On Thu, Mar 10, 2016 at 9:35 AM, Christopher Morrow <morrowc.li...@gmail.com> wrote:
> unclear, that traceroute was from someplace I don't own the network for... > from another place I do though... > > 5 ae0.dr07.ash2.tfbnw.net (31.13.26.233) 4 ms > ae0.dr05.ash3.tfbnw.net (31.13.29.21) 4 ms ae0.dr08.ash2.tfbnw.net > (31.13.26.235) 2 ms > 6 * * * > 7 * * * > 8 * * * > 9 edge-star-mini-shv-07-ash4.facebook.com (66.220.156.68) 3 ms 3 ms 2 ms > > same-ish results, no spoofed bits. https://atlas.ripe.net/measurements/3612424/#!probes I did a atlas measurement of 500 probes, 104 probes (21%) had their outside IP shown in traceroute. Some peers of AS32934 don't have ingress filtering. It seems all prefixes advertised by Facebook are ROA signed and valid tho.