- NANOG - lists.nanog.org

Re: RPKI unknown for superprefixes of existing ROA ?
by Willy Manga 23 Oct '23

23 Oct '23

. On 23/10/2023 16:00, nanog-request(a)nanog.org wrote: > Message: 19 Date: Sun, 22 Oct 2023 14:20:56 -0400 From: Amir Herzberg > <amir.lists(a)gmail.com>I agree that a good, sensible > defense would be to simply announce your entire address block, e.g., in > the example, your entire /22 (with a ROA to your ASN), and filter the > traffic to the unused prefixes. Basically, I guess, it means that the AS > 0 solution shouldn't be used, at least not usually. I wonder if anyone > is using it , in fact. It would be nice to know if someone has the data > handy. https://console.rpki-client.org/AS0.html -- Willy Manga @ongolaboy https://ongola.blogspot.com/

1 0

remembering abha
by Randy Bush 21 Oct '23

21 Oct '23

another tragic october death was that of abha ahuja, researcher, operator, and amazing person, this day in 2001. worth a search. jake's http://www.neebu.net/~khuon/abha/ is a start. randy

3 2

ARIN election statistics, eligible-to-vote ASNs/Org IDs vs. number of votes cast
by Eric Kuhnke 20 Oct '23

20 Oct '23

Does anyone have general statistics on: a) Number of eligible voting org IDs b) Percentage of eligible voting org IDs which actually cast ballots in previous ARIN elections

2 2

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 20 Oct '23

20 Oct '23

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG UKNOF, TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 21 Oct, 2023 BGP Table (Global) as seen in Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 933249 Prefixes after maximum aggregation (per Origin AS): 354499 Deaggregation factor: 2.63 Unique aggregates announced (without unneeded subnets): 453979 Total ASes present in the Internet Routing Table: 74961 Prefixes per ASN: 12.45 Origin-only ASes present in the Internet Routing Table: 64309 Origin ASes announcing only one prefix: 26493 Transit ASes present in the Internet Routing Table: 10652 Transit-only ASes present in the Internet Routing Table: 466 Average AS path length visible in the Internet Routing Table: 4.2 Max AS path length visible: 55 Max AS path prepend of ASN (265020) 50 Prefixes from unregistered ASNs in the Routing Table: 1050 Number of instances of unregistered ASNs: 1053 Number of 32-bit ASNs allocated by the RIRs: 42880 Number of 32-bit ASNs visible in the Routing Table: 35270 Prefixes from 32-bit ASNs in the Routing Table: 176608 Number of bogon 32-bit ASNs visible in the Routing Table: 25 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 527 Number of addresses announced to Internet: 3050844928 Equivalent to 181 /8s, 216 /16s and 51 /24s Percentage of available address space announced: 82.4 Percentage of allocated address space announced: 82.4 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 310313 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 247818 Total APNIC prefixes after maximum aggregation: 71198 APNIC Deaggregation factor: 3.48 Prefixes being announced from the APNIC address blocks: 241168 Unique aggregates announced from the APNIC address blocks: 99178 APNIC Region origin ASes present in the Internet Routing Table: 13716 APNIC Prefixes per ASN: 17.58 APNIC Region origin ASes announcing only one prefix: 4119 APNIC Region transit ASes present in the Internet Routing Table: 1823 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 32 Number of APNIC region 32-bit ASNs visible in the Routing Table: 9041 Number of APNIC addresses announced to Internet: 771026304 Equivalent to 45 /8s, 244 /16s and 237 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-153913 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 273822 Total ARIN prefixes after maximum aggregation: 124061 ARIN Deaggregation factor: 2.21 Prefixes being announced from the ARIN address blocks: 277696 Unique aggregates announced from the ARIN address blocks: 132182 ARIN Region origin ASes present in the Internet Routing Table: 19078 ARIN Prefixes per ASN: 14.56 ARIN Region origin ASes announcing only one prefix: 6954 ARIN Region transit ASes present in the Internet Routing Table: 1971 Average ARIN Region AS path length visible: 3.7 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4822 Number of ARIN addresses announced to Internet: 1277548800 Equivalent to 76 /8s, 37 /16s and 217 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 261666 Total RIPE prefixes after maximum aggregation: 124024 RIPE Deaggregation factor: 2.11 Prefixes being announced from the RIPE address blocks: 256866 Unique aggregates announced from the RIPE address blocks: 160285 RIPE Region origin ASes present in the Internet Routing Table: 28450 RIPE Prefixes per ASN: 9.03 RIPE Region origin ASes announcing only one prefix: 12103 RIPE Region transit ASes present in the Internet Routing Table: 3946 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 30 Number of RIPE region 32-bit ASNs visible in the Routing Table: 11387 Number of RIPE addresses announced to Internet: 716460672 Equivalent to 42 /8s, 180 /16s and 82 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-216475 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 119000 Total LACNIC prefixes after maximum aggregation: 28497 LACNIC Deaggregation factor: 4.18 Prefixes being announced from the LACNIC address blocks: 117935 Unique aggregates announced from the LACNIC address blocks: 49227 LACNIC Region origin ASes present in the Internet Routing Table: 11044 LACNIC Prefixes per ASN: 10.68 LACNIC Region origin ASes announcing only one prefix: 2685 LACNIC Region transit ASes present in the Internet Routing Table: 2348 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 55 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8874 Number of LACNIC addresses announced to Internet: 178350848 Equivalent to 10 /8s, 161 /16s and 107 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-273820 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 29893 Total AfriNIC prefixes after maximum aggregation: 5995 AfriNIC Deaggregation factor: 4.99 Prefixes being announced from the AfriNIC address blocks: 39057 Unique aggregates announced from the AfriNIC address blocks: 12670 AfriNIC Region origin ASes present in the Internet Routing Table: 1805 AfriNIC Prefixes per ASN: 21.64 AfriNIC Region origin ASes announcing only one prefix: 632 AfriNIC Region transit ASes present in the Internet Routing Table: 347 Average AfriNIC Region AS path length visible: 4.9 Max AfriNIC Region AS path length visible: 28 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 1146 Number of AfriNIC addresses announced to Internet: 107034112 Equivalent to 6 /8s, 97 /16s and 54 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 9497 8730 43 CHINAMOBILE-CN China Mobile Communicati 7545 5715 785 698 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4945 4192 75 ERX-CERNET-BKB China Education and Rese 18403 4188 347 25 FPT-AS-AP FPT Telecom Company, VN 7713 3596 1043 63 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 3327 1840 96 VNPT-AS-VN VNPT Corp, VN 9498 3214 492 240 BBIL-AP BHARTI Airtel Ltd., IN 7552 2952 1330 20 VIETEL-AS-AP Viettel Group, VN 24560 2553 849 378 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd 4766 2539 11270 601 KIXS-AS-KR Korea Telecom, KR Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 9145 11002 3277 AMAZON-02, US 11492 4538 301 676 CABLEONE, US 7155 4172 288 100 VIASAT-SP-BACKBONE, US 6327 3547 1320 67 SHAW, CA 22773 3520 3055 299 ASN-CXA-ALL-CCI-22773-RDC, US 749 3160 54957 2412 DNIC-AS-00749, US 367 3078 3849 1442 DNIC-ASBLK-00306-00371, US 16625 3044 1405 2316 AKAMAI-AS, US 396982 2704 3598 397 GOOGLE-CLOUD-PLATFORM, US 7018 2532 23613 1585 ATT-INTERNET4, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 7394 1713 145 UNI2-AS, ES 39891 4897 290 61 ALJAWWALSTC-AS, SA 20940 4091 3397 148 AKAMAI-ASN1, NL 8551 3449 368 34 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 9009 3102 277 1525 M247, RO 12389 2970 2295 914 ROSTELECOM-AS, RU 34984 2332 362 592 TELLCOM-AS, TR 58224 1701 920 523 TCI, IR 13188 1606 100 27 TRIOLAN, UA 8452 1522 1852 14 TE-AS TE-AS, EG Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 11879 3372 605 UNINET, MX 10620 3542 504 858 Telmex Colombia S.A., CO 13999 2418 333 627 Mega Cable, S.A. de C.V., MX 11830 2001 369 64 Instituto Costarricense de Electricidad 28573 1332 2322 236 Claro NXT Telecomunicacoes Ltda, BR 3816 1298 770 191 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6503 1283 343 510 Axtel, S.A.B. de C.V., MX 6147 1110 369 22 Telefonica del Peru S.A.A., PE 11664 1054 168 425 Techtel LMDS Comunicaciones Interactiva 26615 1040 2501 51 TIM SA, BR Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1606 393 19 LINKdotNET-AS, EG 24835 1549 549 28 RAYA-AS, EG 36992 1358 1518 280 ETISALAT-MISR, EG 36903 1248 553 98 MT-MPLS, MA 29571 1047 67 46 ORANGE-COTE-IVOIRE, CI 36935 938 521 44 Vodafone-, EG 6713 551 1861 34 IAM-AS, MA 15399 537 55 51 WANANCHI-, KE 24757 479 73 5 EthioNet-AS, ET 37342 471 32 1 MOVITEL, MZ Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 11879 3372 605 UNINET, MX 9808 9497 8730 43 CHINAMOBILE-CN China Mobile Communicati 16509 9145 11002 3277 AMAZON-02, US 12479 7394 1713 145 UNI2-AS, ES 7545 5715 785 698 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4945 4192 75 ERX-CERNET-BKB China Education and Rese 39891 4897 290 61 ALJAWWALSTC-AS, SA 11492 4538 301 676 CABLEONE, US 18403 4188 347 25 FPT-AS-AP FPT Telecom Company, VN 7155 4172 288 100 VIASAT-SP-BACKBONE, US Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 9497 9454 CHINAMOBILE-CN China Mobile Communications Grou 12479 7394 7249 UNI2-AS, ES 16509 9145 5868 AMAZON-02, US 7545 5715 5017 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4945 4870 ERX-CERNET-BKB China Education and Research Net 39891 4897 4836 ALJAWWALSTC-AS, SA 18403 4188 4163 FPT-AS-AP FPT Telecom Company, VN 7155 4172 4072 VIASAT-SP-BACKBONE, US 20940 4091 3943 AKAMAI-ASN1, NL 11492 4538 3862 CABLEONE, US Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 33492 UNALLOCATED 8.6.184.0/23 33650 COMCAST-33650, US 33123 UNALLOCATED 8.10.69.0/24 11168 SCC, US 12169 UNALLOCATED 8.15.207.0/24 32787 PROLEXIC-TECHNOLOGIES-DDOS-M 40493 UNALLOCATED 8.17.26.0/24 3356 LEVEL3, US 53775 UNALLOCATED 8.20.88.0/24 7029 WINDSTREAM, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 396894 UNALLOCATED 8.28.201.0/24 46887 LIGHTOWER, US 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.140.216.0/24 Origin: 27176 DATAWAGON, US 23.140.216.0/24 Transit: 20278 NEXEON, US 23.141.0.0/24 Origin: 395350 RESERVED, ZZ 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US 23.176.160.0/24 Origin: 397327 RESERVED, ZZ 23.176.160.0/24 Transit: 19108 SUDDENLINK-COMMUNICATIONS, US 23.189.192.0/24 Origin: 27593 RESERVED, ZZ 23.189.192.0/24 Transit: 174 COGENT-174, US 36.255.139.0/24 Origin: 56050 NEW-SHINE-INTERNET-TH 134 Yenchit Road, 36.255.139.0/24 Transit: 58913 HCL-TH 4819 Supapong 3 Alley, Srinakarin Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:14 /10:38 /11:100 /12:299 /13:581 /14:1192 /15:2056 /16:13480 /17:8327 /18:13850 /19:25154 /20:44444 /21:51607 /22:110531 /23:99457 /24:561369 /25:734 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 6481 7394 UNI2-AS, ES 8151 5916 11879 UNINET, MX 39891 3632 4897 ALJAWWALSTC-AS, SA 11492 3451 4538 CABLEONE, US 6327 3356 3547 SHAW, CA 7155 3117 4172 VIASAT-SP-BACKBONE, US 8551 2926 3449 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 22773 2575 3520 ASN-CXA-ALL-CCI-22773-RDC, US 30036 2153 2498 MEDIACOM-ENTERPRISE-BUSINESS, US 10620 2116 3542 Telmex Colombia S.A., CO Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:2235 2:1443 3:269 4:5 5:4374 6:153 7:6 8:1536 9:1 11:172 12:1502 13:366 14:2320 15:305 16:200 17:364 18:663 20:308 21:4 22:188 23:6480 24:2532 25:2 27:2529 29:19 31:2548 32:75 34:26 35:117 36:2000 37:4486 38:5471 39:867 40:143 41:3963 42:2048 43:2305 44:325 45:16695 46:4344 47:370 49:1845 50:1895 51:578 52:1586 54:391 55:959 56:5 57:127 58:1861 59:1179 60:1005 61:2523 62:2699 63:1912 64:5638 65:2352 66:5001 67:3054 68:1346 69:4130 70:1190 71:639 72:2944 74:2636 75:1562 76:635 77:2307 78:1828 79:3008 80:2108 81:1830 82:1520 83:1305 84:1575 85:3063 86:767 87:2004 88:1203 89:3948 90:622 91:7850 92:2069 93:2642 94:3566 95:4003 96:1303 97:316 98:1083 99:736 100:92 101:1055 102:2884 103:32306 104:4792 105:577 106:924 107:2726 108:1135 109:4248 110:2141 111:3183 112:2064 113:1819 114:1700 115:1984 116:1920 117:2457 118:2689 119:1971 120:1811 121:1202 122:2617 123:2222 124:1620 125:2609 128:1470 129:916 130:1046 131:1963 132:819 133:408 134:1772 135:304 136:907 137:981 138:2662 139:1605 140:1306 141:1331 142:1516 143:1536 144:1008 145:348 146:1966 147:1618 148:2475 149:2346 150:882 151:1242 152:1846 153:524 154:5168 155:1402 156:2032 157:1352 158:1056 159:2196 160:2635 161:1601 162:3517 163:1624 164:1720 165:1848 166:1074 167:1742 168:3857 169:794 170:4615 171:946 172:3797 173:2997 174:981 175:1188 176:3622 177:4501 178:3543 179:2159 180:2467 181:3524 182:3424 183:1983 184:2271 185:20622 186:4708 187:4177 188:4097 189:3909 190:9321 191:1377 192:10970 193:8974 194:7314 195:5231 196:3134 197:2482 198:6033 199:6311 200:8067 201:6197 202:10574 203:10013 204:4551 205:3713 206:4391 207:3519 208:4127 209:4941 210:4497 211:2543 212:4273 213:3393 214:1112 215:71 216:6728 217:2775 218:1307 219:582 220:2034 221:985 222:844 223:2184 End of report

1 0

Re: Acceptance of RPKI unknown in ROV
by Job Snijders 20 Oct '23

20 Oct '23

On Thu, 19 Oct 2023 at 11:56, Owen DeLong <owen(a)delong.com> wrote: > > On Thu, 19 Oct 2023 at 11:46, Owen DeLong via NANOG <nanog(a)nanog.org> > wrote: > >> A question for network operators out there that implement ROV… >> >> Is anyone rejecting RPKI unknown routes at this time? >> >> I know that it’s popular to reject RPKI invalid (a ROA exists, but >> doesn’t match the route), but I’m wondering if anyone is currently or has >> any plans to start rejecting routes which don’t have a matching ROA at all? > > > > This would be a bad idea and cause needless fragility in the network > without any upsides. > > > I’m not intending to advocate it, I’m asking if anyone is currently doing > it. > I’m not aware of anyone doing this, and have not heard operators express interest in doing this (probably because it seems such an unpleasant concept). Somewhat related: I do know of operators that require a ROA (if it’s non-legacy space) during their customer onboarding process, for example, in BOYIP for DIA cases. But those operators do not expect the ROA to continually exist after the provisioning has been completed successfully. Making the continued availability of a route dependent on the continued validity of a ROA is where friction starts to form. Kind regards, Job >

2 1

Correcting Netflix ipv6 geolocation
by Justin Kilpatrick 19 Oct '23

19 Oct '23

Our ipv6 subnet 2602::FBAD::/40 is showing up as in Kiev Ukraine on Fast.com and Netflix.com which is causing all sorts of problems for our US based customers. Other services like Google and MaxMind don't seem to have any issue and report correct locations. Happy to follow up with more information off list. Thanks! -- Justin Kilpatrick | Cofounder and CTO justin(a)althea.net

2 1

Congestion/latency-aware routing for MPLS?
by Adam Thompson 19 Oct '23

19 Oct '23

Using a mix of Juniper hardware... Network provides VPLS to customer, over MPLS (obviously) in a dual-redundant-ring radio topology. Each site is connected to one or more neighbors, generally with two radios, in two different bands, to *each* neighbor. So an ordinary node might have 4 radios, 2 pointing in each direction. Every single radio link has different bandwidth, different latency, and different interference characteristics. These radio links do run at 100% capacity at least some of the time. It's possible to set each link's relative cost in OSPF or IS-IS, of course, but I haven't found a way to make the router react to latency changes on one link or the other. (Right now, I think costs are set equal so traffic will use both links.) This means interference in one band invisibly diminishes the Ethernet bandwidth available and silently increases the latency on that link, sometimes dramatically. This seems to do interestingly unpleasant things to the client's flows. It's generally true that one band will be much more severely affected than the other, in any interference event. Before anyone asks, I'm told the network is a mixture of licensed and unlicensed bands, that's not changing anytime soon. In a perfect world, I'd like the routers to dynamically adjust traffic balance, but even just temporarily halting use of the impaired link would be helpful (or so I believe right now, at least). Is this a pipe dream? I'm not seeing anything in JunOS that could accomplish this... I'm not even sure if a mesh protocol could handle dual active links like this? Ideas, comments, etc. all appreciated. Also, I'm not the direct operator of use network. I'm involved, but mostly just trying to help them find better solutions. Nor am I an MPLS expert, as is obvious here. Thanks, -Adam Adam Thompson Consultant, Infrastructure Services MERLIN 100 - 135 Innovation Drive Winnipeg, MB R3T 6A8 (204) 977-6824 or 1-800-430-6404 (MB only) https://www.merlin.mb.ca<https://www.merlin.mb.ca/> Chat with me on Teams<https://teams.microsoft.com/l/chat/0/0?users=athompson@merlin.mb.ca>

8 9

FastNetMon Usage in the wild
by Javier Gutierrez 18 Oct '23

18 Oct '23

Hi, I wanted to drop a quick question as I would like to evaluate the FastNetMon solution to do DDoS protection and wanted to see what other companies are using it out there so I can have a base of how much should I recommend this. Thanks in advance for your responses Kind regards, Javier Gutierrez,

5 6

Akamai Network Partnership
by email＠edylie.net 18 Oct '23

18 Oct '23

Dear All, May I know if anyone could guide me to the right contact for Akamai Network Partnership? We are a network operator in Indonesia and is keen to work with Akamai to speed up access to Akamai Content. Many Thanks. Best Regards, Edy

5 4

Amir Golestan sentenced to 5 years in prison for IP theft scheme
by goemon＠sasami.anime.net 18 Oct '23

18 Oct '23

https://krebsonsecurity.com/2023/10/tech-ceo-sentenced-to-5-years-in-ip-add… And a statement from ARIN: https://www.arin.net/blog/2023/10/16/micfo-golestan-sentencing/

3 3