April 2018 - Test - lists.nanog.org

Weekly Routing Table Report
by cscora＠apnic.net 06 Apr '18

06 Apr '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 07 Apr, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 690896 Prefixes after maximum aggregation (per Origin AS): 266872 Deaggregation factor: 2.59 Unique aggregates announced (without unneeded subnets): 332608 Total ASes present in the Internet Routing Table: 60156 Prefixes per ASN: 11.49 Origin-only ASes present in the Internet Routing Table: 51982 Origin ASes announcing only one prefix: 22730 Transit ASes present in the Internet Routing Table: 8174 Transit-only ASes present in the Internet Routing Table: 266 Average AS path length visible in the Internet Routing Table: 4.0 Max AS path length visible: 34 Max AS path prepend of ASN ( 30873) 32 Prefixes from unregistered ASNs in the Routing Table: 50 Number of instances of unregistered ASNs: 50 Number of 32-bit ASNs allocated by the RIRs: 22082 Number of 32-bit ASNs visible in the Routing Table: 17722 Prefixes from 32-bit ASNs in the Routing Table: 73655 Number of bogon 32-bit ASNs visible in the Routing Table: 20 Special use prefixes present in the Routing Table: 3 Prefixes being announced from unallocated address space: 310 Number of addresses announced to Internet: 2861813986 Equivalent to 170 /8s, 147 /16s and 208 /24s Percentage of available address space announced: 77.3 Percentage of allocated address space announced: 77.3 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.9 Total number of prefixes smaller than registry allocations: 230077 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 188751 Total APNIC prefixes after maximum aggregation: 53654 APNIC Deaggregation factor: 3.52 Prefixes being announced from the APNIC address blocks: 187714 Unique aggregates announced from the APNIC address blocks: 76628 APNIC Region origin ASes present in the Internet Routing Table: 8693 APNIC Prefixes per ASN: 21.59 APNIC Region origin ASes announcing only one prefix: 2439 APNIC Region transit ASes present in the Internet Routing Table: 1288 Average APNIC Region AS path length visible: 4.0 Max APNIC Region AS path length visible: 24 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3653 Number of APNIC addresses announced to Internet: 766814946 Equivalent to 45 /8s, 180 /16s and 170 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 206144 Total ARIN prefixes after maximum aggregation: 98618 ARIN Deaggregation factor: 2.09 Prefixes being announced from the ARIN address blocks: 206770 Unique aggregates announced from the ARIN address blocks: 97746 ARIN Region origin ASes present in the Internet Routing Table: 18123 ARIN Prefixes per ASN: 11.41 ARIN Region origin ASes announcing only one prefix: 6693 ARIN Region transit ASes present in the Internet Routing Table: 1795 Average ARIN Region AS path length visible: 3.6 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2332 Number of ARIN addresses announced to Internet: 1109310624 Equivalent to 66 /8s, 30 /16s and 188 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 188163 Total RIPE prefixes after maximum aggregation: 90863 RIPE Deaggregation factor: 2.07 Prefixes being announced from the RIPE address blocks: 184468 Unique aggregates announced from the RIPE address blocks: 109731 RIPE Region origin ASes present in the Internet Routing Table: 24935 RIPE Prefixes per ASN: 7.40 RIPE Region origin ASes announcing only one prefix: 11306 RIPE Region transit ASes present in the Internet Routing Table: 3476 Average RIPE Region AS path length visible: 4.1 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 6819 Number of RIPE addresses announced to Internet: 715437952 Equivalent to 42 /8s, 164 /16s and 183 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 89159 Total LACNIC prefixes after maximum aggregation: 19670 LACNIC Deaggregation factor: 4.53 Prefixes being announced from the LACNIC address blocks: 90546 Unique aggregates announced from the LACNIC address blocks: 40664 LACNIC Region origin ASes present in the Internet Routing Table: 6983 LACNIC Prefixes per ASN: 12.97 LACNIC Region origin ASes announcing only one prefix: 1923 LACNIC Region transit ASes present in the Internet Routing Table: 1286 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 32 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 4514 Number of LACNIC addresses announced to Internet: 172503776 Equivalent to 10 /8s, 72 /16s and 50 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 18627 Total AfriNIC prefixes after maximum aggregation: 4027 AfriNIC Deaggregation factor: 4.63 Prefixes being announced from the AfriNIC address blocks: 21088 Unique aggregates announced from the AfriNIC address blocks: 7581 AfriNIC Region origin ASes present in the Internet Routing Table: 1131 AfriNIC Prefixes per ASN: 18.65 AfriNIC Region origin ASes announcing only one prefix: 368 AfriNIC Region transit ASes present in the Internet Routing Table: 227 Average AfriNIC Region AS path length visible: 4.4 Max AfriNIC Region AS path length visible: 21 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 404 Number of AfriNIC addresses announced to Internet: 97351680 Equivalent to 5 /8s, 205 /16s and 120 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5416 4192 74 ERX-CERNET-BKB China Education and Rese 7545 3870 413 428 TPG-INTERNET-AP TPG Telecom Limited, AU 4766 2843 11130 778 KIXS-AS-KR Korea Telecom, KR 9829 2814 1499 544 BSNL-NIB National Internet Backbone, IN 7552 2716 1155 67 VIETEL-AS-AP Viettel Group, VN 9394 2631 4923 29 CTTNET China TieTong Telecommunications 45899 2585 1570 160 VNPT-AS-VN VNPT Corp, VN 17974 2322 928 79 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9808 2178 8699 32 CMNET-GD Guangdong Mobile Communication 4755 2089 417 216 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3352 1323 85 SHAW - Shaw Communications Inc., CA 22773 3286 2988 151 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 18566 2167 405 108 MEGAPATH5-US - MegaPath Corporation, US 20115 2092 2484 447 CHARTER-NET-HKY-NC - Charter Communicat 16509 2043 4411 635 AMAZON-02 - Amazon.com, Inc., US 30036 1955 341 181 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 209 1922 5071 607 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 11492 1793 228 537 CABLEONE - CABLE ONE, INC., US 16625 1707 831 1222 AKAMAI-AS - Akamai Technologies, Inc., 7018 1706 20205 1257 ATT-INTERNET4 - AT&T Services, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 4059 1513 474 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 20940 2735 767 2003 AKAMAI-ASN1, US 8551 2114 378 43 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2036 1859 706 ROSTELECOM-AS, RU 34984 2018 334 480 TELLCOM-AS, TR 9121 1956 1692 19 TTNET, TR 13188 1607 100 46 TRIOLAN, UA 6849 1241 355 21 UKRTELNET, UA 8402 1233 544 14 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 4328 3385 574 Uninet S.A. de C.V., MX 10620 3598 540 268 Telmex Colombia S.A., CO 11830 2641 369 85 Instituto Costarricense de Electricidad 6503 1625 437 53 Axtel, S.A.B. de C.V., MX 7303 1510 1023 192 Telecom Argentina S.A., AR 28573 1032 2251 174 CLARO S.A., BR 6147 1016 377 31 Telefonica del Peru S.A.A., PE 3816 1005 504 121 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 928 126 85 Alestra, S. de R.L. de C.V., MX 18881 908 1074 29 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1143 396 44 LINKdotNET-AS, EG 37611 821 107 9 Afrihost, ZA 36903 741 372 137 MT-MPLS, MA 36992 705 1412 41 ETISALAT-MISR, EG 24835 638 850 15 RAYA-AS, EG 8452 631 1730 18 TE-AS TE-AS, EG 29571 471 68 12 ORANGE-COTE-IVOIRE, CI 37492 450 376 81 ORANGE-, TN 15399 364 35 7 WANANCHI-, KE 37342 360 32 1 MOVITEL, MZ Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5416 4192 74 ERX-CERNET-BKB China Education and Rese 8151 4328 3385 574 Uninet S.A. de C.V., MX 12479 4059 1513 474 UNI2-AS, ES 7545 3870 413 428 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 203 20 ALJAWWALSTC-AS, SA 10620 3598 540 268 Telmex Colombia S.A., CO 6327 3352 1323 85 SHAW - Shaw Communications Inc., CA 22773 3286 2988 151 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 4766 2843 11130 778 KIXS-AS-KR Korea Telecom, KR 9829 2814 1499 544 BSNL-NIB National Internet Backbone, IN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 39891 3778 3758 ALJAWWALSTC-AS, SA 8151 4328 3754 Uninet S.A. de C.V., MX 12479 4059 3585 UNI2-AS, ES 7545 3870 3442 TPG-INTERNET-AP TPG Telecom Limited, AU 10620 3598 3330 Telmex Colombia S.A., CO 6327 3352 3267 SHAW - Shaw Communications Inc., CA 22773 3286 3135 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 7552 2716 2649 VIETEL-AS-AP Viettel Group, VN 9394 2631 2602 CTTNET China TieTong Telecommunications Corpora 11830 2641 2556 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 267359 UNALLOCATED 45.234.36.0/22 264144 ASAP GLOBAL TELECOM, BR 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 65537 DOCUMENT 62.162.120.0/24 6821 MT-AS-OWN bul. Orce Nikolov bb 65024 PRIVATE 87.103.234.0/24 39407 CHITATELECOM-AS, RU 65024 PRIVATE 95.189.78.0/24 39407 CHITATELECOM-AS, RU 65024 PRIVATE 95.189.80.0/22 39407 CHITATELECOM-AS, RU 64111 UNALLOCATED 98.159.5.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64111 UNALLOCATED 98.159.7.0/24 19555 KMI-NETWORK - Kinder Morgan, I Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.66.224.0/19 209 CENTURYLINK-US-LEGACY-QWEST - Qwest Communicati 100.127.16.0/23 28885 OMANTEL-NAP-AS OmanTel NAP, OM 100.127.18.0/23 28885 OMANTEL-NAP-AS OmanTel NAP, OM Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 14.128.14.0/23 10247 NETLINE, ZA 14.192.50.0/23 10247 NETLINE, ZA 14.192.58.0/23 10247 NETLINE, ZA 27.100.7.0/24 56096 UNKNOWN 36.255.250.0/23 10247 NETLINE, ZA 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.136.0/24 37500 -Reserved AS-, ZZ 41.76.138.0/24 37500 -Reserved AS-, ZZ 41.76.139.0/24 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:15 /9:12 /10:37 /11:100 /12:288 /13:564 /14:1098 /15:1900 /16:13371 /17:7800 /18:13591 /19:25132 /20:39238 /21:45076 /22:85970 /23:69237 /24:385229 /25:841 /26:604 /27:661 /28:35 /29:20 /30:17 /31:4 /32:56 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6327 3141 3352 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 12479 2783 4059 UNI2-AS, ES 22773 2538 3286 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 18566 2061 2167 MEGAPATH5-US - MegaPath Corporation, US 11830 1989 2641 Instituto Costarricense de Electricidad y Telec 30036 1706 1955 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1604 3598 Telmex Colombia S.A., CO 8551 1577 2114 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 1554 1793 CABLEONE - CABLE ONE, INC., US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1549 2:826 4:19 5:2759 6:59 7:1 8:1123 12:1881 13:183 14:1737 15:30 16:3 17:196 18:68 20:47 21:4 23:2542 24:2156 25:2 27:2197 31:1948 32:87 35:26 36:494 37:2680 38:1450 39:237 40:118 41:3030 42:598 43:1937 44:103 45:4024 46:3000 47:203 49:1289 50:1048 51:304 52:988 54:371 55:4 56:12 57:42 58:1505 59:1015 60:428 61:2134 62:1807 63:1797 64:4754 65:2217 66:4585 67:2346 68:1148 69:3194 70:1141 71:560 72:2096 74:2709 75:412 76:426 77:1541 78:1684 79:1917 80:1464 81:1414 82:1076 83:783 84:1034 85:2083 86:586 87:1312 88:934 89:2319 90:208 91:6272 92:1157 93:2384 94:2380 95:2758 96:658 97:357 98:935 99:133 100:79 101:1234 102:41 103:17264 104:3264 105:229 106:647 107:1765 108:710 109:2676 110:1578 111:1775 112:1267 113:1331 114:1121 115:1652 116:1640 117:1703 118:2114 119:1655 120:955 121:1061 122:2452 123:1805 124:1448 125:1882 128:982 129:640 130:448 131:1585 132:651 133:196 134:1005 135:226 136:455 137:499 138:1911 139:582 140:424 141:688 142:790 143:962 144:807 145:458 146:1164 147:760 148:1585 149:710 150:715 151:1058 152:760 153:310 154:1024 155:754 156:865 157:780 158:627 159:1663 160:932 161:747 162:2585 163:531 164:1040 165:1408 166:423 167:1408 168:3037 169:809 170:3716 171:428 172:1042 173:1962 174:883 175:750 176:1867 177:3969 178:2406 179:1202 180:2240 181:2200 182:2290 183:1143 184:913 185:13091 186:3573 187:2367 188:2747 189:2014 190:8133 191:1447 192:9820 193:5868 194:4777 195:3950 196:2493 197:1414 198:5507 199:5874 200:7395 201:4992 202:10321 203:10109 204:4523 205:2864 206:3071 207:3195 208:3981 209:3938 210:4026 211:2108 212:3018 213:2727 214:907 215:60 216:5859 217:2133 218:900 219:620 220:1724 221:1000 222:1042 223:1240 End of report

1 0

Attn BrightCloud
by Kaiser, Erich 06 Apr '18

06 Apr '18

We are seeing false positives on NAt'd IPs on our customers networks, please correct this issue. This started a few days ago... Erich Kaiser The Fusion Network erich(a)gotfusion.net Office: 815-570-3101

2 1

CDN-provided caching platforms?
by Russell Berg 06 Apr '18

06 Apr '18

I work for a regional Midwestern US "Tier 2" ISP that provides both wholesale and enterprise Internet connectivity. We have caching platforms in place from the likes of Akamai, Google, Netflix, and Facebook; I was wondering if there are other CDN caching platforms out there we should be researching/deploying? PM me if more appropriate... TIA Russ Russell Berg Chief Technology Officer WIN / Airstream Communications (AS 11796) P: 715-832-3726 | C: 715-579-8227 www.wins.net<http://www.wins.net/>

11 13

Juniper releases sFlow support for MX routers
by Peter Phaal 06 Apr '18

06 Apr '18

Hi All, I thought there might be interest in availability of sFlow in Junos OS Release 18.1R1 for MX routers: https://blog.sflow.com/2018/04/sflow-available-on-juniper-mx-series.html Peter

1 0

Why doesn't "Cloudflare 1.1.1.1" compress root answers?
by Bjørn Mork 05 Apr '18

05 Apr '18

At first I thought they had disabled compression: bjorn@miraculix:~$ dig . ns @1.1.1.1|grep SIZE ;; MSG SIZE rcvd: 431 bjorn@miraculix:~$ dig . ns @8.8.8.8|grep SIZE ;; MSG SIZE rcvd: 239 bjorn@miraculix:~$ dig . ns @9.9.9.9|grep SIZE ;; MSG SIZE rcvd: 239 But then I noticed that they *do* compress other names: bjorn@miraculix:~$ dig net ns @1.1.1.1|grep SIZE ;; MSG SIZE rcvd: 253 bjorn@miraculix:~$ dig net ns @8.8.8.8|grep SIZE ;; MSG SIZE rcvd: 253 bjorn@miraculix:~$ dig net ns @9.9.9.9|grep SIZE ;; MSG SIZE rcvd: 253 Which just makes it even more confusing. What's so special about root? Except for the obvious :-) Bjørn

4 4

NG Firewalls & IPv6
by Joe Klein 05 Apr '18

05 Apr '18

All, At security and network tradeshows over the last 15 years, I have asked companies if their products supported "IPv6". They all claimed they did, but were unable to verify any successful installations. Later they told me it was on their "Roadmap" but were unable to provide an estimated year, because it was a trade secret. Starting this last year at BlackHat US, I again visited every product booth, asking if their products supported dual-stack or IPv6 only operations. Receiving only the same unsupported answers, I decided to focus on one product category. To the gurus of the NANOG community, What are your experiences with installing and managing Next Generations firewalls? Do they support IPv6 only environments? Details? Stories? If you prefer not to disparage those poor product companies, please contact me off the list. Thanks, Joe Klein "inveniet viam, aut faciet" --- Seneca's Hercules Furens (Act II, Scene 1) PGP Fingerprint: 295E 2691 F377 C87D 2841 00C1 4174 FEDF 8ECF 0CC8

11 12

validating reachability via an ISP
by Andy Litzinger 05 Apr '18

05 Apr '18

Hi all, I have an enterprise network and do not provide transit. In one of our datacenters we have our own prefixes and rely on two ISPs as BGP neighbors to provide global reachability for our prefixes. One is a large regional provider and the other is a large global provider. Recently we took our link to the global provider offline to perform maintenance on our router. Nearly immediately we were hit with alerts that our prefix was unreachable and BGPMon alerted that nearly 80 AS's noted our route had been withdrawn. We were not unreachable from every AS, but we certainly were from some of the largest. The root cause is that the our prefix is not being adequately re-distributed globally by the regional ISP. This is unexpected and we are working through this with them now. My question is, how can I monitor global reachability for a prefix via this or any specific provider I use over time? Are there various route-servers I can programmatically query for my prefix and get results that include AS paths? Then I could verify that an "acceptable" number of paths exist that include the AS of the all the ISPs I rely upon. And what would an "acceptable" number of alternate paths be? thanks in advance, -andy

8 9

Re: validating reachability via an ISP
by Andy Litzinger 04 Apr '18

04 Apr '18

Hi Alex, Thanks for the link to the qrator API. The get-all-paths is interesting and the output does seem to show exactly the type of data I'm looking for. Is there some place on the site that lists who Qrator peers with to get your data? I searched through the site and couldn't find it. I'm trying to get an idea of the breadth of data and whether i can comfortably rely on it giving me a global view. Also, how do I authorize programmatic requests to the API? I created a user and can use it to run the queries from the web page, but I don't see how to use it directly with the API. thanks! -andy On Thu, Mar 29, 2018 at 8:23 AM, Alexander Azimov <aa(a)qrator.net> wrote: > Hi Andy, > > You can use Qrator.Radar API: https://api.radar.qrator.net/. > The get-all-paths method will return the set of active paths for selected > prefix. > > PS: I'm sorry if you receive this message two times, something funny is > happening with my emails on NANOG mailing list. > > 2018-03-29 18:09 GMT+03:00 Alexander Azimov <aa(a)qrator.net>: > >> Hi Andy, >> >> You can use Qrator.Radar API: https://api.radar.qrator.net/. >> The get-all-paths method will return the set of active paths for selected >> prefix. >> >> >> 2018-03-29 2:22 GMT+03:00 Andy Litzinger <andy.litzinger.lists(a)gmail.com> >> : >> >>> Hi all, >>> I have an enterprise network and do not provide transit. In one of our >>> datacenters we have our own prefixes and rely on two ISPs as BGP >>> neighbors >>> to provide global reachability for our prefixes. One is a large regional >>> provider and the other is a large global provider. >>> >>> Recently we took our link to the global provider offline to perform >>> maintenance on our router. Nearly immediately we were hit with alerts >>> that >>> our prefix was unreachable and BGPMon alerted that nearly 80 AS's noted >>> our >>> route had been withdrawn. We were not unreachable from every AS, but we >>> certainly were from some of the largest. >>> >>> The root cause is that the our prefix is not being adequately >>> re-distributed globally by the regional ISP. This is unexpected and we >>> are >>> working through this with them now. >>> >>> My question is, how can I monitor global reachability for a prefix via >>> this >>> or any specific provider I use over time? Are there various >>> route-servers >>> I can programmatically query for my prefix and get results that include >>> AS >>> paths? Then I could verify that an "acceptable" number of paths exist >>> that >>> include the AS of the all the ISPs I rely upon. And what would an >>> "acceptable" number of alternate paths be? >>> >>> >>> thanks in advance, >>> -andy >>> >> >> >> >> -- >> | Alexander Azimov | HLL l QRATOR >> | tel.: +7 499 241 81 92 >> | mob.: +7 915 360 08 86 >> | skype: mitradir >> | mailto: aa(a)qrator.net >> | visit: www.qrator.net >> > > > > -- > | Alexander Azimov | HLL l QRATOR > | tel.: +7 499 241 81 92 > | mob.: +7 915 360 08 86 > | skype: mitradir > | mailto: aa(a)qrator.net > | visit: www.qrator.net >

1 0

Re: Yet another Quadruple DNS?
by Scott Weeks 03 Apr '18

03 Apr '18

--- bortzmeyer(a)nic.fr wrote: From: Stephane Bortzmeyer <bortzmeyer(a)nic.fr> Rich Kulawiec <rsk(a)gsp.org> wrote a message of 10 lines which said: > Watch what you wish for: you might get it. The number of > attack/abuse vectors (and the severity of their consequences for > security and privacy) involved in doing auto-update may rival those > involved in not doing auto-update. Also, there is the risk of getting updates that will disable some features, if there is a change in the commercial strategy of the vendor <https://boingboing.net/2016/09/19/hp-detonates-its-timebomb-pri.html>. All these risks are documented in RFC 8240, a highly recommended reading. ------------------------------------------- Regarding the HP example story, won't natural attrition fix this? My stuff has been in storage for well over a year for various reasons and if I pull out my HP printer (which has non-HP cartridges) and it does this to me, I surely won't get another one. I'm also sure I'd be the norm on this as it would anger other non-technical HP customers, as well. (I was on the fence with HP anyway as they try to take over my equipment too much) scott ps. Who knows, I don't let my printer talk outside my network anyway, so maybe I didn't get the update.

1 0

COX contact
by Dennis Burgess 03 Apr '18

03 Apr '18

Can I get a network engineer from COX to give me a call or email me please :) I have a routing issue that I need taken a look at.. Dennis Burgess, Mikrotik Certified Trainer Author of "Learn RouterOS- Second Edition" Link Technologies, Inc -- Mikrotik & WISP Support Services Office: 314-735-0270 Website: http://www.linktechs.net<http://www.linktechs.net/> Create Wireless Coverage's with www.towercoverage.com

1 0