- NZNOG - lists.nznog.org

Geekzone.co.nz dns/email issue
by Jean-Francois Pirus 05 Sep '14

05 Sep '14

If anybody from Geekzone is around, your mail server's forward DNS is not set up correctly. The A record for mail.geekzone.co.nz is missing. Sep 6 09:59:57 zeus postfix/smtpd[26470]: warning: 202.175.128.168: hostname mail.geekzone.co.nz verification failed: Name or service not known dig -x 202.175.128.168 168.128.175.202.in-addr.arpa. 3220 IN PTR mail.geekzone.co.nz. dig mail.geekzone.co.nz #nothing PS: I could not contact Geekzone directly as I can't register, (see above) -- Jean-Francois Pirus | Technical Manager francois(a)clearfield.com | Mob +64 21 640 779 | DDI +64 9 282 3401 Clearfield Software Ltd | Ph +64 9 358 2081 | www.clearfield.com

2 1

IANA AS Numbers registry update
by Selina Harrington 05 Sep '14

05 Sep '14

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following blocks to LACNIC in September 2014: 64099-64197 Assigned by LACNIC 2014-09-05 263680-264604 Assigned by LACNIC 2014-09-05 264605-265628 Assigned by LACNIC 2014-09-05 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

1 0

IANA IPv4 Recovered Address Space registry updated
by Selina Harrington 03 Sep '14

03 Sep '14

Hi, ICANN has updated the IANA IPv4 Recovered Address Space registry according to the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA. The policy states that in each IPv4 allocation period, each RIR will receive a single IPv4 allocation unit from ICANN. An IPv4 allocation period is defined as a 6-month period following 1 March or 1 September in each year. The address space selection software can be downloaded from: https://github.com/icann/ The list of allocations can be found at: https://www.iana.org/assignments/ipv4-recovered-address-space/ipv4-recovere… Regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

2 1

IANA AS Numbers registry update
by Selina Harrington 02 Sep '14

02 Sep '14

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following blocks to APNIC in September 2014: 64000-64098 Assigned by APNIC 2014-09-02 133632-134556 Assigned by APNIC 2014-09-02 134557-135580 Assigned by APNIC 2014-09-02 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

1 0

DNSSEC single point of failure?
by Jean-Francois Pirus 26 Aug '14

26 Aug '14

Unless I'm missing something, looks like my internal dns stopped working because there were issues with the link to the US. All because dnssec is enabled in bind. Namely queries from a resolver server would timeout looking up MYHOST.MYDOMAIN.com.dlv.isc.org before it got to querying my authoritative server. Is there any way to work around that? Seems like a single point of failure, where resolvers will fail if there are any issues with com.dlv.isc.org. Thanks. -- Jean-Francois Pirus | Technical Manager francois(a)clearfield.com | Mob +64 21 640 779 | DDI +64 9 282 3401 Clearfield Software Ltd | Ph +64 9 358 2081 | www.clearfield.com

8 12

More NZ SDN news - CARDIGAN gains scale.
by Dean Pemberton 24 Aug '14

24 Aug '14

The CARDIGAN SDX system continues to gain scale in a production environment. The team is proud to announce that they have redesigned the system to provide OF1.3 multitable support which supports hardware with soft reconfigurable TCAM. CARDIGAN now provides a flexible controller framework which scales as quickly as vendors are increasing their TCAM support. With the current hardware (Pica8 3290 and Noviflow 1132) the system is able to support up to 130,000 flows today. The system optimises which flows are sent to the devices which means that many more routes that this number can be supported. Being able to support hardware from multiple vendors on the same framework allows engineers to deploy the right hardware, in the right location for them. In the early days of the deployment, there was concern expressed about the ability of this SDN system to scale. This framework now addresses those concerns head on. As can be seen below, the system is currently handling over 14,000 routes. We're going to make some changes so that we can test out the full capacity over the next few days. noviswitch# show stats table tableid 2 --------Table id: 2 Active count : 14716 Max_entries : 131071 Lookup count : 0 Match count : 0 The patches to the RouteFlow system which enable these features have been passed back to the RouteFlow development team so that they can be accessed by the entire community. Upwards and onwards.

2 1

Route limits
by Dave Mill 13 Aug '14

13 Aug '14

Hi all Just as a bit of a heads-up in case anyone else is hitting this issue (and not aware). We tend to be learning a total of about 511k or so unique IPv4 routes nowadays from external peers. Combine this with various internal routes and the actual number of IPv4 routes on a couple of our border routers is a few short of 512k. If any of these routers have a RIB or FIB limit of 512k IPv4 routes then expect some strange issues. Like random routes not showing up in your routing table.. *cough* brocade xmr default cam partition *cough* Have a nice day! Cheers Dave

6 8

IT/Network Service/Support in Shanghai
by Christoph Berthoud 12 Aug '14

12 Aug '14

Hi All, I am desperately looking for an IT consultant or company based in Shanghai who can offer Level 2/3 IT sales & support for my Shanghai office (10 staff) and speaks English as a first language. Trying to give technical instructions to someone with English as a second language is causing more harm than good and none of my staff there are technical enough for some of the steps I require of them. Any recommendations from our wonderful community much appreciated. Please reply off-list. -- Thanks Christoph

1 0

Apropos that dial-up discussion
by Juha Saarinen 06 Aug '14

06 Aug '14

<AOL>http://qz.com/245585/aol-still-has-2-3-million-dialup-subscribers-and-theyr…</AOL> -- Juha Saarinen twitter: juhasaarinen

1 0

Chorus ADSL to VDSL card swaps causing PPP issues
by Barry Murphy 06 Aug '14

06 Aug '14

Hey Guys, Chorus have been swapping cards in DSLAMs from NALT (ADSL Capable) to NVLT (VDSL Capable) throughout their network. >From looking at the Chorus Planned Network Notifications for a cabinet in BSY (Browns Bay) I can see over the last 2 months they have been swapping cards with about 65 customers at a time. Since this work began and customers swapped to the new cards we've noticed that some broadcom chipsets are having issues connecting with ADSL, it establishes PPP only around 10-20% of the time with 20 retries. Sometimes the router can connect within 5 mins and other times can take up to 60 minutes to reconnect. We've had Alcatel investigate and from our BNG/BRAS the correct PPPoE (chorus do the PPPoA conversion when used) packets are being sent to the CPE down the handovers however the CPE doesn't receive the ConfAck in the negotiation. Further investigation showed that the CPE was showing DSL sync but a downstream attenuation of 0, Chorus ESPM tool showed the same result, hence why the DSLAM may not be passing all the comms to the CPE. Cisco routers have no issues, however routers we have seen this issue with are DLINK: DSL-2750B, TP-LINK: W8950ND, NETGEAR: DGN1000, While I have not seen this issue on any of my direct customers, I have seeing about 30-40 cases on a ISP we manage their network for. Chorus have a case open for us though this has been ongoing for a few weeks now so just want to know if there are any other operators perhaps seeing similar cases? Many thanks -- Barry Murphy

2 1