- NLNOG - mailman3.nlnog.net

AS 2914 RPKI deployment
by Job Snijders 26 Mar '20

26 Mar '20

Hallo NLNOG, Nou, wij hebben eindelijk ook een datum! :-) Op 25 Maart gaat de RPKI boel aan bij NTT en zal AS 2914 invalids rejecten op alle EBGP sessies (customers, peers, de hele mikmak). Meer informatie is beschikbaar hier: https://www.us.ntt.net/support/policy/rr.cfm#RPKI Met vriendelijke groeten, Job

2 2

Internet operations during pandemics
by Job Snijders 19 Mar '20

19 Mar '20

Dear all, I threw together a slidedeck today on the potential impact and second order effects of COVID-19 on Internet network operations. http://instituut.net/~job/netops_during_pandemics.pdf I hope we together over time can add and extend projections in the deck on what will happen and how we can mitigate the negative effects on Internet operations. We have to answer questions such as: 1) what problems already exist today because of a few weeks of C19? 2) What problems are still coming? Will those be localized or globally? 3) What possible workarounds can we plan for those problems? I would appreciate feedback, comments, corrections or whatever you want to tell me. None of us have been in this situation before, so my guess is as good as yours. Kind regards, Job

3 3

Don't terminate anyone's internet connections
by Job Snijders 17 Mar '20

17 Mar '20

Dear all, A plea - do NOT terminate anyone's internet or hosting service for silly pre-corona reasons such as 'we want money'. Right now we are facing a pandamic of propotions nobody alive has ever seen. Act responsibily and accordingly: do not shut anything down. Please! :-) To illustrate, in the Netherlands we have been put on lockdown because of the C19 biohazard - you are expected to *only* leave your house if it is absolutely critical to leave your house, such as to pick up food from the food distribution centers, get meds, go work in a hospital, etc. At the same time... we have no idea where everyone is and who is using what Interconnect to do what vital work. Maybe I'm fixing some important BGP thingy via my neighbor's wifi? Maybe she didn't pay her bills? Should she be cut off? Maybe next to her someone was freeloading on that same wifi to look up medical data? Why risk the collatoral damage of cutting anyone off? The *safest* thing to do right now is to not terminate anyone's access to information (be it connectivity, storage, compute, whatever). We'll mop up society's collective bills at a later point in time, after we deal with the immediate urgency at hand. And during this crisis we have to keep this Internet thing running and available to anyone who may need it. Kind regards, Job ps. please remove rate limiters / data caps where possible. Now is not a time to say 'you only paid for 1 megabit, you only get one megabit'. Make it so that where possible, the access pipes be utilised to the fullest extend. Don't throttle anyone, you never know whose lives were depending on fast access. In short: we need more thinking in this direction than the opposite: https://www.bit.nl/news/2644/88/BIT-verdubbelt-kosteloos-de-bandbreedte-voo…

3 3

Spoofer Report for NLNOG for Feb 2020
by CAIDA Spoofer Project 08 Mar '20

08 Mar '20

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during Feb 2020: none inferred Source Address Validation issues inferred during Feb 2020: ASN Name First-Spoofed Last-Spoofed 9009 M247 2017-01-10 2020-02-29 28685 ASN-ROUTIT 2017-03-26 2020-02-27 6830 LGI-UPC 2017-06-14 2020-02-29 8587 Infracom 2019-10-28 2020-02-26 209299 2019-12-15 2020-02-20 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Open Source project announcement
by Renato Almeida de Oliveira 28 Feb '20

28 Feb '20

Hello folks, I would like to announce an Open Source project I’m working on it. It is an Ansible collection focused on network management and peering relations, in this release it is possible to gather your devices configuration and sync then with a repository manager like Gogs, and collect PeeringDB information’s like IRR-ASPATH, max IPv4/IPv6 prefixes, and with IRR-ASPATH use BGPq3/BGPq4 to generate the announced prefixes that with some Jinja templates it’s possible to automatically generate a multi-brand routing policies and configurations. In the next version of the Collection the configuration templates will be available for some vendors like MikroTik, Cisco, Juniper and others. The project ains to aid ISP and network operators to administrate their network, in the next release I'm going to bring concepts like model based configuration where the network, using YANG based models, writen in YAML, will describe their network and the built-in Ansible Roles will parse and deploy the configuration. Finnaly if there are any comments, suggestions or feature request please tell me The Collection use cases documentation link: https://netero.renatooliveira.eng.br/en/latest/examples.html Proof of concept: https://www.youtube.com/watch?v=41vViNm1yu4 Regards, -- Renato Almeida de Oliveira Engenheiro de Telecomunicações

1 0

Spoofer Report for NLNOG for Jan 2020
by CAIDA Spoofer Project 08 Feb '20

08 Feb '20

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during Jan 2020: none inferred Source Address Validation issues inferred during Jan 2020: ASN Name First-Spoofed Last-Spoofed 8220 COLT 2016-11-10 2020-01-24 28685 ASN-ROUTIT 2017-03-26 2020-01-29 62240 Clouvider 2017-10-20 2020-01-30 1136 KPN 2019-09-04 2020-01-29 8587 Infracom 2019-10-28 2020-01-30 209299 VITOX-TELECOM 2019-12-15 2020-01-24 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Attuor: Scalable monitoring
by Mark Schouten 23 Jan '20

23 Jan '20

Hi, Zoals sommigen van jullie misschien wel eens meegekregen hebben hebben wij een jaar of twee geleden Sensu geimplementeerd voor monitoring. Een heel cool product, maar helaas is het een tikkie om zeep geholpen om 'Enterprise' te worden. Hierdoor heb ik mijn plan van twee jaar geleden weer uit de doos getrokken, namelijk het zelf schrijven van een monitoring tool. Ik denk te hebben opgemerkt in de afgelopen jaren dat er wel meer mensen moeite hebben met kiezen wat er nou lekker werkt en handig te implementeren is. Daarnaast kunnen wij zelf best wel wat, maar weet ik dat er mensen zijn die veel betere code schrijven dan wij. Ik heb daarom een PoC van Attuor geschreven en d'r een Open Source-stempel op gezet (GPLv3) en gooi het bij deze in de NLnog-groep (en Blog [1] en LinkedIn en Twitter). Ik ga er verder mee aan de slag en ik zou het tof vinden om hulp/feedback te krijgen over hoe verder en beter. Je vind de code primair op [1] maar het wordt ook gesynced naar [2]. [1]: https://www.tuxis.nl/blog/attuor-scalable-monitoring-20200121/ [2]: https://gitlab.tuxis.nl/oss_public/attuor [3]: https://github.com/tuxis-ie/Attuor -- Mark Schouten <mark(a)tuxis.nl> Tuxis, Ede, https://www.tuxis.nl T: +31 318 200208

3 5

Call for Presentations RIPE 80
by Jelte Jansen 22 Jan '20

22 Jan '20

Dear colleagues, Please find the CFP for RIPE 80 below or at: https://ripe80.ripe.net/submit-topic/cfp/. The deadline for submissions is *23 February 2020*. Please also note that speakers do not receive any extra reduction or funding towards the meeting fee at the RIPE Meetings. However, on an individual basis, participants can apply for a RIPE Fellowship or RACI, see the "Speakers" paragraph in CFP for more information. Kind regards, Jelte Jansen RIPE PC Member https://ripe80.ripe.net/ripe-pc/ -------------------------------------------------------------------- Call for Presentations A RIPE Meeting is an open event where Internet Service Providers, network operators and other interested parties get together. Although the meeting is mostly technical, it is also a chance for people to meet and network with others in their field. *RIPE 80 will take place from 11-15 May in Berlin, Germany* The RIPE Programme Committee (PC) is now seeking content proposals from the RIPE community for the plenary sessions, BoFs (Birds of a Feather sessions), panels, workshops, tutorials and lightning talks at RIPE 80. See the full descriptions of the different presentation formats: https://ripe80.ripe.net/submit-topic/presentation-formats/ Proposals for plenary sessions, BoFs, panels, workshops and tutorials must be submitted for full consideration no later than *23 February 2020*. Proposals submitted after this date will be considered depending on the slots still available in the programme. The PC is looking for presentations covering the topics of network engineering and operations, including but not limited to: - IPv6 deployment - Managing IPv4 scarcity - Data centre technologies - Network and DNS operations - Internet governance and regulatory practices - Network and routing security - Content delivery - Internet peering and mobile data exchange - Connected Things (aka. Internet of Things - IoT) ---- Speakers ---- Presenters, RIPE Working Group Chairs and the RIPE Programme Committee are required to cover their own costs to attend a RIPE Meeting (meeting ticket, travel and accommodation). We have various ticket options available depending on your needs. Please note that participants can apply for a RIPE Fellowship or RACI, on an individual basis, to develop their professional or academic career. For more information, please visit: https://www.ripe.net/participate/ripe/ripe-fellowship https://www.ripe.net/participate/ripe/raci In extraordinary circumstances, the RIPE Chair can waive the meeting fee for presenters. These requests are dealt with on a case-by-case basis via pc(a)ripe.net. ---- Submissions ---- Presenters should be clear on whether they wish to submit a presentation for a plenary or working group (WG) session. At present, most working groups will solicit policy proposals, discussion points or other content directly via their mailing lists. If you’re not sure what kind of session you should be presenting at, please visit: https://ripe80.ripe.net/plenary-or-wg/ RIPE Meeting attendees are quite sensitive to keeping presentations non-commercial, and product marketing talks are strongly discouraged. Repeated audience feedback shows that the most successful talks focus on operational experience, research results, or case studies. For example, presenters wishing to describe a commercial solution should focus on the underlying technology and should not attempt a product demonstration. Presenters should indicate how much time they will require. In general, the time allocated for the different presentation formats is as follows: - Plenary presentations: 20-25 minutes presentation with 5-10 minutes discussion - Tutorials: up to two hours (Monday morning) - Workshops: one hour (during evening sessions) to two hours (Monday morning) - BoFs: approximately one hour (during evening sessions) - Lightning talks: 10 minutes in total for both the presentation and any discussion The following general requirements apply: - Proposals must be submitted using the meeting submission system, https://ripe80.ripe.net/submit-topic/ - Lightning talks should also be submitted using the meeting submission system (https://ripe80.ripe.net/submit-topic/) and can be submitted any time up to and including the meeting week. The allocation of lightning talks will be announced on short notice, in some cases on the same day but often one day prior to the time slot allocated. - Presenters who propose a panel or BoF are encouraged to include speakers from several (perhaps even competing) companies and/or a neutral facilitator. - All presentation proposals will only be considered by the PC if they contain at least draft presentation slides (slides may be updated later on). For panels, proposals must contain a clear description, as well as the names of invited panellists, presenters and moderators. ---- Diversity and Inclusion - On-Site Childcare and the RIPE Meeting Code of Conduct ---- Did you know that RIPE Meetings now have on-site childcare? You can reserve a spot for your child (age 6 months - 10 years) during the registration process for the meeting. Childcare places are limited, so please be quick to reserve a spot for your child while registering for the meeting. More information at: https://ripe80.ripe.net/on-site/on-site-childcare/ Ensuring that RIPE Meeting values are upheld and that attendees experience a professional, respectful and safe meeting is a priority. Please do read the RIPE Meeting Code of Conduct: https://www.ripe.net/participate/meetings/ripe-meetings/ri pe-meeting-code-of-conduct --- If you have any questions or requests concerning content submissions, please [10]email pc(a)ripe.net.

1 0

Fwd: [uknof] MacBook Pro Keys
by Pim van Stam 15 Jan '20

15 Jan '20

Kan iemand deze man helpen? Toetsen vd Mac afgevallen en zoekt een goede winkel in A’dam Ik ben niet zo thuis in Amsterdam Groet, Pim > Begin forwarded message: > > From: Mark Tinka <mark.tinka(a)seacom.mu <mailto:mark.tinka@seacom.mu>> > Subject: [uknof] MacBook Pro Keys > Date: 15 January 2020 at 15:09:56 GMT > To: UKNOF Mailing List <uknof(a)lists.uknof.org.uk <mailto:uknof@lists.uknof.org.uk>> > > Hi all. > > Apologies for the off-topic post and for asking about the wrong country, but I'll be in Amsterdam next week for a couple of days, and am in need of keys for a mid-2017 15-inch Apple MacBook Pro Touch Bar. > > Many of the keys on my unit have failed their hinge slots, and the only replacement options in South Africa are the whole keyboard or unibody chassis. I just need the keys since the underlying (butterfly) mechanism is fine on all affected keys. It's just the hinge slots that fail over time and end up wedging the entire system, manifesting as a sticky or unresponsive key. > > Private replies on which shops I can walk into in Amsterdam are most welcome. > > And once again, apologies for the noise. Thanks. > > Mark.

1 0

Abuse overzicht 2019
by Jurrian van Iersel 13 Jan '20

13 Jan '20

Beste NLNOG'ers, Net als vorig jaar heb ik ook dit jaar weer een jaaroverzicht gemaakt van de abuse-incidenten in Nederland in 2019. Het overzicht is te vinden op https://www.linkedin.com/pulse/jaaroverzicht-computermisbruik-nederland-201…. De publicatie is dit jaar iets later en op een iets andere manier, nl. als artikel op LinkedIn. Reden hiervoor is dat ze het op m'n werk leuk vonden een LinkedIn-challenge op basis van de Social Selling Index te houden; het artikel hier publiceren scheelt mij weer een artikel schrijven ;) Aangezien in de enige met een technische functie ben die deelneemt, zou het fijn zijn als je het artikel ook nog even zou kunnen liken, sharen, enz. zodat ik de marketing- en sales-mensen iets makkelijker kan verslaan (en kan roepen dat technisch inhoudelijke artikelen beter zijn dan plaatjes en filmpjes vol technisch incorrect geblaat). Met vriendelijke groet, Jurrian van Iersel

2 2