AS205007 - ESERVER-RS Maxim Azarov trading as eServerRFC 4890 ✓RPKI ✓ 3/3ASPA -

AS overview

Test target: 2a04:b540:3000:2::3 · (SPF ip6: literal) · address space: unknown · prefixes announced: 3

prefix(es): 2a10:9686::/32, 2a04:b540:3000::/36, 2a09:31c0:babe::/48

Random-IP probe (yarrp) into the AS' prefixes

We probed 30 arbitrary IPv6 address(es) inside AS205007's announced prefix(es). No router inside the prefix responded. The deepest visible hop was 2a02:e40::100:e at hop 12 - that router answers ICMPv6 Echo. This is not in AS205007's announced prefix; operationally it's the AS-edge / peering interface (often on a SOX peering address or an upstream's /127 link). The traceroute boundary is the AS edge: ICMPv6 Time-Exceeded responses from anything inside this AS are filtered.

ICMPv6 Type 2 (Packet Too Big) acceptance - active test

Vantage points disagree about Type 2 acceptance - transit ASes on one path may be filtering Type 2 even though the destination's stack accepts it on another path:

• NL host (go6lab): Type 2 honored. Forged PTB accepted; next response shrunk. (ICMPv6 Echo + forged PTB)
• ITA host (Karsolink): Type 2 NOT honored. Forged PTB had no effect (filtered en route or stack ignored it). (TLS handshake + forged PTB)
• SLO host (6connect): Type 2 honored. Forged PTB accepted; next response shrunk. (ICMPv6 Echo + forged PTB)

Why they disagree - different probe methods: These vantages picked different probe methods, so their verdicts are not directly comparable. The active test tries methods in order (icmp6-echo → dns-tcp → tls → http) and stops at the first that produces a definitive verdict; if the chosen method differs, the underlying evidence differs too. Most often this is because the path PMTU on one vantage is below 1500 B, so the natural Echo Reply is already fragmented and the icmp6-echo method falls through to a TCP-based one. This is largely a measurement artifact, not a destination-behaviour difference.

sudo tcpdump -i any -n -e 'icmp6 and ip6[40] = 2 and (src host 2607:fae0:a000::42 or src host 2a00:8642:42::75 or src host 2a12:d8c0:105a:9001::a154)'

sudo ip6tables -L INPUT -nv | grep -iE 'icmpv6|packet-too-big'
sudo nft list ruleset 2>/dev/null | grep -A1 'icmpv6'

sudo sysctl net.ipv6.conf.all.accept_redirects net.ipv4.ip_no_pmtu_disc net.ipv6.route.mtu_expires

sudo tcpdump -i any -n -e 'icmp6 and ip6[40] = 2 and (src host 2607:fae0:a000::42 or src host 2a00:8642:42::75 or src host 2a12:d8c0:105a:9001::a154)'

From NL host (go6lab)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

Rate-limited ICMPv6: hop 9, hop 10 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.039ms pmtu 1500
 1:  2a00:8642:42::3                                       1.281ms 
 1:  2a00:8642:42::3                                       1.376ms 
 2:  gw.friends.steffann.nl                                2.721ms 
 3:  2a00:1ca8:1::194                                      3.215ms 
 4:  2a03:3f40::10:33                                     14.530ms 
 5:  2001:7f8:1::a500:8400:1                              23.243ms 
 6:  2a00:e90::212:200:5:7                                32.783ms asymm 11 
 7:  2a00:e90::212:200:6:8                                32.141ms asymm 10 
 8:  2a00:e90::212:200:6:60                               32.629ms 
 9:  no reply
10:  2a02:e40::23                                         32.072ms asymm  7 
11:  2a02:e40::100:e                                      32.419ms asymm  8 
12:  service-1.rs.eserver.net                             31.709ms !A
     Resume: pmtu 1500 

From ITA host (Karsolink)   openRFC 4890 ✗

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

Rate-limited ICMPv6: hop 8 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.027ms pmtu 1500
 1:  no reply
 2:  2a12:d8c0:109f:121::a1                                0.681ms 
 3:  2a12:d8c0:101f:6::1                                  10.273ms 
 4:  2a03:b020:1:51::a                                    10.652ms 
 5:  2a03:b020::222                                       26.448ms 
 6:  2a03:5f80:4:2::237:40                                50.252ms 
 7:  2a00:e90:0:b::19                                     50.913ms 
 8:  2a02:e40::24                                         51.069ms 
 9:  2a02:e40::100:e                                      50.979ms 
10:  service-1.rs.eserver.net                             50.915ms !A
     Resume: pmtu 1500 

From SLO host (6connect)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

Rate-limited ICMPv6: hop 3, hop 4, hop 5, hop 10, hop 11 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.024ms pmtu 1500
 1:  fw1-lju.6connect.com                                  0.472ms 
 1:  fw1-lju.6connect.com                                  0.440ms 
 2:  ccr-to-fw-ccr1-gw-lju.6connect.com                    0.992ms 
 3:  2a03:a100:0:201:1::1                                  0.661ms 
 4:  e0-1.core1.lju1.he.net                                2.139ms 
 5:  100ge0-0-0-5.core1.vie1.he.net                        8.856ms 
 6:  2001:7f8:30:0:2:1:0:8400                              6.438ms 
 7:  2a00:e90::212:200:5:7                                40.869ms asymm 20 
 8:  2a00:e90::212:200:6:8                                41.082ms asymm 19 
 9:  2a00:e90::212:200:6:60                               41.167ms asymm 18 
10:  2a00:e90:0:c::7                                      41.720ms asymm 19 
11:  2a02:e40::23                                         32.318ms asymm 13 
12:  2a02:e40::100:e                                      31.436ms asymm 13 
13:  service-1.rs.eserver.net                             31.474ms !A
     Resume: pmtu 1500