Hi,
I've seen a big drop in IPv6 traffic volume on our Freenet6 IPv6
service last night and it seems to be the same on AMS-IX.
Has anyone else seen the same? Any idea why?
Thanks,
Mikael
Multiple options, but it must have something todo with a free usenet service.
We (XS4ALL, AS3265) changed some filters at around 15:00 GMT, but I notice the drop is hours later and much bigger (se the graph at https://www.ams-ix.net/technical/stats/sflow/).
If you have trouble reaching newszilla6.xs4all.nl at port 119 please drop me a note as you might accidently got filtered and I'm happy to resolve this.
From the looks of it one of our colleagues who also run a free usenet box have some issues as well, news.ipv6.eweka.nl isn't responding, which may well be the only cause of this little drop.
Groet,
MarcoH
Same here, we usually do 40-100Mbit of teredo 2001::/32 anycast traffic (a lot of which is news traffic over IPv6 to artrato/XSnews) and that dropped to an all-time low a bit before 0:00 CET.
I know XSnews had a free IPv6 news account service, perhaps they closed that ?
Marco Hogewoning wrote:
Jeroen Wunnink wrote:
Same here, we usually do 40-100Mbit of teredo 2001::/32 anycast traffic
(a lot of which is news traffic over IPv6 to artrato/XSnews) and that
dropped to an all-time low a bit before 0:00 CET.I know XSnews had a free IPv6 news account service, perhaps they closed
that ?
Assuming that the graph at XS News premium Usenet. Fast, unlimited and reliable. isnt broken for
any other reason, you may well be right
Vince
Just spoke with Michiel of Atrato / XSnews, they had some issues with an internal part of XSnews which also affected their IPv6 enabled services.
Jeroen Wunnink wrote:
Hi Jeroen & others,
Yep, looks like we are doing a great portion of AMSIX's IPv6 traffic and
our (free) IPv6 service was affected because of an internal error last
night around 00.30 am.
I'll put it up in a few hours for you free leechers 
Cheers,
Michiel
Michiel,
Thank you for the information. Could you let us know if XS4All's free v6 news feed went to zero, or was just dropped by some percentage?
I ask because the AMS-IX is frequently used as an example that v6 is being heavily adopted. If it is all one source for one application, that is important information to the people fighting for v6 adoption. Going from peaks of 1.4 Gbps to 0.4 Gbps is impressive. If that 0.4 Gbps still includes some of your traffic, it is very impressive.
Hi Patrick ,
Hi Jeroen & others,
Yep, looks like we are doing a great portion of AMSIX's IPv6 traffic and
our (free) IPv6 service was affected because of an internal error last
night around 00.30 am.Michiel,
Thank you for the information. Could you let us know if XS4All's free v6 news feed went to zero, or was just dropped by some percentage?
Please note Michiel isn't from XS4ALL 
We (XS4ALL) did not have any outage on the usenet service, everything is still running and passing traffic. The only thing we did was adjust some filters so if you are depend on more specifics and not announcing the /32 you might have been dropped from the table around 15:00 GMT.
The remaining traffic at ams-ix matches our internal graphs, so I guess I'm the only bulk sender at the moment.
I ask because the AMS-IX is frequently used as an example that v6 is being heavily adopted. If it is all one source for one application, that is important information to the people fighting for v6 adoption. Going from peaks of 1.4 Gbps to 0.4 Gbps is impressive. If that 0.4 Gbps still includes some of your traffic, it is very impressive.
There are 3 open usenet servers at amsterdam that I know off:
- XS4ALL (at newszilla6.xs4all.nl)
- Highwinds/Eweka (news.ipv6.eweka.nl)
- XSnews
I think we, once again, have proof 99% of the ams-ix traffic. The remaining bit possibly is google and the traffic on this mailinglist (and ripe.net).
As an exercise we could see if spikes in nanog activity can be matched to spikes in the v6 traffic
Groet,
MarcoH
Michiel,
Thank you for the information. Could you let us know if XS4All's free
v6 news feed went to zero, or was just dropped by some percentage?I ask because the AMS-IX is frequently used as an example that v6 is
being heavily adopted. If it is all one source for one application,
that is important information to the people fighting for v6 adoption.
Going from peaks of 1.4 Gbps to 0.4 Gbps is impressive. If that 0.4
Gbps still includes some of your traffic, it is very impressive.--
TTFN,
patrick
Hi Patrick,
The XS4All IPv6 service is run by .. XS4All. We (XS News) run a separate
service and we were responsible for the drop from ~950Mbit IPv6 traffic to
300M IPv6 traffic at 00.30 AM last night.
I'll put the service up again (wasn't notified) and we can continue
adopting IPv6 again 
Cheers,
Michiel
If I look at a tcpdump of our teredo relay which is announced to all our AMS-IX peers (and some partial and full transits), there's a lot of nntp and quite some torrent packets going over there, so it seems the majority of IPv6 traffic is due to content providers like XSnews providing 'freebies' to what otherwise would be a paid service.
We've seen the same with our Eweka/Highwinds partial transit, once we announce 2001::/32 there, there's suddenly a big increase in traffic over our teredo from other exchange points prefixes we get from them, heading to free IPv6 news services some dutch providers hand out.
Also, coincedence ?: http://www.sixxs.net/misc/traffic/
Patrick W. Gilmore wrote:
Patrick W. Gilmore wrote:
[..]
I ask because the AMS-IX is frequently used as an example that v6 is
being heavily adopted. If it is all one source for one application,
that is important information to the people fighting for v6 adoption.
Going from peaks of 1.4 Gbps to 0.4 Gbps is impressive. If that 0.4
Gbps still includes some of your traffic, it is very impressive.
I thought it was well known that 99% of the Internet was for warez &
p0rn....
In the case of IPv6 (and mostly the reason why "normal people" sign up
for Tunnel brokers), the most traffic is NNTP because of "free news
servers" (google for it, you'll find loads of tutorials) oh and
BitTorrent is also a nice hefty piece.
I also though that this was already 'revealed' in several presentations
where people actually looked at was going through their boxes.
Fortunately there are also people who realize that IPv6 can be used for
connecting to all the boxes at home.
/me always wonders about:
when he sees ISPs selling basically a fast link to a NNTP server thoug
Greets,
Jeroen
Freenet6 went from about 200Mb/s to less than 10Mb/s when we lost both
XSnews and XS4all. I thought it would be more torrent traffic but I guess we
now know what it actually is.
Cheers,
Mikael
Patrick W. Gilmore wrote:
[..]I ask because the AMS-IX is frequently used as an example that v6 is
being heavily adopted. If it is all one source for one application,
that is important information to the people fighting for v6 adoption.
Going from peaks of 1.4 Gbps to 0.4 Gbps is impressive. If that 0.4
Gbps still includes some of your traffic, it is very impressive.I thought it was well known that 99% of the Internet was for warez &
p0rn....
As with many things, what is "well known" is factually incorrect.
YouTube, every Akamai customer, Yahoo!, other Google properties, etc., make up more than 1%, and none of those are pr0n or war3z.
In the case of IPv6 (and mostly the reason why "normal people" sign up
for Tunnel brokers), the most traffic is NNTP because of "free news
servers" (google for it, you'll find loads of tutorials) oh and
BitTorrent is also a nice hefty piece.I also though that this was already 'revealed' in several presentations
where people actually looked at was going through their boxes.
I ask here because I have seen presentations at NANOG showing that v6 is growing and citing these graphs as evidence. When asking / commenting that most of that traffic is NNTP, I was told that was not confirmed.
Guess I got my confirmation.