15 Feb '15

15 Feb '15

Kind folk of New Zealand, A while ago, when I was at Citylink, we had some very interesting discussions on what the community believed the role of the route server infrastructure was in our exchanges. At the time, Citylink had announced that they were no longer going to require every operator to submit prefix lists to them for enforcement. In my opinion, Citylink moved to the correct way of acting; not providing a level of route filtering for the community, but instead putting it onto each ISP to enforce their own BGP security. It was interesting to me how much people had placed a reliance on the route servers and their enforcing a route policy on behalf of them, rather than taking responsibility for this themselves. I recall that in this discussion on the list Dean Pemberton, Michael Fincham, and Andy Linton made some excellent points about this. One of the interesting things about New Zealand and IXs is the lack of bi-lats or routing control used across the peering exchanges. In many IXs worldwide, the route servers are only considered to be the initial stage of setting up on an IX (if you used them at all). An ISP or content provider would reach out to all the peers that they did any level of traffic to and request a bi-lateral BGP session, which they would enforce their own route policies on, and filter routes in both directions on this session to appropriately manipulate traffic. In light of the issues this afternoon on APE, I wonder all of us putting some effort into bi-lats with our major peers is worthy of discussion? Also interesting is the attached graph of aggregate traffic on AKL-IX, showing the value of having multiple IXs in Auckland for resiliency. Cheers, Hoff [image: Inline image 2]

1 0