Projet

Général

Profil

BGP » Historique » Version 180

Laurent GUERBY, 28/08/2016 09:35

1 20 Laurent GUERBY
{{>toc}}
2 20 Laurent GUERBY
3 1 Laurent GUERBY
h1. BGP
4 1 Laurent GUERBY
5 175 Laurent GUERBY
h2. Liens
6 175 Laurent GUERBY
7 1 Laurent GUERBY
Nous utilisons BIRD sous Linux comme routeur BGP
8 1 Laurent GUERBY
9 1 Laurent GUERBY
http://bird.network.cz/
10 1 Laurent GUERBY
11 14 Laurent GUERBY
blog bgp http://www.renesys.com/blog/
12 15 Laurent GUERBY
flowspec http://www.slideshare.net/sfouant/an-introduction-to-bgp-flow-spec
13 16 Laurent GUERBY
DFZ = Default Free Zone archive http://archive.routeviews.org/
14 17 Laurent GUERBY
http://www.ripe.net/data-tools/stats/ris/routing-information-service
15 65 Laurent GUERBY
https://stat.ripe.net/widget/announced-prefixes
16 17 Laurent GUERBY
http://pch.net/resources/data/routing-tables/archive/
17 17 Laurent GUERBY
http://pch.net/resources/data/routing-tables/mrt-bgp-updates/
18 18 Laurent GUERBY
http://www.nanog.org/meetings/archive/
19 52 Laurent GUERBY
http://tools.ietf.org/html/draft-lapukhov-bgp-routing-large-dc-02
20 14 Laurent GUERBY
21 43 Laurent GUERBY
http://inside.godaddy.com/inside-story-happened-godaddy-com-sept-10-2012/
22 43 Laurent GUERBY
23 67 Laurent GUERBY
liste des communautés des opérateurs http://onesc.net/communities/ via http://www.bortzmeyer.org/7153.html
24 66 Laurent GUERBY
25 55 Laurent GUERBY
http://tools.ietf.org/html/rfc4271#section-9.1 BGP route decision process
26 55 Laurent GUERBY
27 29 Laurent GUERBY
http://www.ipbcop.org/
28 29 Laurent GUERBY
IP Best Current Operational Practices Documented best practices for Engineers by Engineers
29 29 Laurent GUERBY
30 30 Laurent GUERBY
BGP best practices ANSSI
31 30 Laurent GUERBY
https://www.sstic.org/media/SSTIC2012/SSTIC-actes/influence_des_bonnes_pratiques_sur_les_incidents_b/SSTIC2012-Article-influence_des_bonnes_pratiques_sur_les_incidents_bgp-contat_valadon_nataf_2.pdf
32 62 Laurent GUERBY
http://www.ssi.gouv.fr/fr/bonnes-pratiques/recommandations-et-guides/securite-des-reseaux/le-guide-des-bonnes-pratiques-de-configuration-de-bgp.html
33 64 Laurent GUERBY
http://tools.ietf.org/html/draft-ietf-opsec-bgp-security-01
34 179 Laurent GUERBY
http://www.ssi.gouv.fr/uploads/2014/10/rapport_observatoire_2015.pdf
35 30 Laurent GUERBY
36 37 Laurent GUERBY
https://www.ams-ix.net/technical/specifications-descriptions/ams-ix-route-servers
37 37 Laurent GUERBY
38 39 Laurent GUERBY
these LAAS BGP http://www.laas.fr/1-31360-Detail-Soutenance-de-these.php?id=600
39 41 Laurent GUERBY
http://www.laas.fr/1-31706-Publications.php?author=7738
40 1 Laurent GUERBY
http://www.net.t-labs.tu-berlin.de/papers/OMUPMO-OOSICP-11.pdf
41 42 Laurent GUERBY
http://hal.archives-ouvertes.fr/docs/00/60/53/83/PDF/dVirt-virtual_platform.pdf
42 42 Laurent GUERBY
http://hal.archives-ouvertes.fr/docs/00/48/70/74/PDF/Poster_SIGCOMM2010_philippe.pdf
43 40 Laurent GUERBY
44 44 Laurent GUERBY
Le monde sur BGP http://reseaux.blog.lemonde.fr/2012/11/04/routage-enjeu-cyberstrategie/
45 44 Laurent GUERBY
46 45 Laurent GUERBY
coupure free wanadoo http://www.journaldunet.com/solutions/0301/030122_freeft.shtml
47 45 Laurent GUERBY
48 46 Laurent GUERBY
tsunami Japon 2011 et BGP : http://archive.psg.com/111206.conext-quake.pdf
49 46 Laurent GUERBY
50 47 Laurent GUERBY
Session is up on telnet:route-views.routeviews.org username rviews
51 47 Laurent GUERBY
52 48 Laurent GUERBY
BGP book http://www.bortzmeyer.org/files/bgp.html
53 48 Laurent GUERBY
54 49 Laurent GUERBY
Cyclops is able to detect several forms of route hijack attacks http://cyclops.cs.ucla.edu/
55 50 Laurent GUERBY
BGPmon monitors the routing of your prefixes and alerts you in case of an 'interesting' path chang http://www.bgpmon.net/
56 49 Laurent GUERBY
57 53 Laurent GUERBY
http://jointtransit.nl/prices.html
58 53 Laurent GUERBY
59 54 Laurent GUERBY
http://blog.cloudflare.com/the-ddos-that-knocked-spamhaus-offline-and-ho
60 54 Laurent GUERBY
61 51 Laurent GUERBY
* taille table de routage http://bgp.potaroo.net/
62 1 Laurent GUERBY
63 65 Laurent GUERBY
* BGP	in	2011	 Geoff	Huston	 APNIC http://iepg.org/2011-11-ietf82/2011-11-13-bgp2011.pdf
64 56 Laurent GUERBY
65 57 Laurent GUERBY
* http://pages.cs.wisc.edu/~plonka/netgear-sntp/
66 57 Laurent GUERBY
67 58 Laurent GUERBY
* http://www.afnic.fr/fr/l-afnic-en-bref/actualites/actualites-generales/7114/show/l-observatoire-sur-la-resilience-de-l-internet-francais-publie-son-rapport-2012.html
68 58 Laurent GUERBY
69 59 Laurent GUERBY
* http://www.ris.ripe.net/dashboard/2a01:6600:8000::/40
70 59 Laurent GUERBY
71 60 Laurent GUERBY
* http://www.bortzmeyer.org/6996.html
72 60 Laurent GUERBY
** RFC 6996 : Autonomous System (AS) Reservation for Private Use
73 60 Laurent GUERBY
** http://www.iana.org/assignments/as-numbers
74 60 Laurent GUERBY
75 61 Laurent GUERBY
* Look for TRACEROUTE by SRCGUARDIAN in the Play Store.   It needs network access only...  Doesn't do TCP but does ICMP and UDP traceroutes and displays ASN as well ...
76 61 Laurent GUERBY
77 63 Laurent GUERBY
* http://www.team-cymru.org/Services/Bogons/bgp.html
78 63 Laurent GUERBY
** http://www.team-cymru.org/Services/Bogons/bgp-examples.html#bird-full
79 175 Laurent GUERBY
80 175 Laurent GUERBY
* 3D looking glass  http://as2914.net/#/
81 63 Laurent GUERBY
82 177 Laurent GUERBY
* https://labs.ripe.net/Members/emileaben/has-the-routability-of-longer-than-24-prefixes-changed
83 177 Laurent GUERBY
84 180 Laurent GUERBY
* http://research.dyn.com/2016/04/a-bakers-dozen-2015-edition/
85 180 Laurent GUERBY
86 171 Laurent GUERBY
h1. Bird
87 171 Laurent GUERBY
88 171 Laurent GUERBY
h2. Link local IPv6 static route
89 171 Laurent GUERBY
90 171 Laurent GUERBY
<pre>
91 171 Laurent GUERBY
    protocol direct {
92 171 Laurent GUERBY
      interface "eth0";
93 171 Laurent GUERBY
    }
94 171 Laurent GUERBY
95 171 Laurent GUERBY
    protocol static {
96 171 Laurent GUERBY
      route 2001:db8::/32 via fe80::1%eth0;
97 171 Laurent GUERBY
    }
98 171 Laurent GUERBY
</pre>
99 171 Laurent GUERBY
100 172 Laurent GUERBY
h2. Gitoyen BIRD config
101 172 Laurent GUERBY
102 172 Laurent GUERBY
https://code.ffdn.org/gitoyen/bird-config/
103 171 Laurent GUERBY
104 176 Laurent GUERBY
Et autres outils dont le blackholing automatique : https://code.ffdn.org/org/gitoyen
105 176 Laurent GUERBY
106 173 Laurent GUERBY
h2. Misc BIRD Links
107 173 Laurent GUERBY
108 173 Laurent GUERBY
* zeromq integration https://github.com/samrussell/bird/tree/zmqintegration
109 174 Laurent GUERBY
* https://www.netdev01.org/docs/prabhu-linux_ipv4_ipv6_inconsistencies_talk_slides.pdf
110 173 Laurent GUERBY
111 178 Baptiste Jonglez
h1. mrtdump
112 178 Baptiste Jonglez
113 178 Baptiste Jonglez
mrtdump est un format standard pour représenter et stocker des données BGP (table de routage, messages BGP) : https://tools.ietf.org/html/rfc6396
114 178 Baptiste Jonglez
115 178 Baptiste Jonglez
h2. Dump mrtdump avec Bird
116 178 Baptiste Jonglez
117 178 Baptiste Jonglez
h3. Dump de tous les messages BGP échangés avec les pairs
118 178 Baptiste Jonglez
119 178 Baptiste Jonglez
<pre>
120 178 Baptiste Jonglez
mrtdump "/tmp/mrtdump-messages";
121 178 Baptiste Jonglez
mrtdump protocols {messages};
122 178 Baptiste Jonglez
</pre>
123 178 Baptiste Jonglez
124 178 Baptiste Jonglez
Cf. doc bird : http://bird.network.cz/?get_doc&f=bird-3.html#ss3.2
125 178 Baptiste Jonglez
126 178 Baptiste Jonglez
Pour "rotate" le fichier de dump, changer le nom du fichier dans la configuration bird et faire `birdc configure`.
127 178 Baptiste Jonglez
128 178 Baptiste Jonglez
h3. Dump de la table de routage BGP
129 178 Baptiste Jonglez
130 178 Baptiste Jonglez
Ce n'est pas encore possible mais en développement dans Bird, cf. branche *mrtdump* upstream.
131 178 Baptiste Jonglez
132 178 Baptiste Jonglez
Doc : https://gitlab.labs.nic.cz/labs/bird/commit/11fabd2d6b8bc3d6ca86acd3b62fe4deeb4b91b7
133 178 Baptiste Jonglez
134 178 Baptiste Jonglez
h2. Sources de données mrtdump publiques
135 178 Baptiste Jonglez
136 178 Baptiste Jonglez
* RIS (Routing Information Service) :
137 178 Baptiste Jonglez
138 178 Baptiste Jonglez
  * routes BGP collectées par le RIPE depuis plusieurs points d'échanges (16 collecteurs en tout)
139 178 Baptiste Jonglez
  * données collectées et archivées depuis 2001
140 178 Baptiste Jonglez
  * https://www.ripe.net/analyse/internet-measurements/routing-information-service-ris/routing-information-service-ris
141 178 Baptiste Jonglez
  * données en libre accès https://www.ripe.net/analyse/internet-measurements/routing-information-service-ris/ris-raw-data
142 178 Baptiste Jonglez
143 178 Baptiste Jonglez
* Routeviews :
144 178 Baptiste Jonglez
145 178 Baptiste Jonglez
  * même idée, mais moins centré sur l'Europe (projet mené par des américains)
146 178 Baptiste Jonglez
  * http://www.routeviews.org/
147 178 Baptiste Jonglez
  * données en libre accès ftp://archive.routeviews.org/
148 178 Baptiste Jonglez
149 178 Baptiste Jonglez
h2. Exploitation des données mrtdump
150 178 Baptiste Jonglez
151 178 Baptiste Jonglez
* outil historique : *bgpdump* https://bitbucket.org/ripencc/bgpdump/wiki/Home
152 178 Baptiste Jonglez
* plus récent : *bgpstream* https://bgpstream.caida.org/  https://github.com/CAIDA/bgpstream https://pypi.python.org/pypi/pybgpstream
153 178 Baptiste Jonglez
154 178 Baptiste Jonglez
bgpstream est plutôt fait pour récupérer automatiquement les données de RIS et Routeviews (d'ailleurs parfois ça ne marche pas super bien...).  C'est aussi possible de lire des fichiers mrtdump locaux, par exemple avec les bindings python :
155 178 Baptiste Jonglez
156 178 Baptiste Jonglez
<pre>
157 178 Baptiste Jonglez
from _pybgpstream import BGPStream, BGPRecord, BGPElem
158 178 Baptiste Jonglez
record = BGPRecord()
159 178 Baptiste Jonglez
stream = BGPStream()
160 178 Baptiste Jonglez
stream.set_data_interface("singlefile")
161 178 Baptiste Jonglez
stream.set_data_interface_option("singlefile", "rib-file", myfilename)
162 178 Baptiste Jonglez
# Add additional filters here
163 178 Baptiste Jonglez
stream.start()
164 178 Baptiste Jonglez
# etc (cf. tutorial bgpstream)
165 178 Baptiste Jonglez
</pre>
166 178 Baptiste Jonglez
167 178 Baptiste Jonglez
168 38 Laurent GUERBY
h1. TouIX et GIX
169 38 Laurent GUERBY
170 38 Laurent GUERBY
http://touix.net
171 38 Laurent GUERBY
http://wikilulu.net/doku.php?id=articles:gix-howto
172 38 Laurent GUERBY
173 3 Laurent GUERBY
h1. Evolutions de la conf BGP
174 3 Laurent GUERBY
175 3 Laurent GUERBY
* http://lists.tetaneutral.net/pipermail/technique/2011-December/000118.html
176 3 Laurent GUERBY
177 5 Laurent GUERBY
TODO: 
178 6 Laurent GUERBY
* mise en place d'un gestionaire de version style git au moins pour documentation
179 5 Laurent GUERBY
* Comment gerer les password MD5 du fichier de conf (les garder secrets tout en publiant le reste)
180 5 Laurent GUERBY
* Atelier ?
181 7 Laurent GUERBY
** Laurent GUERBY
182 9 Raphaël Durand
** Solarus
183 10 Raphaël Durand
** Ajouter son nom...
184 4 Laurent GUERBY
185 13 Laurent GUERBY
Alternative a MP BGP
186 13 Laurent GUERBY
http://tools.ietf.org/html/draft-ietf-idr-bgp-multisession-06
187 13 Laurent GUERBY
188 31 Laurent GUERBY
Add Path
189 31 Laurent GUERBY
http://tools.ietf.org/html/draft-ietf-idr-add-paths-07
190 31 Laurent GUERBY
support in bird ? http://marc.info/?l=bird-users&m=134409996129466&w=2
191 31 Laurent GUERBY
192 2 Laurent GUERBY
h1. Liens
193 2 Laurent GUERBY
194 2 Laurent GUERBY
* http://www.cl.cam.ac.uk/~tgg22/talks/BGP_TUTORIAL_ICNP_2002.ppt
195 11 Laurent GUERBY
* http://www.menog.net/menog-meetings/menog5/presentations/smith-32bit-asn-update.pdf
196 12 Laurent GUERBY
* AS4 http://www.rfc-editor.org/rfc/rfc4893.txt
197 19 Laurent GUERBY
* bonnes pratiques incidents BGP
198 19 Laurent GUERBY
** https://www.sstic.org/media/SSTIC2012/SSTIC-actes/influence_des_bonnes_pratiques_sur_les_incidents_b/SSTIC2012-Slides-influence_des_bonnes_pratiques_sur_les_incidents_bgp-contat_valadon_nataf.pdf
199 35 Laurent GUERBY
* test ping plus UDP http://www.broadband-forum.org/technical/download/TR-143.pdf
200 2 Laurent GUERBY
201 1 Laurent GUERBY
h1. Configuration Toulouse
202 1 Laurent GUERBY
203 1 Laurent GUERBY
<pre>
204 1 Laurent GUERBY
router id 91.224.148.2;
205 1 Laurent GUERBY
define myas = 197422;
206 1 Laurent GUERBY
207 1 Laurent GUERBY
208 1 Laurent GUERBY
protocol device {
209 1 Laurent GUERBY
	scan time 10;
210 1 Laurent GUERBY
        primary "eth0" 91.224.148.3;
211 1 Laurent GUERBY
}
212 1 Laurent GUERBY
213 1 Laurent GUERBY
protocol static static_bgp {
214 1 Laurent GUERBY
	import all;
215 1 Laurent GUERBY
	route 91.224.148.0/23 reject;
216 1 Laurent GUERBY
}
217 1 Laurent GUERBY
218 1 Laurent GUERBY
219 1 Laurent GUERBY
protocol kernel{
220 1 Laurent GUERBY
	import all;
221 1 Laurent GUERBY
	export all;
222 1 Laurent GUERBY
}
223 1 Laurent GUERBY
224 1 Laurent GUERBY
225 1 Laurent GUERBY
function avoid_martians()
226 1 Laurent GUERBY
prefix set martians;
227 1 Laurent GUERBY
{
228 1 Laurent GUERBY
  martians = [ 169.254.0.0/16+, 172.16.0.0/12+, 192.168.0.0/16+, 10.0.0.0/8+, 224.0.0.0/4+, 240.0.0.0/4+ ];
229 1 Laurent GUERBY
230 1 Laurent GUERBY
  # Avoid 0.0.0.0/X
231 1 Laurent GUERBY
  if net.ip = 0.0.0.0 then return false;
232 1 Laurent GUERBY
233 1 Laurent GUERBY
  # Avoid too short and too long prefixes
234 1 Laurent GUERBY
  if (net.len < 8) || (net.len > 24) then return false;
235 1 Laurent GUERBY
236 1 Laurent GUERBY
  # Avoid RFC1918 networks
237 1 Laurent GUERBY
  if net ~ martians then return false;
238 1 Laurent GUERBY
  return true;
239 1 Laurent GUERBY
}
240 1 Laurent GUERBY
241 1 Laurent GUERBY
filter bgp_OUT {
242 1 Laurent GUERBY
	if (net ~ [91.224.148.0/23]) then accept;
243 1 Laurent GUERBY
	else reject;
244 1 Laurent GUERBY
}
245 1 Laurent GUERBY
246 1 Laurent GUERBY
247 1 Laurent GUERBY
protocol bgp TOUIX {
248 1 Laurent GUERBY
        local as myas;
249 1 Laurent GUERBY
        neighbor 91.213.236.1 as 47184;
250 1 Laurent GUERBY
        preference 200;
251 1 Laurent GUERBY
        import where avoid_martians();
252 1 Laurent GUERBY
        export filter bgp_OUT;
253 1 Laurent GUERBY
}
254 1 Laurent GUERBY
255 1 Laurent GUERBY
protocol bgp JAGUAR {
256 1 Laurent GUERBY
	 local as myas;
257 1 Laurent GUERBY
	 neighbor 31.172.233.1 as 30781;
258 1 Laurent GUERBY
	 preference 50;
259 1 Laurent GUERBY
         import where avoid_martians();
260 1 Laurent GUERBY
         export filter bgp_OUT;
261 1 Laurent GUERBY
}
262 1 Laurent GUERBY
263 1 Laurent GUERBY
protocol bgp TETANEUTRAL {
264 1 Laurent GUERBY
	local as myas;
265 1 Laurent GUERBY
	neighbor 91.224.148.2 as myas;
266 1 Laurent GUERBY
	preference 100;
267 1 Laurent GUERBY
	import where avoid_martians();
268 1 Laurent GUERBY
	export all;
269 1 Laurent GUERBY
}
270 1 Laurent GUERBY
</pre>
271 20 Laurent GUERBY
272 33 Laurent GUERBY
h1. IRR
273 33 Laurent GUERBY
274 33 Laurent GUERBY
* From nanog:
275 33 Laurent GUERBY
http://www.clarksys.com/blog/2009/09/02/using-irr-with-level3/
276 33 Laurent GUERBY
whois -h filtergen.level3.net "RIPE::YOUR-AS-SET  -searchpath=RIPE;ARIN;RADB -recurseok -warnonly"
277 33 Laurent GUERBY
278 20 Laurent GUERBY
h1. Blackholing
279 20 Laurent GUERBY
280 160 Laurent GUERBY
h2. DECIX
281 160 Laurent GUERBY
282 160 Laurent GUERBY
http://de-cix.net/products-services/de-cix-frankfurt/blackholing/
283 160 Laurent GUERBY
284 24 Laurent GUERBY
h2. Attaques
285 24 Laurent GUERBY
286 24 Laurent GUERBY
* 20120629 http://lists.tetaneutral.net/pipermail/technique/2012-July/000406.html
287 36 Laurent GUERBY
* http://blog.cloudflare.com/65gbps-ddos-no-problem
288 24 Laurent GUERBY
289 1 Laurent GUERBY
h2. URPF
290 34 Laurent GUERBY
291 65 Laurent GUERBY
blacklister une/plusieures sources est relativement complexe à mettre en place sur une petite infrastructure car nécessite la mise en place de l'URPF (Unicast Reverse Path Forwarding).
292 34 Laurent GUERBY
293 34 Laurent GUERBY
http://www.cisco.com/web/about/security/intelligence/ipv6_rtbh.html
294 34 Laurent GUERBY
295 20 Laurent GUERBY
h2. RFC3882 
296 1 Laurent GUERBY
297 22 Laurent GUERBY
* http://www.ietf.org/rfc/rfc3882.txt
298 1 Laurent GUERBY
community AS:666 sur annonce /32 pour balckhole par AS upstream
299 1 Laurent GUERBY
300 22 Laurent GUERBY
* doc CISCO
301 22 Laurent GUERBY
http://www.cisco.com/web/about/security/intelligence/blackhole.pdf
302 22 Laurent GUERBY
303 28 Laurent GUERBY
h2. RFC1997
304 28 Laurent GUERBY
305 28 Laurent GUERBY
* http://www.ietf.org/rfc/rfc1997.txt
306 28 Laurent GUERBY
BGP Communities Attribute
307 28 Laurent GUERBY
308 28 Laurent GUERBY
* doc CISCO
309 28 Laurent GUERBY
http://www.cisco.com/web/about/ac123/ac147/archived_issues/ipj_6-2/bgp_communities.html
310 28 Laurent GUERBY
311 22 Laurent GUERBY
h2. BIRD
312 22 Laurent GUERBY
313 22 Laurent GUERBY
* http://www.mail-archive.com/bird-users@atrey.karlin.mff.cuni.cz/msg01998.html
314 1 Laurent GUERBY
315 24 Laurent GUERBY
h2. Absolight
316 24 Laurent GUERBY
317 65 Laurent GUERBY
* communauté 29608:65001 sur /24..32 IPv4 et /41..128 IPv6 => blackhole
318 65 Laurent GUERBY
* test 20120703 IPv4 et IPv6, ça marche et convergence très rapide
319 24 Laurent GUERBY
320 22 Laurent GUERBY
h2. GIXE
321 1 Laurent GUERBY
322 65 Laurent GUERBY
* communauté 31576:666 sur /32 => blackhole
323 65 Laurent GUERBY
* test 20120703 => marche pas encore, signalé et dev a faire coté GIXE pour autoriser les /32
324 1 Laurent GUERBY
325 1 Laurent GUERBY
h2. Jaguar 
326 22 Laurent GUERBY
327 24 Laurent GUERBY
* https://extranet.jaguar-network.com/app/public/index.php?cmd=bgp-policy
328 65 Laurent GUERBY
* demande 20120702 : pas de communauté blackhole actuellement, en reflexion
329 65 Laurent GUERBY
* déploiement de matériel arbor networks, reglage a affiner (pas de detection d'attaque)
330 22 Laurent GUERBY
331 27 Laurent GUERBY
h2. Gitoyen
332 27 Laurent GUERBY
333 65 Laurent GUERBY
* demande 20120704 sur la liste, réponse 20120717
334 28 Laurent GUERBY
* Tata http://noc.easycolocate.nl/Teleglobe_bgp_comm.pdf
335 65 Laurent GUERBY
*** => black-hole route (host route or shorter prefix within customer’s RIR registred assignment) 64999:0
336 28 Laurent GUERBY
* Ielo  whois AS29075 => 29075:0 Null-route/Blackhole
337 32 Laurent GUERBY
* https://pad.ilico.org/p/cleanup-bgp-gitoyen
338 22 Laurent GUERBY
339 22 Laurent GUERBY
h2. France-IX
340 22 Laurent GUERBY
341 25 Laurent GUERBY
* community plan : https://apps.db.ripe.net/whois/lookup/ripe/aut-num/AS51706.html
342 26 Laurent GUERBY
* TODO tester
343 22 Laurent GUERBY
344 22 Laurent GUERBY
h2. Equinix-IX
345 1 Laurent GUERBY
346 26 Laurent GUERBY
* community plan : https://ix.equinix.com/ixp/mlpeCommunityInfo
347 26 Laurent GUERBY
* TODO tester
348 22 Laurent GUERBY
349 1 Laurent GUERBY
h2. TouIX
350 22 Laurent GUERBY
351 26 Laurent GUERBY
* demande acces switch et route server 20120702
352 22 Laurent GUERBY
* TODO
353 1 Laurent GUERBY
354 1 Laurent GUERBY
h2. Hurricane Electric
355 1 Laurent GUERBY
356 26 Laurent GUERBY
* http://www.he.net/adm/
357 1 Laurent GUERBY
* http://www.he.net/adm/blackhole.html
358 1 Laurent GUERBY
* TODO tester
359 28 Laurent GUERBY
360 28 Laurent GUERBY
h2. Sfinx
361 28 Laurent GUERBY
362 28 Laurent GUERBY
* http://www.renater.fr/route-servers-bgp?lang=fr
363 28 Laurent GUERBY
* whois  AS1304 =>
364 28 Laurent GUERBY
remarks:        1304:65281 = Apply NO-EXPORT community
365 28 Laurent GUERBY
remarks:        1304:65282 = Apply NO-ADVERTISE community
366 161 Laurent GUERBY
367 161 Laurent GUERBY
h2. Cogent
368 161 Laurent GUERBY
369 166 Laurent GUERBY
h3. Docs
370 166 Laurent GUERBY
371 161 Laurent GUERBY
* http://www.cogentco.com/files/docs/customer_service/guide/global_cogent_customer_user_guide.pdf
372 162 Laurent GUERBY
** communautés page 21-22
373 169 Laurent GUERBY
* http://www.onesc.net/communities/as174/
374 170 Laurent GUERBY
* https://www.nanog.org/mailinglist/mailarchives/old_archive/2005-03/msg00465.html
375 166 Laurent GUERBY
* https://www.nanog.org/meetings/nanog45/presentations/Sunday/RAS_traceroute_N45.pdf
376 1 Laurent GUERBY
377 162 Laurent GUERBY
France / Benelux:
378 162 Laurent GUERBY
+33 1 49 03 1818 (Hotline)
379 162 Laurent GUERBY
+33 1 49 03 1803 (fax)
380 162 Laurent GUERBY
fr-support@cogentco.com (maintenance and repair)
381 162 Laurent GUERBY
bnl-support@cogentco.com (maintenance and repair))
382 162 Laurent GUERBY
billingeu@cogentco.com (billing, customer care)
383 162 Laurent GUERBY
All Customers in Europe can also contact the European Cogent Customer Support team
384 162 Laurent GUERBY
using the generic email address for Europe: eu-support@cogentco.com 
385 162 Laurent GUERBY
386 164 Laurent GUERBY
Livré comme demandé sur rocade optique Fullsave :
387 164 Laurent GUERBY
Livré sur TLS01.CB.KD-05/A.To02.03&04 (tiroir optique N°2, fibre 03&04).
388 165 Laurent GUERBY
Cogent physical port te0/0/2/3-rcr11.tls01
389 164 Laurent GUERBY
390 163 Laurent GUERBY
Order ID/Service ID: 1-166108500
391 163 Laurent GUERBY
Service Type: EU_L3_ON_10GE_BURST
392 163 Laurent GUERBY
Commitment: 1000.0 MBps
393 163 Laurent GUERBY
Service Address: 125 bis ch du Sang de Serp
394 163 Laurent GUERBY
livraison dans baie Fullsave / salle LAP Te0/0/2/3 rcr01.tls01 -- > TLS01.CB.KD-05/A.To02.03&04
395 163 Laurent GUERBY
Toulouse, FR France 31000
396 163 Laurent GUERBY
Your service acceptance date is 27-May-2014 and your billing start date is 27-May-2014
397 163 Laurent GUERBY
398 163 Laurent GUERBY
Order ID/Service ID: 1-166108524
399 163 Laurent GUERBY
Service Type: EU_L3_ON_IPV6DSTACK_FLAT
400 163 Laurent GUERBY
Commitment: 0.0 MBps
401 163 Laurent GUERBY
Service Address: 125 bis ch du Sang de Serp
402 163 Laurent GUERBY
IPv6s fort port order 1-166108500
403 163 Laurent GUERBY
Toulouse, FR France 31000
404 163 Laurent GUERBY
Your service acceptance date is 27-May-2014 and your billing start date is 27-May-2014
405 163 Laurent GUERBY
406 163 Laurent GUERBY
Order ID/Service ID: 1-166108512
407 163 Laurent GUERBY
Service Type: EU_L0_ON_XCFIBER_FLAT
408 163 Laurent GUERBY
Commitment: 0.0 MBps
409 163 Laurent GUERBY
Service Address: 125 bis ch du Sang de Serp
410 163 Laurent GUERBY
Te0/0/2/3 rcr01.tls01 -- > TLS01.CB.KD-05/A.To02.03&04 port order 1-166108500
411 163 Laurent GUERBY
Toulouse, FR France 31000
412 163 Laurent GUERBY
Your service acceptance date is 27-May-2014 and your billing start date is 27-May-2014
413 162 Laurent GUERBY
414 162 Laurent GUERBY
h3. Config initiale BGP Cogent
415 162 Laurent GUERBY
416 161 Laurent GUERBY
<pre>
417 161 Laurent GUERBY
root@h7:~# cat /etc/bird/bird.conf
418 161 Laurent GUERBY
router id 149.11.58.74;
419 161 Laurent GUERBY
420 161 Laurent GUERBY
define myas = 197422;
421 161 Laurent GUERBY
422 161 Laurent GUERBY
timeformat base     iso long;
423 161 Laurent GUERBY
timeformat log      iso long;
424 161 Laurent GUERBY
timeformat protocol iso long;
425 161 Laurent GUERBY
timeformat route    iso long;
426 161 Laurent GUERBY
427 161 Laurent GUERBY
log "/var/log/bird/bird-20140527.log" all;
428 161 Laurent GUERBY
429 161 Laurent GUERBY
debug commands 2;
430 161 Laurent GUERBY
431 161 Laurent GUERBY
debug protocols { states, events };
432 161 Laurent GUERBY
433 161 Laurent GUERBY
protocol device {
434 161 Laurent GUERBY
        scan time 10;
435 161 Laurent GUERBY
}
436 161 Laurent GUERBY
437 161 Laurent GUERBY
protocol kernel {
438 161 Laurent GUERBY
        import all;
439 161 Laurent GUERBY
        export all;
440 161 Laurent GUERBY
        learn;
441 161 Laurent GUERBY
}
442 161 Laurent GUERBY
443 161 Laurent GUERBY
filter bgp_OUT {
444 167 Laurent GUERBY
        if (net ~ [91.224.148.0/23, 80.67.182.0/24, 89.234.156.0/23]) then {
445 167 Laurent GUERBY
          accept;
446 167 Laurent GUERBY
        }
447 161 Laurent GUERBY
        reject;
448 161 Laurent GUERBY
}
449 161 Laurent GUERBY
450 161 Laurent GUERBY
filter bgp_IN_PEERING {
451 161 Laurent GUERBY
       accept;
452 161 Laurent GUERBY
}
453 161 Laurent GUERBY
454 161 Laurent GUERBY
protocol bgp COGENT_TLS00 {
455 161 Laurent GUERBY
        local as myas;
456 161 Laurent GUERBY
        neighbor 149.11.58.73 as 174;
457 161 Laurent GUERBY
        import filter bgp_IN_PEERING;
458 161 Laurent GUERBY
        export filter bgp_OUT;
459 161 Laurent GUERBY
}
460 161 Laurent GUERBY
root@h7:~# cat /etc/bird/bird6.conf
461 161 Laurent GUERBY
router id 149.11.58.74;
462 161 Laurent GUERBY
463 161 Laurent GUERBY
define myas = 197422;
464 161 Laurent GUERBY
465 161 Laurent GUERBY
timeformat base     iso long;
466 161 Laurent GUERBY
timeformat log      iso long;
467 161 Laurent GUERBY
timeformat protocol iso long;
468 161 Laurent GUERBY
timeformat route    iso long;
469 161 Laurent GUERBY
470 161 Laurent GUERBY
log "/var/log/bird/bird6-20140527.log" all;
471 161 Laurent GUERBY
472 161 Laurent GUERBY
debug commands 2;
473 161 Laurent GUERBY
474 161 Laurent GUERBY
debug protocols { states, events };
475 161 Laurent GUERBY
476 161 Laurent GUERBY
listen bgp v6only;
477 161 Laurent GUERBY
478 161 Laurent GUERBY
protocol device {
479 161 Laurent GUERBY
        scan time 10;
480 161 Laurent GUERBY
}
481 161 Laurent GUERBY
482 161 Laurent GUERBY
protocol kernel {
483 161 Laurent GUERBY
        import all;
484 161 Laurent GUERBY
        export all;
485 161 Laurent GUERBY
        learn;
486 161 Laurent GUERBY
}
487 161 Laurent GUERBY
488 161 Laurent GUERBY
filter bgp_OUT_6 {
489 168 Laurent GUERBY
        if (net ~ [2a01:6600:8000::/40]) then {
490 168 Laurent GUERBY
          accept;
491 168 Laurent GUERBY
        }
492 161 Laurent GUERBY
        reject;
493 161 Laurent GUERBY
}
494 161 Laurent GUERBY
495 161 Laurent GUERBY
filter bgp_IN_PEERING_6 {
496 161 Laurent GUERBY
       accept;
497 161 Laurent GUERBY
}
498 161 Laurent GUERBY
499 161 Laurent GUERBY
protocol bgp COGENT_TLS00_6 {
500 161 Laurent GUERBY
        local as myas;
501 161 Laurent GUERBY
        neighbor 2001:978:2:68::8:1 as 174;
502 161 Laurent GUERBY
        import filter bgp_IN_PEERING_6;
503 161 Laurent GUERBY
        export filter bgp_OUT_6;
504 161 Laurent GUERBY
}
505 161 Laurent GUERBY
</pre>