Slashdot Mirror

This is not a new situation with Cogent:

http://ask.slashdot.org/story/05/10/05/2247207/internet-partitioning---cogent-vs-level-3

https://www.infoworld.com/d/security-central/sprint-cogent-dispute-puts-small-rip-in-fabric-internet-474

http://www.infoblox.com/community/blog/bad-blood-and-world-ipv6-day

Disclaimer, I'm biased because I work on the product, but this is the exact use case we've designed the product for. http://www.infoblox.com/en/products/netmri.html?utm_expid=7390868-7&utm_referrer=http%3A%2F%2Fwww.website-unavailable.com%2Fmain%3Fq%3Dnetmri%26d%3Dwww.infoblox.comhttp%26oq%3DInfo%2BBlox%2BCom%2BHTTP%2BInfo%2BBlox%2BComen%2BResource%2BProduct%2BDemo%2BNet%2BMRI%2BDownload%2BHTML%2BNet%2BProduct%2BDemos%2BResources%2BInfo%2BBlox%2BCom

You can probably use Cricket's free tool available from Infoblox:
http://www.infoblox.com/services/dns_advisor.cfm

Conveniently provided by the author's company:

http://www.infoblox.com/services/dns_advisor.cfm

I've reviewed the following:

Bluecat Networks Proteus/Adonis http://www.bluecatnetworks.com/
Incognito IP/Name/DNS Commander http://www.incognito.com/
INS IPControl http://www.ins.com/
Carnegie Mellon's NetReg http://www.net.cmu.edu/netreg
Lucent VitalQIP http://qip.lucent.com/
Solarwinds IPAM Pro http://www.solarwinds.net/
Men & Mice http://www.menandmice.com/
Infoblox http://www.infoblox.com/
IPPlan http://freshmeat.net/projects/ipplan
MetaInfo http://www.metainfo.com/

In hopes of replacing our current in-house developed solution.

I'll be honest, they are for the most part simply 'ok'. I wasn't super-impressed with any of them, and the bottom half of the list were definitely not ready for ISP/ASP/MSP-level use. I've listed them in descending order of my preference. All the useable ones are super-expensive, on the order of 'ok you can afford to pay a decent php/mysql coder to code you something from the ground up', or you can take this out-of-the-box thing, and shoe-horn it into your existing network. Which will in most cases take some weeks of programming anyway...

I had some of what I thought were pretty simple requirements...

- unix/linux based
- no single point of failure (clustering)
- handle forward and reverse dns
- api's (mostly to allow us to present a customer access to their zones)
- web-based gui with tiered user-levels
- pref software-based install rather than appliance, due to the shoe-horn prediction i mentioned above

Those are the highlights off the top of my head. I was surprised how few actually had all those features.

After months of doing webcasts, reading white-papers etc we've come to the conclusion that it's going to be developed in-house from the ground up, using bsd/apache/postgres/php/bind and some soap.

After reviewing these, I'm actually dying to know what large enterprises are using. I'm hoping there's some magic bullet IPAM solution that I missed on google. Please someone tell me about it!

Anyway, hope this helps you in your quest.

I have to say, Infoblox http://www.infoblox.com/ is the best solution for this I have seen yet. It is not free, but gives a company with LOTS of IP addresses a nice way to manage them all.

Most people use either Excel (yuck) or a home grown PHP app they write themselves. (im talking some Fortune 500 companies here as well)

Infoblox is a great product for doing this. It's all appliance based, runs Bind (Cricket Liu works for them), and basically everything operates as a grid. I've done a couple of installs of this for clients, and it's a very slick system.

Wow finally a real discussion on /. ok what you really want IMHO is a AAA service. Autorization/Authentication and Accounting. But then the problem becomes the client, I know Sun supports Radius but I am not sure about your other clients. There are several different companies who make Radius appliances once upon a time I worked for one http://infoblox.com/products/radiusone_overview.cf m The problem will always be the clients as you have noticed you can do a lot of what you want with PAM but if you have windows clients you will have to look at some sort of software on the client side to do the authentication.