- Test - lists.nanog.org

Weekly Global IPv4 Routing Table Report
by cscora＠apnic.net 24 Sep '21

24 Sep '21

This is an automated weekly mailing describing the state of the Internet Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Global IPv4 Routing Table Report 04:00 +10GMT Sat 25 Sep, 2021 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 864175 Prefixes after maximum aggregation (per Origin AS): 327027 Deaggregation factor: 2.64 Unique aggregates announced (without unneeded subnets): 416114 Total ASes present in the Internet Routing Table: 72001 Prefixes per ASN: 12.00 Origin-only ASes present in the Internet Routing Table: 61879 Origin ASes announcing only one prefix: 25534 Transit ASes present in the Internet Routing Table: 10122 Transit-only ASes present in the Internet Routing Table: 341 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 42 Max AS path prepend of ASN ( 45609) 34 Prefixes from unregistered ASNs in the Routing Table: 907 Number of instances of unregistered ASNs: 912 Number of 32-bit ASNs allocated by the RIRs: 37320 Number of 32-bit ASNs visible in the Routing Table: 31016 Prefixes from 32-bit ASNs in the Routing Table: 144062 Number of bogon 32-bit ASNs visible in the Routing Table: 32 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 463 Number of addresses announced to Internet: 3065905408 Equivalent to 182 /8s, 190 /16s and 1 /24s Percentage of available address space announced: 82.8 Percentage of allocated address space announced: 82.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 287414 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 231616 Total APNIC prefixes after maximum aggregation: 66252 APNIC Deaggregation factor: 3.50 Prefixes being announced from the APNIC address blocks: 227068 Unique aggregates announced from the APNIC address blocks: 91891 APNIC Region origin ASes present in the Internet Routing Table: 11991 APNIC Prefixes per ASN: 18.94 APNIC Region origin ASes announcing only one prefix: 3424 APNIC Region transit ASes present in the Internet Routing Table: 1678 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 37 Number of APNIC region 32-bit ASNs visible in the Routing Table: 7144 Number of APNIC addresses announced to Internet: 772824960 Equivalent to 46 /8s, 16 /16s and 95 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-147769 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 252530 Total ARIN prefixes after maximum aggregation: 115618 ARIN Deaggregation factor: 2.18 Prefixes being announced from the ARIN address blocks: 252353 Unique aggregates announced from the ARIN address blocks: 120420 ARIN Region origin ASes present in the Internet Routing Table: 18901 ARIN Prefixes per ASN: 13.35 ARIN Region origin ASes announcing only one prefix: 6866 ARIN Region transit ASes present in the Internet Routing Table: 1951 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 28 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4125 Number of ARIN addresses announced to Internet: 1297036288 Equivalent to 77 /8s, 79 /16s and 52 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 240870 Total RIPE prefixes after maximum aggregation: 112656 RIPE Deaggregation factor: 2.14 Prefixes being announced from the RIPE address blocks: 237047 Unique aggregates announced from the RIPE address blocks: 145189 RIPE Region origin ASes present in the Internet Routing Table: 28037 RIPE Prefixes per ASN: 8.45 RIPE Region origin ASes announcing only one prefix: 12056 RIPE Region transit ASes present in the Internet Routing Table: 3903 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 29 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10416 Number of RIPE addresses announced to Internet: 711546496 Equivalent to 42 /8s, 105 /16s and 86 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 111822 Total LACNIC prefixes after maximum aggregation: 26584 LACNIC Deaggregation factor: 4.21 Prefixes being announced from the LACNIC address blocks: 112781 Unique aggregates announced from the LACNIC address blocks: 47158 LACNIC Region origin ASes present in the Internet Routing Table: 10796 LACNIC Prefixes per ASN: 10.45 LACNIC Region origin ASes announcing only one prefix: 2651 LACNIC Region transit ASes present in the Internet Routing Table: 2117 Average LACNIC Region AS path length visible: 4.8 Max LACNIC Region AS path length visible: 29 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8458 Number of LACNIC addresses announced to Internet: 176227072 Equivalent to 10 /8s, 129 /16s and 3 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 26430 Total AfriNIC prefixes after maximum aggregation: 5210 AfriNIC Deaggregation factor: 5.07 Prefixes being announced from the AfriNIC address blocks: 34463 Unique aggregates announced from the AfriNIC address blocks: 11046 AfriNIC Region origin ASes present in the Internet Routing Table: 1542 AfriNIC Prefixes per ASN: 22.35 AfriNIC Region origin ASes announcing only one prefix: 537 AfriNIC Region transit ASes present in the Internet Routing Table: 306 Average AfriNIC Region AS path length visible: 5.2 Max AfriNIC Region AS path length visible: 42 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 873 Number of AfriNIC addresses announced to Internet: 107936000 Equivalent to 6 /8s, 110 /16s and 249 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 8031 9000 57 CMNET-GD Guangdong Mobile Communication 7545 5824 786 678 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4701 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3648 1330 20 VIETEL-AS-AP Viettel Group, VN 7713 3512 1022 56 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 2922 1897 56 VNPT-AS-VN VNPT Corp, VN 4766 2495 11119 576 KIXS-AS-KR Korea Telecom, KR 9498 2361 485 236 BBIL-AP BHARTI Airtel Ltd., IN 4755 2147 439 212 TATACOMM-AS TATA Communications formerl 45090 2127 1198 75 CNNIC-TENCENT-NET-AP Shenzhen Tencent C Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 5580 9747 2477 AMAZON-02, US 11492 4722 312 747 CABLEONE, US 22773 4038 3041 316 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3949 264 32 VIASAT-SP-BACKBONE, US 16625 3585 1851 2497 AKAMAI-AS, US 6327 3368 1318 66 SHAW, CA 30036 2591 374 166 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2528 5028 450 CENTURYLINK-US-LEGACY-QWEST, US 20115 2241 3032 504 CHARTER-20115, US 7018 2233 24177 1423 ATT-INTERNET4, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6885 1726 143 UNI2-AS, ES 20940 3835 3348 216 AKAMAI-ASN1, NL 8551 3284 378 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 39891 3269 187 23 ALJAWWALSTC-AS, SA 12389 2909 2279 895 ROSTELECOM-AS, RU 9009 2530 263 1337 M247, GB 34984 2230 358 602 TELLCOM-AS, TR 61317 1739 260 942 ASDETUK www.heficed.com, GB 58224 1643 892 572 TCI, IR 13188 1610 100 27 TRIOLAN, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8813 3457 574 Uninet S.A. de C.V., MX 10620 3418 522 686 Telmex Colombia S.A., CO 11830 2495 369 62 Instituto Costarricense de Electricidad 13999 1692 365 462 Mega Cable, S.A. de C.V., MX 6503 1516 359 477 Axtel, S.A.B. de C.V., MX 28573 1465 2306 239 CLARO S.A., BR 3816 1235 646 149 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 26615 1145 2351 136 TIM SA, BR 6147 1088 369 22 Telefonica del Peru S.A.A., PE 11172 957 111 70 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1639 393 21 LINKdotNET-AS, EG 24835 1548 503 32 RAYA-AS, EG 36992 1288 1417 272 ETISALAT-MISR, EG 36903 1183 537 110 MT-MPLS, MA 29571 788 68 11 ORANGE-COTE-IVOIRE, CI 6713 612 1863 34 IAM-AS, MA 36935 595 522 40 Vodafone-, EG 15399 502 49 29 WANANCHI-, KE 37342 470 32 1 MOVITEL, MZ 2018 339 319 73 TENET-1, ZA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8813 3457 574 Uninet S.A. de C.V., MX 9808 8031 9000 57 CMNET-GD Guangdong Mobile Communication 12479 6885 1726 143 UNI2-AS, ES 7545 5824 786 678 TPG-INTERNET-AP TPG Telecom Limited, AU 16509 5580 9747 2477 AMAZON-02, US 11492 4722 312 747 CABLEONE, US 4538 4701 4192 74 ERX-CERNET-BKB China Education and Rese 22773 4038 3041 316 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3949 264 32 VIASAT-SP-BACKBONE, US 20940 3835 3348 216 AKAMAI-ASN1, NL Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 8031 7974 CMNET-GD Guangdong Mobile Communication Co.Ltd. 12479 6885 6742 UNI2-AS, ES 7545 5824 5146 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4701 4627 ERX-CERNET-BKB China Education and Research Net 11492 4722 3975 CABLEONE, US 7155 3949 3917 VIASAT-SP-BACKBONE, US 22773 4038 3722 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3648 3628 VIETEL-AS-AP Viettel Group, VN 20940 3835 3619 AKAMAI-ASN1, NL 7713 3512 3456 TELKOMNET-AS-AP PT Telekomunikasi Indonesia, ID Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 1782 UNALLOCATED 8.42.19.0/24 46887 LIGHTOWER, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 395056 UNALLOCATED 8.45.133.0/24 3356 LEVEL3, US 32306 UNALLOCATED 8.46.80.0/24 33652 CMCS, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.132.208.0/24 Origin: 7850 CITYLINKFIBER, US 23.132.208.0/24 Transit: 15164 UPNLLC, US 23.141.0.0/24 Origin: 395350 UNASSIGNED 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US 27.100.7.0/24 Origin: 56096 UNASSIGNED 27.100.7.0/24 Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 41.57.124.0/22 Origin: 37442 UNASSIGNED 41.57.124.0/22 Transit: 174 COGENT-174, US 41.57.124.0/23 Origin: 37442 UNASSIGNED 41.57.124.0/23 Transit: 37204 TELONE, ZW Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:41 /11:102 /12:304 /13:595 /14:1214 /15:2038 /16:13601 /17:8302 /18:14027 /19:25402 /20:42568 /21:50920 /22:106881 /23:92259 /24:504437 /25:1455 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 5810 6885 UNI2-AS, ES 11492 3661 4722 CABLEONE, US 8151 3186 8813 Uninet S.A. de C.V., MX 6327 3176 3368 SHAW, CA 7155 3037 3949 VIASAT-SP-BACKBONE, US 22773 2998 4038 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2805 3269 ALJAWWALSTC-AS, SA 8551 2750 3284 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2244 2591 MEDIACOM-ENTERPRISE-BUSINESS, US 11830 1929 2495 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1915 2:1076 3:145 4:20 5:3647 6:83 7:5 8:1540 9:1 11:164 12:1735 13:384 14:2284 15:109 16:24 17:356 18:108 20:126 21:4 22:188 23:5143 24:2450 25:2 27:2534 29:19 31:2336 32:112 34:1 35:47 36:1729 37:3908 38:2249 39:599 40:165 41:3820 42:990 43:2045 44:286 45:15480 46:3736 47:354 48:6 49:1657 50:1821 51:101 52:1285 54:249 55:746 56:4 57:54 58:1733 59:1194 60:931 61:2309 62:2298 63:1967 64:5357 65:2358 66:4987 67:2868 68:1160 69:4123 70:1362 71:677 72:3150 74:2620 75:1490 76:695 77:2027 78:1694 79:2617 80:1875 81:1537 82:1364 83:1155 84:1299 85:2829 86:726 87:1837 88:972 89:3016 90:503 91:7375 92:1847 93:2549 94:3158 95:3485 96:1304 97:345 98:976 99:959 100:76 101:1057 102:1671 103:26978 104:4009 105:437 106:810 107:2339 108:729 109:3873 110:2040 111:3126 112:1943 113:1405 114:1471 115:1918 116:1858 117:2403 118:2309 119:1889 120:1560 121:1076 122:2535 123:2165 124:1595 125:2082 128:1352 129:1346 130:890 131:2018 132:777 133:362 134:1858 135:312 136:787 137:853 138:2391 139:1188 140:758 141:1235 142:1204 143:1367 144:1269 145:324 146:1554 147:1415 148:2164 149:1513 150:824 151:1089 152:1644 153:429 154:3081 155:1342 156:1838 157:1226 158:1002 159:2023 160:2375 161:1257 162:3389 163:1101 164:1549 165:1432 166:592 167:1661 168:3658 169:690 170:4347 171:801 172:2753 173:2940 174:1001 175:1113 176:3294 177:4470 178:3003 179:1905 180:2267 181:2668 182:3265 183:2011 184:2418 185:18894 186:4251 187:3162 188:3332 189:2882 190:8691 191:1343 192:10740 193:8344 194:6808 195:4849 196:2896 197:2123 198:6029 199:5948 200:7374 201:5439 202:10504 203:10031 204:4511 205:3376 206:3778 207:3358 208:4026 209:4758 210:4185 211:2358 212:3771 213:3404 214:1162 215:64 216:6386 217:2605 218:1215 219:666 220:1950 221:979 222:851 223:2075 End of report

1 0

AS6461 issues in Montreal
by Eric Dugas 24 Sep '21

24 Sep '21

Hello, Anyone else seeing a large withdrawal of routes on their Zayo AS6461 sessions? We've lost about 400k routes at around 10:40 EDT. Nothing in their Network Status so far Eric

3 2

Upcycling devices like DOCSIS 3.0 MODEMs
by Andrew Latham 24 Sep '21

24 Sep '21

I found some new in box MODEMs in storage and they are 3.0 DOCSIS. I was wondering how I could donate them to an ISP that still uses DOCSIS 3.0. I think several ISPs have switched to 3.1 Should I use the vendor recycling method and hope it stays out of a landfill? -- - Andrew "lathama" Latham -

3 2

Fiber Network Equipment Commercial Norms
by jray06＠gmail.com 23 Sep '21

23 Sep '21

A few of the buildings that my firm represents have the local telco's fiber distribution and/or repeater equipment located on the premises. My understanding is that when one of these links go down, (we've occasionally had to interrupt circuit power to do maintenance in a building for one reason or another), a local engineering tech always comes running to restore the link. The tech has led our maintenance staff to believe that these repeaters are an integral part of the local ring, which fits my understanding. When a network operator has equipment located at a third party premises, what is the norm for commercial contractual terms regarding the siting of that equipment? Any network equipment on site pre-dates my client's ownership of the buildings, and they have no record of any agreements or easements governing who is responsible for power, maintenance, liability, etc. My client has no philosophical objection to having the equipment on site, but he's asked why he has had to pay to power and cool this equipment for almost 20 years when it serves him no benefit (he is not utilizing that company's services). I figure some of you may be able to give me an insight as to what is normal and reasonable. Feel free to contact me directly if this message is not suitable for this distribution list. Appreciate the insight, Jeff Ray O: (956) 542-3642 C: (956) 592-2019 JRay06(a)gmail.com This message has been sent as a part of a discussion between Jeff Ray and the intended recipient identified above. Some topics may be sensitive and subject to legal privilege, confidentiality, or other non-disclosure agreement. Should you receive this message by mistake, we would be most grateful if you informed us that the message has been sent to you. In that case, we also ask that you delete this message from your mailbox, and do not forward or speak of it (or its contents) to anyone else. Thank you for your cooperation and understanding.

12 14

DNS & IP address management
by Joel Sommers 23 Sep '21

23 Sep '21

Hello all - I am a researcher at Colgate University, working with colleagues at the University of Wisconsin and Boston University on studying aspects of the DNS. We're wondering if anyone here would be willing to share some insight into an apparent IP address management practice we have observed that is evident through the DNS. In particular, we've seen a number of organizations that have a fairly large number of IPv4 addresses (typically all within the same /24 aggregate or similar) all associated with a single FQDN, where the name is typically something like "reserved.52net.example.tld". Besides the common "reserved" keyword in the FQDN, we also see names like "not-in-use.example.tld", again with quite a few addresses all mapped to that one name. The naming appears to suggest that this is an on-the-cheap IP address management practice, but we are wondering if there are other operational reasons that might be behind what we observe. Thank you for any insights you have -- please feel free to respond off-list. Regards, Joel Sommers

5 4

Only 5 Short Weeks Left to Register + More
by Nanog News 22 Sep '21

22 Sep '21

Register Now for NANOG 83 *NANOG 83 is only five short weeks away. Get ready for a jam-packed schedule of incredible programming that is sure to educate + inspire our community. Our first hybrid meeting will take place in person in Minneapolis + virtually (stream + interact live) Nov. 1-3. NANOG is taking every precaution to ensure a safe event. To learn more about our safety protocols, click here. <https://www.nanog.org/events/nanog-83/safety-travel/>Whether in-person screen or through our virtual platform, we can't wait to see you there! REGISTER NOW <https://www.nanog.org/events/nanog-83/>* VIDEO | Ep. 2 Trailer "Internet Innovators" w/ Geoff Huston Why the Internet is "busted," according to this Internet Pioneer “The Internet is a gigantic vanity reinforcing distorted tick-tock selfie-and web security is the punch line to some demented sick joke,” - Geoff Huston *Join us next week: *According to the Internet Hall of Fame global connector + chief scientist for Telstra, Geoff Huston, *the Emperor has no clothes. *Leave it to Huston to make the hairy + scary parts of the Internet almost sound charming. Maybe it's his sparkling wit, charming demeanor, (or maybe even) the Australian accent that makes all pills a little easier to swallow. Huston joined us for a raw conversation about the future of the Internet and left no elephant in the room untouched. *Watch the full episode:* Ep. 2 will be released next week (Sept. 29) here. <https://www.nanog.org/news-stories/nanog-tv/> In the meantime, *watch the trailer here. <https://youtu.be/dKSruagUD_s>WATCH EP. 2 TRAILER <https://www.youtube.com/watch?v=dKSruagUD_s>* Future Engineers: Stay Ahead of this Curve What might surprise you about Network Engineering *According to an eWeek <https://www.eweek.com/it-management/security-specialists-network-engineers-…>report,* Network Engineering has been rated one of the ‘Hottest’ IT jobs. The field of Network Engineering is thrilling, but not for the faint of tech heart. This industry beckons the easy adapters and those who can stay ahead (and ride) all the curves of the technology world. In exchange for keeping up in this fast-paced industry, one can expect rewards in long-term skill development and high average salaries. As we kick off the 2021-22 school season, it’s a perfect time to assess the industry. So, where is it now? And where is it going? *READ MORE * <https://www.nanog.org/stories/future-engineers-stay-ahead-of-this-curve/>

1 0

RE: Fiber Network Equipment Commercial Norms
by jray06＠gmail.com 22 Sep '21

22 Sep '21

Appreciate everyone’s comments here. Lots of good responses. I think the client isn’t really looking to squeeze the equipment owner here, more so just looking for a formal agreement that codifies responsibility, insurance, points of contact for notifications, etc… (the leaking battery example is a great example here). Tim has a good point, based on what I know about the building, I believe it to be part of a metro ring or backbone. This isn’t an MDU, but rather an institutional building where they previously brought in 4” cables full of twisted pair back in the 70’s. That’s all been replaced by the fiber now. Whatever it is, the owner comes running when the local maintenance apprentice unplugs it…. He tells me they show up within 30-45 minutes. Thanks for everyone’s insight! Thanks, Jeff Ray 956-592-2019 JRay06(a)gmail.com <mailto:JRay06@gmail.com>

3 2

Re: [EXTERNAL] Re: VoIP Provider DDoSes
by Compton, Rich A 22 Sep '21

22 Sep '21

FYI, UTRS (Unwanted Traffic Removal Service https://team-cymru.com/community-services/utrs/) from Team Cymru is a free service where you can send a blackhole advertisement (sacrificing the one IP that’s under attack to save the rest of the network) and they will propagate that via BGP to hundreds of other ASNs which will then blackhole traffic to that IP. This can drastically reduce the amount of DDoS traffic that is received by the victim network. -Rich From: NANOG <nanog-bounces+rich.compton=charter.com(a)nanog.org> on behalf of Mike Hammett <nanog(a)ics-il.net> Date: Wednesday, September 22, 2021 at 9:29 AM To: Terrance Devor <ter.devor(a)gmail.com> Cc: NANOG list <nanog(a)nanog.org> Subject: [EXTERNAL] Re: VoIP Provider DDoSes CAUTION: The e-mail below is from an external source. Please exercise caution before opening attachments, clicking links, or following guidance. Fail2Ban on a couple of dozen servers may not be sufficient to address 400 gigs of traffic. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com ________________________________ From: "Terrance Devor" <ter.devor(a)gmail.com> To: "Mike Hammett" <nanog(a)ics-il.net> Cc: "NANOG" <nanog(a)nanog.org> Sent: Wednesday, September 22, 2021 10:24:07 AM Subject: Re: VoIP Provider DDoSes Fail2Ban and give ourselves a pat on the back.. On Wed, Sep 22, 2021 at 9:12 AM Mike Hammett <nanog(a)ics-il.net<mailto:nanog@ics-il.net>> wrote: https://twit.tv/shows/security-now/episodes/837?autostart=false It looks like Security Now covered this yesterday. They claimed that, "There is currently no provider of large pipe VoIP protocol DDoS protection." Are any of the cloud DDoS mitigation services offering a service like this. ________________________________ From: "Mike Hammett" <nanog(a)ics-il.net<mailto:nanog@ics-il.net>> To: "NANOG" <nanog(a)nanog.org<mailto:nanog@nanog.org>> Sent: Tuesday, September 21, 2021 4:19:42 PM Subject: VoIP Provider DDoSes As many may know, a particular VoIP supplier is suffering a DDoS. https://twitter.com/voipms Are your garden variety DDoS mitigation platforms or services equipped to handle DDoSes of VoIP services? What nuances does one have to be cognizant of? A WAF doesn't mean much to SIP, IAX2, RTP, etc. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com E-MAIL CONFIDENTIALITY NOTICE: The contents of this e-mail message and any attachments are intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the intended recipient of this message or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message and any attachments. If you are not the intended recipient, you are notified that any use, dissemination, distribution, copying, or storage of this message or any attachment is strictly prohibited.

2 1

QVC Contact
by Joshua Pool 22 Sep '21

22 Sep '21

Does anyone have technical contacts for QVC? Our customers are getting Access Denied across all of our subnets. We need to get this resolved and I am looking for anyone that has some contacts as calling their phone number and leaving messages as well as emailing their noc has resulted in crickets. Regards, Josh Thanks, Josh

1 0

Re: [EXTERNAL] VoIP Provider DDoSes
by Compton, Rich A 22 Sep '21

22 Sep '21

Most of the larger DDoS mitigation appliances can block malformed SIP traffic and also can block volumetric/state exhaustion UDP floods. A lot of VoIP companies have Session Border Controllers (SBCs) to protect public facing VoIP services. SBCs are more application aware. Kind of like a proxy based firewall just for VoIP. -Rich From: NANOG <nanog-bounces+rich.compton=charter.com(a)nanog.org> on behalf of Mike Hammett <nanog(a)ics-il.net> Date: Tuesday, September 21, 2021 at 3:31 PM To: NANOG list <nanog(a)nanog.org> Subject: [EXTERNAL] VoIP Provider DDoSes CAUTION: The e-mail below is from an external source. Please exercise caution before opening attachments, clicking links, or following guidance. As many may know, a particular VoIP supplier is suffering a DDoS. https://twitter.com/voipms Are your garden variety DDoS mitigation platforms or services equipped to handle DDoSes of VoIP services? What nuances does one have to be cognizant of? A WAF doesn't mean much to SIP, IAX2, RTP, etc. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com E-MAIL CONFIDENTIALITY NOTICE: The contents of this e-mail message and any attachments are intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the intended recipient of this message or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message and any attachments. If you are not the intended recipient, you are notified that any use, dissemination, distribution, copying, or storage of this message or any attachment is strictly prohibited.

3 3