Skip to content

Instantly share code, notes, and snippets.

@bortzmeyer
Created March 10, 2019 17:14
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save bortzmeyer/8289d63f54110a5458f586e6bce6b01d to your computer and use it in GitHub Desktop.
Save bortzmeyer/8289d63f54110a5458f586e6bce6b01d to your computer and use it in GitHub Desktop.
Venezuela Internet situation (specially DNS)

Most DNS authoritative name servers for the ccTLD are down:

% date -u
Sun Mar 10 17:12:55 UTC 2019
% check-soa -i ve
azmodan.ula.ve.
	Cannot get the IPv6 address: read udp 127.0.0.1:59957->127.0.0.1:53: i/o timeout
ns-ext.nic.cl.
	2001:1398:1:0:200:1:123:14: OK: 2019030729 (201 ms)
	200.1.123.14: OK: 2019030729 (212 ms)
ns1.nic.ve.
	2001:1338::2: ERROR: read udp [2a01:e35:2fb3:e1d0:4862:c78f:972a:bf2]:54527->[2001:1338::2]:53: i/o timeout
	150.188.228.4: ERROR: read udp 192.168.2.1:52930->150.188.228.4:53: i/o timeout
ns2.nic.ve.
	2001:1338::3: ERROR: read udp [2a01:e35:2fb3:e1d0:4862:c78f:972a:bf2]:44615->[2001:1338::3]:53: i/o timeout
	150.188.228.5: ERROR: read udp 192.168.2.1:51309->150.188.228.5:53: i/o timeout
ns3.nic.ve.
	190.9.129.56: ERROR: read udp 192.168.2.1:54457->190.9.129.56:53: read: connection refused
ns4.nic.ve.
	190.202.128.43: OK: 2019030729 (160 ms)
sns-pb.isc.org.
	2001:500:2e::1: OK: 2019030729 (26 ms)
	192.5.4.1: OK: 2019030729 (144 ms)
@bortzmeyer
Copy link
Author

The hypothesis (by the venezuelan governement) of an "US cyberattack" does not seem plausible since one of the two foreign name servers still working is managed in the US.

@bortzmeyer
Copy link
Author

ns4.nic.ve, the only local name server working is at CANTV.

@bortzmeyer
Copy link
Author

The only RIPE Atlas probe still working in Venezuela, #30045, is at IFX. https://atlas.ripe.net/probes/30045/

@bortzmeyer
Copy link
Author

bortzmeyer commented Mar 10, 2019

ns4.nic.ve is 190.202.128.43, part of the prefix 190.202.128.0/22. After the great breakage of yesterday (around 2340 UTC), the prefix is still perfectly visible. ns1.nic.ve is 150.188.228.4, part of the prefix 150.188.0.0/16 (same prefix than ns2.nic.ve). The prefix has not be seen since yesterday, 1600 UTC. Same thing for 150.185.0.0/16 (which host the two nameservers of ula.ve).

@bortzmeyer
Copy link
Author

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment