[AusNOG] Issue getting routes from Telstra to 49.156.16.0/22

Kieran Seal ktseal.lists at gmail.com
Wed May 2 19:33:20 EST 2012


I'm surprised Telstra didn't learn their lesson a couple of months back with regards to filtering their customers' routes properly.

That aside, I'm actually curious as to how this actually happened. For Dodo to be advertising the route to Telstra in the first place, they must have had the route through Optus installed in their routing table. Im guessing that Dodo must have a default route pointing towards Telstra, but why was it even used if they had a more specific route through Optus? It should have just routed through Dodo to Optus as advertised, and nobody would have been any the wiser…

Cheers,
Kieran

On 02/05/2012, at 8:28 AM, Sheng Yeo wrote:

> Hi Everyone, 
> 
> This issue has now been resolved. Thanks to all the help everyone has sent through. 
> 
> A summary of the issue is that Dodo advertised our /22 subnet that caused a routing loop. All traffic leaving Telstra was being sent to Dodo and then back to Telstra in a loop. 
> 
> I managed to contact the Telstra and Dodo NOCs and 1h 45 minutes after the change was made the issue was rectified. 
> 
> What avenues can we pursue to ensure this doesn't happen again? I know there isn't much but I would like to know what the complaint procedures are for this?
> 
> Cheers,
>  
> Sheng Yeo
> Managing Director
> OrionVM Cloud Platform
>  
> Mobile: +61 402 098 008
> Phone: +61 2 8004 6408
> Email: sheng.yeo at orionvm.com.au
> Web: www.orionvm.com.au
>  
> This e-mail message and any attachments contain information that is confidential and may be subject to legal privilege.If you are not the intended recipient, you must not peruse, use, pass on or copy this message or any attachments. If you have received this e-mail in error, please notify us by return e-mail and erase all copies of this message including any attachments.
> 
> 
> 
> On 2 May 2012 08:25, Sheng Yeo <sheng.yeo at orionvm.com.au> wrote:
> Thanks Tom, 
> 
> We are on the phone with Telstra and Dodo now. Finally found an engineering contact to look at it, but still trying to resolve. 
> 
> Cheers,
>  
> Sheng Yeo
> Managing Director
> OrionVM Cloud Platform
>  
> Mobile: +61 402 098 008
> Phone: +61 2 8004 6408
> Email: sheng.yeo at orionvm.com.au
> Web: www.orionvm.com.au
>  
> This e-mail message and any attachments contain information that is confidential and may be subject to legal privilege.If you are not the intended recipient, you must not peruse, use, pass on or copy this message or any attachments. If you have received this e-mail in error, please notify us by return e-mail and erase all copies of this message including any attachments.
> 
> 
> 
> On 2 May 2012 08:20, Tom Paseka <tom at cloudflare.com> wrote:
> Anyone in these prefixes will be having reachability issues, this is what Telstra is accepting from dodo behind Optus....
> 
> 
> route-views>show ip bgp regexp ^1221_38285_.*_7474
> BGP table version is 3230668410, local router ID is 128.223.51.103
> Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
>               r RIB-failure, S Stale
> Origin codes: i - IGP, e - EGP, ? - incomplete
> 
>    Network          Next Hop            Metric LocPrf Weight Path
> *  49.156.16.0/24   203.62.252.186                         0 1221 38285 38285 38285 7474 4826 55884 55884 55884 55884 55884 i
> *  49.156.17.0/24   203.62.252.186                         0 1221 38285 38285 38285 7474 4826 55884 55884 55884 55884 55884 i
> *  49.156.18.0/24   203.62.252.186                         0 1221 38285 38285 38285 7474 4826 55884 55884 55884 55884 55884 i
> *  49.156.19.0/24   203.62.252.186                         0 1221 38285 38285 38285 7474 4826 55884 55884 55884 55884 55884 i
> *  61.8.184.0/21    203.62.252.186                         0 1221 38285 38285 38285 7474 38809 24381 i
> *  101.234.136.0/23 203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 2.998 i
> *  111.125.160.0/23 203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 2.998 i
> *  111.125.166.0/23 203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 2.998 i
> *  113.52.224.0/22  203.62.252.186                         0 1221 38285 38285 38285 7474 2764 ?
> *  113.203.32.0/19  203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 2.998 i
> *  114.111.132.0/23 203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 2.998 i
> *  114.111.140.0/24 203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 2.998 i
> *  116.50.16.0/23   203.62.252.186                         0 1221 38285 38285 38285 7474 38809 24381 i
> *  116.50.16.0/21   203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24381 i
> *  118.82.43.0/24   203.62.252.186                         0 1221 38285 38285 38285 7474 2764 38714 i
> *  118.127.0.0/18   203.62.252.186                         0 1221 38285 38285 38285 7474 7473 6939 45483 i
> *  118.127.2.0/23   203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
> *  118.127.6.0/24   203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
> *  118.127.8.0/24   203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
> *  118.127.8.0/21   203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
> *  118.127.9.0/24   203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
> *  118.127.10.0/24  203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
> *  118.127.11.0/24  203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
> *  118.127.14.0/24  203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
> *  118.127.15.0/24  203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
> *  118.127.20.0/22  203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
> *  118.127.24.0/24  203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
>    Network          Next Hop            Metric LocPrf Weight Path
> *  118.127.24.0/22  203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
> *  118.127.25.0/24  203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
> *  118.127.50.0/23  203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
> *  118.127.52.0/22  203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
> *  119.15.96.0/20   203.62.252.186                         0 1221 38285 38285 38285 7474 4826 38826 i
> *  119.160.224.0/23 203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 2.998 i
> *  122.100.0.0/23   203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 2.998 i
> *  124.150.165.0/24 203.62.252.186                         0 1221 38285 38285 38285 7474 4826 18015 i
> *  202.53.4.0/22    203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24381 i
> *  202.60.64.0/21   203.62.252.186                         0 1221 38285 38285 38285 7474 4826 45425 45425 45425 45425 24238 i
> *  202.60.64.0/20   203.62.252.186                         0 1221 38285 38285 38285 7474 4826 45425 45425 45425 45425 24238 i
> *  202.60.64.0/19   203.62.252.186                         0 1221 38285 38285 38285 7474 7473 6939 45483 i
> *  202.60.67.0      203.62.252.186                         0 1221 38285 38285 38285 7474 4826 45425 45425 45425 45425 24238 i
> *  202.60.72.0/21   203.62.252.186                         0 1221 38285 38285 38285 7474 4826 45425 45425 45425 45425 24238 i
> *  202.60.73.0      203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
> *  202.60.83.0      203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
> *  202.60.87.0      203.62.252.186                         0 1221 38285 38285 38285 7474 4826 45425 45425 45425 45425 24238 i
> *  202.60.88.0      203.62.252.186                         0 1221 38285 38285 38285 7474 4826 45425 45425 45425 45425 24238 i
> *  202.60.88.0/23   203.62.252.186                         0 1221 38285 38285 38285 7474 4826 45425 45425 45425 45425 24238 i
> *  202.60.89.0      203.62.252.186                         0 1221 38285 38285 38285 7474 4826 45425 45425 45425 45425 24238 i
> *  202.60.90.0      203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
> *  202.60.92.0      203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
> *  202.60.94.0/23   203.62.252.186                         0 1221 38285 38285 38285 7474 4826 45425 45425 45425 45425 24238 i
> *  203.25.143.0     203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24381 i
> *  203.26.204.0     203.62.252.186                         0 1221 38285 38285 38285 7474 4826 38826 i
> *  203.27.24.0      203.62.252.186                         0 1221 38285 38285 38285 7474 38287 i
> *  203.56.37.0      203.62.252.186                         0 1221 38285 38285 38285 7474 4826 24238 24238 24238 24238 24238 i
> *  203.153.192.0/20 203.62.252.186                         0 1221 38285 38285 38285 7474 7545 7545 24130 24130 24130 4829 4829 4829 4829 4829 4829 4829 4829 4829 4829 4829 i
> route-views>
> 
> On Tue, May 1, 2012 at 2:57 PM, Tom Paseka <tom at cloudflare.com> wrote:
> Telstra / Dodo fail again!
> 
> route-views3>show ip bgp 49.156.16.0
> BGP routing table entry for 49.156.16.0/24, version 1921716143
> Paths: (14 available, best #14, table Default-IP-Routing-Table)
>   3561 4637 4637 4637 4637 4637 4637 4637 4637 4637 4637 4637 1221 38285 38285 38285 7474 4826 55884 55884 55884 55884 55884
>     206.24.210.102 from 206.24.210.102 (206.24.210.102)
>       Origin IGP, localpref 100, valid, external
> 
> Telstra, please put proper prefix lists, as-path filters on dodo :)
> 
> On Tue, May 1, 2012 at 2:28 PM, Sheng Yeo <sheng.yeo at orionvm.com.au> wrote:
> Hi Everyone, 
> 
> We were notified recently that no customers on Telstra could see our 49.156.16.0/22 subnet as it appears to be stuck in a routing loop within the Telstra network, looping to Dodo and back. 
> 
> Does anyone have a contact at Telstra or is anyone from Telstra on list who could investigate this issue for us?
> 
> Cheers,
>  
> Sheng Yeo
> Managing Director
> OrionVM Cloud Platform
>  
> Mobile: +61 402 098 008
> Phone: +61 2 8004 6408
> Email: sheng.yeo at orionvm.com.au
> Web: www.orionvm.com.au
>  
> This e-mail message and any attachments contain information that is confidential and may be subject to legal privilege.If you are not the intended recipient, you must not peruse, use, pass on or copy this message or any attachments. If you have received this e-mail in error, please notify us by return e-mail and erase all copies of this message including any attachments.
> 
> Telstra Traceroute: 
> 
> 
>   1 TenGigabitEthernet0-12-0-2.exi-core1.Melbourne.telstra.net (203.50.80.1) 4 msec 4 msec 4 msec
>   2 Bundle-Ether1.lon70.Melbourne.telstra.net (203.50.6.2) 0 msec 12 msec 12 msec
>   3 au12.lnk.telstra.net (165.228.136.78) 4 msec 0 msec 0 msec
>   4 123-2-5-2.core.dodo.com.au (123.2.5.2) [AS 38285] 0 msec 0 msec 0 msec
>   5 Bundle-Ether11.win24.Melbourne.telstra.net (165.228.21.137) 4 msec 12 msec 12 msec
>   6 Bundle-Ether6.win-core1.melbourne.telstra.net (203.50.11.58) 4 msec 12 msec 12 msec
>   7 Bundle-Ether1.win18.Melbourne.telstra.net (203.50.6.114) 4 msec 12 msec 12 msec
>   8 Bundle-Ether2.lon70.Melbourne.telstra.net (203.50.6.77) 8 msec 12 msec 12 msec
>   9 au12.lnk.telstra.net (165.228.136.78) 0 msec 0 msec 4 msec
>  10 123-2-5-2.core.dodo.com.au (123.2.5.2) [AS 38285] 0 msec 0 msec 0 msec
>  11 Bundle-Ether11.win24.Melbourne.telstra.net (165.228.21.137) 0 msec 12 msec 12 msec
>  12 Bundle-Ether6.win-core1.melbourne.telstra.net (203.50.11.58) 4 msec 12 msec 12 msec
>  13 Bundle-Ether1.win18.Melbourne.telstra.net (203.50.6.114) 4 msec 12 msec 12 msec
>  14 Bundle-Ether2.lon70.Melbourne.telstra.net (203.50.6.77) 8 msec 12 msec 12 msec
>  15 au12.lnk.telstra.net (165.228.136.78) 0 msec 4 msec 0 msec
>  16 123-2-5-2.core.dodo.com.au (123.2.5.2) [AS 38285] 4 msec 0 msec 0 msec
>  17 Bundle-Ether11.win24.Melbourne.telstra.net (165.228.21.137) 12 msec 12 msec 12 msec
>  18 Bundle-Ether6.win-core1.melbourne.telstra.net (203.50.11.58) 4 msec 12 msec 12 msec
>  19 Bundle-Ether1.win18.Melbourne.telstra.net (203.50.6.114) 4 msec 12 msec 12 msec
>  20 Bundle-Ether2.lon70.Melbourne.telstra.net (203.50.6.77) 8 msec 12 msec 12 msec
>  21 au12.lnk.telstra.net (165.228.136.78) 0 msec 4 msec 0 msec
>  22 123-2-5-2.core.dodo.com.au (123.2.5.2) [AS 38285] 0 msec 4 msec 0 msec
>  23 Bundle-Ether11.win24.Melbourne.telstra.net (165.228.21.137) 12 msec 12 msec 12 msec
>  24 Bundle-Ether6.win-core1.melbourne.telstra.net (203.50.11.58) 4 msec 12 msec 12 msec
>  25 Bundle-Ether1.win18.Melbourne.telstra.net (203.50.6.114) 4 msec 12 msec 12 msec
>  26 Bundle-Ether2.lon70.Melbourne.telstra.net (203.50.6.77) 8 msec 12 msec 12 msec
>  27 au12.lnk.telstra.net (165.228.136.78) 0 msec 4 msec 0 msec
>  28 123-2-5-2.core.dodo.com.au (123.2.5.2) [AS 38285] 4 msec 0 msec 4 msec
>  29 Bundle-Ether11.win24.Melbourne.telstra.net (165.228.21.137) 8 msec 12 msec 12 msec
>  30 Bundle-Ether6.win-core1.melbourne.telstra.net (203.50.11.58) 4 msec 12 msec 12 msec
> 
> 
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
> 
> 
> 
> 
> 
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20120502/d119e951/attachment.html>


More information about the AusNOG mailing list