[6bone] 2001:470::/35 ghost routes.

Edward Brocklesby ejb@sdf.lonestar.org
Wed, 14 Aug 2002 13:38:59 +0100


[Apologies to the list manager, I sent this mail earlier from the wrong 
From-address. Please disregard that.]

Good morning,  I hope this is correct forum to pose this question, 
if not please ignore ;-).

So.  It seems some people are having problems reaching 2001:470::/32,
owned by he.net.  Let's see bgp info for this block:

BGP routing table entry for 2001:470::/32
Paths: (2 available, best #2, table Default-IP-Routing-Table)
  Not advertised to any peer
  6939
    2001:470:1f00:ffff::1f6 from 2001:470:1f00:ffff::1f6 (64.71.128.82)
    (fe80::4047:8052)
      Origin IGP, localpref 100, valid, external
      Last update: Wed Aug 14 10:48:33 2002

  24643 6830 6939
    2001:730:5::1:4 from 2001:730:5::1:4 (213.46.231.151)
    (fe80::d52e:e797)
      Origin IGP, localpref 100, weight 2, valid, external, best
      Community: 6830:60003 6830:60011
      Last update: Wed Aug 14 10:48:28 2002

Well, that seems reasonable.  But look at traceroute:

traceroute6 to 2001:470:1f00:ffff::1f4 (2001:470:1f00:ffff::1f4) from 
2001:730:5::1:5, 30 hops max, 12 byte packets
 1  nextgen-nl-gw1-ext.ipv6.hades.skumler.net  33.369 ms  31.422 ms  32 ms
 2  nl-ams-re-02-fe-2-0.ipv6.aorta.net  31.812 ms  31.67 ms  30.005 ms
 3  
freestone-upctech.tun.ipv6.as8758.net.3.0.0.0.0.0.0.0.6.0.0.4.e.f.f.3.ip6.int  
81.58 ms  88.527 ms  86.772 ms
 4  * * *
 5  enterzone-viagenie-gw.cyqb.ipv6.enterzone.net  274.055 ms  224.74 ms  
229.084 ms
 6  3ffe:8000:ffff:29::1  500.028 ms *  576.364 ms
 7  cs-v6-atm0-2.hay.vbns.net  529.574 ms  522.357 ms  520.166 ms
 8  3ffe:2900:a:4::2  501.968 ms  496.5 ms  515.963 ms
 9  6bone-gw2.ipv6.cselt.it  576.516 ms  556.655 ms  556.584 ms
10  chello-gw1.ipv6.tilab.it  600.664 ms  564.488 ms  567.033 ms
11  3ffe:1d00:2:25::1  729.294 ms *  720.111 ms
12  * * *
13  enterzone-viagenie-gw.cyqb.ipv6.enterzone.net  792.195 ms  846.14 ms  
761.983 ms
14  3ffe:8000:ffff:29::1  1001.92 ms  1081.14 ms  1066.2 ms
15  cs-v6-atm0-2.hay.vbns.net  1064.45 ms  1042.58 ms  1113.2 ms
16  3ffe:2900:a:4::2  1071.17 ms  1012.31 ms  1212.54 ms

So.. I think there is a problem ;-).

Let's see output of another bgp route:

BGP routing table entry for 2001:470::/35
Paths: (1 available, best #1, table Default-IP-Routing-Table)
  Not advertised to any peer
  24643 6830 8758 9044 10566 10109 7660 2500 2497 3549 8002 278 6939
    2001:730:5::1:4 from 2001:730:5::1:4 (213.46.231.151)
    (fe80::d52e:e797)
      Origin IGP, localpref 100, weight 2, valid, external, best
      Community: 6830:60003 6830:60011
      Last update: Wed Aug 14 10:48:28 2002

Hm, what a strange AS-path this is.  Despite our peering with AS 6939, they
don't advertise this route.  This is probably because their /35 has changed
recently to a /32, so in fact this route should not exist -- probably it is a
ghost route?

Let's assume three possible sources; AS9044, AS10566 and AS7660.
I am inclined to point some blame at AS7660; why?  Well, let's see what 
fubar looking glass has to say about this route:

daemon.fubar.ca> show ipv6 bgp 2001:470::/35
BGP routing table entry for 2001:470::/35
Paths: (3 available, best #3, table Default-IP-Routing-Table)
  Advertised to non peer-group peers:
  3ffe:c00:8023:10::1 3ffe:81a0:1000::15 3ffe:81a0:1000::37
  6435 6175 7580 145 11537 22388 7660 2500 2497 3549 8002 278 6939
                                 ^^^^
    3ffe:81a0:1000::37 from 3ffe:81a0:1000::37 (64.65.64.152)
    (fe80::4041:4098)
      Origin IGP, localpref 100, valid, external
      Last update: Wed Aug 14 01:20:47 2002

  109 6175 7580 145 11537 22388 7660 2500 2497 3549 8002 278 6939
                                ^^^^
    3ffe:c00:8023:10::1 from 3ffe:c00:8023:10::1 (128.107.240.254)
    (fe80::806b:f0fe)
      Origin IGP, localpref 100, valid, external
      Last update: Wed Aug 14 01:20:42 2002

  24765 8758 9044 10566 10109 7660 2500 2497 3549 8002 278 6939
             ^^^^ ^^^^^       ^^^^
    3ffe:81a0:1000::11 from 3ffe:81a0:1000::11 (80.71.6.94)
      Origin IGP, localpref 100, valid, external, best
      Community: 24765:100 24765:800 24765:2300 24765:6007
      Last update: Wed Aug 14 01:20:16 2002

I see that of the three routes, the only common entry is AS7660.
Hm, who is this?...

root@firedrake:~# whois -h whois.ripe.net AS7660
[...]
remarks:      For more information on APNIC assigned blocks, connect
remarks:      to APNIC's whois database, whois.apnic.net.

OK, so:

root@firedrake:~# whois -h whois.apnic.net AS7660
[...]
% -----------------
% No entries found.
% -----------------
%
% Search tips:
%
% 1. To search for an AS number, include "AS" in front of the number.
%    Example: AS4808

Well, it seems that this APNIC ASN does not have an entry in APNIC's
whois database. Hmmm.

AS10566 is Viagenie, of course; without making any comment myself,
I'm told by others they have had problems with advertising ghost
routes in the past,  So maybe it's them.
AS9044 appears to be owned by solnet.ch.  I haven't heard of any
problems from them..

Would anyone like to comment on this problem? (or else-- tell me
to go away ;-) sorry if this is not an appropriate question for
this list, but maybe it affects 6bone community too..)

(Maybe too if anyone knows the contact for AS7660 it's useful.)

Regards,
	-larne.