July 2021 - NANOG - lists.nanog.org

Spoofer Report for NANOG for Jun 2021
by CAIDA Spoofer Project 08 Jul '21

08 Jul '21

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Jun 2021: ASN Name Fixed-By 19624 SERVERROOM 2021-06-06 32035 CCDT 2021-06-09 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Jun 2021: ASN Name First-Spoofed Last-Spoofed 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2021-06-30 20412 CLARITY-TELECOM 2016-09-30 2021-06-30 6181 FUSE-NET 2016-10-10 2021-06-30 11427 TWC-11427-TEXAS 2016-10-21 2021-06-04 22898 ATLINK 2016-12-16 2021-06-29 63296 AWBROADBAND 2017-09-01 2021-06-17 546 PARSONS-PGS-1 2017-11-20 2021-06-02 393564 SPOKANE 2018-06-05 2021-06-15 33452 RW 2018-09-19 2021-06-16 20448 VPNTRANET-LLC 2018-09-20 2021-06-25 5078 ONENET-AS-1 2020-04-06 2021-06-17 61317 ASDETUK 2020-08-31 2021-06-08 208188 PUGET-SOUND-NETWORKS 2020-12-04 2021-06-29 13876 FIBER-64 2021-05-20 2021-06-26 1299 TELIANET 2021-06-02 2021-06-02 212000 2021-06-21 2021-06-29 22191 WILKES-COMM 2021-06-25 2021-06-29 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

route-views.oregon-ix.net
by Brian Turnbow 06 Jul '21

06 Jul '21

Hello, Does anyone know if the route-views.oregon-ix.net name been retired? ; <<>> DiG 9.10.3-P4-Ubuntu <<>> type=a route-views.oregon-ix.net @phloem.uoregon.edu ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 44444 ; <<>> DiG 9.10.3-P4-Ubuntu <<>> type=aaaa route-views.oregon-ix.net @phloem.uoregon.edu ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 35471 route-views.routeviews.org resolves fine. Thanks Brian

2 1

Internet Quality workshop CFP for the internet architecture board (IAB)
by Jared Mauch 06 Jul '21

06 Jul '21

I know that many operators shift traffic based on network and internet quality (or don’t use certain networks at all). This is a great chance to share information about things operators have experienced or do to actively measure or otherwise to inform those decisions. - snip - For complete details, please see: https://www.iab.org/activities/workshops/network-quality/ Submissions Due: Monday 2nd August 2021, midnight AOE (Anywhere On Earth) Invitations Issued by: Monday 16th August 2021 Workshop Date: This will be a virtual workshop, spread over three days: 1400-1800 UTC Tue 14th September 2021 1400-1800 UTC Wed 15th September 2021 1400-1800 UTC Thu 16th September 2021 Workshop co-chairs: Wes Hardaker, Evgeny Khorov, Omer Shapira The Program Committee members: Jari Arkko, Olivier Bonaventure, Vint Cerf, Stuart Cheshire, Sam Crowford, Nick Feamster, Jim Gettys, Toke Hoiland-Jorgensen, Geoff Huston, Cullen Jennings, Katarzyna Kosek-Szott, Mirja Kuehlewind, Jason Livingood, Matt Mathias, Randall Meyer, Kathleen Nichols, Christoph Paasch, Tommy Pauly, Greg White, Keith Winstein. Send Submissions to: network-quality-workshop-pc(a)iab.org. Position papers from academia, industry, the open source community and others that focus on measurements, experiences, observations and advice for the future are welcome. Papers that reflect experience based on deployed services are especially welcome. The organizers understand that specific actions taken by operators are unlikely to be discussed in detail, so papers discussing general categories of actions and issues without naming specific technologies, products, or other players in the ecosystem are expected. Papers should not focus on specific protocol solutions. The workshop will be by invitation only. Those wishing to attend should submit a position paper to the address above; it may take the form of an Internet-Draft. All inputs submitted and considered relevant will be published on the workshop website. The organisers will decide whom to invite based on the submissions received. Sessions will be organized according to content, and not every accepted submission or invited attendee will have an opportunity to present as the intent is to foster discussion and not simply to have a sequence of presentations. Position papers from those not planning to attend the virtual sessions themselves are also encouraged. A workshop report will be published afterwards. Overview: "We believe that one of the major factors behind this lack of progress is the popular perception that throughput is the often sole measure of the quality of Internet connectivity. With such narrow focus, people don’t consider questions such as: What is the latency under typical working conditions? How reliable is the connectivity across longer time periods? Does the network allow the use of a broad range of protocols? What services can be run by clients of the network? What kind of IPv4, NAT or IPv6 connectivity is offered, and are there firewalls? What security mechanisms are available for local services, such as DNS? To what degree are the privacy, confidentiality, integrity and authenticity of user communications guarded? Improving these aspects of network quality will likely depend on measurement and exposing metrics to all involved parties, including to end users in a meaningful way. Such measurements and exposure of the right metrics will allow service providers and network operators to focus on the aspects that impacts the users’ experience most and at the same time empowers users to choose the Internet service that will give them the best experience."

1 0

Fort Bug - FreeBSD
by Mark Tinka 06 Jul '21

06 Jul '21

Hi all. I ran into an issue getting Fort to run on FreeBSD: Jul 2 10:46:14 nms2 fort[14304]: ERR: - Resource temporarily unavailable Jul 2 10:46:14 nms2 fort[14304]: ERR: Client socket read interrupted Jul 2 10:46:14 nms2 fort[14304]: ERR: - Resource temporarily unavailable Jul 2 10:46:14 nms2 fort[14304]: ERR: Error sending IPv6 Prefix PDU to client. I reached out to the developers and they discovered a bug that appears to be FreeBSD-specific. They issued a pre-release fix that I tested yesterday, which resolves the problem. Details about it here: https://github.com/NICMx/FORT-validator/commit/bfb99704ad5c0476f401be57ee24… They expect to have a full release of the updated code in a couple of weeks, but just in case anyone runs into this problem, this is what you can do to repair it for the time being. This raises an interesting observation for me - how many people are running Fort on FreeBSD? Considering this bug's presence, it'd seem not a lot (fair point, I've only tested it on FreeBSD-13). Mark.

1 0

Connect team contact at Cloudflare
by Eric Dugas 05 Jul '21

05 Jul '21

Hello, I am currently building a PNI with Cloudflare. The PNI was approved in April, cross-connects ordered and installed in May but I haven't heard from them since. My initial contact (who was really helpful) did try to push internally multiple times but their connect team isn't following up at all so I'm searching for people who can help me push this forward. Thanks in advance Eric

1 0

FreeBSD's ping Integrates IPv6
by Mark Tinka 05 Jul '21

05 Jul '21

Hi all. I just noticed (although it appears to have come in version 13.0) that FreeBSD's "ping" app now defaults to IPv6, i.e., no need for ping6: https://www.freebsd.org/cgi/man.cgi?query=ping&sektion=8&format=html Does anyone know whether other *nix systems are doing this now? My Mac (Catalina) still requires ping6, and I don't have any recent Linux systems handy. #ThisIsGood Mark.

10 18

Re: FreeBSD's ping Integrates IPv6
by Mark Tinka 03 Jul '21

03 Jul '21

On 7/3/21 02:04, Thomas Fragstein wrote: > Hi Mark, > > I think its time to make this switch. > So one argument is that when I use the default ping (or other tools) > it should be handle the actual protocol version in default. > So IPv6 is the actual ip protocol version :) I don't mind it. I was just surprised by it. Which also speaks to what Randy and others have said... it could break tooling if folk aren't aware. Not a drama; can be fixed. Mark.

1 0

UCEPROTECT-NETWORK
by Miguel Mata 02 Jul '21

02 Jul '21

Someone from please contact me offlist. Thanks. -- Miguel Mata El Salvador Comunicaciones IBW El Salvador tel.: ++(503) 2278-5068 fax: ++(503) 2207-1310 mmata(a)ibw.com "La confianza es la mejor conexion"

2 1

Weekly Routing Table Report
by cscora＠apnic.net 02 Jul '21

02 Jul '21

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 03 Jul, 2021 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 856005 Prefixes after maximum aggregation (per Origin AS): 323522 Deaggregation factor: 2.65 Unique aggregates announced (without unneeded subnets): 411204 Total ASes present in the Internet Routing Table: 71531 Prefixes per ASN: 11.97 Origin-only ASes present in the Internet Routing Table: 61536 Origin ASes announcing only one prefix: 25393 Transit ASes present in the Internet Routing Table: 9995 Transit-only ASes present in the Internet Routing Table: 317 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 55 Max AS path prepend of ASN ( 48366) 51 Prefixes from unregistered ASNs in the Routing Table: 1102 Number of instances of unregistered ASNs: 1108 Number of 32-bit ASNs allocated by the RIRs: 36518 Number of 32-bit ASNs visible in the Routing Table: 30342 Prefixes from 32-bit ASNs in the Routing Table: 141342 Number of bogon 32-bit ASNs visible in the Routing Table: 26 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 523 Number of addresses announced to Internet: 3039747968 Equivalent to 181 /8s, 46 /16s and 223 /24s Percentage of available address space announced: 82.1 Percentage of allocated address space announced: 82.1 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 284965 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 229856 Total APNIC prefixes after maximum aggregation: 65794 APNIC Deaggregation factor: 3.49 Prefixes being announced from the APNIC address blocks: 225679 Unique aggregates announced from the APNIC address blocks: 90541 APNIC Region origin ASes present in the Internet Routing Table: 11696 APNIC Prefixes per ASN: 19.30 APNIC Region origin ASes announcing only one prefix: 3326 APNIC Region transit ASes present in the Internet Routing Table: 1662 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 32 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6863 Number of APNIC addresses announced to Internet: 773655296 Equivalent to 46 /8s, 29 /16s and 11 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-147769 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 249828 Total ARIN prefixes after maximum aggregation: 114073 ARIN Deaggregation factor: 2.19 Prefixes being announced from the ARIN address blocks: 249616 Unique aggregates announced from the ARIN address blocks: 118884 ARIN Region origin ASes present in the Internet Routing Table: 18850 ARIN Prefixes per ASN: 13.24 ARIN Region origin ASes announcing only one prefix: 6846 ARIN Region transit ASes present in the Internet Routing Table: 1951 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 28 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3957 Number of ARIN addresses announced to Internet: 1271415808 Equivalent to 75 /8s, 200 /16s and 68 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 238484 Total RIPE prefixes after maximum aggregation: 111317 RIPE Deaggregation factor: 2.14 Prefixes being announced from the RIPE address blocks: 234773 Unique aggregates announced from the RIPE address blocks: 143266 RIPE Region origin ASes present in the Internet Routing Table: 27987 RIPE Prefixes per ASN: 8.39 RIPE Region origin ASes announcing only one prefix: 12025 RIPE Region transit ASes present in the Internet Routing Table: 3880 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 55 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10266 Number of RIPE addresses announced to Internet: 710663808 Equivalent to 42 /8s, 91 /16s and 222 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 111004 Total LACNIC prefixes after maximum aggregation: 26527 LACNIC Deaggregation factor: 4.18 Prefixes being announced from the LACNIC address blocks: 112175 Unique aggregates announced from the LACNIC address blocks: 47186 LACNIC Region origin ASes present in the Internet Routing Table: 10782 LACNIC Prefixes per ASN: 10.40 LACNIC Region origin ASes announcing only one prefix: 2684 LACNIC Region transit ASes present in the Internet Routing Table: 2042 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 29 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8426 Number of LACNIC addresses announced to Internet: 176055808 Equivalent to 10 /8s, 126 /16s and 102 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 25730 Total AfriNIC prefixes after maximum aggregation: 5075 AfriNIC Deaggregation factor: 5.07 Prefixes being announced from the AfriNIC address blocks: 33239 Unique aggregates announced from the AfriNIC address blocks: 10858 AfriNIC Region origin ASes present in the Internet Routing Table: 1487 AfriNIC Prefixes per ASN: 22.35 AfriNIC Region origin ASes announcing only one prefix: 512 AfriNIC Region transit ASes present in the Internet Routing Table: 299 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 28 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 830 Number of AfriNIC addresses announced to Internet: 107524096 Equivalent to 6 /8s, 104 /16s and 176 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 7571 9000 58 CMNET-GD Guangdong Mobile Communication 7545 5730 783 679 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4766 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3560 1330 20 VIETEL-AS-AP Viettel Group, VN 7713 3529 1023 56 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 2800 1897 55 VNPT-AS-VN VNPT Corp, VN 4766 2429 11120 567 KIXS-AS-KR Korea Telecom, KR 9498 2356 483 245 BBIL-AP BHARTI Airtel Ltd., IN 45090 2114 1197 71 CNNIC-TENCENT-NET-AP Shenzhen Tencent C 4755 2113 437 190 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 5203 9528 2314 AMAZON-02, US 11492 4792 316 669 CABLEONE, US 7155 4027 264 32 VIASAT-SP-BACKBONE, US 22773 3974 3029 266 ASN-CXA-ALL-CCI-22773-RDC, US 16625 3499 1809 2436 AKAMAI-AS, US 6327 3360 1317 69 SHAW, CA 30036 2581 373 129 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2536 5035 476 CENTURYLINK-US-LEGACY-QWEST, US 5972 2251 451 786 DNIC-ASBLK-05800-06055, US 20115 2168 2930 492 CHARTER-20115, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6722 1721 140 UNI2-AS, ES 20940 3660 3347 205 AKAMAI-ASN1, NL 39891 3267 187 22 ALJAWWALSTC-AS, SA 8551 2996 378 40 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2884 2283 895 ROSTELECOM-AS, RU 9009 2451 259 1308 M247, GB 34984 2218 357 595 TELLCOM-AS, TR 61317 1622 257 824 ASDETUK www.heficed.com, GB 13188 1610 100 27 TRIOLAN, UA 58224 1603 887 557 TCI, IR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8536 3443 592 Uninet S.A. de C.V., MX 10620 3407 525 651 Telmex Colombia S.A., CO 11830 2509 369 62 Instituto Costarricense de Electricidad 13999 1771 433 462 Mega Cable, S.A. de C.V., MX 6503 1451 359 478 Axtel, S.A.B. de C.V., MX 28573 1425 2284 234 CLARO S.A., BR 3816 1239 650 151 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1114 374 31 Telefonica del Peru S.A.A., PE 26615 1065 2351 134 TIM SA, BR 11664 991 199 444 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1650 393 22 LINKdotNET-AS, EG 24835 1456 498 30 RAYA-AS, EG 36992 1303 1489 266 ETISALAT-MISR, EG 36903 1183 537 110 MT-MPLS, MA 29571 711 68 11 ORANGE-COTE-IVOIRE, CI 6713 612 1863 34 IAM-AS, MA 36935 532 522 40 Vodafone-, EG 15399 493 49 25 WANANCHI-, KE 37342 482 32 1 MOVITEL, MZ 2018 324 319 74 TENET-1, ZA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8536 3443 592 Uninet S.A. de C.V., MX 9808 7571 9000 58 CMNET-GD Guangdong Mobile Communication 12479 6722 1721 140 UNI2-AS, ES 7545 5730 783 679 TPG-INTERNET-AP TPG Telecom Limited, AU 16509 5203 9528 2314 AMAZON-02, US 11492 4792 316 669 CABLEONE, US 4538 4766 4192 74 ERX-CERNET-BKB China Education and Rese 7155 4027 264 32 VIASAT-SP-BACKBONE, US 22773 3974 3029 266 ASN-CXA-ALL-CCI-22773-RDC, US 20940 3660 3347 205 AKAMAI-ASN1, NL Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 7571 7513 CMNET-GD Guangdong Mobile Communication Co.Ltd. 12479 6722 6582 UNI2-AS, ES 7545 5730 5051 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4766 4692 ERX-CERNET-BKB China Education and Research Net 11492 4792 4123 CABLEONE, US 7155 4027 3995 VIASAT-SP-BACKBONE, US 22773 3974 3708 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3560 3540 VIETEL-AS-AP Viettel Group, VN 7713 3529 3473 TELKOMNET-AS-AP PT Telekomunikasi Indonesia, ID 20940 3660 3455 AKAMAI-ASN1, NL Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US 15132 UNALLOCATED 12.9.150.0/24 1239 SPRINTLINK, US 3577 UNALLOCATED 12.19.197.0/24 209 CENTURYLINK-US-LEGACY-QWEST, Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 209319 IPV6ROUTING, US Transit: 46573 LAYER-HOST, US 23.162.32.0/24 Origin: 32444 SAFELINK-MV, US Transit: 6939 HURRICANE, US 23.183.16.0/24 Origin: 33385 MEPEEPS, US Transit: 6939 HURRICANE, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:17 /9:14 /10:41 /11:102 /12:305 /13:589 /14:1193 /15:1994 /16:13471 /17:8331 /18:13969 /19:25432 /20:42341 /21:50322 /22:106878 /23:91427 /24:498180 /25:1399 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 5680 6722 UNI2-AS, ES 11492 3806 4792 CABLEONE, US 6327 3167 3360 SHAW, CA 7155 3115 4027 VIASAT-SP-BACKBONE, US 8151 3058 8536 Uninet S.A. de C.V., MX 22773 2965 3974 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2803 3267 ALJAWWALSTC-AS, SA 8551 2461 2996 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2247 2581 MEDIACOM-ENTERPRISE-BUSINESS, US 11830 1933 2509 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1891 2:1146 3:142 4:19 5:3556 6:79 7:5 8:1538 9:1 11:164 12:1740 13:365 14:2290 15:87 16:17 17:324 18:93 20:122 21:1 22:188 23:4813 24:2435 25:2 27:2499 29:19 31:2279 32:110 34:1 35:46 36:1586 37:3764 38:2164 39:624 40:164 41:3723 42:977 43:2085 44:262 45:15142 46:3685 47:351 49:1612 50:1805 51:101 52:1235 54:218 55:783 56:9 57:52 58:1739 59:1201 60:926 61:2335 62:2325 63:1966 64:5382 65:2369 66:5064 67:2895 68:1172 69:4064 70:1383 71:681 72:3148 74:2592 75:1490 76:698 77:2038 78:1709 79:2321 80:1852 81:1516 82:1364 83:1147 84:1256 85:2711 86:703 87:1816 88:967 89:3018 90:492 91:7355 92:1786 93:2561 94:3112 95:3525 96:1296 97:343 98:974 99:969 100:93 101:1021 102:1507 103:26297 104:3816 105:441 106:795 107:2244 108:727 109:3863 110:2002 111:3149 112:1914 113:1514 114:1454 115:1908 116:1908 117:2358 118:2386 119:1895 120:1448 121:1071 122:2529 123:2168 124:1589 125:2077 128:1307 129:1290 130:876 131:2037 132:752 133:360 134:1625 135:298 136:777 137:933 138:2403 139:1212 140:761 141:1188 142:1203 143:1322 144:1257 145:326 146:1473 147:1353 148:2190 149:1457 150:817 151:1076 152:1542 153:417 154:2670 155:1328 156:1603 157:1199 158:922 159:2016 160:2312 161:1176 162:3339 163:1012 164:1522 165:1413 166:615 167:1773 168:3680 169:696 170:4357 171:787 172:2483 173:2976 174:988 175:1073 176:3165 177:4383 178:2926 179:1909 180:2270 181:2619 182:3207 183:2084 184:2416 185:18439 186:4064 187:3084 188:3331 189:2879 190:8891 191:1415 192:10713 193:8236 194:6703 195:4803 196:2883 197:2141 198:6047 199:6023 200:7403 201:5225 202:10564 203:10101 204:4655 205:3326 206:3592 207:3429 208:4022 209:4713 210:4259 211:2311 212:3712 213:3463 214:1178 215:58 216:6290 217:2565 218:1198 219:708 220:2065 221:952 222:866 223:1953 End of report

1 0

Layer 2 based anycast - Kind like GLBP - Research
by Douglas Fischer 02 Jul '21

02 Jul '21

I'm looking for solutions do deploy some type of selective high availability and load balance based on the glue between Layer 2 and Layer 3 (ARP or ND). And I'm coming here to ask help to avoid reinventing the wheel. I know VRRP / Heartbeat, and their downside is the Active/Passive characteristic. -> But this project demands something that allows-me to have Active/Active deployments. I know GLBP, and it almost fits on the needed requirements. -> Except by his load-balancing methods that do not allow-me define priority and affinity between server nodes and clients. The basic ideia is something like Cisco GLBP with steroids: - Multiple server nodes of same service running on a common bus and answering the "L2 anycast requests" of the clients that are on the same bus and same subnet. - Some type of signaling between the multiple nodes making known the status of the other nodes, their load. Maybe complementary information like "which node is serving which client?" - Resource Pools and Client Pools, and the crossing between then based on priorities and affinities (Here is the Gotcha!). - I want to be able to say "Node X will priorly serve clients A, E, G, and T. Node Y will serve priorly clients B, C D, F. And node Z will server everyone else." Answering suggestions in advance: (I discussed that with some friends and based on those talks I will try to predict some suggestions that we already considered.) - No, unfortunately tradicional L3 anycast will not fit on the requirements. Servers and clients to be at the same bus, on the same subnet. No L3 hops between then. - No, the use of some type of connection broker in L2 does not satisfy one of the requirements. Beyond the load balance, that this approach will address, the high availability in case on L2 segregation is also needed. My v0 draft of idea was using GLBP, and L2 Firewall rules dynamically adjusted, based on the Master-Status, to allow and block L2 communications between each of those nodes and lists of client pools. (Actually, I'm coming back to this idea again... Since I still don't have any other better idea until now.) I friend Suggested that EVPN could help-me, but I must confess that is a hard topic to me. Unless it can be used depending exclusively on software (no special hardware required), it won't fit. -- Douglas Fernando Fischer Engº de Controle e Automação

7 10