- Test - lists.nanog.org

Unable to email anyone from my primary domain name; thanks Google Mail and G Suite.
by Constantine A. Murenin 28 Oct '19

28 Oct '19

Dear NANOG@, I'm not sure where else to post this, and this is not really new, either, but I think I have a new take here. I use my own personal domain name for various UNIX stuff, including sending log-related things to myself out of cron, which end up in my own Gmail.com account, either directly, or through forwarding (w/o SRS). (I do not use G Suite for my own domain name, for obvious reasons; just the consumer-based gmail.com email address from the old times of invitation-based registrations.) Over the years, I sometimes had certain messages rejected by Gmail, but it was a very low rate of rejection (less than 5% for any mail I cared about), and wasn't a major problem (usually only some automated messages would be rejected). A couple of months ago, I setup some new scripts that would send me new nightly emails. It's all plain text, but had a few dozen of domain names present (it's logs). Absolutely no links, just plenty of domains which I don't control. So, Gmail has been presenting most of these messages with their red warning label that the email contains malicious links, even though all of these emails contained zero links, zero URLs to any of these unknown domain names, zero URL schemes, zero "http://", zero "https://" etc. You get the idea. Since about a few weeks ago, I am now seeing at least a 95% rejection rate for my domain name, for ALL email, including the forwards. Including emails which I send to myself from within Google, and which get forwarded back to Gmail by my UNIX machine (which is not known to break Gmail's DKIM, either, although it's also difficult to test, because when it does get through, it's automatically marked as a duplicate by Gmail, so, you don't get DKIM status from Gmail by looking at the headers, since you only get to examine the original copy that was sent, not the forwarded duplicate that was subsequently accepted). I.e., emails with a passing DMARC still get rejected. The funny thing is, Google doesn't actually blacklist my primary IPv6 address in my own /48 from which all of my messages originate; even though the rDNS resolves to a subdomain on the very same domain name which they've blacklisted "due to the very low reputation". They've blacklisted just the main domain name that I use for my own non-Gmail-hosted mail. Sending the same messages into my Gmail.com from a different domain name in MAIL FROM, which is served from the same zone file DNS-wise (e.g., an SPF pass), through sendmail's `-f` option, or with Mutt, makes the messages go through (even with rDNS being "low reputation"); sending it from my primary domain name in MAIL FROM results in the following: >>> DATA <<< 550-5.7.1 [2001:470:xxxx:: 19] Our system has detected that this message is <<< 550-5.7.1 likely suspicious due to the very low reputation of the sending <<< 550-5.7.1 domain. To best protect our users from spam, the message has been <<< 550-5.7.1 blocked. Please visit <<< 550 5.7.1 https://support.google.com/mail/answer/188131 for more information. 135si403977wma.43 - gsmtp 554 5.0.0 Service unavailable The support article suggests using Postmaster Tools; great, never heard of it, sounds cool; let's verify our domain, and try it out, hopefully, there's a solution right there. However, after verifying my domain name through DNS for Postmaster Tools, it is revealed that Postmaster Tools cannot tell me anything at all, with all tabs and screens being 100% blank, allegedly because I'm not actually a mass email sender (I don't send hundreds of emails a day or whatnot), and they're too afraid that I'll figure out why my mail doesn't actually go through, instead of signing up for G Suite. Right now, I've had a business need to reply to a work-related email from some other business. This is what I got after sending my reply from my primary domain name through mutt — a nice double rejection by both the G Suite and Gmail in a single bounce generated by my server: ----- Transcript of session follows ----- ... while talking to aspmx.l.google.com.: >>> DATA <<< 550-5.7.1 [2001:470:xxxx:: 19] Our system has detected that this message is <<< 550-5.7.1 likely suspicious due to the very low reputation of the sending <<< 550-5.7.1 domain. To best protect our users from spam, the message has been <<< 550-5.7.1 blocked. Please visit <<< 550 5.7.1 https://support.google.com/mail/answer/188131 for more information. z11si12494671wrw.137 - gsmtp 554 5.0.0 Service unavailable ... while talking to gmail-smtp-in.l.google.com.: >>> DATA <<< 550-5.7.1 [2001:470:xxxx:: 19] Our system has detected that this message is <<< 550-5.7.1 likely suspicious due to the very low reputation of the sending <<< 550-5.7.1 domain. To best protect our users from spam, the message has been <<< 550-5.7.1 blocked. Please visit <<< 550 5.7.1 https://support.google.com/mail/answer/188131 for more information. 135si403977wma.43 - gsmtp 554 5.0.0 Service unavailable Changing MAIL FROM into a non-primary domain name (served out of an identical zone file, basically) gets the message accepted, without DKIM, without the 4-minute delay that many "suspicious" messages have had for months now, from the very same IPv6 address with the rDNS pointing to the domain name with "the very low reputation", and it shows up in both my own Gmail as well as, presumably, in the G Suite account of the business partner I was replying to. (Note that this trick where the rDNS domain gets ignored works only for new emails with a passing SPF; I presume the rDNS still prevails in bringing the "low reputation of the sending domain" for forwards, as they don't seem to succeed any longer now.) There are a number of possible tl;dr: takeaways here: * don't spread the monoculture — don't use G Suite for your organisation; * don't send crontab output to your Gmail from your primary domain name; * don't use Gmail. What is my own takeaway here? * Without being an anti-Google zealot, from a purely practical perspective, since my Gmail account no longer contains the mail I care most about, as it gets rejected on the SMTP layer, I'll have fewer reasons to use it. * I'll now have no other choice but to modify my setup to stop forwarding to Gmail, because my business contacts don't need to see all these bounces that are now taking place. * Since so many businesses are G Suite useds, I'm still looking for a solution to get rid of the "the very low reputation of the sending domain" from a domain name I've been using since 2007, and which I'm 100% convinced was blacklisted by Google entirely for me sending crontab with system logs (zero HTML, zero URLs) to my own Gmail. I have SPF and DMARC all setup and passing since years ago, which doesn't stop this issue from occurring. Merely switching the name of the domain in From and MAIL FROM to any other domain I own (which points to the very same MX) appears to be my workaround for now. Some possible suggestions for Google, if I may: * Maybe don't convert schemeless domain names which are non-URLs into "malicious" URLs? (They already do seem to block them from being presented as links in the UI in such an instance, but there's little reason for trying to convert these domain names into links in the first place.) * Maybe don't consider harmless plain text emails with a bunch of domain names to contain malicious links when they don't? * Maybe don't assume everyone with a domain name runs a G Suite? (Their whole troubleshooting guide is built around it.) * Maybe don't assume everyone with a domain name sends hundreds of emails from their domain name per day? (They seem to limit Postmaster Tools based on such a criterion.) * Maybe don't blacklist a domain name for sending harmless logs to a Gmail account that lists said domain name as an alternative From address? Cheers, Constantine.

14 18

IPv4 and Auctions
by Matt Hoppes 28 Oct '19

28 Oct '19

A thought crossed my mind the other day as I was having a discussion with someone. Every entity is suppose to justify their need for IPv4 address space from ARIN. This was always (in recent history) the case. No entity is suppose to be given more IPv4 space until they have nearly exhausted their previous space. How is it, then, that we daily for the last 2-3 years have places like Hilco that have sometimes 15-20 large IPv4 blocks up for auction? Supposedly we are completely out of IPv4 space, yet every day large blocks are being sold for money, yet they were never returned because they weren’t needed. Another thought: being that IPv4 address space is essentially leased to you from ARIN, can you even legally auction your space to someone else? I know it’s happening, but it would almost be like me auctioning my apartment to another random person.

14 20

California network infrastructure report (FCC)
by Sean Donelan 28 Oct '19

28 Oct '19

According to reporting to the FCC: https://www.fcc.gov/document/ca-power-shutoff-communications-status-report-… Cell sites out of service: overall 2.4% (630 out of 25,893) Marin County: 49.6% out of service (105 out of 270) Lake County: 19.3% out of service (11 out of 57) Calaveras County: 18.6% out of service (8 out of 43) Sonoma County: 17.1% out of service (73 out of 427) Santa Cruz County: 16.4% out of service (35 out of 213) Cable and Wireline systems (combined) 393,735 subscribers out of service. Only Outside Plant and Hub locations. Likely does not include loss of Customer Premise Equipment (CPE) power. Broadcast 4 FM radio stations out of service, 2 FM stations with programming sent to another station.

2 1

U.S. Senate: READI Act 2019 re-introducted
by Sean Donelan 28 Oct '19

28 Oct '19

U.S. Senators Brian Schatz (D-Hawaii) and John Thune (R-S.D.) reintroduced the Reliable Emergency Alert Distribution Improvement (READI) Act today (October 24, 2019). The READI Act would: [...] Explore establishing a system to offer emergency alerts to audio and video online streaming services, such as Netflix and Spotify; [...] The READI Act is support by NCTA – The Internet and Television Association, the National Association of Broadcasters (NAB), the Internet Association, CTIA – The Wireless Association, and the Wireless Infrastructure Association. Due to its bi-partisan co-sponsors and industry support, this bill is likely to pass. As I've stated before, I think network emergency alerts should be built into the underlying smart assistant layer (i.e. apple siri, amazon echo/fire, roku, google/nest home, etc.) instead of each content provider or internet provider.

4 11

Re: Couple of questions about "baremetal/ONIE" networking equipment sellers
by Nick ten Cate 27 Oct '19

27 Oct '19

Hi Mike/Drew, We also have lots of experience with FS.com switches; however.. One thing we noticed really quick is that its better to order 1 and to find the actual supplier and order with them directly. FS.com is a reseller; and they will switch (no pun intended) supplier almost yearly. Real technical support is nonexistent (even though they claim it is great) and I have yet to have a single bug fixed; packet dumps and steps to reproduce included. I have removed all of our *N*5850-48S6Q due to bugs in software lockups. Their current *S*5850-48S6Q is developed by Centec Neworks ( http://www.centecnetworks.com/en/SolutionList.asp?ID=91 ) and is the E580-48X6Q (compare the changelog and manual; you will see its a "replace all" job). These switches do actually support LDP/MPLS/VPLS if you buy the license and run them in their 'ipran' profile. Feel free to contact me off list if you have any questions. Kind regards, Nick ten Cate >> Date: Fri, 25 Oct 2019 09:25:24 -0700 >> From: Mike <mike-nanog(a)tiedyenetworks.com> >> To: nanog(a)nanog.org >> Subject: Re: Couple of questions about "baremetal/ONIE" networking >> equipment sellers >> Message-ID: <1f380ffc-ae44-3346-5db3-bf38d290a326(a)tiedyenetworks.com> >> Content-Type: text/plain; charset="windows-1252" >> >> On 10/25/19 9:13 AM, Drew Weaver wrote: >> > >> > Hello, >> > >> > >> > >> > 1. I was reading about Cumulus and came across a note about >> > bm-switch.com, does anyone have any experience purchasing switches >> > from bm-switch.com? What was your experience like? >> > 2. Same question about hardware from FS.com any problems there? >> > >> > Thanks! >> > >> > -Drew >> > >> >> I have some experience with FS.com - I have the S5850-48S6Q >> (https://www.fs.com/products/29123.html) and it does the job. Advanced >> features like MPLS and such are not available, but for the money I'm >> quite happy. >> >>

2 1

New Alaskan Network
by Rod Beck 25 Oct '19

25 Oct '19

Unusual in that it will traverse Canada to reach the lower 48. https://www.theverge.com/2019/5/1/18525866/alaska-fiber-optic-network-cable… [https://cdn.vox-cdn.com/thumbor/0w80DQVzjT8MXT05t-SSNgXP7uA=/0x78:1100x654/…]<https://www.theverge.com/2019/5/1/18525866/alaska-fiber-optic-network-cable…> Alaska will connect to the rest of the US via a 100-terabit fiber optic network - The Verge<https://www.theverge.com/2019/5/1/18525866/alaska-fiber-optic-network-cable…> MTA Fiber Holdings announced today that it would build the "first and only all-terrestrial" fiber optic network running from Alaska and into the Lower 48. The line will begin in North Pole, Alaska ... www.theverge.com Roderick Beck VP of Business Development United Cable Company www.unitedcablecompany.com<http://www.unitedcablecompany.com> New York City & Budapest rod.beck(a)unitedcablecompany.com 36-70-605-5144 [1467221477350_image005.png]

3 3

Fiber Builds
by Rod Beck 25 Oct '19

25 Oct '19

https://www.lightwaveonline.com/network-design/high-speed-networks/article/… [https://img.lightwaveonline.com/files/base/ebm/lw/image/2019/07/LWcenturyli…]<https://www.lightwaveonline.com/network-design/high-speed-networks/article/…> CenturyLink adding 4.7 million fiber miles to U.S., European fiber-optic networks | Lightwave - lightwaveonline.com<https://www.lightwaveonline.com/network-design/high-speed-networks/article/…> CenturyLink, Inc. (NYSE: CTL) says it has completed the first of a two-phase build out that will see its fiber-optic networks in the U.S. and Europe grow by 4.7 million fiber miles. www.lightwaveonline.com Roderick Beck VP of Business Development United Cable Company www.unitedcablecompany.com<http://www.unitedcablecompany.com> New York City & Budapest rod.beck(a)unitedcablecompany.com 36-70-605-5144 [1467221477350_image005.png]

1 0

Facebook the Wholesale Fiber Provider
by Rod Beck 25 Oct '19

25 Oct '19

https://engineering.fb.com/connectivity/fiber-optic-cable/ [https://engineering.fb.com/wp-content/uploads/2019/02/fiberbuild.jpg]<https://engineering.fb.com/connectivity/fiber-optic-cable/> Building network infrastructure with fiber-optic cable - Facebook Engineering<https://engineering.fb.com/connectivity/fiber-optic-cable/> As we bring more data centers online, we will continue to partner and invest in core backbone network infrastructure. We take a pragmatic approach to investing in network infrastructure and utilize whatever method is most efficient for the task at hand. engineering.fb.com Roderick Beck VP of Business Development United Cable Company www.unitedcablecompany.com<http://www.unitedcablecompany.com> New York City & Budapest rod.beck(a)unitedcablecompany.com 36-70-605-5144 [1467221477350_image005.png]

1 0

Weekly Routing Table Report
by cscora＠apnic.net 25 Oct '19

25 Oct '19

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 26 Oct, 2019 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 780161 Prefixes after maximum aggregation (per Origin AS): 296820 Deaggregation factor: 2.63 Unique aggregates announced (without unneeded subnets): 371941 Total ASes present in the Internet Routing Table: 65992 Prefixes per ASN: 11.82 Origin-only ASes present in the Internet Routing Table: 56726 Origin ASes announcing only one prefix: 24261 Transit ASes present in the Internet Routing Table: 9266 Transit-only ASes present in the Internet Routing Table: 271 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 51 Max AS path prepend of ASN ( 22394) 47 Prefixes from unregistered ASNs in the Routing Table: 33 Number of instances of unregistered ASNs: 33 Number of 32-bit ASNs allocated by the RIRs: 29245 Number of 32-bit ASNs visible in the Routing Table: 23940 Prefixes from 32-bit ASNs in the Routing Table: 108646 Number of bogon 32-bit ASNs visible in the Routing Table: 13 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 325 Number of addresses announced to Internet: 2842547584 Equivalent to 169 /8s, 109 /16s and 213 /24s Percentage of available address space announced: 76.8 Percentage of allocated address space announced: 76.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.4 Total number of prefixes smaller than registry allocations: 260294 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 209040 Total APNIC prefixes after maximum aggregation: 60806 APNIC Deaggregation factor: 3.44 Prefixes being announced from the APNIC address blocks: 203443 Unique aggregates announced from the APNIC address blocks: 84820 APNIC Region origin ASes present in the Internet Routing Table: 10123 APNIC Prefixes per ASN: 20.10 APNIC Region origin ASes announcing only one prefix: 2817 APNIC Region transit ASes present in the Internet Routing Table: 1516 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 25 Number of APNIC region 32-bit ASNs visible in the Routing Table: 5146 Number of APNIC addresses announced to Internet: 771105152 Equivalent to 45 /8s, 246 /16s and 33 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-141625 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 229315 Total ARIN prefixes after maximum aggregation: 106403 ARIN Deaggregation factor: 2.16 Prefixes being announced from the ARIN address blocks: 227371 Unique aggregates announced from the ARIN address blocks: 104768 ARIN Region origin ASes present in the Internet Routing Table: 18639 ARIN Prefixes per ASN: 12.20 ARIN Region origin ASes announcing only one prefix: 6905 ARIN Region transit ASes present in the Internet Routing Table: 1919 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 51 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2973 Number of ARIN addresses announced to Internet: 1068651904 Equivalent to 63 /8s, 178 /16s and 85 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 218810 Total RIPE prefixes after maximum aggregation: 102118 RIPE Deaggregation factor: 2.14 Prefixes being announced from the RIPE address blocks: 215079 Unique aggregates announced from the RIPE address blocks: 127440 RIPE Region origin ASes present in the Internet Routing Table: 26587 RIPE Prefixes per ASN: 8.09 RIPE Region origin ASes announcing only one prefix: 11707 RIPE Region transit ASes present in the Internet Routing Table: 3752 Average RIPE Region AS path length visible: 4.5 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 8633 Number of RIPE addresses announced to Internet: 722633344 Equivalent to 43 /8s, 18 /16s and 130 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 101379 Total LACNIC prefixes after maximum aggregation: 23104 LACNIC Deaggregation factor: 4.39 Prefixes being announced from the LACNIC address blocks: 102542 Unique aggregates announced from the LACNIC address blocks: 44956 LACNIC Region origin ASes present in the Internet Routing Table: 9014 LACNIC Prefixes per ASN: 11.38 LACNIC Region origin ASes announcing only one prefix: 2356 LACNIC Region transit ASes present in the Internet Routing Table: 1691 Average LACNIC Region AS path length visible: 5.2 Max LACNIC Region AS path length visible: 29 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 6567 Number of LACNIC addresses announced to Internet: 173863936 Equivalent to 10 /8s, 92 /16s and 244 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-270748 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 21583 Total AfriNIC prefixes after maximum aggregation: 4364 AfriNIC Deaggregation factor: 4.95 Prefixes being announced from the AfriNIC address blocks: 31401 Unique aggregates announced from the AfriNIC address blocks: 9681 AfriNIC Region origin ASes present in the Internet Routing Table: 1340 AfriNIC Prefixes per ASN: 23.43 AfriNIC Region origin ASes announcing only one prefix: 476 AfriNIC Region transit ASes present in the Internet Routing Table: 261 Average AfriNIC Region AS path length visible: 4.9 Max AfriNIC Region AS path length visible: 23 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 621 Number of AfriNIC addresses announced to Internet: 105975040 Equivalent to 6 /8s, 81 /16s and 13 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5064 629 600 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4688 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3238 1331 26 VIETEL-AS-AP Viettel Group, VN 45899 3078 1771 107 VNPT-AS-VN VNPT Corp, VN 7713 2621 800 483 TELKOMNET-AS-AP PT Telekomunikasi Indon 9808 2611 9043 63 CMNET-GD Guangdong Mobile Communication 9829 2541 1495 530 BSNL-NIB National Internet Backbone, IN 4766 2523 11121 750 KIXS-AS-KR Korea Telecom, KR 9498 2198 433 209 BBIL-AP BHARTI Airtel Ltd., IN 4755 2147 442 197 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7155 4056 280 27 VIASAT-SP-BACKBONE - ViaSat,Inc., US 11492 3777 308 116 CABLEONE - CABLE ONE, INC., US 22773 3483 2970 155 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 6327 3391 1324 93 SHAW - Shaw Communications Inc., CA 16509 3216 7155 1544 AMAZON-02 - Amazon.com, Inc., US 16625 2850 1502 2043 AKAMAI-AS - Akamai Technologies, Inc., 30036 2232 353 127 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 20115 2133 2769 517 CHARTER-20115 - Charter Communications, 18566 2073 405 104 MEGAPATH5-US - MegaPath Corporation, US 5650 2062 3073 1454 FRONTIER-FRTR - Frontier Communications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5606 1617 135 UNI2-AS, ES 39891 4034 219 19 ALJAWWALSTC-AS, SA 8551 2961 379 46 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2779 480 1944 AKAMAI-ASN1, US 31334 2614 484 13 KABELDEUTSCHLAND-AS, DE 12389 2404 2232 691 ROSTELECOM-AS, RU 9121 2164 1692 18 TTNET, TR 34984 2160 350 535 TELLCOM-AS, TR 9009 1873 205 1029 M247, GB 13188 1604 100 47 TRIOLAN, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6298 3353 590 Uninet S.A. de C.V., MX 10620 3363 534 452 Telmex Colombia S.A., CO 11830 2698 370 54 Instituto Costarricense de Electricidad 6503 1710 346 389 Axtel, S.A.B. de C.V., MX 7303 1477 1024 276 Telecom Argentina S.A., AR 28573 1183 2232 194 CLARO S.A., BR 13999 1098 491 243 Mega Cable, S.A. de C.V., MX 6147 1089 380 37 Telefonica del Peru S.A.A., PE 3816 1074 558 132 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 933 110 59 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1170 393 23 LINKdotNET-AS, EG 36992 1045 1535 73 ETISALAT-MISR, EG 24835 972 618 25 RAYA-AS, EG 36903 868 438 95 MT-MPLS, MA 8452 670 1857 19 TE-AS TE-AS, EG 6713 626 1863 34 IAM-AS, MA 29571 530 68 11 ORANGE-COTE-IVOIRE, CI 15399 410 45 10 WANANCHI-, KE 37342 379 32 1 MOVITEL, MZ 23889 366 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6298 3353 590 Uninet S.A. de C.V., MX 12479 5606 1617 135 UNI2-AS, ES 7545 5064 629 600 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4688 4192 74 ERX-CERNET-BKB China Education and Rese 7155 4056 280 27 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 4034 219 19 ALJAWWALSTC-AS, SA 11492 3777 308 116 CABLEONE - CABLE ONE, INC., US 22773 3483 2970 155 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 6327 3391 1324 93 SHAW - Shaw Communications Inc., CA 10620 3363 534 452 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 5606 5471 UNI2-AS, ES 4538 4688 4614 ERX-CERNET-BKB China Education and Research Net 7545 5064 4464 TPG-INTERNET-AP TPG Telecom Limited, AU 7155 4056 4029 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 4034 4015 ALJAWWALSTC-AS, SA 11492 3777 3661 CABLEONE - CABLE ONE, INC., US 22773 3483 3328 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 6327 3391 3298 SHAW - Shaw Communications Inc., CA 7552 3238 3212 VIETEL-AS-AP Viettel Group, VN 45899 3078 2971 VNPT-AS-VN VNPT Corp, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 64501 DOCUMENT 45.174.25.0/24 267817 UNKNOWN 260984 UNALLOCATED 45.175.186.0/23 16735 ALGAR TELECOM S/A, BR 269458 UNALLOCATED 45.186.192.0/22 266525 MAX TELECOMUNICACOES LTDA - ME 269458 UNALLOCATED 45.186.192.0/23 266525 MAX TELECOMUNICACOES LTDA - ME 269458 UNALLOCATED 45.186.194.0/23 266525 MAX TELECOMUNICACOES LTDA - ME 269467 UNALLOCATED 45.187.140.0/22 53062 G G NET - Telecomunicações LTD 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65550 DOCUMENT 81.8.34.0/24 15924 BORUSANTELEKOM-AS, TR 65550 DOCUMENT 81.8.35.0/24 15924 BORUSANTELEKOM-AS, TR Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 23.136.224.0/24 15206 6X7 - 6x7 Networks LLC, ZZ 27.100.7.0/24 56096 UNKNOWN 27.126.156.0/22 55827 UNKNOWN 27.126.156.0/23 55827 UNKNOWN 27.126.158.0/23 55827 UNKNOWN 41.67.192.0/18 15964 CAMNET-AS, CM 41.67.192.0/24 15964 CAMNET-AS, CM 41.67.200.0/24 15964 CAMNET-AS, CM 41.67.201.0/24 15964 CAMNET-AS, CM 41.67.202.0/24 15964 CAMNET-AS, CM Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:10 /9:11 /10:38 /11:100 /12:291 /13:573 /14:1150 /15:1927 /16:13312 /17:8090 /18:13776 /19:25728 /20:40118 /21:47473 /22:97474 /23:78981 /24:449561 /25:1548 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 4565 5606 UNI2-AS, ES 6327 3178 3391 SHAW - Shaw Communications Inc., CA 7155 3148 4056 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 2946 4034 ALJAWWALSTC-AS, SA 11492 2922 3777 CABLEONE - CABLE ONE, INC., US 22773 2708 3483 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 31334 2470 2614 KABELDEUTSCHLAND-AS, DE 8551 2420 2961 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11830 2045 2698 Instituto Costarricense de Electricidad y Telec 8151 2014 6298 Uninet S.A. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1541 2:1124 3:6 4:21 5:3113 6:49 7:1 8:1371 9:1 12:1793 13:425 14:2142 15:52 16:7 17:272 18:78 20:56 23:2985 24:2601 25:4 27:2487 31:2760 32:105 35:36 36:921 37:3171 38:1786 39:305 40:126 41:3377 42:638 43:2096 44:184 45:11782 46:3319 47:269 49:1434 50:1129 51:348 52:1067 54:261 55:728 56:6 57:48 58:2035 59:1102 60:631 61:2213 62:2123 63:1883 64:4998 65:2264 66:4855 67:2734 68:1215 69:3619 70:1389 71:672 72:2713 74:2686 75:1291 76:594 77:2562 78:2001 79:2182 80:1823 81:1525 82:1187 83:959 84:1195 85:2417 86:568 87:1602 88:1122 89:2596 90:244 91:6687 92:1440 93:2464 94:2563 95:3680 96:954 97:338 98:955 99:830 100:82 101:1090 102:686 103:22462 104:3657 105:335 106:831 107:1828 108:683 109:3614 110:1802 111:2035 112:1566 113:1381 114:1468 115:1814 116:1807 117:1969 118:2176 119:1666 120:1086 121:1057 122:2303 123:1858 124:1534 125:2014 128:1402 129:882 130:543 131:1811 132:765 133:241 134:1105 135:261 136:586 137:825 138:2122 139:965 140:659 141:892 142:778 143:1094 144:907 145:284 146:1435 147:927 148:1871 149:1029 150:828 151:1287 152:1430 153:364 154:4403 155:892 156:2796 157:1060 158:704 159:1950 160:1640 161:1035 162:3019 163:865 164:1300 165:1157 166:526 167:1446 168:3594 169:487 170:4207 171:707 172:1767 173:2304 174:1035 175:1004 176:2546 177:4137 178:2783 179:1443 180:2171 181:2392 182:2820 183:1121 184:2288 185:15714 186:3805 187:2579 188:3417 189:2073 190:8292 191:1498 192:10118 193:6863 194:5579 195:4175 196:3185 197:1799 198:6063 199:5960 200:7142 201:5155 202:10446 203:10206 204:4586 205:3087 206:3233 207:3266 208:3967 209:4296 210:3952 211:2037 212:3317 213:2957 214:1157 215:54 216:5874 217:2281 218:888 219:604 220:1922 221:971 222:1017 223:1394 End of report

1 0

Re: Cloudflare "Magic" IP Transit
by Mike 25 Oct '19

25 Oct '19

On 10/25/19 8:43 AM, Mike Hammett wrote: > Is the pricing any different if PNI or an IX is used for the hand-off > instead of GRE? > > DDoS-filtered transit is generally expensive, compared to not-filtered > transit. > More expensive, by leaps and bounds. Don't know who could or would possibly pay these prices but we're out for sure. I just find it soooooo hypocritical that cloudflare actively protects the very DDOS / Booter services that were being used to order DDOS hits against our customer networks in the first place. They have this to state: https://www.cloudflare.com/learning/ddos/ddos-attack-tools/ddos-booter-ip-s… > > Why are booter services hard to trace? > > The person buying these criminal services uses a frontend website for > payment, and instructions relating to the attack. Very often there is > no identifiable connection to the backend initiating the actual > attack. Therefore, criminal intent can be hard to prove. Following the > payment trail is one way to track down criminal entities. > Well guess what cloudflare? Thats a very good idea. Please open your books and allow us to 'follow the payment trail'.... And a quick google shows up first result, and a cloudflare protected site: https://str3ssed.co Ugh.

2 1