January 2011 - Test - lists.nanog.org

Weekly Routing Table Report
by Routing Analysis Role Account 21 Jan '11

21 Jan '11

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 22 Jan, 2011 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 343083 Prefixes after maximum aggregation: 154693 Deaggregation factor: 2.22 Unique aggregates announced to Internet: 169275 Total ASes present in the Internet Routing Table: 35688 Prefixes per ASN: 9.61 Origin-only ASes present in the Internet Routing Table: 30754 Origin ASes announcing only one prefix: 14951 Transit ASes present in the Internet Routing Table: 4934 Transit-only ASes present in the Internet Routing Table: 119 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 33 Max AS path prepend of ASN (36992) 29 Prefixes from unregistered ASNs in the Routing Table: 316 Unregistered ASNs in the Routing Table: 128 Number of 32-bit ASNs allocated by the RIRs: 1028 Prefixes from 32-bit ASNs in the Routing Table: 5 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 209 Number of addresses announced to Internet: 2341691488 Equivalent to 139 /8s, 147 /16s and 96 /24s Percentage of available address space announced: 63.2 Percentage of allocated address space announced: 65.2 Percentage of available address space allocated: 96.8 Percentage of address space in use by end-sites: 87.7 Total number of prefixes smaller than registry allocations: 141157 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 85214 Total APNIC prefixes after maximum aggregation: 28749 APNIC Deaggregation factor: 2.96 Prefixes being announced from the APNIC address blocks: 82002 Unique aggregates announced from the APNIC address blocks: 35485 APNIC Region origin ASes present in the Internet Routing Table: 4304 APNIC Prefixes per ASN: 19.05 APNIC Region origin ASes announcing only one prefix: 1214 APNIC Region transit ASes present in the Internet Routing Table: 692 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 20 Number of APNIC addresses announced to Internet: 582320928 Equivalent to 34 /8s, 181 /16s and 131 /24s Percentage of available APNIC address space announced: 78.9 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079 55296-56319, 131072-132095 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 138032 Total ARIN prefixes after maximum aggregation: 70612 ARIN Deaggregation factor: 1.95 Prefixes being announced from the ARIN address blocks: 108815 Unique aggregates announced from the ARIN address blocks: 44359 ARIN Region origin ASes present in the Internet Routing Table: 14136 ARIN Prefixes per ASN: 7.70 ARIN Region origin ASes announcing only one prefix: 5402 ARIN Region transit ASes present in the Internet Routing Table: 1479 Average ARIN Region AS path length visible: 4.0 Max ARIN Region AS path length visible: 23 Number of ARIN addresses announced to Internet: 746005632 Equivalent to 44 /8s, 119 /16s and 36 /24s Percentage of available ARIN address space announced: 62.6 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 54/8, 55/8, 56/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 107/8, 108/8, 173/8, 174/8, 184/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 80701 Total RIPE prefixes after maximum aggregation: 46018 RIPE Deaggregation factor: 1.75 Prefixes being announced from the RIPE address blocks: 74128 Unique aggregates announced from the RIPE address blocks: 48092 RIPE Region origin ASes present in the Internet Routing Table: 15214 RIPE Prefixes per ASN: 4.87 RIPE Region origin ASes announcing only one prefix: 7769 RIPE Region transit ASes present in the Internet Routing Table: 2372 Average RIPE Region AS path length visible: 4.6 Max RIPE Region AS path length visible: 33 Number of RIPE addresses announced to Internet: 456088640 Equivalent to 27 /8s, 47 /16s and 92 /24s Percentage of available RIPE address space announced: 75.5 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 196608-198655 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 176/8, 178/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 31439 Total LACNIC prefixes after maximum aggregation: 7222 LACNIC Deaggregation factor: 4.35 Prefixes being announced from the LACNIC address blocks: 30223 Unique aggregates announced from the LACNIC address blocks: 15725 LACNIC Region origin ASes present in the Internet Routing Table: 1419 LACNIC Prefixes per ASN: 21.30 LACNIC Region origin ASes announcing only one prefix: 429 LACNIC Region transit ASes present in the Internet Routing Table: 247 Average LACNIC Region AS path length visible: 4.4 Max LACNIC Region AS path length visible: 19 Number of LACNIC addresses announced to Internet: 79629312 Equivalent to 4 /8s, 191 /16s and 12 /24s Percentage of available LACNIC address space announced: 59.3 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 262144-263167 plus ERX transfers LACNIC Address Blocks 177/8, 181/8, 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 7474 Total AfriNIC prefixes after maximum aggregation: 1973 AfriNIC Deaggregation factor: 3.79 Prefixes being announced from the AfriNIC address blocks: 5799 Unique aggregates announced from the AfriNIC address blocks: 1913 AfriNIC Region origin ASes present in the Internet Routing Table: 435 AfriNIC Prefixes per ASN: 13.33 AfriNIC Region origin ASes announcing only one prefix: 137 AfriNIC Region transit ASes present in the Internet Routing Table: 93 Average AfriNIC Region AS path length visible: 5.5 Max AfriNIC Region AS path length visible: 31 Number of AfriNIC addresses announced to Internet: 21744896 Equivalent to 1 /8s, 75 /16s and 205 /24s Percentage of available AfriNIC address space announced: 43.2 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 105/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 1911 9485 522 Korea Telecom (KIX) 7545 1586 301 82 TPG Internet Pty Ltd 4755 1400 636 160 TATA Communications formerly 17974 1385 467 27 PT TELEKOMUNIKASI INDONESIA 24560 1095 317 181 Bharti Airtel Ltd., Telemedia 9583 1043 76 486 Sify Limited 4808 1019 2108 287 CNCGROUP IP network: China169 17488 949 162 103 Hathway IP Over Cable Interne 18101 920 116 140 Reliance Infocom Ltd Internet 9829 862 729 48 BSNL National Internet Backbo Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3710 3855 266 bellsouth.net, inc. 4323 2648 1077 403 Time Warner Telecom 19262 1839 4943 283 Verizon Global Networks 1785 1790 697 133 PaeTec Communications, Inc. 20115 1525 1530 641 Charter Communications 6478 1465 290 89 AT&T Worldnet Services 7018 1369 5650 882 AT&T WorldNet Services 2386 1299 553 934 AT&T Data Communications Serv 22773 1275 2864 77 Cox Communications, Inc. 11492 1266 234 78 Cable One Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6830 500 1763 306 UPC Distribution Services 9198 462 266 14 Kazakhtelecom Data Network Ad 34984 457 97 137 BILISIM TELEKOM 3292 444 2010 387 TDC Tele Danmark 8866 439 137 24 Bulgarian Telecommunication C 12479 404 577 6 Uni2 Autonomous System 8551 402 353 46 Bezeq International 3320 399 7618 349 Deutsche Telekom AG 702 398 1833 311 UUNET - Commercial IP service 20940 387 90 299 Akamai Technologies European Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 1355 251 165 TVCABLE BOGOTA 8151 1329 2613 363 UniNet S.A. de C.V. 28573 1231 953 86 NET Servicos de Comunicao S.A 6503 1148 355 78 AVANTEL, S.A. 7303 886 461 113 Telecom Argentina Stet-France 14420 604 50 89 CORPORACION NACIONAL DE TELEC 22047 567 310 15 VTR PUNTO NET S.A. 3816 521 222 102 Empresa Nacional de Telecomun 7738 478 922 30 Telecomunicacoes da Bahia S.A 14117 455 33 33 Telefonica del Sur S.A. Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 755 147 39 LINKdotNET AS number 8452 744 445 11 TEDATA 36992 663 283 155 Etisalat MISR 3741 264 987 226 The Internet Solution 24835 216 78 10 RAYA Telecom - Egypt 6713 203 199 12 Itissalat Al-MAGHRIB 29571 194 19 11 Ci Telecom Autonomous system 33776 182 12 14 Starcomms Nigeria Limited 2018 167 277 64 Tertiary Education Network 16637 160 440 90 MTN Network Solutions Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3710 3855 266 bellsouth.net, inc. 4323 2648 1077 403 Time Warner Telecom 4766 1911 9485 522 Korea Telecom (KIX) 19262 1839 4943 283 Verizon Global Networks 1785 1790 697 133 PaeTec Communications, Inc. 7545 1586 301 82 TPG Internet Pty Ltd 20115 1525 1530 641 Charter Communications 6478 1465 290 89 AT&T Worldnet Services 4755 1400 636 160 TATA Communications formerly 17974 1385 467 27 PT TELEKOMUNIKASI INDONESIA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4323 2648 2245 Time Warner Telecom 1785 1790 1657 PaeTec Communications, Inc. 19262 1839 1556 Verizon Global Networks 7545 1586 1504 TPG Internet Pty Ltd 4766 1911 1389 Korea Telecom (KIX) 6478 1465 1376 AT&T Worldnet Services 17974 1385 1358 PT TELEKOMUNIKASI INDONESIA 4755 1400 1240 TATA Communications formerly 22773 1275 1198 Cox Communications, Inc. 10620 1355 1190 TVCABLE BOGOTA Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 16927 UNALLOCATED 12.0.252.0/23 7018 AT&T WorldNet Servic 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.14.170.0/24 4323 Time Warner Telecom 13746 UNALLOCATED 12.24.56.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.25.107.0/24 4323 Time Warner Telecom 26973 UNALLOCATED 12.39.152.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.154.0/23 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.155.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.159.0/24 7018 AT&T WorldNet Servic 25639 UNALLOCATED 12.41.169.0/24 7018 AT&T WorldNet Servic Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 5.0.0.0/16 12654 RIPE NCC RIS Project 5.1.0.0/21 12654 RIPE NCC RIS Project 5.1.24.0/24 12654 RIPE NCC RIS Project 24.129.192.0/19 7922 Continental Cablevision 37.0.0.0/16 12654 RIPE NCC RIS Project 37.1.0.0/21 12654 RIPE NCC RIS Project 37.1.24.0/24 12654 RIPE NCC RIS Project 41.222.79.0/24 36938 >>UNKNOWN<< 41.223.92.0/22 36936 >>UNKNOWN<< 46.226.80.0/21 38927 Net-Build GmbH Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:10 /10:25 /11:70 /12:214 /13:438 /14:762 /15:1355 /16:11484 /17:5608 /18:9296 /19:18931 /20:24183 /21:24581 /22:32450 /23:31398 /24:179439 /25:980 /26:1080 /27:574 /28:160 /29:16 /30:2 /31:0 /32:8 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6389 2289 3710 bellsouth.net, inc. 4323 1430 2648 Time Warner Telecom 6478 1419 1465 AT&T Worldnet Services 10620 1246 1355 TVCABLE BOGOTA 11492 1222 1266 Cable One 18566 1118 1137 Covad Communications 7011 1068 1171 Citizens Utilities 1785 1061 1790 PaeTec Communications, Inc. 19262 952 1839 Verizon Global Networks 6503 934 1148 AVANTEL, S.A. Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:165 2:26 4:13 5:1 8:330 12:2029 13:1 14:378 15:15 16:3 17:8 20:9 23:1 24:1456 27:544 32:61 33:5 34:2 36:1 37:1 38:688 40:101 41:2301 42:1 44:3 46:525 47:5 49:142 50:56 52:12 55:8 56:2 57:31 58:869 59:483 60:391 61:1136 62:1011 63:1925 64:3754 65:2339 66:4102 67:1752 68:998 69:2878 70:719 71:392 72:1990 73:1 74:2296 75:291 76:326 77:852 78:705 79:433 80:1038 81:815 82:529 83:456 84:644 85:1043 86:526 87:727 88:350 89:1565 90:154 91:3419 92:492 93:1050 94:1150 95:761 96:413 97:249 98:751 99:33 101:18 107:3 108:79 109:847 110:465 111:698 112:309 113:366 114:490 115:633 116:885 117:677 118:631 119:1035 120:240 121:707 122:1606 123:1044 124:1264 125:1210 128:247 129:157 130:171 131:569 132:110 133:20 134:217 135:50 136:216 137:146 138:292 139:127 140:488 141:198 142:361 143:379 144:486 145:52 146:425 147:199 148:625 149:304 150:151 151:230 152:303 153:175 154:3 155:346 156:173 157:341 158:126 159:377 160:314 161:200 162:278 163:159 164:469 165:334 166:599 167:421 168:742 169:151 170:747 171:69 172:2 173:1246 174:506 175:306 176:1 177:4 178:745 180:758 182:391 183:249 184:204 186:938 187:807 188:906 189:1026 190:4359 192:5783 193:4788 194:3497 195:2934 196:1243 197:2 198:3552 199:3737 200:5607 201:1574 202:8288 203:8434 204:4083 205:2335 206:2525 207:2970 208:3863 209:3468 210:2638 211:1333 212:1863 213:1722 214:742 215:62 216:4840 217:1623 218:547 219:373 220:1198 221:445 222:346 223:90 End of report

1 0

Software DNS hghi availability and load balancer solution
by Sergey Voropaev 21 Jan '11

21 Jan '11

Does any one know software sollutions (free is preferable) like as cisco GSS and F5 BIG-IP? The main point is that DNS-server (or dns server plugin) must be able to monitor server availability (for example by TCP connect) and from DNS-reply depends on it. I know that it is possible by BIND with set of script. But we are trying to find more usable solution with frendly interface. Thanks a lot.

15 22

Looking for an Akamai contact, strange DoS traffic sourcing from Akamai sources
by Tom Beecher 21 Jan '11

21 Jan '11

I'm looking for an Akamai contact to try and address a strange situation. We have multiple sites across the country that aggregate 56k dialup customers. Different sites are randomly experiencing inbound traffic spikes that are overwhelming the uplinks to our carriers, causing DoS situations. These spikes far exceed the bandwidth that could possibly be used by the number of dialup customers connected. We've been able to trace the source of the traffic to Akamai boxes, but so far have been unable to reach anyone at Akamai to discuss the situation. We're attempting to get payload information, but the traffic volume is making it slow going setting up packet captures at these sites remotely. Thanks in advance, Tom -- Thomas Beecher II Senior Network Administrator LocalNet Corp. CoreComm Internet Services tbeecher at localnet.com

4 7

Re: Verizon FiOS Distribution Switch
by GP Wooden 21 Jan '11

21 Jan '11

Not that this is a requirement, but good practice none the less with this setup... Turn off cdp on the port facing the LEC... -graham ----- Reply message ----- From: "Chris Burwell" <cburwell(a)gmail.com> Date: Wed, Jan 19, 2011 2:56 pm Subject: Verizon FiOS Distribution Switch To: "NANOG" <nanog(a)nanog.org> I have a question about a Verizon FiOS business connection with an ethernet hand off and I am hoping that someone out there has done the same thing. We have a FiOS business connection coming into our building. This includes an Ethernet hand off into the usual Actiontec router as well as a block of 13 public IP addresses. The Actiontec router needs to remain in place with its current Public IP address. We have some devices from a vendor plugged into it for Internet access, as well as numerous cable boxes across the building that get their guide information through the coax interface on the router. What we want to do is take the ethernet hand off out of the WAN (RJ-45) interface on the Actiontec router and plug it into a hardened Cisco switch such as a 2950. Our goal here is to use the Cisco switch as a Internet distribution switch since we will have numerous test devices that will need to have a direct connection to the Internet. Our preference is also not to have all of the traffic from these other devices traverse the Actiontec router. I have a few concerns with this setup: Some articles I have read indicate that the hand off from the Verizon ONT may not be a direct Ethernet hand off so the interface it connects to may require a different config (Dialer or something). I am also concerned about any issues if the ONT or some down stream Verizon device may cause if it sees multiple MAC addresses coming across our link. We're not trying to cheat the system or anything, just to modify the Verizon setup to better suit our needs. Any advice or tips would be helpful. - Chris

3 2

Securing Border Routers
by Brandon Kim 20 Jan '11

20 Jan '11

Gents: What measures do you take to protect your border routers? Our routers are running BGP so I'm interested if there is any way to secure them without interfering with BGP? Is it normal to put a firewall in front of the border routers? I'm concerned about DDOS attacks mainly....although we haven't had any, I don't welcome them..... Brandon

7 7

RE: Authentication using Microsoft 2008 Active directory for Cisco RADIUS login
by Michael Ruiz 20 Jan '11

20 Jan '11

>Can you post your config on the router? >Also, this may be better to post over at cisco-nsp. >B I decided to move away from RADIUS via Active Directory and turn up a Ubuntu TACACS+ server. Now it works. HAHA. Now it is time to create the template files. M.A.R

1 0

Good MPLS/VPLS book?
by Michael Helmeste 20 Jan '11

20 Jan '11

Does anyone have a favorite book or resource discussing MPLS and all associated Lego blocks (e.g. LDP, TE, VPLS, martini, mBGP et. al.)? I understand the basics of what MPLS is and how you create a circuit from A to B but I'm afraid it still escapes me when trying to figure out how someone would, say, create a multicast capable VPN with 5 edge points. Any pointers to a good way to reduce my level of ignorance on this subject would be appreciated. Vendor literature doesn't bother me as long as the concepts are there. Regards, Michael H.

10 12

WAAS CIFS Optimisation
by Manu Chao 20 Jan '11

20 Jan '11

AFAIK, WAAS is not able to optimise CIFS when SMB signing or digital signatures are enabled (default!). Is it correct? Do i need to disable default Microsoft SMB signature to get optimal CIFS optimisation? Thanks for any feedback or recommandation Manu

3 2

United Airlines Technical Contact
by Nathan Charles 19 Jan '11

19 Jan '11

Does anybody have a technical contact for United Airlines? I can't seem to get in touch with any of the phone numbers or email addresses listed in whois. Regards, Nathan Charles

1 0

United Airlines Technical Contact
by Nathan Charles 19 Jan '11

19 Jan '11

Does anybody have a technical contact for United Airlines? I can't seem to get in touch with any of the phone numbers or email addresses listed in whois. Regards, Nathan Charles

1 0