@ -0,0 +1,155 @@ |
|||
# IPv4 Address Plan |
|||
|
|||
| Prefix | Usage | Routing | |
|||
| ---------------- | ----------------------------------------------- | -------------------------------- | |
|||
| 192.175.40.0/22 | Customer /32 (was acquired from LonsdaleNet) | Accept IPv4 /32 from Aggregation | |
|||
| 185.149.208.0/22 | Customer /32 (was acquired from LonsdaleNet) | Accept IPv4 /32 from Aggregation | |
|||
| 185.66.204.0/22 | Customer /32 (was acquired from Fibre WiFi) | Accept IPv4 /32 from Aggregation | |
|||
| 149.255.168.0/21 | Customer /32 (was acquired from Fibre WiFi) | Accept IPv4 /32 from Aggregation | |
|||
| 193.162.44.0/24 | Core and Loopbacks | (not announced to DFZ) | |
|||
| 172.22.0.0/16 | Management | Static | |
|||
| 172.22.0.0/24 | Infrastructure/Servers | Static /32, via Wireguard | |
|||
| 172.22.1.0/24 | OOB/Management at TN2 | Static /24, via Wireguard | |
|||
| 172.22.2.0/24 | OOB/Management at LD5 | Static /24, via Wireguard | |
|||
| 172.22.3.0/24 | OOB/Management at MA1 | Static /24, via Wireguard | |
|||
| 172.22.4.0/24 | OOB/Management at PUE | Static /24, via Wireguard | |
|||
| 100.64.0.0/10 | RFC6598 CGNAT for customer access | OSPF within agg network | |
|||
| 169.254.0.0/16 | Link-local addressing for linknets | Used to establish BGP to Core | |
|||
|
|||
## Core: Loopbacks and Linknets |
|||
|
|||
| Prefix | Usage | Routing | |
|||
| ----------------- | ----------------------------------------------- | -------------------------------- | |
|||
| 193.162.44.0/29 | Core Loopbacks, including blackhole destination | IS-IS; and to establish iBGP | |
|||
| 193.162.44.8/29 | Core Linknets | IS-IS core adjacencies | |
|||
| 193.162.44.16/28 | reserved for future Core Linknets | IS-IS core adjacencies | |
|||
| 193.162.44.32/27 | reserved for future Core Infrastructure | reserved | |
|||
| 193.162.44.64/26 | reserved for future Core Infrastructure | reserved | |
|||
| 193.162.44.128/25 | reserved for future Core Infrastructure | reserved | |
|||
|
|||
### Infrastructure Linknets to Aggregation Routers |
|||
|
|||
| Prefix | Usage | Routing | |
|||
| ------------------ | ----------------------------------------- | ------- | |
|||
| 169.254.0.0/21 | cr1.tn2 via NNC067 to aggregation routers | BGP | |
|||
| 169.254.64.0/21 | cr1.ld5 via NNC068 to aggregation routers | BGP | |
|||
| 169.254.128.0/21 | cr1.ma1 via NNC069 to aggregation routers | BGP | |
|||
| 169.254.192.0/21 | cr1.pue via NNC070 to aggregation routers | BGP | |
|||
|
|||
# IPv6 Address Plan |
|||
|
|||
| Prefix | Usage | Routing | |
|||
| -------------- | ------------------------------------------------ | --------------------------------------------- | |
|||
| 2a04:1840::/29 | Business Static /48 (can de-agg to /52) | Accept IPv6 /48-/52 from Aggregation | |
|||
| 2a0b:8640::/29 | Residential /56 (was acquired from Dyfed IT) | Accept IPv6 /40-/48 from Aggregation | |
|||
| 2a0d:a0c0::/29 | Residential /56 (was acquired from LonsdaleNET) | (will become like 2a0b:8640::/29 if required) | |
|||
| 2a10:f0c0::/29 | Core and Loopbacks (was acquired from FibreWiFi) | (not announced to DFZ) | |
|||
|
|||
## Core: Loopbacks and Linknets |
|||
|
|||
| Prefix | Usage | Routing | |
|||
| ------------------- | --------------------------- | -------------------- | |
|||
| 2a10:f0c0:0000::/48 | Core Linknets and Loopbacks | Some subnets may BGP | |
|||
| 2a10:f0c0:1000::/40 | BGP-speaking Infrastructure | Can speak BGP | |
|||
| 2a10:f0c0:1001::/48 | Infrastructure at TN2 | Can speak BGP | |
|||
| 2a10:f0c0:1002::/48 | Infrastructure at LD5 | Can speak BGP | |
|||
| 2a10:f0c0:1003::/48 | Infrastructure at MA1 | Can speak BGP | |
|||
| 2a10:f0c0:1004::/48 | Infrastructure at PUE | Can speak BGP | |
|||
|
|||
### Infrastructure Linknets to Aggregation Routers |
|||
|
|||
| Prefix | Usage | Routing | |
|||
| ----------------------------- | --------------------------------------------------------------- | ------- | |
|||
| 2a01:f0c0:1001:0001:0067::/80 | cr1.tn2 (1 from 193.162.44.1) via NNC067 to aggregation routers | BGP | |
|||
| 2a01:f0c0:1002:0002:0068::/80 | cr1.ld5 (2 from 193.162.44.2) via NNC068 to aggregation routers | BGP | |
|||
| 2a01:f0c0:1003:0003:0069::/80 | cr1.ma1 (3 from 193.162.44.3) via NNC069 to aggregation routers | BGP | |
|||
| 2a01:f0c0:1004:0004:0070::/80 | cr1.pue (4 from 193.162.44.4) via NNC070 to aggregation routers | BGP | |
|||
|
|||
Prefix scheme is `2a01:f0c0:10SS:CCCC:NNNN:YYYY:ZZZZ::/112` where: |
|||
|
|||
* `SS` = site |
|||
* `CCCC` = Core router IPv6 loopback last 16 bits |
|||
* `NNNN` = NNI number |
|||
* `YYYY` = outer VLAN tag (VLAN tag ordered with Neos goes here) |
|||
* `ZZZZ` = inner VLAN tag (if double-tagging for some future reason) |
|||
|
|||
Addressing within the prefix is as follows: |
|||
|
|||
* `::CCCC/112` = Core router loopback last 16 bits (e.g. `::1/112` through `::4/112`) |
|||
* `::a001/112` = Aggregation router 1 |
|||
* `::a002/112` = Aggregation router 2 (...etc) |
|||
|
|||
# BGP Communities |
|||
|
|||
## `59811:2` send to aggregation routers |
|||
|
|||
These are routes learned from ASNs that Voneus meets at 2 (or more) locations. |
|||
|
|||
## `59811:666` DDoS and blackhole |
|||
|
|||
Where: |
|||
|
|||
* `/24` = only send to Voxility |
|||
* `/32` = announce to RTBH on ixs/upstreams/UTRS |
|||
|
|||
## `65535:666` COMMUNITY-AS59811-BLACKHOLE |
|||
|
|||
## `59811:6500x` originated from site |
|||
|
|||
Where: |
|||
|
|||
* `x` is from: |
|||
- `0` = all |
|||
- `1` = TN2 |
|||
- `2` = LD5 |
|||
- `3` = MA1 |
|||
- `4` = PUE |
|||
|
|||
## `650xy:zzzzz` |
|||
|
|||
Where: |
|||
|
|||
* `x` is from: |
|||
- `0` = all |
|||
- `1` = TN2 |
|||
- `2` = LD5 |
|||
- `3` = MA1 |
|||
- `4` = PUE |
|||
* `y` is from: |
|||
- `0` = no-announce |
|||
- `1` = prepend 1 |
|||
- `2` = prepend 2 |
|||
- `3` = prepend 3 |
|||
- `9` = no-export |
|||
* `z` is ASN, where: |
|||
- `0` = any peer/upstream/downstream |
|||
- `1299` = Arelion |
|||
- `2914` = NTT |
|||
- `3223` = Voxility (NB see also 59811:666) |
|||
- `6762` = TISparkle |
|||
- `65511` = Tampnet (would be 200781) |
|||
- `65521` = LON1 |
|||
- `65522` = LON2 |
|||
- `65523` = LINX Manchester |
|||
- `65524` = LINX Scotland |
|||
- `65525` = LONAP |
|||
|
|||
# BGP Local Preferences |
|||
|
|||
## Transit |
|||
|
|||
* `100` => transit (de-pref) |
|||
* `200` => transit |
|||
* `300` => transit (up-pref) |
|||
|
|||
## Peering |
|||
|
|||
* `400` => peering (de-pref) - default for IX route-servers |
|||
* `500` => peering - default for direct sessions over IX |
|||
* `600` => peering (up-pref) - default for PNI |
|||
|
|||
## Customer |
|||
|
|||
* `700` => downstream (de-pref) |
|||
* `800` => downstream |
|||
* `900` => downstream (up-pref) |
@ -1,81 +0,0 @@ |
|||
|
|||
# IPv6 Address Plan |
|||
|
|||
2a04:1840::/29 Business Static /48-/52 (was acquired from FibreWiFi) |
|||
2a0b:8640::/29 Residential /56 (was acquired from Dyfed IT) Accept IPv6 /40-/48 from Aggregation |
|||
2a0d:a0c0::/29 Acquired from LonsdaleNET (will become like 2a0b:8640::/29 if required) |
|||
2a10:f0c0::/29 Core and Loopbacks (not announced to DFZ) |
|||
|
|||
2a10:f0c0::/48 Core Linknets and Loopbacks |
|||
2a01:f0c0:0001:0001:0067::/80 Linknets from cr1.tn2 (1 from 193.162.44.1) via NNC067 to Aggregation |
|||
2a01:f0c0:0002:0002:0068::/80 Linknets from cr1.ld5 (2 from 193.162.44.2) via NNC068 to Aggregation |
|||
2a01:f0c0:0003:0003:0069::/80 Linknets from cr1.ma1 (3 from 193.162.44.3) via NNC069 to Aggregation |
|||
2a01:f0c0:0004:0004:0070::/80 Linknets from cr1.pue (4 from 193.162.44.4) via NNC070 to Aggregation |
|||
|
|||
2a01:f0c0:ssss:cccc:nnnn:yyyy:zzzz:1/112 ssss = site |
|||
cccc = core router |
|||
nnnn = NNI number |
|||
yyyy = outer VLAN tag (S-tag, probably 0) |
|||
zzzz = inner VLAN tag (C-tag, Neos usual VLAN tagging) |
|||
::c001 = core |
|||
::a001 = agg |
|||
|
|||
# Communities |
|||
|
|||
59811:2 => routes learned from ASNs that Voneus meets at 2 (or more) locations |
|||
|
|||
59811:666 => /24 = only send to Voxility |
|||
/32 = announce to RTBH on ixs/upstreams/UTRS |
|||
|
|||
65535:666 => COMMUNITY-AS59811-BLACKHOLE |
|||
|
|||
59811:6500x => originated from site |
|||
| |
|||
x => 0 = all |
|||
1 = TN2 |
|||
2 = LD5 |
|||
3 = MA1 |
|||
4 = PUE |
|||
|
|||
650xy:zzzzz |
|||
|||| |
|||
x => 0 = all |
|||
| | 1 = TN2 |
|||
| | 2 = LD5 |
|||
| | 3 = MA1 |
|||
| | 4 = PUE |
|||
| | |
|||
y => 0 = no-announce |
|||
| 1 = prepend 1 |
|||
| 2 = prepend 2 |
|||
| 3 = prepend 3 |
|||
| 9 = no-export |
|||
| |
|||
zzzzz => 0 = any peer/upstream/downstream |
|||
1299 = Arelion |
|||
2914 = NTT |
|||
3223 = Voxility (NB see also 59811:666) |
|||
6762 = TISparkle |
|||
65511 = Tampnet (would be 200781) |
|||
|
|||
65521 = LON1 |
|||
65522 = LON2 |
|||
65523 = LINX Manchester |
|||
65524 = LINX Scotland |
|||
65525 = LONAP |
|||
|
|||
|
|||
|
|||
LOCAL PREFERENCES |
|||
|
|||
100 => transit (de-pref) |
|||
200 => transit |
|||
300 => transit (up-pref) |
|||
|
|||
400 => peering (de-pref) - default for IX route-servers |
|||
500 => peering - default for direct sessions over IX |
|||
600 => peering (up-pref) - default for PNI |
|||
|
|||
700 => downstream (de-pref) |
|||
800 => downstream |
|||
900 => downstream (up-pref) |