[DBWG] AFRINIC RPKI RRDP connectivity issues?

[S. Moonesamy]

Dear Job,
At 10:20 AM 17-05-2023, Job Snijders wrote:
>The problem seems to for validators outside the African continent: 
>the download
>speed for various places around the world is between 20 and 50 kilobytes/sec -
>which is too slow to load the 35 megabyte snapshot file in a timely fashion.
>
>If you are getting good results, and I am not (from multiple vantage 
>points), I
>suspect there is a heavily congested network interface somewhere in Afrinic's
>network affecting far-away international clients.

I ran two tests from the United States:

Test 1:

  HTTP/2 200
  < server: nginx/1.20.1
  < date: Thu, 18 May 2023 13:24:58 GMT
  < content-type: text/xml
  < content-length: 37101113
  < last-modified: Thu, 18 May 2023 13:24:05 GMT
  < etag: "646626f5-2361e39"
  < cache-control: no-store, no-cache, must-revalidate, max-age=0
  < accept-ranges: bytes
  <
  { [16197 bytes data]
  100 35.3M  100 35.3M    0     0  99228      0  0:06:13  0:06:13 
--:--:--   98k
  * Connection #0 to host rrdp.afrinic.net left 
intact 

     time_namelookup:  0.002020s 

        time_connect:  0.307542s 

     time_appconnect:  0.926631s 

    time_pretransfer:  0.927100s 

       time_redirect:  0.000000s 

  time_starttransfer:  1.539447s 

                 ---------- 

          time_total:  373.896684s 

           remote_ip: 
2001:42d0:0:201::29 

      speed_download: 99228 bytes/sec

Test 2:

  < HTTP/2 200
  < server: nginx/1.20.1
  < date: Thu, 18 May 2023 13:32:50 GMT
  < content-type: text/xml
  < content-length: 37101113
  < last-modified: Thu, 18 May 2023 13:32:06 GMT
  < etag: "646628d6-2361e39"
  < cache-control: no-store, no-cache, must-revalidate, max-age=0
  < accept-ranges: bytes
  <
  { [5 bytes data]
  100 35.3M  100 35.3M    0     0  20477      0  0:30:11  0:30:11 
--:--:-- 60973
  * Connection #0 to host rrdp.afrinic.net left intact
     time_namelookup:  0.001942s
        time_connect:  0.359970s
     time_appconnect:  2.241974s
    time_pretransfer:  2.242464s
       time_redirect:  0.000000s
  time_starttransfer:  2.595889s
                 ----------
          time_total:  1811.796978s
           remote_ip: 196.216.2.29
      speed_download: 20477 bytes/sec

I was able to reproduce the issue which you encountered (Test 2).

Traceroute for Test 1:

  traceroute6 to rdap.afrinic.net (2001:42d0:0:410::137) from 
2001:470:c:d43::2, 64 hops max, 12 byte packets
   1  2001:470:c:d43::1  13.489 ms  16.257 ms  12.575 ms
   2  * * *
   3  * * *
   4  * * *
   5  * * *
   6  * * *
   7  * * *
   8  * 2001:470:0:54a::2  283.579 ms  286.89 ms
   9  * 2001:470:0:642::1  322.803 ms *
  10  * 2001:43f8:1f0::160  306.017 ms *
  11  2001:42d0:1:103::1  301.556 ms 2001:42d0:0:410::137  305.303 ms 
!X 2001:470:0:54a::2  290.582 ms
  12  2001:42d0:0:410::137  301.03 ms !X 2001:470:0:642::1  308.733 ms *
  13  2001:42d0:0:410::137  305.933 ms !X 2001:43f8:1f0::60  304.901 
ms 2001:42d0:0:410::137  304.104 ms !X

Traceroute for Test 2:

  traceroute to rdap.afrinic.net (196.216.2.137), 64 hops max, 40 byte packets
   1  207.242.50.33  0.291 ms  0.241 ms  0.208 ms
   2  12.249.169.113  1.734 ms  1.804 ms  1.744 ms
   3  12.122.149.66  10.866 ms 12.122.149.70  9.220 ms 12.122.149.66  14.769 ms
   4  12.122.114.5  7.190 ms 12.122.149.133  12.489 ms 12.122.114.5  8.215 ms
   5  * * *
   6  * * *
   7  212.187.165.246  141.415 ms  139.703 ms  142.189 ms
   8  41.78.188.134  1101.721 ms 41.78.188.221  1541.861 ms 
41.78.188.134  779.245 ms
   9  * * 41.78.188.144  317.217 ms
  10  197.157.77.97  329.640 ms 197.157.77.101  317.373 ms  314.407 ms
  11  197.157.64.195  332.291 ms  350.118 ms  355.125 ms
  12  196.216.2.137  355.414 ms !<10>  360.065 ms !<10>  353.167 ms !<10>

Regards,
S. Moonesamy