Say, our alarms went off tonight when we saw a roughly tenfold spike in BGP prefix announcement and withdrawal rates at RIPE's rrc00 and rrc03 collection points in Amsterdam. The trouble started around 20:00 GMT, hit its peak by about 21:00 GMT, and has trailed off slowly since then. Looking at the worst-behaved prefixes and AS paths led me to put in a call to the tech support center of an unnamed Major Provider, who confirmed that there had been a major BGP event but would provide no specifics. So, what's going on out there in the NOCs tonight? Inquiring minds want to know. --jim
On Sun, Oct 07, 2001 at 10:36:49PM -0400, cowie@renesys.com wrote:
Say, our alarms went off tonight when we saw a roughly tenfold spike in BGP prefix announcement and withdrawal rates at RIPE's rrc00 and rrc03 collection points in Amsterdam. The trouble started around 20:00 GMT, hit its peak by about 21:00 GMT, and has trailed off slowly since then.
Looking at the worst-behaved prefixes and AS paths led me to put in a call to the tech support center of an unnamed Major Provider, who confirmed that there had been a major BGP event but would provide no specifics.
So, what's going on out there in the NOCs tonight? Inquiring minds want to know. --jim
Another poison route taking down sessions to RFC-compliant routers, it looks like. At least, we reset sessions on all of our routers that reset last time due to this issue, and not a flinch on $VENDOR's routers that are known to disobey the RFC. All of our (Tier 1, for whatever value you see it) upstreams saw it throughout their networks; this would explain the exceedingly high BGP levels, even discounting the "fragile" edge. -- *************************************************************************** Joel Baker System Administrator - lightbearer.com lucifer@lightbearer.com http://users.lightbearer.com/lucifer/
On Sun, 7 Oct 2001 cowie@renesys.com wrote:
collection points in Amsterdam. The trouble started around 20:00 GMT, hit its peak by about 21:00 GMT, and has trailed off slowly since then.
Looking at the worst-behaved prefixes and AS paths led me to put in a call to the tech support center of an unnamed Major Provider, who confirmed that there had been a major BGP event but would provide no specifics.
I suspect that was C&W. I talked to them with a customer of theirs while we tried to figure out what was going on. We weren't able to get any details from them other than "something bad in the global table, switch to customer routes and we can keep your session up." So we did that. -- ---------------------------------------------------------------------- Jon Lewis *jlewis@lewis.org*| I route System Administrator | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 %BGP-6-ASPATH: Invalid AS path xxx 3300 (64603) 2008 received from x.x.x.x: Confederation AS-path found in the middle provider x'd out to protect the innocent, but saw this from ALL ebgp peers. Thankfully our main vendor included a knob to emulate cisco's brokenness, so we magically stayed up. Regards, Matt - -- Matt Levine @Home: matt@deliver3.com @Work: matt@eldosales.com ICQ : 17080004 PGP : http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x6C0D04CF "The Trouble with doing anything right the first time is that nobody appreciates how difficult it was." - -----Original Message----- From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of cowie@renesys.com Sent: Sunday, October 07, 2001 7:37 PM To: nanog@merit.edu Cc: cowie@renesys.com Subject: BGP noise tonight? Say, our alarms went off tonight when we saw a roughly tenfold spike in BGP prefix announcement and withdrawal rates at RIPE's rrc00 and rrc03 collection points in Amsterdam. The trouble started around 20:00 GMT, hit its peak by about 21:00 GMT, and has trailed off slowly since then. Looking at the worst-behaved prefixes and AS paths led me to put in a call to the tech support center of an unnamed Major Provider, who confirmed that there had been a major BGP event but would provide no specifics. So, what's going on out there in the NOCs tonight? Inquiring minds want to know. --jim -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com> iQA/AwUBO8EqQMp0j1NsDQTPEQI33gCdFsTtzmzUJTBg0e0Hzr+S2fiYhIIAoJV2 WEflgOelB1Ym7Luw0pWVP329 =4pos -----END PGP SIGNATURE-----
participants (4)
-
cowie＠renesys.com -
jlewis＠lewis.org -
Joel Baker -
Matt Levine