October 2014 - mice-discuss - lists.micemn.net

Re: Discussion Topic Response : Community Lists

by Levi Pederson

Don't forget the advertisements! A man in loud polyester suit shouting into a bullhorn Thank you, *Levi Pederson* Mankato Networks LLC cell | 612.481.0769 work | 612.787.7392 levipederson(a)mankatonetworks.net On Wed, Oct 22, 2014 at 2:08 PM, Shaun Carlson <shaun.carlson(a)arvig.com> wrote: > I wonder if the intent, to borrow your you're analogy, is to allow each > person coming to the potluck to make the decision to not eat one particular > dish... > > s > > > > *Shaun Carlson*Senior Manager of Information Technology | Arvig > ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com > > On Wed, Oct 22, 2014 at 1:11 PM, Levi Pederson < > levipederson(a)mankatonetworks.net> wrote: > >> I will not be able to attend the UG meeting today but I would still like >> to respond to the discussion that is to take place during the meeting. >> >> This topic at hand is the decision to implement Community Strings in the >> Exchange. There have been a couple responses on this and the primary >> reasons stated is based on security from my understanding. >> >> I am opposed to this implementation. I believe the very idea of >> segregation in an Internet Exchange undermines the primary purpose of the >> exchange. We are here to make the internet better not honeycombed. >> >> The idea of segregation based on security is a bit odd to me. An >> allegorical situation would be the following : Invite multiple people over >> for a pot-luck dinner (BYO-Dish). Have someones kid break one said dish. >> Then have someone take ALL the food, secure in their house and grant >> access/monitor to specific pot-luck goers based entirely on their specific >> point of view. >> >> This process I feel will create too much segregation and deviate rather >> far from the ideological goal of the exchange. >> >> My thoughts on responses: >> >> 1. How can we continue to provide benefits and capabilities to new >> members or bgp sessions gone awry? >> a. We are currently implementing great layer 2 defenses and that is >> a great start. >> b. Create a list of best practices and configuration examples for >> connecting to the exchange as a community. >> >> Forgive the long post. Just my 2 cents on table tonight. >> >> Thank you, >> > > > ------------------------------ > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 >

Oct. 22, 2014

Re: Discussion Topic Response : Community Lists

by Shaun Carlson

I wonder if the intent, to borrow your you're analogy, is to allow each person coming to the potluck to make the decision to not eat one particular dish... s *Shaun Carlson*Senior Manager of Information Technology | Arvig ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com On Wed, Oct 22, 2014 at 1:11 PM, Levi Pederson < levipederson(a)mankatonetworks.net> wrote: > I will not be able to attend the UG meeting today but I would still like > to respond to the discussion that is to take place during the meeting. > > This topic at hand is the decision to implement Community Strings in the > Exchange. There have been a couple responses on this and the primary > reasons stated is based on security from my understanding. > > I am opposed to this implementation. I believe the very idea of > segregation in an Internet Exchange undermines the primary purpose of the > exchange. We are here to make the internet better not honeycombed. > > The idea of segregation based on security is a bit odd to me. An > allegorical situation would be the following : Invite multiple people over > for a pot-luck dinner (BYO-Dish). Have someones kid break one said dish. > Then have someone take ALL the food, secure in their house and grant > access/monitor to specific pot-luck goers based entirely on their specific > point of view. > > This process I feel will create too much segregation and deviate rather > far from the ideological goal of the exchange. > > My thoughts on responses: > > 1. How can we continue to provide benefits and capabilities to new > members or bgp sessions gone awry? > a. We are currently implementing great layer 2 defenses and that is > a great start. > b. Create a list of best practices and configuration examples for > connecting to the exchange as a community. > > Forgive the long post. Just my 2 cents on table tonight. > > Thank you, >

Oct. 22, 2014

Re: Discussion - Another BGP Community Viewpoint

by Andrew Hoyos

+1 on that. Fully support here, and I think a necessity for a growing IX. There are logical business and traffic engineering reasons for this sort of thing, and saves folks from having to go bilateral peer with everyone as the member count grows even higher. Here are some examples of how other exchanges have implemented this sort of thing. Equinix: https://ix.equinix.com/ixp/mlpeCommunityInfo <https://ix.equinix.com/ixp/mlpeCommunityInfo> LINX: https://www.linx.net/members/support/route-servers.html <https://www.linx.net/members/support/route-servers.html> -- Andrew Hoyos hoyosa(a)gmail.com > On Oct 22, 2014, at 1:52 PM, Steve Howard <showard(a)paulbunyan.net> wrote: > > I will not be able to attend the MICE UG meeting tonight. > > However, I would like to add my thoughts regarding route advertisement > control using BGP communities. > > I am strongly in favor of this capability being added to the route > servers. Specifically, I'd like to see the ability to block > advertisement to particular ASes or to prepend just to particular > AS(es). Perhaps something like Level3, Sprint, and others use: > > 65000:XXX - do not announce to AS XXX > 65001:XXX - prepend one AS to AS XXX > 65002:XXX - prepend two ASes to AS XXX > 65003:XXX - prepend three ASes to AS XXX > 65004:XXX - prepend four ASex to AS XXX > > I just had to block one customer's netblock at MICE because Netflix > traffic shifted in an undesirable manner yesterday. In this case, they > really just needed to prepend Netflix at MICE, but since that wasn't an > option they requested that we just block their netblock completely from > the MICE route servers. > > BGP Communities give individual MICE members the ability to control > their route advertisements to best suit their needs and routing policies > without having to block the MICE route servers completely.

Oct. 22, 2014

Re: MICE in the News

by Shaun Carlson

On Wednesday, October 22, 2014, Jeremy Lumby <jlumby(a)mnvoip.com> wrote: > I am at a loss for words after reading it J Actually so many things I > could say, that I do not even know where to begin. > > > > *From:* MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET > <javascript:_e(%7B%7D,'cvml','MICE-DISCUSS(a)LISTS.IPHOUSE.NET');>] *On > Behalf Of *Anthony Anderberg > *Sent:* Wednesday, October 22, 2014 12:51 PM > *To:* MICE-DISCUSS(a)LISTS.IPHOUSE.NET > <javascript:_e(%7B%7D,'cvml','MICE-DISCUSS(a)LISTS.IPHOUSE.NET');> > *Subject:* [MICE-DISCUSS] MICE in the News > > > > I stumbled on this article that mentioned MICE, apparently we could be > part of some massive government conspiracy… also MICE takes up the whole > building now so I assume Mike and Al will be looking for office space > elsewhere. :-) > > > > > http://www.citylab.com/tech/2013/10/how-government-might-tap-physical-infra… > > > > > > > > *Anthony Anderberg* > > Sr. Systems Analyst > > [image: NUtel_email_logo_1] > > 320-234-5239 > > anthonyanderberg(a)nu-telecom.net > <javascript:_e(%7B%7D,'cvml','anthonyanderberg(a)nu-telecom.net');> > > *www.nutelecom.net <http://www.nutelecom.net>* > > > ------------------------------ > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > ------------------------------ > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > -- *Shaun Carlson*Senior Manager of Information Technology | Arvig ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com

Oct. 22, 2014

Discussion - Another BGP Community Viewpoint

by Steve Howard

I will not be able to attend the MICE UG meeting tonight. However, I would like to add my thoughts regarding route advertisement control using BGP communities. I am strongly in favor of this capability being added to the route servers. Specifically, I'd like to see the ability to block advertisement to particular ASes or to prepend just to particular AS(es). Perhaps something like Level3, Sprint, and others use: 65000:XXX - do not announce to AS XXX 65001:XXX - prepend one AS to AS XXX 65002:XXX - prepend two ASes to AS XXX 65003:XXX - prepend three ASes to AS XXX 65004:XXX - prepend four ASex to AS XXX I just had to block one customer's netblock at MICE because Netflix traffic shifted in an undesirable manner yesterday. In this case, they really just needed to prepend Netflix at MICE, but since that wasn't an option they requested that we just block their netblock completely from the MICE route servers. BGP Communities give individual MICE members the ability to control their route advertisements to best suit their needs and routing policies without having to block the MICE route servers completely.

Oct. 22, 2014

Discussion Topic Response : Community Lists

by Levi Pederson

I will not be able to attend the UG meeting today but I would still like to respond to the discussion that is to take place during the meeting. This topic at hand is the decision to implement Community Strings in the Exchange. There have been a couple responses on this and the primary reasons stated is based on security from my understanding. I am opposed to this implementation. I believe the very idea of segregation in an Internet Exchange undermines the primary purpose of the exchange. We are here to make the internet better not honeycombed. The idea of segregation based on security is a bit odd to me. An allegorical situation would be the following : Invite multiple people over for a pot-luck dinner (BYO-Dish). Have someones kid break one said dish. Then have someone take ALL the food, secure in their house and grant access/monitor to specific pot-luck goers based entirely on their specific point of view. This process I feel will create too much segregation and deviate rather far from the ideological goal of the exchange. My thoughts on responses: 1. How can we continue to provide benefits and capabilities to new members or bgp sessions gone awry? a. We are currently implementing great layer 2 defenses and that is a great start. b. Create a list of best practices and configuration examples for connecting to the exchange as a community. Forgive the long post. Just my 2 cents on table tonight. Thank you,

Oct. 22, 2014

Re: MICE in the News

by Jeremy Lumby

I am at a loss for words after reading it J Actually so many things I could say, that I do not even know where to begin. From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of Anthony Anderberg Sent: Wednesday, October 22, 2014 12:51 PM To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET Subject: [MICE-DISCUSS] MICE in the News I stumbled on this article that mentioned MICE, apparently we could be part of some massive government conspiracy… also MICE takes up the whole building now so I assume Mike and Al will be looking for office space elsewhere. :-) http://www.citylab.com/tech/2013/10/how-government-might-tap-physical-infra… Anthony Anderberg Sr. Systems Analyst 320-234-5239 anthonyanderberg(a)nu-telecom.net www.nutelecom.net To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Oct. 22, 2014

MICE in the News

by Anthony Anderberg

I stumbled on this article that mentioned MICE, apparently we could be part of some massive government conspiracy... also MICE takes up the whole building now so I assume Mike and Al will be looking for office space elsewhere. :-) http://www.citylab.com/tech/2013/10/how-government-might-tap-physical-infra… Anthony Anderberg Sr. Systems Analyst [NUtel_email_logo_1] 320-234-5239 anthonyanderberg(a)nu-telecom.net<mailto:anthonyanderberg@nu-telecom.net> www.nutelecom.net<http://www.nutelecom.net>

Oct. 22, 2014

Re: Netflix Ramping Up

by David Farmer

I'll probably get it moved off tomorrow -- =============================================== David Farmer Email:farmer@umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 =============================================== > On Oct 21, 2014, at 20:32, Nathan Beard <nbeard(a)STELLARLLC.NET> wrote: > > Any update as to when Gigapop will be moved off the remote CNS switch to the main MICE switch as was discussed earlier today? > > The interconnect between switches has peaked above 9Gbps and we still haven't quite hit peak traffic levels at this time. We'll likely start to see issues if the link becomes any more loaded. > > <Email_Signature_Stellar_REAL.png> > >> On 10/21/2014 07:13 PM, Brady Kittel wrote: >> Looks like aggregate bandwidth has over doubled (at ~65Gbps currently and is still climbing. >> >>> On Tue, Oct 21, 2014 at 4:19 PM, Derek Poehls <dpoehls(a)702communications.com> wrote: >>> I shutdown my connections to the Route Servers, as I was going to crash into my 1G port speed shortly thereafter… Just a heads up if you notice a sudden drop on the graphs. >>> >>> -=-=-=-=-=-=- >>> Derek Poehls >>> 702 Communications >>> NOC Supervisor/Senior Network Engineer >>> (218) 284-5775 >>> >>> >>> >>> To unsubscribe from the MICE-DISCUSS list, click the following link: >>> http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 >>> >> >> >> To unsubscribe from the MICE-DISCUSS list, click the following link: >> http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 >> > > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Oct. 22, 2014

Re: Netflix Ramping Up

by Nathan Beard

Any update as to when Gigapop will be moved off the remote CNS switch to the main MICE switch as was discussed earlier today? The interconnect between switches has peaked above 9Gbps and we still haven't quite hit peak traffic levels at this time. We'll likely start to see issues if the link becomes any more loaded. On 10/21/2014 07:13 PM, Brady Kittel wrote: > Looks like aggregate bandwidth has over doubled (at ~65Gbps currently > and is still climbing. > > On Tue, Oct 21, 2014 at 4:19 PM, Derek Poehls > <dpoehls(a)702communications.com <mailto:dpoehls@702communications.com>> > wrote: > > I shutdown my connections to the Route Servers, as I was going to > crash into my 1G port speed shortly thereafter… Just a heads up > if you notice a sudden drop on the graphs. > > -=-=-=-=-=-=- > Derek Poehls > 702 Communications > NOC Supervisor/Senior Network Engineer > (218) 284-5775 <tel:%28218%29%20284-5775> > > > > ------------------------------------------------------------------------ > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > > > ------------------------------------------------------------------------ > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 >

Oct. 22, 2014