April 2025 - NANOG - lists.nanog.org

CGNAT growing pains
by Jon Lewis 17 Apr '25

17 Apr '25

We started rolling out CGNAT about 6 months ago. It was smooth sailing for the first few months, but we eventually did run into a number of issues. Our customer base is primarily FTTH with "dynamic" IP assignment via DHCP. Since connections are always-on, customer ONTs/routers get an IP assigned, and then when the lease is renewed, they request a new lease for the existing IP, and, in general, that request is granted. This gives customers the mistaken impression they have a static IP. So, my impression, from working with some customers who've needed to be moved from CGNAT back to public IP is that customers who are doing port-forwarding don't even bother with dynamic DNS. They just know they can connect to their IP as they've never seen it change. We do offer/sell static IP, but pre-CGNAT, it was strictly for business customers. i.e. A residential customer could only get static IP service by converting their account to a business account. That may change in the near future. One issue we didn't foresee has been IP Geo issues. i.e. We all knew that streaming services like Netflix use IP Geo to determine what content should be made available, but that's, AFAIK, limited by country or region. What we didn't anticipate is services like Hulu Live TV doing IP Geo down to the city level to determine which local channels are a subscriber's local channels. We're using Juniper MX gear and SPC3 cards for our CGNAT routers, each one having a single large external pool. Since we serve most of FL, one external pool can't IP Geo correctly for customers as far apart as Miami and Jacksonville hitting the same CGNAT router. We don't currently have an acceptable solution to this other than moving impacted customers off CGNAT. One of the great unknowns (at least for us) with CGNAT was what our PBA settings should be. i.e. How large each port-block should be, and how many port-blocks to allow per customer. We started with 256x4. It seemed to work. We eventually noticed that we were logging port-block exceeded errors. This is one aspect where Juniper's CGNAT support is lacking. There's a counter for these errors, and it's available via SNMP, but there's no way to attribute the errors to subscriber IPs. We're polling the mib and graphing it, so we know it's a continuing issue and can see when it's incrementing faster/slower, but Junos provides no means for determining if "PBEs" are all being caused by a single customer, a handful of customers, etc. We have a JTAC case open on this. As a quick & hopeful fix, we both increased the port-block size and block limit. That helped, but didn't stop the errors. It also cut our CGNAT ratio by more than half (64:1 -> 28:1), if we stay at this ratio, we'll need much larger external pools than originally anticipated. Tuning these settings is kind of painful as JTAC strongly recommends bouncing the CGNAT service anytime CGNAT related config changes are made. This means briefly breaking Internet access for all CGNAT'd customers. For the PBEs, JTAC's suggestions so far have been to shorten some of the timeouts in the config and to keep doing what we're doing, which is a cron job that essentially does a "show services nat source port-block", parses the output looking for subscriber IPs that have used up the ports in several of their port-blocks, then does a "show services sessions source-prefix ..." and logs all of this. This at least gives us snapshots of "who's a heavy user right now" and lets us look at how they were using all their ports. i.e. was it bittorent, are they compromised and scanning the internet for more systems to compromise, is it legit looking traffic - just lots of it, etc.? The latest CGNAT issue is a customer with a Palo Alto Networks firewall connected to our network and several of their employees are our FTTH customers. On their PANW firewall, they're doing IP Geo based filtering, limiting access to internal servers to "US IPs". Since we only CGNAT traffic to the external Internet, their on-net employees hit the firewall from their 100.64/10 IPs and get blocked. I suggested they whitelist 100.64/10, saying we block traffic from 100.64/10 from entering our network via peering and transit, so they can be assured anything from 100.64/10 came from inside our network / our customers. They say the firewall won't let them whitelist 100.64.0.0/10, giving an error that it's invalid IP space. I know we're not the first to implement CGNAT, so I'm curious if others have run into these sorts of issues, or others we haven't run into yet, and if so, how you solved them. ---------------------------------------------------------------------- Jon Lewis, MCP :) | I route Blue Stream Fiber, Sr. Neteng | therefore you are _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________

10 16

[NANOG] Join the NANOG Discord Channel! + More
by Nanog News 17 Apr '25

17 Apr '25

*** Keep the Conversations Going on the NANOG Discord Channel!* ------------------------------------------------------------ *Have you Joined the NANOG Discord yet?* Keep the conversations going between the in-person meetups, where you will find groups of channels related to the conferences, NANOG committees, technology, and official + unofficial affinity groups. *SEE MORE* <https://discord.nanog.org.> (http:// https://discord.nanog.org.) *** Reminder! Call for Presentations Deadline Approaching* ------------------------------------------------------------ *Submit Your Talk Proposal by Monday, Apr. 28* *Got something to share? *You still have time to present at NANOG. Connect directly with your peers and contribute to the conversations driving our industry forward. *LEARN MORE* <https://nanog.org/program/call-presentations/> ( https://nanog.org/program/call-presentations/) *** Find a Mentor or Receive Mentorship* ------------------------------------------------------------ *Join the NANOG Mentorship Program* Open the door to guiding or becoming the next generation of tech leaders. *MORE INFO * <https://nanog.org/outreach/nanog-mentorship-program/>( https://nanog.org/outreach/nanog-mentorship-program/) *** Video of the Week* ------------------------------------------------------------ *Keynote: "Networking for AI" with Sharada Yeluri* In one of our most viewed videos from N93, Yeluri explores what AI networking truly entails—from the critical role of networks in training AI clusters to how AI models are partitioned and how GPU traffic patterns emerge. *WATCH NOW* <https://www.youtube.com/watch?si=wWmlg-Ob8pQNn2jS&v=Rd1tzO8U8to&feature=you…> *** Happy Easter from all of us at NANOG!* ------------------------------------------------------------ Wishing peace, renewal, and connection —whether you're spending time with loved ones, recharging, or diving into a passion project. Here's to brighter days and stronger networks ahead. *** Stay Connected* ------------------------------------------------------------ http://www.facebook.com http://www.instagram.com/nanog_org/ http://www.linkedin.com/company/nanog/ https://www.twitter.com/nanog/ http://nanog.org

1 0

[NANOG] ISPs in Spain are blocking CDN IP ranges to tackle soccer piracy
by Raúl Martínez 16 Apr '25

16 Apr '25

Hello, Nanog, This is an ongoing issue that might affect your spanish users if you use services like Cloudflare, Vercel, BunnyCDN or GitHub pages. A couple of weeks ago, the most important ISPs in Spain started intercepting or nullrouting IP addresses from this CDN providers. The reason is that a couple of local court orders allowed LA LIGA (sports association responsible for administering the two professional football leagues in Spain) to provide ISPs with a list of IP addresses that host soccer piracy sites to be taken down in a short period of time, even when the football match is taken place. The issue is that most of this piracy sites use Cloudflare and others to protect themselves, so ISPs are nullrouting or intercepting IP ranges that serve thousands of websites, including all Cloudflare Free customers (but not limited to). For example, they blocked one IP address that served ChatGPT. These blockages are applied when the soccer matches are played and they are turned off hours later. Cloudflare has already taken legal action against this, but the issue is still ongoing. You can find more information about this issue on TorrentFreak (LaLiga Blocks Cloudflare Again, New Pirate IPTV Providers & Anything in The Way), BandaanchaEU (bandaancha bloqueos del fútbol). *Regards,* *Raúl Martínez*

11 17

[NANOG] NANOG Mail List Alias ending 18-April-2025
by Valerie Wittkop 15 Apr '25

15 Apr '25

NANOG Community, It has been a month and a half since we completed maintenance on our instance of Mailman, and started using nanog(a)lists.nanog.org. This message is to notify you we will be ending the use of the nanog(a)nanog.org alias on Friday, 18 April before noon eastern. Once the alias is turned off, messages addressed to nanog(a)nanog.org will NOT be delivered to the NANOG mail list. If you send a message to nanog(a)nanog.org you will get an auto-response informing you the message was not delivered to the mail list. Additionally, we will also be removing the subject prefix [NANOG] from messages going forward. For those wanting to filter list messages, we suggest using the List-ID: headers. We strongly encourage you to update your address books at this time so messages will be sent to nanog(a)lists.nanog.org. Thank you, NANOG Staff *Valerie Wittkop* Program Directorvwittkop(a)nanog.org | +1 734-730-0225 <+17347300225> (mobile) | www.nanog.org NANOG | 305 E. Eisenhower Pkwy, Suite 100 | Ann Arbor, MI 48108, USA ASN 19230

1 0

[NANOG] Re: ISPs in Spain are blocking CDN IP ranges to tackle soccer piracy
by Hank Nussbacher 15 Apr '25

15 Apr '25

On 15/04/2025 8:47, Hank Nussbacher wrote: Italy: https://arstechnica.com/gadgets/2025/03/italian-court-orders-google-to-bloc… Extract: Just last year, Italian ISPs briefly blocked the entire Google Drive domain because someone, somewhere used it to share copyrighted material. This is often called DNS poisoning or spoofing in the context of online attacks, and the outcome is the same if it's being done under legal authority: a DNS record is altered to prevent someone typing a domain name from being routed to the correct IP address. Spain: https://torrentfreak.com/french-court-orders-cloudflare-to-dynamically-bloc… Extract: Interestingly, the blockades may not stop at the 14 domain names mentioned in the original complaint. The ‘dynamic’ order allows SECP to request additional blockades from Cloudflare, if future pirate sites are flagged by French media regulator, ARCOM. Refusal to comply could see Cloudflare incur a €5,000 daily fine per site. “[Cloudflare is ordered to implement] all measures likely to prevent, until the date of the last race in the MotoGP season 2025, currently set for November 16, 2025, access to the sites identified above, as well as to sites not yet identified at the date of the present decision,” the order reads. -Hank >> Hello, Nanog, >> >> This is an ongoing issue that might affect your spanish users if you use >> services like Cloudflare, Vercel, BunnyCDN or GitHub pages. >> >> A couple of weeks ago, the most important ISPs in Spain started >> intercepting or nullrouting IP addresses from this CDN providers. >> >> The reason is that a couple of local court orders allowed LA LIGA (sports >> association responsible for administering the two professional football >> leagues in Spain) to provide ISPs with a list of IP addresses that host >> soccer piracy sites to be taken down in a short period of time, even when >> the football match is taken place. >> >> The issue is that most of this piracy sites use Cloudflare and others to >> protect themselves, so ISPs are nullrouting or intercepting IP ranges that >> serve thousands of websites, including all Cloudflare Free customers (but >> not limited to). For example, they blocked one IP address that served >> ChatGPT. >> >> These blockages are applied when the soccer matches are played and they are >> turned off hours later. >> >> Cloudflare has already taken legal action against this, but the issue is >> still ongoing. >> >> You can find more information about this issue on TorrentFreak (LaLiga >> Blocks Cloudflare Again, New Pirate IPTV Providers & Anything in The Way), >> BandaanchaEU (bandaancha bloqueos del fútbol). >> >> *Regards,* >> *Raúl Martínez* >> _______________________________________________ >> NANOG mailing list >> https://lists.nanog.org/archives/list/nanog@lists.nanog.org/message/PCJ6SCD… > >

1 0

[NANOG] Small Capacity UPS
by Mike Hammett 14 Apr '25

14 Apr '25

I'm trying to find something that keeps my customer's network gear online for a meaningful amount of time. The challenge is that an ONT, firewall, switch, AP, and some IP phones doesn't add up to be very much load. Most normal UPSes get terribly inefficient at lower load ratings. Add up all of the network devices a customer may have and we rarely break 50 watts of load. Normal, small UPSes are lucky to break 50% efficiency at those loads whereas they may be 95% efficient at say 100 or 200 watts. Get a bigger unit with a bigger battery and now you're even less efficient. Get a big enough unit to have extendable batteries and now you're spending thousands of dollars for such a small request. I've gone asking, but haven't really gotten anywhere. The best technical solution was from some electronics parts nerds that was basically to build my own small rectifier and battery system. Great. I can achieve high efficiencies with small loads, letting me have say 4 or 8 hours of battery. However, I've got a science project, not something I can deploy at a customer. I'm hoping one of you has the magic bullet in what product a service provider should use in this scenario. Oh, and of course, being able to centrally manage them from my own iron would be great too. :-) ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com

30 84

[NANOG] Re: ISPs in Spain are blocking CDN IP ranges to tackle soccer piracy
by Mark Andrews 14 Apr '25

14 Apr '25

Theoretically IPv6 should provide enough addresses that a CDN doesn’t need to share an address between customers . Give each machine a /64 or longer and assign the customer a unique addresses within that prefix. Use the ability of modern kernels to bind to a range of addresses/interface and check the name to address mapping before returning content in addition to checking that it is configured for the name. You can share resources without sharing addresses. -- Mark Andrews > On 15 Apr 2025, at 03:00, Bryan Holloway via NANOG <nanog(a)lists.nanog.org> wrote: > > While we're at it, who needs L3. A flat L2 should suffice. > > >> On 4/14/25 18:00, Constantine A. Murenin via NANOG wrote: >> Here's an idea, why don't we centralise the entire internet behind a >> single network to "solve" the issue of connectivity and availability? >> Oh, wait! Nevermind! /s >> C. >>> On Mon, 14 Apr 2025 at 10:20, Raúl Martínez via NANOG >>> <nanog(a)lists.nanog.org> wrote: >>> Hello, Nanog, >>> This is an ongoing issue that might affect your spanish users if you use >>> services like Cloudflare, Vercel, BunnyCDN or GitHub pages. >>> A couple of weeks ago, the most important ISPs in Spain started >>> intercepting or nullrouting IP addresses from this CDN providers. >>> The reason is that a couple of local court orders allowed LA LIGA (sports >>> association responsible for administering the two professional football >>> leagues in Spain) to provide ISPs with a list of IP addresses that host >>> soccer piracy sites to be taken down in a short period of time, even when >>> the football match is taken place. >>> The issue is that most of this piracy sites use Cloudflare and others to >>> protect themselves, so ISPs are nullrouting or intercepting IP ranges that >>> serve thousands of websites, including all Cloudflare Free customers (but >>> not limited to). For example, they blocked one IP address that served >>> ChatGPT. >>> These blockages are applied when the soccer matches are played and they are >>> turned off hours later. >>> Cloudflare has already taken legal action against this, but the issue is >>> still ongoing. >>> You can find more information about this issue on TorrentFreak (LaLiga >>> Blocks Cloudflare Again, New Pirate IPTV Providers & Anything in The Way), >>> BandaanchaEU (bandaancha bloqueos del fútbol). >>> *Regards,* >>> *Raúl Martínez* >>> _______________________________________________ >>> NANOG mailing list >>> https://lists.nanog.org/archives/list/nanog@lists.nanog.org/message/PCJ6SCD… >> _______________________________________________ >> NANOG mailing list >> https://lists.nanog.org/archives/list/nanog@lists.nanog.org/message/TPJCY6R… > > _______________________________________________ > NANOG mailing list https://lists.nanog.org/archives/list/nanog@lists.nanog.org/message/CQITXJS…

2 1

[NANOG] Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 11 Apr '25

11 Apr '25

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG UKNOF, TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 12 Apr, 2025 IPv4 BGP Table (Global) as seen at Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 979819 Prefixes after maximum aggregation (per Origin AS): 376265 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 477215 Number of IPv4 prefixes with a valid ROA: 535000 Number of IPv4 prefixes with an invalid ROA: 1221 Number of IPv4 prefixes with no ROA: 443598 Total ASes present in the Internet Routing Table: 76835 Prefixes per ASN: 12.75 Origin-only ASes present in the Internet Routing Table: 65777 Origin ASes announcing only one prefix: 26884 Transit ASes present in the Internet Routing Table: 11058 Transit-only ASes present in the Internet Routing Table: 547 Average AS path length visible in the Internet Routing Table: 5.2 Max AS path length visible: 65 Max AS path prepend of ASN ( 37447) 57 Prefixes from unregistered ASNs in the Routing Table: 1090 Number of instances of unregistered ASNs: 1096 Number of 32-bit ASNs allocated by the RIRs: 46167 Number of 32-bit ASNs visible in the Routing Table: 38127 Prefixes from 32-bit ASNs in the Routing Table: 200829 Number of bogon 32-bit ASNs visible in the Routing Table: 38 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 460 Number of addresses announced to Internet: 3107618688 Equivalent to 185 /8s, 58 /16s and 127 /24s Percentage of available address space announced: 83.9 Percentage of allocated address space announced: 83.9 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 321865 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 257024 Total APNIC prefixes after maximum aggregation: 77125 APNIC Deaggregation factor: 3.33 Prefixes being announced from the APNIC address blocks: 248806 Unique aggregates announced from the APNIC address blocks: 102916 APNIC Region origin ASes present in the Internet Routing Table: 14619 APNIC Prefixes per ASN: 17.02 APNIC Region origin ASes announcing only one prefix: 4450 APNIC Region transit ASes present in the Internet Routing Table: 1967 Average APNIC Region AS path length visible: 5.5 Max APNIC Region AS path length visible: 56 Number of APNIC region 32-bit ASNs visible in the Routing Table: 10096 Number of APNIC addresses announced to Internet: 749229056 Equivalent to 44 /8s, 168 /16s and 84 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-155961 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 289398 Total ARIN prefixes after maximum aggregation: 129133 ARIN Deaggregation factor: 2.24 Prefixes being announced from the ARIN address blocks: 290369 Unique aggregates announced from the ARIN address blocks: 137599 ARIN Region origin ASes present in the Internet Routing Table: 19247 ARIN Prefixes per ASN: 15.09 ARIN Region origin ASes announcing only one prefix: 7022 ARIN Region transit ASes present in the Internet Routing Table: 1993 Average ARIN Region AS path length visible: 4.6 Max ARIN Region AS path length visible: 34 Number of ARIN region 32-bit ASNs visible in the Routing Table: 5186 Number of ARIN addresses announced to Internet: 1349620736 Equivalent to 80 /8s, 113 /16s and 148 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-402332 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 54/8, 55/8, 56/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 273308 Total RIPE prefixes after maximum aggregation: 133303 RIPE Deaggregation factor: 2.05 Prefixes being announced from the RIPE address blocks: 271132 Unique aggregates announced from the RIPE address blocks: 173631 RIPE Region origin ASes present in the Internet Routing Table: 28897 RIPE Prefixes per ASN: 9.38 RIPE Region origin ASes announcing only one prefix: 12050 RIPE Region transit ASes present in the Internet Routing Table: 4010 Average RIPE Region AS path length visible: 5.2 Max RIPE Region AS path length visible: 45 Number of RIPE region 32-bit ASNs visible in the Routing Table: 12383 Number of RIPE addresses announced to Internet: 731708288 Equivalent to 43 /8s, 156 /16s and 251 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-216475 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 53/8, 57/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 123811 Total LACNIC prefixes after maximum aggregation: 29299 LACNIC Deaggregation factor: 4.23 Prefixes being announced from the LACNIC address blocks: 120473 Unique aggregates announced from the LACNIC address blocks: 48867 LACNIC Region origin ASes present in the Internet Routing Table: 11236 LACNIC Prefixes per ASN: 10.72 LACNIC Region origin ASes announcing only one prefix: 2668 LACNIC Region transit ASes present in the Internet Routing Table: 2506 Average LACNIC Region AS path length visible: 5.9 Max LACNIC Region AS path length visible: 56 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 9188 Number of LACNIC addresses announced to Internet: 171772416 Equivalent to 10 /8s, 61 /16s and 10 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-274844 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 35188 Total AfriNIC prefixes after maximum aggregation: 6754 AfriNIC Deaggregation factor: 5.21 Prefixes being announced from the AfriNIC address blocks: 48579 Unique aggregates announced from the AfriNIC address blocks: 13808 AfriNIC Region origin ASes present in the Internet Routing Table: 1911 AfriNIC Prefixes per ASN: 25.42 AfriNIC Region origin ASes announcing only one prefix: 694 AfriNIC Region transit ASes present in the Internet Routing Table: 380 Average AfriNIC Region AS path length visible: 6.0 Max AfriNIC Region AS path length visible: 65 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 1274 Number of AfriNIC addresses announced to Internet: 105051904 Equivalent to 6 /8s, 66 /16s and 247 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 10314 8754 94 CHINAMOBILE-CN China Mobile Communication 7545 6214 843 656 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4780 4192 76 ERX-CERNET-BKB China Education and Resear 9498 4313 530 278 BBIL-AP BHARTI Airtel Ltd., IN 7552 3920 1332 26 VIETEL-AS-AP Viettel Group, VN 7713 3675 1044 66 TELKOMNET-AS-AP PT Telekomunikasi Indones 45899 3277 1869 102 VNPT-AS-VN VNPT Corp, VN 24560 2856 850 539 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., 4766 2382 11522 625 KIXS-AS-KR Korea Telecom, KR 45090 2205 1439 86 TENCENT-NET-AP Shenzhen Tencent Computer Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 13165 39690 4081 AMAZON-02, US 11492 4693 311 586 CABLEONE, US 7155 3829 286 85 VIASAT-SP-BACKBONE, US 6327 3622 1320 81 SHAW, CA 174 3420 8765 951 COGENT-174, US 22773 3396 3033 182 ASN-CXA-ALL-CCI-22773-RDC, US 749 3255 54879 2506 DNIC-AS-00749, US 16625 2978 1246 2203 AKAMAI-AS, US 396982 2951 3649 468 GOOGLE-CLOUD-PLATFORM, US 36352 2644 218 802 AS-COLOCROSSING, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 7706 1714 145 UNI2-AS, ES 39891 4797 293 62 ALJAWWALSTC-AS, SA 20940 3915 3395 129 AKAMAI-ASN1, NL 9009 3762 325 1956 M247, RO 12389 3077 2303 888 ROSTELECOM-AS, RU 34984 2363 360 581 TELLCOM-AS, TR 212238 2090 148 1540 CDNEXT, GB 8452 1637 1852 14 TE-AS TE-AS, EG 13188 1606 100 34 TRIOLAN, UA 62240 1481 98 745 CLOUVIDER Clouvider - Global ASN, GB Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 11934 3245 583 UNINET, MX 10620 3536 487 974 Telmex Colombia S.A., CO 13999 2512 539 364 Mega Cable, S.A. de C.V., MX 11830 1993 369 64 Instituto Costarricense de Electricidad y 28573 1357 2438 262 Claro NXT Telecomunicacoes Ltda, BR 3816 1333 784 206 COLOMBIA TELECOMUNICACIONES S.A. ESP BIC, 6147 1192 371 22 Telefonica del Peru S.A.A., PE 11664 1180 278 33 Techtel LMDS Comunicaciones Interactivas 22884 1050 67 378 TOTAL PLAY TELECOMUNICACIONES SA DE CV, M 6503 1043 374 163 Axtel, S.A.B. de C.V., MX Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24835 1702 599 30 RAYA-AS, EG 24863 1643 389 16 LINKdotNET-AS, EG 29571 1580 102 22 ORANGE-COTE-IVOIRE, CI 36992 1430 1518 287 ETISALAT-MISR, EG 36903 1249 554 96 MT-MPLS, MA 36935 1028 523 45 Vodafone-, EG 20011 981 185 285 INTERNET-SOLUTIONS, ZA 37069 932 1099 15 MOBINIL, EG 6713 561 1861 35 IAM-AS, MA 36914 545 82 3 KENET-AS, KE Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 13165 39690 4081 AMAZON-02, US 8151 11934 3245 583 UNINET, MX 9808 10314 8754 94 CHINAMOBILE-CN China Mobile Communication 12479 7706 1714 145 UNI2-AS, ES 7545 6214 843 656 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 4797 293 62 ALJAWWALSTC-AS, SA 4538 4780 4192 76 ERX-CERNET-BKB China Education and Resear 11492 4693 311 586 CABLEONE, US 9498 4313 530 278 BBIL-AP BHARTI Airtel Ltd., IN 7552 3920 1332 26 VIETEL-AS-AP Viettel Group, VN Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 8151 11934 11351 UNINET, MX 9808 10314 10220 CHINAMOBILE-CN China Mobile Communications Grou 12479 7706 7561 UNI2-AS, ES 7545 6214 5558 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 4797 4735 ALJAWWALSTC-AS, SA 4538 4780 4704 ERX-CERNET-BKB China Education and Research Net 11492 4693 4107 CABLEONE, US 9498 4313 4035 BBIL-AP BHARTI Airtel Ltd., IN 7552 3920 3894 VIETEL-AS-AP Viettel Group, VN 20940 3915 3786 AKAMAI-ASN1, NL Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 22542 UNALLOCATED 8.7.205.0/24 3356 LEVEL3, US 33123 UNALLOCATED 8.10.69.0/24 174 COGENT-174, US 12169 UNALLOCATED 8.15.207.0/24 32787 PROLEXIC-TECHNOLOGIES-D 46639 UNALLOCATED 8.17.66.0/24 701 UUNET, US 53775 UNALLOCATED 8.20.88.0/24 7029 WINDSTREAM, US 393266 UNALLOCATED 8.23.52.0/24 46887 CROWNCASTLE-AS46887, US 396894 UNALLOCATED 8.28.201.0/24 46887 CROWNCASTLE-AS46887, US 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE, US 54338 UNALLOCATED 8.33.241.0/24 3356 LEVEL3, US 46639 UNALLOCATED 8.38.73.0/24 3356 LEVEL3, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 14.192.20.0/22 Origin: 26658 HENGTONG-IDC-LLC, US 14.192.20.0/22 Transit: 6939 HURRICANE, US 23.137.68.0/24 Origin: 63129 AIRRABBIT-NETWORK, US 23.137.68.0/24 Transit: 6939 HURRICANE, US 23.137.100.0/24 Origin: 401616 PNL, US 23.137.100.0/24 Transit: 213622 BAREMETAL, AE 23.140.216.0/24 Origin: 27176 DATAWAGON, US 23.140.216.0/24 Transit: 20278 NEXEON, US 23.141.0.0/24 Origin: 395350 RESERVED, ZZ 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:16 /10:41 /11:93 /12:301 /13:582 /14:1216 /15:2142 /16:13944 /17:8343 /18:13826 /19:24822 /20:44541 /21:52270 /22:112495 /23:101738 /24:602633 /25:800 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 6628 7706 UNI2-AS, ES 8151 6139 11934 UNINET, MX 11492 3531 4693 CABLEONE, US 39891 3489 4797 ALJAWWALSTC-AS, SA 6327 3417 3622 SHAW, CA 7155 2787 3829 VIASAT-SP-BACKBONE, US 22773 2534 3396 ASN-CXA-ALL-CCI-22773-RDC, US 16509 2336 13165 AMAZON-02, US 30036 2213 2553 MEDIACOM-ENTERPRISE-BUSINESS, US 10620 2198 3536 Telmex Colombia S.A., CO Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1702 2:1518 3:614 4:10 5:4591 6:163 7:6 8:1551 9:1 11:172 12:1370 13:351 14:2548 15:352 16:279 17:367 18:923 20:480 21:4 22:188 23:7405 24:2844 25:2 27:2694 29:19 31:3233 32:40 34:80 35:204 36:2412 37:4668 38:8856 39:897 40:160 41:4212 42:950 43:2552 44:371 45:18511 46:4967 47:287 49:1927 50:1899 51:591 52:1553 54:299 55:873 56:11 57:249 58:2133 59:1359 60:1171 61:2793 62:2911 63:1833 64:5498 65:2172 66:4650 67:3066 68:1120 69:3978 70:1067 71:616 72:2836 74:2804 75:1604 76:617 77:2738 78:1872 79:1740 80:2211 81:2022 82:3113 83:1426 84:1839 85:3390 86:1041 87:2405 88:1285 89:4325 90:776 91:8319 92:2784 93:2893 94:4076 95:4309 96:1445 97:313 98:996 99:643 100:71 101:1171 102:3733 103:32232 104:4762 105:755 106:990 107:2615 108:1208 109:4097 110:2238 111:3371 112:2046 113:1538 114:1970 115:2149 116:2042 117:2735 118:2371 119:1925 120:1890 121:1420 122:2761 123:2172 124:1618 125:2887 126:91 128:1566 129:968 130:1269 131:1895 132:786 133:451 134:1524 135:332 136:1303 137:1155 138:2887 139:1600 140:1583 141:1483 142:1845 143:1635 144:1077 145:515 146:2165 147:2101 148:2657 149:2906 150:1243 151:1737 152:2104 153:503 154:7913 155:1638 156:3217 157:1881 158:1278 159:2445 160:3549 161:1895 162:3725 163:2021 164:1701 165:2206 166:1455 167:1883 168:4055 169:790 170:5092 171:1004 172:4456 173:3226 174:911 175:1293 176:3681 177:4716 178:3784 179:2303 180:2587 181:4062 182:3371 183:1816 184:2137 185:21487 186:5096 187:4427 188:4191 189:4194 190:9627 191:1462 192:11221 193:9428 194:7787 195:5519 196:3284 197:3693 198:6185 199:8455 200:8203 201:6288 202:10563 203:10541 204:4551 205:3664 206:4629 207:3564 208:4197 209:5194 210:4809 211:2633 212:4523 213:3772 214:1037 215:48 216:6610 217:3097 218:1385 219:538 220:2088 221:1069 222:848 223:2342 End of report

1 0

[NANOG] CHI-NOG 12 - Agenda - May 15th - Chicago
by Tom Kacprzynski 11 Apr '25

11 Apr '25

We are pleased to announce the agenda for the Chicago Network Operators Group's 12th annual conference (CHI-NOG 12), taking place on May 15th, 2025, in Chicago, IL. Agenda 1. AI Networking : How networking changed with pre-training, post-training and inference by *Petr Lapukhov (NVIDIA)* 2. Low Latency Networks : Networking at the Speed of Light - A peek at networking inside a high frequency trading firm by *Jeremy Filliben (Jump Trading)* 3. Network Modeling : Feasibility of State Space Models for Network Traffic Generation by *Nick Feamster (University of Chicago)* 4. Network Observability : What a Distributed Network Sees: Internet Observations from All Over by *John Kristoff (dataplane.org/UIC <http://dataplane.org/UIC>)* 5. Network Automation : Building Trustworthy Network Automation, From Principles to Practice by *Damien Garros (Opsmill)* 6. Routing : SRv6 Deployment Strategies by *Mike McBride (Futurewei)* 7. Datacenter Networking : Comfortable Complexity of Overlays by *Sergey Kolobov (Arista)* 8. Routing Security : Fighting Route Leaks at Cloudflare by *Bryton Herdes, Mingwei Zhang (Cloudflare)* 9. Routing Security : The Routing Security Crystal Ball: RPKI Yesterday, Today and Tomorrow by *Jon Worley (ARIN)* 10. SD-WAN : SD-WAN is dead, long live SD-WAN! by* Dane Jackson (Catonetworks)* 11. Network Automation : Vendor-Agnostic Automation with Ansible Network Resource Modules by* Brandon Ewing (IMC)* 12. Network Automation : Network Automation Pipelines - From Near-Zero to Hero in 30 Minutes by *Jon Howe Myriad360)* 13. Network Lab Tooling : ContainerLab: Building Multi-vendor labs as code by *Amer Fahar and Mo Zaman (Nokia)* 14. Network Automation : Operation Technology Approach to NetDevOps by *Phillip McGough* (Emerson) Detailed agenda can be found at https://chinog.org/chi-nog-12/agenda-12/ Regular registration is still open, but ending soon. For more details please see https://chinog.org/chi-nog-12/registration/ Thank you Tom Kacprzynski

1 0

[NANOG] ** NANOG 94 Sneak Peek! A (Tech) Road Less Traveled + MORE!
by Nanog News 10 Apr '25

10 Apr '25

*** NANOG 94 Sneak Peek!* ------------------------------------------------------------ *Coming Soon to the NANOG 94 Stage…* *Take a look at what’s in store for NANOG 94 — happening June 9–11 in Denver, CO!* *Upcoming Talks Include:* + DDOS Mitigation Fundamentals + The Comfortable Complexity of Overlays + PON in the Datacenter: Hyperscale for Management and Console + MORE! *New talks are being added every week, and we will publish the full agenda in mid-May.* *SEE MORE* <https://nanog.org/events/nanog-94/> ( https://nanog.org/events/nanog-94/) *** How Curiosity, Grit and Guts Built a Career in the Core of the Internet* ------------------------------------------------------------ *A (Tech) Road Less Traveled: Limor Jones Shares Her Story* "I may not know the answer now, but I’ll figure it out." That mindset has fueled Limor Jones' journey to Senior Network Engineer at Spark Wholesale Tribe. From configuring Nortel switches in the early days of the public Internet to spearheading backbone replacements, Limor's story reflects the self-taught spirit many in the NANOG community know well. *READ MORE* <https://nanog.org/stories/from-office-assistant-to-senior-network-engineer/> (https://nanog.org/stories/from-office-assistant-to-senior-network-engineer/ ) *** Don't Miss out on the N94 IPv6 Clinic!* ------------------------------------------------------------ *Taking Place June 11th at Sheraton Denver Downtown* In celebration of World IPv6 Day, we’re excited about the return of the IPv6 Clinic at NANOG 94, featuring AWS experts who will lead technical presentations, a hands-on workshop, and an interactive whiteboarding session. *Registration is required, but free for those who are registered for NANOG 94.* *MORE INFO* <https://nanog.org/events/n94-ipv6-clinic/>( https://nanog.org/events/n94-ipv6-clinic/) https://www.youtube.com/watch?v=sqDu0P82yjw *** Video of the Week: Panel — Network Automation Showdown* ------------------------------------------------------------ *Cat Gurinsky’s "Network Automation Showdowns" Series Returned at N93!* This time, they dove into a hot topic for every automation-minded engineer: Network Source of Truth (NSoT) Showdown Watch as they compare three leading open-source NSoT tools: NetBox, Nautobot, and the new kid on the block, Infrahub. Panelists: Shannon Byrnes, Barrie Cook, Michael Costello, Jason Edelman, Damien Garros *WATCH NOW* <https://www.youtube.com/watch?v=sqDu0P82yjw>( https://www.youtube.com/watch?v=sqDu0P82yjw) *** Become our NANOG Social Co-Host* ------------------------------------------------------------ *Co-Host our Next Conference's Social Event* The popular NANOG Social is where food, networking, and entertainment set the stage for three hours of branding and networking with our attendees. We do all the planning, and you get all the credit! *Contact Shawn Winstead *at swinstead(a)nanog.org (mailto:swinstead@nanog.org) for more details. *** Stay Connected* ------------------------------------------------------------ http://www.facebook.com http://www.instagram.com/nanog_org/ http://www.linkedin.com/company/nanog/ https://www.twitter.com/nanog/ http://nanog.org

1 0