- NANOG - lists.nanog.org

Spoofer Report for NANOG for Jan 2024
by CAIDA Spoofer Project 08 Feb '24

08 Feb '24

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Jan 2024: ASN Name Fixed-By 25787 ROWE-NETWORKS 2024-01-10 6461 ZAYO-6461 2024-01-11 202400 2024-01-13 40401 2024-01-24 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Jan 2024: ASN Name First-Spoofed Last-Spoofed 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2024-01-26 27364 ACS-INTERNET 2016-09-27 2024-01-31 20412 CLARITY-TELECOM 2016-09-30 2024-01-31 12083 WOW-INTERNET 2016-11-09 2024-01-15 6360 UNIVHAWAII 2019-02-25 2024-01-20 22883 CONDENAST 2019-05-29 2024-01-05 22773 ASN-CXA-ALL-CCI-22773-RDC 2021-10-24 2024-01-23 46997 2021-12-22 2024-01-26 12183 TALKIE-COMMUNICATIONS 2022-12-10 2024-01-27 41378 KirinoNET 2023-03-23 2024-01-26 3701 NERONET 2023-04-18 2024-01-25 400282 2023-04-27 2024-01-30 393577 SCCNET 2023-05-03 2024-01-12 202400 2023-05-08 2024-01-27 46690 SNET-FCC 2023-05-20 2024-01-31 272137 2023-08-12 2024-01-19 13329 KFN-001 2024-01-09 2024-01-09 394684 WISPERNET 2024-01-17 2024-01-31 151188 2024-01-18 2024-01-27 213122 2024-01-19 2024-01-19 55 UPENN 2024-01-30 2024-01-30 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

Federal subsidy boosting internet affordability set to expire unless Congress acts | PBS NewsHour
by Sean Donelan 07 Feb '24

07 Feb '24

The Affordable Connectivity Program will expire tomorrow unless renewed by Congress It won’t have an immediate impact but FCC will stop accepting new applications. Current applications will continue until existing funds run out. https://www.pbs.org/newshour/politics/federal-subsidy-boosting-internet-aff…

2 1

Instagram - Anyone here who can contact me off-list?
by Norman Jester 06 Feb '24

06 Feb '24

We have some issues with instagram and normal abuse channels are not responding. If you can contact me off-list it would be great. Thanks. Norman Jester MIE

1 0

Chile
by Mehmet 05 Feb '24

05 Feb '24

Hello There are big wildfires going on in Chile, Valparaiso region where submarine cables mainly land. Are there any major outages reported so far ? We had many outages in region last 24 hours and with reason of metro fiber burning. Sorry if this is slightly out of topic here. Could not find any news anywhere related internet impact Thanks

3 3

If I announce 192.0.2.0/24, do I need a discard route? (Looking for a reference…)
by Warren Kumari 02 Feb '24

02 Feb '24

Hey all, This falls into the "Somebody is wrong on the Internet …" category. So, let's say I'm announcing some address space (e.g 192.0.2.0/24), but I'm only using part of it internally (e.g 192.0.2.0/25). I've always understood that it's best practice[0] to have a discard route (eg static to null0/discard or similar[1]) for what I'm announcing. There are a bunch of reasons for this, but the standard (or easiest to explain one!) is what happens if this comes from some provider space, and they announce a supernet/covering route. If I *don't* have a discard/hold-down route, and a packet is sent to part of the space I'm not using (e.g 192.0.2.200), I would send it to the covering route, they would just send it back to the more specific, I'd return it to them, etc… Many, but not all mechanisms that people use for advertising a route in BGP automagically create this sort of discard route (e.g Juniper's 'aggregate'), but I wasn't really able to find any useful documentation suggesting that if you announce a route, you should make sure that you have some route covering all of the space… Perhaps there isn't really anything saying this (because it's obvious), but I'd really like to find something so that I can point at it…. Can anyone help me win this somewhat pointless argument? W [0]: Best practice as in "you should do this, unless you've got some weird corner case and have thought about it for more than a few seconds...." [1]: Yes, in some cases I'll have e.g an interface that match the announcement, and that accomplishes the same thing. [3]: E.g. 192.0.2.0/24 comes from a provider, and they are announcing something shorter.

5 10

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 02 Feb '24

02 Feb '24

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG UKNOF, TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 03 Feb, 2024 BGP Table (Global) as seen in Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 940493 Prefixes after maximum aggregation (per Origin AS): 357581 Deaggregation factor: 2.63 Unique aggregates announced (without unneeded subnets): 456313 Total ASes present in the Internet Routing Table: 75360 Prefixes per ASN: 12.48 Origin-only ASes present in the Internet Routing Table: 64592 Origin ASes announcing only one prefix: 26541 Transit ASes present in the Internet Routing Table: 10768 Transit-only ASes present in the Internet Routing Table: 494 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 121 Max AS path prepend of ASN (150315) 116 Prefixes from unregistered ASNs in the Routing Table: 1108 Number of instances of unregistered ASNs: 1110 Number of 32-bit ASNs allocated by the RIRs: 43555 Number of 32-bit ASNs visible in the Routing Table: 35809 Prefixes from 32-bit ASNs in the Routing Table: 181205 Number of bogon 32-bit ASNs visible in the Routing Table: 33 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 503 Number of addresses announced to Internet: 3044438912 Equivalent to 181 /8s, 118 /16s and 115 /24s Percentage of available address space announced: 82.2 Percentage of allocated address space announced: 82.2 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 310387 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 251780 Total APNIC prefixes after maximum aggregation: 72796 APNIC Deaggregation factor: 3.46 Prefixes being announced from the APNIC address blocks: 244553 Unique aggregates announced from the APNIC address blocks: 100011 APNIC Region origin ASes present in the Internet Routing Table: 13956 APNIC Prefixes per ASN: 17.52 APNIC Region origin ASes announcing only one prefix: 4211 APNIC Region transit ASes present in the Internet Routing Table: 1891 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 121 Number of APNIC region 32-bit ASNs visible in the Routing Table: 9325 Number of APNIC addresses announced to Internet: 774566272 Equivalent to 46 /8s, 42 /16s and 241 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-153913 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 274581 Total ARIN prefixes after maximum aggregation: 123714 ARIN Deaggregation factor: 2.22 Prefixes being announced from the ARIN address blocks: 279530 Unique aggregates announced from the ARIN address blocks: 132071 ARIN Region origin ASes present in the Internet Routing Table: 19095 ARIN Prefixes per ASN: 14.64 ARIN Region origin ASes announcing only one prefix: 6956 ARIN Region transit ASes present in the Internet Routing Table: 1966 Average ARIN Region AS path length visible: 3.7 Max ARIN Region AS path length visible: 26 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4843 Number of ARIN addresses announced to Internet: 1270334464 Equivalent to 75 /8s, 183 /16s and 196 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 262220 Total RIPE prefixes after maximum aggregation: 125357 RIPE Deaggregation factor: 2.09 Prefixes being announced from the RIPE address blocks: 256822 Unique aggregates announced from the RIPE address blocks: 161039 RIPE Region origin ASes present in the Internet Routing Table: 28523 RIPE Prefixes per ASN: 9.00 RIPE Region origin ASes announcing only one prefix: 12090 RIPE Region transit ASes present in the Internet Routing Table: 3958 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 37 Number of RIPE region 32-bit ASNs visible in the Routing Table: 11556 Number of RIPE addresses announced to Internet: 714250752 Equivalent to 42 /8s, 146 /16s and 154 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-216475 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 120329 Total LACNIC prefixes after maximum aggregation: 28856 LACNIC Deaggregation factor: 4.17 Prefixes being announced from the LACNIC address blocks: 118942 Unique aggregates announced from the LACNIC address blocks: 49633 LACNIC Region origin ASes present in the Internet Routing Table: 11065 LACNIC Prefixes per ASN: 10.75 LACNIC Region origin ASes announcing only one prefix: 2640 LACNIC Region transit ASes present in the Internet Routing Table: 2390 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 55 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8918 Number of LACNIC addresses announced to Internet: 177976064 Equivalent to 10 /8s, 155 /16s and 179 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-273820 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 30475 Total AfriNIC prefixes after maximum aggregation: 6138 AfriNIC Deaggregation factor: 4.96 Prefixes being announced from the AfriNIC address blocks: 40143 Unique aggregates announced from the AfriNIC address blocks: 13145 AfriNIC Region origin ASes present in the Internet Routing Table: 1822 AfriNIC Prefixes per ASN: 22.03 AfriNIC Region origin ASes announcing only one prefix: 644 AfriNIC Region transit ASes present in the Internet Routing Table: 350 Average AfriNIC Region AS path length visible: 4.9 Max AfriNIC Region AS path length visible: 30 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 1167 Number of AfriNIC addresses announced to Internet: 107021056 Equivalent to 6 /8s, 97 /16s and 3 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 9830 8740 56 CHINAMOBILE-CN China Mobile Communicati 7545 5678 784 684 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4917 4192 75 ERX-CERNET-BKB China Education and Rese 18403 4563 347 25 FPT-AS-AP FPT Telecom Company, VN 7552 3878 1330 20 VIETEL-AS-AP Viettel Group, VN 7713 3582 1038 55 TELKOMNET-AS-AP PT Telekomunikasi Indon 9498 3475 499 255 BBIL-AP BHARTI Airtel Ltd., IN 45899 3283 1872 99 VNPT-AS-VN VNPT Corp, VN 24560 2688 858 377 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd 4766 2302 11258 574 KIXS-AS-KR Korea Telecom, KR Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 9588 11246 3374 AMAZON-02, US 11492 4576 303 662 CABLEONE, US 7155 4177 288 96 VIASAT-SP-BACKBONE, US 22773 3625 3062 301 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3593 1320 74 SHAW, CA 16625 3240 1421 2313 AKAMAI-AS, US 749 3185 54927 2437 DNIC-AS-00749, US 367 2910 3722 1404 DNIC-ASBLK-00306-00371, US 174 2890 6637 666 COGENT-174, US 396982 2749 3639 390 GOOGLE-CLOUD-PLATFORM, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 7571 1698 148 UNI2-AS, ES 39891 4658 280 55 ALJAWWALSTC-AS, SA 20940 3904 3396 134 AKAMAI-ASN1, NL 9009 3266 284 1583 M247, RO 12389 2968 2301 906 ROSTELECOM-AS, RU 8551 2700 368 35 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 34984 2343 362 596 TELLCOM-AS, TR 13188 1607 100 26 TRIOLAN, UA 58224 1504 856 577 TCI, IR 8452 1497 1852 14 TE-AS TE-AS, EG Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 12385 3385 615 UNINET, MX 10620 3520 496 895 Telmex Colombia S.A., CO 13999 2501 337 641 Mega Cable, S.A. de C.V., MX 11830 2005 369 64 Instituto Costarricense de Electricidad 28573 1325 2319 238 Claro NXT Telecomunicacoes Ltda, BR 3816 1306 787 197 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6503 1237 340 498 Axtel, S.A.B. de C.V., MX 11664 1128 178 423 Techtel LMDS Comunicaciones Interactiva 6147 1088 369 22 Telefonica del Peru S.A.A., PE 22884 1070 115 386 TOTAL PLAY TELECOMUNICACIONES SA DE CV, Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24835 1548 545 28 RAYA-AS, EG 24863 1532 389 16 LINKdotNET-AS, EG 36992 1365 1519 282 ETISALAT-MISR, EG 36903 1249 554 96 MT-MPLS, MA 29571 1102 71 57 ORANGE-COTE-IVOIRE, CI 36935 935 521 42 Vodafone-, EG 6713 551 1861 34 IAM-AS, MA 36914 535 82 3 KENET-AS, KE 15399 525 55 53 WANANCHI-, KE 24757 488 73 5 EthioNet-AS, ET Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 12385 3385 615 UNINET, MX 9808 9830 8740 56 CHINAMOBILE-CN China Mobile Communicati 16509 9588 11246 3374 AMAZON-02, US 12479 7571 1698 148 UNI2-AS, ES 7545 5678 784 684 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4917 4192 75 ERX-CERNET-BKB China Education and Rese 39891 4658 280 55 ALJAWWALSTC-AS, SA 11492 4576 303 662 CABLEONE, US 18403 4563 347 25 FPT-AS-AP FPT Telecom Company, VN 7155 4177 288 96 VIASAT-SP-BACKBONE, US Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 9830 9774 CHINAMOBILE-CN China Mobile Communications Grou 12479 7571 7423 UNI2-AS, ES 16509 9588 6214 AMAZON-02, US 7545 5678 4994 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4917 4842 ERX-CERNET-BKB China Education and Research Net 39891 4658 4603 ALJAWWALSTC-AS, SA 18403 4563 4538 FPT-AS-AP FPT Telecom Company, VN 7155 4177 4081 VIASAT-SP-BACKBONE, US 11492 4576 3914 CABLEONE, US 7552 3878 3858 VIETEL-AS-AP Viettel Group, VN Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 65536 DOCUMENT 5.102.30.0/24 65512 -Private Use AS-, ZZ 33492 UNALLOCATED 8.6.184.0/23 33650 COMCAST-33650, US 33123 UNALLOCATED 8.10.69.0/24 174 COGENT-174, US 12169 UNALLOCATED 8.15.207.0/24 32787 PROLEXIC-TECHNOLOGIES-DDOS-M 40493 UNALLOCATED 8.17.26.0/24 3356 LEVEL3, US 53775 UNALLOCATED 8.20.88.0/24 7029 WINDSTREAM, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 396894 UNALLOCATED 8.28.201.0/24 46887 LIGHTOWER, US 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.140.216.0/24 Origin: 27176 DATAWAGON, US 23.140.216.0/24 Transit: 20278 NEXEON, US 23.141.0.0/24 Origin: 395350 RESERVED, ZZ 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US 23.176.160.0/24 Origin: 397327 RESERVED, ZZ 23.176.160.0/24 Transit: 19108 SUDDENLINK-COMMUNICATIONS, US 23.189.192.0/24 Origin: 27593 RESERVED, ZZ 23.189.192.0/24 Transit: 174 COGENT-174, US 27.0.192.0/24 Origin: 136800 MOACKCOLTD-AS-AP MOACK.Co.LTD, KR 27.0.192.0/24 Transit: 64050 BCPL-SG BGPNET Global ASN, SG Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:14 /10:37 /11:98 /12:300 /13:579 /14:1195 /15:2071 /16:13403 /17:8220 /18:13710 /19:25007 /20:44253 /21:51866 /22:110869 /23:99372 /24:568746 /25:737 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 6681 7571 UNI2-AS, ES 8151 6363 12385 UNINET, MX 11492 3490 4576 CABLEONE, US 6327 3391 3593 SHAW, CA 39891 3340 4658 ALJAWWALSTC-AS, SA 7155 3121 4177 VIASAT-SP-BACKBONE, US 22773 2659 3625 ASN-CXA-ALL-CCI-22773-RDC, US 8551 2176 2700 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2129 2472 MEDIACOM-ENTERPRISE-BUSINESS, US 10620 2126 3520 Telmex Colombia S.A., CO Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:2330 2:1541 3:291 4:5 5:4463 6:163 7:6 8:1532 9:1 11:172 12:1479 13:379 14:2355 15:311 16:203 17:362 18:721 20:352 21:4 22:188 23:6595 24:2717 25:2 27:2551 29:19 31:2560 32:56 34:35 35:124 36:2151 37:4481 38:6703 39:900 40:151 41:4087 42:2214 43:2335 44:328 45:16830 46:4295 47:286 49:1907 50:1901 51:572 52:1592 54:359 55:888 56:5 57:140 58:2026 59:1205 60:1018 61:2601 62:2710 63:1921 64:5520 65:2334 66:4928 67:3058 68:1338 69:4102 70:1199 71:579 72:2936 74:2650 75:1556 76:627 77:2352 78:1843 79:2504 80:2133 81:1890 82:1515 83:1248 84:1635 85:3103 86:771 87:1957 88:1219 89:3958 90:668 91:7934 92:2184 93:2635 94:3613 95:4042 96:1288 97:318 98:1035 99:743 100:95 101:1169 102:3054 103:32539 104:4779 105:596 106:922 107:2760 108:1133 109:4025 110:2151 111:3196 112:2070 113:1795 114:1762 115:1967 116:1969 117:2630 118:2754 119:1945 120:1811 121:1324 122:2646 123:2228 124:1605 125:2843 126:28 128:1511 129:926 130:1080 131:1815 132:822 133:410 134:1706 135:307 136:921 137:1034 138:2772 139:1569 140:1319 141:1343 142:1554 143:1521 144:1015 145:344 146:2004 147:1681 148:2505 149:2506 150:1023 151:1319 152:1979 153:528 154:5668 155:1368 156:2104 157:1466 158:1086 159:2205 160:2606 161:1625 162:3605 163:1691 164:1625 165:2104 166:1072 167:1707 168:3829 169:798 170:4719 171:1012 172:3806 173:3008 174:902 175:1216 176:3634 177:4579 178:3520 179:2216 180:2359 181:3654 182:3469 183:2017 184:2277 185:20535 186:4771 187:4343 188:4020 189:4039 190:9308 191:1440 192:11000 193:8982 194:7338 195:5223 196:3140 197:2644 198:6009 199:7107 200:8050 201:6317 202:10471 203:10159 204:4566 205:3733 206:4441 207:3518 208:4125 209:4921 210:4632 211:2597 212:4245 213:3411 214:1107 215:44 216:6808 217:2773 218:1362 219:597 220:2053 221:1020 222:873 223:2229 End of report

1 0

NANOG 90 Keynote: Abstract Ponderings - A Ten-Year Retrospective with Google's Rob Shakir + More
by Nanog News 01 Feb '24

01 Feb '24

*NANOG 90 Keynote: Abstract Ponderings**A Ten-Year Retrospective with Google's Rob Shakir* Rob Shakir, a senior staff software engineer for Google, will be a keynote speaker at NANOG's upcoming 90th community-wide conference. "We've got various internal company systems that use Open Config. It's now the time to step back and ask, 'Are we doing this right, and what did we do wrong?'" he said. *READ NOW <https://nanog.org/stories/articles/nanog-90-keynote-abstract-ponderings/>* *Check out the NANOG 90 Social Lineup! * NANOG Socials are your opportunity to get to know your peers in the industry + foster important relationships in a relaxed, casual, and fun environment. *VIEW NOW <https://nanog.org/events/nanog-90/socials/>* *NANOG 90 Talks Not to Miss * *BGP in 2023* w/ Geoff Huston *Panel: Network Automation Showdown: Go vs. Python* - see agenda *Greenlight - Community Assets Evolving to Meet Customer's Needs* w/ Linwood Tyndall *Is there a Genuine Need for ML/AI in the Internet and Networking?* w/ JP Vasseur *SEE FULL AGENDA <https://www.nanog.org/events/nanog-90/agenda/>* *Register Now for N90 Hackathon! * *Networking Opportunities, Hands-On Learning, + Fun! * Theme: New Year - New Hack Format! The NANOG 90 Hackathon will focus on "Problem Solving/Troubleshooting" competitions. During this Hackathon, teams will collaborate to solve the posed problems. Scoring will be based on network reachability and how fast participants solve the problems. Prizes will be provided to the top finishers! *REGISTER NOW * <https://www.nanog.org/events/nanog-90/>

1 0

Re: NANOG Digest, Vol 193, Issue 1
by Jakob Heitz (jheitz) 01 Feb '24

01 Feb '24

Wow! The reason it’s called generative AI is because it totally made that up. Kind Regards, Jakob Date: Wed, 31 Jan 2024 18:27:24 +0000 From: "Compton, Rich" <RICH_COMPTON(a)comcast.com> To: Mohammad Khalil <eng.mssk(a)gmail.com>, NANOG list <nanog(a)nanog.org> Subject: Re: SOVC - BGp RPKI Message-ID: <SN7PR11MB6900EC6CF08C1CA9D8D4ABA8FA7C2(a)SN7PR11MB6900.namprd11.prod.outlook.com> Content-Type: text/plain; charset="utf-8" ChatGPT says: SOVC in the context of RPKI (Resource Public Key Infrastructure) on a Cisco router stands for "Stale Origin Validation Cache". RPKI is a security framework designed to secure the Internet's routing infrastructure, primarily through route origin validation. It ensures that the Internet number resources (like IP addresses and AS numbers) are used by the legitimate owners or authorized AS (Autonomous System). In RPKI, Route Origin Authorizations (ROAs) are used to define which AS is authorized to announce a specific IP address block. Network devices, like Cisco routers, use these ROAs to validate the authenticity of BGP (Border Gateway Protocol) route announcements. The term "stale" in SOVC refers to a situation where the router's RPKI-to-Router protocol client has lost its connection to the RPKI server, or when the RPKI cache data is outdated and not refreshed for some reason. This can happen due to network issues, configuration errors, or problems with the RPKI server itself. When the RPKI cache is stale, the router cannot reliably validate BGP route announcements against the latest ROA data, potentially affecting routing decisions. In a network security context, maintaining an up-to-date RPKI cache is crucial for ensuring that the network only accepts legitimate routing announcements, thereby reducing the risk of routing hijacks or misconfigurations. As a network security engineer, managing and monitoring the RPKI status on routers is an important aspect of ensuring network security and integrity.

1 0

Re: SOVC - BGp RPKI
by Jakob Heitz (jheitz) 01 Feb '24

01 Feb '24

In bgp_sovc.h, at the top, it says: BGP Secure Origin Validation Code Further down in the file, it says: BGP Secured Origin Validate Cache – SOVC Basically, the router downloads the VRPs from the RPKI server, using RFC 6810. Then it uses the downloaded VRPs to validate received routes using RFC 6811. SOVC refers to the code that does that. Kind Regards, Jakob Date: Wed, 31 Jan 2024 16:16:15 +0300 From: Mohammad Khalil <eng.mssk(a)gmail.com> To: NANOG list <nanog(a)nanog.org> Greetings Am have tried to find out what is the abbreviation for SOVC with no luck. #sh bgp ipv4 unicast rpki servers BGP SOVC neighbor is X.X.X.47/323 connected to port 323 Anyone have encountered this? Thanks!

1 0

SOVC - BGp RPKI
by Mohammad Khalil 01 Feb '24

01 Feb '24

Greetings Am have tried to find out what is the abbreviation for SOVC with no luck. #sh bgp ipv4 unicast rpki servers BGP SOVC neighbor is X.X.X.47/323 connected to port 323 Anyone have encountered this? Thanks!

7 9