Some leaks in China/Hongkong

Gert Doering gert at space.net
Mon Oct 27 06:17:54 CET 2008


Hi,

On Sun, Oct 26, 2008 at 08:59:38AM -0700, Mike Leber wrote:
> dfn, geant2, or internet2 don't currently get a decent full view 
> otherwise they wouldn't send traffic to Hong Kong.

It's much worse.  At least DFN *has* a full view, but they prefer Geant2
routes, because "NREN stuff needs to go there".

And since I2 seems to be really unwilling to properly sort out their 
routing (properly distinguish between "customers", "peers", and "upstream/
transit", with the proper filters in place to avoid leaking everything
everywhere) this is causing harm again and again.


I have some more of these... Egyptian REN more specifics being leaked by 
I2 all over the place...

grh.sixxs.net> show bgp ipv6 2001:4300:2001::/48
BGP routing table entry for 2001:4300:2001::/48
Paths: (14 available, best #3, table Default-IP-Routing-Table)
  Not advertised to any peer
  13645 19151 9304 4635 17579 11537 33789 24863
    2001:5b8:fffe:: from 2001:5b8:fffe:: (64.135.0.0)
      Origin IGP, localpref 100, valid, external
      Community: 13645:3121
      Last update: Sun Oct 26 10:33:10 2008

  20932 30781 5511 10764 11537 33789 24863
    2001:41e0:0:f::1 from 2001:41e0:0:f::1 (217.169.143.20)
      Origin IGP, metric 0, localpref 100, valid, external
      Last update: Fri Oct 24 21:43:41 2008

...

(19 /48s in total, only visible via 11537)

The really bad thing about that is that the /32 in question seems to have
direct transit via Sprint, which is not used now, since "longest prefix
wins"...

Gert Doering
        -- NetMaster
-- 
Total number of prefixes smaller than registry allocations:  128645

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (89) 32356-444            USt-IdNr.: DE813185279


More information about the ipv6-ops mailing list