RE: /24s run amuck again
At 14:10 09/06/01 -0400, Richard A. Steenbergen wrote:
11371 307 Rhythms NetConnections
Email sent to gharmon@rhythms.net, cgreen@rhythms.net, doroberts@rhythms.net on Feb 8 - no response.
3491 651 CAIS Internet
DSL providers are becoming very bad about this. Someone pointed out to me off list that CAIS had carved up PSI's /8 into over 500 /24s.
690 502 Merit Network
Well at least we don't have to go too far to find the guilty party. :P
18994 468 Global Crossing 15870 436 Global Center Frankfurt 18993 325 Global Crossing
Those are the GlobalCenter datacenters being converted into the Exodus network. It looks like they are leaking a sizable number of /32s /30s etc, and since its GBLX space I'm assuming its stuff that used to be aggregated into a single announcement.
Email sent to: ipadmin@gblx.net, huberman@gblx.net, ip-eng@gblx.net, scarter@gblx.net, bgp@gblx.net, bp@gblx.net on June 4 - everyone responded that the problem was forwarded to Exodus and from there it disappeared into a black hole. Basically, after having sent out dozens of emails over the past 6 months I have come to the conclusion that there are a few out there that will fix things when presented with the problem. But the vast majority either don't have a clue, don't want to have a clue or couldn't give a damn that the routing tables are increasing in size. -Hank
There is no attempt to measure aggregation - that's the job of the CIDR Report. This simply looks at the prefix announced and if it is outside the above limits, it is counted. Makes very interesting reading...
The one interesting pattern I noticed in the rampant /24 abuse was non- contiguous announcements. It's likely that this kept them off the CIDR Report and any other scans which only looked for contiguous announcements. For example:
1.2.3.0/24 1.2.5.0/24 1.2.7/0.24
-- Richard A Steenbergen <ras@e-gerbil.net> http://www.e-gerbil.net/ras PGP Key ID: 0x138EA177 (67 29 D7 BC E8 18 3E DA B2 46 B3 D8 14 36 FE B6)
On Sun, 10 Jun 2001, Hank Nussbacher wrote:
Basically, after having sent out dozens of emails over the past 6 months I have come to the conclusion that there are a few out there that will fix things when presented with the problem. But the vast majority either don't have a clue, don't want to have a clue or couldn't give a damn that the routing tables are increasing in size.
Behaviour modification can probably be achieved through negative publicity. Just need a couple of newswires to pick up a story like "tier1 laziness causes routing table bloat", and name the top 10 worst offenders. -Dan
On Sun, 10 Jun 2001, Dan Hollis wrote:
On Sun, 10 Jun 2001, Hank Nussbacher wrote:
Basically, after having sent out dozens of emails over the past 6 months I have come to the conclusion that there are a few out there that will fix things when presented with the problem. But the vast majority either don't have a clue, don't want to have a clue or couldn't give a damn that the routing tables are increasing in size.
Behaviour modification can probably be achieved through negative publicity. Just need a couple of newswires to pick up a story like "tier1 laziness causes routing table bloat", and name the top 10 worst offenders.
Actually the "tier 1"'s aren't responsible for most of it, but they allow it from their customers. The ones responsible are the tier 2's, the DSL providers, and those just large enough to make an impact on the internet but just small and stupid enough to not make it a good one. It would be nice if some of the tier 1's could put some pressure on their customers. Does anyone actually want to get off their butts and do this? -- Richard A Steenbergen <ras@e-gerbil.net> http://www.e-gerbil.net/ras PGP Key ID: 0x138EA177 (67 29 D7 BC E8 18 3E DA B2 46 B3 D8 14 36 FE B6)
On Sun, 10 Jun 2001, Hank Nussbacher wrote:
18994 468 Global Crossing 15870 436 Global Center Frankfurt 18993 325 Global Crossing
Those are the GlobalCenter datacenters being converted into the Exodus network. It looks like they are leaking a sizable number of /32s /30s etc, and since its GBLX space I'm assuming its stuff that used to be aggregated into a single announcement.
Email sent to: ipadmin@gblx.net, huberman@gblx.net, ip-eng@gblx.net, scarter@gblx.net, bgp@gblx.net, bp@gblx.net on June 4 - everyone responded that the problem was forwarded to Exodus and from there it disappeared into a black hole.
Yes. This is part of the Exodus purchase of Global Center from Global Crossing. It is being worked on as we speak. Customers are renumbering... Fun! Exodus does care and Exodus is working on this problem. Ever try to get 500 customers to renumber? :) Hope that helps. Christian
On Sun, 10 Jun 2001, Christian Nielsen wrote:
Exodus does care and Exodus is working on this problem. Ever try to get 500 customers to renumber? :)
If all they had was 500 it would not be that hard, and yes I have worked in a transistion of 500 customers that had to renumber. Take a few months, and a few will leave, but are we sure that this is going to be addressed, simply by a new owner? There could be a justification for the action, although I think that filtering based on the RIR allocation would be an quick and easy fix... but that is part of this thread already...
On Sun, 10 Jun 2001, Christian Nielsen wrote:
On Sun, 10 Jun 2001, Hank Nussbacher wrote:
18994 468 Global Crossing 15870 436 Global Center Frankfurt 18993 325 Global Crossing
Those are the GlobalCenter datacenters being converted into the Exodus network. It looks like they are leaking a sizable number of /32s /30s etc, and since its GBLX space I'm assuming its stuff that used to be aggregated into a single announcement.
Email sent to: ipadmin@gblx.net, huberman@gblx.net, ip-eng@gblx.net, scarter@gblx.net, bgp@gblx.net, bp@gblx.net on June 4 - everyone responded that the problem was forwarded to Exodus and from there it disappeared into a black hole.
Yes. This is part of the Exodus purchase of Global Center from Global Crossing. It is being worked on as we speak. Customers are renumbering... Fun!
Exodus does care and Exodus is working on this problem. Ever try to get 500 customers to renumber? :)
We renumbered last weekend. Oi vey, my head still hurts. But three /24's will be disappearing from that this weekend.... -j -- -Jonathan Disher -Sr. Systems and Network Engineer, Web Operations -Internet Pictures Corporation, Palo Alto, CA -[v] (650) 388-0497 | [p] (877) 446-9311 | [e] jdisher@eng.ipix.com
participants (6)
-
Christian Nielsen -
Dan Hollis -
Hank Nussbacher -
Jonathan Disher -
Michael Whisenant -
Richard A. Steenbergen