AnycastIP's new PoP - Sofia, BG

William

@OpaqueRegistrant said: It would be interesting to see if there's a provider who would agree to it.

Welcome to meet ps.kz and hosting.ua, at least some time ago both had no issues to spoof whatever you wanted from colo and dedis (not VPS).

gbshouse

@OpaqueRegistrant said:

@gbshouse said:

@OpaqueRegistrant said:
I wonder if you issue a pseudo-LOA so that some server providers might allow the anycast address as a source address, instead of considering it as spoofing. Is that a thing that exists in the world? If that's a thing, return packets could bypass rage4.

Nope, it's just wrong

It would be interesting to see if there's a provider who would agree to it. Some places do their load balancing that way within a DC - they just have the server directly reply from the IP of the load balancer. But of course the politics of that are different.

The best legit option to achieve such a thing is to use your own subnet with AnycastIP. This way the other providers can route egress directly as you have full control over the subnet.

OpaqueRegistrant

@gbshouse said:

@OpaqueRegistrant said:

@gbshouse said:

@OpaqueRegistrant said:
I wonder if you issue a pseudo-LOA so that some server providers might allow the anycast address as a source address, instead of considering it as spoofing. Is that a thing that exists in the world? If that's a thing, return packets could bypass rage4.

Nope, it's just wrong

It would be interesting to see if there's a provider who would agree to it. Some places do their load balancing that way within a DC - they just have the server directly reply from the IP of the load balancer. But of course the politics of that are different.

The best legit option to achieve such a thing is to use your own subnet with AnycastIP. This way the other providers can route egress directly as you have full control over the subnet.

Not sure I get it. Routing is based on destination only. Source is only relevant for antispoofing

gbshouse

@OpaqueRegistrant if you own the subnet you can work with your providers and asked them to allow outgoing traffic without spoofing, just providing them with LoA etc. In the same time you can use the subnet with us. Side note - we do provide ECMP everywhere so you can balance the load between multiple nodes in the same location