[180911] in North American Network Operators' Group
Re: AS4788 Telecom Malaysia major route leak?
daemon@ATHENA.MIT.EDU (Job Snijders)
Fri Jun 12 05:20:37 2015
X-Original-To: nanog@nanog.org
Date: Fri, 12 Jun 2015 11:16:07 +0200
From: Job Snijders <job@instituut.net>
To: Tore Anderson <tore@fud.no>
In-Reply-To: <20150612110934.55621a42@echo.ms.redpill-linpro.com>
Cc: NANOG <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
On Fri, Jun 12, 2015 at 11:09:34AM +0200, Tore Anderson wrote:
> I see tons of bogus routes show up with AS4788 in the path, and at
> least AS3549 is acceping them.
>
> E.g. for the RIPE NCC (193.0.0.0/21):
>
> [BGP/170] 00:20:29, MED 1000, localpref 150
> AS path: 3549 4788 12859 3333 I, validation-state: valid
> > to 64.210.69.85 via xe-1/1/0.0
It appears that AS3549 propagated the (almost?) full routing table leak
to its peers, where in lots of instances max prefix kicked in.
This has global impact, lots of alerts on the SQA collector page http://sqa.ring.nlnog.net/
Kind regards,
Job
