- mice-discuss - lists.micemn.net

Re: MICE Route Filtering

by Richard Laager

On 10/06/2018 09:06 PM, Jeremy Lumby wrote: > I would propose that we start with RS#2 and test for a while, then we > can notify people who's prefixes are being rejected prior to applying to > RS#1. That would be ideal. > I would also propose that at the same time we set RS#2 to be > passive so that it cuts down on the chatter that it is creating on the > exchange waiting for people to connect, or people who have not yet > turned up their v6 sessions. Yes, please. -- Richard

Oct. 7, 2018

Re: MICE Route Filtering

by Jeremy Lumby

I am in favor of this, especially if we have someone that is experienced that is willing to help. I would propose that we start with RS#2 and test for a while, then we can notify people who's prefixes are being rejected prior to applying to RS#1. I would also propose that at the same time we set RS#2 to be passive so that it cuts down on the chatter that it is creating on the exchange waiting for people to connect, or people who have not yet turned up their v6 sessions. I think this would be a great point of discussion at the next UG. From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of David Farmer Sent: Saturday, October 06, 2018 11:20 AM To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET Subject: [MICE-DISCUSS] MICE Route Filtering At NANOG it was strongly suggested we, privately for MICE and more generally for all IXes, should implement IRR filtering on our route servers ASAP. We are now one of the bigger IXes not already filtering, especially in the US. We should probably block routes with invalid RPKI ROAs too. Arouteserver was recommended as one of the better and easier to implement options. There are offers to help us with this from Theo de Raadt <deraadt(a)yycix.ca> of the Calgary Internet Exchange (YYCIX) and by others. https://blog.apnic.net/2017/03/17/ixp-automation-made-easy-new-open-source-… https://github.com/pierky/arouteserver https://arouteserver.readthedocs.io/en/latest/ FYI additionally, Fastly already filters based on IRR objects, and HE has recently started filtering. https://www.fastly.com/peering http://routing.he.net/algorithm.html Also at NANOG, it was announced by Google that they plan to begin filtering routes based IRR data early next year. See slide 114 of the following; https://pc.nanog.org/static/published/meetings/NANOG74/1760/20181003_Tzveta… There is lots of other good stuff in the deck, but the fact that Google plans to start filtering based on IRR objects is BIG news. So, we need to escalate doing route filtering on our Route Servers. Furthermore, if you don't already have IRR objects, you should probably start working on them. The following is a handy tool to check the consistency of your IRR objects. http://irrexplorer.nlnog.net/ Thanks. -- =============================================== David Farmer Email:farmer@umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 =============================================== To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Oct. 7, 2018

MICE Route Filtering

by David Farmer

At NANOG it was strongly suggested we, privately for MICE and more generally for all IXes, should implement IRR filtering on our route servers ASAP. We are now one of the bigger IXes not already filtering, especially in the US. We should probably block routes with invalid RPKI ROAs too. Arouteserver was recommended as one of the better and easier to implement options. There are offers to help us with this from Theo de Raadt < deraadt(a)yycix.ca> of the Calgary Internet Exchange (YYCIX) and by others. https://blog.apnic.net/2017/03/17/ixp-automation-made-easy-new-open-source-… https://github.com/pierky/arouteserver https://arouteserver.readthedocs.io/en/latest/ FYI additionally, Fastly already filters based on IRR objects, and HE has recently started filtering. https://www.fastly.com/peering http://routing.he.net/algorithm.html Also at NANOG, it was announced by Google that they plan to begin filtering routes based IRR data early next year. See slide 114 of the following; https://pc.nanog.org/static/published/meetings/NANOG74/1760/20181003_Tzveta… There is lots of other good stuff in the deck, but the fact that Google plans to start filtering based on IRR objects is BIG news. So, we need to escalate doing route filtering on our Route Servers. Furthermore, if you don't already have IRR objects, you should probably start working on them. The following is a handy tool to check the consistency of your IRR objects. http://irrexplorer.nlnog.net/ Thanks. -- =============================================== David Farmer Email:farmer@umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 ===============================================

Oct. 6, 2018

Fwd: Voting Now Open for the 2018 ARIN Board of Trustees, ARIN Advisory Council, and NRO NC Elections

by David Farmer

If you are an ARIN Member voting contact please remember to vote. If you are not your organizations voting contact please remind your voting contact to vote. If you would like suggestions on who to vote for please email me off the list. By the way, I'm not up until next year, but voting is still important. Thanks. ---------- Forwarded message --------- From: ARIN <info(a)arin.net> Date: Thu, Oct 4, 2018 at 5:01 PM Subject: [arin-announce] Voting Now Open for the 2018 ARIN Board of Trustees, ARIN Advisory Council, and NRO NC Elections To: <arin-announce(a)arin.net> Cast your online ballot now in the 2018 ARIN Elections to fill two seats on the ARIN Board of Trustees, five seats on the ARIN Advisory Council, and one seat on the Number Resource Organization Number Council (NRO NC). Eligible Voting Contacts from General Members in Good Standing as of the voter eligibility deadline of 20 August, may cast an online ballot now through 6:00 PM EDT, Friday, 12 October. To vote, simply log in to ARIN Online and look for the “Vote Now” link on your dashboard. To view candidate biographies, please view the ARIN Elections 2018 Voter Guide at: https://www.arin.net/participate/elections/candidate_bios.pdf To view or submit a Statement of Support, please click on the link below. Anyone, regardless of voter status, is eligible to submit a Statement of Support for a candidate. https://www.bigpulse.com/p51139/ During the week of 8 October, all eligible Voting Contacts should be aware that an ARIN representative will be personally calling them as a gentle reminder to please vote and to answer any election-related questions they may have. Participation in the election process is crucial, requires only minutes of a voter’s time, is done online, and is an important member responsibility. A single cast ballot provides eligible member organizations an opportunity to shape the future of ARIN, our community, and the Internet. For questions about voting, or if you encounter an issue with the election system, please contact a member of the Member Services team immediately via email at members(a)arin.net or submit a question via ARIN Online and direct it to Meetings/Elections. Regards, Wendy Leedy Member Engagement Coordinator American Registry for Internet Numbers (ARIN) -- =============================================== David Farmer Email:farmer@umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 ===============================================

Oct. 6, 2018

Re: ADV: [MICE-DISCUSS] Anyone else seeing AS36040 (Google/Youtube) bouncing in and out this morning

by Frank Bulk

That’s a reasonable guess – the NOC escalated this to another department, but I don’t think the underlying cause for the prefix adv/withdrawal was found. Frank From: MICE Discuss <MICE-DISCUSS(a)LISTS.IPHOUSE.NET> On Behalf Of Darin Steffl Sent: Wednesday, October 3, 2018 9:50 PM To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET Subject: Re: [MICE-DISCUSS] ADV: [MICE-DISCUSS] Anyone else seeing AS36040 (Google/Youtube) bouncing in and out this morning Looks like Google's traffic dropped from around 60G to under 20G tonight so they must be working on their peering to MICE? On Wed, Oct 3, 2018 at 12:20 PM Frank Bulk <fbulk(a)mypremieronline.com<mailto:fbulk@mypremieronline.com>> wrote: Thanks, I've sent a note to peering(a)google.com<mailto:peering@google.com>. Frank -----Original Message----- From: MICE Discuss <MICE-DISCUSS(a)LISTS.IPHOUSE.NET<mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET>> On Behalf Of Doug McIntyre Sent: Wednesday, October 03, 2018 11:39 AM To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET<mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET> Subject: Re: [MICE-DISCUSS] ADV: [MICE-DISCUSS] Anyone else seeing AS36040 (Google/Youtube) bouncing in and out this morning On Wed, Oct 03, 2018 at 04:12:04PM +0000, Frank Bulk wrote: >Since 9:29 am a third-party service we use has been noticing that AS36040 is coming and going. I assume that it's seeing it from MICE's router server ... any way to confirm? 36040 does talk to the route servers, and the route hasn't been up that long. I don't have any errors logged for 36040 though. Just the route keeps getting injected and withdrawn. 104.237.191.0/24<http://104.237.191.0/24> is withdrawn now from 36040. -- Doug McIntyre <merlyn(a)iphouse.net<mailto:merlyn@iphouse.net>> ~.~ ipHouse ~.~ Network Engineer/Provisioning/Jack of all Trades -- Darin Steffl Minnesota WiFi www.mnwifi.com<http://www.mnwifi.com/> 507-634-WiFi [http://www.snoitulosten.com/wp-content/uploads/2010/01/facebook-small.jpg]<http://www.facebook.com/minnesotawifi> Like us on Facebook<http://www.facebook.com/minnesotawifi> ________________________________ To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Oct. 5, 2018

Re: Kansas City Internet eXchange peer and beer

by Brandon Mulligan

...I apologize for sending a partial message... This is a good opportunity to meet fellow network operators in the Kansas City region, learn more about traffic exchanging opportunities and, of course, partake of some KC craft beers. This year we've chosen Cinder Block Brewery to host us. There is no cost to attend. We will provide the beer and food. All you need to do is show up. We will start with beer and food at 5pm. Our presentation starts at 6pm allowing time for visitors to arrive. The rest of the time is up to you to peer and drink beer! Non alcoholic beverages will also be provided. The event will be held on October 16th 2018 from 5-9pm at Cinder Block Brewery, 110 East 18th Ave, North Kansas City, MO 64116. Please reach out to info(a)kcix.net or brandon(a)kcix.net if you wish to attend. On Thu, Oct 4, 2018 at 1:35 PM Brandon Mulligan <brandon(a)kcix.net> wrote: > Greetings. > > The Kansas City Internet eXchange is holding a free peer and beer event on > Tuesday October 16th. We welcome any network operators from the midwest > region. >

Oct. 4, 2018

Kansas City Internet eXchange peer and beer

by Brandon Mulligan

Greetings. The Kansas City Internet eXchange is holding a free peer and beer event on Tuesday October 16th. We welcome any network operators from the midwest region.

Oct. 4, 2018

Re: ADV: [MICE-DISCUSS] Anyone else seeing AS36040 (Google/Youtube) bouncing in and out this morning

by Darin Steffl

Looks like Google's traffic dropped from around 60G to under 20G tonight so they must be working on their peering to MICE? On Wed, Oct 3, 2018 at 12:20 PM Frank Bulk <fbulk(a)mypremieronline.com> wrote: > Thanks, I've sent a note to peering(a)google.com. > > Frank > > -----Original Message----- > From: MICE Discuss <MICE-DISCUSS(a)LISTS.IPHOUSE.NET> On Behalf Of Doug > McIntyre > Sent: Wednesday, October 03, 2018 11:39 AM > To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET > Subject: Re: [MICE-DISCUSS] ADV: [MICE-DISCUSS] Anyone else seeing AS36040 > (Google/Youtube) bouncing in and out this morning > > On Wed, Oct 03, 2018 at 04:12:04PM +0000, Frank Bulk wrote: > >Since 9:29 am a third-party service we use has been noticing that AS36040 > is coming and going. I assume that it's seeing it from MICE's router server > ... any way to confirm? > > 36040 does talk to the route servers, and the route hasn't been > up that long. I don't have any errors logged for 36040 though. > Just the route keeps getting injected and withdrawn. > 104.237.191.0/24 is withdrawn now from 36040. > > > -- > Doug McIntyre <merlyn(a)iphouse.net> > ~.~ ipHouse ~.~ > Network Engineer/Provisioning/Jack of all Trades > -- Darin Steffl Minnesota WiFi www.mnwifi.com 507-634-WiFi <http://www.facebook.com/minnesotawifi> Like us on Facebook <http://www.facebook.com/minnesotawifi>

Oct. 4, 2018

Re: ADV: [MICE-DISCUSS] Anyone else seeing AS36040 (Google/Youtube) bouncing in and out this morning

by Frank Bulk

Thanks, I've sent a note to peering(a)google.com. Frank -----Original Message----- From: MICE Discuss <MICE-DISCUSS(a)LISTS.IPHOUSE.NET> On Behalf Of Doug McIntyre Sent: Wednesday, October 03, 2018 11:39 AM To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET Subject: Re: [MICE-DISCUSS] ADV: [MICE-DISCUSS] Anyone else seeing AS36040 (Google/Youtube) bouncing in and out this morning On Wed, Oct 03, 2018 at 04:12:04PM +0000, Frank Bulk wrote: >Since 9:29 am a third-party service we use has been noticing that AS36040 is coming and going. I assume that it's seeing it from MICE's router server ... any way to confirm? 36040 does talk to the route servers, and the route hasn't been up that long. I don't have any errors logged for 36040 though. Just the route keeps getting injected and withdrawn. 104.237.191.0/24 is withdrawn now from 36040. -- Doug McIntyre <merlyn(a)iphouse.net> ~.~ ipHouse ~.~ Network Engineer/Provisioning/Jack of all Trades

Oct. 3, 2018

Re: ADV: [MICE-DISCUSS] Anyone else seeing AS36040 (Google/Youtube) bouncing in and out this morning

by Doug McIntyre

On Wed, Oct 03, 2018 at 04:12:04PM +0000, Frank Bulk wrote: >Since 9:29 am a third-party service we use has been noticing that AS36040 is coming and going. I assume that it's seeing it from MICE's router server ... any way to confirm? 36040 does talk to the route servers, and the route hasn't been up that long. I don't have any errors logged for 36040 though. Just the route keeps getting injected and withdrawn. 104.237.191.0/24 is withdrawn now from 36040. -- Doug McIntyre <merlyn(a)iphouse.net> ~.~ ipHouse ~.~ Network Engineer/Provisioning/Jack of all Trades

Oct. 3, 2018