AS5408
Автономная система. Кто держит, что анонсирует и с кем связан.
Соседи по BGP
Точки обмена трафиком 2 шт., PeeringDB
- GR-IX::Athens: Peering Lan
- 30 Гбит/с
- GR-IX::Thessaloniki: Peering LAN
- 10 Гбит/с
Анонсы
- IPv4 префиксов
- 39
- IPv6 префиксов
- 1
- транзитом
- v4 95, v6 32
Полный список: bgp.tools · bgp.he.net
Кто это RIPEstat + PeeringDB
- владелец
- GR-NET National Infrastructures for Research and Technology S.A.
- анонсирует
- да
- блок ASN
- 5377-5631, Assigned by RIPE NCC
- сайт
- www.grnet.gr
- тип сети
- Educational/Research
- пиринг
- Open
- AS-SET
- AS-GRNET
- трафик
- 20-50Gbps
- макс. префиксов
- v4 600, v6 40
Whois и регистратор RIPEstat
- сеть
- http://www.grnet.gr
- организация
- ORG-GRaT1-RIPE
- RIR
- RIPE NCC
- abuse
- abuse@grnet.gr
Сырой whois
aut-num 5408
as-name GR-NET
descr http://www.grnet.gr
org ORG-GRaT1-RIPE
remarks
remarks
remarks
remarks
remarks General Info
remarks ==============
remarks GRNET donwstream customers are Greek Universities, Academic
remarks and Research Institutes
remarks GRNET has GEANT as its upstream; it also connects to GRIX
remarks Internet Exchange
remarks
remarks RPKI in GRNET
remarks ==============
remarks GRNET ***drops*** ALL RPKI invalid prefixes received from Upstream
remarks and Greek Internet Exchange (GR-IX)
remarks
remarks PA Space Aggregation
remarks =============
remarks GRNET aggregates its PA space before announcing it to its
remarks upstream(s) and exchanges. Should a customer with PA space
remarks wishes not to have its prefixes aggregated, a special community
remarks should be used to tag this route (see below).
remarks Prefixes from GRNET allocation that announced from public ASs
remarks are announced deaggregated.\
remarks Prefix lengths longer than /24 for IPv4 and /48 for IPv6 are NOT
remarks announced to Upstream or GRIX
remarks
remarks Primary/Backup control
remarks ========================
remarks GRNET respects the MED received by its customers; thus, the
remarks customers can indicate their primary/backup line and control
remarks incoming traffic by setting MED appropriatelly. Also, the
remarks customers may use the community 5408:110 to indicate their
remarks backup connection (lower local pref), but this method is
remarks recommended only for customers multihomed to another Greek ISP
remarks that use their connection with GRNET as backup.
remarks
remarks Hot Potato routing
remarks ========================
remarks By setting the same attributes (Local Preference and MED) on
remarks advertising prefixes, a customer with more than one connections
remarks with GRNET has the ability to use all active paths.
remarks By this way, "hot potato" routing is achieved. Traffic will exit
remarks GRNETs network choosing the closest to destination border router.
remarks
remarks Anycast
remarks ========================
remarks GRNET does not follow any explicit policy for anycast services.
remarks Normal routing (and, thus, preference) applies to all anycast
remarks routes
remarks
remarks BGP Communities used in GRNET:
remarks ================================
remarks
remarks Informational Communities:
remarks +---------------------------------------------------------------+
remarks | These communities tag the source of the routes. They can ONLY |
remarks | be appended by GRNET. Routes with this tag received by any |
remarks | peer will be rejected! |
remarks +---------------------------------------------------------------+
remarks 5408:1001 Routes received from GEANT
remarks 5408:1002 Routes received from GRIX
remarks 5408:1003 Routes from GRNET (Customers & BackBone)
remarks 5408:1004 Routes from GEANT NREN
remarks 5408:1005 Routes from GEANT IAS
remarks 5408:1006 Routes from GEANT CLS
remarks
remarks Special Communities for route manipulation:
remarks +---------------------------------------------------------------+
remarks | These communities tag the source of the routes. They can ONLY |
remarks | be appended by GRNET. Routes with this tag received by any |
remarks | peer will be rejected! |
remarks +---------------------------------------------------------------+
remarks 5408:2000 Do not aggregate
remarks 5408:2005 Prepend AS5408 x5
remarks 5408:4001 Do not announce to GRIX
remarks 5408:4005 Do not announce to GEANT
remarks 5408:4006 Do not announce to GEANT NREN VRF
remarks 5408:4007 Do not announce to GEANT Tier-1
remarks
remarks Routing Manipulation (for GRNET customers only):
remarks +---------------------------------------------------------------+
remarks | This set of tools allow GRNET clients to manipulate their |
remarks | routing: |
remarks
remarks LOCAL PREFERENCES IN GRNET:
remarks =============================
remarks
remarks LocalPref 200: - GRNET Customers
remarks - Special Customers (KROOT, SYZEYXIS, ...)
remarks - Locally Generated GRNET Aggregates
remarks
remarks LocalPref 190: - GRNET Customers, backup connection
remarks
remarks LocalPref 180: - GEANT NREN VRF
remarks
remarks LocalPref 170: - GRIX routes (MED=0 Primary, MED=20 Secondary)
remarks
remarks LocalPref 160: - GEANT CLS VRF
remarks
remarks LocalPref 150: - GRNET as backup in dual homed customers
remarks
remarks LocalPref 140: - GEANT IAS VRF
remarks
remarks
remarks
remarks
remarks
remarks
remarks =======================================================================
remarks iBGP (AS5408)
remarks ----------------------------------------------------------------------
remarks PEER DESCRIPTION:
remarks Full-mesh iBGP peerings.
remarks Import Policy: Accept ANY
remarks Export Policy: Advertize (a) all routes (FIRT) or (b) GRNET & GRIX
remarks routes only, depending on router capabilities.
remarks ======================================================================
import from prng-as5408-ibgp accept ANY;
export to prng-as5408-ibgp-part announce community.contains(5408:1003) OR {0.0.0.0/0};
export to prng-as5408-ibgp announce ANY;
remarks =======================================================================
remarks GEANT (AS20965)
remarks ----------------------------------------------------------------------
remarks PEER DESCRIPTION:
remarks GEANT is the Internet Upstream for GRNET
remarks Import Policy: Accept all routes (apart from martians),
remarks set MED appropratelly on primary & backup peering.
remarks Export Policy: Announce all GRNET routes (tagged with 5408:1003)
remarks that are not tagged with 5408:4005 (don't-announce-to-geant).
remarks Aggregate PA space (except from the routes tagged with
remarks 5408:2000 (do not aggregate) community.
remarks =======================================================================
import from AS20965 62.40.124.89 action community.append(5408:1001); accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian; REFINE { from AS20965 action aspath.prepend(AS20965,AS20965,AS20965); accept community.contains(20965:7777); from AS20965 accept ANY; }
import from AS20965 62.40.124.141 action community.append(5408:1001); med=20; accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian; REFINE { from AS20965 action aspath.prepend(AS20965,AS20965,AS20965); accept community.contains(20965:7777); from AS20965 accept ANY; }
import from AS20965 62.40.102.252 action community.append(5408:1001); accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian;
import from AS20965 62.40.102.254 action community.append(5408:1001); med=20; accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian;
export to AS20965 announce AS5408:RS-ROUTES; REFINE { to AS20965 62.40.124.89 action community.append(20965:7030); announce ANY; to AS20965 62.40.124.141 action community.append(20965:7030); announce ANY; to AS20965 62.40.102.252 announce ANY; to AS20965 62.40.102.254 announce ANY; }
export to AS20965 announce community.contains(5408:1003) AND NOT community.contains(5408:4005); REFINE { to AS20965 announce (AS5408:AS-TO-GEANT AND NOT AS5408:RS-ROUTES^0-32); to AS20965 announce AS5408:RS-ROUTES^0-32 AND community.contains(5408:2000); } REFINE { to AS20965 62.40.124.89 action community.append(20965:7030); announce ANY; to AS20965 62.40.124.141 action community.append(20965:7030); announce ANY; to AS20965 62.40.102.252 announce ANY; to AS20965 62.40.102.254 announce ANY; }
remarks =======================================================================
remarks GRIX Peers
remarks ----------------------------------------------------------------------
remarks PEER DESCRIPTION:
remarks These are the GRIX Peers of GRNET
remarks Import Policy: Reject routes tagged with special communities
remarks Accept all other routes that
remarks (a) have the appropriate AS path and
remarks (b) originate from the peer (or behind it)
remarks For these, and according to the received communities:
remarks (i) Set the appropriate local preference
remarks Export Policy: Announce all GRNET routes (tagged with 5408:1003)
remarks that are not tagged with 5408:4001 (don't-announce-to-grix).
remarks Aggregate PA space (except from the routes tagged with
remarks 5408:2000 (do not aggregate) community.
remarks =======================================================================
import from prng-as5408-grix-peers action pref=105; community.append(5408:1002); accept NOT community.contains(5408:1001) AND NOT community.contains(5408:1003) AND <^PeerAS+AS5408:AS-GRIX:PeerAS*$>; REFINE { from AS-GRIX at 176.126.38.1 action med=0; accept ANY; from AS-GRIX at 176.126.38.31 action med=20; accept ANY; }
export to prng-as5408-grix-peers announce AS5408:RS-ROUTES OR AS199399;
export to prng-as5408-grix-peers announce community.contains(5408:1003) AND NOT community.contains(5408:4001); REFINE { to prng-as5408-grix-peers announce (AS5408:AS-TO-AIX AND NOT AS5408:RS-ROUTES^0-32); to prng-as5408-grix-peers announce AS5408:RS-ROUTES^0-32 AND community.contains(5408:2000); }
remarks =======================================================================
remarks GRIX RS
remarks ----------------------------------------------------------------------
remarks =======================================================================
import from AS50745 action pref=105; med=30; community.append(5408:1002); accept <^AS-GRIX> AND NOT community.contains(5408:1001) AND NOT community.contains(5408:1003);
remarks =======================================================================
remarks GRIX ROUTER @ GRIX
remarks ----------------------------------------------------------------------
remarks =======================================================================
import from AS199399 action pref=105; community.append(5408:1002); accept AS199399; REFINE { from AS-GRIX at 176.126.38.1 action med=0; accept ANY; from AS-GRIX at 176.126.38.31 action med=20; accept ANY; }
export to AS199399 announce community.contains(5408:1003) OR {0.0.0.0/0};
remarks =======================================================================
remarks K-ROOT mirror @ GRIX
remarks ----------------------------------------------------------------------
remarks PEER DESCRКарта связности 250 маршрутов RIS, 9 AS
Напрямую к Tier 1: 1, плюс 1 транзитных провайдеров. Нормальная связность для хостера среднего размера. Наведи на AS, чтобы подсветить её связи, кликни, чтобы открыть досье. Толщина линии — доля маршрутов.
Что тут вообще нарисовано
Origin — сеть, которая анонсирует префикс в BGP. Транзит — провайдер, которому origin платит за доставку трафика во весь интернет. Tier 1 — полтора десятка магистральных сетей (Lumen, Arelion, Cogent, NTT и компания), которые сами никому за транзит не платят: весь интернет они видят через бесплатный пиринг друг с другом. Многие маршруты доходят до кого-то из них, но не все: часть путей идёт через пиринг и региональные транзиты без Tier 1. На карте показаны только те пути, что доходят до Tier 1, или, если таких нет, первые четыре хопа.
Линии построены по реальным AS-путям, которые видят сотни BGP-пиров RIPE RIS по всему миру: от origin до первой Tier 1 на пути. Чем больше апстримов и чем толще связи с разными Tier 1, тем устойчивее сеть к падению одного провайдера. Российские сети часто выходят в мир через Ростелеком, ТТК, RETN или МегаФон, а не напрямую к Tier 1.
Смотреть там же: bgp.tools · bgp.he.net · PeeringDB · Cloudflare Radar · RIPEstat