swinog September 2009

swinog@lists.swinog.ch

31 participants
34 discussions

Re: [swinog] Full BGP Routing Router Requirements
by Patrick Studer 17 Sep '09

17 Sep '09

If possible, it would be nice to survive a ddos ;-) That the 256 MB isn't enough is clear. Because of this we asked, if it will be enough just to upgrade to 768 MB to hold a full routing table or not. Or to ask the question direct, what is the minimum memory requirements to hold a full routing table from one or two upstreams and have some privat peerings at SwissIX? It's more a question of, if the 2811 can do this job and we can add perhaps a second 2811 for a second upstream, or if we should start over with a better solution. Since the router isn't too old, we like to use it for this. If your recommendation is to go with a 3845, then we have to forget about idea to go with the 2811. We just like to know, what will be the minimum requirements and the disadvantage of this minimum solution, and what will be the best cost/performance solutions for that scenario. Regards Patrick ****************************************************************************** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.studer(a)x-netconsulting.ch CH-4052 Basel Telefon +41 61 315 85 55 Schweiz Fax +41 61 315 85 59 ****************************************************************************** -----Ursprüngliche Nachricht----- Von: Bernd SPIESS [mailto:bernd.spiess@i3b.at] Gesendet: Donnerstag, 17. September 2009 09:54 An: studer.patrick(a)gmx.ch Betreff: RE: [swinog] Full BGP Routing Router Requirements it depends do you want to survive a ddos or not? with 100 mbit link speed a 2811 will die for 100% when you receive a dos/ddos in your direction 256 mb ram will also be to less for multihoming if you want to have one or two full routing table. It will be ok for two default routes and some peering routes. what is your budget ? typically a standard setup for a stable multihoming scenario with two core routers build with cisco can go from 10k until 20k euro below 10k€ you don’t get a solution with solves all cases. bernd -----Original Message----- From: swinog-bounces(a)lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of studer.patrick(a)gmx.ch Sent: Thursday, September 17, 2009 9:49 AM To: 'swinog(a)lists.swinog.ch' Subject: [swinog] Full BGP Routing Router Requirements Hi We are planning to go multihomed with our infrastructure. The first step will be, to have 10 Mbit/s fixed or 100 Mbit/s burstable service with an additional link to SwissIX where we want to do some privat peerings. In a second step, we will add a second or a third upstream with about the same speeds as the first connection. All connection should be done by normal Ethernet connection. Currently we have a Cisco 2811 with 256 MB Ram. Would it be enough for the first step to upgrade the ram to 768 MB or will it be necessary to buy a better/bigger router (2851, 3825 or 720x system). We tried to find some recommendations on the internet, but we wasn't successful. What is your recommendation for this scenario? Regards Patrick Studer ****************************************************************************** X-NetConsulting GmbH Internet http://www.x-netconsulting.ch Grosspeterstrasse 21 E-Mail p.studer(a)x-netconsulting.ch CH-4052 Basel Telefon +41 61 315 85 55 Schweiz Fax +41 61 315 85 59 ****************************************************************************** _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

1 0

Jemand von Swisscom BBCS / IP-Plus noch am arbeiten ?
by Guazzoni Daniele, CH 16 Sep '09

16 Sep '09

Ich kämpfe gerade vergeblich mit euren support wegen eine simple routing anpassung... Ich bin off-list erreichbar Danke regards ------------------------------------------------------------------ Daniele Guazzoni Network & System Engineer Cisco Certified Network Professional Email: daniele.guazzoni(a)audatex.ch Audatex Systems GmbH Zollstrasse 62 CH-8021 Zuerich Tel : +41 44 278 87 54 Fax : +41 44 278 85 15 Web : http://www.audatex.com Audatex , a Solera company This e-mail, any associated files and the information contained in them are confidential and is intended for the addressee(s) only. If you have received this message in error please notify the originator and delete the email immediately. The unauthorised use, disclosure, copying or alteration of this message is strictly forbidden. E-mails to and from the company are monitored for operational reasons and in accordance with lawful business practices. Any opinions expressed are those of the individual and do not necessarily represent the views of the company. The company does not conclude contracts by email and all negotiations are subject to contract. We make every effort to maintain our network free from computer viruses but accept no responsibility for any viruses which might be transferred by this e-mail.

1 0

Security appliance advice
by Simon Leins 16 Sep '09

16 Sep '09

Dear fellows, I currently look after a security solution for my company. I know that I will not get many answers from the list, as security is pretty much the secret recipie of all network operators. However, I better try to send a post here and see what feedbacks I can get, so let’s get started. I run a farm of 15 servers, all running RedHat Linux 5 x64. These servers are mainly webhosting orientated, they handle website files, database and emails. The network is multihomed and with a capacity of 3 x 100 Mbit. We currently don’t have any kind of security, nor a firewall appliance (yes, I know shame on me). At this point, I am looking at a cost-effective solution. I have checked around for commercial solutions and have found Cisco and Juniper to be my options. I must admit that I am not convinced at all by these brands and would fell pretty ashamed to have a Cisco ASA toy in my rack. As for Juniper, it seems that the boxes are a bit overpriced for my single-featured IT department and would kill my yearly poor budget. I use to see some dirty forged packets hiting the servers. They never took a server down, nor made them fill up the memory, but I consider I could see some „dos“ or even non-bot size „ddos“ attacks. Another point is that I must have a firewall that is transparent. Some servers requires to have public IP (for dumb license reasons). What would you advice? Is BSD/Linux with a multi-gig port a good option to consider? What firewall do you advice? How do you clean ddos? Looking forward to reading all answers. Regards. - Simon

4 3

Swisscom "disables" xxx website!?
by Jeroen Massar 10 Sep '09

10 Sep '09

http://www.20min.ch/digital/webpage/story/30859771 The article of course does not detail on how swisscom 'disabled' the website, which seems to be hosted in Germany anyway. *If* Swisscom has some way to be tricked into blocking websites by attacking random sites of theirs, then I am sure that soon Swisscom can better start leaving this whole Internet business. Also it can of course be called that they are applying censorship which is probably yet another lawsuit waiting to happen if they really do that (although IMHO in the case of xxx sites, meh, let people go somewhere else for their business). The article states also that that sex site was not reachable 'for months'. Only conclusion I can make out of that one is that the attacking source has too much resources which generally is not the case, maybe an attack lasts a day which takes a site out, but for a month!? Anybody got some insights, background and real details about all of this? Journalists are always so good in telling the wrong stuff. Greets, Jeroen

8 15

ewb is hiring for FTTH - Network Engineers and OSS/BSS Engineers
by Hofer Ruedi 09 Sep '09

09 Sep '09

Dear all ewb (Energie Wasser Bern) builds up the Fiber To The Home network for the capital of Switzerland. The Telecom Department is therefore hiring staff as - Network Engineer (>> Job ad attached) - OSS/BSS Engineer Interested? Please contact me offline or proceed according to the ad... <<15_Network_Engineer.pdf>> Regards, Energie Wasser Bern Ruedi Hofer Network Engineer Monbijoustrasse 11, Postfach 3001 Bern Tel 031 321 37 78 Fax 031 321 37 81 ruedi.hofer at ewb.ch

1 0

ewb is hiring for FTTH - Network Engineers and OSS/BSS Engineers
by Hofer Ruedi 09 Sep '09

09 Sep '09

Dear all ewb (Energie Wasser Bern) builds up the Fiber To The Home network for the capital of Switzerland. The Telecom Department is therefore hiring staff as - Network Engineer - OSS/BSS Engineer (>> Job ad attached) Interested? Please contact me offline or proceed according to the ad... <<Inserat_FTTH_OSS_BSS_Engineer.pdf>> Regards, Energie Wasser Bern Ruedi Hofer Network Engineer Monbijoustrasse 11, Postfach 3001 Bern Tel 031 321 37 78 Fax 031 321 37 81 ruedi.hofer at ewb.ch

1 0

SwiNOG-BE77 - Beer Event 77 - 7th of September 2009 @ Albisgüetli / ZH
by Steven Glogger 07 Sep '09

07 Sep '09

hi everybody here's the announcement for the next beer event: the facts for the next event: ----------------------------- Date: 7th of September 2009 Time: starting around 18.30 o'clock Location: @ the "Schützenhaus" @Albisgüetli in ZH http://www.albisguetli.ch Registration deadline: 06.09.2009 18:00:00 ------------- Please register here: http://swinog.mrmouse.ch/ since we have to make reservations, i need to know who's coming and who not. If you cannot attend and you're registered please inform me asap (+41 79 277 92 35). greetings -steven

2 2

switch and switchplus
by Mike Kellenberger 07 Sep '09

07 Sep '09

Please support the fight against switchplus being priotized on the switch homepage when new domain names are registered! See the text below from Swico (sorry, only received it in german). Cheers, Mike -- Mike Kellenberger mike.kellenberger(a)escapenet.ch Escapenet - the Web Company Tel +41 52 235 0700 http://www.escapenet.ch Skype mikek70atwork -----Ursprüngliche Nachricht----- Von: Reto Frei Gesendet: Montag, 7. September 2009 08:05 An: Mike Kellenberger Betreff: NOC Swico, braucht unsere Unterstützung! Wenn Du mit nachfolgendem Vorgehen (Roundtable) einverstanden bist und Deine Unterstützung kundtun möchtest, bitte mail bis heute Abend, direkt an Paul Brändli (paul.braendli(a)swico.ch) Um was es geht ---------- Paul Brändli, Geschäftsführer Swico: Wie Ihnen wahrscheinlich bekannt ist, gibt es um die Firma Switch, auf Grund einer Gründung einer neuen Firma (switchplus), ein Wettbewerb-Rechtliches Problem, da von Switch aktuelle Kundendaten zur Werbung, sowie Firmen welche dieser neuen Firma beitreten, auf der SWITCH WEB Page bevorzugt behandelt werden. Da SWITCH eine Stiftung mit einem Bundesauftrag zur Registrierung der Webadressen ist, sind ein paar Mitglieder an uns gelangt um sie in dieser Sache zu vertreten. Rechtliche Abklärungen haben den Sachverhalt bestätigt und wir haben deswegen SWITCH aufgefordert diese Werbe-Praxis zu stoppen. SWITCH hat dies vorerst abgelehnt. Jedoch wird es nun zu einem "Roudtable" am 8.9. zwischen SWITCH, SIMSA und SWICO kommen. Wir hoffen, SWICO zusammen mit SIMSA eine gütliche Einigung in dieser Sache mit SWITCH finden wird. Da wir aber die Mitglieder welche wir in dieser Sache vertreten namentlich nennen müssen, möchte ich vorerst ihr Einverständnis einholen. Daher bitte ich Sie mir einen kurzen Reply auf diese Anfrage bis spätestens den 7.9.2009, 16.00 zu geben. -- Reto Frei Escapenet GmbH http://www.escapenet.ch Mehr Zürich im Netz http://zuri.net

1 0

FW: SwiNOG-BE77 - Beer Event 77 - 7th of September 2009 @ Albisgüetli / ZH
by Steven Glogger 04 Sep '09

04 Sep '09

hm.. seemed that the ML server had some problems. i got a few mails / SMS if I haven't sent out any email to the ML. so, here we go again... -steven -----Original Message----- From: swinog-bounces(a)lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Steven Glogger Sent: Thursday, September 03, 2009 10:13 PM To: swinog(a)swinog.ch Subject: [swinog] SwiNOG-BE77 - Beer Event 77 - 7th of September 2009 @ Albisgüetli / ZH hi everybody here's the announcement for the next beer event: the facts for the next event: ----------------------------- Date: 7th of September 2009 Time: starting around 18.30 o'clock Location: @ the "Schützenhaus" @Albisgüetli in ZH http://www.albisguetli.ch Registration deadline: 06.09.2009 18:00:00 ------------- Please register here: http://swinog.mrmouse.ch/ since we have to make reservations, i need to know who's coming and who not. If you cannot attend and you're registered please inform me asap (+41 79 277 92 35). greetings -steven _______________________________________________ swinog mailing list swinog(a)lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

1 0

OT: 2009 Infrastructure Security Survey
by Danny McPherson 04 Sep '09

04 Sep '09

Folks, We're in the process of collecting feedback for this years infrastructure security report, the fifth edition of the report. The 2008 Infrastructure Security Survey is up and available for input. You can register to complete the survey at this URL: <https://www.tcb.net/survey/index.php?sid=98557&lang=en> I've again added many questions this time from past participants of the survey, this should be evidenced throughout. Feedback collection will end as soon as we've reached the desired number of respondents (ideally, 70+). We hope to make the results available by November 2009 at the latest. Also, please recall that NO personally (or organizationally) identifiable information will be shared in any manner. The 2008 edition of the survey is available here: <http://www.tcb.net/ISR2008_US.pdf> Or on the Arbor web site (reg required): <http://www.arbornetworks.com/report> Thanks in advance for your participation! -danny

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

swinog September 2009