- NANOG - lists.nanog.org

Weekly Routing Table Report
by cscora＠apnic.net 09 Dec '16

09 Dec '16

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, SAFNOG, SdNOG, BJNOG, CaribNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 10 Dec, 2016 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 625744 Prefixes after maximum aggregation (per Origin AS): 221145 Deaggregation factor: 2.83 Unique aggregates announced (without unneeded subnets): 303392 Total ASes present in the Internet Routing Table: 55416 Prefixes per ASN: 11.29 Origin-only ASes present in the Internet Routing Table: 36308 Origin ASes announcing only one prefix: 15268 Transit ASes present in the Internet Routing Table: 6548 Transit-only ASes present in the Internet Routing Table: 168 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 40 Max AS path prepend of ASN ( 55644) 36 Prefixes from unregistered ASNs in the Routing Table: 66 Unregistered ASNs in the Routing Table: 20 Number of 32-bit ASNs allocated by the RIRs: 16498 Number of 32-bit ASNs visible in the Routing Table: 12560 Prefixes from 32-bit ASNs in the Routing Table: 51171 Number of bogon 32-bit ASNs visible in the Routing Table: 531 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 420 Number of addresses announced to Internet: 2832567524 Equivalent to 168 /8s, 213 /16s and 140 /24s Percentage of available address space announced: 76.5 Percentage of allocated address space announced: 76.5 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.4 Total number of prefixes smaller than registry allocations: 207007 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 156955 Total APNIC prefixes after maximum aggregation: 43049 APNIC Deaggregation factor: 3.65 Prefixes being announced from the APNIC address blocks: 171305 Unique aggregates announced from the APNIC address blocks: 70384 APNIC Region origin ASes present in the Internet Routing Table: 5185 APNIC Prefixes per ASN: 33.04 APNIC Region origin ASes announcing only one prefix: 1139 APNIC Region transit ASes present in the Internet Routing Table: 938 Average APNIC Region AS path length visible: 4.2 Max APNIC Region AS path length visible: 40 Number of APNIC region 32-bit ASNs visible in the Routing Table: 2545 Number of APNIC addresses announced to Internet: 761026948 Equivalent to 45 /8s, 92 /16s and 89 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 188525 Total ARIN prefixes after maximum aggregation: 89408 ARIN Deaggregation factor: 2.11 Prefixes being announced from the ARIN address blocks: 195025 Unique aggregates announced from the ARIN address blocks: 89499 ARIN Region origin ASes present in the Internet Routing Table: 16118 ARIN Prefixes per ASN: 12.10 ARIN Region origin ASes announcing only one prefix: 5622 ARIN Region transit ASes present in the Internet Routing Table: 1713 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 1641 Number of ARIN addresses announced to Internet: 1104672416 Equivalent to 65 /8s, 215 /16s and 246 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 150074 Total RIPE prefixes after maximum aggregation: 72764 RIPE Deaggregation factor: 2.06 Prefixes being announced from the RIPE address blocks: 161269 Unique aggregates announced from the RIPE address blocks: 98618 RIPE Region origin ASes present in the Internet Routing Table: 18161 RIPE Prefixes per ASN: 8.88 RIPE Region origin ASes announcing only one prefix: 7792 RIPE Region transit ASes present in the Internet Routing Table: 3057 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 28 Number of RIPE region 32-bit ASNs visible in the Routing Table: 5100 Number of RIPE addresses announced to Internet: 709327232 Equivalent to 42 /8s, 71 /16s and 121 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 63552 Total LACNIC prefixes after maximum aggregation: 12594 LACNIC Deaggregation factor: 5.05 Prefixes being announced from the LACNIC address blocks: 80088 Unique aggregates announced from the LACNIC address blocks: 37900 LACNIC Region origin ASes present in the Internet Routing Table: 2482 LACNIC Prefixes per ASN: 32.27 LACNIC Region origin ASes announcing only one prefix: 547 LACNIC Region transit ASes present in the Internet Routing Table: 597 Average LACNIC Region AS path length visible: 5.1 Max LACNIC Region AS path length visible: 30 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 2993 Number of LACNIC addresses announced to Internet: 171017024 Equivalent to 10 /8s, 49 /16s and 131 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-266652 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 15400 Total AfriNIC prefixes after maximum aggregation: 3322 AfriNIC Deaggregation factor: 4.64 Prefixes being announced from the AfriNIC address blocks: 17637 Unique aggregates announced from the AfriNIC address blocks: 6612 AfriNIC Region origin ASes present in the Internet Routing Table: 736 AfriNIC Prefixes per ASN: 23.96 AfriNIC Region origin ASes announcing only one prefix: 168 AfriNIC Region transit ASes present in the Internet Routing Table: 179 Average AfriNIC Region AS path length visible: 4.8 Max AfriNIC Region AS path length visible: 18 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 281 Number of AfriNIC addresses announced to Internet: 86035968 Equivalent to 5 /8s, 32 /16s and 206 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5549 4190 74 ERX-CERNET-BKB China Education and Rese 7545 3648 390 250 TPG-INTERNET-AP TPG Telecom Limited, AU 17974 2980 905 71 TELKOMNET-AS2-AP PT Telekomunikasi Indo 4766 2720 11133 740 KIXS-AS-KR Korea Telecom, KR 9829 2708 1500 539 BSNL-NIB National Internet Backbone, IN 9808 2229 8698 33 CMNET-GD Guangdong Mobile Communication 4755 2041 428 217 TATACOMM-AS TATA Communications formerl 45899 1745 1252 92 VNPT-AS-VN VNPT Corp, VN 4808 1645 2165 468 CHINA169-BJ China Unicom Beijing Provin 24560 1574 552 229 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 22773 3590 2968 152 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 6327 3255 1333 83 SHAW - Shaw Communications Inc., CA 18566 2195 405 109 MEGAPATH5-US - MegaPath Corporation, US 6389 2095 3671 39 BELLSOUTH-NET-BLK - BellSouth.net Inc., 20115 1955 2017 400 CHARTER-NET-HKY-NC - Charter Communicat 30036 1784 338 335 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 209 1714 5064 631 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 6983 1677 848 227 ITCDELTA - Earthlink, Inc., US 701 1598 10629 662 UUNET - MCI Communications Services, In 16509 1504 2818 512 AMAZON-02 - Amazon.com, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 39891 3141 163 17 ALJAWWALSTC-AS , SA 20940 2954 1112 2100 AKAMAI-ASN1 , US 9121 2127 1691 18 TTNET , TR 34984 1991 328 367 TELLCOM-AS , TR 13188 1605 99 58 TRIOLAN , UA 12479 1397 1032 53 UNI2-AS , ES 6849 1286 355 22 UKRTELNET , UA 8551 1201 377 46 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 8402 1168 544 15 CORBINA-AS OJSC "Vimpelcom", RU 12389 971 1144 433 ROSTELECOM-AS , RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 3538 545 148 Telmex Colombia S.A., CO 8151 2292 3371 551 Uninet S.A. de C.V., MX 11830 1798 368 66 Instituto Costarricense de Electricidad 6503 1530 437 54 Axtel, S.A.B. de C.V., MX 7303 1516 964 245 Telecom Argentina S.A., AR 6147 1098 377 27 Telefonica del Peru S.A.A., PE 28573 1046 2273 172 CLARO S.A., BR 3816 991 477 183 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 910 126 80 Alestra, S. de R.L. de C.V., MX 18881 876 1036 22 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1302 402 42 LINKdotNET-AS, EG 36903 691 347 118 MT-MPLS, MA 37611 676 67 6 Afrihost, ZA 36992 575 1373 25 ETISALAT-MISR, EG 24835 486 658 16 RAYA-AS, EG 8452 476 1472 15 TE-AS TE-AS, EG 37492 396 288 72 ORANGE-TN, TN 29571 369 37 11 CITelecom-AS, CI 15399 313 35 6 WANANCHI-KE, KE 36974 275 140 11 AFNET-AS, CI Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5549 4190 74 ERX-CERNET-BKB China Education and Rese 7545 3648 390 250 TPG-INTERNET-AP TPG Telecom Limited, AU 22773 3590 2968 152 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 10620 3538 545 148 Telmex Colombia S.A., CO 6327 3255 1333 83 SHAW - Shaw Communications Inc., CA 39891 3141 163 17 ALJAWWALSTC-AS , SA 17974 2980 905 71 TELKOMNET-AS2-AP PT Telekomunikasi Indo 20940 2954 1112 2100 AKAMAI-ASN1 , US 4766 2720 11133 740 KIXS-AS-KR Korea Telecom, KR 9829 2708 1500 539 BSNL-NIB National Internet Backbone, IN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 22773 3590 3438 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 7545 3648 3398 TPG-INTERNET-AP TPG Telecom Limited, AU 10620 3538 3390 Telmex Colombia S.A., CO 6327 3255 3172 SHAW - Shaw Communications Inc., CA 39891 3141 3124 ALJAWWALSTC-AS , SA 17974 2980 2909 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9808 2229 2196 CMNET-GD Guangdong Mobile Communication 9829 2708 2169 BSNL-NIB National Internet Backbone, IN 9121 2127 2109 TTNET , TR 18566 2195 2086 MEGAPATH5-US - MegaPath Corporation, US Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65001 PRIVATE 5.143.176.0/20 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.192.0/20 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.192.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.200.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.208.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.216.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65000 PRIVATE 31.219.177.0/25 8966 ETISALAT-AS P.O. Box 1150, Dub 65000 PRIVATE 31.219.177.128/25 8966 ETISALAT-AS P.O. Box 1150, Dub 64855 PRIVATE 41.220.200.0/21 36945 mcelISP, MZ 65001 PRIVATE 46.237.32.0/20 13118 ASN-YARTELECOM PJSC Rostelecom Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 14.128.12.0/22 55763 UNKNOWN 14.128.12.0/24 55763 UNKNOWN 14.128.13.0/24 55763 UNKNOWN 14.128.15.0/24 55763 UNKNOWN 27.100.7.0/24 56096 UNKNOWN 27.112.96.0/22 19136 NNET, ZA 41.73.16.0/24 37004 Suburban-Broadband-AS, NG 41.73.17.0/24 37004 Suburban-Broadband-AS, NG 41.73.18.0/24 37004 Suburban-Broadband-AS, NG 41.73.19.0/24 37004 Suburban-Broadband-AS, NG Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:36 /11:103 /12:276 /13:529 /14:1046 /15:1794 /16:13165 /17:7822 /18:13037 /19:25317 /20:38176 /21:40692 /22:73006 /23:61135 /24:348246 /25:524 /26:405 /27:309 /28:33 /29:20 /30:17 /31:0 /32:27 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6327 3050 3255 SHAW - Shaw Communications Inc., CA 39891 2896 3141 ALJAWWALSTC-AS , SA 22773 2794 3590 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 18566 2088 2195 MEGAPATH5-US - MegaPath Corporation, US 30036 1597 1784 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 9121 1483 2127 TTNET , TR 10620 1448 3538 Telmex Colombia S.A., CO 6389 1393 2095 BELLSOUTH-NET-BLK - BellSouth.net Inc., 13188 1350 1605 TRIOLAN , UA 6983 1322 1677 ITCDELTA - Earthlink, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1582 2:821 4:24 5:2348 6:32 8:1012 12:1804 13:55 14:1775 15:24 16:2 17:103 18:127 19:1 20:51 23:2000 24:1812 27:2361 31:1812 32:83 33:11 34:1 35:3 36:361 37:2437 38:1308 39:42 40:99 41:2965 42:451 43:1919 44:51 45:2248 46:2535 47:106 49:1193 50:946 51:15 52:597 54:354 55:8 56:8 57:40 58:1559 59:981 60:389 61:1862 62:1487 63:1935 64:4533 65:2176 66:4397 67:2262 68:1159 69:3299 70:1297 71:560 72:2053 74:2594 75:402 76:414 77:1410 78:1553 79:908 80:1354 81:1420 82:1009 83:718 84:857 85:1707 86:484 87:1127 88:779 89:2038 90:204 91:6095 92:987 93:2360 94:2328 95:2780 96:577 97:357 98:941 99:93 100:147 101:1199 103:12954 104:2599 105:141 106:467 107:1486 108:782 109:2491 110:1281 111:1653 112:1155 113:1158 114:1053 115:1706 116:1684 117:1576 118:2117 119:1581 120:988 121:1098 122:2287 123:2032 124:1605 125:1832 128:736 129:477 130:431 131:1395 132:621 133:178 134:529 135:208 136:387 137:398 138:1783 139:435 140:621 141:475 142:718 143:917 144:735 145:171 146:956 147:641 148:1389 149:554 150:686 151:789 152:696 153:310 154:704 155:946 156:546 157:547 158:429 159:1326 160:562 161:731 162:2444 163:545 164:789 165:1129 166:359 167:1218 168:2352 169:680 170:2426 171:266 172:834 173:1821 174:765 175:713 176:1744 177:4115 178:2405 179:1150 180:2183 181:1934 182:2121 183:1010 184:844 185:8190 186:3250 187:2242 188:2332 189:1795 190:7859 191:1331 192:9263 193:5727 194:4549 195:3850 196:1877 197:1258 198:5594 199:5834 200:7187 201:3989 202:10141 203:9835 204:4473 205:2771 206:2996 207:3150 208:4043 209:3886 210:3892 211:2068 212:2779 213:2454 214:870 215:66 216:5753 217:1982 218:819 219:597 220:1654 221:886 222:719 223:1367 End of report

1 0

Internet Governance Forum DNS
by Joly MacFie 09 Dec '16

09 Dec '16

"www.intgovforum.org’s server DNS address could not be found." and http://downforeveryoneorjustme.com/www.intgovforum.org is negative. Any clues as to what's up? -- --------------------------------------------------------------- Joly MacFie 218 565 9365 Skype:punkcast -------------------------------------------------------------- -

3 3

load balancers convergence (Radware)
by Mihai 08 Dec '16

08 Dec '16

Hi, Sorry if this is not the right list to post but it's the last resort and any clue would be highly appreciated. I am new to LBs world and have the following active-standby topology (Alteon 5524): Router1------------Router2 | | | | eBGP eBGP | | | | Alteon1(act) Alteon2(stb) | | |_______________________| | | WEB servers - BGP local-pref is higher on the R1-A1 session. - VRRP priority is higher on Alteon1. - both Lbs advertise the same VIP address in BGP. - NAT is configured for WEB servers IPs. I am using these devices to load balance HTTP traffic and have the following issue: 1. Alteon1 fails and the traffic moves to Alteon2 without problems. 2. After Alteon1 recovers, it becomes the VRRP master due to higher priority, but the BGP session between Alteon1 and Router1 establishes after VRRP preemption (more than 1 minute after A1 becomes master) and the traffic gets dropped. I tried to use the hold-off timer to delay the VRRP preemption to match the BGP session establishment but still have ~30s downtime. Creating a direct link and BGP session between Alteons does not help as the traffic will be asymmetrical and is dropped on Alteon1. Regards

1 0

Cogent Router code updates during height of ecommerce season?
by Doc Flatline 08 Dec '16

08 Dec '16

Could. https://quickview.cloudapps.cisco.com/quickview/bug/CSCtd35382 https://github.com/Sab0tag3d/SIET

1 0

Forwarding issues related to MACs starting with a 4 or a 6 (Was: [c-nsp] Wierd MPLS/VPLS issue)
by Job Snijders 07 Dec '16

07 Dec '16

Hi all, Ever since the IEEE started allocating OUIs (MAC address ranges) in a randomly distributed fashion rather then sequentially, the operator community has suffered enormously. Time after time issues pop up related to MAC addresses that start with a 4 or a 6. I believe IEEE changed their strategy to attempt to purposefully higher the chance of collisions with MAC squatters, to encourage people to register and pay the fee. The forwarded email at the bottom is yet another example of a widely deployed, but fundamentally broken ASIC. The switch can't forward VPLS frames which contain a payload where the inner packet is destined to a MAC starting with a 4 or a 6. This is with the switch operating in pure layer-2 mode, it doesn't know what MPLS or VPLS even are. The switch is dropping packets on the floor, based on their _payload_. Try selling such circuits to customers "discounted layer-2 service, some flows might not be forwarded". Had IEEE continued the sequential OUI allocations, it probably would've taken many years before we ever reached MACs starting with a 4 or a 6, but instead, in 2012 the first linecards started rolling out of factories with MACs burned in which start with a 4 or a 6, and this took some vendors by surpise. There have been quite some issues, both in hardware and software: Brocade produced a 24x10GE linecard to the market in 2013/2014, with limited FIB scale, meant for a BGP-free MPLS core, but the card can't keep flows together on LACP bundles if the inner packets in a pseudowire were destined for a 4 or 6 MAC. The result: out of order delivery, hurting performance. Cisco ASR 9k's had a bug where if a payload started with a 6, it assumed it would be an IPv6 packet, compare the calculated packet-length with the packet-length in the packet and obviously fail because an ethernet packet is not an IPv6 packet. The result: packets dropped on the floor. (Fixed in 4.3(0.32)I) The Nexus 9000 issue described at the top of this mail. Brocade IronWare had an issue related to packet reordering for flows inside pseudowires, fixed in 2013/2014. There are probably many more examples out there in the wild, slowly driving operators insane. At this moment, some issues related to MACs starting with a 4 or a 6 can be mitigated if you enable Pseudowire Control-Word (RFC 4385) _AND_ Flow-Aware Transport (RFC 6391). You need both to mitigate certain issues in multi-vendor networks (for instance if you have Cisco edge + Juniper core). But what to do when the ASIC won't forward the payload? As ISP you often don't control the payload. Unfortunatly, I don't think we've seen the end of this. The linecards bought in 2012 will trickle down to the grey/second-hand market about now, often without accompanying support contracts. In a world with increased complexity in our interconnectedness, and lack of visibility into the underlaying infrastructure (think remote peering, cloud connectivity, resellers reselling layer-2) it will hurt when some flows inexplicably fail to arrive. Dear IEEE, please pause assigning MAC addresses that start with a 4 or a 6 for the next 6 years. Or at least, next time you change the policy, consult the operational community. This 4/6 MAC issue was well documented in BCP128 back in 2007. The control-word drafts mentioned that there would be dragons related to 4 and 6 back in 2004. Dear Vendors, take this issue more serious. Realise that for operators these issues are _extremely_ hard to debug, this is an expensive time sink. Some of these issues are only visible under very specific, rare circumstances, much like chasing phantoms. So take every vague report of "mysterious" packetloss, or packet reordering at face value and immediately dispatch smart people to delve into whether your software or hardware makes wrong assumptions based on encountering a 4 or a 6 somewhere in the frame. And you, my fellow operators, please continue to publicly document these issues and possible workarounds. Kind regards, Job resources: c-nsp thread "Wierd MPLS/VPLS issue": https://puck.nether.net/pipermail/cisco-nsp/2016-December/thread.html https://www.nanog.org/meetings/nanog57/presentations/Tuesday/tues.general.S… BCP128: https://tools.ietf.org/html/bcp128 ----- Forwarded message from Simon Lockhart <simon(a)slimey.org> ----- Date: Fri, 2 Dec 2016 11:44:21 +0000 From: Simon Lockhart <simon(a)slimey.org> To: cisco-nsp(a)puck.nether.net Subject: Re: [c-nsp] Wierd MPLS/VPLS issue On Wed Nov 23, 2016 at 12:01:20PM +0000, Simon Lockhart wrote: > On Fri Nov 04, 2016 at 03:40:05PM +0000, Simon Lockhart wrote: > > To me, everything *looks* right, it's just that some VPLS traffic traversing > > the new link gets lost. > > For those who are interested... > > Well, I finally got to the bottom of this, and have pushed it to Cisco TAC > for a fix... Cisco TAC finally accepted the issue. Bug CSCvc33783 has been logged. Nexus BU has investigated. Response is... "[...] unfortunately this is an ASIC limitation on the Nexus 9000 switches and is therefore not fixable." If you want a Layer 2 switch that will forward all valid Ethernet frames, I'd suggest avoiding the Nexus 9000 range... Simon _______________________________________________ cisco-nsp mailing list cisco-nsp(a)puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ----- End forwarded message -----

11 20

Verizon Email Contacts
by ping murder 07 Dec '16

07 Dec '16

Hello, I need to connect with an admin w/ Verizon's email abuse team. Thanks, ping

1 0

Looking for a Comcast engineer
by Chris Lane 07 Dec '16

07 Dec '16

If a Comcast engineer is available mind hitting me up offline. I am not a customer, but a former customer of mine is still advertising my IP /24 out to you Comcast. the prefix belongs to our company and the former customer won't return my calls. I'd like you to remove prefix from filters. Much regards, Chris

1 1

Favorite Speed Test Systems
by Graham Johnston 07 Dec '16

07 Dec '16

For many years we have had a local instance of the Ookla speedtest.net on our network, and while it is pretty good some other tests seem include more detailed results. I am aware of the following speedtest systems that an operator can likely have a local instance of: * Speedtest.net * Sourceforge.net/speedtest * Dslreports.com/speedtest Are there others? What is your preferred one and why? Thanks, Graham

17 21

Canadian National Railway contact
by Andy Ringsmuth 06 Dec '16

06 Dec '16

If there happens to be someone here from the Canadian National Railway, or if someone knows someone there, could you hit me up off-list? Attempting to work through an e-mail block from us to them that I’ve been unsuccessful remedying so far. Much appreciated! ---- Andy Ringsmuth andy(a)newslink.com News Link – Manager Travel, Technology & Facilities 2201 Winthrop Rd., Lincoln, NE 68502-4158 (402) 475-6397 (402) 304-0083 cellular

2 1

Level3 / Cogent / NetFlix BGP Assistance
by Sam Norris 06 Dec '16

06 Dec '16

Hey all, In early October our traffic levels from NetFlix went from about half Level3 and half Cogent - pretty well balanced - to all on Level3. Standard multihomed BGP setup with minimal TE if I can help it. I am starting to run into problems with a full gigabit port on Level3 and only 100-200mbps on Cogent at that colo. I tried padding, I even tried 65000:2906 bgp community, but it seems like if our level3 port is up NetFlix chooses it solely. How can I load balance NetFlix traffic across my two ports so that I am not paying for overages and/or forced to up to a 10G port immediately? I have 3 other providers at that colo and cannot find any mix of bgp tricks to get some of it thru our other providers. I notice AS2906 has a localpref of 86 - odd ... The 108.175.47.0/24 block seems to be using as 2906 so I thought a 65000:2906 wouldn't announce those prefixes to them at all. I have about 10 prefixes being announced so I could implement a no-export on some of them to load balance but that doesn't work. Thx, Sam BGP routing table entry for 108.175.47.0/24 Paths: (2 available, best #1) 2906 AS-path translation: { 108.175.47.0/24 } ear3.LosAngeles1 (metric 100000) Origin IGP, metric 30334, localpref 86, valid, internal, best Community: 2906:51081 North_America Lclprf_86 United_States Level3_Peer Los_Angeles Level3:10984 Originator: ear3.LosAngeles1 2906 AS-path translation: { 108.175.47.0/24 } ear3.LosAngeles1 (metric 100000) Origin IGP, metric 30334, localpref 86, valid, internal Community: 2906:51081 North_America Lclprf_86 United_States Level3_Peer Los_Angeles Level3:10984 Originator: ear3.LosAngeles1

4 3