AS4788 Telecom Malaysia major route leak?

Fri Jun 12 09:16:07 UTC 2015

On Fri, Jun 12, 2015 at 11:09:34AM +0200, Tore Anderson wrote:
> I see tons of bogus routes show up with AS4788 in the path, and at
> least AS3549 is acceping them.
> 
> E.g. for the RIPE NCC (193.0.0.0/21):
> 
>         [BGP/170] 00:20:29, MED 1000, localpref 150
>           AS path: 3549 4788 12859 3333 I, validation-state: valid
>         > to 64.210.69.85 via xe-1/1/0.0

It appears that AS3549 propagated the (almost?) full routing table leak
to its peers, where in lots of instances max prefix kicked in. 

This has global impact, lots of alerts on the SQA collector page http://sqa.ring.nlnog.net/

Kind regards,

Job