Re: Global Akamai Outage

2021-07-27 Thread Lukas Tribus
On Tue, 27 Jul 2021 at 16:10, Mark Tinka wrote: > > > > On 7/26/21 19:04, Lukas Tribus wrote: > > > rpki-client can only remove outdated VRP's, if it a) actually runs and > > b) if it successfully completes a validation cycle. It also needs to > > do this BEFORE the RTR server distributes data. >

Re: Global Akamai Outage

2021-07-27 Thread Lukas Tribus
Hello, On Tue, 27 Jul 2021 at 21:02, heasley wrote: > > But I have to emphasize that all those are just examples. Unknown bugs > > or corner cases can lead to similar behavior in "all in one" daemons > > like Fort and Routinator. That's why specific improvements absolutely > > do not mean we

Re: Anycast but for egress

2021-07-27 Thread Daniel Corbe
> On Jul 27, 2021, at 17:20, Vimal wrote: > > Hi all, great replies. :) Let me clarify my initial question, and then > respond one by one: > > My intention is to run a web-crawling service on a public cloud. This service > is geographically distributed, and therefore will run in multiple

Re: Anycast but for egress

2021-07-27 Thread Andras Toth
Since you mentioned AWS, have you tried AWS Global Accelerator? You get a pair of globally anycasted static IPs. https://aws.amazon.com/global-accelerator/ Another alternative is to request a contiguous IP range of EIPs (/28 or /24 etc) that you can use for your EC2 instances or VPC resources.

Re: Global Akamai Outage

2021-07-27 Thread Mark Tinka
On 7/26/21 19:04, Lukas Tribus wrote: rpki-client can only remove outdated VRP's, if it a) actually runs and b) if it successfully completes a validation cycle. It also needs to do this BEFORE the RTR server distributes data. If rpki-client for whatever reason doesn't complete a validation

Anycast but for egress

2021-07-27 Thread Vimal
(Unsure if this is the right forum to ask this question, but here goes:) >From what I understand, IP Anycast can be used to steer traffic into a server that's close to the client. I am curious if anyone here has/encountered a setup where they use anycast IP on their gateways... to have a

Re: Anycast but for egress

2021-07-27 Thread Owen DeLong via NANOG
> On Jul 27, 2021, at 10:54 , Vimal wrote: > > (Unsure if this is the right forum to ask this question, but here goes:) > > From what I understand, IP Anycast can be used to steer traffic into a server > that's close to the client. > > I am curious if anyone here has/encountered a setup

Re: Anycast but for egress

2021-07-27 Thread Bill Woodcock
> On Jul 27, 2021, at 10:54 AM, Vimal wrote: > > (Unsure if this is the right forum to ask this question Sure, why not… There isn’t anywhere more appropriate, really. > From what I understand, IP Anycast can be used to steer traffic into a server > that's close to the client. That’s the

Re: Anycast but for egress

2021-07-27 Thread Matt Harris
Matt Harris|Infrastructure Lead 816-256-5446|Direct Looking for help? Helpdesk|Email Support We build customized end-to-end technology solutions powered by NetFire Cloud. On Tue, Jul 27, 2021 at 1:29 PM Vimal wrote: > (Unsure if this is the right forum to ask this question, but here goes:) > >

Re: Global Akamai Outage

2021-07-27 Thread heasley
Mon, Jul 26, 2021 at 07:04:41PM +0200, Lukas Tribus: > Hello! > > On Mon, 26 Jul 2021 at 17:50, heasley wrote: > > > > Mon, Jul 26, 2021 at 02:20:39PM +0200, Lukas Tribus: > > > rpki-client 7.1 emits a new per VRP attribute: expires, which makes it > > > possible for RTR servers to stop

Re: Anycast but for egress

2021-07-27 Thread Adam Thompson
Without any sarcasm: to make it harder to block. If, say, Google, always crawled your site from 8.8.1.2 (random made-up example) then you would see a not-insignificant number of hosts and networks null-routing that IP. I have no idea why someone would do so, but I've seen it done many times.

Re: Anycast but for egress

2021-07-27 Thread Daniel Corbe
> On Jul 27, 2021, at 12:54, Vimal wrote: > > (Unsure if this is the right forum to ask this question, but here goes:) > > From what I understand, IP Anycast can be used to steer traffic into a server > that's close to the client. > > I am curious if anyone here has/encountered a setup

Re: Anycast but for egress

2021-07-27 Thread Mark Tinka
On 7/27/21 20:48, Bill Woodcock wrote: In practice, that means that services are bound to a common shared address (an “anycast service address”) as those services are deployed on servers in different locations. The service address is advertised into the BGP routing infrastructure.