203.109.129.67 & 68 allow remote DNS requests so I checked them. I was seeing some of my US IPs for a bit but not so much now. This is all http traffic so it could be something fancy like having a http proxy forward requests to a non-NZ server. I am guessing it's vodafone from a trawl of the logs, it's a bit hard to pick out details from a couple of hundred hits/second jump vs the normal traffic. On Mon, 9 Jan 2012, Mauricio Freitas wrote:

How did you test this? PING, Tracert or HTTP requests?

Cheers

Mauricio Freitas www.geekzone.co.nz www.freitasm.com www.twitter.com/freitasm

-----Original Message----- From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Simon Lyall Sent: Tuesday, 10 January 2012 2:06 p.m. To: nznog Subject: [nznog] Vodafone DNS

It looks like around 8:20 this morning vodafone customers started hitting my US rather than my NZ Web servers. I use GSLB to balance things so since that time vodafone's DNS queries have appeared to be from "outside NZ".

This is probably due to Telstra problems this morning.

I've done a little remote testing but it's all a little hard to confirm, so if somebody at vodafone could either backout the change or pop me an email to discuss it would probably speed up their customer access (at least to my site, perhaps others).

I've done some testing against 203.109.129.67 & 68 and they seem to have fixed themselves around 13:30 but I suspect thats not the whole story.

-- Simon Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT.

_______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

-- Simon Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT.

On Wed, 11 Jan 2012, Dean Pemberton wrote:

On Wed, Jan 11, 2012 at 5:29 PM, Simon Lyall wrote: (a) Site is using GoogleDNS or OpenDNS If (a) then tell them to stop Why?

The simple answer is because neither of these providers have servers in New Zealand (or Australia) so all queries to them go to Singapore or Taiwan (or somewhere else quite a distance away). Google and OpenDNS do do some filtering but there are plenty of other options for that that don't require sending queries to DNS servers half the world away. -- Simon Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT.

On 12/01/2012, at 7:17 PM, Cameron wrote:

Google have servers connected to PIPE IX in Sydney.

--- 8.8.8.8 ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 1999ms rtt min/avg/max/mdev = 0.854/0.887/0.945/0.041 ms

That must be new (ie: within the past few weeks). It was definitely returning US-like latency when I last checked. -Shaun -- Shaun Ewing