Kenyan Route Hijack

Sun Mar 16 14:50:19 UTC 2008

On Mon, 17 Mar 2008, Alastair Johnson wrote:

> Correct.  A particularly interesting case, since ORBS' transit provider was 
> also a transit customer of Above.net.  Said transit provider would announce 
> their /16s, of which ORBS sat in a /24 or two of, and have their traffic 
> blackholed.
>
> IIRC they punched /24s via their other transit providers to partly resolve 
> the issue.
>
> But the rest of the story - let's not go there.

Why not?  We _used_ to be an Above.net OC3 customer.  Back around 2003, we 
ran into issues with Above.net deciding for us which parts of the internet 
should be accessible.  We got customer complaints that certain web sites 
were unreachable through us, but worked fine on other internet services. 
I eventually got Above.net to give me a list of the several dozen /24's 
they were null routing.

This was particularly annoying because they had nothing setup to notify 
customers of these null routes or allow us to choose not to send them 
traffic they'd null route.  To me, this seemed rather inappropriate 
behavior for a transit provider.

----------------------------------------------------------------------
  Jon Lewis                   |  I route
  Senior Network Engineer     |  therefore you are
  Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________