Частичная блокировка tools.cisco.com


Twitter


ЗаТелеком

http://ping-admin.ru/free_test/result/1646931718e0jhrzbk103ggx1bw6388r.html

Где-то заблокирован на уровне маршрутизации (ICMP no route to host), где-то — на DPI (TCP RST).
На серверном подключении, где никогда блокировок не было никаких совсем, домен недоступен через УГМК-телеком → Ростелеком (последний хоп — 188.254.25.77), но доступен через Goodline (E-Light).

TTK Looking Glass показывает BGP-маршрут /32 на IP-адрес 173.37.145.8:

 Router: mskn13ra
Command: show bgp 173.37.145.8


Thu Mar 10 17:27:51.584 UTC
BGP routing table entry for 173.37.145.8/32, Route Distinguisher: 20485:1
Versions:
  Process           bRIB/RIB  SendTblVer
  Speaker          402948510   402948510
Last Modified: Jan 17 21:56:13.803 for 2y07w
Paths: (2 available, best #1)
  Not advertised to any peer
  Path #1: Received by speaker 0
  Not advertised to any peer

    10.146.0.1 (metric 1846) from 10.78.0.71 (10.146.0.1)
      Received Label 24001
      Origin incomplete, metric 0, localpref 100, valid, internal, best, group-best, import-candidate, imported
      Received Path ID 0, Local Path ID 1, version 402948510
      Community: 20485:6108
      Extended community: RT:20485:1 
      Originator: 10.146.0.1, Cluster list: 10.78.0.71, 10.149.0.31
      Source AFI: VPNv4 Unicast, Source VRF: internet, Source Route Distinguisher: 20485:1
  Path #2: Received by speaker 0
  Not advertised to any peer

    10.146.0.1 (metric 1846) from 10.99.0.41 (10.146.0.1)
      Received Label 24001
      Origin incomplete, metric 0, localpref 100, valid, internal, import-candidate, imported
      Received Path ID 0, Local Path ID 0, version 0
      Community: 20485:6108
      Extended community: RT:20485:1 
      Originator: 10.146.0.1, Cluster list: 10.78.0.71, 10.149.0.31
      Source AFI: VPNv4 Unicast, Source VRF: internet, Source Route Distinguisher: 20485:1

Traceroute выдаёт блокировку:

 Router: mskn13ra
Command: traceroute 173.37.145.8


Thu Mar 10 17:29:32.638 UTC

Tracing the route to 173.37.145.8

 1  10.99.99.129  24 msec  18 msec  17 msec 
 2   *  *  * 
 3   *  *  * 
 4   *  *  * 
 5   *  *  * 
 6   *  *  * 
 7   *  *  * 
 8   *  *  * 
 9   *  *  * 
 10  *  *  * 
 11  *  *  * 

В то же время на маршрутизаторах RETN blackhole’а нет, сервис доступен:

Router:	Query:
RT.KNX.OMS.RU.retn.net	traceroute monitor summary inet 173.37.145.8

HOST: RT.OMS.RU                   Loss%   Snt   Last   Avg  Best  Wrst StDev
  1. ae1-1.RT.TC1.STO.SE.retn.net  0.0%    10   53.7  58.6  53.5  64.8   4.4
  2. 10gigabitethernet1-2.core1.s  0.0%    10   55.9  56.9  55.8  61.7   1.8
  3. 100ge0-35.core2.cph1.he.net  90.0%    10   64.2  64.2  64.2  64.2   0.0
  4. ???                          100.0    10    0.0   0.0   0.0   0.0   0.0
  5. 100ge0-56.core3.ash1.he.net  30.0%    10  149.4 157.3 148.4 203.6  20.4
  6. 100ge1-2.core1.ash1.he.net    0.0%    10  154.6 157.2 154.0 169.9   5.6
  7. port-channel13.core2.atl1.he 20.0%    10  174.7 173.8 167.1 188.2   7.4
  8. 100ge14-1.core1.dal1.he.net   0.0%    10  186.6 187.0 184.1 205.9   6.7
  9. cisco-systems.10gigabitether  0.0%    10  182.9 183.3 179.5 209.0   9.1
 10. 128.107.4.9                   0.0%    10  189.5 189.6 186.0 211.0   7.6
 11. alln01-mda2-dmzbb-gw2-be92.c  0.0%    10  189.7 200.0 186.9 250.1  19.4
 12. alln01-mda2-dmzdcc-gw2-por2.  0.0%    10  187.6 192.8 186.7 218.5  11.3
 13. alln01-mda1-fab1-sw3811-dmzd  0.0%    10  182.6 191.8 182.6 220.0  13.0
 14. ???                          100.0    10    0.0   0.0   0.0   0.0   0.0
 15. ???                          100.0    10    0.0   0.0   0.0   0.0   0.0
 16. hsrp-173-37-145-1.cisco.com   0.0%    10  187.9 195.0 187.8 233.8  15.3
 17. tools2.cisco.com              0.0%    10  181.8 187.0 181.6 229.1  14.8