ISP best practices

I learned DNS initially by reading some great documents by Avi Freedman, they are a little out dated, but still very relevant and posted on his website @ http://www.freedman.net/

Bind is fully capable of IPv6. When combined with Webmin (www.webmin.com),
I'm not sure how much easier Bind can get. Webmin will also keep DNSSEC keys
up to date with changes, so long as you make those changes from within
Webmin. If you make changes in CLI, you can tell Webmin to rehash the keys
manually. It's as simple as clicking a GUI button.

Apologies, this should have said I learned BGP initially not DNS.

Sorry!!

<shudder>

Jason A. Bertoch
Network Administrator
jason@electronet.net
Electronet Broadband Communications
3411 Capital Medical Blvd.
Tallahassee, FL 32308
(V) 850.222.0229 (F) 850.222.8771

We have several clients using Webmin. If you don¹t know command line
Webmin is another tool to help you learn. You can have webmin do it and
then look at the config to learn.

Justin

I have to agree.

I've been working with BIND for over 10 years, and still use webmin to help me keep things organized.

Adam Kennedy wrote:

Bind is fully capable of IPv6. When combined with Webmin (www.webmin.com),
I'm not sure how much easier Bind can get. Webmin will also keep DNSSEC keys
up to date with changes, so long as you make those changes from within
Webmin. If you make changes in CLI, you can tell Webmin to rehash the keys
manually. It's as simple as clicking a GUI button.

Does anyone still use probind? As much as I am gung-ho command line,
managing a huge amount of DNS can get ugly.

~Seth

Ah, a good use for my Safari account.

Hmm, there's you a resource; for ~$20 per month, get access to books to read
online, download chapters in PDF format for later perusal. I can read this,
and if it looks like something I want, I also get a discount ordering through
informit. Safari: http://my.safaribooksonline.com/home

You do need to read a lot to make it worthwhile; advantage is that you don't
have to store or resell the book later.

O Hai!

I would highly advise you have a read at any presentation by Phil Smith:
ftp://ftp-eng.cisco.com/pfs/seminars (anonymous login)
Read as much as you can from here 1st thing 1st - this is all solid ground knowledge.

Then, give a quick read at Cisco's BGP Case Study online on the CCO.
And you're OK to go.

Now if you want paper material that you can keep, I'd suggest "Internet Routing Architectures" by Sam Halabi - Cisco Press, even though it's getting old, I find it still very valid. Make sure you have a read at team-cymru.org before you roll out your AS, for their BOGONs/Martians ACLs and peerings, as it sure helps.

Bear in mind BGP is a simplistic protocol. The pain point *will* be your IGP (if you want to do it correctly from start...)

Greg VILLAIN

And Philip / Barry's Cisco ISP Essentials is a good buy, even if you
use non cisco gear ..
http://www.ciscopress.com/bookstore/product.asp?isbn=1587050412

--srs

The best training available on the Net for a small ISP to learn from the
best is available ..... At www.nanog.org!

All the NANOGs are on VOD. Just go to the presentation archive:
http://www.nanog.org/presentations/archive/. Put in a keyword to search (say
"BGP Tutorial"), cook some popcorn, and sit back and enjoy the session.

I agree with this whole heartedly. Phil Smith's presentations and
papers are fantastic. I'm certain that a sizable portion of the
Internet operates because of the material that he has, and continues
to, put together.

Cheers,
Randal

Barry Raveendran Greene wrote:

The best training available on the Net for a small ISP to learn from the
best is available ..... At www.nanog.org!

All the NANOGs are on VOD. Just go to the presentation archive:
http://www.nanog.org/presentations/archive/. Put in a keyword to search (say
"BGP Tutorial"), cook some popcorn, and sit back and enjoy the session.

It helps also to communicate with people.

[speaking in small sp context]

If you know any of the engineers or operators of your upstream, perhaps
ask them questions from time to time. If you really know them (and are
serious about learning) ask them if they can provide you sample config
snips.

Contact the people that run your local IXP. I've found that the
operators of the exchange points are an aggregation point of 'the best
of the best from the best' information, as they generally discuss
solutions with chief engineers of all companies that connect to their
fabric.

IXP ops are a rich source not only of technical information, but also of
industry best practises relating to how other providers might prefer to
be approached, if they like or dislike feedback, and whether they care
to be approached at all.

Don't go bombarding your local IXP op with silly questions, it's just
another decent source of information, as they seem to be like
myself...if you ask a well-thought-out question, you will likely get an
answer (even if it's "I dunno, look over there").

With the books I mentioned earlier in the thread, and that others have
re-mentioned, I prefer:

- read
- lab up current environment
- implement what you read in lab
- test for breakage
- pilot lab findings into production
- update/tighten control features
- implement across network
- watch for inconsistencies, but continue to tighten rules
- read more
- rinse,repeat

Steve

ps. as always, thanks Jon.

not sure if any of these help, but you might want to also take MAAWG's Published Documents

http://www.maawg.org/about/publishedDocuments

-Dennis