AS8540 - AMANET-AS AMA netwoRXPARFC 4890 ✓RPKI ✓ 3/3ASPA -

AS overview

Test target: 2a0b:6c40:1:39:185:211:216:71 · dns01.ama-networx.net · address space: PA · prefixes announced: 3

prefix(es): 2a0b:6c40::/29, 2a07:7540::/29, 2a0b:4c40::/29

VIX / AAIX / SAIX / TIROL-IX / ERA-IX peering

Random-IP probe (yarrp) into the AS' prefixes

We probed 70 arbitrary IPv6 address(es) inside AS8540's announced prefix(es). No router inside the prefix responded. The deepest visible hop was 2a01:4a0:0:2058::16 at hop 12 - that router answers ICMPv6 Echo. This is not in AS8540's announced prefix; operationally it's the AS-edge / peering interface (often on an IXP peering address or an upstream's /127 link). The traceroute boundary is the AS edge: ICMPv6 Time-Exceeded responses from anything inside this AS are filtered.

ICMPv6 Type 2 (Packet Too Big) acceptance - active test

Vantage points disagree about Type 2 acceptance - transit ASes on one path may be filtering Type 2 even though the destination's stack accepts it on another path:

• SRB host (SOX, Belgrade): Type 2 honored. Forged PTB accepted; next response shrunk. (ICMPv6 Echo + forged PTB)
• DE host (Berlin): Type 2 honored. Forged PTB accepted; next response shrunk. (ICMPv6 Echo + forged PTB)
• DE host (Düsseldorf): Type 2 honored. Forged PTB accepted; next response shrunk. (ICMPv6 Echo + forged PTB)
• NL host (go6lab): inconclusive: no Echo Reply after PTB (probe 1500B). (ICMPv6 Echo + forged PTB)
• ITA host (Karsolink): Type 2 honored. Forged PTB accepted; next response shrunk. (ICMPv6 Echo + forged PTB)
• SLO host (6connect): Type 2 honored. Forged PTB accepted; next response shrunk. (ICMPv6 Echo + forged PTB)
• SLO host (T-2): Type 2 honored. Forged PTB accepted; next response shrunk. (ICMPv6 Echo + forged PTB)

Why they disagree - measurement artifact: One vantage's probe didn't generate enough data to detect segment shrinkage (natural reply too small, or no second response). The other vantage's verdict is the meaningful one.

sudo tcpdump -i any -n -e 'icmp6 and ip6[40] = 2 and (src host 2607:fae0:a000::42 or src host 2a00:8642:42::75 or src host 2a01:261:313:b814:2a0:98ff:fe5b:13e4 or src host 2a06:d1c1:10b::cccc or src host 2a06:d1c1:10d::aaaa or src host 2a09:ab81::91 or src host 2a12:d8c0:105a:9001::a154)'

Multi-vantage path map

Every hop of all vantages’ traceroutes toward the target, drawn left→right, grouped into per-AS bubbles (a hop seen from several vantages is one shared bubble, so converging paths merge). It answers two questions per vantage — shown on each source bubble as echo ✓/⚠/✗ · trace ✓/✗: did the destination reply to ICMPv6 Echo (✓ honored, ⚠ replied but PTB not honored, ✗ no reply), and did the traceroute reach it. A line to the target is drawn only when that vantage got an echo reply — solid if the PTB was honored, dashed if not (reachable but a broken-PMTUD / RFC 4890 violation). The path depth still shows how far the traceroute itself got, and runs of unanswered (* *) hops collapse into one dashed “silent” bubble. Open full size ↗

• ● SRB host (SOX, Belgrade)
• ● DE host (Berlin)
• ● DE host (Düsseldorf)
• ● NL host (go6lab)
• ● ITA host (Karsolink)
• ● SLO host (6connect)
• ● SLO host (T-2)
• ── solid line = echo reply, PTB honored (clean reach)
• — — dashed line = echo reply but PTB not honored (RFC 4890 violation)
• no line = no echo reply (never reached)
• ◉ target: green = clean, amber = reachable-but-violation / unreachable
• ⚠ suspected drop AS
• ⋯ silent (unanswered) hops
• ● IXP hop

From SRB host (SOX, Belgrade)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

tracepath -6

 1?: [LOCALHOST]                        0.009ms pmtu 1500
 1:  _gateway                                              0.753ms 
 1:  _gateway                                              0.630ms 
 2:  sox-pn.sox.rs                                         0.384ms 
 3:  2001:7f8:1e:8::3d                                     0.638ms asymm  2 
 4:  ae8-930.RT.IRX.VIE.AT.retn.net                       11.276ms asymm  3 
 5:  GW-AS8075.retn.net                                   18.546ms asymm  4 
 6:  2a0b:6c40:0:36:185:211:216:30                        17.760ms asymm  5 
 7:  no reply
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From DE host (Berlin)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

tracepath -6

 1?: [LOCALHOST]                        0.027ms pmtu 1500
 1:  xe-0-0-13-178.gw01.ber01.as59645.net                  0.433ms 
 1:  xe-0-0-13-178.gw01.ber01.as59645.net                  0.463ms 
 2:  ae0-2453.cr10.ber01.lwlcom.net                        1.178ms 
 3:  ae3-90.cr10.ham01.lwlcom.net                          5.235ms 
 4:  ae0-50.cr11.ham01.lwlcom.net                          5.209ms 
 5:  2a00:c380:f000::4b                                    5.557ms asymm  4 
 6:  ae4-2087.dus10.core-backbone.com                     11.646ms asymm  5 
 7:  ae21-2071.fra10.core-backbone.com                    11.029ms asymm  5 
 8:  ae2-2021.fra20.core-backbone.com                     10.931ms asymm  4 
 9:  ae6-2003.nbg20.core-backbone.com                     12.234ms asymm  6 
10:  ae2-2032.muc20.core-backbone.com                     14.845ms asymm  7 
11:  ae4-2057.slz10.core-backbone.com                     16.549ms asymm  8 
12:  ae2-2058.vie20.core-backbone.com                     20.873ms asymm  9 
13:  2a01:4a0:1338:188::2                                 24.407ms asymm  9 
14:  2a0b:6c40:0:36:185:211:216:30                        24.131ms asymm 11 
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From DE host (Düsseldorf)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

tracepath -6

 1?: [LOCALHOST]                        0.012ms pmtu 1500
 1:  xe-0-0-12-142.gw01.dus01.as59645.net                  0.231ms 
 1:  xe-0-0-12-142.gw01.dus01.as59645.net                  0.204ms 
 2:  eth1-0-12-h5594.edge5-dus1.bb.wiit.network            1.664ms 
 3:  no reply
 4:  lag30.core3-dus1.bb.wiit.network                      0.330ms 
 5:  lag8.core1-dus-ix.bb.wiit.network                     0.577ms 
 6:  de-cix.fra.ama-networx.net                            4.079ms 
 7:  2a0b:6c40:0:123:185:211:216:49                       15.289ms asymm  9 
 8:  2a0b:6c40:0:36:185:211:216:30                        15.018ms asymm 10 
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From NL host (go6lab)   open

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

Rate-limited ICMPv6: hop 3, hop 4 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.567ms pmtu 1500
 1:  2a00:8642:42::2                                       3.347ms 
 1:  2a00:8642:42::2                                       1.868ms 
 2:  no reply
 3:  speed-ix.he.net                                      12.428ms 
 4:  be2.core4.fra1.he.net                               629.689ms 
 5:  be8.core1.prg1.he.net                                27.821ms 
 6:  be3.core1.vie1.he.net                                23.294ms 
 7:  2001:470:26b::3                                      20.926ms asymm  5 
 8:  2a0b:6c40:0:36:185:211:216:30                        22.467ms asymm  7 
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From ITA host (Karsolink)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

Rate-limited ICMPv6: hop 3 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.031ms pmtu 1500
 1:  karsolink-01.net.karsolink.com                        0.570ms 
 1:  karsolink-01.net.karsolink.com                        0.689ms 
 2:  2a12:d8c0:109f:121::a1                                0.796ms 
 3:  2a12:d8c0:101f:103::1                                 8.570ms 
 4:  no reply
 5:  100ge0-0-0-20.core1.vie1.he.net                      20.539ms 
 6:  2001:470:26b::3                                      31.486ms 
 7:  2a0b:6c40:0:36:185:211:216:30                        31.683ms asymm  8 
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From SLO host (6connect)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

Rate-limited ICMPv6: hop 3 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.036ms pmtu 9000
 1:  fw1-lju.6connect.com                                  1.022ms 
 1:  fw1-lju.6connect.com                                  0.545ms 
 2:  no reply
 3:  2a00:ee1:800:9::1                                     2.402ms 
 4:  2a00:ee0:1:10::2                                      1.469ms asymm  3 
 5:  2a00:ee0:1:10::2                                      1.688ms pmtu 1500
 5:  de-cix.fra.ama-networx.net                           14.197ms asymm  9 
 6:  2a0b:6c40:0:123:185:211:216:49                       16.210ms 
 7:  2a0b:6c40:0:36:185:211:216:30                        16.726ms asymm  6 
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
     Too many hops: pmtu 1500

From SLO host (T-2)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

Rate-limited ICMPv6: hop 5 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.028ms pmtu 1500
 1:  2a01:261:313:b814::1                                  0.851ms 
 2:  2a01:260:1::225                                       8.777ms 
 3:  2a01-260-1-1--9a.core6.t-2.net                        2.191ms 
 4:  no reply
 5:  100ge0-0-0-31.core1.vie1.he.net                      10.831ms 
 6:  100ge0-0-0-31.core1.vie1.he.net                      11.190ms asymm  5 
 7:  2a0b:6c40:0:36:185:211:216:30                         9.662ms 
 8:  2a0b:6c40:0:36:185:211:216:30                         9.832ms asymm  7 
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500