Skip to content

My first BGP session lasted 47 seconds before I blackholed myself

Networking by herebungkus 1 replies 153 views
11 #1

Hello everyone, thank you for reading. I want to share my mistake so beginner can learn.

I rent 3$ VPS from CloudCone for learning BGP. They have looking glass and friendly support, thank you CloudCone team. I get /24 from my RIR, set up Bird2, announce to upstream.

Session come up, I see my prefix in their table, very happy. Then I check website, cannot reach. Then SSH disconnect. Then management IP no response.

47 seconds total. Wkwkwk

I think my prefix wrong, or upstream filter. No. I filter my own /32 management IP in Bird2 export filter. Prefix list deny my source, so return traffic drop. Thank you to support team for rescue console, very patient.

Lesson: never use IP inside announced block for management. Or if must, add explicit permit before deny. Thank you.

https://cloudcone.com

wrap it, ship it, pray it
#2

Right then, proper disaster that. Cheers lads, we've all been there.

My first time I announced a full table to my mate's DSL line and his router it cried. Proper melted. ISP rang him asking why he had 900k routes.

I used to work support at a hosting company and we saw this weekly. Someone filters their own default route, blackholes the lot. Honest mistake.

Honey badger don't care... about downtime

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft