[atnog] Massive prefix hijack by AS4788

Jürgen Jaritsch jj at anexia.at
Fri Jun 12 15:26:35 CEST 2015


Mittlerweile hat BGPMon auch schon was dazu geschrieben:


http://www.bgpmon.net/massive-route-leak-cause-internet-slowdown/





Jürgen Jaritsch
Head of Network & Infrastructure

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-5-0556-300
Telefax: +43-5-0556-500

E-Mail: jj at anexia.at<mailto:jj at anexia.at>
Web: http://www.anexia.at<http://www.anexia.at/>

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

Von: atnog-bounces at atnog.at [mailto:atnog-bounces at atnog.at] Im Auftrag von Jürgen Jaritsch
Gesendet: Freitag, 12. Juni 2015 13:03
An: atnog at atnog.at
Betreff: Re: [atnog] Massive prefix hijack by AS4788

Falls jemand nicht auf NANOG liest: http://mailman.nanog.org/pipermail/nanog/2015-June/076187.html




Jürgen Jaritsch
Head of Network & Infrastructure

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-5-0556-300
Telefax: +43-5-0556-500

E-Mail: jj at anexia.at<mailto:jj at anexia.at>
Web: http://www.anexia.at<http://www.anexia.at/>

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

Von: Jürgen Jaritsch
Gesendet: Freitag, 12. Juni 2015 12:42
An: Jürgen Jaritsch; atnog at atnog.at<mailto:atnog at atnog.at>
Betreff: AW: Massive prefix hijack by AS4788

PS: für diejenigen unter euch, die keinen Zugriff auf das Level3 Ticket-System haben:

Network Event Detail
Network Event Summary:

An unknown issue throughout the United Kingdom is impacting Voice and IP services.

Event Ticket ID:

9340339

Market Area Affected:

Multiple Markets

Ticket Create Date:

6/12/15 9:43:21 AM GMT

Impacted For:

1 hour 51 minutes

Event Status:

Active

Resolve Date:



Time Since Last Update:

51 minutes

There are currently no reported impacts to your services caused by this network event. If you are experiencing a service disruption, please report the issue to Level 3 by submitting a ticket via the MyLevel3 Portal or calling 877-4LEVEL3.

Recent Notes
Date

Notes

6/12/15 9:49:05 AM GMT

The European NOC has advised that an unknown issue throughout the United Kingdom is impacting IP and Voice services in multiple markets. The European NOC is currently investigating to obtain more information about the issue. Further updates will be provided as information becomes available.




Network Event Detail
Network Event Summary:

Routing issues across the network in multiple markets globally are impacting IP services.

Event Ticket ID:

9340550

Market Area Affected:

Multiple Markets Globally

Ticket Create Date:

6/12/15 9:58:36 AM GMT

Impacted For:

1 hour 57 minutes

Event Status:

Active

Resolve Date:



Time Since Last Update:

5 minutes

There are currently no reported impacts to your services caused by this network event. If you are experiencing a service disruption, please report the issue to Level 3 by submitting a ticket via the MyLevel3 Portal or calling 877-4LEVEL3.

Recent Notes
Date

Notes

6/12/15 10:35:27 AM GMT

The European NOC has advised that some services are beginning to restore. Investigations continue to determine a root cause.

6/12/15 10:06:05 AM GMT

The IP NOC is investigating routing issues in Multiple Markets across the network globally that are impacting IP services. Troubleshooting efforts are currently ongoing with no estimated time to restore services available at this point. Please be advised that updates for this event will be relayed every half an hour unless otherwise noted.






Jürgen Jaritsch
Head of Network & Infrastructure

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-5-0556-300
Telefax: +43-5-0556-500

E-Mail: jj at anexia.at<mailto:jj at anexia.at>
Web: http://www.anexia.at<http://www.anexia.at/>

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

Von: atnog-bounces at atnog.at<mailto:atnog-bounces at atnog.at> [mailto:atnog-bounces at atnog.at] Im Auftrag von Jürgen Jaritsch
Gesendet: Freitag, 12. Juni 2015 12:40
An: atnog at atnog.at<mailto:atnog at atnog.at>
Betreff: [atnog] Massive prefix hijack by AS4788

Servus die Runde,

wäre mal interessant zu wissen wer die derzeitigen Probleme registriert und selbst aktiv Re-Routen muss :).

Was wir wissen:

#) AS4788 startet route leak
#) GBLX importiert alle Routen ungefiltert von AS4788
#) Level3 importiert alle Routen von GBLX und re-exportiert ungefiltert

Somit sind Provider wie Highwinds, Seabone, DTAG, PCCW, UPC und Co seit ca 10:30 ziemlich unter Druck den Traffic umzurouten.

Der "Shitstorm" auf Twitter nimmt im Moment auch kein Ende:

https://twitter.com/hashtag/level3?src=hash
https://twitter.com/hashtag/outage?src=hash
https://twitter.com/hashtag/internet?src=hash



Viele Grüße

Jürgen Jaritsch
Head of Network & Infrastructure

ANEXIA Internetdienstleistungs GmbH

Telefon: +43-5-0556-300
Telefax: +43-5-0556-500

E-Mail: jj at anexia.at<mailto:jj at anexia.at>
Web: http://www.anexia.at<http://www.anexia.at/>

Anschrift Hauptsitz Klagenfurt: Feldkirchnerstraße 140, 9020 Klagenfurt
Geschäftsführer: Alexander Windbichler
Firmenbuch: FN 289918a | Gerichtsstand: Klagenfurt | UID-Nummer: AT U63216601

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://atnog.at/pipermail/atnog/attachments/20150612/b77c727a/attachment-0001.html>


More information about the atnog mailing list