Just a guy in Vermont trying to connect all the dots...
Author's posts
Nov 03
Akamai Launches New IPv6 Trend Visualization Charts
Today the folks over at Akamai launched a new set of IPv6 statistics and trend visualization charts that help confirm the ongoing growth of IPv6 that we are seeing all around the world. Launched as part of Akamai’s “State of the Internet” (SOTI) Trends area, these new charts allow you to explore IPv6 deployment on a country or network basis. As our colleague Phil Roberts writes today on our Internet Technology Matters blog:
This is a really nice tool that allows you to see what they see in terms of a view of IPv6 deployment by country and by network. Whereas the World IPv6 Launch measurements are an opt-in measurement for networks, Akamai publishes data from every network where they see IPv6 traffic, so they report some large deployments that we don’t have in our data. Kabel Deutschland is an example of a network with a large IPv6 deployment (35% of the traffic coming from their network to Akamai’s servers uses IPv6) that isn’t in our database.
The country trend charts are great to see and fall in line with numbers that we see out of similar statistics from Google, APNIC, Cisco and also Eric Vyncke. Obviously with Akamai only recording this data starting from August 31, 2014, you don’t yet see the longer trend lines that some of the other sites can show, but it will be helpful to have these trend charts over the months and years ahead as IPv6 continues to grow. (I’d note that Akamai has been tracking overall IPv6 growth statistics for several years now, so you can see the overall trend chart. Now they are displaying charts on a per-country and per-network basis.)
As Phil mentioned in his post, a great aspect of these charts is that they come from Akamai’s own data across the servers of their content distribution network (CDN) and so you gain a strong view into what networks are really sending IPv6 traffic. If you click on the “Networks” tab on the right side of their page just above the names of the countries, you can start seeing the trend chart by network names. Interesting to note, too, Akamai’s message when you hover your cursor over the Networks tab:
Note that the Networks ranking is determined by the volume of IPv6 requests to Akamai.
This explains why Comcast Cable is listed first even though Verizon Wireless has a higher percentage of IPv6 requests. Comcast’s networks have simply sent more requests in total to Akamai’s network than Verizon Wireless’ network has. Akamai’s Network trend charts also line up nicely with the World IPv6 Launch measurements as Akamai has been one of the long-standing providers of data into that project (although, as Phil noted, only for networks that opted in to participating in the WIPv6L measurements).
We’re very pleased to have these new charts out there from Akamai – and look forward to continuing to watch them grow as IPv6 continues its global march toward full deployment!
P.S. If you haven’t yet started with your own IPv6 deployment, please visit our Start Here page to find resources to help you get started!
Nov 03
Congrats to Ireland’s IEDR For Signing .IE With DNSSEC
Congratulations to IEDR for the signing of Ireland’s .IE country-code top-level domain (ccTLD) with DNSSEC!
IEDR’s Billy Glynn sent the following message to the dnssec-deployment mailing list this morning:
As of 11:11:19 GMT, IEDR has published a DNSSEC signed zone. Our DS RR has been submitted for inclusion in the Root Zone.
Until the end of Q1 2015, we will only be accepting 2nd-level DS RRs manually. Thereafter, our applications will do so.
For reference, our DPS is here:
https://www.iedr.ie/dnssec/IEDR-DPS_v1.0.pdf
Separately we saw tweets from both IEDR and Billy:
DNSSEC is now live for .ie! We published the first DNSSEC signed .ie zone at 11:11:19am GMT. More here: http://t.co/PHLOakucSZ
— IE Domain Registry (@IEDR_dot_ie) November 3, 2014
DNSSEC is live for Ireland. I’ve published the first DNSSEC signed IE zone at 11:11:19am GMT. More info on: https://t.co/gSnWxFOZC1
— Billy Glynn (@billyglynn) November 3, 2014
IEDR, the registry behind the .IE domain, also published a news announcement this morning that included this statement from Billy Glynn:
“we’re delighted to have pushed out our first DNSSEC signed zone. We’ve been signing the IE zone in parallel systems for over two years now and we feel this is a good time to deploy in production. This is an exciting initiative that will allow IE domain holders to leverage other security protocols such as DANE and it’s variants which will add extra security to email and websites.”
The announcement also included a link to join the mailing list for Ireland’s DNSSEC Task Force and a link to a separate page about DNSSEC that includes IEDR’s deployment timeline.
We’re delighted that IE has joined the 102 other ccTLD’s around the world that have signed with DNSSEC and look forward to seeing the growth of signed second-level .IE domains!
By the way, if you have a second-level .IE domain (or any other domain) and want to get started with DNSSEC, please visit our Start Here page to find resources tailored to your type of organization or role.
P.S. The news about .IE being signed came out after this week’s DNSSEC deployment maps were distributed via email. We look forward to being able to see Ireland wearing an appropriate shade of green in next week’s distribution of the maps!
Nov 03
A Personal Example Of Why We Need Anti-Spoofing Measures Deployed
Early Saturday morning I happened to check my personal email and there starting in capital letters was a message from the hosting provider of some of my sites:
[ABUSE #12345][198.51.100.32] Email Feedback Report for IP 198.51.100.32
I opened it up and was greeted with the message:
We have received a complaint about your account. Please investigate and fix within 24 hours.
A quick look through seemed to indicate that a spam message had been sent from the domain in question, which I knew to be impossible because I don’t run a mail server on the particular server hosting that domain, nor do I have it set up for email in any other way. I replied back to the hosting provider saying I had no clue what this was about and asking if they could provide more information. A technician nicely replied:
Don’t worry about it. Someone else has managed to spoof your particular IP address in this case. The issue isn’t on your end, and we’re working on it. Thanks for asking, though.
Now… we can have a separate discussion about whether my hosting provider should have not sent me that abuse email in the first place if they were going to work on it, or perhaps should have sent a follow-up letting me know it was nothing to worry about… but the larger issue was again that someone was spoofing the IP address of my server.
Separately, I also received an email from a friend noting that his server had received spam coming from an IP address that resolves back to my domain.
This again is why network operators need to implement anti-spoofing measures such as BCP 38 so that we don’t allow spoofed IP addresses to leave our networks and get out there on the open Internet. If you operate a network, please check out our Anti-Spoofing Basics page and consider what you can do to help increase the overall security of the Internet!
Nov 03
FIR #780 – 11/3/14 – For Immediate Release
Oct 31
45th Anniversary of the First Message Between ARPAnet Computers (Featured Blog)
Oct 31
Of Leaf Bags, Yankee Frugality And Our Disposable Society
As I did so, I noticed a guy with a pickup truck about 20 feet away who was meticulously folding up the now empty paper bags that he had obviously used to bring leaves to the dump.
We gave the silent nods of acknowledgement that people often do at the dump... and then curiosity got the better of me and I asked "so do you re-use your bags?"
"Oh, sure! I usually get a good three years out of them," he said.
I nodded... and we both continued our separate work. But what blew my mind at that moment was simply this:
I had never considered re-using the paper leaf bags!
They were just the things you put leaves in and then threw out at the dump. Nothing more than that.
My package of 5 bags cost me $3.29 at my local hardware store. I bought two packages and so my investment thus far was a bit under $7. ($6.58 if we're being precise.) I was figuring I would probably need another set of bags to finish out the season and so I'd buy another set soon.
$10
In my mind just "the cost of doing business" and living in New England. Since the drop-off of leaves is free at our city dump, that $10 is my cost for the season, plus of course the bit of gas to drive out to the dump.
Not a big deal in the flow of our regular household budget.
But still...
$10 can buy other things. $10 could pay for the gas I need to drive back and forth. $10 could be donated to someone who might need it more.
It was a reminder to me that we live in such a consumeristic society where we just think about everything as being disposable. I was thinking about things as being disposable, particularly because these are just paper bags that will automatically degrade along with all of the leaves in them.
But why not re-use them?
By the time I unloaded my nine bags the guy had driven away and I was the only one at the pile. A couple of my bags were ripped from sticks and needed to be thrown in the pile... but I did save seven of them. Just emptied out the leaves and then folded them somewhat back together.
Now I don't have to buy that third set of bags - and if I'm careful I can probably not rip these bags and hold on to them for next year.
The only way out of being a "disposable" society is for us to think about ways that we can indeed reduce, re-use and recycle... and in this case I chose to re-use!
What about you? Do you re-use leaf bags? (If you are in the part of the world that needs them.) Or have you never bothered with leaf bags anyway and just used tarps and such?
You can hear an audio version of this post on SoundCloud:
If you found this post interesting or useful, please consider either:
- following me on Twitter;
- adding me to a circle on Google+;
- following me on Ello;
- following me on App.net;
- subscribing to my email newsletter; or
- subscribing to the RSS feed
Oct 31
TDYR – 179 – Leaf Bags And Our Disposable Society
Oct 31
Of Leaf Banks, Yankee Frugality and our Disposable Society – http://www.danyork.com/2014/10/of-leaf-bags-yankee-frugality-and-our-disposable-society.html
Of Leaf Banks, Yankee Frugality and our Disposable Society - http:/
Oct 31
IETF 91 Agenda Available – DNSSEC, IPv6, TLS, BGP and more
It’s almost time for IETF 91 happening this time in Honolulu, Hawaii! From our DO team, Chris, Megan and I will all be out there and you can expect to see a great amount of IETF-related content coming from us over the next two weeks. In particular, you can expect to see the normal “Rough Guide” coming out next week in a series of posts on our Internet Technology Matters (ITM) blog.
Today I just wanted to point out that the final agenda for IETF 91 is now available from the IETF’s site in multiple forms:
I personally like the “tools-style” agenda because for each session you can easily get the links to the audio stream, chat room, documents and more. However, the HTML version on datatracker.ietf.org is also rather cool because you can select which working groups or areas you want to see and get a focused agenda.
Anyway, there is a great amount of work happening at IETF 91 related to ALL of the topics we cover here – IPv6, DNSSEC, TLS, BGP …. All the major Working Groups we follow will be meeting… it will be a VERY busy time for us all! (I don’t expect we’ll be seeing much of those Hawaiian beaches except out the windows!)
Stay tuned next week for more IETF 91 info… and if you are going to be out there we look forward to seeing you there!
Oct 31
Slides: Reboot the Open Realtime Revolution – #MoreCrypto (Fall 2014)
Olle Johansson is back with another set of excellent slides about VoIP security and the need to have “MoreCrypto” everywhere. It’s a great set of slides that talks about where we have come from and where we need to go. Definitely check it out on SlideShare at: Reboot the Open Realtime Revolution – #MoreCrypto (Fall 2014) or in the embedded version below:

