Email or username:

Password:

Forgot your password?
20 comments
Alex

@aurynn @xssfox Iโ€™ve mentioned before, Iโ€™ll go get the traces and share again one sec.

Alex

@aurynn @xssfox here you go. AS13335 is CloudFlare, they are using their network transit offering via Solarix who are the upstream to Catalyst. I checked this a *lot* from every NZ network operator I could.

A screenshot showing a traceroute from a New Zealand location to cloudisland.nz showing that it transits CloudFlare as its primary network provider
Simon (a ๐Ÿฎ in ๐Ÿ‡ณ๐Ÿ‡ฟ)

@aurynn @alexs @xssfox ah, in that way, yes... It is indeed ๐Ÿ˜ฃ. I thought you meant as core infra provider.
I'm curious if it is even possible to have any route that does not touch cf?

Alex replied to Simon (a ๐Ÿฎ in ๐Ÿ‡ณ๐Ÿ‡ฟ)

@Firesphere @aurynn @xssfox entirely possible, and very definitely easy if you host domestically! I'm not aware of many local companies that transit them for _domestic_ as it's more expensive to do so. I don't know why Solarix are, but my guess would be that they want it for mitigation reasons. "Magic Transit" isn't cheap really vs normal IP transit. Either way, most of your stuff goes NZ ISP -> CloudFlare -> Solarix -> Catalyst from what Atlas traces tell me.

Alex replied to Simon (a ๐Ÿฎ in ๐Ÿ‡ณ๐Ÿ‡ฟ)

@Firesphere @aurynn @xssfox didn't think I was going mad; I did mention it in the past (April). The RIPE Atlas link I shared has a traceroute from most ISP's in NZ and basically all - even Spark - transit CF to get to Solarix and then to Catalyst ๐Ÿคทโ€โ™‚๏ธ atlas.ripe.net/measurements/47 the โ„น on the right-hand side shows the traces, if you want to check my checking ๐Ÿ‘

Simon (a ๐Ÿฎ in ๐Ÿ‡ณ๐Ÿ‡ฟ) replied to Alex

@alexs @aurynn @xssfox I'm not at a pc, but that circled domain mentions ix.nz... Is nzix now maybe part of cf?

Alex replied to Alex

@Firesphere @aurynn @xssfox to clarify, New Zealand Internet Exchange Inc is an NFP, not tied to CloudFlare or any one company. Everyone just peers there (and Megaport, which you may see in some other traces from atlas) hence it being so obvious in the trace. You can see the same from Voyager in the South Island as it traverses peering down there in CHC.

Simon (a ๐Ÿฎ in ๐Ÿ‡ณ๐Ÿ‡ฟ) replied to Simon (a ๐Ÿฎ in ๐Ÿ‡ณ๐Ÿ‡ฟ)

@alexs @aurynn @xssfox I knew it theoretically is nfp... But seeing the asn.ix domain just made me wonder "huh? What?"

Alex replied to Simon (a ๐Ÿฎ in ๐Ÿ‡ณ๐Ÿ‡ฟ)

@Firesphere @aurynn @xssfox They publish the stuff from AGM's no secrets really - ix.nz/2022/10/10/news-from-the - aside from that they have done huge amounts for uplifting peering domestically.

ix.asn.au is the Aussie side, they got ix.nz kick started over here.

Ewen McNeill replied to Alex

@alexs @Firesphere @aurynn @xssfox FWIW from here (Vodafone HFC, ie DOCSIS FTTN) path is Vodafone (under several names of former purchases), 3 hops of random 198.41.237.0/24 nodes (~6 IPS returned per hop), and then Catalyst edge. All of 198.41.128.0/17 is CloudFlare.

I donโ€™t see any Solarix hop at all in my path. The early 203.167.245.0/24 hops are Vodafone. First Catalyst named hop is 202.78.247.22, which is a Catalyst IP.

Traceroute from Vodafone HFC to CloudIsland at Catalyst Hamilton, crossing random 198.41.237.0/24 hops
Whois information for 198.41.237.25, showing 198.41.128.0/17 is CloudFlare
Alex replied to Ewen

@ewenmcneill @Firesphere @aurynn @xssfox More digging indicates Catalyst are seemingly directly up-streamed by CloudFlare also (BGP routes from Atlas) and your path indicates that also.

For your route, Vodafone private peers with CloudFlare so you'd see the most direct path.

Also, you can see the same in Aussie.
atlas.ripe.net/measurements/47

๐Ÿคทโ€โ™‚๏ธ

A graph showing the transit providers for AS24226, CloudFlare being the primary IPv4 one, ACSData providing IPv6 and Solarix providing the lesser amount of IPv4 routes
Simon (a ๐Ÿฎ in ๐Ÿ‡ณ๐Ÿ‡ฟ) replied to Alex

@alexs @ewenmcneill @aurynn @xssfox the more I see, the more I'm like "this company has a finger in every bowl of porridge" with or without us knowing

Alex

@aurynn @xssfox screenshot above @Firesphere but also here's an Atlas run which will show from 70+ locations, atlas.ripe.net/measurements/47

Simon (a ๐Ÿฎ in ๐Ÿ‡ณ๐Ÿ‡ฟ) replied to Alex

@alexs @aurynn @xssfox well, fuck, that's decently hidden and outside my former scope...

Go Up