<div dir="ltr"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Also looking at routeviews, there's ample evidence that Verizon and China<br>Telecom peer, so the question is, does China Telecom not advertise these<br>routes to Verizon, or is Verizon rejecting them for some reason? I<br>suspect only engineers at CT and VZ can answer that.<br></blockquote><div><br></div><div>I took a quick look this morning from our view at all prefixes we see with an origin of AS38365.</div><div><br></div><div>- Some prefixes I see via multiple upstreams, and for those, CT (AS4134) adds a +4 prepend via 701, but does not prepend anything else. </div><div>- Other prefixes I see via multiple upstreams , with no 701 path at all. </div><div><br></div><div>This would appear, at least externally, to be an intentional CT or Baidu decision. </div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Jul 21, 2022 at 12:21 PM Jon Lewis <<a href="mailto:jlewis@lewis.org">jlewis@lewis.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">I looked at this a little last night, but didn't have time to write an <br>
email about it. Verizon has a lookingglass:<br>
<br>
<a href="https://www.verizon.com/business/why-verizon/looking-glass/" rel="noreferrer" target="_blank">https://www.verizon.com/business/why-verizon/looking-glass/</a><br>
<br>
which you can use to see that Verizon has no route covering 182.61.200.0. <br>
Looking at routeviews, I see routes for <a href="http://182.61.200.0/22" rel="noreferrer" target="_blank">182.61.200.0/22</a>, <br>
and <a href="http://182.61.200.0/21" rel="noreferrer" target="_blank">182.61.200.0/21</a>, but no path via Verizon.<br>
<br>
Also looking at routeviews, there's ample evidence that Verizon and China <br>
Telecom peer, so the question is, does China Telecom not advertise these <br>
routes to Verizon, or is Verizon rejecting them for some reason? I <br>
suspect only engineers at CT and VZ can answer that.<br>
<br>
On Wed, 20 Jul 2022, holow29 wrote:<br>
<br>
> To follow up on this:I've engaged Verizon's executive office to finally try to get to a network engineer (because I don't have a contact myself). The (proxied) response<br>
> from the engineer was that they aren't receiving any announcements for these routes to AS701, and I would need to take it up with Baidu. I guess I would like to understand<br>
> if that seems reasonable to people since it is my presumption that Baidu would return and say something similar (that they advertise their routes to their peers correctly<br>
> and to take it up with Verizon). To me, it seems like there is clearly a failing in one of Verizon's peers where they are not advertising or accepting this route<br>
> correctly, but that it would be incumbent on Verizon to do the legwork to fix it since they are the ones who know their peering agreements and have these contacts.<br>
> Unfortunately it seems like policy that Verizon pushes any issues that aren't internal routing issues to an external party, but surely they have a responsibility to<br>
> maintain their peering and routes to external services as well. In other words, this type of buckpassing does not seem right to me (and I've heard it from them on other<br>
> routing issues before), especially given that they are the ones empowered to fix it. Any thoughts?<br>
> <br>
> (As it happens, <a href="http://pan.baidu.com" rel="noreferrer" target="_blank">pan.baidu.com</a> now resolves to an IP range that is routable by Verizon, but it could always revert, and it seems like Verizon should have these routes<br>
> regardless.)<br>
> <br>
> Thanks.<br>
> <br>
> On Fri, Jun 24, 2022 at 7:41 AM Matthew Huff <<a href="mailto:mhuff@ox.com" target="_blank">mhuff@ox.com</a>> wrote:<br>
><br>
> From my limited vantage point it appears that there is some issue between Verizon & Baidu. Baidu has <a href="http://182.61.0.0/16" rel="noreferrer" target="_blank">182.61.0.0/16</a> registered, but is only advertising pieces<br>
> of it globally (or at least from what I can see). In our tables,we are receiving none from Verizon of the subnets that are advertised directly from Baidu<br>
> (origin AS of 38365). The few within that registered range that have a different origin AS are coming to us from Verizon. For example:<br>
><br>
> <br>
><br>
> *> <a href="http://182.61.0.0/19" rel="noreferrer" target="_blank">182.61.0.0/19</a> 144.121.203.141 0 46887 3356 4134 58466 38365 i<br>
><br>
> *> <a href="http://182.61.0.0/18" rel="noreferrer" target="_blank">182.61.0.0/18</a> 144.121.203.141 0 46887 6461 4134 58466 38365 38365 i<br>
><br>
> *> <a href="http://182.61.32.0/19" rel="noreferrer" target="_blank">182.61.32.0/19</a> 144.121.203.141 0 46887 3356 4134 58466 38365 i<br>
><br>
> *> <a href="http://182.61.64.0/18" rel="noreferrer" target="_blank">182.61.64.0/18</a> 204.148.121.221 0 701 6453 55967 i<br>
><br>
> * <a href="http://182.61.128.0/23" rel="noreferrer" target="_blank">182.61.128.0/23</a> 204.148.121.221 0 701 4134 4134 4134 4134 4134 58540 ?<br>
><br>
> *> <a href="http://182.61.130.0/24" rel="noreferrer" target="_blank">182.61.130.0/24</a> 144.121.203.141 0 46887 6461 4134 23724 38365 38365 38365 i<br>
><br>
> *> <a href="http://182.61.130.0/23" rel="noreferrer" target="_blank">182.61.130.0/23</a> 144.121.203.141 0 46887 6461 4134 58466 38365 38365 i<br>
><br>
> *> <a href="http://182.61.131.0/24" rel="noreferrer" target="_blank">182.61.131.0/24</a> 144.121.203.141 0 46887 6461 4134 23724 38365 38365 38365 i<br>
><br>
> *> <a href="http://182.61.132.0/23" rel="noreferrer" target="_blank">182.61.132.0/23</a> 144.121.203.141 0 46887 3356 4134 58466 38365 i<br>
><br>
> *> <a href="http://182.61.132.0/22" rel="noreferrer" target="_blank">182.61.132.0/22</a> 144.121.203.141 0 46887 6461 4134 58466 38365 38365 i<br>
><br>
> *> <a href="http://182.61.134.0/23" rel="noreferrer" target="_blank">182.61.134.0/23</a> 144.121.203.141 0 46887 3356 4134 58466 38365 i<br>
><br>
> *> <a href="http://182.61.136.0/22" rel="noreferrer" target="_blank">182.61.136.0/22</a> 144.121.203.141 0 46887 3356 4134 58466 38365 i<br>
><br>
> *> <a href="http://182.61.136.0/21" rel="noreferrer" target="_blank">182.61.136.0/21</a> 144.121.203.141 0 46887 6461 4134 58466 38365 38365 i<br>
><br>
> *> <a href="http://182.61.140.0/22" rel="noreferrer" target="_blank">182.61.140.0/22</a> 144.121.203.141 0 46887 3356 4134 58466 38365 i<br>
><br>
> *> <a href="http://182.61.144.0/21" rel="noreferrer" target="_blank">182.61.144.0/21</a> 144.121.203.141 0 46887 3356 4134 58466 38365 i<br>
><br>
> *> <a href="http://182.61.144.0/20" rel="noreferrer" target="_blank">182.61.144.0/20</a> 144.121.203.141 0 46887 6461 4134 58466 38365 38365 i<br>
><br>
> *> <a href="http://182.61.160.0/19" rel="noreferrer" target="_blank">182.61.160.0/19</a> 204.148.121.221 0 701 6453 55967 i<br>
><br>
> *> <a href="http://182.61.192.0/23" rel="noreferrer" target="_blank">182.61.192.0/23</a> 144.121.203.141 0 46887 3356 4134 58540 i<br>
><br>
> *> <a href="http://182.61.194.0/23" rel="noreferrer" target="_blank">182.61.194.0/23</a> 144.121.203.141 0 46887 3356 4134 58540 i<br>
><br>
> *> <a href="http://182.61.200.0/22" rel="noreferrer" target="_blank">182.61.200.0/22</a> 144.121.203.141 0 46887 6461 4134 23724 38365 i<br>
><br>
> *> <a href="http://182.61.200.0/21" rel="noreferrer" target="_blank">182.61.200.0/21</a> 144.121.203.141 0 46887 6461 4134 58466 38365 38365 i<br>
><br>
> *> <a href="http://182.61.216.0/21" rel="noreferrer" target="_blank">182.61.216.0/21</a> 144.121.203.141 0 46887 6461 4134 58466 38365 38365 i<br>
><br>
> *> <a href="http://182.61.223.0/24" rel="noreferrer" target="_blank">182.61.223.0/24</a> 144.121.203.141 0 46887 6461 4134 58466 38365 38365 i<br>
><br>
> *> <a href="http://182.61.224.0/19" rel="noreferrer" target="_blank">182.61.224.0/19</a> 144.121.203.141 0 46887 6461 4134 58466 38365 38365 i<br>
><br>
> <br>
><br>
> We are getting the <a href="http://182.61.200.0/21" rel="noreferrer" target="_blank">182.61.200.0/21</a> and <a href="http://182.61.200.0/22" rel="noreferrer" target="_blank">182.61.200.0/22</a> from all of our other peers:<br>
><br>
> <br>
><br>
> asr-inet2#sh ip bgp <a href="http://182.61.200.0/21" rel="noreferrer" target="_blank">182.61.200.0/21</a><br>
><br>
> BGP routing table entry for <a href="http://182.61.200.0/21" rel="noreferrer" target="_blank">182.61.200.0/21</a>, version 15779018<br>
><br>
> Paths: (2 available, best #2, table default)<br>
><br>
> Advertised to update-groups:<br>
><br>
> 3 <br>
><br>
> Refresh Epoch 1<br>
><br>
> 54004 6128 1299 4134 58466 38365 38365, (aggregated by 38365 119.75.208.225)<br>
><br>
> 148.77.99.201 from 148.77.99.201 (24.157.4.25)<br>
><br>
> Origin IGP, localpref 100, valid, external, atomic-aggregate<br>
><br>
> rx pathid: 0, tx pathid: 0<br>
><br>
> Updated on Apr 29 2022 21:02:05 EDT<br>
><br>
> Refresh Epoch 1<br>
><br>
> 46887 6461 4134 58466 38365 38365, (aggregated by 38365 119.75.208.225)<br>
><br>
> 129.77.17.254 from 129.77.17.254 (129.77.40.7)<br>
><br>
> Origin IGP, metric 0, localpref 100, valid, internal, atomic-aggregate, best<br>
><br>
> rx pathid: 0, tx pathid: 0x0<br>
><br>
> Updated on May 3 2022 04:02:50 EDT<br>
><br>
> <br>
><br>
> <br>
><br>
> From: NANOG <nanog-bounces+mhuff=<a href="mailto:ox.com@nanog.org" target="_blank">ox.com@nanog.org</a>> On Behalf Of holow29<br>
> Sent: Thursday, June 23, 2022 5:49 PM<br>
> To: <a href="mailto:nanog@nanog.org" target="_blank">nanog@nanog.org</a><br>
> Subject: Verizon no BGP route to some of AS38365 (<a href="http://182.61.200.0/24" rel="noreferrer" target="_blank">182.61.200.0/24</a>)<br>
><br>
> <br>
><br>
> I've been trying (to no avail) for over a month now to get Verizon to investigate their lack of BGP routing to <a href="http://182.61.200.0/24" rel="noreferrer" target="_blank">182.61.200.0/24</a>, which hosts Baidu Wangpan at <br>
> <a href="http://pan.baidu.com" rel="noreferrer" target="_blank">pan.baidu.com</a> (Baidu's cloud services/equivalent of Google Drive).<br>
><br>
> <br>
> <br>
> Easily verified through Verizon's Looking Glass.<br>
> <br>
> <br>
> <br>
> We all know Verizon's BGP routing is a disaster, but does anyone have any ideas?<br>
> <br>
> <br>
><br>
<br>
----------------------------------------------------------------------<br>
Jon Lewis, MCP :) | I route<br>
StackPath, Sr. Neteng | therefore you are<br>
_________ <a href="http://www.lewis.org/~jlewis/pgp" rel="noreferrer" target="_blank">http://www.lewis.org/~jlewis/pgp</a> for PGP public key_________<br>
</blockquote></div>