On 2013-04-07 02:20, Constantine A. Murenin wrote:
Although hetzner.de claims that this whole loss is outside of their own network, I'm inclined to deduce that the loss might actually be concentrated on their own KPN / eurorings.net router -- kpn-gw.hetzner.de (134.222.107.21), and perhaps occurs only in one direction.
I think too. Btw as i said, have host on tinet, and it is 100% clear from EC2. So seems tinet is fine for sure. HOST: ip-10-203-61-X Snt Rcv Loss% Best Gmean Avg Wrst StDev 1.|-- ip-10-203-60-2.ec2.internal 60 60 0.0% 0.3 0.6 1.1 19.1 2.7 2.|-- ip-10-1-36-21.ec2.internal 60 60 0.0% 0.4 0.6 0.8 9.3 1.3 3.|-- ip-10-1-34-0.ec2.internal 60 60 0.0% 0.4 0.7 1.0 14.5 2.0 4.|-- 100.64.20.43 60 60 0.0% 0.4 0.6 0.6 2.0 0.2 5.|-- ??? 60 0 100.0 0.0 0.0 0.0 0.0 0.0 6.|-- ??? 60 0 100.0 0.0 0.0 0.0 0.0 0.0 7.|-- ??? 60 0 100.0 0.0 0.0 0.0 0.0 0.0 8.|-- 100.64.16.157 60 60 0.0% 0.5 2.4 9.7 68.8 16.1 9.|-- 72.21.222.154 60 60 0.0% 1.5 1.9 2.6 36.4 4.8 10.|-- 72.21.220.46 60 60 0.0% 1.5 2.1 3.3 59.2 7.6 11.|-- xe-7-2-0.was10.ip4.tinet.net 60 60 0.0% 1.6 2.1 2.6 17.2 3.1 12.|-- xe-0-1-0.fra23.ip4.tinet.net 60 60 0.0% 92.2 92.8 92.8 104.3 1.9 13.|-- ge-1-1-0.pr1.g310.fra.de.eurotransit.net 60 60 0.0% 92.2 93.1 93.2 112.8 3.3 14.|-- ??? 60 0 100.0 0.0 0.0 0.0 0.0 0.0 last hop icmp blocked, it is my host
Although there is no traffic loss from he.net if you try to traceroute the router itself (I'm not sure what that means, though, other than a potential attack vector from exposing a router globally like that):
I don't think there is attack vector, proper control plane ACL will make them safe.
I've been a fan of hetzner.de, but I think it's staggering that they won't do anything about this huge and persistent packet loss. Indeed, i noticed that transfers from EC2 are terrible last days to Hetzner.
Maybe worth to open topic at www.webhostingtalk.com ?
Best regards, Constantine.
--- Denys Fedoryshchenko, Network Engineer, Virtual ISP S.A.L.