google and amazon wierdness via HE right now

From toronto - something odd - mtr to google.com (google.com (172.217.3.142))

5. v638.core1.tor1.he.net
6. 100ge7-2.core1.nyc4.he.net
7. 100ge11-1.core1.par2.he.net
8. 10ge3-2.core1.zrh1.he.net
9. ???

par is paris, zrh is zurich?

same base path for hitting my EC2 nodes... Cant imagine this is just affecting Toronto
HE customers.

EC2 node is in 107.20/14

/kc

and of course the second I post it all fixes itself. NANOG works! Thanks!

(was going on for about 10-15 min)

There's some chatter about Amazon issues on the Outages mailing list as
well. Definitely seems like something blipped.

Ray

Being discussed on outages, too.

Our monitoring system saw access to www.amazon.com and www.cablelabs.com
(over v6) down via HE ... amazon came back up for me via Zayo, but when
www.cablelabs.com came back up, it was on HE. So the same as you.

So I suspect HE had a hiccup.

Frank

We saw disconnections to Comcast via HE, A subnet was announced with a
bogus path.

-- During the problem --
98.224.0.0/11 via 162.11.22.209 on vlan500 [ibgp_border 12:09:48
from 162.11.22.212] * (100/15) [AS65021i]
    Type: BGP unicast univ
    BGP.origin: IGP
    BGP.as_path: 6939 200759 65021
    BGP.next_hop: 184.5.5.69
    BGP.local_pref: 100

-- Returned to normal --
98.192.0.0/10 via 162.11.22.209 on vlan500 [ibgp_border
2016-03-17 from 162.11.22.212] (100/15) [AS7922i]
    Type: BGP unicast univ
    BGP.origin: IGP
    BGP.as_path: 6939 7922
    BGP.next_hop: 184.5.5.69
    BGP.local_pref: 100

Being discussed on outages, too.

Our monitoring system saw access to www.amazon.com and www.cablelabs.com
(over v6) down via HE ... amazon came back up for me via Zayo, but when
www.cablelabs.com came back up, it was on HE. So the same as you.

So I suspect HE had a hiccup.

Frank

Hijack:

https://twitter.com/bgpmon?ref_src=twsrc^tfw

-James

It appears HE and others accepted 'hijacked' routes from AS200759.
A quick initial investigation shows close to 2,000 prefixes were
affected including prefixes normally announced by networks such as
Facebook, Google, Amazon, Twitter, Apple, Akamai, Time Warner Cable and
more.

Also see more details on the bgpmon blog here:

http://www.bgpmon.net/large-hijack-affects-reachability-of-high-traffic-destinations/

Cheers
Andree

My secret spy satellite informs me that Frank Bulk wrote On 2016-04-22,
10:31 AM: