wondering if anyone from TVNZ On Demand is on this list and wouldn't
mind contacting me offlist regarding problems streaming if a user has an
IPv6 address. The helpdesk doesn't appear to know what ipv6 is so
thought I'd try an alternative.
I recently came across a presentation by DJB taking an in-depth look at how
DNSSEC operates: http://cr.yp.to/talks/2012.06.04/slides.pdf
I haven't seen much in the way of discussion on his assertions, so NZNOG,
your opinion please!
Mark Goldfinch | Systems Team Leader
On 1 August 2012 16:21, Matthew Moyle-Croft <mmc(a)1mmc.com> wrote:
> Like: http://www.commsday.com/commsday/2011/exclusive-china-telecom-huawei-units-… ?
I think you mis-understand the whole purpose (perhaps Dean can put his
slides up somewhere) . I don't think this is about international
capacity per-se, but quicker, faster, better links to AU - there are
more CDN's there, it's easier to negotiate contracts for an 'Oceanic'
market segment with the big content pushers.
To quote Dean "We want to appear as a State of Australia, not a Suburb of LA"
Wasn't there just another 200G pipe to US announced there last week from AU?
Am aware of AXIN, but IIRC wasn't the major backer of Pacific Fibre
PAC-NET, I would have through there are different politics involved;
but I don't pretend to have the foggiest.
If there were three providers to AU I think we might stand a chance of
having on-negotiated competition out of AU which we can pitch into to.
We're in the process of final testing prior to livening up [animating?] a new route server to take the place of rs2.ape.net.nz on new hardware.
There will be a brief outage tomorrow as we swap the servers.
Note: rs1.ape.net.nz will not be affected by this change.
The new server is dual-stacked and will support IPv6 on 2001:7fa:4:c0cb::9a02/64 - all the current v6 peers are configured on this server, feel free to configure up a session to the new server.
Any issues, please let us know.
-----BEGIN PGP SIGNED MESSAGE-----
On 26 July 2012 I was a witness at the tenth KSK ceremony for the root
zone in El Segundo, CA, USA. The Ceremony Administrator was Joe Abley.
The tenth production Key Signing Request (KSR) generated by VeriSign
was processed by ICANN using the root zone KSK generated in KSK
Ceremony 1, and the resulting Signed Key Response (SKR) has been
accepted by VeriSign. This SKR contains signatures for Q4 2012, for
use between 2012-10-01 and 2012-12-31.
The representation of the KSK key in the DS RR format is as follows:
. IN DS 19036 8 2
For more information about the publication of the trust anchor see:
For more information on the signing of the root see:
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (Darwin)
Comment: GPGTools - http://gpgtools.org
-----END PGP SIGNATURE-----
On Wed, Aug 1, 2012 at 8:52 AM, <bmanning(a)vacation.karoshi.com> wrote:
> *Curve is a channel oriented security measure, like SIG(0) ad TSIG.
> DNSSEC is a data integrity tool.
> different animals.
And if you want some homework on DNSSEC try:
This is to notify you that one or more objects in which you are
designated for notification have been modified in the NZRR routing
These objects are used to configure the various NZIX route servers
(http://nzix.net/) so you can expect the relevant servers to be reloaded
in the near future. The reloading of the servers is staggered over a
period of time so that if you are peering with both servers at an
exchange, you can maintain at least one BGP session at all times and
consequently a full set of routes.
descr: advertised to AS9439 by Citylink Corp ISP network - AS132040
changed: rpsl-admin(a)nzix.net 20111111
descr: advertised to AS9439 by Citylink - AS132040
changed: rpsl-admin(a)nzix.net 20120727