- NZNOG - lists.nznog.org

Re: Wee query about clear :) (fwd)
by Simon Blake 10 Nov '99

10 Nov '99

Hi all (bringing a conversation between Jamie Clark and yours truly out into the light) On Tue, 9 Nov 1999, Jamie Clark wrote: > Simon, > > On Tue, 9 Nov 1999, Simon Blake wrote: > > > > Any change in your policy of not publishing a route policy? :) > > > > "policy" is a bit strong :-). It has always been my intent to publish a > > No offence intended. and absolutely none taken. > > route policy, but time is pressing, and Clear are the only ISP on Citylink > > that consistantly ask for same. Everytime I sit down to learn what's > > involved and get a policy loaded, something else crops up that appears > > more urgent. :-( I'm happy to try and bump it up the priority list, if it > > will encourage more ISP's to peer. > > WIX has obviously worked well without filters so far. It comes and goes. Generally, it works fine, and that's probably a reflection on the stability of the NZ net, or at least, the bit that peers in wellington. In general, it's changes (additions of new peers) that can cause temporary hiccups (Actrix advertising 4000 prefixes yesterday being a good example). > It is certainly tempting to forgo the safety measures and peer anyway > - however I suspect that some day it will become necessary to have the > WIX route policy in some form of database. (?) maybe, perhaps. Absolutely, especially as WIX rises in importance as a major peering point in NZ, rather than as a "backup" peering point, which has been it's role until now. > IMHO it is a potential security risk if you cannot control which routes > you choose to learn from your neighbours. It would be possible for a WIX > customer with evil intentions to advertise a longer prefix into our > network and steal our customer's traffic (or any other WIX ISP's traffic > for that matter). Hmmm (evil ideas spring to mind) It may seem a bit odd, but this has been one of my pet *aims* for WIX! Contrary to popular belief, Citylink doesn't have infinite network capacity :-). Therefore, providing a mechanism where customers of ISP's can transit data directly to other customers of ISP's, without having that data split horizon through one or two ISP routers is increasingly desirable. That's why we have a setup where a little Citylink customer with a /28 from their ISP and no ASN can still peer with the route server and exchange data directly with other Citylink users. > It would not be sufficient for us to deny these advertisements either - as > they may very well be legitimate (multihoming). Having said that (that I think allowing small Citylink customers to advertise long prefix routes directly is desirable), I'm all for restricting what the route server will accept from each client. My policy at the moment tends to vary, depending on the customer. If the peer is an ISP (ie, if they have their own ASN), then I assume they know what they're doing, and I don't filter incoming or outgoing updates, unless requested by the peer. If the peer has no ASN, then I assume that they're less clueful, and also that they're likely to have a small number of routes that change infrequently. Because those non ASN peers are much more likely to foul things up, I filter the updates I receive from them to only the routes they've told me they'll send. > Admittedly a policy database with automatic updates will not > necessarily prevent this - but at least there would be an audit trail > pointing to the offender. And that has to be a good thing. > With the current operational changes to RADB it looks like we will set up > our own database and have this mirrored by RADB. This won't happen until > next year though. The goal would be to automatically generate router BGP > configs from this database. > > If you're interested (and provided you don't do it first ;) I'm sure we > would be keen to pass on anything that might be useful. When I last looked at the RADb a few months ago, I mused that having route arbiters on WIX and/or APE might not be a bad thing, and would be a useful service for Citylink to provide in it's capacity as "neutral peering provider to the stars" :-). Seeing that Merit are planning to charge US$200 per year leads me to believe that it's an idea who's time may have come. Comments? Cheers Si --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

6 6

Telstra NZ live on the APE
by Joe Abley 10 Nov '99

10 Nov '99

Hi all, A few minutes ago Telstra NZ exchanged its first routes with CLEAR and Plain Communications over the APE. The peering relationships are currently in test, and we expect a stable policy to be in place on the routers early next week. Many thanks to Phil Groom for doing most of the work, Chris Wedgwood and Matthew Grant for being available to peer at the drop of a hat, and Ben Martel for being generally a handy man to know. For future reference, Telstra NZ's Sky Tower router is numbered 192.203.154.32 on the exchange subnet, and has a clean 100M back to the data centre in Queen Street over dark fibre, backed up with DMR. Telstra are announcing routes from AS4763. Full route policy will be published shortly, probably in the RADB. Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Two new ISP's on WIX
by Simon Blake 08 Nov '99

08 Nov '99

Hi all Just a quick note - late last week XTRA joined WIX, and as of a few minutes ago IHUG is peering with the route server. By my reckoning, that makes 15 ISP's on Citylink, of which 14 are using WIX to peer in some fashion. Cheers Si --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 2

The New Zealand Network Operators' Group
by Donald Neal 07 Nov '99

07 Nov '99

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has neither a king, a president nor a formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. (At last count the list had a little over one 110 subscribers, with the count growing slightly each month.) The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations (nor the administrator) is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ To search the archive, see http://list.waikato.ac.nz/archives/search.html (and remember to select nznog). Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog There are at present no restrictions on who may subscribe to the list, or even on who may post to the list. Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Other Activities NZNOG does not at present have other regular activities than this mailing list, though some Auckland subscribers have been known to meet over beer. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins -- Donald Neal | HTTP is everywhere. It could not be so Service Platforms | pervasive without being good. Centralised Maintain and Support | Therefore, HTTP is good. Telecom NZ Ltd | - RFC2324 --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Connections to APE (plus changes)
by Richard Naylor 01 Nov '99

01 Nov '99

In the next week or so the 2 switches at APE will be replaced with a more capable Cisco switch, through the generosity of Cisco NZ. While this is taking place there will be a smal outage on the APE switch. Users will notice an outage of less than 1 minute while the new switch learns mac addresses etc. At the same time, cablers will be on site and available to connect up any parties interested in joining the exchange. Prospective users whose external connectivity has yet to arrive, can still be connected while the cabling is taking place - its easier for the installers to pull a bundle at one time. If you are interested in having cable put in place for a future connection, please contact me in the next week. thanks - rich richard.naylor(a)citylink.co.nz This mail message contains information that is confidential and which may be subject to legal privilege. If you are not the intended recipient, you must not use, distribute or copy this message. If you have received this message in error, please notify the sender immediately and erase this mail. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

web page with APE stuff on it
by Joe Abley 01 Nov '99

01 Nov '99

I thought it might be good to have some info about APE on a web page somewhere. So I threw this together: http://www.patho.gen.nz/ape/ It almost certainly contains at least _some_ lies; please let me know what they are (or, if you don't care, I'll just carry on spreading them :) Joe --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 4

WHOIS/Zone Transfer Policy
by John Vorstermans 26 Oct '99

26 Oct '99

Hi. The revised draft of the WHOIS and Zone Transfer policies are now available at: http://www.isocnz.org.nz/whoisdraft231099.html http://www.isocnz.org.nz/zfdraft231099.html Any comment or feedback are welcome. The earlier drafts are still available at: http://www.isocnz.org.nz/zfdraft1099.html http://www.isocnz.org.nz/whoisdraft1099.html Regards John Vorstermans Technical Committee ISOCNZ -- John Vorstermans || We are what we repeatedly do. Technical Manager || - Aristotle Actrix Networks --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 3

rata.vuw.ac.nz outage
by Richard Stevenson 23 Oct '99

23 Oct '99

Hi all I figured that you may all want to know that rata.vuw.ac.nz, one of the secondary nameservers for the nz ccTLD, will be out of service for an undetermined period of time tomorrow evening (Saturday 23 October 1999). As part of our Y2K preparations, management here has decided that all of our core systems should be shut down, powered off, left to cool, and then restarted, to see what breaks. This will all happen tomorrow night. The shutdown and startup procedures will be carried out by unqualified staff (i.e. not even Unix-literate) as an experiment in system documentation standards. I hope to see you all on the other side. Regards Richard ------------------------------------------------------------------------------ Richard Stevenson Systems Engineer, Information Technology Services Victoria University of Wellington Phone: +64 4 4635051 Fax: +64 4 4635552 Being a Unix system administrator is like being a tech in a biological warfare laboratory, except that none of the substances are labeled consistently, any of the compounds are just as likely to kill you by themselves as they are when mixed with one another, and it is never clear what distinction is made between a catastrophic failure in the lab and a successful test in the field. (--M. Tiemann) ------------------------------------------------------------------------------ --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

Re: rata.vuw.ac.nz outage
by Mark Davies 21 Oct '99

21 Oct '99

From: Joe Abley <jabley(a)patho.gen.nz> Date: Fri, 22 Oct 1999 16:41:35 +1300 > Nice to have some warning on this. However, 24 hours is a little > slim for an event that will take out 1/6 of all recursive lookups > on nz names "for an undetermined period", isn't it? Well I would have given you more warning but when I first heard they were going to do this and queried it I misread the answer they gave me to say that rata wouldn't be included so Richards message was a little surprise to me as well. Rata is intended to be the last machine down and the first up so hopefully the disruption should be quite short. mark --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

RE: [ISOCNZ-L] Re: zdraft1099.html (DRAFT ISOCNZ Zone Transfer P
by Mark Harris 18 Oct '99

18 Oct '99

Joe, Not to steal his thunder, but John V. has indicated to the Council that he had received some good feedback from the lists and email which is going to require a redraft of both policies to include some of the suggestions and rewordings. He also said that the Technical Committee is meeting later this week to consider these changes and he hopes to have something final after that. We don't want this to go on forever, so I imagine RSN :-) Cheers Mark > -----Original Message----- > From: Joe Abley [SMTP:jabley(a)patho.gen.nz] > Sent: Tuesday, October 19, 1999 9:44 AM > To: nznog(a)list.waikato.ac.nz; isocnz-l(a)isocnz.org.nz > Subject: Re: [ISOCNZ-L] Re: zdraft1099.html (DRAFT ISOCNZ Zone > Transfer P > > It seems that a reasonable amount of feedback has been provided now... > When can we expect revised draft policies to be made available? > > > Joe > > - > To subscribe/unsubscribe to the isocnz-l mailing list send a message > to majordomo(a)isocnz.org.nz with the keyword subscribe or unsubscribe > as the message plus the list name i.e. unsubscribe isocnz-l --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1