July 2016 - mice-discuss - lists.micemn.net

DDoS Identification / Mitigation
by Dave Williams Aug. 1, 2016

Aug. 1, 2016

Hi all - I know this isn't a MICE specific question, but I can't think of a better group of people to ask! I was wondering if anyone could share their strategy for DDoS detection and mitigation? We randomly have troubles with it and as you can imagine it's quite the pain! Thanks in advance! d Dave Williams Founder / Visionary Revelation Network Management, Inc. O: 763.367.6161 C: 763.670.5558

7 7

LTD Broadband 2nd port
by Jason Hanke Aug. 1, 2016

Aug. 1, 2016

LTD Broadband is adding a second MICE connection on the main switch. Their connection on the NP Remote switch will remain. Port: xe-2/0/4 IPv4: 206.108.255.42/24 IPv6: 2001:504:27:0:6:045A::2/64 ASN: 394330 Contact: corey.hauer(a)ltdbroadband.com They will need route server config for this port as well. These ports will NOT be in a LAG group. Welcome Aboard (again)! -- Jay Hanke CTO Neutral Path Communications 3 Civic Center Plaza, Suite 204 Mankato, MN 56001 (507) 327-2398 mobile jayhanke(a)neutralpath.net www.neutralpath.net

2 1

State of MN DNS Issues
by Richard Laager July 20, 2016

July 20, 2016

FYI: state.mn.us DNS has broken DNSSEC and broken IPv6. I called yesterday, and they were aware of the DNSSEC issue. http://dnsviz.net/d/state.mn.us/dnssec/ -- Richard

3 3

Fwd: [JPTECHS] Fwd: [MICE-DISCUSS] State of MN DNS Issues
by David Farmer July 19, 2016

July 19, 2016

I forwarded this off to the guys at the state, here is a response. Thanks ---------- Forwarded message ---------- From: Reilly, Russ (MNIT) <russ.reilly(a)state.mn.us> Date: Tue, Jul 19, 2016 at 9:19 AM Subject: Re: Fwd: [MICE-DISCUSS] State of MN DNS Issues Thanks, we are aware of some complaints and working the issue. Something possibly related to how IPv6 was enable on the Infoblox and the various addresses. Comcast was broke Saturday and we got that fixed so it seems there are just oddities in various resolvers we are working through this with Infoblox. *Russ Reilly* | Network Support, network Support Manager MN.IT Services, State of Minnesota 651-201-1022 (w) *| * russ.reilly(a)state.mn.us *[image: Title: MN.IT Services logo - Description: MN.IT Services logo]* <http://www.mn.gov/oet> Information Technology for Minnesota Government *|* mn.gov/mnit <http://www.mn.gov/oet> Begin forwarded message: *From:* Doug McIntyre <merlyn(a)IPHOUSE.NET <merlyn(a)iphouse.net>> *Date:* July 19, 2016 at 08:51:27 CDT *To:* MICE-DISCUSS(a)LISTS.IPHOUSE.NET <MICE-DISCUSS(a)lists.iphouse.net> *Subject:* *Re: [MICE-DISCUSS] State of MN DNS Issues* *Reply-To:* MICE Discuss <MICE-DISCUSS(a)LISTS.IPHOUSE.NET <MICE-DISCUSS(a)lists.iphouse.net>> On Tue, Jul 19, 2016 at 03:42:13AM -0500, Richard Laager wrote: FYI: state.mn.us DNS has broken DNSSEC and broken IPv6. I called yesterday, and they were aware of the DNSSEC issue. I had to push out the early beta BIND 9.11 out to production so I could use the new Negative Trust anchor option for them on my frontline resolvers. rndc nta state.mn.us [view] I think only BIND based resolvers thought it was an error though. -- Doug McIntyre <merlyn(a)iphouse.net> ~.~ ipHouse ~.~ Network Engineer/Provisioning/Jack of all Trades -- =============================================== David Farmer Email:farmer@umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 ===============================================

1 0

Good news from Akamai (Finally)
by DeLong, Owen July 13, 2016

July 13, 2016

We have resolved the router issue and we are now delivering almost 8 Gbps to MICE. I expect this will continue to increase as things stabilize over the coming days. Please let me know if you have any questions. Also, in case you missed the first few memos… WE NO LONGER PEER WITH ROUTE SERVERS at MICE. If you want Akamai Traffic, you must set up bilateral peering with us. Send email to peering(a)akamai.com If you send email to peering(a)akamai.com and do not receive a response within 48 hours, please resend your email and CC owen(a)akamai.com. We will respond to peering requests on a timely basis and we have an open peering policy. Owen

2 2

Akamai @ MICE
by DeLong, Owen July 12, 2016

July 12, 2016

Among the multitude of problems that have plagued this process, we have discovered yet another one. This time, it’s not actually our fault. It seems that the nifty new Juniper we deployed there is suffering from a hardware failure in the form of a memory failure which is causing a number of odd behaviors (such as forwarding packets in ways that don’t agree with the forwarding table). We are working to resolve this latest issue as quickly as possible and will continue to work to bring this site back up to full capacity as soon as possible. We apologize (again) for any inconvenience. Owen

1 0

Slack
by Jason Hanke July 1, 2016

July 1, 2016

Does anyone on the list use Slack? Would a MICE Slack channel be useful? -- Jay Hanke CTO Neutral Path Communications 3 Civic Center Plaza, Suite 204 Mankato, MN 56001 (507) 327-2398 mobile jayhanke(a)neutralpath.net www.neutralpath.net

4 6