- NANOG - lists.nanog.org

Re: Route table growth and hardware limits...talk to the filter
by Randy Bush 10 Sep '07

10 Sep '07

>> how about a filter between in-rib and what you actually crank >> through the churning clothes washer? pass on the in-rib, calc on >> the phyltered data. so when shorter prefix is withdrawn, you can >> look for next best candidate. > Possible, but decidedly non-trivial. Recall that if you're going to > phylter before the RIB, then you'll have to reflect that in your BGP > advertisements too. Any route caught in the phylter must be > withdrawn if it has been advertised. i am not happy with just announce from input, but note that it would remove this problem. it would also throw the best path baby out with the bathwater. i don't think we are ready for that. >> note that my original proposal/case some years back allowed a >> number of flavors of phylter, longer+same-next-hop, >> longer+same-as-path, longer+same_origin-as. > Full time employment for BGP geeks. ;-) On the flip side, the number > of variants of expert systems that you're proposing suggests that > there be one configurable mechanism. Complexity++; ;-( and even more hidden policy, which uncle tim warns us will lead to a wsj article some day (appended). but i am slightly more fearful of the cost of routing table growth and table churn. slightly. randy --- appended is a position statement from wired 2003. Tim Griffin ---------------------------------------------------------- ROUTING POLICY LANGUAGES MUST BE DESIGNED AND STANDARDIZED ---------------------------------------------------------- The following scenario MUST take place within the next few years: The Interdomain routing system will enter a state of non-convergence that is so disruptive as to effectively bring down large portions of the Internet. The problem will be due to unforeseen global interactions of locally defined routing policies. Furthermore, no one ISP will have enough knowledge to identify and debug the problem. It will take nearly a week to fix and cost the world economy billions of dollars. The world press will learn that the internet engineering community had known about this lurking problem all along.... So, we better have a solution! I'll argue the only way to effectively solve this problem is to define routing policy languages that are guaranteed to be globally sane, no matter the what local policies are defined. Then these languages need to be standardized and BGP speakers MUST be forced to use them. This raises many interesting research problems. Is it possible to design such languages? How can we find the right balance between local policy expressiveness and global sanity? What exactly do we mean by "autonomy" of routing policy? Do we need additional protocols to enforce global sanity conditions? How can we enforce compliance of policy language usage? -30-

1 0

Re: Route table growth and hardware limits...talk to the filter
by Forrest 09 Sep '07

09 Sep '07

> From: owner-nanog(a)merit.edu on behalf of Jared Mauch > Sent: Sat 9/8/2007 8:17 AM > To: William Allen Simpson > Cc: nanog(a)nanog.org > Subject: Re: Route table growth and hardware limits...talk to the filter > > > I think this is the most important point so far. There are a lot > of providers that think that their announcements need to be global > to manage link/load balancing with their peers/upstreams. Proper use > of no-export (or similar) on the more specifics and the aggregate > being sent out will reduce the global noise significantly. > > Perhaps some of the providers to these networks will nudge them > a bit more to use proper techniques. > Could a partial solution to this problem be something as simple as the routing vendors implementing something that by default analyzes the routes that you're announcing to your neighbors and automatically flags the more specifics that are covered by an identical larger aggregate with no-export? Rather than relying on the announcing network to make an effort to use no-export, make it a default that can be turned off if the need arises. If the cause of alot of this garbage is indeed caused by cluelessness or apathy, it seems like this would help. If people are too lazy or lacking the knowledge to fix what they're announcing, they're likely too lazy or lacking the knowledge to disable a default setting that flags extra unnecessary routes with no-export. Forrest

1 0

Re: Route table growth and hardware limits...talk to the filter
by Randy Bush 09 Sep '07

09 Sep '07

>>> If you do save it in your BRIB, then you can do this filtering between >>> RIB and FIB. That turns out to be a completely local feature, requiring >>> no protocol changes or additions whatsoever, and thus does not even >>> require an RFC or Internet draft. This feature has been seen in some >>> circles under the name "ORIB". Ask YFRV's PM for it. ;-) >>> >>> Note that this feature *is* CPU intensive. This also does not decrease >>> the RP RAM usage the way that update filtering would. In fact, due to >>> the overhead of tracking filtered and non-filtered prefixes, there is >>> additional RP RAM usage. YMMV. >> >> so, bottom line, no help other than reducing fib? > > Not unless you're actually willing to accept a real change in the results. how about a filter between in-rib and what you actually crank through the churning clothes washer? pass on the in-rib, calc on the phyltered data. so when shorter prefix is withdrawn, you can look for next best candidate. note thatv my original proposal/case some years back allowed a number of flavors of phylter, longer+same-next-hop, longer+same-as-path, longer+same_origin-as. randy

2 2

Weekly Routing Table Report
by Routing Analysis Role Account 09 Sep '07

09 Sep '07

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 08 Sep, 2007 Report Website: http://thyme.apnic.net This report: http://thyme.apnic.net/ap-data/2007/09/08/0400 Analysis Summary ---------------- BGP routing table entries examined: 230454 Prefixes after maximum aggregation: 120354 Deaggregation factor: 1.91 Unique aggregates announced to Internet: 112054 Total ASes present in the Internet Routing Table: 26139 Prefixes per ASN: 8.82 Origin-only ASes present in the Internet Routing Table: 22752 Origin ASes announcing only one prefix: 11073 Transit ASes present in the Internet Routing Table: 3387 Transit-only ASes present in the Internet Routing Table: 78 Average AS path length visible in the Internet Routing Table: 3.6 Max AS path length visible: 20 Max AS path prepend of ASN (35389) 16 Prefixes from unregistered ASNs in the Routing Table: 7 Unregistered ASNs in the Routing Table: 4 Prefixes from 32-bit ASNs in the Routing Table: 6 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 11 Number of addresses announced to Internet: 1758100960 Equivalent to 104 /8s, 202 /16s and 125 /24s Percentage of available address space announced: 47.4 Percentage of allocated address space announced: 62.1 Percentage of available address space allocated: 76.4 Total number of prefixes smaller than registry allocations: 122119 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 53790 Total APNIC prefixes after maximum aggregation: 20883 APNIC Deaggregation factor: 2.58 Prefixes being announced from the APNIC address blocks: 50711 Unique aggregates announced from the APNIC address blocks: 22504 APNIC Region origin ASes present in the Internet Routing Table: 3050 APNIC Prefixes per ASN: 16.63 APNIC Region origin ASes announcing only one prefix: 808 APNIC Region transit ASes present in the Internet Routing Table: 467 Average APNIC Region AS path length visible: 3.7 Max APNIC Region AS path length visible: 18 Number of APNIC addresses announced to Internet: 313634464 Equivalent to 18 /8s, 177 /16s and 174 /24s Percentage of available APNIC address space announced: 77.7 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911 APNIC Address Blocks 58/7, 60/7, 116/6, 120/6, 124/7, 126/8, 202/7 210/7, 218/7, 220/7 and 222/8 ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 108969 Total ARIN prefixes after maximum aggregation: 63005 ARIN Deaggregation factor: 1.73 Prefixes being announced from the ARIN address blocks: 80277 Unique aggregates announced from the ARIN address blocks: 31941 ARIN Region origin ASes present in the Internet Routing Table: 11796 ARIN Prefixes per ASN: 6.81 ARIN Region origin ASes announcing only one prefix: 4510 ARIN Region transit ASes present in the Internet Routing Table: 1093 Average ARIN Region AS path length visible: 3.4 Max ARIN Region AS path length visible: 15 Number of ARIN addresses announced to Internet: 343819008 Equivalent to 20 /8s, 126 /16s and 67 /24s Percentage of available ARIN address space announced: 75.9 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959 ARIN Address Blocks 24/8, 63/8, 64/5, 72/6, 76/8, 96/6, 199/8, 204/6, 208/7 and 216/8 RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 48202 Total RIPE prefixes after maximum aggregation: 30972 RIPE Deaggregation factor: 1.56 Prefixes being announced from the RIPE address blocks: 44618 Unique aggregates announced from the RIPE address blocks: 29529 RIPE Region origin ASes present in the Internet Routing Table: 10148 RIPE Prefixes per ASN: 4.40 RIPE Region origin ASes announcing only one prefix: 5407 RIPE Region transit ASes present in the Internet Routing Table: 1613 Average RIPE Region AS path length visible: 4.0 Max RIPE Region AS path length visible: 20 Number of RIPE addresses announced to Internet: 326484864 Equivalent to 19 /8s, 117 /16s and 195 /24s Percentage of available RIPE address space announced: 74.8 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-44031 RIPE Address Blocks 62/8, 77/8, 78/7, 80/4, 193/8, 194/7, 212/7 and 217/8 LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 16740 Total LACNIC prefixes after maximum aggregation: 4459 LACNIC Deaggregation factor: 3.75 Prefixes being announced from the LACNIC address blocks: 14847 Unique aggregates announced from the LACNIC address blocks: 7851 LACNIC Region origin ASes present in the Internet Routing Table: 862 LACNIC Prefixes per ASN: 17.22 LACNIC Region origin ASes announcing only one prefix: 281 LACNIC Region transit ASes present in the Internet Routing Table: 145 Average LACNIC Region AS path length visible: 4.0 Max LACNIC Region AS path length visible: 19 Number of LACNIC addresses announced to Internet: 42186752 Equivalent to 2 /8s, 131 /16s and 184 /24s Percentage of available LACNIC address space announced: 62.9 LACNIC AS Blocks 26592-26623, 27648-28671, plus ERX transfers LACNIC Address Blocks 189/8, 190/8, 200/7 AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 2740 Total AfriNIC prefixes after maximum aggregation: 1023 AfriNIC Deaggregation factor: 2.68 Prefixes being announced from the AfriNIC address blocks: 2297 Unique aggregates announced from the AfriNIC address blocks: 1333 AfriNIC Region origin ASes present in the Internet Routing Table: 204 AfriNIC Prefixes per ASN: 11.26 AfriNIC Region origin ASes announcing only one prefix: 67 AfriNIC Region transit ASes present in the Internet Routing Table: 35 Average AfriNIC Region AS path length visible: 4.1 Max AfriNIC Region AS path length visible: 20 Number of AfriNIC addresses announced to Internet: 7461888 Equivalent to 0 /8s, 113 /16s and 220 /24s Percentage of available AfriNIC address space announced: 22.2 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 196/8 APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4755 1352 383 71 Videsh Sanchar Nigam Ltd. Aut 9583 1124 81 409 Sify Limited 4134 1076 11228 293 CHINANET-BACKBONE 9498 999 532 64 BHARTI BT INTERNET LTD. 4766 808 5441 320 Korea Telecom (KIX) 17488 796 52 55 Hathway IP Over Cable Interne 23577 785 34 683 Korea Telecom (ATM-MPLS) 7545 724 159 121 TPG Internet Pty Ltd 18101 595 119 50 Reliance Infocom Ltd Internet 4812 550 971 98 China Telecom (Shanghai) 1221 534 1950 415 Telstra Pty Ltd 4668 516 68 10 LG-EDS Systems Inc. 17676 502 10903 63 Softbank BB Corp. 9443 468 122 77 Primus Telecommunications 4808 467 777 114 CNCGROUP IP network: China169 4802 438 117 154 Wantree Development 7474 378 216 266 SingTel Optus Pty Ltd 17974 376 130 13 PT TELEKOMUNIKASI INDONESIA 4837 366 5104 167 chinanet IDC center beijing n 9829 359 257 10 BSNL National Internet Backbo ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1478 6075 996 AT&T WorldNet Services 4323 1322 991 372 Time Warner Telecom 2386 1215 637 736 AT&T Data Communications Serv 11492 1140 111 12 Cable One 6478 1132 325 169 AT&T Worldnet Services 6197 1029 718 509 BellSouth Network Solutions, 18566 1023 288 9 Covad Communications 174 971 6780 860 Cogent Communications 701 939 6577 716 UUNET Technologies, Inc. 7011 921 278 550 Citizens Utilities 20115 817 751 436 Charter Communications 1239 803 2719 565 Sprint 19262 774 2745 183 Verizon Global Networks 22773 765 2149 50 Cox Communications, Inc. 209 746 3836 586 Qwest 5668 658 176 23 CenturyTel Internet Holdings, 3356 618 10812 353 Level 3 Communications, LLC 6517 595 165 37 Yipes Communications, Inc. 852 575 1095 361 Telus Advanced Communications 15270 574 160 38 PaeTec.net -a division of Pae RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 702 493 1923 395 UUNET - Commercial IP service 24863 367 57 40 LINKdotNET AS number 9116 351 168 26 Goldenlines main autonomous s 3320 315 6035 262 Deutsche Telekom AG 3301 314 1456 294 TeliaNet Sweden 6746 289 130 265 Dynamic Network Technologies, 680 267 2045 257 DFN-IP service G-WiN 8551 265 252 37 Bezeq International 8708 262 420 241 Romania Data Systems S.A. 3215 258 2424 98 France Telecom Transpac 8220 256 444 239 COLT Telecommunications 3352 227 1865 38 Ibernet, Internet Access Netw 5089 224 1658 54 NTL Group Limited 3269 223 2839 73 TELECOM ITALIA 9121 214 1441 24 TTnet Autonomous System 3292 196 1379 176 TDC Tele Danmark 12479 193 578 6 Uni2 Autonomous System 1257 192 1195 170 SWIPnet Swedish IP Network 3300 192 172 92 AUCS Communications Services 20858 186 34 3 EgyNet LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 902 1970 214 UniNet S.A. de C.V. 11830 514 299 9 Instituto Costarricense de El 16814 426 26 9 NSS, S.A. 11172 374 114 60 Servicios Alestra S.A de C.V 7303 340 162 49 Telecom Argentina Stet-France 6471 330 75 33 ENTEL CHILE S.A. 14522 327 28 7 SatNet S.A. 22047 317 246 13 VTR PUNTO NET S.A. 14117 281 19 15 Telefonica del Sur S.A. 10481 278 104 9 Prima S.A. 11664 271 30 13 Keytech SA 11556 235 128 3 Cable-Wireless Panama 10620 234 65 21 TVCABLE BOGOTA 6147 228 178 24 Telefonica Del Peru 6503 201 170 82 AVANTEL, S.A. 23216 196 17 46 RAMtelecom Telecomunicaciones 20299 180 25 31 NEWCOM AMERICAS 8163 177 11 6 METROTEL REDES S.A. 21826 171 30 58 INTERCABLE 7738 169 506 23 Telecomunicacoes da Bahia S.A AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 286 870 226 The Internet Solution 8452 219 188 7 TEDATA 2018 149 301 115 Tertiary Education Network 6713 142 135 11 Itissalat Al-MAGHRIB 33783 126 8 11 EEPAD TISP TELECOM & INTERNET 5536 124 8 10 Internet Egypt Network 33776 100 6 3 Starcomms Nigeria Limited 24835 87 48 6 RAYA Telecom - Egypt 15475 76 84 4 Nile Online 2905 74 174 71 The Internetworking Company o 23889 69 24 15 MAURITIUS TELECOM 2561 62 6 2 Egyptian Universities Network 15706 56 12 4 Sudatel Internet Exchange Aut 33774 47 29 25 AS Number for Telecom Algeria 5713 46 294 36 Telkom SA Ltd 16637 42 21 29 Johnnic e-Ventures 8524 31 2 10 AUCEGYPT Autonomous System 12455 29 6 3 Jambonet Autonomous system 21280 29 4 4 Swift Global Kenya Ltd.Is an 10798 27 16 1 Standard Bank of South Africa Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4755 1352 1281 Videsh Sanchar Nigam Ltd. Aut 11492 1140 1128 Cable One 18566 1023 1014 Covad Communications 6478 1132 963 AT&T Worldnet Services 4323 1322 950 Time Warner Telecom 9498 999 935 BHARTI BT INTERNET LTD. 4134 1076 783 CHINANET-BACKBONE 17488 796 741 Hathway IP Over Cable Interne 9583 1124 715 Sify Limited 22773 765 715 Cox Communications, Inc. 8151 902 688 UniNet S.A. de C.V. 5668 658 635 CenturyTel Internet Holdings, 7545 724 603 TPG Internet Pty Ltd 19262 774 591 Verizon Global Networks 6517 595 558 Yipes Communications, Inc. 18101 595 545 Reliance Infocom Ltd Internet 15270 574 536 PaeTec.net -a division of Pae 6197 1029 520 BellSouth Network Solutions, 19916 568 517 OLM LLC 4668 516 506 LG-EDS Systems Inc. List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 64586 PRIVATE 192.170.73.0/24 4845 Chung Hsiao East Roa 64586 PRIVATE 202.165.137.0/24 4845 Chung Hsiao East Roa 64586 PRIVATE 202.165.140.0/24 4845 Chung Hsiao East Roa 64586 PRIVATE 202.165.141.0/24 4845 Chung Hsiao East Roa 64586 PRIVATE 202.165.142.0/24 4845 Chung Hsiao East Roa 64586 PRIVATE 202.165.143.0/24 4845 Chung Hsiao East Roa 24410 UNALLOCATED 203.119.28.0/24 4134 CHINANET-BACKBONE Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 7.1.1.0/24 1239 Sprint 132.0.0.0/10 721 DLA Systems Automation Center 137.0.0.0/13 721 DLA Systems Automation Center 158.0.0.0/13 721 DLA Systems Automation Center 172.33.1.0/24 7018 AT&T WorldNet Services 192.0.10.0/24 9498 BHARTI BT INTERNET LTD. 192.44.0.0/24 5501 Fraunhofer Gesellschaft 192.44.0.0/19 702 UUNET - Commercial IP service 192.70.164.0/24 25689 National Research Council of 192.153.136.0/21 721 DLA Systems Automation Center 192.172.0.0/19 721 DLA Systems Automation Center Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:18 /9:9 /10:15 /11:37 /12:134 /13:261 /14:472 /15:921 /16:9616 /17:4074 /18:6613 /19:13985 /20:16226 /21:14904 /22:19174 /23:20080 /24:121504 /25:772 /26:1032 /27:507 /28:87 /29:5 /30:0 /31:0 /32:8 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 11492 1132 1140 Cable One 6478 1131 1132 AT&T Worldnet Services 18566 1005 1023 Covad Communications 9583 966 1124 Sify Limited 2386 906 1215 AT&T Data Communications Serv 7018 819 1478 AT&T WorldNet Services 7011 814 921 Citizens Utilities 6197 782 1029 BellSouth Network Solutions, 23577 776 785 Korea Telecom (ATM-MPLS) 4755 736 1352 Videsh Sanchar Nigam Ltd. Aut 9498 671 999 BHARTI BT INTERNET LTD. 17488 619 796 Hathway IP Over Cable Interne 4766 606 808 Korea Telecom (KIX) 19916 563 568 OLM LLC 6517 561 595 Yipes Communications, Inc. 4323 555 1322 Time Warner Telecom 15270 538 574 PaeTec.net -a division of Pae 5668 523 658 CenturyTel Internet Holdings, 4668 506 516 LG-EDS Systems Inc. 18101 501 595 Reliance Infocom Ltd Internet Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:8 7:1 8:86 12:1804 13:1 15:19 16:3 17:3 18:13 20:36 24:967 25:1 32:56 33:3 38:346 40:60 41:321 44:2 47:4 52:4 55:3 56:3 57:24 58:473 59:392 60:367 61:1015 62:931 63:2005 64:3185 65:2370 66:3408 67:797 68:659 69:1974 70:444 71:105 72:1413 73:1 74:641 75:259 76:129 77:339 78:54 80:831 81:826 82:576 83:385 84:617 85:820 86:339 87:481 88:278 89:987 90:24 91:533 97:6 98:2 116:316 117:178 118:17 121:277 122:599 123:175 124:674 125:985 128:270 129:216 130:139 131:363 132:55 133:9 134:197 135:34 136:190 137:82 138:153 139:73 140:501 141:174 142:382 143:255 144:300 145:46 146:331 147:122 148:409 149:148 150:111 151:159 152:87 153:119 154:3 155:259 156:162 157:217 158:158 159:173 160:118 161:97 162:174 163:181 164:481 165:393 166:277 167:300 168:515 169:122 170:388 171:22 172:2 189:74 190:1083 192:5745 193:3982 194:3187 195:2288 196:975 198:3826 199:3286 200:5265 201:1188 202:7375 203:7707 204:3930 205:1967 206:2414 207:2882 208:2821 209:3495 210:2460 211:1084 212:1328 213:1476 214:415 215:41 216:3988 217:1197 218:328 219:382 220:1021 221:406 222:266 End of report

1 0

Re: Route table growth and hardware limits...talk to the filter
by Bradley Urberg Carlson 08 Sep '07

08 Sep '07

Joe Provo wrote: > Any policing effort will require co-ordination and to be stated > publicly (here and elsewhere) that it is a Good Thing. ... > A direct cookbook provided and lots of folks will still think > you are asking too much of them. Some of the networks this would help may be skittish of testing the concept themselves. And no Tier-2 operator would want to be perceived as making a cheap "hack", or of using a non-standard routing policy. Documenting the practice (e.g. "RFCxxxx: filtering BGP route tables using RIR allocations") would help the network operator answer customer inquiries (and auditors' questions). The approach could create a different kind of Tier-1/Tier-2 structure: default-free networks and "default-enabled networks" ;) . A default-enabled network, which lets its customers advertise long prefixes out of its own allocations to other ISPs, would need to purchase transit from default-free ISPs, or else coordinate holes in the filters with their default-enabled upstream. Default-enabled Tier-2's would need to be clear about this limitation when selling transit to a BGP-speaking customer; and would be unable to use other default-enabled ISPs as "carrier of last resort". -Bradley Urberg-Carlson

1 0

[funsec] The "Great IPv6 experiment" (fwd)
by Gadi Evron 08 Sep '07

08 Sep '07

I am unsure what to say. ---------- Forwarded message ---------- Date: Tue, 04 Sep 2007 11:14:34 +0200 From: Lubomir Kundrak <lkundrak(a)redhat.com> To: funsec <funsec(a)linuxbox.org> Subject: [funsec] The "Great IPv6 experiment" This is kind of... interesting. [snip] We're taking 10 gigabytes of the most popular "adult entertainment" videos from one of the largest subscription websites on the internet, and giving away access to anyone who can connect to it via IPv6. No advertising, no subscriptions, no registration. If you access the site via IPv4, you get a primer on IPv6, instructions on how to set up IPv6 through your ISP, a list of ISPs that support IPv6 natively, and a discussion forum to share tips and troubleshooting. If you access the site via IPv6 you get instant access to "the goods". [snip] More on http://www.ipv6porn.com/ -- Lubomir Kundrak (Red Hat Security Response Team) _______________________________________________ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.

7 6

Re: Network Operations Guide
by Bill Nash 08 Sep '07

08 Sep '07

On Fri, 24 Aug 2007, Greg VILLAIN wrote: > Thing is, Zebra/Quagga doesn't seem to have any sort of "external connector" > to withdraw the routes in a decent format for analysis purposes (xml, csv, > plain list...). > Last time we tried, Zebra/Quagga broke down when we installed SNMP support (to > locally query the routing table on the soft router). > > Anyone know about any solution for such BGP data collection ? (OpenBGPd ?) > Thanks in advance for any hint. I built a perl daemon using Net::BGP and DBI that inserted and removed routes, on update, into an SQL db. I could then query to my hearts content, beating up a db with full routes with all the efficiency of SQL. It's simple as hell and works great. - billn

3 3

Carrier outage?
by Douglas K. Fischer 07 Sep '07

07 Sep '07

One of our voice conferencing vendors had an significant outage last week, and pinned the blame on a "major US carrier outage" that affected telco resources "throughout the United States". Any way to independently corroborate this claim? I would imagine news of such a major carrier outage would have reached this or another operator's group (and I didn't see anything on this list about one). I'm not saying they're "lying", but I like to check out such claims to ensure my vendors are being honest and up front and not trying to pass the buck. Naturally the vendor did not say _which_ carrier had the outage. Any info or guidance as to where I should be looking for info? Many thanks, Doug

2 1

Introducing Detective Cisco...
by Sam Stickland 07 Sep '07

07 Sep '07

Take some time out of your busy working day for a film noir classic! Detective Cisco is hired by Mrs Packet to find her missing husband. On the way he meets different routing protocols who help him along on his journey until he finally tracks down Mr Packet, and in the process gets more than he bargained for! A film made in 12 days and 12, even longer, nights. Visit www.stickwell.com <http://www.stickwell.com> to download the .wmv file This film was written and created in its entirety by 2 Network engineers Samuel Stickland and Warren Cogswell. Both of these guys work day-to-day with Cisco equipment and have both recently passed their CCIE written exams. They were asked to produce a short film to be shown at a company presentation with a brief to have technical content, while taking a light-hearted approach and so Detective Cisco was conceived. The script was written (and furiously re-written) in a just over a day and filming began in earnest, while still making time for their day-to-day job. What you will find on the website is the final render before the piece was shown, which was finished just minutes before it was due to be screened. Sights were aimed a bit higher than the timescale allowed for, but it still hopefully made a cohesive story (with a vertiable shedload of in-jokes for techies!). So we proudly give you Redistribution, a labour of love and we hope that you enjoy watching it as much as we enjoyed making it. Sam & Warren.

3 2

BGP Update Report
by cidr-report＠potaroo.net 07 Sep '07

07 Sep '07

BGP Update Report Interval: 06-Aug-07 -to- 06-Sep-07 (32 days) Observation Point: BGP Peering with AS2.0 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS4538 1072453 2.4% 437.7 -- ERX-CERNET-BKB China Education and Research Network Center 2 - AS18566 622178 1.4% 608.2 -- COVAD - Covad Communications Co. 3 - AS7011 467551 1.0% 498.5 -- FRONTIER-AND-CITIZENS - Frontier Communications of America, Inc. 4 - AS4766 445273 1.0% 533.3 -- KIXS-AS-KR Korea Telecom 5 - AS852 349437 0.8% 587.3 -- ASN852 - Telus Advanced Communications 6 - AS22773 344450 0.8% 449.7 -- CCINET-2 - Cox Communications Inc. 7 - AS4134 341979 0.8% 243.7 -- CHINANET-BACKBONE No.31,Jin-rong Street 8 - AS4812 321444 0.7% 563.9 -- CHINANET-SH-AP China Telecom (Group) 9 - AS9583 313068 0.7% 263.5 -- SIFY-AS-IN Sify Limited 10 - AS6198 307782 0.7% 491.7 -- BATI-MIA - BellSouth Network Solutions, Inc 11 - AS4323 287824 0.6% 212.1 -- TWTC - Time Warner Telecom, Inc. 12 - AS7132 263308 0.6% 563.8 -- SBIS-AS - AT&T Internet Services 13 - AS721 225880 0.5% 438.6 -- DISA-ASNBLK - DoD Network Information Center 14 - AS16852 220065 0.5% 540.7 -- BROADWING-FOCAL - Broadwing Communications Services, Inc. 15 - AS19916 211304 0.5% 372.0 -- ASTRUM-0001 - OLM LLC 16 - AS174 191096 0.4% 192.2 -- COGENT Cogent/PSI 17 - AS9929 190525 0.4% 516.3 -- CNCNET-CN China Netcom Corp. 18 - AS2907 182599 0.4% 556.7 -- ERX-SINET-AS National Center for Science Information Systems 19 - AS4755 181603 0.4% 134.1 -- VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System 20 - AS5668 170976 0.4% 255.6 -- AS-5668 - CenturyTel Internet Holdings, Inc. TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS27289 29924 0.1% 29924.0 -- CLEOCOMMUNICATIONS - CLEO COMMUNICATIONS INC 2 - AS26829 25988 0.1% 25988.0 -- YKK-USA - YKK USA,INC 3 - AS22072 25968 0.1% 25968.0 -- 4 - AS30850 27505 0.1% 13752.5 -- DESMIE-AS Hellenic Trasmission System Operator S.A. 5 - AS15126 9119 0.0% 9119.0 -- ASMC - American Suzuki Motor Corporation 6 - AS14906 40287 0.1% 8057.4 -- 7 - AS10275 13512 0.0% 6756.0 -- AS-UNITEDNETWORK - ABS-CBN International 8 - AS13285 43510 0.1% 6215.7 -- OPALTELECOM-AS Opal Telecom 9 - AS43403 6136 0.0% 6136.0 -- SVIAZ-PLUS-AS LLC "Sviaz Plus" 10 - AS43043 5101 0.0% 5101.0 -- INTERKOM-AS Interkom Sp. z o.o. 11 - AS30707 12545 0.0% 4181.7 -- 12 - AS30375 4106 0.0% 4106.0 -- TEVA-NA - Teva Pharmaceuticals USA, INC 13 - AS20816 3161 0.0% 3161.0 -- IIP-NET-AS20816 Science and Society Telecomm Center 14 - AS39408 3126 0.0% 3126.0 -- CZ-ETHERNET AVI ethernet.cz 15 - AS21348 5452 0.0% 2726.0 -- KOPTERIFI KOPTERIFI is autonomous system. Located in Vammala Finland 16 - AS43046 2657 0.0% 2657.0 -- MSOLS-AS MSOLS LTD 17 - AS9660 7405 0.0% 2468.3 -- KANNET-AS-AP Telecommunication and ISP company 18 - AS13620 26795 0.1% 2435.9 -- ASN-ELAN - Elan Communications, Inc. 19 - AS36011 4692 0.0% 2346.0 -- AHSYS-ASN - Atlantic Health System 20 - AS40359 2251 0.0% 2251.0 -- SOUTHEASTERNMILLS-ROME - Southeastern Mills, Inc. TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 221.135.22.0/24 47845 0.1% AS9583 -- SIFY-AS-IN Sify Limited 2 - 62.24.238.0/24 42200 0.1% AS13285 -- OPALTELECOM-AS Opal Telecom 3 - 117.58.192.0/19 38318 0.1% AS7491 -- PI-PH-AS-AP PI-PHILIPINES 4 - 80.243.64.0/20 30591 0.1% AS21332 -- NTC-AS New Telephone Company 5 - 208.46.32.0/24 29924 0.1% AS27289 -- CLEOCOMMUNICATIONS - CLEO COMMUNICATIONS INC 6 - 221.135.253.0/24 29033 0.1% AS9583 -- SIFY-AS-IN Sify Limited 7 - 194.110.73.0/24 27469 0.1% AS30850 -- DESMIE-AS Hellenic Trasmission System Operator S.A. 8 - 12.108.254.0/24 25988 0.1% AS26829 -- YKK-USA - YKK USA,INC 9 - 12.106.30.0/24 25968 0.1% AS22072 -- 10 - 209.163.125.0/24 18118 0.0% AS14390 -- CORENET - Coretel America, Inc. 11 - 221.135.113.0/24 14332 0.0% AS9583 -- SIFY-AS-IN Sify Limited 12 - 64.95.193.0/24 12501 0.0% AS30707 -- 13 - 89.4.131.0/24 12432 0.0% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 14 - 89.4.130.0/24 12067 0.0% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 15 - 203.63.26.0/24 11765 0.0% AS9747 -- EZINTERNET-AS-AP EZInternet Pty Ltd 16 - 89.4.129.0/24 11652 0.0% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 17 - 89.4.158.0/24 11251 0.0% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 18 - 89.4.128.0/24 10945 0.0% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 19 - 77.247.128.0/20 10232 0.0% AS34034 -- ARCTEL-AS Arctel Company Main AS AS43043 -- INTERKOM-AS Interkom Sp. z o.o. 20 - 124.7.157.0/24 9258 0.0% AS9583 -- SIFY-AS-IN Sify Limited Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0