Hi,
*RFCsWeLove Meetup, this Friday 2nd 18:00 IST*
We have 2 very interesting talks that call for closer interaction between
Applications and Networks. We have 2 new speakers from IETF110, where these
topics were discussed in detail.
IETF Application-Layer Traffic Optimization (ALTO) WG has been working on
sharing key network information with applications so that they can make
intelligent decisions while taking the network into consideration. The
new Application-aware Networking (APN) proposed work is focused on
developing a framework to convey and use an identifier to allow for
fine-grain user service-level requirements at the network layer based on
application and user groups.
Please register at -
https://zoom.us/webinar/register/WN_UERRz7G4REiv0UHH-ZB3KQ
Agenda
-
Introduction by Dhruv
-
Application-aware Networking (APN) by Shuping Peng, Huawei -- this talk
will introduce this new work that was discussed at various WGs at IETF 110.
-
Application-Layer Traffic Optimization (ALTO) by Sabine Randriamasy,
Nokia -- this talk will introduce the past work and the new items being
discussed as part of the WG recharter.
More details at -
https://www.iiesoc.in/post/rfcs-we-love-apr-2021-ietf-110-edition
*Next IPv6 Class: IPv6 Address Planning*
*Main: Apr 8; Lab: Apr 15, 20:30 IST*
The next class/lab will focus on a very key topic of IPv6 address planning.
The agenda topics include:
- Review the important prefixes needed for an IPv6 address plan,
- Discuss how a good address plan makes security and routing policy
easier,
- Consider numbering your LAN segment, SSID, or VLAN,
- Consider numbering for sites, backbone, links,
- Consider how to remember your addresses for diagnostics and
troubleshooting, and
- Look at plans that other enterprises have done.
If you missed the earlier class, the recording & details are available at
https://www.iiesoc.in/ipv6-webinars
Don't forget to register for the IPv6 Webinar series, if you haven't
already - https://register.gotowebinar.com/register/916570897222768655
Thanks!
Dhruv & Nalini
Hello everyone,
Since last Thursday March 25th 2021 AS3356 has started dropping RPKI
invalids. AS3356 many here might be known as a large International backbone
with the name Level3. It was later acquired by CenturyLink and they changed
its name to Lumen. (Quite a bit of history on the names!) :)
AS3356 has around 1.9 lakh IPv4 prefixes (191k) and 18k IPv6 prefixes
behind it and thus that has a major impact. You can find more information
about their RPKI deployment in their blog post
<https://blog.lumen.com/lumen-enhances-routing-security-with-resource-public…>
.
This adds to the list of backbones dropping RPKI invalids:
- Hurricane Electric AS6939 (where I work)
- Telia AS1299
- Cogent AS174
- AT&T AS7018
- GTT AS3257
and many more.
*What does this mean for you? *
Please review if your prefixes are in RPKI invalid list as I am
maintaining for Indian networks here -
https://rpki.anuragbhatia.com/d/8XIEVGfGz/rpki-tracker-for-asia?viewPanel=4…
You can search with your ASN, AS Name etc in the text box on top right and
work on fixing those as they would be dropped by the networks filtering
RPKI invalids.
Besides that please consider running RPKI validator and start dropping
invalids.
Thanks.
--
Anurag Bhatia
anuragbhatia.com
Dear Team,
We need to whitelist few IP pools from NIC as facing some issues while opening few websites so please help me to share the correct mail id of NIC.
Regards,
Parthesh Kumar
Hi,
For those who may be interested, sharing the CCAOI February 2021 newsletter
<https://drive.google.com/file/d/1QXzMC91y46XQmSLvertOsfPzyo36dhPJ/view?usp=
sharing> , for curated news on the major global trends and developments
related to Digital Policy & Internet Governance in February from the Indian
perspective..
Regards
Amrita Choudhury
________________________________________________________________________
Apply for an Online Fellowship to APNIC 52
________________________________________________________________________
Applications for APNIC 52 Online Fellowships are open now until
Friday, 26 March at 23:45 (UTC +10).
APNIC is offering a limited number of fellowships to participate in an
online, structured program that will run over five months, and to
participate at the APNIC 52 conference.
Successful fellows will select a specific area of interest to focus
their Online Fellowship program, as well as getting a holistic overview
of APNIC and Internet governance before participating in APNIC 52.
Areas of interest include:
- IPv6 Deployment
- Internet Routing/RPKI
- Information/Network Security
- DNS/DNSSEC
- MPLS/SDN
The level of experience in the chosen area of interest can be from
beginner to advanced. Please note, there is an estimated 8 to 12 hours
of commitment required between April and August 2021.
Fellows will be matched with a community mentor for an exclusive
one-on-one mentoring session.
https://conference.apnic.net/52/fellowship/overview/
Fellowship package?
------------------
- A customized program of Fellows-only presentations from key
experts with the opportunity for Q&As.
- Introduction to a community mentor in their area of interest.
- Support to complete a number of APNIC Academy courses.
- Daily briefings during APNIC 52
- Certification of achievement (upon successful completion of
fellowship).
- Expenses scholarship of USD 150.
- T-shirt.
Apply now!
----------
https://conference.apnic.net/52/fellowship/overview
________________________________________________________________________
APNIC Secretariat secretariat(a)apnic.net
Asia Pacific Network Information Centre (APNIC) Tel: 61 7 3858 3100
PO Box 3646 South Brisbane, QLD 4101 Australia Fax: 61 7 3858 3199
6 Cordelia Street, South Brisbane, QLD http://www.apnic.net
________________________________________________________________________
https://twitter.com/olesovhcom/status/1369478732247932929
Seems like OVH (a major hosting player) had a major incident a few hours
ago in their Strasbourg (France) datacenter.
Last update <https://twitter.com/olesovhcom/status/1369504527544705025?s=20>
an hour ago from their CEO has been destruction of their datacenter SBG2:
> Update 5:20pm. Everybody is safe.
> Fire destroyed SBG2. A part of SBG1 is destroyed. Firefighters are
> protecting SBG3. no impact SBG4.
I am not aware of any big brand hosted over there but numerous small
companies host directly/indirectly over there. Your users will find random
websites/applications not working today.
--
Anurag Bhatia
anuragbhatia.com
In response to feedback from operational security communities,
CAIDA's source address validation measurement project
(https://spoofer.caida.org) is automatically generating monthly
reports of ASes originating prefixes in BGP for systems from which
we received packets with a spoofed source address.
We are publishing these reports to network and security operations
lists in order to ensure this information reaches operational
contacts in these ASes.
This report summarises tests conducted within ind.
Inferred improvements during Feb 2021:
none inferred
Source Address Validation issues inferred during Feb 2021:
ASN Name First-Spoofed Last-Spoofed
24560 AIRTELBROADBAND 2016-03-12 2021-02-27
55836 RELIANCEJIO-IN 2017-03-03 2021-02-25
132976 KINGSBROADBAND 2018-09-17 2021-02-22
134026 ULTRANET 2020-08-27 2021-02-28
138731 KOVAIFN 2020-11-08 2021-02-25
396356 MAXIHOST 2021-02-27 2021-02-27
Further information for these tests where we received spoofed
packets is available at:
https://spoofer.caida.org/recent_tests.php?country_include=ind&no_block=1
Please send any feedback or suggestions to spoofer-info(a)caida.org
_______________________________________________________________________
Apply now for an APNIC 52 Online Fellowship
________________________________________________________________________
Applications for APNIC 52 Online Fellowships are now open.
APNIC is offering a limited number of fellowships to participate in an
online, structured program that will run over five months, and to
participate at the APNIC 52 conference.
Fellows will also be matched with a community mentor for an exclusive
one-on-one mentoring session.
Areas of interest
-----------------
Successful fellows will select a specific area of interest to focus their
Online Fellowship program, as well as getting a holistic overview of APNIC
and Internet governance before participating in APNIC 52.
- IPv6 Deployment
- Internet Routing/RPKI
- Information/Network Security
- DNS/DNSSEC
- MPLS/SDN
The level of experience in the chosen area of interest can be from beginner
to advanced.
Fellowship package
------------------
- A customized program of Fellows-only presentations from key
experts with the opportunity for Q&As
- Introduction to a community mentor in their area of interest
- Support to complete a number of APNIC Academy courses
- Daily briefings during APNIC 52
- Certification of achievement (upon successful completion of fellowship)
- Expenses scholarship of USD 150
- T-shirt
Applicants should note there is an estimated 8 to 12 hours of commitment
required between April and August 2021.
Before you apply
----------------
Fellowships are popular and competitive. If you're keen to apply, please
read the information on the read the information on the website carefully
to understand what is required for a successful application.
https://conference.apnic.net/52/fellowship/overview
Deadline
--------
The deadline for applications is Friday, 26 March 2021 at 23:45 (UTC +10).
________________________________________________________________________
APNIC Secretariat fellowship(a)apnic.net
Asia Pacific Network Information Centre (APNIC) Tel: 61 7 3858 3100
PO Box 3646 South Brisbane, QLD 4101 Australia Fax: 61 7 3858 3199
6 Cordelia Street, South Brisbane, QLD http://www.apnic.net
________________________________________________________________________
Hello everyone,
Seems like Sify is having issues since evening at 6:40 pm for it's India -
Europe connectivity. I have multiple links at home and one is from Siti
(not to be confused with Sify where Sify is one of upstream for Siti).
Since evening there is a major jump in latency for Europe:
[image: Screenshot 2021-03-01 at 10.12.07 PM.png][image: Screenshot
2021-03-01 at 10.12.54 PM.png]
On my other provider which is behind Airtel graphs seem usual. Forward
trace in all these seems fine with very high latency as soon as it hits
Europe. Siti happens to be using Sify in return and hence trace I see from
Europe > Siti India trace is:
traceroute 103.217.244.138
traceroute to 103.217.244.138 (103.217.244.138), 30 hops max, 60 byte
packets
1 ip-173-212-238-3.static.contabo.net (173.212.238.3) 1.842 ms 1.330 ms
1.093 ms
2 et-5-0-26.edge8.Frankfurt1.Level3.net (62.67.36.137) 12.872 ms 12.831
ms 12.659 ms
3 ae-37.r01.frnkge07.de.bb.gin.ntt.net (129.250.9.5) 12.507 ms 10.329
ms 9.803 ms
4 * * *
5 * * *
6 * * ae-13.r25.asbnva02.us.bb.gin.ntt.net (129.250.2.111) 269.027 ms
7 * * *
8 ae-12.r31.tokyjp05.jp.bb.gin.ntt.net (129.250.3.192) 415.382 ms
413.782 ms 415.193 ms
9 * ae-4.r23.sngpsi07.sg.bb.gin.ntt.net (129.250.2.242) 485.201 ms
473.156 ms
10 ae-1.a01.sngpsi07.sg.bb.gin.ntt.net (129.250.2.240) 495.469 ms
460.163 ms 429.571 ms
11 xe-0-0-24-3.a01.sngpsi07.sg.ce.gin.ntt.net (116.51.26.158) 493.710 ms
485.819 ms 455.592 ms
12 * * *
13 * * *
14 * * *
15 * * *
Level3 Frankfurt > NTT Frankfurt > NTT Ashburn, US > NTT Tokyo, JP > NTT
Singapore > Handoff to Sify >>>> Delhi NCR
From traces to other Sify IPs, it seems like Sify Europe -> India
connectivity is up but it has to do something with their announcements in
Europe.
Anyone else getting similar issues since evening? Did anyone get any
messages from their upstream about the outage?
--
Anurag Bhatia
anuragbhatia.com
