Details

Route Servers Details

B-IX Peering

ROUTE SERVERS RS-BG1
 RS-PLO RS-FRF RS-Ruse RS-BG2
ASN AS59900 AS59900 AS59900 AS59900 AS59900
IPV4 ADDRESS (/24)
 185.1.30.1 185.1.30.250 185.1.30.251 185.1.30.252 185.1.30.254
IPV6 ADDRESS (/118)
 2001:7f8:8e:4::1 2001:7f8:8e:4::250 2001:7f8:8e:4::251 2001:7f8:8e:4::252 2001:7f8:8e:4::254
AS-SET AS-BALKAN-IX AS-BALKAN-IX AS-BALKAN-IX AS-BALKAN-IX AS-BALKAN-IX
BFD (interval/multiplier)
 1000/5 1000/5 1000/5 1000/5 1000/5
PLATFORM Bird2 Bird2 Bird2 Bird2 Bird2
Location Telepoint Sofia East BalkanIX Plovdiv Equinix FR5, Frankfurt BalkanIX Ruse Telepoint Sofia Center

Regional Peering (To be fully consolidated in the Peering VLAN until 30.09.2024)

ROUTE SERVERS RS-RG1 RS-RG2
ASN AS59900 AS59900
IPV4 ADDRESS 217.174.157.1 217.174.157.254
IPV6 ADDRESS 2001:7F8:8E::1 2001:7F8:8E::254
AS-SET AS-BALKAN-IX AS-BALKAN-IX
BFD (interval/multiplier)
 1000/5 1000/5
PLATFORM Bird2 Bird2

Special Peers:

B-IX uses a router to connect to the other peering platforms:

IP address: 185.1.30.253 – IX-router.mx960.b-ix.net

IP address: 217.174.157.253 – IX-router.mx960.b-ix.net

Prefixes from the IX-router.mx960.b-ix.net are tagged with community 65000:205

To stop all external resources you can add communities 65000:209 or 65000:0:209

BFD

BFD session is automatically configured for all BGP peers. This ensures that in case of a problem in your interface/transport you wont have discarded traffic.

Communities

All peers of Balkan Internet Exchange route servers can use communities to control incoming and outgoing information.

In relation to the incoming traffic (which announces are accepted) the control is in the client – he can filter which ones of the received from RS announces he will accept.

Balkan-IX RSs remove their own AS from the route, which will make them seem directly connected without a necessary BGP session between them.

With the help of BGP Community Balkan-IX member may decide who he wants to “give” the traffic to. The following BGP Community is maintained for every announced prefix.

Communities coming from Balkan Internet Exchange RS:

0:<peer AS> Prefix is announced from ‘<peer AS>’
65000:0:<peer AS>
 Prefix is announced from ‘<peer AS>’ (large community)
65000:100
 Prefix is announced from a direct Exchange member
65000:0:100
 Prefix is announced from a direct Exchange member (large community)
65000:202
 Prefix is announced from a International member/partner
65000:0:202 Prefix is announced from a International member/partner (large community)

Communities that are accepted from Balkan Internet Exchange RS:

By default, all incoming prefixes are announced to all Balkan-IX members, if they do not have BalkanIX specific community.

 

Standard Communities:
59900:0 Block Your prefix to all peers
59900:0 59900:<peer AS> Block Your prefix to all peers EXCEPT
59900:<peer AS> Block Your prefix to <Peer>
59900:202 Block Your prefix to INTERNATIONAL peers
59900:0 65000:208 Block Your prefix to OTHERS THAN external partners (Partner IX)
65000:208 Block Your prefix to OTHERS THAN external partners (Partner IX)
65000:209 Block Your prefix to external partners (Partner IX)
 

Large Communities:
65000:59900:0
 Block Your prefix to all peers
65000:59900:0 65000:59900:<peer AS>
 Block Your prefix to all peers EXCEPT
65000:59900:<peer AS> Block Your prefix to <Peer>
59900:103:<peer AS>
 Prepend 3 times to <Peer>
59900:102:<peer AS>
 Prepend 2 times to <Peer>
59900:101:<peer AS>
 Prepend 1 time to <Peer>
59900:0:202 Block Your prefix to INTERNATIONAL peers
65000:59900:0 65000:0:208 Block Your prefix to OTHERS THAN external partners (Partner IX)
65000:0:208 Block Your prefix to OTHERS THAN external partners (Partner IX)
65000:0:209 Block Your prefix to external partners (Partner IX)

BGP communities for traffic management to providers:

 

Partner exchanges:

(updated 07.08.2024)
0:34307 From NL-IX
59900:34307
 Stop NL-IX
0:49917
 From LS-IX
59900:49917
 Stop LS-IX
0:41441 From Speed-IX
59900:41441 Stop Speed-IX
0:39107
 From InterLAN-IX
59900:39107 Stop InterLAN-IX
0:20530
 From RoNIX
59900:20530 Stop RoNIX
0:50952
 From DATA-IX
59900:50952 Stop DATA-IX
0:31500 From Global-IX
59900:31500 Stop Global-IX
65500:0:206221 From ERA-IX
0:65221 From ERA-IX (standard community remap)
65500:59900:206221 Stop ERA-IX
59900:65221 Stop ERA-IX (standard community remap)
0:47498 From FOG-IXP
59900:47498
 Stop FOG-IXP
0:56393
 From Frys-IX
59900:56393
 Stop Frys-IX
0:48193
 From Piter-IX
59900:48193
 Stop Piter-IX

Communities for peers with 32-bit ASNs:

Balkan-IX Route servers support large communities, which can adopt 32-bit values!! If your router doesn’t support LC – You can stick for the following procedure for community mapping!

Balkan-IX implements N:M a dynamic mapping based on standard community strings, as standard BGP communities support only 4 bytes.
Therefore, the following community format is applicable: <65000 + last octet from peer IP address>.

For example:

Peer 32-bit ASN Peer IP:
 BGP Community
Netops 207691 185.1.30.147 65147
X xxxxx 185.1.30.Y 65000 + Y

Technical requirements

These technical requirements define the ways in which Balkan-IX members may or may not make use of the Balkan-IX services.

MAC Layer

Frames forwarded to Balkan-IX ports SHALL have one of the following EtherTypes:

  • 0x0800 – (Internet Protocol version 4, or IPv4)
  • 0x86dd – (Internet Protocol version 6, or Ipv6)
  • 0×0806 – (Address Resolution Protocol, or ARP)

Only one MAC address is allowed on a service port. All frames of a service forwarded to an individual Balkan-IX port shall have the same source MAC address.

It is NOT ALLOWED to use Spanning Tree Protocol enabled on a port connected to Balkan-IX.

It is NOT ALLOWED to use proxy ARP enabled on a router port connected to Balkan-IX.

Common protocols

Frames forwarded to Balkan-IX ports SHALL NOT be addressed to a multicast or broadcast MAC destination address except as follows:

  • broadcast ARP packets
  • multicast IPv6 Neighbor Discovery (ND) packets
  • others, if explicitly allowed for that port (e.g. multicast service)

Traffic for link-local protocols SHALL NOT be forwarded to Balkan-IX ports except for the ARP but not proxy ARP and IPv6 ND. These link-local protocols include but are not limited to the following list:

  • IRDP
  • ICMP redirect
  • IEEE802 Spanning Tree
  • Vendor proprietary discovery protocols. (e.g. Cisco CDP, VTP)
  • Interior Routing Protocols IGP (e.g. RIP, OSPF, IS-IS, IGRP, EIGRP) /Multicast
  • BOOTP / DHCP
  • PIM-SM
  • PIM-DM
  • DVMRP
  • ICMPv6 ND-RA
  • UDLD
  • L2 Keepalives

IP Layer

Interfaces connected to Balkan-IX ports SHALL ONLY use IP addresses (IPv4 and IPv6) and netmasks assigned to them by Balkan-IX.

IP packets addressed to Balkan-IX Peering LAN’s directed broadcast address SHALL NOT be automatically forwarded to Balkan-IX ports.

IP address space assigned to Balkan-IX Peering LANs SHALL NOT be advertised to other networks.

IP Traffic Exchange

IP traffic should be exchanged between Balkan-IX members using BGP4 protocol by the following ways:

  • by using route servers (RS) – two RSs for redundancy and resilience;
  • by direct BGP4 sessions between Balkan-IX members with their mutual agreements.

Peering Policies

Disabling first AS check
The Route Servers do not have their AS first in the AS_PATH. In some cases, you might need to disable the first AS check in your BGP configuration.
On Cisco routers please specify ‘no bgp enforce-first-as’ or ‘bgp enforce-first-as disable’ to disable the enforcement.

Autonomous System Number (ASN)
Balkan-IX supports both 16-bit and 32-bit AS numbers.

Balkan-IX members SHOULD have public ASNs and route-objects, registered in a recognized Internet Routing Registry.

Balkan-IX members MUST use the same peering ASN at each point and must announce a consistent set of routes at each point, unless otherwise mutually agreed.

When peering with the route servers we mandate that routers are set up to connect to both route servers and advertise the same amount and length of prefixes for redundancy and resilience.

Max-Prefix Advisory

Balkan-IX generally ADVISES a maximum-prefix to be set.

Filtering

Incoming Prefixes Sanitization

The Balkan-IX route servers implement very basic incoming filters for private ASNs and prefixes received from clients. Balkan-IX BLOCKs private ASNs, RFC1918 ranges, bogon prefixes and the default route.

Outgoing Prefixes Filtering Among Route Server Clients

The Balkan-IX route servers implement outgoing filtering based on policies defined by the route server participants. This filtering is applied on outgoing advertisements.

Maintain your peering policy

Peers SHOULD register and maintain proper route objects in a recognized Internet Routing Registry: ARIN, RIPE, APNIC, LACNIC or AfriNIC.

Common policies

Balkan-IX members SHOULD NOT exchange traffic between ports they own from Balkan-IX infrastructure.

Balkan-IX members SHOULD aggregate their announced prefixes. Balkan-IX will deny all network updates with a network mask length greater than /24.

Balkan-IX members SHOULD announce only their own prefixes or their clients’ prefixes. Balkan-IX members SHOULD NOT announce prefixes from transit ASN without transit owners’ permissions.

When maximum daily traffic is over 90% of the physical port speed for the last month, Balkan-IX member is asked to increase its capacity to Balkan-IX.

Balkan-IX shall implement “shortest exit/hot potato routing” and advertise routes consistent with that policy, unless mutually agree otherwise based on special circumstances.

Only send traffic that is destined for the prefixes Balkan-IX announce to you. DO NOT point default at us or use static routes to send us traffic that does not match the routes we announce to you.

Balkan-IX policies may be updated from time to time, as market and traffic conditions affecting network interconnections change. Balkan-IX reserves the right to modify, replace, or nullify policies at any time.

Mailing lists:

Please feel free to subscribe to our mailing lists, so you can get immediate technical information updates!

https://mailman.b-ix.net

Sample client configurations for peering

Configuration example for Cisco equipment

interface x
bfd interval 1000 min_rx 1000 multiplier 5

ip prefix-list -OUT seq 5 permit x.x.x.x/xx le 24
ip prefix-list -OUT seq 10 permit x.x.x.x/xx le 24

route-map B-IX-out permit 10
match ip address prefix-list -OUT

route-map B-IX-in permit 10
set local-preference xxx

router bgp

no bgp enforce-first-as
neighbor remote-as 59900
neighbor description B-IX-RS
neighbor send-community both
neighbor next-hop-self
neighbor soft-reconfiguration inbound
neighbor fall-over bfd
neighbor route-map B-IX-in in
neighbor route-map B-IX-out out

Configuration example for Huawei equipment

ip ip-prefix -OUT index 5 permit x.x.x.x x greater-equal x less-equal 24
ip ip-prefix -OUT index 10 permit x.x.x.x x greater-equal x less-equal 24

route-policy B-IX-out permit node 10
if-match ip-prefix -OUT

route-policy B-IX-in permit node 10
apply local-preference xxx

bgp undo check-first-as
peer as-number 59900
peer description B-IX-RS
peer advertise-community
peer next-hop-local
peer capability-advertise route-refresh
peer route-policy B-IX-in import
peer route-policy B-IX-out export

Configuration example for JunOS equipment

set protocols bgp group B-IX neighbor bfd-liveness-detection minimum-interval 1000
set protocols bgp group B-IX neighbor bfd-liveness-detection multiplier 5
set protocols bgp group B-IX neighbor bfd-liveness-detection no-adaptation
set protocols bgp group B-IX neighbor bfd-liveness-detection transmit-interval minimum-interval 1000

set protocols bgp group B-IX neighbor description RS-B-IX
set protocols bgp group B-IX neighbor import B-IX-IN
set protocols bgp group B-IX neighbor export B-IX-OUT
set protocols bgp group B-IX neighbor peer-as 59900

set policy-options policy-statement B-IX-IN term 1 then local-preference …
set policy-options policy-statement B-IX-IN term 1 then accept

set policy-options policy-statement B-IX-OUT term 1 from prefix-list …
set policy-options policy-statement B-IX-OUT term 1 then accept
set policy-options policy-statement B-IX-OUT term last then reject

Contact Us for a FREE Trial

Contact us