26 Jul
2013
26 Jul
'13
1:01 a.m.
On 7/25/13 1:40 PM, Marc, LX1DUC wrote:
However I'm not sure I'm able to provide an
IS-IS capable router for
the trial...
A Juniper O-series might work ;)
I think the 2811s from cisco are cheap enough now (under 400 on ebay). The
issue with cisco is you need some one to get the code for you now that they've
locked down the CCO site.
I'd love to use ALU gear, but it's just to expensive on the used market.
But this is all just discussion on how we wan to do it at this point.
We'll need some detailed proposals and come to a conciseness on it.
--
Bryan Fields
727-409-1194 - Voice
727-214-2508 - Fax
http://bryanfields.net
26 Jul
26 Jul
1:32 a.m.
New subject: Distributed BGP Announce
Yeah, I will need a detailed concrete plan to go to our routing guru and
manager for approval. I doubt they will allow it to run on production
routers, but we have some older gear in our lab I might be able to
re-purpose.
On thing I'm not clear on. As a potential admin of a AMPR POP would I have
to manually configure GRE tunnels for every local gateway that wants to
connect ? That could be headache.
-Neil
--
Neil Johnson -N0SFH
http://erudicon.com
1:51 a.m.
New subject: Distributed BGP Announce
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
A Juniper O-series might work ;)
I think the 2811s from cisco are cheap enough now (under 400 on
ebay). The issue with cisco is you need some one to get the code
for you now that they've locked down the CCO site.
I'd love to use ALU gear, but it's just to expensive on the used
market.
But this is all just discussion on how we wan to do it at this
point.
We'll need some detailed proposals and come to a conciseness on
it.
Well I think in HAM-Radio we should be vendor agnostic and things
should be compatible with OSS, DIY and homebrew system.
73 de Marc, LX1DUC
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=c0XW
-----END PGP SIGNATURE-----
4:25 a.m.
New subject: Distributed BGP Announce
On Thu, Jul 25, 2013 at 1:51 PM, Marc, LX1DUC <lx1duc(a)rlx.lu> wrote:
(Please trim inclusions from previous messages)
Well I think in HAM-Radio we should be vendor agnostic and things
should be compatible with OSS, DIY and homebrew system.
Protocol and Vendor agnostic yes , but people running production networks
get nervous around "unsupported" (i.e. they can't call a number and get
help right away). devices tied into their nets. Not saying it can't be
done, but a lot of effort must be put in place to protect the Net from
trouble.
What I'm saying is that the POPs would need to be run by truly competent
personnel and configured to protect the Net from accidental or malicious
configurations at the local gateway level.
When you start messing with routing on the Internet you HAVE to know what
you are doing and trust your device not to do something stupid.
-Neil
--
Neil Johnson -N0SFH
http://erudicon.co <http://erudicon.com>m
5:05 a.m.
New subject: Distributed BGP Announce
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Protocol and Vendor agnostic yes , but people running
production
networks get nervous around "unsupported" (i.e. they can't call a
number and get help right away). devices tied into their nets. Not
saying it can't be done, but a lot of effort must be put in place
to protect the Net from trouble.
What I'm saying is that the POPs would need to be run by truly
competent personnel and configured to protect the Net from
accidental or malicious configurations at the local gateway level.
When you start messing with routing on the Internet you HAVE to
know what you are doing and trust your device not to do something
stupid.
Agreed, so we need skilled operators for the regional internet
gateways (RIGs) and they should be working close with or even within
the organization hosting the RIGs. The hoster is also free to take any
actions necessary to protect it's network by filtering and limiting
the announcements from the RIG or even shutdown the BGP session
completely.
All this however doesn't change the fact that the setup does not
require hardware from big C or big J or whomever, a carefully selected
Linux Box running some kind of routing daemons (e.g. Quagga, Bird,
ExaBGP) can suffice to cope with all the tasks. Alot of projects have
proven that a stable service using Linux based BGP speakers (AS112,
a.ntpns.org (aka AS6647), etc) is possible.
73 de Marc, LX1DUC
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=6vpz
-----END PGP SIGNATURE-----
11:57 p.m.
New subject: Distributed BGP Announce
Interesting, I had asked the question earlier how much administrative work
would be required by the AMPR POP's admin(s) to configure the GRE/IP-IP
tunnels from the local gateways. I didn't get a response.
I agree that using a Linux/BSD box could allow users to provision their own
tunnels via a carefully written script.
-Neil
On Thu, Jul 25, 2013 at 5:05 PM, Marc, LX1DUC <lx1duc(a)rlx.lu> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
--
Neil Johnson -N0SFH
http://erudicon.com
Protocol and Vendor agnostic yes , but people
running production
networks get nervous around "unsupported" (i.e. they can't call a
number and get help right away). devices tied into their nets. Not
saying it can't be done, but a lot of effort must be put in place
to protect the Net from trouble.
What I'm saying is that the POPs would need to be run by truly
competent personnel and configured to protect the Net from
accidental or malicious configurations at the local gateway level.
When you start messing with routing on the Internet you HAVE to
know what you are doing and trust your device not to do something
stupid.
Agreed, so we need skilled operators for the regional internet
gateways (RIGs) and they should be working close with or even within
the organization hosting the RIGs. The hoster is also free to take any
actions necessary to protect it's network by filtering and limiting
the announcements from the RIG or even shutdown the BGP session
completely.
All this however doesn't change the fact that the setup does not
require hardware from big C or big J or whomever, a carefully selected
Linux Box running some kind of routing daemons (e.g. Quagga, Bird,
ExaBGP) can suffice to cope with all the tasks. Alot of projects have
proven that a stable service using Linux based BGP speakers (AS112,
a.ntpns.org (aka AS6647), etc) is possible.
73 de Marc, LX1DUC
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iQIcBAEBAgAGBQJR8aEcAAoJEHFIN1T8ZA8vQDAQAIdHlreR64mBNBQpdPbSKGw8
KYpMfxjp8OLRHozDxRcAhbW8zgru31CrCfErBsqjpoSWkocTwklMW8PWvQZ7ATBW
wPFugqxgGtKPD9BX32tp0REWc5+q4mNiZpChw4N5+MPqVjEGEkChbjxB2dLYUfvu
ncussosXTlyBePvOO5/hN5l+j917ajAng2P6QMWPNT+HNU9kyps5rSnPh960HGBD
BGKlw12RuJ4KBWvSlDBRkkqTMm1teXqNYVPMh8s1TPjL41LEYMt7CBXDjlKZlFZB
vLvBVijo4HIekgcc50Ao8Lz0vZmQ5GbvAB9R0qGZyyguTxLB0P5qGylfltP8MsVS
WhVfihaI1f0wn5HnCoQMyaxnmYtqAg7Dr+cpc0sUAXjz6wiwUHZw+gmhucXGW9Ug
gIJ9J4QCPLWDSfNo/l52hYHBneoy3zThcjx9pmRVDvolQpGeVQNvSFd1jZFZFSPn
c8NDXCXvtv1cikOmfEfxyRWnbm9gbIJ3uuS3zf4h+Qq8n4qZjQcULI1hDZAlCtqs
OczFFtgmaEhnOtyEpKJrN99NTQPqpxGAk5Nfu+pl0Piz2MjFLh67yuYwLbWkaols
TCOgWwoE3n8fmIxXGqDKaiL0ifY7mnfDyo2f3pp2Pahi57BffNavIuvQWtno2n4u
nmP9hSpNPhH9lx9nwgl+
=6vpz
-----END PGP SIGNATURE-----
27 Jul
27 Jul
3:36 a.m.
New subject: Distributed BGP Announce
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 26/07/2013 18:57, Neil Johnson wrote:
Interesting, I had asked the question earlier how
much
administrative work would be required by the AMPR POP's admin(s) to
configure the GRE/IP-IP tunnels from the local gateways. I didn't
get a response.
I agree that using a Linux/BSD box could allow users to provision
their own tunnels via a carefully written script.
I think one goal of this discussion should be to make the basic setup
of Local Gateway a task of a few minutes.
The setup and operation of a Regional Internet Gateway is a different
chapter however :-)
73 de Marc, LX1DUC
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=24X5
-----END PGP SIGNATURE-----
4167
days inactive
4168
days old
6 comments
3 participants
participants (3)
-
Bryan Fields -
Marc, LX1DUC -
Neil Johnson