- NANOG - lists.nanog.org

Weekly Routing Table Report
by cscora＠apnic.net 10 Jul '20

10 Jul '20

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 11 Jul, 2020 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 814906 Prefixes after maximum aggregation (per Origin AS): 309350 Deaggregation factor: 2.63 Unique aggregates announced (without unneeded subnets): 393731 Total ASes present in the Internet Routing Table: 68570 Prefixes per ASN: 11.88 Origin-only ASes present in the Internet Routing Table: 58888 Origin ASes announcing only one prefix: 24571 Transit ASes present in the Internet Routing Table: 9682 Transit-only ASes present in the Internet Routing Table: 297 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 43 Max AS path prepend of ASN ( 22394) 38 Prefixes from unregistered ASNs in the Routing Table: 856 Number of instances of unregistered ASNs: 857 Number of 32-bit ASNs allocated by the RIRs: 32419 Number of 32-bit ASNs visible in the Routing Table: 26740 Prefixes from 32-bit ASNs in the Routing Table: 122999 Number of bogon 32-bit ASNs visible in the Routing Table: 14 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 519 Number of addresses announced to Internet: 2844535296 Equivalent to 169 /8s, 140 /16s and 42 /24s Percentage of available address space announced: 76.8 Percentage of allocated address space announced: 76.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 275092 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 213547 Total APNIC prefixes after maximum aggregation: 62625 APNIC Deaggregation factor: 3.41 Prefixes being announced from the APNIC address blocks: 207325 Unique aggregates announced from the APNIC address blocks: 86072 APNIC Region origin ASes present in the Internet Routing Table: 10707 APNIC Prefixes per ASN: 19.36 APNIC Region origin ASes announcing only one prefix: 3015 APNIC Region transit ASes present in the Internet Routing Table: 1598 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 28 Number of APNIC region 32-bit ASNs visible in the Routing Table: 5787 Number of APNIC addresses announced to Internet: 768306560 Equivalent to 45 /8s, 203 /16s and 109 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-141625 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 238511 Total ARIN prefixes after maximum aggregation: 109521 ARIN Deaggregation factor: 2.18 Prefixes being announced from the ARIN address blocks: 235868 Unique aggregates announced from the ARIN address blocks: 116804 ARIN Region origin ASes present in the Internet Routing Table: 18529 ARIN Prefixes per ASN: 12.73 ARIN Region origin ASes announcing only one prefix: 6782 ARIN Region transit ASes present in the Internet Routing Table: 1902 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 42 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3308 Number of ARIN addresses announced to Internet: 1082475008 Equivalent to 64 /8s, 133 /16s and 66 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 231095 Total RIPE prefixes after maximum aggregation: 106765 RIPE Deaggregation factor: 2.16 Prefixes being announced from the RIPE address blocks: 227678 Unique aggregates announced from the RIPE address blocks: 134371 RIPE Region origin ASes present in the Internet Routing Table: 27176 RIPE Prefixes per ASN: 8.38 RIPE Region origin ASes announcing only one prefix: 11764 RIPE Region transit ASes present in the Internet Routing Table: 3846 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 29 Number of RIPE region 32-bit ASNs visible in the Routing Table: 9289 Number of RIPE addresses announced to Internet: 709184896 Equivalent to 42 /8s, 69 /16s and 77 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 107597 Total LACNIC prefixes after maximum aggregation: 24991 LACNIC Deaggregation factor: 4.31 Prefixes being announced from the LACNIC address blocks: 108723 Unique aggregates announced from the LACNIC address blocks: 46766 LACNIC Region origin ASes present in the Internet Routing Table: 10079 LACNIC Prefixes per ASN: 10.79 LACNIC Region origin ASes announcing only one prefix: 2516 LACNIC Region transit ASes present in the Internet Routing Table: 1895 Average LACNIC Region AS path length visible: 5.1 Max LACNIC Region AS path length visible: 43 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 7656 Number of LACNIC addresses announced to Internet: 174563840 Equivalent to 10 /8s, 103 /16s and 162 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 23299 Total AfriNIC prefixes after maximum aggregation: 4776 AfriNIC Deaggregation factor: 4.88 Prefixes being announced from the AfriNIC address blocks: 34793 Unique aggregates announced from the AfriNIC address blocks: 9292 AfriNIC Region origin ASes present in the Internet Routing Table: 1409 AfriNIC Prefixes per ASN: 24.69 AfriNIC Region origin ASes announcing only one prefix: 494 AfriNIC Region transit ASes present in the Internet Routing Table: 286 Average AfriNIC Region AS path length visible: 5.0 Max AfriNIC Region AS path length visible: 28 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 700 Number of AfriNIC addresses announced to Internet: 109560576 Equivalent to 6 /8s, 135 /16s and 195 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5514 735 656 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4741 4192 73 ERX-CERNET-BKB China Education and Rese 7552 3391 1330 21 VIETEL-AS-AP Viettel Group, VN 45899 3168 1839 101 VNPT-AS-VN VNPT Corp, VN 7713 2700 827 535 TELKOMNET-AS-AP PT Telekomunikasi Indon 9808 2577 9043 60 CMNET-GD Guangdong Mobile Communication 9498 2286 434 228 BBIL-AP BHARTI Airtel Ltd., IN 4766 2268 11101 551 KIXS-AS-KR Korea Telecom, KR 4755 2134 441 193 TATACOMM-AS TATA Communications formerl 9394 2033 4914 20 CTTNET China TieTong Telecommunications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 4456 299 656 CABLEONE, US 7155 4019 264 27 VIASAT-SP-BACKBONE, US 16509 4014 8144 1804 AMAZON-02, US 22773 3578 2970 157 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3351 1324 90 SHAW, CA 16625 3132 1635 2227 AKAMAI-AS, US 30036 2424 365 158 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2417 5075 526 CENTURYLINK-US-LEGACY-QWEST, US 26484 2312 145 241 IKGUL-26484, US 5650 2306 2981 1622 FRONTIER-FRTR, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5839 1652 135 UNI2-AS, ES 31334 5141 471 47 KABELDEUTSCHLAND-AS, DE 8551 3172 379 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 3064 1313 1335 AKAMAI-ASN1, EU 39891 2879 171 19 ALJAWWALSTC-AS, SA 12389 2550 2263 757 ROSTELECOM-AS, RU 34984 2163 354 566 TELLCOM-AS, TR 9009 2094 216 1133 M247, GB 13188 1609 100 35 TRIOLAN, UA 61317 1366 162 585 ASDETUK http://www.heficed.com, GB Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6783 3332 596 Uninet S.A. de C.V., MX 10620 3368 530 504 Telmex Colombia S.A., CO 11830 2646 369 63 Instituto Costarricense de Electricidad 6503 1692 325 381 Mega Cable, S.A. de C.V., MX 7303 1503 972 252 Telecom Argentina S.A., AR 13999 1448 517 342 Mega Cable, S.A. de C.V., MX 28573 1402 2247 217 CLARO S.A., BR 6147 1134 379 39 Telefonica del Peru S.A.A., PE 3816 1115 570 152 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 956 112 71 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1491 393 22 LINKdotNET-AS, EG 24835 1120 474 23 RAYA-AS, EG 36992 1111 1539 76 ETISALAT-MISR, EG 36903 917 480 93 MT-MPLS, MA 29571 625 68 11 ORANGE-COTE-IVOIRE, CI 6713 552 1863 34 IAM-AS, MA 15399 491 45 12 WANANCHI-, KE 37342 482 32 1 MOVITEL, MZ 36935 438 522 41 Vodafone-, EG 23889 344 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6783 3332 596 Uninet S.A. de C.V., MX 12479 5839 1652 135 UNI2-AS, ES 7545 5514 735 656 TPG-INTERNET-AP TPG Telecom Limited, AU 31334 5141 471 47 KABELDEUTSCHLAND-AS, DE 4538 4741 4192 73 ERX-CERNET-BKB China Education and Rese 11492 4456 299 656 CABLEONE, US 7155 4019 264 27 VIASAT-SP-BACKBONE, US 16509 4014 8144 1804 AMAZON-02, US 22773 3578 2970 157 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3391 1330 21 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 5839 5704 UNI2-AS, ES 31334 5141 5094 KABELDEUTSCHLAND-AS, DE 7545 5514 4858 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4741 4668 ERX-CERNET-BKB China Education and Research Net 7155 4019 3992 VIASAT-SP-BACKBONE, US 11492 4456 3800 CABLEONE, US 22773 3578 3421 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3391 3370 VIETEL-AS-AP Viettel Group, VN 6327 3351 3261 SHAW, CA 8551 3172 3127 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 22357 UNALLOCATED 8.7.108.0/24 3356 LEVEL3, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 174 COGENT-174, US 62485 UNALLOCATED 8.23.229.0/24 3356 LEVEL3, US 32985 UNALLOCATED 8.28.31.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 26584 UNALLOCATED 8.42.62.0/23 209 CENTURYLINK-US-LEGACY-QWEST, 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 46766 UNALLOCATED 8.44.208.0/24 3356 LEVEL3, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala 27.126.156.0/23 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala 27.126.158.0/23 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala 41.67.208.0/21 Origin: 15964 CAMNET-AS, CM Transit: 12956 TELEFONICA TELXIUS, ES Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:9 /9:11 /10:37 /11:100 /12:286 /13:577 /14:1175 /15:1923 /16:13364 /17:8231 /18:13972 /19:25874 /20:40900 /21:48454 /22:101151 /23:83711 /24:473849 /25:1282 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 31334 5025 5141 KABELDEUTSCHLAND-AS, DE 12479 4863 5839 UNI2-AS, ES 11492 3516 4456 CABLEONE, US 6327 3140 3351 SHAW, CA 7155 3112 4019 VIASAT-SP-BACKBONE, US 22773 2780 3578 ASN-CXA-ALL-CCI-22773-RDC, US 8551 2631 3172 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 8151 2459 6783 Uninet S.A. de C.V., MX 39891 2417 2879 ALJAWWALSTC-AS, SA 30036 2166 2424 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1551 2:1188 3:30 4:19 5:3374 6:52 8:1472 9:1 11:1 12:1780 13:510 14:2297 15:72 16:8 17:291 18:80 20:110 23:3767 24:2308 25:3 27:2546 31:3092 32:130 34:1 35:41 36:954 37:3282 38:1936 39:429 40:127 41:3667 42:615 43:2119 44:206 45:14548 46:3717 47:297 49:1478 50:1544 51:90 52:1105 54:224 55:671 56:6 57:51 58:1757 59:1178 60:765 61:2297 62:2124 63:1979 64:5207 65:2326 66:5018 67:2874 68:1173 69:3984 70:1399 71:679 72:2859 74:2568 75:1447 76:653 77:2894 78:1642 79:2392 80:1946 81:1652 82:1313 83:1253 84:1230 85:2609 86:547 87:1742 88:1136 89:2754 90:331 91:8072 92:1534 93:2504 94:2735 95:3907 96:1222 97:339 98:920 99:975 100:86 101:999 102:1004 103:23917 104:3444 105:400 106:912 107:2048 108:704 109:3641 110:1848 111:2018 112:1636 113:1337 114:1541 115:1827 116:1789 117:2097 118:2073 119:1716 120:843 121:1035 122:2445 123:2073 124:1567 125:2028 128:1376 129:1214 130:659 131:1861 132:773 133:306 134:1349 135:304 136:621 137:847 138:2211 139:1010 140:697 141:1049 142:936 143:1232 144:1093 145:330 146:1478 147:1009 148:2115 149:1220 150:808 151:1073 152:1498 153:416 154:4542 155:1118 156:2995 157:1119 158:845 159:1974 160:1910 161:1068 162:3090 163:825 164:1476 165:1296 166:564 167:1618 168:3522 169:580 170:4241 171:779 172:1944 173:2573 174:982 175:1056 176:2567 177:4177 178:3026 179:1535 180:2273 181:2487 182:3097 183:1155 184:2408 185:16519 186:3788 187:2881 188:4053 189:2445 190:8797 191:1354 192:10406 193:7551 194:6247 195:4395 196:3184 197:2022 198:6118 199:5891 200:7247 201:5246 202:10556 203:10261 204:4555 205:3118 206:3176 207:3264 208:4063 209:4463 210:3993 211:2017 212:3418 213:3131 214:1167 215:62 216:6013 217:2408 218:855 219:616 220:2014 221:949 222:1006 223:1519 End of report

1 0

Your Voice, Your Vote — Help Shape NANOG's Future 👉
by NANOG News 10 Jul '20

10 Jul '20

Our success depends on the collective expertise of the NANOG community to help direct and shape our organization in service of our mission. The first of NANOG's two 2020 elections takes place July 20-22. Become a NANOG member before voting opens to exercise your right to participate, and make your voice heard! Learn More <https://www.nanog.org/participate/elections-nominations/>

1 0

IPv6 over vxlan+evpn Arista?
by David Hubbard 10 Jul '20

10 Jul '20

Hi all, was curious if anyone is doing dual stack v4/v6 over Arista’s implementation of vxlan / evpn (the inter-data center transport would be v4)? They have plenty of references for v4 deployments but had to check on v6 support, which can make one nervous; they did confirm it’s supported. Looking to leverage it as a way to migrate a dual-stack data center without re-addressing. Thanks, David

2 2

Re: 60ms cross continent
by joe mcguckin 10 Jul '20

10 Jul '20

Theoretically, Starlink should be faster cross country than terrestrial fiber. Joe McGuckin ViaNet Communications joe(a)via.net 650-207-0372 cell 650-213-1302 office 650-969-2124 fax

12 28

L2VPN/L2transport, Cumulus Linux & hardware suggestion
by Jürgen Jaritsch 09 Jul '20

09 Jul '20

Dear folks, have anyone already tried to run VXLAN/EVPN + Bridge Layer 2 Protocol Tunneling on Cumulus Linux as an replacement for classic MPLS L2VPN/VPWS (xconnect, l2circuit, VLL) ? I need to provide transparent Ethernet P2P virtual leased lines to my customers and these have to support stuff like LLDP, STP, LACP, etc. The transport L2 network is not THAT big: max hops between VTEP is 4. Anyone have suggestions for the below hardware request? #) 1-3U L2/L3 box #) 48x SFP28 / 1/10/25G #) 6x QSFP28 / 100G #) VXLAN/EVPN with L2 tunneling support or #) MPLS VPWS/l2circuit #) Dual PSU thanks & best regards Jürgen

8 13

Spoofer Report for NANOG for Jun 2020
by CAIDA Spoofer Project 08 Jul '20

08 Jul '20

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Jun 2020: ASN Name Fixed-By 14525 OMNIFICENT-NET 2020-06-07 10745 ARIN-ASH-CHA 2020-06-12 63018 DEDICATED 2020-06-22 23473 PAVLOVMEDIA 2020-06-29 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Jun 2020: ASN Name First-Spoofed Last-Spoofed 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2020-06-25 6128 CABLE-NET-1 2016-09-03 2020-06-30 7459 GRANDECOM-AS1 2016-09-26 2020-06-11 20412 CLARITY-TELECOM 2016-09-30 2020-06-29 6181 FUSE-NET 2016-10-10 2020-06-29 11427 TWC-11427-TEXAS 2016-10-21 2020-06-22 174 COGENT-174 2016-10-21 2020-06-30 32440 LONI 2016-11-03 2020-06-28 12083 WOW-INTERNET 2016-11-09 2020-06-28 39939 RISE-CO-AS39939 2016-11-11 2020-06-27 30036 MEDIACOM-ENTERPRISE-BUSINESS 2016-11-16 2020-06-29 9009 M247 2017-01-10 2020-06-21 63296 AWBROADBAND 2017-09-01 2020-06-30 20448 VPNTRANET-LLC 2018-09-20 2020-06-12 8047 GCI 2019-04-11 2020-06-25 33387 NOCIX 2019-06-06 2020-06-27 46300 HSC-WAP 2019-10-30 2020-06-26 21859 ZNET 2019-12-26 2020-06-18 239 UTORONTO 2020-01-28 2020-06-27 13614 ALLWEST 2020-03-16 2020-06-30 26335 MTSU 2020-03-20 2020-06-15 7859 PAIR-NETWORKS 2020-04-03 2020-06-27 5078 ONENET-AS-1 2020-04-06 2020-06-30 29844 SENAWAVE 2020-05-22 2020-06-04 11650 PLDI 2020-05-25 2020-06-24 6391 URBAN-15 2020-05-29 2020-06-30 5690 VIANET-NO 2020-06-12 2020-06-25 21565 AS21565 2020-06-21 2020-06-27 395723 LIGHTSPEEDHOSTING1 2020-06-22 2020-06-25 11525 HRTC 2020-06-27 2020-06-29 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Hoping to attend NANOG 80?
by NANOG News 08 Jul '20

08 Jul '20

*Share your insights!* The health and safety of the NANOG community is our top priority, and your feedback is extremely valuable in our efforts to continue providing the safest conference experiences possible. Planning to attend NANOG 80? We'd love to hear your thoughts! Take Survey <https://www.surveymonkey.com/r/YHG6GGZ>

1 0

CGNAT Opensource with support to BPA, EIM/EIF, UPnP-PCP
by Douglas Fischer 08 Jul '20

08 Jul '20

We are looking for a CGNAT solution open source based. Yep, I know that basic CGNAT can be done with iptables / nftables, or PF / IPFILTER / IPFW. But I only know Open Source CGNAT recipes with predefined public-ports <-> private IPs mapping. What It brings two types of issues: A - The need to overprovision the number of private IPs (Considering Multiple BNGs behind the CGN). B - The inability of those basic recipes to deal with incoming auxiliary connections of p2p protocols (mostly used by games). Te market solutions that I've dealt with solves those issues beautifully. a - Bulk-Port Allocation - BPA, avoid the need overprovisioning private address that is not being used, and give us an excellent rate between public IPv4 Address vs Private IP Address. b - The support of a framework of protocols(Ex.: UPnP, PCP, EIM/EIF, NAT-PMP, etc...) ensure an acceptable quality of experience to end-users. But, the market solution brings also some down-sides... - The cost, evidently. - The need for detouring the traffic that doesn't need CGNAT(Internal CDNs, Internal Servers, etc), to stay on the license limits of those boxes, sometimes brings some issues. So, I and some friends are(for a long time) looking for an OpenSource solution that can give us something near what the market solutions give. Any of you guys ave some suggestions for that? P.S.: Yes, I know that IPv6 is the only real solution for that, but until there, our customers still want to access a lot os p2p content(mostly audio in game rooms, sip calls, and things like that.) P.S.2: Yes, I also know that 464 could be a good possibility, but is not possible in this scenario. -- Douglas Fernando Fischer Engº de Controle e Automação

6 5

pandemic stories about network ops/engineering
by Mehmet Akcin 07 Jul '20

07 Jul '20

hey there, Millions of people working from home, I am sure there was a lot of hard work from network and systems teams to build and upgrade capacity before and during the covid19 pandemic. I have a youtube series I am focusing on internet infrastructure and new normal, I would like to discover new stories about how network teams have handled unique stories during this time. Something different where you think it's important for people to know. I think there are many heroes who made this stay at home possible with enabling technology and my goal is to give these individuals a little bit visibility they deserve. For example youtube stream https://youtu.be/wFmZadETNDQ if you have suggestions about guests, please contact offlist. thank you Mehmet

1 0

rfc4271 ORIGIN/path of default route, should the value be 0 or 2?
by Drew Weaver 07 Jul '20

07 Jul '20

Howdy, I am using a multi-vendor network and validating the inter-operability. When I announce a default route to a BGP peer using default-originate applied to the peer group/neighbor configuration: in vendor A that route is sent with ORIGIN 0 (internal) in vendor B that route is sent with ORIGIN 2 (Unknown) Downstream it looks like this: Network Next Hop Metric LocPrf Weight Path * i 0.0.0.0 192.168.27.1 100 0 ? *>i 192.168.25.1 0 100 0 i * i 192.168.27.2 100 0 ? I don't believe that it has a functionality impact but I would like to know which one you think follows the RFC more closely. https://tools.ietf.org/html/rfc4271 thanks, -Drew

3 3