I wrote short summary after reading Real Internet Architecture on my blog: https://lukasz.bromirski.net/post/real-internet-architecture/. I'll take this opportunity to remind everyone I'm running various open projects for - you guessed it - Internet community. Check them at https://lukasz.bromirski.net/projects/ #as112 #bgp #rpki #freebsd

Anycast's mysteries: @hivane 's #AS112 node traffic went from around 3-5Mbps usual DNS traffic to 80-120Mbps for a few days... and now, back to normal 🙃

We also observed a 60W peak usage drop on the server running a VM. A drop for DC2Scale usage, but still worth it 😅

Annual reminder: I'm running various free projects for networking community - BGP feeds with bogons, FlowSpec, geo information for country filtering, full IPv4/IPv6 global table, RPKI RSes and AS112 sinkholes. All documented here: https://lukasz.bromirski.net/projects/ #bgp #as112 #anycast #freebsd #iosxr #xrv9000 #pushdastuff

As you were asking - I added generic @nlnetlabs NSD 4.x configuration and @ondrejfilip / @marenamat BIRD 2.x. As a bonus - rc.conf and sysctl.conf for @FreeBSDFoundation 12-14.x: https://github.com/lukasz-bromirski/as112-template #as112 #anycast

Hey, AS112 instance operators - there's new `service.arpa` that should be taken care by your servers! I made a short post about it - https://lukasz.bromirski.net/post/as112-service-arpa/. There's also ready-made, generic repo based on the RFC templates here: https://github.com/lukasz-bromirski/as112-template. #as112 #anycast #anycastdns

Moje slajdy z wczorajszego podsumowania dwóch lat utrzymywania serwerów AS112 na @PLNOG są już dostępne: https://lukasz.bromirski.net/docs/prezos/plnog2024/dns-as112-update.pdf #plnog #as112 Podziękowania dla @mjbroniarz, @adamlangepl, Radosława Potery, Adama Wiechnika i wszystkich pozostałych dobrych dusz!

Już w najbliższy poniedziałek zaczynamy kolejną edycję konferencji @PLNOG. Serdecznie zapraszam od rana, ja na jej zakończenie (we wtorek) opowiem o projekcie AS 112. A gościem specjalnym będzie @andrzejdragan! Nadal można kupić wejściówki: https://eventory.cc/event/plnog-32/tickets #dns #as112 #bcp

I have published the #Ansible playbook used to install at #MINAP an NSD-based #AS112 node: https://github.com/rfc1036/minap/blob/master/ansible/as112/as112-nsd.yaml .

As I'm running four different AS112 sinkholes in Poland, here's couple of numbers you may find interesting.

The most popular private network in Poland seems to be (at least among those not or badly configured) 192.168/16. Reverse requests for this space account for 68% of AS112 sinkholed traffic. The next one, but barely, is 172.16/12 (17%) and last - 10/8 (15%).

Out of domains I can share are of interest, top is Google's thread (230 queries per second on average across four AS112 instances), and the proxy autodiscovery wpad.home.arpa (182 queries per second).

As always, I'll be reaching out to the "top talkers" to let them know they're leaking queries to internet. For those of you that reacted and fixed your systems - kudos!

Please make sure to configure properly your DNS resolvers people, and don't leak reverse queries to internet! To check for more info - please visit https://lukasz.bromirski.net/as-112-project/. #as112 #anycast #plnog #dns #atman #epix #vectra