- NANOG - lists.nanog.org

outlook inbound email issues?
by nanog 31 Oct '20

31 Oct '20

I have a client who is receiving 50% of their mail on outlook servers for the past few hours. MX records point to: xxxxx-com.mail.protection.outlook.com has address 104.47.38.36 xxxxx-com.mail.protection.outlook.com has address 104.47.36.36 Anyone aware of outlook issues or have someone they can poke to check into this? (Both answer smtp requests, guessing a queue is backed up somewhere.) thanks bill -- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

2 1

Incorrect GeoIP filtering of 185.83.72.0/22
by Adam Pavlidis 31 Oct '20

31 Oct '20

Hello, We are reaching out to NANOG since the following issue is mostly observed in US-based service providers. We are advertising the prefix *185.83.72.0/22 <http://185.83.72.0/22>*, that seems to be blocked by various popular US-based services, thus our customers originating from this prefix have trouble reaching such services. Indicatively: Atlassian (AMAZON), Adobe (AKAMAI) . To the best of our understanding, the blocking is enforced due to US / EU sanctions against Iran. The prefix was purchased by us - Lamda Hellix SA ( *AS56910* based in *GREECE, EUROPE* ) - approximately 8 months ago. We followed the necessary process as instructed by RIPE for changing the ownership of the prefix. Therefore, we kindly ask those of you that use/maintain/operate GeoIP databases to update your records. Most importantly, we would be grateful if you could share with us ( net(a)lamdahellix.com) which Geo databases are mainly used in the US for this purpose. Kind regards, Adam Pavlidis

3 2

dark fiber connection between 111 E 8th and Coresite NYC1 or NYC2
by Eric Germann 31 Oct '20

31 Oct '20

Looking for a recommendation of a provider who can give us a dark fiber cross connect or an L2 connection between the two in the subject for an AWS Direct Connect out of Coresite Thanks Eric

3 2

urpf - evil?
by Baldur Norddahl 30 Oct '20

30 Oct '20

Hello While working on my ACLs I noticed that I was successful in blocking some apparently spoofed IPv6 traffic. The destination was Facebook and the source was IPv6 range belonging to a mobile operator that sells 4G Wifi router based solutions. So thinking about how and why a few customers end up sending packets to our network with the wrong source, I came up with a theory (not validated): What if the customer connects his 4G Wifi router to one of the LAN ports of our CPE (or visa versa)? His computer would then pick up an IPv6 range from both ISPs along with two default routes. But only one default route would be used, and in this case that was apparently the default route going to our network. But still his computer might use the IPv6 address from the other ISP as source and therefore he ends up "spoofing" by sending that to us. We deliver the packets to Facebook and I assume Facebook will route the replies just fine through the other ISP. Now the thing is that my impression is that it actually works so long I do not actively block it with uRPF or ACLs on our edge. I have learned that spoofing is evil and I should be blocking this - but why am I sabotaging something that apparently is doing just fine at some customers? Regards, Baldur

2 1

Anyone have a contact at Microsoft RE: Microsoft Defender SmartScreen removal?
by Matt Rauch 30 Oct '20

30 Oct '20

Hello, We have a hosting customer who had a brand new domain flagged from day one. Reported the site safe several weeks ago, and still no change. Microsoft Support chat said it could take a couple weeks to review. Matt Rauch

1 0

Weekly Routing Table Report
by cscora＠apnic.net 30 Oct '20

30 Oct '20

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 31 Oct, 2020 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 828067 Prefixes after maximum aggregation (per Origin AS): 316529 Deaggregation factor: 2.62 Unique aggregates announced (without unneeded subnets): 396695 Total ASes present in the Internet Routing Table: 69827 Prefixes per ASN: 11.86 Origin-only ASes present in the Internet Routing Table: 60016 Origin ASes announcing only one prefix: 24837 Transit ASes present in the Internet Routing Table: 9811 Transit-only ASes present in the Internet Routing Table: 298 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 30 Max AS path prepend of ASN ( 45582) 27 Prefixes from unregistered ASNs in the Routing Table: 994 Number of instances of unregistered ASNs: 995 Number of 32-bit ASNs allocated by the RIRs: 33990 Number of 32-bit ASNs visible in the Routing Table: 28151 Prefixes from 32-bit ASNs in the Routing Table: 128583 Number of bogon 32-bit ASNs visible in the Routing Table: 14 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 515 Number of addresses announced to Internet: 2864617216 Equivalent to 170 /8s, 190 /16s and 151 /24s Percentage of available address space announced: 77.4 Percentage of allocated address space announced: 77.4 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 279502 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 216070 Total APNIC prefixes after maximum aggregation: 63548 APNIC Deaggregation factor: 3.40 Prefixes being announced from the APNIC address blocks: 211683 Unique aggregates announced from the APNIC address blocks: 86759 APNIC Region origin ASes present in the Internet Routing Table: 10986 APNIC Prefixes per ASN: 19.27 APNIC Region origin ASes announcing only one prefix: 3098 APNIC Region transit ASes present in the Internet Routing Table: 1600 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 30 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6108 Number of APNIC addresses announced to Internet: 779017600 Equivalent to 46 /8s, 110 /16s and 221 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-143673 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 241495 Total ARIN prefixes after maximum aggregation: 111528 ARIN Deaggregation factor: 2.17 Prefixes being announced from the ARIN address blocks: 239329 Unique aggregates announced from the ARIN address blocks: 114696 ARIN Region origin ASes present in the Internet Routing Table: 18672 ARIN Prefixes per ASN: 12.82 ARIN Region origin ASes announcing only one prefix: 6806 ARIN Region transit ASes present in the Internet Routing Table: 1907 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3522 Number of ARIN addresses announced to Internet: 1092438272 Equivalent to 65 /8s, 29 /16s and 73 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 233584 Total RIPE prefixes after maximum aggregation: 109954 RIPE Deaggregation factor: 2.12 Prefixes being announced from the RIPE address blocks: 229643 Unique aggregates announced from the RIPE address blocks: 136727 RIPE Region origin ASes present in the Internet Routing Table: 27476 RIPE Prefixes per ASN: 8.36 RIPE Region origin ASes announcing only one prefix: 11834 RIPE Region transit ASes present in the Internet Routing Table: 3884 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 30 Number of RIPE region 32-bit ASNs visible in the Routing Table: 9619 Number of RIPE addresses announced to Internet: 709295488 Equivalent to 42 /8s, 70 /16s and 253 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 111722 Total LACNIC prefixes after maximum aggregation: 26033 LACNIC Deaggregation factor: 4.29 Prefixes being announced from the LACNIC address blocks: 112931 Unique aggregates announced from the LACNIC address blocks: 47960 LACNIC Region origin ASes present in the Internet Routing Table: 10581 LACNIC Prefixes per ASN: 10.67 LACNIC Region origin ASes announcing only one prefix: 2613 LACNIC Region transit ASes present in the Internet Routing Table: 1964 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 29 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8169 Number of LACNIC addresses announced to Internet: 174726144 Equivalent to 10 /8s, 106 /16s and 28 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 24200 Total AfriNIC prefixes after maximum aggregation: 4724 AfriNIC Deaggregation factor: 5.12 Prefixes being announced from the AfriNIC address blocks: 33966 Unique aggregates announced from the AfriNIC address blocks: 10123 AfriNIC Region origin ASes present in the Internet Routing Table: 1412 AfriNIC Prefixes per ASN: 24.06 AfriNIC Region origin ASes announcing only one prefix: 485 AfriNIC Region transit ASes present in the Internet Routing Table: 292 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 29 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 733 Number of AfriNIC addresses announced to Internet: 108670464 Equivalent to 6 /8s, 122 /16s and 46 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5704 775 683 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4753 4192 73 ERX-CERNET-BKB China Education and Rese 7552 3579 1330 21 VIETEL-AS-AP Viettel Group, VN 45899 3259 1896 54 VNPT-AS-VN VNPT Corp, VN 7713 2715 829 621 TELKOMNET-AS-AP PT Telekomunikasi Indon 9808 2558 9044 57 CMNET-GD Guangdong Mobile Communication 4766 2351 11103 554 KIXS-AS-KR Korea Telecom, KR 9498 2288 450 231 BBIL-AP BHARTI Airtel Ltd., IN 4755 2141 441 190 TATACOMM-AS TATA Communications formerl 9394 2044 4914 18 CTTNET China TieTong Telecommunications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 4643 308 797 CABLEONE, US 16509 4405 8767 2025 AMAZON-02, US 7155 4034 264 32 VIASAT-SP-BACKBONE, US 22773 3684 2992 188 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3352 1323 81 SHAW, CA 16625 3108 1643 2238 AKAMAI-AS, US 209 2510 5059 515 CENTURYLINK-US-LEGACY-QWEST, US 30036 2458 366 185 MEDIACOM-ENTERPRISE-BUSINESS, US 5650 2312 2981 1625 FRONTIER-FRTR, US 20115 2163 2891 505 CHARTER-20115, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6208 1636 141 UNI2-AS, ES 39891 3652 203 21 ALJAWWALSTC-AS, SA 8551 3446 379 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 3254 3347 203 AKAMAI-ASN1, EU 12389 2809 2279 879 ROSTELECOM-AS, RU 47331 2428 418 1824 TTNET, TR 34984 2194 355 575 TELLCOM-AS, TR 9009 2172 227 1181 M247, GB 13188 1611 100 26 TRIOLAN, UA 61317 1340 156 592 ASDETUK http://www.heficed.com, GB Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8118 3437 599 Uninet S.A. de C.V., MX 10620 3397 529 535 Telmex Colombia S.A., CO 11830 2563 369 63 Instituto Costarricense de Electricidad 13999 1480 451 403 Mega Cable, S.A. de C.V., MX 7303 1479 952 265 Telecom Argentina S.A., AR 6503 1470 312 473 Axtel, S.A.B. de C.V., MX 28573 1336 2257 222 CLARO S.A., BR 3816 1162 575 168 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1143 379 39 Telefonica del Peru S.A.A., PE 11664 1012 213 415 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1572 393 22 LINKdotNET-AS, EG 36992 1206 1529 131 ETISALAT-MISR, EG 24835 1116 468 30 RAYA-AS, EG 36903 918 480 94 MT-MPLS, MA 29571 708 68 12 ORANGE-COTE-IVOIRE, CI 6713 552 1863 34 IAM-AS, MA 15399 493 46 15 WANANCHI-, KE 37342 476 32 1 MOVITEL, MZ 36935 430 519 37 Vodafone-, EG 36914 363 82 3 KENET-AS, KE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8118 3437 599 Uninet S.A. de C.V., MX 12479 6208 1636 141 UNI2-AS, ES 7545 5704 775 683 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4753 4192 73 ERX-CERNET-BKB China Education and Rese 11492 4643 308 797 CABLEONE, US 16509 4405 8767 2025 AMAZON-02, US 7155 4034 264 32 VIASAT-SP-BACKBONE, US 22773 3684 2992 188 ASN-CXA-ALL-CCI-22773-RDC, US 39891 3652 203 21 ALJAWWALSTC-AS, SA 7552 3579 1330 21 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 6208 6067 UNI2-AS, ES 7545 5704 5021 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4753 4680 ERX-CERNET-BKB China Education and Research Net 7155 4034 4002 VIASAT-SP-BACKBONE, US 11492 4643 3846 CABLEONE, US 39891 3652 3631 ALJAWWALSTC-AS, SA 7552 3579 3558 VIETEL-AS-AP Viettel Group, VN 22773 3684 3496 ASN-CXA-ALL-CCI-22773-RDC, US 8551 3446 3401 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 6327 3352 3271 SHAW, CA Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 212434 UNALLOCATED 5.133.88.0/22 206509 KCOM-UK-AS, GB 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 174 COGENT-174, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 46766 UNALLOCATED 8.44.208.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US 46505 UNALLOCATED 12.7.131.0/24 7018 ATT-INTERNET4, US 15132 UNALLOCATED 12.9.150.0/24 1239 SPRINTLINK, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 397294 UNASSIGNED Transit: 398559 TUNBROKER, US 23.157.0.0/24 Origin: 395101 UNASSIGNED Transit: 33657 CMCS, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:9 /9:13 /10:40 /11:101 /12:291 /13:578 /14:1173 /15:1936 /16:13471 /17:8280 /18:14037 /19:25665 /20:41303 /21:50060 /22:102626 /23:86800 /24:480440 /25:1244 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 5175 6208 UNI2-AS, ES 11492 3761 4643 CABLEONE, US 6327 3150 3352 SHAW, CA 7155 3122 4034 VIASAT-SP-BACKBONE, US 8551 2906 3446 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 22773 2843 3684 ASN-CXA-ALL-CCI-22773-RDC, US 8151 2822 8118 Uninet S.A. de C.V., MX 39891 2801 3652 ALJAWWALSTC-AS, SA 30036 2201 2458 MEDIACOM-ENTERPRISE-BUSINESS, US 5650 1995 2312 FRONTIER-FRTR, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1669 2:1139 3:33 4:19 5:3603 6:53 8:1458 9:1 11:1 12:1766 13:345 14:2369 15:72 16:11 17:304 18:90 20:111 23:3990 24:2337 25:3 27:2350 31:2130 32:114 34:1 35:43 36:1013 37:3480 38:1926 39:436 40:150 41:3841 42:612 43:2130 44:226 45:14799 46:3579 47:320 49:1565 50:1653 51:106 52:1130 54:220 55:704 56:6 57:53 58:1604 59:1163 60:811 61:2325 62:2204 63:2015 64:5276 65:2393 66:5100 67:2916 68:1180 69:4075 70:1397 71:682 72:3005 74:2538 75:1459 76:684 77:1983 78:2126 79:2684 80:2060 81:1619 82:1317 83:1171 84:1256 85:2791 86:623 87:1790 88:1457 89:2886 90:384 91:7147 92:1595 93:2504 94:2839 95:3629 96:1234 97:341 98:950 99:981 100:88 101:1021 102:1165 103:24750 104:3597 105:375 106:893 107:2112 108:693 109:3714 110:1986 111:2352 112:1673 113:1513 114:1527 115:1842 116:1846 117:2115 118:2200 119:1776 120:872 121:1027 122:2305 123:2078 124:1619 125:2146 128:1357 129:1239 130:734 131:1915 132:754 133:312 134:1363 135:330 136:655 137:894 138:2314 139:1128 140:756 141:1102 142:986 143:1232 144:1118 145:326 146:1367 147:1218 148:2139 149:1211 150:753 151:1334 152:1566 153:437 154:3321 155:1223 156:2471 157:1115 158:893 159:2018 160:1996 161:1075 162:3179 163:908 164:1526 165:1308 166:594 167:1710 168:3577 169:619 170:4275 171:770 172:2003 173:2912 174:952 175:1051 176:2805 177:4312 178:2762 179:1893 180:2263 181:2560 182:3166 183:1463 184:2441 185:17197 186:3950 187:3069 188:3267 189:2671 190:9126 191:1437 192:10563 193:7781 194:6334 195:4570 196:3163 197:2215 198:6031 199:5911 200:7311 201:5286 202:10541 203:10207 204:4641 205:3070 206:3237 207:3276 208:3988 209:4513 210:4191 211:2071 212:3515 213:3287 214:1179 215:57 216:6109 217:2462 218:852 219:624 220:2059 221:922 222:970 223:1646 End of report

1 0

bgp dampening and anycast networks (particularly cloudflare)
by David Hubbard 30 Oct '20

30 Oct '20

Hi all, was curious if anyone has found it necessary to alter their route dampening rules related to anycast networks, and Cloudflare especially? I’ve got a customer whose target web server has been going intermittently inaccessible from a very geographically distant Cloudflare location (AU), while no reports of issues from anywhere closer to the US. I’m seeing a bunch of their /24’s dampened on my side in several locations, and they appear to be networks that favor or are specific to AU, so I’m thinking that’s the issue. I’m going to whitelist their ASN, but perhaps I need to work on the policy to be more tolerant of flaps compared to years past with the increase in anycast use? Thanks, David

1 0

RE: [SPAM] Re: plea for comcast/sprint handoff debug help
by p.fazio＠eggingtons.com 30 Oct '20

30 Oct '20

1 0

DE-CIX - Wednesday 11:00am - 1:30pm Eastern
by Matt Hoppes 29 Oct '20

29 Oct '20

Does anyone here know any more about what crashed in the DE-CIX NYC exchange yesterday between approximately 11am and 1:30pm? Between those times I'm told the Nokia switching fabric locked up and ultimately rebooted.

4 4

Recommendation to update RPKI validators
by Job Snijders 29 Oct '20

29 Oct '20

Hi all, About eight months ago I discovered a number of issues in the validation procedure of most RPKI validator softwares (including the RIPE NCC Validator, Routinator, and OctoRPKI). The impact of improper verification of Manifests (and associated aspects of the X.509 system) in the RPKI can have rather dramatic effects in today's Internet routing landscape. When handling a manifest, make sure everything is accounted for! The mitigation guidance is at present is very simple: just make sure all deployed RPKI validators are updated to the latest version. Going forward I hope our industry as a whole will be able to respond faster to issues of this type. A write-up with examples and details is available here: http://sobornost.net/~job/manifest_handling_issue.txt Thank you to all involved who helped fix & progress this issue. Kind regards, Job

1 0