[93042] in North American Network Operators' Group
Re: register.com down sev0?
daemon@ATHENA.MIT.EDU (alex@pilosoft.com)
Wed Oct 25 22:03:57 2006
Date: Wed, 25 Oct 2006 21:54:56 -0400 (EDT)
From: alex@pilosoft.com
Cc: nanog@merit.edu
In-Reply-To: <Pine.LNX.4.64.0610251839480.28174@pants.snark.net>
Errors-To: owner-nanog@merit.edu
On Wed, 25 Oct 2006, Matt Ghali wrote:
> On Wed, 25 Oct 2006, alex@pilosoft.com wrote:
>
> > I'm seeing *.register.com down (including ns*) from everywhere. Just a
> > heads-up.
>
> I'll take your word on exhaustively checking every possible address.
> BTW, do you mean nameservers down, webservers down, or something else?
> Did the Internet break?
*.register.com means nameservers, webservers, whois servers, etc. Of
course, Internet does not break, but we've received quite a number of
calls about "internet is down" - given that register.com serves a large
number of domains, yes, this is operationally affecting.
> > Would be interesting to see the RFO for that one, including the "why
> > we didn't have any DNS servers offsite
>
> They colo in more than a half-dozen facilities around the world.
>
> > or used anycast to at least limit amount of damage".
>
> I also have information from a pretty good source that they actually do
> quite a bit of anycast.
Not that I can see - possibly that depends on a specific domain's
webservers.
The glue servers for register.com themselves:
Name: ns1.register.com
Address: 216.21.234.96
Name: ns2.register.com
Address: 216.21.226.96
Name: ns3.register.com
Address: 216.21.234.97
Name: ns4.register.com
Address: 216.21.226.97
(note just two different /24s)
Both of those /24s were down/down about 30 minutes ago, and are
flapping/flapping now.
route-views.oregon-ix.net>show ip bgp 216.21.234.73
...
BGP routing table entry for 216.21.234.0/24, version 5214460
701 7018 4264 13910, (suppressed due to dampening)
157.130.10.233 from 157.130.10.233 (137.39.3.60)
Origin IGP, localpref 100, valid, external
Dampinfo: penalty 898, flapped 5 times in 00:35:15, reuse in 00:03:50
route-views.oregon-ix.net>show ip bgp 216.21.226.97
BGP routing table entry for 216.21.226.0/24, version 5214460
...
701 7018 4264 13910, (suppressed due to dampening)
157.130.10.233 (inaccessible) from 157.130.10.233 (137.39.3.60)
Origin IGP, localpref 100, valid, external
Dampinfo: penalty 861, flapped 5 times in 00:36:13, reuse in 00:03:00
From various vantage points, both /24s are routed exactly the same (7018
in NYC).
-alex
