[77121] in North American Network Operators' Group
Re: Proper authentication model
daemon@ATHENA.MIT.EDU (Owen DeLong)
Thu Jan 13 14:27:46 2005
Date: Thu, 13 Jan 2005 11:27:15 -0800
From: Owen DeLong <owen@delong.com>
To: Michael.Dillon@radianz.com, nanog@merit.edu
In-Reply-To: <OFBD338D0D.08157F2E-ON80256F88.00399EE2-80256F88.003A3DD9@radianz.com>
Errors-To: owner-nanog-outgoing@merit.edu
--==========E27CF1C6E53E6FCCCFFB==========
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
That's great if you want to trust one carrier to provide all your seperacy,
but, when you want to make sure carrier A isn't running your ring in common
with carrier B, you need GIS data.
Owen
--On Thursday, January 13, 2005 10:36 AM +0000 Michael.Dillon@radianz.com=20
wrote:
>
>> > My point was that competing, differently-named and
>> > organisationally-separate suppliers of network services frequently use
>> > common suppliers for metro fibre, long-haul transport, building
> access,
>> > etc. Just because you buy different services from different providers
>> > doesn't mean there will be no common points of failure.
>
>> Fate sharing is bad. The only way to be sure you aren't fate sharing is
> to
>> request GIS data from the carriers. And even that could be wrong...
>
> Tell your carrier that you want to buy physical seperacy.
> Currently this is only offered by some metro networks
> because corporates want physical seperacy to connect their SANs
> (Storage Area Networks) to their offices. My company's
> network maintains seperacy for the financial market data
> feeds that run across it. We do that because the customers
> specifically demand that capability.
>
> Rather than trying to do the carrier's job by requesting
> GIS data, tell them you want to buy "physical seperacy"
> as a product. Get them to do the work and show you the
> data to prove that they really are delivering physical
> seperacy.
>
> --Michael Dillon
>
--=20
If it wasn't crypto-signed, it probably didn't come from me.
--==========E27CF1C6E53E6FCCCFFB==========
Content-Type: application/pgp-signature
Content-Transfer-Encoding: 7bit
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (Darwin)
iD8DBQFB5suTn5zKWQ/iqj0RAl+IAJ9RfMm+FxFWV9lVSQ7XZTuygWoTqQCeN+E3
RTvFo5/Fh+cVSpjV1fjw6CI=
=0wxU
-----END PGP SIGNATURE-----
--==========E27CF1C6E53E6FCCCFFB==========--