as-block: AS5377 - AS5535 descr: RIPE NCC ASN block remarks: These AS Numbers are assigned to network operators in the RIPE NCC service region. mnt-by: RIPE-NCC-HM-MNT created: 2018-11-22T15:27:22Z last-modified: 2018-11-22T15:27:22Z source: RIPE % Information related to 'AS5408' % Abuse contact for 'AS5408' is 'abuse@grnet.gr' aut-num: AS5408 as-name: GR-NET descr: http://www.grnet.gr org: ORG-GRaT1-RIPE remarks: remarks: remarks: # ROUTING POLICY FOR GRNET AS5408) remarks: remarks: General Info remarks: ============== remarks: GRNET donwstream customers are Greek Universities, Academic remarks: and Research Institutes remarks: GRNET has GEANT as its upstream; it also connects to GRIX remarks: Internet Exchange remarks: remarks: RPKI in GRNET remarks: ============== remarks: GRNET ***drops*** ALL RPKI invalid prefixes received from Upstream remarks: and Greek Internet Exchange (GR-IX) remarks: remarks: PA Space Aggregation remarks: ============= remarks: GRNET aggregates its PA space before announcing it to its remarks: upstream(s) and exchanges. Should a customer with PA space remarks: wishes not to have its prefixes aggregated, a special community remarks: should be used to tag this route (see below). remarks: Prefixes from GRNET allocation that announced from public ASs remarks: are announced deaggregated.\ remarks: Prefix lengths longer than /24 for IPv4 and /48 for IPv6 are NOT remarks: announced to Upstream or GRIX remarks: remarks: Primary/Backup control remarks: ======================== remarks: GRNET respects the MED received by its customers; thus, the remarks: customers can indicate their primary/backup line and control remarks: incoming traffic by setting MED appropriatelly. Also, the remarks: customers may use the community 5408:110 to indicate their remarks: backup connection (lower local pref), but this method is remarks: recommended only for customers multihomed to another Greek ISP remarks: that use their connection with GRNET as backup. remarks: remarks: Hot Potato routing remarks: ======================== remarks: By setting the same attributes (Local Preference and MED) on remarks: advertising prefixes, a customer with more than one connections remarks: with GRNET has the ability to use all active paths. remarks: By this way, "hot potato" routing is achieved. Traffic will exit remarks: GRNETs network choosing the closest to destination border router. remarks: remarks: Anycast remarks: ======================== remarks: GRNET does not follow any explicit policy for anycast services. remarks: Normal routing (and, thus, preference) applies to all anycast remarks: routes remarks: remarks: BGP Communities used in GRNET: remarks: ================================ remarks: remarks: Informational Communities: remarks: +---------------------------------------------------------------+ remarks: | These communities tag the source of the routes. They can ONLY | remarks: | be appended by GRNET. Routes with this tag received by any | remarks: | peer will be rejected! | remarks: +---------------------------------------------------------------+ remarks: 5408:1001 Routes received from GEANT remarks: 5408:1002 Routes received from GRIX remarks: 5408:1003 Routes from GRNET (Customers & BackBone) remarks: 5408:1004 Routes from GEANT NREN remarks: 5408:1005 Routes from GEANT IAS remarks: 5408:1006 Routes from GEANT CLS remarks: remarks: Special Communities for route manipulation: remarks: +---------------------------------------------------------------+ remarks: | These communities tag the source of the routes. They can ONLY | remarks: | be appended by GRNET. Routes with this tag received by any | remarks: | peer will be rejected! | remarks: +---------------------------------------------------------------+ remarks: 5408:2000 Do not aggregate remarks: 5408:2005 Prepend AS5408 x5 remarks: 5408:4001 Do not announce to GRIX remarks: 5408:4005 Do not announce to GEANT remarks: 5408:4006 Do not announce to GEANT NREN VRF remarks: 5408:4007 Do not announce to GEANT Tier-1 remarks: remarks: Routing Manipulation (for GRNET customers only): remarks: +---------------------------------------------------------------+ remarks: | This set of tools allow GRNET clients to manipulate their | remarks: | routing: | remarks: remarks: LOCAL PREFERENCES IN GRNET: remarks: ============================= remarks: remarks: LocalPref 200: - GRNET Customers remarks: - Special Customers (KROOT, SYZEYXIS, ...) remarks: - Locally Generated GRNET Aggregates remarks: remarks: LocalPref 190: - GRNET Customers, backup connection remarks: remarks: LocalPref 180: - GEANT NREN VRF remarks: remarks: LocalPref 170: - GRIX routes (MED=0 Primary, MED=20 Secondary) remarks: remarks: LocalPref 160: - GEANT CLS VRF remarks: remarks: LocalPref 150: - GRNET as backup in dual homed customers remarks: remarks: LocalPref 140: - GEANT IAS VRF remarks: remarks: remarks: remarks: remarks: remarks: remarks: ======================================================================= remarks: iBGP (AS5408) remarks: ---------------------------------------------------------------------- remarks: PEER DESCRIPTION: remarks: Full-mesh iBGP peerings. remarks: Import Policy: Accept ANY remarks: Export Policy: Advertize (a) all routes (FIRT) or (b) GRNET & GRIX remarks: routes only, depending on router capabilities. remarks: ====================================================================== import: from prng-as5408-ibgp accept ANY; export: to prng-as5408-ibgp-part announce community.contains(5408:1003) OR {0.0.0.0/0}; export: to prng-as5408-ibgp announce ANY; remarks: ======================================================================= remarks: GEANT (AS20965) remarks: ---------------------------------------------------------------------- remarks: PEER DESCRIPTION: remarks: GEANT is the Internet Upstream for GRNET remarks: Import Policy: Accept all routes (apart from martians), remarks: set MED appropratelly on primary & backup peering. remarks: Export Policy: Announce all GRNET routes (tagged with 5408:1003) remarks: that are not tagged with 5408:4005 (don't-announce-to-geant). remarks: Aggregate PA space (except from the routes tagged with remarks: 5408:2000 (do not aggregate) community. remarks: ======================================================================= import: from AS20965 62.40.124.89 action community.append(5408:1001); accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian; REFINE { from AS20965 action aspath.prepend(AS20965,AS20965,AS20965); accept community.contains(20965:7777); from AS20965 accept ANY; } import: from AS20965 62.40.124.141 action community.append(5408:1001); med=20; accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian; REFINE { from AS20965 action aspath.prepend(AS20965,AS20965,AS20965); accept community.contains(20965:7777); from AS20965 accept ANY; } import: from AS20965 62.40.102.252 action community.append(5408:1001); accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian; import: from AS20965 62.40.102.254 action community.append(5408:1001); med=20; accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian; export: to AS20965 announce AS5408:RS-ROUTES; REFINE { to AS20965 62.40.124.89 action community.append(20965:7030); announce ANY; to AS20965 62.40.124.141 action community.append(20965:7030); announce ANY; to AS20965 62.40.102.252 announce ANY; to AS20965 62.40.102.254 announce ANY; } export: to AS20965 announce community.contains(5408:1003) AND NOT community.contains(5408:4005); REFINE { to AS20965 announce (AS5408:AS-TO-GEANT AND NOT AS5408:RS-ROUTES^0-32); to AS20965 announce AS5408:RS-ROUTES^0-32 AND community.contains(5408:2000); } REFINE { to AS20965 62.40.124.89 action community.append(20965:7030); announce ANY; to AS20965 62.40.124.141 action community.append(20965:7030); announce ANY; to AS20965 62.40.102.252 announce ANY; to AS20965 62.40.102.254 announce ANY; } remarks: ======================================================================= remarks: GRIX Peers remarks: ---------------------------------------------------------------------- remarks: PEER DESCRIPTION: remarks: These are the GRIX Peers of GRNET remarks: Import Policy: Reject routes tagged with special communities remarks: Accept all other routes that remarks: (a) have the appropriate AS path and remarks: (b) originate from the peer (or behind it) remarks: For these, and according to the received communities: remarks: (i) Set the appropriate local preference remarks: Export Policy: Announce all GRNET routes (tagged with 5408:1003) remarks: that are not tagged with 5408:4001 (don't-announce-to-grix). remarks: Aggregate PA space (except from the routes tagged with remarks: 5408:2000 (do not aggregate) community. remarks: ======================================================================= import: from prng-as5408-grix-peers action pref=105; community.append(5408:1002); accept NOT community.contains(5408:1001) AND NOT community.contains(5408:1003) AND <^PeerAS+AS5408:AS-GRIX:PeerAS*$>; REFINE { from AS-GRIX at 176.126.38.1 action med=0; accept ANY; from AS-GRIX at 176.126.38.31 action med=20; accept ANY; } # AND (PeerAS^0-27 OR AS5408:AS-GRIX:PeerAS^0-27 OR AS5408:AS-GRIX:PeerAS^0-27); Primary-Backup export: to prng-as5408-grix-peers announce AS5408:RS-ROUTES OR AS199399; export: to prng-as5408-grix-peers announce community.contains(5408:1003) AND NOT community.contains(5408:4001); REFINE { to prng-as5408-grix-peers announce (AS5408:AS-TO-AIX AND NOT AS5408:RS-ROUTES^0-32); to prng-as5408-grix-peers announce AS5408:RS-ROUTES^0-32 AND community.contains(5408:2000); } remarks: ======================================================================= remarks: GRIX RS remarks: ---------------------------------------------------------------------- remarks: ======================================================================= import: from AS50745 action pref=105; med=30; community.append(5408:1002); accept <^AS-GRIX> AND NOT community.contains(5408:1001) AND NOT community.contains(5408:1003); remarks: ======================================================================= remarks: GRIX ROUTER @ GRIX remarks: ---------------------------------------------------------------------- remarks: ======================================================================= import: from AS199399 action pref=105; community.append(5408:1002); accept AS199399; REFINE { from AS-GRIX at 176.126.38.1 action med=0; accept ANY; from AS-GRIX at 176.126.38.31 action med=20; accept ANY; } # Primary-Backup export: to AS199399 announce community.contains(5408:1003) OR {0.0.0.0/0}; remarks: ======================================================================= remarks: K-ROOT mirror @ GRIX remarks: ---------------------------------------------------------------------- remarks: PEER DESCRIPTION: remarks: K-ROOT @ GRIX. Accept K-Root routes, announce within GRNET *only* remarks: Announce default route. remarks: ======================================================================= import: from AS25152 action pref=105; community.append(5408:1002); community.append(5408:4001); community.append(5408:4005); accept {193.0.14.0/24, 195.251.59.0/28} AND NOT community.contains(5408:1001) AND NOT community.contains(5408:1003); REFINE { from AS-GRIX at 176.126.38.1 action med=0; accept ANY; from AS-GRIX at 176.126.38.31 action med=20; accept ANY; } # Primary-Backup export: to AS25152 announce {0.0.0.0/0}; remarks: ======================================================================= remarks: GRNET Clients remarks: ---------------------------------------------------------------------- remarks: PEER DESCRIPTION: remarks: These are the normal GRNET clients (Universities, Research orgs, etc) remarks: Import Policy: Reject routes tagged with special communities remarks: Accept all other routes that remarks: (a) have the appropriate AS path and remarks: (b) originate from the client (or behind it) remarks: For these, and according to the received communities: remarks: (i) Set the appropriate local preference remarks: Prefixes with no corresponding exact matching route on the remarks: RIPE whois database are only accepted if tagged with NO_EXPORT remarks: Local Preference (on backup links) can be lowered by remarks: using the appropriate community (5408:110), but MED is remarks: recommended for this purpose. remarks: Export Policy: remarks: (a) either all routes (FIRT) remarks: (b) or a partial routing table, consiting remarks: GRNET (5408:1003) and GRIX (5408:1002) routes remarks: (c) or a partial routing table, consiting remarks: GRNET (5408:1003) and GRIX (5408:1002) routes plus default route 0/0. remarks: (d) or default route 0/0. remarks: ======================================================================= import: from prng-as5408-grnet-customers action community.append(5408:1003); accept NOT community.contains(5408:1001) AND NOT community.contains(5408:1002) AND community.contains(NO_EXPORT) AND (PeerAS^0-32 OR PeerAS:AS-TO-GRNET^0-32) AND <^PeerAS+PeerAS:AS-TO-GRNET*$>; REFINE { from AS-ANY action pref=110; accept community.contains(5408:110); from AS-ANY action pref=100; accept ANY; } import: from prng-as5408-grnet-customers action community.append(5408:1003); accept NOT community.contains(5408:1001) AND NOT community.contains(5408:1002) AND (PeerAS OR PeerAS:AS-TO-GRNET) AND <^PeerAS+PeerAS:AS-TO-GRNET*$>; REFINE { from AS-ANY action aspath.prepend(AS5408,AS5408,AS5408,AS5408,AS5408); accept community.contains(5408:2005); from AS-ANY accept ANY; } REFINE { from AS-ANY action pref=110; accept community.contains(5408:110); from AS-ANY action pref=100; accept ANY; } export: to prng-as5408-grnet-firt announce NOT {0.0.0.0/0}; export: to prng-as5408-grnet-customers announce AS5408:RS-ROUTES OR community.contains(5408:1002) OR community.contains(5408:1003); export: to prng-as5408-grnet-customers-droute announce {0.0.0.0/0} OR AS5408:RS-ROUTES OR community.contains(5408:1002) OR community.contains(5408:1003); export: to prng-as5408-customers-firt announce ANY; export: to prng-as5408-customers-greek-internet announce community.contains(5408:1003) OR community.contains(5408:1002); export: to prng-as5408-customers-greek-internet-dr announce community.contains(5408:1003) OR community.contains(5408:1002) OR {0.0.0.0/0}; export: to prng-as5408-customers-grnet announce community.contains(5408:1003); export: to prng-as5408-customers-grnet-dr announce community.contains(5408:1003) OR {0.0.0.0/0}; export: to prng-as5408-customers-only-dr announce {0.0.0.0/0}; remarks: ======================================================================= remarks: EU ACADEMIC INTERNET (GRNET + OTHER EU NRENS) remarks: ---------------------------------------------------------------------- remarks: PEER DESCRIPTION: announce GRNET and GEANT NREN (community 20965:155), route within GRNET *only*. remarks: ======================================================================= import: from prng-as5408-customers-eu-academic-internet action community.append(5408:1003); community.append(5408:2000); community.append(5408:4001); community.append(20965:0000); community.append(20965:0011); community.append(20965:0012); community.append(20965:0013); community.append(20965:7000); accept NOT community.contains(5408:1001) AND NOT community.contains(5408:1002) AND community.contains(NO_EXPORT) AND (PeerAS^0-32 OR PeerAS:AS-TO-GRNET^0-32) AND <^PeerAS+PeerAS:AS-TO-GRNET*$>; REFINE { from AS-ANY action pref=110; accept community.contains(5408:110); from AS-ANY action pref=100; accept ANY; } import: from prng-as5408-customers-eu-academic-internet action community.append(5408:1003); community.append(5408:2000); community.append(5408:4001); community.append(20965:0000); community.append(20965:0011); community.append(20965:0012); community.append(20965:0013); community.append(20965:7000); accept NOT community.contains(5408:1001) AND NOT community.contains(5408:1002) AND (PeerAS OR PeerAS:AS-TO-GRNET) AND <^PeerAS+PeerAS:AS-TO-GRNET*$>; REFINE { from AS-ANY action aspath.prepend(AS5408,AS5408,AS5408,AS5408,AS5408); accept community.contains(5408:2005); from AS-ANY accept ANY; } REFINE { from AS-ANY action pref=110; accept community.contains(5408:110); from AS-ANY action pref=100; accept ANY; } export: to prng-as5408-customers-eu-academic-internet announce community.contains(5408:1003) OR community.contains(20965:155); remarks: ======================================================================= remarks: GRNET SERVICES remarks: ---------------------------------------------------------------------- remarks: PEER DESCRIPTION: remarks: do not announce anything, accept AS65500 remarks: ======================================================================= import: from AS65500 action pref=100; community.append(NO_EXPORT); accept AS65500 export: to AS65500 announce NOT ANY; remarks: ======================================================================= remarks: GRNET ECI-ECN remarks: ---------------------------------------------------------------------- remarks: PEER DESCRIPTION: remarks: do not announce anything, accept AS65502 remarks: ======================================================================= import: from AS65502 action pref=100; accept AS65502 export: to AS65502 announce NOT ANY; remarks: ======================================================================= remarks: SYZEYXIS remarks: ---------------------------------------------------------------------- remarks: PEER DESCRIPTION: remarks: announce only GRNET routes, route within GRNET *only*. remarks: ======================================================================= import: from AS65052 action pref=100; community.append(5408:1003); community.append(5408:4001); community.append(5408:4005); accept (PeerAS OR PeerAS:AS-TO-GRNET) AND <^PeerAS+PeerAS:AS-TO-GRNET*$> AND NOT community.contains(5408:1001) AND NOT community.contains(5408:1002); export: to AS65052 announce community.contains(5408:1003); remarks: ======================================================================= remarks: AKAMAI remarks: ---------------------------------------------------------------------- remarks: PEER DESCRIPTION: remarks: AKAMAI. Accept no routes. Announce GRNET customers. remarks: ======================================================================= import: from AS21357 accept NOT ANY; export: to AS21357 announce AS5408:RS-ROUTES OR community.contains(5408:1003); remarks: ======================================================================= import: from AS65535 accept NOT ANY; export: to AS65535 announce AS5408:RS-ROUTES; export: to AS65535 announce community.contains(5408:1003); REFINE { to AS65535 announce (AS5408:AS-GRNET-CUSTOMERS-PUBLIC-AS AND NOT AS5408:RS-ROUTES^0-32); to AS65535 announce (AS5408:AS-GRNET-CUSTOMERS-PRIVATE-AS AND NOT AS5408:RS-ROUTES^0-32); } remarks: remarks: remarks: remarks: # END OF ROUTING POLICY FOR GRNET remarks: remarks: status: ASSIGNED admin-c: GN1931-RIPE tech-c: GN1931-RIPE mnt-by: RIPE-NCC-END-MNT mnt-by: GRNET-NOC created: 1970-01-01T00:00:00Z last-modified: 2021-12-31T11:31:18Z source: RIPE # Filtered organisation: ORG-GRaT1-RIPE org-name: National Infrastructures for Research and Technology S.A. country: GR org-type: LIR address: 7 Kifisias Av. address: 11523 address: Athens address: GREECE phone: +302107474274 fax-no: +302107474490 admin-c: GN1931-RIPE admin-c: AL3706-RIPE tech-c: GN1931-RIPE abuse-c: GN1931-RIPE mnt-ref: RIPE-NCC-HM-MNT mnt-ref: GRNET-NOC mnt-by: RIPE-NCC-HM-MNT mnt-by: GRNET-NOC created: 2004-04-17T11:24:56Z last-modified: 2020-12-16T13:15:09Z source: RIPE # Filtered role: GRNET NOC org: ORG-GRaT1-RIPE address: Greek Research and Technology Network (GRNET) S.A. address: Kifisias 7 address: Athens 11523, GREECE phone: +30 210 7474274 fax-no: +30 210 7474490 remarks: -------------------------------------- remarks: For complains about abuse, spam etc: abuse-mailbox: abuse@grnet.gr remarks: -------------------------------------- admin-c: AS43112-RIPE tech-c: AL3706-RIPE mnt-by: GRNET-NOC nic-hdl: GN1931-RIPE created: 2007-06-12T14:21:14Z last-modified: 2019-09-19T15:39:37Z source: RIPE # Filtered % This query was served by the RIPE Database Query Service version 1.109 (DEXTER)