- NANOG - lists.nanog.org

Root Zone DNSSEC Operational Update
by Wessels, Duane 10 Jun '25

10 Jun '25

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Verisign, in its role as the root zone ZSK operator, is transitioning to a new Hardware Security Module (HSM) product for the root zone's Zone Signing Key (ZSK). The current HSM vendor, Ultra Intelligence & Communications, has announced their KeyperPLUS will no longer be supported by them. Verisign will use an HSM product from Thales for the root zone ZSK going forward. On July 1, 2025 we will begin using the Thales HSM to sign the root zone on a daily basis. Although we anticipate this will be a seamless change for end users and anticipate no problems, prudence dictates that we need a backout plan, should it become necessary. As part of our backout plan, we will be post-publishing the previous quarter's ZSK for a longer than normal period of time. Normally, following a quarterly ZSK rollover, the previous key is post-published for a period of 10 days. As part of our HSM transition, we will instead post-publish the previous ZSK for a period of 80 days. This provides ample time to remediate any issues that may arise as part of this transition, and should it become necessary, to revert to using the old HSM to sign the root zone. -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEvEG6oyZuoN5HQhnubJmkaajAmI0FAmhGex8ACgkQbJmkaajA mI1MEQgAo5/CB0GHYJq+4EqPCecevajsAhjcr4NXxViKyU5K3E//DwR82LIC9p6T HWLY1C0tiFk2Sg/3FbxF2arnUVC9yPJHOI5y2O+AE/BJibSVCyEEse+CbQkVljEd peaHNkkqp96AGgJiZv1On+B63Nog4CBrGMRxD14J0IAZShGbFqDZLRo6VhTHCCf+ isea/+1LbAbe/r2lTbm72q3a5lt/br6yRl37MZAbsJh8PyOAQE54jcnMlypL3qlx VribLjYduQAyKfUgMfVOXOionoY8i+4u1Rce9GXC130jklW7KXsp4un0SCGT5ByV gQWK5Hz73A4039CiUtjm3WqoIILIcg== =kLWP -----END PGP SIGNATURE-----

1 0

LACNOG 2025 – Call for Presentations
by Hernan Moguilevsky 09 Jun '25

09 Jun '25

LACNOG 2025 - Call for Presentations LACNOG, the Latin American and Caribbean Network Operators Group, will hold its LACNOG 2025 conference on 6 - 10 October 2025, together with the LACNIC 44 event to be held in San Salvador, El Salvador. Presentation formats include: ·Lightning talks: Brief, 10-minute presentations (including an additional 5-minute space for questions). ·Presentations: 20-minute presentations (including an additional 5-minute space for questions). LACNOG invites the submission of technical papers and case studies on the following topics: *1. Network Operation and Architecture*** * IP network design, implementation, and administration * Routing and switching protocols * Success stories, lessons learned, and operational experiences *2. Automation and Observability*** * Network automation, configuration, deployment, and monitoring * Telemetry, performance, traceability, and traffic analysis * Tool integrating (NetDevOps, APIs, CI/CD for networking) *3. Interconnection and the Internet Ecosystem*** * Peering, IXPs, interconnection policies, and regional experiences * Internet governance, regulation, and legal aspects *4. Security and Resilience*** * RPKI, route validation, and global routing system security * Threat prevention, detection, and mitigation * MANRS and best practices in security * Incident management and recovery *5. Services and Applications*** * DNS, email, web, CDNs, NFV, and cloud services * Universal Acceptance and technical challenges of internationalization *6. Emerging Technologies*** * Internet of Things (IoT), 5G, Edge/Cloud-native networking * Artificial Intelligence in networking *7. Infrastructure and Transport*** * Optical networks, DWDM, wireless networks, and access technologies. * Physical infrastructure and the evolution of transport. *8. Research and Training*** * Relevant academic projects, measurements, and case studies * Technical education, capacity building, and community networks Proposals for the event will be selected following the calendar below: * Reception of proposals: 9 May - 11 July 2025 at23:59 UTC -3 (Uruguay time) * Evaluation by the Program Committee: 21 - 30 July 2025 * Confirmation by selected presenters: 31 July - 5 August 2025 * Program to be published: 6 - 9 August 2025 * Deadline for submitting the final presentation: 10 August - 22 September 2025 at 23:59 UTC-3 (Uruguay time) * LACNOG2025: 6 - 10 October 2025 Applicants must submit a summary and a draft of the slides of their proposed presentations along with a brief biography, for which they must use the form available at https://eventos.nog.lat/event/29/ If your work is selected, you authorize LACNOG and LACNIC to publish your name, photograph, biography, and final presentation in the event program. Speakers presenting at the LACNOG 2025 conference will receive a certificate acknowledging their participation. Guidelines for Submitting a Presentation for LACNOG have been prepared containing a description of the criteria that will be considered when evaluating each proposal, presentation format details and other data. These Guidelines are available at https://tinyurl.com/lacnog-presentations <https://tinyurl.com/lacnog-presentations> Communications with the Program Committee will be handled through pc(a)lacnog.org <mailto:pc@lacnog.org>. We thank you in advance for your attention and look forward to receiving your proposals for LACNOG 2025.

1 0

Freedom fi / Mosolabs CBRS EnB rest ?
by Faisal Imtiaz 09 Jun '25

09 Jun '25

Hello Everyone, A bit of a long shot question, anyone knows how to reset a Freedomfi/Mosolabs Helium EnB so that they can be reused for private LTE ? Many thanks in advance ! Regards, Faisal Imtiaz

1 0

Spoofer Report for NANOG for May 2025
by CAIDA Spoofer Project 08 Jun '25

08 Jun '25

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during May 2025: ASN Name Fixed-By 20381 CABLELABS-LV 2025-05-02 40676 AS40676 2025-05-14 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during May 2025: ASN Name First-Spoofed Last-Spoofed 577 BACOM 2016-03-09 2025-05-04 40676 AS40676 2016-08-29 2025-05-27 27364 ACS-INTERNET 2016-09-27 2025-05-30 11427 TWC-11427-TEXAS 2016-10-21 2025-05-05 63296 AWBROADBAND 2017-09-01 2025-05-28 21804 ACCESS-SK 2019-06-09 2025-05-27 32035 CCDT 2021-06-09 2025-05-05 12183 TALKIE-COMMUNICATIONS 2022-12-10 2025-05-28 400282 2023-04-27 2025-05-28 393577 SCCNET 2023-05-03 2025-05-29 61461 Airtek Solutions C.A. 2023-05-13 2025-05-28 20119 ARROW 2023-10-19 2025-05-30 394684 WISPERNET 2024-01-17 2025-05-29 393530 TLU 2024-05-22 2025-05-31 19935 CRRS 2024-05-29 2025-05-20 398182 BLN 2024-06-17 2025-05-05 3801 MISNET 2024-09-09 2025-05-14 54334 ROYA 2025-03-13 2025-05-28 16739 MIDCO-NET-INV 2025-03-19 2025-05-20 273843 2025-04-02 2025-05-27 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

STOP SPAM! AS3292/tdc.dk/tdk.net/Tele Danmark
by Soha Jin 06 Jun '25

06 Jun '25

Hi! AS3292/tdc.dk/tdk.net/Tele Danmark, are you watching the list? Or is there anyone who knows people there? Your mail system keeps spamming 200+ recipients in the last 14 hours, all mails are sent from `peering(a)tdk.net`. On PeeringDB, the NOC address is also `peering(a)tdk.net`. I have tried contact you via email 10 hours ago. The ticket system tries to reply EVERY email starting with `Re:`, but your list, `peering(a)tdc.dk`, is also in the recipients list! You are bouncing your own mails! Each mail is sending to 200+ other recipients! Of course, your outgoing queue is overloaded. The latest mail has queued for 10 hours: > Received: from mailproxy10.eng.tdc.net <redacted>; > Fri, 6 Jun 2025 20:26:01 +0000 > Received: from rt.eng.tdc.net <redacted>; > Fri, 6 Jun 2025 12:11:54 +0200 (CEST) Please, clear your mail queue, stop spamming us anymore. THANK YOU! Regards, Soha

1 0

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 06 Jun '25

06 Jun '25

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG UKNOF, TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 07 Jun, 2025 IPv4 BGP Table (Global) as seen at Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 985544 Prefixes after maximum aggregation (per Origin AS): 380660 Deaggregation factor: 2.59 Unique aggregates announced (without unneeded subnets): 482287 Number of IPv4 prefixes with a valid ROA: 543158 Number of IPv4 prefixes with an invalid ROA: 1285 Number of IPv4 prefixes with no ROA: 441101 Total ASes present in the Internet Routing Table: 76957 Prefixes per ASN: 12.81 Origin-only ASes present in the Internet Routing Table: 65879 Origin ASes announcing only one prefix: 26939 Transit ASes present in the Internet Routing Table: 11078 Transit-only ASes present in the Internet Routing Table: 557 Average AS path length visible in the Internet Routing Table: 5.2 Max AS path length visible: 80 Max AS path prepend of ASN ( 37447) 75 Prefixes from unregistered ASNs in the Routing Table: 1002 Number of instances of unregistered ASNs: 1043 Number of 32-bit ASNs allocated by the RIRs: 46622 Number of 32-bit ASNs visible in the Routing Table: 38364 Prefixes from 32-bit ASNs in the Routing Table: 203534 Number of bogon 32-bit ASNs visible in the Routing Table: 108 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 437 Number of addresses announced to Internet: 3110561664 Equivalent to 185 /8s, 103 /16s and 103 /24s Percentage of available address space announced: 84.0 Percentage of allocated address space announced: 84.0 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 322785 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 259174 Total APNIC prefixes after maximum aggregation: 77874 APNIC Deaggregation factor: 3.33 Prefixes being announced from the APNIC address blocks: 250649 Unique aggregates announced from the APNIC address blocks: 104348 APNIC Region origin ASes present in the Internet Routing Table: 14656 APNIC Prefixes per ASN: 17.10 APNIC Region origin ASes announcing only one prefix: 4468 APNIC Region transit ASes present in the Internet Routing Table: 1952 Average APNIC Region AS path length visible: 5.4 Max APNIC Region AS path length visible: 39 Number of APNIC region 32-bit ASNs visible in the Routing Table: 10154 Number of APNIC addresses announced to Internet: 749633280 Equivalent to 44 /8s, 174 /16s and 127 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-155961 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 290497 Total ARIN prefixes after maximum aggregation: 131312 ARIN Deaggregation factor: 2.21 Prefixes being announced from the ARIN address blocks: 292104 Unique aggregates announced from the ARIN address blocks: 139640 ARIN Region origin ASes present in the Internet Routing Table: 19256 ARIN Prefixes per ASN: 15.17 ARIN Region origin ASes announcing only one prefix: 7035 ARIN Region transit ASes present in the Internet Routing Table: 2002 Average ARIN Region AS path length visible: 4.6 Max ARIN Region AS path length visible: 34 Number of ARIN region 32-bit ASNs visible in the Routing Table: 5229 Number of ARIN addresses announced to Internet: 1352633088 Equivalent to 80 /8s, 159 /16s and 139 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-402332 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 54/8, 55/8, 56/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 274950 Total RIPE prefixes after maximum aggregation: 134582 RIPE Deaggregation factor: 2.04 Prefixes being announced from the RIPE address blocks: 273377 Unique aggregates announced from the RIPE address blocks: 175370 RIPE Region origin ASes present in the Internet Routing Table: 28943 RIPE Prefixes per ASN: 9.45 RIPE Region origin ASes announcing only one prefix: 12072 RIPE Region transit ASes present in the Internet Routing Table: 4006 Average RIPE Region AS path length visible: 5.3 Max RIPE Region AS path length visible: 69 Number of RIPE region 32-bit ASNs visible in the Routing Table: 12478 Number of RIPE addresses announced to Internet: 731322496 Equivalent to 43 /8s, 151 /16s and 24 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-216475 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 53/8, 57/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 124484 Total LACNIC prefixes after maximum aggregation: 29564 LACNIC Deaggregation factor: 4.21 Prefixes being announced from the LACNIC address blocks: 120879 Unique aggregates announced from the LACNIC address blocks: 48935 LACNIC Region origin ASes present in the Internet Routing Table: 11266 LACNIC Prefixes per ASN: 10.73 LACNIC Region origin ASes announcing only one prefix: 2672 LACNIC Region transit ASes present in the Internet Routing Table: 2540 Average LACNIC Region AS path length visible: 5.9 Max LACNIC Region AS path length visible: 75 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 9222 Number of LACNIC addresses announced to Internet: 171956736 Equivalent to 10 /8s, 63 /16s and 218 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-274844 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 35437 Total AfriNIC prefixes after maximum aggregation: 6707 AfriNIC Deaggregation factor: 5.28 Prefixes being announced from the AfriNIC address blocks: 48098 Unique aggregates announced from the AfriNIC address blocks: 13602 AfriNIC Region origin ASes present in the Internet Routing Table: 1917 AfriNIC Prefixes per ASN: 25.09 AfriNIC Region origin ASes announcing only one prefix: 692 AfriNIC Region transit ASes present in the Internet Routing Table: 375 Average AfriNIC Region AS path length visible: 6.0 Max AfriNIC Region AS path length visible: 80 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 1281 Number of AfriNIC addresses announced to Internet: 104814848 Equivalent to 6 /8s, 63 /16s and 89 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 11129 8757 102 CHINAMOBILE-CN China Mobile Communication 7545 6179 844 649 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4782 4192 76 ERX-CERNET-BKB China Education and Resear 9498 4405 534 308 BBIL-AP BHARTI Airtel Ltd., IN 7552 3913 1332 26 VIETEL-AS-AP Viettel Group, VN 7713 3698 1044 66 TELKOMNET-AS-AP PT Telekomunikasi Indones 45899 3287 1869 103 VNPT-AS-VN VNPT Corp, VN 24560 2882 854 530 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., 4766 2368 11522 627 KIXS-AS-KR Korea Telecom, KR 45090 2208 1439 86 TENCENT-NET-AP Shenzhen Tencent Computer Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 13645 40828 5212 AMAZON-02, US 11492 4760 316 593 CABLEONE, US 7155 3863 286 85 VIASAT-SP-BACKBONE, US 6327 3632 1320 81 SHAW, CA 174 3352 8746 887 COGENT-174, US 22773 3348 3032 168 ASN-CXA-ALL-CCI-22773-RDC, US 749 3229 54783 2480 DNIC-AS-00749, US 396982 3183 3854 425 GOOGLE-CLOUD-PLATFORM, US 16625 3012 1255 2223 AKAMAI-AS, US 36352 2814 230 856 AS-COLOCROSSING, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 7684 1714 148 UNI2-AS, ES 39891 4798 293 63 ALJAWWALSTC-AS, SA 20940 3942 3395 127 AKAMAI-ASN1, NL 9009 3913 359 2082 M247, RO 12389 3125 2306 890 ROSTELECOM-AS PJSC Rostelecom. Technical 34984 2391 360 580 TELLCOM-AS, TR 212238 2242 163 1646 CDNEXT, GB 8452 1612 1852 14 TE-AS TE-AS, EG 13188 1606 100 34 TRIOLAN, UA 62240 1414 94 738 CLOUVIDER Clouvider - Global ASN, GB Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 12175 3255 582 UNINET, MX 10620 3499 480 1017 Telmex Colombia S.A., CO 13999 2548 540 363 Mega Cable, S.A. de C.V., MX 11830 1991 369 64 Instituto Costarricense de Electricidad y 28573 1371 2436 266 Claro NXT Telecomunicacoes Ltda, BR 3816 1340 787 207 COLOMBIA TELECOMUNICACIONES S.A. ESP BIC, 6147 1199 371 22 Telefonica del Peru S.A.A., PE 11664 1194 278 33 Techtel LMDS Comunicaciones Interactivas 22884 1061 67 374 TOTAL PLAY TELECOMUNICACIONES SA DE CV, M 6503 1041 373 162 Axtel, S.A.B. de C.V., MX Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24835 1780 644 27 RAYA-AS, EG 24863 1634 389 17 LINKdotNET-AS, EG 29571 1614 102 33 ORANGE-COTE-IVOIRE, CI 36992 1431 1519 280 ETISALAT-MISR, EG 36903 1247 553 104 MT-MPLS, MA 37069 1107 1100 18 MOBINIL, EG 36935 1050 520 44 Vodafone-, EG 20011 980 185 285 INTERNET-SOLUTIONS, ZA 36914 556 82 3 KENET-AS, KE 15399 541 57 59 WANANCHI-, KE Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 13645 40828 5212 AMAZON-02, US 8151 12175 3255 582 UNINET, MX 9808 11129 8757 102 CHINAMOBILE-CN China Mobile Communication 12479 7684 1714 148 UNI2-AS, ES 7545 6179 844 649 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 4798 293 63 ALJAWWALSTC-AS, SA 4538 4782 4192 76 ERX-CERNET-BKB China Education and Resear 11492 4760 316 593 CABLEONE, US 9498 4405 534 308 BBIL-AP BHARTI Airtel Ltd., IN 20940 3942 3395 127 AKAMAI-ASN1, NL Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 8151 12175 11593 UNINET, MX 9808 11129 11027 CHINAMOBILE-CN China Mobile Communications Grou 12479 7684 7536 UNI2-AS, ES 7545 6179 5530 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 4798 4735 ALJAWWALSTC-AS, SA 4538 4782 4706 ERX-CERNET-BKB China Education and Research Net 11492 4760 4167 CABLEONE, US 9498 4405 4097 BBIL-AP BHARTI Airtel Ltd., IN 7552 3913 3887 VIETEL-AS-AP Viettel Group, VN 20940 3942 3815 AKAMAI-ASN1, NL Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 22542 UNALLOCATED 8.7.205.0/24 3356 LEVEL3, US 33123 UNALLOCATED 8.10.69.0/24 174 COGENT-174, US 46639 UNALLOCATED 8.17.66.0/24 701 UUNET, US 53775 UNALLOCATED 8.20.88.0/24 7029 WINDSTREAM, US 393266 UNALLOCATED 8.23.52.0/24 46887 CROWNCASTLE-AS46887, US 396894 UNALLOCATED 8.28.201.0/24 46887 CROWNCASTLE-AS46887, US 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE, US 54338 UNALLOCATED 8.33.241.0/24 3356 LEVEL3, US 46639 UNALLOCATED 8.38.73.0/24 3356 LEVEL3, US 395195 UNALLOCATED 8.38.115.0/24 33132 CROWNCASTLE-AS33132, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 14.192.20.0/22 Origin: 26658 HENGTONG-IDC-LLC, US 14.192.20.0/22 Transit: 6939 HURRICANE, US 23.140.216.0/24 Origin: 27176 DATAWAGON, US 23.140.216.0/24 Transit: 20278 NEXEON, US 23.141.0.0/24 Origin: 395350 RESERVED, ZZ 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US 23.147.240.0/24 Origin: 32302 RESERVED, ZZ 23.147.240.0/24 Transit: 32787 PROLEXIC-TECHNOLOGIES-DDOS-MITIGATION-NE 23.155.208.0/24 Origin: 396169 AS-GHCIL-01, US 23.155.208.0/24 Transit: 35985 ONERINGNET-ATL-1, US Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:14 /10:41 /11:92 /12:299 /13:581 /14:1212 /15:2142 /16:13908 /17:8329 /18:13776 /19:24821 /20:44825 /21:52160 /22:112419 /23:102604 /24:607512 /25:793 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 6603 7684 UNI2-AS, ES 8151 6376 12175 UNINET, MX 11492 3557 4760 CABLEONE, US 39891 3489 4798 ALJAWWALSTC-AS, SA 6327 3427 3632 SHAW, CA 7155 2822 3863 VIASAT-SP-BACKBONE, US 22773 2498 3348 ASN-CXA-ALL-CCI-22773-RDC, US 16509 2388 13645 AMAZON-02, US 30036 2240 2581 MEDIACOM-ENTERPRISE-BUSINESS, US 10620 2186 3499 Telmex Colombia S.A., CO Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1728 2:1499 3:807 4:9 5:4678 6:162 7:6 8:1597 9:1 11:172 12:1355 13:438 14:2559 15:360 16:285 17:377 18:919 20:544 21:4 22:188 23:7560 24:2750 25:2 27:2711 29:19 31:3270 32:39 33:1 34:80 35:254 36:3070 37:4602 38:9167 39:911 40:172 41:4203 42:954 43:2578 44:374 45:18568 46:5110 47:320 49:1937 50:1885 51:592 52:1570 54:324 55:1092 56:11 57:264 58:2142 59:1380 60:1171 61:2803 62:2937 63:1803 64:5446 65:2183 66:4633 67:3051 68:1125 69:3862 70:1076 71:629 72:2844 74:2797 75:1508 76:619 77:2714 78:1890 79:1707 80:2225 81:2046 82:3121 83:1449 84:1872 85:3445 86:1077 87:2389 88:1298 89:4398 90:770 91:8377 92:2710 93:2914 94:4054 95:4342 96:1419 97:311 98:979 99:695 100:73 101:1219 102:3832 103:32178 104:5094 105:753 106:1036 107:2656 108:1258 109:4083 110:2246 111:3335 112:2141 113:1535 114:1986 115:2070 116:2059 117:2527 118:2360 119:1932 120:1996 121:1433 122:2782 123:2183 124:1636 125:2894 126:91 128:1585 129:969 130:1308 131:1989 132:785 133:449 134:1541 135:334 136:1345 137:1176 138:2881 139:1577 140:1608 141:1501 142:1904 143:1818 144:1158 145:526 146:2188 147:2115 148:2717 149:2899 150:1249 151:1941 152:2086 153:521 154:7473 155:1733 156:3041 157:1903 158:1320 159:2492 160:3582 161:1845 162:3803 163:2190 164:1865 165:2222 166:1493 167:1940 168:4009 169:793 170:5125 171:1011 172:4434 173:3314 174:918 175:1290 176:3708 177:4736 178:3706 179:2294 180:2629 181:4096 182:3444 183:1855 184:2069 185:21582 186:5146 187:4526 188:4241 189:4296 190:9598 191:1485 192:11308 193:9478 194:7806 195:5548 196:3262 197:3662 198:6208 199:8548 200:8237 201:6355 202:10494 203:10576 204:4570 205:3650 206:4490 207:3584 208:4238 209:5168 210:4853 211:2635 212:4584 213:3737 214:1032 215:48 216:6754 217:3140 218:1413 219:545 220:2091 221:1124 222:855 223:2465 End of report

1 0

NANOG 94 Starts Monday! Last Chance to Register for Hackathon, Workshops + More!
by Nanog News 05 Jun '25

05 Jun '25

*** The Countdown Begins!* ------------------------------------------------------------ *NANOG 94 will Kick-Off Monday* Join us in person (June 9–11) or virtually from anywhere in the world. Have you signed up for our workshops? Sign-up is available in NANOG 94 Agenda. + The Easy Way to IPv6: IPv6 Migration for Enterprises + RPKI Nuts and Bolts + IPv6 Clinic w/ AWS REGISTER NOW (https://nanog.org/events/nanog-94/register/) *** Final Call for N94 Hackathon* ------------------------------------------------------------ *Still time to register for the in-person Hackathon at NANOG 94!* 🗓️ Starts Sunday, June 8 📍 Register in person at N94 Bring your laptop & problem-solving skills. 👨‍💻 Work with @Meta engineers 🧠 Build adaptive networks 🤝 Connect with your community REGISTER NOW! (https://nanog.org/events/nanog-94-hackathon/registration/) *** Don't Forget to Stop By the Community Help Desk at N94* ------------------------------------------------------------ *Got a question? We have an answer.* Make sure to stop by and see the friendly folks at the NANOG Community Help Desk, located near registration at NANOG 94. *** Sync Your Calendars for NANOG Social Events* ------------------------------------------------------------ *Don't Miss the NANOG Social, Beer N' Gear, WIT Mixer, + More!* NANOG Socials are YOUR opportunity to get to know your peers in the industry + foster important relationships in a relaxed, casual environment. SEE ALL SOCIALS (https://nanog.org/events/nanog-94/socials/) *** Stay Connected* ------------------------------------------------------------ http://www.facebook.com http://www.instagram.com/nanog_org/ http://www.linkedin.com/company/nanog/ https://www.twitter.com/nanog/ http://nanog.org

1 0

Tayga users?
by Andrew 02 Jun '25

02 Jun '25

Is anyone deploying Tayga in any capacity (production, test networks, at home, with clatd, …)? I’ve decided to ‘adopt’ the open source project, given it’s ability to both be very standards compliant (at least to the standards as they were in 2011), and act in virtually any translation-related role (not restricted to just CLAT or just NAT64 or just SIIT) But I’m interested in hearing how you are using it, what friction you have in deploying it, etc. This is mostly motivated by my desire to stand up demonstration networks for a variety of transition tech options, and with how versatile Tayga is, it can act in essentially all of the major roles involving v4-v6 translation with different configuration and routing tables and without any complex namespace setup. I’m also an embedded programmer by trade, so dealing with low level C is very much my thing. https://github.com/apalrd/tayga/ [tayga.png] [apalrd/tayga: Tayga NAT64 Daemon](https://github.com/apalrd/tayga/) [github.com](https://github.com/apalrd/tayga/) is where I've put the repo. I started with the original tar.gz, merged in all of the patches from the Debian project, plus one patch from FreeBSD, and went from there. I'm mostly working on an RFC7915 test suite and fixing any bugs identified by the test suite, and after that I can make more changes / improvements without worrying about hidden breakage. Yes, I know Github does not support IPv6, but I felt like that collaborators are more likely to have Github accounts and know how to use it vs self hosting or other platforms). Andrew

1 0

RIPE Probe Behind IPS
by Mike Hammett 02 Jun '25

02 Jun '25

How are you handling blocking and notifications if you have a RIPE Atlas Probe behind an IPS? Most traffic is fine, but occasionally, someone will use my probe to ping some IP that's blocked. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com

3 4

Amazon AWS cloudfront WAF block
by paul＠vanilla.capetown 01 Jun '25

01 Jun '25

Hi all Most if not all of our prefixes are on some sort of AWS WAF deny list, that or our ASN is listed. We are an eyeball network, geo-location websites e.g maxmind are correctly displaying the correct location and services for our prefixes. We do not have a support contract with amazon aws to create a support ticket. Various websites are now blocked, e.g Reddit and many more. It is not feasible for us to reach out to each one to adjust their aws waf filters. Upon emailing AWS this is their reply: "The best course of action would be to contact Neustar and or MaxMind who are 3rd party WAF aggregators on this to address any issues with WAF blocking." This is also not fair and frankly a rabbit hole we do not want to go down. These are also paid for services. AWS is almost holding our ASN/Prefixes as hostage to these paid for services with no easy way to check why we are being blocked, and getting off "some" list. Anyone have an idea / contact or what to do?

22 38