RE: Level3 worldwide emergency upgrade?

[Simon Allard <Simon.Allard () team orcon net nz>]

I think you might find its this issue.

PSN-2013-01-823

"Junos: Crafted TCP packet can lead to kernel crash"




-----Original Message-----
From: Matthew Petach [mailto:mpetach () netflight com] 
Sent: Thursday, 7 February 2013 7:23 a.m.
To: Jonathan Towne
Cc: nanog () nanog org
Subject: Re: Level3 worldwide emergency upgrade?

On Wed, Feb 6, 2013 at 5:10 AM, Jonathan Towne <jtowne () slic com> wrote:
> On Wed, Feb 06, 2013 at 07:57:06AM -0500, Alex Rubenstein scribbled:
> # The question should be more along the lines of, "why aren't you multihomed in a way that would make a 30 minute 
> outage (which is inevitable) irrelevant to you?
>
> The fun part of this emergency maintenance in the northeast USA was 
> that even folks who are multihomed felt it: Level3 managed to do this 
> in a way that kept BGP sessions up but killed the ability to actually 
> pass traffic.  I'm not sure what they did that caused this, or whether 
> anyone but northeast folks were affected by it, but it sure was neat 
> to be effectively blackholed in and out of one of your provided circuits for a while.


I recommend you grab
http://kestrel3.netflight.com/2013.02.05-NANOG57-day2-afternoon-session.txt

and search for PR8361907

Richard did a very good lightning talk about why Juniper boxes will bring up BGP but blackhole traffic for 30 minutes 
to over an hour, depending on number of BGP sessions it is handling.

His recommendation--if you don't like it, go tell Juniper to fix that bug.

Matt



--
BEGIN-ANTISPAM-VOTING-LINKS
------------------------------------------------------

Teach Email Guard if this mail (ID 09IV6SM1n) is spam:
Spam:        https://emailguard.orcon.net.nz/canit/b.php?i=09IV6SM1n&m=d5617dabf346&t=20130207&c=s
Not spam:    https://emailguard.orcon.net.nz/canit/b.php?i=09IV6SM1n&m=d5617dabf346&t=20130207&c=n
Forget vote: https://emailguard.orcon.net.nz/canit/b.php?i=09IV6SM1n&m=d5617dabf346&t=20130207&c=f
------------------------------------------------------
END-ANTISPAM-VOTING-LINKS