NYNOG #2 @ Marketplace Live

Interconnection Track @ NYNOG #2

Christian Koch, NYNOG
Peter Hemelstine, Digital Realty
Ryan Wooley, Netflix

Transcript

3. Meetup #2 September 22nd, 2016
8. Network A Network B
11. Settlement-Free Settlement-Based No Direct Cost Direct Cost No Agreements or Contracts (Usually) Commercial Relationship Bilateral or Multilateral Bilateral via Private Network Interconnect (PNI) IP Transit via Internet Exchange Point Paid Peering (Customer Routes)
17. Cloud Provider Product Amazon Web Services Direct Connect Microsoft Azure Express Route Google Cloud Platform Cloud Interconnect Oracle Cloud FastConnect
19. North America Europe Asia Pacific New York London Tokyo Ashburn Amsterdam Hong Kong San Jose Frankfurt Singapore Los Angeles Paris Chicago Dallas
30. • • • ◦ Many switches actually have enough ▪ Trident 2: 144,000 routes in 1 RU ◦ “Appropriate” is relative to your peers and their routes ▪ Global table: ~600,000 IPv4 prefixes ▪ Telx NYC route server: ~7500 IPv4 prefixes ▪ Netflix: 6 IPv4 prefixes (in NYC)
33. • • •
34. • • ◦ Identify unwanted traffic ▪ IPv6 RA, CDP, LLDP, STP, etc. ◦ Test basic connectivity ◦ Lock down MAC address •
35. • ◦ Low overhead, high return • ◦ If you’re primarily access, hit up Apple, Google, Netflix, Microsoft, etc. ◦ If you’re primarily content, find some (local) access networks
36. • ◦ Networks shift for various reasons • • •
37. • ◦ By prefix ◦ By AS path ◦ Don’t leak private ASNs in your AS path • • ◦ Many IXPs (mostly based on IXP Manager) require this • ◦ Most peers will accept only /24 and shorter for IPv4 and /48 for IPv6
38. • ◦ Especially if you have a limited FIB device ◦ Set syslog warnings and read them • ◦ Not really different than transit, but no one upstream to filter for you ◦ Drop bogon prefixes ▪ RFC 1918 space ▪ Your own space ◦ Unrealistic AS-paths ▪ Consider filtering “tier 1” ISP ASNs from peers
39. • • ◦ Planned hardware upgrades ◦ RMAs • ◦ Some common standards but in no way universal ◦ Real-time blackhole ◦ Selective drop of announcements ▪ Opt-out: “0:$ASN” ▪ Opt-in: “24115:24115” (sometimes needed when using opt-out)