Afrihost - Pure Fibre Feedback Thread Part 2

Thanks - can you perhaps shed some light on what the issue is exactly? So that we have a better understanding of the situation.

Previously different parts of the Vuma network were outsourced to Aex and they handed traffic to ISP's. Vuma has been migrating these over to a new Vuma Connect where Vumatel will manage these links. Currently, there is traffic from old and new links for various services like Vuma Reach, Vuma Active E and Vuma gpon (Huawei)

To get these services together, an evpn solution was implemented, but because of various vendors involved and the complexity of the network, security measures needed to be implemented to protect the network. One of these protections protects against mac flaps between port channels to prevent broadcast storms. Our infrastructure mac is leaking through and reaching a port channel where it's not supposed to ever be seen. This triggers the protection and the mac gets blacklisted for flapping between port channels and subsequently cut the entire vlan's traffic for Vuma Villages on Afrihost and Axxess.

We have been in constant meetings with Vuma team and working with them on a permanent solution to the issue. Currently, Vuma team mitigates the impact by manually removing the mac address blacklisted once they see the mac flaps stop which is happening intermittently.

I hope this info provides more clarity. Unfortunately, I can't go into more detail regarding the issue but this is an overview of the ongoing issue. Everyone involved is working to find a permanent solution to the issue. I do apologise for the inconvenience caused by this.
 
Previously different parts of the Vuma network were outsourced to Aex and they handed traffic to ISP's. Vuma has been migrating these over to a new Vuma Connect where Vumatel will manage these links. Currently, there is traffic from old and new links for various services like Vuma Reach, Vuma Active E and Vuma gpon (Huawei)

To get these services together, an evpn solution was implemented, but because of various vendors involved and the complexity of the network, security measures needed to be implemented to protect the network. One of these protections protects against mac flaps between port channels to prevent broadcast storms. Our infrastructure mac is leaking through and reaching a port channel where it's not supposed to ever be seen. This triggers the protection and the mac gets blacklisted for flapping between port channels and subsequently cut the entire vlan's traffic for Vuma Villages on Afrihost and Axxess.

We have been in constant meetings with Vuma team and working with them on a permanent solution to the issue. Currently, Vuma team mitigates the impact by manually removing the mac address blacklisted once they see the mac flaps stop which is happening intermittently.

I hope this info provides more clarity. Unfortunately, I can't go into more detail regarding the issue but this is an overview of the ongoing issue. Everyone involved is working to find a permanent solution to the issue. I do apologise for the inconvenience caused by this.

Further to this. Afrihost is busy testing the feasibility of PPPoE on a larger scale. DHCP-related issues have forced our hand. DHCP at a large scale gets more complex and difficult to secure and manage properly when you throw in more FNO's and different vendors.

There are challenges with this project. Features we require to be enabled on an OLT level are DHCP snooping and MFF (Mac forced forwarding) These layer 2 security features are no longer available when switching PPPoE on and so a complete switch per vlan/FNO is required in some cases.
 
Is this the same issue that been going on for the past week?

Hi

Yes, it's unfortunately the same issue that keeps on reoccurring.

We will be engaging with the Vuma team in a meeting to possibly roll back these migrations or look for another solution.
 
In Cape Town SS, dns seems slow to resolve and load some sites, mostly reddit taking around 20s to load. Any one else having issues like this?
 

So that looks good. I would have expected some loss if it was a connection issue. If both our DNS and Cloudflare DNS is giving the same issue then either an ip or domain from certain websites are blocked like maybe analytics or something or it times out making pages load slow.

You might to enable debug mode to see what is loading slowly on the pages to see if it's anything specific.

Could also be an issue with the CDN they use.
 
Hi @AfriNatic, if we have Afrihost as ISP, and Metrofibre as infrastructure, can you set up port forwarding? I think before you had set a static IP or something to that effect and we were able to get port forwarding working?
 
Hi @AfriNatic, if we have Afrihost as ISP, and Metrofibre as infrastructure, can you set up port forwarding? I think before you had set a static IP or something to that effect and we were able to get port forwarding working?

Hi

If you have a public IP you can do that.

Please dm me and @Afrigirl your email address so we can have a look for you.
 
Vuma Village out again
Are they working on it right now?
Started with very slow speeds little after 7pm and just before 8pm no internet at all again.
Every day it's happening.
 
Vuma Village out again
Are they working on it right now?
Started with very slow speeds little after 7pm and just before 8pm no internet at all again.
Every day it's happening.

My monitoring is not showing it down currently. I see quite a sizable amount of traffic for Vuma Village
 
Yes but it is called Vumatel Aerial on Afrihost. Ex SADV.

Okay I think I saw your ticket in the queue now.

Let me find out from Vumatel. Do you know when it started to be slow? I saw traffic drop at around 19:30 and it hasn't really recovered since but it's not a major drop that would suggest a big outage.
 
Top
Sign up to the MyBroadband newsletter
X