Route Servers

IX-Denver operates redundant secure route servers with ingress filtering based on ARIN bulk whois DB import, and/or valid IRRDB as-set+route-set records for the connecting network.

Basic Information

  • Route server – B (bird 1.6.3) IPv4 – 206.53.175.5/24
  • Route server – B (bird6 1.6.3) IPv6 – 2001:504:58::5/64
  • Route server – C (bird 1.6.3) IPv4 – 206.53.175.7/24
  • Route server – C (bird6 1.6.3) IPv6 – 2001:504:58::7/64
  • Route servers ASN – 394594
  • Route servers policy ASN – 64599
  • Route servers IPv4 MTU is 1472
  • Route servers IPv6 MTU is 1452
  • RS B = VM physically on den1.sv02 (hypervisor #2)
  • RS C = VM physically on den1.sv01 (hypervisor #1)
  • Route server filtering is rebuilt based on member IRRDB objects every 3 hours

Communities

IX-Denver route servers support standard, large, and extended BGP communities. 

Route Server Informational BGP Communities

Community TypeInformational CommunityComment
Prefix is present in Peer’s IRRDB route-set
Standard64599:100
Large394594:64599:100
Extendedtarget:64599:100
Prefix is not present in Peer’s IRRDB route-set
Standard64599:101
Large394594:64599:101
Extendedtarget:64599:101
Origin ASN is present in Peer’s IRRDB as-set
Standard64599:102
Large394594:64599:102
Extendedtarget:64599:102
Origin ASN is not present in Peer’s IRRDB as-set
Standard64599:103
Large394594:64599:103
Extendedtarget:64599:103
Prefix validated as advertising Peer via ARIN WHOIS db
Standard64599:104
Large394594:64599:104
Extendedtarget:64599:104
RPKI validated route prefix
Standard64599:200Not implemented
Large394594:64599:200Not implemented
Extendedtarget:64599:200Not implemented
RPKI invalid route prefix
Standard64599:201Not implemented
Large394594:64599:201Not implemented
Extendedtarget:64599:201Not implemented
RPKI unknown route prefix
Standard64599:202Not implemented
Large394594:64599:202Not implemented
Extendedtarget:64599:202Not implemented

Route Server Action BGP Communities

Community TypeAction CommunityComment
Graceful Shutdown
Standard65535:0Well known community – no alternates available
Blackhole advertised prefix – Well Known
Standard65535:666Well known community – used in conjunction with alternate blackhole communities is recommended.
Blackhole advertised prefix – Alternate
Standard65534:666
Large394594:65534:666
Extendedtarget:65534:666
Do not advertise to any Peer
Standard0:64599
Large394594:0:64599
Extendedtarget:0:64599
Do not advertise to Peer ASN
Standard0:[Peer ASN]
Large394594:0:[Peer ASN]
Extendedtarget:0:[Peer ASN]
Advertise to Peer ASN
Standard64599:[Peer ASN]
Large394594:64599:[Peer ASN]
Extendedtarget:64599:[Peer ASN]
Prepend own ASN once to all Peers
Standard65001:64599
Large394594:65001:64599
Extendedtarget:65001:64599
Prepend own ASN twice to all Peers
Standard65002:64599
Large394594:65002:64599
Extendedtarget:65002:64599
Prepend own ASN thrice to all Peers
Standard65003:64599
Large394594:65003:64599
Extendedtarget:65003:64599
Prepend own ASN once to a specific ASN
Standard65001:[Peer ASN]
Large394594:65001:[Peer ASN]
Extendedtarget:65001:[Peer ASN]
Prepend own ASN twice to a specific ASN
Standard65002:[Peer ASN]
Large394594:65002:[Peer ASN]
Extendedtarget:65002:[Peer ASN]
Prepend own ASN thrice to a specific ASN
Standard65003:[Peer ASN]
Large394594:65003:[Peer ASN]
Extendedtarget:65003:[Peer ASN]
Add no-export to all Peers
Standard65004:65281
Large394594:65004:65281
Extendedtarget:65004:65281
Add no-advertise to all Peers
Standard65005:65282
Large394594:65005:65282
Extendedtarget:65005:65282
Add no-export to specific ASN
Standard65004:[Peer ASN]
Large394594:65004:[Peer ASN]
Extendedtarget:65004:[Peer ASN]
Add no-advertise to specific ASN
Standard65005:[Peer ASN]
Large394594:65005:[Peer ASN]
Extendedtarget:65005:[Peer ASN]

Martian / Bogon Addresses

The following IPv4 addresses will not be accepted or re-advertised by the route servers:

  • 0.0.0.0/0
  • 0.0.0.0/8 – /32
  • 10.0.0.0/8 – /32
  • 100.64.0.0/10 – /32
  • 127.0.0.0/8 – /32
  • 169.254.0.0/16 – /32
  • 172.16.0.0/12 – /32
  • 192.0.2.0/24 – /32
  • 192.168.0.0/16 – /32
  • 198.18.0.0/15 – /32
  • 198.51.100.0/24 – /32
  • 203.0.113.0/24 – /32
  • 224.0.0.0/3 – /32

The following IPv6 addresses will not be accepted or re-advertised by the route servers:

  • ::/0
  • ::/8 – /128
  • 64:ff9b::/96 – /128
  • 100::/8 – /128
  • 200::/7 – /128
  • 400::/6 – /128
  • 800::/5 – /128
  • 1000::/4 – /128
  • 2001::/33 – /128
  • 2001:0:8000::/33 – /128
  • 2001:2::/48 – /128
  • 2001:3::/32 – /128
  • 2001:10::/28 – /128
  • 2001:20::/28 – /128
  • 2001:db8::/32 – /128
  • 2002::/16 – /128
  • 3ffe::/16 – /128
  • 4000::/3 – /128
  • 5f00::/8 – /128
  • 6000::/3 – /128
  • 8000::/3 – /128
  • a000::/3 – /128
  • c000::/3 – /128
  • e000::/4 – /128
  • f000::/5 – /128
  • f800::/6 – /128
  • fc00::/7 – /128
  • fe80::/10 – /128
  • fec0::/10 – /128
  • ff00::/8 – /128