Keyboard Shortcuts
Thread View
j: Next unread messagek: Previous unread messagej a: Jump to all threadsj l: Jump to MailingList overview
Interesting data!
Since Indian Govt. incumbent BSNL AS9829 is listed in top 20 unstable ASNs, I thought to check what specifically they are doing which is generating so many update messages. BGP update messages could be due to BGP flapping due to unstable circuit as well as cases of regular routing change w.r.t tweaking of their upstream.
Start point on this can be RIPE RIS collectors (which collects routes from various networks):
http://data.ris.ripe.net/rrc01/2019.07/ http://data.ris.ripe.net/rrc01/2019.07/
I picked 5th July and looked at 5 update samples at gap of 4hrs and found following:
Almost all update messages are “Announcements” and very few withdrawals. A very high amount (60-70%) of these announcements were AS9829 prepends happening 4 times to Airtel AS9498
E.g such messages:
BGP4MP|07/05/19 01:48:26|A|195.66.224.111|8607|117.219.112.0/20|8607 3356 3491 9498 9829 9829 9829 9829|IGP BGP4MP|07/05/19 01:48:39|A|5.57.81.186|6894|117.219.112.0/20|6894 9498 9829 9829 9829 9829 9829 9829|IGP BGP4MP|07/05/19 01:48:39|A|5.57.81.186|6894|59.94.160.0/20|6894 9498 9829 9829 9829 9829 9829 9829|IGP BGP4MP|07/05/19 01:48:39|A|5.57.81.186|6894|117.207.48.0/20|6894 9498 9829 9829 9829 9829 9829 9829|IGP BGP4MP|07/05/19 01:48:39|A|5.57.81.186|6894|45.117.116.0/22|6894 9498 9829 9829 9829 9829 9829 9829|IGP BGP4MP|07/05/19 01:48:39|A|5.57.81.186|6894|59.89.176.0/20|6894 9498 9829 9829 9829 9829 9829 9829|IGP
Here’s a sample of BGP announcement pattern for one of a pool from 4th July to 5th July on RIPE’s BGPPlay: https://stat.ripe.net/widget/bgplay#w.resource=117.219.112.0/20&w.ignore... https://stat.ripe.net/widget/bgplay#w.resource=117.219.112.0/20&w.ignoreReannouncements=false&w.starttime=1562205599&w.endtime=1562291999&w.rrcs=1&w.instant=null&w.type=bgp
Notice: Short description: The route 8218 9498 9829 9829 9829 9829 introduced/removed prepending 8218 9498 9829 9829 9829 9829 9829 9829
Thus a large part of noise from BSNL 9829 is because of excessive prepends they keep doing likely for inbound load balancing. Prepends beyond twice-thrice usually has no effect because other end will have higher local preference towards these routes and hence will keep sending traffic. This has been usually case when Indian network try to load balance inbound between Tata and Airtel circuit. Networks outside India would usually higher localpref towards Airtel routes compared to Tata. Ideally best technical way here would be to load balance by more specific which will always work instead of more prepends. Although for large network like BSNL ideally they should have planned for enough capacity without having to more announcements so much.
Anyone from BSNL on this mailing list? :)
Thanks.
On 20-Jul-2019, at 9:22 AM, Srinivas Chendi <sunny@apnic.net mailto:sunny@apnic.net> wrote:
Here is the latest report.
BGP Update Report Interval: 04-Jul-19 -to- 18-Jul-19 (14 days) Observation Point: BGP Peering with AS131072
TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS6762 378219 4.9% 1041.9 -- SEABONE-NET TELECOM ITALIA SPARKLE S.p.A., IT 2 - AS9829 220795 2.9% 81.9 -- BSNL-NIB National Internet Backbone, IN 3 - AS5972 109349 1.4% 59.5 -- DNIC-ASBLK-05800-06055
- DoD Network Information Center, US
4 - AS13904 104901 1.4% 624.4 -- COSLINK - Cherryland Services Inc, US 5 - AS47331 97947 1.3% 15.3 -- TTNET, TR 6 - AS27738 65962 0.8% 77.9 -- Ecuadortelecom S.A., EC 7 - AS16509 64781 0.8% 19.9 -- AMAZON-02 - Amazon.com http://amazon.com/, Inc., US 8 - AS39028 61861 0.8% 2291.1 -- ULSK-AS, RU 9 - AS8151 56400 0.7% 8.9 -- Uninet S.A. de C.V., MX 10 - AS531 49800 0.6% 395.2 -- DNIC-AS-00531 - Headquarters, USAISC, US 11 - AS50710 49770 0.6% 86.6 -- EARTHLINK-AS, IQ 12 - AS7939 48406 0.6% 2305.0 -- UNIVCENTFLA - University of Central Florida, US 13 - AS36903 46174 0.6% 54.8 -- MT-MPLS, MA 14 - AS7545 45622 0.6% 9.4 -- TPG-INTERNET-AP TPG Telecom Limited, AU 15 - AS20852 41829 0.5% 305.3 -- ATLANT-TELECOM-AS AtlantTelecom Autonomus System, BY 16 - AS5800 39124 0.5% 407.5 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center, US 17 - AS29651 38642 0.5% 5520.3 -- CTCS, RU 18 - AS31334 35983 0.5% 13.4 -- KABELDEUTSCHLAND-AS, DE 19 - AS262691 34434 0.4% 253.2 -- CONECTA LTDA., BR 20 - AS45899 29701 0.4% 9.5 -- VNPT-AS-VN VNPT Corp, VN
TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS58958 19248 0.2% 19248.0 -- NEWSBOOKLIMITED-HK Rm 1, 1/F, Hung Tai Bldg., 37-39 Hung To Road, Kwun Tong, HK 2 - AS15217 14748 0.2% 7374.0 -- HPES-AUTOMATED-OPERATIONS-AOPS - Hewlett-Packard Company, US 3 - AS29651 38642 0.5% 5520.3 -- CTCS, RU 4 - AS204517 5141 0.1% 5141.0 -- PVCP, FR 5 - AS134530 4417 0.1% 4417.0 -- ATT-NBE-AU ATT NBE Equinix Sydney, AU 6 - AS30321 15552 0.2% 3888.0 -- BURNINGMAN - Burning Man, US 7 - AS32042 3423 0.0% 3423.0 -- YEARONE - Year One, Inc., US 8 - AS8875 17290 0.2% 2881.7 -- SINMA-ASN, DE 9 - AS138659 14392 0.2% 2878.4 -- CYBERLINK-AS-AP Cyberlink Online, BD 10 - AS136727 2538 0.0% 2538.0 -- NETROCKET-AS-AP WYSNER NETWORKS PRIVATE LIMITED, IN 11 - AS203271 4833 0.1% 2416.5 -- BNTPRO, TR 12 - AS7939 48406 0.6% 2305.0 -- UNIVCENTFLA - University of Central Florida, US 13 - AS39028 61861 0.8% 2291.1 -- ULSK-AS, RU 14 - AS49192 2072 0.0% 2072.0 -- OPENFACTORY-EUROPE, DE 15 - AS56180 1848 0.0% 1848.0 -- VISTEON-ASPAC-AP One Village Way, HK 16 - AS6002 4769 0.1% 1589.7 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center, US 17 - AS18465 17041 0.2% 1549.2 -- WORKDAY-01 - Workday, Inc., US 18 - AS3832 26821 0.3% 1341.0 -- CINE-NET - Cinenet Communications, US 19 - AS27515 1306 0.0% 1306.0 -- WORKD-LAB - Workday, Inc., US 20 - AS263546 3274 0.0% 1091.3 -- TURBONETT TELECOMUNICACOES LTDA. - ME, BR
TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 201.183.255.0/24 49326 0.6% AS27738 -- Ecuadortelecom S.A., EC 2 - 132.170.30.0/23 48242 0.6% AS7939 -- UNIVCENTFLA - University of Central Florida, US 3 - 82.196.154.0/24 38636 0.5% AS29651 -- CTCS, RU 4 - 216.238.254.0/23 33361 0.4% AS13904 -- COSLINK - Cherryland Services Inc, US 5 - 23.35.212.0/22 29560 0.4% AS6762 -- SEABONE-NET TELECOM ITALIA SPARKLE S.p.A., IT 6 - 23.50.160.0/20 28931 0.3% AS6762 -- SEABONE-NET TELECOM ITALIA SPARKLE S.p.A., IT 7 - 23.50.184.0/22 27514 0.3% AS6762 -- SEABONE-NET TELECOM ITALIA SPARKLE S.p.A., IT 8 - 23.50.176.0/20 27514 0.3% AS6762 -- SEABONE-NET TELECOM ITALIA SPARKLE S.p.A., IT 9 - 23.50.188.0/22 27362 0.3% AS6762 -- SEABONE-NET TELECOM ITALIA SPARKLE S.p.A., IT 10 - 2.16.70.0/23 26732 0.3% AS6762 -- SEABONE-NET TELECOM ITALIA SPARKLE S.p.A., IT 11 - 88.221.100.0/22 26512 0.3% AS6762 -- SEABONE-NET TELECOM ITALIA SPARKLE S.p.A., IT 12 - 88.221.28.0/22 26483 0.3% AS6762 -- SEABONE-NET TELECOM ITALIA SPARKLE S.p.A., IT 13 - 92.123.208.0/22 26470 0.3% AS6762 -- SEABONE-NET TELECOM ITALIA SPARKLE S.p.A., IT 14 - 2.16.146.0/23 26451 0.3% AS6762 -- SEABONE-NET TELECOM ITALIA SPARKLE S.p.A., IT 15 - 92.122.68.0/22 26431 0.3% AS6762 -- SEABONE-NET TELECOM ITALIA SPARKLE S.p.A., IT 16 - 64.68.236.0/22 26330 0.3% AS13904 -- COSLINK - Cherryland Services Inc, US 17 - 95.101.156.0/22 26301 0.3% AS6762 -- SEABONE-NET TELECOM ITALIA SPARKLE S.p.A., IT 18 - 2.19.16.0/20 25844 0.3% AS6762 -- SEABONE-NET TELECOM ITALIA SPARKLE S.p.A., IT 19 - 2.20.4.0/22 25635 0.3% AS6762 -- SEABONE-NET TELECOM ITALIA SPARKLE S.p.A., IT 20 - 204.208.170.0/24 22283 0.3% AS5972 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center, US
Details at http://bgpupdates.potaroo.net http://bgpupdates.potaroo.net/
INNOG mailing list INNOG@innog.net mailto:INNOG@innog.net https://mailman.apnic.net/mailman/listinfo/innog
-- Anurag Bhatia Hurricane Electric (AS6939) anurag@he.net https://he.net
Attachments:
- Screenshot2019-07-20at11.22.39AM.png (image/png — 393.7 KB)
Activity Summary
- 1533 days inactive
- 1533 days old
- innog@innog.net
- 1 participants
- 0 comments