% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Information related to 'AS5377 - AS5535'
as-block: AS5377 - AS5535
descr: RIPE NCC ASN block
remarks: These AS Numbers are further assigned to network
remarks: operators in the RIPE NCC service region. AS
remarks: assignment policy is documented in:
remarks:
remarks: RIPE NCC members can request AS Numbers using the
remarks: form available in the LIR Portal or at:
remarks:
org: ORG-NCC1-RIPE
admin-c: CREW-RIPE
tech-c: RD132-RIPE
mnt-by: RIPE-DBM-MNT
mnt-lower: RIPE-NCC-HM-MNT
changed: hostmaster@ripe.net 20100511
source: RIPE
organisation: ORG-NCC1-RIPE
org-name: RIPE Network Coordination Center
org-type: RIR
address: RIPE NCC
Singel 258
1016 AB Amsterdam
Netherlands
phone: +31 20 535 4444
fax-no: +31 20 535 4445
e-mail: ncc@ripe.net
admin-c: AP110-RIPE
admin-c: CREW-RIPE
tech-c: CREW-RIPE
ref-nfy: hm-dbm-msgs@ripe.net
mnt-ref: RIPE-NCC-RIS-MNT
mnt-ref: RIPE-NCC-HM-MNT
notify: hm-dbm-msgs@ripe.net
mnt-by: RIPE-NCC-HM-MNT
changed: hostmaster@ripe.net 20040417
changed: hostmaster@ripe.net 20070319
changed: bitbucket@ripe.net 20110812
changed: bitbucket@ripe.net 20110812
changed: bitbucket@ripe.net 20110812
changed: bitbucket@ripe.net 20110812
changed: bitbucket@ripe.net 20110905
changed: bitbucket@ripe.net 20110915
changed: bitbucket@ripe.net 20110926
source: RIPE
role: RIPE NCC Registration Services Department
address: RIPE Network Coordination Centre
address: P.O. Box 10096
address: 1001 EB Amsterdam
address: the Netherlands
phone: +31 20 535 4444
fax-no: +31 20 535 4445
e-mail: hostmaster@ripe.net
org: ORG-NCC1-RIPE
admin-c: AdlH1-RIPE
admin-c: ACM2-RIPE
admin-c: IW112-RIPE
tech-c: TIM4-RIPE
tech-c: KL1200-RIPE
tech-c: XAV
tech-c: SD1131-RIPE
tech-c: SLON-RIPE
tech-c: ALEX
tech-c: ARNE
tech-c: DEV82-RIPE
tech-c: MSCH2-RIPE
tech-c: GAV
tech-c: MATT2
tech-c: DH2607-RIPE
tech-c: JK82-RIPE
tech-c: RR6599-RIPE
tech-c: GIAN123
tech-c: SG7828-RIPE
tech-c: JULA
nic-hdl: CREW-RIPE
abuse-mailbox: abuse@ripe.net
mnt-by: RIPE-NCC-HM-MNT
changed: hostmaster@ripe.net 20060602
changed: hostmaster@ripe.net 20110106
changed: hostmaster@ripe.net 20110621
source: RIPE
role: RIPE DBM
remarks: ****************************************************
remarks: Information about the RIPE Database can be found at:
remarks: http://www.ripe.net/db/index.html
remarks: ****************************************************
nic-hdl: RD132-RIPE
org: ORG-NCC1-RIPE
address: RIPE Network Coordination Centre
address: P.O. Box 10096
address: 1001 EB Amsterdam
address: The Netherlands
phone: +31 20 535 4444
fax-no: +31 20 535 4445
e-mail: ripe-dbm@ripe.net
abuse-mailbox: abuse@ripe.net
admin-c: DW-RIPE
tech-c: DW-RIPE
tech-c: INTY1-RIPE
tech-c: HAJ-RIPE
tech-c: GRUM-RIPE
tech-c: RIPE124-RIPE # Nagios stuff
tech-c: DUMY-RIPE # placeholder object for dummification
notify: ripe-dbm@ripe.net
mnt-by: RIPE-DBM-MNT
changed: ripe-dbm@ripe.net 19970115
changed: ripe-dbm@ripe.net 19970923
changed: ripe-dbm@ripe.net 19980211
changed: ripe-dbm@ripe.net 19990118
changed: ripe-dbm@ripe.net 19990727
changed: ripe-dbm@ripe.net 19990909
changed: ripe-dbm@ripe.net 20000101
changed: ripe-dbm@ripe.net 20010717
changed: ripe-dbm@ripe.net 20010810
changed: ripe-dbm@ripe.net 20020917
changed: ripe-dbm@ripe.net 20030723
changed: ripe-dbm@ripe.net 20050505
changed: ripe-dbm@ripe.net 20050613
changed: ripe-dbm@ripe.net 20060403
changed: ripe-dbm@ripe.net 20060428
changed: ripe-dbm@ripe.net 20070119
changed: ripe-dbm@ripe.net 20080630
changed: ripe-dbm@ripe.net 20090805
changed: ripe-dbm@ripe.net 20110802
source: RIPE
% Information related to 'AS5408'
aut-num: AS5408
as-name: GR-NET
descr: Greek Research & Technology Network, http://www.grnet.gr
remarks:
+####################################################################
+# ROUTING POLICY FOR GRNET AS5408) #
+####################################################################
+
+ General Info
+ ==============
+ GRNET donwstream customers are Greek Universities, Academic
+ and Research Institutes.
+ GRNET has GEANT as its upstream; it also connects to GRIX
+ Internet Exchange.
+
+ PA Space Aggregation
+ =============
+ GRNET aggregates its PA space before announcing it to its
+ upstream(s) and exchanges. Should a custemer with PA space
+ wishes not to have its prefexes aggregated, a special community
+ should be used to tag this route (see below).
+
+ Primary/Backup control
+ ========================
+ GRNET respects the MED received by its customers; thus, the
+ customers can indicate their primary/backup line and control
+ incoming traffic by setting MED appropriately. Also, the
+ customers may use the community 5408:110 to indicate their
+ backup connection (lower local pref), but this method is
+ recommended only for customers multihomed to another Greek ISP
+ that use their connection with GRNET as backup.
+
+ Anycast
+ ========================
+ GRNET does not follow any explicit policy for anycast services.
+ Normal routing (and, thus, preference) applies to all anycast
+ routes.
+
+ BGP Communities used in GRNET:
+ ================================
+
+ Informational Communities:
+ +---------------------------------------------------------------+
+ | These communities tag the source of the routes. They can ONLY |
+ | be appended by GRNET. Routes with this tag received by any |
+ | peer will be rejected! |
+ +---------------------------------------------------------------+
+ 5408:1001 Routes received from GEANT
+ 5408:1002 Routes received from GRIX
+ 5408:1003 Routes from GRNET (Customers & BackBone)
+
+ Routing Manipulation (for GRNET customers only):
+ +---------------------------------------------------------------+
+ | This set of tools allow GRNET clients to manipulate their |
+ | routing: |
+ | |
+ | Primary/Backup Link selection: The customers can indicate |
+ | their primary or backup link by setting MED appropriately. |
+ | Additionally, customers can tag their backup(s) with |
+ | community 5408:110. MED is the recommented way to affect |
+ | primary/backup routing; communities are meant to be used only |
+ | by customers that are multihomed to another Greek ISP and |
+ | they use the non-GRNET connection as primary. |
+ | |
+ | Announcement Control: GRNET customers can prevent |
+ | their routes from being announced to GEANT and GRIX by tagging|
+ | them with the appropriate community. |
+ +---------------------------------------------------------------+
+ 5408:110 Backup connection, set local pref to 110
+ 5480:666 no-export Blackhole all traffic TOWARDS this
+ (/32 ipv4 and /128 ipv6) route,
+ MUST be compined with "no-export"
+ 5408:2000 Do not aggregate (explicitely announce to
+ upstream and exchanges)
+ 5408:4001 Don't announce to GRIX
+ 5408:4005 Don't announce to GEANT
+
+
+ LOCAL PREFERENCES IN GRNET:
+ =============================
+
+ LocalPref 120: - GRNET Customers
+ - Special Customers (KROOT, SYZEYXIS, ...)
+ - Locally Generated GRNET Aggregates
+
+ LocalPref 115: - GRIX routes (MED=0 Primary, MED=20 Secondary)
+
+ LocalPref 110: - GRNET Customers, backup connection
+
+ LocalPref 100: - GEANT (MED=0 Primary, MED=20 Secondary)
+
+ ######################################################################
+
+
remarks:
+=======================================================================
+ iBGP (AS5408)
+ ----------------------------------------------------------------------
+ PEER DESCRIPTION:
+ Full-mesh iBGP peerings.
+ Import Policy: Blackhole routes tagged with 6408:666
+ Export Policy: Advertize (a) all routes (FIRT) or (b) GRNET & GRIX
+ routes only, depending on router capabilities.
+ ======================================================================
import: from prng-as5408-ibgp
accept ANY;
REFINE {
# Distributed black-hole routing
from prng-as5408-ibgp
accept community.contains(5408:666)
AND community.contains(NO_EXPORT);
# set next-hop = 192.168.0.1
# Normal routes
from prng-as5408-ibgp
accept ANY;
}
export: to prng-as5408-ibgp-part
announce {193.0.0.0/21} OR
(NOT community.contains(5408:1001) AND
NOT community.contains(5408:1006));
export: to prng-as5408-ibgp
announce ANY;
+
+
remarks:
+=======================================================================
+ GEANT (AS20965)
+ ----------------------------------------------------------------------
+ PEER DESCRIPTION:
+ GEANT is the Internet Upstream for GRNET
+ Import Policy: Accept all routes (apart from martians),
+ set MED appropriately on primary & backup peering.
+ Export Policy: Announce all GRNET routes (tagged with 5408:1003)
+ that are not tagged with 5408:4005 (don't-announce-to-geant).
+ Aggregate PA space (except from the routes tagged with
+ 5408:2000 (do not aggregate) community.
+=======================================================================
import: from AS20965
action community.append(5408:1001);
accept NOT community.contains(5408:1002)
AND NOT community.contains(5408:1003)
AND NOT community.contains(5408:1006)
AND NOT fltr-martian;
REFINE {
# GEANT Primary
from AS20965 62.40.124.89
accept ANY;
# GEANT Backup
from AS20965 62.40.124.141
action med=20;
accept ANY;
}
export: from AS20965
announce community.contains(5408:1003)
AND NOT community.contains(5408:4005);
REFINE {
to AS20965
announce AS5408:RS-ROUTES;
to AS20965
announce (AS5408:AS-TO-GEANT AND NOT AS5408:RS-ROUTES^0-32);
to AS20965
announce community.contains(5408:2000);
}
+
+
remarks:
+=======================================================================
+ GRIX Peers
+ ----------------------------------------------------------------------
+ PEER DESCRIPTION:
+ These are the GRIX Peers of GRNET
+ Import Policy: Reject routes tagged with special communities
+ Accept all other routes that
+ (a) have the appropriate AS path and
+ (b) originate from the peer (or behind it)
+ For these, and according to the received communities:
+ (i) Set the appropriate local preference
+ Export Policy: Announce all GRNET routes (tagged with 5408:1003)
+ that are not tagged with 5408:4001 (don't-announce-to-grix).
+ Aggregate PA space (except from the routes tagged with
+ 5408:2000 (do not aggregate) community.
+=======================================================================
import: from AS-GRIX
action pref=105; community.append(5408:1002);
accept NOT community.contains(5408:1001) AND
NOT community.contains(5408:1003) AND
NOT community.contains(5408:1006) AND
<^PeerAS+PeerAS:AS-TO-AIX*$>;
REFINE {
# Primary
from AS-GRIX at 83.212.8.1
action med=0;
accept ANY;
# Backup
from AS-GRIX at 83.212.8.31
action med=20;
accept ANY;
}
export: to prng-as5408-grix
announce community.contains(5408:1003)
AND NOT community.contains(5408:4001);
REFINE {
to prng-as5408-grix
announce AS5408:RS-ROUTES;
to prng-as5408-grix
announce (AS5408:AS-TO-AIX AND NOT AS5408:RS-ROUTES^0-32);
to prng-as5408-grix
announce community.contains(5408:2000);
}
+
+
remarks:
+=======================================================================
+ GRNET Clients
+ ----------------------------------------------------------------------
+ PEER DESCRIPTION:
+ These are the normal GRNET clients (Universities, Research orgs, etc)
+ Import Policy: Reject routes tagged with special communities
+ Accept all other routes that
+ (a) have the appropriate AS path and
+ (b) originate from the client (or behind it)
+ For these, and according to the received communities:
+ (i) Blackhole routes tagged with 6408:666
+ (cannot be described in RPSL, but it is implemented)
+ (ii) Set the appropriate local preference
+ Prefixes with no corresponding exact matching route on the
+ RIPE whois database are only accepted if tagged with NO_EXPORT
+ Local Preference (on backup links) can be lowered by
+ using the appropriate community (5408:110), but MED is
+ recommended for this purpose.
+ Export Policy:
+ (a) either all routes (FIRT)
+ (b) or a partial routing table, consiting
+ GRNET (5408:1003) and GRIX (5408:1002) routes.
+=======================================================================
import: from prng-as5408-grnet-customers
action pref=100; community.append(5408:1003);
accept NOT community.contains(5408:1001) AND
NOT community.contains(5408:1002) AND
NOT community.contains(5408:1006) AND
community.contains(5408:666) AND
community.contains(NO_EXPORT) AND
(PeerAS^32 OR PeerAS:AS-TO-GRNET^32) AND
<^PeerAS+PeerAS:AS-TO-GRNET*$>;
# set next-hop = 192.168.0.1
import: from prng-as5408-grnet-customers
action community.append(5408:1003);
accept NOT community.contains(5408:1001) AND
NOT community.contains(5408:1002) AND
NOT community.contains(5408:1006) AND
community.contains(NO_EXPORT) AND
(PeerAS^0-32 OR PeerAS:AS-TO-GRNET^0-32)
AND <^PeerAS+PeerAS:AS-TO-GRNET*$>;
REFINE {
from AS-ANY
action pref=110;
accept community.contains(5408:110);
from AS-ANY
action pref=100;
accept ANY;
}
import: from prng-as5408-grnet-customers
action community.append(5408:1003);
accept NOT community.contains(5408:1001) AND
NOT community.contains(5408:1002) AND
NOT community.contains(5408:1006) AND
(PeerAS OR PeerAS:AS-TO-GRNET) AND
<^PeerAS+PeerAS:AS-TO-GRNET*$>;
REFINE {
from AS-ANY
action aspath.prepend(AS5408,AS5408,AS5408,AS5408,AS5408);
accept community.contains(5408:2005);
from AS-ANY accept ANY;
}
REFINE {
from AS-ANY
action pref=110;
accept community.contains(5408:110);
from AS-ANY
action pref=100;
accept ANY;
}
export: to prng-as5408-grnet-firt
announce ANY;
export: to prng-as5408-grnet-customers
announce {193.0.0.0/21} OR
AS5408:RS-ROUTES OR
community.contains(5408:1002) OR
community.contains(5408:1003);
+
+
remarks:
+=======================================================================
+ K-ROOT mirror @ GRIX
+ ----------------------------------------------------------------------
+ PEER DESCRIPTION:
+ K-ROOT @ GRIX. Accept K-Root routes, announce within GRNET *only*
Announce default route.
+=======================================================================
import: from AS25152
action pref=105;
community.append(5408:1002);
community.append(5408:4001);
community.append(5408:4005);
community.append(5408:4006);
accept {193.0.14.0/24, 195.251.59.0/28}
AND NOT community.contains(5408:1001)
AND NOT community.contains(5408:1003)
AND NOT community.contains(5408:1006);
export: from AS25152
announce {0.0.0.0/00};
+
+
remarks:
+=======================================================================
+ AS112 Project @ GRNET
+ ----------------------------------------------------------------------
+ PEER DESCRIPTION:
+ AS112 Project. Announce nothing.
+=======================================================================
import: from AS112
action pref=100;
community.append(5408:1003);
accept (AS112) AND <^AS112+$> AND
NOT community.contains(5408:1001) AND
NOT community.contains(5408:1002) AND
NOT community.contains(5408:1006);
export: from AS112
announce NOT ANY;
+
+
remarks:
+=======================================================================
+ SYZEYXIS
+ ----------------------------------------------------------------------
+ PEER DESCRIPTION:
+ SYZEYXIS. announce GRNET routes, route within GRNET *only*.
+=======================================================================
import: from AS65052
action pref=100;
community.append(5408:1003);
community.append(5408:4001);
community.append(5408:4005);
community.append(5408:4006);
accept NOT community.contains(5408:1001) AND
NOT community.contains(5408:1002) AND
NOT community.contains(5408:1006) AND
(AS65052) AND <^AS65052+$>;
export: from AS65052
announce (AS5408:RS-ROUTES) OR
community.contains(5408:1002) OR
community.contains(5408:1003);
+
+
remarks:
+=======================================================================
+ AKAMAI
+ ----------------------------------------------------------------------
+ PEER DESCRIPTION:
+ AKAMAI. Accept no routes. Announce GRNET customers.
+=======================================================================
import: from AS21357
accept NOT ANY;
export: from AS21357
announce AS5408:RS-ROUTES OR
community.contains(5408:1002) OR
community.contains(5408:1003);
+
+
remarks:
+=======================================================================
+ ROUTE-COLLECTOR
+ ----------------------------------------------------------------------
+ PEER DESCRIPTION:
+ ROUTE-COLLECTOR. Accept no routes. Announce everything
+=======================================================================
import: from AS65501
accept NOT ANY;
export: from AS65501
announce ANY;
+
+
remarks:
+#######################################################################
+# END OF ROUTING POLICY FOR GRNET #
+#######################################################################
+
admin-c: GN1931-RIPE
tech-c: GN1931-RIPE
mnt-by: RIPE-NCC-END-MNT
mnt-by: GRNET-NOC
source: RIPE
changed: apolyr@noc.grnet.gr 20110330
changed: alioumis@noc.grnet.gr 20110908
changed: alioumis@noc.grnet.gr 20110926
role: GRNET NOC
org: ORG-GRaT1-RIPE
address: Greek Research and Technology Network (GRNET) S.A.
address: Messogeion 56
address: Athens 11527, GREECE
phone: +30 210 7474274
fax-no: +30 210 7474490
e-mail: noc@grnet.gr
remarks: --------------------------------------
remarks: For complains about abuse, spam etc:
abuse-mailbox: abuse@grnet.gr
remarks: --------------------------------------
admin-c: TC552-RIPE
admin-c: PT1566-RIPE
tech-c: YM412-RIPE
tech-c: AP3196-RIPE
tech-c: AL3706-RIPE
mnt-by: GRNET-NOC
nic-hdl: GN1931-RIPE
changed: A.Polyrakis@noc.ntua.gr 20070612
source: RIPE
|