Facebook & Traceroute

[yang.yu.list at gmail.com (Yang Yu)]

On Thu, Mar 10, 2016 at 9:35 AM, Christopher Morrow
<morrowc.lists at gmail.com> wrote:

> unclear, that traceroute was from someplace I don't own the network for...
> from another place I do though...
>
>  5  ae0.dr07.ash2.tfbnw.net (31.13.26.233)  4 ms
> ae0.dr05.ash3.tfbnw.net (31.13.29.21)  4 ms ae0.dr08.ash2.tfbnw.net
> (31.13.26.235)  2 ms
>  6  * * *
>  7  * * *
>  8  * * *
>  9  edge-star-mini-shv-07-ash4.facebook.com (66.220.156.68)  3 ms  3 ms  2 ms
>
> same-ish results, no spoofed bits.

https://atlas.ripe.net/measurements/3612424/#!probes

I did a atlas measurement of 500 probes, 104 probes (21%) had their
outside IP shown in traceroute. Some peers of AS32934 don't have
ingress filtering. It seems all prefixes advertised by Facebook are
ROA signed and valid tho.