nanog mailing list archives

Re: Newbie Needs Help: someone is announcing less-specific IPv6 (BGP) route on top of me


From: Mel Beckman via NANOG <nanog () lists nanog org>
Date: Sat, 30 Aug 2025 14:11:24 +0000

As long as you advertise more specific routes, your routes will always win. So not a problem that I can see.

 -mel

On Aug 30, 2025, at 5:57 AM, Tom Beecher via NANOG <nanog () lists nanog org> wrote:

According to RIPEStat, 2400::/12 hasn't been seen since Oct 2023, from
AS13030 (Init7).

I also cannot seem to see any recent announcement of that anywhere in the
usual sources, or my internal data. I would say this was an error on
Qrator's part.

In that case, what more do I must do?


Although it didn't seem to happen here, best practice is to always announce
100% of your allocated IPs at all times.  This provides protection against
someone announcing an umbrella and pulling traffic for any uncovered space.
It's not perfect , but protects against general stupid.

On Sat, Aug 30, 2025 at 2:59 AM Pirawat WATANAPONGSE via NANOG <
nanog () lists nanog org> wrote:

Dear Gurus,


Radar tool by Qrator [Reference: https://radar.qrator.net ] claims that
Zenlayer Inc. [AS4229] is “umbrella-ing” me by announcing ‘2400::/12’ on
top of my more-specific address block.
The tool classifies it as a type of hijacking.
[Disclaimer: apologies to Zenlayer if you didn’t do it; but that’s the
information I received]
My neighboring organization also has a more-specific block that falls under
The Umbrella too.

However, other tools (https://stat.ripe.net ,
https://irrexplorer.nlnog.net
, https://bgp.he.net , etc.) seem unable to see that particular
announcement.

Questions:
1. Is Qrator claim true? (because I have already tried but cannot verify)
2. If so, should I be concerned?
Even though I already ROA-ed *and* IRR-ed my own block, but if “the other
end” doesn’t validate, it won’t do any good, correct?
(Oh, yeah, the other end also has to somehow “not see” my longer-prefix.
But that can happen as well, no?)
3. In that case, what more do I must do?

I would extremely appreciate someone helping me out on this matter.


Best Regards,

Pirawat.
_______________________________________________
NANOG mailing list

https://lists.nanog.org/archives/list/nanog () lists nanog org/message/GT2M54NGQQHRE7IU63ECEOMVTGH7FRIW/
_______________________________________________
NANOG mailing list
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/47LPGUEA2E2LV3RIRZGEF35KC6SPQ53L/
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/D52IYCHZULYXWQCCAOQQJHUFPG6SDBKT/

Current thread: