What is a route leak?
Route Leak Impacting Cloudflare
51–60 of 164 posts
Re: Route Leak Impacting Cloudflare
#52Earlier quoted context omitted.
At 3-4 major leaks per year it seems like we should probably fix BGP one of these days...
The way I understand it it's not BGP, it's mostly human error, or malicious intent. The protocol is fine.
Malicious intent could likely be mitigated with cryptography. E.g., publishing a prefix requiring a signature from its owner.
Such system would also contain human error to a smaller set of possible faults.
Re: Route Leak Impacting Cloudflare
#53Disabling HTTP proxy and leaving "DNS only" option in CloudFlare DNS settings solved the problem for us.
Doesn't appear to work for us
Re: Route Leak Impacting Cloudflare
#54Earlier quoted context omitted.
At 3-4 major leaks per year it seems like we should probably fix BGP one of these days...
The way I understand it it's not BGP, it's mostly human error, or malicious intent. The protocol is fine.
An unauthenticated protocol that allows unsigned routes to be blindly accepted is not a good protocol, that's why Cloudflare has been pushing RPKI for a while https://blog.cloudflare.com/rpki/
https://blog.cloudflare.com/rpki-details/
Re: Route Leak Impacting Cloudflare
#55This appears to be a routing problem. All our systems are running normally but traffic isn't getting to us for a portion of our domains. 1128 UTC update Looks like we're dealing with a route leak and we're talking directly with the leaker and Level3 at the moment. 1131 UTC update Just to be clear this isn't affecting all our traffic or all our domains or all countries. A portion of traffic isn't hitting Cloudflare. L…
I guess we are in that 3% then!
But 50% of our traffic has gone!
Hopefully you are still working on it!
Re: Route Leak Impacting Cloudflare
#56This appears to be a routing problem. All our systems are running normally but traffic isn't getting to us for a portion of our domains. 1128 UTC update Looks like we're dealing with a route leak and we're talking directly with the leaker and Level3 at the moment. 1131 UTC update Just to be clear this isn't affecting all our traffic or all our domains or all countries. A portion of traffic isn't hitting Cloudflare. L…
I guess we are in that 3% then! But 50% of our traffic has gone! Hopefully you are still working on it!
We're definitely still working on it. Sorry you're affected by this. We're talking with the network providers involved. If anyone from the Verizon NOC is online... call me!
Re: Route Leak Impacting Cloudflare
#57Unless it’s a total coincidence, this looks like this is affecting some Amazon services, including Sagemaker notebooks and Echo devices.
Re: Route Leak Impacting Cloudflare
#58I realized that it would be an issue like this when downforeveryoneorjustme.com didn't load either.
Re: Route Leak Impacting Cloudflare
#59“AS396531 "Allegheny Technologies Incorporated" is leaking a better-reachable route for AS13335 "Cloudflare, Inc." towards AS701 "Verizon Business/UUnet" explaining the current LSE going on.”
Re: Route Leak Impacting Cloudflare
#60Earlier quoted context omitted.
At 3-4 major leaks per year it seems like we should probably fix BGP one of these days...
We'll get right on that after everyone has IPv6 deployed.
I think the pressure to implement better ROA checking and something like RPKI will be much stronger than the push to IPv6 was if we keep having major route leaks multiple times a year.
Eventually some governments will have to get involved...