- NZNOG - lists.nznog.org

Help with Ripe Atlas Measurments
by Alexander Neilson 07 Sep '14

07 Sep '14

Hey Team Beer for the off topics. Can someone with experience with doing Measurements on Ripe Atlas please contact me off list? I am trying to do some research with their information however while the tests I am doing get results when I do them from my linux machines around the place I am getting empty result sets when testing through the Atlas. I have some requests into Ripe Atlas team as well as having read the documentation about the firmware and the structure of the response however I have still been able to get no valid responses. Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

1 0

Spark outage
by Juha Saarinen 06 Sep '14

06 Sep '14

Saw that TIFKAT suggests that customers manually change their DNS settings to sort out website access issues: http://helpbusiness.spark.co.nz/app/answers/detail/a_id/3701/related/1 What actually happened? Seen suggestions that it was a DNS amplification DDoS that might have been related to Spark customers clicking on phishing messages that had them download some form of malware that compromised their computers. Spark said: http://www.spark.co.nz/help/servicealert/mobileservicealert/ “The root cause is likely to be a handful of customers on our network whose computers are affected by malware, generating high levels of traffic destined for overseas sites.” Looks like it’s an ongoing issue too, as per the Spark service alerts. Has anyone seen any more detail on the incident? If this isn’t super operational, please email me off-list. Thanks -- Juha Saarinen twitter: juhasaarinen

5 4

Geekzone.co.nz dns/email issue
by Jean-Francois Pirus 05 Sep '14

05 Sep '14

If anybody from Geekzone is around, your mail server's forward DNS is not set up correctly. The A record for mail.geekzone.co.nz is missing. Sep 6 09:59:57 zeus postfix/smtpd[26470]: warning: 202.175.128.168: hostname mail.geekzone.co.nz verification failed: Name or service not known dig -x 202.175.128.168 168.128.175.202.in-addr.arpa. 3220 IN PTR mail.geekzone.co.nz. dig mail.geekzone.co.nz #nothing PS: I could not contact Geekzone directly as I can't register, (see above) -- Jean-Francois Pirus | Technical Manager francois(a)clearfield.com | Mob +64 21 640 779 | DDI +64 9 282 3401 Clearfield Software Ltd | Ph +64 9 358 2081 | www.clearfield.com

2 1

IANA AS Numbers registry update
by Selina Harrington 05 Sep '14

05 Sep '14

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following blocks to LACNIC in September 2014: 64099-64197 Assigned by LACNIC 2014-09-05 263680-264604 Assigned by LACNIC 2014-09-05 264605-265628 Assigned by LACNIC 2014-09-05 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

1 0

IANA IPv4 Recovered Address Space registry updated
by Selina Harrington 02 Sep '14

02 Sep '14

Hi, ICANN has updated the IANA IPv4 Recovered Address Space registry according to the Global Policy for Post Exhaustion IPv4 Allocation Mechanisms by the IANA. The policy states that in each IPv4 allocation period, each RIR will receive a single IPv4 allocation unit from ICANN. An IPv4 allocation period is defined as a 6-month period following 1 March or 1 September in each year. The address space selection software can be downloaded from: https://github.com/icann/ The list of allocations can be found at: https://www.iana.org/assignments/ipv4-recovered-address-space/ipv4-recovere… Regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

2 1

IANA AS Numbers registry update
by Selina Harrington 02 Sep '14

02 Sep '14

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following blocks to APNIC in September 2014: 64000-64098 Assigned by APNIC 2014-09-02 133632-134556 Assigned by APNIC 2014-09-02 134557-135580 Assigned by APNIC 2014-09-02 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Regards, Selina Harrington ******************************************* Internet Assigned Numbers Authority (IANA) Internet Corporation for Assigned Names & Numbers 12025 Waterfront Drive, Suite 300 Los Angeles, CA 90094 Phone: +1 310 301 5800 Fax: +1-310-823-8649 *******************************************

1 0

DNSSEC single point of failure?
by Jean-Francois Pirus 26 Aug '14

26 Aug '14

Unless I'm missing something, looks like my internal dns stopped working because there were issues with the link to the US. All because dnssec is enabled in bind. Namely queries from a resolver server would timeout looking up MYHOST.MYDOMAIN.com.dlv.isc.org before it got to querying my authoritative server. Is there any way to work around that? Seems like a single point of failure, where resolvers will fail if there are any issues with com.dlv.isc.org. Thanks. -- Jean-Francois Pirus | Technical Manager francois(a)clearfield.com | Mob +64 21 640 779 | DDI +64 9 282 3401 Clearfield Software Ltd | Ph +64 9 358 2081 | www.clearfield.com

8 12

More NZ SDN news - CARDIGAN gains scale.
by Dean Pemberton 24 Aug '14

24 Aug '14

The CARDIGAN SDX system continues to gain scale in a production environment. The team is proud to announce that they have redesigned the system to provide OF1.3 multitable support which supports hardware with soft reconfigurable TCAM. CARDIGAN now provides a flexible controller framework which scales as quickly as vendors are increasing their TCAM support. With the current hardware (Pica8 3290 and Noviflow 1132) the system is able to support up to 130,000 flows today. The system optimises which flows are sent to the devices which means that many more routes that this number can be supported. Being able to support hardware from multiple vendors on the same framework allows engineers to deploy the right hardware, in the right location for them. In the early days of the deployment, there was concern expressed about the ability of this SDN system to scale. This framework now addresses those concerns head on. As can be seen below, the system is currently handling over 14,000 routes. We're going to make some changes so that we can test out the full capacity over the next few days. noviswitch# show stats table tableid 2 --------Table id: 2 Active count : 14716 Max_entries : 131071 Lookup count : 0 Match count : 0 The patches to the RouteFlow system which enable these features have been passed back to the RouteFlow development team so that they can be accessed by the entire community. Upwards and onwards.

2 1

Route limits
by Dave Mill 13 Aug '14

13 Aug '14

Hi all Just as a bit of a heads-up in case anyone else is hitting this issue (and not aware). We tend to be learning a total of about 511k or so unique IPv4 routes nowadays from external peers. Combine this with various internal routes and the actual number of IPv4 routes on a couple of our border routers is a few short of 512k. If any of these routers have a RIB or FIB limit of 512k IPv4 routes then expect some strange issues. Like random routes not showing up in your routing table.. *cough* brocade xmr default cam partition *cough* Have a nice day! Cheers Dave

6 8

IT/Network Service/Support in Shanghai
by Christoph Berthoud 11 Aug '14

11 Aug '14

Hi All, I am desperately looking for an IT consultant or company based in Shanghai who can offer Level 2/3 IT sales & support for my Shanghai office (10 staff) and speaks English as a first language. Trying to give technical instructions to someone with English as a second language is causing more harm than good and none of my staff there are technical enough for some of the steps I require of them. Any recommendations from our wonderful community much appreciated. Please reply off-list. -- Thanks Christoph

1 0