Skip to Content.
Sympa Menu

ntacpeering - R&E route policy with other NRENs

Subject: NTAC Peering Working Group

List archive

R&E route policy with other NRENs


Chronological Thread 
  • From: David Farmer <>
  • To:
  • Subject: R&E route policy with other NRENs
  • Date: Sat, 7 Apr 2018 10:16:36 -0500
  • Ironport-phdr: 9a23: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

FYI, I just sent the following note the Internet2 NOC.  I think we need a set of ASNs that should not be accepted from other NRENs, This should include things like GGC nodes, DNS Root Server anycast nodes, AS112 nodes, global transit providers, etc...

There are several HE(AS6939) routes being leaked into the R&E route table.

*> 42.83.137.0/24     146.57.255.241        2735    202      0 11537 22388 7660 4641 4641 6939 24785 8763 8763 8763 8763 24151 i
*> 42.83.138.0/24     146.57.255.241        2735    202      0 11537 22388 7660 4641 4641 6939 28917 39134 15835 24406 i
*> 125.208.43.0/24    146.57.255.241        2735    202      0 11537 22388 7660 4641 4641 6939 28917 39134 15835 24406 i
*> 125.208.44.0/24    146.57.255.241        2735    202      0 11537 22388 7660 4641 4641 6939 28917 39134 15835 24406 i
*> 194.246.96.0/24    146.57.255.241        2735    202      0 11537 22388 7660 4641 4641 6939 24785 8763 31529 i
*> 210.2.4.0/24       146.57.255.241        2735    202      0 11537 22388 7660 4641 4641 6939 28917 39134 15835 24406 i
*> 216.235.226.0/24   146.57.255.241        2142    202      0 11537 40220 11164 6939 26202 i

Thanks

---------- Forwarded message ----------
From: David Farmer <>
Date: Sat, Apr 7, 2018 at 9:54 AM
Subject: RENU advertising GGC node
To: Internet2 NOC <>


RENU is advertising a GGC node via UBUNTU into the Internet2 R&E route table. Please stop accepting these routes from them. As these routes are in the R&E route table they were overriding at least one route (104.237.191.0/24) I learn from a GGC node in Minneapolis. I have dealt with this in my local route policy, but I suspect others may have an issue too.

Note AS36040 is the ASN Google uses for GGC nodes; 
https://peering.google.com/#/options/peering

*> 104.237.175.0/24   146.57.255.241        2749    202      0 11537 36944 327687 36040 i
*> 104.237.191.0/24   146.57.255.241        2749    202      0 11537 36944 327687 36040 i

Thanks.

-- 

--
===============================================
David Farmer              
Networking & Telecommunication Services
Office of Information Technology
University of Minnesota  
2218 University Ave SE        Phone: 612-626-0815
Minneapolis, MN 55414-3029   Cell: 612-812-9952
===============================================



Archive powered by MHonArc 2.6.19.

Top of Page