register.com down sev0?

Thu Oct 26 01:54:56 UTC 2006

On Wed, 25 Oct 2006, Matt Ghali wrote:

> On Wed, 25 Oct 2006, alex at pilosoft.com wrote:
> 
> > I'm seeing *.register.com down (including ns*) from everywhere. Just a
> > heads-up.
> 
> I'll take your word on exhaustively checking every possible address.
> BTW, do you mean nameservers down, webservers down, or something else?
> Did the Internet break?
*.register.com means nameservers, webservers, whois servers, etc. Of
course, Internet does not break, but we've received quite a number of
calls about "internet is down" - given that register.com serves a large
number of domains, yes, this is operationally affecting.

> > Would be interesting to see the RFO for that one, including the "why
> > we didn't have any DNS servers offsite
> 
> They colo in more than a half-dozen facilities around the world.
> 
> > or used anycast to at least limit amount of damage".
> 
> I also have information from a pretty good source that they actually do
> quite a bit of anycast.
Not that I can see - possibly that depends on a specific domain's 
webservers. 

The glue servers for register.com themselves:
Name:   ns1.register.com
Address: 216.21.234.96
Name:   ns2.register.com
Address: 216.21.226.96
Name:   ns3.register.com
Address: 216.21.234.97
Name:   ns4.register.com
Address: 216.21.226.97

(note just two different /24s)

Both of those /24s were down/down about 30 minutes ago, and are
flapping/flapping now.

route-views.oregon-ix.net>show ip bgp 216.21.234.73
...
BGP routing table entry for 216.21.234.0/24, version 5214460
  701 7018 4264 13910, (suppressed due to dampening)
    157.130.10.233 from 157.130.10.233 (137.39.3.60)
      Origin IGP, localpref 100, valid, external
      Dampinfo: penalty 898, flapped 5 times in 00:35:15, reuse in 00:03:50

route-views.oregon-ix.net>show ip bgp 216.21.226.97
BGP routing table entry for 216.21.226.0/24, version 5214460
...
701 7018 4264 13910, (suppressed due to dampening)
    157.130.10.233 (inaccessible) from 157.130.10.233 (137.39.3.60)
      Origin IGP, localpref 100, valid, external
      Dampinfo: penalty 861, flapped 5 times in 00:36:13, reuse in 00:03:00

>From various vantage points, both /24s are routed exactly the same (7018 
in NYC). 

-alex