Blog
New version of BGPmon.net
Posted by Andree Toonk - October 3, 2012 - BGPmon.net, News and UpdatesAs many of you are aware, BGPmon.net has been offered as a free service since becoming publically available in 2008. From its inception the service has been funded largely by myself. Now, due to ever-increasing popularity, it has become unsustainable to run the service on personal funds and my available time. I have reached a [...]
Read MoreA BGP leak made in Canada
Posted by Andree Toonk - August 8, 2012 - UncategorizedA BGP leak made in Canada Today many network operators saw their BGP session flap, RTT’s increase and CPU usage on routers spike. While looking at our BGP data we determined the root cause to be a large BGP leak in Canada that quickly affected networks worldwide. Dery Telecom Based on our analysis it seems [...]
Read MoreInternet outage in Lebanon continues into second day
Posted by Andree Toonk - July 6, 2012 - BGP instabilityIt’s not often we see large-scale outages such as the one that currently affect Internet users in Lebanon where Internet access has been severely damaged for over 36 hours now. The problems started on July 4th, 16:16 (UTC), which is 19:16 Lebanese time. The cause of the outage according to the Telecoms Ministry in Lebanon [...]
Read MoreHow the Internet in Australia went down under
Posted by Andree Toonk - February 27, 2012 - BGP instabilityThis Wednesday for about 30 minutes many Australians found themselves without Internet access. All these users were relying either directly of indirectly on the Telstra network, which at that point was isolated from the Internet. This story quickly hit the local headlines, in this blog we’ll look at the technical details of this event and [...]
Read MoreF-Root DNS server moved to Beijing
Posted by Andree Toonk - October 3, 2011 - HijackF-Root DNS server moved to Beijing Systems such as DNS (root) servers often rely on anycast technology to improve availability and response time. The idea behind anycast is that the same prefix is announced from multiple geographically separated systems. As a result the client should always end-up at the closest (as seen from a BGP [...]
Read MoreInternet Syria offline
Posted by Andree Toonk - June 3, 2011 - BGP instability, BGPmon.netThe unrest in Syria continues and as of this morning it seems that the Syrian government has shutdown about of all Syrian networks. The Internet in Syria is dominated by “The Syrian Telecommunications Establishment”, which routes its networks from AS29256 and AS29386. Besides these providers there are AS6453 – Tata communications which routes 6 Syrian [...]
Read MoreFacebook’s detour through China and Korea
Posted by Andree Toonk - March 26, 2011 - HijackMany of you remember the story of about a year ago, when we reported that a Chinese network was announcing a significant part of the prefixes on the Internet. Networks affected by this incident included big names such as dell.com and cnn.com as well as U.S. government (.gov) and military (.mil) sites, including those for [...]
Read MoreEgypt Back Online
Posted by Andree Toonk - February 2, 2011 - News and UpdatesA few moments ago I noticed the first signs of life from the previously unreachable Egyptian networks. We saw the first BGP announcements for Egypt come in at at 09:30:48 UTC. And as of 10:52 UTC the website of Noor data networks was reachable again. It looks like the majority of the providers are now [...]
Read MoreInternet in Egypt offline
Posted by Andree Toonk - January 28, 2011 - BGP instability, BGPmon.netClick for latest updates: Last updated at January 31, 21:00 UTC Different media are reporting that Internet and other forms of electronic communications are being disrupted in Egypt. Presumably after a government order in response to the protests. Looking at BGP data we can confirm that according to our analysis 88% of the ‘Egyptian Internet’ [...]
Read MoreSecuring BGP routing with RPKI and ROA’s
Posted by Andree Toonk - January 19, 2011 - Hijack, IRR, RPKISecuring BGP has been on the todo list of the IETF and the community at large for many years. Over the years we’ve seen several proposals, the Resource Public Key Infrastructure (RPKI) is the latest and most successful initiative. RPKI solves one of the most fundemental problems. It allows us to verify whether an Autonomous [...]
Read More‘Hijack’ by AS4761 – Indosat, a quick report
Posted by Andree Toonk - January 15, 2011 - HijackThis is just a quick post to address some of the emails I’ve received today. Quite a bit of BGPmon.net users have received a notification regarding a possible hijack of their address space. On Friday January 14th AS4761, INDOSAT-INP-AP, started to originate a large number of new prefixes. A quick check show that AS4761 originated [...]
Read MoreThe State of IPv6 in Canada
Posted by Andree Toonk - January 5, 2011 - IPv6IPv6 deployment statics in Canada, demonstrate that the Canadian transit market is being taken over by large global transit providers
Read MoreIPv6 deployment in 2010, how far are we?
Posted by Andree Toonk - December 20, 2010 - IPv6We are nearing the end of 2010 and while we’re all sitting around the Christmas tree something else is nearing its end. We’re just a few months away from IPv4 exhaustion; the end of the IPv4 lifetime is insight. This will have many organizations rush to implement IPv6 in their networks. So how far are [...]
Read MoreChinese BGP hijack, putting things into perspective
Posted by Andree Toonk - November 21, 2010 - HijackChina denies hijacking a huge chunk of US net traffic
Internet Traffic from U.S. Government Websites Was Redirected Via Chinese Networks
Google’s services redirected to Romania and Austria
Posted by Andree Toonk - August 23, 2010 - HijackBGP hijacks happen every day, the majority of them don’t affect a large geographic region and only are noticed a small number of users. Every now and then however we see an event that affects many users, either because of the geographic scale or simply because of the specific prefix that is affected. The latter [...]
Read MoreStrange IPv6 bogon Announcements
Posted by Andree Toonk - June 11, 2010 - bogons, IPv6This Friday a number of BGPmon.net users have received an alert message informing them that their AS was announcing a new IPv6 prefix. I too got an alert email and was surprised to when I saw the prefix that was detected, as the prefix detected was an ‘invalid’ IPv6 prefix. This is the message I [...]
Read MoreChinese ISP hijacks the Internet
Posted by Andree Toonk - April 8, 2010 - HijackThis morning many BGPmon.net users received an alert regarding a possible prefix hijack by a Chinese network. AS23724 is one of the Data Centers operated by China Telecom, China’s largest ISP. Normally AS23724 CHINANET-IDC-BJ-AP IDC, China Telecommunications Corporation only originates about 40 prefixes, however today for about 15 minutes they originated about ~37,000 unique prefixes [...]
Read MoreIssues with allocating from 1.0.0.0/8
Posted by Andree Toonk - January 24, 2010 - bogonsThis week it was announced that IANA has allocated 1.0.0.0/8 to APNIC. This prefix must look familiar to many as we see it often in examples and documentation. And let’s be honest haven’t you used 1.1.1.1 on one of your test routers to quickly test something? Receiving a prefix from this range might result in [...]
Read MoreRouting diff report, Rancid for BGP
Posted by Andree Toonk - January 12, 2010 - BGPmon.net, IPv6Just like many you, I use rancid to track changes in configurations of our routers and switches. This week BGPmon.net released a new feature called ‘routing report’, you can think of this as a Rancid for your BGP routing table. Every day BGPmon compares the announcements by your ASN with those of the day before. [...]
Read MoreProgramming with the BGPmon.net Web Services API
Posted by Andree Toonk - December 15, 2009 - BGPmon.netLately I have received quite some questions with regard to connecting BGPmon.net with existing monitoring software. As well as requests for making more data available for developers. I’m happy to announce that these things should now be possible trough the BGPmon.net Web Services API. This API allows you to access your BGPmon.net alert as well [...]
Read MoreNew hardware for BGPmon.net server
Posted by Andree Toonk - November 26, 2009 - BGPmon.netLast week I finally received a new CPU for the BGPmon.net server. This new quad core 2.66GHz CPU replaces a 1.8GHz single core CPU. This upgrades follows the memory upgrade from a few weeks ago when memory was upgraded from 2GB to 8GB. Over the course of this week I saw significant improvement in execution [...]
Read MoreThe Vatican taking the lead in IPv6 rollout?
Posted by Andree Toonk - October 26, 2009 - IPv6IPv6 deployment statistics. Which country is leading in the deployment of IPv6. We tried to answer that question by looking at the BGP tables.
Read MoreBGP leak in Italy
Posted by Andree Toonk - October 10, 2009 - HijackFriday morning around 07:22:08 UTC AS9035 (Wind Telecomunicazioni) started to announce approximately 85.000 prefixes with an invalid origin AS. The origin AS was set to AS9035 while these prefixes did not belong to AS9035. The impact was local to a number of Italian providers, all Telecom Italia customers. The incident was resolved in about ~2 [...]
Read MoreDoes the United States Department of Defense (DoD) Monitor their prefixes?
Posted by Andree Toonk - September 9, 2009 - UncategorizedOk, ok… It happens all the time, people leaking private ASN’s. But this one caught my attention. It seems that the US Department of defense (DoD) is leaking a private ASN 65401 for their prefixes 140.21.18.0/23 and 140.21.15.0/24. These prefixes are normally announced by AS5802 but now appear to be originating from the private AS [...]
Read MoreNew summer release of BGPmon.net
Posted by Andree Toonk - August 30, 2009 - BGPmon.netI’m happy to announce that this week a I released the new version of BGPmon.net into production. There are several new features that many of you have asked for. In addition there are some significant changes in the database backend. This is largely to improve the performance of the webinterface and some soon to be [...]
Read More