From joe.abley at icann.org Sat Jul 10 13:40:52 2010 From: joe.abley at icann.org (Joe Abley) Date: Sat, 10 Jul 2010 16:40:52 +0000 Subject: [lacnog] Root Zone DNSSEC Deployment Technical Status Update Message-ID: Root Zone DNSSEC Deployment Technical Status Update 2010-07-10 This is the tenth of a series of technical status updates intended to inform a technical audience on progress in signing the root zone of the DNS. RESOURCES Details of the project, including documentation published to date, can be found at . We'd like to hear from you. If you have feedback for us, please send it to rootsign at icann.org. KSK CEREMONY 2 The second KSK ceremony for the root zone will take place in El Segundo, CA, USA on Monday 2010-07-12. The ceremony is scheduled to begin at 1300 local time (2000 UTC) and is expected to end by 1900 local time (0200 UTC). Video from Ceremony 2 will be recorded for audit purposes, as with Ceremony 1. Video and associated audit materials will be published before the signed root enters full production on 2010-07-15. Details will be circulated before that date. ICANN will operate a separate camera whose video will not be retained for audit purposes, but which will instead be streamed live in order to provide remote observers an opportunity to watch the ceremony. The live stream will be provided on a best-effort basis. The live video stream will be available at: http://dns.icann.org/ksk/stream/ FULL PRODUCTION SIGNED ROOT ZONE The transition from Deliberately-Unvalidatable Root Zone (DURZ) to production signed root zone will take place on 2010-07-15. Trust anchor publication, according to draft-icann-dnssec-trust-anchor-00 will take place after the maintenance window closes, once a final set of tests have been completed by ICANN and the results have been found to be positive. FTP ACCESS TO SIGNED ZONE FILES Following the transition on 2010-07-15 the unsigned root and ARPA zone files published at ftp://rs.internic.net/domain/ ftp://ftp.internic.net/domain/ will be replaced by signed zone files. That is, the zone files retrieved from both FTP servers will contain DNSSEC data, and will hence faithfully represent the zones being served by root servers. PLANNED DEPLOYMENT SCHEDULE Already completed: 2010-01-27: L starts to serve DURZ 2010-02-10: A starts to serve DURZ 2010-03-03: M, I start to serve DURZ 2010-03-24: D, K, E start to serve DURZ 2010-04-14: B, H, C, G, F start to serve DURZ 2010-05-05: J starts to serve DURZ 2010-06-16: First Key Signing Key (KSK) Ceremony To come: 2010-07-12: Second Key Signing Key (KSK) Ceremony 2010-07-15: Distribution of validatable, production, signed root zone; publication of root zone trust anchor (Please note that this schedule is tentative and subject to change based on testing results or other unforeseen factors.) From francisco at arias.com.mx Mon Jul 12 15:26:44 2010 From: francisco at arias.com.mx (Francisco Arias) Date: Mon, 12 Jul 2010 11:26:44 -0700 Subject: [lacnog] Root Zone DNSSEC Deployment Technical Status Update In-Reply-To: References: Message-ID: S?lo para recordarles que la ceremonia de la KSK de la ra?z comienza a las 20:00 UTC de hoy; ser? transmisi?n en vivo en: http://dns.icann.org/ksk/stream/ Saludos, Francisco. On 10 July 2010 09:40, Joe Abley wrote: > Root Zone DNSSEC Deployment > Technical Status Update 2010-07-10 > > This is the tenth of a series of technical status updates intended > to inform a technical audience on progress in signing the root zone > of the DNS. > > > RESOURCES > > Details of the project, including documentation published to date, > can be found at . > > We'd like to hear from you. If you have feedback for us, please > send it to rootsign at icann.org. > > > KSK CEREMONY 2 > > The second KSK ceremony for the root zone will take place in El > Segundo, CA, USA on Monday 2010-07-12. The ceremony is scheduled > to begin at 1300 local time (2000 UTC) and is expected to end by > 1900 local time (0200 UTC). > > Video from Ceremony 2 will be recorded for audit purposes, as with > Ceremony 1. Video and associated audit materials will be published > before the signed root enters full production on 2010-07-15. Details > will be circulated before that date. > > ICANN will operate a separate camera whose video will not be retained > for audit purposes, but which will instead be streamed live in order > to provide remote observers an opportunity to watch the ceremony. > The live stream will be provided on a best-effort basis. > > The live video stream will be available at: > > ?http://dns.icann.org/ksk/stream/ > > > FULL PRODUCTION SIGNED ROOT ZONE > > The transition from Deliberately-Unvalidatable Root Zone (DURZ) to > production signed root zone will take place on 2010-07-15. > > Trust anchor publication, according to draft-icann-dnssec-trust-anchor-00 > will take place after the maintenance window closes, once a final > set of tests have been completed by ICANN and the results have been > found to be positive. > > > FTP ACCESS TO SIGNED ZONE FILES > > Following the transition on 2010-07-15 the unsigned root and ARPA > zone files published at > > ?ftp://rs.internic.net/domain/ > ?ftp://ftp.internic.net/domain/ > > will be replaced by signed zone files. That is, the zone files > retrieved from both FTP servers will contain DNSSEC data, and will > hence faithfully represent the zones being served by root servers. > > > PLANNED DEPLOYMENT SCHEDULE > > Already completed: > > ?2010-01-27: L starts to serve DURZ > > ?2010-02-10: A starts to serve DURZ > > ?2010-03-03: M, I start to serve DURZ > > ?2010-03-24: D, K, E start to serve DURZ > > ?2010-04-14: B, H, C, G, F start to serve DURZ > > ?2010-05-05: J starts to serve DURZ > > ?2010-06-16: First Key Signing Key (KSK) Ceremony > > To come: > > ?2010-07-12: Second Key Signing Key (KSK) Ceremony > > ?2010-07-15: Distribution of validatable, production, signed root > ? ?zone; publication of root zone trust anchor > > ?(Please note that this schedule is tentative and subject to change > ?based on testing results or other unforeseen factors.) > > _______________________________________________ > LACNOG mailing list > LACNOG at lacnic.net > https://mail.lacnic.net/mailman/listinfo/lacnog > From joe.abley at icann.org Wed Jul 14 19:12:35 2010 From: joe.abley at icann.org (Joe Abley) Date: Wed, 14 Jul 2010 22:12:35 +0000 Subject: [lacnog] Root Zone DNSSEC Deployment Technical Status Update Message-ID: Root Zone DNSSEC Deployment Technical Status Update 2010-07-14 This is the eleventh of a series of technical status updates intended to inform a technical audience on progress in signing the root zone of the DNS. RESOURCES Details of the project, including documentation published to date, can be found at . We'd like to hear from you. If you have feedback for us, please send it to rootsign at icann.org. KSK CEREMONY 2 COMPLETE The second KSK ceremony for the root zone was completed this week in El Segundo, CA, USA. The Ceremony Administrator was Mehmet Akcin. The second production Key Signing Request (KSR) generated by VeriSign has now been processed by ICANN using the root zone KSK generated in KSK Ceremony 1, and the resulting Signed Key Response (SKR) has been accepted by VeriSign. This SKR contains signatures for Q4 2010, for use between 2010-10-01 and 2010-12-31. Audit materials relating to both the first and second ceremonies will be published today at . FULL PRODUCTION SIGNED ROOT ZONE The transition from Deliberately-Unvalidatable Root Zone (DURZ) to production signed root zone is scheduled take place on 2010-07-15 within a maintenance window which begins at 1930 UTC and ends at 2330 UTC. This is the usual window for the generation and distribution of root zones with SOA serials ending in 01. PLANNED DEPLOYMENT SCHEDULE Already completed: 2010-01-27: L starts to serve DURZ 2010-02-10: A starts to serve DURZ 2010-03-03: M, I start to serve DURZ 2010-03-24: D, K, E start to serve DURZ 2010-04-14: B, H, C, G, F start to serve DURZ 2010-05-05: J starts to serve DURZ 2010-06-16: First Key Signing Key (KSK) Ceremony 2010-07-12: Second Key Signing Key (KSK) Ceremony To come: 2010-07-15: Distribution of validatable, production, signed root zone; publication of root zone trust anchor (Please note that this schedule is tentative and subject to change based on testing results or other unforeseen factors.) From francisco at arias.com.mx Wed Jul 14 19:15:18 2010 From: francisco at arias.com.mx (Francisco Arias) Date: Wed, 14 Jul 2010 15:15:18 -0700 Subject: [lacnog] =?iso-8859-1?q?Cuenta_regresiva_para_tener_la_ra=EDz_del?= =?iso-8859-1?q?_DNS_firmada_con_DNSSEC?= Message-ID: Crei que podr?a ser de su inter?s. Este jueves 15 de julio alrededor de las 17:00 UTC, la zona ra?z del DNS debe quedar finalmente firmada con DNSSEC. Saludos, Francisco. From mehmet at akcin.net Wed Jul 14 22:16:59 2010 From: mehmet at akcin.net (Mehmet Akcin) Date: Wed, 14 Jul 2010 21:16:59 -0400 Subject: [lacnog] =?iso-8859-1?q?Cuenta_regresiva_para_tener_la_ra=EDz_del?= =?iso-8859-1?q?_DNS_firmada_con_DNSSEC?= In-Reply-To: References: Message-ID: <6ED29C5F-8FDF-411C-B75A-25FB1722B402@akcin.net> Actualizaci?n sobre el estatus de la implementaci?n de DNSSEC en la zona ra?z 14/07/2010 Este es el und?cimo de una serie de actualizaciones destinadas a informar a una audiencia t?cnica sobre los avances en la firma de la zona ra?z del DNS. DOCUMENTACION Los detalles del proyecto, incluida la documentaci?n publicada hasta la fecha, se puede encontrar en http://www.root-dnssec.org/ Si tiene comentarios, por favor env?elos a rootsign at icann.org. CEREMONIA KSK 2 FINALIZADA La segunda ceremonia KSK para la zona ra?z se complet? esta semana en la ciudad de El Segundo, California, EE.UU. El Administrador de la ceremonia (CA) fue Mehmet Akcin. La KSK generada en la ceremonia 1 fue exitosamente replicada durante esta ceremonia 2. El segundo "requerimiento de firma de llaves" (KSR por sus siglas en ingl?s) generado por VeriSign fue firmado por ICANN con la llave KSK generada en la ceremonia KSK 1. La correspondiente respuesta (SKR por sus siglas en ingl?s) ya fue aceptada por VeriSign. Esta SKR contiene firmas de las llaves para el cuarto trimestre (Q4) del 2010, para su uso entre 2010-10-01 y 2010-12-31. Varios materiales relativos a la auditor?a de los procesos de las ceremonias primera y segunda se publicar?n hoy en http://www.iana.org/dnssec/ ZONA RAIZ FIRMADA EN PRODUCCION La transici?n de la "zona ra?z delibaradamente no validable" (DURZ por sus siglas en ingl?s) a una zona ra?z firmada con estatus de producci?n est? programado tenga lugar el 2010-07-15 dentro de una ventana de mantenimiento que se inicia a las 19:30 UTC y termina en a las 23:30 UTC. Esta es la ventana habitual de la generaci?n y distribuci?n de las zonas ra?z con n?meros de serie SOA que terminan en 01. CALENDARIO DE IMPLEMENTACION Ya terminado: 2010-01-27: L (servidor ra?z L) comienza a servir la DURZ 2010-02-10: A comienza a servir la DURZ 2010-03-03: H comienza a servir la DURZ 2010-03-24: D, K y E comienzan a servir la DURZ 2010-04-14: B, H, C, G y F comienzan a servir la DURZ 2010-05-05: J comienza a servir la DURZ 2010-06-16: Primera ceremonia de la KSK 2010-07-12: Segunda ceremonia de la KSK Por venir: 2010-07-15: Distribuci?n de la zona ra?z firmada, validable en producci?n, as? como la publicaci?n del "trust anchor" de la zona ra?z. (Este calendario es provisional y est? sujeto a cambios basado en los resultados de pruebas u otros factores imprevistos.) Gracias Francisco Arias por la traducci?n. Mehmet From francisco at arias.com.mx Thu Jul 15 18:14:40 2010 From: francisco at arias.com.mx (Francisco Arias) Date: Thu, 15 Jul 2010 14:14:40 -0700 Subject: [lacnog] =?iso-8859-1?q?Zona_ra=EDz_firmada_y_validable?= Message-ID: A las 20:50 UTC (hace 20+ minutos) la zona ra?z firmada y validable comenz? a ser publicada por los servidores ra?z; en poco tiempo debe completarse el proceso y aparecer en todos. Saludos, Francisco. From francisco at arias.com.mx Thu Jul 15 19:45:27 2010 From: francisco at arias.com.mx (Francisco Arias) Date: Thu, 15 Jul 2010 15:45:27 -0700 Subject: [lacnog] =?iso-8859-1?q?=5BLACNIC/Seguridad=5D_Zona_ra=EDz_firmad?= =?iso-8859-1?q?a_y_validable?= In-Reply-To: References: Message-ID: En cuanto se terminen las ?ltimas pruebas ICANN publicar? el trust-anchor en: https://data.iana.org/root-anchors/ Si hay mucha urgencia por usarlo, Olaf Kolkman (uno de los TCRs) public? el registro DS en: http://www.nlnetlabs.nl/downloads/DS-20100616.txt Saludos, Francisco. 2010/7/15 Christian O'Flaherty : > Gracias Francisco. Felicitaciones! > De donde podemos bajar el trust-anchor para la raiz? > > 2010/7/15 Francisco Arias : >> A las 20:50 UTC (hace 20+ minutos) la zona ra?z firmada y validable >> comenz? a ser publicada por los servidores ra?z; en poco tiempo debe >> completarse el proceso y aparecer en todos. >> >> Saludos, >> >> Francisco. >> _______________________________________________ >> Seguridad mailing list >> Seguridad at lacnic.net >> https://mail.lacnic.net/mailman/listinfo/seguridad >> > _______________________________________________ > Seguridad mailing list > Seguridad at lacnic.net > https://mail.lacnic.net/mailman/listinfo/seguridad > From joe.abley at icann.org Fri Jul 16 11:35:39 2010 From: joe.abley at icann.org (Joe Abley) Date: Fri, 16 Jul 2010 14:35:39 +0000 Subject: [lacnog] Root Zone DNSSEC Deployment Technical Status Update Message-ID: Root Zone DNSSEC Deployment Technical Status Update 2010-07-16 This is the twelfth of a series of technical status updates intended to inform a technical audience on progress in signing the root zone of the DNS. RESOURCES Details of the project, including documentation published to date, can be found at . We'd like to hear from you. If you have feedback for us, please send it to rootsign at icann.org. FULL PRODUCTION SIGNED ROOT ZONE The transition from Deliberately-Unvalidatable Root Zone (DURZ) to production signed root zone took place on 2010-07-15 at 2050 UTC. The first full production signed root zone had SOA serial 2010071501. There have been no reported harmful effects. The root zone trust anchor can be found at . PLANNED DEPLOYMENT SCHEDULE Already completed: 2010-01-27: L starts to serve DURZ 2010-02-10: A starts to serve DURZ 2010-03-03: M, I start to serve DURZ 2010-03-24: D, K, E start to serve DURZ 2010-04-14: B, H, C, G, F start to serve DURZ 2010-05-05: J starts to serve DURZ 2010-06-16: First Key Signing Key (KSK) Ceremony 2010-07-12: Second Key Signing Key (KSK) Ceremony 2010-07-15: Distribution of validatable, production, signed root zone; publication of root zone trust anchor From j.lepage at akeroz.net Mon Jul 19 10:51:46 2010 From: j.lepage at akeroz.net (Jerome Lepage - AKEROZ) Date: Mon, 19 Jul 2010 15:51:46 +0200 Subject: [lacnog] [SPAM]Datacenters in Mexico / LATAM connectivity Message-ID: <4C469090BA1B4386A6A99E32ABD4970D@JeromeDesktop> Hi everybody, I'm new at this ML, nice to meet you all. I don't know if i have to write in english or spanish, i choose english because i'm more confortable with. My compagny based in France, looking for going en Mexico and more globally on LATAM markets. Did you know if (serious) datacenter(s) exists on Jalisco / Mexico ? I haven't found any information yet, (please) you could help me if you have any :) My contacts with some IP transit sellers tell me that Miami is the "POP" where you can have good connections with pretty much all LATAM. (I'm torn on working from US) Have you some report / advise / feedback ? Did you know another good "POP", which is not expensive ? Thanks for all you message by advance. Please excuse my poor english ;) You can contact me directly. Kind regards Jerome Lepage From mdeleo at cisco.com Mon Jul 19 12:40:33 2010 From: mdeleo at cisco.com (Michael De Leo (mdeleo)) Date: Mon, 19 Jul 2010 08:40:33 -0700 Subject: [lacnog] [SPAM]Datacenters in Mexico / LATAM connectivity In-Reply-To: <4C469090BA1B4386A6A99E32ABD4970D@JeromeDesktop> References: <4C469090BA1B4386A6A99E32ABD4970D@JeromeDesktop> Message-ID: Hello Jerome, If you are looking for low latency in country, speficically for Mexico, there is no Guadalajara DC that I know of. The 2 major DC markets are Monterey (North) and Mexico City/Queretaro (Center). In both cases you have many players like Triara (Telmex), Alestra (formerly AT&T), Kio, HP, IBM and a few others as the highest tier players. There are other smaller providers as well and you can do a search on them. If you want to server LATAM as a whole (Brazil, Mexico, Colombia, Panama, Argentina, etc.) then all have great connectivity to Miami, the southern countries also have good connectivity to NY (case of Brazil). Latency can be over 100 ms. And in many cases way more than that. Another option could be to use a CDN provider like Akamai, Limelight, etc. to reduce latency as you grow users. Mike -----Original Message----- From: lacnog-bounces at lacnic.net [mailto:lacnog-bounces at lacnic.net] On Behalf Of Jerome Lepage - AKEROZ Sent: Monday, July 19, 2010 6:52 AM To: lacnog at lacnic.net Subject: [lacnog] [SPAM]Datacenters in Mexico / LATAM connectivity Hi everybody, I'm new at this ML, nice to meet you all. I don't know if i have to write in english or spanish, i choose english because i'm more confortable with. My compagny based in France, looking for going en Mexico and more globally on LATAM markets. Did you know if (serious) datacenter(s) exists on Jalisco / Mexico ? I haven't found any information yet, (please) you could help me if you have any :) My contacts with some IP transit sellers tell me that Miami is the "POP" where you can have good connections with pretty much all LATAM. (I'm torn on working from US) Have you some report / advise / feedback ? Did you know another good "POP", which is not expensive ? Thanks for all you message by advance. Please excuse my poor english ;) You can contact me directly. Kind regards Jerome Lepage _______________________________________________ LACNOG mailing list LACNOG at lacnic.net https://mail.lacnic.net/mailman/listinfo/lacnog From j.lepage at akeroz.net Mon Jul 19 15:09:38 2010 From: j.lepage at akeroz.net (Jerome Lepage - AKEROZ) Date: Mon, 19 Jul 2010 20:09:38 +0200 Subject: [lacnog] Datacenters in Mexico / LATAM connectivity References: <4C469090BA1B4386A6A99E32ABD4970D@JeromeDesktop> Message-ID: <42954BD94D9E442791228DFE3F005E0C@JeromeDesktop> Hi again, Thanks you all for your feedback on ML or in private message. That's pretty much what i expected, and first informations collected from France. But a direct advice from local users / providers is important too. ;) All your informations is really helpfull, and (again) thanks for sharing it. I wish you all the best. Kind regards Jerome Lepage Akeroz ----- Original Message ----- From: "Michael De Leo (mdeleo)" To: "Latin America and Caribbean Region Network Operators Group" Sent: Monday, July 19, 2010 5:40 PM Subject: Re: [lacnog] Datacenters in Mexico / LATAM connectivity > Hello Jerome, > > If you are looking for low latency in country, speficically for Mexico, > there is no Guadalajara DC that I know of. The 2 major DC markets are > Monterey (North) and Mexico City/Queretaro (Center). In both cases you > have many players like Triara (Telmex), Alestra (formerly AT&T), Kio, > HP, IBM and a few others as the highest tier players. There are other > smaller providers as well and you can do a search on them. > > If you want to server LATAM as a whole (Brazil, Mexico, Colombia, > Panama, Argentina, etc.) then all have great connectivity to Miami, the > southern countries also have good connectivity to NY (case of Brazil). > Latency can be over 100 ms. And in many cases way more than that. > > Another option could be to use a CDN provider like Akamai, Limelight, > etc. to reduce latency as you grow users. > > Mike > > -----Original Message----- > From: lacnog-bounces at lacnic.net [mailto:lacnog-bounces at lacnic.net] On > Behalf Of Jerome Lepage - AKEROZ > Sent: Monday, July 19, 2010 6:52 AM > To: lacnog at lacnic.net > Subject: [lacnog] [SPAM]Datacenters in Mexico / LATAM connectivity > > > Hi everybody, > > I'm new at this ML, nice to meet you all. > I don't know if i have to write in english or spanish, > i choose english because i'm more confortable with. > > My compagny based in France, looking for going en Mexico and more > globally on LATAM markets. > Did you know if (serious) datacenter(s) exists on Jalisco / Mexico ? > I haven't found any information yet, (please) you could help me if you > have any :) > > My contacts with some IP transit sellers tell me that Miami is the "POP" > where > you can have good connections with pretty much all LATAM. > (I'm torn on working from US) > Have you some report / advise / feedback ? > Did you know another good "POP", which is not expensive ? > > Thanks for all you message by advance. > Please excuse my poor english ;) > > You can contact me directly. > > Kind regards > > Jerome Lepage > > _______________________________________________ > LACNOG mailing list > LACNOG at lacnic.net > https://mail.lacnic.net/mailman/listinfo/lacnog > _______________________________________________ > LACNOG mailing list > LACNOG at lacnic.net > https://mail.lacnic.net/mailman/listinfo/lacnog > From andre.edwards at gmail.com Fri Jul 23 11:48:05 2010 From: andre.edwards at gmail.com (=?ISO-8859-1?Q?Andr=E9_Edwards?=) Date: Fri, 23 Jul 2010 10:48:05 -0400 Subject: [lacnog] Caribbean Network Operators Group Inaugural Meeting in St Maarten August 15th to 20th 2010 Message-ID: Invitation to CARIBNOG 1 -------------------------------------- August 15th - 20th, 2010 Westin Hotel & Resort 144 Oyster Pond Road St Maarten -------------------------------------- Dear colleagues, members of the LACNOG community. The Caribbean Network Operators Group (CARIBNOG) has the pleasure of announcing and inviting you to participate in the first Regional CaribNOG meeting, CARIBNOG 1, from August 15th - 20th, 2010. The event will be held at the Westin Hotel and Resort in the beautiful island of St. Maarten during the Inaugural St. Maarten's ICT Week which is being hosted by the Government of St. Maarten and the Caribbean Telecommunications Union (CTU). The Caribbean Network Operators Group (CaribNOG) is a community of Network Operators dedicated to exchanging technical information and experiences related to the management of IP networks in the Caribbean region. CaribNOG conferences provide a forum for the coordination and dissemination of technical information related to networking technologies, research and operational practices. The meetings are informal, with an emphasis on practical solutions, training and insight relevant to the region. In St. Maarten, expert speakers from the regional and international technical community will be conducting hands-on workshops, in-depth tutorials and presentations on the following topics: ? VoIP: VOIP workshop - Deploying secure small and medium Scale VoIP solutions ? LINUX: Configuring and Securing LAMP, creating a secure LAMP application, IP Services and Security ? ROUTING: Basics; introduction to OSPF, BGP, VoIP and SIP ? CSIRT: Developing a Network Security and Incident Response Team. You are welcome to join us in St Maarten for this inaugural meeting. More detailed information on the event and its program, accommodation, registration, and general information will soon be available on CARIBNOG's website: www.caribnog.org Sincerely, Andre Edwards CARIBNOG 1 Program Committee -------------- next part -------------- An HTML attachment was scrubbed... URL: