[GTER] Vogel (AS 25933) vazando rotas no ATM do IX.br SP

[Humberto Galiza]

Bom dia pessoal,

Coletado agora há pouco do LG (um prefixo de exemplo apenas, mas são
vários prefixos da L3, Lan, etc, aparecendo e sumindo no ATM):

lg.sp.ptt.br> show ip bgp 1.0.200.0/24
BGP routing table entry for 1.0.200.0/24
Paths: (1 available, best #1, table Default-IP-Routing-Table)
  Not advertised to any peer
  25933 3549 3356 4134 4809 38040 23969
    187.16.223.99 from 187.16.223.254 (187.16.221.1)
      Origin IGP, localpref 100, valid, external, best
      Community: 3549:666 3549:2462 3549:30840 26162:25933 26162:65011
      Last update: Wed Jul 18 07:06:09 2018

lg.sp.ptt.br>


Alguém da equipe IX.br pode filtrar isso enquanto a Vogel faz o troubleshooting?
Humberto Galiza


On Tue, Jul 17, 2018 at 8:46 PM, Humberto Galiza
<humbertogaliza at gmail.com> wrote:
> Olá pessoal,
>
> Alguém da Vogel (AS 25933) na lista? Aparentemente desde as ~18h de
> hoje vocês tem anunciado diversos prefixos da Level3, Lan Nautilus,
> CloudFlare e etc, no ATM do PTT-SP.
>
> Notei que os anúncios "aparecem" e "somem" de tempos em tempos
> (imagino que estejam sendo enviados aos route-servers, e quando o
> limite de prefixos é atingido, então a sessão BGP vai abaixo causando
> withdraw nas rotas).
>
> Abaixo um exemplo de prefixos retirado de um router conectado ao ATM
> do PTT-SP por volta das 20:30h de hoje. Espero que ajude a equipe no
> troubleshooting:
>
> (...)
>> show route aspath-regex ".* 25933 .*"
>
> inet.0: 711324 destinations, 1700427 routes (711314 active, 0
> holddown, 967 hidden)
> + = Active Route, - = Last Active, * = Both
>
> 1.0.0.0/24          [BGP/170] 00:00:02, MED 20, localpref 200, from
> 187.16.223.254
>                       AS path: 25933 3549 6762 13335 13335 I,
> validation-state: unverified
>                     > to 187.16.223.99 via ae2.3181
> 1.0.16.0/24        *[BGP/170] 00:00:02, MED 20, localpref 200, from
> 187.16.223.254
>                       AS path: 25933 3549 2516 2519 I,
> validation-state: unverified
>                     > to 187.16.223.99 via ae2.3181
> 1.0.64.0/18         [BGP/170] 00:00:02, MED 20, localpref 200, from
> 187.16.223.254
>                       AS path: 25933 3549 2516 7670 18144 I,
> validation-state: unverified
>                     > to 187.16.223.99 via ae2.3181
> 1.0.128.0/17        [BGP/170] 00:00:02, MED 20, localpref 200, from
> 187.16.223.254
>                       AS path: 25933 3549 3356 38040 23969 I,
> validation-state: unverified
>                     > to 187.16.223.99 via ae2.3181
> 1.0.128.0/18        [BGP/170] 00:00:02, MED 20, localpref 200, from
> 187.16.223.254
>                       AS path: 25933 3549 3356 38040 23969 I,
> validation-state: unverified
>                     > to 187.16.223.99 via ae2.3181
> 1.0.128.0/19        [BGP/170] 00:00:02, MED 20, localpref 200, from
> 187.16.223.254
>                       AS path: 25933 3549 3356 38040 23969 I,
> validation-state: unverified
>                     > to 187.16.223.99 via ae2.3181
> 1.0.128.0/24        [BGP/170] 00:00:02, MED 20, localpref 200, from
> 187.16.223.254
>                       AS path: 25933 3549 3356 4134 4809 38040 23969
> I, validation-state: unverified
>                     > to 187.16.223.99 via ae2.3181
> 1.0.131.0/24        [BGP/170] 00:00:02, MED 20, localpref 200, from
> 187.16.223.254
>                       AS path: 25933 3549 3356 4134 4809 38040 23969
> I, validation-state: unverified
>                     > to 187.16.223.99 via ae2.3181
> 1.0.139.0/24        [BGP/170] 00:00:02, MED 20, localpref 200, from
> 187.16.223.254
>                       AS path: 25933 3549 3356 4134 4809 38040 23969
> I, validation-state: unverified
>                     > to 187.16.223.99 via ae2.3181
> 1.0.160.0/19        [BGP/170] 00:00:02, MED 20, localpref 200, from
> 187.16.223.254
>                       AS path: 25933 3549 3356 38040 23969 I,
> validation-state: unverified
> (...)
>
> Abs,
>
> Humberto Galiza