nanog mailing list archives
Re: CDNs for carriers
From: Christopher Morrow <morrowc.lists () gmail com>
Date: Mon, 29 Jun 2015 10:16:01 -0400
On Mon, Jun 29, 2015 at 9:59 AM, Mike Hammett <nanog () ics-il net> wrote:
Simple flows wouldn't necessarily tell you if you're pulling a bunch from a Netflix caching box on your upstream somewhere. You'd think you had a huge amount going to your current upstream because technically you do, but a local cache or peer could alter that significantly.
probably dns and flow gets you some more traction, right? meaning: "gosh 1.2.3.0/26 is sending us LOTS of traffic... oh: nslookup 1.2.3.4 == hosta.networkb.netflix.com, ah-ha!" where ptr records are generated I suppose like: $ host 63.88.73.108 108.73.88.63.in-addr.arpa domain name pointer 108.73.88.63.ashburn.google-ggc.verizon.com. Also, often just port/protocol are helpful enough... you won't know without looking (at the OP's traffic I mean), which it sounds like hasn't really been done yet?
Current thread:
- CDNs for carriers Ramy Hashish (Jun 29)
- Re: CDNs for carriers Patrick W. Gilmore (Jun 29)
- Re: CDNs for carriers Valdis . Kletnieks (Jun 29)
- Re: CDNs for carriers Christopher Morrow (Jun 29)
- Re: CDNs for carriers Jared Mauch (Jun 29)
- Re: CDNs for carriers Mike Hammett (Jun 29)
- Re: CDNs for carriers Christopher Morrow (Jun 29)
- Re: CDNs for carriers Jared Mauch (Jun 29)
- Re: CDNs for carriers Christopher Morrow (Jun 29)
- Re: CDNs for carriers Blake Hudson (Jun 29)
- Re: CDNs for carriers Jared Mauch (Jun 29)