Nanog 51 notes, 31 Jan - 2 Feb 2011

Last week's Nanog meeting was in Miami, with Terremark as sponsor, again. (Terremark is about to be acquired by Verizon).

Matt Petach took detailed, almost verbatim, notes for much of the meeting - like me, he was listening and watching the video stream, not attending in person.

The highlights, from my viewpoint :
Monday

  • Distributed Denial of Service attacks are ramping up again, according to the Arbor security report. There was at least one attack (DNS reflection) at 100Gbps during 2010.
  • 400Gbps (16 x 25G streams) is the next target beyond 100Ge
  • The second Arbor talk was about mobile networks - after the RAN and the backhaul, the traffic from them runs over the same infrastructure supported by Nanog operators, but there is very little
    cross over in interest. 75% of mobile operators say security is poor, bad, or non-existent.
  • Jim Cowie (Renesys) ran a panel sesion in the afternoon which reviewed mobile network operations, and in particular the GPRS roaming exchange, modelled after AMSIX, and the proposals for IPX (not a Novell protocol, but a private over the top network for mobile traffic, and the issues with it for voice)
  • Jan Schaumann, Yahoo! described their L3 load balancer (L3DSR) development - Yahoo Mail is using it, and they will roll it out to other properties. Twitter is using this too - Yahoo will opensource
    the kernel modules and iptables(8) plugin available for Free BSD and RHEL. A10, Brocade, and Citrix have built hardware support.
  • The silliest presentation was from Neil Farquharson, Alcatel-Lucent - his first time at Nanog, used the opening of the film Bambi (he'd been watching it with his kids) as an analogy to justify a unified control plane across IP to optics. He was encouraging people to come to a BoF at Denver.
  • IPv6 Deployment experiences wasn't streamed, though there are slides from Level3 (deployment experience, Hurricane Electric (deployment history, details), LACNIC (v4 runout effects), and SpaceNet AG (v6 routing table).

Tuesday

  • IPv6 day discussed - Yahoo!, and Akamai. There's a lot of brokenness .. the Day is an attempt to get a better idea of how much brokenness.
  • Shyam Mani, Mozilla, describes their experience in turning on DNSSEC, including the initial breakages.
  • BGP routing: Rob Shakir on his IETF draft which aims to reduce the impact on service availablity of session reset.
  • approach overview
  1. avoid sending notification in first place (avoid teardown!)
  2. recover RIB consistency (something went wrong, but can we continue functioning?)
  3. restart BGP hitlessly--avoid forwarding impacts while getting out of error condition
  4. monitoring--as protocol gets more complicated, need to make sure it's still doing right thing
  • Route Flap dampening revived - Lixia Zhang presented her students' work - suggests decoupling flap detection, flap suppression.
  • Jim Cowie had a nice animation of how the Internet in Egypt disconnected - it reconnected again 5 days later.

Wednesday

  • Discussion of IPv4 runout.

References
Nanog 51 Agenda with links to slides and video

Matt Petach's notes
Monday morning,afternoon
Tuesday morning,afternoon
Wednesday morning

Newnog site

Cunning Systems evaluates product and service ideas in computing and communications. If you would like to discuss an idea, contact us at info@cunningsystems.com