NTAC Peering Working Group

[Michael H Lambert <>]

In the same vein, I noticed last week that CUDI was leaking PNWGP and 
CENIC routes (and perhaps others) into the R&E network.  The result was 
a likely violation of Internet2 AUPs and not just bad routing practices. 
 The Internet2 NOC put a filter in at least for those ASNs and was 
reaching out to CUDI.  This was probably the result of broken 
configuration because the AS paths were "11537 CUDI X Y CUDI Z".

Michael

David Farmer wrote:
> FYI, I just sent the following note the Internet2 NOC.  I think we need 
> a set of ASNs that should not be accepted from other NRENs, This should 
> include things like GGC nodes, DNS Root Server anycast nodes, AS112 
> nodes, global transit providers, etc...
>
> There are several HE(AS6939) routes being leaked into the R&E route table.
>
> *> 42.83.137.0/24 <http://42.83.137.0/24>     146.57.255.241        
> 2735    202      0 11537 22388 7660 4641 4641 6939 24785 8763 8763 8763 
> 8763 24151 i
> *> 42.83.138.0/24 <http://42.83.138.0/24>     146.57.255.241        
> 2735    202      0 11537 22388 7660 4641 4641 6939 28917 39134 15835 24406 i
> *> 125.208.43.0/24 <http://125.208.43.0/24>    146.57.255.241        
> 2735    202      0 11537 22388 7660 4641 4641 6939 28917 39134 15835 24406 i
> *> 125.208.44.0/24 <http://125.208.44.0/24>    146.57.255.241        
> 2735    202      0 11537 22388 7660 4641 4641 6939 28917 39134 15835 24406 i
> *> 194.246.96.0/24 <http://194.246.96.0/24>    146.57.255.241        
> 2735    202      0 11537 22388 7660 4641 4641 6939 24785 8763 31529 i
> *> 210.2.4.0/24 <http://210.2.4.0/24>       146.57.255.241        2735  
>    202      0 11537 22388 7660 4641 4641 6939 28917 39134 15835 24406 i
> *> 216.235.226.0/24 <http://216.235.226.0/24>   146.57.255.241        
> 2142    202      0 11537 40220 11164 6939 26202 i
>
> Thanks
>
> ---------- Forwarded message ----------
> From: *David Farmer* 
> <
>  
> <mailto:>>
> Date: Sat, Apr 7, 2018 at 9:54 AM
> Subject: RENU advertising GGC node
> To: Internet2 NOC 
> <
>  
> <mailto:>>
>
>
> RENU is advertising a GGC node via UBUNTU into the Internet2 R&E route 
> table. Please stop accepting these routes from them. As these routes are 
> in the R&E route table they were overriding at least one route 
> (104.237.191.0/24 <http://104.237.191.0/24>) I learn from a GGC node in 
> Minneapolis. I have dealt with this in my local route policy, but I 
> suspect others may have an issue too.
>
> Note AS36040 is the ASN Google uses for GGC nodes;
> https://peeringdb.com/net/4319
> https://peering.google.com/#/options/peering
>
> *> 104.237.175.0/24 <http://104.237.175.0/24>   146.57.255.241        
> 2749    202      0 11537 36944 327687 36040 i
> *> 104.237.191.0/24 <http://104.237.191.0/24>   146.57.255.241        
> 2749    202      0 11537 36944 327687 36040 i
>
> Thanks.
>
> --
>
> --
> ===============================================
> David Farmer 
> Email:
>  
> <mailto:Email%>
> Networking & Telecommunication Services
> Office of Information Technology
> University of Minnesota
> 2218 University Ave SE        Phone: 612-626-0815
> Minneapolis, MN 55414-3029   Cell: 612-812-9952
> ===============================================



--
Michael H Lambert, GigaPoP Manager             Phone: +1 412 268-4960
Pittsburgh Supercomputing Center/3ROX          FAX:   +1 412 268-5832
300 S Craig St, Pittsburgh, PA  15213 USA