- NZNOG - lists.nznog.org

Location and venue confirmed for NZNOG 2015
by Krystal Waine 08 May '14

08 May '14

Dear List, The location and venue are all locked in and I can officially announce that next years NZNOG conference will be held in Rotorua at the Distinction Hotel, which is conveniently located between the airport and the town centre. The dates for NZNOG 2015 are 29 - 30th January. Look forward to seeing a lot of you there! Cheers Krystal -- Krystal Waine Events Lead, InternetNZ DDI: 04 472 1601 Mobile:027 6555 450 *To promote the Internet's benefits and uses, and protect its potential.*

3 3

Best Practice - prefix advertisement
by Alexander Neilson 06 May '14

06 May '14

Hi All At $Dayjob I have been working around an aggregation bug in our routers and manually specifying prefix’s at the three levels we operate (/22, /23, /24) and using prefix filters to advertise /24’s to APE / WIX, /23’s to our domestic transit, and only the /22’s to international transit as a method of Traffic Management / Traffic Engineering to utilise cheapest links available. I have been exploring the looking glass services of a number of entities to see what propagates to them (that they enter into the forwarding database) and I am seeing some entities (who announce peering at APE for example) having the /22 and /23 routes in the LG outputs and following the /23 path in trace route. I am asking for two fold information. Can someone / everyone point me at their best guide to BGP “Best Practice” regarding advertising prefixes? and also can I get people’s specific advice about what they accept / do to announcements before entering them into their routers as accepted routes and what they would expect to see advertised to ensure my goals are reached. I made these changes to help reduce my contribution to the ballooning of the global routing table but I also don’t want to go to extremes on polluting the APE routing table by advertising the 12 /24’s plus the 6 /23’s and the 3 /22’s. Also can I get consensus information (or peoples opinions) about am I abusing / dis respecting APE with my announcements and how I should structure my announcements to be a respectable citizen here while providing the best hints to my preferred handling of traffic? (and feel free to let me know if I should just announce the /22’s and accept that some people choose to prioritise other paths) Thank you in advance for any input, feel free to reply off list. Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

4 3

APNIC 38 Call for Papers
by Dean Pemberton 05 May '14

05 May '14

___________________________________________________________________ APNIC 38 Conference - Call for Papers ___________________________________________________________________ The APNIC 38 Program Committee is now seeking presentations for the APNIC 38 Conference to be held in Brisbane, Australia, from 15 - 19 September 2014. We are looking for content that would suit the APOPS Plenary, technical conference sessions, and tutorials. Key dates --------- The timeline for submissions is: Call for Papers Opens Now First Round Paper Acceptance 1 August Final Deadline for Submissions 29 August Final Round Paper Acceptance 5 September Final Slides Received 12 September Submitting Proposals -------------------- Please submit your proposal for a presentation, technical session, or tutorial at: http://submission.apnic.net/user/login.php?event=14 Program material ---------------- The technical sessions at APNIC 38 will include presentations relevant to Internet operations and technologies. Possible areas of interest include: - IPv6 deployment and operations - IPv6 transition / IPv4 prolongation technologies - ISP and Carrier Services - IXPs and Peering - Network and Infrastructure security - Access and Transport Technologies - Content and Service Delivery - Software Defined Networking and Network Function Virtualization If you have any other ideas or proposals for panel or Birds of a Feather sessions, please feel free to submit your ideas via the submission system. If you have any questions, please email the Program Committee chairs at: pc-chairs(a)apricot.net For more information about APNIC 38, please visit: http://conference.apnic.net/38 On behalf of: APNIC 38 Program Committee Co-chairs: Dean Pemberton, Mark Tinka, and Raphael Ho

1 0

AusNOG 2014 Call for Presentations
by Mark Prior 05 May '14

05 May '14

Call for presentations for AusNOG 2014 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Swissotel Sydney 4 & 5 September 2014 Topics =-=-=- Internet operations can be a broad topic and the programme committee will be short-listing presentations in the following focus areas: * Improving the redundancy/resiliency/sustainability of your network * Making leaps in service or network availability * Taking the network operations BCP to the next level * Using 'offline' communications tools to keep the network working * How technology is changing network architectures * Evolution in network architectures and scaling issues * Analysis of relevant major operational events of the year This year we will be reintroducing a "Peering Forum". In this part of the programme we hope to include: * Peering related talks * Peering personals from various networks * IX updates Additional topics that are of interest to the network operator community are also welcome at AusNOG 2014. Naturally, presentations of a marketing nature are not welcome at this technical event. Notes to presenters =-=-=-=-=-=-=-=-=-= Preference will be given to presentations that result in actual operational outcomes. Session speakers should be prepared to present for 30 minutes. Keynote speakers will be expected to present for 45 minutes to 1 hour. Short presentations of strong operational content are also acceptable. Once the final slides are submitted, changes will only be permitted where the presentation requires the most up to date information or data. By submitting a presentation for consideration in the AusNOG 2014 programme, and if selected the presenter will allow AusNOG to: * Take photographs of the presentation and presenter * Record and rebroadcast video and audio of the presentation and presenter * Redistribute the presentation slides, audio, video, and photographs electronically, on the AusNOG website, or otherwise but leaving all intellectual property in the hands of presenter or rightful property holder[1]. Deadlines =-=-=-=-= 09 June: Submission of presentation title, presentation description (300 words), and presenter biography (200-400 words) 04 July: Presenters notified of their acceptance status as an AusNOG 2014 presentation. 27 August: Submission of final presentation slides as Portable Document Format (pdf), PowerPoint, or Keynote. Provision of a recent digital photograph (<500k) of the presenter. All submissions must be sent to organisers at ausnog.net. A separate call for lightning talks will be made closer to the AusNOG 2014 event. As in previous years you must be registered to attend AusNOG 2014 in order to be considered for a lightning talk. [1]: AusNOG accepts that some speakers are unable to allow us to archive their presentation due to company or corporate policy, and if the situation arises AusNOG will delete all copies in its possession after the presentation. Mark. For the AusNOG Board

1 0

clear.net.nz maintainers
by Al Twohill 04 May '14

04 May '14

Hi, Does anyone from Vodafone who looks after the Clear email servers lurk about here? I've had an issue going no-where with L1 support for the past 6 months.. Would greatly appreciate a contact off list. Cheers, Al

1 0

2 of 3 IPv6 DNS servers broken?
by Pete Mundy 27 Apr '14

27 Apr '14

Dear list Is anyone from Snap network ops watching who is involved in IPv6 or DNS? I'm not officially a Snap customer yet (1 week to go) so I guess trying to put this through the helpdesk might not be the best approach. Just wanted to give you guys a heads up really that only 1 of the 3 published NS appear to be responding to DNS queries via IPv6 (but they do all respond to ping6). See transcripts below. They were taken from a Snap UFB link. It all works fine via v4. I guess maybe others on the list with native v6 could test to confirm that this is also the case as seen from elsewhere? Eg perhaps from a non-Snap link? My v6 visibility is still a bit limited. Just a Raspberry Pi stuck behind a Fritzbox on Snap UFB for testing. Maybe something is 'on the fritz'?! Pete root(a)fpl-rpi16:~# ping6 -c 1 ns1.snap.net.nz PING ns1.snap.net.nz(2406:e000::100) 56 data bytes 64 bytes from 2406:e000::100: icmp_seq=1 ttl=251 time=10.0 ms --- ns1.snap.net.nz ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 10.048/10.048/10.048/0.000 ms root(a)fpl-rpi16:~# dig -6 SOA snap.net.nz @ns1.snap.net.nz ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> -6 SOA snap.net.nz @ns1.snap.net.nz ;; global options: +cmd ;; connection timed out; no servers could be reached root(a)fpl-rpi16:~# ping6 -c 1 ns2.snap.net.nz 64 bytes from 2406:e000::200: icmp_seq=1 ttl=251 time=9.98 ms --- ns2.snap.net.nz. ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 9.985/9.985/9.985/0.000 ms root(a)fpl-rpi16:~# dig -6 SOA snap.net.nz @ns2.snap.net.nz ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> -6 SOA snap.net.nz @ns2.snap.net.nz ;; global options: +cmd ;; connection timed out; no servers could be reached root(a)fpl-rpi16:/home/ladmin# ping6 -c 1 ns3.snap.net.nz PING ns3.snap.net.nz(2406:e000::300) 56 data bytes 64 bytes from 2406:e000::300: icmp_seq=1 ttl=251 time=11.4 ms --- ns3.snap.net.nz ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 11.433/11.433/11.433/0.000 ms root(a)fpl-rpi16:~# dig -6 SOA snap.net.nz @ns3.snap.net.nz ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> -6 SOA snap.net.nz @ns3.snap.net.nz ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57245 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 6 ;; QUESTION SECTION: ;snap.net.nz. IN SOA ;; ANSWER SECTION: snap.net.nz. 86400 IN SOA ns1.snap.net.nz. soa.snap.net.nz. 2014040202 10800 3600 604800 86400 ;; AUTHORITY SECTION: snap.net.nz. 86400 IN NS ns2.snap.net.nz. snap.net.nz. 86400 IN NS ns1.snap.net.nz. snap.net.nz. 86400 IN NS ns3.snap.net.nz. ;; ADDITIONAL SECTION: ns1.snap.net.nz. 86400 IN A 202.37.101.1 ns1.snap.net.nz. 86400 IN AAAA 2406:e000::100 ns2.snap.net.nz. 86400 IN A 202.37.101.2 ns2.snap.net.nz. 300 IN AAAA 2406:e000::200 ns3.snap.net.nz. 86400 IN A 202.37.101.3 ns3.snap.net.nz. 300 IN AAAA 2406:e000::300 ;; Query time: 35 msec ;; SERVER: 2406:e000::300#53(2406:e000::300) ;; WHEN: Sun Apr 27 19:34:48 2014 ;; MSG SIZE rcvd: 255

2 1

SPF and mail forwarding, best practice?
by Richard Hector 25 Apr '14

25 Apr '14

Hi all, I'm in an organisation that uses a forwarding mailserver to give (some) members user(a)organisation email addresses, which get forwarded to their regular address. The trouble is, I have SPF on my domain, and one at least of the receiving MTAs checks it, and my mail gets rejected as a consequence. What's the best solution? Do I (and anybody else who might mail us) need to turn off SPF, or make it less strict? Does the forwarding server need to remail rather than forward? Do we need to persuade the receiving mail admins to whitelist our forwarder (there could be many others)? Should the organisation mailserver just operate an IMAP/POP/Webmail service rather than forwarding, so that this never arises (my favourite)? Any tips? Thanks, Richard

4 5

New RIPE NCC contribution to the IANA IPv4 Recovered Address Space registry
by Leo Vegoda 23 Apr '14

23 Apr '14

Hi, In April 2014, ICANN updated the IANA IPv4 Recovered Address Space registry to reflect the return of 14 /24 prefixes (5,376 IPv4 addresses) by the RIPE NCC. The updated registry can be found at: https://www.iana.org/assignments/ipv4-recovered-address-space Kind regards, Leo Vegoda ICANN IANA

3 4

InTAC 2014
by Dean Pemberton 22 Apr '14

22 Apr '14

Morning all. InTAC conference to be held again on the 9th of July in Auckland. The participants at last years conference gave plenty of feedback as to the directions that they wanted to see the Internet within New Zealand take. Feedback was that there needed to be more focus on the following areas: . Technical issues relating to the security of the infrastructure of the New Zealand Internet . Technical mechanisms to assist in the development of more appropriate Authentication, Identity and Trust systems relating to the use of the Internet . Technical ways to ensure the Future-proofing the infrastructure of the New Zealand Internet. What I'm suggesting for InTAC this year is the following structure... Welcome 45 Min - On DNSSEC 45 Min - On RPKI Morning Tea 45 Min - On Identity and trust online 45 Min - On Authentication (federated signon, 2fa, lockers) Lunch 45 Min - On SDN 45 Min - On UFB Afternoon Tea Open discussion Networking Drinks Does anyone have any feedback before I look to secure topic speakers and make it a real thing? -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz <javascript:;> To promote the Internet's benefits and uses, and protect its potential. -- -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz To promote the Internet's benefits and uses, and protect its potential.

2 2

Re: [nznog] CARDIGAN implements RPKI - Cleanliness of prefixes onWIX
by Andrew Niteesh 21 Apr '14

21 Apr '14

Hi, I have few clarifications, the table you shown have matric, local preference, path and next hop. 1. So how you are setting up these attributes in SDN? (Or) you have an application developed for BGP? (Or) you are running SDN on top of traditional networks? 2. What is Route flow - according to my understanding it's like getting connecting a set of open flow capable switches to single controller. Please correct me if am wrong. Thanks & Regards, Andrew Niteesh University of Houston

2 1