- mice-discuss - lists.micemn.net

MICE Route Filtering
by David Farmer Oct. 8, 2018

Oct. 8, 2018

At NANOG it was strongly suggested we, privately for MICE and more generally for all IXes, should implement IRR filtering on our route servers ASAP. We are now one of the bigger IXes not already filtering, especially in the US. We should probably block routes with invalid RPKI ROAs too. Arouteserver was recommended as one of the better and easier to implement options. There are offers to help us with this from Theo de Raadt < deraadt(a)yycix.ca> of the Calgary Internet Exchange (YYCIX) and by others. https://blog.apnic.net/2017/03/17/ixp-automation-made-easy-new-open-source-… https://github.com/pierky/arouteserver https://arouteserver.readthedocs.io/en/latest/ FYI additionally, Fastly already filters based on IRR objects, and HE has recently started filtering. https://www.fastly.com/peering http://routing.he.net/algorithm.html Also at NANOG, it was announced by Google that they plan to begin filtering routes based IRR data early next year. See slide 114 of the following; https://pc.nanog.org/static/published/meetings/NANOG74/1760/20181003_Tzveta… There is lots of other good stuff in the deck, but the fact that Google plans to start filtering based on IRR objects is BIG news. So, we need to escalate doing route filtering on our Route Servers. Furthermore, if you don't already have IRR objects, you should probably start working on them. The following is a handy tool to check the consistency of your IRR objects. http://irrexplorer.nlnog.net/ Thanks. -- =============================================== David Farmer Email:farmer@umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 ===============================================

3 3

Fwd: Voting Now Open for the 2018 ARIN Board of Trustees, ARIN Advisory Council, and NRO NC Elections
by David Farmer Oct. 6, 2018

Oct. 6, 2018

If you are an ARIN Member voting contact please remember to vote. If you are not your organizations voting contact please remind your voting contact to vote. If you would like suggestions on who to vote for please email me off the list. By the way, I'm not up until next year, but voting is still important. Thanks. ---------- Forwarded message --------- From: ARIN <info(a)arin.net> Date: Thu, Oct 4, 2018 at 5:01 PM Subject: [arin-announce] Voting Now Open for the 2018 ARIN Board of Trustees, ARIN Advisory Council, and NRO NC Elections To: <arin-announce(a)arin.net> Cast your online ballot now in the 2018 ARIN Elections to fill two seats on the ARIN Board of Trustees, five seats on the ARIN Advisory Council, and one seat on the Number Resource Organization Number Council (NRO NC). Eligible Voting Contacts from General Members in Good Standing as of the voter eligibility deadline of 20 August, may cast an online ballot now through 6:00 PM EDT, Friday, 12 October. To vote, simply log in to ARIN Online and look for the “Vote Now” link on your dashboard. To view candidate biographies, please view the ARIN Elections 2018 Voter Guide at: https://www.arin.net/participate/elections/candidate_bios.pdf To view or submit a Statement of Support, please click on the link below. Anyone, regardless of voter status, is eligible to submit a Statement of Support for a candidate. https://www.bigpulse.com/p51139/ During the week of 8 October, all eligible Voting Contacts should be aware that an ARIN representative will be personally calling them as a gentle reminder to please vote and to answer any election-related questions they may have. Participation in the election process is crucial, requires only minutes of a voter’s time, is done online, and is an important member responsibility. A single cast ballot provides eligible member organizations an opportunity to shape the future of ARIN, our community, and the Internet. For questions about voting, or if you encounter an issue with the election system, please contact a member of the Member Services team immediately via email at members(a)arin.net or submit a question via ARIN Online and direct it to Meetings/Elections. Regards, Wendy Leedy Member Engagement Coordinator American Registry for Internet Numbers (ARIN) -- =============================================== David Farmer Email:farmer@umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 ===============================================

1 0

Anyone else seeing AS36040 (Google/Youtube) bouncing in and out this morning
by Frank Bulk Oct. 5, 2018

Oct. 5, 2018

Since 9:29 am a third-party service we use has been noticing that AS36040 is coming and going. I assume that it's seeing it from MICE's router server ... any way to confirm? Frank

3 4

Kansas City Internet eXchange peer and beer
by Brandon Mulligan Oct. 4, 2018

Oct. 4, 2018

Greetings. The Kansas City Internet eXchange is holding a free peer and beer event on Tuesday October 16th. We welcome any network operators from the midwest region.

1 1

Last call for Arista Training Day!
by John McLaughlin Oct. 1, 2018

Oct. 1, 2018

Hello MICE Members: Interested in learning more about why Arista Networks is quickly becoming the preferred choice in the datacenter, hybrid clouded central offices? Please join Arista Networks for a no-cost, full day of training with hands-on labs, led by Arista Engineers. Minnet When and Where? Wednesday, October 3rd, 9:00AM - 4:00PM Minnetonka Executive Suites - Lake Superior Room <https://maps.google.com/?q=12800+WhiteWater+Drive+Minnetonka,+MN,+55343&ent…> 12800 WhiteWater Drive <https://maps.google.com/?q=12800+WhiteWater+Drive+Minnetonka,+MN,+55343&ent…> Minnetonka, MN, 55343 <https://maps.google.com/?q=12800+WhiteWater+Drive+Minnetonka,+MN,+55343&ent…> Topics include the following: Arista Corporate overview Extensible Operating System (EOS®) overview and CLI Multi-Chassis Aggregation (MLAG) and Virtual ARP (VARP) overview Building Multi-Tenant Services with EVPN and VXLAN Provisioning with Arista CloudVision® Portal (CVP) Arista eAPI Lunch will be provided. **Note: please bring a laptop to access virtual labs. John McLaughlin North Central Sales jmclaughlin(a)arista.com Cell# 612-816-9024 https://www.barrons.com/articles/worlds-best-ceos-growth-leaders-1527304583…

1 0

Nanog?
by Reid Fishler Sept. 30, 2018

Sept. 30, 2018

Whose coming? This week, Vancouver. Reid -- Reid Fishler Director Hurricane Electric +1-510-580-4178

2 1

Re: South Front Networks, LLC Remote switch request
by Richard Laager Sept. 29, 2018

Sept. 29, 2018

I'm bringing this remote switch request to the discussion list per our remote switch policy: http://micemn.net/technical.html On 09/28/2018 09:25 AM, Jay Hanke wrote: > South Front Networks requests approval to install a MICE Remote Switch > in SFN's Albert Lea Datacenter. > > South Front proposes the following: > 1) SFN will acquire a Juniper QFX5100 or Arista comparable switch > dedicated to MICE. > 2) SFN will acquire and pay for any required connectivity back to the > MN VoIP remote switch, MN VoIP and SFN remote switches will share the > existing 40 Gbps MICE link into the main fabric. Both SFN and MN VoIP > agree to upgrade capacity as needed on the uplink to the main switch. > 3) SFN will initially install 20 Gbps of capacity and will upgrade > capacity as needed per the board and technical committee requirements > 4) SFN agrees to enforce the MICE technical port rules > 5) SFN agrees to coordinate connections to the new remote switch > 6) SFN agrees to inform all prospective members that connections going > to the SFN MICE Remote switch are not connected directly to MICE. > 7) SFN agrees to perform any required configuration and troubleshooting > 8) SFN agrees to provide configuration access and snmp access to the > MICE technical committee to ease troubleshooting and to provide > publicly available graphing. > > Thanks! > > -- > Jay Hanke, President > South Front Networks > jayhanke(a)southfront.io <mailto:jayhanke@southfront.io> > Phone 612-204-0000 -- Richard

3 3

Role email accounts on the list
by Mike Horwath Sept. 28, 2018

Sept. 28, 2018

How do people feel about this? We just had someone join the list using a noc@ email address. -- Mike Horwath, reachable via drechsau(a)Geeks.ORG

3 2

Fwd: route server IRR objects: RIPE use for ARIN addresses deprecated, ARIN IRR & RPKI tutorials
by Richard Laager Sept. 26, 2018

Sept. 26, 2018

This is from the SeattleIX announce list. I'm forwarding it, with Chris's permission, in case this is relevant to anyone here. -------- Forwarded Message -------- Subject: route server IRR objects: RIPE use for ARIN addresses deprecated, ARIN IRR & RPKI tutorials Date: Tue, 25 Sep 2018 22:22:14 +0000 (UTC) From: Chris Caputo <ccaputo(a)seattleix.net> To: announce(a)seattleix.net tl;dr: - RIPE made changes which don't break anything now, but may in future. - I recommend you move your IRR records to the RIR which assigned or allocated your prefixes. - link to ARIN RPKI tutorial at bottom. Many of you that used RIPE to create your Internet Routing Registry (IRR) objects received an email from RIPE at the beginning of September about a change in their registry in which non-RIPE prefixes are now labeled with "source: RIPE-NONAUTH". This is part of an effort to improve the quality of IRR data for the purposes of reducing accidental or fraudulent BGP announcements. The idea being that the Regional Internet Registries (RIRs) know best who addresses have been assigned/allocated to. If you have your records at RIPE (or elsewhere and want to move to ARIN), I recommend you do the following: (note the example with my AS6456 will soon no longer work because I will be deleting my records at RIPE since they have been moved to ARIN) - First, determine your maintainer object name. This can be figured out by going to http://www.radb.net/query/ and running a query on your ASN or prefixes. For example, a query on my AS6456 reveals a RIPE maintainer "mnt-by" field "MAINT-ALTOPIA-RIPE". You may find you have multiple maintainers and multiple IRRs. Focus on the RIPE one if that is what you want to move. aut-num: AS6456 [...] mnt-by: MAINT-ALTOPIA-RIPE source: RIPE-NONAUTH - Using my "MAINT-ALTOPIA-RIPE" I can do an inverse query at RIPE to see all of my objects: $ whois -h whois.ripe.net -i mnt-by -B MAINT-ALTOPIA-RIPE aut-num: AS6456 as-name: ALTOPIA-6456 descr: Altopia AS 6456 [...] as-set: AS-ALTOPIA descr: Altopia Corporation members: AS6456 [...] route: 208.90.168.0/22 descr: ALTOPIA-V4-1 assigned by ARIN origin: AS6456 [...] route6: 2620:0:cf0::/48 descr: ALTOPIA-V6-1 assigned by ARIN origin: AS6456 [...] etc... - Save a copy of all of your objects so you can use the result to aide in your move to ARIN. - Refer to https://www.seattleix.net/irr-tutorial#arin for a new tutorial on how to get set up at ARIN's IRR. - Use http://irrexplorer.nlnog.net to visualize which IRRs are reporting your prefixes or ASN. - After all of your ARIN objects are moved to ARIN, work to delete your ARIN objects at RIPE or elsewhere as part of being tidy. Bonus! I also made an ARIN Resource Public Key Infrastructure (RPKI) tutorial. Turns out RPKI is pretty easy to configure, with respect to making it so your own ARIN prefixes are somewhat (*) protected from being announced by unauthorized ASNs. (*: with respect to networks running RPKI validators) - https://www.seattleix.net/irr-tutorial#arinrpki Feedback & corrections welcome! Chris

2 1

Arista Test Drive Training Wednesday, October 3rd
by John McLaughlin Sept. 23, 2018

Sept. 23, 2018

Hello MICE Members: If you can join us for a day of free training please use the links below to register and review what an Arista Test Drive covers. https://solutions.arista.com/2018-09-atd-minnetonka-mn <https://solutions.arista.com/2018-09-atd-minnetonka-mn> https://solutions.arista.com/atd-training <https://solutions.arista.com/atd-training> ATD TRAINING What we offer: A curriculum designed to deliver world-class content and learning experience Small, intimate class sizes, led by our local engineers, for greater classroom interaction In addition to the schedule listed, we can add classes to fit your needs. Just tell us when and where, and we take care of the rest Please reach out to your Arista Account Manager or Training(a)Arista.com <mailto:Training@Arista.com> for more information! Thanks, -JMc John McLaughlin North Central Sales jmclaughlin(a)arista.com Cell# 612-816-9024 https://www.barrons.com/articles/worlds-best-ceos-growth-leaders-1527304583…

1 0