March 2026 - NANOG - lists.nanog.org

New Meet-Me Room Scheduler at N97 + MORE!
by Nanog News 13 Mar '26

13 Mar '26

*** Welcome to Bellevue! Check out NANOG's Next Conference Location* ------------------------------------------------------------ *Fascinating Facts about the Bellevue Area* *Two generations ago it was a city known for farming strawberries.* Today, if you drew a small circle around this city, you’d capture engineers responsible for major portions of AWS, Azure, and one of the largest mobile Networks in the U.S. *READ MORE* ( https://nanog.org/stories/bellevue-nanogs-next-conference-location/) https://nanog.org/program/call-content/ *** Reminder: NANOG 97 Call for Content!* ------------------------------------------------------------ *Don't Miss Your Opportunity to Share Your Next Big Idea* We are aiming to highlight presentations focusing on Site Reliability Engineering. Potential site reliability engineering topics include monitoring and observability, incident management, capacity planning, and change management. As always, other topics are welcomed, too! *MORE INFO* (https://nanog.org/program/call-content/) *** New Meet-Me Room Scheduler at N97* ------------------------------------------------------------ *Designated Gathering Space to Meet Peers, Discuss, Troubleshoot + Connect!* NANOG’s Meet-Me Room is designed as a convenient hub for connection and collaboration among attendees. The new Meet-Me Room scheduler will launch in a couple of weeks for in-person attendees. *LEARN MORE *https://www.compudopt.org/giftsforgrads *** Spotlight on Compudopt: Gifts for Grads* ------------------------------------------------------------ Graduation season is coming, but too many seniors lack the tech required for college, job applications, and workforce training. Explore how your company can support high school graduates! *LEARN MORE* (https://www.compudopt.org/giftsforgrads) *** Stay Connected* ------------------------------------------------------------ http://www.facebook.com http://www.instagram.com/nanog_org/ http://www.linkedin.com/company/nanog/ https://www.twitter.com/nanog/ http://nanog.org

1 0

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 13 Mar '26

13 Mar '26

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG UKNOF, TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 14 Mar, 2026 IPv4 BGP Table (Global) as seen at Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 1041281 Prefixes after maximum aggregation (per Origin AS): 398949 Deaggregation factor: 2.61 Unique aggregates announced (without unneeded subnets): 511637 Number of IPv4 prefixes with a valid ROA: 622613 Number of IPv4 prefixes with an invalid ROA: 1402 Number of IPv4 prefixes with no ROA: 417266 Total ASes present in the Internet Routing Table: 78116 Prefixes per ASN: 13.33 Origin-only ASes present in the Internet Routing Table: 67130 Origin ASes announcing only one prefix: 27287 Transit ASes present in the Internet Routing Table: 10986 Transit-only ASes present in the Internet Routing Table: 563 Average AS path length visible in the Internet Routing Table: 4.7 Max AS path length visible: 69 Max AS path prepend of ASN (269326) 61 Prefixes from unregistered ASNs in the Routing Table: 1084 Number of instances of unregistered ASNs: 1126 Number of 32-bit ASNs allocated by the RIRs: 48956 Number of 32-bit ASNs visible in the Routing Table: 40095 Prefixes from 32-bit ASNs in the Routing Table: 224710 Number of bogon 32-bit ASNs visible in the Routing Table: 122 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 408 Number of addresses announced to Internet: 3108232320 Equivalent to 185 /8s, 67 /16s and 220 /24s Percentage of available address space announced: 84.0 Percentage of allocated address space announced: 84.0 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 338608 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 285387 Total APNIC prefixes after maximum aggregation: 82256 APNIC Deaggregation factor: 3.47 Prefixes being announced from the APNIC address blocks: 272475 Unique aggregates announced from the APNIC address blocks: 107001 APNIC Region origin ASes present in the Internet Routing Table: 15148 APNIC Prefixes per ASN: 17.99 APNIC Region origin ASes announcing only one prefix: 4651 APNIC Region transit ASes present in the Internet Routing Table: 1997 Average APNIC Region AS path length visible: 4.7 Max APNIC Region AS path length visible: 32 Number of APNIC region 32-bit ASNs visible in the Routing Table: 10688 Number of APNIC addresses announced to Internet: 752848000 Equivalent to 44 /8s, 223 /16s and 140 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-155961 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 305157 Total ARIN prefixes after maximum aggregation: 137339 ARIN Deaggregation factor: 2.22 Prefixes being announced from the ARIN address blocks: 303832 Unique aggregates announced from the ARIN address blocks: 147120 ARIN Region origin ASes present in the Internet Routing Table: 19395 ARIN Prefixes per ASN: 15.67 ARIN Region origin ASes announcing only one prefix: 7069 ARIN Region transit ASes present in the Internet Routing Table: 1924 Average ARIN Region AS path length visible: 4.3 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 5501 Number of ARIN addresses announced to Internet: 1349063680 Equivalent to 80 /8s, 105 /16s and 20 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-402332 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 54/8, 55/8, 56/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 285527 Total RIPE prefixes after maximum aggregation: 141031 RIPE Deaggregation factor: 2.02 Prefixes being announced from the RIPE address blocks: 288229 Unique aggregates announced from the RIPE address blocks: 187413 RIPE Region origin ASes present in the Internet Routing Table: 29307 RIPE Prefixes per ASN: 9.83 RIPE Region origin ASes announcing only one prefix: 12155 RIPE Region transit ASes present in the Internet Routing Table: 3975 Average RIPE Region AS path length visible: 4.8 Max RIPE Region AS path length visible: 29 Number of RIPE region 32-bit ASNs visible in the Routing Table: 13156 Number of RIPE addresses announced to Internet: 732425344 Equivalent to 43 /8s, 167 /16s and 236 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-216475 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 53/8, 57/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 127296 Total LACNIC prefixes after maximum aggregation: 30669 LACNIC Deaggregation factor: 4.15 Prefixes being announced from the LACNIC address blocks: 123041 Unique aggregates announced from the LACNIC address blocks: 50183 LACNIC Region origin ASes present in the Internet Routing Table: 11355 LACNIC Prefixes per ASN: 10.84 LACNIC Region origin ASes announcing only one prefix: 2678 LACNIC Region transit ASes present in the Internet Routing Table: 2533 Average LACNIC Region AS path length visible: 5.4 Max LACNIC Region AS path length visible: 69 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 9369 Number of LACNIC addresses announced to Internet: 170366080 Equivalent to 10 /8s, 39 /16s and 148 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-275868 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 36830 Total AfriNIC prefixes after maximum aggregation: 6960 AfriNIC Deaggregation factor: 5.29 Prefixes being announced from the AfriNIC address blocks: 53296 Unique aggregates announced from the AfriNIC address blocks: 19560 AfriNIC Region origin ASes present in the Internet Routing Table: 2016 AfriNIC Prefixes per ASN: 26.44 AfriNIC Region origin ASes announcing only one prefix: 734 AfriNIC Region transit ASes present in the Internet Routing Table: 390 Average AfriNIC Region AS path length visible: 5.3 Max AfriNIC Region AS path length visible: 53 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 1381 Number of AfriNIC addresses announced to Internet: 103333376 Equivalent to 6 /8s, 40 /16s and 190 /24s AfriNIC AS Blocks 36864-37887, 327680-330751 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 13819 8945 105 CHINAMOBILE-CN China Mobile Communication 7545 5974 830 524 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 5027 4193 77 ERX-CERNET-BKB China Education and Resear 9498 4869 548 321 BBIL-AP BHARTI Airtel Ltd., IN 18403 4552 347 25 FPT-AS-AP FPT Telecom Company, VN 7552 4021 1332 29 VIETEL-AS-AP Viettel Group, VN 7713 3676 1044 65 TELKOMNET-AS-AP PT Telekomunikasi Indones 56046 3466 887 178 CMNET-JIANGSU-AP China Mobile communicati 45899 3344 1868 99 VNPT-AS-VN VNPT Corp, VN 24560 3009 865 516 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 14467 41235 5560 AMAZON-02 - Amazon.com, Inc., US 22773 4780 3118 369 ASN-CXA-ALL-CCI-22773-RDC - Cox Communica 11492 4647 308 1020 CABLEONE - CABLE ONE, INC., US 7155 3861 286 85 VIASAT-SP-BACKBONE - ViaSat,Inc., US 6327 3708 1321 75 SHAW - Shaw Communications, CA 396982 3290 4856 485 GOOGLE-CLOUD-PLATFORM - Google LLC, US 174 3271 8767 853 COGENT-174 - Cogent Communications, LLC, 749 3141 54728 2392 DNIC-AS-00749 - United States Department 36352 2700 221 890 AS-COLOCROSSING - HostPapa, US 16625 2690 1172 2088 AKAMAI-AS - Akamai Technologies, Inc., US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 7203 1711 149 UNI2-AS, ES 39891 4969 306 72 ALJAWWALSTC-AS, SA 9009 3833 356 2248 M247, RO 20940 3827 3393 113 AKAMAI-ASN1, NL 12389 3174 2321 868 ROSTELECOM-AS PJSC Rostelecom. Technical 212238 2670 193 1957 CDNEXT, GB 34984 2463 366 569 TELLCOM-AS, TR 8452 1701 1852 17 TE-AS TE-AS, EG 203020 1609 243 787 HOSTROYALE, IN 13188 1607 100 27 TRIOLAN, UA Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 12806 3302 595 UNINET, MX 10620 3453 458 1104 Telmex Colombia S.A., CO 13999 2455 506 346 Mega Cable, S.A. de C.V., MX 11830 1956 369 65 Instituto Costarricense de Electricidad y 11664 1453 278 33 Techtel LMDS Comunicaciones Interactivas 28573 1371 2430 272 Claro NXT Telecomunicacoes Ltda, BR 3816 1342 770 213 COLOMBIA TELECOMUNICACIONES S.A. ESP BIC, 6147 1234 371 22 INTEGRATEL PERU S.A.A., PE 26615 1057 2475 94 TIM SA, BR 22884 1055 66 357 TOTAL PLAY TELECOMUNICACIONES SA DE CV, M Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24835 2044 648 34 RAYA-AS, EG 36992 1845 1531 336 ETISALAT-MISR, EG 24863 1288 389 16 LINKdotNET-AS, EG 36903 1232 555 98 MT-MPLS, MA 36935 1229 521 44 Vodafone-, EG 37069 1109 1100 11 MOBINIL, EG 29571 1072 78 20 ORANGE-COTE-IVOIRE, CI 20011 580 154 212 NTT-DATA-Inc, ZA 36914 552 82 3 KENET-AS, KE 15399 549 56 55 WANANCHI-, KE Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 14467 41235 5560 AMAZON-02 - Amazon.com, Inc., US 9808 13819 8945 105 CHINAMOBILE-CN China Mobile Communication 8151 12806 3302 595 UNINET, MX 12479 7203 1711 149 UNI2-AS, ES 7545 5974 830 524 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 5027 4193 77 ERX-CERNET-BKB China Education and Resear 39891 4969 306 72 ALJAWWALSTC-AS, SA 9498 4869 548 321 BBIL-AP BHARTI Airtel Ltd., IN 22773 4780 3118 369 ASN-CXA-ALL-CCI-22773-RDC - Cox Communica 11492 4647 308 1020 CABLEONE - CABLE ONE, INC., US Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 13819 13714 CHINAMOBILE-CN China Mobile Communications Grou 8151 12806 12211 UNINET, MX 12479 7203 7054 UNI2-AS, ES 7545 5974 5450 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 5027 4950 ERX-CERNET-BKB China Education and Research Net 39891 4969 4897 ALJAWWALSTC-AS, SA 9498 4869 4548 BBIL-AP BHARTI Airtel Ltd., IN 18403 4552 4527 FPT-AS-AP FPT Telecom Company, VN 22773 4780 4411 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 7552 4021 3992 VIETEL-AS-AP Viettel Group, VN Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 393266 UNALLOCATED 8.23.52.0/24 46887 CROWNCASTLE-AS46887 - C 396894 UNALLOCATED 8.28.201.0/24 3356 LEVEL3 - Level 3 Parent 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE - Phonos 395195 UNALLOCATED 8.38.115.0/24 3356 LEVEL3 - Level 3 Parent 1782 UNALLOCATED 8.42.19.0/24 3356 LEVEL3 - Level 3 Parent 13342 UNALLOCATED 12.17.5.0/24 174 COGENT-174 - Cogent Com 26345 UNALLOCATED 12.21.93.0/24 40264 TWC-40264-WI-MN-UPPERMI 396831 UNALLOCATED 12.23.198.0/24 7018 ATT-INTERNET4 - AT&T En 397665 UNALLOCATED 12.24.28.0/24 7018 ATT-INTERNET4 - AT&T En 395476 UNALLOCATED 12.36.194.0/24 7018 ATT-INTERNET4 - AT&T En Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE - Hurricane Electric LLC, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.137.48.0/24 Origin: 16904 ARVIG-16904 - Arvig Enterprises Inc., US 23.137.48.0/24 Transit: 3257 GTT-BACKBONE GTT, US 23.137.200.0/24 Origin: 16276 OVH, FR 23.137.200.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.140.216.0/24 Origin: 27176 DATAWAGON - DataWagon LLC, US 23.140.216.0/24 Transit: 20278 NEXEON - Nexeon Technologies, Inc., US 23.141.0.0/24 Origin: 395350 RESERVED, ZZ 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS - Charter Communicat 23.142.24.0/24 Origin: 62164 HEYMMAN-2, CA 23.142.24.0/24 Transit: 64236 UNREAL-SERVERS - UnReal Servers, LLC, US Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:14 /10:40 /11:95 /12:297 /13:582 /14:1190 /15:2097 /16:13649 /17:8374 /18:13378 /19:25664 /20:46928 /21:52902 /22:114226 /23:107820 /24:653317 /25:692 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 8151 6969 12806 UNINET, MX 12479 6140 7203 UNI2-AS, ES 39891 3655 4969 ALJAWWALSTC-AS, SA 11492 3507 4647 CABLEONE - CABLE ONE, INC., US 6327 3488 3708 SHAW - Shaw Communications, CA 22773 3048 4780 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc., US 7155 2820 3861 VIASAT-SP-BACKBONE - ViaSat,Inc., US 16509 2587 14467 AMAZON-02 - Amazon.com, Inc., US 30036 2316 2664 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communications Corp, US 10620 2233 3453 Telmex Colombia S.A., CO Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:2521 2:1595 3:996 4:5 5:5124 6:196 7:6 8:1521 9:29 11:172 12:1198 13:644 14:2710 15:459 16:167 17:420 18:918 20:603 21:4 22:188 23:8150 24:2858 25:2 27:2755 29:19 31:3417 32:31 34:87 35:295 36:4621 37:4460 38:9967 39:1269 40:419 41:4538 42:2082 43:2969 44:442 45:19944 46:4913 47:411 48:89 49:2200 50:2074 51:602 52:1307 54:279 55:1095 56:11 57:321 58:2421 59:1436 60:1175 61:3114 62:3120 63:1761 64:6263 65:2118 66:6024 67:3262 68:1501 69:4223 70:1048 71:616 72:3121 74:2997 75:1496 76:591 77:2845 78:1913 79:1792 80:2352 81:2218 82:4017 83:1445 84:2050 85:3812 86:1103 87:2421 88:1357 89:4718 90:798 91:8439 92:2838 93:3011 94:4324 95:4630 96:1445 97:314 98:949 99:800 100:68 101:1349 102:4476 103:32452 104:5484 105:814 106:925 107:2860 108:1234 109:4226 110:2295 111:4128 112:3159 113:1982 114:2186 115:2228 116:2177 117:3431 118:2955 119:2106 120:2710 121:1573 122:3006 123:2265 124:1693 125:3007 126:125 128:1676 129:974 130:1601 131:2480 132:805 133:463 134:1651 135:586 136:1599 137:1428 138:3170 139:1634 140:1844 141:1591 142:2561 143:2149 144:1735 145:630 146:2208 147:2155 148:2734 149:3060 150:1332 151:2696 152:2257 153:953 154:9540 155:2306 156:4382 157:2258 158:1503 159:2773 160:3826 161:1948 162:4022 163:2392 164:2035 165:2623 166:1303 167:2251 168:4006 169:896 170:5558 171:1105 172:4594 173:3472 174:886 175:1350 176:3828 177:4908 178:4333 179:2302 180:3022 181:4449 182:4012 183:2818 184:2014 185:21796 186:5720 187:5004 188:4563 189:4502 190:9747 191:1589 192:11521 193:9610 194:7855 195:5740 196:3314 197:3245 198:6277 199:6125 200:8241 201:6416 202:10898 203:10559 204:4754 205:3806 206:4547 207:4034 208:4380 209:5455 210:5002 211:2779 212:5019 213:4111 214:1051 215:46 216:7269 217:3546 218:1732 219:589 220:2159 221:1314 222:1077 223:3343 End of report

1 0

Mapping Mesh Infrastructure and Protocol Hijacking
by Joseph Goydish II 13 Mar '26

13 Mar '26

I’ve been tracking some non-standard networking patterns on iOS that seem to be operating in a blind spot. Detection relies on parsing TraceV3 binary data to actually spot, specifically looking for hex-coded IP patterns in the logs. A few things I've been seeing: - Port 5223 (APNs) redirection: System traffic being tossed to non-Apple ASNs. - Non-standard tunneling: Persistent P2P sync on ports 44 and 522. - Global reach: Active clusters popping up across Russia, China, the US, Mexico etc. I put together a live dashboard to track these IPs and ASNs as they're enriched. If anyone else is seeing weird routing anomalies or similar "shadow" egress points at the backbone level, I'd love to hear your thoughts. Dashboard link: https://www.perplexity.ai/computer/a/ios-threat-tracker-y2BPW5oISauRTNFBcx9… Thank you, Joseph II

2 3

Google's GSLB gone wrong: Southern Europe goes Middle East (UAE / lcmcta)
by Lukas Tribus 13 Mar '26

13 Mar '26

Hello, here's an interesting case of a global load balancing SNAFU: Google DNS-load-balances traffic based on the customers /24 between the available PoPs for the specific geolocation area. *SOME* those /24s at *ALL* ISPs in Southern Europe are going to the Middle East, more specifically the UAE (PTR prefix is "lcmcta"). So the the customers in Southern Europe hit Google Frontends on another continent, obviously with a latency well above 100ms. It appears all of Southern Europe is impacted, I have found this to be the case for at least: - Italy - Croatia - Hungary - Serbia - Romania - Bulgaria - Albania - Greece - Malta This affects websites like google.com, mail.google.com and youtube.com (although most likely not the video streaming itself though). The impact due to the latency and traffic is probably not extreme; AFAIK it does not affect Youtube stream itself (just the main website). It has been going on for probably a week or more, Google NOC Ticket 2588682096 is open since March 10th, 2176711238 since March 11th, but no luck so far in those tickets. The balancing occurs via the authoritative DNS servers at Google, looking either at the EDNS client subnet (also used with 8.8.8.8 but not 1.1.1.1), or without ENDS at the source IP of the DNS request. Thanks to EDNS client subnet this can be easily simulated; in the following example we see that for clients in 2.112.4.0/24 (Telecom Italia), the Google Frontend IP is 142.250.186.238 which is a unicast Google node in the United Arab Emirates (PTR prefix is "lcmcta"): $ dig +short +subnet=2.112.4.0/24 -tA @ns1.google.com. google.com. 142.250.186.238 $ dig +short -x 142.250.186.238 lcmcta-af-in-f14.1e100.net. $ More data from 6 large networks in Italy is available here, but again it affects every single ISP in the multiple countries: https://github.com/lukastribus/ggc-italy-middle-east-routing The most likely reason for this I believe is a misconfigured GGC cluster or Edge PoP in the United Arab Emirates - the error being that it is erroneously set to serve content to clients in Southern Europe as well a Middle East. If I were to speculate even further, this may be have been an emergency response related to the ongoing attacks in the region. If someone would happen to have a contact that can escalate the aforementioned Google Tickets 2588682096 and 2176711238 to the correct teams, that would be very much appreciated. I hope this was an interesting read :) cheers, lukas

3 4

PCCW contact
by Randy (K6RP) 12 Mar '26

12 Mar '26

Hi all, Does anyone have a BGP/network contact at PCCW? We have an ancient prefix from their IP space that appears to have been RPKI invalidated and need help. -- ~Randy

2 1

Unable to Resolve .mil from some subnets
by Alex Buie 11 Mar '26

11 Mar '26

Facing an interesting problem with .mil and wondering if anyone has experienced this or has any ideas. The .mil nameservers appear to be unresponsive to requests from some of our subnets (AS396163) starting in the last day or two. Specifically seems to be these: mil. 172800 IN NS con1.nipr.mil. mil. 172800 IN NS con2.nipr.mil. mil. 172800 IN NS eur1.nipr.mil. mil. 172800 IN NS eur2.nipr.mil. mil. 172800 IN NS pac1.nipr.mil. mil. 172800 IN NS pac2.nipr.mil. 199.252.157.234 / 199.252.162.234 / 199.252.154.234 / 199.252.143.234 / 199.252.180.234 / 199.252.155.234 Subnets that are able to reach / query these servers: 104.234.21.0/24 104.234.31.0/24 Subnets that are not able to query these servers: 166.0.64.0/24 166.0.65.0/24 166.0.66.0/24 166.0.67.0/24 These subnets are announced out of the same carrier mix (Zayo/Cogent/Lumen) but are geographically distributed around the US. I have checked an RPKI validator to see if there was a difference between the working and non-working ones, but all are showing RPKI valid. Path-wise we either take Zayo which hands off to Lumen or we take Lumen directly, but that does not seem to have an affect on the queries returning. I did notice that the working ones have an ISPSS Level3 hop at the end of the chain, whereas the non-working ones have a hop into an edge for lumen.tech but no further responses. Curious if anyone else has found a change or difficulty reaching these hosts or are seeing DNS resolution issues for .mil TLD domains. Also open to troubleshooting ideas for further isolating the cause. Thanks! Alex

1 1

IANA AS Numbers Registry Update
by David Dong 11 Mar '26

11 Mar '26

Hi, The IANA AS Numbers registry has been updated to reflect the allocation of the following block to AFRINIC: 329728-330751 You can find the registry at: https://www.iana.org/assignments/as-numbers/ The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Best Regards, David Dong IANA Services Sr. Specialist

1 0

Issue with some unnamed ISP's in northern north america, RFC 1918 Violation
by wolf1098＠pm.me 11 Mar '26

11 Mar '26

One of the fibre providers, they are issuing static ips, which is good, but the way the statics are handled. The modem/router, if you want static ips, requires it to be in router mode, you can't bridge. it seems the router's static ip gateway does some bgp towards the isp to route the static ip's block assigned to the customer to it, via its dhcp established route??? idk. ------ THE big issue, which is, since it has to be in router mode. they end up with a dynamic ip, that is the gateway for dhcp RFC1918 addresses, that are on its lan, sounds reasonable, but as a tertiary use, the static ip WAN gw stack, LOADS IN ON the same L2 lan bridge, side by side with the RFC 1918 space, without even attempting to put it in a tagged vlan. don't do this.... without using a custom linux router, good luck using both the static ips block, and the double 'natted' dynamic ip.

3 2

AusNOG 2026 - Call For Papers is Open!
by Mark 10 Mar '26

10 Mar '26

Hello NANOG :) The Program Committee is very happy to announce that the AusNOG 2026 Call For Papers is now open! We are looking for presentations that an audience working predominantly in the network operating space will find interesting and useful. As always, we do not accept marketing or sales material as part of any presentation. The CfP will close on May 15th 2026. This allows time for the Program Committee to review papers and choose the program. Please express your interest and submit a short abstract of the topic you'd like to present, via our portal; https://cfp.ausnog.net/ Thank you, and hope to see you this September in sunny Brisbane, Australia for AusNOG 2026! Event dates and details here; https://www.ausnog.net/ Kind Regards, Mark on behalf of the AusNOG 2026 Program Committee

1 0

Standard MTU for SJFs and support for MEF 3.0 AI payloads
by Carl Fredrik Lagerfeldt 10 Mar '26

10 Mar '26

Hi Friends! Everyone loves debating MTU sizes, right?! With the upcoming new MEF3.0 (AI) standard potentially requiring support for higher than 9100 byte payloads, I'm trying to decide on a good new "standard" to configure on internal backbone/IGP links. We're effectively talking about "Super Jumbo Frames", or SJFs, looking to support at least 9400 payloads (to be future proof). With previous hardware generations limiting most of us to 9216, a lot of ISPs chose 9192 as the base Ethernet MTU (= 9178 IP), allowing for simple underlays (e.g. vlan-tunneling IGP connections through L2 switches) if necessary. While it's of course only a requirement to keep a consistent MTU across your own network, there are benefits to using industry standardized value(s), as some of the current generation hardware limits the number of different MTU values you’re able to configure in parallel on the same NP. Looking at my own network, I have a hard limit right now at 9646 bytes (NCS 5700, Jericho2). Potential new MTUs I'm considering: - 9622 (supporting 24 bytes underlay, like we had for 9192) - 9530 (supporting 116 bytes underlay, same as MEF3.0 [9100] has from 9216) With us looking at deploying SRv6, looking at an IPv6 SRH with 4 SIDs: Ethernet (14) [+ VLAN (4)] + IPv6 (40) + SRH (72) = 130 bytes total By chance this is matching the total frame size with a customer payload of 9400. Is 9530 a good value? What would you configure? (Am I simply overthinking this?) BR, // CF

4 3