Skip to Content.
Sympa Menu

wg-irr - Re: [WG-IRR] Some Google observations

Subject: Registry Working Group

List archive

Re: [WG-IRR] Some Google observations


Chronological Thread 
  • From: Bill Owens <>
  • To: "" <>
  • Subject: Re: [WG-IRR] Some Google observations
  • Date: Mon, 26 Aug 2019 16:30:05 +0000
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nysernet.org; dmarc=pass action=none header.from=nysernet.org; dkim=pass header.d=nysernet.org; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=X/ZzLjUuh1oDHWe+QZMez60w+tzCJ6foAShvRbX5r84=; b=R0ePBZRn48x70JWh377VyiOp3zac2Z0GOhJVGFl/slVG375f4f6rIWnBQKW1DXP//eNNWtr037NrC8Tu3dN/AlItNcEWZiuDqmJbEuV9SYrZNhsDP19lE9452lxopVrxohDoRrJZSULgpa67408cy1160X6u3goMxmvxe/MWYimSrc3cD+2opnFowuqYTYBGJwfRYYo9Dd/N/1jTii2b/CtF7YC0mhtp/KwjKX2X21mFxugukB6jK77mAGh6xa18l/I5MTv0e09gwBzvkI6QN+ajXtX/IactUWRiumLQQOc3yC69KxQUGPvXS3FnrhoU/q1UPZPliAFv1TKrwtSn6g==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=EAsdBu0YbZTPYHZ2hIUO9dcuEt+G877jQnjEsjPpcJwtLCkYUMy371wstdNNG7M4ex1NuiIbLB7Zs2Sbsjaa21MHVO8Gan6cn3+3vvnCovyyivLyS+iKok4IIrWM8lAehMyT+28w+Nzq47xEd/YilLejN0XoMRVX5/jy8ETBrI17k+62ba999Ctj1s0JsgZjXGB9Xxp5WpmvQuBduY9vsqGQ8eHcIcfEUP81nWw4Zwk7kJ2O1C6siSpWm0Jo873AvgTWaEOLz1oA0YCZF7zfNCosni5bupdsR09doDWJ5qLzoIrNjavoA/aZEASxUnlIUNrvSQuwNXnLaW3C0L5HMA==

That’s pushing beyond my IRR knowledge 😉

 

It seems like the first import: line would be the governing one, unless the intent is that they’re willing to accept default from 1273, 3356 and 6453? Those are three big transit providers, so maybe that’s the case.

 

Actually I’m not sure if they would need to change, assuming the tool interprets “AS-ANY” as “any route coming from any AS that has a valid route|route6 object with matching origin AS”. Maybe that’s all that is needed?

 

Bill.

 

From: <> on behalf of John Hernandez <>
Reply-To: "" <>
Date: Monday, August 26, 2019 at 12:25
To: "" <>
Subject: Re: [WG-IRR] Some Google observations

 

On Mon, Aug 26, 2019 at 10:07 AM Bill Owens <> wrote:

As Jeff Bartig pointed out last week, Google is now flagging routes as 'irr-invalid' in their ISP portal. However, in our case every 'invalid' route is actually being accepted and carrying traffic, though I can't tell whether that's because they are simply flagging, or because the ISP portal report is out of sync with the real filters. I'm leaning towards the former, that they are only reporting errors without placing the filters on the actual BGP sessions, because we have one prefix that is intentionally not in the RADb or any other IRR and it is still accepted. 

 

Hey Bill, I think you're correct - Google is flagging but not enforcing at this point.  This is supported by the import field in their AUT-NUM object (below).  When enforcement begins, one might expect their import policy to change, hopefully?

 

aut-num:    AS15169
as-name:    Google
descr:      Google, Inc
import:     from AS-ANY   accept ANY AND NOT {0.0.0.0/0}
export:     to AS-ANY   announce AS-GOOGLE AND NOT {0.0.0.0/0}
import:     from AS1273   accept ANY
import:     from AS3356   accept ANY
import:     from AS6453   accept ANY
admin-c:    Google Network Engineering
tech-c:     Google Network Engineering
notify:    
mnt-by:     MAINT-AS15169
changed:     20190626
source:     RADB

 

-- 


John Hernandez (he/him/his), Network Engineer

1850 Table Mesa Drive, Boulder, CO 80305
Tel. 303-497-1280




Archive powered by MHonArc 2.6.19.

Top of Page