Internet2 Network Security SIG

[Adair Thaxton <>]

I hope everyone enjoyed their extra day of February.  Did you get candy 
from Leap Day William?  (Any other 30 Rock fans?  Just me?)

Jeff Bartig and I spoke with Google at NANOG, for an update on IRR 
filtering.  Right now they're in a "marking and reporting" phase.  Their 
plan is that in 2-3 months, they'll start de-prefing routes missing 
proper IRR records, and around September they'll start dropping them.  
It's important to note that by "dropping", they mean that traffic will 
take a commodity transit path, not via Internet2 or any other peering path.

How has coronavirus impacted your networks?  When was the last time you 
updated your VPN software, and VPN client software?  Are you prepared 
for the possibility of a largely remote workforce?  Zoom has temporarily 
lifted the 40-minute limit for free users in China 
(https://www.businessinsider.com/coronavirus-covid-19-spread-zoom-video-lift-call-limit-2020-2).  
Webex has also lifted the time limit restriction and is offering free 
90-day licenses 
(https://blog.webex.com/video-conferencing/cisco-webex-supporting-customers-during-this-unprecedented-time). 


We continue to work on BGP Flowspec, and have deployed an internal 
portal for rule instantiation and monitoring.  We're also finishing up 
configs on the route reflector.

Greg Grimes asked in the NTAC slack channel if anyone is doing TLS1.3 
decryption.  His CISO is interested in it, and hasn't found the price of 
capable boxes to be a deterrent.  Can anyone add any practical 
experience with this?

This month's link in the category of "things that may interest only me" 
is that corp.com is up for sale, and that could be bad.  
https://krebsonsecurity.com/2020/02/dangerous-domain-corp-com-goes-up-for-sale/

Adair