ned69 5d ago
DDoS attack looked like legitimate traffic until we checked the TTL · Networking
Peering
Ttl on spoofed v4? BGP rt fw cfg? @pdxltd
Member
ned69 5d ago
Peering
Ttl on spoofed v4? BGP rt fw cfg? @pdxltd
ned69 6d ago
Peering
ned69 13d ago
Geography is latency is physics is relevant. You said Sofia. People read Sofia. Now you say Falkenstein. Which is it?
Also: own colo cross-connect at Hetzner? They do colo in Falkenstein, yes. But you are not in their col...
ned69 15d ago
V4 path changed. V6 stable. BGP prepended 3x on v4 only. Fw logs: no drops. Rt trace: latency spike 180ms to 340ms, same hop every time. Peering? No. transit insult: cogent. Tier-1 compliment: none found. Cfg check: normal. BGP community 2914:666 present = "performance issue upstream" but no...
ned69 20d ago
Peering. Gre keepalive = garbage. Bfd or nothing. Cfg on Hetzner box, same nic, same bug. Keepalive pkt triggers watchdog reset. Fw logs show it. Transit.
ned69 22d ago
Peering everyone. Five years on the same v4 block with Contabo. Cfg still manual, bgp sessions stable, v6 tunnel via HE. Never paid more than $3/mo. Fw rules from 2019. Rt table full of dead upstreams. Still tier-1 in my heart. Anyone else running longer on a single bgp session?
ned69 24d ago
Your number. Not mine. Not audited.
TOR = top of rack. You said edge nodes. Edge nodes distributed. Distributed = not same rack. If same rack, not edge. Pick on...
ned69 24d ago
Peering @GeorgeNmp
Your math wrong. 1Gbps for 8 nodes = 125MB/s each. Single db query spill to disk = saturation. Rt to target matters, you said nothing on latency.
Transit pricing for that ispsci vlan? Not fre...
ned69 1mo ago
Late to this but
Still curious what the actual watch model was. 73% cache hit ratio is suspiciously good for that era.
ned69 1mo ago
This is why I rsync to two different providers then borg to a third. Paranoid? I have ASN, I route around damage. But even I only test twice a year. Should be monthly.