Very funny xtra bound mail (yahoo) goes via another provider
Heya, While drinking beer and playing with the routing table, i notice that mail destined for Xtra: xtra.co.nz. 799 IN MX 20 mx2.tnz.mail.yahoo.com. xtra.co.nz. 799 IN MX 10 mx1.tnz.mail.yahoo.com. Now goes via Vocus, a new operator selling international bandwidth in NZ: root(a)accounting:/home/icepick# traceroute mx1.tnz.mail.yahoo.com traceroute to mx1.tnz.mail.yahoo.com (124.108.96.67), 64 hops max, 40 byte packets 1 FIREWALL (60.234.66.130) 0.433 ms 0.630 ms 0.389 ms 2 * * * 3 * * * 4 vocus.ape.net.nz (192.203.154.123) 2.029 ms 1.840 ms 3.055 ms 5 ip-42.192.31.114.vocusconnect.net.au (114.31.192.42) 25.294 ms 25.707 ms 26.766 ms 6 as17457-1.bdr02.syd01.nsw.vocusconnect.net.au (114.31.200.38) 26.161 ms 26.152 ms 26.022 ms 7 gi1-2.bas2.aue.yahoo.com (203.84.216.202) 26.164 ms gi1-1.bas1.aue.yahoo.com (203.84.216.198) 26.283 ms 26.306 ms I find it great that xtra bound MX traffic is now "Local" again as it transits APE, but I find it funny that it's another operator supplying the bandwidth rather than telecom. I know this may not be news to everyone yet, and yes, it's not the first time I've mentioned (1) vocus in the last week, but from what I can tell they seem to be doing a good job for the NZ internet so far. (1) I'm in no way affiliated to vocus. Cheers Barry P.S. my views are mine only and not those of my employer, * insert rest of disclaimer here *...
Surely Vocus aren't intentionally providing all APE-connected parties with free transit over to Yahoo in Aus! Can anyone from Vocus confirm whether this is a mistake or whether you're just feeling charitable? :) -jasper On 20/12/2008, at 8:31 PM, Barry Murphy wrote:
-- Jasper Bryant-Greene Network Engineer, Unleash ddi: +64 3 978 1222 mob: +64 21 129 9458
Just realised, Yahoo's probably buying intl transit from Vocus, so this makes sense... Guess, like Barry, I just find it too unbelievable that Xtra's mail servers would intentionally be reachable via APE ;) -jasper On 20/12/2008, at 8:31 PM, Barry Murphy wrote:
-- Jasper Bryant-Greene Network Engineer, Unleash ddi: +64 3 978 1222 mob: +64 21 129 9458
On 20/12/2008, at 8:38 PM, Jasper Bryant-Greene wrote:
Just realised, Yahoo's probably buying intl transit from Vocus, so this makes sense...
Correct. Vocus are the first international provider to peer at APE and advertise all their non-NZ customer prefixes I believe. This sort of thing is common in other parts of the world. AT&T do it (I think? At WIX, anyway), but only for a couple of special customers or something. So, if you are of the opinion that "APE = domestic", it's probably a good idea to re-think that. If you have transparent proxying with source address spoofing on your international links now would be a good time to either stop doing source address spoofing, or put your domestic links through the switches that do the transparent proxying. Alternatively, a quick hack that might work for some people until you can do something properly is to stop Vocus accepting your prefixes over APE, and do not accept prefixes from them over APE either. -- Nathan Ward
On Sat, 20 Dec 2008, Nathan Ward wrote:
So, if you are of the opinion that "APE = domestic", it's probably a good idea to re-think that.
A few years back when iinet owned ihug they were advertising iinet's australian routes on APE: http://list.waikato.ac.nz/pipermail/nznog/2006-April/011295.html and I'm sure there are other examples. -- Simon Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT.
On 20/12/2008, at 6:38 PM, Jasper Bryant-Greene wrote:
Just realised, Yahoo's probably buying intl transit from Vocus, so this makes sense...
Yes, that is correct. For us to send a route to APE one end would need to be a transit customer[*]. By default we present all customers at all exchanges.
Guess, like Barry, I just find it too unbelievable that Xtra's mail servers would intentionally be reachable via APE ;)
[*] We are working on a couple of projects, such as presenting all .au IPv6 routes (customer or otherwise) plus some critical stuff that could benefit from better connectivity, but this needs permissions etc
-jasper
-- James
Surely Vocus aren't intentionally providing all APE-connected parties with free transit over to Yahoo in Aus! Can anyone from Vocus confirm whether this is a mistake or whether you're just feeling charitable? :) -jasper On 20/12/2008, at 8:31 PM, Barry Murphy wrote:
-- Jasper Bryant-Greene Network Engineer, Unleash ddi: +64 3 978 1222 mob: +64 21 129 9458
participants (5)
-
Barry Murphy -
James Spenceley -
Jasper Bryant-Greene -
Nathan Ward -
Simon Lyall