May 2023 - Test - lists.nanog.org

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 12 May '23

12 May '23

This is an automated weekly mailing describing the state of the Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net. For historical data, please see https://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. IPv4 Routing Table Report 04:00 +10GMT Sat 13 May, 2023 BGP Table (Global) as seen in Japan. Report Website: https://thyme.apnic.net Detailed Analysis: https://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 922283 Prefixes after maximum aggregation (per Origin AS): 349580 Deaggregation factor: 2.64 Unique aggregates announced (without unneeded subnets): 449017 Total ASes present in the Internet Routing Table: 74436 Prefixes per ASN: 12.39 Origin-only ASes present in the Internet Routing Table: 63869 Origin ASes announcing only one prefix: 26242 Transit ASes present in the Internet Routing Table: 10567 Transit-only ASes present in the Internet Routing Table: 431 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 55 Max AS path prepend of ASN (265020) 50 Prefixes from unregistered ASNs in the Routing Table: 1095 Number of instances of unregistered ASNs: 1095 Number of 32-bit ASNs allocated by the RIRs: 41848 Number of 32-bit ASNs visible in the Routing Table: 34589 Prefixes from 32-bit ASNs in the Routing Table: 171578 Number of bogon 32-bit ASNs visible in the Routing Table: 13 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 633 Number of addresses announced to Internet: 3057963648 Equivalent to 182 /8s, 68 /16s and 210 /24s Percentage of available address space announced: 82.6 Percentage of allocated address space announced: 82.6 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.6 Total number of prefixes smaller than registry allocations: 308163 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 244341 Total APNIC prefixes after maximum aggregation: 69435 APNIC Deaggregation factor: 3.52 Prefixes being announced from the APNIC address blocks: 238480 Unique aggregates announced from the APNIC address blocks: 98015 APNIC Region origin ASes present in the Internet Routing Table: 13438 APNIC Prefixes per ASN: 17.75 APNIC Region origin ASes announcing only one prefix: 3959 APNIC Region transit ASes present in the Internet Routing Table: 1801 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 26 Number of APNIC region 32-bit ASNs visible in the Routing Table: 8741 Number of APNIC addresses announced to Internet: 773569024 Equivalent to 46 /8s, 27 /16s and 186 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-151865 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 269926 Total ARIN prefixes after maximum aggregation: 122606 ARIN Deaggregation factor: 2.20 Prefixes being announced from the ARIN address blocks: 272521 Unique aggregates announced from the ARIN address blocks: 130293 ARIN Region origin ASes present in the Internet Routing Table: 19109 ARIN Prefixes per ASN: 14.26 ARIN Region origin ASes announcing only one prefix: 6979 ARIN Region transit ASes present in the Internet Routing Table: 1963 Average ARIN Region AS path length visible: 3.7 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4801 Number of ARIN addresses announced to Internet: 1281368832 Equivalent to 76 /8s, 96 /16s and 35 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 259839 Total RIPE prefixes after maximum aggregation: 122382 RIPE Deaggregation factor: 2.12 Prefixes being announced from the RIPE address blocks: 255957 Unique aggregates announced from the RIPE address blocks: 158551 RIPE Region origin ASes present in the Internet Routing Table: 28328 RIPE Prefixes per ASN: 9.04 RIPE Region origin ASes announcing only one prefix: 12060 RIPE Region transit ASes present in the Internet Routing Table: 3967 Average RIPE Region AS path length visible: 4.2 Max RIPE Region AS path length visible: 30 Number of RIPE region 32-bit ASNs visible in the Routing Table: 11174 Number of RIPE addresses announced to Internet: 718188416 Equivalent to 42 /8s, 206 /16s and 175 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 118033 Total LACNIC prefixes after maximum aggregation: 28538 LACNIC Deaggregation factor: 4.14 Prefixes being announced from the LACNIC address blocks: 117320 Unique aggregates announced from the LACNIC address blocks: 49374 LACNIC Region origin ASes present in the Internet Routing Table: 11000 LACNIC Prefixes per ASN: 10.67 LACNIC Region origin ASes announcing only one prefix: 2632 LACNIC Region transit ASes present in the Internet Routing Table: 2294 Average LACNIC Region AS path length visible: 5.0 Max LACNIC Region AS path length visible: 55 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8787 Number of LACNIC addresses announced to Internet: 176734720 Equivalent to 10 /8s, 136 /16s and 194 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-273820 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 29049 Total AfriNIC prefixes after maximum aggregation: 5826 AfriNIC Deaggregation factor: 4.99 Prefixes being announced from the AfriNIC address blocks: 37372 Unique aggregates announced from the AfriNIC address blocks: 12254 AfriNIC Region origin ASes present in the Internet Routing Table: 1739 AfriNIC Prefixes per ASN: 21.49 AfriNIC Region origin ASes announcing only one prefix: 612 AfriNIC Region transit ASes present in the Internet Routing Table: 333 Average AfriNIC Region AS path length visible: 5.0 Max AfriNIC Region AS path length visible: 30 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 1086 Number of AfriNIC addresses announced to Internet: 107688448 Equivalent to 6 /8s, 107 /16s and 50 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 9489 8706 40 CHINAMOBILE-CN China Mobile Communicati 7545 5720 784 689 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4863 4192 75 ERX-CERNET-BKB China Education and Rese 45899 4053 1877 47 VNPT-AS-VN VNPT Corp, VN 7713 3563 1043 65 TELKOMNET-AS-AP PT Telekomunikasi Indon 7552 3228 1331 21 VIETEL-AS-AP Viettel Group, VN 9498 2958 491 239 BBIL-AP BHARTI Airtel Ltd., IN 4766 2551 11251 591 KIXS-AS-KR Korea Telecom, KR 24560 2394 836 446 AIRTELBROADBAND-AS-AP Bharti Airtel Ltd 18403 2320 347 25 FPT-AS-AP FPT Telecom Company, VN Complete listing at https://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 8300 10781 2923 AMAZON-02, US 11492 4535 300 609 CABLEONE, US 7155 4002 281 51 VIASAT-SP-BACKBONE, US 22773 3586 3057 283 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3525 1320 64 SHAW, CA 16625 3108 1572 2356 AKAMAI-AS, US 749 3100 54980 2352 DNIC-AS-00749, US 396982 2637 3591 368 GOOGLE-CLOUD-PLATFORM, US 30036 2496 359 466 MEDIACOM-ENTERPRISE-BUSINESS, US 7018 2485 24147 1560 ATT-INTERNET4, US Complete listing at https://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 7298 1707 141 UNI2-AS, ES 39891 4833 286 59 ALJAWWALSTC-AS, SA 20940 4088 3399 164 AKAMAI-ASN1, NL 8551 3882 370 37 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2947 2292 910 ROSTELECOM-AS, RU 9009 2708 251 1399 M247, RO 34984 2278 360 610 TELLCOM-AS, TR 6849 2017 307 17 UKRTELNET, UA 58224 1851 950 535 TCI, IR 13188 1607 100 18 TRIOLAN, UA Complete listing at https://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 11276 3330 597 Uninet S.A. de C.V., MX 10620 3518 508 854 Telmex Colombia S.A., CO 13999 2349 361 620 Mega Cable, S.A. de C.V., MX 11830 2270 369 64 Instituto Costarricense de Electricidad 28573 1330 2323 240 Claro NXT Telecomunicacoes Ltda, BR 6503 1300 339 514 Axtel, S.A.B. de C.V., MX 3816 1293 760 170 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1134 370 22 Telefonica del Peru S.A.A., PE 11664 1099 180 448 Techtel LMDS Comunicaciones Interactiva 26615 1035 2498 45 TIM SA, BR Complete listing at https://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1601 393 19 LINKdotNET-AS, EG 24835 1499 533 30 RAYA-AS, EG 36992 1339 1518 276 ETISALAT-MISR, EG 36903 1242 550 99 MT-MPLS, MA 29571 1025 67 46 ORANGE-COTE-IVOIRE, CI 36935 875 520 42 Vodafone-, EG 6713 550 1861 34 IAM-AS, MA 15399 530 54 48 WANANCHI-, KE 37342 489 32 1 MOVITEL, MZ 24757 481 73 5 EthioNet-AS, ET Complete listing at https://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 11276 3330 597 Uninet S.A. de C.V., MX 9808 9489 8706 40 CHINAMOBILE-CN China Mobile Communicati 16509 8300 10781 2923 AMAZON-02, US 12479 7298 1707 141 UNI2-AS, ES 7545 5720 784 689 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4863 4192 75 ERX-CERNET-BKB China Education and Rese 39891 4833 286 59 ALJAWWALSTC-AS, SA 11492 4535 300 609 CABLEONE, US 20940 4088 3399 164 AKAMAI-ASN1, NL 45899 4053 1877 47 VNPT-AS-VN VNPT Corp, VN Complete listing at https://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 9489 9449 CHINAMOBILE-CN China Mobile Communications Grou 12479 7298 7157 UNI2-AS, ES 16509 8300 5377 AMAZON-02, US 7545 5720 5031 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4863 4788 ERX-CERNET-BKB China Education and Research Net 39891 4833 4774 ALJAWWALSTC-AS, SA 45899 4053 4006 VNPT-AS-VN VNPT Corp, VN 7155 4002 3951 VIASAT-SP-BACKBONE, US 11492 4535 3926 CABLEONE, US 20940 4088 3924 AKAMAI-ASN1, NL Complete listing at https://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 3507 UNALLOCATED 2.57.241.0/24 213035 AS-SERVERION Serverion B.V., 3507 UNALLOCATED 5.105.49.0/24 213035 AS-SERVERION Serverion B.V., 3507 UNALLOCATED 5.105.69.0/24 213035 AS-SERVERION Serverion B.V., 3507 UNALLOCATED 5.105.206.0/24 213035 AS-SERVERION Serverion B.V., 33492 UNALLOCATED 8.6.184.0/23 33650 COMCAST-33650, US 33123 UNALLOCATED 8.10.69.0/24 11168 SCC, US 12169 UNALLOCATED 8.15.207.0/24 32787 PROLEXIC-TECHNOLOGIES-DDOS-M 53775 UNALLOCATED 8.20.88.0/24 7029 WINDSTREAM, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US Complete listing at https://thyme.apnic.net/current/data-badAS Prefixes from the Special Purpose Address Registry (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at https://thyme.apnic.net/current/data-spar Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.139.232.0/24 Origin: 211619 MAXKO, HR 23.139.232.0/24 Transit: 42864 GIGANET-HU GigaNet Internet Service Prov 23.140.216.0/24 Origin: 27176 DATAWAGON, US 23.140.216.0/24 Transit: 20278 NEXEON, US 23.141.0.0/24 Origin: 395350 UNASSIGNED 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US 23.153.24.0/24 Origin: 394144 LTYCONNECT, US 23.153.24.0/24 Transit: 6939 HURRICANE, US 27.100.7.0/24 Origin: 56096 UNASSIGNED 27.100.7.0/24 Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet Complete listing at https://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:14 /10:39 /11:104 /12:301 /13:579 /14:1198 /15:2052 /16:13471 /17:8232 /18:14296 /19:25201 /20:44246 /21:51321 /22:109756 /23:98070 /24:552641 /25:746 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 6362 7298 UNI2-AS, ES 8151 5237 11276 Uninet S.A. de C.V., MX 39891 3632 4833 ALJAWWALSTC-AS, SA 11492 3443 4535 CABLEONE, US 8551 3354 3882 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 6327 3334 3525 SHAW, CA 7155 3069 4002 VIASAT-SP-BACKBONE, US 22773 2650 3586 ASN-CXA-ALL-CCI-22773-RDC, US 30036 2153 2496 MEDIACOM-ENTERPRISE-BUSINESS, US 10620 2071 3518 Telmex Colombia S.A., CO Complete listing at https://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1832 2:1310 3:174 4:5 5:4543 6:129 7:6 8:1556 9:1 11:172 12:1536 13:385 14:2337 15:300 16:189 17:373 18:421 20:258 21:4 22:188 23:6244 24:2607 25:6 27:2456 29:19 31:2499 32:79 34:12 35:109 36:1960 37:4700 38:4579 39:842 40:151 41:3904 42:1282 43:2358 44:307 45:16554 46:4327 47:363 49:1756 50:1854 51:567 52:1600 54:394 55:774 56:8 57:114 58:1792 59:1157 60:987 61:2490 62:2688 63:1925 64:5680 65:2323 66:5037 67:3000 68:1347 69:4096 70:1251 71:670 72:2994 74:2622 75:1553 76:613 77:2454 78:1815 79:3172 80:2126 81:1780 82:1498 83:1284 84:1529 85:2980 86:768 87:2030 88:1169 89:3701 90:615 91:7747 92:2065 93:2625 94:3617 95:4020 96:1312 97:336 98:1152 99:743 100:73 101:1073 102:2674 103:31357 104:4667 105:488 106:948 107:2526 108:1042 109:4422 110:2109 111:3154 112:2036 113:1658 114:1655 115:1982 116:1913 117:2529 118:2390 119:2011 120:1824 121:1130 122:2605 123:2179 124:1611 125:2502 128:1401 129:1088 130:1024 131:2011 132:809 133:422 134:1927 135:304 136:873 137:950 138:2548 139:1573 140:1245 141:1452 142:1443 143:1515 144:1168 145:347 146:1956 147:1583 148:2373 149:2245 150:872 151:1159 152:1824 153:487 154:4421 155:1451 156:1786 157:1307 158:1073 159:2304 160:2545 161:1534 162:3506 163:1517 164:1617 165:1726 166:1055 167:1726 168:3882 169:934 170:4579 171:873 172:3548 173:2934 174:1077 175:1178 176:3706 177:4599 178:3601 179:2168 180:2572 181:3485 182:3391 183:1989 184:2345 185:20227 186:4682 187:3985 188:4123 189:3579 190:9126 191:1438 192:10931 193:8892 194:7310 195:5175 196:3089 197:2368 198:5971 199:6104 200:8041 201:5908 202:10699 203:10318 204:4581 205:3688 206:4311 207:3457 208:4097 209:4880 210:4445 211:2509 212:4170 213:3623 214:1089 215:59 216:6648 217:2697 218:1299 219:578 220:2002 221:976 222:886 223:2187 End of report

1 0

NANOG 88 Peering Forum + Sponsorships + More
by Nanog News 11 May '23

11 May '23

*Have You Signed Up For the Peering Forum Yet?* *A 90-minute Session to be Held on 12-Jun During NANOG 88 Conference* NANOG 88 Peering Coordination Forum applications open! The forum allows attendees to meet and network with others in the peering community present at NANOG. Applications will remain open until 20 applications are received or 5-Jun-2023, whichever is first. *MORE INFO * <https://nanog.org/events/nanog-88/peering-forum/> *Seattle Sponsorships Still Available! * *Invest in the Strength of the Community We've Built* - Showcase your newest technologies + solutions - Increase your brand’s visibility + reach - Amplify your organization’s message - Connect with industry influencers + decision-makers - Empower people + inspire change *MORE INFO <https://nanog.org/participate/nanog-sponsorship-opportunities-working/>* *Did You Know There is a Running Affinity Group at NANOG?* *Find Community in our Online Discussion Threads* The NANOG Affinity Groups are part of the Community Forum and allow our members to connect over shared interests. We need your voice! Connect with others in the tech industry and find mentorship and support while sharing your experiences. *MORE INFO * <https://community.nanog.org/c/running/40>

1 0

Best Linux (or BSD) hosted BGP?
by Bryan Fields 11 May '23

11 May '23

I know best subjective, but I'm looking at a project to announce some IP space that's between uses now and see what's there. I'm planing to run a flow logger and ntop on the VM and see what is coming in if anything. I'm looking at the options for BGP out there, and there's quite a few (other than running a VM with a router doing BGP), but most data I've seen is focused on scale and filtering use, or RPKI. My use case is a bit different, and I can't find any best practices for this use case from what I've found. That said, is there a better solution other than linux/ntop/ipt-netflow? -- Bryan Fields 727-409-1194 - Voice http://bryanfields.net

18 37

Aptum refuses to SWIP
by Lyndon Nerenberg (VE7TFX/VE6BBM) 10 May '23

10 May '23

It seems Aptum has decided they will no longer SWIP any of their address space. I've been trying to get a SWIP for a /48 that we were allocated in 2017, but they refuse. And I also see they have pro-actively gone in and un-SWIPed both our /24s. Since you are ignoring my tickets about this, maybe somebody from Aptum would care to speak up in public and defend this "policy?" --lyndon

11 17

webex.com DNS Contact - Possibly Broken DNSSEC?
by Reuben Farrelly 10 May '23

10 May '23

Does anyone know of a contact of someone (presumably at Webex/Cisco) who can take a look at the DNS for webex.com? It has been for some time now, logging a lot of DNSSEC warnings on my resolver: dnssec: validating external-media75.public.wnrtm-a-2.prod.infra.webex.com/NSEC: no valid signature found: 1 Time(s) dnssec: validating external-media75.public.wsinm-a-3.prod.infra.webex.com/NSEC: no valid signature found: 1 Time(s) dnssec: validating external-media78.public.wbomm-a-2.prod.infra.webex.com/NSEC: no valid signature found: 1 Time(s) dnssec: validating external-media8.public.wnrtm-a-2.prod.infra.webex.com/NSEC: no valid signature found: 1 Time(s) (and a whole lot more hostnames in the same domain). Some basic DNSSec analysis indicates something in the middle of the trust chain is broken: https://dnssec-analyzer.verisignlabs.com/external-media26.public.wjfkm-a-3.… It looks to me like the subdomains have DS records but the other parts of the subdomain don't and I guess there's no point in having DS records on host records, if the parent domain doesn't have them too. I wouldn't bother if it was one or two entries, but it looks like the whole domain is affected and this probably is a fairly widely utilised domain. Thanks, Reuben

2 1

Spoofer Report for NANOG for Apr 2023
by CAIDA Spoofer Project 08 May '23

08 May '23

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Apr 2023: ASN Name Fixed-By 41378 KirinoNET 2023-04-02 14361 HOPONE-GLOBAL 2023-04-11 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Apr 2023: ASN Name First-Spoofed Last-Spoofed 6939 HURRICANE 2016-02-22 2023-04-18 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2023-04-27 6128 CABLE-NET-1 2016-09-03 2023-04-22 20412 CLARITY-TELECOM 2016-09-30 2023-04-29 6181 FUSE-NET 2016-10-10 2023-04-02 25787 ROWE-NETWORKS 2016-10-21 2023-04-27 10796 TWC-10796-MIDWEST 2016-10-24 2023-04-29 271 BCNET 2016-10-24 2023-04-29 1403 EBOX 2016-11-12 2023-04-11 852 ASN852 2017-04-16 2023-04-30 7122 MTS-ASN 2017-05-16 2023-04-30 6461 ZAYO-6461 2017-06-21 2023-04-04 12222 AKAMAI 2018-02-14 2023-04-03 33452 RW 2018-09-19 2023-04-09 398836 2021-03-12 2023-04-24 22773 ASN-CXA-ALL-CCI-22773-RDC 2021-10-24 2023-04-27 26231 SFIA-ASN 2021-10-27 2023-04-29 46997 2021-12-22 2023-04-26 394414 E2WS 2022-05-08 2023-04-25 59 WISC-MADISON 2022-06-14 2023-04-25 397086 GLOBAL-FRAG-NETWORKS-HOUSTON 2022-06-16 2023-04-30 11976 FIDN 2022-11-16 2023-04-25 12183 TALKIE-COMMUNICATIONS 2022-12-10 2023-04-27 399852 2023-02-16 2023-04-27 211380 2023-03-15 2023-04-26 964 GONET-ASN-17 2023-03-15 2023-04-28 41378 KirinoNET 2023-03-23 2023-04-27 23352 SERVERCENTRAL 2023-04-04 2023-04-22 15305 SYRINGANETWORKS 2023-04-05 2023-04-05 14361 HOPONE-GLOBAL 2023-04-11 2023-04-11 395418 ARIN-CHA 2023-04-14 2023-04-16 3701 NERONET 2023-04-18 2023-04-25 855 CANET-ASN-4 2023-04-26 2023-04-29 18615 MAINSTREAM-FIBER 2023-04-30 2023-04-30 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0

SAFNOG-8 Programme Committee - Call For PC Volunteers
by Mark Tinka 07 May '23

07 May '23

Hi all. The SAFNOG-8 Organizing Committee would like to welcome everyone to join us in Lusaka, Zambia, 29th - 30th August, 2023. The SAFNOG-8 Programme Committee (PC) are responsible for the solicitation and selection of suitable presentation and tutorial content for the SAFNOG-8 conference (https://safnog.org/) We are now seeking nominations from the community to join the SAFNOG-8 PC to assist with the development of the programme for SAFNOG-8. Eligible PC candidates must have attended recent SAFNOG events, have broad technical knowledge of Internet operations, and have good familiarity with the format of SAFNOG. Having constructive opinions and ideas about how the programme content might be improved is of high value too. PC members are expected to work actively to solicit content and review submissions for technical merit. The PC meets by conference call, weekly in frequency during the three months leading up to SAFNOG. If you are interested in joining the PC and meet the above eligibility criteria, please send a brief note to: safnog-pc-chairs at lists.safnog.org The note must include affiliation (if any) and a brief description about why you would make a good addition to the PC. The PC Chairs will accept nominations received by 1600hrs UTC+2 on Friday 26th May, 2023, and will announce the new PC shortly thereafter. Thanks. Mark Tinka For the SAFNOG-8 Organizing Committee

1 0

Cisco Nexus 3k Route Selection\Packet Forwarding Debugging
by Mike Hammett 06 May '23

06 May '23

We have a Nexus 3064 that is setup with partial BGP tables and is routing based on that. I've done a show ip bgp for an IP of interest and it has an expected next hop IP. I show ip arp on that next hop IP and it has the expected interface. However, sFlows show the packets leaving on a different interface, the one that would carry the default route for routes not otherwise known. If the next hop IP is expected and the ARP of that next hop IP is expected, why are packets leaving out an unexpected interface? ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com

7 21

Re: Routed optical networks
by Jared Brown 05 May '23

05 May '23

On 5/5/23, Mark Tinka wrote: > Juxtapose that against 100Gbps pricing: > > * EUR473 @ 10km. > * EUR1,300 @ 25km. > * EUR1,500 @ 30km. > * EUR2,600 @ 40km. > * EUR3,925 @ 80km. You can get 100G optics for less than half those prices. For reference, here are publicly listed prices for optics from an European vendor I have in production: 100G 4WDM & CLR4 QSFP28 * 10 km * 225€ 100GBASE-LR4 & OTU4 & 128GFC QSFP28 * 20km *305€ 100GBASE-ER4 Lite & OTU4 & 128GFC QSFP28 * 40 km * 1030€ 100GBASE-ZR4 QSFP28 * 80 km * 1650€ 100GBASE-ZR4+ QSFP28 * 100 km * 2100€ These prices are for single units without discounts. - Jared

2 1

RE: Routed optical networks
by Vasilenko Eduard 05 May '23

05 May '23

> Yeah, you sound like an equipment vendor whose main customers are incumbent telco's in a few rich markets :-). You are right. My message was pretty much geared toward incumbents. But the majority of the access/aggregation is in their possessions, isn’t it? They typically have ducts that were huge for copper that is already extracted. One more fiber cable would be easy. Agree that for competitive carriers DWDM would be more often needed. Even for competitive carriers, it makes sense to evaluate the cost to put fiber into the duct of incumbents. Especially because in some countries the price would be regulated. It would solve the problem forever – no need for the DWDM speed upgrade. I am calling to just not forget to evaluate this option too. Reminder: dark fiber is the best technical solution, for sure. Ed/ From: Mark Tinka [mailto:mark@tinka.africa] Sent: Wednesday, May 3, 2023 11:39 AM To: Vasilenko Eduard <vasilenko.eduard(a)huawei.com>; nanog(a)nanog.org Subject: Re: Routed optical networks On 5/3/23 08:20, Vasilenko Eduard wrote: I would risk to say a little more on this. Indeed, maybe the situation (in many countries) when the Carrier sells a lot of TDM services. But in general, packet services are enough these days for many carriers/regions. There aren't enough TDM services to warrant DWDM, nowadays. The reason for DWDM is mainly being driven by Ethernet, and IP. At any reasonable scale, it's actually pretty hard to buy a TDM service, in most markets. Additionally, I am sure that in many countries/Metro it is cheaper to lay down a new fiber than to provision DWDM, even if it is a pizza box. I disagree. Existing fibre may be cheap because it was laid down a decade or more ago, en masse, by several operators. So the market would be experiencing a glut, not because it is cheap to open up the roads and plant more fibre, but because there is so much of it to begin with. At worst, there is still enough duct space that the operator can blow more fibre. But when that duct gets full, and there are no more free ducts available, or another route needs to get built for whatever reason, it is a rather costly affair to open up the roads and trunk some fibre, in any market. So no, DWDM is not more expensive, if you are delivering services at scale. It is actually cheaper. It is only more expensive if you are small scale, because in some markets, the fibre glut means you can buy dark fibre for cheaper than you can light it with DWDM. But this is a situation unique to small operators, not large ones. The colored interface is still very expensive. This only matters for the line side. For client-facing, it's not a drama. And you typically buy more optics for the client side than you do the line side. Of course, there are some Cities (not “towns”) where it is very expensive or maybe even impossible to lay down a new fiber. Yes, in the majority of cases, it is cheaper to lay down fiber. I think what you mean to say is that in the majority of cases where there is fibre glut, and dark fibre is a market option, buying fibre is cheaper than lighting it with DWDM. This is true. But I think that on a global scale, this is the exception, not the rule. In general, you are not likely to be able to buy dark fibre, cheaply or otherwise, if you look at all markets in the world. Hence, the importance of DWDM for the Metro is overestimated. Again, only if you are small scale. If you are a large scale operator with as many IP/Ethernet customers as you have Transport, DWDM is essential. Use only routers. Provision enough fiber. Have always 1 router hop to the aggregation (hub-spoke topology), no routers chaining in the ring. If fiber is not enough – then use normal DWDM with an external transponder. Routers would be still in hub-spoke topology. Yeah, you sound like an equipment vendor whose main customers are incumbent telco's in a few rich markets :-). The life of the average operator, around the world, is far less glamorous. Mark.

3 4