ntacpeering - R&E routing anomalies
Subject: NTAC Peering Working Group
List archive
- From: David Farmer <>
- To:
- Subject: R&E routing anomalies
- Date: Sat, 7 Apr 2018 15:28:53 -0500
- Ironport-phdr: 9a23:JyFX8BUd522WtQHr4HxAe72o5fDV8LGtZVwlr6E/grcLSJyIuqrYbRKEt8tkgFKBZ4jH8fUM07OQ7/i7HzRYqb+681k6OKRWUBEEjchE1ycBO+WiTXPBEfjxciYhF95DXlI2t1uyMExSBdqsLwaK+i764jEdAAjwOhRoLerpBIHSk9631+ev8JHPfglEnjWwba98IRmssQndqtQdjJd/JKo21hbHuGZDdf5MxWNvK1KTnhL86dm18ZV+7SleuO8v+tBZX6nicKs2UbJXDDI9M2Ao/8LrrgXMTRGO5nQHTGoblAdDDhXf4xH7WpfxtTb6tvZ41SKHM8D6Uaw4VDK/5KptVRTmijoINyQh/W/XhMJ+j79Vrgy9qBFk2YHYfJuYOeBicq/Bf94XQ3dKUMZLVyxGB4Oxd4UBAPAfPeZZsob2ulsAogGkBQmpGuzv0CJDi3j43aIgyeQhFB/J3BY7EtITtXTUqs/5O7kPXuCo1aTFyyjIYf1R2Tf48ofIcxYhrOmNUL9/a8bcyVMjGx7Kg1ifs4DpIyuZ2vkDvmWZ9eZsSOaihm09pw1tuDSj2t8gh4jGi44Pyl3I7zh1zYk3KNGiVEJ3ecOoHIVTui2ANIZ6XNkuT31ytCom0rEKp5G2cDIXxJkjwxPTceKLf5SI7x75SOqdOSl0iG5kdb6lmRq+7VasxvfhWsSwzlpGtDZJnsHSunwR2BHf8MeKR/Vn8ku8xzqC1Brf5v1cLUwqiKbWKoQtz74/m5YJvknOHTX6lFnugKOLdkgo5/Kk5/nkb7jlvJOQK5V4hh3mPqgwh8CyAP40PwgBUmSB9umx0Kfv8VH/Tb5XjfM2irHUvI3UKMkUvKK0AABY3pw+5xu7DjqqysoUkWUFIV5dZh6Lk4zkN0vNLf34F/uznUmgnTlxy/3HOrDsBIjGIGLZn7f7Z7l97lZRyAotwtBb4JJZErQBIO7pVUPorNzVDAU1Mwu1w+b7Etl9y4YeWWSVDqCHLazSrEeE5uMpI+aSeI8YoCvxJvYq6vL0jnI0lkURcbSt0JYWcny0AOhqLkeBbXrpmNgBEGMKvgQkTOztjV2PSTBTaGyoX6I5+D47EpmrDZrGRoCrmrCOwjq0HoBOamBcFl+MCWvod5mDW/oUbiKSPtVunSAcVbe/VYAhzxCutAn1y7d8KurU+zYYtY741NRr/eHTlBcy9SBqAMSH1WGCUX10kn0SSzAowa9/vB819lDW17RxiORVGMZS4fxhUwEmOITawvAgTd3+R1HvZNCMHXqvXNSqSR84VNc82ZdabU9nHti4pg3G2WynD6JDxO/DP4A97q+Jhyu5HM160XuTjKQ=
I looked a little deeper and found several things that at least at first glance look like routing anomalies in the R&E routing table. It is possible that some of these are intentional, but I suspect at least some of these are mistakes or some other kind of problem.
MAGPI, MATP, NCREN, and OneNet should all take a close look;
There are a number routes with TR/CPS in the AS path from a few different connectors.
*> 24.199.205.0/24 146.57.255.241 2691 202 0 11537 81 11164 7843 11426 i
*> 64.5.144.0/24 146.57.255.241 2142 202 0 11537 40220 11164 22773 19354 i
*> 64.5.147.0/24 146.57.255.241 2142 202 0 11537 40220 11164 22773 i
*> 128.82.0.0/16 146.57.255.241 2142 202 0 11537 40220 11164 22773 12064 1201 ?
*>i129.244.0.0/16 146.57.255.241 1106 202 0 11537 5078 11164 22773 i
*> 137.198.0.0/16 146.57.255.241 2142 202 0 11537 40220 11164 22773 14655 i
*> 151.188.0.0/16 146.57.255.241 2142 202 0 11537 40220 11164 22773 21984 i
*> 204.43.128.0/17 146.57.255.241 3568 202 0 11537 62600 11164 22773 6172 6172 6172 6172 i
*> 206.202.192.0/18 146.57.255.241 1106 202 0 11537 5078 11164 22773 i
*> 216.54.48.0/24 146.57.255.241 2142 202 0 11537 40220 11164 22773 i
*> 216.54.49.0/24 146.57.255.241 2142 202 0 11537 40220 11164 22773 i
*> 216.235.226.0/24 146.57.255.241 2142 202 0 11537 40220 11164 6939 26202 i
Also, there are several routes with transit providers in the AS path, mostly international, but a few by connectors too.
*> 42.83.137.0/24 146.57.255.241 2735 202 0 11537 22388 7660 4641 4641 6939 24785 8763 8763 8763 8763 24151 i
*> 42.83.138.0/24 146.57.255.241 2735 202 0 11537 22388 7660 4641 4641 6939 28917 39134 15835 24406 i
*> 64.147.208.0/20 146.57.255.241 2691 202 0 11537 81 3356 27446 i
*> 91.222.202.0/24 146.57.255.241 2749 202 0 11537 8895 3257 39386 25233 47805 i
*> 91.222.203.0/24 146.57.255.241 2749 202 0 11537 8895 3257 39386 25233 47805 i
*> 91.227.24.0/23 146.57.255.241 2749 202 0 11537 8895 3257 48237 35819 56714 i
*> 103.26.196.0/24 146.57.255.241 2735 202 0 11537 22388 7660 23855 24514 3257 132354 132874 i
*> 103.82.167.0/24 146.57.255.241 2735 202 0 11537 22388 7660 24287 24490 18007 64302 136059 7713 136059 i
*> 103.227.140.0/24 146.57.255.241 2735 202 0 11537 22388 7660 23855 24514 3257 45630 134809 133408 i
*> 125.208.43.0/24 146.57.255.241 2735 202 0 11537 22388 7660 4641 4641 6939 28917 39134 15835 24406 i
*> 125.208.44.0/24 146.57.255.241 2735 202 0 11537 22388 7660 4641 4641 6939 28917 39134 15835 24406 i
*> 130.156.192.0/20 146.57.255.241 2564 202 0 11537 10466 21976 1299 7922 33659 i
*> 133.12.0.0/16 146.57.255.241 2735 202 0 11537 22388 7660 2500 2497 i
*> 133.186.0.0/17 146.57.255.241 2735 202 0 11537 22388 7660 2500 2516 10010 i
*> 192.138.169.0/24 146.57.255.241 2186 202 0 11537 297 209 3356 188 i
*> 194.246.96.0/24 146.57.255.241 2735 202 0 11537 22388 7660 4641 4641 6939 24785 8763 31529 i
*> 204.84.32.0/20 146.57.255.241 2691 202 0 11537 81 3356 27446 i
*> 210.2.4.0/24 146.57.255.241 2735 202 0 11537 22388 7660 4641 4641 6939 28917 39134 15835 24406 i
*> 210.25.0.0/17 146.57.255.241 3809 202 0 11537 23911 4538 4134 i
Finally, there are three routes from CDNs, two are the ones I brought up before, all seem to be international.
*> 104.237.175.0/24 146.57.255.241 2749 202 0 11537 36944 327687 36040 i
*> 104.237.191.0/24 146.57.255.241 2749 202 0 11537 36944 327687 36040 i
*> 200.136.36.0/24 146.57.255.241 3119 202 0 11537 1251 20940 i
Thanks
===============================================
David Farmer
Networking & Telecommunication Services
Office of Information Technology
University of Minnesota
2218 University Ave SE Phone: 612-626-0815
Minneapolis, MN 55414-3029 Cell: 612-812-9952
===============================================
David Farmer
Networking & Telecommunication Services
Office of Information Technology
University of Minnesota
2218 University Ave SE Phone: 612-626-0815
Minneapolis, MN 55414-3029 Cell: 612-812-9952
==============================
- R&E routing anomalies, David Farmer, 04/07/2018
Archive powered by MHonArc 2.6.19.