From k at rl.ag Tue Sep 5 15:09:37 2023 From: k at rl.ag (Karl Kloppenborg) Date: Tue, 5 Sep 2023 05:09:37 +0000 Subject: [AusNOG] Reminder: APNIC BYLAW REFORM - DO YOUR PART Message-ID: Hello Everyone, Earlier this year I embarked on acting against a threat to APNIC and the RIR system, part of that was developing a set of bylaw changes to strengthen APNIC and eventually all RIR?s from EC takeovers. Many of you did your part to put that EC reform document to APNIC, in turn they listened and now the community will be voting on the reforms. If you haven?t already, please take a moment to login to your APNIC accounts and cast your vote on the EC reforms. You can do this by going to https://my.apnic.net/voting If you would like to read more about the reforms, you can do so here: https://www.apnic.net/about-apnic/organization/structure/proposed-by-law-reform-2023/#proposedreforms I am encouraging you to participate in this vote, voting yes strengthens the safety of the EC and in turn APNIC. Key dates: Activity Date Time Member online voting opens Thursday, 31 August 2023 14:00 (UTC +10) Proxy appointment opens Thursday, 31 August 2023 14:00 (UTC +10) Proxy appointment closes* Tuesday, 12 September 2023 14:30 (UTC +9) Proxy voting opens* Thursday, 14 September 2023 09:30 (UTC +9) All voting closes* Thursday, 14 September 2023 14:30 (UTC +9) For those going to Ausnog, enjoy, I wish I was there! For those going to Kyoto, see you there! For those going to both, I feel bad for your liver. Kind Regards, -- Karl Kloppenborg, (BCompSc, CNCF-[KCNA, CKA, CKAD], LFCE, CompTIA Linux+ XK0-004) Managing Director, Invention Labs. -------------- next part -------------- An HTML attachment was scrubbed... URL: From spoofer-info at caida.org Sat Sep 9 03:00:13 2023 From: spoofer-info at caida.org (CAIDA Spoofer Project) Date: Fri, 8 Sep 2023 10:00:13 -0700 Subject: [AusNOG] Spoofer Report for AusNOG for Aug 2023 Message-ID: <1694192413.304466.5090.nullmailer@caida.org> In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within aus. Inferred improvements during Aug 2023: none inferred Source Address Validation issues inferred during Aug 2023: ASN Name First-Spoofed Last-Spoofed 4826 VOCUS-BACKBONE 2018-03-07 2023-08-25 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=aus&no_block=1 Please send any feedback or suggestions to spoofer-info at caida.org From chris at thesysadmin.dev Wed Sep 13 00:21:49 2023 From: chris at thesysadmin.dev (Christopher Hawker) Date: Tue, 12 Sep 2023 14:21:49 +0000 Subject: [AusNOG] The Stability and Security of APNIC - Proposed By-law Reforms Message-ID: Hello all, For all of our fellow APNIC members as you may or may not be aware, an important vote is currently taking place. This vote is critical to protecting the governance of APNIC, and to protect its integrity supporting over 9000 members, over another 10,000 indirect members (through NIRs) as well as the countless millions of people who rely on the internet today. The APNIC Proposed By-law Reform 2023 contains some of the most important changes to the APNIC By-laws that have been put forward to date. These proposed reforms can be found here on the APNIC website (https://www.apnic.net/about-apnic/organization/structure/proposed-by-law-reform-2023/#proposedreforms), however, in short they are: * Resolution 1 - A resolution to introduce new eligibility criteria for nominees in Executive Council elections, * Resolution 2 - A resolution to preserve the independence and geographic representation of the Executive Council, * Resolution 3 - A resolution to prevent individuals involved in litigation against APNIC from being nominees in Executive Council elections, * Resolution 4 - A resolution to limit the control one organisation (or corporate group) can have on the Executive Council, and * Resolution 5 - A resolution to introduce a new independent body, the Electoral Committee, to have oversight of nominee eligibility and conduct in Executive Council elections. These resolutions were proposed by Karl Kloppenborg, shared far and wide, and were drafted in response to community feedback APNIC received during the last EC election in March this year. They are designed to protect, strengthen and support not only the EC and APNIC members, but the wider internet community as a whole. It is important that each APNIC member uses their vote (and in turn their voice) to vote in favor of these resolutions and to be heard on these important matters pertaining to the security of APNIC and its ability to service the Asia-Pacific region. Please, don't just vote for the sake of voting or because I am asking you to. Read through the proposed reforms, gain an understanding of their wording and how they affect the by-laws and then cast your vote. Voting closes on Thursday, 14 September 2023 at 14:30 (UTC+9:00), which is 15:30 this Thursday in Brisbane/Sydney/Melbourne, 15:00 in Adelaide and 13:30 in Perth. I implore you to please use your voice and cast your vote as the stability of APNIC may very well depend on it. Should you have any questions, please feel free to reach out to me either on or off-list, or via iMessage (chris at thesysadmin.dev) for those who are use Apple iOS devices. Regards, Christopher Hawker -------------- next part -------------- An HTML attachment was scrubbed... URL: From k at rl.ag Thu Sep 14 16:50:54 2023 From: k at rl.ag (Karl Kloppenborg) Date: Thu, 14 Sep 2023 06:50:54 +0000 Subject: [AusNOG] EC BYLAW REFORMS PASSED Message-ID: It?s been a wild ride since I started this in February. I?d like to let the communities know that with incredible honour, I can report that all EC bylaws passed with a large percentage. When this started even APNIC told me this is likely an impossible task, but many of you came to the table to help rally the cause and we have had a momentous victory for the safety and stability of our RIR system. Congratulations to you all. Kind Regards, -- Karl Kloppenborg, (BCompSc, CNCF-[KCNA, CKA, CKAD], LFCE, CompTIA Linux+ XK0-004) Managing Director, Invention Labs. -------------- next part -------------- An HTML attachment was scrubbed... URL: From Brad.McGinn at team.telstra.com Fri Sep 15 08:57:44 2023 From: Brad.McGinn at team.telstra.com (McGinn, Brad) Date: Thu, 14 Sep 2023 22:57:44 +0000 Subject: [AusNOG] EC BYLAW REFORMS PASSED In-Reply-To: References: Message-ID: You, good sir, are quite literally a champion here. You deserve that proud feeling you must have. And to all those who used their vote to help the cause, fantastic work. Brad McGinn General From: AusNOG On Behalf Of Karl Kloppenborg Sent: Thursday, September 14, 2023 4:51 PM To: ausnog at lists.ausnog.net Cc: ripe-list at ripe.net Subject: [AusNOG] EC BYLAW REFORMS PASSED [External Email] This email was sent from outside the organisation - be cautious, particularly with links and attachments. It's been a wild ride since I started this in February. I'd like to let the communities know that with incredible honour, I can report that all EC bylaws passed with a large percentage. When this started even APNIC told me this is likely an impossible task, but many of you came to the table to help rally the cause and we have had a momentous victory for the safety and stability of our RIR system. Congratulations to you all. Kind Regards, -- Karl Kloppenborg, (BCompSc, CNCF-[KCNA, CKA, CKAD], LFCE, CompTIA Linux+ XK0-004) Managing Director, Invention Labs. -------------- next part -------------- An HTML attachment was scrubbed... URL: From dirk at twofatmonkeys.com Fri Sep 15 09:21:28 2023 From: dirk at twofatmonkeys.com (Two Fat Monkeys - Dirk Bermingham) Date: Thu, 14 Sep 2023 23:21:28 +0000 Subject: [AusNOG] EC BYLAW REFORMS PASSED In-Reply-To: References: Message-ID: Cheers to you Karl, the apathetic amongst us were oblivious to the threat that was coming. I should hope you never have to buy your own drink ever again at any ausnog. Simply, thank you, legend! Best, Dirk Bermingham From: AusNOG On Behalf Of McGinn, Brad Sent: Friday, September 15, 2023 8:58 AM To: Karl Kloppenborg ; ausnog at lists.ausnog.net Cc: ripe-list at ripe.net Subject: Re: [AusNOG] EC BYLAW REFORMS PASSED You, good sir, are quite literally a champion here. You deserve that proud feeling you must have. And to all those who used their vote to help the cause, fantastic work. Brad McGinn General From: AusNOG > On Behalf Of Karl Kloppenborg Sent: Thursday, September 14, 2023 4:51 PM To: ausnog at lists.ausnog.net Cc: ripe-list at ripe.net Subject: [AusNOG] EC BYLAW REFORMS PASSED [External Email] This email was sent from outside the organisation - be cautious, particularly with links and attachments. It's been a wild ride since I started this in February. I'd like to let the communities know that with incredible honour, I can report that all EC bylaws passed with a large percentage. When this started even APNIC told me this is likely an impossible task, but many of you came to the table to help rally the cause and we have had a momentous victory for the safety and stability of our RIR system. Congratulations to you all. Kind Regards, -- Karl Kloppenborg, (BCompSc, CNCF-[KCNA, CKA, CKAD], LFCE, CompTIA Linux+ XK0-004) Managing Director, Invention Labs. -------------- next part -------------- An HTML attachment was scrubbed... URL: From luke.t at tncrew.com.au Mon Sep 18 10:20:54 2023 From: luke.t at tncrew.com.au (Luke Thompson) Date: Mon, 18 Sep 2023 10:20:54 +1000 Subject: [AusNOG] AU DNS - Something happening? Message-ID: <0bffdcb3-90c4-18ce-b884-9a2165426565@tncrew.com.au> We've got many internal/external monitoring alerts going off. Common factor seems to be AU DNS. Is anyone else seeing alerts tripped? Emails are flowing & I can query OK (Starlink), yet hosts remain "down". 15 minutes since the first alert came through. WhatsMyDNS for "down" hosts is showing about a 50% query hit rate. Cheers, Luke From ml-ausnog-xviii.ve at linuxwan.net Mon Sep 18 10:23:32 2023 From: ml-ausnog-xviii.ve at linuxwan.net (Ted Cooper) Date: Mon, 18 Sep 2023 10:23:32 +1000 Subject: [AusNOG] AU DNS - Something happening? In-Reply-To: <0bffdcb3-90c4-18ce-b884-9a2165426565@tncrew.com.au> References: <0bffdcb3-90c4-18ce-b884-9a2165426565@tncrew.com.au> Message-ID: The DNS signatures just expired. Everything just went boom. RRSIG net.au/DS alg 8, id 62233: The Signature Expiration field of the RRSIG RR (2023-09-18 00:05:29+00:00) is 15 minutes in the past. https://dnsviz.net/d/abc.net.au/ZQeX9w/dnssec/ On 18/9/23 10:20, Luke Thompson wrote: > We've got many internal/external monitoring alerts going off. Common > factor seems to be AU DNS. > > Is anyone else seeing alerts tripped? Emails are flowing & I can query > OK (Starlink), yet hosts remain "down". > > 15 minutes since the first alert came through. WhatsMyDNS for "down" > hosts is showing about a 50% query hit rate. > > Cheers, > Luke > > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > https://lists.ausnog.net/mailman/listinfo/ausnog From Nathan.Brookfield at iperium.com.au Mon Sep 18 10:25:17 2023 From: Nathan.Brookfield at iperium.com.au (Nathan Brookfield) Date: Mon, 18 Sep 2023 00:25:17 +0000 Subject: [AusNOG] AU DNS - Something happening? In-Reply-To: <0bffdcb3-90c4-18ce-b884-9a2165426565@tncrew.com.au> References: <0bffdcb3-90c4-18ce-b884-9a2165426565@tncrew.com.au> Message-ID: Yep especially from ASIA, it appears all of our network monitoring there believes our DNS is down when it's not. -----Original Message----- From: AusNOG On Behalf Of Luke Thompson Sent: Monday, September 18, 2023 10:21 AM To: ausnog at lists.ausnog.net Subject: [AusNOG] AU DNS - Something happening? We've got many internal/external monitoring alerts going off. Common factor seems to be AU DNS. Is anyone else seeing alerts tripped? Emails are flowing & I can query OK (Starlink), yet hosts remain "down". 15 minutes since the first alert came through. WhatsMyDNS for "down" hosts is showing about a 50% query hit rate. Cheers, Luke _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net https://lists.ausnog.net/mailman/listinfo/ausnog From luke.t at tncrew.com.au Mon Sep 18 10:26:50 2023 From: luke.t at tncrew.com.au (Luke Thompson) Date: Mon, 18 Sep 2023 10:26:50 +1000 Subject: [AusNOG] AU DNS - Something happening? In-Reply-To: References: <0bffdcb3-90c4-18ce-b884-9a2165426565@tncrew.com.au> Message-ID: <2b72397d-98bc-3156-6f43-a921d05a852e@tncrew.com.au> Ah hah, DNSSEC makes sense. Curious to see how long goes by until everything clears. On 18/9/2023 10:23 am, Ted Cooper wrote: > The DNS signatures just expired. Everything just went boom. > > RRSIG net.au/DS alg 8, id 62233: The Signature Expiration field of the > RRSIG RR (2023-09-18 00:05:29+00:00) is 15 minutes in the past. > > https://dnsviz.net/d/abc.net.au/ZQeX9w/dnssec/ > > > On 18/9/23 10:20, Luke Thompson wrote: >> We've got many internal/external monitoring alerts going off. Common >> factor seems to be AU DNS. >> >> Is anyone else seeing alerts tripped? Emails are flowing & I can >> query OK (Starlink), yet hosts remain "down". >> >> 15 minutes since the first alert came through. WhatsMyDNS for "down" >> hosts is showing about a 50% query hit rate. >> >> Cheers, >> Luke >> >> _______________________________________________ >> AusNOG mailing list >> AusNOG at lists.ausnog.net >> https://lists.ausnog.net/mailman/listinfo/ausnog > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > https://lists.ausnog.net/mailman/listinfo/ausnog > From andrew at osi.com.au Mon Sep 18 10:56:26 2023 From: andrew at osi.com.au (Andrew Radke) Date: Mon, 18 Sep 2023 10:56:26 +1000 Subject: [AusNOG] AU DNS - Something happening? In-Reply-To: <2b72397d-98bc-3156-6f43-a921d05a852e@tncrew.com.au> References: <0bffdcb3-90c4-18ce-b884-9a2165426565@tncrew.com.au> <2b72397d-98bc-3156-6f43-a921d05a852e@tncrew.com.au> Message-ID: Yeah, we are seeing dnssec failing on some of our resolvers but not others. Haven?t dug as to why but disabling it until sorted. Regards, Andrew Radke Open Spaces Internet Pty Ltd Ph: 0412 798 593 Web: osi.com.au > On 18 Sep 2023, at 10:26 am, Luke Thompson wrote: > > Ah hah, DNSSEC makes sense. Curious to see how long goes by until everything clears. > > On 18/9/2023 10:23 am, Ted Cooper wrote: >> The DNS signatures just expired. Everything just went boom. >> >> RRSIG net.au/DS alg 8, id 62233: The Signature Expiration field of the RRSIG RR (2023-09-18 00:05:29+00:00) is 15 minutes in the past. >> >> https://dnsviz.net/d/abc.net.au/ZQeX9w/dnssec/ >> >> >> On 18/9/23 10:20, Luke Thompson wrote: >>> We've got many internal/external monitoring alerts going off. Common factor seems to be AU DNS. >>> >>> Is anyone else seeing alerts tripped? Emails are flowing & I can query OK (Starlink), yet hosts remain "down". >>> >>> 15 minutes since the first alert came through. WhatsMyDNS for "down" hosts is showing about a 50% query hit rate. >>> >>> Cheers, >>> Luke >>> >>> _______________________________________________ >>> AusNOG mailing list >>> AusNOG at lists.ausnog.net >>> https://lists.ausnog.net/mailman/listinfo/ausnog >> _______________________________________________ >> AusNOG mailing list >> AusNOG at lists.ausnog.net >> https://lists.ausnog.net/mailman/listinfo/ausnog >> > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > https://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: From Nathan.Brookfield at iperium.com.au Mon Sep 18 10:57:37 2023 From: Nathan.Brookfield at iperium.com.au (Nathan Brookfield) Date: Mon, 18 Sep 2023 00:57:37 +0000 Subject: [AusNOG] AU DNS - Something happening? In-Reply-To: References: <0bffdcb3-90c4-18ce-b884-9a2165426565@tncrew.com.au> <2b72397d-98bc-3156-6f43-a921d05a852e@tncrew.com.au> Message-ID: This is now resolved, 49 minutes downtime. From: AusNOG On Behalf Of Andrew Radke Sent: Monday, September 18, 2023 10:56 AM To: Luke Thompson Cc: ausnog at lists.ausnog.net Subject: Re: [AusNOG] AU DNS - Something happening? Yeah, we are seeing dnssec failing on some of our resolvers but not others. Haven?t dug as to why but disabling it until sorted. Regards, Andrew Radke Open Spaces Internet Pty Ltd Ph: 0412 798 593 Web: osi.com.au On 18 Sep 2023, at 10:26 am, Luke Thompson > wrote: Ah hah, DNSSEC makes sense. Curious to see how long goes by until everything clears. On 18/9/2023 10:23 am, Ted Cooper wrote: The DNS signatures just expired. Everything just went boom. RRSIG net.au/DS alg 8, id 62233: The Signature Expiration field of the RRSIG RR (2023-09-18 00:05:29+00:00) is 15 minutes in the past. https://dnsviz.net/d/abc.net.au/ZQeX9w/dnssec/ On 18/9/23 10:20, Luke Thompson wrote: We've got many internal/external monitoring alerts going off. Common factor seems to be AU DNS. Is anyone else seeing alerts tripped? Emails are flowing & I can query OK (Starlink), yet hosts remain "down". 15 minutes since the first alert came through. WhatsMyDNS for "down" hosts is showing about a 50% query hit rate. Cheers, Luke _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net https://lists.ausnog.net/mailman/listinfo/ausnog _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net https://lists.ausnog.net/mailman/listinfo/ausnog _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net https://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: From Nathan.Brookfield at iperium.com.au Mon Sep 18 10:58:28 2023 From: Nathan.Brookfield at iperium.com.au (Nathan Brookfield) Date: Mon, 18 Sep 2023 00:58:28 +0000 Subject: [AusNOG] AU DNS - Something happening? In-Reply-To: References: <0bffdcb3-90c4-18ce-b884-9a2165426565@tncrew.com.au> <2b72397d-98bc-3156-6f43-a921d05a852e@tncrew.com.au> Message-ID: Appears that the RRSIG expired at 00:05:29 UTC Nathan Brookfield | VK2NAB General Manager p: 1300 592 330 | m: 0412 266 008 e: Nathan.brookfield at iperium.com.au | w: iperium.com.au Suite 4.02, 189 Kent Street Sydney NSW 2000 [cid:image001.png at 01D9EA1F.09BD58B0] Your Telco Team DISCLAIMER: This document is intended solely for the named addressee. This electronic communication, which includes any files or attachments thereto, contains proprietary or confidential information and may be privileged and otherwise protected under copyright or other applicable intellectual property laws. The use, disclosure, copying or distribution of any of the information contained in this document, by any person other than the addressee, is strictly prohibited. If you received this document in error, please contact the sender immediately and delete all the material from any computer. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you. Any views or opinions presented are solely those of the author and do not necessarily represent those of Iperium. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. Iperium accepts no liability for any damage caused by any virus transmitted by this email. From: AusNOG On Behalf Of Andrew Radke Sent: Monday, September 18, 2023 10:56 AM To: Luke Thompson Cc: ausnog at lists.ausnog.net Subject: Re: [AusNOG] AU DNS - Something happening? Yeah, we are seeing dnssec failing on some of our resolvers but not others. Haven?t dug as to why but disabling it until sorted. Regards, Andrew Radke Open Spaces Internet Pty Ltd Ph: 0412 798 593 Web: osi.com.au On 18 Sep 2023, at 10:26 am, Luke Thompson > wrote: Ah hah, DNSSEC makes sense. Curious to see how long goes by until everything clears. On 18/9/2023 10:23 am, Ted Cooper wrote: The DNS signatures just expired. Everything just went boom. RRSIG net.au/DS alg 8, id 62233: The Signature Expiration field of the RRSIG RR (2023-09-18 00:05:29+00:00) is 15 minutes in the past. https://dnsviz.net/d/abc.net.au/ZQeX9w/dnssec/ On 18/9/23 10:20, Luke Thompson wrote: We've got many internal/external monitoring alerts going off. Common factor seems to be AU DNS. Is anyone else seeing alerts tripped? Emails are flowing & I can query OK (Starlink), yet hosts remain "down". 15 minutes since the first alert came through. WhatsMyDNS for "down" hosts is showing about a 50% query hit rate. Cheers, Luke _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net https://lists.ausnog.net/mailman/listinfo/ausnog _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net https://lists.ausnog.net/mailman/listinfo/ausnog _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net https://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.png Type: image/png Size: 4595 bytes Desc: image001.png URL: From dirk at twofatmonkeys.com Mon Sep 18 11:04:57 2023 From: dirk at twofatmonkeys.com (Two Fat Monkeys - Dirk Bermingham) Date: Mon, 18 Sep 2023 01:04:57 +0000 Subject: [AusNOG] AU DNS - Something happening? In-Reply-To: References: <0bffdcb3-90c4-18ce-b884-9a2165426565@tncrew.com.au> <2b72397d-98bc-3156-6f43-a921d05a852e@tncrew.com.au> Message-ID: <16f6af7ca97e4897b14555f0d222ef80@SRV-SY4-MS01.aquavitae.local> Isn?t PKI fun? I?d not like to be the person in charge of key renewal today? From: AusNOG On Behalf Of Nathan Brookfield Sent: Monday, September 18, 2023 10:58 AM To: Andrew Radke ; Luke Thompson Cc: ausnog at lists.ausnog.net Subject: Re: [AusNOG] AU DNS - Something happening? Appears that the RRSIG expired at 00:05:29 UTC Nathan Brookfield | VK2NAB General Manager p: 1300 592 330 | m: 0412 266 008 e: Nathan.brookfield at iperium.com.au | w: iperium.com.au Suite 4.02, 189 Kent Street Sydney NSW 2000 [cid:image001.png at 01D9EA1F.F51F5F60] Your Telco Team DISCLAIMER: This document is intended solely for the named addressee. This electronic communication, which includes any files or attachments thereto, contains proprietary or confidential information and may be privileged and otherwise protected under copyright or other applicable intellectual property laws. The use, disclosure, copying or distribution of any of the information contained in this document, by any person other than the addressee, is strictly prohibited. If you received this document in error, please contact the sender immediately and delete all the material from any computer. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you. Any views or opinions presented are solely those of the author and do not necessarily represent those of Iperium. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. Iperium accepts no liability for any damage caused by any virus transmitted by this email. From: AusNOG > On Behalf Of Andrew Radke Sent: Monday, September 18, 2023 10:56 AM To: Luke Thompson > Cc: ausnog at lists.ausnog.net Subject: Re: [AusNOG] AU DNS - Something happening? Yeah, we are seeing dnssec failing on some of our resolvers but not others. Haven?t dug as to why but disabling it until sorted. Regards, Andrew Radke Open Spaces Internet Pty Ltd Ph: 0412 798 593 Web: osi.com.au On 18 Sep 2023, at 10:26 am, Luke Thompson > wrote: Ah hah, DNSSEC makes sense. Curious to see how long goes by until everything clears. On 18/9/2023 10:23 am, Ted Cooper wrote: The DNS signatures just expired. Everything just went boom. RRSIG net.au/DS alg 8, id 62233: The Signature Expiration field of the RRSIG RR (2023-09-18 00:05:29+00:00) is 15 minutes in the past. https://dnsviz.net/d/abc.net.au/ZQeX9w/dnssec/ On 18/9/23 10:20, Luke Thompson wrote: We've got many internal/external monitoring alerts going off. Common factor seems to be AU DNS. Is anyone else seeing alerts tripped? Emails are flowing & I can query OK (Starlink), yet hosts remain "down". 15 minutes since the first alert came through. WhatsMyDNS for "down" hosts is showing about a 50% query hit rate. Cheers, Luke _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net https://lists.ausnog.net/mailman/listinfo/ausnog _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net https://lists.ausnog.net/mailman/listinfo/ausnog _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net https://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.png Type: image/png Size: 4595 bytes Desc: image001.png URL: From marka at isc.org Mon Sep 18 11:49:20 2023 From: marka at isc.org (Mark Andrews) Date: Mon, 18 Sep 2023 11:49:20 +1000 Subject: [AusNOG] AU DNS - Something happening? In-Reply-To: <16f6af7ca97e4897b14555f0d222ef80@SRV-SY4-MS01.aquavitae.local> References: <0bffdcb3-90c4-18ce-b884-9a2165426565@tncrew.com.au> <2b72397d-98bc-3156-6f43-a921d05a852e@tncrew.com.au> <16f6af7ca97e4897b14555f0d222ef80@SRV-SY4-MS01.aquavitae.local> Message-ID: <41F1A08E-0A96-4B59-B642-CD031783B8E1@isc.org> This isn?t key renewal. This is signature regeneration. net.au. 900 IN DS 40165 8 2 E1EF24B9E822E574D996E6B03F438B78E5F5914E47D0C0151A21B114 CEE45A26 net.au. 900 IN RRSIG DS 8 2 900 20231030004937 20230917231937 62233 au. L446gkKJ2PaxX+6QbcfDJMmV7a9Ho2E9wDctqtixeX90O0fGxOtENcyM 28nmJPhGN+RYY1Kycx3NsM6x+zEqVX6X1SOxLBfon6IBxtqg8bRafMQm DZcdo82c6wQAacBUsutqPuY+foTF7ygn1tbPees6rPJE8N9hRqhJC0QE DpCkWmA6bdSprjivnYJTAYiT3+/7UKRmxiu386qPNICeSP4jc2YdkH7A VPeZapqnhY72cLGcfmgZWT6apveljm2gwrYoq1dTh5vvc/r+jTJVHgSn zU7pYU/BJlHIFC4lwaGpNB/j/oKngL6or1zfnB3rjFeBx2R9kfzwWl2R dGvdkg== With signature lifetimes of ~45 days and a zone expiry value of 4 weeks this should have been caught at least 4 weeks ago if good operation practice was being applied. Mark > On 18 Sep 2023, at 11:04, Two Fat Monkeys - Dirk Bermingham wrote: > > Isn?t PKI fun? I?d not like to be the person in charge of key renewal today? > From: AusNOG On Behalf Of Nathan Brookfield > Sent: Monday, September 18, 2023 10:58 AM > To: Andrew Radke ; Luke Thompson > Cc: ausnog at lists.ausnog.net > Subject: Re: [AusNOG] AU DNS - Something happening? > Appears that the RRSIG expired at 00:05:29 UTC > Nathan Brookfield | VK2NAB > General Manager > > p: 1300 592 330 | m: 0412 266 008 > e: Nathan.brookfield at iperium.com.au | w: iperium.com.au > > Suite 4.02, 189 Kent Street Sydney NSW 2000 > > Your Telco Team > DISCLAIMER: This document is intended solely for the named addressee. This electronic communication, which includes any files or attachments thereto, contains proprietary or confidential information and may be privileged and otherwise protected under copyright or other applicable intellectual property laws. The use, disclosure, copying or distribution of any of the information contained in this document, by any person other than the addressee, is strictly prohibited. If you received this document in error, please contact the sender immediately and delete all the material from any computer. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you. Any views or opinions presented are solely those of the author and do not necessarily represent those of Iperium. > > WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. Iperium accepts no liability for any damage caused by any virus transmitted by this email. > From: AusNOG On Behalf Of Andrew Radke > Sent: Monday, September 18, 2023 10:56 AM > To: Luke Thompson > Cc: ausnog at lists.ausnog.net > Subject: Re: [AusNOG] AU DNS - Something happening? > Yeah, we are seeing dnssec failing on some of our resolvers but not others. Haven?t dug as to why but disabling it until sorted. > Regards, > Andrew Radke > Open Spaces Internet Pty Ltd > Ph: 0412 798 593 > Web: osi.com.au > On 18 Sep 2023, at 10:26 am, Luke Thompson wrote: > Ah hah, DNSSEC makes sense. Curious to see how long goes by until everything clears. > > On 18/9/2023 10:23 am, Ted Cooper wrote: > The DNS signatures just expired. Everything just went boom. > > RRSIG net.au/DS alg 8, id 62233: The Signature Expiration field of the RRSIG RR (2023-09-18 00:05:29+00:00) is 15 minutes in the past. > > https://dnsviz.net/d/abc.net.au/ZQeX9w/dnssec/ > > > On 18/9/23 10:20, Luke Thompson wrote: > We've got many internal/external monitoring alerts going off. Common factor seems to be AU DNS. > > Is anyone else seeing alerts tripped? Emails are flowing & I can query OK (Starlink), yet hosts remain "down". > > 15 minutes since the first alert came through. WhatsMyDNS for "down" hosts is showing about a 50% query hit rate. > > Cheers, > Luke > > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > https://lists.ausnog.net/mailman/listinfo/ausnog > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > https://lists.ausnog.net/mailman/listinfo/ausnog > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > https://lists.ausnog.net/mailman/listinfo/ausnog > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > https://lists.ausnog.net/mailman/listinfo/ausnog -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka at isc.org From dave.taht at gmail.com Wed Sep 20 10:01:21 2023 From: dave.taht at gmail.com (Dave Taht) Date: Tue, 19 Sep 2023 17:01:21 -0700 Subject: [AusNOG] what is acceptable jitter for VOIP & videoconferencing? Message-ID: Occasionally I question my baseline numbers, and struggle to find cites to support my increasingly ancient viewpoint, which goes back to CISCO LLQ, if not earlier. Recently this question came up that I lack an answer to, and was wondering what operators thought was the right number, and wondering how y?all achieve it. Taking a poll over here, with the core question being 10ms,30ms,100ms or 200ms: https://www.linkedin.com/feed/update/urn:li:activity:7110029609559056384/? -- Oct 30: https://netdevconf.info/0x17/news/the-maestro-and-the-music-bof.html Dave T?ht CSO, LibreQos -------------- next part -------------- An HTML attachment was scrubbed... URL: From chris at thesysadmin.dev Wed Sep 20 11:40:53 2023 From: chris at thesysadmin.dev (Christopher Hawker) Date: Wed, 20 Sep 2023 01:40:53 +0000 Subject: [AusNOG] Quad9 DNS traffic to Singapore from AAPT/TPG Message-ID: Hello all, We are seeing some unusual behaviour with a TPG/AAPT service, where traffic destined for Quad9 DNS is being routed to their PoP in Singapore via Level 3. According to Quad9's status page, there are no faults with the Sydney PoP. Is anyone else seeing similar behaviour? Regards, Christopher H. -------------- next part -------------- An HTML attachment was scrubbed... URL: From markzzzsmith at gmail.com Wed Sep 20 11:48:55 2023 From: markzzzsmith at gmail.com (Mark Smith) Date: Wed, 20 Sep 2023 11:48:55 +1000 Subject: [AusNOG] Quad9 DNS traffic to Singapore from AAPT/TPG In-Reply-To: References: Message-ID: Have you lodged a fault with APP/TPG? If there is a fault, only they can fix it, so it's best to talk to them first. On Wed, 20 Sept 2023, 11:41 Christopher Hawker, wrote: > Hello all, > > We are seeing some unusual behaviour with a TPG/AAPT service, where > traffic destined for Quad9 DNS is being routed to their PoP in Singapore > via Level 3. According to Quad9's status page, there are no faults with the > Sydney PoP. > > Is anyone else seeing similar behaviour? > > Regards, > Christopher H. > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > https://lists.ausnog.net/mailman/listinfo/ausnog > -------------- next part -------------- An HTML attachment was scrubbed... URL: From dazzagibbs at gmail.com Wed Sep 20 11:50:16 2023 From: dazzagibbs at gmail.com (DaZZa) Date: Wed, 20 Sep 2023 11:50:16 +1000 Subject: [AusNOG] Quad9 DNS traffic to Singapore from AAPT/TPG In-Reply-To: References: Message-ID: My default outbound is via Optus, and it's heading the same way traceroute 9.9.9.9 traceroute to 9.9.9.9 (9.9.9.9), 30 hops max, 60 byte packets 1 10.100.1.253 (10.100.1.253) 1.510 ms 10.100.1.252 (10.100.1.252) 0.958 ms 2 10.100.100.249 (10.100.1.249) 0.595 ms 0.576 ms 0.536 ms 3 xxx.xxx.xxx.xxx (xxx.xxx.xxx.xxx) 0.683 ms 0.680 ms 0.656 ms 4 yyy.yyy.yyy.yyy (yyy.yyy.yyy.yyy) 2.774 ms 2.678 ms 2.734 ms 5 * * * 6 hu0-7-1-1.22rrpr01.optus.net.au (124.19.61.128) 2.983 ms hu0-4-1-0.22rrpr01.optus.net.au (124.19.61.118) 2.938 ms hu0-7-1-1.22rrpr01.optus.net.au (124.19.61.128) 3.096 ms 7 ae-10.edge2.sydney1.level3.net (4.68.37.253) 3.187 ms 3.152 ms 3.119 ms 8 ae2.3605.edge3.singapore3.level3.net (4.69.206.178) 104.953 ms 104.822 ms 103.089 ms 9 pch-level3-singapore3.level3.net (4.68.38.10) 95.868 ms 96.293 ms 96.248 ms 10 dns9.quad9.net (9.9.9.9) 94.679 ms !X 94.654 ms !X 94.613 ms !X D On Wed, 20 Sept 2023 at 11:41, Christopher Hawker wrote: > > Hello all, > > We are seeing some unusual behaviour with a TPG/AAPT service, where traffic destined for Quad9 DNS is being routed to their PoP in Singapore via Level 3. According to Quad9's status page, there are no faults with the Sydney PoP. > > Is anyone else seeing similar behaviour? > > Regards, > Christopher H. > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > https://lists.ausnog.net/mailman/listinfo/ausnog -- veg?e?tar?i?an: Ancient tribal slang for the village idiot who can't hunt, fish or ride From chris at thesysadmin.dev Wed Sep 20 11:51:03 2023 From: chris at thesysadmin.dev (Christopher Hawker) Date: Wed, 20 Sep 2023 01:51:03 +0000 Subject: [AusNOG] Quad9 DNS traffic to Singapore from AAPT/TPG In-Reply-To: References: Message-ID: Yes, we have raised a ticket upstream. Simply trying to ascertain if it's just us that are affected or if there is potentially a wider issue. Regards, Christopher H. ________________________________ From: Mark Smith Sent: Wednesday, September 20, 2023 11:48 AM To: Christopher Hawker Cc: Subject: Re: [AusNOG] Quad9 DNS traffic to Singapore from AAPT/TPG Have you lodged a fault with APP/TPG? If there is a fault, only they can fix it, so it's best to talk to them first. On Wed, 20 Sept 2023, 11:41 Christopher Hawker, > wrote: Hello all, We are seeing some unusual behaviour with a TPG/AAPT service, where traffic destined for Quad9 DNS is being routed to their PoP in Singapore via Level 3. According to Quad9's status page, there are no faults with the Sydney PoP. Is anyone else seeing similar behaviour? Regards, Christopher H. _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net https://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: From luke at iggleden.com Wed Sep 20 11:51:33 2023 From: luke at iggleden.com (Luke Iggleden) Date: Wed, 20 Sep 2023 11:51:33 +1000 Subject: [AusNOG] Quad9 DNS traffic to Singapore from AAPT/TPG In-Reply-To: References: Message-ID: Hi Christopher, Last week quad9 had a significant outage, at least verified on all the Peering fabrics in Sydney. Perhaps TPG/AAPT routed around that? Have you tried their ibog at tpg.com.au address? Cheers, Luke Iggleden On 20/9/2023 11:40 am, Christopher Hawker wrote: > Hello all, > > We are seeing some unusual behaviour with a TPG/AAPT service, where > traffic destined for Quad9 DNS is being routed to their PoP in > Singapore via Level 3. According to Quad9's status page, there are no > faults with the Sydney PoP. > > Is anyone else seeing similar behaviour? > > Regards, > Christopher H. > > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > https://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: From chris at thesysadmin.dev Wed Sep 20 11:59:52 2023 From: chris at thesysadmin.dev (Christopher Hawker) Date: Wed, 20 Sep 2023 01:59:52 +0000 Subject: [AusNOG] Quad9 DNS traffic to Singapore from AAPT/TPG In-Reply-To: References: Message-ID: Looks like it might be another outage with Quad9's Sydney PoP. Traffic via GSL out to 9.9.9.9 is routing to Singapore via Guam. [cid:8890c8ed-a51e-464f-9f3c-36acf6ff31f4] Regards, Christopher H. ________________________________ From: AusNOG on behalf of Luke Iggleden Sent: Wednesday, September 20, 2023 11:51 AM To: ausnog at lists.ausnog.net Subject: Re: [AusNOG] Quad9 DNS traffic to Singapore from AAPT/TPG Hi Christopher, Last week quad9 had a significant outage, at least verified on all the Peering fabrics in Sydney. Perhaps TPG/AAPT routed around that? Have you tried their ibog at tpg.com.au address? Cheers, Luke Iggleden On 20/9/2023 11:40 am, Christopher Hawker wrote: Hello all, We are seeing some unusual behaviour with a TPG/AAPT service, where traffic destined for Quad9 DNS is being routed to their PoP in Singapore via Level 3. According to Quad9's status page, there are no faults with the Sydney PoP. Is anyone else seeing similar behaviour? Regards, Christopher H. _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net https://lists.ausnog.net/mailman/listinfo/ausnog -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image.png Type: image/png Size: 47538 bytes Desc: image.png URL: From tony at wicks.co.nz Wed Sep 20 12:08:06 2023 From: tony at wicks.co.nz (Tony Wicks) Date: Wed, 20 Sep 2023 14:08:06 +1200 Subject: [AusNOG] Quad9 DNS traffic to Singapore from AAPT/TPG In-Reply-To: References: Message-ID: <00bf01d9eb67$4d444960$e7ccdc20$@wicks.co.nz> For want its worth, traffic in New Zealand is fine. [root at titan ~]# traceroute 9.9.9.9 traceroute to 9.9.9.9 (9.9.9.9), 30 hops max, 60 byte packets 1 103-208-140-185.feenix.co.nz (103.208.140.185) 0.733 ms 0.574 ms 0.550 ms 2 * * * 3 * * * 4 as42.akl.ix.nz (43.243.21.78) 1.099 ms 1.039 ms 0.985 ms 5 dns9.quad9.net (9.9.9.9) 2.532 ms !X 2.473 ms !X 1.855 ms !X [root at titan ~]# traceroute 1.1.1.1 traceroute to 1.1.1.1 (1.1.1.1), 30 hops max, 60 byte packets 1 103-208-140-185.feenix.co.nz (103.208.140.185) 0.638 ms 0.629 ms 0.593 ms 2 * * * 3 * * * 4 * * * 5 as13335.auckland.megaport.com (43.243.22.6) 2.000 ms 2.295 ms 2.192 ms 6 one.one.one.one (1.1.1.1) 1.349 ms 1.553 ms 1.473 ms From: AusNOG On Behalf Of Christopher Hawker Sent: Wednesday, September 20, 2023 2:00 PM To: Luke Iggleden ; ausnog at lists.ausnog.net Subject: Re: [AusNOG] Quad9 DNS traffic to Singapore from AAPT/TPG Looks like it might be another outage with Quad9's Sydney PoP. Traffic via GSL out to 9.9.9.9 is routing to Singapore via Guam. -------------- next part -------------- An HTML attachment was scrubbed... URL: From stryqx at gmail.com Wed Sep 20 12:12:36 2023 From: stryqx at gmail.com (Chris Knight) Date: Wed, 20 Sep 2023 12:12:36 +1000 Subject: [AusNOG] Quad9 DNS traffic to Singapore from AAPT/TPG In-Reply-To: References: Message-ID: Seeing the same through Telstra Internet Direct. AussieBB is getting to 9.9.9.9 via WA IX. On Wed, 20 Sept 2023 at 11:51, DaZZa wrote: > My default outbound is via Optus, and it's heading the same way > > traceroute 9.9.9.9 > traceroute to 9.9.9.9 (9.9.9.9), 30 hops max, 60 byte packets > 1 10.100.1.253 (10.100.1.253) 1.510 ms 10.100.1.252 (10.100.1.252) > 0.958 ms > 2 10.100.100.249 (10.100.1.249) 0.595 ms 0.576 ms 0.536 ms > 3 xxx.xxx.xxx.xxx (xxx.xxx.xxx.xxx) 0.683 ms 0.680 ms 0.656 ms > 4 yyy.yyy.yyy.yyy (yyy.yyy.yyy.yyy) 2.774 ms 2.678 ms 2.734 ms > 5 * * * > 6 hu0-7-1-1.22rrpr01.optus.net.au (124.19.61.128) 2.983 ms > hu0-4-1-0.22rrpr01.optus.net.au (124.19.61.118) 2.938 ms > hu0-7-1-1.22rrpr01.optus.net.au (124.19.61.128) 3.096 ms > 7 ae-10.edge2.sydney1.level3.net (4.68.37.253) 3.187 ms 3.152 ms > 3.119 ms > 8 ae2.3605.edge3.singapore3.level3.net (4.69.206.178) 104.953 ms > 104.822 ms 103.089 ms > 9 pch-level3-singapore3.level3.net (4.68.38.10) 95.868 ms 96.293 > ms 96.248 ms > 10 dns9.quad9.net (9.9.9.9) 94.679 ms !X 94.654 ms !X 94.613 ms !X > > D > > On Wed, 20 Sept 2023 at 11:41, Christopher Hawker > wrote: > > > > Hello all, > > > > We are seeing some unusual behaviour with a TPG/AAPT service, where > traffic destined for Quad9 DNS is being routed to their PoP in Singapore > via Level 3. According to Quad9's status page, there are no faults with the > Sydney PoP. > > > > Is anyone else seeing similar behaviour? > > > > Regards, > > Christopher H. > > _______________________________________________ > > AusNOG mailing list > > AusNOG at lists.ausnog.net > > https://lists.ausnog.net/mailman/listinfo/ausnog > > > > -- > veg?e?tar?i?an: > Ancient tribal slang for the village idiot who can't hunt, fish or ride > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > https://lists.ausnog.net/mailman/listinfo/ausnog > -- Regards, Chris Knight -------------- next part -------------- An HTML attachment was scrubbed... URL: From Nathan.Brookfield at iperium.com.au Wed Sep 20 12:26:07 2023 From: Nathan.Brookfield at iperium.com.au (Nathan Brookfield) Date: Wed, 20 Sep 2023 02:26:07 +0000 Subject: [AusNOG] Quad9 DNS traffic to Singapore from AAPT/TPG In-Reply-To: References: Message-ID: Yeah my best route on our network is via PCH on WA-IX as well. Nathan Brookfield | VK2NAB General Manager p: 1300 592 330 | m: 0412 266 008 e: Nathan.brookfield at iperium.com.au | w: iperium.com.au Suite 4.02, 189 Kent Street Sydney NSW 2000 [cid:image001.png at 01D9EBBD.A0707090] Your Telco Team DISCLAIMER: This document is intended solely for the named addressee. This electronic communication, which includes any files or attachments thereto, contains proprietary or confidential information and may be privileged and otherwise protected under copyright or other applicable intellectual property laws. The use, disclosure, copying or distribution of any of the information contained in this document, by any person other than the addressee, is strictly prohibited. If you received this document in error, please contact the sender immediately and delete all the material from any computer. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you. Any views or opinions presented are solely those of the author and do not necessarily represent those of Iperium. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. Iperium accepts no liability for any damage caused by any virus transmitted by this email. From: AusNOG On Behalf Of Chris Knight Sent: Wednesday, September 20, 2023 12:13 PM To: ausnog at lists.ausnog.net Subject: Re: [AusNOG] Quad9 DNS traffic to Singapore from AAPT/TPG Seeing the same through Telstra Internet Direct. AussieBB is getting to 9.9.9.9 via WA IX. On Wed, 20 Sept 2023 at 11:51, DaZZa > wrote: My default outbound is via Optus, and it's heading the same way traceroute 9.9.9.9 traceroute to 9.9.9.9 (9.9.9.9), 30 hops max, 60 byte packets 1 10.100.1.253 (10.100.1.253) 1.510 ms 10.100.1.252 (10.100.1.252) 0.958 ms 2 10.100.100.249 (10.100.1.249) 0.595 ms 0.576 ms 0.536 ms 3 xxx.xxx.xxx.xxx (xxx.xxx.xxx.xxx) 0.683 ms 0.680 ms 0.656 ms 4 yyy.yyy.yyy.yyy (yyy.yyy.yyy.yyy) 2.774 ms 2.678 ms 2.734 ms 5 * * * 6 hu0-7-1-1.22rrpr01.optus.net.au (124.19.61.128) 2.983 ms hu0-4-1-0.22rrpr01.optus.net.au (124.19.61.118) 2.938 ms hu0-7-1-1.22rrpr01.optus.net.au (124.19.61.128) 3.096 ms 7 ae-10.edge2.sydney1.level3.net (4.68.37.253) 3.187 ms 3.152 ms 3.119 ms 8 ae2.3605.edge3.singapore3.level3.net (4.69.206.178) 104.953 ms 104.822 ms 103.089 ms 9 pch-level3-singapore3.level3.net (4.68.38.10) 95.868 ms 96.293 ms 96.248 ms 10 dns9.quad9.net (9.9.9.9) 94.679 ms !X 94.654 ms !X 94.613 ms !X D On Wed, 20 Sept 2023 at 11:41, Christopher Hawker > wrote: > > Hello all, > > We are seeing some unusual behaviour with a TPG/AAPT service, where traffic destined for Quad9 DNS is being routed to their PoP in Singapore via Level 3. According to Quad9's status page, there are no faults with the Sydney PoP. > > Is anyone else seeing similar behaviour? > > Regards, > Christopher H. > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > https://lists.ausnog.net/mailman/listinfo/ausnog -- veg?e?tar?i?an: Ancient tribal slang for the village idiot who can't hunt, fish or ride _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net https://lists.ausnog.net/mailman/listinfo/ausnog -- Regards, Chris Knight -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image001.png Type: image/png Size: 4595 bytes Desc: image001.png URL: From chad at cpkws.com.au Wed Sep 20 12:30:03 2023 From: chad at cpkws.com.au (Chad Kelly) Date: Wed, 20 Sep 2023 02:30:03 +0000 Subject: [AusNOG] Quad9 DNS traffic to Singapore from AAPT/TPG In-Reply-To: References: Message-ID: "Looks like it might be another outage with Quad9's Sydney PoP. Traffic via GSL out to 9.9.9.9 is routing to Singapore via Guam." Yeah its either an outage or someone has messed up a configuration somewhere as traffic for that DNS service is going to NZ for me via Aukland IX via Swoop. From Scott.McInness at datacom.com.au Wed Sep 20 12:55:46 2023 From: Scott.McInness at datacom.com.au (Scott McInness) Date: Wed, 20 Sep 2023 02:55:46 +0000 Subject: [AusNOG] Quad9 DNS traffic to Singapore from AAPT/TPG In-Reply-To: References: Message-ID: It's going to AKL IX on Vocus from Sydney (and other east-coast locations) as well. traceroute to 9.9.9.9 (9.9.9.9) from 114.31.192.89, 30 hops max, 52 byte packets 1 be102-290.bdr01.syd11.nsw.vocus.network (114.31.192.88) 1.169 ms 1.026 ms 0.854 ms 2 be107.cor01.syd11.nsw.vocus.network (114.31.192.80) 29.772 ms be107.cor02.syd04.nsw.vocus.network (114.31.192.82) 35.668 ms 35.867 ms MPLS Label=24664 CoS=0 TTL=1 S=1 3 be204.bdr01.akl05.akl.nz.vocus.network (114.31.202.59) 31.580 ms 30.674 ms be204.bdr01.akl03.akl.nz.vocus.network (114.31.202.57) 25.230 ms MPLS Label=24148 CoS=0 TTL=1 S=1 4 be101.bdr04.alb01.akl.nz.vocus.network (114.31.202.41) 24.561 ms be12.bdr04.alb01.akl.nz.vocus.network (114.31.202.51) 30.345 ms be101.bdr04.alb01.akl.nz.vocus.network (114.31.202.41) 24.714 ms 5 as42.akl.ix.nz (43.243.21.78) 35.682 ms 35.591 ms 35.591 ms 6 dns9.quad9.net (9.9.9.9) 35.651 ms !<10> 35.749 ms !<10> 30.348 ms !<10> Optus from Adelaide going via Level3 in Sydney, then to Singapore [...] 10 124.19.61.226 (124.19.61.226) 28.011 ms 27.955 ms * 11 ae-14.edge1.Sydney1.Level3.net (4.68.37.225) 25.932 ms 25.916 ms * 12 hu0-7-1-0.22btpr01.optus.net.au (124.19.61.161) 22.786 ms 22.829 ms 22.904 ms 13 PCH-level3-singapore3.Level3.net (4.68.38.10) 118.318 ms 117.343 ms 117.267 ms 14 ae2.3605.edge3.Singapore3.level3.net (4.69.206.178) 117.194 ms 115.504 ms dns9.quad9.net (9.9.9.9) 116.966 ms !X -----Original Message----- From: AusNOG On Behalf Of Chad Kelly Sent: Wednesday, September 20, 2023 12:00 PM To: ausnog at lists.ausnog.net Subject: Re: [AusNOG] Quad9 DNS traffic to Singapore from AAPT/TPG "Looks like it might be another outage with Quad9's Sydney PoP. Traffic via GSL out to 9.9.9.9 is routing to Singapore via Guam." Yeah its either an outage or someone has messed up a configuration somewhere as traffic for that DNS service is going to NZ for me via Aukland IX via Swoop. _______________________________________________ AusNOG mailing list AusNOG at lists.ausnog.net https://lists.ausnog.net/mailman/listinfo/ausnog From jaedwards at gmail.com Wed Sep 20 14:53:43 2023 From: jaedwards at gmail.com (John Edwards) Date: Wed, 20 Sep 2023 14:23:43 +0930 Subject: [AusNOG] what is acceptable jitter for VOIP & videoconferencing? In-Reply-To: References: Message-ID: If it's not already obvious, I would like to mention that jitter/buffering on video is just about a non-issue (otherwise Microsoft Teams wouldn't exist) - but for audio it is everything. Users will notice 20ms of audio delay as a lip sync issue on a streaming movie, but for videoconferencing the focus is on the message and not the medium. Separate the streams if you can, and treat them separately. The other nifty trick at the DSLAM level was to tweak interleaving settings so that voice had a nice and consistent latency, as a substitute for per-PVC settings the chipsets got to the point where they could map ethernet priority tags to differentiated configs - but I appreciate that there is probably nobody left with access to those settings! John On Wed, 20 Sept 2023 at 09:31, Dave Taht wrote: > Occasionally I question my baseline numbers, and struggle to find cites to > support my increasingly ancient viewpoint, which goes back to CISCO LLQ, if > not earlier. > > Recently this question came up that I lack an answer to, and was wondering > what operators thought was the right number, and wondering how y?all > achieve it. Taking a poll over here, > with the core question being 10ms,30ms,100ms or 200ms: > > https://www.linkedin.com/feed/update/urn:li:activity:7110029609559056384/? > > -- > Oct 30: > https://netdevconf.info/0x17/news/the-maestro-and-the-music-bof.html > Dave T?ht CSO, LibreQos > _______________________________________________ > AusNOG mailing list > AusNOG at lists.ausnog.net > https://lists.ausnog.net/mailman/listinfo/ausnog > -------------- next part -------------- An HTML attachment was scrubbed... URL: From Darren.Moss at cloud365.com.au Fri Sep 22 10:56:25 2023 From: Darren.Moss at cloud365.com.au (Darren Moss) Date: Fri, 22 Sep 2023 00:56:25 +0000 Subject: [AusNOG] Akamai contact (CDN) Message-ID: Hi, I'm looking for a contact at Akamai to assist with a CDN enquiry. We have a project I would like to discuss with sales/tech and the website has no way of tailoring enquiries to reach the right people. Many thanks Darren. -------------- next part -------------- An HTML attachment was scrubbed... URL: