AS212170 - Rok PotocnikRFC 4890 ✓RPKI ✓ 1/1ASPA -

AS overview

Test target: 2001:678:ba8:1000::53 · dns1.rula.net · address space: unknown · prefixes announced: 1

prefix(es): 2001:678:ba8::/48

SIX peering

Random-IP probe (yarrp) into the AS' prefixes

We probed 15 arbitrary IPv6 address(es) inside AS212170's announced prefix(es). No router inside the prefix responded. The deepest visible hop was 2a01:260:c013::a at hop 16 - that router answers ICMPv6 Echo. This is not in AS212170's announced prefix; operationally it's the AS-edge / peering interface (often on a SIX peering address or an upstream's /127 link). The traceroute boundary is the AS edge: ICMPv6 Time-Exceeded responses from anything inside this AS are filtered.

ICMPv6 Type 2 (Packet Too Big) acceptance - active test

Vantage points disagree about Type 2 acceptance - transit ASes on one path may be filtering Type 2 even though the destination's stack accepts it on another path:

• NL host (go6lab): Type 2 honored. Forged PTB accepted; next response shrunk. (ICMPv6 Echo + forged PTB)
• ITA host (Karsolink): inconclusive: no Echo Reply to 1300-byte probe. (ICMPv6 Echo + forged PTB)
• SLO host (6connect): Type 2 honored. Forged PTB accepted; next response shrunk. (ICMPv6 Echo + forged PTB)

Why they disagree - reachability mismatch: One vantage couldn't drive a flow at all to this destination (no Echo Reply or no responding TCP port), so the active test had no behavioural change to observe. The other vantage's verdict is the only meaningful one here.

sudo tcpdump -i any -n -e 'icmp6 and ip6[40] = 2 and (src host 2607:fae0:a000::42 or src host 2a00:8642:42::75 or src host 2a12:d8c0:105a:9001::a154)'

From NL host (go6lab)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

Rate-limited ICMPv6: hop 3 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.022ms pmtu 1500
 1:  2a00:8642:42::3                                       1.465ms 
 1:  2a00:8642:42::3                                       1.652ms 
 2:  no reply
 3:  2a00:1ca8:1::194                                      2.798ms 
 4:  2a03:3f40::10:33                                      5.692ms 
 5:  t-2.interxionfra11.nlsix.net                         33.012ms asymm  6 
 6:  2a01-260-1-1--25.core6.t-2.net                       41.970ms asymm  7 
 7:  2a01-260-1-1--84.core6.t-2.net                       42.246ms asymm  8 
 8:  2a01:260:1:1::10d                                    39.352ms asymm  9 
 9:  2a01-260-c013--a.link6.t-2.net                       38.419ms asymm 10 
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
23:  no reply
24:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From ITA host (Karsolink)   open

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

tracepath -6

 1?: [LOCALHOST]                        0.034ms pmtu 1500
 1:  no reply
 2:  2a12:d8c0:109f:121::a1                                1.060ms 
 3:  2a12:d8c0:101f:6::1                                  10.614ms 
 4:  no reply
 5:  100ge0-0-0-20.core1.vie1.he.net                      23.788ms 
 6:  2001:7f8:30:0:2:1:3:4779                             20.820ms 
 7:  2a01-260-1-1--2b.core6.t-2.net                       45.774ms asymm 10 
 8:  2a01-260-1-1--84.core6.t-2.net                       43.546ms asymm 11 
 9:  2a01:260:1:1::10d                                    48.044ms asymm 12 
10:  2a01-260-c013--a.link6.t-2.net                       45.969ms asymm 13 
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
23:  no reply
24:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From SLO host (6connect)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

Rate-limited ICMPv6: hop 3 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.032ms pmtu 1500
 1:  fw1-lju.6connect.com                                  0.556ms 
 1:  fw1-lju.6connect.com                                  0.448ms 
 2:  no reply
 3:  no reply
 4:  six.t-2.si                                            1.462ms 
 5:  2a01-260-1-1--84.core6.t-2.net                        2.770ms 
 6:  2a01:260:1:1::10d                                     3.120ms 
 7:  2a01-260-c013--a.link6.t-2.net                        3.816ms 
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
23:  no reply
24:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500