查看文章

In mid 2019, IANA allocated 2a10::/12 to the RIPE NCC, the first IPv6 allocation to a Regional Internet Registry (RIR) in over twelve years. By early 2020, we were preparing to issue space from this/12 to our members. Without measurement, it is unclear whether this/12 is safe to use: routing policies, long-forgotten router configurations, malicious traffic, or networks making private use of unallocated address space may reduce the usability of some or all of the space. In order to provide an opportunity for operators to test the space prior to operational use, we announced the full/12 via BGP for one week followed by eight smaller allocations, each with one target responsive to ICMP echo requests. We captured all packets sent to this/12 while the BGP announcements were active. In addition, a RIPE Atlas measurement campaign was conducted, and route propagation was inspected via the RIPE Routing Information Service (RIS). Notable traffic captured includes low-volume TCP traceroute scans into the address space and DNS traffic, including some from misconfigured DNS servers. No traffic type is pervasive, and disregarding traffic generated by RIPE Atlas, only 6.2 M packets carrying various transport payloads were captured during this study. Analysis of RIS data indicates that route visibility is good, and RIPE Atlas data shows that reachability to this space is also generally good. From RIPE Atlas measurements we identify a small number of networks where reachability is reduced, in line with reasonable route filtering practices. This work forms the first significant IPv6 darknet study since 2013. We provide fresh insight into the activity of unsolicited …