- NLNOG - NLNOG

DNS Hackathon in Rotterdam
by Moritz Muller 07 Mar '23

07 Mar '23

Hi all, I wanted to let you know that DNS-OARC, Netnod and RIPE NCC are organising a DNS Hackathon in Rotterdam, 20 - 21 May 2023 the weekend before RIPE 86. Participation is free of charge, and you can find more information here: https://www.netnod.se/join-the-dns-hackathon-2023 Cheers, Moritz

1 0

Google IPv6 stats for NL - sudden drop since March 2022 ?
by Boudewijn Visser (nlnog) 01 Feb '23

01 Feb '23

(In English for a possibly wider audience) Hi all, There is a remarkable drop in IPv6 usage from The Netherlands in the Google IPv6 statistics page . It currently lists a mere 11% adoption, down from nearly 40% . Looking at other IPv6 statistic pages (Facebook, Akamai, Apnic) shows the expected 30-40%. A page which seems to reflect the historical data from the Google statistics shows that this drop occurred via suddenly on March 25/26 2022 . In that day several other European countries showed glitches in the Google IPv6 stats, but recovered, and sometimes increased . An extremely small test ( one KPN and one Ziggo connection ) showed that those connections (still) accessed youtube over IPv6 . Does anyone have some information what changed ? Is the statistic out of order, perhaps not correctly mapping prefix or links to a country ? Or is there one or more significant NL ISPs that are no longer using IPv6 to access Google ? Given that other stats show the 'normal' V6 adoption in NL it does not appear that access ISPs totally disabled IPv6 . Links : https://www.google.com/intl/en/ipv6/statistics.html#tab=per-country-ipv6-ad… https://www.akamai.com/internet-station/cyber-attacks/state-of-the-internet… https://www.facebook.com/ipv6/?tab=ipv6_country (also a sharp drop (42 -> 34%) near 27/28 march 2022, but not as deep as google) Apnic : https://stats.labs.apnic.net/ipv6/NL Historical Google stats : https://www.aelius.com/njh/google-ipv6/nl.html https://www.aelius.com/njh/google-ipv6/fr.html https://www.aelius.com/njh/google-ipv6/be.html https://www.aelius.com/njh/google-ipv6/gb.html Boudewijn

1 0

NLNOG Looking Glass BGP sessions down
by Teun Vink 24 Jan '23

24 Jan '23

Hi all, I’ve written a few mails on this already but since we still have a lot of BGP sessions down on the NLNOG Looking Glass. This may have been caused by the IP renumbering of the NLNOG Looking Glass. As a reminder, the CORRECT addresses for the NLNOG looking glass are 212.114.120.72 and 2001:7b8:62b:1:0:d4ff:fe72:7848. We’re planning on removing all BGP sessions that have been down for longer than two months after 2023-02-01, but of course we’d prefer to fix the sessions so we can receive more BGP feeds. Here’s a list of BGP peers that have been down for over two months and which will be removed soon. If you see your ASN on the list, please check your configuration and fix it if possible, or reach out on #ring on IRCNet or ring-admins(a)nlnog.net and we can help you out to get it fixed. Neighbor AS MsgRcvd MsgSent OutQ Up/Down State/PrfRcvd AFILIAS_IAD1-v4 393246 0 54 0 Never Connect AFILIAS_IAD1-v6 393246 0 44 0 Never Active AFILIAS_MIA2-v4 33280 0 61 0 Never Connect AFILIAS_MIA2-v6 33280 0 60 0 Never Active AFILIAS_TKY1-v4 13901 0 51 0 Never Active AFILIAS_TKY1-v6 13901 0 52 0 Never Active AFILIAS_TKY2-v4 13901 0 42 0 Never Active AFILIAS_TKY2-v6 13901 0 58 0 Never Active AS207960NET1-v4 207960 0 41 0 Never Active AS207960NET1-v6 207960 0 38 0 Never Active BAKKERIT01-v4 44103 0 43744 0 Never Active BAKKERIT01-v6 44103 0 44270 0 Never Active CDW1-v4 3599 0 38 0 Never Connect CDW1-v6 3599 0 27 0 Never Active CHRONOS1-v4 202365 0 44083 0 Never Active CHRONOS1-v6 202365 0 44146 0 Never Active CUSTODIAN-v4 50300 0 27 0 Never Connect CUSTODIAN-v6 50300 0 30 0 Never Idle CYBERCOM1-v4 51164 0 31 0 Never Connect CYBERCOM1-v6 51164 0 31 0 Never Active CYBERCOM2-v4 51164 0 22 0 Never Connect CYBERCOM2-v6 51164 0 32 0 Never Connect DHIRAAGU01-v4 7642 0 25 0 Never Active DHIRAAGU01-v6 7642 0 32 0 Never Active DNA1-v4 16086 0 25 0 Never Idle DNA1-v6 16086 0 26 0 Never Connect EDSITECH-v4 202194 0 37 0 Never Connect EDSITECH-v6 202194 0 25 0 Never Idle ERICNET2-v6 206628 0 36 0 Never Active FORK1-v4 25682 0 15 0 Never Active FORK1-v6 25682 0 34 0 Never Active FREETRANSIT_WIN-v4 41051 0 44720 0 Never Active FREETRANSIT_WIN-v6 41051 0 44185 0 Never Active FREIFUNKFFM1-v4 64475 0 46369 0 Never Active FREIFUNKFFM1-v6 64475 0 46386 0 Never Active GO6LAB1-v4 198644 0 22 0 Never Active GO6LAB1-v6 198644 0 19 0 Never Connect HASTADKLEV1-v4 47753 0 34 0 Never Active HASTADKLEV1-v6 47753 0 35 0 Never Active HOSTWAY1-v4 14280 0 48005 0 Never Active HOSTWAY1-v6 14280 0 17 0 Never Active HOSTWAYDE1-v4 24679 0 36 0 Never Active HOSTWAYDE1-v6 24679 0 33 0 Never Active ICCN1-v4 40387 3030 3030 0 Never Idle ICCN1-v6 40387 2987 3596 0 Never Idle IFOG1-v4 34927 0 44305 0 Never Active IFOG1-v6 34927 0 44375 0 Never OpenSent IPB1-v4 20647 6060 6060 0 Never Idle IPB1-v6 20647 6060 6060 0 Never Idle IPFAIL_BUR-v4 62538 3011 6022 0 Never Idle IPFAIL_BUR-v6 62538 0 21 0 Never Active IPFAIL_SJC-v4 62538 0 21 0 Never Connect IPFAIL_SJC-v6 62538 0 11 0 Never Idle IPMAX2-v4 25091 0 15 0 Never Active IPMAX2-v6 25091 0 11 0 Never Active KALPAK1-v6 213326 0 19 0 Never Connect KANREN1-v4 2495 0 13 0 Never Active KANREN1-v6 2495 0 14 0 Never Connect LAYERBRIDGE01-v4 3280 0 44163 0 Never Active LAYERBRIDGE01-v6 3280 0 2753 0 Never Idle LEVEL66NETWORK1-v4 56381 0 12 0 Never Active LEVEL66NETWORK1-v6 56381 0 9 0 Never Active LONAP1-v4 8330 0 11 0 Never Active LONAP1-v6 8330 0 12 0 Never Active LONAP2-v4 8330 0 10 0 Never Active LONAP2-v6 8330 0 12 0 Never Active METAPEER1-v4 13331 0 7 0 Never Active MICHELLENET1-v4 208751 0 30 0 Never Active MICHELLENET1-v6 208751 0 6 0 Never Connect MNETWORKS1-v4 198611 0 6 0 Never Connect MNETWORKS1-v6 198611 0 8 0 Never Active MNETWORKS2-v4 198611 0 6 0 Never Connect MNETWORKS2-v6 198611 0 44 0 Never Active NATESALES1-v4 34553 0 44276 0 Never Idle NATESALES1-v6 34553 0 45055 0 Never Active NATOLAB_SEA-v4 46997 0 44055 0 Never Active NATOLAB_SEA-v6 46997 0 44669 0 Never Idle NESSUS1-v4 47692 0 12 0 Never Active NESSUS1-v6 47692 0 36 0 Never Active NETSIGN1-v4 31078 0 22 0 Never Active NETSIGN1-v6 31078 0 27 0 Never Active NONATTACHED1-v4 57821 0 32 0 Never Active NONATTACHED1-v6 57821 0 31 0 Never Active NULLROUTE1-v4 211722 0 43692 0 Never Active NULLROUTE1-v6 211722 0 31451 0 Never Active OPENBSD1-v4 22512 0 7 0 Never Active OPENBSD1-v6 22512 0 22 0 Never Active OPENFACTORY_R3COREIXN-v 58299 0 32 0 Never Active OPENFACTORY_R3COREIXN-v 58299 0 38 0 Never Active OVERTHEWIRE1-v4 9268 0 35 0 Never Active OVERTHEWIRE1-v6 9268 0 4 0 Never Active PBWCOMM01-v4 16409 0 11 0 Never Connect PBWCOMM01-v6 16409 0 7 0 Never Connect QUADRANET3-v4 8100 0 10 0 Never Connect QUADRANET3-v6 8100 6054 6108 0 Never Idle QUADRANET4-v4 8100 0 7 0 Never Idle QUADRANET4-v6 8100 6026 6260 0 Never Idle SERVERION1-v4 213035 0 5 0 Never Active SERVERION1-v6 213035 534 1161 0 Never Idle SERVERION2-v4 213035 0 4 0 Never Active SERVERION2-v6 213035 567 1212 0 Never Idle SKYLONHOST1-v4 202297 0 44152 0 Never Active SKYLONHOST1-v6 202297 0 43432 0 Never Active TIMICO1-v4 8607 0 35 0 Never Active TIMICO1-v6 8607 0 29 0 Never Active VMHAUS1-v4 136620 0 5 0 Never Connect VMHAUS1-v6 136620 0 5 0 Never Active WHITEHAT-v4 51999 0 4 0 Never Connect WHITEHAT-v6 51999 0 27 0 Never Active YOURORG1-v4 19255 0 7 0 Never Active firehose-BGPDOTTOOLS-v 212232 0 48385 0 Never Active firehose-BGPDOTTOOLS-v 212232 0 48390 0 Never Active SECUREBIT_FRE01-v4 58057 0 0 0 Never Active Information on BGP session states can also be found on https://lg.ring.nlnog.net/summary. More details on peering with the NLNOG Looking Glass can be found on https://lg.ring.nlnog.net/about. Of course, we still welcome new peers! Thanks and best regards, Teun

1 0

Happy new year! And a small reminder for the New Years Drinks
by Melchior Aelmans 11 Jan '23

11 Jan '23

Hi NLNOG! First of all, happy new year! We wish you and your family a safe, healthy, and prosperous new year! To celebrate 2023 the NLNOG New Years Drinks will take place again! When: Friday January 20, 2023 starting at 19.00h Where: De Rechtbank, Korte Nieuwstraat 14, 3512 NM Utrecht Registration: https://www.eventbrite.nl/e/tickets-nlnog-new-years-drink-2023-484326632997 And the best thing: it's for free and you will meet all your favorite NLNOG friends again! We are very much looking forward to seeing you there. Don't forget to register. On behalf of the NLNOG Crew, Melchior

2 1

Spoofer Report for NLNOG for Dec 2022
by CAIDA Spoofer Project 08 Jan '23

08 Jan '23

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during Dec 2022: none inferred Source Address Validation issues inferred during Dec 2022: ASN Name First-Spoofed Last-Spoofed 20847 PREVIDER 2018-04-17 2022-12-27 8587 Infracom 2019-10-28 2022-12-21 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

NLNOG New Years Drink 2023
by Teun Vink 12 Dec '22

12 Dec '22

Hoi allemaal, [English text can be found below] Na twee jaar op rij een virtuele borrel georganiseerd te hebben lijkt het in 2023 dan toch écht weer te lukken: een heuse NLNOG Nieuwjaarsborrel. En ook al was het online bier proeven hartstikke leuk, elkaar face to face ontmoeten en samen proosten op het nieuwe jaar is toch nog wel een heel stuk leuker! Inmiddels hebben we een prachtige lokatie midden in Utrecht gevonden om dit te gaan doen, dus jullie zijn allemaal van harte uitgenodigd: Wanneer? Vrijdag 20 januari 2023 vanaf 19.00u Waar? De Rechtbank, Korte Nieuwstraat 14, 3512 NM Utrecht Toegang en drank is gratis dankzij onze gulle sponsoren, maar we vinden het wel fijn als je je aanmeldt via https://www.eventbrite.nl/e/tickets-nlnog-new-years-drink-2023-484326632997, zodat we een goed beeld hebben van hoeveel mensen we kunnen verwachten. We hopen jullie dan allemaal te zien! [English text] After two years of doing online drinks, it seems that we will finally be able to do a proper New Years Drink again! And even though the online beer tastings were lots of fun, meeting people face to face and making a toast to the new year is even better! We have found a great location in the center of Utrecht to do so, so everyone is invited: When? Friday January 20th 2023 from 19.00h Where? De Rechtbank, Korte Nieuwstraat 14, 3512 NM Utrecht Thanks to our generous sponsors, entrance and drinks are for free, but we would like to ask you to register at https://www.eventbrite.nl/e/tickets-nlnog-new-years-drink-2023-484326632997, so we can get a good indication on how many people we should be expecting. We hope to see you all there! On behalf of the NLNOG Crew, Teun

1 0

Spoofer Report for NLNOG for Nov 2022
by CAIDA Spoofer Project 08 Dec '22

08 Dec '22

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within nld. Inferred improvements during Nov 2022: none inferred Source Address Validation issues inferred during Nov 2022: ASN Name First-Spoofed Last-Spoofed 20847 PREVIDER 2018-04-17 2022-11-29 8587 Infracom 2019-10-28 2022-11-24 207176 OPENFIBER 2020-06-12 2022-11-02 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=nld&no_block=1 Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

REMINDER: please update the IP addresses for NLNOG Looking Glass BGP sessions
by Teun Vink 18 Nov '22

18 Nov '22

Hi, Here’s another friendly reminder that the IP addresses of the NLNOG Looking Glass BGP daemon has changed a few months ago. All sessions with the old addresses are currently offline. So if you’re peering with the NLNOG Looking Glass, please make sure you’re using the correct addresses: Here are the correct details: IPv4: 212.114.120.72 IPv6: 2001:7b8:62b:1:0:d4ff:fe72:7848 AS: 199036 (unchanged) Feel free to contact the RING Admins (ring-admins(a)nlnog.net, or give shout in #ring on IRCNet) if you have problems renumbering your router. Thanks! Teun

1 0

Voorkom AS-set namespace collisions. AS-A2B vs AS51088:AS-A2B
by Erik Bais 18 Nov '22

18 Nov '22

Ollah, Er loopt momenteel bij de RIPE Database Working group ( DB-WG ) een discussie<https://www.ripe.net/ripe/mail/archives/db-wg/2022-November/007646.html> waarbij de AS-Set name misbruikt kan worden, omdat de normale short notatie zoals ( AS-A2B ) bij het aanmaken van een ‘nieuwe’ short as name, geen authorisatie vereist in referentie naar een origineel of naar een eigenaar van een netwerk. Nu is er een optie om je AS nummer als authorisatie te gebruiken .. en dan moet je dus je AS set naam aanpassen .. in <ASnummer>:<AS-set naam> Dit is al misbruikt in de afgelopen weken.. waarbij een of andere leukerd in de RIPE Database een AS-Set aangemaakt had met een naam AS-<grote cloud provider> .. Aangezien hun normaal hun AS-Set bij een andere database bijhielden, hadden ze hierdoor opeens een AS-Set name collission .. met als resultaat .. dat alle partijen die bijvoorbeeld bgpq4 gebruiken om de prefixfilters te maken, een lege prefixfilter als resultaat set kregen .. omdat ze tegen de lege AS set in de RIPE db aanliepen ..en daarna exit. Het is dus sterk aan te raden om de ‘long’ AS-Set notatie te gaan gebruiken voor je eigen (en je klanten) hun bereikbaarheid. Wat je nu binnen een paar minuten kan doen is: Creëer een nieuwe AS-Set naam .. die begint met je eigen AS nummer …. ASNUMMER:<oude AS set naam> Kopieer daar alle informatie in, die ook in je huidige (Short) AS-Set staat.. Bewaar en check die dan even in de RIPE DB. ( A2B voorbeeld : https://apps.db.ripe.net/db-web-ui/query?searchtext=as51088:as-a2b ) In de oude AS-Set .. zet je 1 verwijzing in .. en de rest laat je leeg .. Dus je krijgt dan alleen een regel met .. members: ASNUMMER:<oude AS set naam> ( Voorbeeld van AS-A2B - https://apps.db.ripe.net/db-web-ui/query?bflag=false&dflag=false&rflag=true… ) En bij peeringdb : zet je de nieuwe AS set naam (ASNUMMER:<oude AS set naam>) .. en wil je het helemaal fancy doen .. dan doe je RIPE:: ASNUMMER:<oude AS set naam> Als je RIPE:: ervoor zet, dan is dat een referentie naar in welke RIR DB je AS-Set te vinden is .. ( voorbeeld in PeeringDB : https://www.peeringdb.com/net/3237 ) Daarna is het handig om ook je AS object even een update te geven .. En loop even overal na, dat je je nieuwe AS-Set in je export regels hebt staan.. zoals : * remarks: Transits * remarks: ============================================================ * import: from AS2914 action pref=100; accept ANY AND NOT {0.0.0.0/0} * export: to AS2914 announce AS51088:AS-A2B * import: from AS3257 action pref=100; accept ANY AND NOT {0.0.0.0/0} * export: to AS3257 announce AS51088:AS-A2B Mocht je dat bij peers / klanten of internet exchanges ook hebben staan.. rinse & repeat .. you know the drill. ( Voorbeeld AS51088 - https://apps.db.ripe.net/db-web-ui/query?bflag=false&dflag=false&rflag=true… ). Het is een pleister tegen een mogelijk issue .. maar wel handig om dit correct te fixen .. waar je later veel plezier van kan hebben .. dus doe er je voordeel mee. Die fix die er besproken wordt in de RIPE DB WG, zorgt er voor dat er geen nieuwe AS-Sets met een short notatie aangemaakt kunnen worden. Maar verhelpen is beter dan genezen. Alvast prettig weekend, Groetjes, Erik Bais

3 3

Join Quantum Internet hackathon: 1-2 December in Amsterdam
by Vesna Manojlovic 16 Nov '22

16 Nov '22

Dear NLNOG colleagues, RIPE NCC is co-organising a Quantum Internet Hackathon simultaneously in five nodes on 1-2 December 2022. : Dublin, Padua, Poznan, Sarajevo, online -- or in Amsterdam! (Volkshotel, Wibautstraat 150) We are looking for more network engineers, to join researches, students & hackers that are taking part. Apply here: https://www.ripe.net/participate/forms/apply/quantum-internet-hackathon-202… Top-3 Goals of this event: * Sharing existing software and protocols for the Quantum Internet * Producing tools & documentation, or learning/interaction materials * Forging connections between participants and between nodes Partner organisations: PSNC, GÉANT, SURF, Trinity College Dublin, QuTech (Delft), University of Padova, INHA University in Uzbekistan, Maynooth University, University of Sarajevo, RIPE NCC Find out more here: https://labs.ripe.net/author/karla-white/take-part-in-the-quantum-internet-… Regards, Vesna -- Senior Community Builder, RIPE NCC https://labs.ripe.net/author/becha/

1 0