AS5408 — National Infrastructures for Research and Technology

aut-num: AS5408
as-name: GR-NET
notify: hostmaster@grnet.gr
descr: http://www.grnet.gr
org: ORG-GRaT1-RIPE
remarks:
remarks:
remarks: # ROUTING POLICY FOR GRNET AS5408)
remarks:
remarks: General Info
remarks: ==============
remarks: GRNET donwstream customers are Greek Universities, Academic
remarks: and Research Institutes
remarks: GRNET has GEANT as its upstream; it also connects to GRIX
remarks: Internet Exchange
remarks:
remarks: RPKI in GRNET
remarks: ==============
remarks: GRNET ***drops*** ALL RPKI invalid prefixes received from Upstream
remarks: and Greek Internet Exchange (GR-IX)
remarks:
remarks: PA Space Aggregation
remarks: =============
remarks: GRNET aggregates its PA space before announcing it to its
remarks: upstream(s) and exchanges. Should a customer with PA space
remarks: wishes not to have its prefixes aggregated, a special community
remarks: should be used to tag this route (see below).
remarks: Prefixes from GRNET allocation that announced from public ASs
remarks: are announced deaggregated.\
remarks: Prefix lengths longer than /24 for IPv4 and /48 for IPv6 are NOT
remarks: announced to Upstream or GRIX
remarks:
remarks: Primary/Backup control
remarks: ========================
remarks: GRNET respects the MED received by its customers; thus, the
remarks: customers can indicate their primary/backup line and control
remarks: incoming traffic by setting MED appropriatelly. Also, the
remarks: customers may use the community 5408:110 to indicate their
remarks: backup connection (lower local pref), but this method is
remarks: recommended only for customers multihomed to another Greek ISP
remarks: that use their connection with GRNET as backup.
remarks:
remarks: Hot Potato routing
remarks: ========================
remarks: By setting the same attributes (Local Preference and MED) on
remarks: advertising prefixes, a customer with more than one connections
remarks: with GRNET has the ability to use all active paths.
remarks: By this way, "hot potato" routing is achieved. Traffic will exit
remarks: GRNETs network choosing the closest to destination border router.
remarks:
remarks: Anycast
remarks: ========================
remarks: GRNET does not follow any explicit policy for anycast services.
remarks: Normal routing (and, thus, preference) applies to all anycast
remarks: routes
remarks:
remarks: BGP Communities used in GRNET:
remarks: ================================
remarks:
remarks: Informational Communities:
remarks: +---------------------------------------------------------------+
remarks: | These communities tag the source of the routes. They can ONLY |
remarks: | be appended by GRNET. Routes with this tag received by any |
remarks: | peer will be rejected! |
remarks: +---------------------------------------------------------------+
remarks: 5408:1001 Routes received from GEANT
remarks: 5408:1002 Routes received from GRIX
remarks: 5408:1003 Routes from GRNET (Customers & BackBone)
remarks: 5408:1004 Routes from GEANT NREN
remarks: 5408:1005 Routes from GEANT IAS
remarks: 5408:1006 Routes from GEANT CLS
remarks:
remarks: Special Communities for route manipulation:
remarks: +---------------------------------------------------------------+
remarks: | These communities tag the source of the routes. They can ONLY |
remarks: | be appended by GRNET. Routes with this tag received by any |
remarks: | peer will be rejected! |
remarks: +---------------------------------------------------------------+
remarks: 5408:2000 Do not aggregate
remarks: 5408:2005 Prepend AS5408 x5
remarks: 5408:4001 Do not announce to GRIX
remarks: 5408:4005 Do not announce to GEANT
remarks: 5408:4006 Do not announce to GEANT NREN VRF
remarks: 5408:4007 Do not announce to GEANT Tier-1
remarks:
remarks: Routing Manipulation (for GRNET customers only):
remarks: +---------------------------------------------------------------+
remarks: | This set of tools allow GRNET clients to manipulate their |
remarks: | routing: |
remarks:
remarks: LOCAL PREFERENCES IN GRNET:
remarks: =============================
remarks:
remarks: LocalPref 200: - GRNET Customers
remarks: - Special Customers (KROOT, SYZEYXIS, ...)
remarks: - Locally Generated GRNET Aggregates
remarks:
remarks: LocalPref 190: - GRNET Customers, backup connection
remarks:
remarks: LocalPref 180: - GEANT NREN VRF
remarks:
remarks: LocalPref 170: - GRIX routes (MED=0 Primary, MED=20 Secondary)
remarks:
remarks: LocalPref 160: - GEANT CLS VRF
remarks:
remarks: LocalPref 150: - GRNET as backup in dual homed customers
remarks:
remarks: LocalPref 140: - GEANT IAS VRF
remarks:
remarks:
remarks:
remarks:
remarks:
remarks:
remarks: =======================================================================
remarks: iBGP (AS5408)
remarks: ----------------------------------------------------------------------
remarks: PEER DESCRIPTION:
remarks: Full-mesh iBGP peerings.
remarks: Import Policy: Accept ANY
remarks: Export Policy: Advertize (a) all routes (FIRT) or (b) GRNET & GRIX
remarks: routes only, depending on router capabilities.
remarks: ======================================================================
import: from prng-as5408-ibgp accept ANY;
export: to prng-as5408-ibgp-part announce community.contains(5408:1003) OR {0.0.0.0/0};
export: to prng-as5408-ibgp announce ANY;
remarks: =======================================================================
remarks: GEANT (AS20965)
remarks: ----------------------------------------------------------------------
remarks: PEER DESCRIPTION:
remarks: GEANT is the Internet Upstream for GRNET
remarks: Import Policy: Accept all routes (apart from martians),
remarks: set MED appropratelly on primary & backup peering.
remarks: Export Policy: Announce all GRNET routes (tagged with 5408:1003)
remarks: that are not tagged with 5408:4005 (don't-announce-to-geant).
remarks: Aggregate PA space (except from the routes tagged with
remarks: 5408:2000 (do not aggregate) community.
remarks: =======================================================================
import: from AS20965 62.40.124.89 action community.append(5408:1001); accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian; REFINE { from AS20965 action aspath.prepend(AS20965,AS20965,AS20965); accept community.contains(20965:7777); from AS20965 accept ANY; }
import: from AS20965 62.40.124.141 action community.append(5408:1001); med=20; accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian; REFINE { from AS20965 action aspath.prepend(AS20965,AS20965,AS20965); accept community.contains(20965:7777); from AS20965 accept ANY; }
import: from AS20965 62.40.102.252 action community.append(5408:1001); accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian;
import: from AS20965 62.40.102.254 action community.append(5408:1001); med=20; accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian;
export: to AS20965 announce AS5408:RS-ROUTES; REFINE { to AS20965 62.40.124.89 action community.append(20965:7030); announce ANY; to AS20965 62.40.124.141 action community.append(20965:7030); announce ANY; to AS20965 62.40.102.252 announce ANY; to AS20965 62.40.102.254 announce ANY; }
export: to AS20965 announce community.contains(5408:1003) AND NOT community.contains(5408:4005); REFINE { to AS20965 announce (AS5408:AS-TO-GEANT AND NOT AS5408:RS-ROUTES^0-32); to AS20965 announce AS5408:RS-ROUTES^0-32 AND community.contains(5408:2000); } REFINE { to AS20965 62.40.124.89 action community.append(20965:7030); announce ANY; to AS20965 62.40.124.141 action community.append(20965:7030); announce ANY; to AS20965 62.40.102.252 announce ANY; to AS20965 62.40.102.254 announce ANY; }
remarks: =======================================================================
remarks: GRIX Peers
remarks: ----------------------------------------------------------------------
remarks: PEER DESCRIPTION:
remarks: These are the GRIX Peers of GRNET
remarks: Import Policy: Reject routes tagged with special communities
remarks: Accept all other routes that
remarks: (a) have the appropriate AS path and
remarks: (b) originate from the peer (or behind it)
remarks: For these, and according to the received communities:
remarks: (i) Set the appropriate local preference
remarks: Export Policy: Announce all GRNET routes (tagged with 5408:1003)
remarks: that are not tagged with 5408:4001 (don't-announce-to-grix).
remarks: Aggregate PA space (except from the routes tagged with
remarks: 5408:2000 (do not aggregate) community.
remarks: =======================================================================
import: from prng-as5408-grix-peers action pref=105; community.append(5408:1002); accept NOT community.contains(5408:1001) AND NOT community.contains(5408:1003) AND <^PeerAS+AS5408:AS-GRIX:PeerAS*$>; REFINE { from AS-GRIX at 176.126.38.1 action med=0; accept ANY; from AS-GRIX at 176.126.38.31 action med=20; accept ANY; } # AND (PeerAS^0-27 OR AS5408:AS-GRIX:PeerAS^0-27 OR AS5408:AS-GRIX:PeerAS^0-27); Primary-Backup
export: to prng-as5408-grix-peers announce AS5408:RS-ROUTES OR AS199399;
export: to prng-as5408-grix-peers announce community.contains(5408:1003) AND NOT community.contains(5408:4001); REFINE { to prng-as5408-grix-peers announce (AS5408:AS-TO-AIX AND NOT AS5408:RS-ROUTES^0-32); to prng-as5408-grix-peers announce AS5408:RS-ROUTES^0-32 AND community.contains(5408:2000); }
remarks: =======================================================================
remarks: GRIX RS
remarks: ----------------------------------------------------------------------
remarks: =======================================================================
import: from AS50745 action pref=105; med=30; community.append(5408:1002); accept <^AS-GRIX> AND NOT community.contains(5408:1001) AND NOT community.contains(5408:1003);
remarks: =======================================================================
remarks: GRIX ROUTER @ GRIX
remarks: ----------------------------------------------------------------------
remarks: =======================================================================
import: from AS199399 action pref=105; community.append(5408:1002); accept AS199399; REFINE { from AS-GRIX at 176.126.38.1 action med=0; accept ANY; from AS-GRIX at 176.126.38.31 action med=20; accept ANY; } # Primary-Backup
export: to AS199399 announce community.contains(5408:1003) OR {0.0.0.0/0};
remarks: =======================================================================
remarks: K-ROOT mirror @ GRIX
remarks: ----------------------------------------------------------------------
remarks: PEER DESCRIPTION:
remarks: K-ROOT @ GRIX. Accept K-Root routes, announce within GRNET *only*
remarks: Announce default route.
remarks: =======================================================================
import: from AS25152 action pref=105; community.append(5408:1002); community.append(5408:4001); community.append(5408:4005); accept {193.0.14.0/24, 195.251.59.0/28} AND NOT community.contains(5408:1001) AND NOT community.contains(5408:1003); REFINE { from AS-GRIX at 176.126.38.1 action med=0; accept ANY; from AS-GRIX at 176.126.38.31 action med=20; accept ANY; } # Primary-Backup
export: to AS25152 announce {0.0.0.0/0};
remarks: =======================================================================
remarks: GRNET Clients
remarks: ----------------------------------------------------------------------
remarks: PEER DESCRIPTION:
remarks: These are the normal GRNET clients (Universities, Research orgs, etc)
remarks: Import Policy: Reject routes tagged with special communities
remarks: Accept all other routes that
remarks: (a) have the appropriate AS path and
remarks: (b) originate from the client (or behind it)
remarks: For these, and according to the received communities:
remarks: (i) Set the appropriate local preference
remarks: Prefixes with no corresponding exact matching route on the
remarks: RIPE whois database are only accepted if tagged with NO_EXPORT
remarks: Local Preference (on backup links) can be lowered by
remarks: using the appropriate community (5408:110), but MED is
remarks: recommended for this purpose.
remarks: Export Policy:
remarks: (a) either all routes (FIRT)
remarks: (b) or a partial routing table, consiting
remarks: GRNET (5408:1003) and GRIX (5408:1002) routes
remarks: (c) or a partial routing table, consiting
remarks: GRNET (5408:1003) and GRIX (5408:1002) routes plus default route 0/0.
remarks: (d) or default route 0/0.
remarks: =======================================================================
import: from prng-as5408-grnet-customers action community.append(5408:1003); accept NOT community.contains(5408:1001) AND NOT community.contains(5408:1002) AND community.contains(NO_EXPORT) AND (PeerAS^0-32 OR PeerAS:AS-TO-GRNET^0-32) AND <^PeerAS+PeerAS:AS-TO-GRNET*$>; REFINE { from AS-ANY action pref=110; accept community.contains(5408:110); from AS-ANY action pref=100; accept ANY; }
import: from prng-as5408-grnet-customers action community.append(5408:1003); accept NOT community.contains(5408:1001) AND NOT community.contains(5408:1002) AND (PeerAS OR PeerAS:AS-TO-GRNET) AND <^PeerAS+PeerAS:AS-TO-GRNET*$>; REFINE { from AS-ANY action aspath.prepend(AS5408,AS5408,AS5408,AS5408,AS5408); accept community.contains(5408:2005); from AS-ANY accept ANY; } REFINE { from AS-ANY action pref=110; accept community.contains(5408:110); from AS-ANY action pref=100; accept ANY; }
export: to prng-as5408-grnet-firt announce NOT {0.0.0.0/0};
export: to prng-as5408-grnet-customers announce AS5408:RS-ROUTES OR community.contains(5408:1002) OR community.contains(5408:1003);
export: to prng-as5408-grnet-customers-droute announce {0.0.0.0/0} OR AS5408:RS-ROUTES OR community.contains(5408:1002) OR community.contains(5408:1003);
export: to prng-as5408-customers-firt announce ANY;
export: to prng-as5408-customers-greek-internet announce community.contains(5408:1003) OR community.contains(5408:1002);
export: to prng-as5408-customers-greek-internet-dr announce community.contains(5408:1003) OR community.contains(5408:1002) OR {0.0.0.0/0};
export: to prng-as5408-customers-grnet announce community.contains(5408:1003);
export: to prng-as5408-customers-grnet-dr announce community.contains(5408:1003) OR {0.0.0.0/0};
export: to prng-as5408-customers-only-dr announce {0.0.0.0/0};
remarks: =======================================================================
remarks: EU ACADEMIC INTERNET (GRNET + OTHER EU NRENS)
remarks: ----------------------------------------------------------------------
remarks: PEER DESCRIPTION: announce GRNET and GEANT NREN (community 20965:155), route within GRNET *only*.
remarks: =======================================================================
import: from prng-as5408-customers-eu-academic-internet action community.append(5408:1003); community.append(5408:2000); community.append(5408:4001); community.append(20965:0000); community.append(20965:0011); community.append(20965:0012); community.append(20965:0013); community.append(20965:7000); accept NOT community.contains(5408:1001) AND NOT community.contains(5408:1002) AND community.contains(NO_EXPORT) AND (PeerAS^0-32 OR PeerAS:AS-TO-GRNET^0-32) AND <^PeerAS+PeerAS:AS-TO-GRNET*$>; REFINE { from AS-ANY action pref=110; accept community.contains(5408:110); from AS-ANY action pref=100; accept ANY; }
import: from prng-as5408-customers-eu-academic-internet action community.append(5408:1003); community.append(5408:2000); community.append(5408:4001); community.append(20965:0000); community.append(20965:0011); community.append(20965:0012); community.append(20965:0013); community.append(20965:7000); accept NOT community.contains(5408:1001) AND NOT community.contains(5408:1002) AND (PeerAS OR PeerAS:AS-TO-GRNET) AND <^PeerAS+PeerAS:AS-TO-GRNET*$>; REFINE { from AS-ANY action aspath.prepend(AS5408,AS5408,AS5408,AS5408,AS5408); accept community.contains(5408:2005); from AS-ANY accept ANY; } REFINE { from AS-ANY action pref=110; accept community.contains(5408:110); from AS-ANY action pref=100; accept ANY; }
export: to prng-as5408-customers-eu-academic-internet announce community.contains(5408:1003) OR community.contains(20965:155);
remarks: =======================================================================
remarks: GRNET SERVICES
remarks: ----------------------------------------------------------------------
remarks: PEER DESCRIPTION:
remarks: do not announce anything, accept AS65500
remarks: =======================================================================
import: from AS65500 action pref=100; community.append(NO_EXPORT); accept AS65500
export: to AS65500 announce NOT ANY;
remarks: =======================================================================
remarks: GRNET ECI-ECN
remarks: ----------------------------------------------------------------------
remarks: PEER DESCRIPTION:
remarks: do not announce anything, accept AS65502
remarks: =======================================================================
import: from AS65502 action pref=100; accept AS65502
export: to AS65502 announce NOT ANY;
remarks: =======================================================================
remarks: SYZEYXIS
remarks: ----------------------------------------------------------------------
remarks: PEER DESCRIPTION:
remarks: announce only GRNET routes, route within GRNET *only*.
remarks: =======================================================================
import: from AS65052 action pref=100; community.append(5408:1003); community.append(5408:4001); community.append(5408:4005); accept (PeerAS OR PeerAS:AS-TO-GRNET) AND <^PeerAS+PeerAS:AS-TO-GRNET*$> AND NOT community.contains(5408:1001) AND NOT community.contains(5408:1002);
export: to AS65052 announce community.contains(5408:1003);
remarks: =======================================================================
remarks: AKAMAI
remarks: ----------------------------------------------------------------------
remarks: PEER DESCRIPTION:
remarks: AKAMAI. Accept no routes. Announce GRNET customers.
remarks: =======================================================================
import: from AS21357 accept NOT ANY;
export: to AS21357 announce AS5408:RS-ROUTES OR community.contains(5408:1003);
remarks: =======================================================================
import: from AS65535 accept NOT ANY;
export: to AS65535 announce AS5408:RS-ROUTES;
export: to AS65535 announce community.contains(5408:1003); REFINE { to AS65535 announce (AS5408:AS-GRNET-CUSTOMERS-PUBLIC-AS AND NOT AS5408:RS-ROUTES^0-32); to AS65535 announce (AS5408:AS-GRNET-CUSTOMERS-PRIVATE-AS AND NOT AS5408:RS-ROUTES^0-32); }
remarks:
remarks:
remarks:
remarks: # END OF ROUTING POLICY FOR GRNET
remarks:
remarks:
status: ASSIGNED
admin-c: DUMY-RIPE
tech-c: DUMY-RIPE
mnt-by: RIPE-NCC-END-MNT
mnt-by: GRNET-NOC
created: 1970-01-01T00:00:00Z
last-modified: 2021-12-31T11:31:18Z
source: RIPE
remarks: ****************************
remarks: * THIS OBJECT IS MODIFIED
remarks: * Please note that all data that is generally regarded as personal
remarks: * data has been removed from this object.
remarks: * To view the original object, please query the RIPE Database at:
remarks: * http://www.ripe.net/whois
remarks: ****************************