All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
How to fix IPv6 'Routes filtered' issue ?
Few of my IPv6 subnets announced via NetAssist globally not accessible, my other subnets announced via Hurricane Electric working fine
when I checked with one of looking glass, they shows as 'Routes filtered'
https://lg.de-cix.net/search?q=2a09:be40:1147::/48
my route6 objects as below and origin also set to my AS
$ whois -h whois.ripe.net -rB -i mnt-by AMDEXA-MNT | grep route6
:: parent
route6: 2a09:be40:1140::/44
:: working subnets
route6: 2a09:be40:1140::/48
route6: 2a09:be40:1141::/48
route6: 2a09:be40:1142::/48
route6: 2a09:be40:1143::/48
:: not working subnets
route6: 2a09:be40:1144::/48
route6: 2a09:be40:1145::/48
route6: 2a09:be40:1146::/48
route6: 2a09:be40:1147::/48
I am using Quagga (version 0.99.23.1) on each routers, any idea how to fix this? I am really new to BGP
Thanks!
Comments
There is much more Information than "routes filtered" - "IRRDB lookup: AS-SET does not include origin AS".
This means that your ASN is not part of the Netassist AS-Set so the upstream, DE-CIX here, won't accept it. - They have proper filtering.
And btw. your prefix is reachable from some networks, from those who don't seem to filter based on IRR.
Everyone was new to it at some point, but please learn some fundamentals before doing BGP in production.
Keep reading, keep learning. But most and foremost, build solid filters
Edit:
Why not announce to both HE and Netassist and use the full potential of BGP?
This means that your ASN is not part of the Netassist AS-Set so the upstream, DE-CIX here, won't accept it. - They have proper filtering.
And btw. your prefix is reachable from some networks, from those who don't seem to filter based on IRR
Thanks for the information, I am planing to reach Netassist on this
Keep reading, keep learning. But most and foremost, build solid filters
Very true, I am still not using it on any production environment
Why not announce to both HE and Netassist and use the full potential of BGP?
i'll try that too... I never realized it's possible before..
The Internet is considered a production environment...
Using multiple upstreams is the whole point of having an ASN, if you just have one your ISP could take care of it for you.
By using multiple upstreams you ensure that your prefix has better reachability from different networks and you are also more resistant to a problem with one provider (in theory, as NetAssists IPv6 is mostly HE).
actually I announced different subsets from different location
4 * /48 - from my home (Colombo, Sri Lanka) via HE
4 * /48 - from one of my VPS (Dallas, TX) via NetAssists
I have 8 * /48 subsets unallocated, I am planing to use them with multiple upstreams as you suggested, unfortunately none of ISPs here at Sri Lanka willing to provide me a BGP session (they asked me to purchase $1000+ leased line to get IPv4 session and not sure about IPv6 sessions )
Thanks!
did you try Dialog? they provide native IPv6 connectivity on HBB (and mobile) connections.
I think Colocation in one of the ISP's data centers will be the cheapest option.
My ISP is dialog (having 2 connections). even they provide native IPv6, prefix is dynamic and they said that they have no plan to support static IPv6 block. then I asked them to active public IPv4 (by default they carrier grade NAT IP range) to have a tunnel broker my IPv6, native IPv6 connective no longer there as their backend not supports for it (as per them)
unfortunately it's not cheap in my country and not a good option to a pet project
Thanks!