Large prefix hijack from Vodafone AS55410

Anurag Bhatia
Earlier today I saw twitter feed of bgpstream about Vodafone AS55410 hijacking a prefix from Brazil. BGP,HJ,hijacked prefix AS270497 24.152.117.0/24, RUTE MARIA DA CUNHA, BR,-,By AS55410 VIL-AS-AP Vodafone Idea Ltd, IN, https://t.co/WvDvQMMDCf — Cisco BGPStream (@bgpstream) April 16, 2021 Soon my friend Doug Madory tweeted about large scale hijack coming from Vodafone AS55410. Large BGP routing leak out of India this morning. AS55410 mistakenly announced over 30,000 BGP prefixes causing a 13x spike in inbound traffic to their network according to @kentikinc netflow data.

Farm law protests & confusion about democracy

Anurag Bhatia
Over two months passed since anti-farm law protests have started. It’s having a major impact across life in Delhi, Haryana and Punjab. This post covers it in detail. Advanced warning: Very India specific post. Has nothing to do with systems or networks. Do not read if you aren’t interested in Indian farm distress, the way our democracy works and associated issues. Image source: Firstpost Background of farming stress Due to a number of policy decisions, farmers in Punjab and Haryana (and some key areas of UP) got into a vicious cycle of producing wheat & paddy crops in excess.

Doomsday and the DNS resolution

Anurag Bhatia
Last month I did a short webinar with Indian ISPs talking about DNS servers in detail. The idea of the session was to make network engineers from fellow ISPs familiar with root DNS servers, DNS hierarchy, anycast etc. As we went through slides it was clear from RIPE Atlas data that Indian networks are not reaching local DNS servers due to routing! (Data from RIPE Atlas here). This may come as a surprise for policymakers (where there seem to be ongoing discussions around how India can have its own root DNS servers even though) we are not hitting existing local root DNS instances.

Measuring latency to endpoints with blocked ICMP

Anurag Bhatia
And a blog post after a while. Last few months went busy with RPKI. After my last post about RPKI and the fact that India was lacking a little bit on RPKI ROA front, we started with a major push by a set of like-minded folks like us. For now, Indian signed table has jumped from 12% since Aug to 32% now in Oct. Detailed graphs and other data can be found here on the public Grafana instance.

Tracking Indian RPKI data

Anurag Bhatia
So based on my friend - Abdul Awal’s tweet, I started looking at the latest RPKI ROA data for India. His Tweet came when I was in the middle of moving my blog from WordPress running over LXC containers to now WordPress over docker with Bitnami image. Bit of optimisation is still pending. My routing security project with @nsrcworld & @mozilla started in Oct-19 to improve #RPKI deployment in South Asia+Myanmar.