Skip to content

OVHcloud IX ghost BGP withdrawals - anyone else?

Networking by engzur 25 replies 3.6K views
10 #1

Prefix 203.0.113.0/24 vanished from RouteViews at 03:00 UTC

AS64496 here. Dual upstream at OVHcloud IX, both showing withdrawn. My prefix is still originated, still visible to direct peers, but RouteViews collectors gone. RFC 4271 says UPDATE with unreachable, but I see nothing in my logs

Diagram:
[me:AS64496]---[OVHcloud IX]---[upstream A]
|
[RouteViews]
|
[upstream B]

Both upstreams claim clean. Who else at OVHcloud seeing ghost withdrawals

#2

I buy VPS at OVHcloud yesterday,now my IP also cannot reach lah

Already open ticket,but no answer yet. I check from my home server-server,all down lah

engzur said:
Who else at OVHcloud seeing ghost withdrawals

You have ASN,I only small customer,can you help me check also — I used https://bgp.tools

#3

Not my tier lol

€3 NAT VPS from Contabo, no BGP here. But the route to my box died around 3am too. Thought it was my cheap deal acting up. Maybe not

$3/year. 128MB RAM. Pure happiness.
#4

This isn't your problem but check your PTR while you're debugging

For what it's worth, if OVHcloud IX has route filter issues, any mail you relay through there might start hitting Spamhaus PBL listings. Seen it before when prefixes get filtered asymmetrically. Not the main issue but worth monitoring

SPF, DKIM, DMARC — holy trinity ✉️
#5

Both upstreams "clean" but simultaneous withdrawal? That's suspicious.

#6

I had a route drop at 3am too, different IX though

RAID 1: because paranoia pays
#7

Which upstream OS version

436 days. reboot is surrender.
#8
WalnutLinux said:
You have ASN,I only small customer,can you help me check also

I can see your prefix from here on AS64496 looking glass. Not withdrawn, just not in RouteViews. Your VPS IP is different problem probably -- check if it's in 147.135.x.x or 51.89.x.x range, those are OVHcloud Roubaix, not IX.

uma said:
Which upstream OS version

Both A and B on FRR 8.5.1, my side Bird 2.0.12. Logs show no session drop, no NOTIFICATION, just ... silence from RouteViews side after 03:00. Like the collector stopped hearing OVHcloud IX entirely.

I opened ticket with OVHcloud too. #INC-2024-0812-XXXX if anyone wants to reference.

5 #9
engzur said:
Logs show no session drop, no NOTIFICATION

Same Bird here, 2.0.14. I don't peer at OVHcloud IX but I watch six RouteViews collectors. All of them lost OVHcloud routes in same minute, not just your prefix. Whole AS16276 feed went flat for 23 minutes, then came back with no path change.

My status pages all fired. 14 of them. I have graphs.

436 days. reboot is surrender.
#10
engzur said:
Both A and B on FRR 8.5.1

OVHcloud IX runs their own route server software, not FRR on the RS side. If both your upstreams are clean but RouteViews disappeared, the withdrawal is between OVHcloud IX fabric and the collectors. Ghost withdrawal makes sense -- your upstreams still see you, but the RS stopped advertising to multihop peers.

I saw this once at France-IX in 2019. Route server policy change, no warning, half the internet vanished from PCH.

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft