[as112-ops] [IANA #516549] Blackhole servers
Clement Cavadore
clement at cavadore.net
Fri Dec 23 14:43:57 UTC 2011
Hi,
OK, thank you for your traceroutes !
As far as I know, we didn't have any major issue between Dec 12th and Dec
21st on Hivane's node.
We have changed the hardware on Dec 6th, since we had increasing
queries/s,and now everything seems fine (NSD helps a lot on that !).
blackhole-1 & 2 are on the same physical server, on our side, so my guess
is that there may have been some loss on the path at the time you
experienced slowness/non-response. It's a pretty long path between
Winnipeg
& Paris. Strange that MTS does not get any better route/aspath than over
Linx for AS112.
Best regards,
Clément Cavadore
On Thu, 22 Dec 2011 17:37:03 -0500, "mohammed.el-shakweer at bell.ca"
<mohammed.el-shakweer at bell.ca> wrote:
> Please note, that these tests are from the internal network of a Bell
> Enterprise Customer, this is not Bell Internet DNS. This output is
coming
> from the customers internet link in Western Canada (Winnipeg) from the
> Service provider MTS. Hope that helps
>
>
> The below traceroutes are done the customers router connecting to the
> service provider MTS;
>
> RO9WG006#traceroute 193.17.192.194
>
> Type escape sequence to abort.
> Tracing the route to 193.17.192.194
>
> 1 64.4.68.77 [AS 15290] 0 msec 0 msec 4 msec
> 2 64.4.64.139 [AS 15290] 0 msec 0 msec 0 msec
> 3 * * *
> 4 138.187.159.1 [AS 15290] 132 msec 132 msec 132 msec
> 5 138.187.129.157 [AS 15290] 132 msec 136 msec 132 msec
> 6 138.187.130.7 [AS 15290] 144 msec 144 msec 144 msec
> 7 164.128.33.218 [AS 15290] 136 msec 136 msec 132 msec
> 8 193.17.192.134 [AS 15290] 164 msec 132 msec 136 msec
> 9 193.200.42.138 [AS 15290] 136 msec 132 msec 136 msec
> 10 * * *
> 11 * * *
> 12 * * *
> 13 * * *
> 14 * * *
> 15 * * *
> 16 * * *
> 17 * * *
> 18 * * *
> 19 * * *
> 20 * * *
> 21 * * *
> 22 *
>
>
>
> RO9WG006#traceroute 192.175.48.1
>
> Type escape sequence to abort.
> Tracing the route to 192.175.48.1
>
> 1 64.4.68.77 [AS 15290] 0 msec 0 msec 4 msec
> 2 64.4.65.11 [AS 15290] 0 msec 0 msec 0 msec
> 3 195.66.225.53 [AS 15290] 116 msec 116 msec 124 msec
> 4 213.205.109.25 [AS 15290] 120 msec 116 msec 120 msec
> 5 * * *
> 6 * * *
> 7 * * *
> 8 * * *
> 9 * * *
> 10 * *
>
> RO9WG006#traceroute 192.175.48.6
>
> Type escape sequence to abort.
> Tracing the route to 192.175.48.6
>
> 1 64.4.68.77 [AS 15290] 0 msec 0 msec 0 msec
> 2 64.4.65.11 [AS 15290] 4 msec 0 msec 0 msec
> 3 195.66.225.53 [AS 15290] 120 msec 124 msec 124 msec
> 4 213.205.109.25 [AS 15290] 116 msec 120 msec 124 msec
> 5 * *
> RO9WG006#
>
> RO9WG006#traceroute 192.175.48.42
>
> Type escape sequence to abort.
> Tracing the route to 192.175.48.42
>
> 1 64.4.68.77 [AS 15290] 0 msec 0 msec 4 msec
> 2 64.4.65.11 [AS 15290] 0 msec 0 msec 4 msec
> 3 195.66.225.53 [AS 15290] 124 msec 124 msec 124 msec
> 4 213.205.109.25 [AS 15290] 124 msec 120 msec 124 msec
>
> Best Regards
>
> [cid:image001.gif at 01CCC0CE.0923F850]
> Mohammed El-Shakweer
> Network Specialist
> Data Network Services & Support (DNSS)
> Bell Canada
> 200 Bouchard Blvd., 6CS
> Dorval, Québec, Canada
> Tel: (514) 828-9384
> mohammed.el-shakweer at bell.ca<mailto:mohammed.el-shakweer at bell.ca>
> www.bell.ca<http://www.bell.ca>
>
> Confidentiality
>
warning<http://www.bell.ca/enterprise/EntGnl_EmailConfidentialityWarning.page?language=en>
>
> From: Clement Cavadore [mailto:clement at cavadore.net]
> Sent: December-22-11 5:16 PM
> To: El-Shakweer, Mohammed (6038808); William F. Maton Sotomayor
> Cc: as112-ops at lists.dns-oarc.net
> Subject: Re: [as112-ops] [IANA #516549] Blackhole servers
>
> Wow, I couldn't imagine that your network could prefer a server behind
my
> net. Could you provide a show ip bgp or a traceroute ?
>
> I will have a look later on the node at the period you mentioned, and
let
> you know if I see something.
>
> Regards,
>
> Clement Cavadore (hivane)
> --
> Sent from my phone.
> Please excuse my brevity or typos. But not both...
> "mohammed.el-shakweer at bell.ca" <mohammed.el-shakweer at bell.ca> wrote:
>
> Hello William & Joe;
>
> Thanks for your feedback, the output of the command is as below;
>
>
> Infoblox > dig @prisoner.iana.org
> hostname.as112.net<http://hostname.as112.net> txt +short
> "Hivane Networks"
> "Paris, FR"
> "Unicast IP: 193.17.192.194<http://193.17.192.194>"
> "See http://as112.net/ for more information."
> "See http://noc.hivane.net/cgi-bin/dsc-grapher.pl for local
information."
>
>
> Best Regards
>
>
> Mohammed El-Shakweer
> Network Specialist
> Data Network Services & Support (DNSS)
> Bell Canada
> 200 Bouchard Blvd., 6CS
> Dorval, Québec, Canada
> Tel: (514) 828-9384
> mohammed.el-shakweer at bell.ca
> www.bell.ca<http://www.bell.ca>
>
> Confidentiality
>
> warning
>
>
> -----Original Message-----
> From: William F. Maton Sotomayor [mailto:wmaton at ottix.net]
> Sent: December-22-11 4:44 PM
> To: El-Shakweer, Mohammed (6038808)
> Cc: as112-ops at lists.dns-oarc.net
> Subject: Re: [as112-ops] [IANA #516549] Blackhole servers
>
>
> So as Joe very well deomonstrated, from where you are getting those
> traces, we need to know exactly which AS112 server is the one your
network
> is prefering. What does the output of:
>
> dig @prisoner.iana.org
> hostname.as112.net<http://hostname.as112.net> txt +short
>
> Give you as a result from where you are getting hte traces?
>
> On Thu, 22 Dec 2011, mohammed.el-shakweer at bell.ca wrote:
>
>> Hello Anand;
>>
>> Thanks for your response, below is a trace we were seeing, the first
>> blackhole server not responding, and then the 2nd one responding as
>> below;
>>
>> No. Time Source
>
> Destination Protocol Length Info
>> 2186 10.757689 10.130.72.21<http://10.130.72.21>
>> 10.130.201.18<http://10.130.201.18> DNS 96 Standard
>> query PTR 210.4.20.172.in-addr.arpa<http://210.4.20.172.in-addr.arpa>
>> 2188 10.758043 10.130.201.18<http://10.130.201.18>
>> 192.175.48.6<http://192.175.48.6> DNS 96 Standard
>> query PTR 210.4.20.172.in-addr.arpa<http://210.4.20.172.in-addr.arpa>
>> >>>>>>>>>>>>>blackhole-1.iana.org<http://blackhole-1.iana.org>>>>>no
>> response
>> 2454 12.793212 10.130.72.21<http://10.130.72.21>
>> 10.130.201.18<http://10.130.201.18> DNS 96 Standard
>> query PTR 210.4.20.172.in-addr.arpa<http://210.4.20.172.in-addr.arpa>
>> 2831 14.793076 10.130.72.21<http://10.130.72.21>
>> 10.130.201.18<http://10.130.201.18> DNS 96 Standard
>> query PTR 210.4.20.172.in-addr.arpa<http://210.4.20.172.in-addr.arpa>
>> 3569 16.793252 10.130.72.21<http://10.130.72.21>
>> 10.130.201.18<http://10.130.201.18> DNS 85 Standard
>> query PTR 210.4.20.172.in-addr.arpa<http://210.4.20.172.in-addr.arpa>
>> 4314 19.993019 10.130.72.21<http://10.130.72.21>
>> 10.130.201.18<http://10.130.201.18> DNS 85 Standard
>> query PTR 210.4.20.172.in-addr.arpa<http://210.4.20.172.in-addr.arpa>
>> 4414 20.758160 10.130.201.18<http://10.130.201.18>
>> 192.175.48.42<http://192.175.48.42> DNS 96 Standard
>> query PTR 210.4.20.172.in-addr.arpa<http://210.4.20.172.in-addr.arpa>
>> 4430 20.812626
>
> 192.175.48.42<http://192.175.48.42>
> 10.130.201.18<http://10.130.201.18> DNS 173 Standard
query
> response, No such name arpa
>>>>>>>>>>>>>>blackhole-2.iana.org<http://blackhole-2.iana.org>>>>>
response
>>
>>
>>
>>
>> Best Regards
>>
>>
>> Mohammed El-Shakweer
>> Network Specialist
>> Data Network Services & Support (DNSS)
>> Bell Canada
>> 200 Bouchard Blvd., 6CS
>> Dorval, Québec, Canada
>> Tel: (514) 828-9384
>> mohammed.el-shakweer at bell.ca
>> www.bell.ca<http://www.bell.ca>
>>
>> Confidentiality warning
>>
>> -----Original Message-----
>> From: Anand Buddhdev [mailto:anandb at ripe.net]
>> Sent: December-22-11 6:59 AM
>> To: El-Shakweer, Mohammed (6038808)
>> Cc:
>
> iana-questions at iana.org; as112-ops at lists.dns-oarc.net
>> Subject: Re: [as112-ops] [IANA #516549] Blackhole servers
>>
>> On 21/12/2011 23:09, mohammed.el-shakweer at bell.ca wrote:
>>
>>> Hello AS112-ops;
>>>
>>> Regarding the blackhole servers, were there any issues in the past
>>> 10 days with these servers, as we were having problems getting
responses
>>> for 172.16.0.0<http://172.16.0.0> -
>>> 172.31.255.255<http://172.31.255.255> private addressing space,
>>> sometimes no
>>> response or slow response. We realize that we should use an internal
>>> blackhole or configure the reverse zones for private addressing
internal
>>> to avoid slow response from blackhole servers on the internet, which
we
>>> plan to do soon, but if you can shed some light if there were any
issues
>>> in the past 10 days that would be highly appreciated.
>>
>> I believe ISC was testing BIND 10 on their AS112 instance. If you
>> happened to see prefixes from them, then you may have had trouble
>> getting responses for your queries.
>>
>> Regards,
>>
>> Anand Buddhdev
>> RIPE NCC
>>
>
> ________________________________
>
>> as112-ops mailing list
>> as112-ops at lists.dns-oarc.net
>> https://lists.dns-oarc.net/mailman/listinfo/as112-ops
>>
>
> wfms
>
> ________________________________
>
> as112-ops mailing list
> as112-ops at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/as112-ops
More information about the as112-ops
mailing list