Posts

RIPE NCC is running an excellent project called RIPE Atlas from few years. This is one of largest distributed network measurement projects where thousands of users host small devices called RIPE Atlas Probes on their networks, home connections, datacenters etc. These probes do measurement under both public and private category and make that data available publicly for use by network engineers and helps in optimizing routing. This page shows detailed coverage statistics of the probes.  

Last year a really good project Letsencrypt came up. They key objective of this project is to help in securing web by pushing SSL everywhere.  

Two key cool features

1. It offer free signed SSL certs!
2. It helps in setting up SSL via an agent seamlessly without having to deal with CSR, getting it signed & updating web server configuration.

At this stage Letsencrypt is itself a Certificate Authority and but it’s root certs are yet not in the browser. It’s probably going to take a while till all major browsers get their certificate. To help on that one of it’s sponsors IdenTrust has signed their intermediate certs. Hence certs signed by Letsencrypt are accepted by all browsers right away. All certs signed by Letsencypt are signed by Letencrypt Authority X1 which have signature from DST Root CA X3 which is accepted by pretty much all popular browsers. You can read more about How it works here.   Here’s an example of SSL setup for say “demo.anuragbhatia.com” test domain which is already up and working without SSL. http://demo.anuragbhatia.com shows a plain text page. This is Apache running on Ubuntu server. The Apache web config is pretty straightforward.

I had a nice two day trip to Paihia over weekend. Paihia is one of key tourist towns far up in North. It took around 4 hrs via bus from Auckland. Travel was quite comfortable and place was excellent. I would say Paihia itself was quite a nice place but travel to it was one of best scenic travel I ever had. [gallery link=“file” ids=“3895,3896,3898,3897,3901,3902”]  

I travelled via Inter-city bus. Outside India it’s quite common that just one person takes care of everything on behalf of bus company. Same person works on loading stuff, verifying tickets, and of course driving bus. Most of societies outside India are extremely cool & calm which makes overall service quite doable. Not surprising - same person drove the bus back to Auckland next day and the way he kept on updating, greeting all passengers was just amazing. I never had Haryana roadways folks greeting like that. ;) And oh yes did I mentioned of free wifi in the bus? :)   Although I have yet to upload most of videos I took on the way, here’s a quick video showing way from Auckland to Paihia.

First and foremost before talking about APRICOT, I must say I am deeply moved with impact Rohtak (and Haryana) as whole had because of recent Jat agitation. What I find extremely depressing is way current Govt. of Haryana completely failed to control it and the way previous Govt. ministers did best in their interest and completely against the interest of people of Haryana. For now quite hopeful with news that Mr Prakash Singh (one of my favorite IPS officers) who did quite well during his various terms is looking into failure of police. More details about the news here. I will write more on this later on, not good time right now since tensions have yet to get normal.  

VyOS is quite interesting OS. It’s a open source Linux based network operating system based on Vyatta. It’s config style seems bit like JunOS in terms of hierarchy and set/edit/delete options while editing configuration.  

**Can one use it in a small ISP or a Corporate LAN setup? 

Someone asked me recently if we can have complete open source based router in smaller network doing basic stuff. Not with not-so-streamlined Linux shell but networking OS where network engineers favorite tool “?” works in CLI with options. Let’s take a possible case with bunch of routers, a server with speedtest-mini running on it and end desktop with Ubuntu-desktop on it along with VyOS based router. Goal here is to have basic features to work (to start with!). I am conducting this test and setup on the VM infrastructure at home but that should have zero impact/configuration of network devices and hence not going to focus on that part. All devices including server, desktop and router are pretty much running on virtual machines or KVM containers.     To configure and test:

So last month I had a wonderful trip to Bangladesh for bdNOG. This is bit delayed.  

Some thoughts on infrastructure

1. In terms of infrastructure - roads & traffic, power, quality of builds - it seemed like India in 2000’s.
2. Specifically roads and traffic was bit terrible and even as an Indian (who manages to drive in Indian traffic!) I still got scared out of traffic in Dhaka. Speeds, roughness and overtaking is pretty high.
3. There was no Uber and app based services are still pretty low. It was mostly usual “yellow taxi” which one had to call. (And it was expensive by local standards).
4. There was excessive, just excessive amounts of overhead cabling in Dhaka and most of key city areas. It’s worth noting that there is way more overhead fiber than India. I guess most of it was running “active ethernet” based solutions (not a PON).  Most was just via media converters on both ends.
5. I got 30Mbps speeds in cheap budget hotel in Dhaka which was more higher then what I have ever seen in India! (Speedtest here)
6. Bangladesh currently is connected to outside world via SEA-ME-WE4 (landing at Cox’s Bazaar) and a terrestrial cable route via Kolkata.
7. Overall network connectivity with India is decent since many large Bangladeshi networks buy transit from Tata Communications (AS6453) and Airtel (AS9498). So mostly there’s direct path to India and if not direct then via Singapore which added bit of latency but was not as bad as India-China routes.
8. Bangladesh has a real & functional internet exchange :)

An interesting promo video on Internet peering and why it is important in context of Africa by Internet Society.

This week I presented in bdNOG 4 on “Misused top ASNs”. It was a study we at Hurricane Electric did to see how many times AS1, AS2 and AS3 appeared in global routing table between 2010 and 2015. This highlights cases where AS1, AS2 or AS3 appeared as a result of wrong prepend.  

My presentation is embedded below:

Overall bdNOG 4 had been a great experience. It’s good to see a nice NOG community actively sharing technical know-how, sharing experiences, and much more. I must say that is something I greatly miss in India. More on bdNOG conference later on.

    Sitting at Kolkata airport. Noticed the usual “Free Wifi in the area!” message and connected to Tata Docomo Free wifi. Performance was quite poor.   Two key issues with wifi:

1. Using of only 2.4Ghz (802.11b/g/n with 20Mhz channel). No AP with 5Ghz box. (Click here to view scanner data). Should have been 5Ghz
2. Entire traffic is getting tunnel via Mumbai i.e West India (while I am sitting on Eastern side). Adding up to latency and performance significantly.

Here are some of traces to random locations:

Came across this impressive cover of last mile broadband issues in Orcas Island in Washington state in Arstechnica.com.

It’s very true on how so many areas are just not served and likely will never be served because when you have large telecom players bidding for billion dollar worth of Spectrum, all they care next for is very high value returns. And if they do not see those kind of returns, areas stay unserved. India has even poor story where it’s challenging to get wired broadband in most areas of country including key metro cities.