INNOG March 2021

innog@innog.net

9 participants
11 discussions

by Dhruv Dhody

Hi, *RFCsWeLove Meetup, this Friday 2nd 18:00 IST* We have 2 very interesting talks that call for closer interaction between Applications and Networks. We have 2 new speakers from IETF110, where these topics were discussed in detail. IETF Application-Layer Traffic Optimization (ALTO) WG has been working on sharing key network information with applications so that they can make intelligent decisions while taking the network into consideration. The new Application-aware Networking (APN) proposed work is focused on developing a framework to convey and use an identifier to allow for fine-grain user service-level requirements at the network layer based on application and user groups. Please register at - https://zoom.us/webinar/register/WN_UERRz7G4REiv0UHH-ZB3KQ Agenda - Introduction by Dhruv - Application-aware Networking (APN) by Shuping Peng, Huawei -- this talk will introduce this new work that was discussed at various WGs at IETF 110. - Application-Layer Traffic Optimization (ALTO) by Sabine Randriamasy, Nokia -- this talk will introduce the past work and the new items being discussed as part of the WG recharter. More details at - https://www.iiesoc.in/post/rfcs-we-love-apr-2021-ietf-110-edition *Next IPv6 Class: IPv6 Address Planning* *Main: Apr 8; Lab: Apr 15, 20:30 IST* The next class/lab will focus on a very key topic of IPv6 address planning. The agenda topics include: - Review the important prefixes needed for an IPv6 address plan, - Discuss how a good address plan makes security and routing policy easier, - Consider numbering your LAN segment, SSID, or VLAN, - Consider numbering for sites, backbone, links, - Consider how to remember your addresses for diagnostics and troubleshooting, and - Look at plans that other enterprises have done. If you missed the earlier class, the recording & details are available at https://www.iiesoc.in/ipv6-webinars Don't forget to register for the IPv6 Webinar series, if you haven't already - https://register.gotowebinar.com/register/916570897222768655 Thanks! Dhruv & Nalini

9 months, 3 weeks

CenturyLink/Level3/Lumen AS3356 starts dropping RPKI invalids

by Anurag Bhatia

Hello everyone, Since last Thursday March 25th 2021 AS3356 has started dropping RPKI invalids. AS3356 many here might be known as a large International backbone with the name Level3. It was later acquired by CenturyLink and they changed its name to Lumen. (Quite a bit of history on the names!) :) AS3356 has around 1.9 lakh IPv4 prefixes (191k) and 18k IPv6 prefixes behind it and thus that has a major impact. You can find more information about their RPKI deployment in their blog post <https://blog.lumen.com/lumen-enhances-routing-security-with-resource-public…> . This adds to the list of backbones dropping RPKI invalids: - Hurricane Electric AS6939 (where I work) - Telia AS1299 - Cogent AS174 - AT&T AS7018 - GTT AS3257 and many more. *What does this mean for you? * Please review if your prefixes are in RPKI invalid list as I am maintaining for Indian networks here - https://rpki.anuragbhatia.com/d/8XIEVGfGz/rpki-tracker-for-asia?viewPanel=4… You can search with your ASN, AS Name etc in the text box on top right and work on fixing those as they would be dropped by the networks filtering RPKI invalids. Besides that please consider running RPKI validator and start dropping invalids. Thanks. -- Anurag Bhatia anuragbhatia.com

9 months, 3 weeks

NIC mail id required

by Parthesh Kumar

Dear Team, We need to whitelist few IP pools from NIC as facing some issues while opening few websites so please help me to share the correct mail id of NIC. Regards, Parthesh Kumar

9 months, 3 weeks

CCAOI February 2021: Digital Policy updates

by Amrita Choudhury

Hi, For those who may be interested, sharing the CCAOI February 2021 newsletter <https://drive.google.com/file/d/1QXzMC91y46XQmSLvertOsfPzyo36dhPJ/view?usp= sharing> , for curated news on the major global trends and developments related to Digital Policy & Internet Governance in February from the Indian perspective.. Regards Amrita Choudhury

10 months

Apply for an Online Fellowship to APNIC 52

by Srinivas (Sunny) Chendi

________________________________________________________________________ Apply for an Online Fellowship to APNIC 52 ________________________________________________________________________ Applications for APNIC 52 Online Fellowships are open now until Friday, 26 March at 23:45 (UTC +10). APNIC is offering a limited number of fellowships to participate in an online, structured program that will run over five months, and to participate at the APNIC 52 conference. Successful fellows will select a specific area of interest to focus their Online Fellowship program, as well as getting a holistic overview of APNIC and Internet governance before participating in APNIC 52. Areas of interest include: - IPv6 Deployment - Internet Routing/RPKI - Information/Network Security - DNS/DNSSEC - MPLS/SDN The level of experience in the chosen area of interest can be from beginner to advanced. Please note, there is an estimated 8 to 12 hours of commitment required between April and August 2021. Fellows will be matched with a community mentor for an exclusive one-on-one mentoring session. https://conference.apnic.net/52/fellowship/overview/ Fellowship package? ------------------ - A customized program of Fellows-only presentations from key experts with the opportunity for Q&As. - Introduction to a community mentor in their area of interest. - Support to complete a number of APNIC Academy courses. - Daily briefings during APNIC 52 - Certification of achievement (upon successful completion of fellowship). - Expenses scholarship of USD 150. - T-shirt. Apply now! ---------- https://conference.apnic.net/52/fellowship/overview ________________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: 61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: 61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net ________________________________________________________________________

10 months, 1 week

OVH Strasbourg datacenter fire

by Anurag Bhatia

https://twitter.com/olesovhcom/status/1369478732247932929 Seems like OVH (a major hosting player) had a major incident a few hours ago in their Strasbourg (France) datacenter. Last update <https://twitter.com/olesovhcom/status/1369504527544705025?s=20> an hour ago from their CEO has been destruction of their datacenter SBG2: > Update 5:20pm. Everybody is safe. > Fire destroyed SBG2. A part of SBG1 is destroyed. Firefighters are > protecting SBG3. no impact SBG4. I am not aware of any big brand hosted over there but numerous small companies host directly/indirectly over there. Your users will find random websites/applications not working today. -- Anurag Bhatia anuragbhatia.com

10 months, 1 week

Spoofer Report for INNOG for Feb 2021

by CAIDA Spoofer Project

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within ind. Inferred improvements during Feb 2021: none inferred Source Address Validation issues inferred during Feb 2021: ASN Name First-Spoofed Last-Spoofed 24560 AIRTELBROADBAND 2016-03-12 2021-02-27 55836 RELIANCEJIO-IN 2017-03-03 2021-02-25 132976 KINGSBROADBAND 2018-09-17 2021-02-22 134026 ULTRANET 2020-08-27 2021-02-28 138731 KOVAIFN 2020-11-08 2021-02-25 396356 MAXIHOST 2021-02-27 2021-02-27 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=ind&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

10 months, 2 weeks

DDOS Attack from Hetzner IP 49.12.40.86

by Parthesh Kumar

Dear Team, We are getting DDOS attack from Hetzner IP 49.12.40.86 so please help to resolve the issue. Regards, Parthesh Kumar

10 months, 2 weeks

Apply now for an APNIC 52 Online Fellowship

by Srinivas Chendi

_______________________________________________________________________ Apply now for an APNIC 52 Online Fellowship ________________________________________________________________________ Applications for APNIC 52 Online Fellowships are now open. APNIC is offering a limited number of fellowships to participate in an online, structured program that will run over five months, and to participate at the APNIC 52 conference. Fellows will also be matched with a community mentor for an exclusive one-on-one mentoring session. Areas of interest ----------------- Successful fellows will select a specific area of interest to focus their Online Fellowship program, as well as getting a holistic overview of APNIC and Internet governance before participating in APNIC 52. - IPv6 Deployment - Internet Routing/RPKI - Information/Network Security - DNS/DNSSEC - MPLS/SDN The level of experience in the chosen area of interest can be from beginner to advanced. Fellowship package ------------------ - A customized program of Fellows-only presentations from key experts with the opportunity for Q&As - Introduction to a community mentor in their area of interest - Support to complete a number of APNIC Academy courses - Daily briefings during APNIC 52 - Certification of achievement (upon successful completion of fellowship) - Expenses scholarship of USD 150 - T-shirt Applicants should note there is an estimated 8 to 12 hours of commitment required between April and August 2021. Before you apply ---------------- Fellowships are popular and competitive. If you're keen to apply, please read the information on the read the information on the website carefully to understand what is required for a successful application. https://conference.apnic.net/52/fellowship/overview Deadline -------- The deadline for applications is Friday, 26 March 2021 at 23:45 (UTC +10). ________________________________________________________________________ APNIC Secretariat fellowship(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: 61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: 61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net ________________________________________________________________________

10 months, 2 weeks

High latency / routing issues since today evening

by Anurag Bhatia

Hello everyone, Seems like Sify is having issues since evening at 6:40 pm for it's India - Europe connectivity. I have multiple links at home and one is from Siti (not to be confused with Sify where Sify is one of upstream for Siti). Since evening there is a major jump in latency for Europe: [image: Screenshot 2021-03-01 at 10.12.07 PM.png][image: Screenshot 2021-03-01 at 10.12.54 PM.png] On my other provider which is behind Airtel graphs seem usual. Forward trace in all these seems fine with very high latency as soon as it hits Europe. Siti happens to be using Sify in return and hence trace I see from Europe > Siti India trace is: traceroute 103.217.244.138 traceroute to 103.217.244.138 (103.217.244.138), 30 hops max, 60 byte packets 1 ip-173-212-238-3.static.contabo.net (173.212.238.3) 1.842 ms 1.330 ms 1.093 ms 2 et-5-0-26.edge8.Frankfurt1.Level3.net (62.67.36.137) 12.872 ms 12.831 ms 12.659 ms 3 ae-37.r01.frnkge07.de.bb.gin.ntt.net (129.250.9.5) 12.507 ms 10.329 ms 9.803 ms 4 * * * 5 * * * 6 * * ae-13.r25.asbnva02.us.bb.gin.ntt.net (129.250.2.111) 269.027 ms 7 * * * 8 ae-12.r31.tokyjp05.jp.bb.gin.ntt.net (129.250.3.192) 415.382 ms 413.782 ms 415.193 ms 9 * ae-4.r23.sngpsi07.sg.bb.gin.ntt.net (129.250.2.242) 485.201 ms 473.156 ms 10 ae-1.a01.sngpsi07.sg.bb.gin.ntt.net (129.250.2.240) 495.469 ms 460.163 ms 429.571 ms 11 xe-0-0-24-3.a01.sngpsi07.sg.ce.gin.ntt.net (116.51.26.158) 493.710 ms 485.819 ms 455.592 ms 12 * * * 13 * * * 14 * * * 15 * * * Level3 Frankfurt > NTT Frankfurt > NTT Ashburn, US > NTT Tokyo, JP > NTT Singapore > Handoff to Sify >>>> Delhi NCR From traces to other Sify IPs, it seems like Sify Europe -> India connectivity is up but it has to do something with their announcements in Europe. Anyone else getting similar issues since evening? Did anyone get any messages from their upstream about the outage? -- Anurag Bhatia anuragbhatia.com

10 months, 3 weeks

2022

2021

2020

2019

INNOG March 2021