- NLNOG - mailman3.nlnog.net

Spoofer Report for NLNOG for May 2018
by CAIDA Spoofer Project 08 Jun '18

08 Jun '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during May 2018: none inferred Source Address Validation issues inferred during May 2018: ASN Name First-Spoofed Last-Spoofed 25459 NEDZONE 2018-03-15 2018-05-31 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

NLNOG Camp 2018 slidedecks
by Job Snijders 04 Jun '18

04 Jun '18

Alloah allemaal, De slides van de NLNOG Camp 2018 presentaties zijn nu beschikbaar! https://nlnog.net/nlnog-camp-2018/ Met vriendelijke groeten, Job

2 2

Calling for Beta-testers for RPKI Validator 3.0
by Nathalie Trenaman 04 Jun '18

04 Jun '18

Dear colleagues, We’re happy to announce the beta-release of the RIPE NCC RPKI Validator 3.0, first mentioned during the Open Source Working Group at RIPE76. We are testing this release ourselves as well, but we would really value if you are able to test in your own different environments and provide feedback. You can report issues on GitHub or email certification(a)ripe.net <mailto:certification@ripe.net>. A confirmation that everything works as expected is also very welcome. The main features of the new RIPE NCC RPKI Validator 3.0 are: -ROA validation, export compatible with version 2.x -Re-written in Java to ensure maintainability -Supports incremental updates to routers through the rpki-rtr protocol -Allows running multiple rtr-servers for redundancy -Supports overrides by local filters and white lists -Requires 2GB of server memory -Requires 10GB of disk space for the embedded database for large objects -Open Source BSD Licence and available on GitHub We set up a wiki with all the information about the installation sources and options, documentation and example configurations in the GitHub project: https://github.com/RIPE-NCC/rpki-validator-3/wiki <https://github.com/RIPE-NCC/rpki-validator-3/wiki> Best regards, Nathalie Trenaman Product Manager RIPE NCC

1 0

NLNOGCamp - Refrigerator available?
by Peter van Roosmalen 01 Jun '18

01 Jun '18

Hi, Is there a refrigerator available on the campsite? I’ll bring some good locally brewed stuff from Lighttown. But if we don’t have a refrigerator, I can better buy some cans of Heineken or Schultenbrau (*) to have the full "warm beer on the camp-site” experience instead. See you all tonight / tomorrow. (*) = Feel free to replace Heineken or Schultenbräu with some other random sh!tty beer instead. — Hartelijke groeten / Best regards, Peter van Roosmalen

3 2

Carpooling to NLNOG Camp
by Imre Jonk 30 May '18

30 May '18

Hi, I'm looking for a ride to Camp from Amsterdam. Is there anyone with a car seat available? I'd gladly pay your fuel costs. Imre

2 1

NLNOGCamp next week
by Nathalie Trenaman 26 May '18

26 May '18

Hi all, With just one more week to go, here are some updates: -The weather is looking good so far, but I don't want to jinx it, so keep an eye on the weather forecast yourself ;) -Internet and power is all arranged thanks to EventInfra, Signet and the scouts. -Catering is all sorted, but if you have allergies or dietary requirements, just let us know in advance and we’ll make sure there will be food for you. -If you want snacks, very special beer, fancy cheese, crisps, nuts, whatever outside breakfast, lunch and dinner, please bring it yourself. -Bring your own tent, mug, plate, cutlery, dishwash stuff, towel (!), soap, guitar, playstation, cables, pocketknife etc. -You can drop off your stuff with your car on the field, but as soon as you’re finished unloading, the car must be parked at the parking. -There are still tickets, also for just the day (incl food and drinks) so join us if you can: https://ti.to/nlnog/nlnog-camp-2018 <https://ti.to/nlnog/nlnog-camp-2018> -We’ll be building up the camp Friday from 14:00, you’re welcome from then in Zeewolde. Looking forward to see you! The NLNOG Crew Sander, Job, Niels, Thomas and Nathalie

1 0

We’re going Camping! And we want you to join!
by Job Snijders 09 May '18

09 May '18

Dear NLNOG, Do you already have summer plans? Why not join us at Landgoed Zeewolde for the very first NLNOG Camp! Do you want to learn more about Routing Security? A bunch of routing security experts will attend NLNOG Camp! Does Network Automation make you happy? We'll be spending time on that topic! Fiber splicing? We got it. In a little over 3 weeks - from June 1st to June 3rd 2018 - it can all happen! The main program will take place on Saturday June 2nd. This day will be filled with interesting workshops, presentations and something very very hot... ;-) You can find the latest draft program here: https://nlnog.net/nlnog-camp-2018/ It's up to you if you want to arrive on Friday, leave on Sunday, or just attend the Saturday program. Just be sure to stay for the BBQ and drinks on Saturday evening! We still have some slots available for presentations and workshops! If you ever wanted to give a hands-on workshop, show your home automation setup, tell us about your latest open source contribution, or organise some panel discussion (all in a very informal setting) let us know! Anything is possible and we encourage everyone to contribute. Even if you have never done anything like this before, we'll help you set things up. For registration go to https://ti.to/nlnog/nlnog-camp-2018/ and get your tickets before they run out! We hope to see you soon! Job, Nathalie, Niels, Thomas, Sander

1 0

Spoofer Report for NLNOG for Apr 2018
by CAIDA Spoofer Project 08 May '18

08 May '18

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during Apr 2018: ASN Name First-Fixed 44858 PROXSYS-AS 2018-04-17 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Apr 2018: ASN Name First-Spoofed Last-Spoofed 25459 NEDZONE-AS 2018-03-15 2018-04-26 20847 PREVIDER-AS 2018-04-17 2018-04-26 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

RIPE 76: Call for Late Submissions and Lightning Talks
by Benno Overeinder 01 May '18

01 May '18

Beste NLNOG-ers, Recent nog een interessant en relevant incident gezien en geanalyseerd? Of nieuwe inzichten verkregen, of een nieuwe methode gevonden om een probleem aan te pakken? Grijp je kans en stuur een "late" presentatievoorstel in voor de RIPE 76 meeting in Marseille, 14-18 mei. Deadline is volgende week 7 mei. URLs en verdere beschrijving voor CFP hieronder. Groeten, -- Benno ---------------> %%% <--------------- Dear colleagues, Summary: The RIPE PC invites late submissions (30 min) and Lightning Talks (10 min) for RIPE 76 Plenary. Similar to RIPE 74, and distinct from other previous RIPE Meetings, the RIPE Programme Committee decided to keep one plenary slot open for a so-called "late submission". This plenary slot gives the community the opportunity to submit presentations that report on recent developments, issues, security incidents, etc., that are relevant to the RIPE audience. Also please consider submitting a Lightning Talk for the Monday plenary. During the meeting week, we will accept Lightning Talk submissions for Tuesday and Friday. Please submit your plenary "late submission" or Lightning Talk via the PC submission system: https://ripe76.ripe.net/submission-form/ The deadline for the late submission is *Monday, 7 May*. Kind regards, Benno Overeinder RIPE PC Chair https://ripe76.ripe.net/programme/ripe-pc/ -- Benno J. Overeinder NLnet Labs https://www.nlnetlabs.nl/

1 0

Re: [NLNOG] (Weer) een nieuwe IX in Nederland
by Jeroen Wunnink 26 Apr '18

26 Apr '18

We have AMSIX, NLIX and a few other smaller fragmented exchanges already that span multiple larger+smaller datacenters and are carrier/vendor-neutral (more or less, let's not get into that ;-). Thus I'm a bit doubtful on the success of a 'local' datacenter IX that's vendor specific in a small country like NL. In the US this makes more sense, given that everyone is at pretty much the same large hubs and there's not that many mature alternatives with a decent userbase. Competition is good, but given the maturity of some existing exchanges here and pretty much every AS being on one or multiple exchanges as-is (pun not intended), it might be a hard sell to get people on the Equinix specific ones as well. I'm not seeing any real added value on launching these here unless I'm missing a big incentive to do so (i.e. free IX connectivity with your Cloud Exchange port or vice versa?) Jeroen Wunnink Integration Engineering Manager www.gtt.net <http://www.gtt.net/> On 24/04/2018, 18:55, "NLNOG on behalf of Arnold Nipper" <nlnog-bounces(a)nlnog.net on behalf of arnold(a)nipper.de> wrote: [ Sorry for switching to Enlish, but my Dutch is to bad ] On 24.04.2018 13:08, niels=nlnog(a)bakker.net wrote: > * job(a)instituut.net (Job Snijders) [Tue 24 Apr 2018, 12:41 CEST]: >> Er is (alweer) een nieuwe IX in Nederland, sommigen zagen deze al van >> verre aankomen: >> >> >> https://url.emailprotection.link/?a2CpwB7v-YuNg3Hr3KRdFPHjkSLCheU7rsmqNfVTO… >> >> >> Wat is de impact op NL-IX, AMS-IX, SPEED-IX & Asteroid dat nu een >> datacenter naast crossconnects, power en ruimte, ook IX diensten bied? >> >> Profiteren wij als operators van meer competitie in deze markt, of zal >> dit leiden tot minder competitie? Hoe erg is fragmentatie? > > Wat is het punt van een Internet exchange waar je alleen kan peeren met > andere partijen in hetzelfde datacenter? Dat kan je dan ook direct > doen. AMS-IX biedt operators juist vrijheid van datacenterkeuze. > According to Asteroid this was/is the real intention of an IX. YMMV and mine also does ;-) Competition is always good. However where I could see an issue is when DC operators also jump the bandwagon. From a network pov a good choice of IXes is always good as they don't have to put all their eggs in one basket. Let's see how this all works out. Groeten, Arnold -- Arnold Nipper email: arnold(a)nipper.de mobile: +49 172 2650958

3 2