- NANOG - lists.nanog.org

www.netflix.com / EC2 problem -- Persistent problems from Palo Alto to destinations to Netflix and other destinations with content on Amazon EC2 - 2000ms latency
by Peter Kranz 10 Mar '17

10 Mar '17

I'm not making progress with GTT's NOC on this issue, can someone clued in at Netflix or Amazon comment on this problem. I believe it started after Amazons outage last week. This is an MTR to www.netflix.com <http://www.netflix.com> (52.5.161.36) from 208.71.159.3 . this should be just a couple of ms away from Palo Alto: Via GTT's own looking glass tool: IPv4 traceroute to 52.5.161.36 HOST: pao11-re0 Loss% Snt Last Avg Best Wrst StDev 1. et-2-1-0.cr4-dal3.ip4.gtt.ne 0.0% 5 42.3 39.4 36.1 42.3 2.2 2. ip4.gtt.net 0.0% 5 36.1 38.6 36.1 41.5 2.4 3. 176.32.125.140 0.0% 5 48.5 55.2 48.5 61.9 5.0 4. 176.32.125.145 0.0% 5 39.5 41.2 36.2 45.0 3.4 5. 54.239.43.200 20.0% 5 1417. 1784. 1417. 2112. 306.6 6. 54.239.43.98 20.0% 5 1413. 1770. 1413. 2116. 312.0 7. ??? 100.0 5 0.0 0.0 0.0 0.0 0.0 8. 54.239.110.157 20.0% 5 1420. 1749. 1420. 2104. 306.9 9. 54.239.109.9 20.0% 5 1394. 1720. 1394. 2081. 308.7 10. 205.251.245.65 20.0% 5 1395. 1706. 1395. 2072. 305.4 11. ??? 100.0 5 0.0 0.0 0.0 0.0 0.0 Peter Kranz www.UnwiredLtd.com <http://www.unwiredltd.com/> Desk: 510-868-1614 x100 Mobile: 510-207-0000 pkranz(a)unwiredltd.com <mailto:pkranz@unwiredltd.com>

2 2

Weekly Routing Table Report
by cscora＠apnic.net 10 Mar '17

10 Mar '17

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, MENOG, SAFNOG, SdNOG, BJNOG, CaribNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 11 Mar, 2017 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 639763 Prefixes after maximum aggregation (per Origin AS): 249160 Deaggregation factor: 2.57 Unique aggregates announced (without unneeded subnets): 308424 Total ASes present in the Internet Routing Table: 56466 Prefixes per ASN: 11.33 Origin-only ASes present in the Internet Routing Table: 48885 Origin ASes announcing only one prefix: 21729 Transit ASes present in the Internet Routing Table: 7581 Transit-only ASes present in the Internet Routing Table: 211 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 41 Max AS path prepend of ASN ( 55644) 36 Prefixes from unregistered ASNs in the Routing Table: 69 Numnber of instances of unregistered ASNs: 70 Number of 32-bit ASNs allocated by the RIRs: 17648 Number of 32-bit ASNs visible in the Routing Table: 13695 Prefixes from 32-bit ASNs in the Routing Table: 55367 Number of bogon 32-bit ASNs visible in the Routing Table: 45 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 408 Number of addresses announced to Internet: 2837876068 Equivalent to 169 /8s, 38 /16s and 141 /24s Percentage of available address space announced: 76.7 Percentage of allocated address space announced: 76.7 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.5 Total number of prefixes smaller than registry allocations: 213848 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 174984 Total APNIC prefixes after maximum aggregation: 50104 APNIC Deaggregation factor: 3.49 Prefixes being announced from the APNIC address blocks: 174317 Unique aggregates announced from the APNIC address blocks: 71873 APNIC Region origin ASes present in the Internet Routing Table: 7908 APNIC Prefixes per ASN: 22.04 APNIC Region origin ASes announcing only one prefix: 2220 APNIC Region transit ASes present in the Internet Routing Table: 1131 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 41 Number of APNIC region 32-bit ASNs visible in the Routing Table: 2748 Number of APNIC addresses announced to Internet: 760936068 Equivalent to 45 /8s, 90 /16s and 246 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 194699 Total ARIN prefixes after maximum aggregation: 93351 ARIN Deaggregation factor: 2.09 Prefixes being announced from the ARIN address blocks: 197144 Unique aggregates announced from the ARIN address blocks: 90309 ARIN Region origin ASes present in the Internet Routing Table: 17824 ARIN Prefixes per ASN: 11.06 ARIN Region origin ASes announcing only one prefix: 6638 ARIN Region transit ASes present in the Internet Routing Table: 1772 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 27 Number of ARIN region 32-bit ASNs visible in the Routing Table: 1825 Number of ARIN addresses announced to Internet: 1107678144 Equivalent to 66 /8s, 5 /16s and 211 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 171000 Total RIPE prefixes after maximum aggregation: 84309 RIPE Deaggregation factor: 2.03 Prefixes being announced from the RIPE address blocks: 166169 Unique aggregates announced from the RIPE address blocks: 100699 RIPE Region origin ASes present in the Internet Routing Table: 23774 RIPE Prefixes per ASN: 6.99 RIPE Region origin ASes announcing only one prefix: 10981 RIPE Region transit ASes present in the Internet Routing Table: 3357 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 5614 Number of RIPE addresses announced to Internet: 710346112 Equivalent to 42 /8s, 87 /16s and 5 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 82674 Total LACNIC prefixes after maximum aggregation: 17651 LACNIC Deaggregation factor: 4.68 Prefixes being announced from the LACNIC address blocks: 83870 Unique aggregates announced from the LACNIC address blocks: 38378 LACNIC Region origin ASes present in the Internet Routing Table: 5693 LACNIC Prefixes per ASN: 14.73 LACNIC Region origin ASes announcing only one prefix: 1562 LACNIC Region transit ASes present in the Internet Routing Table: 1036 Average LACNIC Region AS path length visible: 5.3 Max LACNIC Region AS path length visible: 36 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 3211 Number of LACNIC addresses announced to Internet: 171430816 Equivalent to 10 /8s, 55 /16s and 211 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-266652 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 16303 Total AfriNIC prefixes after maximum aggregation: 3686 AfriNIC Deaggregation factor: 4.42 Prefixes being announced from the AfriNIC address blocks: 17855 Unique aggregates announced from the AfriNIC address blocks: 6810 AfriNIC Region origin ASes present in the Internet Routing Table: 1029 AfriNIC Prefixes per ASN: 17.35 AfriNIC Region origin ASes announcing only one prefix: 328 AfriNIC Region transit ASes present in the Internet Routing Table: 200 Average AfriNIC Region AS path length visible: 4.8 Max AfriNIC Region AS path length visible: 23 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 297 Number of AfriNIC addresses announced to Internet: 87023872 Equivalent to 5 /8s, 47 /16s and 225 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5564 4190 74 ERX-CERNET-BKB China Education and Rese 7545 3737 391 257 TPG-INTERNET-AP TPG Telecom Limited, AU 17974 2989 905 72 TELKOMNET-AS2-AP PT Telekomunikasi Indo 4766 2750 11134 751 KIXS-AS-KR Korea Telecom, KR 9829 2729 1501 541 BSNL-NIB National Internet Backbone, IN 9808 2295 8698 33 CMNET-GD Guangdong Mobile Communication 4755 2067 421 219 TATACOMM-AS TATA Communications formerl 45899 1882 1307 103 VNPT-AS-VN VNPT Corp, VN 4808 1646 1786 448 CHINA169-BJ China Unicom Beijing Provin 24560 1562 580 257 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 22773 3663 2969 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 6327 3325 1333 83 SHAW - Shaw Communications Inc., CA 18566 2186 405 109 MEGAPATH5-US - MegaPath Corporation, US 6389 2068 3671 39 BELLSOUTH-NET-BLK - BellSouth.net Inc., 20115 1974 2066 388 CHARTER-NET-HKY-NC - Charter Communicat 209 1781 5065 641 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 16509 1727 3323 562 AMAZON-02 - Amazon.com, Inc., US 30036 1712 319 416 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 6983 1682 852 227 ITCDELTA - Earthlink, Inc., US 701 1579 10583 651 UUNET - MCI Communications Services, In Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 39891 3334 171 18 ALJAWWALSTC-AS , SA 20940 3081 1143 2188 AKAMAI-ASN1 , US 9121 2636 1691 18 TTNET , TR 34984 2000 328 384 TELLCOM-AS , TR 13188 1652 99 58 TRIOLAN , UA 8551 1635 377 40 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12479 1509 1033 50 UNI2-AS , ES 9198 1316 352 23 KAZTELECOM-AS , KZ 12389 1299 1235 518 ROSTELECOM-AS , RU 6849 1266 355 21 UKRTELNET , UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 3542 545 156 Telmex Colombia S.A., CO 26615 3123 2330 44 Tim Celular S.A., BR 8151 2498 3378 545 Uninet S.A. de C.V., MX 11830 1800 368 66 Instituto Costarricense de Electricidad 6503 1572 437 53 Axtel, S.A.B. de C.V., MX 7303 1555 1002 248 Telecom Argentina S.A., AR 6147 1169 377 27 Telefonica del Peru S.A.A., PE 28573 1083 2289 185 CLARO S.A., BR 3816 1005 479 185 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11664 977 280 35 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1308 399 45 LINKdotNET-AS, EG 36903 718 361 122 MT-MPLS, MA 37611 696 67 6 Afrihost, ZA 36992 598 1375 26 ETISALAT-MISR, EG 24835 491 722 14 RAYA-AS, EG 8452 384 1474 16 TE-AS TE-AS, EG 29571 368 36 10 CITelecom-AS, CI 37492 339 300 77 ORANGE-TN, TN 15399 336 35 7 WANANCHI-KE, KE 2018 272 327 74 TENET-1, ZA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5564 4190 74 ERX-CERNET-BKB China Education and Rese 7545 3737 391 257 TPG-INTERNET-AP TPG Telecom Limited, AU 22773 3663 2969 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 10620 3542 545 156 Telmex Colombia S.A., CO 39891 3334 171 18 ALJAWWALSTC-AS , SA 6327 3325 1333 83 SHAW - Shaw Communications Inc., CA 26615 3123 2330 44 Tim Celular S.A., BR 20940 3081 1143 2188 AKAMAI-ASN1 , US 17974 2989 905 72 TELKOMNET-AS2-AP PT Telekomunikasi Indo 4766 2750 11134 751 KIXS-AS-KR Korea Telecom, KR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 22773 3663 3514 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 7545 3737 3480 TPG-INTERNET-AP TPG Telecom Limited, AU 10620 3542 3386 Telmex Colombia S.A., CO 39891 3334 3316 ALJAWWALSTC-AS , SA 6327 3325 3242 SHAW - Shaw Communications Inc., CA 26615 3123 3079 Tim Celular S.A., BR 17974 2989 2917 TELKOMNET-AS2-AP PT Telekomunikasi Indonesia, I 9121 2636 2618 TTNET , TR 9808 2295 2262 CMNET-GD Guangdong Mobile Communication Co.Ltd. 9829 2729 2188 BSNL-NIB National Internet Backbone, IN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65001 PRIVATE 5.143.176.0/20 15468 KLGELECS-AS 38, Teatralnaya st 65602 UNALLOCATED 8.225.192.0/24 30372 SUNESYS2 - Sunesys, LLC, US 65001 PRIVATE 31.172.192.0/20 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.192.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.200.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.208.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.216.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65000 PRIVATE 31.219.177.0/25 8966 ETISALAT-AS P.O. Box 1150, Dub 65000 PRIVATE 31.219.177.128/25 8966 ETISALAT-AS P.O. Box 1150, Dub 65555 UNALLOCATED 37.142.172.0/24 21450 MIRS-AS , IL Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.76.232.0/21 203496 AB-TELECOM , RU 41.77.248.0/21 203496 AB-TELECOM , RU 41.78.12.0/23 203496 AB-TELECOM , RU 41.78.180.0/23 37265 -Reserved AS-, ZZ 41.242.132.0/23 203496 AB-TELECOM , RU 43.224.140.0/24 38197 SUNHK-DATA-AS-AP Sun Network (Hong Kong) Limited - 43.224.141.0/24 38197 SUNHK-DATA-AS-AP Sun Network (Hong Kong) Limited - 43.224.142.0/24 38197 SUNHK-DATA-AS-AP Sun Network (Hong Kong) Limited - 43.224.143.0/24 38197 SUNHK-DATA-AS-AP Sun Network (Hong Kong) Limited - Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:36 /11:103 /12:279 /13:538 /14:1047 /15:1793 /16:13205 /17:7758 /18:13304 /19:24677 /20:38268 /21:41012 /22:75019 /23:63356 /24:357987 /25:548 /26:411 /27:287 /28:35 /29:19 /30:25 /31:1 /32:26 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6327 3121 3325 SHAW - Shaw Communications Inc., CA 39891 2896 3334 ALJAWWALSTC-AS , SA 22773 2840 3663 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 26615 2639 3123 Tim Celular S.A., BR 18566 2079 2186 MEGAPATH5-US - MegaPath Corporation, US 9121 1852 2636 TTNET , TR 30036 1523 1712 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1458 3542 Telmex Colombia S.A., CO 13188 1377 1652 TRIOLAN , UA 6389 1375 2068 BELLSOUTH-NET-BLK - BellSouth.net Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1617 2:842 4:25 5:2477 6:34 8:1048 12:1817 13:92 14:1787 15:22 16:2 17:113 18:128 19:1 20:54 23:2132 24:1862 25:2 27:2376 31:1885 32:89 33:5 34:1 35:19 36:382 37:2564 38:1348 39:45 40:99 41:2844 42:464 43:1901 44:62 45:2409 46:2649 47:114 49:1214 50:966 51:18 52:751 54:356 55:7 56:4 57:41 58:1620 59:995 60:388 61:1928 62:1492 63:1921 64:4577 65:2191 66:4540 67:2265 68:1192 69:3334 70:1305 71:577 72:2146 74:2624 75:401 76:415 77:1428 78:1661 79:1312 80:1345 81:1400 82:963 83:728 84:860 85:1743 86:482 87:1139 88:800 89:2061 90:205 91:6146 92:992 93:2370 94:2376 95:2812 96:566 97:359 98:939 99:84 100:153 101:1244 103:13921 104:2792 105:165 106:483 107:1549 108:809 109:2599 110:1296 111:1721 112:1161 113:1308 114:1042 115:1720 116:1762 117:1671 118:2070 119:1605 120:951 121:1092 122:2334 123:2104 124:1537 125:1816 128:711 129:508 130:415 131:1387 132:522 133:190 134:531 135:216 136:514 137:423 138:1824 139:508 140:373 141:506 142:734 143:905 144:773 145:168 146:1037 147:662 148:1380 149:559 150:701 151:944 152:729 153:307 154:759 155:977 156:554 157:612 158:452 159:1424 160:563 161:743 162:2449 163:527 164:788 165:1157 166:387 167:1236 168:2583 169:756 170:2933 171:282 172:964 173:1838 174:805 175:727 176:1764 177:4242 178:2491 179:1612 180:2192 181:2036 182:2230 183:1045 184:840 185:8998 186:3191 187:2668 188:2437 189:1810 190:8093 191:1897 192:9285 193:5766 194:4646 195:3842 196:1940 197:1272 198:5564 199:5842 200:7393 201:4097 202:10227 203:9816 204:4465 205:2766 206:3002 207:3140 208:3979 209:3962 210:3947 211:2116 212:2814 213:2490 214:870 215:65 216:5897 217:2022 218:833 219:621 220:1693 221:893 222:724 223:1154 End of report

1 0

Bitly Contact?
by Livingood, Jason 10 Mar '17

10 Mar '17

Anyone on the NANOG list here from Bitly? I’m trying to find a contact. Thanks Jason

1 1

critical mass update on IPv6
by Ca By 10 Mar '17

10 Mar '17

Just update for those that care. As you may know, all the major cellular providers in the USA (VZ, AT&T, T-Mobile, Sprint) support IPv6 by default on many models of phones. Comcast and AT&T and other large broadband players also have IPv6 widely deployed by default http://www.worldipv6launch.org/measurements/ Most of the major (elephants) content is IPv6 (Google, FB, Netflix, ...) And now the other end in the cloud is coming along nicely https://aws.amazon.com/blogs/aws/aws-ipv6-update-global-support-spanning-15… https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-ipv6-ove… https://cloud.google.com/compute/docs/load-balancing/ipv6 Not to mention that Digital Ocean , Softlayer / IBM, Linode, and others also support IPv6 And now you are seeing ipv4 lose support in various classes of products like set-top boxes ( http://corporate.comcast.com/comcast-voices/world-ipv6-launch-four-years-la… ) and static IPs ( https://www.theregister.co.uk/2017/03/10/verizon_running_out_of_ipv4_addres… )

1 0

IPv6 doc. prefix (2001:db8::/32) - APNIC object ?
by Brandon Applegate 09 Mar '17

09 Mar '17

Just did a whois on the documentation prefix and was surprised to see what looks like a user object registered for it: % Information related to '2001:0DB8::/32AS132111' route6: 2001:0DB8::/32 descr: FUTURE D SDN BHD origin: AS132111 country: MY mnt-by: MAINT-FUTUREDSDNBHD-MY changed: hm-changed(a)apnic.net 20160523 source: APNIC Any idea what this is ? I would have thought there might be some sanity check that would have stopped this from getting registered ? -- Brandon Applegate - CCIE 10273 PGP Key fingerprint: 830B 4802 1DD4 F4F9 63FE B966 C0A7 189E 9EC0 3A74 "SH1-0151. This is the serial number, of our orbital gun."

5 5

Verizon wireless to stop issuing static IPv4
by David Hubbard 09 Mar '17

09 Mar '17

Thought the list would find this interesting. Just received an email from VZ wireless that they’re going to stop selling static IPv4 for wireless subscribers in June. That should make for some interesting support calls on the broadband/fios side; one half of the company is forcing ipv6, the other can’t provide it. At least now we have a big name forcing the issue though. David Here’s complete text: On June 30, 2017, Verizon will stop issuing new Public Static IPv4 addresses due to a shortage of available addresses. Customers that currently have active Public Static IPv4 addresses will retain those addresses, and Verizon will continue to fully support existing Public Static IPv4 addresses. In order to reserve new IP addresses, your company will need to convert to the Persistent Prefix IPv6 requirements and implement new Verizon-certified IPv6 devices. Why should you make the move to Persistent Prefix IPv6? • Unlike IPv4, which is limited to a 32-bit prefix, Persistent Prefix IPv6 has 128-bit addressing scheme, which aligns to current international agreements and standards. • Persistent Prefix IPv6 will provide the device with an IP address unique to that device that will remain with that device until the address is relinquished by the user (i.e., when the user moves the device off the Verizon Wireless network). • IPv4-only devices are not compatible with Persistent Prefix IPv6 addresses.

11 11

RNP Santa Catarina Point of Presence (PoP-SC)
by James Bensley 09 Mar '17

09 Mar '17

Hi All, Anyone from RNP on-list that can reach out to me off-list, minor technical problem in your network. Thanks, James.

2 2

Fwd: CIA Exploits on Mikrotik Hardware /Software
by Tom Smyth 08 Mar '17

08 Mar '17

---------- Forwarded message ---------- From: Tom Smyth <tom.smyth(a)wirelessconnect.eu> Date: Wed, Mar 8, 2017 at 3:02 PM Subject: CIA Exploits on Mikrotik Hardware /Software To: INEX Members Technical Mailing List <tech(a)inex.ie> Hi Lads, For MikroTik Users in the community there are apparently live exploits for MikroTik software and apparently this was used by the CIA, if the tools are released in the wild this would represent a significant threat to your ISPs for those of you who have MikroTik Routers with public IPs on them and if they are not adequately filtered, I would humbly suggest that you apply best practices and filter the management services and disable any management services that you dont absolutely need, for further details please find the following More Details on the MikroTik CIA Exploits https://forum.mikrotik.com/viewtopic.php?t=119255 you can disable un needed administration services in IP/services menu, and I would suggest filtering access to the management ports and disabling the web management interface altogether and disable ftp If you want to protect the Routers apply filters on the input chain of the Firewall Filter, tcp dstport 22 for ssh tcp dstport 8291 for winbox tcp dstport 23 for telnet tcp dstport 8729 api tcp dstport 8728 api tcp dstport 20,21 ftp be aware that the api interfaces could have been enabled if you were upgrading the software from an older version I have included a sample configuration script below just to help But make sure to adjust it to suit your own needs... /ip service set telnet disabled=yes set ftp disabled=yes set www disabled=yes set www-ssl certificate=cert1 disabled=yes set api disabled=yes set api-ssl disabled=yes /ip firewall address-list add address=5.134.88.0/29 list=Management #STOP REPLACE the address above with your management ip ranges #copy the lines to add more ips /ip firewall filter add action=accept chain=input comment="Drop input Rule to protect MikroTik Devices" dst-port=22 src-address-list=Management_ipprotocol=tcp add action=accept chain=input comment="Drop input Rule to protect MikroTik Devices" dst-port=8291 src-address-list=Management_ipprotocol=tcp add action=drop chain=input comment="Drop input Rule to protect MikroTik Devices" dst-port=22 protocol=tcp add action=drop chain=input comment="Drop input Rule to protect MikroTik Devices" dst-port=8291 protocol=tcp add action=drop chain=input comment="Drop input Rule to protect MikroTik Devices" dst-port=23 protocol=tcp add action=drop chain=input comment="Drop input Rule to protect MikroTik Devices" dst-port=21 protocol=tcp add action=drop chain=input comment="Drop input Rule to protect MikroTik Devices" dst-port=8729 protocol=tcp add action=drop chain=input comment="Drop input Rule to protect MikroTik Devices" dst-port=8728 protocol=tcp after running that script on your mikrotik Firewall ensure the rules that you added are moved straight to the top of the firewall rule set .... it is important to note that full details on the exploits are not available but any service that Mikrotik is running could be an entry point so bear that in mind , eg , NTP DNS ... Hotspot , CDP / MNDP / and the long list of VPN services that can be configured on MikroTik... -- Kindest regards, Tom Smyth Mobile: +353 87 6193172 --------------------------------- PLEASE CONSIDER THE ENVIRONMENT BEFORE YOU PRINT THIS E-MAIL This email contains information which may be confidential or privileged. The information is intended solely for the use of the individual or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. If you have received this electronic transmission in error, please notify me by telephone or by electronic mail immediately. Any opinions expressed are those of the author, not the company's .This email does not constitute either offer or acceptance of any contractually binding agreement. Such offer or acceptance must be communicated in writing. You are requested to carry out your own virus check before opening any attachment. Thomas Smyth accepts no liability for any loss or damage which may be caused by malicious software or attachments.

1 2

google ipv6 routes via cogent
by Aaron 08 Mar '17

08 Mar '17

Hi, I'm new to the nanog list, hope this isn't out of scope for what is usually discussed here. Cogent is telling me that I can't route through cogent to get to google ipv6 routes (particularly the well known dns addresses 2001:4860:4860::88xx) because google decided not to advertise those route to one of their mutual peers. Anyone know anything about this ? .and why it happened and when it will be resolved ? -Aaron

13 18

scalematrix network access
by Mark Stevens 08 Mar '17

08 Mar '17

Good Morning, Is anyone having access issues into sites within scalematrix.net network? Our traces make it out of Cogent and into Level3 and either die in Level3 or a couple hops past Level3 into scalematrix.net network. If someone from Scalmatrix or Level3 reads this, can you email me offline to discuss? Thanks Mark

1 0