Тулзы

AS5408

Автономная система. Кто держит, что анонсирует и с кем связан.

Соседи по BGP

апстримы (5)
AS21320, AS20965, AS13335, AS3491, AS8280
клиенты (30)
AS8522, AS47065, AS50148, AS31563, AS8248, AS8581, AS8643, AS8762 и ещё 22

Точки обмена трафиком 2 шт., PeeringDB

GR-IX::Athens: Peering Lan
30 Гбит/с
GR-IX::Thessaloniki: Peering LAN
10 Гбит/с

Анонсы

IPv4 префиксов
39
IPv6 префиксов
1
транзитом
v4 95, v6 32

Полный список: bgp.tools · bgp.he.net

Кто это RIPEstat + PeeringDB

владелец
GR-NET National Infrastructures for Research and Technology S.A.
анонсирует
да
блок ASN
5377-5631, Assigned by RIPE NCC
сайт
www.grnet.gr
тип сети
Educational/Research
пиринг
Open
AS-SET
AS-GRNET
трафик
20-50Gbps
макс. префиксов
v4 600, v6 40

Whois и регистратор RIPEstat

сеть
http://www.grnet.gr
организация
ORG-GRaT1-RIPE
RIR
RIPE NCC
abuse
abuse@grnet.gr
Сырой whois
aut-num          5408
as-name          GR-NET
descr            http://www.grnet.gr
org              ORG-GRaT1-RIPE
remarks          
remarks          
remarks          
remarks          
remarks          General Info
remarks          ==============
remarks          GRNET donwstream customers are Greek Universities, Academic
remarks          and Research Institutes
remarks          GRNET has GEANT as its upstream; it also connects to GRIX
remarks          Internet Exchange
remarks          
remarks          RPKI in GRNET
remarks          ==============
remarks          GRNET ***drops*** ALL RPKI invalid prefixes received from Upstream
remarks          and Greek Internet Exchange (GR-IX)
remarks          
remarks          PA Space Aggregation
remarks          =============
remarks          GRNET aggregates its PA space before announcing it to its
remarks          upstream(s) and exchanges. Should a customer with PA space
remarks          wishes not to have its prefixes aggregated, a special community
remarks          should be used to tag this route (see below).
remarks          Prefixes from GRNET allocation that announced from public ASs
remarks          are announced deaggregated.\
remarks          Prefix lengths longer than /24 for IPv4 and /48 for IPv6 are NOT
remarks          announced to Upstream or GRIX
remarks          
remarks          Primary/Backup control
remarks          ========================
remarks          GRNET respects the MED received by its customers; thus, the
remarks          customers can indicate their primary/backup line and control
remarks          incoming traffic by setting MED appropriatelly. Also, the
remarks          customers may use the community 5408:110 to indicate their
remarks          backup connection (lower local pref), but this method is
remarks          recommended only for customers multihomed to another Greek ISP
remarks          that use their connection with GRNET as backup.
remarks          
remarks          Hot Potato routing
remarks          ========================
remarks          By setting the same attributes (Local Preference and MED) on
remarks          advertising prefixes, a customer with more than one connections
remarks          with GRNET has the ability to use all active paths.
remarks          By this way, "hot potato" routing is achieved. Traffic will exit
remarks          GRNETs network choosing the closest to destination border router.
remarks          
remarks          Anycast
remarks          ========================
remarks          GRNET does not follow any explicit policy for anycast services.
remarks          Normal routing (and, thus, preference) applies to all anycast
remarks          routes
remarks          
remarks          BGP Communities used in GRNET:
remarks          ================================
remarks          
remarks          Informational Communities:
remarks          +---------------------------------------------------------------+
remarks          | These communities tag the source of the routes. They can ONLY |
remarks          | be appended by GRNET. Routes with this tag received by any |
remarks          | peer will be rejected! |
remarks          +---------------------------------------------------------------+
remarks          5408:1001 Routes received from GEANT
remarks          5408:1002 Routes received from GRIX
remarks          5408:1003 Routes from GRNET (Customers & BackBone)
remarks          5408:1004 Routes from GEANT NREN
remarks          5408:1005 Routes from GEANT IAS
remarks          5408:1006 Routes from GEANT CLS
remarks          
remarks          Special Communities for route manipulation:
remarks          +---------------------------------------------------------------+
remarks          | These communities tag the source of the routes. They can ONLY |
remarks          | be appended by GRNET. Routes with this tag received by any |
remarks          | peer will be rejected! |
remarks          +---------------------------------------------------------------+
remarks          5408:2000 Do not aggregate
remarks          5408:2005 Prepend AS5408 x5
remarks          5408:4001 Do not announce to GRIX
remarks          5408:4005 Do not announce to GEANT
remarks          5408:4006 Do not announce to GEANT NREN VRF
remarks          5408:4007 Do not announce to GEANT Tier-1
remarks          
remarks          Routing Manipulation (for GRNET customers only):
remarks          +---------------------------------------------------------------+
remarks          | This set of tools allow GRNET clients to manipulate their |
remarks          | routing: |
remarks          
remarks          LOCAL PREFERENCES IN GRNET:
remarks          =============================
remarks          
remarks          LocalPref 200: - GRNET Customers
remarks          - Special Customers (KROOT, SYZEYXIS, ...)
remarks          - Locally Generated GRNET Aggregates
remarks          
remarks          LocalPref 190: - GRNET Customers, backup connection
remarks          
remarks          LocalPref 180: - GEANT NREN VRF
remarks          
remarks          LocalPref 170: - GRIX routes (MED=0 Primary, MED=20 Secondary)
remarks          
remarks          LocalPref 160: - GEANT CLS VRF
remarks          
remarks          LocalPref 150: - GRNET as backup in dual homed customers
remarks          
remarks          LocalPref 140: - GEANT IAS VRF
remarks          
remarks          
remarks          
remarks          
remarks          
remarks          
remarks          =======================================================================
remarks          iBGP (AS5408)
remarks          ----------------------------------------------------------------------
remarks          PEER DESCRIPTION:
remarks          Full-mesh iBGP peerings.
remarks          Import Policy: Accept ANY
remarks          Export Policy: Advertize (a) all routes (FIRT) or (b) GRNET & GRIX
remarks          routes only, depending on router capabilities.
remarks          ======================================================================
import           from prng-as5408-ibgp accept ANY;
export           to prng-as5408-ibgp-part announce community.contains(5408:1003) OR {0.0.0.0/0};
export           to prng-as5408-ibgp announce ANY;
remarks          =======================================================================
remarks          GEANT (AS20965)
remarks          ----------------------------------------------------------------------
remarks          PEER DESCRIPTION:
remarks          GEANT is the Internet Upstream for GRNET
remarks          Import Policy: Accept all routes (apart from martians),
remarks          set MED appropratelly on primary & backup peering.
remarks          Export Policy: Announce all GRNET routes (tagged with 5408:1003)
remarks          that are not tagged with 5408:4005 (don't-announce-to-geant).
remarks          Aggregate PA space (except from the routes tagged with
remarks          5408:2000 (do not aggregate) community.
remarks          =======================================================================
import           from AS20965 62.40.124.89 action community.append(5408:1001); accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian; REFINE { from AS20965 action aspath.prepend(AS20965,AS20965,AS20965); accept community.contains(20965:7777); from AS20965 accept ANY; }
import           from AS20965 62.40.124.141 action community.append(5408:1001); med=20; accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian; REFINE { from AS20965 action aspath.prepend(AS20965,AS20965,AS20965); accept community.contains(20965:7777); from AS20965 accept ANY; }
import           from AS20965 62.40.102.252 action community.append(5408:1001); accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian;
import           from AS20965 62.40.102.254 action community.append(5408:1001); med=20; accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian;
export           to AS20965 announce AS5408:RS-ROUTES; REFINE { to AS20965 62.40.124.89 action community.append(20965:7030); announce ANY; to AS20965 62.40.124.141 action community.append(20965:7030); announce ANY; to AS20965 62.40.102.252 announce ANY; to AS20965 62.40.102.254 announce ANY; }
export           to AS20965 announce community.contains(5408:1003) AND NOT community.contains(5408:4005); REFINE { to AS20965 announce (AS5408:AS-TO-GEANT AND NOT AS5408:RS-ROUTES^0-32); to AS20965 announce AS5408:RS-ROUTES^0-32 AND community.contains(5408:2000); } REFINE { to AS20965 62.40.124.89 action community.append(20965:7030); announce ANY; to AS20965 62.40.124.141 action community.append(20965:7030); announce ANY; to AS20965 62.40.102.252 announce ANY; to AS20965 62.40.102.254 announce ANY; }
remarks          =======================================================================
remarks          GRIX Peers
remarks          ----------------------------------------------------------------------
remarks          PEER DESCRIPTION:
remarks          These are the GRIX Peers of GRNET
remarks          Import Policy: Reject routes tagged with special communities
remarks          Accept all other routes that
remarks          (a) have the appropriate AS path and
remarks          (b) originate from the peer (or behind it)
remarks          For these, and according to the received communities:
remarks          (i) Set the appropriate local preference
remarks          Export Policy: Announce all GRNET routes (tagged with 5408:1003)
remarks          that are not tagged with 5408:4001 (don't-announce-to-grix).
remarks          Aggregate PA space (except from the routes tagged with
remarks          5408:2000 (do not aggregate) community.
remarks          =======================================================================
import           from prng-as5408-grix-peers action pref=105; community.append(5408:1002); accept NOT community.contains(5408:1001) AND NOT community.contains(5408:1003) AND <^PeerAS+AS5408:AS-GRIX:PeerAS*$>; REFINE { from AS-GRIX at 176.126.38.1 action med=0; accept ANY; from AS-GRIX at 176.126.38.31 action med=20; accept ANY; }
export           to prng-as5408-grix-peers announce AS5408:RS-ROUTES OR AS199399;
export           to prng-as5408-grix-peers announce community.contains(5408:1003) AND NOT community.contains(5408:4001); REFINE { to prng-as5408-grix-peers announce (AS5408:AS-TO-AIX AND NOT AS5408:RS-ROUTES^0-32); to prng-as5408-grix-peers announce AS5408:RS-ROUTES^0-32 AND community.contains(5408:2000); }
remarks          =======================================================================
remarks          GRIX RS
remarks          ----------------------------------------------------------------------
remarks          =======================================================================
import           from AS50745 action pref=105; med=30; community.append(5408:1002); accept <^AS-GRIX> AND NOT community.contains(5408:1001) AND NOT community.contains(5408:1003);
remarks          =======================================================================
remarks          GRIX ROUTER @ GRIX
remarks          ----------------------------------------------------------------------
remarks          =======================================================================
import           from AS199399 action pref=105; community.append(5408:1002); accept AS199399; REFINE { from AS-GRIX at 176.126.38.1 action med=0; accept ANY; from AS-GRIX at 176.126.38.31 action med=20; accept ANY; }
export           to AS199399 announce community.contains(5408:1003) OR {0.0.0.0/0};
remarks          =======================================================================
remarks          K-ROOT mirror @ GRIX
remarks          ----------------------------------------------------------------------
remarks          PEER DESCR

Карта связности 250 маршрутов RIS, 9 AS

Напрямую к Tier 1: 1, плюс 1 транзитных провайдеров. Нормальная связность для хостера среднего размера. Наведи на AS, чтобы подсветить её связи, кликни, чтобы открыть досье. Толщина линии — доля маршрутов.

Originанонсирует префиксТранзитпрямые апстримыТранзитдальше по цепочкеTier 1без транзитаAS2603 → AS3491: <1% маршрутовAS2603 → AS6830: <1% маршрутовAS2603 → AS2914: 2% маршрутовAS5408 → AS3491: 2% маршрутовAS21320 → AS2603: 3% маршрутовAS21320 → AS6461: 7% маршрутовAS21320 → AS3356: 41% маршрутовAS21320 → AS174: 47% маршрутовAS5408 → AS21320: 98% маршрутовAS5408 GR-NET National Infrastructures for Research and Technology S.A., GR origin, анонсирует префиксAS5408National Infrastructu…AS3356 LEVEL3 - Level 3 Parent, LLC, US Tier 1: транзит не покупает, видит весь интернет через пирингAS3356LumenAS174 COGENT-174 - Cogent Communications, LLC, US Tier 1: транзит не покупает, видит весь интернет через пирингAS174CogentAS6461 ZAYO-6461 - Zayo Bandwidth, US Tier 1: транзит не покупает, видит весь интернет через пирингAS6461ZayoAS3491 PCCWG-APAC-HK - PCCW Global (HK) Ltd., HK Tier 1: транзит не покупает, видит весь интернет через пирингAS3491PCCWAS6830 LibertyGlobal Liberty Global Europe Holding B.V., NL Tier 1: транзит не покупает, видит весь интернет через пирингAS6830Liberty GlobalAS2914 NTT-DATA-2914 - NTT America, Inc., US Tier 1: транзит не покупает, видит весь интернет через пирингAS2914NTTAS21320 GEANT_IAS_VRF GEANT Vereniging, NL транзит, прямой апстрим в 98% путейAS21320GEANT VerenigingAS2603 NORDUNET NORDUnet, DK транзит дальше по цепочкеAS2603NORDUnet
Прямые апстримы

AS21320 GEANT Vereniging — 98%
AS3491 PCCW T1 — 2%

Что тут вообще нарисовано

Origin — сеть, которая анонсирует префикс в BGP. Транзит — провайдер, которому origin платит за доставку трафика во весь интернет. Tier 1 — полтора десятка магистральных сетей (Lumen, Arelion, Cogent, NTT и компания), которые сами никому за транзит не платят: весь интернет они видят через бесплатный пиринг друг с другом. Многие маршруты доходят до кого-то из них, но не все: часть путей идёт через пиринг и региональные транзиты без Tier 1. На карте показаны только те пути, что доходят до Tier 1, или, если таких нет, первые четыре хопа.

Линии построены по реальным AS-путям, которые видят сотни BGP-пиров RIPE RIS по всему миру: от origin до первой Tier 1 на пути. Чем больше апстримов и чем толще связи с разными Tier 1, тем устойчивее сеть к падению одного провайдера. Российские сети часто выходят в мир через Ростелеком, ТТК, RETN или МегаФон, а не напрямую к Tier 1.

Смотреть там же: bgp.tools · bgp.he.net · PeeringDB · Cloudflare Radar · RIPEstat