IPv6 Roll Out

Packet-Kollector said:
Why use other DNS and route yourself away from Afrihost in-network caches and CDNs? You're architecting a worse internet experience for yourself.
Some important nodes and caches are done based on Afrihosts own DNS.
Worst case you're going all over for traffic you could be getting at the first hop.
Click to expand...

I agree.

We manage our on recursive DNS in all regions. Caches like Akamai uses DNS to determine where the traffic should be served from. We have Akamai cached in JHB and CPT to make sure clients get the fastest speeds to content which is streaming and downloads.

Akamai serves all Steam, Epic Games, EA Games etc content.

Streaming live video also mainly DSTV Now.

Using custom DNS servers means you will be served from Akamai directly and that is on the Optinet network. If served from our caches we see clients maxing their 1Gbps and 500Mbps lines on game updates and downloads.

We also do our best to remove malicious sites and spammers from our DNS to protect our clients.
 
AfriNatic said:
I agree.

We manage our on recursive DNS in all regions. Caches like Akamai uses DNS to determine where the traffic should be served from. We have Akamai cached in JHB and CPT to make sure clients get the fastest speeds to content which is streaming and downloads.

Akamai serves all Steam, Epic Games, EA Games etc content.

Streaming live video also mainly DSTV Now.

Using custom DNS servers means you will be served from Akamai directly and that is on the Optinet network. If served from our caches we see clients maxing their 1Gbps and 500Mbps lines on game updates and downloads.

We also do our best to remove malicious sites and spammers from our DNS to protect our clients.
Click to expand...
I've done a few configs to forward certain domains to AH dns, how can I tell if the resolved host for a YouTube or Google domain is routing to AH hosted cache or not, would there be a difference in the traceroutes compared to a non AH local Google cache?
 
blunt said:
I've done a few configs to forward certain domains to AH dns, how can I tell if the resolved host for a YouTube or Google domain is routing to AH hosted cache or not, would there be a difference in the traceroutes compared to a non AH local Google cache?
Click to expand...

So Google and Netflix doesn't use DNS. We steer traffic based on your location using prefixes and announce these to the caches in each region.

Akamai uses DNS to determine where you need to go. If you resolve an akamai source with any other DNS other then ours you go via peering to Optinet.

A great way to test these is using the live stream tests for example

r-live-cache.akamaized.net
i-live-cache.akamaized.net

If you use nslookup and look these up with our DNS you should be served by a cache closest to you CPT or JHB. If you use public DNS then you will see the IP's that are returned are Optinet. This is just for DSTV now.

If you can set up a wild card to resolve *.akamaized.net on our DNS so you get our cache servers for all Akamai.
 
AfriNatic said:
So Google and Netflix doesn't use DNS. We steer traffic based on your location using prefixes and announce these to the caches in each region.

Akamai uses DNS to determine where you need to go. If you resolve an akamai source with any other DNS other then ours you go via peering to Optinet.

A great way to test these is using the live stream tests for example

r-live-cache.akamaized.net
i-live-cache.akamaized.net

If you use nslookup and look these up with our DNS you should be served by a cache closest to you CPT or JHB. If you use public DNS then you will see the IP's that are returned are Optinet. This is just for DSTV now.

If you can set up a wild card to resolve *.akamaized.net on our DNS so you get our cache servers for all Akamai.
Click to expand...
Ok cool I added that wildcard I see it resolves to an ip.afrihost.capetown IP
 
Packet-Kollector said:
Why use other DNS and route yourself away from Afrihost in-network caches and CDNs? You're architecting a worse internet experience for yourself.
Some important nodes and caches are done based on Afrihosts own DNS.
Worst case you're going all over for traffic you could be getting at the first hop.
Click to expand...

A dumb DNS such as Cloudflare or Google sure but what if you just wanted to route your DNS to a PiHole on LAN which uses Afrihost's DNS upstream? Not having this ability out of box is rather silly.

Limiting your customer in any way for no reason is silly.
 
Has anyone successfully configured IPv6 with pfSense and Openserv?
 
HI is there any current issues with IPV6? Mine has been running fine for a while now however i see I am getting issues now. A visit to https://test-ipv6.com/ give me this:
Test with IPv4 DNS record ok (0.094s) using ipv4
Test with IPv6 DNS record timeout (15.009s)
Test with Dual Stack DNS record ok (0.392s) using ipv4
Test for Dual Stack DNS and large packet ok (0.365s) using ipv4
Test IPv6 large packet timeout (15.015s)
Test if your ISP's DNS server uses IPv6 bad (1.537s)
Find IPv4 Service Provider ok (1.227s) using ipv4 ASN 37611
Find IPv6 Service Provider timeout (15.002s)
 
atunguyd said:
HI is there any current issues with IPV6? Mine has been running fine for a while now however i see I am getting issues now. A visit to https://test-ipv6.com/ give me this:
Test with IPv4 DNS recordok (0.094s) using ipv4
Test with IPv6 DNS recordtimeout (15.009s)
Test with Dual Stack DNS recordok (0.392s) using ipv4
Test for Dual Stack DNS and large packetok (0.365s) using ipv4
Test IPv6 large packettimeout (15.015s)
Test if your ISP's DNS server uses IPv6bad (1.537s)
Find IPv4 Service Providerok (1.227s) using ipv4 ASN 37611
Find IPv6 Service Providertimeout (15.002s)
Click to expand...
Morning, there are no issues experienced, please test again.
 
atunguyd said:
HI is there any current issues with IPV6? Mine has been running fine for a while now however i see I am getting issues now. A visit to https://test-ipv6.com/ give me this:
Test with IPv4 DNS record ok (0.094s) using ipv4
Test with IPv6 DNS record timeout (15.009s)
Test with Dual Stack DNS record ok (0.392s) using ipv4
Test for Dual Stack DNS and large packet ok (0.365s) using ipv4
Test IPv6 large packet timeout (15.015s)
Test if your ISP's DNS server uses IPv6 bad (1.537s)
Find IPv4 Service Provider ok (1.227s) using ipv4 ASN 37611
Find IPv6 Service Provider timeout (15.002s)
Click to expand...
I kept getting this on my ipv6 setup on the Mikrotik, even if it worked it'd end up doing this shortly after.

Ended up sticking to v4.

V6 works nicely on simple routers where you just enable it, but I can't work with a simple router and the Mikrotik V6 guides are sparse.
 
blunt said:
I kept getting this on my ipv6 setup on the Mikrotik, even if it worked it'd end up doing this shortly after.

Ended up sticking to v4.

V6 works nicely on simple routers where you just enable it, but I can't work with a simple router and the Mikrotik V6 guides are sparse.
Click to expand...
Thanks - yes I have the mikrotik router running 6.46.8 version of routerOS. I could swear that it was working fine for a while (but I dont test if I am connecting via v4 or v6 every day). If there is something different with Afrihost perhaps Afrihost can provide some sort of instructions on how to setup a mikrotik router for their services?
 
atunguyd said:
Thanks - yes I have the mikrotik router running 6.46.8 version of routerOS. I could swear that it was working fine for a while (but I dont test if I am connecting via v4 or v6 every day). If there is something different with Afrihost perhaps Afrihost can provide some sort of instructions on how to setup a mikrotik router for their services?
Click to expand...
it has been asked but the main guide to setting up Mikrotik seems to be the one I posted quite some time back. Have you tried upgrading to routeros 7.6?

I am running 7.6 now but have not tried ipv6 again.
 
blunt said:
it has been asked but the main guide to setting up Mikrotik seems to be the one I posted quite some time back. Have you tried upgrading to routeros 7.6?

I am running 7.6 now but have not tried ipv6 again.
Click to expand...
Have not tried upgrading - been reluctant as I have a lot of different settings and rules that I have put in place for various other requirements that I have (VPN, hairpin routes so that some servers I run can be accessed outside and inside from the same URL etc...). Maybe this weekend I will dedicate a day doing this. (Assuming a straight upgrade just works - I dont want to take the chance and end up taking it all down).
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X