Experiences with IPv6 and Routing Efficiency

[Mukom Akong T.]

Hello folks,

Does anyone have any experiences or insights to share on how  more (or
less) efficient routing is with IPv6? Any specific thoughts with respect to
how the following characteristics help or not with routing efficiency?
- fixed header size
- Extension header chain
- flow labels in header
- no intermediate fragmentation
- no checksums

Thanks in advance.

-- 

Mukom Akong T.

http://about.me/perfexcellence |  twitter: @perfexcellent
--
“When you work, you are the FLUTE through whose lungs the whispering of the
hours turns to MUSIC" - Kahlil Gibran
---

BGP Update Report

[cidr-report]

BGP Update Report
Interval: 09-Jan-14 -to- 16-Jan-14 (7 days)
Observation Point: BGP Peering with AS131072

TOP 20 Unstable Origin AS
Rank ASNUpds %  Upds/PfxAS-Name
 1 - AS14420   64462  2.7% 131.6 -- CORPORACION NACIONAL DE 
TELECOMUNICACIONES - CNT EP
 2 - AS36998   47173  2.0%  26.1 -- SDN-MOBITEL
 3 - AS840242055  1.8%  20.9 -- CORBINA-AS OJSC "Vimpelcom"
 4 - AS453839647  1.7%  74.0 -- ERX-CERNET-BKB China Education 
and Research Network Center
 5 - AS381634557  1.4%  45.3 -- COLOMBIA TELECOMUNICACIONES 
S.A. ESP
 6 - AS982932965  1.4%  25.9 -- BSNL-NIB National Internet 
Backbone
 7 - AS476628582  1.2%   9.7 -- KIXS-AS-KR Korea Telecom
 8 - AS14287   28224  1.2% 522.7 -- TRIAD-TELECOM - Triad Telecom, 
Inc.
 9 - AS11492   25060  1.1%  21.0 -- CABLEONE - CABLE ONE, INC.
10 - AS13118   21089  0.9% 479.3 -- ASN-YARTELECOM OJSC Rostelecom
11 - AS477518816  0.8% 265.0 -- GLOBE-TELECOM-AS Globe Telecoms
12 - AS45271   18042  0.8%  60.1 -- ICLNET-AS-AP Idea Cellular 
Limited
13 - AS41691   17889  0.8% 777.8 -- SUMTEL-AS-RIPE Summa Telecom LLC
14 - AS702917500  0.7%  10.2 -- WINDSTREAM - Windstream 
Communications Inc
15 - AS27947   15966  0.7%  18.3 -- Telconet S.A
16 - AS28573   15547  0.7%   4.5 -- NET Serviços de Comunicação S.A.
17 - AS671314715  0.6%  25.3 -- IAM-AS
18 - AS45899   14430  0.6%  42.6 -- VNPT-AS-VN VNPT Corp
19 - AS59217   14028  0.6%   14028.0 -- AZONNELIMITED-AS-AP Azonne 
Limited
20 - AS27738   11726  0.5%  20.4 -- Ecuadortelecom S.A.


TOP 20 Unstable Origin AS (Updates per announced prefix)
Rank ASNUpds %  Upds/PfxAS-Name
 1 - AS59217   14028  0.6%   14028.0 -- AZONNELIMITED-AS-AP Azonne 
Limited
 2 - AS129226427  0.3%6427.0 -- MULTITRADE-AS CEDACRI S.P.A.
 3 - AS544657319  0.3%2439.7 -- QPM-AS-1 - QuickPlay Media Inc.
 4 - AS624312189  0.1%2189.0 -- NCSC-IE-AS National Cyber 
Security Centre
 5 - AS518611552  0.1%1552.0 -- SHARED-AS Eric Dorr
 6 - AS458081507  0.1%1507.0 -- UTP-MY Bandar Seri Iskandar
 7 - AS627511445  0.1%1445.0 -- HSAUWC-AS - HSA-UWC
 8 - AS284772466  0.1%1233.0 -- UNIVERSIDAD AUTONOMA DEL ESTADO 
DE MORELOS
 9 - AS560972311  0.1%1155.5 -- JOISTER-AS Joister Group of 
Companies.
10 - AS304374470  0.2%1117.5 -- GE-MS003 - General Electric 
Company
11 - AS333851097  0.1%1097.0 -- QUOMATION - Quomation Insurance 
Services, Inc.
12 - AS445051024  0.0%1024.0 -- FIBERNET FiberNet Communication 
LLC
13 - AS35181   10194  0.4%1019.4 -- PWC Autonomous System Number 
for Public WareHouse Company
14 - AS57201 860  0.0% 860.0 -- EDF-AS Estonian Defence Forces
15 - AS7202 8401  0.3% 840.1 -- FAMU - Florida A & M University
16 - AS603451663  0.1% 831.5 -- NBITI-AS Nahjol Balagheh 
International Research Institution
17 - AS165611565  0.1% 782.5 -- ARIBANETWORK Ariba Inc. 
Autonomous System
18 - AS41691   17889  0.8% 777.8 -- SUMTEL-AS-RIPE Summa Telecom LLC
19 - AS6629 8933  0.4% 687.2 -- NOAA-AS - NOAA
20 - AS241851227  0.1% 613.5 -- I-FLEX-AS I-FLEX Solutions 
Limited, Software Development, Mumbai, India


TOP 20 Unstable Prefixes
Rank Prefix Upds % Origin AS -- AS Name
 1 - 109.161.64.0/20   21046  0.8%   AS13118 -- ASN-YARTELECOM OJSC Rostelecom
 2 - 103.243.164.0/22  14028  0.6%   AS59217 -- AZONNELIMITED-AS-AP Azonne 
Limited
 3 - 89.221.206.0/24   10210  0.4%   AS41691 -- SUMTEL-AS-RIPE Summa Telecom LLC
 4 - 85.239.28.0/2410157  0.4%   AS35181 -- PWC Autonomous System Number 
for Public WareHouse Company
 5 - 120.28.62.0/24 9299  0.4%   AS4775  -- GLOBE-TELECOM-AS Globe Telecoms
 6 - 222.127.0.0/24 9295  0.4%   AS4775  -- GLOBE-TELECOM-AS Globe Telecoms
 7 - 192.58.232.0/248898  0.3%   AS6629  -- NOAA-AS - NOAA
 8 - 85.249.160.0/207608  0.3%   AS41691 -- SUMTEL-AS-RIPE Summa Telecom LLC
 9 - 206.152.15.0/247307  0.3%   AS54465 -- QPM-AS-1 - QuickPlay Media Inc.
10 - 194.105.61.0/246427  0.2%   AS12922 -- MULTITRADE-AS CEDACRI S.P.A.
11 - 67.210.190.0/236323  0.2%   AS11976 -- FIDN - Fidelity Communication 
International Inc.
12 - 208.70.20.0/22 5651  0.2%   AS14287 -- TRIAD-TELECOM - Triad Telecom, 
Inc.
13 - 208.88.232.0/225629  0.2%   AS14287 -- TRIAD-TELECOM - Triad Telecom, 
Inc.
14 - 208.73.244.0/225629  0.2%   AS14287 -- TRIAD-TELECOM - Triad Telecom, 
Inc.
15 - 208.78.116.0/225627  0.2%   AS14287 -- TRIAD-TELECOM - Triad Telecom, 
Inc.
16 - 216.162.0.0/20 5627  0.2%   AS14287 -- TRIAD-TEL

The Cidr Report

[cidr-report]

This report has been generated at Fri Jan 17 21:13:37 2014 AEST.
The report analyses the BGP Routing Table of AS2.0 router
and generates a report on aggregation potential within the table.

Check http://www.cidr-report.org/2.0 for a current version of this report.

Recent Table History
Date  PrefixesCIDR Agg
10-01-14488669  276220
11-01-14489052  275870
12-01-14489033  274065
13-01-14489232  273802
14-01-14489156  273952
15-01-14488772  274453
16-01-14489430  274529
17-01-14489707  274209


AS Summary
 46064  Number of ASes in routing system
 18902  Number of ASes announcing only one prefix
  4424  Largest number of prefixes announced by an AS
AS7029 : WINDSTREAM - Windstream Communications Inc
  118904064  Largest address span announced by an AS (/32s)
AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street


Aggregation Summary
The algorithm used in this report proposes aggregation only
when there is a precise match using the AS path, so as 
to preserve traffic transit policies. Aggregation is also
proposed across non-advertised address space ('holes').

 --- 17Jan14 ---
ASnumNetsNow NetsAggr  NetGain   % Gain   Description

Table 489486   274234   21525244.0%   All ASes

AS28573 3446   81 336597.6%   NET Serviços de Comunicação
   S.A.
AS6389  3028   56 297298.2%   BELLSOUTH-NET-BLK -
   BellSouth.net Inc.
AS7029  4424 1666 275862.3%   WINDSTREAM - Windstream
   Communications Inc
AS17974 2737  186 255193.2%   TELKOMNET-AS2-AP PT
   Telekomunikasi Indonesia
AS22773 2326  171 215592.6%   ASN-CXA-ALL-CCI-22773-RDC -
   Cox Communications Inc.
AS4766  2941  962 197967.3%   KIXS-AS-KR Korea Telecom
AS18881 1810   34 177698.1%   Global Village Telecom
AS1785  2151  400 175181.4%   AS-PAETEC-NET - PaeTec
   Communications, Inc.
AS36998 1805  144 166192.0%   SDN-MOBITEL
AS10620 2701 1104 159759.1%   Telmex Colombia S.A.
AS18566 2047  565 148272.4%   MEGAPATH5-US - MegaPath
   Corporation
AS4323  2935 1511 142448.5%   TWTC - tw telecom holdings,
   inc.
AS7303  1741  448 129374.3%   Telecom Argentina S.A.
AS4755  1812  595 121767.2%   TATACOMM-AS TATA
   Communications formerly VSNL
   is Leading ISP
AS7545  2143 1027 111652.1%   TPG-INTERNET-AP TPG Telecom
   Limited
AS7552  1258  156 110287.6%   VIETEL-AS-AP Viettel
   Corporation
AS22561 1229  223 100681.9%   AS22561 - CenturyTel Internet
   Holdings, Inc.
AS9829  1574  693  88156.0%   BSNL-NIB National Internet
   Backbone
AS18101  988  185  80381.3%   RELIANCE-COMMUNICATIONS-IN
   Reliance Communications
   Ltd.DAKC MUMBAI
AS35908  900  107  79388.1%   VPLSNET - Krypt Technologies
AS4808  1158  387  77166.6%   CHINA169-BJ CNCGROUP IP
   network China169 Beijing
   Province Network
AS701   1504  773  73148.6%   UUNET - MCI Communications
   Services, Inc. d/b/a Verizon
   Business
AS24560 1092  368  72466.3%   AIRTELBROADBAND-AS-AP Bharti
   Airtel Ltd., Telemedia
   Services
AS8151  1394  673  72151.7%   Uninet S.A. de C.V.
AS6983  1295  585  71054.8%   ITCDELTA - ITC^Deltacom
AS13977  849  145  70482.9%   CTELCO - FAIRPOINT
   COMMUNICATIONS, INC.
AS7738   846  148  69882.5%   Telemar Norte Leste S.A.
AS855747   57  69092.4%   CANET-ASN-4 - Bell Aliant
   Regional Communications, Inc.
AS4788   921  237  68474.3%   TMNET-AS-AP TM Net, Internet
 

Re: Oklahoma State Univ.

[J. Oquendo]

On Fri, 17 Jan 2014, John Kristoff wrote:

> 
> UNISOG no longer exists.  The REN-ISAC community has, mostly, replaced
> it.
> 
> Have you just tried contacting their security folks directly?  Chances
> are usually high if an .edu has a dedicated security staff and web
> site, that is probably the best place to go:
> 
>   
> 
> Alternatively, REN-ISAC is always helpful if you want to go through
> them for some reason.
> 
> John
> 

I'd forgotten about the great folks at REN-ISAC. Was slapped
in the head before this, so I emailed them. Thanks for the
responses, sorry for the noise. 

-- 
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
J. Oquendo
SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT, RWSP, GREM

"Where ignorance is our master, there is no possibility of
real peace" - Dalai Lama

42B0 5A53 6505 6638 44BB  3943 2BF7 D83F 210A 95AF
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x2BF7D83F210A95AF

Re: Oklahoma State Univ.

[John Kristoff]

On Fri, 17 Jan 2014 13:25:42 -0600
"J. Oquendo"  wrote:

> Yes I know there is UNISOG, not on it anymore. Can someone
> on that list either forward, or put me in touch with one
> in the know there (AS5078) concerning things malware related
> appreciated.

UNISOG no longer exists.  The REN-ISAC community has, mostly, replaced
it.

Have you just tried contacting their security folks directly?  Chances
are usually high if an .edu has a dedicated security staff and web
site, that is probably the best place to go:

  

Alternatively, REN-ISAC is always helpful if you want to go through
them for some reason.

John

Oklahoma State Univ.

[J. Oquendo]

Yes I know there is UNISOG, not on it anymore. Can someone
on that list either forward, or put me in touch with one
in the know there (AS5078) concerning things malware related
appreciated.


-- 
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
J. Oquendo
SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT, RWSP, GREM

"Where ignorance is our master, there is no possibility of
real peace" - Dalai Lama

42B0 5A53 6505 6638 44BB  3943 2BF7 D83F 210A 95AF
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x2BF7D83F210A95AF

Weekly Routing Table Report

[Routing Analysis Role Account]

This is an automated weekly mailing describing the state of the Internet
Routing Table as seen from APNIC's router in Japan.

The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG,
TRNOG, CaribNOG and the RIPE Routing Working Group.

Daily listings are sent to bgp-st...@lists.apnic.net

For historical data, please see http://thyme.rand.apnic.net.

If you have any comments please contact Philip Smith .

Routing Table Report   04:00 +10GMT Sat 18 Jan, 2014

Report Website: http://thyme.rand.apnic.net
Detailed Analysis:  http://thyme.rand.apnic.net/current/

Analysis Summary


BGP routing table entries examined:  477794
Prefixes after maximum aggregation:  190510
Deaggregation factor:  2.51
Unique aggregates announced to Internet: 236762
Total ASes present in the Internet Routing Table: 45894
Prefixes per ASN: 10.41
Origin-only ASes present in the Internet Routing Table:   35494
Origin ASes announcing only one prefix:   16273
Transit ASes present in the Internet Routing Table:5985
Transit-only ASes present in the Internet Routing Table:171
Average AS path length visible in the Internet Routing Table:   4.6
Max AS path length visible:  53
Max AS path prepend of ASN ( 50404)  51
Prefixes from unregistered ASNs in the Routing Table:  2683
Unregistered ASNs in the Routing Table: 638
Number of 32-bit ASNs allocated by the RIRs:   5697
Number of 32-bit ASNs visible in the Routing Table:4415
Prefixes from 32-bit ASNs in the Routing Table:   13942
Number of bogon 32-bit ASNs visible in the Routing Table: 1
Special use prefixes present in the Routing Table:0
Prefixes being announced from unallocated address space:   1907
Number of addresses announced to Internet:   2658908708
Equivalent to 158 /8s, 123 /16s and 186 /24s
Percentage of available address space announced:   71.8
Percentage of allocated address space announced:   71.8
Percentage of available address space allocated:  100.0
Percentage of address space in use by end-sites:   95.4
Total number of prefixes smaller than registry allocations:  166098

APNIC Region Analysis Summary
-

Prefixes being announced by APNIC Region ASes:   113736
Total APNIC prefixes after maximum aggregation:   34266
APNIC Deaggregation factor:3.32
Prefixes being announced from the APNIC address blocks:  116142
Unique aggregates announced from the APNIC address blocks:48679
APNIC Region origin ASes present in the Internet Routing Table:4871
APNIC Prefixes per ASN:   23.84
APNIC Region origin ASes announcing only one prefix:   1215
APNIC Region transit ASes present in the Internet Routing Table:835
Average APNIC Region AS path length visible:4.6
Max APNIC Region AS path length visible: 28
Number of APNIC region 32-bit ASNs visible in the Routing Table:805
Number of APNIC addresses announced to Internet:  729226752
Equivalent to 43 /8s, 119 /16s and 30 /24s
Percentage of available APNIC address space announced: 85.2

APNIC AS Blocks4608-4864, 7467-7722, 9216-10239, 17408-18431
(pre-ERX allocations)  23552-24575, 37888-38911, 45056-46079, 55296-56319,
   58368-59391, 63488-63999, 131072-133631
APNIC Address Blocks 1/8,  14/8,  27/8,  36/8,  39/8,  42/8,  43/8,
49/8,  58/8,  59/8,  60/8,  61/8, 101/8, 103/8,
   106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8,
   116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8,
   123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8,
   163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8,
   203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8,
   222/8, 223/8,

ARIN Region Analysis Summary


Prefixes being announced by ARIN Region ASes:163574
Total ARIN prefixes after maximum aggregation:81969
ARIN Deaggregation factor: 2.00
Prefixes being announced from the ARIN address blocks:   164087
Unique aggregates announced from the ARIN address blocks: 75843
ARIN Region origin ASes present in the Internet Routing Table:15929
ARIN Prefixes per ASN: 

Re: Internet Routing Registries - RADb, etc

[Joe Abley]

On 2014-01-16, at 18:21, Jeroen Massar  wrote:

> On 2014-01-16 23:11, Nick Hilliard wrote:
>> On 16/01/2014 21:22, Jon Lewis wrote:
>>> Also, at least of the ones I've dealt with, there is no verification of
>>> records as they're entered.
>> 
>> on the RIPE IRRDB, there is validation, so you can't just go in and
>> register route: objects for someone else's allocations or assignments.
> 
> You mean auth for RIPE region prefixes, as one can also register
> ARIN/APNIC/etc prefixes in the RIPEdb and then, there is no auth (but a
> mail to d...@ripe.net resolves any issues quite quickly if something fake
> is there)

Yep. For someone with non-RIPE NCC numbers the only manual part of the process 
is getting a maintainer object created. Once you've done that it's likely that 
your new parent route object in the RIPE db will be something like this:

inetnum:199.91.32.0 - 199.255.255.255
netname:NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK
descr:  IPv4 address block not managed by the RIPE NCC
remarks:--
remarks:
remarks:Networks in this range are not in use in
remarks:the RIPE NCC service region.
remarks:
remarks:You can find the whois server to query, or the
remarks:IANA registry to query on this web page:
remarks:http://www.iana.org/assignments/ipv4-address-space
remarks:
remarks:You can access databases of other RIR's at:
remarks:
remarks:AFRINIC (Africa)
remarks:http://www.afrinic.net/ whois.afrinic.net
remarks:
remarks:APNIC (Asia Pacific)
remarks:http://www.apnic.net/ whois.apnic.net
remarks:
remarks:ARIN (Northern America)
remarks:http://www.arin.net/  whois.arin.net
remarks:
remarks:LACNIC (Latin America and the Carribean)
remarks:http://www.lacnic.net/ whois.lacnic.net
remarks:
remarks:--

which includes

mnt-routes: RIPE-NCC-RPSL-MNT

corresponding to

mntner: RIPE-NCC-RPSL-MNT
descr:  This maintainer may be used to create objects to represent
descr:  routing policy in the RIPE Database for number resources not
descr:  allocated or assigned from the RIPE NCC.
admin-c:RD132-RIPE
auth:   MD5-PW # Filtered
remarks:***
remarks:* The password for this object is 'RPSL', without the *
remarks:* quotes. Do NOT use this maintainer as 'mnt-by'. *
remarks:***
mnt-by: RIPE-DBM-MNT
referral-by:RIPE-DBM-MNT
source: RIPE # Filtered


Joe


signature.asc
Description: Message signed with OpenPGP using GPGMail

Re: "trivial" changes to DNS (was: OpenNTPProject.org)

[Tony Finch]

Jared Mauch  wrote:
>
>   I can point anyone interested to the place in the
> bind source to force it to reply to all UDP queries with TC=1
> to force TCP.  should be safe on any authority servers, as a recursive
> server should be able to do outbound TCP.

However see http://www.potaroo.net/ispcol/2013-09/dnstcp.html

Tony.
-- 
f.anthony.n.finchhttp://dotat.at/
Forties, Cromarty: East, veering southeast, 4 or 5, occasionally 6 at first.
Rough, becoming slight or moderate. Showers, rain at first. Moderate or good,
occasionally poor at first.