Tata Scenic routing in LAX area?

Thu Nov 15 19:47:55 UTC 2018

Marcus,

 From route-views output, it looks like AS9498/airtel is probably 
leaking your route between two of its upstreams (AS6453/Tata and 
AS4637/Telstra) overseas, funneling some of your traffic through their 
router.

route-views>sh ip bgp 23.92.178.22 | i 9498
   3356 6453 9498 4637 29791
   1403 6453 9498 4637 29791
   3549 3356 6453 9498 4637 29791
   19214 3257 6453 9498 4637 29791
   1403 6453 9498 4637 29791
   286 6453 9498 4637 29791
   53364 3257 6453 9498 4637 29791
   3257 6453 9498 4637 29791
   1239 6453 9498 4637 29791
   2497 6453 9498 4637 29791
   57866 6453 9498 4637 29791
   7660 2516 6453 9498 4637 29791
   701 6453 9498 4637 29791
   3561 209 6453 9498 4637 29791

You might try halting advertisements to your AS4637/Telstra peer while 
you contact AS9498.

-John

On 11/15/2018 10:43 AM, Marcus Josephson wrote:
>
> Anyone else seeing an odd Scenic routing in the LAX/SJE area for tata.
>
> traceroute to 23.92.178.22 (23.92.178.22), 30 hops max, 52 byte packets
>
> 1  if-ae-13-2.tcore2.lvw-los-angeles.as6453.net (64.86.252.34)  
> 180.698 ms  180.610 ms  181.712 ms
>
>      MPLS Label=344269 CoS=0 TTL=1 S=1
>
> 2  if-ae-7-2.tcore2.svw-singapore.as6453.net (180.87.15.25)  189.327 
> ms if-ae-7-2.tcore2.svw-singapore.as6453.net (64.86.252.37) 176.800 ms 
> if-ae-7-2.tcore2.svw-singapore.as6453.net (64.86.252.39)  174.631 ms
>
>      MPLS Label=609315 CoS=0 TTL=1 S=1
>
> 3  if-ae-20-2.tcore1.svq-singapore.as6453.net (180.87.96.21)  174.287 
> ms  173.370 ms  173.804 ms
>
> 4  120.29.215.202 (120.29.215.202)  179.104 ms 179.367 ms  179.324 ms
>
> 5  182.79.152.247 (182.79.152.247)  180.164 ms 182.79.152.253 
> (182.79.152.253)  184.816 ms 182.79.152.247 (182.79.152.247)  250.928 ms
>
> 6  unknown.telstraglobal.net (202.127.73.101) [AS  4637]  173.974 ms  
> 173.986 ms  173.484 ms
>
> 7  i-93.sgpl-core02.telstraglobal.net (202.84.224.189) [AS  4637]  
> 175.094 ms  175.699 ms 174.343 ms
>
> 8  i-10850.eqnx-core02.telstraglobal.net (202.84.140.46) [AS  4637]  
> 280.686 ms  288.703 ms 280.836 ms
>
> 9  i-92.eqnx03.telstraglobal.net (202.84.247.17) [AS  4637]  278.021 
> ms  276.637 ms 302.249 ms
>
> 10  equinix-ix.sjc1.us.voxel.net (206.223.116.4)  174.139 ms  174.163 
> ms  174.067 ms
>
> Marcus Josephson
>
> IP Operations
>
> mjosephson at inap.com
>
> /This message is intended for the use of the intended recipient(s) and 
> may contain confidential and privileged information. /
>
> /Any unauthorized review, use, disclosure or distribution is 
> prohibited. If you are not the intended recipient, please contact//the 
> sender by reply email and destroy all copies of the original message./
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20181115/6ef8f27d/attachment.html>