Nov 03
Here is a quick table of shades of Blue taken from the old X11 color names:
| Blue | HTML code |
|---|---|
| SkyBlue | #87CEEB |
| Navy | #000080 |
| LightSteelBlue | #B0C4DE |
| PowderBlue | #B0E0E6 |
| Blue | #0000FF |
| LightSkyBlue | #87CEFA |
| DeepSkyBlue | #00BFFF |
| CornflowerBlue | #6495ED |
| LightBlue | #ADD8E6 |
Nov 03
At the RIPE 69 meeting today in London, Andrei Robachevsky gave a lightning talk about “How Can We Work Together to Improve the Security and Resilience of the Global Routing System?” where he introduced the MANRS document and asked people to join the initiative. You can view his slides and watch the video of his presentation:
If you are interested in being added to the growing list of participants, please sign up!
Nov 03
It is fun to watch the various IPv6 statistics sites because they continue to show the amazing growth of IPv6 around the world. The World IPv6 Launch measurements now show Verizon Wireless’ network at 59% IPv6, T-Mobile USA at 43%, AT&T at 25%. Google’s IPv6 statistics show that traffic into Google web sites globally is about to hit 5%. And then today Akamai launched new IPv6 trend charts that show IPv6 traffic out of Belgium at 29.2%, from Germany 12% and from Luxembourg and the USA right at 10% with Peru not far behind.
All of this shows that IPv6 deployment is very real! If you haven’t started migrating your applications so that they will work over IPv6 in addition to IPv4, why not?
Obviously I’d encourage you to buy the book to help understand what you need to do… but you can also view the many IPv6 resources out there on the Internet to learn more! The key point is that you need to get started NOW! IPv6 is being deployed globally – will your application work over IPv6?
Nov 03
It is fun to watch the various IPv6 statistics sites because they continue to show the amazing growth of IPv6 around the world. The World IPv6 Launch measurements now show Verizon Wireless’ network at 59% IPv6, T-Mobile USA at 43%, AT&T at 25%. Google’s IPv6 statistics show that traffic into Google web sites globally is about to hit 5%. And then today Akamai launched new IPv6 trend charts that show IPv6 traffic out of Belgium at 29.2%, from Germany 12% and from Luxembourg and the USA right at 10% with Peru not far behind.
All of this shows that IPv6 deployment is very real! If you haven’t started migrating your applications so that they will work over IPv6 in addition to IPv4, why not?
Obviously I’d encourage you to buy the book to help understand what you need to do… but you can also view the many IPv6 resources out there on the Internet to learn more! The key point is that you need to get started NOW! IPv6 is being deployed globally – will your application work over IPv6?
Nov 03
Right at this moment at the RIPE 69 meeting in London, the RIPE Best Current Operational Practices (BCOP) Task Force is holding its meeting and reviewing a number of different draft BCOP documents. You can watch live on the RIPE 69 live stream but the session is close to finishing up. The good news is that all of the slides and video archives are appearing on the RIPE69 BCOP Task Force page almost as soon as they are presented.
The agenda for the meeting is:
A. Opening – Jan Zorz
B. BCOP Around the World – Aaron Hughes
C. Euro-IX IXP BCOPs – Bijal Sanghani
D. IPv6 Troubleshooting for Helpdesks – Sander Steffann and Jen Linkova
E. BCP38 + Enterprise and IX Filtering – Aaron Hughes
F. BGP BCOP – Guillaume Valadon
G. Deaggregation by Large Organizations – Iljitsch van Beijnum
H. MANRS (aka Routing Resilience Manifesto) – Andrei Robachevsky
Our team member Jan Žorž is there facilitating the meeting and actively participating as part of our overall efforts to help create more BCOP documents globally.
Nov 03
Здравствуйте! We are very pleased to announced that our IPv6 Fact Sheet and our DNSSEC Fact Sheet are both now available in Russian in addition to English, French and Spanish. The documents are available directly at:
As we noted in our earlier posts about the IPv6 Fact Sheet and about the DNSSEC Fact Sheet, these simple documents are available for you to use in whatever way you wish. Please feel free to download them and share them widely.
Please do let us know any feedback you have on these documents. Our goal is to help you get IPv6 and DNSSEC deployed within your organizations and networks. Please let us know how we can help!
The Arabic and Chinese versions of these documents will be coming soon. And if you want to get started with IPv6 or DNSSEC, please visit our Start Here page to find resources to help you begin!
Nov 03
Today the folks over at Akamai launched a new set of IPv6 statistics and trend visualization charts that help confirm the ongoing growth of IPv6 that we are seeing all around the world. Launched as part of Akamai’s “State of the Internet” (SOTI) Trends area, these new charts allow you to explore IPv6 deployment on a country or network basis. As our colleague Phil Roberts writes today on our Internet Technology Matters blog:
This is a really nice tool that allows you to see what they see in terms of a view of IPv6 deployment by country and by network. Whereas the World IPv6 Launch measurements are an opt-in measurement for networks, Akamai publishes data from every network where they see IPv6 traffic, so they report some large deployments that we don’t have in our data. Kabel Deutschland is an example of a network with a large IPv6 deployment (35% of the traffic coming from their network to Akamai’s servers uses IPv6) that isn’t in our database.
The country trend charts are great to see and fall in line with numbers that we see out of similar statistics from Google, APNIC, Cisco and also Eric Vyncke. Obviously with Akamai only recording this data starting from August 31, 2014, you don’t yet see the longer trend lines that some of the other sites can show, but it will be helpful to have these trend charts over the months and years ahead as IPv6 continues to grow. (I’d note that Akamai has been tracking overall IPv6 growth statistics for several years now, so you can see the overall trend chart. Now they are displaying charts on a per-country and per-network basis.)
As Phil mentioned in his post, a great aspect of these charts is that they come from Akamai’s own data across the servers of their content distribution network (CDN) and so you gain a strong view into what networks are really sending IPv6 traffic. If you click on the “Networks” tab on the right side of their page just above the names of the countries, you can start seeing the trend chart by network names. Interesting to note, too, Akamai’s message when you hover your cursor over the Networks tab:
Note that the Networks ranking is determined by the volume of IPv6 requests to Akamai.
This explains why Comcast Cable is listed first even though Verizon Wireless has a higher percentage of IPv6 requests. Comcast’s networks have simply sent more requests in total to Akamai’s network than Verizon Wireless’ network has. Akamai’s Network trend charts also line up nicely with the World IPv6 Launch measurements as Akamai has been one of the long-standing providers of data into that project (although, as Phil noted, only for networks that opted in to participating in the WIPv6L measurements).
We’re very pleased to have these new charts out there from Akamai – and look forward to continuing to watch them grow as IPv6 continues its global march toward full deployment!
P.S. If you haven’t yet started with your own IPv6 deployment, please visit our Start Here page to find resources to help you get started!
Nov 03
Congratulations to IEDR for the signing of Ireland’s .IE country-code top-level domain (ccTLD) with DNSSEC!
IEDR’s Billy Glynn sent the following message to the dnssec-deployment mailing list this morning:
As of 11:11:19 GMT, IEDR has published a DNSSEC signed zone. Our DS RR has been submitted for inclusion in the Root Zone.
Until the end of Q1 2015, we will only be accepting 2nd-level DS RRs manually. Thereafter, our applications will do so.
For reference, our DPS is here:
https://www.iedr.ie/dnssec/IEDR-DPS_v1.0.pdf
Separately we saw tweets from both IEDR and Billy:
DNSSEC is now live for .ie! We published the first DNSSEC signed .ie zone at 11:11:19am GMT. More here: http://t.co/PHLOakucSZ
— IE Domain Registry (@IEDR_dot_ie) November 3, 2014
DNSSEC is live for Ireland. I’ve published the first DNSSEC signed IE zone at 11:11:19am GMT. More info on: https://t.co/gSnWxFOZC1
— Billy Glynn (@billyglynn) November 3, 2014
IEDR, the registry behind the .IE domain, also published a news announcement this morning that included this statement from Billy Glynn:
“we’re delighted to have pushed out our first DNSSEC signed zone. We’ve been signing the IE zone in parallel systems for over two years now and we feel this is a good time to deploy in production. This is an exciting initiative that will allow IE domain holders to leverage other security protocols such as DANE and it’s variants which will add extra security to email and websites.”
The announcement also included a link to join the mailing list for Ireland’s DNSSEC Task Force and a link to a separate page about DNSSEC that includes IEDR’s deployment timeline.
We’re delighted that IE has joined the 102 other ccTLD’s around the world that have signed with DNSSEC and look forward to seeing the growth of signed second-level .IE domains!
By the way, if you have a second-level .IE domain (or any other domain) and want to get started with DNSSEC, please visit our Start Here page to find resources tailored to your type of organization or role.
P.S. The news about .IE being signed came out after this week’s DNSSEC deployment maps were distributed via email. We look forward to being able to see Ireland wearing an appropriate shade of green in next week’s distribution of the maps!
Nov 03
Early Saturday morning I happened to check my personal email and there starting in capital letters was a message from the hosting provider of some of my sites:
[ABUSE #12345][198.51.100.32] Email Feedback Report for IP 198.51.100.32
I opened it up and was greeted with the message:
We have received a complaint about your account. Please investigate and fix within 24 hours.
A quick look through seemed to indicate that a spam message had been sent from the domain in question, which I knew to be impossible because I don’t run a mail server on the particular server hosting that domain, nor do I have it set up for email in any other way. I replied back to the hosting provider saying I had no clue what this was about and asking if they could provide more information. A technician nicely replied:
Don’t worry about it. Someone else has managed to spoof your particular IP address in this case. The issue isn’t on your end, and we’re working on it. Thanks for asking, though.
Now… we can have a separate discussion about whether my hosting provider should have not sent me that abuse email in the first place if they were going to work on it, or perhaps should have sent a follow-up letting me know it was nothing to worry about… but the larger issue was again that someone was spoofing the IP address of my server.
Separately, I also received an email from a friend noting that his server had received spam coming from an IP address that resolves back to my domain.
This again is why network operators need to implement anti-spoofing measures such as BCP 38 so that we don’t allow spoofed IP addresses to leave our networks and get out there on the open Internet. If you operate a network, please check out our Anti-Spoofing Basics page and consider what you can do to help increase the overall security of the Internet!
Nov 03
