- Test - lists.nanog.org

192.208.19.0/24 hijack transiting 209, 286, 3320, 5511, 6461, 6762, 6830, 8220, 9002, 12956
by Dominik Bay 04 Jan '19

04 Jan '19

I see the follwowing ASN transiting a leak concerning 192.208.19.0/24 originated by 4812 209 286 3320 5400 5511 6327 6461 6762 6830 8218 8220 8447 8551 9002 12956 The proper source is 32982 (Department of Energy). More details to be found here: https://bgpstream.com/event/171779 And here: http://lg.ring.nlnog.net/prefix_detail/lg01/ipv4?q=192.208.19.0 Cheers, Dominik

3 3

Cleveland/Cincinnati Co-location
by Mitchell Lewis 03 Jan '19

03 Jan '19

Good Evening All, I am working on project that may involve building points of presence in Cleveland & Cincinnati. Any suggestions as to which colocation facility in each city to build in? The prime factor of consideration for this project is access to waves to places like Chicago, New York & Ashburn. It would be nice to have multiple wave provider options to choose from. I have been looking at Cyrus One-7thStreet in Cincinnati & Databank in Cleveland. Thanks & Regards, Mitchell Lewis 203-816-0371<tel:+12038160371>

7 6

does emergency (911) dispatch uses IP ?
by Mankamana Mishra (mankamis) 02 Jan '19

02 Jan '19

Guys, While reading CL network down impacting 911 services, was trying to get more information about how does this network looks like. From end user to center, I guess VOIP is used. Wondering what is the communication method from Emergency service center to end units (Police, Fire or any other services). Do they also use IP ? or its Still Radio only ? if it is IP, do they use Unicast or multicast or broadcast ? Tried googling, but did not get much information. Any insight would be appreciated. Thanks Mankamana

3 4

CenturyLink RCA?
by Saku Ytti 02 Jan '19

02 Jan '19

Apologies for the URL, I do not know official source and I do not share the URLs sentiment. https://fuckingcenturylink.com/ Can someone translate this to IP engineer? What did actually happen? >From my own history, I rarely recognise the problem I fixed from reading the public RCA. I hope CenturyLink will do better. Best guess so far that I've heard is a) CenturyLink runs global L2 DCN/OOB b) there was HW fault which caused L2 loop (perhaps HW dropped BPDU, I've had this failure mode) c) DCN had direct access to control-plane, and L2 congested control-plane resources causing it to deprovision waves Now of course this is entirely speculation, but intended to show what type of explanation is acceptable and can be used to fix things. Hopefully CenturyLink does come out with IP-engineering readable explanation, so that we may use it as leverage to support work in our own domains to remove such risks. a) do not run L2 DCN/OOB b) do not connect MGMT ETH (it is unprotected access to control-plane, it cannot be protected by CoPP/lo0 filter/LPTS ec) c) do add in your RFP scoring item for proper OOB port (Like Cisco CMP) d) do fail optical network up -- ++ytti

15 22

Auto-configuring IPv6 transition mechanisms on customer devices
by Brandon Martin 02 Jan '19

02 Jan '19

Are there any (draft, standard, or otherwise) defined mechanisms for indicating to customer-provided devices that they should configure IPv6 to IPv4 transition mechanisms such as MAP, 4rd, 464XLAT, etc. and providing the configuration details thereof? I'm not aware of any. It seems like this is something that, if defined, would make deployment of such mechanisms a lot easier even if SPs provide the customer edge router that implements said mechanisms. I guess they'd probably be implemented as extensions to DHCPv6 or similar or embedded in RAs (the latter seems ugly). -- Brandon Martin

4 8

RE: CenturyLink
by Erik Sundberg 01 Jan '19

01 Jan '19

The outage list already has a long thread on this. https://puck.nether.net/mailman/listinfo/outages From: NANOG <nanog-bounces(a)nanog.org<mailto:nanog-bounces@nanog.org>> On Behalf Of Dennis Burgess via NANOG Sent: Thursday, December 27, 2018 2:00 PM To: Naslund, Steve <SNaslund(a)medline.com<mailto:SNaslund@medline.com>>; nanog(a)nanog.org<mailto:nanog@nanog.org> Subject: RE: CenturyLink National outage since 4:33 am this morning.. [LTI-Full_175px] Dennis Burgess, Mikrotik Certified Trainer Author of "Learn RouterOS- Second Edition" Link Technologies, Inc -- Mikrotik & WISP Support Services Office: 314-735-0270 Website: http://www.linktechs.net<http://www.linktechs.net/> Create Wireless Coverage's with www.towercoverage.com From: NANOG <nanog-bounces(a)nanog.org<mailto:nanog-bounces@nanog.org>> On Behalf Of Naslund, Steve Sent: Thursday, December 27, 2018 12:46 PM To: nanog(a)nanog.org<mailto:nanog@nanog.org> Subject: CenturyLink Anyone have any insight to the nationwide CenturyLink issues/outages today? Just wondering. Know for sure that our connections to them from Florida, Iowa, and Washington State are all affected. Voice and data. Steven Naslund Chicago IL ________________________________ CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or previous e-mail messages attached to it may contain confidential information that is legally privileged. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. If you have received this transmission in error please notify the sender immediately by replying to this e-mail. You must destroy the original transmission and its attachments without reading or saving in any manner. Thank you.

19 32

Larry Roberts, RIP.
by Dobbins, Roland 31 Dec '18

31 Dec '18

<https://www.nytimes.com/2018/12/30/obituaries/lawrence-g-roberts-dies-at-81…> -------------------------------------------- Roland Dobbins <roland.dobbins(a)netscout.com>

2 1

Pinging a Device Every Second
by Colton Conor 28 Dec '18

28 Dec '18

How much compute and network resources does it take for a NMS to: 1. ICMP ping a device every second 2. Record these results. 3. Report an alarm after so many seconds of missed pings. We are looking for a system to in near real-time monitor if an end customers router is up or down. SNMP I assume would be too resource intensive, so ICMP pings seem like the only logical solution. The question is once a second pings too polling on an NMS and a consumer grade router? Does it take much network bandwidth and CPU resources from both the NMS and CPE side? Lets say this is for a 1,000 customer ISP.

15 20

Weekly Routing Table Report
by cscora＠apnic.net 28 Dec '18

28 Dec '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 29 Dec, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 732568 Prefixes after maximum aggregation (per Origin AS): 281558 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 352396 Total ASes present in the Internet Routing Table: 62800 Prefixes per ASN: 11.67 Origin-only ASes present in the Internet Routing Table: 54121 Origin ASes announcing only one prefix: 23521 Transit ASes present in the Internet Routing Table: 8679 Transit-only ASes present in the Internet Routing Table: 267 Average AS path length visible in the Internet Routing Table: 4.2 Max AS path length visible: 31 Max AS path prepend of ASN ( 16327) 25 Prefixes from unregistered ASNs in the Routing Table: 23 Number of instances of unregistered ASNs: 25 Number of 32-bit ASNs allocated by the RIRs: 25337 Number of 32-bit ASNs visible in the Routing Table: 20536 Prefixes from 32-bit ASNs in the Routing Table: 88512 Number of bogon 32-bit ASNs visible in the Routing Table: 17 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 259 Number of addresses announced to Internet: 2839468257 Equivalent to 169 /8s, 62 /16s and 216 /24s Percentage of available address space announced: 76.7 Percentage of allocated address space announced: 76.7 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.1 Total number of prefixes smaller than registry allocations: 244625 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 200435 Total APNIC prefixes after maximum aggregation: 56892 APNIC Deaggregation factor: 3.52 Prefixes being announced from the APNIC address blocks: 197466 Unique aggregates announced from the APNIC address blocks: 81144 APNIC Region origin ASes present in the Internet Routing Table: 9321 APNIC Prefixes per ASN: 21.19 APNIC Region origin ASes announcing only one prefix: 2630 APNIC Region transit ASes present in the Internet Routing Table: 1388 Average APNIC Region AS path length visible: 4.1 Max APNIC Region AS path length visible: 26 Number of APNIC region 32-bit ASNs visible in the Routing Table: 4321 Number of APNIC addresses announced to Internet: 769522432 Equivalent to 45 /8s, 221 /16s and 251 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-139577 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 216519 Total ARIN prefixes after maximum aggregation: 102857 ARIN Deaggregation factor: 2.11 Prefixes being announced from the ARIN address blocks: 215874 Unique aggregates announced from the ARIN address blocks: 103478 ARIN Region origin ASes present in the Internet Routing Table: 18306 ARIN Prefixes per ASN: 11.79 ARIN Region origin ASes announcing only one prefix: 6808 ARIN Region transit ASes present in the Internet Routing Table: 1848 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2525 Number of ARIN addresses announced to Internet: 1077225376 Equivalent to 64 /8s, 53 /16s and 39 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 200375 Total RIPE prefixes after maximum aggregation: 95545 RIPE Deaggregation factor: 2.10 Prefixes being announced from the RIPE address blocks: 196692 Unique aggregates announced from the RIPE address blocks: 116262 RIPE Region origin ASes present in the Internet Routing Table: 25722 RIPE Prefixes per ASN: 7.65 RIPE Region origin ASes announcing only one prefix: 11490 RIPE Region transit ASes present in the Internet Routing Table: 3605 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 28 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7702 Number of RIPE addresses announced to Internet: 716094016 Equivalent to 42 /8s, 174 /16s and 186 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 95041 Total LACNIC prefixes after maximum aggregation: 22021 LACNIC Deaggregation factor: 4.32 Prefixes being announced from the LACNIC address blocks: 96416 Unique aggregates announced from the LACNIC address blocks: 42165 LACNIC Region origin ASes present in the Internet Routing Table: 7933 LACNIC Prefixes per ASN: 12.15 LACNIC Region origin ASes announcing only one prefix: 2171 LACNIC Region transit ASes present in the Internet Routing Table: 1488 Average LACNIC Region AS path length visible: 5.0 Max LACNIC Region AS path length visible: 31 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 5482 Number of LACNIC addresses announced to Internet: 173221888 Equivalent to 10 /8s, 83 /16s and 40 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-270748 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 20174 Total AfriNIC prefixes after maximum aggregation: 4225 AfriNIC Deaggregation factor: 4.77 Prefixes being announced from the AfriNIC address blocks: 25861 Unique aggregates announced from the AfriNIC address blocks: 9108 AfriNIC Region origin ASes present in the Internet Routing Table: 1235 AfriNIC Prefixes per ASN: 20.94 AfriNIC Region origin ASes announcing only one prefix: 422 AfriNIC Region transit ASes present in the Internet Routing Table: 243 Average AfriNIC Region AS path length visible: 4.4 Max AfriNIC Region AS path length visible: 19 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 506 Number of AfriNIC addresses announced to Internet: 103003648 Equivalent to 6 /8s, 35 /16s and 182 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 4656 515 522 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4642 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3019 1160 92 VIETEL-AS-AP Viettel Group, VN 45899 2982 1717 115 VNPT-AS-VN VNPT Corp, VN 4766 2815 11129 768 KIXS-AS-KR Korea Telecom, KR 9829 2749 1496 551 BSNL-NIB National Internet Backbone, IN 9808 2504 8699 26 CMNET-GD Guangdong Mobile Communication 9394 2399 4906 29 CTTNET China TieTong Telecommunications 17974 2253 968 50 TELKOMNET-AS2-AP PT Telekomunikasi Indo 4755 2140 437 181 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3502 1326 91 SHAW - Shaw Communications Inc., CA 11492 3481 225 607 CABLEONE - CABLE ONE, INC., US 22773 3305 2980 175 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 16509 2594 5291 972 AMAZON-02 - Amazon.com, Inc., US 16625 2200 1229 1691 AKAMAI-AS - Akamai Technologies, Inc., 20115 2151 2754 534 CHARTER-20115 - Charter Communications, 18566 2143 405 108 MEGAPATH5-US - MegaPath Corporation, US 30036 2088 349 169 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 5650 2087 3074 1462 FRONTIER-FRTR - Frontier Communications 209 2074 5077 588 CENTURYLINK-US-LEGACY-QWEST - CenturyLi Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5249 1629 139 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 3247 378 43 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2622 576 1931 AKAMAI-ASN1, US 12389 2228 2221 626 ROSTELECOM-AS, RU 34984 2036 337 533 TELLCOM-AS, TR 9121 1676 1691 17 TTNET, TR 13188 1604 100 46 TRIOLAN, UA 8402 1299 544 17 CORBINA-AS OJSC "Vimpelcom", RU 9009 1201 129 675 M247, GB Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5466 3317 591 Uninet S.A. de C.V., MX 10620 3148 476 896 Telmex Colombia S.A., CO 11830 2676 371 71 Instituto Costarricense de Electricidad 6503 1649 449 54 Axtel, S.A.B. de C.V., MX 7303 1440 961 228 Telecom Argentina S.A., AR 28573 1195 2237 181 CLARO S.A., BR 6147 1079 377 29 Telefonica del Peru S.A.A., PE 3816 1025 511 112 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 942 144 68 Alestra, S. de R.L. de C.V., MX 13999 934 538 258 Mega Cable, S.A. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1164 393 24 LINKdotNET-AS, EG 37611 898 107 9 Afrihost, ZA 36903 797 401 139 MT-MPLS, MA 36992 780 1411 44 ETISALAT-MISR, EG 24835 683 634 21 RAYA-AS, EG 8452 642 1731 19 TE-AS TE-AS, EG 29571 481 70 12 ORANGE-COTE-IVOIRE, CI 37492 459 470 57 ORANGE-, TN 37342 421 32 1 MOVITEL, MZ 15399 415 45 11 WANANCHI-, KE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5466 3317 591 Uninet S.A. de C.V., MX 12479 5249 1629 139 UNI2-AS, ES 7545 4656 515 522 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4642 4192 74 ERX-CERNET-BKB China Education and Rese 39891 3778 203 20 ALJAWWALSTC-AS, SA 6327 3502 1326 91 SHAW - Shaw Communications Inc., CA 11492 3481 225 607 CABLEONE - CABLE ONE, INC., US 22773 3305 2980 175 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 8551 3247 378 43 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 10620 3148 476 896 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 5249 5110 UNI2-AS, ES 4538 4642 4568 ERX-CERNET-BKB China Education and Research Net 7545 4656 4134 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3502 3411 SHAW - Shaw Communications Inc., CA 8551 3247 3204 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 22773 3305 3130 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 7552 3019 2927 VIETEL-AS-AP Viettel Group, VN 11492 3481 2874 CABLEONE - CABLE ONE, INC., US 45899 2982 2867 VNPT-AS-VN VNPT Corp, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 4200058511 PRIVATE 103.111.177.0/24 137522 OERL-AS-AP Origin Energy Retai 4200058511 PRIVATE 103.111.178.0/24 137522 OERL-AS-AP Origin Energy Retai 64339 UNALLOCATED 143.0.108.0/22 18747 IFX18747 - IFX Corporation, US 64355 UNALLOCATED 156.40.196.0/24 30387 NIH-NET-NCCS - National Instit 64011 UNALLOCATED 166.133.128.0/18 20057 ATT-MOBILITY-LLC-AS20057 - AT& 64011 UNALLOCATED 166.133.192.0/18 20057 ATT-MOBILITY-LLC-AS20057 - AT& 64011 UNALLOCATED 166.184.9.0/24 20057 ATT-MOBILITY-LLC-AS20057 - AT& 64011 UNALLOCATED 166.220.64.0/19 20057 ATT-MOBILITY-LLC-AS20057 - AT& Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 198.18.1.19/32 7497 CSTNET-AS-AP Computer Network Information Cente Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ 43.255.80.0/24 36351 SOFTLAYER - SoftLayer Technologies Inc., US 43.255.82.0/24 36351 SOFTLAYER - SoftLayer Technologies Inc., US 43.255.83.0/24 36351 SOFTLAYER - SoftLayer Technologies Inc., US 45.121.32.0/22 134356 UNKNOWN 45.124.164.0/22 38803 GTELECOM-AUSTRALIA Gtelecom-AUSTRALIA, AU 45.252.236.0/22 38803 GTELECOM-AUSTRALIA Gtelecom-AUSTRALIA, AU Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:12 /9:11 /10:36 /11:99 /12:291 /13:568 /14:1127 /15:1912 /16:13351 /17:7872 /18:13853 /19:25519 /20:39687 /21:46137 /22:91161 /23:74541 /24:413536 /25:925 /26:813 /27:868 /28:32 /29:19 /30:7 /31:2 /32:189 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 4101 5249 UNI2-AS, ES 6327 3266 3502 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 11492 2764 3481 CABLEONE - CABLE ONE, INC., US 8551 2703 3247 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 22773 2544 3305 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 18566 2038 2143 MEGAPATH5-US - MegaPath Corporation, US 11830 2021 2676 Instituto Costarricense de Electricidad y Telec 30036 1837 2088 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 5650 1761 2087 FRONTIER-FRTR - Frontier Communications of Amer Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1614 2:888 3:1 4:23 5:2769 6:43 7:1 8:1173 12:1877 13:302 14:1886 15:36 16:2 17:209 18:59 20:48 23:2551 24:2416 25:2 27:2550 31:2019 32:92 35:31 36:828 37:3000 38:1599 39:279 40:119 41:3148 42:728 43:2000 44:137 45:6425 46:3105 47:244 49:1333 50:1076 51:319 52:1085 54:363 55:1 56:6 57:41 58:1713 59:1071 60:461 61:2091 62:2157 63:1812 64:5077 65:2183 66:4803 67:2684 68:1160 69:3432 70:1144 71:603 72:2264 74:2740 75:406 76:526 77:1715 78:1710 79:2283 80:1636 81:1384 82:1080 83:876 84:1064 85:2127 86:563 87:1501 88:988 89:2417 90:211 91:6525 92:1261 93:2358 94:2360 95:3142 96:906 97:349 98:936 99:169 100:88 101:1166 102:337 103:19574 104:3559 105:242 106:888 107:1835 108:702 109:3644 110:1635 111:1904 112:1395 113:1382 114:1142 115:1721 116:1617 117:1928 118:2202 119:1690 120:1140 121:1029 122:2356 123:1628 124:1446 125:1948 128:1192 129:690 130:523 131:1650 132:716 133:193 134:1043 135:229 136:537 137:675 138:1958 139:777 140:568 141:763 142:797 143:995 144:855 145:504 146:1249 147:770 148:1703 149:790 150:787 151:994 152:933 153:326 154:2399 155:963 156:1635 157:851 158:656 159:1889 160:1490 161:904 162:2660 163:770 164:1123 165:1590 166:466 167:1358 168:3219 169:868 170:3989 171:497 172:1069 173:2144 174:997 175:879 176:2228 177:4063 178:2531 179:1289 180:2091 181:2361 182:2674 183:1352 184:1137 185:14506 186:3660 187:2485 188:2965 189:2097 190:8264 191:1428 192:10011 193:6488 194:5329 195:4049 196:3032 197:1719 198:5677 199:5973 200:7407 201:5015 202:10247 203:10233 204:4595 205:3021 206:3274 207:3262 208:3937 209:4193 210:3890 211:2006 212:3116 213:2828 214:1069 215:52 216:5962 217:2189 218:881 219:576 220:1835 221:997 222:976 223:1419 End of report

1 0

ECN, DNS and Firewalls
by Mark Andrews 28 Dec '18

28 Dec '18

There are major operators that still have STUPID firewall settings in front of DNS servers that drop SYN packets with ECE and CWR set 17 years after ECN was specified. Do you really want to add a second to EVERY DNS lookup that needs to use TCP? Modern OS actually attempt to use ECN by default. DNS is time critical enough without introducing unnecessary delays. If you have signed zones then TCP requests are almost certainly being made to your servers. EVERYONE TEST YOUR SERVERS FROM OUTSIDE YOUR NETWORK AND FIX THE BROKEN FIREWALLS THAT ARE FOUND. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka(a)isc.org

2 2