Tag Archive for TCAM

Should I Care About 768k Day?

Why Should I Care About 768k Day?If you are of a certain age, you remember Y2K. While I was not rewriting COBOL programs, I played my part. I spent the last half of 1999 scheduling after-hours downtime to update Compaq 1900 and 2500 servers with BIOS updates on a floppy disk. Hoping and praying the servers would come back up after the floppy disk stopped grinding. As I recall only two Compaq Proliant 2500‘s failed the BIOS upgrade and only one was DOA.

All the fun of Y2K was because memory space was too small to accommodate the fancy new year 2000 without thinking it was 1900. Now a similar memory size problem could cause internet disruptions very soon. The problem is called 768k Day.

768k Day is when the size of the global BGP routing table is expected to exceed 768,000 entries. Anthony Spadafora at TechRadar explains that on August 12, 2014, a similar problem, occurred after Verizon (VZ) advertised 15,000 new BGP routes to the internet. Verizon’s actions caused the global BGP routing table, a file that holds the IPv4 addresses of all known internet-connected networks, to exceed 512,000 causing the 512K Day crisis.

Over flowingThe TechRadar article explains that in 2014, ISPs and others had configured the size of the memory for their router TCAMs (ternary content-addressable memory) for a limit of 512K route entries and some older routers suffered memory overflows which led their CPUs to crash. These crashes created significant packet loss and traffic outages across the internet with even large provider networks being affected. ZDNet says companies like Microsoft, eBay, BT, Comcast, AT&T, Sprint, and Verizon, were all impacted by 512K day

Engineers and network administrators rushed to apply emergency firmware patches to set a new upper limit which in many cases was 768k entries. The seeds of the 2019 768k  crisis were sown.

preventative maintenanceMr. Spadafora speculates that in 2019 most of the large providers who felt 513K day’s impact have likely updated and maintained their infrastructures reasonably well which could lead to fewer outages. He says that there are still ‘soft spots’ smaller ISPs, data centers, and other providers who are part of the Internet’s fabric where maintenance on legacy routers and network equipment can be neglected or missed more easily.

These are the places that most likely see some issues or outages due to 768k Day. These outages will create significant packet loss and traffic outages that could have a ripple effect and sweep upstream and affect larger provider networks. Alex Henthorn-Iwane at network intelligence firm ThousandEyes writes,Given the sheer size and unregulated nature of the Internet, it’s fair to say that things will be missed.

rb-

To prepare for any potential disruptions, it is a good idea to perform some preventative maintenance on any routers that receive full internet routes. Jim Troutman, Director at the Northern New England Neutral Internet Exchange (NNENIX) told ZDNet,

The 768k IPv4 route limit is only a problem if you are taking ALL routes. If you discard or don’t accept /24 routes, that eliminates half the total BGP table size.

There is still a little time left before 768K day, at 2019-06-21 16:00 UTC 06/21/2019 the Regional Internet Registry for Europe, the Middle East, and parts of Central Asia (RIPE) reports that 86.9% of the IPv4 BGP tables they monitor are below 768K. Click here for current results

What is the big deal? Network intelligence firm ThousandEyes points out that there are many outage events that happen every day, especially on the fringes of the Internet. The number of garden variety outages could get amplified because of 768k day-related issues over the next few weeks.

Aaron A. Glenn, a networking engineer with AAGICo Berlin told ZDNet,

Cisco 6509The Cisco 6500/7600 product line was extremely popular for an exceptionally long time in many, many places,” so don’t be surprised if some networks go offline because they forgot about 768k Day and didn’t prepare.

Related articles

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

Romania Leads IPv4 Market

Romania Leads IPv4 MarketI first wrote about the grey market in IPv4 addresses when Microsoft (MSFT) bought Nortel‘s IPv4 IP block back in 2011. A  recent article from CircleID proves the market has caught up with Bach Seat. In the CircleID article, Doug Madory, Director of Internet Analysis at Dyn reports that the market for IPv4 addresses is heating up especially in Europe.

RIPE’s IPv4 transfers

According to Dyn, statistics from RIPE, the European registrar, show that the IPv4 market has heated up. RIPE’s table of transfers of provider aggregatable (PA) IPv4 address clearly shows a rapidly increasing rate of transfers of IPv4 address blocks and unique IPv4 addresses.  In fact:

  • increasing rate of transfers of IPv4 address blocksFebruary 2015 saw the most organizational transfers (373).
  • November 2014 saw the most unique address transfers (nearly 2 million).
  • The number of transfers in the RIPE region far outpaces any other region.

Romania is a key player in IPv4

An analysis of the RIPE data by the author finds that Romania is a key player in the IPv4 market.

  • Romania Leads IPv4 MarketDuring 2014/15 1,069 (58%) transfers came from Romanian organizations.
  • 947 (51%) of all the blocks transferred in the RIPE region were from a single Romanian organization, namely, Jump.ro.
  • Jump is willing to sell large blocks of IPv4 address space (around $10/address) or lease smaller blocks for $0.50/address/year.
  • Of the 4,656 routed prefixes that make up the Saudi Arabia part of the Internet, 1,498 or almost a third of them were Romanian just a few months ago.
  • The Syrian state telecom got 5.155.0.0/16 from Romania’s Nav Telecom last August and Iranian telecoms bought over 1 million unique IP addresses in 85 transfers over the past year (80% from Jump.ro).
  • Saudi Telecom received 17 IPv4 transfers since September last year representing over 1.5 million IP addresses: 14 were from Romanian sources and the other 3 were from
  • Ukraine.  At $10/address, those addresses would have cost Saudi Telecom $15 million.

A side-effect of the IPv4 gray market is abetting the growth of global routing tables to dangerous levels. The first effects of this were seen in August 2014 when BGP routing tables grew to over 512,000 routes when many older routers could no longer properly track the routes. ZDNet explains that routes are typically kept in a specialized kind of memory called Tertiary Content Addressable Memory (TCAM) which has a limited capacity which fails when it is full.

The author asks what are the implications of all this? Now that the Romanians have demonstrated that there is a lucrative business to be had in selling off IPv4 address space, will we see ISPs in developing countries rush to sell off their address space for some quick cash?  If such sales result in the IPv4 space getting sliced more and more thinly, we can surely expect the global routing table to increase in size, perhaps dramatically, as a result.

Will this cause more router meltdowns?

 

Related articles

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.