[140215] in North American Network Operators' Group
Re: Suspecious anycast prefixes
daemon@ATHENA.MIT.EDU (John Kristoff)
Thu May 5 09:11:27 2011
Date: Thu, 5 May 2011 08:10:31 -0500
From: John Kristoff <jtk@cymru.com>
To: Joe Abley <jabley@hopcount.ca>
In-Reply-To: <31E0CDD1-AC16-4E5A-843E-C670F9148E84@hopcount.ca>
Cc: bmanning@vacation.karoshi.com, nanog@nanog.org,
"Yaoqing\(Joey\) Liu" <joey.liuyq@gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Thu, 5 May 2011 11:54:17 +0300
Joe Abley <jabley@hopcount.ca> wrote:
> Perhaps I'm misunderstanding the original question, but the assertion
> that anybody is hijacking that particular prefix seems false.
Furthermore, that exchange prefixes may often appear to be anycast is
not unusual. Those prefixes are often originated by multiple disparate
networks who are connected to the exchange. In a lightning talk I did
at NANOG 41, I talked about mapping peering relationships at exchanges.
When I noted that these prefixes are often announced by exchange
participants, Louie Lee explained that some of his participants often
announce the space to their transit customers so that monitoring and
troubleshooting tools don't cause confusion (e.g. traceroutes).
John
