[AusNOG] AAPT Routing Issue

Thu Dec 28 14:54:23 EST 2017

Yeah we end up having to do this and route traffic via Vocus at times with TPG/AAPT/PIPE traffic as TPG no longer peer with public IX exchanges.

https://www.ix.asn.au/peers-vic/ <https://www.ix.asn.au/peers-vic/>
https://www.ix.asn.au/peers-nsw/ <https://www.ix.asn.au/peers-nsw/>

Related, this means that if you have sites behind Cloudflare (who do peer with IX) as a CDN / DDoS protection for example all your traffic routes off-shore with TPG & Friends - https://blog.cloudflare.com/bandwidth-costs-around-the-world/ <https://blog.cloudflare.com/bandwidth-costs-around-the-world/>

--
Sam McLeod
https://smcleod.net
https://twitter.com/s_mcleod

Words are my own opinions and do not necessarily represent those of my employer or partners.

> On 25 Dec 2017, at 11:51 am, Christopher Hawker <christopher at allitservices.com.au> wrote:
> 
> A workaround I used was to route the traffic to my network in a DC. Reduces the latency by about 200ms and drops the number of hops.
> 
> Merry Christmas and a Happy New Year to all.
> 
> CH.
> 
> 
> 
> Sent from my Samsung Galaxy smartphone.
> 
> 
> 
> <imaged0bb7c.PNG> <http://www.allitservices.com.au/>	email: christopher at allitservices.com.au <mailto:christopher at allitservices.com.au>
> phone: 1300 4 ALL IT | 1300 4 255 48
> website: www.allitservices.com.au <http://www.allitservices.com.au/>
> Sydney: Suite 49 Lifestyle Working
> 117 Old Pittwater Road Brookvale 2100
> Melbourne: Suite 4 Lifestyle Working Collins Street
> 838 Collins Street Victoria Harbour 3008
> 
> 
> -------- Original message --------
> From: Joseph Goldman <joe at apcs.com.au>
> Date: 25/12/17 10:08 am (GMT+10:30)
> To: ausnog at lists.ausnog.net
> Subject: Re: [AusNOG] AAPT Routing Issue
> 
> Yup I get the same issue - works perfectly from my peered network but on a relatives Foxtel (read: Telstra) connection it goes overseas.
> 
> If only there was enough of this type of traffic to force the big guys onto peering fabrics.
> 
> 
> On 23/12/17 20:02, Nathan Brookfield wrote:
>> It doesn’t look like a problem as such to me, just that AAPT don’t peer anywhere that has a more specific AU route and the originator are not advertising to Transit in AU, only Peering fabrics.
>> 
>> Nathan Brookfield
>> Chief Executive Officer
>> 
>> Simtronic Technologies Pty Ltd
>> http://www.simtronic.com.au <https://linkprotect.cudasvc.com/url?a=http://www.simtronic.com.au&c=E,1,OeMtMwJAOVzKo0K1LM3ICJNgX8Q59HNH3YDjrrSfqmyK3zVTrQc-Hqe9J6pHaHnjjOpEEy-ZZSM3GLXxhbgP7I7pe8I-N0o6d0VqgZZT&typo=1>
>> 
>> On 23 Dec 2017, at 19:59, Christopher Hawker <me at chrishawker.com.au <mailto:me at chrishawker.com.au>> wrote:
>> 
>> Hi All,
>> 
>> 
>> 
>> It appears as though AAPT has a routing issue. For some reason when pinging IBM's Quad9, it goes overseas:
>> 
>> 
>> 
>> C:\Users\CH>tracert 9.9.9.9
>> 
>> Tracing route to dns.quad9.net <https://linkprotect.cudasvc.com/url?a=http://dns.quad9.net&c=E,1,qHd3ixGR9AlX9V6DzUeJJ-DZL_b-LGLqABMI3p7WpYHKTKqEGL2hwvCAIGHt4XagHTv-i1AyCp2yEzJkW1rhF89gA3To0swTl1wwQBL06qN8U45e0ejpjFE,&typo=1> [9.9.9.9]
>> over a maximum of 30 hops:
>> 
>>   1    <1 ms    <1 ms    <1 ms  172.16.0.6
>>   2     *        *        *     Request timed out.
>>   3     9 ms     8 ms     9 ms  po41.sglebbrdr11.aapt.net.au <https://linkprotect.cudasvc.com/url?a=http://po41.sglebbrdr11.aapt.net.au&c=E,1,v-I2XvDzp_pHcCMZ2YKFIxqibyD1glspuDRFJxuKJ9q919LP9AsEjJjQESjhhJNoyDGN9vx1H5GQljwu81P-kKrH3jv5w0NC31hoYAPiDsB604YKyb9s83sD&typo=1> [202.10.14.198]
>>   4     9 ms    14 ms     9 ms  syd-gls-har-wgw1-be-30.tpgi.com.au <https://linkprotect.cudasvc.com/url?a=http://syd-gls-har-wgw1-be-30.tpgi.com.au&c=E,1,0sAOb-sjvkiEGJvCUoLoYcwvqJKrq-_OskYHs5XHm1IwLmkk4psRwgs415_4wBx93P2iDctgax1Tlee6ubXOmShC79OI_5gq3_frE_1ieYnEuPEp&typo=1> [203.219.107.197]
>>   5    15 ms    14 ms    15 ms  203.29.134-67.tpgi.com.au <https://linkprotect.cudasvc.com/url?a=http://67.tpgi.com.au&c=E,1,CLPc01KR2oxn__RWhlxV66TV-o-cY-7JxeBZ5b8p21AB7GQc0ur4y7c2vA6fNgW3_Hn2CXME51Cwpi0Riy3TLKwLUZWYxFXISIzwT7TKLxvxcRGqppfkgqks778,&typo=1> [203.29.134.67]
>>   6   149 ms   180 ms   150 ms  ix-ae-18-0.tcore1.HK2-Hong-Kong.as6453.net <https://linkprotect.cudasvc.com/url?a=http://ix-ae-18-0.tcore1.HK2-Hong-Kong.as6453.net&c=E,1,8YfJpAtslAYRcCjK5id56jF_begz5prZCuUl1docEP_eyUvXI692cxBasgNWxoSUDOsF8hKlgt3dEvIPFlNKyeKTTwFrLugGSBXJGWf1InG9Sg0W21Lkbvg,&typo=1> [180.87.112.221]
>>   7   344 ms   368 ms   368 ms  xe0-3-2-10G.ar2.CLK1.gblx.net <https://linkprotect.cudasvc.com/url?a=http://xe0-3-2-10G.ar2.CLK1.gblx.net&c=E,1,mP3z_ChbjHx0MF57Ql3fPrO6tjGPghvaUR3reZeAHRiil6HWf7sf9pIlUPzDm9pDYPuumvJ3I-a_LM_5Ydu1RazDbOjxWz7wU_zz5F_c&typo=1> [64.212.107.9]
>>   8   301 ms   293 ms   272 ms  ae1-30G.ar1.QPG2.gblx.net <https://linkprotect.cudasvc.com/url?a=http://ae1-30G.ar1.QPG2.gblx.net&c=E,1,8FQxuTtGmfMUYNqPb05tr6qBGmee_sfCoGpzQ92PnbVczohcTNKCk126ApeB6hQTMFUCuzv5-p47YYNg9kopn6nMJm2ovbUz9w1JaXPGf3e9Pqo,&typo=1> [67.16.132.174]
>>   9   283 ms   304 ms   303 ms  64.214.66.70
>>  10   293 ms   269 ms   264 ms  dns.quad9.net <https://linkprotect.cudasvc.com/url?a=http://dns.quad9.net&c=E,1,KeE3IxL5xuM_L1nmsRSPVViVKn4Y5VqCvJMkIXJM0CxjwgLiaeu2Oi2UPL44eRCzqFl0zeUVySc6bcyP-kM-u0fvhgETufmTMmTI7ajlm_TZnxC_ZYdJeTfm&typo=1> [9.9.9.9]
>> 
>> Trace complete.
>> 
>> 
>> However from an Over the Wire service, it goes to their Sydney server (as below):
>> 
>> 
>> 
>> C:\Users\CH>tracert 9.9.9.9
>> 
>> Tracing route to dns.quad9.net <https://linkprotect.cudasvc.com/url?a=http://dns.quad9.net&c=E,1,KbQqUZysa6lb5YCIZbHCJk8zbJhM_LpMkKb724UeOhwV9KNi-mlijobOMjegZ_BkH0RaZIOHmMHrJ0pZmd7x-3gwyz4BAapg6CIBjmZ7AGp06w45evD_HgY,&typo=1> [9.9.9.9]
>> over a maximum of 30 hops:
>> 
>>   1    <1 ms    <1 ms    <1 ms  192.168.3.254
>>   2     1 ms    <1 ms    <1 ms  nnn.nnn.nnn.nnn
>>   3     3 ms     2 ms     2 ms  nnn.nnn.nnn.nnn
>>   4     3 ms     3 ms     3 ms  nnn.nnn.nnn.nnn
>>   5     1 ms     1 ms     1 ms  thisisobfuscatedtext.syd.core.otw.net.au <https://linkprotect.cudasvc.com/url?a=https://thisisobfuscatedtext.syd.core.otw.net.au&c=E,1,6k7KJt529F2YGa6JIPg1okh1dv8x4MePx00IOQi0stJ5Z0ln9Ds0WEcdEKSZvm-8uaUBvka6VT8e8XgAc_6uSMs1Nq1yHWTJnBjECeJHHjA,&typo=1> [nnn.nnn.nnn.nnn]
>>   6     1 ms     1 ms     1 ms  10.254.251.164
>>   7     2 ms     4 ms     2 ms  42.syd.equinix.com <https://linkprotect.cudasvc.com/url?a=http://42.syd.equinix.com&c=E,1,nBhdVKNFDgbjn93FA5BywTe5v0ei4CRH2DMmQpyzWC96y0P-LCP5FmTEGWQexAesx0DdD-eRldQ_9iJOALjtw1gWG_SeZT5Yey7zeiJCCCoYxp8,&typo=1> [45.127.172.68]
>>   8     1 ms     1 ms     1 ms  dns.quad9.net <https://linkprotect.cudasvc.com/url?a=http://dns.quad9.net&c=E,1,EAjOoMwN7BmYyBfCIc9vZbGG1_AsSjAEbWICurpbOXRVBlwDNszeRUsr9qr77wTGB3MwDphv1Snxq95REufuQEv60OhV0rqvL8wVSnI27sZuDitJo59uz6ToRfs,&typo=1> [9.9.9.9]
>> 
>> Trace complete.
>> 
>> Any idea what the possible issue is?
>> 
>> 
>> 
>> Thanks,
>> 
>> CH.
>> 
>> _______________________________________________
>> AusNOG mailing list
>> AusNOG at lists.ausnog.net <mailto:AusNOG at lists.ausnog.net>
>> http://lists.ausnog.net/mailman/listinfo/ausnog <https://linkprotect.cudasvc.com/url?a=http://lists.ausnog.net/mailman/listinfo/ausnog&c=E,1,2F01LUo38JbUBQFWI1nHy2F9WIMyUUVQDnPhLz1IoGmKi_sdi47RbIkDN8XTJFR-q_73SzdMwGBsR6c3phRlYBW2MvWmo2pUbDRSOaxJ9Q,,&typo=1>
>> 
>> 
>> _______________________________________________
>> AusNOG mailing list
>> AusNOG at lists.ausnog.net <mailto:AusNOG at lists.ausnog.net>
>> http://lists.ausnog.net/mailman/listinfo/ausnog <https://linkprotect.cudasvc.com/url?a=http://lists.ausnog.net/mailman/listinfo/ausnog&c=E,1,clyN_AR88CJfmKY4j9-J7YcS7jfSem4np54EWtRd-apjczLeggqe7DDrVYk2ej5QAhgFt79ZyVSqzF8Jvj-55kIAbpVZG3UutUFSho0fyx4,&typo=1>
> 
> -- 
> 
> Kind Regards,
> Joseph Goldman
> 
>  
> <APCS-Logo-S.png>
> 
> Joseph Goldman | Network Manager / Lead Software Developer
> Asia Pacific Communication Specialist
> AUS Mobile. +61 408 645 819
> PNG Mobile. +675 78 081 223
> Email. joe at apcs.com.au <mailto:joe at apcs.com.au> l Web. www.apcs.com.au <https://linkprotect.cudasvc.com/url?a=https://apcs.com.au/&c=E,1,Iqr_jQUUDcoX0IxcbdAiu6288JsU128UDr-Ebva1qWdxisyuvVzHnWqyBKvxklS5o1G0gns_pcYfFhrIsvQpS-LFWkiFdMkMS7nLxwLkAA,,&typo=1>
> * * * * * * * * * 
> 
> This e-mail message may contain confidential or legally privileged information and is intended only for the use of the intended recipient(s). Any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is prohibited. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, or contain viruses. Anyone who communicates with us by e-mail is deemed to have accepted these risks. Asia Pacific Communication Specialist are not responsible for errors or omissions in this message and denies any responsibility for any damage arising from the use of e-mail. Any opinion and other statement contained in this message and any attachment are solely those of the author and do not necessarily represent those of the company.
> 
>  
> 
> 
> 
> 
>  
>  
> 
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20171228/a212406d/attachment.html>