Re: lug-bg: Traceroute-Molba
- Subject: Re: lug-bg: Traceroute-Molba
- From: Vesselin Kolev <vlk@xxxxxxxxxxxxxxxxx>
- Date: Wed, 1 Oct 2003 11:15:59 +0300
- Organization: Laboratory of Chemical Physics & Engineering, University of Sofia, Bulgaria
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Dva pyti veche pravia preduprezhdenie kym ISP-to chrez rykovodstvoto
na SU-NET, za da pisha v tozi list, iavno ne e imalo kakvato i da e
reakcia.. a mina dosta vreme.
Obiasniavam tochnata kartina:
Samia SU-NET e zabranil izhodiashti ICMP-port-inreachable i
ICMP-host-unreachable, kakto i ICMP-echo-request. No
ne e zabranil vhodiashti ICMP-port-inreachable i
ICMP-host-unreachable. T.e. BSD style traceroute triabva da si
raboti, shtoto shemata mu e UDP request i posledvasht otgovor ot
tipa na ICMP-port-unreachable ili ICMP-host-unreachable. Na praktika
BG adresnoto prostranstvo e dostizhimo:
- -bash-2.05b$ traceroute www.hit.bg
traceroute to hit.bg (195.24.37.245), 30 hops max, 38 byte packets
1 nat-router.backbone-1.vpn.lcpe.uni-sofia.bg (192.168.100.1) 1.150 ms
0.529 ms 0.442 ms
2 eth-out.backbone-1.lcpe.uni-sofia.bg (62.44.103.2) 0.784 ms 0.524 ms
0.606 ms
3 loz-l3sw.uni-sofia.bg (62.44.96.65) 1.165 ms 1.097 ms 1.109 ms
4 lozgw-man.uni-sofia.bg (62.44.96.238) 1.139 ms 1.112 ms 1.087 ms
5 su-gw.uni-sofia.bg (62.44.96.5) 1.170 ms * 1.809 ms
6 Fa0-0-alpha.Sofia.netissat.net (212.72.192.221) 1.897 ms 2.136 ms 1.702
ms
7 Gi0-0-beta.Sofia.netissat.net (212.72.193.51) 2.094 ms 3.249 ms 3.048 ms
8 netissat-gw.Peers.Sofia.0rbitel.net (213.222.51.117) 4.890 ms 10.877 ms
3.936 ms
9 ed1-daffy.Sofia.0rbitel.net (195.24.32.148) 3.343 ms 2.973 ms 2.524 ms
10 hit.bg (195.24.37.245) 4.292 ms 2.775 ms 3.353 ms
- -bash-2.05b$
koeto ne mozhe da se kazhe za non-BG AS:
- -bash-2.05b$ traceroute www.linux.de
traceroute to www.linux.de (62.111.65.66), 30 hops max, 38 byte packets
1 nat-router.backbone-1.vpn.lcpe.uni-sofia.bg (192.168.100.1) 0.581 ms
0.516 ms 0.431 ms
2 eth-out.backbone-1.lcpe.uni-sofia.bg (62.44.103.2) 0.621 ms 0.580 ms
0.524 ms
3 loz-l3sw.uni-sofia.bg (62.44.96.65) 1.198 ms 1.180 ms 1.125 ms
4 lozgw-man.uni-sofia.bg (62.44.96.238) 1.150 ms 2.286 ms 1.010 ms
5 su-gw.uni-sofia.bg (62.44.96.5) 1.316 ms 1.657 ms 1.293 ms
6 Fa0-0-alpha.Sofia.netissat.net (212.72.192.221) 1.708 ms 2.002 ms 2.981
ms
7 Gi0-0-gamma.Sofia.netissat.net (212.72.193.52) 2.562 ms 1.838 ms 2.241
ms
8 Gi0-0-vout2.Sofia.netissat.net (212.72.192.218) 3.768 ms 3.861 ms 2.971
ms
9 * * *
10 * * *
11 * * *
12 * * *
13 * * *
- -bash-2.05b$
Problemyt e s non-BG AS. Exporta na AS-a na NetisSat stava prez BTC-NET.
Tuk niakoi govoreshe za SpNet.. niama takova neshto. Ima vyzmozhen export
prez AS-a na SpNet, no po default e prez AS-a na BTC-NET. Importa pyk
e prez Taide.
Osven tova problemyt ne e na SU, a na dostavchika, zashtoto ot nego stradat
dosta corporativni clienti... Eto pokazvam kak izglezhda veselata kartinka ot
expo-2000:
[diag@border-expo diag]$ traceroute www.linux.de
traceroute to www.linux.de (62.111.65.66), 30 hops max, 38 byte packets
1 gw-expo-2000.Customers.netissat.net (212.72.193.245) 3.439 ms 3.414 ms
4.135 ms
2 Fe0-0-alpha.Sofia.netissat.net (212.72.193.62) 8.486 ms 18.099 ms 9.057
ms
3 Gi0-0-gamma.Sofia.netissat.net (212.72.193.52) 9.187 ms 10.308 ms 8.473
ms
4 Gi0-0-vout2.Sofia.netissat.net (212.72.192.218) 9.739 ms 8.857 ms
15.475 ms
5 * * *
6 * * *
7 * * *
8 *
[diag@border-expo diag]$
Kartinkata e edna i syshta. Ako pyk tolkova ne viarvash, vzemi otidi na
http://www.netissat.bg/cgi-bin/lg.pl
i opitai i ot tam traceroute kym non-BG AS. Po-razumno otkolkoto da se
vkliuchvash ot netissat i da pravish traceroute do SU-NET AS.
A zashto dostavchikyt e anti... Mi mislia, che tozi primer dostatychno dobre
go opisva. Naskoro imah i sreshti ot vtori vid s tehnichesko lice ot tozi
dostavchik po problemi na lipsa na export/import na HTTPS protocol pak za
non-BG AS. Ploisnaha mi neveroiatnata glupost, che trafficyt ni bil
assymetric i tova bil problema, pri uslovie, che tova mozhe da se proveri za
10 secundi i da se vidi, che ne e. Nai-nakraia storiha neshto i problema se
opravi .. sled 4 dni. Da ne govorim, che tova kasaeshe proect za blizo 50000
dolata, chast ot koito shteshe da poluchi SU i che zapadnite kontragenti
napraviha shtur scandal zashto HTTPS vryzki niama i se nalozhi za da niama
podobni izdynki da go puskam prez alternativnata linia, koiato imame i koiato
se prevyrna v zhensko syrce (t.e. vinagi ima miasto za oshte edin) i veche
prez neia minava kakvo li ne...
A sluchaino znaesh li kolko e platil po dogovor SU na NetisSat za da si
praviat poslednite gargara sys SU-NET? Nikade v dogovorite niama klauza,
v koiato ISP da mozhe da si zapazva pravoto da otraizava kakvoto i da e,
zashtoto tova e na praktika ednostranno deistvie ot negova strana i promenia
vida i kachestvoto na predlaganata usluga. Clientyt si e porychal naeta linia
i tq triabva da e "chista". Problem na clienta e veche kak shte se spravia s
floodove ot ne znam si koi poreden virus za MS OS-ite. Toi i ne mozhe da se
spravi de. Ako doide flood, koito fizicheski da napylni liniata.. nikakvi
firewalls ne mogat da pomognat. MInalata sedmica imashe floodove po MAN
na BTK, koito napravo mozheha da razbiat vsiakakvi fantazii i nikoi ne mozha
da gi spre.
Ta kazhi mi kak da ne nareka tozi dostavchik... anti?
Ne mu e tuk miastoto.. no e kraino vreme SU-NET da prestane da byde zhertva
na manipulacii, da izleze na VLAN port prez MAN na BTK i da ima dynamichna
marshrutizacia prez koito ISP iska za chuzhbina, a ne da plashta bezumni ceni
i da poluchava sreshtu tiah oriazana usluga samo ot edin ISP (koito i da e
toi).
Pozdravi
Beco
>
> ne e dobre taka de se kvalificirat dostavchicite. ako niakoi ima problem
> e dobre da se oplakva na samoto isp, a ne da bitchva po listi kym nego.
>
> ot tova koeto vidiah, navyn i v bg si puska icmp-echo [0] pone. navyn
> niama udp obache:
>
>
> Tracing the route to www.uni-sofia.bg (62.44.96.4)
>
> 1 su.Customers.netissat.net (212.72.192.222) 4 msec 4 msec 0 msec
> 2 www.uni-sofia.bg (62.44.96.4) [AS 5421] 0 msec 0 msec 0 msec
>
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 62.44.96.4, timeout is 2 seconds:
> !!!!!
> Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
>
> Translating "www.yahoo.com"...domain server (212.72.193.55) [OK]
>
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 216.109.118.67, timeout is 2 seconds:
> !!!!!
> Success rate is 100 percent (5/5), round-trip min/avg/max = 400/400/404 ms
>
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 204.152.189.116, timeout is 2 seconds:
> !!!!!
> Success rate is 100 percent (5/5), round-trip min/avg/max = 468/468/472 ms
>
> vinagi mojesh da zvynnesh na `antidostavchika' i da govorish in person s
> tiah.
>
> pozdravi,
>
> kp.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
iD8DBQE/eo1F+48lZPXaa+MRAvBIAKDQEBhxRfFuYHQs7oXbxxuvI63BcACgti+x
xaquQpRXVihS8MSdh0N8Y9M=
=Oz4i
-----END PGP SIGNATURE-----
============================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
============================================================================
|