September 2022 - Test - lists.nanog.org

Call for Working Group Participation: MANRS+
by Andrei Robachevsky 13 Sep '22

13 Sep '22

Hi, MANRS is looking for volunteers to join a new working group to explore the idea of creating a second, elevated tier of MANRS participation for organizations that comply with more stringent requirements and auditing. We’re calling this MANRS+ at the moment, though that’s only a working title. MANRS has traditionally been focused on peer-to-peer relationships, but we believe generating customer demand could be a powerful driving force for better routing security. If we can enhance the business case, customers will demand better routing security of their network connectivity providers and providers will ensure they’re following best practices and staying in compliance with the MANRS actions that stop routing security incidents. Read more at https://www.manrs.org/2022/09/improving-manrs-call-for-working-group-partic…, and email us at contact(a)manrs.org<mailto:contact@manrs.org> by 23 September to join the MANRS+ working group. We look forward to hearing from you. Regards, Andrei On Behalf of the MANRS Team

1 0

Router ID on IPv6-Only
by Crist Clark 13 Sep '22

13 Sep '22

During some IPv6 numbering discussions at work today, someone had a question that I hadn't really considered before. How to choose 32-bit router IDs for IPv6-only routers. Quick background. We have a requirement to convert a significant portion of our network to IPv6-only over the next few years. Previously, I, and everyone else on the team, have only ever set up routers in dual-stack environments. Choosing a router ID for use in routing protocols just followed whatever rules you used for your IPv4 networking. You used the same router ID in IPv4 and IPv6. Well, now there is no IPv4. But BGP, OSPFv3, and other routing protocols still use 32-bit router IDs for IPv6. On the one hand, there are plenty of 32-bit numbers to use. Generally speaking, router IDs just need to be unique inside of an AS to do their job, but (a) for humans or automation to generate them and (b) to easily recognize them, it's convenient to have some algorithm or methodology for assigning them. Has anyone thought about this or have a good way to do it? We had ideas like use bits 32-63 from an interface. Seems like it could work, but also could totally break down if we're using >64-bit prefixes for things like router-to-router links or pulling router loopbacks out of a common /64. Also, various network OS implementations will typically automatically choose a router ID from the IPv4 addresses on the router by some algorithm (e.g. numerically lowest) if not explicitly configured. Was curious what IPv6-only routers do. Haven't had the chance to get on some lab gear or GNS3 to just try it and see.

11 21

Re: Rogers Outage: What do we Know After Two Months?
by Clayton Zekelman 12 Sep '22

12 Sep '22

It was mentioned: It shouldnt take a parliamentary inquiry or pointed attention from Canadas telecoms regulator, or the <https://www.cbc.ca/news/business/rogers-outage-relevant-to-shaw-deal-1.6565…>fear of having its corporate merger with another enormous IP network backbone blocked, to bring those technical lessons into the light. But not by name. At 07:21 PM 12/09/2022, Eric Kuhnke wrote: >I did a ctrl-f for "Shaw" in that article and there's zero mention of it. > >I realize that the Internet Society is meant to >remain neutral and not comment subjectively on >matters of market competition and conglomeration of telecoms. > >It's very concerning to me that the Rogers/Shaw >acquisition-merger will likely be allowed to >proceed, even further reducing competition, and >increasing centralization (the opposite of the >decentralization mentioned in the article). From >the point of view of a Canadian who works >primarily for US-based ISPs these days, at least >in the US there's seven or eight gargantuan >multi-billion-dollar sized last mile cable >operators. In many parts of Canada it's just >Rogers or Shaw. It's not a good situation at all for the consumer. > > > > > >On Mon, 12 Sept 2022 at 07:42, Sean Donelan ><<mailto:sean@donelan.com>sean(a)donelan.com> wrote: >Article by Internet Society's Resident Advisor Jim Cowie. > > >Rogers Outage: What do we Know After Two Months? > ><https://pulse.internetsociety.org/blog/rogers-outage-what-do-we-know-after-…>https://pulse.internetsociety.org/blog/rogers-outage-what-do-we-know-after-… > >September 9, 2022 > >Itâs now been a full two months since Rogers Telecom suffered a nationwide >Internet outage, leaving tens of millions of Canadians without >telecommunications services. -- Clayton Zekelman Managed Network Systems Inc. (MNSi) 3363 Tecumseh Rd. E Windsor, Ontario N8W 1H4 tel. 519-985-8410 fax. 519-985-8409

1 0

Rogers Outage: What do we Know After Two Months?
by Sean Donelan 12 Sep '22

12 Sep '22

Article by Internet Society's Resident Advisor Jim Cowie. Rogers Outage: What do we Know After Two Months? https://pulse.internetsociety.org/blog/rogers-outage-what-do-we-know-after-… September 9, 2022 It’s now been a full two months since Rogers Telecom suffered a nationwide Internet outage, leaving tens of millions of Canadians without telecommunications services.

2 1

New ARIN RSA (was: Fwd: [arin-announce] New ARIN Registration Services Agreement)
by John Curran 12 Sep '22

12 Sep '22

NANOGers - We’ve updated the ARIN RSA to simplify a section that has received significant comments over the years. FYI, /John John Curran President and CEO American Registry for Internet Numbers Begin forwarded message: From: ARIN <info(a)arin.net<mailto:info@arin.net>> Subject: [arin-announce] New ARIN Registration Services Agreement Date: 12 September 2022 at 12:56:02 PM EDT To: "arin-announce(a)arin.net<mailto:arin-announce@arin.net>" <arin-announce(a)arin.net<mailto:arin-announce@arin.net>> ARIN is pleased to announce the release of an updated combined Registration Services Agreement (the “RSA”) RSA Version 13.0/LRSA Version 5.0 (https://arin.net/about/corporate/agreements/rsa.pdf) This agreement takes the place of RSA Version 12.0/LRSA Version 4.0 and is immediately made available for signature. Further, any signatories of prior versions of the RSA or LRSA that are in good standing are able to update and execute this version of the RSA if they wish to do so. ARIN is committed to removing hurdles to organizations making use of ARIN’s services to the extent reasonably possible. We have updated the RSA several times since its inception; each time, we have incorporated changes to address concerns and comments received from the community. This updated RSA changes one section of the RSA that has been the subject of notable community feedback over the years. The updated RSA removes significant representations from Section 7 and renames the section (previously titled “No Property Rights”) to “Acknowledged Rights To Included Number Resources.” A redline showing the change may be seen here: https://arin.net/about/corporate/agreements/rsav13_changes.pdf. We have not changed the RSA in more than five years; however, we felt that this small change may be helpful to customers considering ARIN’s services, including RPKI and our recently introduced Authenticated IRR. For clarity, this change to the RSA does not impact, nor does it alter, ARIN’s position that Internet Number Resources are not freely-held property. Internet Number Resources constitute a bundle of contractual rights that are created upon issuance of an Internet Number Resource from the registry to a registrant. The original “No Property Rights” section was created at a time when this clear statement was necessary. Since then, the RSA has undergone multiple updates, including the addition of the specified rights granted to a Holder as detailed in Section 2 of the RSA titled “Conditions of Service.” We are hopeful with the release of this updated RSA that organizations will more easily be able to utilize ARIN’s full suite of services. Regards, John Curran President and CEO American Registry for Internet Numbers (ARIN)

1 0

rsync CVE-2022-29154 and RPKI Validation
by Matt Corallo 09 Sep '22

09 Sep '22

Has anyone done an analysis of the rsync CVE-2022-29154 (which "allows malicious remote servers to write arbitrary files inside the directories of connecting peers") and its potential impact on RPKI validators? It looks like both Debian [1] and Ubuntu [2] opted *not* to patch rsync in their release/security package streams. Are rsync-based (or rsync-fallback, which I believe is still required for all RPKI validators?) RPKI validators all vulnerable to takeover from this, or is there some reason why this doesn't apply to RPKI validation? Thanks, Matt [1] https://security-tracker.debian.org/tracker/CVE-2022-29154 [2] https://ubuntu.com/security/CVE-2022-29154

3 5

ROA Will Expire Soon - ARIN
by Terrance Devor 09 Sep '22

09 Sep '22

Can someone from ARIN please reach out to me. We don't want the ROA to expire... Kind Regards, Terrance

7 9

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 09 Sep '22

09 Sep '22

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 10 Sep, 2022 BGP Table (Global) as seen in Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 909260 Prefixes after maximum aggregation (per Origin AS): 342376 Deaggregation factor: 2.66 Unique aggregates announced (without unneeded subnets): 439339 Total ASes present in the Internet Routing Table: 73642 Prefixes per ASN: 12.35 Origin-only ASes present in the Internet Routing Table: 63244 Origin ASes announcing only one prefix: 26032 Transit ASes present in the Internet Routing Table: 10398 Transit-only ASes present in the Internet Routing Table: 399 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 55 Max AS path prepend of ASN (265020) 50 Prefixes from unregistered ASNs in the Routing Table: 974 Number of instances of unregistered ASNs: 974 Number of 32-bit ASNs allocated by the RIRs: 40143 Number of 32-bit ASNs visible in the Routing Table: 33331 Prefixes from 32-bit ASNs in the Routing Table: 160214 Number of bogon 32-bit ASNs visible in the Routing Table: 7 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 510 Number of addresses announced to Internet: 3069022080 Equivalent to 182 /8s, 237 /16s and 143 /24s Percentage of available address space announced: 82.9 Percentage of allocated address space announced: 82.9 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 308637 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 237518 Total APNIC prefixes after maximum aggregation: 67545 APNIC Deaggregation factor: 3.52 Prefixes being announced from the APNIC address blocks: 232440 Unique aggregates announced from the APNIC address blocks: 96417 APNIC Region origin ASes present in the Internet Routing Table: 12948 APNIC Prefixes per ASN: 17.95 APNIC Region origin ASes announcing only one prefix: 3752 APNIC Region transit ASes present in the Internet Routing Table: 1752 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 34 Number of APNIC region 32-bit ASNs visible in the Routing Table: 8184 Number of APNIC addresses announced to Internet: 773537536 Equivalent to 46 /8s, 27 /16s and 63 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-151865 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 264936 Total ARIN prefixes after maximum aggregation: 120942 ARIN Deaggregation factor: 2.19 Prefixes being announced from the ARIN address blocks: 265432 Unique aggregates announced from the ARIN address blocks: 128088 ARIN Region origin ASes present in the Internet Routing Table: 19052 ARIN Prefixes per ASN: 13.93 ARIN Region origin ASes announcing only one prefix: 6932 ARIN Region transit ASes present in the Internet Routing Table: 1914 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 34 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4606 Number of ARIN addresses announced to Internet: 1293459200 Equivalent to 77 /8s, 24 /16s and 159 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 260753 Total RIPE prefixes after maximum aggregation: 119679 RIPE Deaggregation factor: 2.18 Prefixes being announced from the RIPE address blocks: 257993 Unique aggregates announced from the RIPE address blocks: 153548 RIPE Region origin ASes present in the Internet Routing Table: 28190 RIPE Prefixes per ASN: 9.15 RIPE Region origin ASes announcing only one prefix: 12070 RIPE Region transit ASes present in the Internet Routing Table: 3992 Average RIPE Region AS path length visible: 4.2 Max RIPE Region AS path length visible: 30 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10804 Number of RIPE addresses announced to Internet: 717378944 Equivalent to 42 /8s, 194 /16s and 85 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 116719 Total LACNIC prefixes after maximum aggregation: 27901 LACNIC Deaggregation factor: 4.18 Prefixes being announced from the LACNIC address blocks: 116329 Unique aggregates announced from the LACNIC address blocks: 48967 LACNIC Region origin ASes present in the Internet Routing Table: 10978 LACNIC Prefixes per ASN: 10.60 LACNIC Region origin ASes announcing only one prefix: 2684 LACNIC Region transit ASes present in the Internet Routing Table: 2230 Average LACNIC Region AS path length visible: 5.0 Max LACNIC Region AS path length visible: 55 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8721 Number of LACNIC addresses announced to Internet: 176451584 Equivalent to 10 /8s, 132 /16s and 112 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-273820 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 28360 Total AfriNIC prefixes after maximum aggregation: 5563 AfriNIC Deaggregation factor: 5.10 Prefixes being announced from the AfriNIC address blocks: 36556 Unique aggregates announced from the AfriNIC address blocks: 11882 AfriNIC Region origin ASes present in the Internet Routing Table: 1688 AfriNIC Prefixes per ASN: 21.66 AfriNIC Region origin ASes announcing only one prefix: 594 AfriNIC Region transit ASes present in the Internet Routing Table: 328 Average AfriNIC Region AS path length visible: 5.0 Max AfriNIC Region AS path length visible: 37 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 1016 Number of AfriNIC addresses announced to Internet: 107912448 Equivalent to 6 /8s, 110 /16s and 157 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 9089 8883 47 CHINAMOBILE-CN China Mobile Communicati 7545 5934 789 699 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4719 4192 75 ERX-CERNET-BKB China Education and Rese 7552 3586 1330 20 VIETEL-AS-AP Viettel Group, VN 7713 3500 1042 61 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 3365 1870 59 VNPT-AS-VN VNPT Corp, VN 4766 2474 11124 601 KIXS-AS-KR Korea Telecom, KR 9498 2427 499 238 BBIL-AP BHARTI Airtel Ltd., IN 24560 2195 851 411 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd 45090 2180 1438 79 TENCENT-NET-AP Shenzhen Tencent Compute Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 7069 10468 2825 AMAZON-02, US 11492 4577 303 535 CABLEONE, US 7155 3898 265 32 VIASAT-SP-BACKBONE, US 22773 3808 3067 355 ASN-CXA-ALL-CCI-22773-RDC, US 16625 3511 1815 2525 AKAMAI-AS, US 6327 3472 1319 63 SHAW, CA 749 3033 50727 2291 DNIC-AS-00749, US 30036 2608 369 261 MEDIACOM-ENTERPRISE-BUSINESS, US 396982 2533 3387 365 GOOGLE-CLOUD-PLATFORM, US 209 2359 4936 404 CENTURYLINK-US-LEGACY-QWEST, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6931 1730 144 UNI2-AS, ES 9121 6810 1692 17 TTNET, TR 20940 4058 3348 218 AKAMAI-ASN1, NL 39891 4010 234 47 ALJAWWALSTC-AS, SA 8551 3988 374 38 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2941 2290 910 ROSTELECOM-AS, RU 6849 2759 355 21 UKRTELNET, UA 9009 2607 252 1346 M247, GB 34984 2267 359 635 TELLCOM-AS, TR 47331 1971 310 1491 TTNET, TR Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10925 3393 555 Uninet S.A. de C.V., MX 10620 3494 514 787 Telmex Colombia S.A., CO 11830 2329 369 64 Instituto Costarricense de Electricidad 13999 1985 323 508 Mega Cable, S.A. de C.V., MX 28573 1362 2328 264 Claro NXT Telecomunicacoes Ltda, BR 6503 1288 338 520 Axtel, S.A.B. de C.V., MX 3816 1276 701 149 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1134 369 21 Telefonica del Peru S.A.A., PE 11664 1057 179 466 Techtel LMDS Comunicaciones Interactiva 26615 978 2466 43 TIM SA, BR Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1598 393 21 LINKdotNET-AS, EG 24835 1520 521 31 RAYA-AS, EG 36992 1348 1519 268 ETISALAT-MISR, EG 36903 1268 550 99 MT-MPLS, MA 29571 981 68 38 ORANGE-COTE-IVOIRE, CI 36935 810 520 42 Vodafone-, EG 6713 611 1863 34 IAM-AS, MA 15399 521 52 39 WANANCHI-, KE 37342 481 32 1 MOVITEL, MZ 23889 402 232 16 MauritiusTelecom, MU Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10925 3393 555 Uninet S.A. de C.V., MX 9808 9089 8883 47 CHINAMOBILE-CN China Mobile Communicati 16509 7069 10468 2825 AMAZON-02, US 12479 6931 1730 144 UNI2-AS, ES 9121 6810 1692 17 TTNET, TR 7545 5934 789 699 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4719 4192 75 ERX-CERNET-BKB China Education and Rese 11492 4577 303 535 CABLEONE, US 20940 4058 3348 218 AKAMAI-ASN1, NL 39891 4010 234 47 ALJAWWALSTC-AS, SA Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 9089 9042 CHINAMOBILE-CN China Mobile Communications Grou 9121 6810 6793 TTNET, TR 12479 6931 6787 UNI2-AS, ES 7545 5934 5235 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4719 4644 ERX-CERNET-BKB China Education and Research Net 16509 7069 4244 AMAZON-02, US 11492 4577 4042 CABLEONE, US 39891 4010 3963 ALJAWWALSTC-AS, SA 8551 3988 3950 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 7155 3898 3866 VIASAT-SP-BACKBONE, US Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 398083 UNALLOCATED 5.133.124.0/24 399587 UT, US 33123 UNALLOCATED 8.10.69.0/24 11168 SCC, US 12169 UNALLOCATED 8.15.207.0/24 32787 PROLEXIC-TECHNOLOGIES-DDOS-M 53775 UNALLOCATED 8.20.88.0/24 7029 WINDSTREAM, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 22442 HOU-PHONOSCOPE, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US 18798 UNALLOCATED 8.40.106.0/24 6461 ZAYO-6461, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.128.80.0/24 Origin: 397372 UNASSIGNED 23.128.80.0/24 Transit: 577 BACOM, CA 23.133.251.0/24 Origin: 54681 RTT-BEACON, US 23.133.251.0/24 Transit: 62513 GOCODEIT-INC, CA 23.141.0.0/24 Origin: 395350 UNASSIGNED 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US 27.100.7.0/24 Origin: 56096 UNASSIGNED 27.100.7.0/24 Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 41.57.124.0/22 Origin: 37442 UNASSIGNED 41.57.124.0/22 Transit: 37204 TELONE, ZW Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:39 /11:101 /12:298 /13:592 /14:1210 /15:2064 /16:13516 /17:8348 /18:13970 /19:25161 /20:44541 /21:52337 /22:109320 /23:97388 /24:539543 /25:803 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 9121 5957 6810 TTNET, TR 12479 5918 6931 UNI2-AS, ES 8151 4658 10925 Uninet S.A. de C.V., MX 11492 3494 4577 CABLEONE, US 8551 3452 3988 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 6327 3282 3472 SHAW, CA 39891 3193 4010 ALJAWWALSTC-AS, SA 7155 2987 3898 VIASAT-SP-BACKBONE, US 22773 2823 3808 ASN-CXA-ALL-CCI-22773-RDC, US 6849 2616 2759 UKRTELNET, UA Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1954 2:1035 3:162 4:5 5:3880 6:116 7:6 8:1582 9:1 11:173 12:1631 13:337 14:2371 15:258 16:51 17:361 18:258 20:244 21:4 22:188 23:5927 24:2427 25:6 27:2658 29:19 31:2418 32:93 34:7 35:89 36:1854 37:4494 38:3511 39:738 40:155 41:3919 42:1144 43:2226 44:291 45:16163 46:4182 47:311 49:1703 50:1934 51:240 52:1486 54:384 55:767 56:8 57:62 58:1791 59:1163 60:982 61:2296 62:2554 63:1912 64:5597 65:2301 66:4888 67:2978 68:1207 69:4155 70:1304 71:684 72:3028 74:2643 75:1421 76:585 77:2266 78:3981 79:3131 80:2058 81:1799 82:1501 83:1207 84:1387 85:3707 86:730 87:1910 88:2813 89:3433 90:567 91:7643 92:2051 93:2544 94:3538 95:4784 96:1306 97:351 98:1032 99:721 100:75 101:1067 102:2327 103:29909 104:4553 105:472 106:891 107:2548 108:891 109:4325 110:2002 111:3333 112:2047 113:1544 114:1501 115:2012 116:1912 117:2481 118:2320 119:1825 120:1737 121:1078 122:2529 123:2099 124:1588 125:2149 128:1236 129:1026 130:1005 131:2049 132:823 133:377 134:1941 135:296 136:866 137:874 138:2519 139:1513 140:951 141:1464 142:1344 143:1414 144:1198 145:342 146:1853 147:1514 148:2215 149:1809 150:865 151:1085 152:1808 153:466 154:3831 155:1451 156:1746 157:1276 158:1040 159:2191 160:2530 161:1336 162:3505 163:1410 164:1641 165:1653 166:789 167:1751 168:3835 169:869 170:4532 171:847 172:3347 173:3119 174:1022 175:1148 176:3610 177:4755 178:3572 179:2166 180:2338 181:3260 182:3236 183:1934 184:2367 185:19662 186:4607 187:3894 188:4011 189:3447 190:9020 191:1457 192:10995 193:8666 194:7125 195:5072 196:2949 197:2463 198:5998 199:6032 200:7695 201:5796 202:10515 203:10033 204:4505 205:3465 206:3782 207:3438 208:4050 209:4719 210:4385 211:2399 212:4073 213:3472 214:1116 215:66 216:6377 217:2628 218:1291 219:567 220:2013 221:979 222:831 223:1993 End of report

1 0

Get Ready for NANOG U Fall Tour + N86 + Hackathon Registration
by Nanog News 08 Sep '22

08 Sep '22

*Get Ready for NANOG U Fall Tour! * *Join Us For Two Days of Empowering Education + Connection* >From DDoS attacks to mitigation and network optimization, NANOG U is a two-day in-person event that will provide local tech engineering students with a competitive edge. Students will have the opportunity to connect and engage with industry leaders - while learning the latest Internet technologies! *Where:* Montgomery Multiplex at Cramton Bowl in Montgomery, AL. *When:* 19 - 20 September 2022 *LEARN MORE * <https://www.nanog.org/events/nanog-u-2022-tour/> *NANOG 86 is Just Around the Corner* *Join us for our 86th community-wide gathering, 17-19 Oct 2022* Join us in person or virtually for our next meeting, NANOG 86, in Hollywood, CA! Standard registration rates are only in effect until 10 Oct. *REGISTER NOW * <https://www.nanog.org/events/nanog-86/> *Registration for Hackathon 86 is Open! * *Theme: Package Up Your Toolkit! * *Save the Dates:* Friday, 07 Oct 2022 - Intro/Tutorial/Team Formation Saturday + Sunday, 15-16 Oct 2022 - Hacking *Theme: * Package Your Toolkit! Got a favorite network tool? Ever get frustrated that it's not packaged up in the distribution of your choice? Spend some time with folks with similar frustrations and (h|p)ack your favorite tools into the distro of your choice! *REGISTER NOW <https://www.nanog.org/events/nanog-86-hackathon/>*

1 0

Spoofer Report for NANOG for Aug 2022
by CAIDA Spoofer Project 08 Sep '22

08 Sep '22

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Aug 2022: ASN Name Fixed-By 54825 PACKET 2022-08-15 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Aug 2022: ASN Name First-Spoofed Last-Spoofed 40285 NORTHLAND-CABLE 2016-07-17 2022-08-06 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2022-08-27 6128 CABLE-NET-1 2016-09-03 2022-08-02 27364 ACS-INTERNET 2016-09-27 2022-08-09 20412 CLARITY-TELECOM 2016-09-30 2022-08-31 271 BCNET 2016-10-24 2022-08-11 22898 ATLINK 2016-12-16 2022-08-22 1246 TLL-WEST 2017-04-20 2022-08-08 701 UUNET 2017-06-14 2022-08-25 26253 SCINTERNET 2017-06-30 2022-08-10 63296 AWBROADBAND 2017-09-01 2022-08-10 31863 DACEN-2 2018-04-26 2022-08-07 33452 RW 2018-09-19 2022-08-29 21804 ACCESS-SK 2019-06-09 2022-08-31 398836 NP-NETWORKS 2021-03-12 2022-08-27 22773 ASN-CXA-ALL-CCI-22773-RDC 2021-10-24 2022-08-28 394414 E2WS 2022-05-08 2022-08-06 397086 LAYER-HOST-HOUSTON 2022-06-16 2022-08-27 399486 2022-06-18 2022-08-25 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0