- Test - lists.nanog.org

Practical effects of DNSSEC deployment
by Steven Bellovin 17 Aug '13

17 Aug '13

There was an interesting paper at Usenix Security on the effects of deploying DNSSEC; see https://www.usenix.org/conference/usenixsecurity13/measuring-practical-impa… . The difference in geographical impact was quite striking. --Steve Bellovin, https://www.cs.columbia.edu/~smb

2 1

Google having issues?
by wingar＠team-metro.net 17 Aug '13

17 Aug '13

Hey guys, I’m hearing reports of Google services (Search, Youtube, Mail, etc) going down all over the place, providing extremely spotty service. Works fine for me right now, but a lot of people seem to be having problems all over the world. Any ideas what’s going on? Thanks! ~ Em

6 5

APC UPS Advice/Guidance for Canada 120/240
by Nick Khamis 17 Aug '13

17 Aug '13

Hello Everyone, We are in the market for a APC UPS, and had a few questions. We are not that familiar with APC, and was hoping for some clarity. Our power demands will be for a unit that will sustain 3 kW/4 kVA scalable to 8 kVA. Input: The first issue is that I see all the units default with 208v input (other inputs 240v). At my location we only have 120 or 240. Also, we do not want to use a transformer (240-120) as it adds another failure point that can be avoided... The unit we are looking is found here: http://www.apc.com/products/resource/include/techspec_index.cfm?base_sku=SY… Output: Hard Wire 4-wire (2PH + N +G)NEMA L14-30R[image: NEMA L14-30R]NEMA L5-20R[image: NEMA L5-20R] What? How do I plug our 120 PDU into this? STONITH: This will be for a cluster that will require stonith capability. Does anyone know if this unit supports that? Not so important as the previous two questions... Kind Regards, Nick.

3 3

BGP Update Report
by cidr-report＠potaroo.net 16 Aug '13

16 Aug '13

BGP Update Report Interval: 08-Aug-13 -to- 15-Aug-13 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS5800 49023 2.8% 215.0 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 2 - AS8402 32813 1.9% 20.9 -- CORBINA-AS OJSC "Vimpelcom" 3 - AS9829 29704 1.7% 35.4 -- BSNL-NIB National Internet Backbone 4 - AS27738 28447 1.6% 49.4 -- Ecuadortelecom S.A. 5 - AS7552 21849 1.3% 18.6 -- VIETEL-AS-AP Vietel Corporation 6 - AS9416 18573 1.1% 9286.5 -- MULTIMEDIA-AS-AP Hoshin Multimedia Center Inc. 7 - AS15003 17601 1.0% 33.9 -- NOBIS-TECH - Nobis Technology Group, LLC 8 - AS4775 15874 0.9% 345.1 -- GLOBE-TELECOM-AS Globe Telecoms 9 - AS18403 15147 0.9% 30.4 -- FPT-AS-AP The Corporation for Financing & Promoting Technology 10 - AS28573 14422 0.8% 8.0 -- NET Serviços de Comunicação S.A. 11 - AS2118 14252 0.8% 10.4 -- RELCOM-AS OOO "NPO Relcom" 12 - AS34969 11840 0.7% 1480.0 -- PASJONET-AS Pasjo.Net Sp, z o.o. 13 - AS45899 10004 0.6% 29.0 -- VNPT-AS-VN VNPT Corp 14 - AS48612 9975 0.6% 1425.0 -- RTC-ORENBURG-AS CJSC "Comstar-Regions" 15 - AS6325 9425 0.6% 428.4 -- ILLINOIS-CENTURY - Illinois Century Network 16 - AS9808 9183 0.5% 11.4 -- CMNET-GD Guangdong Mobile Communication Co.Ltd. 17 - AS6629 9081 0.5% 1816.2 -- NOAA-AS - NOAA 18 - AS14287 8886 0.5% 1481.0 -- TRIAD-TELECOM - Triad Telecom, Inc. 19 - AS9299 8514 0.5% 137.3 -- IPG-AS-AP Philippine Long Distance Telephone Company 20 - AS647 8229 0.5% 72.2 -- DNIC-ASBLK-00616-00665 - DoD Network Information Center TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS9416 18573 1.1% 9286.5 -- MULTIMEDIA-AS-AP Hoshin Multimedia Center Inc. 2 - AS38654 6098 0.3% 6098.0 -- INES-NETWORK INES Corporation. 3 - AS1880 4706 0.3% 4706.0 -- STUPI Svensk Teleutveckling & Produktinnovation, STUPI AB 4 - AS19406 4669 0.3% 4669.0 -- TWRS-MA - Towerstream I, Inc. 5 - AS42334 3927 0.2% 3927.0 -- BBP-AS Broadband Plus s.a.l. 6 - AS6174 7111 0.4% 3555.5 -- SPRINTLINK8 - Sprint 7 - AS24772 6659 0.4% 3329.5 -- ASIP-AIE-AS Agrupacion de dervicios de internet y prensa AIE 8 - AS6629 9081 0.5% 1816.2 -- NOAA-AS - NOAA 9 - AS3 4902 0.3% 1779.0 -- CMED-AS Cmed Technology Ltd 10 - AS14287 8886 0.5% 1481.0 -- TRIAD-TELECOM - Triad Telecom, Inc. 11 - AS34969 11840 0.7% 1480.0 -- PASJONET-AS Pasjo.Net Sp, z o.o. 12 - AS48612 9975 0.6% 1425.0 -- RTC-ORENBURG-AS CJSC "Comstar-Regions" 13 - AS33648 3571 0.2% 1190.3 -- ELEPHANT - ColoFlorida / Elephant Outlook 14 - AS4434 6719 0.4% 1119.8 -- ERX-RADNET1-AS PT Rahajasa Media Internet 15 - AS37367 1056 0.1% 1056.0 -- CALLKEY 16 - AS33158 923 0.1% 923.0 -- DATA-SERVICES-INC - Data Services Incorporated 17 - AS19111 617 0.0% 617.0 -- NATURES-BOUN - NBTY, Inc. 18 - AS10704 5973 0.3% 597.3 -- Microlink Telecom (LNCC) 19 - AS4 5357 0.3% 871.0 -- INFOWAY COMERCIO DE INFORM E TELECOMUNICACOES LTDA 20 - AS20157 582 0.0% 582.0 -- AHL - American Heritage Life Insurance Company TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 92.246.207.0/24 9963 0.5% AS48612 -- RTC-ORENBURG-AS CJSC "Comstar-Regions" 2 - 203.118.232.0/21 9298 0.5% AS9416 -- MULTIMEDIA-AS-AP Hoshin Multimedia Center Inc. 3 - 203.118.224.0/21 9275 0.5% AS9416 -- MULTIMEDIA-AS-AP Hoshin Multimedia Center Inc. 4 - 207.63.128.0/18 9049 0.5% AS6325 -- ILLINOIS-CENTURY - Illinois Century Network 5 - 192.58.232.0/24 9022 0.5% AS6629 -- NOAA-AS - NOAA 6 - 112.203.192.0/19 8338 0.5% AS9299 -- IPG-AS-AP Philippine Long Distance Telephone Company 7 - 222.127.0.0/24 7785 0.4% AS4775 -- GLOBE-TELECOM-AS Globe Telecoms 8 - 120.28.62.0/24 7717 0.4% AS4775 -- GLOBE-TELECOM-AS Globe Telecoms 9 - 202.154.17.0/24 6714 0.4% AS4434 -- ERX-RADNET1-AS PT Rahajasa Media Internet 10 - 62.22.10.0/24 6657 0.4% AS24772 -- ASIP-AIE-AS Agrupacion de dervicios de internet y prensa AIE 11 - 150.39.0.0/16 6098 0.3% AS38654 -- INES-NETWORK INES Corporation. 12 - 115.170.128.0/17 5507 0.3% AS4847 -- CNIX-AP China Networks Inter-Exchange 13 - 204.29.132.0/23 4706 0.3% AS1880 -- STUPI Svensk Teleutveckling & Produktinnovation, STUPI AB 14 - 69.38.178.0/24 4669 0.2% AS19406 -- TWRS-MA - Towerstream I, Inc. 15 - 64.187.64.0/23 4444 0.2% AS16608 -- KENTEC - Kentec Communications, Inc. 16 - 148.208.137.0/24 4089 0.2% AS8151 -- Uninet S.A. de C.V. 17 - 62.84.76.0/24 3927 0.2% AS42334 -- BBP-AS Broadband Plus s.a.l. 18 - 208.16.110.0/24 3556 0.2% AS6174 -- SPRINTLINK8 - Sprint 19 - 206.105.75.0/24 3555 0.2% AS6174 -- SPRINTLINK8 - Sprint 20 - 64.187.64.0/24 3550 0.2% AS16608 -- KENTEC - Kentec Communications, Inc. Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 16 Aug '13

16 Aug '13

This report has been generated at Fri Aug 16 21:13:27 2013 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 09-08-13 474589 270059 10-08-13 475137 269735 11-08-13 474298 269858 12-08-13 474715 269811 13-08-13 474587 269367 14-08-13 474622 269399 15-08-13 475163 269913 16-08-13 475291 269993 AS Summary 44881 Number of ASes in routing system 18477 Number of ASes announcing only one prefix 4235 Largest number of prefixes announced by an AS AS7029 : WINDSTREAM - Windstream Communications Inc 117395680 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 16Aug13 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 474901 269997 204904 43.1% All ASes AS6389 2978 65 2913 97.8% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS28573 3154 690 2464 78.1% NET Serviços de Comunicação S.A. AS17974 2654 434 2220 83.6% TELKOMNET-AS2-AP PT Telekomunikasi Indonesia AS7029 4235 2069 2166 51.1% WINDSTREAM - Windstream Communications Inc AS4766 2922 933 1989 68.1% KIXS-AS-KR Korea Telecom AS22773 2006 247 1759 87.7% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS18566 2065 468 1597 77.3% COVAD - Covad Communications Co. AS4323 2992 1542 1450 48.5% TWTC - tw telecom holdings, inc. AS36998 1861 434 1427 76.7% SDN-MOBITEL AS10620 2668 1345 1323 49.6% Telmex Colombia S.A. AS7303 1730 453 1277 73.8% Telecom Argentina S.A. AS18881 1359 92 1267 93.2% Global Village Telecom AS4755 1778 592 1186 66.7% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS7552 1139 95 1044 91.7% VIETEL-AS-AP Vietel Corporation AS22561 1208 226 982 81.3% DIGITAL-TELEPORT - Digital Teleport Inc. AS2118 962 88 874 90.9% RELCOM-AS OOO "NPO Relcom" AS1785 2006 1157 849 42.3% AS-PAETEC-NET - PaeTec Communications, Inc. AS11830 946 101 845 89.3% Instituto Costarricense de Electricidad y Telecom. AS7545 2060 1225 835 40.5% TPG-INTERNET-AP TPG Telecom Limited AS18101 985 177 808 82.0% RELIANCE-COMMUNICATIONS-IN Reliance Communications Ltd.DAKC MUMBAI AS4808 1153 389 764 66.3% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS33363 1761 1038 723 41.1% BHN-TAMPA - BRIGHT HOUSE NETWORKS, LLC AS701 1522 801 721 47.4% UUNET - MCI Communications Services, Inc. d/b/a Verizon Business AS13977 847 140 707 83.5% CTELCO - FAIRPOINT COMMUNICATIONS, INC. AS8151 1286 589 697 54.2% Uninet S.A. de C.V. AS15003 842 147 695 82.5% NOBIS-TECH - Nobis Technology Group, LLC AS6147 740 51 689 93.1% Telefonica del Peru S.A.A. AS855 735 55 680 92.5% CANET-ASN-4 - Bell Aliant Regional Communications, Inc. AS6983 1152 484 668 58.0% ITCDELTA - ITC^Deltacom AS24560 1088 425 663 60.9% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services Total 52834 16552 36282 68.7% Top 30 total Possible Bogus Routes 23.92.64.0/24 AS54540 INCERO - Incero LLC 23.92.65.0/24 AS54540 INCERO - Incero LLC 23.92.66.0/24 AS54540 INCERO - Incero LLC 23.92.67.0/24 AS54540 INCERO - Incero LLC 23.92.68.0/24 AS54540 INCERO - Incero LLC 23.92.69.0/24 AS54540 INCERO - Incero LLC 23.92.70.0/24 AS54540 INCERO - Incero LLC 23.92.71.0/24 AS54540 INCERO - Incero LLC 23.92.72.0/24 AS54540 INCERO - Incero LLC 23.92.73.0/24 AS54540 INCERO - Incero LLC 23.92.74.0/24 AS54540 INCERO - Incero LLC 23.92.75.0/24 AS54540 INCERO - Incero LLC 23.92.76.0/24 AS54540 INCERO - Incero LLC 23.92.77.0/24 AS54540 INCERO - Incero LLC 23.92.78.0/24 AS54540 INCERO - Incero LLC 23.92.79.0/24 AS54540 INCERO - Incero LLC 27.54.116.0/22 AS55452 27.54.116.0/24 AS55452 27.54.119.0/24 AS55452 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV 62.182.96.0/23 AS15830 TELECITY-LON TELECITYGROUP INTERNATIONAL LIMITED 64.185.224.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.225.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.226.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.227.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.228.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.229.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.230.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.231.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.232.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.233.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.234.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.235.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.236.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.237.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.238.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.239.0/24 AS27431 JTLNET - JTL Networks Inc. 65.75.216.0/23 AS10494 AAI - Accurate Automation, Inc. 65.75.217.0/24 AS10494 AAI - Accurate Automation, Inc. 65.111.1.0/24 AS32258 SDNGLOBAL - SDN Global 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.205.224.0/19 AS16526 BIRCH-TELECOM - Birch Telecom, Inc. 66.251.128.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.133.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.134.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.136.0/21 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.140.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.141.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.142.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 69.46.224.0/20 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.233.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.236.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 71.19.134.0/23 AS3313 INET-AS BT Italia S.p.A. 72.19.0.0/19 AS16526 BIRCH-TELECOM - Birch Telecom, Inc. 72.35.224.0/22 AS30097 NUWAVE - NuWave 72.35.229.0/24 AS30188 TELEVERGENCE - Televergence Solutions Inc. 72.35.232.0/21 AS30097 NUWAVE - NuWave 72.44.16.0/20 AS15054 NORTHEAST-TEXAS-BROADBAND-LLC - Northeast Texas Broadband, LLC 74.115.124.0/23 AS46540 NARSASN - National Asset Recovery Services, Inc 80.68.144.0/20 AS33982 82.103.0.0/18 AS30901 91.197.36.0/22 AS43359 91.199.90.0/24 AS44330 91.205.188.0/22 AS47983 91.207.200.0/23 AS48523 91.209.93.0/24 AS48523 91.209.163.0/24 AS48445 91.212.54.0/24 AS21409 IKOULA Ikoula Net SAS 93.190.8.0/24 AS47254 93.190.9.0/24 AS47254 93.190.10.0/24 AS47254 96.45.48.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.49.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.50.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.51.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.52.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.53.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.54.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.55.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.56.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.57.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.58.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.59.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.60.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.61.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.62.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.63.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 100.100.0.0/24 AS4847 CNIX-AP China Networks Inter-Exchange 102.2.88.0/22 AS38456 PACTEL-AS-AP Pacific Teleports. 103.9.107.0/24 AS38442 VODAFONEFIJI-AS-FJ Vodafone Fiji Limited 103.12.0.0/24 AS38442 VODAFONEFIJI-AS-FJ Vodafone Fiji Limited 103.13.0.0/24 AS38442 VODAFONEFIJI-AS-FJ Vodafone Fiji Limited 103.14.0.0/24 AS38442 VODAFONEFIJI-AS-FJ Vodafone Fiji Limited 103.224.163.0/24 AS13251 ASIAN-AS-AP Asian Broadcasting Network (M) Sdn Bhd 103.224.188.0/23 AS13251 ASIAN-AS-AP Asian Broadcasting Network (M) Sdn Bhd 109.71.156.0/23 AS21246 IPKO-AS Ipko Telecommunications LLC 109.71.158.0/24 AS21246 IPKO-AS Ipko Telecommunications LLC 109.71.159.0/24 AS21246 IPKO-AS Ipko Telecommunications LLC 116.206.72.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.85.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.103.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 142.54.0.0/19 AS23498 CDSI - Cogeco Data Services LP 164.40.184.0/24 AS19821 172.102.0.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 172.111.111.0/24 AS8039 CCC-ASN-1 - Cinergy Communications 172.116.0.0/24 AS7018 ATT-INTERNET4 - AT&T Services, Inc. 174.138.144.0/20 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 190.3.160.0/21 AS27975 SYNAPSIS COLOMBIA LTDA 190.15.72.0/21 AS15146 CABLEBAHAMAS - Cable Bahamas 190.124.252.0/22 AS7303 Telecom Argentina S.A. 193.33.66.0/23 AS39874 193.33.112.0/23 AS8586 OBSL-AS TalkTalk Communications Limited 193.34.108.0/22 AS41984 193.109.15.0/24 AS12690 MKSNET-AS MKS Autonomous System 193.109.224.0/24 AS47427 193.111.125.0/24 AS44581 SE-ALLTELE AllTele Allmanna Svenska Telefonaktiebolaget 193.111.155.0/24 AS44581 SE-ALLTELE AllTele Allmanna Svenska Telefonaktiebolaget 193.164.152.0/24 AS3356 LEVEL3 Level 3 Communications 194.50.82.0/24 AS16276 OVH OVH Systems 194.79.48.0/22 AS39117 194.117.250.0/23 AS41412 MIVITEC-AS MIVITEC GmbH 194.126.219.0/24 AS34545 194.169.237.0/24 AS12968 CDP Netia SA 195.28.7.0/24 AS8717 SPECTRUMNET MOBILTEL EAD 195.216.234.0/24 AS31309 NMV-AS New Media Ventures BVBA 200.1.112.0/24 AS29754 GO2TEL GO2TEL.COM INC. 200.58.248.0/21 AS27849 201.71.16.0/20 AS28638 EMTEC EMPRESA DE TECNOLOGIA EMPREENDIMENTOS DE COM 201.77.96.0/20 AS28639 Daniela Ropke da Rosa 202.8.106.0/24 AS9530 SHINSEGAE-AS SHINSEGAE I&C Co., Ltd. 202.58.113.0/24 AS19161 202.83.120.0/21 AS37972 202.83.124.0/24 AS37972 202.83.125.0/24 AS37972 202.83.126.0/24 AS37972 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd. 202.179.134.0/24 AS23966 LDN-AS-PK LINKdotNET Telecom Limited 203.23.1.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.24.38.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.30.127.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/23 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.87.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.142.219.0/24 AS45149 203.191.48.0/20 AS24175 VINAREN-AS-AP VietNam Research and Education Network 203.191.56.0/21 AS38042 INCOMNET-MONGOLIA-AS-AP Incomnet LLC, Mongolia, VSAT and Wireless service 204.9.116.0/22 AS30097 NUWAVE - NuWave 204.10.88.0/21 AS3356 LEVEL3 Level 3 Communications 204.10.92.0/23 AS30097 NUWAVE - NuWave 204.10.94.0/23 AS30097 NUWAVE - NuWave 204.10.112.0/21 AS27027 ANBELL ASN-ANBELL 204.11.112.0/22 AS14745 INTERNAP-BLOCK-4 - Internap Network Services Corporation 204.15.208.0/22 AS13706 COMPLETEWEBNET - CompleteWeb.Net LLC 204.187.11.0/24 AS51113 ELEKTA-AS Elekta 205.211.160.0/24 AS30045 UHN-ASN - University Health Network 206.81.112.0/20 AS32618 ADKNO-KC - Adknowledge, Inc. 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company 206.221.176.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.177.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.178.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.179.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.180.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.181.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.182.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.183.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.184.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.185.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.186.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.187.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.188.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.189.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.190.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.191.0/24 AS27431 JTLNET - JTL Networks Inc. 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 207.254.128.0/21 AS30689 FLOW-NET - FLOW 207.254.128.0/24 AS30689 FLOW-NET - FLOW 207.254.136.0/21 AS30689 FLOW-NET - FLOW 208.68.244.0/22 AS17140 208.68.244.0/23 AS17140 208.68.246.0/23 AS17140 208.76.20.0/24 AS31812 208.76.21.0/24 AS31812 208.77.164.0/24 AS22659 208.77.165.0/24 AS22659 208.77.166.0/24 AS22659 208.77.167.0/24 AS22659 208.83.53.0/24 AS40569 YGOMI-AS - Ygomi LLC 208.85.116.0/23 AS25956 ALPHEUS - Alpheus Data Services, L.L.C. 208.85.212.0/22 AS32618 ADKNO-KC - Adknowledge, Inc. 208.89.32.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.33.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.34.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.35.0/24 AS27431 JTLNET - JTL Networks Inc. 208.90.64.0/22 AS16415 PRCNET-DOM - Precision Response Corporation 208.91.72.0/24 AS17361 BRASS - Sungard Trading System (ASC) 208.91.73.0/24 AS17361 BRASS - Sungard Trading System (ASC) 208.91.76.0/23 AS21681 ANDOVER-TRADING - ANDOVER TRADING 209.160.81.0/24 AS36184 209.160.83.0/24 AS36184 209.160.84.0/24 AS36184 209.160.86.0/24 AS36184 209.177.64.0/20 AS6461 MFNX MFN - Metromedia Fiber Network 209.209.51.0/24 AS18687 MPOWER-2 - MPOWER COMMUNICATIONS CORP. 209.209.64.0/20 AS46851 IPARADIGMS - iParadigms, LLC 209.212.63.0/24 AS16467 ASN-NEXTWEB-R1 - Nextweb, Inc 209.213.0.0/20 AS33005 ELTOPIA - Eltopia.com, LLC 209.234.112.0/23 AS32252 209.234.114.0/23 AS32252 209.234.116.0/24 AS32252 209.234.117.0/24 AS32252 209.234.118.0/24 AS32252 209.234.119.0/24 AS32252 209.234.120.0/24 AS32252 209.234.121.0/24 AS32252 209.234.122.0/24 AS32252 213.150.204.0/24 AS29338 AFOL-AS Used by Africaonline Operations 216.12.163.0/24 AS26627 AS-PILOSOFT - Pilosoft, Inc. 216.127.192.0/24 AS22166 216.127.193.0/24 AS22166 216.127.194.0/24 AS22166 216.127.195.0/24 AS22166 216.127.196.0/24 AS22166 216.127.196.64/26 AS22166 216.127.197.0/24 AS22166 216.127.198.0/24 AS22166 216.127.199.0/24 AS22166 216.127.200.0/24 AS22166 216.127.201.0/24 AS22166 216.127.202.0/24 AS22166 216.127.203.0/24 AS22166 216.127.204.0/24 AS22166 216.127.205.0/24 AS22166 216.127.206.0/24 AS22166 216.127.207.0/24 AS22166 216.127.208.0/24 AS22166 216.127.209.0/24 AS22166 216.127.210.0/24 AS22166 216.127.211.0/24 AS22166 216.127.212.0/24 AS22166 216.127.213.0/24 AS22166 216.127.214.0/24 AS22166 216.127.215.0/24 AS22166 216.127.216.0/24 AS22166 216.127.217.0/24 AS22166 216.127.218.0/24 AS22166 216.127.219.0/24 AS22166 216.127.220.0/24 AS22166 216.127.221.0/24 AS22166 216.127.222.0/24 AS22166 216.146.0.0/19 AS11915 TELWEST-NETWORK-SVCS-STATIC - TEL WEST COMMUNICATIONS LLC 216.151.192.0/21 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 216.151.200.0/21 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 216.152.24.0/22 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.170.96.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 216.170.101.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 216.170.104.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 216.170.105.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 216.234.128.0/22 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. 216.234.132.0/24 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. 216.234.139.0/24 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

How big is the Internet? - Results
by Sean Donelan 16 Aug '13

16 Aug '13

Thanks for all the comments. Through the entire thread on-line and off-line only one person contributed an estimate Patrick Gilmore said: All that said: My back-of-the-envelope math says the Internet is order of 1 exabyte/day, as defined by my own rules on what counts as "the Internet"[*]. I could easily be wrong, but you asked. [*] I count Company-to-Company traffic. This is _mostly_ inter-AS traffic, but on-net nodes (e.g. Akamai, Google, NF) -> Provider _do_ count. Things like Google -> Google over Google backbone do not count. Things like as701 -> as702 would count, but not as701 -> as701, even if the traffic is between two single-homed customers. It is a weird definition, but that's how I define it. (Although I may be biased, since counting only inter-AS traffic leaves off $SOME_PERCENTAGE of the traffic from my company.) Since there weren't any other estimates to choose between, looks like I'll go with Gilmore's number. Gilmore's estimate was signifcantly lower than Cisco's VNI.

2 1

How big is the Internet?
by Sean Donelan 16 Aug '13

16 Aug '13

Researchers have complained for years about the lack of good statistics about the internet for a couple fo decades, since the end of NSFNET statistics. What are the current estimates about the size of the Internet, all IP networks including managed IP and private IP, and all telecommunications including analog voice, video, sensor data, etc? CAIDA, ITU, Telegeography and some vendors like Cisco have released forecasts and estimates. There are occasional pieces of information stated by companies in their investor documents (SEC 10-K, etc).

37 60

Re: WaPo writes about vulnerabilities in Supermicro IPMIs
by Anthony Bonkoski 16 Aug '13

16 Aug '13

There's a few misconceptions I'd like to address, plus add some backstory. The Washington Post article is intentionally void of details. It is intended as a non-technical article. You can find the actual technical paper here: https://www.usenix.org/conference/woot13/illuminating-security-issues-surro… Cipher-0 is an awful, yet well-known issue that comes directly from the Intel spec, and thus affects a large set of implementations. Here's an excellent write-up: http://fish2.com/ipmi/cipherzero.html The iDRAC testurls vuln. was a result of the firmware being shipped with a developer debugging webpage that could be used as a backdoor. Recent work shows that some password hashes can be recovered and cracked. In this latest development, we reverse engineered a SuperMicro/ATEN firmware binary and discovered security gross negligence. We discovered the very worst vuln: client-side only input checking, shell-injection, and trivial buffer-overflows in many CGI programs including the user/pass fields of the login page. Further, the device has almost no modern buffer-overflow defenses (DEP, ASLR, and Stack Carries). We show that it is *easy* to exploit these flaws and gain a root shell. This is especially nasty because the system operator is not give access to a Unix shell on the BMC, thus a remote attacker can gain more capabilities on the BMC than even the administrator. In short, the previous work should certainly be enough to make any sys admin fear exposing IPMI to a public IP. However, the problem is much worse than we previously thought. This particular implementation shows a complete disregard for even the most basic security practices. -Anthony On Aug 16, 2013 10:19 AM, "Alain Hebert" <ahebert(a)pubnix.net> wrote: Hi, I find it odd that this is suddenly news... There is plenty of security updates for iBMC/iDrac/etc from IBM/HP/Dell/etc over the years. But: You can use ipmitool, rootkit/exploit some Linux box and upload your own firmware in that iBMC/iDrac/etc... for example the BMC firmware for a Dell C1100 leave plenty of space to inject your own shell in it. And Voila! access to the management network =D. BTW I got ipmitool working even on VMWare 5.1 :( Counter: We (PCIDSS hat) always check for those management interfaces and "proposed" to move those interfaces into they own VLANs+Subnets. Meaning: PCI DMZ Zone has its own DMZ iBMC VLAN/Subnet/FW Rules, PCI DB Zone has its own iBMC VLAN/Subnet/FW Rules, etc. It is a few more VLAN/Subnets... but modern Firewall can handle this easy. PS: "proposed" as in not giving them a choice =D ----- Alain Hebert ahebert(a)pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443 On 08/16/13 00:22, Kyle Creyts wrote: > just so we're all clear, SuperMicro wasn't the only one... > > link: http://pastebin.com/syXHLuC5 > > 1. CVE-2013-4782 CVSS Base Score = 10.0 > 2. The SuperMicro BMC implementation allows remote attackers to > bypass authentication and execute arbitrary IPMI commands by using > cipher suite 0 (aka cipher zero) and an arbitrary password. > 3. > 4. CVE-2013-4783 CVSS Base Score = 10.0 > 5. The Dell iDRAC 6 BMC implementation allows remote attackers to > bypass authentication and execute arbitrary IPMI commands by using > cipher suite 0 (aka cipher zero) and an arbitrary password. > 6. > 7. CVE-2013-4784 CVSS Base Score = 10.0 > 8. The HP Integrated Lights-Out (iLO) BMC implementation allows > remote attackers to bypass authentication and execute arbitrary IPMI > commands by using cipher suite 0 (aka cipher zero) and an arbitrary > password. > 9. > 10. CVE-2013-4785 CVSS Base Score = 10.0 > 11. iDRAC 6 firmware 1.7, and possibly other versions, allows remote > attackers to modify the CLP interface for arbitrary users and possibly > have other impact via a request to an unspecified form that is > accessible from testurls.html. > 12. > 13. CVE-2013-4786 CVSS Base Score = 7.8 > 14. The IPMI 2.0 specification supports RMCP+ Authenticated > Key-Exchange Protocol (RAKP) authentication, which allows remote > attackers to obtain password hashes and conduct offline password > guessing attacks by obtaining the HMAC from a RAKP message 2 responses > from a BMC. > > > References: > > http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4782 > => http://fish2.com/ipmi/cipherzero.html > > http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4783 > => http://fish2.com/ipmi/cipherzero.html > > http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4784 > => http://fish2.com/ipmi/cipherzero.html > > http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4785 > => http://fish2.com/ipmi/dell/secret.html > > http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4786 > => http://fish2.com/ipmi/remote-pw-cracking.html > > On Thu, Aug 15, 2013 at 6:00 PM, Jay Ashworth <jra(a)baylink.com> wrote: >> Presumably, everyone else's are very religious as well. >> >> Is anyone here stupid enough not to put the management interfaces behind >> a firewall/VPN? >> >> http://www.washingtonpost.com/blogs/the-switch/wp/2013/08/14/researchers-fi… >> >> And should I be nervous that Usenix pointed me *there* for the story, >> rather than a tech press outlet? >> >> Cheers, >> -- jra >> -- >> Jay R. Ashworth Baylink jra(a)baylink.com >> Designer The Things I Think RFC 2100 >> Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII >> St Petersburg FL USA #natog +1 727 647 1274 >> > >

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 16 Aug '13

16 Aug '13

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 17 Aug, 2013 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 462841 Prefixes after maximum aggregation: 187161 Deaggregation factor: 2.47 Unique aggregates announced to Internet: 229257 Total ASes present in the Internet Routing Table: 44722 Prefixes per ASN: 10.35 Origin-only ASes present in the Internet Routing Table: 34987 Origin ASes announcing only one prefix: 16208 Transit ASes present in the Internet Routing Table: 5885 Transit-only ASes present in the Internet Routing Table: 156 Average AS path length visible in the Internet Routing Table: 4.6 Max AS path length visible: 29 Max AS path prepend of ASN ( 19037) 22 Prefixes from unregistered ASNs in the Routing Table: 4596 Unregistered ASNs in the Routing Table: 1584 Number of 32-bit ASNs allocated by the RIRs: 4955 Number of 32-bit ASNs visible in the Routing Table: 3850 Prefixes from 32-bit ASNs in the Routing Table: 11664 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 304 Number of addresses announced to Internet: 2635027852 Equivalent to 157 /8s, 15 /16s and 85 /24s Percentage of available address space announced: 71.2 Percentage of allocated address space announced: 71.2 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 94.9 Total number of prefixes smaller than registry allocations: 162142 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 110903 Total APNIC prefixes after maximum aggregation: 33605 APNIC Deaggregation factor: 3.30 Prefixes being announced from the APNIC address blocks: 112709 Unique aggregates announced from the APNIC address blocks: 46196 APNIC Region origin ASes present in the Internet Routing Table: 4867 APNIC Prefixes per ASN: 23.16 APNIC Region origin ASes announcing only one prefix: 1223 APNIC Region transit ASes present in the Internet Routing Table: 824 Average APNIC Region AS path length visible: 4.7 Max APNIC Region AS path length visible: 28 Number of APNIC region 32-bit ASNs visible in the Routing Table: 638 Number of APNIC addresses announced to Internet: 725990208 Equivalent to 43 /8s, 69 /16s and 187 /24s Percentage of available APNIC address space announced: 84.8 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 131072-133119 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 160372 Total ARIN prefixes after maximum aggregation: 80867 ARIN Deaggregation factor: 1.98 Prefixes being announced from the ARIN address blocks: 160922 Unique aggregates announced from the ARIN address blocks: 74720 ARIN Region origin ASes present in the Internet Routing Table: 15828 ARIN Prefixes per ASN: 10.17 ARIN Region origin ASes announcing only one prefix: 5998 ARIN Region transit ASes present in the Internet Routing Table: 1660 Average ARIN Region AS path length visible: 4.1 Max ARIN Region AS path length visible: 27 Number of ARIN region 32-bit ASNs visible in the Routing Table: 19 Number of ARIN addresses announced to Internet: 1070350848 Equivalent to 63 /8s, 204 /16s and 66 /24s Percentage of available ARIN address space announced: 56.6 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 117912 Total RIPE prefixes after maximum aggregation: 60555 RIPE Deaggregation factor: 1.95 Prefixes being announced from the RIPE address blocks: 121724 Unique aggregates announced from the RIPE address blocks: 78516 RIPE Region origin ASes present in the Internet Routing Table: 17350 RIPE Prefixes per ASN: 7.02 RIPE Region origin ASes announcing only one prefix: 8219 RIPE Region transit ASes present in the Internet Routing Table: 2810 Average RIPE Region AS path length visible: 5.1 Max RIPE Region AS path length visible: 27 Number of RIPE region 32-bit ASNs visible in the Routing Table: 2386 Number of RIPE addresses announced to Internet: 656724772 Equivalent to 39 /8s, 36 /16s and 211 /24s Percentage of available RIPE address space announced: 95.5 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 196608-199679 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 50343 Total LACNIC prefixes after maximum aggregation: 9566 LACNIC Deaggregation factor: 5.26 Prefixes being announced from the LACNIC address blocks: 55020 Unique aggregates announced from the LACNIC address blocks: 25639 LACNIC Region origin ASes present in the Internet Routing Table: 2001 LACNIC Prefixes per ASN: 27.50 LACNIC Region origin ASes announcing only one prefix: 578 LACNIC Region transit ASes present in the Internet Routing Table: 369 Average LACNIC Region AS path length visible: 4.8 Max LACNIC Region AS path length visible: 29 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 801 Number of LACNIC addresses announced to Internet: 135157288 Equivalent to 8 /8s, 14 /16s and 86 /24s Percentage of available LACNIC address space announced: 80.6 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 262144-263679 plus ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 11560 Total AfriNIC prefixes after maximum aggregation: 2528 AfriNIC Deaggregation factor: 4.57 Prefixes being announced from the AfriNIC address blocks: 12162 Unique aggregates announced from the AfriNIC address blocks: 3903 AfriNIC Region origin ASes present in the Internet Routing Table: 643 AfriNIC Prefixes per ASN: 18.91 AfriNIC Region origin ASes announcing only one prefix: 190 AfriNIC Region transit ASes present in the Internet Routing Table: 131 Average AfriNIC Region AS path length visible: 4.7 Max AfriNIC Region AS path length visible: 24 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 6 Number of AfriNIC addresses announced to Internet: 46473728 Equivalent to 2 /8s, 197 /16s and 34 /24s Percentage of available AfriNIC address space announced: 46.2 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2922 11561 918 Korea Telecom (KIX) 17974 2655 871 92 PT TELEKOMUNIKASI INDONESIA 7545 2056 321 112 TPG Internet Pty Ltd 4755 1780 393 197 TATA Communications formerly 9829 1537 1221 45 BSNL National Internet Backbo 9583 1224 92 504 Sify Limited 9498 1175 309 70 BHARTI Airtel Ltd. 4808 1153 2127 332 CNCGROUP IP network: China169 7552 1139 1080 13 Vietel Corporation 24560 1088 394 164 Bharti Airtel Ltd., Telemedia Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 2978 3689 62 bellsouth.net, inc. 18566 2065 382 184 Covad Communications 1785 2006 679 125 PaeTec Communications, Inc. 22773 2006 2927 123 Cox Communications, Inc. 20115 1675 1646 621 Charter Communications 4323 1618 1105 408 Time Warner Telecom 701 1521 11103 797 UUNET Technologies, Inc. 30036 1365 305 639 Mediacom Communications Corp 7018 1317 11293 832 AT&T WorldNet Services 11492 1221 218 363 Cable One Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8402 1562 544 16 Corbina telecom 34984 1303 244 221 BILISIM TELEKOM 31148 978 43 17 FreeNet ISP 20940 977 349 748 Akamai Technologies European 2118 962 97 13 EUnet/RELCOM Autonomous Syste 6830 898 2371 429 UPC Distribution Services 13188 843 99 70 Educational Network 8551 768 370 45 Bezeq International 12479 687 797 53 Uni2 Autonomous System 58113 541 55 339 LIR DATACENTER TELECOM SRL Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 28573 3129 1655 108 NET Servicos de Comunicao S.A 10620 2668 424 223 TVCABLE BOGOTA 7303 1730 1157 220 Telecom Argentina Stet-France 18881 1359 844 20 Global Village Telecom 8151 1283 2764 392 UniNet S.A. de C.V. 11830 945 364 15 Instituto Costarricense de El 27947 837 94 91 Telconet S.A 6503 787 434 63 AVANTEL, S.A. 6147 738 374 25 Telefonica Del Peru 3816 721 302 83 Empresa Nacional de Telecomun Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 36998 1861 112 5 MOBITEL 24863 874 274 30 LINKdotNET AS number 6713 543 633 26 Itissalat Al-MAGHRIB 8452 438 956 9 TEDATA 24835 291 80 8 RAYA Telecom - Egypt 3741 258 921 217 The Internet Solution 15706 221 32 6 Sudatel Internet Exchange Aut 29571 220 17 12 Ci Telecom Autonomous system 36992 220 501 29 Etisalat MISR 12258 193 28 71 Vodacom Internet Company Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 28573 3129 1655 108 NET Servicos de Comunicao S.A 6389 2978 3689 62 bellsouth.net, inc. 4766 2922 11561 918 Korea Telecom (KIX) 10620 2668 424 223 TVCABLE BOGOTA 17974 2655 871 92 PT TELEKOMUNIKASI INDONESIA 18566 2065 382 184 Covad Communications 7545 2056 321 112 TPG Internet Pty Ltd 1785 2006 679 125 PaeTec Communications, Inc. 22773 2006 2927 123 Cox Communications, Inc. 36998 1861 112 5 MOBITEL Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 6389 2978 2916 bellsouth.net, inc. 17974 2655 2563 PT TELEKOMUNIKASI INDONESIA 10620 2668 2445 TVCABLE BOGOTA 4766 2922 2004 Korea Telecom (KIX) 7545 2056 1944 TPG Internet Pty Ltd 22773 2006 1883 Cox Communications, Inc. 18566 2065 1881 Covad Communications 1785 2006 1881 PaeTec Communications, Inc. 36998 1861 1856 MOBITEL 4755 1780 1583 TATA Communications formerly Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 30031 UNALLOCATED 12.27.122.0/24 7018 AT&T WorldNet Servic 13317 UNALLOCATED 12.44.10.0/24 7018 AT&T WorldNet Servic 23502 UNALLOCATED 12.44.44.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.103.0/24 209 Qwest 17300 UNALLOCATED 12.45.110.0/24 701 UUNET Technologies, 16476 UNALLOCATED 12.46.27.0/24 7018 AT&T WorldNet Servic 14764 UNALLOCATED 12.108.237.0/24 7018 AT&T WorldNet Servic 33649 UNALLOCATED 12.111.112.0/24 19029 New Edge Networks 30621 UNALLOCATED 12.151.74.0/23 7018 AT&T WorldNet Servic Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.100.0.0/24 4847 China Networks Inter-Exchange Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 23.92.16.0/21 8001 Net Access Corporation 23.92.24.0/22 6939 Hurricane Electric 23.92.64.0/24 54540 Incero LLC 23.92.65.0/24 54540 Incero LLC 23.92.66.0/24 54540 Incero LLC 23.92.67.0/24 54540 Incero LLC 23.92.68.0/24 54540 Incero LLC 23.92.69.0/24 54540 Incero LLC 23.92.70.0/24 54540 Incero LLC 23.92.71.0/24 54540 Incero LLC Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:11 /10:30 /11:93 /12:250 /13:479 /14:905 /15:1608 /16:12739 /17:6632 /18:11022 /19:22555 /20:32285 /21:34854 /22:48885 /23:42800 /24:244455 /25:1044 /26:1426 /27:597 /28:43 /29:75 /30:18 /31:0 /32:19 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 2016 2065 Covad Communications 36998 1826 1861 MOBITEL 6389 1713 2978 bellsouth.net, inc. 22773 1304 2006 Cox Communications, Inc. 8402 1271 1562 Corbina telecom 30036 1229 1365 Mediacom Communications Corp 11492 1182 1221 Cable One 1785 1079 2006 PaeTec Communications, Inc. 6983 1024 1152 ITC^Deltacom 10620 990 2668 TVCABLE BOGOTA Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:811 2:706 3:3 4:19 5:908 6:17 8:599 12:1897 13:2 14:868 15:11 16:3 17:10 18:19 20:17 23:334 24:1749 27:1540 31:1274 32:45 33:2 34:5 36:70 37:1818 38:898 39:2 40:180 41:3241 42:259 44:9 46:1854 47:3 49:652 50:842 52:12 54:37 55:7 57:26 58:1174 59:644 60:330 61:1494 62:1181 63:1985 64:4348 65:2155 66:4204 67:2016 68:1090 69:3315 70:863 71:492 72:1917 74:2528 75:327 76:305 77:1138 78:1007 79:615 80:1307 81:1018 82:649 83:587 84:569 85:1214 86:471 87:1042 88:537 89:1811 90:158 91:5568 92:625 93:1656 94:2015 95:1556 96:587 97:346 98:1029 99:42 100:29 101:598 103:3147 105:519 106:139 107:210 108:495 109:1865 110:945 111:1098 112:570 113:802 114:729 115:1102 116:956 117:800 118:1146 119:1288 120:363 121:850 122:1807 123:1243 124:1369 125:1411 128:635 129:223 130:302 131:667 132:348 133:160 134:277 135:72 136:259 137:242 138:344 139:189 140:207 141:321 142:532 143:393 144:498 145:93 146:531 147:478 148:678 149:354 150:154 151:589 152:413 153:193 154:30 155:415 156:275 157:405 158:276 159:745 160:349 161:446 162:580 163:222 164:548 165:555 166:255 167:602 168:1033 169:126 170:1071 171:188 172:25 173:1581 174:567 175:491 176:1173 177:2156 178:1899 179:91 180:1516 181:640 182:1225 183:432 184:655 185:757 186:2476 187:1401 188:1796 189:1279 190:7004 192:6867 193:5546 194:4601 195:3595 196:1327 197:985 198:4590 199:5384 200:5981 201:2602 202:8842 203:8870 204:4519 205:2604 206:2833 207:2893 208:3992 209:3589 210:2938 211:1553 212:2253 213:2019 214:928 215:100 216:5254 217:1651 218:618 219:323 220:1277 221:552 222:322 223:465 End of report

1 0

Cisco DMVPN Configuration Question
by Ray Soucy 16 Aug '13

16 Aug '13

Don't usually poke NANOG for a second pair of eyes, but got hit with an urgent need to get connectivity up on a small budget. I've run into a situation where I require multiple DMVPN spokes to be behind a single NAT IP (picture of things to come with CGN?) The DMVPN endpoint works fine behind NAT until a 2nd is added behind the same IP address. At that point the hub gets confused and I start seeing packet loss to the endpoints in a round-robin fashion. As far as I can see Cisco documentation says pretty clearly that each DMVPN spoke requires a unique IP address. Is there any way around this, or do I need to be looking at an alternative VPN solution? Hub config: ----8<---- description DMVPN bandwidth 100000 ip address 10.231.254.1 255.255.255.0 no ip redirects ip mtu 1400 ip nhrp authentication ! removed ip nhrp map multicast dynamic ip nhrp network-id 1 ip nhrp redirect ip tcp adjust-mss 1360 tunnel source ! removed tunnel mode gre multipoint tunnel key 0 tunnel protection ipsec profile DMVPN ----8<---- Spoke: ----8<---- interface Tunnel2 description DMVPN bandwidth 100000 ip vrf forwarding DMVPN ip address 10.231.254.10 255.255.255.0 no ip redirects ip mtu 1400 ip nhrp authentication ! removed ip nhrp map multicast ! removed ip nhrp map 10.231.254.1 ! removed ip nhrp network-id 1 ip nhrp nhs 10.231.254.1 ip nhrp shortcut ip tcp adjust-mss 1360 tunnel source FastEthernet0/0 tunnel mode gre multipoint tunnel key 0 tunnel protection ipsec profile DMVPN end ----8<---- -- Ray Patrick Soucy Network Engineer University of Maine System T: 207-561-3526 F: 207-561-3531 MaineREN, Maine's Research and Education Network www.maineren.net

2 1