- NANOG - lists.nanog.org

Re: Iran cuts 95% of Internet traffic
by Scott Weeks 30 Dec '19

30 Dec '19

--- sean(a)donelan.com wrote: From: Sean Donelan <sean(a)donelan.com> Its very practical for a country to cut 95%+ of its Internet connectivity. Its not a complete cut-off, there is some limited connectivity. But for most ordinary individuals, their communication channels are cut-off. https://twitter.com/netblocks/status/1196366347938271232 ------------------------------------------ Does anyone know the network mechanics of how this happens? For example, do all fiber connections go through a governmant choke point for suppression? If so, what's to stop ubiquity-style microwave over the border to sympathetic folks on the other side? scott

9 8

Hulu contact for a blacklisted IP
by Chris Hudson 30 Dec '19

30 Dec '19

It looks like our NAT public IP has been blacklisted by Hulu. Does anyone have a contact to aid in fixing this? Chris Hudson Hudson Technology Solutions, Inc. 10319 N 2410 Rd Weatherford, OK 73096 Office: 580-772-2224 Cell: 580-774-9579

2 1

Re: Iran cuts 95% of Internet traffic
by Scott Weeks 30 Dec '19

30 Dec '19

:: If you're trying to get information in/out of a :: society that is raising network barriers to :: realtime communication, then you need methods :: that don't rely on a network and aren't realtime. This is a great idea, but 99.9% of folks use GUI email. :-( scott --- rsk(a)gsp.org wrote: From: Rich Kulawiec <rsk(a)gsp.org> To: nanog(a)nanog.org Subject: Re: Iran cuts 95% of Internet traffic Date: Sun, 29 Dec 2019 09:11:23 -0500 And this is why, despite all the disdainful remarks labeling such things as "antiquated", mailing lists and Usenet newsgroups are vastly superior to web sites/message boards/et.al. when it comes to facilitating many-to-many communications between people. Why? Well, there are many reasons, but one of the applicable ones in this use case is that their queues can be written to media, physically transported in/out, and then injected either into an internal or external network seamlessly modulo the time delay. And because the computing resources required to handle this are in any laptop or desktop made in the last decade, probably earlier. If you're trying to get information in/out of a society that is raising network barriers to realtime communication, then you need methods that don't rely on a network and aren't realtime. ---rsk

4 3

Re: Iran cuts 95% of Internet traffic
by Scott Weeks 30 Dec '19

30 Dec '19

--- jhellenthal(a)dataix.net wrote: From: "J. Hellenthal" <jhellenthal(a)dataix.net> Yeah sorry to say any email list or not is going to be one of the things that are not going to get through unless ... you’ve taken extra measures to circumvent that. Personally, email would be the easiest to block behind riuting. ------------------------------------------- After I sent the email I started to realize I likely misunderstood. I hesitated to correct that to the list, but here I go. :) > queues can be written to media, physically transported > in/out, and then injected either into an internal or > external network seamlessly modulo the time delay. I believe he meant similar to *nix boxes where you could just copy the files in $HOME/mail (or where ever it is) onto media and once the data is out of the country it can be copied onto another mail system's $HOME/mail and then shared with the unblocked part of the internet. Not a user account on somethingmail.com, but rather the entire $HOME/mail of all accounts and mailed to someone else who is somewhere else on a regular basis. Also, the reverse path for receiving mail in the repressive country. A good idea either way. KISS works. :) scott -- J. Hellenthal The fact that there's a highway to Hell but only a stairway to Heaven says a lot about anticipated traffic volume. > On Dec 29, 2019, at 15:57, Scott Weeks <surfer(a)mauigateway.com> wrote: > > > > :: If you're trying to get information in/out of a > :: society that is raising network barriers to > :: realtime communication, then you need methods > :: that don't rely on a network and aren't realtime. > > > This is a great idea, but 99.9% of folks use GUI > email. :-( > > scott > > > > > --- rsk(a)gsp.org wrote: > > From: Rich Kulawiec <rsk(a)gsp.org> > To: nanog(a)nanog.org > Subject: Re: Iran cuts 95% of Internet traffic > Date: Sun, 29 Dec 2019 09:11:23 -0500 > > > And this is why, despite all the disdainful remarks labeling such > things as "antiquated", mailing lists and Usenet newsgroups are vastly > superior to web sites/message boards/et.al. when it comes to facilitating > many-to-many communications between people. Why? Well, there are many > reasons, but one of the applicable ones in this use case is that their > queues can be written to media, physically transported in/out, and then > injected either into an internal or external network seamlessly modulo the > time delay. And because the computing resources required to handle this > are in any laptop or desktop made in the last decade, probably earlier. > > If you're trying to get information in/out of a society that is raising > network barriers to realtime communication, then you need methods that > don't rely on a network and aren't realtime. > > ---rsk > > >

3 2

Weekly Routing Table Report
by cscora＠apnic.net 27 Dec '19

27 Dec '19

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 28 Dec, 2019 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 789378 Prefixes after maximum aggregation (per Origin AS): 300819 Deaggregation factor: 2.62 Unique aggregates announced (without unneeded subnets): 386795 Total ASes present in the Internet Routing Table: 66619 Prefixes per ASN: 11.85 Origin-only ASes present in the Internet Routing Table: 57269 Origin ASes announcing only one prefix: 24202 Transit ASes present in the Internet Routing Table: 9350 Transit-only ASes present in the Internet Routing Table: 285 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 41 Max AS path prepend of ASN ( 8697) 28 Prefixes from unregistered ASNs in the Routing Table: 1318 Number of instances of unregistered ASNs: 1318 Number of 32-bit ASNs allocated by the RIRs: 29978 Number of 32-bit ASNs visible in the Routing Table: 24677 Prefixes from 32-bit ASNs in the Routing Table: 112816 Number of bogon 32-bit ASNs visible in the Routing Table: 28 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 296 Number of addresses announced to Internet: 2845720960 Equivalent to 169 /8s, 158 /16s and 65 /24s Percentage of available address space announced: 76.9 Percentage of allocated address space announced: 76.9 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.4 Total number of prefixes smaller than registry allocations: 264051 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 209874 Total APNIC prefixes after maximum aggregation: 61094 APNIC Deaggregation factor: 3.44 Prefixes being announced from the APNIC address blocks: 203973 Unique aggregates announced from the APNIC address blocks: 84591 APNIC Region origin ASes present in the Internet Routing Table: 10280 APNIC Prefixes per ASN: 19.84 APNIC Region origin ASes announcing only one prefix: 2868 APNIC Region transit ASes present in the Internet Routing Table: 1530 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 26 Number of APNIC region 32-bit ASNs visible in the Routing Table: 5326 Number of APNIC addresses announced to Internet: 767362816 Equivalent to 45 /8s, 189 /16s and 7 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-141625 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 231596 Total ARIN prefixes after maximum aggregation: 107134 ARIN Deaggregation factor: 2.16 Prefixes being announced from the ARIN address blocks: 229437 Unique aggregates announced from the ARIN address blocks: 116167 ARIN Region origin ASes present in the Internet Routing Table: 18347 ARIN Prefixes per ASN: 12.51 ARIN Region origin ASes announcing only one prefix: 6761 ARIN Region transit ASes present in the Internet Routing Table: 1913 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 28 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3083 Number of ARIN addresses announced to Internet: 1074125056 Equivalent to 64 /8s, 5 /16s and 217 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 222906 Total RIPE prefixes after maximum aggregation: 103929 RIPE Deaggregation factor: 2.14 Prefixes being announced from the RIPE address blocks: 219332 Unique aggregates announced from the RIPE address blocks: 130015 RIPE Region origin ASes present in the Internet Routing Table: 26731 RIPE Prefixes per ASN: 8.21 RIPE Region origin ASes announcing only one prefix: 11714 RIPE Region transit ASes present in the Internet Routing Table: 3758 Average RIPE Region AS path length visible: 4.5 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 8805 Number of RIPE addresses announced to Internet: 723613824 Equivalent to 43 /8s, 33 /16s and 120 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 102477 Total LACNIC prefixes after maximum aggregation: 23476 LACNIC Deaggregation factor: 4.37 Prefixes being announced from the LACNIC address blocks: 103640 Unique aggregates announced from the LACNIC address blocks: 45217 LACNIC Region origin ASes present in the Internet Routing Table: 9249 LACNIC Prefixes per ASN: 11.21 LACNIC Region origin ASes announcing only one prefix: 2381 LACNIC Region transit ASes present in the Internet Routing Table: 1748 Average LACNIC Region AS path length visible: 5.3 Max LACNIC Region AS path length visible: 41 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 6817 Number of LACNIC addresses announced to Internet: 173920768 Equivalent to 10 /8s, 93 /16s and 210 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-270748 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 21206 Total AfriNIC prefixes after maximum aggregation: 4409 AfriNIC Deaggregation factor: 4.81 Prefixes being announced from the AfriNIC address blocks: 32700 Unique aggregates announced from the AfriNIC address blocks: 10568 AfriNIC Region origin ASes present in the Internet Routing Table: 1351 AfriNIC Prefixes per ASN: 24.20 AfriNIC Region origin ASes announcing only one prefix: 478 AfriNIC Region transit ASes present in the Internet Routing Table: 273 Average AfriNIC Region AS path length visible: 5.0 Max AfriNIC Region AS path length visible: 23 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 646 Number of AfriNIC addresses announced to Internet: 106406656 Equivalent to 6 /8s, 87 /16s and 163 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5164 636 597 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4697 4192 73 ERX-CERNET-BKB China Education and Rese 7552 3283 1331 25 VIETEL-AS-AP Viettel Group, VN 45899 3114 1781 105 VNPT-AS-VN VNPT Corp, VN 7713 2697 798 495 TELKOMNET-AS-AP PT Telekomunikasi Indon 9808 2613 9043 62 CMNET-GD Guangdong Mobile Communication 4766 2269 11102 567 KIXS-AS-KR Korea Telecom, KR 9498 2216 433 214 BBIL-AP BHARTI Airtel Ltd., IN 9829 2204 1389 285 BSNL-NIB National Internet Backbone, IN 4755 2150 442 195 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7155 4047 280 27 VIASAT-SP-BACKBONE - ViaSat,Inc., US 11492 3849 253 645 CABLEONE - CABLE ONE, INC., US 16509 3797 7702 1678 AMAZON-02 - Amazon.com, Inc., US 22773 3508 2971 153 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 6327 3364 1324 93 SHAW - Shaw Communications Inc., CA 16625 2965 1555 2130 AKAMAI-AS - Akamai Technologies, Inc., 30036 2277 357 89 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 209 2174 5075 540 CENTURYLINK-US-LEGACY-QWEST - CenturyLi 20115 2134 2773 518 CHARTER-20115 - Charter Communications, 18566 2062 405 103 MEGAPATH5-US - MegaPath Corporation, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5853 1631 135 UNI2-AS, ES 39891 4034 219 19 ALJAWWALSTC-AS, SA 31334 3361 484 13 KABELDEUTSCHLAND-AS, DE 8551 3060 379 46 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2813 472 1962 AKAMAI-ASN1, US 12389 2423 2237 701 ROSTELECOM-AS, RU 34984 2047 348 558 TELLCOM-AS, TR 9009 2023 218 1096 M247, GB 9121 1948 1691 18 TTNET, TR 13188 1605 100 46 TRIOLAN, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6176 3299 614 Uninet S.A. de C.V., MX 10620 3363 533 462 Telmex Colombia S.A., CO 11830 2681 369 63 Instituto Costarricense de Electricidad 6503 1681 323 388 Axtel, S.A.B. de C.V., MX 7303 1477 1022 264 Telecom Argentina S.A., AR 28573 1269 2234 206 CLARO S.A., BR 13999 1145 495 273 Mega Cable, S.A. de C.V., MX 3816 1119 561 133 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1095 379 39 Telefonica del Peru S.A.A., PE 11172 943 111 65 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1245 393 23 LINKdotNET-AS, EG 36992 1033 1535 73 ETISALAT-MISR, EG 24835 978 566 24 RAYA-AS, EG 36903 876 452 97 MT-MPLS, MA 6713 622 1863 34 IAM-AS, MA 29571 559 68 11 ORANGE-COTE-IVOIRE, CI 37342 483 32 1 MOVITEL, MZ 36935 371 522 40 Vodafone-, EG 23889 354 231 15 MauritiusTelecom, MU 15399 347 45 10 WANANCHI-, KE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6176 3299 614 Uninet S.A. de C.V., MX 12479 5853 1631 135 UNI2-AS, ES 7545 5164 636 597 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4697 4192 73 ERX-CERNET-BKB China Education and Rese 7155 4047 280 27 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 4034 219 19 ALJAWWALSTC-AS, SA 11492 3849 253 645 CABLEONE - CABLE ONE, INC., US 16509 3797 7702 1678 AMAZON-02 - Amazon.com, Inc., US 22773 3508 2971 153 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 6327 3364 1324 93 SHAW - Shaw Communications Inc., CA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 5853 5718 UNI2-AS, ES 4538 4697 4624 ERX-CERNET-BKB China Education and Research Net 7545 5164 4567 TPG-INTERNET-AP TPG Telecom Limited, AU 7155 4047 4020 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 4034 4015 ALJAWWALSTC-AS, SA 22773 3508 3355 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 31334 3361 3348 KABELDEUTSCHLAND-AS, DE 6327 3364 3271 SHAW - Shaw Communications Inc., CA 7552 3283 3258 VIETEL-AS-AP Viettel Group, VN 11492 3849 3204 CABLEONE - CABLE ONE, INC., US Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3 - Level 3 Parent, LLC 393266 UNALLOCATED 8.23.52.0/24 174 COGENT-174 - Cogent Communic 62485 UNALLOCATED 8.23.229.0/24 3356 LEVEL3 - Level 3 Parent, LLC 32985 UNALLOCATED 8.28.31.0/24 3356 LEVEL3 - Level 3 Parent, LLC 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174 - Cogent Communic 23071 UNALLOCATED 8.33.235.0/24 3356 LEVEL3 - Level 3 Parent, LLC 27205 UNALLOCATED 8.38.16.0/21 6461 ZAYO-6461 - Zayo Bandwidth, 27205 UNALLOCATED 8.38.16.0/22 32787 PROLEXIC-TECHNOLOGIES-DDOS-M 27205 UNALLOCATED 8.38.20.0/22 32787 PROLEXIC-TECHNOLOGIES-DDOS-M 14109 UNALLOCATED 8.38.252.0/24 3356 LEVEL3 - Level 3 Parent, LLC Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE - Hurricane Electric LLC, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Originated Origin AS Transit AS Origin AS Name 23.136.224.0/24 15206 174 UNASSIGNED 27.100.7.0/24 56096 45455 UNASSIGNED 27.126.156.0/22 55827 9930 UNASSIGNED 27.126.156.0/23 55827 9930 UNASSIGNED 27.126.158.0/23 55827 9930 UNASSIGNED 41.67.192.0/18 15964 12956 CAMNET-AS, CM 41.67.192.0/24 15964 12956 CAMNET-AS, CM 41.67.200.0/24 15964 12956 CAMNET-AS, CM 41.67.201.0/24 15964 12956 CAMNET-AS, CM 41.67.202.0/24 15964 12956 CAMNET-AS, CM Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:10 /9:11 /10:37 /11:98 /12:287 /13:579 /14:1158 /15:1920 /16:13357 /17:8091 /18:13868 /19:25745 /20:40336 /21:47526 /22:98233 /23:80548 /24:456256 /25:1318 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 4814 5853 UNI2-AS, ES 31334 3206 3361 KABELDEUTSCHLAND-AS, DE 6327 3152 3364 SHAW - Shaw Communications Inc., CA 7155 3139 4047 VIASAT-SP-BACKBONE - ViaSat,Inc., US 11492 3002 3849 CABLEONE - CABLE ONE, INC., US 39891 2946 4034 ALJAWWALSTC-AS, SA 22773 2730 3508 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 2519 3060 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11830 2029 2681 Instituto Costarricense de Electricidad y Telec 30036 2026 2277 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1529 2:1152 3:12 4:19 5:3204 6:47 8:1364 9:1 12:1795 13:495 14:2183 15:54 16:9 17:280 18:79 20:58 23:3158 24:2612 25:4 27:2514 31:2826 32:101 35:46 36:937 37:3228 38:1806 39:310 40:132 41:3292 42:879 43:2110 44:186 45:12683 46:3247 47:262 49:1423 50:1136 51:344 52:1128 54:275 55:688 56:6 57:47 58:1881 59:1117 60:664 61:2204 62:2125 63:1925 64:5000 65:2300 66:4810 67:2824 68:1224 69:3808 70:1394 71:672 72:2754 74:2691 75:1435 76:666 77:2538 78:1973 79:2311 80:1797 81:1540 82:1190 83:987 84:1216 85:2551 86:584 87:1652 88:1062 89:2665 90:264 91:7446 92:1455 93:2448 94:2593 95:3700 96:1006 97:339 98:963 99:963 100:85 101:1095 102:721 103:22852 104:3609 105:374 106:848 107:1856 108:694 109:3620 110:1767 111:1933 112:1544 113:1394 114:1466 115:1840 116:1808 117:1998 118:2098 119:1678 120:886 121:1034 122:2367 123:1876 124:1545 125:2018 128:1378 129:909 130:584 131:1852 132:776 133:297 134:1275 135:274 136:594 137:852 138:2186 139:979 140:603 141:858 142:822 143:1113 144:939 145:291 146:1439 147:1012 148:1887 149:1036 150:808 151:1250 152:1457 153:368 154:4624 155:886 156:3079 157:1081 158:695 159:1941 160:1678 161:1057 162:3029 163:872 164:1361 165:1219 166:536 167:1455 168:3574 169:494 170:4196 171:732 172:1856 173:2346 174:1042 175:1006 176:2692 177:4136 178:2829 179:1424 180:2177 181:2374 182:2821 183:1117 184:2398 185:15862 186:3879 187:2555 188:3479 189:2072 190:8290 191:1464 192:10170 193:7281 194:5903 195:4246 196:3337 197:1855 198:6065 199:5924 200:7162 201:5162 202:10423 203:10232 204:4560 205:3072 206:3258 207:3245 208:4005 209:4335 210:3992 211:1989 212:3289 213:2994 214:1144 215:53 216:5912 217:2298 218:894 219:604 220:1972 221:931 222:1012 223:1366 End of report

1 0

BGP/dDos gift from NIST
by william manning 25 Dec '19

25 Dec '19

Thanks Doug. https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-189.pdf /Wm

3 2

AT&T AS7018 - Filter Changes
by James Breeden 24 Dec '19

24 Dec '19

Anyone here high enough in AT&T IP engineering that can grab a lifecycle ticket and make some filter changes on a BGP session? I've had a ticket open to make some transit filter adjustments for almost 4 days now and no updates and nobody seems to understand what RADB is.... Feel free to hit me offlist. James W. Breeden Managing Partner [logo_transparent_background] Arenal Group: Arenal Consulting Group | Atheral | Ceteris Coin | Acilis Telecom | Pines Events and Media | BlueNinja Corporate: PO Box 1063 | Smithville, TX 78957 Email: james(a)arenalgroup.co<mailto:james@arenalgroup.co> | office 512.360.0000 | cell 512.304.0745 | www.arenalgroup.co<http://www.arenalgroup.co/>

4 4

Re: Thursday: Internet outage eastern Europe Iran and Turkey
by Scott Weeks 23 Dec '19

23 Dec '19

--- morrowc.lists(a)gmail.com wrote: From: Christopher Morrow <morrowc.lists(a)gmail.com> On Sat, Dec 21, 2019 at 11:53 PM Scott Weeks <surfer(a)mauigateway.com> wrote: > --- morrowc.lists(a)gmail.com wrote: > From: Christopher Morrow <morrowc.lists(a)gmail.com> > > I do think the overall conversation about nation states > disabling internet (which is not likely the case with > Sean's original post?) is nanog-worthy. > -------------------------------------- > > Yes, I believe you're correct for the most part. I just > was more interested in the technical parts and there is > a global audience here that may have insight as to how > that part of the network is working. I can easily see > how that would get out of control. But, how are they > configuring their network elements to block is my > question. (DPI? BGP? etc.) ah! ok... I imagine there are a few knobs for each sort of thing that can get turned. I think we've seen over the years at least: 1) turkey blocking access to 8.8.8.8 (looked like mostly done with static /32's?) 2) egypt turning off internet for the country (prior to overthrow? - I believe 'phone calls to providers' was renesys's conclusion) https://dyn.com/blog/egypt-leaves-the-internet/ this article points at tunisia and iran as well. 3) pktelecom bgp routery making youtube less cat and more pain. https://dyn.com › blog › pakistan-hijacks-youtube-1 4) prc firewall - forms of mostly DPI packet skullduggery blocking random http (really tcp traffic), specific DNS RRs, disrupting/blocking various VPN technologies I'd say it probably depends a bunch on whom is doing the poking, for how long they plan to make this work/not-work and the tools they have immediately available :( Figuring more of this out seems like a good plan though... I'm not sure trying to actively subvert any of these nation state actions is particularly smart/healthy though :( (note: i don't think YOU/scott are looking for this last part, but generally speaking... it seems like folk put themselves in a bad place if/when they attempt to get around a nationstate's actions, particularly from inside that nationstate) ------------------------------------------------------- Thanks, I have left this on the list for now. I can go off list if necessary. That's good information. Does Dyn put this out regularly or just for certain events? I knew about 1-3, but how do folks find out about 4? :: Figuring more of this out seems like a good plan though... What I would like to find out is something like "the XXXcountry part of the network is unreachable via BGP/DNS/at all (firewall drops)" or something like that. It would be interesting to see how the different blocks are technically implemented and how that changes over time. And, no, I'm not looking to subvert those things. I live in the US where they do everything sneakily (ATT closet in SF still going?) but I wonder why microwave over the border or satellite isn't used. Then ad-hoc jumped through the country. I guess the getting killed or jailed if you get caught thing is why? I dunno, it is just an interesting thing to me. scott

1 0

Re: Thursday: Internet outage eastern Europe Iran and Turkey
by Scott Weeks 23 Dec '19

23 Dec '19

--- morrowc.lists(a)gmail.com wrote: From: Christopher Morrow <morrowc.lists(a)gmail.com> I do think the overall conversation about nation states disabling internet (which is not likely the case with Sean's original post?) is nanog-worthy. -------------------------------------- Yes, I believe you're correct for the most part. I just was more interested in the technical parts and there is a global audience here that may have insight as to how that part of the network is working. I can easily see how that would get out of control. But, how are they configuring their network elements to block is my question. (DPI? BGP? etc.) scott

2 1

Bestel or alternative
by Mehmet Akcin 23 Dec '19

23 Dec '19

Hey there I am looking for contacts in Mexico from Bestel or alternative (not transtelco , they are great but need options..). If you know people, please contact me off list Thank you -- Mehmet +1-424-298-1903

1 0