Drop in IPv6 traffic
Hi, I've seen a big drop in IPv6 traffic volume on our Freenet6 IPv6 service last night and it seems to be the same on AMS-IX. Has anyone else seen the same? Any idea why? Thanks, Mikael
On 9 jul 2009, at 12:24, Mikael Lind wrote:
Hi, I've seen a big drop in IPv6 traffic volume on our Freenet6 IPv6 service last night and it seems to be the same on AMS-IX. Has anyone else seen the same? Any idea why?
Multiple options, but it must have something todo with a free usenet service. We (XS4ALL, AS3265) changed some filters at around 15:00 GMT, but I notice the drop is hours later and much bigger (se the graph at https://www.ams-ix.net/technical/stats/sflow/) . If you have trouble reaching newszilla6.xs4all.nl at port 119 please drop me a note as you might accidently got filtered and I'm happy to resolve this. From the looks of it one of our colleagues who also run a free usenet box have some issues as well, news.ipv6.eweka.nl isn't responding, which may well be the only cause of this little drop. Groet, MarcoH
Same here, we usually do 40-100Mbit of teredo 2001::/32 anycast traffic (a lot of which is news traffic over IPv6 to artrato/XSnews) and that dropped to an all-time low a bit before 0:00 CET. I know XSnews had a free IPv6 news account service, perhaps they closed that ? Marco Hogewoning wrote:
On 9 jul 2009, at 12:24, Mikael Lind wrote:
Hi, I've seen a big drop in IPv6 traffic volume on our Freenet6 IPv6 service last night and it seems to be the same on AMS-IX. Has anyone else seen the same? Any idea why?
Multiple options, but it must have something todo with a free usenet service.
We (XS4ALL, AS3265) changed some filters at around 15:00 GMT, but I notice the drop is hours later and much bigger (se the graph at https://www.ams-ix.net/technical/stats/sflow/).
If you have trouble reaching newszilla6.xs4all.nl at port 119 please drop me a note as you might accidently got filtered and I'm happy to resolve this.
From the looks of it one of our colleagues who also run a free usenet box have some issues as well, news.ipv6.eweka.nl isn't responding, which may well be the only cause of this little drop.
Groet,
MarcoH
-- Met vriendelijke groet, Jeroen Wunnink, EasyHosting B.V. Systeembeheerder systeembeheer@easyhosting.nl telefoon:+31 (035) 6285455 Postbus 48 fax: +31 (035) 6838242 3755 ZG Eemnes http://www.easyhosting.nl http://www.easycolocate.nl
Jeroen Wunnink wrote:
Same here, we usually do 40-100Mbit of teredo 2001::/32 anycast traffic (a lot of which is news traffic over IPv6 to artrato/XSnews) and that dropped to an all-time low a bit before 0:00 CET.
I know XSnews had a free IPv6 news account service, perhaps they closed that ?
Assuming that the graph at http://www.xsnews.com/ipv6/ isnt broken for any other reason, you may well be right Vince
Marco Hogewoning wrote:
On 9 jul 2009, at 12:24, Mikael Lind wrote:
Hi, I've seen a big drop in IPv6 traffic volume on our Freenet6 IPv6 service last night and it seems to be the same on AMS-IX. Has anyone else seen the same? Any idea why?
Multiple options, but it must have something todo with a free usenet service.
We (XS4ALL, AS3265) changed some filters at around 15:00 GMT, but I notice the drop is hours later and much bigger (se the graph at https://www.ams-ix.net/technical/stats/sflow/).
If you have trouble reaching newszilla6.xs4all.nl at port 119 please drop me a note as you might accidently got filtered and I'm happy to resolve this.
From the looks of it one of our colleagues who also run a free usenet box have some issues as well, news.ipv6.eweka.nl isn't responding, which may well be the only cause of this little drop.
Groet,
MarcoH
Just spoke with Michiel of Atrato / XSnews, they had some issues with an internal part of XSnews which also affected their IPv6 enabled services. Jeroen Wunnink wrote:
Same here, we usually do 40-100Mbit of teredo 2001::/32 anycast traffic (a lot of which is news traffic over IPv6 to artrato/XSnews) and that dropped to an all-time low a bit before 0:00 CET.
I know XSnews had a free IPv6 news account service, perhaps they closed that ?
Marco Hogewoning wrote:
On 9 jul 2009, at 12:24, Mikael Lind wrote:
Hi, I've seen a big drop in IPv6 traffic volume on our Freenet6 IPv6 service last night and it seems to be the same on AMS-IX. Has anyone else seen the same? Any idea why?
Multiple options, but it must have something todo with a free usenet service.
We (XS4ALL, AS3265) changed some filters at around 15:00 GMT, but I notice the drop is hours later and much bigger (se the graph at https://www.ams-ix.net/technical/stats/sflow/).
If you have trouble reaching newszilla6.xs4all.nl at port 119 please drop me a note as you might accidently got filtered and I'm happy to resolve this.
From the looks of it one of our colleagues who also run a free usenet box have some issues as well, news.ipv6.eweka.nl isn't responding, which may well be the only cause of this little drop.
Groet,
MarcoH
-- Met vriendelijke groet, Jeroen Wunnink, EasyHosting B.V. Systeembeheerder systeembeheer@easyhosting.nl telefoon:+31 (035) 6285455 Postbus 48 fax: +31 (035) 6838242 3755 ZG Eemnes http://www.easyhosting.nl http://www.easycolocate.nl
Hi Jeroen & others, Yep, looks like we are doing a great portion of AMSIX's IPv6 traffic and our (free) IPv6 service was affected because of an internal error last night around 00.30 am. I'll put it up in a few hours for you free leechers :-) Cheers, Michiel
Just spoke with Michiel of Atrato / XSnews, they had some issues with an internal part of XSnews which also affected their IPv6 enabled services.
Jeroen Wunnink wrote:
Same here, we usually do 40-100Mbit of teredo 2001::/32 anycast traffic (a lot of which is news traffic over IPv6 to artrato/XSnews) and that dropped to an all-time low a bit before 0:00 CET.
I know XSnews had a free IPv6 news account service, perhaps they closed that ?
Marco Hogewoning wrote:
On 9 jul 2009, at 12:24, Mikael Lind wrote:
Hi, I've seen a big drop in IPv6 traffic volume on our Freenet6 IPv6 service last night and it seems to be the same on AMS-IX. Has anyone else seen the same? Any idea why?
Multiple options, but it must have something todo with a free usenet service.
We (XS4ALL, AS3265) changed some filters at around 15:00 GMT, but I notice the drop is hours later and much bigger (se the graph at https://www.ams-ix.net/technical/stats/sflow/).
If you have trouble reaching newszilla6.xs4all.nl at port 119 please drop me a note as you might accidently got filtered and I'm happy to resolve this.
From the looks of it one of our colleagues who also run a free usenet box have some issues as well, news.ipv6.eweka.nl isn't responding, which may well be the only cause of this little drop.
Groet,
MarcoH
--
Met vriendelijke groet,
Jeroen Wunnink, EasyHosting B.V. Systeembeheerder systeembeheer@easyhosting.nl
telefoon:+31 (035) 6285455 Postbus 48 fax: +31 (035) 6838242 3755 ZG Eemnes
On Jul 9, 2009, at 9:58 AM, michiel.muhlenbaumer@atratoip.net wrote:
Hi Jeroen & others,
Yep, looks like we are doing a great portion of AMSIX's IPv6 traffic and our (free) IPv6 service was affected because of an internal error last night around 00.30 am.
Michiel, Thank you for the information. Could you let us know if XS4All's free v6 news feed went to zero, or was just dropped by some percentage? I ask because the AMS-IX is frequently used as an example that v6 is being heavily adopted. If it is all one source for one application, that is important information to the people fighting for v6 adoption. Going from peaks of 1.4 Gbps to 0.4 Gbps is impressive. If that 0.4 Gbps still includes some of your traffic, it is very impressive. -- TTFN, patrick
I'll put it up in a few hours for you free leechers :-)
Cheers, Michiel
Just spoke with Michiel of Atrato / XSnews, they had some issues with an internal part of XSnews which also affected their IPv6 enabled services.
Jeroen Wunnink wrote:
Same here, we usually do 40-100Mbit of teredo 2001::/32 anycast traffic (a lot of which is news traffic over IPv6 to artrato/XSnews) and that dropped to an all-time low a bit before 0:00 CET.
I know XSnews had a free IPv6 news account service, perhaps they closed that ?
Marco Hogewoning wrote:
On 9 jul 2009, at 12:24, Mikael Lind wrote:
Hi, I've seen a big drop in IPv6 traffic volume on our Freenet6 IPv6 service last night and it seems to be the same on AMS-IX. Has anyone else seen the same? Any idea why?
Multiple options, but it must have something todo with a free usenet service.
We (XS4ALL, AS3265) changed some filters at around 15:00 GMT, but I notice the drop is hours later and much bigger (se the graph at https://www.ams-ix.net/technical/stats/sflow/).
If you have trouble reaching newszilla6.xs4all.nl at port 119 please drop me a note as you might accidently got filtered and I'm happy to resolve this.
From the looks of it one of our colleagues who also run a free usenet box have some issues as well, news.ipv6.eweka.nl isn't responding, which may well be the only cause of this little drop.
Groet,
MarcoH
--
Met vriendelijke groet,
Jeroen Wunnink, EasyHosting B.V. Systeembeheerder systeembeheer@easyhosting.nl
telefoon:+31 (035) 6285455 Postbus 48 fax: +31 (035) 6838242 3755 ZG Eemnes
Hi Patrick , On 9 jul 2009, at 16:10, Patrick W. Gilmore wrote:
On Jul 9, 2009, at 9:58 AM, michiel.muhlenbaumer@atratoip.net wrote:
Hi Jeroen & others,
Yep, looks like we are doing a great portion of AMSIX's IPv6 traffic and our (free) IPv6 service was affected because of an internal error last night around 00.30 am.
Michiel,
Thank you for the information. Could you let us know if XS4All's free v6 news feed went to zero, or was just dropped by some percentage?
Please note Michiel isn't from XS4ALL :) We (XS4ALL) did not have any outage on the usenet service, everything is still running and passing traffic. The only thing we did was adjust some filters so if you are depend on more specifics and not announcing the /32 you might have been dropped from the table around 15:00 GMT. The remaining traffic at ams-ix matches our internal graphs, so I guess I'm the only bulk sender at the moment.
I ask because the AMS-IX is frequently used as an example that v6 is being heavily adopted. If it is all one source for one application, that is important information to the people fighting for v6 adoption. Going from peaks of 1.4 Gbps to 0.4 Gbps is impressive. If that 0.4 Gbps still includes some of your traffic, it is very impressive.
There are 3 open usenet servers at amsterdam that I know off: - XS4ALL (at newszilla6.xs4all.nl) - Highwinds/Eweka (news.ipv6.eweka.nl) - XSnews I think we, once again, have proof 99% of the ams-ix traffic. The remaining bit possibly is google and the traffic on this mailinglist (and ripe.net). As an exercise we could see if spikes in nanog activity can be matched to spikes in the v6 traffic :) Groet, MarcoH
Michiel,
Thank you for the information. Could you let us know if XS4All's free v6 news feed went to zero, or was just dropped by some percentage?
I ask because the AMS-IX is frequently used as an example that v6 is being heavily adopted. If it is all one source for one application, that is important information to the people fighting for v6 adoption. Going from peaks of 1.4 Gbps to 0.4 Gbps is impressive. If that 0.4 Gbps still includes some of your traffic, it is very impressive.
-- TTFN, patrick
Hi Patrick, The XS4All IPv6 service is run by .. XS4All. We (XS News) run a separate service and we were responsible for the drop from ~950Mbit IPv6 traffic to 300M IPv6 traffic at 00.30 AM last night. I'll put the service up again (wasn't notified) and we can continue adopting IPv6 again ;) Cheers, Michiel
If I look at a tcpdump of our teredo relay which is announced to all our AMS-IX peers (and some partial and full transits), there's a lot of nntp and quite some torrent packets going over there, so it seems the majority of IPv6 traffic is due to content providers like XSnews providing 'freebies' to what otherwise would be a paid service. We've seen the same with our Eweka/Highwinds partial transit, once we announce 2001::/32 there, there's suddenly a big increase in traffic over our teredo from other exchange points prefixes we get from them, heading to free IPv6 news services some dutch providers hand out. Also, coincedence ?: http://www.sixxs.net/misc/traffic/ Patrick W. Gilmore wrote:
On Jul 9, 2009, at 9:58 AM, michiel.muhlenbaumer@atratoip.net wrote:
Hi Jeroen & others,
Yep, looks like we are doing a great portion of AMSIX's IPv6 traffic and our (free) IPv6 service was affected because of an internal error last night around 00.30 am.
Michiel,
Thank you for the information. Could you let us know if XS4All's free v6 news feed went to zero, or was just dropped by some percentage?
I ask because the AMS-IX is frequently used as an example that v6 is being heavily adopted. If it is all one source for one application, that is important information to the people fighting for v6 adoption. Going from peaks of 1.4 Gbps to 0.4 Gbps is impressive. If that 0.4 Gbps still includes some of your traffic, it is very impressive.
-- Met vriendelijke groet, Jeroen Wunnink, EasyHosting B.V. Systeembeheerder systeembeheer@easyhosting.nl telefoon:+31 (035) 6285455 Postbus 48 fax: +31 (035) 6838242 3755 ZG Eemnes http://www.easyhosting.nl http://www.easycolocate.nl
Freenet6 went from about 200Mb/s to less than 10Mb/s when we lost both XSnews and XS4all. I thought it would be more torrent traffic but I guess we now know what it actually is. Cheers, Mikael On Thu, Jul 9, 2009 at 4:34 PM, Jeroen Wunnink <jeroen@easyhosting.nl>wrote:
If I look at a tcpdump of our teredo relay which is announced to all our AMS-IX peers (and some partial and full transits), there's a lot of nntp and quite some torrent packets going over there, so it seems the majority of IPv6 traffic is due to content providers like XSnews providing 'freebies' to what otherwise would be a paid service.
We've seen the same with our Eweka/Highwinds partial transit, once we announce 2001::/32 there, there's suddenly a big increase in traffic over our teredo from other exchange points prefixes we get from them, heading to free IPv6 news services some dutch providers hand out.
Also, coincedence ?: http://www.sixxs.net/misc/traffic/
Patrick W. Gilmore wrote: [..]
I ask because the AMS-IX is frequently used as an example that v6 is being heavily adopted. If it is all one source for one application, that is important information to the people fighting for v6 adoption. Going from peaks of 1.4 Gbps to 0.4 Gbps is impressive. If that 0.4 Gbps still includes some of your traffic, it is very impressive.
I thought it was well known that 99% of the Internet was for warez & p0rn.... In the case of IPv6 (and mostly the reason why "normal people" sign up for Tunnel brokers), the most traffic is NNTP because of "free news servers" (google for it, you'll find loads of tutorials) oh and BitTorrent is also a nice hefty piece. I also though that this was already 'revealed' in several presentations where people actually looked at was going through their boxes. Fortunately there are also people who realize that IPv6 can be used for connecting to all the boxes at home. /me always wonders about: http://arstechnica.com/tech-policy/news/2009/07/judge-throws-book-at-usenetc... when he sees ISPs selling basically a fast link to a NNTP server thoug Greets, Jeroen
On Jul 9, 2009, at 10:40 AM, Jeroen Massar wrote:
Patrick W. Gilmore wrote: [..]
I ask because the AMS-IX is frequently used as an example that v6 is being heavily adopted. If it is all one source for one application, that is important information to the people fighting for v6 adoption. Going from peaks of 1.4 Gbps to 0.4 Gbps is impressive. If that 0.4 Gbps still includes some of your traffic, it is very impressive.
I thought it was well known that 99% of the Internet was for warez & p0rn....
As with many things, what is "well known" is factually incorrect. :) YouTube, every Akamai customer, Yahoo!, other Google properties, etc., make up more than 1%, and none of those are pr0n or war3z.
In the case of IPv6 (and mostly the reason why "normal people" sign up for Tunnel brokers), the most traffic is NNTP because of "free news servers" (google for it, you'll find loads of tutorials) oh and BitTorrent is also a nice hefty piece.
I also though that this was already 'revealed' in several presentations where people actually looked at was going through their boxes.
I ask here because I have seen presentations at NANOG showing that v6 is growing and citing these graphs as evidence. When asking / commenting that most of that traffic is NNTP, I was told that was not confirmed. Guess I got my confirmation. :) -- TTFN, patrick
Fortunately there are also people who realize that IPv6 can be used for connecting to all the boxes at home.
/me always wonders about: http://arstechnica.com/tech-policy/news/2009/07/judge-throws-book-at-usenetc... when he sees ISPs selling basically a fast link to a NNTP server thoug
Greets, Jeroen
participants (7)
-
Jeroen Massar -
Jeroen Wunnink -
Marco Hogewoning -
michiel.muhlenbaumer＠atratoip.net -
Mikael Lind -
Patrick W. Gilmore -
Vincent Hoffman