- Test - lists.nanog.org

Questions about IRR best practices
by Lee Fawkes 13 Nov '21

13 Nov '21

Good morning Operators; I have a couple of questions about best practices for Internet Routing Registries. I'm able to find lots of documentation about *how* to do things, but not a lot of documentation about when I *should* do things. I work for a medium-sized ISP in the US, and we are currently using both RADb and the ARIN IRR. We peer all over the place, but my main concern is how Cogent and Hurricane Electric build prefix filters from our IRRs. 1. Netflix is asking us to add the AS of a downstream customer of one of our customers to our customer AS-SET. We have a direct relationship with this organization's provider, but not with this organization itself. Is this appropriate? 2. On the ARIN side, when ARIN-NONAUTH goes away next year, does that do away with our ability to do proxy route objects? Do we need to require all of our BGP customers to set up their own IRRs? 3. On the RADb side, if we're turning up a new customer that doesn't have an IRR, and another ISP already has a proxy registration for that customer, is it sufficient for us to add that customer's AS to our customer AS-SET? I've been getting around the fact that RADb doesn't allow multiple proxy registrations by registering proxy route objects in ARIN-NONAUTH, but that won't be an option much longer, and I can't really experiment with our customers' route objects to see what works. Thanks! -Lee Fawkes

7 9

DNS hijack?
by Jeff Shultz 13 Nov '21

13 Nov '21

Okay, so this is anecdotal, but since the domain belongs to me it's more than a little annoying. I got some calls that one of my domains, 2dpnr.org was going to a page that said it was Network Solutions and that my domain was available for renew or purchase. I hit my registrar, DirectNic, and found I'm good through 2023. They pulled up DNS checker and found that a bunch of DNS servers were showing 208.91.197.132 as the IP for the domain. It's actually in 64.130.197.x . I'm wondering if I was the only one? -- Jeff Shultz -- Like us on Social Media for News, Promotions, and other information!! <https://www.facebook.com/SCTCWEB/> <https://www.instagram.com/sctc_sctc/> <https://www.yelp.com/biz/sctc-stayton-3> <https://www.youtube.com/c/sctcvideos> _**** This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. ****_

9 17

Geolocation for Disney Plus
by Drew Weaver 12 Nov '21

12 Nov '21

We've had a few complaints that users are getting redirected to the EN-GB version of Disney+ whenever they try to visit the site. I have tried very hard to figure out which geolocation service they are using to come to that conclusion but have yet to be able to figure it out. Does anyone know specifically which service D+ uses or is there a "list of usual suspects" that you guys check when these sorts of things arise? I checked google, maxmind and a handful of others and those all know that we are in the US. Thanks, -Drew

5 4

Weekly Global IPv4 Routing Table Report
by Routing Table Analysis Role Account 12 Nov '21

12 Nov '21

This is an automated weekly mailing describing the state of the Internet Global IPv4 Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Global IPv4 Routing Table Report 04:00 +10GMT Sat 13 Nov, 2021 Report Website: http://thyme.apnic.net Detailed Analysis: http://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 871023 Prefixes after maximum aggregation (per Origin AS): 329373 Deaggregation factor: 2.64 Unique aggregates announced (without unneeded subnets): 421022 Total ASes present in the Internet Routing Table: 72294 Prefixes per ASN: 12.05 Origin-only ASes present in the Internet Routing Table: 62097 Origin ASes announcing only one prefix: 25623 Transit ASes present in the Internet Routing Table: 10197 Transit-only ASes present in the Internet Routing Table: 356 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 53 Max AS path prepend of ASN (265020) 50 Prefixes from unregistered ASNs in the Routing Table: 864 Number of instances of unregistered ASNs: 868 Number of 32-bit ASNs allocated by the RIRs: 37805 Number of 32-bit ASNs visible in the Routing Table: 31370 Prefixes from 32-bit ASNs in the Routing Table: 144615 Number of bogon 32-bit ASNs visible in the Routing Table: 25 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 427 Number of addresses announced to Internet: 3071879936 Equivalent to 183 /8s, 25 /16s and 43 /24s Percentage of available address space announced: 83.0 Percentage of allocated address space announced: 83.0 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 290647 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 230878 Total APNIC prefixes after maximum aggregation: 64823 APNIC Deaggregation factor: 3.56 Prefixes being announced from the APNIC address blocks: 225931 Unique aggregates announced from the APNIC address blocks: 92904 APNIC Region origin ASes present in the Internet Routing Table: 12105 APNIC Prefixes per ASN: 18.66 APNIC Region origin ASes announcing only one prefix: 3455 APNIC Region transit ASes present in the Internet Routing Table: 1696 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 27 Number of APNIC region 32-bit ASNs visible in the Routing Table: 7278 Number of APNIC addresses announced to Internet: 773269632 Equivalent to 46 /8s, 23 /16s and 40 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-151865 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 255823 Total ARIN prefixes after maximum aggregation: 118120 ARIN Deaggregation factor: 2.17 Prefixes being announced from the ARIN address blocks: 255977 Unique aggregates announced from the ARIN address blocks: 122546 ARIN Region origin ASes present in the Internet Routing Table: 18948 ARIN Prefixes per ASN: 13.51 ARIN Region origin ASes announcing only one prefix: 6861 ARIN Region transit ASes present in the Internet Routing Table: 1957 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 28 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4208 Number of ARIN addresses announced to Internet: 1301297408 Equivalent to 77 /8s, 144 /16s and 57 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 242723 Total RIPE prefixes after maximum aggregation: 113535 RIPE Deaggregation factor: 2.14 Prefixes being announced from the RIPE address blocks: 238900 Unique aggregates announced from the RIPE address blocks: 146432 RIPE Region origin ASes present in the Internet Routing Table: 28141 RIPE Prefixes per ASN: 8.49 RIPE Region origin ASes announcing only one prefix: 12143 RIPE Region transit ASes present in the Internet Routing Table: 3915 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 38 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10520 Number of RIPE addresses announced to Internet: 712386688 Equivalent to 42 /8s, 118 /16s and 40 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 113718 Total LACNIC prefixes after maximum aggregation: 26952 LACNIC Deaggregation factor: 4.22 Prefixes being announced from the LACNIC address blocks: 114593 Unique aggregates announced from the LACNIC address blocks: 47437 LACNIC Region origin ASes present in the Internet Routing Table: 10791 LACNIC Prefixes per ASN: 10.62 LACNIC Region origin ASes announcing only one prefix: 2615 LACNIC Region transit ASes present in the Internet Routing Table: 2129 Average LACNIC Region AS path length visible: 5.0 Max LACNIC Region AS path length visible: 53 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8463 Number of LACNIC addresses announced to Internet: 176442624 Equivalent to 10 /8s, 132 /16s and 77 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 27017 Total AfriNIC prefixes after maximum aggregation: 5273 AfriNIC Deaggregation factor: 5.12 Prefixes being announced from the AfriNIC address blocks: 35195 Unique aggregates announced from the AfriNIC address blocks: 11318 AfriNIC Region origin ASes present in the Internet Routing Table: 1573 AfriNIC Prefixes per ASN: 22.37 AfriNIC Region origin ASes announcing only one prefix: 549 AfriNIC Region transit ASes present in the Internet Routing Table: 308 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 25 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 901 Number of AfriNIC addresses announced to Internet: 108225280 Equivalent to 6 /8s, 115 /16s and 99 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 8699 9000 57 CHINAMOBILE-CN China Mobile Communicati 7545 5858 787 685 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4665 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3591 1330 20 VIETEL-AS-AP Viettel Group, VN 7713 3498 1023 57 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 3195 1896 54 VNPT-AS-VN VNPT Corp, VN 4766 2507 11119 578 KIXS-AS-KR Korea Telecom, KR 9498 2169 471 234 BBIL-AP BHARTI Airtel Ltd., IN 45090 2135 1198 75 TENCENT-NET-AP Shenzhen Tencent Compute 4755 2124 429 204 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 5889 9964 2541 AMAZON-02, US 11492 4633 307 804 CABLEONE, US 22773 4047 3049 380 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3950 264 30 VIASAT-SP-BACKBONE, US 16625 3665 1891 2547 AKAMAI-AS, US 6327 3390 1318 69 SHAW, CA 749 2890 50784 2146 DNIC-AS-00749, US 30036 2599 375 147 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2523 5027 442 CENTURYLINK-US-LEGACY-QWEST, US 7018 2246 24164 1435 ATT-INTERNET4, US Complete listing at http://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6881 1725 146 UNI2-AS, ES 20940 3925 3348 218 AKAMAI-ASN1, NL 39891 3271 187 23 ALJAWWALSTC-AS, SA 8551 3089 378 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2928 2279 898 ROSTELECOM-AS, RU 9009 2510 258 1320 M247, GB 34984 2199 354 599 TELLCOM-AS, TR 58224 1738 912 587 TCI, IR 61317 1630 213 918 ASDETUK www.heficed.com, GB 13188 1610 100 27 TRIOLAN, UA Complete listing at http://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10629 3464 576 Uninet S.A. de C.V., MX 10620 3248 490 830 Telmex Colombia S.A., CO 11830 2470 369 62 Instituto Costarricense de Electricidad 13999 1641 286 453 Mega Cable, S.A. de C.V., MX 6503 1530 359 472 Axtel, S.A.B. de C.V., MX 28573 1451 2313 250 CLARO S.A., BR 3816 1240 651 153 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 26615 1132 2351 138 TIM SA, BR 6147 1092 370 21 Telefonica del Peru S.A.A., PE 11664 970 188 442 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1638 393 21 LINKdotNET-AS, EG 24835 1536 507 33 RAYA-AS, EG 36992 1285 1430 270 ETISALAT-MISR, EG 36903 1183 537 110 MT-MPLS, MA 29571 814 68 11 ORANGE-COTE-IVOIRE, CI 36935 702 523 44 Vodafone-, EG 6713 612 1863 34 IAM-AS, MA 15399 516 50 31 WANANCHI-, KE 37342 470 32 1 MOVITEL, MZ 23889 429 232 16 MauritiusTelecom, MU Complete listing at http://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 10629 3464 576 Uninet S.A. de C.V., MX 9808 8699 9000 57 CHINAMOBILE-CN China Mobile Communicati 12479 6881 1725 146 UNI2-AS, ES 16509 5889 9964 2541 AMAZON-02, US 7545 5858 787 685 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4665 4192 74 ERX-CERNET-BKB China Education and Rese 11492 4633 307 804 CABLEONE, US 22773 4047 3049 380 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3950 264 30 VIASAT-SP-BACKBONE, US 20940 3925 3348 218 AKAMAI-ASN1, NL Complete listing at http://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 8699 8642 CHINAMOBILE-CN China Mobile Communications Grou 12479 6881 6735 UNI2-AS, ES 7545 5858 5173 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4665 4591 ERX-CERNET-BKB China Education and Research Net 7155 3950 3920 VIASAT-SP-BACKBONE, US 11492 4633 3829 CABLEONE, US 20940 3925 3707 AKAMAI-ASN1, NL 22773 4047 3667 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3591 3571 VIETEL-AS-AP Viettel Group, VN 7713 3498 3441 TELKOMNET-AS-AP PT Telekomunikasi Indonesia, ID Complete listing at http://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 46990 UNALLOCATED 8.5.242.0/23 3356 LEVEL3, US 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 1782 UNALLOCATED 8.42.19.0/24 46887 LIGHTOWER, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 395056 UNALLOCATED 8.45.133.0/24 3356 LEVEL3, US Complete listing at http://thyme.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.132.208.0/24 Origin: 7850 CITYLINKFIBER, US 23.132.208.0/24 Transit: 15164 UPNLLC, US 23.141.0.0/24 Origin: 395350 UNASSIGNED 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US 23.252.160.0/24 Origin: 398968 GROUP-IID-01, US 23.252.160.0/24 Transit: 1299 TWELVE99 Twelve99, Telia Carrier, SE 23.252.161.0/24 Origin: 398968 GROUP-IID-01, US 23.252.161.0/24 Transit: 1299 TWELVE99 Twelve99, Telia Carrier, SE 23.252.162.0/24 Origin: 398968 GROUP-IID-01, US 23.252.162.0/24 Transit: 1299 TWELVE99 Twelve99, Telia Carrier, SE Complete listing at http://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:41 /11:99 /12:300 /13:597 /14:1214 /15:2044 /16:13567 /17:8258 /18:13918 /19:25286 /20:43031 /21:50861 /22:107243 /23:93940 /24:509146 /25:1449 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 5840 6881 UNI2-AS, ES 8151 4426 10629 Uninet S.A. de C.V., MX 11492 3586 4633 CABLEONE, US 6327 3198 3390 SHAW, CA 7155 3040 3950 VIASAT-SP-BACKBONE, US 22773 3010 4047 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2807 3271 ALJAWWALSTC-AS, SA 8551 2554 3089 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2253 2599 MEDIACOM-ENTERPRISE-BUSINESS, US 11830 1921 2470 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1920 2:1048 3:145 4:18 5:3725 6:100 7:5 8:1549 9:1 11:172 12:1712 13:405 14:2267 15:123 16:30 17:375 18:125 20:143 21:4 22:188 23:5308 24:2389 25:2 27:2548 29:19 31:2380 32:106 34:1 35:47 36:1728 37:3910 38:2343 39:636 40:149 41:3872 42:1055 43:2082 44:290 45:15654 46:3784 47:323 49:1680 50:1876 51:103 52:1332 54:284 55:737 56:4 57:55 58:1741 59:1127 60:937 61:2246 62:2367 63:1957 64:5416 65:2347 66:4945 67:2874 68:1174 69:4086 70:1348 71:679 72:3090 74:2612 75:1499 76:709 77:2100 78:1745 79:2391 80:1872 81:1511 82:1411 83:1171 84:1300 85:2822 86:703 87:1877 88:973 89:3097 90:501 91:7463 92:1913 93:2571 94:3190 95:3593 96:1302 97:348 98:980 99:918 100:76 101:1044 102:1770 103:27411 104:4117 105:436 106:844 107:2412 108:748 109:3930 110:2059 111:3138 112:1952 113:1498 114:1538 115:1934 116:1875 117:2429 118:2328 119:1844 120:1613 121:1038 122:2535 123:2133 124:1597 125:2032 128:1376 129:1113 130:912 131:2072 132:749 133:364 134:1905 135:332 136:793 137:863 138:2423 139:1212 140:831 141:1323 142:1240 143:1340 144:1273 145:327 146:1585 147:1463 148:2235 149:1585 150:849 151:1080 152:1669 153:436 154:3292 155:1362 156:1819 157:1192 158:986 159:2012 160:2325 161:1262 162:3388 163:1112 164:1660 165:1497 166:610 167:1659 168:3654 169:681 170:4273 171:805 172:2838 173:3042 174:1002 175:1125 176:3395 177:4509 178:3008 179:1926 180:2260 181:2617 182:3159 183:1928 184:2417 185:18990 186:4234 187:3516 188:3628 189:3080 190:8723 191:1314 192:10974 193:8402 194:6867 195:4890 196:2878 197:2236 198:6032 199:6002 200:7404 201:5682 202:10470 203:10038 204:4496 205:3403 206:3848 207:3392 208:4006 209:4689 210:4223 211:2436 212:3788 213:3369 214:1159 215:64 216:6383 217:2622 218:1220 219:613 220:1955 221:986 222:852 223:2128 End of report

1 0

GeoLocation contact for HBO?
by Mike Lyon 11 Nov '21

11 Nov '21

Anyone have a GeoLocation contact for HBO? Appears they don’t allow external emails to CTIAEngineers(a)hbo.com Thanks in advance. -Mike

1 0

BGP hujack by AS25478?
by Hank Nussbacher 09 Nov '21

09 Nov '21

Based on my own observation as well as via bgpstream there was a massive BGP hijack attempt last night by IHOME-AS iHome LLC, RU (AS 25478). Lasted about 10 minutes. Noction? Finger faddle? Malicious? Thanks, Hank

4 3

Re: What’s up with Comcast in Philadelphia area
by Mel Beckman 09 Nov '21

09 Nov '21

There’s a huge thread on the outages.org mailing list. -mel > On Nov 9, 2021, at 6:31 AM, Jason Canady <jason(a)unlimitednet.us> wrote: > It's also affecting the Midwest. No update on what's going on. > > On 11/9/21 9:25 AM, Justin Keller wrote: >> Hello. >> Anyone know what's up with Comcast in the Philadelphia area? There >> seems to be a lot of outages both residential and business >> >> Justin

1 0

What’s up with Comcast in Philadelphia area
by Justin Keller 09 Nov '21

09 Nov '21

Hello. Anyone know what's up with Comcast in the Philadelphia area? There seems to be a lot of outages both residential and business Justin

2 1

CenturyLink Fiber Latency Issues (Seattle, WA)
by Neel Chauhan 09 Nov '21

09 Nov '21

Hi NANOG Mailing List, I don't know if any of you work at CenturyLink/Lumen, very less on their Fiber network in Seattle, WA. However, here's my story. If I attempt to run certain applications that use 1000, or 10000 TCP connections, I get latency spikes. It is based on how many connections, but also how much bandwidth is used. This means certain things like Tor relays are off limits to me (which I wish to run). On an idle connection, the PingPlotter outputs look like this: https://centurylinklatencyissues.com/image-000.png If I attempt to run BitTorrent with 1000 connections in Deluge, PingPlotter looks like this: https://centurylinklatencyissues.com/image-002.png Getting support, or even executive contacts to admit the issue hasn't worked. They all love to blame my equipment or applications, when CL routers also show the issue when I run the same things whereas my same exact OPNsense box on Google Fiber Webpass running Tor at another address had no issues whatsoever, and I can ping other Tor relays on CenturyLink AS209 just fine (from a VPS). The most competent person I dealt with was actually one tech. He told me there was "capacity issues" in our neighborhood, and that's the reason for the issues. However, nothing was done about it afterwards, I'm guessing since I turned off my Tor relay after the visit to avoid complaints from family members. On an AT&T forum, people have said GPON gives latency spikes/packet loss on congestion: https://www.dslreports.com/forum/r33242889-How-rare-is-GPON-XGSPON-saturati… The capacity managers in Seattle are literally dragging their feet: it's 100x worse than AT&T's 802.1X. I know AT&T and CenturyLink don't compete, but if I had to choose between AT&T Fiber and CenturyLink, I'll take AT&T in a heartbeat, no ifs, no buts, even if I have to use AT&T's crappy router instead of my OPNsense box. Going back, do any of you who work at CenturyLink/Lumen can get me to the right people, hopefully the capacity managers in Seattle? I could go with Comcast, but it's either (a) 35 Mbps uploads or (b) $329/mo for "Gigabit Pro" with a 2-year contract and a steep install fee. I am seriously considering Gigabit Pro even if it breaks the bank, but hope I won't have to go there. I don't need 2 Gbps and would rather pay $65 than $329. 300-500 Mbps uploads when I need it is the sweet spot for me (even without Tor) which CL GPON should easily handle without a sweat. I also don't exactly **trust** Comcast, they're a horrible company in many metrics, but in some ways Comcast is more competent than CenturyLink. Best, Neel Chauhan

6 9

Spoofer Report for NANOG for Oct 2021
by CAIDA Spoofer Project 08 Nov '21

08 Nov '21

In response to feedback from operational security communities, CAIDA's source address validation measurement project (https://spoofer.caida.org) is automatically generating monthly reports of ASes originating prefixes in BGP for systems from which we received packets with a spoofed source address. We are publishing these reports to network and security operations lists in order to ensure this information reaches operational contacts in these ASes. This report summarises tests conducted within usa, can. Inferred improvements during Oct 2021: ASN Name Fixed-By 399804 2021-10-01 212934 AS_POTVIN 2021-10-08 398355 DATAIDEAS-LLC 2021-10-22 21976 NJEDGE-NET 2021-10-26 Further information for the inferred remediation is available at: https://spoofer.caida.org/remedy.php Source Address Validation issues inferred during Oct 2021: ASN Name First-Spoofed Last-Spoofed 577 BACOM 2016-03-09 2021-10-29 19230 NANOG 2016-06-13 2021-10-31 209 CENTURYLINK-US-LEGACY-QWEST 2016-08-16 2021-10-27 6128 CABLE-NET-1 2016-09-03 2021-10-17 20412 CLARITY-TELECOM 2016-09-30 2021-10-30 6181 FUSE-NET 2016-10-10 2021-10-29 11427 TWC-11427-TEXAS 2016-10-21 2021-10-21 32440 LONI 2016-11-03 2021-10-31 22898 ATLINK 2016-12-16 2021-10-31 63296 AWBROADBAND 2017-09-01 2021-10-25 12222 AKAMAI 2018-02-14 2021-10-31 393564 SPOKANE 2018-06-05 2021-10-26 33452 RW 2018-09-19 2021-10-19 14031 SCXY 2018-10-18 2021-10-27 62904 EONIX-COMMUNICATIONS-ASBLOCK-6 2019-07-14 2021-10-26 53356 FREE RANGE CLOUD 2020-05-19 2021-10-22 395723 LIGHTSPEEDHOSTING1 2020-06-22 2021-10-20 56207 Converge 2021-03-26 2021-10-27 399318 2021-08-29 2021-10-31 63457 EMPIRE-CONNECT 2021-09-08 2021-10-28 33258 CSONLINE-AS-1 2021-09-28 2021-10-27 212934 AS_POTVIN 2021-10-03 2021-10-31 396503 WESTCONNECT-COMMUNICATIONS 2021-10-22 2021-10-22 22773 ASN-CXA-ALL-CCI-22773-RDC 2021-10-24 2021-10-31 26231 SFIA-ASN 2021-10-27 2021-10-27 Further information for these tests where we received spoofed packets is available at: https://spoofer.caida.org/recent_tests.php?country_include=usa,can&no_block… Please send any feedback or suggestions to spoofer-info(a)caida.org

1 0