- mice-discuss - lists.micemn.net

Please Welcome Radio Link Internet to MICE
by Jay Hanke March 19, 2014

March 19, 2014

main switch: xe-0/0/17 Radio Link Internet AS: 53301 206.108.255.31/24 2001:504:27:0:0:d035::1/64 daniel.petsinger(a)radiolinkinternet.com Prefix Limit 25 They will be providing an optic for their 10G fiber connection. Route-server and defaulting graphing please. Thanks! -- Jay Hanke CTO, CCIE #19093 Mankato Networks LLC PO Box 54 619 S Front St Mankato, MN 56001-3838 Google 530-618-2398 jayhanke(a)mankatonetworks.net http://www.mankatonetworks.com http://www.neutralpath.net ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

2 1

NTIA announcement about ICANN transition to independent entity
by Mike O'Connor March 15, 2014

March 15, 2014

hi all, i’m presuming most of you have seen the NTIA announcement by now. since i hang “MICE" on my nametag when i participate in ICANN meetings, i thought i’d push along some observations, and some links to detailed info that may not find its way into the press coverage. the announcement: http://www.ntia.doc.gov/press-release/2014/ntia-announces-intent-transition… WASHINGTON – To support and enhance the multistakeholder model of Internet policymaking and governance, the U.S. Commerce Department’s National Telecommunications and Information Administration (NTIA) today announces its intent to transition key Internet domain name functions to the global multistakeholder community. As the first step, NTIA is asking the Internet Corporation for Assigned Names and Numbers (ICANN) to convene global stakeholders to develop a proposal to transition the current role played by NTIA in the coordination of the Internet’s domain name system (DNS). the FAQ on ICANN’s site; http://www.icann.org/en/about/agreements/iana/functions-transfer-faqs-14mar… want to know a LOT about these issues (like PhD level)? Here’s Samantha Dickinson’s summary of a boatload of submissions from all over the place that’s going into the upcoming Net Mundial meeting in Brazil. read all these (like i am right now) and you’ll know where the proposals lie. http://linguasynaptica.com/netmundial-submissions-on-iana/ my view is mostly “keep calm and peer on.” i’m hoping the transition could be the same level of non-event that taking down the NSF backbone network was. on the other hand, we don’t know how this is actually going to turn out until it’s done. the fearmongers in Washington aren’t being helpful. my view “from the bottom of the bottom-up process” is that i’ll be an interested observer and i’ll probably continue to put most of my energy into the day-to-day policy stuff. that’s the stuff that makes ICANN legitimate. i was on a conference call this morning where the CEO (Fadi Chehadi) and the Chair of the Board (Steve Crocker - author of RFC 0001) talked to community members about what’s going on. the points i raised were mostly about bandwidth (the community is already really overloaded) and process (a good project plan would be nice). happy to try to answer questions, although i’m still coming up to speed myself — this came as a surprise to almost everybody. i’m headed to the ICANN meeting in Singapore (leaving this Wednesday, back the following Friday). the outlines will be clearer after that. mikey PHONE: 651-647-6109, FAX: 866-280-2356, WEB: www.haven2.com, HANDLE: OConnorStP (ID for Twitter, Facebook, LinkedIn, etc.) ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

1 0

DDoS Attacks
by Richard Laager March 13, 2014

March 13, 2014

Last night, we got hit by a ~3 Gbps DDoS attack. It's been a while since this has happened to us, so I'd like to make sure I'm still up on the state of the art. Is there anything more to be done than the following? 1. Identify the victim. 2. Null route the victim. 3. Propagate the null route to your upstreams (via BGP, if supported, otherwise a phone call to their NOC). 4. Move the victim to a new IP. To avoid participating in at least some classes of DDoS attacks, we: * long ago implemented uRPF (and/or similar ACLs) to block spoofed outbound packets, as recommended by BCP 38 (RFC 2827). * ensured our NTP servers (and any NTP servers of our customers) are not responding to monlist queries. The openntpproject.org website is useful here. They list vulnerable NTP servers by IP range, or you can get all NTP servers by AS (replace YOUR_AS with your AS, and optionally, add &csv=1) and then query with ntpdc -n -c monlist IP: http://openntpproject.org/searchby-asn.cgi?search_asn=YOUR_AS * just this week started addressing customers with open DNS resolvers, which can also be used in amplification attacks: http://openresolverproject.org/searchby-asn.cgi?search_asn=YOUR_AS Is there anything else we should be doing? -- Richard ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

4 3

Re: bgp flapping to 206.108.255.1
by Frank DiGravina March 13, 2014

March 13, 2014

Hello, I am shutting our peering to 206.108.255.1 until I see notice that that your route-reflector issue has been addressed. Thanks, Frank -- Frank DiGravina University of Minnesota Networking & Telecommunications Network Operations Phone: 612-626-9074 Cell: 612-386-0449 E-Mail: digravin(a)umn.edu Helpline: 612-301-HELP ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

1 0

XO issues Sunday morning?
by Frank Bulk March 9, 2014

March 9, 2014

This isn't a MICE-related question, but since so many MICE members are in the Minnesota area I thought I would ask. Sunday morning from 1:11 am to about 4:20 am we saw an unusually high number of websites time out over IPv6. We monitor 50 IPv6-enabled web sites over IPv6, performing both an ICMP check (if possible) and then HTTP over IPv6. There were at least 17 sites during that time frame that timed out on our monitoring systems' HTTP GET request. One pattern emerged -- 14 of them traceroute through an XO link that goes through Minneapolis. Here's a sample: traceroute to ipv6.test.Level3.com (2001:1900:2018:3000::105) from 2607:fe28:0:1000::5, port 80, from port 36274, 30 hops max, 60 bytes packets 1 router-core.mtcnet.net (2607:fe28:0:1000::1) 0.395 ms 0.325 ms 0.319 ms 2 sxct.sxcy.mtcnet.net (2607:fe28:11:1002::197) 0.188 ms 0.135 ms 0.185 ms 3 v6-premier.sxcy-mlx.fbnt.netins.net (2001:5f8:7f0a:2::1) 1.612 ms 1.545 ms 1.613 ms 4 v6-ins-db1-te-13-2-219.desm.netins.net (2001:5f8:1:1::1) 6.667 ms 6.566 ms 8.002 ms 5 v6-ins-dc1-et-8-2.desm.netins.net (2001:5f8::1:1) 6.624 ms 7.995 ms 6.602 ms 6 2610:18:18b:c000::11 (2610:18:18b:c000::11) 12.108 ms 12.075 ms 12.137 ms 7 mcr1.minneapolis-mn.us.xo.net (2610:18::30b8) 21.431 ms 21.452 ms 21.421 ms 8 vb1710.rar3.chicago-il.us.xo.net (::ffff:216.156.0.169) 30.701 ms 23.639 ms 23.771 ms .... I then looked at the daily traceroutes we have on file for all 50 sites we monitor and it looks like 15 of them go through XO. So over 93% (14 out of 15) of the sites that go through XO timed out during the 1:11 am to 4:20 am time period. Did anyone with XO connectivity see issues Sunday morning? Frank ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

1 0

2 x 10GE Contact?
by Hannigan, Martin March 7, 2014

March 7, 2014

Who can I talk to about adding a second 10G? Best, , -M< ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

2 1

Public Stats Aggregate View
by Brady Kittel Feb. 26, 2014

Feb. 26, 2014

Any update on when we'll be adding the aggregate ingress+egress stats to the main page of the MICE site as was discussed in the minutes for the last UG? I only ask as I'd like to update MICE on the Wikipedia article listing IX's by total throughput but I need the public graph to cite for the update. Currently they're listing MICE at 10Gbit for throughput. ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

4 7

Re: Google Global Cache Interest?
by Dan Olsen Feb. 26, 2014

Feb. 26, 2014

Reid. Do you need member support to help with Netflix etc Sent from my Verizon Wireless 4G LTE DROID Reid Fishler <rfishler(a)HE.NET> wrote: >I am already on Netflix also...just not as good results yet. I am working on it. > > >Reid > > > >On Fri, Feb 21, 2014 at 5:34 PM, Nathan Beard <nbeard(a)stellarllc.net> wrote: > >I for one would have interest in utilizing a Google cache server if MICE were to implement this. > >Also, are there any updates regarding a potential MICE to Netflix peering solution? I know that 511 isn't listed as a public peering location on the Netflix Open Connect website, but I seem to recall that discussions have been underway for some time in an attempt to make this happen. I would be very interested if somebody had information to share on this, since it is something that be of great benefit to Stellar. > >Thanks! > > > > > >On 02/21/2014 04:19 PM, Russell Berg wrote: > >Some MICE peers already have Google (and other) caches, so you may have to poll to see who would be participating in a Google cache at MICE to get more accurate bandwidth measurements. Russ Airstream Communications -----Original Message----- From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of Brady Kittel Sent: Friday, February 21, 2014 9:11 AM To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET Subject: [MICE-DISCUSS] Google Global Cache Interest? Not sure if maybe someone has already looked into this. On a wild hair I filled out the inquiry form for looking at a Google Global Cache cluster for our site and also mentioned there is an IX they might be able to connect to as an alternative option. We're a bit below their peak cachable content requirements however I have no doubt MICE would far exceed them. Would there be any interest in placing one on MICE for members to share? ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > > >To unsubscribe from the MICE-DISCUSS list, click the following link: >http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > > > >-- >Reid Fishler >Director >Hurricane Electric >+1-510-580-4178 > > >To unsubscribe from the MICE-DISCUSS list, click the following link: >http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

2 1

Google Global Cache Interest?
by Brady Kittel Feb. 24, 2014

Feb. 24, 2014

Not sure if maybe someone has already looked into this. On a wild hair I filled out the inquiry form for looking at a Google Global Cache cluster for our site and also mentioned there is an IX they might be able to connect to as an alternative option. We're a bit below their peak cachable content requirements however I have no doubt MICE would far exceed them. Would there be any interest in placing one on MICE for members to share? ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

8 10

Re: Netflix
by Jeremy Lumby Feb. 21, 2014

Feb. 21, 2014

I have had conversations with Netflix about peering in Minneapolis, and they have said that the project has existed for years, however it keeps getting bumped back for other projects (European expansion is one that they mentioned). I do not have a great direct contact to do some arm twisting with. From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of Nathan Beard Sent: Friday, February 21, 2014 4:35 PM To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET Subject: Re: [MICE-DISCUSS] Google Global Cache Interest? I for one would have interest in utilizing a Google cache server if MICE were to implement this. Also, are there any updates regarding a potential MICE to Netflix peering solution? I know that 511 isn't listed as a public peering location on the Netflix Open Connect website, but I seem to recall that discussions have been underway for some time in an attempt to make this happen. I would be very interested if somebody had information to share on this, since it is something that be of great benefit to Stellar. Thanks! On 02/21/2014 04:19 PM, Russell Berg wrote: Some MICE peers already have Google (and other) caches, so you may have to poll to see who would be participating in a Google cache at MICE to get more accurate bandwidth measurements.RussAirstream Communications-----Original Message-----From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of Brady KittelSent: Friday, February 21, 2014 9:11 AMTo: MICE-DISCUSS(a)LISTS.IPHOUSE.NETSubject: [MICE-DISCUSS] Google Global Cache Interest?Not sure if maybe someone has already looked into this. On a wild hair I filled out the inquiry form for looking at a Google Global Cache cluster for our site and also mentioned there is an IX they might be able to connect to as an alternative option. We're a bit below their peak cachable content requirements however I have no doubt MICE would far exceed them. Would there be any interest in placing one on MICE for members to share?########################################################################To unsubscribe from the MICE-DISCUSS list, click the following link:http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1###########… unsubscribe from the MICE-DISCUSS list, click the following link:http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

1 0