[140234] in North American Network Operators' Group
Re: Suspecious anycast prefixes
daemon@ATHENA.MIT.EDU (bmanning@vacation.karoshi.com)
Thu May 5 14:34:59 2011
Date: Thu, 5 May 2011 18:34:10 +0000
From: bmanning@vacation.karoshi.com
To: "Yaoqing(Joey) Liu" <joey.liuyq@gmail.com>
In-Reply-To: <BANLkTinqU0yN2NcXS1zn=M5c2HvwNiWwTA@mail.gmail.com>
Cc: bmanning@vacation.karoshi.com, nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Thu, May 05, 2011 at 11:48:31AM -0500, Yaoqing(Joey) Liu wrote:
> On Thu, May 5, 2011 at 8:10 AM, John Kristoff <jtk@cymru.com> wrote:
> > On Thu, 5 May 2011 11:54:17 +0300
> > Joe Abley <jabley@hopcount.ca> wrote:
> >
> >> Perhaps I'm misunderstanding the original question, but the assertion
> >> that anybody is hijacking that particular prefix seems false.
> >
> > Furthermore, that exchange prefixes may often appear to be anycast is
> > not unusual. Those prefixes are often originated by multiple disparate
> > networks who are connected to the exchange.
> You mean that many different exchange points are using the same set of
> prefixes as anycast service in different physical locations?
> That sounds interesting to me.
that has been a fairly common practice for nearly 15 years.
/bill
>
> Yaoqing
>
> In a lightning talk I did
> > at NANOG 41, I talked about mapping peering relationships at exchanges.
> > When I noted that these prefixes are often announced by exchange
> > participants, Louie Lee explained that some of his participants often
> > announce the space to their transit customers so that monitoring and
> > troubleshooting tools don't cause confusion (e.g. traceroutes).
> >
> > John
> >
