nusa-IX — a neutral internet exchange

Resources

BGP community

Members can steer how their prefixes are propagated by the nusa-IX route servers (AS212001) using standard and large BGP communities.

About

By default the route servers announce every accepted prefix to all members. Attach the communities below on the prefixes you send to rs1.nusaix.com to filter, prepend or blackhole per member. In the tables, peer-as is the 16-bit ASN of the member you want to target; for 32-bit ASNs use the large community form.

Announcement control

StandardLargeAction
0:212001212001:0:212001Do not announce to any nusa-IX member
212001:212001212001:1:212001Announce to all nusa-IX members (default)
0:peer-as212001:0:peer-asDo not announce to this member ASN
212001:peer-as212001:1:peer-asAnnounce to this member ASN only

AS path prepending

LargeAction
212001:101:peer-asPrepend own ASN once to this member ASN
212001:102:peer-asPrepend own ASN twice to this member ASN
212001:103:peer-asPrepend own ASN three times to this member ASN
212001:101:212001Prepend own ASN once to all members
212001:102:212001Prepend own ASN twice to all members
212001:103:212001Prepend own ASN three times to all members

Blackholing (RTBH)

CommunityAction
65535:666RFC 7999 blackhole, drop traffic to this prefix on the fabric
212001:666:212001Blackhole announcement to all members accepting RTBH
212001:666:peer-asBlackhole announcement to this member ASN only

Informational communities

CommunityMeaning
212001:1000:1Prefix learned in Surabaya (OMADATA - E1 - SUB)
212001:1001:1Prefix validated as RPKI valid
212001:1001:2Prefix accepted from IRR object

Example

! do not announce 203.0.113.0/24 to AS64500
route-map NUSAIX-OUT permit 10
 match ip address prefix-list MY-PREFIXES
 set community 0:64500 additive
!
! blackhole a /32 towards all members
route-map NUSAIX-RTBH permit 10
 set community 65535:666 212001:666:212001 additive

Notes

  • Communities are stripped from prefixes before they leave the fabric.
  • RTBH announcements are accepted for /32 (IPv4) and /128 (IPv6) only.
  • Unknown 212001:x:y communities are ignored, not rejected.
Route servers