- mice-discuss - lists.micemn.net

Summer MICE Joint meeting
by Jay Hanke April 12, 2014

April 12, 2014

I'd like to throw out MKE or Madison as a venue for the summer meeting. I also reached out to KCIX and they are interested in coming up. I sent an email to MBIX but haven't heard back yet. There is a fair amount of interest from the OpenIX folks. There is a fair amount of OpenIX activity across the border in IL. Wisconsin folks, can we get a sponsor (location/food)? Needs to be close to an airport -- Jay Hanke CTO, CCIE #19093 Mankato Networks LLC PO Box 54 619 S Front St Mankato, MN 56001-3838 Google 530-618-2398 jayhanke(a)mankatonetworks.net http://www.mankatonetworks.com http://www.neutralpath.net ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

5 7

Website Update
by Richard Laager April 6, 2014

April 6, 2014

I've cut in the new website design (thanks MDU Ethernet!). If you see any problems, please let me know. -- Richard ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

6 10

MICE Cacti Server - To Be Rebooted
by Justin Krejci March 27, 2014

March 27, 2014

As the server was not originally setup to run Cacti it does not have a desirable amount of CPU and RAM. Since it is a VM the process to upgrade the hardware is barely more time than a shutdown and boot up will take. I am going to do this shortly so the server/site will be offline for a few minutes and there'll be a small gap in the data possibly. I will try and time it to be in between polling intervals so it may not even miss any data. ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

2 2

UG 12 Minutes
by Shaun Carlson March 26, 2014

March 26, 2014

Please see attached. Talk to Reid if you have any questions. s *Shaun Carlson*Network Engineering Manager | Arvig ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

4 3

micemn-01.micemn.net route reflector at 206.108.255.1
by Doug McIntyre March 24, 2014

March 24, 2014

We've noticed this being unresponsive several times this evening. I'm into the machine, but it is behaving badly, and from past experience, (and not direct evidence since it is remote and I can't get the relavent logs), it feels like a hard drive failing on this system. Ie. it may run some of its process out of memory for some functions, but other functions are probably locking up and not behaving correctly. Even RAIDed as it is. Probably the best course of action is to bring out a fresh drive to it and swap whatever drive is failing and let the mirror rebuild. I think we've got some of the 80GB WD800AAJS that is part of the mirror on the other route reflector around somewhere... -- Doug McIntyre <merlyn(a)iphouse.net> ~.~ ipHouse ~.~ Network Engineer/Provisioning/Jack of all Trades ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

6 15

MICE User Group meeting next Wednesday
by Mike Hemphill March 21, 2014

March 21, 2014

All, Just a quick meeting reminder for our upcoming UG meeting on Wednesday, March 26th at 4:00 PM in the 511 Building cafeteria. Please send Shaun, Reid and me any agenda items you may have or any topics you want to be sure are covered. We currently do not have a sponsor for food & beverages, if your company is willing to step up, please let us know. Thanks! Mike Mike Hemphill General Manager | *Cologix, Inc.* <http://www.cologix.com/> 511 11th Ave S, Suite 450 | Minneapolis, MN 55415 P: 1+612.333.1922 | M: 1+612.812.5242 mike.hemphill(a)cologix.com ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

10 13

Akamai (20940) < > MICE IXP Upgrade to 2x10G
by Hannigan, Martin March 20, 2014

March 20, 2014

Everyone, All paperwork has been completed and Akamai will be upgrading to 20G. FYI. Best Regards, Martin Hannigan Director, Network and Data Center Architecture Akamai Technologies, Inc. ASN 20940 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

2 1

Please Welcome Radio Link Internet to MICE
by Jay Hanke March 19, 2014

March 19, 2014

main switch: xe-0/0/17 Radio Link Internet AS: 53301 206.108.255.31/24 2001:504:27:0:0:d035::1/64 daniel.petsinger(a)radiolinkinternet.com Prefix Limit 25 They will be providing an optic for their 10G fiber connection. Route-server and defaulting graphing please. Thanks! -- Jay Hanke CTO, CCIE #19093 Mankato Networks LLC PO Box 54 619 S Front St Mankato, MN 56001-3838 Google 530-618-2398 jayhanke(a)mankatonetworks.net http://www.mankatonetworks.com http://www.neutralpath.net ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

2 1

NTIA announcement about ICANN transition to independent entity
by Mike O'Connor March 15, 2014

March 15, 2014

hi all, i’m presuming most of you have seen the NTIA announcement by now. since i hang “MICE" on my nametag when i participate in ICANN meetings, i thought i’d push along some observations, and some links to detailed info that may not find its way into the press coverage. the announcement: http://www.ntia.doc.gov/press-release/2014/ntia-announces-intent-transition… WASHINGTON – To support and enhance the multistakeholder model of Internet policymaking and governance, the U.S. Commerce Department’s National Telecommunications and Information Administration (NTIA) today announces its intent to transition key Internet domain name functions to the global multistakeholder community. As the first step, NTIA is asking the Internet Corporation for Assigned Names and Numbers (ICANN) to convene global stakeholders to develop a proposal to transition the current role played by NTIA in the coordination of the Internet’s domain name system (DNS). the FAQ on ICANN’s site; http://www.icann.org/en/about/agreements/iana/functions-transfer-faqs-14mar… want to know a LOT about these issues (like PhD level)? Here’s Samantha Dickinson’s summary of a boatload of submissions from all over the place that’s going into the upcoming Net Mundial meeting in Brazil. read all these (like i am right now) and you’ll know where the proposals lie. http://linguasynaptica.com/netmundial-submissions-on-iana/ my view is mostly “keep calm and peer on.” i’m hoping the transition could be the same level of non-event that taking down the NSF backbone network was. on the other hand, we don’t know how this is actually going to turn out until it’s done. the fearmongers in Washington aren’t being helpful. my view “from the bottom of the bottom-up process” is that i’ll be an interested observer and i’ll probably continue to put most of my energy into the day-to-day policy stuff. that’s the stuff that makes ICANN legitimate. i was on a conference call this morning where the CEO (Fadi Chehadi) and the Chair of the Board (Steve Crocker - author of RFC 0001) talked to community members about what’s going on. the points i raised were mostly about bandwidth (the community is already really overloaded) and process (a good project plan would be nice). happy to try to answer questions, although i’m still coming up to speed myself — this came as a surprise to almost everybody. i’m headed to the ICANN meeting in Singapore (leaving this Wednesday, back the following Friday). the outlines will be clearer after that. mikey PHONE: 651-647-6109, FAX: 866-280-2356, WEB: www.haven2.com, HANDLE: OConnorStP (ID for Twitter, Facebook, LinkedIn, etc.) ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

1 0

DDoS Attacks
by Richard Laager March 13, 2014

March 13, 2014

Last night, we got hit by a ~3 Gbps DDoS attack. It's been a while since this has happened to us, so I'd like to make sure I'm still up on the state of the art. Is there anything more to be done than the following? 1. Identify the victim. 2. Null route the victim. 3. Propagate the null route to your upstreams (via BGP, if supported, otherwise a phone call to their NOC). 4. Move the victim to a new IP. To avoid participating in at least some classes of DDoS attacks, we: * long ago implemented uRPF (and/or similar ACLs) to block spoofed outbound packets, as recommended by BCP 38 (RFC 2827). * ensured our NTP servers (and any NTP servers of our customers) are not responding to monlist queries. The openntpproject.org website is useful here. They list vulnerable NTP servers by IP range, or you can get all NTP servers by AS (replace YOUR_AS with your AS, and optionally, add &csv=1) and then query with ntpdc -n -c monlist IP: http://openntpproject.org/searchby-asn.cgi?search_asn=YOUR_AS * just this week started addressing customers with open DNS resolvers, which can also be used in amplification attacks: http://openresolverproject.org/searchby-asn.cgi?search_asn=YOUR_AS Is there anything else we should be doing? -- Richard ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

4 3