[OT] {Humour} NCSC.govt.nz traceroute
The trusted guardian of NZ Information Assets. So where do they host this important guardian of our assets, of course they would host it here in Wellington wouldn’t they, maybe a backup in Auckland Serenity:~ alexander$ traceroute ncsc.govt.nz traceroute to ncsc.govt.nz (199.83.134.194), 64 hops max, 52 byte packets 1 172.31.2.1 (172.31.2.1) 0.548 ms 0.215 ms 0.191 ms 2 192.168.1.1 (192.168.1.1) 0.324 ms 0.296 ms 0.275 ms 3 113.197.96.18 (113.197.96.18) 4.058 ms 3.873 ms 4.489 ms 4 103.9.216.18 (103.9.216.18) 10.866 ms 10.734 ms 27.593 ms 5 103.9.216.19 (103.9.216.19) 10.699 ms 10.737 ms 10.956 ms 6 203.167.218.185 (203.167.218.185) 13.539 ms 11.339 ms 10.953 ms 7 ge-0-2-0-914.xcore1.acld.telstraclear.net (203.98.42.17) 11.106 ms 11.315 ms 10.950 ms 8 unknown.telstraglobal.net (134.159.174.37) 14.115 ms unknown.telstraglobal.net (134.159.174.41) 13.334 ms unknown.telstraglobal.net (134.159.174.37) 14.271 ms 9 i-0-0-4-1.tlot-core01.bx.telstraglobal.net (202.84.142.106) 136.672 ms i-0-0-4-0.tlot-core01.bx.telstraglobal.net (202.84.142.118) 138.917 ms i-0-6-4-1.tlot-core01.bx.telstraglobal.net (202.84.142.114) 138.757 ms 10 i-0-4-0-0.eqla01.bi.telstraglobal.net (202.84.251.174) 136.206 ms i-0-4-0-7.eqla01.bi.telstraglobal.net (202.40.149.254) 137.496 ms i-0-4-0-0.eqla01.bi.telstraglobal.net (202.84.251.174) 137.301 ms 11 nlayer-peer.eqla01.pr.telstraglobal.net (134.159.61.42) 143.708 ms 136.787 ms 140.136 ms 12 ae0-110g.cr1.lax1.us.nlayer.net (69.31.127.137) 138.668 ms ae0-110g.cr1.lax1.us.nlayer.net (69.31.127.141) 137.965 ms ae0-110g.cr1.lax1.us.nlayer.net (69.31.127.137) 136.064 ms 13 xe-5-3-0.cr1.iah1.us.nlayer.net (69.22.142.121) 167.796 ms 167.996 ms 168.156 ms 14 xe-3-1-1.cr1.dfw1.us.nlayer.net (69.22.142.3) 171.539 ms 194.181 ms 193.122 ms 15 xe-0-2-1.cr1.ord1.us.nlayer.net (69.22.142.4) 190.842 ms 190.634 ms 190.443 ms 16 ae0-60g.cr2.ord1.us.nlayer.net (69.31.111.154) 191.285 ms 190.151 ms 189.922 ms 17 ae2-20g.ar1.ord6.us.nlayer.net (69.31.110.254) 192.570 ms 195.793 ms 195.315 ms 18 * * * 19 * * * 20 * * * 21 * * * mmmmm. that looks like a long trip to Wellington or Auckland Whois that IP: Serenity:~ alexander$ whois 199.83.134.194 # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/whois_tou.html # # # Query terms are ambiguous. The query is assumed to be: # "n 199.83.134.194" # # Use "?" to get help. # # # The following results may also be obtained via: # http://whois.arin.net/rest/nets;q=199.83.134.194?showDetails=true&showARIN=false&ext=netref2 # NetRange: 199.83.128.0 - 199.83.135.255 CIDR: 199.83.128.0/21 OriginAS: AS19551 NetName: INCAPSULA NetHandle: NET-199-83-128-0-1 Parent: NET-199-0-0-0-0 NetType: Direct Assignment RegDate: 2011-01-14 Updated: 2012-02-24 Ref: http://whois.arin.net/rest/net/NET-199-83-128-0-1 OrgName: Incapsula Inc OrgId: INCAP-5 Address: 3500 SOUTH DUPONT HIGHWAY City: Dover StateProv: DE PostalCode: 19901 Country: US RegDate: 2010-09-15 Updated: 2014-02-25 Ref: http://whois.arin.net/rest/org/INCAP-5 OrgAbuseHandle: INCAP1-ARIN OrgAbuseName: Incapsula AbuseDesk OrgAbusePhone: +1-866-250-7659 OrgAbuseEmail: abuse(a)incapsula.com OrgAbuseRef: http://whois.arin.net/rest/poc/INCAP1-ARIN OrgTechHandle: INCAP2-ARIN OrgTechName: Incapsula Operations OrgTechPhone: +1-866-250-7659 OrgTechEmail: ip(a)incapsula.com OrgTechRef: http://whois.arin.net/rest/poc/INCAP2-ARIN OrgNOCHandle: INCAP2-ARIN OrgNOCName: Incapsula Operations OrgNOCPhone: +1-866-250-7659 OrgNOCEmail: ip(a)incapsula.com OrgNOCRef: http://whois.arin.net/rest/poc/INCAP2-ARIN # # ARIN WHOIS data and services are subject to the Terms of Use # available at: https://www.arin.net/whois_tou.html # Serenity:~ alexander$ hmmmm, Delaware, now thats a funny place for it. It doesn’t seem to be any CDN or anything, I wonder if they are just going best price for their hosting, or does this path lead through the 5 Eyes network? Maybe our network lords and masters will be telling us to embed our network systems in foreign countries as part of our new approvals. Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326
Same CDN as the main GCSB site
http://www.incapsula.com
On Feb 26, 2014, at 1:31 PM, Alexander Neilson
So where do they host this important guardian of our assets, of course they would host it here in Wellington wouldn’t they, maybe a backup in Auckland
Hehe
I really need to do more research into my humour posts.
Good point, it is a CDN.
I wonder how they decide which node to serve from as it would seem easier and quicker to serve out of Sydney rather than the US.
Another CDN to contact about routing. Fun times
Regards
Alexander
Alexander Neilson
Neilson Productions Limited
alexander(a)neilson.net.nz
021 329 681
022 456 2326
On 27/02/2014, at 10:46 am, Mike Savory
Alexander, I think most of us just wonder off shaking our heads and muttering now and just don't bother any more.... I was asked to look at an email problem last year for a client who was having trouble getting mail into an academic space. I discovered that the offending government mail system was hosted out side of New Zealand which means that all privacy regulations just go out the window as I understand it. Did you ever see the 80's show "Gliding On" by Rodger Hall? D On 27/02/2014 10:48 a.m., Alexander Neilson wrote:
Where it comes from depends a lot...
For example we use Cloudflare on Geekzone. Most of the NZ networks will bring content from the Sydney POP, 25ms away. Vodafone NZ cable OTOH use a provider that doesn't interconnect in Sydney so the traffic goes to Sydney, then Singapore and ends in Hong Kong, 150 - 250ms away. I have both Vodafone cable and Snap DSL connections at home and the 10Mbps DSL loads Geekzone faster than the 130Mbps cable.
Talked many times with Vodafone and the answer is always around "sorry, can't do much, this is the router our provider gives us".
Cheers
Mauricio Freitas
http://about.me/freitasm
________________________________________
From: nznog-bounces(a)list.waikato.ac.nz
When you say Vodafone Cable you are talking about Vodafone Blue (Telstra Clear) right?
Unfortunately thats how our transit comes so we are currently exploring Best Alternative Practices and I hope to get some testing / comparison done soon.
The world of routing is insane.
Regards
Alexander
Alexander Neilson
Neilson Productions Limited
alexander(a)neilson.net.nz
021 329 681
022 456 2326
On 27/02/2014, at 11:04 am, Mauricio Freitas
On Wed, 2014-02-26 at 22:04 +0000, Mauricio Freitas wrote:
Where it comes from depends a lot...
For example we use Cloudflare on Geekzone.
Why? -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa
On Thu, 2014-02-27 at 11:52 +1300, Steve Holdoway wrote:
OK, I've had a personal reply insulting my intelligence for asking this, although the smelling was a bit poo... This is an honest question. a) It cannot improve the TTFB of a slow site b) It is so invasive as to destroy any local presence ( as mentioned earlier in the thread ). So if you disagree that it's a bad idea, please enlighten me, rather than just call names privately! Maybe we'll all learn something. Steve -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa
Just for everyone's benefit, if Steve received an insulting reply IT DID NOT COME FROM ME!
Cheers
Mauricio Freitas
http://about.me/freitasm
________________________________________
From: nznog-bounces(a)list.waikato.ac.nz
OK, I've had a personal reply insulting my intelligence for asking this, although the smelling was a bit poo... This is an honest question. a) It cannot improve the TTFB of a slow site b) It is so invasive as to destroy any local presence ( as mentioned earlier in the thread ). So if you disagree that it's a bad idea, please enlighten me, rather than just call names privately! Maybe we'll all learn something. Steve -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog
I did reply to clear that up, but have just noticed the poster only cc's to the list so it went direct to them. No it certainly was not Mauricio. Steve On Thu, 2014-02-27 at 01:20 +0000, Mauricio Freitas wrote:
-- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa
To answer your question, the main reason here is savings... About 30% a month is saved in terms of images, scripts and CSS served from CF instead of our servers. At 35ms to SYD (on Snap) it's not much slower than 20ms to AKL - certainly a lot better than 200ms that Vodafone cable puts on though. Shame on that network's upstream provider. Cheers Mauricio Freitas http://about.me/freitasm -----Original Message----- From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Steve Holdoway Sent: Thursday, 27 February 2014 17:24 To: NZNOG List Subject: Re: [nznog] [OT] {Humour} NCSC.govt.nz traceroute I did reply to clear that up, but have just noticed the poster only cc's to the list so it went direct to them. No it certainly was not Mauricio. Steve On Thu, 2014-02-27 at 01:20 +0000, Mauricio Freitas wrote:
-- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog
participants (5)
-
Alexander Neilson -
Don Gould -
Mauricio Freitas -
Mike Savory -
Steve Holdoway