[AusNOG] Remote Work - (SIP/Security/CGNAT)

[Luke Iggleden]

Currently using Coverge ICT. Originally this particular user was having 
issues. It's improved somewhat now they have had their techs look at it. 
The remote staff worker has been working with them and says their tech 
support is awesome.

They have upgraded her DSL and we're now operating pretty well overall. 
We still have latency issues / packetloss from time to time. ConvergeICT 
offered FTTP service to be installed within 60 days for not a lot more 
money. I'm going to monitor their network from here and if it proves 
reliable order that service in.

I'm also thinking perhaps this will improve when SMW3 comes back online 
- but who knows how long that will stay up before another break?

Changing the routing from our side to go via AAPT/TPG/TATA (via hong 
kong) didn't seem to change the situation. Vocus takes us via LA at the 
moment.

I'll ask around about Globe as well. Sounds like you've got some good 
experience with them!

L


On 13/11/2015 11:18 am, Chris wrote:
> On 13/11/2015 8:05 AM, Luke Iggleden wrote:
>> I've heard too many horror stories about certain open source SIP 
>> servers being compromised and bills into the 10's of thousands for 
>> having relaxed security. Ideally we want to keep these boxes locked 
>> down as much as possible.
>>
>> We did look to GeoBlock the rest of the world and only accept known 
>> prefixes from the ISP's that were being used by the CGNAT boxes, but 
>> the audio never makes it back to the DSL tail in the remote location 
>> so a tunnel was the only option.
>>
>> I'm thinking PLDT will be the only choice we will accept from now on. 
>> That seems to be a general consensus.
>>
>> PLDT has a fibre option as well we could insist on, but it narrows 
>> the scope of workers.
>>
> FWIW I have a PLDT fibre and Globe fibre service (for business, not home).
>
> PLDT has consistently been a pain to deal with. Over the last few 
> weeks packet loss has averaged about 15% to Australia during business 
> hours (starts around 8AM and goes on to about 6PM). I have been 
> waiting for months for them to get BGP peering setup. Getting PTR 
> records set on IP's that are assigned to us from them took two 
> meetings and a few weeks for them to actually apply it. This graph was 
> from just over a week ago showing the ramp up: 
> http://i.imgur.com/0xZSTS1.png (this test point is in Singapore).
>
> Globe has been the better of the two, any issues promptly get fixed, 
> latency is constantly lower to Australia and in general it has been 
> more reliable. They have also set up everything I have wanted with 
> minimal fuss, I have not had to email or call the account manager 
> every single day to get things done.
>
> I have also used PLDT and Globe DSL services at home and Globe has 
> also been better, I got rid of PLDT and just stuck with Globe in the 
> end. You can get a static IP allocation for an extra 800PHP or so a 
> month. They will not assign a normal public IP (dynamic) to a home DSL 
> service though, it will be CGNAT unless you purchase the static IP.
>
> Maybe its different in Manila but that has been my experience in Cebu.
>
> I have heard good things about Converge ICT but I have not tried them 
> myself.
>
>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20151113/15542d55/attachment.html>