44net

44net@mailman.ampr.org

3 participants
3195 discussions

HTTP and DNS Server Changes
by lleachii＠aol.com 13 Nov '20

13 Nov '20

All, I am testing a AWS server that runs the DNS and HTTP services for my node. NTP (kb3vwg-001.ampr.org/44.60.44.1) was not moved. Please verify: ~ AMPR DNS (44.60.44.3) - OPEN ACCESS for AMPRNet hosts, 44 hosts can also AXFR 44.in-addr.arpa. and ampr.org - **if you accessed DNS via your WAN IP and it's now fails, let me know off thread about why and/or reconfigure to use your AMPRNet IP for inquires** - **If you used HTTP on this address, it now fails** --- ~ AMPR HTTP (44.60.44.10): - http://whatismyip.ampr.org - you will only receive your valid 44 SRC IP on AMPRNet, all other IPs receive the non-Internet-reachable 44.60.44.254 - http://speedtest.ampr.org - currently Error 302 redirects to https://speedtest.org/ - Main landing (http://kb3vwg-010.ampr.org / http://44.60.44.10) - amprdocs and tools pages should be visible here if you're on AMPRNet - **The 44-Trace and Ping tools to 44 IPs ONLY should work as intended - please message me off thread if not** - other IPs (and 44.0.0.1/32) use the AWS interface now - **Since this server is now hosted...I am able to add my device as an official Slave DNS of AMPRNet on its real interface...if you all desire (and it's approved)** - I'd like to test transfer on a temporary basis before we make it a go...I do pay for if it spikes, LOL --- ~ WAN HTTP (<IP>): - http://kb3vwg.ampr.org (WAN HTTP) - is no longer CMS-based - Main landing (http://<IP>/) - currently Error 302 redirects to https://speedtest.org/ (HINT: you can nslookup kb3vwg.ampr.org for the current WAN IP) NOTE: if you accessed NTP via your WAN IP, this may change in the future. Please migrate to using AMPRNet SRC IPs access to ALL AMPRNet services [on the KB3VWG node]. (This temp test may lead to proof-of-concept for a FREE/donated permanent site [for more services/CPUs] for VMs.) 73, - Lynwood KB3VWG

1 1

Re: [44net] Lost Packets
by lleachii＠aol.com 12 Nov '20

12 Nov '20

Chris et. al., You noted something possible loss along a path. Close to AMPRGW, I notice dc-tus-agg8--lax-agg8-300g.cenic.net is constantly giving me packet loss. Also CENIC.ear1.LosAngeles1.Level3.net is somewhat dropping (also dc-lax-agg8--lax-agg6-100ge-2.cenic.net). I'm able to see this loss running with the command 'mtr -u gw.ampr.org' (UDP seems to show more packet loss than 'mtr -T'). user@machine:~$ tracepath gw.ampr.org 1?: [LOCALHOST] pmtu 1500 1: OpenWrt.lan 0.540ms 1: OpenWrt.lan 0.824ms 2: no reply 3: B3352.WASHDC-LCR-21.verizon-gni.net 20.242ms 4: no reply 5: 0.ae1.BR1.IAD8.ALTER.NET 8.127ms 6: no reply 7: no reply 8: CENIC.ear1.LosAngeles1.Level3.net 65.995ms asymm 11 9: dc-lax-agg8--lax-agg6-100ge-2.cenic.net 71.811ms asymm 11 10: dc-tus-agg8--lax-agg8-300g.cenic.net 70.475ms asymm 11 11: dc-sdg-agg4--tus-agg8-300g.cenic.net 67.237ms 12: dc-ucsd-100ge--sdg-agg4.cenic.net 69.696ms 13: mcore-flow-bypass-mx0-p2p.ucsd.edu 68.723ms 14: sdsc-7710-7--mcore-vl2995-p2p.ucsd.edu 72.042ms 15: no reply - Lynwood KB3VWG

12 28

Re: [44net] Lost Packets
by Rob Janssen 11 Nov '20

11 Nov '20

I can only confirm that the amount of "network probing" traffic is ever increasing. We have the 44.137.0.0/16 network BGP routed towards us so we do not experience the described issues, but at the firewall there is a massive amount of incoming probes and I do use some techniques to auto-block these. For example, I have a static list of known probers (the likes of shodan.io, internet-census.org, binaryedge.ninja, etc etc. a total of 674 entries, 90 of them subnets (often /24). Additionally, I have an automatic blacklist of servers sending 10 or more probes per minute to any address in our /16 that is not in use (similar to the "are you in DNS" check in amprgw) and keeps the address blacklisted for an hour. That list usually contains about 75000 addresses! In the past I have tried several times to mail those "researchers" and "services that allow you to search for open ports" guys to get our subnet removed from their scan range. The results are limited. Sometimes it works, usually for limited time, sometimes just nothing changes. Maybe the contacts for the AMPRnet could try some of those requests as well. We get several Mbit/s of useless crap on our /16 so I can guess what it looks like for amprgw. Pity that there are so many of those jerks around. Rob

1 0

Talking 44net Maintenance/Improvement + TAC at this week's Office Hours
by Rosy Wolfe 09 Nov '20

09 Nov '20

Hello, 44net! This week we're doing our first office hours: Thurs. 12 Nov 18:00 UTC (10am PT / 1pm ET / 6pm GMT / 7pm CET) Will go to about 20:00 UTC Full Zoom invite below this message. Following our community call on Oct. 10, folks at ARDC have started to put together some thinking around 44net maintenance and improvement. This is especially true for Chris (G1FEF), who knows the most about the technological and administrative aspects of running the portal. Some items from his list include: * Improving logic using Laravel open source framework (Laravel framework enables easy internationalization) * Improving presentation, e.g. for use on mobile * Create workflows to improve admin tasks ...and that really just scratches the surface. Learn more on Thursday! If you are someone who is interested in 44net development, please join us at this Thursday's meeting! If you can't make it, feel free to share your thoughts via email. Note that we have a growing list of thoughts from previous messages and the survey to be prioritized as part of this work. Speaking of prioritization, as part of this effort to improve 44net, we'll be putting the Technical Advisory Committee (TAC) back together. The first job of the TAC will be to discuss, test, review, and collaborate on the work being done on the Portal. More information for how to apply to the TAC to come as soon as possible. In the meantime, hope you can join us on Thursday and share your thoughts here. Many thanks, Rosy // ARDC is inviting you to a scheduled Zoom meeting. Topic: ARDC Office Hours Time: Nov 12, 2020 10:00 AM Pacific Time (US and Canada) Join Zoom Meeting https://us02web.zoom.us/j/85376459195?pwd=TmpZQ2FqVW13TEU3VmpjNHp1TlhhUT09 Meeting ID: 853 7645 9195 Passcode: 440088 One tap mobile +13462487799,,85376459195#,,,,,,0#,,440088# US (Houston) +16699006833,,85376459195#,,,,,,0#,,440088# US (San Jose) Dial by your location +1 346 248 7799 US (Houston) +1 669 900 6833 US (San Jose) +1 253 215 8782 US (Tacoma) +1 312 626 6799 US (Chicago) +1 929 205 6099 US (New York) +1 301 715 8592 US (Washington D.C) Meeting ID: 853 7645 9195 Passcode: 440088 Find your local number: https://us02web.zoom.us/u/kd4rPrWKJX -- Rosy Wolfe - KJ7RYV Executive Director Amateur Radio Digital Communications (ARDC) ampr.org

1 1

Re: [44net] Lost Packets
by G1FEF 07 Nov '20

07 Nov '20

Hi David, > Chris: Are you the official administrator of the AMPRGW FreeBSD host now? Yes, I am. I’ve been doing some tests from the gw and it looks like there is some packet loss upstream depending on which route the packets are going, for example I ran a 100 count ping to one of my servers in the UK and got no packet loss at all with a consistent RTT: --- 85.199.212.83 ping statistics --- 100 packets transmitted, 100 packets received, 0.0% packet loss round-trip min/avg/max/stddev = 147.366/147.491/151.369/0.409 ms Then I ran a test to 98.143.158.201 (the IP WB7AWL was using for his test) and I got 2% loss with varying RTT: --- 98.143.158.201 ping statistics --- 100 packets transmitted, 98 packets received, 2.0% packet loss round-trip min/avg/max/stddev = 3.514/12.592/209.460/30.918 ms I’ve repeated these tests a few times and looked at the routes taken and it does seem to indicate that the gw machine itself is not the issue. I will have a discussion with the folks at UCSD and let you know what transpires. Regards, Chris

1 0

Lost Packets
by Albert Lawson 06 Nov '20

06 Nov '20

Good Evening Folks, Is something going on with the gateway...????? I just noticed this today: --- ampr.org ping statistics --- 92 packets transmitted, 72 received, 21% packet loss, time 91427ms rtt min/avg/max/mdev = 33.320/41.448/51.167/2.890 ms As opposed to: --- aa6hf.ampr.org ping statistics --- 100 packets transmitted, 100 received, 0% packet loss, time 99146ms rtt min/avg/max/mdev = 47.409/56.381/70.304/4.552 ms Pings to my commercial IP (from my network at work) are 100%.....but pings to ampr.org (from my network at work) are showing dropped packets as well. 73's -Albert WB7AWL

3 3

Re: [44net] 44Net Digest, Vol 9, Issue 111
by Mark Stevenson 06 Nov '20

06 Nov '20

Hi, My pings seem stable, although high at around 200ms, they are consistent. Endpoint is in the UK Mark - 2W0YMS On Fri, 6 Nov 2020, 20:00 , <44net-request(a)mailman.ampr.org> wrote: > Send 44Net mailing list submissions to > 44net(a)mailman.ampr.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://mailman.ampr.org/mailman/listinfo/44net > or, via email, send a message with subject or body 'help' to > 44net-request(a)mailman.ampr.org > > You can reach the person managing the list at > 44net-owner(a)mailman.ampr.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of 44Net digest..." > Today's Topics: > > 1. Lost Packets (Albert Lawson) > > > > ---------- Forwarded message ---------- > From: Albert Lawson <wb7awl(a)lawsonpc.com> > To: AMPRNet working group <44net(a)mailman.ampr.org> > Cc: > Bcc: > Date: Fri, 6 Nov 2020 02:14:49 +0000 > Subject: [44net] Lost Packets > Good Evening Folks, > > Is something going on with the gateway...????? I just noticed this today: > > --- ampr.org ping statistics --- > 92 packets transmitted, 72 received, 21% packet loss, time 91427ms > rtt min/avg/max/mdev = 33.320/41.448/51.167/2.890 ms > > As opposed to: > > --- aa6hf.ampr.org ping statistics --- > 100 packets transmitted, 100 received, 0% packet loss, time 99146ms > rtt min/avg/max/mdev = 47.409/56.381/70.304/4.552 ms > > Pings to my commercial IP (from my network at work) are 100%.....but pings > to ampr.org (from my network at work) are showing dropped packets as > well. > > 73's > > -Albert > WB7AWL > > > _______________________________________________ > 44Net mailing list > 44Net(a)mailman.ampr.org > https://mailman.ampr.org/mailman/listinfo/44net >

3 2

Re: [44net] 44Net Digest, Vol 9, Issue 111
by lleachii＠aol.com 06 Nov '20

06 Nov '20

Albert, Yes, something is wrong: root@OpenWrt:~# ping 44.0.0.1 -I 44.60.44.1 -A -c 100 -s 22 -q PING 44.0.0.1 (44.0.0.1) from 44.60.44.1: 22 data bytes --- 44.0.0.1 ping statistics --- 100 packets transmitted, 79 packets received, 21% packet loss round-trip min/avg/max = 66.029/66.446/69.157 ms You all can test from my end: http://kb3vwg-010.ampr.org/tools/ping/php-ping44.php 73, - Lynwood KB3VWG

1 0

Trying to contact VE3JGL
by G1FEF 01 Nov '20

01 Nov '20

Hi, If anyone is in touch with Luc - VE3JGL please could they ask him to drop me a private email asap. Thanks, Chris - G1FEF

1 0

Network topology and vpn connection.
by pete M 26 Oct '20

26 Oct '20

Hi! First I want to thanks the ampr group and especially G1FEF for providing me a /24 that I am in the process of being bgp annonce with a vultr vps in NJ. If what I am about to talk dont fit in the group, please let me know, I will move this else where. I am in no mean a network guru but I understand concept pretty easily. SO I am planning my /24 as this. the VPS at vultr will use Bird to annonce the route, I will use only the default route provided by vultr. >From there I created a dummy interface that have my /24 as its IP. I then want to make a VPN server to distribute the net and ip to remote site I have that use a mix of hardwired and wireless connection. The routers are all edgerouter-x from ubiquity they will all eventually be interconnected by 2 sources, the hardwired provided by many ISP and the wireless that I am building as a redundancy. If one sources fail, the router will fall back to the other link. the prefered links will always be the hardwired, the wireless is the backup. (some of the links are 40 Km long, but most are 5-6 Km and the smallest is under 1 Km.) >From those edge router I will have connection to the vpn and every router will have a dhcp server that will serve a part or the /24 like 16 ip for each site. (I have 3 site right now) and I will have fixed IP at each site for the repeaters and aprs gateways. Now the configuration of the vpn is my first problem. should I have the vpn server listening on the ipv4 address of vultr or should I made it listen to the dummy interface? I think this is juste the beginning of my quest! Pierre VE2PF

3 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

44net