<!DOCTYPE html>
<html>
<head>
<title></title>
<style type="text/css">p.MsoNormal,p.MsoNoSpacing{margin:0}</style>
</head>
<body><div style="font-family:Arial;"><br></div>
<div style="font-family:Arial;">Tue Apr 24 11:05:41 UTC onwards one of Hurricane Electric's peers AS1<span class="s1">0297</span> started advertising the following subnets via HE.<br></div>
<div style="font-family:Arial;"><br></div>
<div style="font-family:Arial;">205.251.192.0<br></div>
<div style="font-family:Arial;">205.251.193.0<br></div>
<div style="font-family:Arial;">205.251.195.0<br></div>
<div style="font-family:Arial;">205.251.197.0<br></div>
<div style="font-family:Arial;">205.251.199.0<br></div>
<div><br></div>
<div style="font-family:Arial;">These are all Amazon subnets, usually originated as part of /23s and seemingly host a fair bit of AWS Route53.<br></div>
<div style="font-family:Arial;"><br></div>
<div style="font-family:Arial;">If you (or your DNS resolver) are a HE transit customer you will be impacted the most.<br></div>
<div style="font-family:Arial;"><br></div>
<div style="font-family:Arial;">Cheers,<br></div>
<div style="font-family:Arial;"><br></div>
<div style="font-family:Arial;">Joseph<br></div>
<div style="font-family:Arial;"><br></div>
<div><br></div>
<div>On Tue, Apr 24, 2018, at 9:50 PM, Phil Lavin via Outages wrote:<br></div>
<blockquote type="cite"><div><p style="margin: 0cm 0cm 12pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"><span style="">This doesn’t feel right, though I’ll admit I’ve never checked before. Our only route to ns-163.awsdns-20.com (205.251.192.163) is through HE:</span></span></span><br></p><p style="margin: 0cm 0cm 12pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"><span class="font" style="font-family:"Courier New"">inet.0: 757581 destinations, 2107440 routes (757301 active, 0 holddown, 522 hidden)</span></span></span><br></p><p style="margin: 0cm 0cm 12pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"><span class="font" style="font-family:"Courier New"">+ = Active Route, - = Last Active, * = Both</span></span></span><br></p><p style="margin: 0cm 0cm 12pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"><span class="font" style="font-family:"Courier New"">205.251.192.0/24 *[BGP/170] 01:12:08, localpref 70</span></span></span><br></p><p style="margin: 0cm 0cm 12pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"><span class="font" style="font-family:"Courier New""> AS path: 6939 10297 I, validation-state: unverified</span></span></span><br></p><p style="margin: 0cm 0cm 12pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"><span class="font" style="font-family:"Courier New""> > to 216.66.90.21 via ge-1/0/5.0</span></span></span><br></p><p style="margin: 0cm 0cm 12pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"><span style="">AS10297 is eNET inc. Is this expected?</span></span></span><br></p><p style="margin: 0cm 0cm 12pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"><span style=""> </span></span></span><br></p><div><div style="border-right-width:initial;border-bottom-width:initial;border-left-width:initial;border-right-style:none;border-bottom-style:none;border-left-style:none;border-right-color:initial;border-bottom-color:initial;border-left-color:initial;border-image-source:initial;border-image-slice:initial;border-image-width:initial;border-image-outset:initial;border-image-repeat:initial;border-top-width:1pt;border-top-style:solid;border-top-color:rgb(225, 225, 225);padding-top:3pt;padding-right:0cm;padding-bottom:0cm;padding-left:0cm;"><p style="margin: 0cm 0cm 0.0001pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> Outages <outages-bounces@outages.org> <b>On Behalf Of </b>Phil Lavin via Outages<br> <b>Sent:</b> 24 April 2018 13:04<br> <b>To:</b> outages@outages.org<br> <b>Subject:</b> Re: [outages] Google 8.8.8.8 Resolution of Route53 domains</span></span></span></p></div>
</div>
<p style="margin: 0cm 0cm 0.0001pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"> </span></span><br></p><p style="margin: 0cm 0cm 12pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"><span style="">Looks more specific to AWS than it does to Google+AWS. Can’t resolve against some of AWS’s NS directly:</span></span></span><br></p><p style="margin: 0cm 0cm 12pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"><span class="colour" style="color:black"><span class="font" style="font-family:"Courier New""><span class="size" style="font-size:10pt">phil@phil-debian:~$ dig cloudcall.com IN A @ns-163.awsdns-20.com</span></span></span></span></span><br></p><p style="margin: 0cm 0cm 12pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"><span class="colour" style="color:black"><span class="font" style="font-family:"Courier New""><span class="size" style="font-size:10pt">; <<>> DiG 9.10.3-P4-Debian <<>> cloudcall.com IN A @ns-163.awsdns-20.com</span></span></span></span></span><br></p><p style="margin: 0cm 0cm 12pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"><span class="colour" style="color:black"><span class="font" style="font-family:"Courier New""><span class="size" style="font-size:10pt">;; global options: +cmd</span></span></span></span></span><br></p><p style="margin: 0cm 0cm 12pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"><span class="colour" style="color:black"><span class="font" style="font-family:"Courier New""><span class="size" style="font-size:10pt">;; connection timed out; no servers could be reached</span></span></span></span></span><br></p><p style="margin: 0cm 0cm 0.0001pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"><span style=""> </span></span></span><br></p><div><div style="border-right-width:initial;border-bottom-width:initial;border-left-width:initial;border-right-style:none;border-bottom-style:none;border-left-style:none;border-right-color:initial;border-bottom-color:initial;border-left-color:initial;border-image-source:initial;border-image-slice:initial;border-image-width:initial;border-image-outset:initial;border-image-repeat:initial;border-top-width:1pt;border-top-style:solid;border-top-color:rgb(225, 225, 225);padding-top:3pt;padding-right:0cm;padding-bottom:0cm;padding-left:0cm;"><p style="margin: 0cm 0cm 0.0001pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> Outages <<a style="text-decoration: underline; color: rgb(5, 99, 193);" href="mailto:outages-bounces@outages.org">outages-bounces@outages.org</a>> <b>On Behalf Of </b>Phil Lavin via Outages<br> <b>Sent:</b> 24 April 2018 12:56<br> <b>To:</b> <a style="text-decoration: underline; color: rgb(5, 99, 193);" href="mailto:outages@outages.org">outages@outages.org</a><br> <b>Subject:</b> Re: [outages] Google 8.8.8.8 Resolution of Route53 domains</span></span></span></p></div>
</div>
<p style="margin: 0cm 0cm 0.0001pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"> </span></span><br></p><p style="margin: 0cm 0cm 12pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"><span style="">Yeh. Still digging into it.</span><span class="colour" style="color:black"><span class="size" style="font-size:7.5pt"></span></span></span></span><br></p><p style="margin: 0cm 0cm 0.0001pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"><span style=""> </span></span></span><br></p><p style="margin: 0cm 0cm 0.0001pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> Outages <<a style="text-decoration: underline; color: rgb(5, 99, 193);" href="mailto:outages-bounces@outages.org">outages-bounces@outages.org</a>> <b>On Behalf Of </b>Zach Hanna via Outages<br> <b>Sent:</b> 24 April 2018 12:54<br> <b>To:</b> <a style="text-decoration: underline; color: rgb(5, 99, 193);" href="mailto:outages@outages.org">outages@outages.org</a><br> <b>Subject:</b> [outages] Google 8.8.8.8 Resolution of Route53 domains</span></span></span></p><p style="margin: 0cm 0cm 0.0001pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt"> </span></span><br></p><div><p style="margin: 0cm 0cm 0.0001pt;"><span class="font" style="font-family:Calibri, sans-serif"><span class="size" style="font-size:11pt">Anyone else seeing SERVFAIL for route53-hosted domains trying to resolve with Google DNS?</span></span><br></p></div>
</div>
<div><u>_______________________________________________</u><br></div>
<div>Outages mailing list<br></div>
<div><a style="text-decoration: underline; color: rgb(5, 99, 193);" href="mailto:Outages@outages.org">Outages@outages.org</a><br></div>
<div><a style="text-decoration: underline; color: rgb(5, 99, 193);" href="https://puck.nether.net/mailman/listinfo/outages">https://puck.nether.net/mailman/listinfo/outages</a><br></div>
</blockquote><div style="font-family:Arial;"><br></div>
</body>
</html>