- NANOG - lists.nanog.org

Correctly dealing with bots and scrapers.
by Andrew Latham 25 Mar '26

25 Mar '26

I just had an issue with a web-server where I had to block a /18 of a large scraper. I have some topics I could use some input on. 1. What tools or setups have people found most successful for dealing with bots/scrapers that do not respect robots.txt for example? 2. What tools for response rate limiting deal with bots/scrapers that cycle over a large variety of IPs with the exact same user agent? 3. Has anyone written or found a tool to concentrate IP addresses into networks for IPTABLES or NFT? (60% of IPs for network X in list so add network X and remove individual IP entries.) -- - Andrew "lathama" Latham -

18 33

George Goble (Purdue University)
by Rich Kulawiec 25 Mar '26

25 Mar '26

[ Apologies if you've already seen this elsewhere. ] We lost George on March 18, 2026. Much of the world only knows him for his experiments with rapid (*extremely* rapid) BBQ grill ignition, and those were impressive [1]; but the work that he did at the Purdue Engineering Computer Network was much more germane to this mailing list. George and Mike Marsh came up with the "Purdual" 2-CPU VAX, which was the first multiprocessor Unix system; and along with other folks in EE department, he built one of the first Unix networks. He did all kinds of work with DEC and Sun and UCBerkeley and everyone who was anyone in the Unix world...and I once watched him casually twiddling bits in kernel memory space with adb on a running multiuser system. He did not make a mistake. Of course not. George was an incredibly smart guy who could have easily gone somewhere else and made a fortune, but he stayed at Purdue...and as a result, tens of thousands of students and faculty and staff benefitted from his work. "Brilliant" and "dedicated" are sometimes overused words; but not this time. ---rsk [1] I was present for some of those, as George escalated from hair dryers to liquid oxygen, and recalled that there were scientists at Los Alamos who were concerned that a nuclear detonation might ignite the atmosphere. After watching a $15 K-Mart grill be more-or-less vaporized, I began to understand their trepidation.

1 0

Any cidr list for Cloud Innovation? (Attack issues now that they're routed by Cox)
by David Hubbard 25 Mar '26

25 Mar '26

Hi all, curious if there’s any accurate and maintained list of the networks associated with Cloud Innovation? For reasons unknown, it seems Cox is now providing transit for some of the questionable Seychelles-associated networks via their normal AS 22773. That of course makes the attack traffic sourced from those networks hard to mitigate, since we can’t blackhole Cox without cutting off the massive amount of legit traffic. Many of the networks seem to also be routed by 35916 (https://bgp.he.net/AS35916#_prefixes) but with more specific advertisements via Cox. Perhaps Cloud Innovation and Multacom are one and the same, or Multacom just has no issue dealing with that entity. Either way, I suppose I could use 35916 as a reference, but not sure that’s a complete list or if Multacom will come to route legit customers at some point. Thanks, David

3 2

[Video] Missed N96? Or Already Missing Your People? Hit Play. + MORE!
by Nanog News 20 Mar '26

20 Mar '26

*** [Video] Missed N96? Or Already Missing Your People? Hit Play.* ------------------------------------------------------------ *Watch N96 Recap + Experience What Makes NANOG Special* *This is the NANOG community in motion.* ⚡ Hear from attendees who get it 🤝 See familiar faces...including yours! 🧠 Hear conversations you want to join You’ll feel it in seconds, why this community is different. NANOG 97 is next. Don’t miss your seat. 👉* Register now. *(https://nanog.org/events/nanog-97/) *WATCH NOW *(https://nanog.org/stories/nanog-tv/nanog-96-recap/) https://discord.com/invite/KqubYuanmR *** What's Trending on the Discord Channel?* ------------------------------------------------------------ *Stay Connected to Your Community Online* *The conversations don't stop at NANOG conferences.* Join our NANOG Discord Channel for #job-postings, #coffee_connoisseurs, #mailing_list_discussions, #nogs, #peering-forum, #women-in-tech + more. *DISCORD CHANNEL* (https://discord.com/invite/KqubYuanmR) *** NANOG 97 is Coming!* ------------------------------------------------------------ *Registration is Open, You in?* *Lead the way to the future of Internet infrastructure, don't just follow.* If you’ve been meaning to grab your spot, this is your chance. Take advantage of standard pricing and ensure you are not left in the digital dust. *REGISTER NOW* (https://nanog.org/events/nanog-97/register/) *** Join the NANOG Mentorship Program* ------------------------------------------------------------ *Receive Mentorship or Guide the Next Generation* When it comes to success, no one is truly self-made. Ask any leader how they got to where they are, and they will tell you the key to their success was strong mentorship. *LEARN MORE* (https://nanog.org/outreach/nanog-mentorship-program/) *** Stay Connected* ------------------------------------------------------------ http://www.facebook.com http://www.instagram.com/nanog_org/ http://www.linkedin.com/company/nanog/ https://www.twitter.com/nanog/ http://nanog.org

1 0

IP Geofeed Tuner for RFC8805 feeds - AI Skill tool @ v0.0.9 pre-release
by Sid Mathur 20 Mar '26

20 Mar '26

Hello folks, I presented "High-quality IP Geofeeds using AI Coding Assistants and MCP" at the recent NANOG 96 <https://nanog.org/events/nanog-96/content/5683/> in San Francisco; YouTube video recording <https://youtu.be/x_vbTj_D91I?si=tTjqHQPthGIt9cnM&t=93>, deck attached as PDF. The "AI Skill" mentioned in the talk has been significantly improved since. Those interested in tuning their RFC 8805 IP Geofeed are encouraged to take it for a spin in a sandbox environment. Install the Skill in your favourite AI tool or CLI; then, ask the LLM to use the *'geofeed-tuner'* skill to tuner your IP geolocation CSV feed (paste from clipboard, provide a local file, or its public URL). [image: List operation and use of skills in Github Copilot CLI] Upon reading the SKILLS.md , the AI authors and runs Python 3 scripts locally to process the CSV and calls a geocoder MCP server to check the mentioned country and state/city names. It also detects bloopers such as duplicate inetnum entries pointing to different countries (see below). [image: Screenshow of Report with bloopers and geocoding improvemenents] The HTML report it generates has a "Tuning Mode" where you can ask it to look up the correct state/region codes that you are missing: [image: image.png] Happy tuning! And please send bouquets and brickbats to me, Sid Mathur ( sid(a)getfastah.com) I would love feedback on how to better fit your workflow or data visualization needs. This is experimental software in its v0.0.9; so a partial list limitations are as follows: 1. State/region code geocoding works well for 90% of the world's nations but has defects for the other 10% 2. The HTML web report in "Tuning Mode" needs improved usability and interaction design. Sincerely, Sid -- Siddharth 'Sid' Mathur Founder, Fastah Inc. The freshest IP data | API Quickstart <https://docs.getfastah.com/docs/quick-start> for AWS <https://aws.amazon.com/marketplace/pp/B084VR96P3> Text me: +1-617-500-7576 (M) Make an appointment: https://calendar.app.google/vkALeR3fB3bvscnx5

1 0

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 20 Mar '26

20 Mar '26

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG UKNOF, TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 21 Mar, 2026 IPv4 BGP Table (Global) as seen at Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 1042066 Prefixes after maximum aggregation (per Origin AS): 399465 Deaggregation factor: 2.61 Unique aggregates announced (without unneeded subnets): 511843 Number of IPv4 prefixes with a valid ROA: 623754 Number of IPv4 prefixes with an invalid ROA: 1559 Number of IPv4 prefixes with no ROA: 416753 Total ASes present in the Internet Routing Table: 78187 Prefixes per ASN: 13.33 Origin-only ASes present in the Internet Routing Table: 67185 Origin ASes announcing only one prefix: 27305 Transit ASes present in the Internet Routing Table: 11002 Transit-only ASes present in the Internet Routing Table: 564 Average AS path length visible in the Internet Routing Table: 4.7 Max AS path length visible: 69 Max AS path prepend of ASN (269326) 61 Prefixes from unregistered ASNs in the Routing Table: 1071 Number of instances of unregistered ASNs: 1113 Number of 32-bit ASNs allocated by the RIRs: 49047 Number of 32-bit ASNs visible in the Routing Table: 40177 Prefixes from 32-bit ASNs in the Routing Table: 225002 Number of bogon 32-bit ASNs visible in the Routing Table: 122 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 397 Number of addresses announced to Internet: 3108301696 Equivalent to 185 /8s, 68 /16s and 235 /24s Percentage of available address space announced: 84.0 Percentage of allocated address space announced: 84.0 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 338800 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 285944 Total APNIC prefixes after maximum aggregation: 82546 APNIC Deaggregation factor: 3.46 Prefixes being announced from the APNIC address blocks: 273114 Unique aggregates announced from the APNIC address blocks: 106992 APNIC Region origin ASes present in the Internet Routing Table: 15156 APNIC Prefixes per ASN: 18.02 APNIC Region origin ASes announcing only one prefix: 4653 APNIC Region transit ASes present in the Internet Routing Table: 2008 Average APNIC Region AS path length visible: 4.7 Max APNIC Region AS path length visible: 32 Number of APNIC region 32-bit ASNs visible in the Routing Table: 10701 Number of APNIC addresses announced to Internet: 752801408 Equivalent to 44 /8s, 222 /16s and 214 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-155961 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 305107 Total ARIN prefixes after maximum aggregation: 137282 ARIN Deaggregation factor: 2.22 Prefixes being announced from the ARIN address blocks: 303800 Unique aggregates announced from the ARIN address blocks: 146997 ARIN Region origin ASes present in the Internet Routing Table: 19412 ARIN Prefixes per ASN: 15.65 ARIN Region origin ASes announcing only one prefix: 7072 ARIN Region transit ASes present in the Internet Routing Table: 1919 Average ARIN Region AS path length visible: 4.3 Max ARIN Region AS path length visible: 26 Number of ARIN region 32-bit ASNs visible in the Routing Table: 5525 Number of ARIN addresses announced to Internet: 1348976896 Equivalent to 80 /8s, 103 /16s and 193 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-404380 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 54/8, 55/8, 56/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 286169 Total RIPE prefixes after maximum aggregation: 141253 RIPE Deaggregation factor: 2.03 Prefixes being announced from the RIPE address blocks: 288835 Unique aggregates announced from the RIPE address blocks: 187739 RIPE Region origin ASes present in the Internet Routing Table: 29335 RIPE Prefixes per ASN: 9.85 RIPE Region origin ASes announcing only one prefix: 12154 RIPE Region transit ASes present in the Internet Routing Table: 3974 Average RIPE Region AS path length visible: 4.8 Max RIPE Region AS path length visible: 29 Number of RIPE region 32-bit ASNs visible in the Routing Table: 13182 Number of RIPE addresses announced to Internet: 732510592 Equivalent to 43 /8s, 169 /16s and 57 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-216475 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 53/8, 57/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 126899 Total LACNIC prefixes after maximum aggregation: 30718 LACNIC Deaggregation factor: 4.13 Prefixes being announced from the LACNIC address blocks: 122592 Unique aggregates announced from the LACNIC address blocks: 50258 LACNIC Region origin ASes present in the Internet Routing Table: 11373 LACNIC Prefixes per ASN: 10.78 LACNIC Region origin ASes announcing only one prefix: 2694 LACNIC Region transit ASes present in the Internet Routing Table: 2544 Average LACNIC Region AS path length visible: 5.4 Max LACNIC Region AS path length visible: 69 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 9390 Number of LACNIC addresses announced to Internet: 170425984 Equivalent to 10 /8s, 40 /16s and 126 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-275868 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 36876 Total AfriNIC prefixes after maximum aggregation: 6966 AfriNIC Deaggregation factor: 5.29 Prefixes being announced from the AfriNIC address blocks: 53328 Unique aggregates announced from the AfriNIC address blocks: 19509 AfriNIC Region origin ASes present in the Internet Routing Table: 2015 AfriNIC Prefixes per ASN: 26.47 AfriNIC Region origin ASes announcing only one prefix: 732 AfriNIC Region transit ASes present in the Internet Routing Table: 390 Average AfriNIC Region AS path length visible: 5.3 Max AfriNIC Region AS path length visible: 53 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 1379 Number of AfriNIC addresses announced to Internet: 103332864 Equivalent to 6 /8s, 40 /16s and 188 /24s AfriNIC AS Blocks 36864-37887, 327680-330751 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 13849 8945 105 CHINAMOBILE-CN China Mobile Communication 7545 5942 829 515 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 5030 4193 77 ERX-CERNET-BKB China Education and Resear 9498 4872 548 322 BBIL-AP BHARTI Airtel Ltd., IN 18403 4553 347 25 FPT-AS-AP FPT Telecom Company, VN 7552 4032 1332 29 VIETEL-AS-AP Viettel Group, VN 7713 3676 1044 65 TELKOMNET-AS-AP PT Telekomunikasi Indones 56046 3476 887 178 CMNET-JIANGSU-AP China Mobile communicati 45899 3344 1868 99 VNPT-AS-VN VNPT Corp, VN 24560 3011 862 515 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 14500 41222 5582 AMAZON-02 - Amazon.com, Inc., US 22773 4780 3118 369 ASN-CXA-ALL-CCI-22773-RDC - Cox Communica 11492 4647 308 1020 CABLEONE - CABLE ONE, INC., US 7155 3861 286 85 VIASAT-SP-BACKBONE - ViaSat,Inc., US 6327 3711 1321 75 SHAW - Shaw Communications, CA 396982 3291 4856 485 GOOGLE-CLOUD-PLATFORM - Google LLC, US 174 3271 8766 848 COGENT-174 - Cogent Communications, LLC, 749 3140 54728 2391 DNIC-AS-00749 - United States Department 36352 2704 222 888 AS-COLOCROSSING - HostPapa, US 16625 2695 1178 2093 AKAMAI-AS - Akamai Technologies, Inc., US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 7204 1711 149 UNI2-AS, ES 39891 4969 306 72 ALJAWWALSTC-AS, SA 9009 3831 355 2248 M247, RO 20940 3822 3389 110 AKAMAI-ASN1, NL 12389 3199 2321 869 ROSTELECOM-AS PJSC Rostelecom. Technical 212238 2680 194 1963 CDNEXT, GB 34984 2463 366 569 TELLCOM-AS, TR 8452 1701 1852 17 TE-AS TE-AS, EG 203020 1635 247 806 HOSTROYALE, IN 13188 1607 100 27 TRIOLAN, UA Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 12817 3301 596 UNINET, MX 10620 3453 458 1104 Telmex Colombia S.A., CO 13999 2461 506 344 Mega Cable, S.A. de C.V., MX 11830 1914 369 65 Instituto Costarricense de Electricidad y 11664 1451 278 33 Techtel LMDS Comunicaciones Interactivas 28573 1372 2430 272 Claro NXT Telecomunicacoes Ltda, BR 3816 1341 770 214 COLOMBIA TELECOMUNICACIONES S.A. ESP BIC, 6147 1244 371 22 INTEGRATEL PERU S.A.A., PE 26615 1057 2475 94 TIM SA, BR 22884 1056 67 358 TOTAL PLAY TELECOMUNICACIONES SA DE CV, M Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24835 2045 648 34 RAYA-AS, EG 36992 1843 1531 336 ETISALAT-MISR, EG 24863 1288 389 16 LINKdotNET-AS, EG 36903 1232 555 98 MT-MPLS, MA 36935 1229 521 44 Vodafone-, EG 37069 1109 1100 11 MOBINIL, EG 29571 1072 78 20 ORANGE-COTE-IVOIRE, CI 20011 586 155 217 NTT-DATA-Inc, ZA 15399 558 58 61 WANANCHI-, KE 36914 540 82 3 KENET-AS, KE Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 14500 41222 5582 AMAZON-02 - Amazon.com, Inc., US 9808 13849 8945 105 CHINAMOBILE-CN China Mobile Communication 8151 12817 3301 596 UNINET, MX 12479 7204 1711 149 UNI2-AS, ES 7545 5942 829 515 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 5030 4193 77 ERX-CERNET-BKB China Education and Resear 39891 4969 306 72 ALJAWWALSTC-AS, SA 9498 4872 548 322 BBIL-AP BHARTI Airtel Ltd., IN 22773 4780 3118 369 ASN-CXA-ALL-CCI-22773-RDC - Cox Communica 11492 4647 308 1020 CABLEONE - CABLE ONE, INC., US Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 13849 13744 CHINAMOBILE-CN China Mobile Communications Grou 8151 12817 12221 UNINET, MX 12479 7204 7055 UNI2-AS, ES 7545 5942 5427 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 5030 4953 ERX-CERNET-BKB China Education and Research Net 39891 4969 4897 ALJAWWALSTC-AS, SA 9498 4872 4550 BBIL-AP BHARTI Airtel Ltd., IN 18403 4553 4528 FPT-AS-AP FPT Telecom Company, VN 22773 4780 4411 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 7552 4032 4003 VIETEL-AS-AP Viettel Group, VN Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 393266 UNALLOCATED 8.23.52.0/24 46887 CROWNCASTLE-AS46887 - C 396894 UNALLOCATED 8.28.201.0/24 3356 LEVEL3 - Level 3 Parent 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE - Phonos 395195 UNALLOCATED 8.38.115.0/24 3356 LEVEL3 - Level 3 Parent 1782 UNALLOCATED 8.42.19.0/24 3356 LEVEL3 - Level 3 Parent 13342 UNALLOCATED 12.17.5.0/24 174 COGENT-174 - Cogent Com 26345 UNALLOCATED 12.21.93.0/24 40264 TWC-40264-WI-MN-UPPERMI 396831 UNALLOCATED 12.23.198.0/24 7018 ATT-INTERNET4 - AT&T En 397665 UNALLOCATED 12.24.28.0/24 7018 ATT-INTERNET4 - AT&T En 395476 UNALLOCATED 12.36.194.0/24 7018 ATT-INTERNET4 - AT&T En Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE - Hurricane Electric LLC, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.137.48.0/24 Origin: 16904 ARVIG-16904 - Arvig Enterprises Inc., US 23.137.48.0/24 Transit: 3257 GTT-BACKBONE GTT, US 23.137.200.0/24 Origin: 16276 OVH, FR 23.137.200.0/24 Transit: 2516 KDDI KDDI CORPORATION, JP 23.140.216.0/24 Origin: 27176 DATAWAGON - DataWagon LLC, US 23.140.216.0/24 Transit: 20278 NEXEON - Nexeon Technologies, Inc., US 23.141.0.0/24 Origin: 395350 RESERVED, ZZ 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS - Charter Communicat 23.142.24.0/24 Origin: 62164 HEYMMAN-2, CA 23.142.24.0/24 Transit: 64236 UNREAL-SERVERS - UnReal Servers, LLC, US Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:14 /10:40 /11:95 /12:297 /13:582 /14:1193 /15:2091 /16:13629 /17:8371 /18:13386 /19:25653 /20:46863 /21:52919 /22:114360 /23:107905 /24:653961 /25:691 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 8151 6978 12817 UNINET, MX 12479 6145 7204 UNI2-AS, ES 39891 3655 4969 ALJAWWALSTC-AS, SA 11492 3507 4647 CABLEONE - CABLE ONE, INC., US 6327 3491 3711 SHAW - Shaw Communications, CA 22773 3048 4780 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc., US 7155 2820 3861 VIASAT-SP-BACKBONE - ViaSat,Inc., US 16509 2606 14500 AMAZON-02 - Amazon.com, Inc., US 30036 2317 2666 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communications Corp, US 10620 2233 3453 Telmex Colombia S.A., CO Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:2518 2:1674 3:1003 4:5 5:5156 6:192 7:6 8:1523 9:38 11:172 12:1197 13:655 14:2709 15:459 16:169 17:422 18:917 20:582 21:4 22:188 23:8219 24:2844 25:2 27:2750 28:1 29:19 31:3408 32:35 34:87 35:294 36:4637 37:4485 38:9987 39:1275 40:412 41:4563 42:2212 43:2989 44:444 45:19881 46:4896 47:410 48:100 49:2196 50:2076 51:614 52:1304 54:276 55:1120 56:11 57:319 58:2420 59:1434 60:1175 61:3127 62:3121 63:1753 64:6258 65:2131 66:6027 67:3260 68:1505 69:4221 70:1057 71:617 72:3144 74:3010 75:1499 76:595 77:2885 78:1938 79:1798 80:2355 81:2203 82:4011 83:1446 84:2094 85:3823 86:1103 87:2445 88:1360 89:4699 90:799 91:8428 92:2844 93:3010 94:4322 95:4667 96:1442 97:315 98:947 99:803 100:68 101:1358 102:4483 103:32416 104:5473 105:813 106:926 107:2852 108:1238 109:4215 110:2296 111:4163 112:3165 113:1982 114:2266 115:2238 116:2172 117:3490 118:2949 119:2115 120:2714 121:1589 122:2995 123:2266 124:1716 125:3012 126:125 128:1673 129:976 130:1613 131:2465 132:811 133:463 134:1648 135:595 136:1593 137:1410 138:3172 139:1634 140:1821 141:1606 142:2549 143:2149 144:1746 145:627 146:2207 147:2145 148:2730 149:3063 150:1202 151:2706 152:2313 153:953 154:9522 155:2313 156:4386 157:2266 158:1507 159:2801 160:3814 161:1956 162:4028 163:2430 164:2037 165:2625 166:1309 167:2251 168:3994 169:894 170:5529 171:1108 172:4600 173:3470 174:887 175:1356 176:3835 177:4795 178:4328 179:2290 180:3071 181:4468 182:3996 183:2825 184:2014 185:21820 186:5720 187:4937 188:4567 189:4511 190:9767 191:1562 192:11527 193:9612 194:7867 195:5757 196:3322 197:3233 198:6304 199:6119 200:8231 201:6348 202:10903 203:10567 204:4752 205:3778 206:4523 207:4023 208:4385 209:5465 210:4996 211:2783 212:5006 213:4126 214:1059 215:46 216:7259 217:3546 218:1747 219:589 220:2202 221:1309 222:1074 223:3403 End of report

1 0

Last-resort tunnel recommendations on WAN network ...
by Bryan Holloway 20 Mar '26

20 Mar '26

Greetings, Dear Community! Consider the following scenario: major colo with a pair of transits, peering, and a single transport back to another colo on our backbone. Transport carries public but also several overlays (VRFs) for management and whatnot. If the transport fails, we're good on transit/peering, but we can't get back to the mothership for mgmt. We're looking at solutions (secure tunnels over transit) to bring the severed colo back to "HQ" ... looking at a hub/spoke topology with the intent of possibly doing this more than once. Requirements: * Multiple VRFs across the tunnel * OSPF - each VRF should have its own instance, so we need something that supports interface-based tunneling since IPsec doesn't handle multicast well. Open to other tunneling strategies. Wireguard? OpenVPN? * v6 a plus (OSPFv3) * 10G should suffice across the board, but it should have interfaces that are LAGable. The appliances we have considered so far do most if not all of these things, but they come with a lot of features (and cost) we simply don't need (e.g., UTM, DPI) Also open to something server (VM) based since our traffic requirements aren't that significant. Easy to support is obviously a plus. Curious if others have had similar needs and how they solved this problem. Recommendations (good or bad) greatly appreciated. Thank you! - bryan

10 15

The NANOG 97 CFP is open through 27-April-2026
by NANOG Program 19 Mar '26

19 Mar '26

NANOG Community at large, The NANOG Program Committee (PC) would like to remind you that we are accepting proposals through Monday, 27 April 2026, for in-person or live remote presentations at all sessions of NANOG 97 taking place in Bellevue, WA on 01-03 June 2026. Our spotlight topic for NANOG 97 is “Reliability Engineering”, but we accept presentations on all relevant topics. The work you do and the ideas you have are interesting and important, and we’d love to hear more about it! Perhaps you’re having trouble figuring out what the NANOG audience would like to see. During every NANOG Conference, we ask everyone to answer the surveys and tell us what they want to hear about at a future conference. Some of the most recent answers are below. If you have a presentation on any of these general or specific topic areas, your community would love to hear from you! AI / Automation Topics Bite-sized AI-related projects to get started with How to weather the upcoming AI crash More case studies and lessons learned LLM training and inference AI vs "traditional" datacenter networks Automation approaches Designing networks for AI traffic Details on how to define and build AI agents - Early-career Professional Development topics - Getting started with automation - Basic hands-on tutorial track - More career development topics - Emerging technologies topics - More on net infra evolution and the drivers around it - New protocols, technologies, IETF work, etc. - Enterprise Networking Topics WAN engineering for the enterprise More enterprise scale conversations vs hyperscaler Cloud networking Datacenters Enterprises interacting with ISPs and the Internet Overlays - Performance - Open source/freely available tools to move data quickly and efficiently - More information about how to measure and improve network performance from hosts. - Routing / BGP Topics - BGP Route Maps - Integrating IPv6 - Interplanetary networking - More on BGP in data centers like the "lightweight traffic engineering" talk - RPKI, Routing - Peering - Residential Broadband - Segment routing - IP and optical lessons learned - Researcher / Student Topics - Opportunity for students to network - Researcher / operator BoF / forum - Security Topics - QUIC - AI-driven botnets and residential proxies - DDoS mitigation topics - Security and IOT - Service Provider Topics WAN engineering Practical Service Provider tips Scaling Broadband Network Gateways Segment Routing Datacenters LPO vs CPO optics SONiC Soft skills More finance for tech talks Talks for the C-suite Attracting software developers to network development/engineering Career development Computing and internet history Intro to NANOG mailing list and other operational communities Risk-based financial decision making Transitioning from technical roles to management - Troubleshooting and best practices Troubleshooting and workflow references Business development / DCI strategy Layer 2 ethernet best practices Network architecture or on-prem troubleshooting Provisioning, troubleshooting - Workshops and How-Tos Network Automation and Tools Routing Protocols - Testing and Troubleshooting RPKI Deployment IPv6 Deployment LLM / AI agents integration Optical / Fiber operations IP / DNS addressing/naming management DDoS Mitigation WiFi management - Other - Edge computing - Hardware topics such as ASIC or specific software oriented network engineering - How to start an ISP from scratch - More cloud network specific topics - Starlink - The deprioritization of multicast support in merchant silicon - - Submit your presentation proposal and abstract via the Program Committee Tool at: https://www.nanog.org/meetings/submit-presentation/ - Sign in with your Profile Account - Select the type of talk you propose to present, and complete the form Timeline for submission and proposal review: NANOG 97 Calendar of Events Date Event/Deadline February 20, 2026 CFP Reminder Announcement TODAY! Call for Content Reminder #2 April 20, 2026 Topics List Published April 27, 2026 DRAFT Presentation Slides Due for Consideration for NANOG97 May 04, 2026 Meeting Agenda Published May 22, 2026 FINAL Slides Due May 31, 2026 On-Site Lightning Talk Submissions Open If you have any questions, please email the PC (nanogpc(a)nanog.org) and a representative will respond to you in a timely manner. Otherwise, submit your talk, tutorial, track, or panel proposal to the Program Committee Tool at your earliest convenience. We look forward to reviewing your submission! Sincerely, Adair Thaxton Program Committee Chair Sent on behalf of the NANOG PC

1 0

How long AS-PATH policies have you used
by Saku Ytti 17 Mar '26

17 Mar '26

We've had problems in various NOS in generating large prefix-lists. In absolute configuration size, as well as prefix-set sizes. I'd like to hear about operational experiences, how long AS-PATH policies people have successfully run and in which NOS. I am not interested in exact AS_PATH contents, I am only interested that it contains a named set of AS numbers, in any order and any repetition. In Junos speak ^[1 42 500 1212]*$ How many ASN can I iterate, before I become market leading and have to work with vendors to fix bugs? The interest is because of RPKI we could get rid of prefix-lists, but we might still want to verify AS_PATH. Consider AS-YTTI having AS43792. a) They advertise google with invalid origin b) They advertise google with valid origin Maybe these come from some BGP optimization tool they run. A) is dropped by RPKI, B) is passed. But B) can be dropped by prefix-list filter or AS-PATH filter which doesn't allow Google ASN to exist in the AS_PATH. So I don't really need to check the prefix again, after it passed RPKI. AS_PATH check is equally strong. -- ++ytti

7 29

AS8075 and strict uRPF contact
by Bryton Herdes 16 Mar '26

16 Mar '26

Hey folks - If there is anyone around from AS8075, please contact me off list. We have an unusual number of ISP partners asking us about a frightening email they received from Microsoft/Azure regarding strict uRPF filtering that will soon block traffic from certain sources, including some traffic that traverses or originates from our network. Even though we "opted out" in the original email we received from AS8075 about strict uRPF for our prefixes, it looks like the message needs reiterated or clarification. Thanks, -- Bryton Herdes Principal Network Engineer AS13335 - Cloudflare

1 0