Routing path to Sydney Hurricane Electric is crap

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › Routing path to Sydney Hurricane Electric is crap

tknz

182 posts

Master Geek

#233763 1-May-2018 18:36

Hi,

In a bid to get ipv6 for some testing I've been doing on Slingshot UFB I setup a tunnel using a tunnel broker service by Hurricane Electric.

Their server is in Sydney and I noticed Slingshot have a crappy path so wondering if anyone there can comment / look?

Via Vocus IP Transit at work the path goes via Vocus Connect International Backbone and is around 30ms round trip to HE Sydney.

At home, it's around 160ms round trip because a weird megaport hop.

Image:

Cheers.

1 | 2

6614 posts

Uber Geek
Inactive user

#2006184 1-May-2018 18:40

C:\Users\Tim>tracert tserv1.syd1.he.net

Tracing route to tserv1.syd1.he.net [216.218.142.50]
over a maximum of 30 hops:

1 2 ms 2 ms 2 ms ultrahub.hub [192.168.1.1]
2 5 ms 6 ms 6 ms 254.239.252.27.dyn.cust.vf.net.nz [27.252.239.254]
3 4 ms 6 ms 7 ms 10.200.12.113
4 28 ms 29 ms 30 ms 9500.syd.equinix.com [45.127.172.53]
5 151 ms 154 ms 154 ms 6939.syd.equinix.com [45.127.173.24]
6 151 ms 154 ms 154 ms tserv1.syd1.he.net [216.218.142.50]

Trace complete.

C:\Users\Tim>

Vodafone with a trash home hub and WiFi.

Probably an issue with in their own DC..

See how I ping their DC under 30 ms which is epic for aussie and then their own internal hop adds 120 ms.
Your fault lies with equinix, SYD and SYD1 seem to not like each other?
What does their website say?

hio77

12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

#2006195 1-May-2018 19:09

Don't vocus already do v6...

I'm assuming your auckland based (which is where it doesn't work afaik.) @sounddude

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

KiwiSurfer

1449 posts

Uber Geek

ID Verified

Lifetime subscriber

#2006196 1-May-2018 19:14

traceroute to 216.218.142.50 (216.218.142.50), 64 hops max, 52 byte packets
1 192.168.1.1 (192.168.1.1) 8.675 ms 3.409 ms 3.301 ms
2 v1.cpcak4-bng1.tranzpeer.net (101.98.0.91) 14.386 ms 83.942 ms 99.167 ms
3 72.14.243.237 (72.14.243.237) 28.624 ms 38.249 ms 27.967 ms
4 as6939.sydney.megaport.com (103.26.68.236) 157.503 ms 159.248 ms 159.068 ms
5 tserv1.syd1.he.net (216.218.142.50) 191.176 ms 159.925 ms 157.870 ms

Slingshot South Auckland.

KiwiSurfer

1449 posts

Uber Geek

ID Verified

Lifetime subscriber

#2006198 1-May-2018 19:15

AFAIK still no IPv6 on Slingshot UFB. Not sure about the other Vocus brands though.

tknz

182 posts

Master Geek

#2006201 1-May-2018 19:21

Coil:

5 151 ms 154 ms 154 ms 6939.syd.equinix.com [45.127.173.24]
6 151 ms 154 ms 154 ms tserv1.syd1.he.net [216.218.142.50]

Trace complete.

C:\Users\Tim>

Vodafone with a trash home hub and WiFi.

Probably an issue with in their own DC..

Thanks Coil, quite telling that you're on vodafone and the hop goes to 151ms at AS6939 as it does with me on slingshot.

AS 6939 is Hurricane electric themselves..... and the fact you get the same latency introduced to 6939 via equinix as I do via megaport indicates a fault at HE.

Thanks all!

To the other comment - yes vocus have ipv6. Slingshot don't on UFB yet, I was enticed by the $99 a month gigabit! so moved away from stuff fibre, Vocus / Devoli now.

The reason I'm heading down this path and tunneling v6 to my whole network was teredo performance and packet loss. The teredo tunnel for xbox live was around 700ms round trip eastern USA to win10.ipv6.microsoft.com. Around 30% packet loss, so decided to setup a full V6 tunnel which now works flawlessly albeit a bit laggy.

thanks,

Behodar

10501 posts

Uber Geek

Trusted

Lifetime subscriber

#2006212 1-May-2018 19:42

Looks OK to me. ISP is Mynxnet.

traceroute to tserv1.syd1.he.net (216.218.142.50), 64 hops max, 52 byte packets
1 10.0.1.1 (10.0.1.1) 0.383 ms 0.277 ms 0.295 ms
2 ip-103-230-76-9.cust.mynxnet.com (103.230.76.9) 6.224 ms 9.865 ms 7.963 ms
3 lt-2-0-10-3.mdr-cr1.as45177.net.nz (14.1.50.36) 7.723 ms 7.174 ms 13.930 ms
4 45177.syd.equinix.com (45.127.172.173) 32.098 ms 32.898 ms 31.891 ms
5 6939.syd.equinix.com (45.127.173.24) 33.916 ms 32.334 ms 31.899 ms
6 tserv1.syd1.he.net (216.218.142.50) 31.976 ms 31.231 ms 31.859 ms

l43a2

1779 posts

Uber Geek

ID Verified

Trusted

#2006213 1-May-2018 19:42

1 <1 ms <1 ms <1 ms 192.168.186.1
2 21 ms 24 ms 27 ms 125-239-244-1-adsl.bb.spark.co.nz [125.239.244.1]
3 * * * Request timed out.
4 33 ms 33 ms 33 ms ae8-10.akbr6.global-gateway.net.nz [122.56.116.5]
5 33 ms 33 ms 33 ms ae7-2.akbr7.global-gateway.net.nz [122.56.119.53]
6 58 ms 58 ms 58 ms 122.56.119.18
7 70 ms 95 ms 80 ms ae7-10.sebr4.global-gateway.net.nz [122.56.127.214]
8 59 ms 56 ms 57 ms as6939.sydney.megaport.com [103.26.68.236]
9 57 ms 57 ms 57 ms tserv1.syd1.he.net [216.218.142.50]

not too bad on spark

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

Sounddude

I fix stuff!
1928 posts

Uber Geek

Trusted

2degrees

Lifetime subscriber

#2006239 1-May-2018 20:16

Tuikapo:

Thanks @hio77 - You love giving me the tricky questions! Luckily I like them :P

Looks very much like a return path issue from HE. At a guess, its because the return path is via 2 paths. The free path back over Megaport or a paid path via Vocus (4826) into VocusNZ (9790), so HE takes the Paid path (they are a business afterall). - The internet is hard!

I will see if I can talk to HE about fixing, but they are a business. They will generally not budge on the fact they need to make money

In regards to IPV6, yes Slingshot does support IPV6 on some access types. Its a pet project of mine, so need to finish it off.

@Tuikapo what access type are you using? UFB?

hio77

12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

#2006243 1-May-2018 20:20

@sounddude glass buildings are great for overlooking, the hard ones are always the most fun to watch it be dealt with ;)

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

tknz

182 posts

Master Geek

#2006245 1-May-2018 20:24

Thanks @Sounddude - the return path via 4826 makes sense, but wouldn't have thought an extra 100ms. It did the same at work today via 9503 when I had a quick look.

Access type is UFB, changed to slingshot just before Stuff Fibre / Devoli added v6, I mentioned earlier the reason I'm using an HE Tunnel Broker service in Sydney is win10.ipv6.microsoft.com Teredo service is rubbish from NZ. Around 700ms roundtrip to some v6 addresses and the teredo endpoint appears to be east coast US.

Enabling the HE Tunnel Broker as I've done works a treat but native be even better :) Happy to Pilot!

Sounddude

I fix stuff!
1928 posts

Uber Geek

Trusted

2degrees

Lifetime subscriber

#2006247 1-May-2018 20:27

Tuikapo:

Thanks @Sounddude - the return path via 4826 makes sense, but wouldn't have thought an extra 100ms. It did the same at work today via 9503 when I had a quick look.

Access type is UFB, changed to slingshot just before Stuff Fibre / Devoli added v6, I mentioned earlier the reason I'm using an HE Tunnel Broker service in Sydney is win10.ipv6.microsoft.com Teredo service is rubbish from NZ. Around 700ms roundtrip to some v6 addresses and the teredo endpoint appears to be east coast US.

Enabling the HE Tunnel Broker as I've done works a treat but native be even better :) Happy to Pilot!

4826's paid HE port is in Los Angeles. So the return path would be HE Sydney -> HE Los Angles -> Vocus Los Angeles -> Vocus New Zealand. This would add the extra latency.

Even though HE could just pass the traffic directly over Megaport....

BGP (The routing protocol which works this all out) doesn't understand latency.

As for IPV6 on UFB, its on my todo list. (very high up)

tknz

182 posts

Master Geek

#2006251 1-May-2018 20:32

Sounddude:

4826's paid HE port is in Los Angeles.

Ah... makes sense.

Yes, know on BGP. I'll re-check whether it affects our own AS via 9503 tomorrow and ask about our product.

Given the product line:

IP TRANSIT

Get closer to the content your customers want: proximity matters when it comes to physical networks. So at Vocus, we’ve designed ours to offer the most direct routes to content that New Zealanders want.

tknz

182 posts

Master Geek

#2006255 1-May-2018 20:38

Thanks all! credit to @sounddude it's been explained that HE prefer Vocus handover in LA for the return path hence the latency.

Appreciate the help and the various traceroutes! Helpful.

Sounddude

I fix stuff!
1928 posts

Uber Geek

Trusted

2degrees

Lifetime subscriber

#2006261 1-May-2018 20:47

I have logged the issue with the HE NOC, will see what they say and let you know.

Joelfreak

6 posts

Wannabe Geek

Trusted

Hurricane Electric

#2006280 1-May-2018 21:14

Saw us being mentioned here, and let me just say I think NZ will soon get much better peering with Hurricane. I don't want to advertise, so I will just say that we have a dot for Auckland on our map, so peering onto our backbone will soon be easier in NZ. I hope this posting doesn't run afoul of the rules, if it does, feel free to remove it. Thanks!

Reid from he.net

1 | 2