AS53062

User Tools

Site Tools

Trace: • policy • solicitacao-conexao-ix
policy

Differences

This shows you the differences between two versions of the page.


Previous revision
—policy [2025/11/22 22:57] (current) – noc
Line 1: Line 1:
 +===== Peering =====
 +
 +==== Autonomous System Number ====
 +AS53062
 +
 +==== Peering Policy ====
 +We have an open peering policy, and we welcome the opportunity to establish peering connections with any BGP operator, in an effort to improve the experience of our users.
 +
 +==== Peering Information ====
 +|ASN|AS53062|
 +|Suggested IPv4 Prefix Limit|4500|
 +|Suggested IPv6 Prefix Limit|2500|
 +|PeeringDB|http://as53062.peeringdb.com|
 +
 +==== Contact Information ====
 +|NOC Contact|<bgp@as53062.net.br>|
 +|Peering Contact|<bgp@as53062.net.br>|
 +
 +===== BGP Session Request or Prefix Release =====
 +Requests for BGP sessions or prefix releases must be made via email, following the templates at the link below:
 +
 +[[http://bgp.as53062.net.br/templates/solicitacoes-bgp|BGP Requests]]
 +
 +===== BGP Policies =====
 +
 +==== Internet Routing Registry ====
 +We keep our aut-num, as-set, route, and route6 objects updated in the IRR **ALTDB** database through **MAINT-AS53062**
 +
 +<code>
 +#aut-num
 +whois -h whois.radb.net AS53062
 +#as-set
 +whois -h whois.radb.net AS-53062
 +#route
 +whois -h whois.radb.net -i origin AS53062 -T route
 +#route6
 +whois -h whois.radb.net -i origin AS53062 -T route6
 +</code>
 +
 +https://irrexplorer.nlnog.net/asn/AS53062
 +
 +
 +==== BGP Session Types ====
 +^ PROFILE ^ DESCRIPTION ^ LOCAL_PREF ^
 +| Internal | originated prefixes | 7000 |
 +| Custumers | **IN**: accept_customer_prefix_aspath_list(); reject: Routes received in the session will **by default** be announced to our upstreams, our customers, our peering connections, IXs, and our CDNs. By default, the customer **cannot** manipulate this. \\ **OUT**: We announce to the customer the prefixes requested through the form (FULL or PARTIAL with or without DEFAULT). \\ *Check commercial agreement.| 6000 |
 +| Private Network Interconections (PNIs) | **IN**: Routes received in the session will **by default** be announced to our customers and our traffic exchange connections, and the customer **may** manipulate the announcements through [[policy#controle_de_propagacao|communities]]. \\ **OUT**: We announce to the partner our prefixes + customer prefixes + traffic exchange prefixes. | 5000 |
 +| Internet Exchange Points (IXPs) | **IN**: Routes received in the session are placed in our routing table with the LOCAL_PREF defined in the column to the right and are used for traffic forwarding. \\ **OUT**: We announce our prefixes and customer prefixes according to our traffic engineering definitions. | 4000 |
 +| Upstreams | **IN**: reject_bogon_asns(); reject_bogon_prefixes(); reject_small_prefixes(); accept: Routes received in the session are placed in our routing table with the LOCAL_PREF defined in the column to the right and are used for traffic forwarding. \\ **OUT**: We announce our prefixes and customer prefixes according to our traffic engineering definitions. | 100 |
 +
 +  * LOCAL_PREF is standard for each session type and cannot be changed through communities.
 +  * All sessions with the same neighboring AS will be adjusted for the same type of session. (e.g.: a customer cannot be peering and transit at the same time, it is either one or the other).
 +
 +==== MED ====
 +
 +Customers with multiple eBGP sessions with us may use the MED (Multi-Exit Discriminator) attribute to indicate their preferred ingress path between different circuits. This allows traffic entering our network to be directed to the desired circuit according to the MED values advertised by the customer. By default, lower MED values are preferred.
 +
 +==== BGP Communities ====
 +
 +=== RPKI (Resource Public Key Infrastructure) ===
 +^ Attribute ^ Internal Name ^
 +|53062:601 | rpki_valid | 
 +|53062:602 | rpki_invalid |
 +|53062:603 | rpki_unknown |
 +
 +Notes:
 +  * Invalid prefixes are rejected
 +
 +=== Blackhole Community ===
 +^ Attribute ^ Internal Name ^ Description ^
 +|53062:666 | blackhole | Redirects /32 prefix traffic to NULL0 and propagates the route to the internet |
 +|53062:665 | blackhole_internal | Redirects /32 prefix traffic to NULL0 without propagating it to the internet (For internal use only; customers cannot use it) |
 +
 +
 +Notes:
 +  * We only accept /32 prefixes in Blackhole.
 +  * The customer must tag the /32 prefix with community 53062:666
 +
 +=== DDoS Mitigation Service ===
 +  * The service works by monitoring potential traffic anomalies. When an anomaly is identified, primary triggers are activated to specifically filter the anomalous flow.
 +  * Secondary triggers may take blackhole action.
 +  * No community tagging is required for the mitigation service.
 +  * The service is not standard. It must be contracted.
 +
 +^ Attribute ^ Internal Name ^ Description ^
 +|53062:669 | ddos_filter_diversion | This community is informational only and indicates that the prefix was redirected to a mitigation center. | 
 +|53062:670 | fs_rib_only | This community prevents a flowspec rule from being installed on the FIB of the ASN routers. | 
 +
 +
 +
 +=== Internal Communities ===
 +
 +We tag all internal routes, from our customers, our upstreams, traffic exchange points, and private peerings using communities, allowing the customer to prioritize route selection:
 +
 +^ Attribute ^ Internal Name ^ Description ^
 +|Internal|||
 +|- 53062:10080 | mark_ourprefixes | Our prefixes    |
 +|Customers|||
 +|- 53062:10020 | mark_customers | Prefixes learned from a Customer    |
 +|Upstreams|||
 +|- 53062:10072 | mark_upstreams | Prefixes learned from an Upstream   |
 +|- - 53062:10074 | mark_level3    | Prefixes learned via Level3         |
 +|- - 53062:10075 | mark_internexa | Prefixes learned via Internexa      |
 +|- - 53062:10155 | mark_openx       | Prefixes learned via OpenX            |
 +|- - 53062:10087 | mark_sparkle       | Prefixes learned via Sparkle           |
 +|- - 53062:10094 | mark_tim       | Prefixes learned via Tim            |
 +|- - 53062:10120 | mark_algar       | Prefixes learned via Algar            |
 +|- - 53062:10132 | mark_angolacables       | Prefixes learned via Angola Cables            |
 +|- - 53062:10166 | mark_cogent       | Prefixes learned via Cogent            |
 +|- - 53062:10212 | mark_edgeuno       | Prefixes learned via EDGEUNO           |
 +|- - 53062:10257 | mark_globenet       | Prefixes learned via GLOBENET           |
 +|- - 53062:10307 | mark_vivo       | Prefixes learned via VIVO           |
 +|- - 53062:10323 | mark_eletronet       | Prefixes learned via ELETRONET           |
 +|- - 53062:10334 | mark_ufinet       | Prefixes learned via UFINET           |
 +|Internet Exange Points|||
 +|- 53062:10037 | mark_ixps      | Prefixes learned from an IXP        |
 +|- - 53062:10039 | mark_ixbrsc    | Prefixes learned via IX.Br-SC       |
 +|- - 53062:10043 | mark_ixbrsp    | Prefixes learned via IX.Br-SP       |
 +|- - 53062:10047 | mark_ixbrpr    | Prefixes learned via IX.Br-PR       |
 +|- - 53062:10062 | mark_ixbrrs    | Prefixes learned via IX.Br-RS       |
 +|- - 53062:10116 | mark_ixbrbnu    | Prefixes learned via IX.Furb-Blumenau |
 +|- - 53062:10135 | mark_ixbrpgo    | Prefixes learned via IX.Br-PGO |
 +|- - 53062:10151 | mark_ixbrfoz    | Prefixes learned via IX.Br-FOZ |
 +|- - 53062:10160 | mark_ixbrrj    | Prefixes learned via IX.Br-RJ |
 +|- - 53062:10190 | mark_ixbrcgr    | Prefixes learned via IX.Br-CGR |
 +|- - 53062:10216 | mark_ixbrdf    | Prefixes learned via IX.Br-DF |
 +|- - 53062:10234 | mark_ixbrcac    | Prefixes learned via IX.Br-CAC (Cascavel) |
 +|- - 53062:10238 | mark_ixbrmgf    | Prefixes learned via IX.Br-MGF (Maringá) |
 +|- - 53062:10249 | mark_ixbrmg    | Prefixes learned via IX.Br-MG (Belo Horizonte) |
 +|- - 53062:10281 | mark_ixbrsjc    | Prefixes learned via IX.Br-SJC (São José dos Campos) |
 +|- - 53062:10315 | mark_ixbrce    | Prefixes learned via IX.Br-CE (Fortaleza) |
 +|- - 53062:10327 | mark_ixbrcba    | Prefixes learned via IX.Br-CBA (Cuiaba) |
 +|- - 53062:10350 | mark_ixbrvta    | Prefixes learned via IX.Br-VTA (Vitória) |
 +|Private Network Interconections (PNIs)|||
 +|- 53062:10077 | mark_pnis      | Prefixes learned from a PNI      |
 +|- - 53062:10053 | mark_trocasdetrafego | Prefixes learned from PNI category "Traffic Exchange" |
 +|- - 53062:10055 | mark_facebookpni    | Prefixes learned via PNI with Facebook |
 +|- - 53062:10170 | mark_twitchpni    | Prefixes learned via PNI with Twitch |
 +|- - 53062:10172 | mark_steampni    | Prefixes learned via PNI with Steam |
 +|- - 53062:10174 | mark_verizonpni    | Prefixes learned via PNI with Verizon |
 +|- - 53062:10176 | mark_amazonpni    | Prefixes learned via PNI with Amazon |
 +|- - 53062:10178 | mark_cloudflarepni    | Prefixes learned via PNI with CloudFlare  |
 +|- - 53062:10180 | mark_netflixpni    | Prefixes learned via PNI with Netflix |
 +|- - 53062:10098 | mark_googlepni    | Prefixes learned via PNI with Google |
 +|- - 53062:10199 | mark_cdn77pni    | Prefixes learned via PNI with CDN77 |
 +|- - 53062:10202 | mark_maxihostpni    | Prefixes learned via PNI with Maxihost |
 +|- - 53062:10220 | mark_akamaipni    | Prefixes learned via PNI with Akamai |
 +|- - 53062:10230 | mark_stackpathpni    | Prefixes learned via PNI with Stackpath |
 +|- - 53062:10199 | mark_i3dpni    | Prefixes learned via PNI with I3d |
 +|- - 53062:10261 | mark_tiktokpni    | Prefixes learned via PNI with Tiktok |
 +|- - 53062:10268 | mark_microsoftpni    | Prefixes learned via PNI with Microsoft |
 +|- - 53062:10276 | mark_tencentcdnpni    | Prefixes learned via PNI with Tencent CDN |
 +|- - 53062:10285 | mark_globopni    | Prefixes learned via PNI with Globo |
 +|- - 53062:10294 | mark_fastlypni    | Prefixes learned via PNI with Fastly |
 +|- - 53062:10303 | mark_gamersclubpni    | Prefixes learned via PNI with Gamers Club |
 +
 +| CDNs |||
 +|- - 53062:10209 | mark_clouflarepop       | Prefixes learned from CloudFlare Micro POP   |
 +
 +
 +=== Propagation Control ===
 +
 +Some customers (depending on the contract) can control the propagation of their announcements by tagging their prefixes with the following communities:
 +
 +^ Attribute ^ Internal Name ^ Description ^
 +|Customers |||
 +|- 53062:50036 | no_export_to_customers | Do not announce to any customer  |
 +|Upstreams |||
 +|- 53062:50024 | no_export_to_upstreams | Do not announce to any Upstream |
 +|- - 53062:50026 | no_export_to_level3    | Do not announce to Level3        |
 +|- - 53062:50027 | no_export_to_internexa | Do not announce to Internexa     |
 +|- - 53062:50066 | no_export_to_openx       | Do not announce to OpenX           |
 +|- - 53062:50090 | no_export_to_sparkle       | Do not announce to Sparkle           |
 +|- - 53062:50095 | no_export_to_tim       | Do not announce to Tim           |
 +|- - 53062:50121 | no_export_to_algar       | Do not announce to Algar           |
 +|- - 53062:50131 | no_export_to_angolacables       | Do not announce to ANGOLA CABLES           |
 +|- - 53062:50167 | no_export_to_cogent       | Do not announce to Cogent          |
 +|- - 53062:50195 | no_export_to_embratel       | Do not announce to Embratel           |
 +|- - 53062:50213 | no_export_to_edgeuno       | Do not announce to EDGEUNO           |
 +|- - 53062:50258 | no_export_to_globenet       | Do not announce to GLOBENET           |
 +|- - 53062:50308 | no_export_to_vivo       | Do not announce to VIVO           |
 +|- - 53062:50324 | no_export_to_eletronet       | Do not announce to ELETRONET           |
 +|- - 53062:50335 | no_export_to_ufinet       | Do not announce to UFINET           |
 +|Internet Exange Points|||
 +|- 53062:50038 | no_export_to_ixps      | Do not announce to any IXP      |
 +|- - 53062:50040 | no_export_to_ixbrsc    | Do not announce to IX.Br-SC      |
 +|- - 53062:50044 | no_export_to_ixbrsp    | Do not announce to IX.Br-SP      |
 +|- - 53062:50048 | no_export_to_ixbrpr    | Do not announce to IX.Br-PR      |
 +|- - 53062:50063 | no_export_to_ixbrrs    | Do not announce to IX.Br-RS      |
 +|- - 53062:50119 | no_export_to_ixbrbnu    | Do not announce to IX.Furb-Blumenau |
 +|- - 53062:50138 | no_export_to_ixbrpgo    | Do not announce to IX.Br-PGO |
 +|- - 53062:50154 | no_export_to_ixbrfoz    | Do not announce to IX.Br-FOZ |
 +|- - 53062:50163 | no_export_to_ixbrrj    | Do not announce to IX.Br-RJ |
 +|- - 53062:50193 | no_export_to_ixbrcgr    | Do not announce to IX.Br-CGR |
 +|- - 53062:50219 | no_export_to_ixbrdf    | Do not announce to IX.Br-DF |
 +|- - 53062:50237 | no_export_to_ixbrcac    | Do not announce to IX.Br-CAC (Cascavel) |
 +|- - 53062:50241 | no_export_to_ixbrmgf    | Do not announce to IX.Br-MGF (Maringa) |
 +|- - 53062:50252 | no_export_to_ixbrmg    | Do not announce to IX.Br-MG (Belo Horizonte) |
 +|- - 53062:50283 | no_export_to_ixbrsjc    | Do not announce to IX.Br-SJC (São José dos Campos) |
 +|- - 53062:50316 | no_export_to_ixbrce    | Do not announce to IX.Br-CE (Fortaleza) |
 +|- - 53062:50330 | no_export_to_ixbrcba    | Do not announce to IX.Br-CBA (Cuiaba) |
 +|- - 53062:50352 | no_export_to_ixbrvta    | Do not announce to IX.Br-VTA (Vitória) |
 +|CDNs|||
 +|- 53062:50001 | no_export_to_cdns      | Do not announce to any CDN     |
 +|- - 53062:50005 | no_export_to_fna       | Do not announce to Facebook CDN    |
 +|- - 53062:50002 | no_export_to_ggc       | Do not announce to Google CDN      |
 +|- - 53062:50014 | no_export_to_oca       | Do not announce to Netflix CDN     |
 +|- - 53062:50083 | no_export_to_akamaibox | Do not announce to Akamai CDN      |
 +|- - 53062:50207 | no_export_to_clouflarepop       | Do not announce to CloudFlare Micro POP   |
 +|- - 53062:50273 | no_export_to_mcc       | Do not announce to Microsoft CDN   |
 +|Private Network Interconections (PNIs)|||
 +|- 53062:50051 | no_export_to_pnis      | Do not announce to any PNI      |
 +|- - 53062:50052 | no_export_to_trocasdetrafego | Do not announce to PNI category "Traffic Exchange" |
 +|- - 53062:50056 | no_export_to_facebookpni    | Do not announce to PNI with Facebook |
 +|- - 53062:50171 | no_export_to_twitchpni    | Do not announce to PNI with Twitch |
 +|- - 53062:50173 | no_export_to_steampni    | Do not announce to PNI with Steam |
 +|- - 53062:50175 | no_export_to_verizonpni    | Do not announce to PNI with Verizon |
 +|- - 53062:50177 | no_export_to_amazonpni    | Do not announce to PNI with Amazon |
 +|- - 53062:50179 | no_export_to_cloudflarepni    | Do not announce to PNI with CloudFlare |
 +|- - 53062:50181 | no_export_to_netflixpni    | Do not announce to PNI with Netflix |
 +|- - 53062:50100 | no_export_to_googlepni    | Do not announce to PNI with Google |
 +|- - 53062:50201 | no_export_to_cdn77pni    | Do not announce to PNI with CDN77 |
 +|- - 53062:50204 | no_export_to_maxihostpni    | Do not announce to PNI with Maxihost |
 +|- - 53062:50221 | no_export_to_akamaipni    | Do not announce to PNI with Akamai |
 +|- - 53062:50231 | no_export_to_stackpathpni    | Do not announce to PNI with Stackpath |
 +|- - 53062:50254 | no_export_to_i3dpni          | Do not announce to PNI with I3d |
 +|- - 53062:50262 | no_export_to_tiktokpni          | Do not announce to PNI with Tiktok |
 +|- - 53062:50269 | no_export_to_microsoftpni          | Do not announce to PNI with Microsoft |
 +|- - 53062:50277 | no_export_to_tencentcdnpni          | Do not announce to PNI with Tencent CDN |
 +|- - 53062:50286 | no_export_to_globopni          | Do not announce to PNI with Globo |
 +|- - 53062:50295 | no_export_to_fastlypni          | Do not announce to PNI with Fastly |
 +|- - 53062:50304 | no_export_to_gamersclubpni          | Do not announce to PNI with Gamers Club |
 +
 +  * Use our [[#looking_glass|LG]] to check the effectiveness of community tagging.
 +
 +**Attention:**
 +It is important to understand that "no_export_to_xxx" communities will prevent the prefix from being exported to "xxx" on our direct BGP session(s). This will **not** prevent the prefix from reaching "xxx" via other connections. Example: if applying no_export_to_twitchpni, the prefix will not reach Twitch through our direct connection, but it **may** reach there via another upstream.
 +
 +===== Looking Glass =====
 +
 +This tool allows routing (BGP protocol) queries and reachability and response time tests.
 +^ Address ^ Protocol ^ Notes ^
 +| http://lg.as53062.net.br | HTTP | |
 +| telnet://route-server.as53062.net.br | TELNET | Password: rviews |
 +
 +===== Inter-Network Operation Center Dial By Autonomous System Number =====
 +
 +Our team can be reached through the iNOC-DBA project
 +
 +Hotline Phone: **53062*100**
 +
 +http://inoc.nic.br/sobre/
 +http://inoc.nic.br/participantes/
 +
 +===== MANRS =====
 +https://manrs.org/
 +https://manrs.org/participant/1638/
 +
 + --- NOC Version: 2024062601
 + --- Author: Marcelo Balbinot
  
Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki