[ietf85-tech] NTT/XO routing issue root cause

[Tauber, Tony]

Hi folks,

I chatted with Jim this morning and he mentioned "…NTT started accepting the route so now we're not going through Asia…"

I mentioned to him that I was pretty sure what had happened (based on what I saw and communicated to Jared from NTT) was that the route was being leaked by an ISP in China and being considered as "customer" (i.e., more preferred) route; probably related to a recent IETF being hosted there.

I asked for and got confirmation along these lines (below).

Just wanted people to have the right technical details.

Cheers,

Tony

From: Jared Mauch <jared at puck.nether.net<mailto:jared at puck.nether.net>>
Date: Monday, November 5, 2012 11:44 AM

Subject: Fwd: Quite urgent: An issue with 130.129.0.0/16 - this route must be filtered by AS4538



Jared Mauch

Begin forwarded message:

From: "Martin J. Levy" <martin at he.net<mailto:martin at he.net>>
Date: November 4, 2012, 8:22:23 AM EST
To: "MA Yan" <mayan at bupt.edu.cn<mailto:mayan at bupt.edu.cn>>
Cc: "Prof. Xing Li" <xing at cernet.edu.cn<mailto:xing at cernet.edu.cn>>, "Prof. Jianping Wu" <jianping at cernet.edu.cn<mailto:jianping at cernet.edu.cn>>, Jared Mauch <jared at puck.nether.net<mailto:jared at puck.nether.net>>
Subject: Re: Quite urgent: An issue with 130.129.0.0/16 - this route must be filtered by AS4538

Thanks - Much better now! (and of course that was the reason why it leaked). Thanks for fixing this.

Jared - this should make life easier in Atlanta this week.

Martin

  Martin J. Levy
  Director IPv6 Strategy
  Hurricane Electric
  760 Mission Court,
  Fremont, CA 94539, USA
  +1 408 499 3801 (mobile)
  martin at he.net<mailto:martin at he.net> (email)
  http://he.net/ (web)



On Nov 4, 2012, at 2:31 AM, MA Yan wrote:

Done, stopped its announcement.

It was used previously in CERNET , during IETF79 meeting, I suppose.

Regards,
--MA Yan

----- 回复邮件 -----
发信人:"Martin J. Levy" <martin at he.net<mailto:martin at he.net>>
收信人:"Prof. Xing Li" <xing at cernet.edu.cn<mailto:xing at cernet.edu.cn>>,"Prof. MA Yan" <mayan at bupt.edu.cn<mailto:mayan at bupt.edu.cn>>,"Prof. Jianping Wu" <jainping at cernet.edu.cn<mailto:jainping at cernet.edu.cn>>
时  间:2012年11月04日 15时37分
主  题:Quite urgent: An issue with 130.129.0.0/16 - this route must be filtered by AS4538

Dear professors,

Sorry for grabbing you on a weekend; however I have an operational issue (yes - a v4 issue).

Presently there is a route leak via AS4538 that is affecting various networks. Please look at the route 130.129.0.0/16 within AS4538. It's being heard from AS3320/DTAG and sent back out too AS10026/Pacnet. I don't think you should be happening. (Actually I know it should not be happening).

Here's an example of the route as seen on the HE looking glass.

BE      130.129.0.0/16<tel:130.129.0.0/16>      206.111.6.165<tel:206.111.6.165>        0       100     0       2828<http://bgp.he.net/AS2828>, 10026<http://bgp.he.net/AS10026>, 4538<http://bgp.he.net/AS4538>x4, 3320<http://bgp.he.net/AS3320>, 7922<http://bgp.he.net/AS7922>, 7725<http://bgp.he.net/AS7725>, 56554<http://bgp.he.net/AS56554>    IGP

This is not correct.

Can this be fixed ASAP?

Thanks,

Martin

  Martin J. Levy
  Director IPv6 Strategy
  Hurricane Electric
  760 Mission Court,
  Fremont, CA 94539, USA
  +1 408 499 3801 (mobile)
  martin at he.net<mailto:martin at he.net> (email)
  http://he.net/ (web)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.daedelus.com/pipermail/ietf85-tech/attachments/20121105/88293be1/attachment-0001.html