logo
Welcome Guest! To enable all features please Login or Register.

Notification

Icon
Error

Login


Options
View
Go to last post Go to first unread
robert  
#1 Posted : Tuesday, July 08, 2014 3:40:58 PM(UTC)
robert

Rank: Advanced Member

Groups: Registered
Joined: 7/8/2014(UTC)
Posts: 114
United States
Location: New york

Basically, I am having some unusual (but apparently not uncommon) accessing the severs of the Japanese MMORPG Phantasy Star Online 2. The problems started June 18th, when the servers were taken down in response to a continuous DDoS attack.

Sega of Japan announced that measures were being put in place, and a little over a week later, the servers came back online. However, most people outside of Japan attempting access the servers were met with errors, and the official website (pso2.jp) is also inaccessible. While one might reasonably suspect that an IP range ban has been put in place, the evidence indicates otherwise.

»www.reddit.com/r/PSO2/comments/2···updated/

As this thread indicates, Time Warner customers are now able to access the servers, and tracert results widely suggest that the requests are being stopped well before they actually reach Sega's servers. I figured I'd ask here on a forum of networking experts and CenturyLink support specialists. If it IS my ISP blocking access to this game, perhaps asked to by Sega to counter the DDoS, then I'd like to know when I can expect to have access again. Here are my tracert results (with home IP removed):

»pastebin.com/AHw28HLu

Thank you for your time.
james  
#2 Posted : Wednesday, July 09, 2014 12:39:08 PM(UTC)
james

Rank: Advanced Member

Groups: Registered
Joined: 7/9/2014(UTC)
Posts: 43
Canada

Look like a routing or BGP issue, probably on the side of pso2.jp (or whoever is announcing their IP Block)

Cogent gets destination unreachable very early in their network.
Quote:

C:\Windows\system32>tracert pso2.jp

Tracing route to pso2.jp [210.189.209.8]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms car1.napshome.local [10.0.1.3]
2 5 ms 2 ms 3 ms gpon-local.xceleratebroadband.com [10.40.0.1]
3 2 ms 3 ms 3 ms gpon-local.xceleratebroadband.com [172.16.1.2]
4 12 ms 11 ms 11 ms 38.122.47.121
5 * 38.122.47.121 reports: Destination host unreachable.

Trace complete.


Edit: and to add, there is a lot of fail in that Reddit, take anything with a grain of salt.
james  
#3 Posted : Wednesday, July 09, 2014 12:40:41 PM(UTC)
james

Rank: Advanced Member

Groups: Registered
Joined: 7/9/2014(UTC)
Posts: 43
Canada

Also Level3 is showing no route.

Quote:


1)Route results for 210.189.208.0/23 from Atlanta, GA

2)No routes found for 210.189.208.0/23.
robert  
#4 Posted : Wednesday, July 09, 2014 12:41:25 PM(UTC)
robert

Rank: Advanced Member

Groups: Registered
Joined: 7/8/2014(UTC)
Posts: 114
United States
Location: New york

Ah. What sort of conclusions do you suppose could be reached based on all this? If it's a BGP thing it seems odd that they'd continue to block traffic for this long after the DDoS has ended.

(update): »www.reddit.com/r/PSO2/comments/2···_access/

There may actually be something to this.
james  
#5 Posted : Wednesday, July 09, 2014 12:41:42 PM(UTC)
james

Rank: Advanced Member

Groups: Registered
Joined: 7/9/2014(UTC)
Posts: 43
Canada

Not really, still some BS in that post.

Level3 and Cogent are both big international players, much more so then TWC.

It appears that the owner of 210.189.208.0/23 (AS4694) is not announcing its network to non JP ISP's either on purpose (based on talk of supposedly a DDOS) or not.

The difference between TWC and Cogent and Level3 is that TWC buys transit from other ISP's it cant gain access to directly. Cogent and Level3 are Tier1 providers and as a rule they don't (except in maybe in very rare cases)

TWC is using that transit trough other JP ISP's that AS4694 is announcing their routes to in order to get to the destination.

And this talk of blocking by all of these other ISP because of DDOS protection and stuff, they generally wont do that unless they are the target from said ISP. AS4694 simply stopped announcing their 210.189.208.0/23 route (via BGP) to those other ISP, thus the networks have no idea how to get to them. Cogent, Level3, Charter and any other ISP that currently cant access the 210.189.208.0/23 network have nothing they need to do, if AS4694 wants people on those network to access their game/site, they will fix it and announce the route to them.

TLDR: AS4694 is not announcing 210.189.208.0/23 to non JP networks, no one is "blocking" access to them except themselves.
peter  
#6 Posted : Wednesday, July 09, 2014 12:42:44 PM(UTC)
peter

Rank: Advanced Member

Groups: Registered
Joined: 7/8/2014(UTC)
Posts: 69
Afganistan

Quote:

AS4694 simply stopped announcing their 210.189.208.0/23 route (via BGP) to those other ISP, thus the networks have no idea how to get to them. Cogent, Level3, Charter and any other ISP that currently cant access the 210.189.208.0/23 network have nothing they need to do, if AS4694 wants people on those network to access their game/site, they will fix it and announce the route to them.

this doesn't explain why the charter trace routes are suddenly (as of yesterday) getting further in the process than they were previously, reaching a point in europe it can't pass as opposed to dying at the closest local routing center like it did previously.

specifically, if the announcement hasn't changed, what logic is there for the connection magically getting further along the path and out of the charter network? clearly that would be a sign that there is something the isp's are able to do on their end.
Users browsing this topic
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.