Re: Reverse DNS for eyeballs?
> I would say the absence of reverse DNS tells useful info to receiving > MTAs - to preferably not accept. yep
BGP Books
It has been a couple of decades since I've done any BGP in anger, but it looks like I will be jumping into the deep end again, soon, and I desperately need to get up to speed again. There seem to be a lot of good guides out there from Cisco, Juniper, and the like, but naturally they are very product oriented. What I'm looking for is more like the Stevens networking bibles (i.e. "BGP Illustrated Vol I and II"). Something that covers more than just the raw protocols, and includes things like RPKI. (The world sure has changed since the last time I was doing this!) Any/all suggestions welcome. Thanks! --lyndon
Re: BGP Books
On 4/25/23 3:55 PM, Lyndon Nerenberg (VE7TFX/VE6BBM) wrote: It has been a couple of decades since I've done any BGP in anger, but it looks like I will be jumping into the deep end again, soon, and I desperately need to get up to speed again. There seem to be a lot of good guides out there from Cisco, Juniper, and the like, but naturally they are very product oriented. What I'm looking for is more like the Stevens networking bibles (i.e. "BGP Illustrated Vol I and II"). Something that covers more than just the raw protocols, and includes things like RPKI. (The world sure has changed since the last time I was doing this!) Any/all suggestions welcome. https://learn.nsrc.org/bgp Steve
Re: BGP Books
Depending on how many years since you last looked at BGP, you may be shocked at how many address families BGP now carries… it’s very Multi-Protocol now. MP-BGP I’ll always remember how informative the Basam Halabi book was. Also the Ivan Peplnjak MPLS VPN book. Both have a couple editions. Those are oldies but goodies. More recently is MPLS in the SDN era. But it seems the SR/SPRING will be the most recent topics to study, I think that’s were BGP-LU comes in. I need to get a book and read too Aaron > On Apr 25, 2023, at 5:56 PM, Lyndon Nerenberg (VE7TFX/VE6BBM) > wrote: > > It has been a couple of decades since I've done any BGP in anger, > but it looks like I will be jumping into the deep end again, soon, > and I desperately need to get up to speed again. > > There seem to be a lot of good guides out there from Cisco, Juniper, > and the like, but naturally they are very product oriented. What > I'm looking for is more like the Stevens networking bibles (i.e. > "BGP Illustrated Vol I and II"). Something that covers more than > just the raw protocols, and includes things like RPKI. (The world > sure has changed since the last time I was doing this!) > > Any/all suggestions welcome. > > Thanks! > > --lyndon
IPv4 Subnet 23.151.232.0/24 blackholed?
Hi, I recently got the IPv4 allocation 23.151.232.0/24 from ARIN. I also had my hosting company ReliableSite announce it to the internet. Right now, I can only access networks that peer with ReliableSite via internet exchanges, such as Google, CloudFlare, OVH, Hurricane Electric, et al. It seems the Tier 1 ISPs (e.g. Lumen, Cogent, AT&T, et al.) are blackholing the IPv4 subnet 23.151.232.0/24. Could someone who works at a Tier 1 NOC please check and remove the blackhole if any exists? Normally when ReliableSite announced my prior (then-leased) IPv4 space it gets propagated via BGP almost immediately. This time it's not going through at all. Best, Neel Chauhan
Re: IPv4 Subnet 23.151.232.0/24 blackholed?
Neel, Carriers rebuild their prefixes lists once or twice in a 24 hour period. Considering that you just got the block today and is in ReliableSite's AS-SET, you just got to be patient. Having announcements propagated immediately either sounds like it happened a day after you gave them the LOA, or they have unfiltered transit circuits, which is worrisome. Ryan -- Original Message -- From "Neel Chauhan" To nanog@nanog.org Date 4/25/2023 7:35:40 PM Subject IPv4 Subnet 23.151.232.0/24 blackholed? Hi, I recently got the IPv4 allocation 23.151.232.0/24 from ARIN. I also had my hosting company ReliableSite announce it to the internet. Right now, I can only access networks that peer with ReliableSite via internet exchanges, such as Google, CloudFlare, OVH, Hurricane Electric, et al. It seems the Tier 1 ISPs (e.g. Lumen, Cogent, AT&T, et al.) are blackholing the IPv4 subnet 23.151.232.0/24. Could someone who works at a Tier 1 NOC please check and remove the blackhole if any exists? Normally when ReliableSite announced my prior (then-leased) IPv4 space it gets propagated via BGP almost immediately. This time it's not going through at all. Best, Neel Chauhan
Re: IPv4 Subnet 23.151.232.0/24 blackholed?
You need to talk to ReliableSite and have them talk to their transits about accepting 23.151.232.0/24. I see that you did create a route object... route: 23.151.232.0/24 origin: AS23470 descr: Qeru Systems, LLC mnt-by: MAINT-AS23470 changed:j...@reliablesite.net 20230425 #01:09:36Z source: RADB but I'd dump RADB and create this object in the authoratative IRR, in this case ARIN's rr.arin.net. At least some "Tier 1's" no longer honor route objects from non-authoratative IRRs when building prefix-list filters for their customers BGP sessions. I'm not receiving your route, and route-views doesn't see it either. On Tue, 25 Apr 2023, Neel Chauhan wrote: Hi, I recently got the IPv4 allocation 23.151.232.0/24 from ARIN. I also had my hosting company ReliableSite announce it to the internet. Right now, I can only access networks that peer with ReliableSite via internet exchanges, such as Google, CloudFlare, OVH, Hurricane Electric, et al. It seems the Tier 1 ISPs (e.g. Lumen, Cogent, AT&T, et al.) are blackholing the IPv4 subnet 23.151.232.0/24. Could someone who works at a Tier 1 NOC please check and remove the blackhole if any exists? Normally when ReliableSite announced my prior (then-leased) IPv4 space it gets propagated via BGP almost immediately. This time it's not going through at all. Best, Neel Chauhan -- Jon Lewis, MCP :) | I route StackPath, Sr. Neteng | therefore you are _ http://www.lewis.org/~jlewis/pgp for PGP public key_
Re: IPv4 Subnet 23.151.232.0/24 blackholed?
The range has only been announced for 2 hours. Just wait longer for filters to refresh as Ryan advised. On 2023-04-25 10:49 p.m., Ryan Hamel wrote: Neel, Carriers rebuild their prefixes lists once or twice in a 24 hour period. Considering that you just got the block today and is in ReliableSite's AS-SET, you just got to be patient. Having announcements propagated immediately either sounds like it happened a day after you gave them the LOA, or they have unfiltered transit circuits, which is worrisome. Ryan -- Original Message -- From "Neel Chauhan" To nanog@nanog.org Date 4/25/2023 7:35:40 PM Subject IPv4 Subnet 23.151.232.0/24 blackholed? Hi, I recently got the IPv4 allocation 23.151.232.0/24 from ARIN. I also had my hosting company ReliableSite announce it to the internet. Right now, I can only access networks that peer with ReliableSite via internet exchanges, such as Google, CloudFlare, OVH, Hurricane Electric, et al. It seems the Tier 1 ISPs (e.g. Lumen, Cogent, AT&T, et al.) are blackholing the IPv4 subnet 23.151.232.0/24. Could someone who works at a Tier 1 NOC please check and remove the blackhole if any exists? Normally when ReliableSite announced my prior (then-leased) IPv4 space it gets propagated via BGP almost immediately. This time it's not going through at all. Best, Neel Chauhan -- Best regards August Yang smime.p7s Description: S/MIME Cryptographic Signature
