aut-num:        5408
as-name:        GR-NET
descr:          http://www.grnet.gr
org:            ORG-GRaT1-RIPE
remarks:        General Info
remarks:        ==============
remarks:        GRNET donwstream customers are Greek Universities, Academic
remarks:        and Research Institutes
remarks:        GRNET has GEANT as its upstream; it also connects to GRIX
remarks:        Internet Exchange
remarks:        RPKI in GRNET
remarks:        ==============
remarks:        GRNET ***drops*** ALL RPKI invalid prefixes received from Upstream
remarks:        and Greek Internet Exchange (GR-IX)
remarks:        PA Space Aggregation
remarks:        =============
remarks:        GRNET aggregates its PA space before announcing it to its
remarks:        upstream(s) and exchanges. Should a customer with PA space
remarks:        wishes not to have its prefixes aggregated, a special community
remarks:        should be used to tag this route (see below).
remarks:        Prefixes from GRNET allocation that announced from public ASs
remarks:        are announced deaggregated.\
remarks:        Prefix lengths longer than /24 for IPv4 and /48 for IPv6 are NOT
remarks:        announced to Upstream or GRIX
remarks:        Primary/Backup control
remarks:        ========================
remarks:        GRNET respects the MED received by its customers; thus, the
remarks:        customers can indicate their primary/backup line and control
remarks:        incoming traffic by setting MED appropriatelly. Also, the
remarks:        customers may use the community 5408:110 to indicate their
remarks:        backup connection (lower local pref), but this method is
remarks:        recommended only for customers multihomed to another Greek ISP
remarks:        that use their connection with GRNET as backup.
remarks:        Hot Potato routing
remarks:        ========================
remarks:        By setting the same attributes (Local Preference and MED) on
remarks:        advertising prefixes, a customer with more than one connections
remarks:        with GRNET has the ability to use all active paths.
remarks:        By this way, "hot potato" routing is achieved. Traffic will exit
remarks:        GRNETs network choosing the closest to destination border router.
remarks:        Anycast
remarks:        ========================
remarks:        GRNET does not follow any explicit policy for anycast services.
remarks:        Normal routing (and, thus, preference) applies to all anycast
remarks:        routes
remarks:        BGP Communities used in GRNET:
remarks:        ================================
remarks:        Informational Communities:
remarks:        +---------------------------------------------------------------+
remarks:        | These communities tag the source of the routes. They can ONLY |
remarks:        | be appended by GRNET. Routes with this tag received by any |
remarks:        | peer will be rejected! |
remarks:        +---------------------------------------------------------------+
remarks:        5408:1001 Routes received from GEANT
remarks:        5408:1002 Routes received from GRIX
remarks:        5408:1003 Routes from GRNET (Customers & BackBone)
remarks:        5408:1004 Routes from GEANT NREN
remarks:        5408:1005 Routes from GEANT IAS
remarks:        5408:1006 Routes from GEANT CLS
remarks:        Special Communities for route manipulation:
remarks:        +---------------------------------------------------------------+
remarks:        | These communities tag the source of the routes. They can ONLY |
remarks:        | be appended by GRNET. Routes with this tag received by any |
remarks:        | peer will be rejected! |
remarks:        +---------------------------------------------------------------+
remarks:        5408:2000 Do not aggregate
remarks:        5408:2005 Prepend AS5408 x5
remarks:        5408:4001 Do not announce to GRIX
remarks:        5408:4005 Do not announce to GEANT
remarks:        5408:4006 Do not announce to GEANT NREN VRF
remarks:        5408:4007 Do not announce to GEANT Tier-1
remarks:        Routing Manipulation (for GRNET customers only):
remarks:        +---------------------------------------------------------------+
remarks:        | This set of tools allow GRNET clients to manipulate their |
remarks:        | routing: |
remarks:        LOCAL PREFERENCES IN GRNET:
remarks:        =============================
remarks:        LocalPref 200: - GRNET Customers
remarks:        - Special Customers (KROOT, SYZEYXIS, ...)
remarks:        - Locally Generated GRNET Aggregates
remarks:        LocalPref 190: - GRNET Customers, backup connection
remarks:        LocalPref 180: - GEANT NREN VRF
remarks:        LocalPref 170: - GRIX routes (MED=0 Primary, MED=20 Secondary)
remarks:        LocalPref 160: - GEANT CLS VRF
remarks:        LocalPref 150: - GRNET as backup in dual homed customers
remarks:        LocalPref 140: - GEANT IAS VRF
remarks:        =======================================================================
remarks:        iBGP (AS5408)
remarks:        ----------------------------------------------------------------------
remarks:        PEER DESCRIPTION:
remarks:        Full-mesh iBGP peerings.
remarks:        Import Policy: Accept ANY
remarks:        Export Policy: Advertize (a) all routes (FIRT) or (b) GRNET & GRIX
remarks:        routes only, depending on router capabilities.
remarks:        ======================================================================
import:         from prng-as5408-ibgp accept ANY;
export:         to prng-as5408-ibgp-part announce community.contains(5408:1003) OR {0.0.0.0/0};
export:         to prng-as5408-ibgp announce ANY;
remarks:        =======================================================================
remarks:        GEANT (AS20965)
remarks:        ----------------------------------------------------------------------
remarks:        PEER DESCRIPTION:
remarks:        GEANT is the Internet Upstream for GRNET
remarks:        Import Policy: Accept all routes (apart from martians),
remarks:        set MED appropratelly on primary & backup peering.
remarks:        Export Policy: Announce all GRNET routes (tagged with 5408:1003)
remarks:        that are not tagged with 5408:4005 (don't-announce-to-geant).
remarks:        Aggregate PA space (except from the routes tagged with
remarks:        5408:2000 (do not aggregate) community.
remarks:        =======================================================================
import:         from AS20965 62.40.124.89 action community.append(5408:1001); accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian; REFINE { from AS20965 action aspath.prepend(AS20965,AS20965,AS20965); accept community.contains(20965:7777); from AS20965 accept ANY; }
import:         from AS20965 62.40.124.141 action community.append(5408:1001); med=20; accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian; REFINE { from AS20965 action aspath.prepend(AS20965,AS20965,AS20965); accept community.contains(20965:7777); from AS20965 accept ANY; }
import:         from AS20965 62.40.102.252 action community.append(5408:1001); accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian;
import:         from AS20965 62.40.102.254 action community.append(5408:1001); med=20; accept NOT community.contains(5408:1002) AND NOT community.contains(5408:1003) AND NOT fltr-martian;
export:         to AS20965 announce AS5408:RS-ROUTES; REFINE { to AS20965 62.40.124.89 action community.append(20965:7030); announce ANY; to AS20965 62.40.124.141 action community.append(20965:7030); announce ANY; to AS20965 62.40.102.252 announce ANY; to AS20965 62.40.102.254 announce ANY; }
export:         to AS20965 announce community.contains(5408:1003) AND NOT community.contains(5408:4005); REFINE { to AS20965 announce (AS5408:AS-TO-GEANT AND NOT AS5408:RS-ROUTES^0-32); to AS20965 announce AS5408:RS-ROUTES^0-32 AND community.contains(5408:2000); } REFINE { to AS20965 62.40.124.89 action community.append(20965:7030); announce ANY; to AS20965 62.40.124.141 action community.append(20965:7030); announce ANY; to AS20965 62.40.102.252 announce ANY; to AS20965 62.40.102.254 announce ANY; }
remarks:        =======================================================================
remarks:        GRIX Peers
remarks:        ----------------------------------------------------------------------
remarks:        PEER DESCRIPTION:
remarks:        These are the GRIX Peers of GRNET
remarks:        Import Policy: Reject routes tagged with special communities
remarks:        Accept all other routes that
remarks:        (a) have the appropriate AS path and
remarks:        (b) originate from the peer (or behind it)
remarks:        For these, and according to the received communities:
remarks:        (i) Set the appropriate local preference
remarks:        Export Policy: Announce all GRNET routes (tagged with 5408:1003)
remarks:        that are not tagged with 5408:4001 (don't-announce-to-grix).
remarks:        Aggregate PA space (except from the routes tagged with
remarks:        5408:2000 (do not aggregate) community.
remarks:        =======================================================================
import:         from prng-as5408-grix-peers action pref=105; community.append(5408:1002); accept NOT community.contains(5408:1001) AND NOT community.contains(5408:1003) AND <^PeerAS+AS5408:AS-GRIX:PeerAS*$>; REFINE { from AS-GRIX at 176.126.38.1 action med=0; accept ANY; from AS-GRIX at 176.126.38.31 action med=20; accept ANY; }
export:         to prng-as5408-grix-peers announce AS5408:RS-ROUTES OR AS199399;
export:         to prng-as5408-grix-peers announce community.contains(5408:1003) AND NOT community.contains(5408:4001); REFINE { to prng-as5408-grix-peers announce (AS5408:AS-TO-AIX AND NOT AS5408:RS-ROUTES^0-32); to prng-as5408-grix-peers announce AS5408:RS-ROUTES^0-32 AND community.contains(5408:2000); }
remarks:        =======================================================================
remarks:        GRIX RS
remarks:        ----------------------------------------------------------------------
remarks:        =======================================================================
import:         from AS50745 action pref=105; med=30; community.append(5408:1002); accept <^AS-GRIX> AND NOT community.contains(5408:1001) AND NOT community.contains(5408:1003);
remarks:        =======================================================================
remarks:        GRIX ROUTER @ GRIX
remarks:        ----------------------------------------------------------------------
remarks:        =======================================================================
import:         from AS199399 action pref=105; community.append(5408:1002); accept AS199399; REFINE { from AS-GRIX at 176.126.38.1 action med=0; accept ANY; from AS-GRIX at 176.126.38.31 action med=20; accept ANY; }
export:         to AS199399 announce community.contains(5408:1003) OR {0.0.0.0/0};
remarks:        =======================================================================
remarks:        K-ROOT mirror @ GRIX
remarks:        ----------------------------------------------------------------------
remarks:        PEER DESCRIPTION:
remarks:        K-ROOT @ GRIX. Accept K-Root routes, announce within GRNET *only
remarks:        Announce default route.
remarks:        =======================================================================
import:         from AS25152 action pref=105; community.append(5408:1002); community.append(5408:4001); community.append(5408:4005); accept {193.0.14.0/24, 195.251.59.0/28} AND NOT community.contains(5408:1001) AND NOT community.contains(5408:1003); REFINE { from AS-GRIX at 176.126.38.1 action med=0; accept ANY; from AS-GRIX at 176.126.38.31 action med=20; accept ANY; }
export:         to AS25152 announce {0.0.0.0/0};
remarks:        =======================================================================
remarks:        GRNET Clients
remarks:        ----------------------------------------------------------------------
remarks:        PEER DESCRIPTION:
remarks:        These are the normal GRNET clients (Universities, Research orgs, etc)
remarks:        Import Policy: Reject routes tagged with special communities
remarks:        Accept all other routes that
remarks:        (a) have the appropriate AS path and
remarks:        (b) originate from the client (or behind it)
remarks:        For these, and according to the received communities:
remarks:        (i) Set the appropriate local preference
remarks:        Prefixes with no corresponding exact matching route on the
remarks:        RIPE whois database are only accepted if tagged with NO_EXPORT
remarks:        Local Preference (on backup links) can be lowered by
remarks:        using the appropriate community (5408:110), but MED is
remarks:        recommended for this purpose.
remarks:        Export Policy:
remarks:        (a) either all routes (FIRT)
remarks:        (b) or a partial routing table, consiting
remarks:        GRNET (5408:1003) and GRIX (5408:1002) routes
remarks:        (c) or a partial routing table, consiting
remarks:        GRNET (5408:1003) and GRIX (5408:1002) routes plus default route 0/0.
remarks:        (d) or default route 0/0.
remarks:        =======================================================================
import:         from prng-as5408-grnet-customers action community.append(5408:1003); accept NOT community.contains(5408:1001) AND NOT community.contains(5408:1002) AND community.contains(NO_EXPORT) AND (PeerAS^0-32 OR PeerAS:AS-TO-GRNET^0-32) AND <^PeerAS+PeerAS:AS-TO-GRNET*$>; REFINE { from AS-ANY action pref=110; accept community.contains(5408:110); from AS-ANY action pref=100; accept ANY; }
import:         from prng-as5408-grnet-customers action community.append(5408:1003); accept NOT community.contains(5408:1001) AND NOT community.contains(5408:1002) AND (PeerAS OR PeerAS:AS-TO-GRNET) AND <^PeerAS+PeerAS:AS-TO-GRNET*$>; REFINE { from AS-ANY action aspath.prepend(AS5408,AS5408,AS5408,AS5408,AS5408); accept community.contains(5408:2005); from AS-ANY accept ANY; } REFINE { from AS-ANY action pref=110; accept community.contains(5408:110); from AS-ANY action pref=100; accept ANY; }
export:         to prng-as5408-grnet-firt announce NOT {0.0.0.0/0};
export:         to prng-as5408-grnet-customers announce AS5408:RS-ROUTES OR community.contains(5408:1002) OR community.contains(5408:1003);
export:         to prng-as5408-grnet-customers-droute announce {0.0.0.0/0} OR AS5408:RS-ROUTES OR community.contains(5408:1002) OR community.contains(5408:1003);
export:         to prng-as5408-customers-firt announce ANY;
export:         to prng-as5408-customers-greek-internet announce community.contains(5408:1003) OR community.contains(5408:1002);
export:         to prng-as5408-customers-greek-internet-dr announce community.contains(5408:1003) OR community.contains(5408:1002) OR {0.0.0.0/0};
export:         to prng-as5408-customers-grnet announce community.contains(5408:1003);
export:         to prng-as5408-customers-grnet-dr announce community.contains(5408:1003) OR {0.0.0.0/0};
export:         to prng-as5408-customers-only-dr announce {0.0.0.0/0};
remarks:        =======================================================================
remarks:        EU ACADEMIC INTERNET (GRNET + OTHER EU NRENS)
remarks:        ----------------------------------------------------------------------
remarks:        PEER DESCRIPTION: announce GRNET and GEANT NREN (community 20965:155), route within GRNET *only*.
remarks:        =======================================================================
import:         from prng-as5408-customers-eu-academic-internet action community.append(5408:1003); community.append(5408:2000); community.append(5408:4001); community.append(20965:0000); community.append(20965:0011); community.append(20965:0012); community.append(20965:0013); community.append(20965:7000); accept NOT community.contains(5408:1001) AND NOT community.contains(5408:1002) AND community.contains(NO_EXPORT) AND (PeerAS^0-32 OR PeerAS:AS-TO-GRNET^0-32) AND <^PeerAS+PeerAS:AS-TO-GRNET*$>; REFINE { from AS-ANY action pref=110; accept community.contains(5408:110); from AS-ANY action pref=100; accept ANY; }
import:         from prng-as5408-customers-eu-academic-internet action community.append(5408:1003); community.append(5408:2000); community.append(5408:4001); community.append(20965:0000); community.append(20965:0011); community.append(20965:0012); community.append(20965:0013); community.append(20965:7000); accept NOT community.contains(5408:1001) AND NOT community.contains(5408:1002) AND (PeerAS OR PeerAS:AS-TO-GRNET) AND <^PeerAS+PeerAS:AS-TO-GRNET*$>; REFINE { from AS-ANY action aspath.prepend(AS5408,AS5408,AS5408,AS5408,AS5408); accept community.contains(5408:2005); from AS-ANY accept ANY; } REFINE { from AS-ANY action pref=110; accept community.contains(5408:110); from AS-ANY action pref=100; accept ANY; }
export:         to prng-as5408-customers-eu-academic-internet announce community.contains(5408:1003) OR community.contains(20965:155);
remarks:        =======================================================================
remarks:        GRNET SERVICES
remarks:        ----------------------------------------------------------------------
remarks:        PEER DESCRIPTION:
remarks:        do not announce anything, accept AS65500
remarks:        =======================================================================
import:         from AS65500 action pref=100; community.append(NO_EXPORT); accept AS65500
export:         to AS65500 announce NOT ANY;
remarks:        =======================================================================
remarks:        GRNET ECI-ECN
remarks:        ----------------------------------------------------------------------
remarks:        PEER DESCRIPTION:
remarks:        do not announce anything, accept AS65502
remarks:        =======================================================================
import:         from AS65502 action pref=100; accept AS65502
export:         to AS65502 announce NOT ANY;
remarks:        =======================================================================
remarks:        SYZEYXIS
remarks:        ----------------------------------------------------------------------
remarks:        PEER DESCRIPTION:
remarks:        announce only GRNET routes, route within GRNET *only*.
remarks:        =======================================================================
import:         from AS65052 action pref=100; community.append(5408:1003); community.append(5408:4001); community.append(5408:4005); accept (PeerAS OR PeerAS:AS-TO-GRNET) AND <^PeerAS+PeerAS:AS-TO-GRNET*$> AND NOT community.contains(5408:1001) AND NOT community.contains(5408:1002);
export:         to AS65052 announce community.contains(5408:1003);
remarks:        =======================================================================
remarks:        AKAMAI
remarks:        ----------------------------------------------------------------------
remarks:        PEER DESCRIPTION:
remarks:        AKAMAI. Accept no routes. Announce GRNET customers.
remarks:        =======================================================================
import:         from AS21357 accept NOT ANY;
export:         to AS21357 announce AS5408:RS-ROUTES OR community.contains(5408:1003);
remarks:        =======================================================================
import:         from AS65535 accept NOT ANY;
export:         to AS65535 announce AS5408:RS-ROUTES;
export:         to AS65535 announce community.contains(5408:1003); REFINE { to AS65535 announce (AS5408:AS-GRNET-CUSTOMERS-PUBLIC-AS AND NOT AS5408:RS-ROUTES^0-32); to AS65535 announce (AS5408:AS-GRNET-CUSTOMERS-PRIVATE-AS AND NOT AS5408:RS-ROUTES^0-32); }
status:         ASSIGNED
admin-c:        GN1931-RIPE
tech-c:         GN1931-RIPE
mnt-by:         RIPE-NCC-END-MNT
mnt-by:         GRNET-NOC
created:        1970-01-01T00:00:00Z
last-modified:  2021-12-31T11:31:18Z
source:         RIPE