Mailing List Archive: NANOG: users

Drop in IPv6 traffic

Index | Next | Previous | View Threaded

mikael at gogo6

Jul 9, 2009, 3:24 AM

Post #1 of 13 (9356 views)
Permalink

Drop in IPv6 traffic

Hi,
I've seen a big drop in IPv6 traffic volume on our Freenet6 IPv6
service last night and it seems to be the same on AMS-IX.
Has anyone else seen the same? Any idea why?

Thanks,
Mikael

marcoh at marcoh

Jul 9, 2009, 4:57 AM

Post #2 of 13 (9104 views)
Permalink

Re: Drop in IPv6 traffic [In reply to]

On 9 jul 2009, at 12:24, Mikael Lind wrote:

> Hi,
> I've seen a big drop in IPv6 traffic volume on our Freenet6 IPv6
> service last night and it seems to be the same on AMS-IX.
> Has anyone else seen the same? Any idea why?

Multiple options, but it must have something todo with a free usenet
service.

We (XS4ALL, AS3265) changed some filters at around 15:00 GMT, but I
notice the drop is hours later and much bigger (se the graph at https://www.ams-ix.net/technical/stats/sflow/)
.

If you have trouble reaching newszilla6.xs4all.nl at port 119 please
drop me a note as you might accidently got filtered and I'm happy to
resolve this.

From the looks of it one of our colleagues who also run a free usenet
box have some issues as well, news.ipv6.eweka.nl isn't responding,
which may well be the only cause of this little drop.

Groet,

MarcoH

jeroen at easyhosting

Jul 9, 2009, 6:27 AM

Post #3 of 13 (9087 views)
Permalink

Re: Drop in IPv6 traffic [In reply to]

Same here, we usually do 40-100Mbit of teredo 2001::/32 anycast traffic
(a lot of which is news traffic over IPv6 to artrato/XSnews) and that
dropped to an all-time low a bit before 0:00 CET.

I know XSnews had a free IPv6 news account service, perhaps they closed
that ?

Marco Hogewoning wrote:
>
> On 9 jul 2009, at 12:24, Mikael Lind wrote:
>
>> Hi,
>> I've seen a big drop in IPv6 traffic volume on our Freenet6 IPv6
>> service last night and it seems to be the same on AMS-IX.
>> Has anyone else seen the same? Any idea why?
>
>
> Multiple options, but it must have something todo with a free usenet
> service.
>
> We (XS4ALL, AS3265) changed some filters at around 15:00 GMT, but I
> notice the drop is hours later and much bigger (se the graph at
> https://www.ams-ix.net/technical/stats/sflow/).
>
> If you have trouble reaching newszilla6.xs4all.nl at port 119 please
> drop me a note as you might accidently got filtered and I'm happy to
> resolve this.
>
> From the looks of it one of our colleagues who also run a free usenet
> box have some issues as well, news.ipv6.eweka.nl isn't responding,
> which may well be the only cause of this little drop.
>
> Groet,
>
> MarcoH
>
>

--

Met vriendelijke groet,

Jeroen Wunnink,
EasyHosting B.V. Systeembeheerder
systeembeheer [at] easyhosting

telefoon:+31 (035) 6285455 Postbus 48
fax: +31 (035) 6838242 3755 ZG Eemnes

http://www.easyhosting.nl
http://www.easycolocate.nl

jhary at unsane

Jul 9, 2009, 6:50 AM

Post #4 of 13 (9080 views)
Permalink

Re: Drop in IPv6 traffic [In reply to]

Jeroen Wunnink wrote:
> Same here, we usually do 40-100Mbit of teredo 2001::/32 anycast traffic
> (a lot of which is news traffic over IPv6 to artrato/XSnews) and that
> dropped to an all-time low a bit before 0:00 CET.
>
> I know XSnews had a free IPv6 news account service, perhaps they closed
> that ?

Assuming that the graph at http://www.xsnews.com/ipv6/ isnt broken for
any other reason, you may well be right

Vince
>
> Marco Hogewoning wrote:
>>
>> On 9 jul 2009, at 12:24, Mikael Lind wrote:
>>
>>> Hi,
>>> I've seen a big drop in IPv6 traffic volume on our Freenet6 IPv6
>>> service last night and it seems to be the same on AMS-IX.
>>> Has anyone else seen the same? Any idea why?
>>
>>
>> Multiple options, but it must have something todo with a free usenet
>> service.
>>
>> We (XS4ALL, AS3265) changed some filters at around 15:00 GMT, but I
>> notice the drop is hours later and much bigger (se the graph at
>> https://www.ams-ix.net/technical/stats/sflow/).
>>
>> If you have trouble reaching newszilla6.xs4all.nl at port 119 please
>> drop me a note as you might accidently got filtered and I'm happy to
>> resolve this.
>>
>> From the looks of it one of our colleagues who also run a free usenet
>> box have some issues as well, news.ipv6.eweka.nl isn't responding,
>> which may well be the only cause of this little drop.
>>
>> Groet,
>>
>> MarcoH
>>
>>
>

jeroen at easyhosting

Jul 9, 2009, 6:53 AM

Post #5 of 13 (9076 views)
Permalink

Re: Drop in IPv6 traffic [In reply to]

Just spoke with Michiel of Atrato / XSnews, they had some issues with an
internal part of XSnews which also affected their IPv6 enabled services.

Jeroen Wunnink wrote:
> Same here, we usually do 40-100Mbit of teredo 2001::/32 anycast
> traffic (a lot of which is news traffic over IPv6 to artrato/XSnews)
> and that dropped to an all-time low a bit before 0:00 CET.
>
> I know XSnews had a free IPv6 news account service, perhaps they
> closed that ?
>
> Marco Hogewoning wrote:
>>
>> On 9 jul 2009, at 12:24, Mikael Lind wrote:
>>
>>> Hi,
>>> I've seen a big drop in IPv6 traffic volume on our Freenet6 IPv6
>>> service last night and it seems to be the same on AMS-IX.
>>> Has anyone else seen the same? Any idea why?
>>
>>
>> Multiple options, but it must have something todo with a free usenet
>> service.
>>
>> We (XS4ALL, AS3265) changed some filters at around 15:00 GMT, but I
>> notice the drop is hours later and much bigger (se the graph at
>> https://www.ams-ix.net/technical/stats/sflow/).
>>
>> If you have trouble reaching newszilla6.xs4all.nl at port 119 please
>> drop me a note as you might accidently got filtered and I'm happy to
>> resolve this.
>>
>> From the looks of it one of our colleagues who also run a free usenet
>> box have some issues as well, news.ipv6.eweka.nl isn't responding,
>> which may well be the only cause of this little drop.
>>
>> Groet,
>>
>> MarcoH
>>
>>
>

--

Met vriendelijke groet,

Jeroen Wunnink,
EasyHosting B.V. Systeembeheerder
systeembeheer [at] easyhosting

telefoon:+31 (035) 6285455 Postbus 48
fax: +31 (035) 6838242 3755 ZG Eemnes

http://www.easyhosting.nl
http://www.easycolocate.nl

michiel.muhlenbaumer at atratoip

Jul 9, 2009, 6:58 AM

Post #6 of 13 (9063 views)
Permalink

Re: Drop in IPv6 traffic [In reply to]

Hi Jeroen & others,

Yep, looks like we are doing a great portion of AMSIX's IPv6 traffic and
our (free) IPv6 service was affected because of an internal error last
night around 00.30 am.

I'll put it up in a few hours for you free leechers :-)

Cheers,
Michiel

> Just spoke with Michiel of Atrato / XSnews, they had some issues with an
> internal part of XSnews which also affected their IPv6 enabled services.
>
>
> Jeroen Wunnink wrote:
>> Same here, we usually do 40-100Mbit of teredo 2001::/32 anycast
>> traffic (a lot of which is news traffic over IPv6 to artrato/XSnews)
>> and that dropped to an all-time low a bit before 0:00 CET.
>>
>> I know XSnews had a free IPv6 news account service, perhaps they
>> closed that ?
>>
>> Marco Hogewoning wrote:
>>>
>>> On 9 jul 2009, at 12:24, Mikael Lind wrote:
>>>
>>>> Hi,
>>>> I've seen a big drop in IPv6 traffic volume on our Freenet6 IPv6
>>>> service last night and it seems to be the same on AMS-IX.
>>>> Has anyone else seen the same? Any idea why?
>>>
>>>
>>> Multiple options, but it must have something todo with a free usenet
>>> service.
>>>
>>> We (XS4ALL, AS3265) changed some filters at around 15:00 GMT, but I
>>> notice the drop is hours later and much bigger (se the graph at
>>> https://www.ams-ix.net/technical/stats/sflow/).
>>>
>>> If you have trouble reaching newszilla6.xs4all.nl at port 119 please
>>> drop me a note as you might accidently got filtered and I'm happy to
>>> resolve this.
>>>
>>> From the looks of it one of our colleagues who also run a free usenet
>>> box have some issues as well, news.ipv6.eweka.nl isn't responding,
>>> which may well be the only cause of this little drop.
>>>
>>> Groet,
>>>
>>> MarcoH
>>>
>>>
>>
>
> --
>
> Met vriendelijke groet,
>
> Jeroen Wunnink,
> EasyHosting B.V. Systeembeheerder
> systeembeheer [at] easyhosting
>
> telefoon:+31 (035) 6285455 Postbus 48
> fax: +31 (035) 6838242 3755 ZG Eemnes
>
> http://www.easyhosting.nl
> http://www.easycolocate.nl
>
>
>
>

patrick at ianai

Jul 9, 2009, 7:10 AM

Post #7 of 13 (9069 views)
Permalink

Re: Drop in IPv6 traffic [In reply to]

On Jul 9, 2009, at 9:58 AM, michiel.muhlenbaumer [at] atratoip wrote:

> Hi Jeroen & others,
>
> Yep, looks like we are doing a great portion of AMSIX's IPv6 traffic
> and
> our (free) IPv6 service was affected because of an internal error last
> night around 00.30 am.

Michiel,

Thank you for the information. Could you let us know if XS4All's free
v6 news feed went to zero, or was just dropped by some percentage?

I ask because the AMS-IX is frequently used as an example that v6 is
being heavily adopted. If it is all one source for one application,
that is important information to the people fighting for v6 adoption.
Going from peaks of 1.4 Gbps to 0.4 Gbps is impressive. If that 0.4
Gbps still includes some of your traffic, it is very impressive.

--
TTFN,
patrick

> I'll put it up in a few hours for you free leechers :-)
>
> Cheers,
> Michiel
>
>> Just spoke with Michiel of Atrato / XSnews, they had some issues
>> with an
>> internal part of XSnews which also affected their IPv6 enabled
>> services.
>>
>>
>> Jeroen Wunnink wrote:
>>> Same here, we usually do 40-100Mbit of teredo 2001::/32 anycast
>>> traffic (a lot of which is news traffic over IPv6 to artrato/XSnews)
>>> and that dropped to an all-time low a bit before 0:00 CET.
>>>
>>> I know XSnews had a free IPv6 news account service, perhaps they
>>> closed that ?
>>>
>>> Marco Hogewoning wrote:
>>>>
>>>> On 9 jul 2009, at 12:24, Mikael Lind wrote:
>>>>
>>>>> Hi,
>>>>> I've seen a big drop in IPv6 traffic volume on our Freenet6 IPv6
>>>>> service last night and it seems to be the same on AMS-IX.
>>>>> Has anyone else seen the same? Any idea why?
>>>>
>>>>
>>>> Multiple options, but it must have something todo with a free
>>>> usenet
>>>> service.
>>>>
>>>> We (XS4ALL, AS3265) changed some filters at around 15:00 GMT, but I
>>>> notice the drop is hours later and much bigger (se the graph at
>>>> https://www.ams-ix.net/technical/stats/sflow/).
>>>>
>>>> If you have trouble reaching newszilla6.xs4all.nl at port 119
>>>> please
>>>> drop me a note as you might accidently got filtered and I'm happy
>>>> to
>>>> resolve this.
>>>>
>>>> From the looks of it one of our colleagues who also run a free
>>>> usenet
>>>> box have some issues as well, news.ipv6.eweka.nl isn't responding,
>>>> which may well be the only cause of this little drop.
>>>>
>>>> Groet,
>>>>
>>>> MarcoH
>>>>
>>>>
>>>
>>
>> --
>>
>> Met vriendelijke groet,
>>
>> Jeroen Wunnink,
>> EasyHosting B.V. Systeembeheerder
>> systeembeheer [at] easyhosting
>>
>> telefoon:+31 (035) 6285455 Postbus 48
>> fax: +31 (035) 6838242 3755 ZG Eemnes
>>
>> http://www.easyhosting.nl
>> http://www.easycolocate.nl
>>
>>
>>
>>
>
>
>

marcoh at marcoh

Jul 9, 2009, 7:29 AM

Post #8 of 13 (9083 views)
Permalink

Re: Drop in IPv6 traffic [In reply to]

Hi Patrick ,

On 9 jul 2009, at 16:10, Patrick W. Gilmore wrote:

> On Jul 9, 2009, at 9:58 AM, michiel.muhlenbaumer [at] atratoip wrote:
>
>> Hi Jeroen & others,
>>
>> Yep, looks like we are doing a great portion of AMSIX's IPv6
>> traffic and
>> our (free) IPv6 service was affected because of an internal error
>> last
>> night around 00.30 am.
>
> Michiel,
>
> Thank you for the information. Could you let us know if XS4All's
> free v6 news feed went to zero, or was just dropped by some
> percentage?

Please note Michiel isn't from XS4ALL :)

We (XS4ALL) did not have any outage on the usenet service, everything
is still running and passing traffic. The only thing we did was adjust
some filters so if you are depend on more specifics and not announcing
the /32 you might have been dropped from the table around 15:00 GMT.

The remaining traffic at ams-ix matches our internal graphs, so I
guess I'm the only bulk sender at the moment.

> I ask because the AMS-IX is frequently used as an example that v6 is
> being heavily adopted. If it is all one source for one application,
> that is important information to the people fighting for v6
> adoption. Going from peaks of 1.4 Gbps to 0.4 Gbps is impressive.
> If that 0.4 Gbps still includes some of your traffic, it is very
> impressive.

There are 3 open usenet servers at amsterdam that I know off:

- XS4ALL (at newszilla6.xs4all.nl)
- Highwinds/Eweka (news.ipv6.eweka.nl)
- XSnews

I think we, once again, have proof 99% of the ams-ix traffic. The
remaining bit possibly is google and the traffic on this mailinglist
(and ripe.net).

As an exercise we could see if spikes in nanog activity can be matched
to spikes in the v6 traffic :)

Groet,

MarcoH

michiel.muhlenbaumer at atratoip

Jul 9, 2009, 7:34 AM

Post #9 of 13 (9101 views)
Permalink

Re: Drop in IPv6 traffic [In reply to]

> Michiel,
>
> Thank you for the information. Could you let us know if XS4All's free
> v6 news feed went to zero, or was just dropped by some percentage?
>
> I ask because the AMS-IX is frequently used as an example that v6 is
> being heavily adopted. If it is all one source for one application,
> that is important information to the people fighting for v6 adoption.
> Going from peaks of 1.4 Gbps to 0.4 Gbps is impressive. If that 0.4
> Gbps still includes some of your traffic, it is very impressive.
>
> --
> TTFN,
> patrick

Hi Patrick,

The XS4All IPv6 service is run by .. XS4All. We (XS News) run a separate
service and we were responsible for the drop from ~950Mbit IPv6 traffic to
300M IPv6 traffic at 00.30 AM last night.

I'll put the service up again (wasn't notified) and we can continue
adopting IPv6 again ;)

Cheers,
Michiel

jeroen at easyhosting

Jul 9, 2009, 7:34 AM

Post #10 of 13 (9073 views)
Permalink

Re: Drop in IPv6 traffic [In reply to]

If I look at a tcpdump of our teredo relay which is announced to all our
AMS-IX peers (and some partial and full transits), there's a lot of nntp
and quite some torrent packets going over there, so it seems the
majority of IPv6 traffic is due to content providers like XSnews
providing 'freebies' to what otherwise would be a paid service.

We've seen the same with our Eweka/Highwinds partial transit, once we
announce 2001::/32 there, there's suddenly a big increase in traffic
over our teredo from other exchange points prefixes we get from them,
heading to free IPv6 news services some dutch providers hand out.

Also, coincedence ?: http://www.sixxs.net/misc/traffic/

Patrick W. Gilmore wrote:
> On Jul 9, 2009, at 9:58 AM, michiel.muhlenbaumer [at] atratoip wrote:
>
>> Hi Jeroen & others,
>>
>> Yep, looks like we are doing a great portion of AMSIX's IPv6 traffic and
>> our (free) IPv6 service was affected because of an internal error last
>> night around 00.30 am.
>
> Michiel,
>
> Thank you for the information. Could you let us know if XS4All's free
> v6 news feed went to zero, or was just dropped by some percentage?
>
> I ask because the AMS-IX is frequently used as an example that v6 is
> being heavily adopted. If it is all one source for one application,
> that is important information to the people fighting for v6 adoption.
> Going from peaks of 1.4 Gbps to 0.4 Gbps is impressive. If that 0.4
> Gbps still includes some of your traffic, it is very impressive.
>

--

Met vriendelijke groet,

Jeroen Wunnink,
EasyHosting B.V. Systeembeheerder
systeembeheer [at] easyhosting

telefoon:+31 (035) 6285455 Postbus 48
fax: +31 (035) 6838242 3755 ZG Eemnes

http://www.easyhosting.nl
http://www.easycolocate.nl

jeroen at unfix

Jul 9, 2009, 7:40 AM

Post #11 of 13 (9064 views)
Permalink

Re: Drop in IPv6 traffic [In reply to]

Patrick W. Gilmore wrote:
[..]
> I ask because the AMS-IX is frequently used as an example that v6 is
> being heavily adopted. If it is all one source for one application,
> that is important information to the people fighting for v6 adoption.
> Going from peaks of 1.4 Gbps to 0.4 Gbps is impressive. If that 0.4
> Gbps still includes some of your traffic, it is very impressive.

I thought it was well known that 99% of the Internet was for warez &
p0rn....

In the case of IPv6 (and mostly the reason why "normal people" sign up
for Tunnel brokers), the most traffic is NNTP because of "free news
servers" (google for it, you'll find loads of tutorials) oh and
BitTorrent is also a nice hefty piece.

I also though that this was already 'revealed' in several presentations
where people actually looked at was going through their boxes.

Fortunately there are also people who realize that IPv6 can be used for
connecting to all the boxes at home.

/me always wonders about:
http://arstechnica.com/tech-policy/news/2009/07/judge-throws-book-at-usenetcom-in-riaa-lawsuit.ars
when he sees ISPs selling basically a fast link to a NNTP server thoug

Greets,
Jeroen

Attachments:

signature.asc (0.18 KB)

mikael at gogo6

Jul 9, 2009, 7:46 AM

Post #12 of 13 (9074 views)
Permalink

Re: Drop in IPv6 traffic [In reply to]

Freenet6 went from about 200Mb/s to less than 10Mb/s when we lost both
XSnews and XS4all. I thought it would be more torrent traffic but I guess we
now know what it actually is.
Cheers,
Mikael

On Thu, Jul 9, 2009 at 4:34 PM, Jeroen Wunnink <jeroen [at] easyhosting>wrote:

> If I look at a tcpdump of our teredo relay which is announced to all our
> AMS-IX peers (and some partial and full transits), there's a lot of nntp and
> quite some torrent packets going over there, so it seems the majority of
> IPv6 traffic is due to content providers like XSnews providing 'freebies' to
> what otherwise would be a paid service.
>
> We've seen the same with our Eweka/Highwinds partial transit, once we
> announce 2001::/32 there, there's suddenly a big increase in traffic over
> our teredo from other exchange points prefixes we get from them, heading to
> free IPv6 news services some dutch providers hand out.
>
> Also, coincedence ?: http://www.sixxs.net/misc/traffic/
>
>

patrick at ianai

Jul 9, 2009, 7:58 AM

Post #13 of 13 (9078 views)
Permalink

Re: Drop in IPv6 traffic [In reply to]

On Jul 9, 2009, at 10:40 AM, Jeroen Massar wrote:
> Patrick W. Gilmore wrote:
> [..]
>> I ask because the AMS-IX is frequently used as an example that v6 is
>> being heavily adopted. If it is all one source for one application,
>> that is important information to the people fighting for v6 adoption.
>> Going from peaks of 1.4 Gbps to 0.4 Gbps is impressive. If that 0.4
>> Gbps still includes some of your traffic, it is very impressive.
>
> I thought it was well known that 99% of the Internet was for warez &
> p0rn....

As with many things, what is "well known" is factually incorrect. :)

YouTube, every Akamai customer, Yahoo!, other Google properties, etc.,
make up more than 1%, and none of those are pr0n or war3z.

> In the case of IPv6 (and mostly the reason why "normal people" sign up
> for Tunnel brokers), the most traffic is NNTP because of "free news
> servers" (google for it, you'll find loads of tutorials) oh and
> BitTorrent is also a nice hefty piece.
>
> I also though that this was already 'revealed' in several
> presentations
> where people actually looked at was going through their boxes.

I ask here because I have seen presentations at NANOG showing that v6
is growing and citing these graphs as evidence. When asking /
commenting that most of that traffic is NNTP, I was told that was not
confirmed.

Guess I got my confirmation. :)

--
TTFN,
patrick

> Fortunately there are also people who realize that IPv6 can be used
> for
> connecting to all the boxes at home.
>
> /me always wonders about:
> http://arstechnica.com/tech-policy/news/2009/07/judge-throws-book-at-usenetcom-in-riaa-lawsuit.ars
> when he sees ISPs selling basically a fast link to a NNTP server thoug
>
> Greets,
> Jeroen
>
>
>

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads