[Main] [Communities] [sBH/erBH] [rtsdCoS] [Routing Policy] [Filtering Policy] [Peering Policy]


KPN LOGO
AS286 Communities

v20201104



Fading away ...

AS286/KPN International was taken over by AS3257/GTT in December 2019. AS286 will be integrated into / migrated to 3257 and fade away. Therefore some of the information found on these pages might be outdated / obsolete.


Introduction

This document only applies to the KPN International IP backbone AS286.

The hereby described communities may be adjusted, altered and updated any time. Even our processes cover updates to documentation, there's no guarantee, that it's always up-to-date. In case of doubt, transit customers should contact our NOC and peers (if any left) should contact peering@as286.net

A general description on routing policies of AS286 can be found here https://as286.net/AS286-routing-policy.html.



The "standard" communities (supported for peers as well)

gshut (65535:0)
lower local-pref to minimum (1) - BGP graceful shutdown
no-export (65535:65281)
do not export to any customer or peer of AS286
no-advertise (65535:65282)
do not advertise beyond direct attached PE

Please note that the use of GSHUT (BGP graceful shutdown) will be monitored and must not be used for traffic engineering purposes. We'll remove support (on a per peer basis) for GSHUT if we observe frequent - non-maintenance related - use of this community.
Customers should be aware, that sBH/erBH and rtsdCoS received announcements will remain active with a higher local-pref (status 20171115, but might change).


ENG: (selective) Blackhole traffic and change CoS behavior (transit customers only)

Transit customers are only allowed to tag prefixes (or more specifics of them) of address space registered with an IRR and visible through whois.radb.net under his AS-set. Tagged prefixes will not be advertised to any other peer or customer and not (yet) to other peers or IX blackhole services (nor whatever comes rtsdCoS close).

286:66
traffic to prefixes tagged with 286:66 will be discard / routed to null
65535:666
proposed "standard" IETF BH community (draft-ietf-grow-blackholing) will be treated like 286:66 (and rewritten to it)
286:6xyz
selective BH/erBH communities, for details see https://as286.net/AS286-erBH.html
286:5xyz
selective rtCoS communities, for details see https://as286.net/AS286-rtsdCoS.html



ENG: Local preference (transit customers only)

Routes of customer will get a standard local preference of 100 assigned. (FYI: peering routes are usually between 50 and 90.)

286:70
lower local preference of route inside AS286 to 91
286:80
lower local preference of route inside AS286 to 94
286:90
lower local preference of route inside AS286 to 97



ENG: Prepending / suppressing AS286 announcements (transit customers only)

Transit customer can suppress or prepend announcements of their prefixes through AS286 on any other direct BGP session KPN operates.

If a prefix is tagged with multiple prepend communities and if those are applicable for the announcement, only ONE prepend community will be used (no accumulation) and the standard ones will be leading, an AS specific will take precedence over an IX over a regional one and a do-not-announce over do-not-prepend over prepend-once over prepend-twice over triple-prepend over quad-prepend.


Regional communities

A "peer" in this context is a BGP sessions between AS286 and another AS, exchanging customer (or partial) routes only - BGP sessions to customers of KPN on which KPN does provide transit, are NOT included.

286:19
do not announce to European peers
286:10019
do not prepend to European peers
286:11
prepend one time to European peers
286:12
prepend two times to European peers
286:13
prepend three times to European peers
286:14
prepend four times to European peers

286:49
do not announce to US peers
286:10049
do not prepend to US peers
286:41
prepend one time to US peers
286:42
prepend two times to US peers
286:43
prepend three times to US peers
286:44
prepend four times to US peers

286:79
do not announce to Asian peers
286:10079
do not prepend to Asian peers
286:71
prepend one time to Asian peers
286:72
prepend two times to Asian peers
286:73
prepend three times to Asian peers
286:74
prepend four times to Asian peers


Exchange related communities

Announcements on the following public Exchanges KPN is present can be suppressed or prepended with the following communities:

Exchange
do-not-announce / no prepend / prepend 1x / 2x / 3x / 4x
AMS-IX
286:1010 / 286:11014 / 286:1011 / 286:1012 / 286:1013 / 286:1014
NL-IX
286:1020 / 286:11024 / 286:1021 / 286:1022 / 286:1023 / 286:1024
LINX
286:1070 / 286:11074 / 286:1071 / 286:1072 / 286:1073 / 286:1074
DE-CIX FFM
286:1080 / 286:11084 / 286:1081 / 286:1082 / 286:1083 / 286:1084
N-IX
286:1100 / 286:11104 / 286:1101 / 286:1102 / 286:1103 / 286:1104
VIX
286:1110 / 286:11114 / 286:1111 / 286:1112 / 286:1113 / 286:1114
Equinix Palo Alto
286:1120 / 286:11124 / 286:1121 / 286:1122 / 286:1123 / 286:1124
NOTA
286:1140 / 286:11144 / 286:1141 / 286:1142 / 286:1143 / 286:1144
CIXP
286:1150 / 286:11154 / 286:1151 / 286:1152 / 286:1153 / 286:1154
DECIX HH
286:1160 / 286:11164 / 286:1161 / 286:1162 / 286:1163 / 286:1164
Equinix Ashburn
286:1170 / 286:11174 / 286:1171 / 286:1172 / 286:1173 / 286:1174
Equinix Chicago
286:1180 / 286:11184 / 286:1181 / 286:1182 / 286:1183 / 286:1184
Equinix Dallas
286:1190 / 286:11194 / 286:1191 / 286:1192 / 286:1193 / 286:1194
Equinix New York
286:1200 / 286:11204 / 286:1201 / 286:1202 / 286:1203 / 286:1204
Equinix San Jose
286:1210 / 286:11214 / 286:1211 / 286:1212 / 286:1213 / 286:1214
ECIX Düsseldorf
286:1220 / 286:11224 / 286:1221 / 286:1222 / 286:1223 / 286:1224
BCIX Speedbone
286:1240 / 286:11244 / 286:1241 / 286:1242 / 286:1243 / 286:1244
FL-IX (Florida)
286:1250 / 286:11254 / 286:1251 / 286:1252 / 286:1253 / 286:1254
ECIX Frankfurt
286:1260 / 286:11264 / 286:1261 / 286:1262 / 286:1263 / 286:1264
R_ix Rotterdam
286:1270 / 286:11274 / 286:1271 / 286:1272 / 286:1273 / 286:1274
Equinix London
286:1280 / 286:11284 / 286:1281 / 286:1282 / 286:1283 / 286:1284
Equinix Manchester
286:1290 / 286:11294 / 286:1291 / 286:1292 / 286:1293 / 286:1294
Equinix Paris
286:1300 / 286:11304 / 286:1301 / 286:1302 / 286:1303 / 286:1304


AS specific communities

Announcement can also be suppressed or prepended to any AS (peer or customer) KPN has a direct BGP session. Due to 32bit AS numbers (ASN - luckily the Internet got them), some "basic" math is needed, at least for 32bit ASN ... In the following table,
    d stands for ASN >> 16 (or ASN / 65536)
    asmod for ASN & 0xffff (or ASN % 65536)
In words: d is the quotient of the ASN divided by 65536 and asmod the remainder of it. This works out for all currently allocated ASN (d<=6) and 65535:666 is also pretty far away.

This reads more complicated than it is: for 16bit ASN (<65536), d=0 and asmod is simply the ASN. E.g. if you want have your prefixes prepend once on the BGP session of AS286 to AS3320, just tag your prefix with 65001:3320.

(65000+d*10):asmod
do not prepend towards ASN
(65001+d*10):asmod
prepend once towards ASN
(65002+d*10):asmod
prepend twice towards ASN
(65003+d*10):asmod
prepend three times towards ASN
(65004+d*10):asmod
prepend four times towards ASN
(65009+d*10):asmod
do not announce to ASN

Again, for 16bit ASN this is quite simple

65000:ASN
do not prepend towards ASN
65001:ASN
prepend once towards ASN
65002:ASN
prepend twice towards ASN
65003:ASN
prepend three times towards ASN
65004:ASN
prepend four times towards ASN
65009:ASN
do not announce to ASN

Other legacy communities for suppressing or prepending announcements are not supported anymore (286:21-24,29; 286:37-39 and all the legacy to AS mapped communities 286:100-286:299).



INF: Route type (not settable)

AS286 tags routes internally based on their type (customer, peer, IX, PI, "full" PA block, more specific, static, interface, IGP, .... some of those communities can only be seen on AS286 Looking Glass or RouteServer, as prefixes tagged with them might never be announced to eBGP peers.

Some of the listed communities are classified as legacy (LG) and will vanish soon or later in AS286.

286:286
own or customer prefix
286:800
peering route
286:888
peering route
286:3000
AS286 originated "allocation"
(LG) 286:3002
AS286 originated "allocation" announced only in Africa
(LG) 286:3003
AS286 originated "allocation" announced only in Europe
(LG) 286:3004
AS286 originated "allocation" announced only in North America
(LG) 286:3005
AS286 originated "allocation" announced only in South America
(LG) 286:3006
AS286 originated "allocation" announced only in Australia
(LG) 286:3009
AS286 originated "allocation" announced only in Asia
(LG) 286:3800
interface route, internal address space
(LG) 286:3801
interface route, public address space
(LG) 286:3802
static route
286:3803
more specific of AS286 "allocation"
(LG) 286:3808
more specific of AS286 allocation static routes to customer
286:3809
customer PI space announced by AS286
286:3810
more specific of customer PI space
286:3811
IX (Internet Exchange) space AS286 is present
286:3850
peering with customer route
286:3855
manual configured selective blackhole (sBH/erBH) route
286:3866
manual configured network wide blackhole route
286:3900
static or aggregate route
286:3901
interface / connected route
286:3902
IGP re-advertised route
286:3903
Access / Access-internal re-advertised route
286:3876
"unclassified" connected, static, aggregate route
286:3999
de-aggregated AS286 "allocation" (for announcement)



INF: Route origin (not settable)

AS286 tags prefixes learned with regional, country and city (KPN PoP) information where the PE is located. Countries follow the notation 286:(3000+E.164) notation (unless there's a clash with other used communities), cities are "somewhere" between 286:4000 and 286:46xx ... The PoP names are KPN notation.

286:4990
Europe
286:4991
North America
286:4992
South America
286:4993
Asia
286:4994
Africa
286:4995
Australia
286:3001
Unites States
286:3007
Russia
286:3031
Netherlands
286:3032
Belgium
286:3033
France
286:3034
Spain
286:3039
Italy
286:3041
Switzerland
286:3043
Austria
286:3044
United Kingdom
286:3045
Denmark
286:3046
Sweden
286:3047
Norway
286:3048
Poland
286:3049
Germany
286:3065
Singapore
286:3086
China
286:3090
Turkey
286:3351
Portugal
286:3352
Luxemburg
286:3353
Ireland
286:3358
Finland
286:3420
Czech Republic
286:3421
Slovakia
286:3852
Hong Kong
(LG) 286:4001
KPN National (Amsterdam DC2)
(LG) 286:4002
KPN National (Rotterdam DC2)
(LG) 286:4003
KPN National (Utrecht DC2)
(LG) 286:4004
KPN National (Den Haag DC2)
(LG) 286:4005
KPN National (Amsterdam Nikhef)
(LG) 286:4006
KPN National (Amsterdam SARA)
(LG) 286:4007
KPN National (Amsterdam PBW)
(LG) 286:4008
KPN National (Amsterdam Telecity)
(LG) 286:4009
KPN National (Amsterdam CC59)
(LG) 286:4030
AT - wien-s1 (Vienna, University)
286:4029
AT - wien-s2 (Vienna, Interxion)
286:4055
BE - ant-s1 (Antwerpen, Noorderlaan)
286:4013
BE - zvtm-s1 (Brussels, Excelsiorlaan)
286:4529
BE - zvtm-s4 (Brussels, Interxion)
286:4016
CH - gnve-s1 (Geneve, CERN)
(LG) 286:4031
CH - zrch-s1 (Zürich, IX Europe)
286:4601
CN - honk-s2 (Hong Kong, Mega iAdvantage)
286:4065
CZ - pra-s1 (Prague, Sitel)
(LG) 286:4011
DE - blnb-s1 (Velten, Am Jägerberg)
286:4520
DE - blnb-s3 (Berlin, Speedbone)
(LG) 286:4047
DE - brlb-s1 (Barleben, An der Sülze)
(LG) 286:4048
DE - brm-s1 (Bremen, Sirius Park)
286:4034
DE - dssd-s2 (Düsseldorf, Vogelsanger Weg)
286:4035
DE - dssd-s3 (Interxion)
(LG) 286:4046
DE - essn-s1 (Essen, Kruppstr.)
286:4015
DE - ffm-s1 (Frankfurt, Equinix FR5 / Kleyerstr. 90)
(LG) 286:4014
DE - ffm-s2 (Frankfurt, Interxion FRA2)
286:4523
DE - ffm-s6 (Frankfurt, Interxion FRA4)
(LG) 286:4530
DE - ffm-s7 (Frankfurt, E-Shelter)
286:4017
DE - hmb-s2 (Hamburg, Wendenstr. 251)
286:4057
DE - hmb-s3 (Hamburg, Incolocate / Wendenstr. 379)
(LG) 286:4033
DE - hnvr-s1 (Hannover, Vahrenwalderstr.)
(LG) 286:4527
DE - kehl-s2 (Kehl, Hafenstr.)
(LG) 286:4045
DE - koln-s1 (Cologne, GIP Park)
(LG) 286:4044
DE - ksrh-s1 (Karlsruhe, Techpark / Emmy-Noether-Str.)
(LG) 286:4041
DE - ksrh-s2 (Karlsruhe, Techpark / TelemaxX IP-Center-2)
(LG) 286:4049
DE - lzg-s1 (Leipzig, Döbichauer Str.)
286:4022
DE - mchn-s1 (Munich, Seibelstr./Arnulfstr.)
(LG) 286:4043
DE - mnh-s1 (Mannheim, Markircher Str.)
286:4040
DE - nbg-s1 (Nürnberg, Deutschherrnstr.)
(LG) 286:4042
DE - stgt-s1 (Stuttgart-Vaihingen, Breitwiesenstr.)
286:4059
DK - kbhv-s1 (Copenhagen, Telia PowerCom)
(LG) 286:4056
ES - bcln-s1 (Barcelona, Telvent Carrier House)
286:4020
ES - mdd-s2 (Madrid, Carrier House 2)
(LG) 286:4018
FI - hski-s1 (Helsinki, Linnoitustie)
(LG) 286:4032
FR - abvl-s1 (Aubervilliers, Interxion)
286:4025
FR - nntr-s1 (Nanterre, Le Capitole)
(LG) 286:4026
FR - prs-s1 (Paris)
286:4028
FR - prs-s4 (Paris, Telehouse 2)
286:4062
FR - sdns-s1 (Saint Denis, Equinix PA3)
286:4038
IE - dbln-s2 (Dublin, Data Electronics U7)
286:4021
IT - mla-s1 (Milan, KPNQWest IT)
286:4062
LU - bmbg-s1 (Bettembourg, Luxconnect DC1)
(LG) 286:4060
LU - lxbg-s3 (Luxembourg, EBRC)
286:4512
NL - alr-s1 (Almere, Cybercenter)
286:4010
NL - asd2 (Amsterdam, Barbara Strozzilaan)
286:4066
NL - asd-s14 (Amsterdam, Global Switch)
286:4513
NL - asd-s15 (Amsterdam, Equinix AM1)
286:4514
NL - asd-s16 (Amstelveen, IDC Infonet NL)
286:4063
NL - asd-s17 (Schiphol Rijk, Interxion AMS5)
286:4515
NL - asd-s4 (Amsterdam, Nikhef)
286:4516
NL - asd-s5 (Amsterdam, Sara)
286:4517
NL - asd-s6 (Amsterdam, Telecity 1)
286:4518
NL - asd-s7 (Amsterdam, Interxion AMS3)
286:4519
NL - asd-s8 (Amsterdam, Telecity 2)
286:4050
NL - asmr-s1 (Aalsmeer, Lakenblekerstraat)
(LG) 286:4521
NL - bura (Burum, Wytsmaweg)
(LG) 286:4522
NL - bura2 (Burum, Wytsmaweg)
(LG) 286:4524
NL - gv2 (Den Haag, Prinses Beatrixlaan)
286:4515
NL - hlm-s1 (Haarlem, Evoswitch)
286:4051
NL - oudmr-s1 (Oude Meer, Anthony Fokkerpark)
286:4012
NL - rt2 (Rotterdam, Anthony Fokkerweg)
(LG) 286:4023
NO - oslo-s1 (Oslo, BaneTele AS)
286:4037
PL - wsw-s1 (Warsaw, LIM / PLIX)
(LG) 286:4039
PT - lsb-s2 (Lisbon, Telvent Carrier House)
286:4027
SE - sthm-s1 (Stockholm, Interxion)
(LG) 286:4024
SE - sthm-s2 (Stockholm, Telecity)
(LG) 286:4036
SK - brlv-s1 (Bratislava, Kopcianska)
286:4080
TR - ankr-s1 (Ankara, Turkcell Superonline)
286:4531
TR - gbze-s1 (Gebze, Turkcell Superonline)
(LG) 286:4058
TR - itb-s1 (Istanbul Uskudar, KocNET)
286:4526
TR - itb-s3 (Istanbul, Camlica Is Merkezi)
286:4053
UK - ldn-s1 (London, Telelinks / Greenwich view place)
286:4054
UK - ldn-s10 (London, Telehouse North / Coriander Avenue)
286:4019
UK - ldn-s2 (London, Telehouse East / Coriander Avenue)
286:4052
UK - ldn-s3 (London, Telecity Bonnington House)
286:4061
UK - mchr-s1 (Manchester, Telecity Kilburn House)
(LG) 286:4528
UK - rncn-s1 (Runcorn, The Babbage Center)
286:4503
US - ahbn-s1 (Ashburn, Equinix DC5)
286:4504
US - chg-s1 (Chicago, Equinix CH1)
286:4505
US - dlls-s1 (Dallas, DA1)
286:4511
US - lags-s1 (Los Angeles, CoreSite)
286:4510
US - miaf-s1 (Miami, Terremark)
286:4501
US - nyk-s1 (New York, TelX, Hudson 60)
286:4502
US - nyk-s2 (New York, Switch and Data / 8th Avenue 111)
286:4506
US - sjca-s1 (San Jose, Equinix SV1)



INF: Misc communities (not settable)

Some additional communities might be seen, which are purely internal "functional" communities ... not all of them will be explained here, but if you miss one and need information about it, please contact us.

(LG) 286:50-52
legacy markers for more-specifics, superblocks of AS286, AS1136, AS8737
(LG) 286:60-61
(no public info)
(LG) 286:1136
routes accepted from KPN national (AS1136) not matching AS-KPNNL
286:11000
prepend action already done
286:28601
local eBGP learned route
286:28610
rPKI/ROA valid
286:28611
rPKI/ROA invalid (downstream routes)
286:28612
rPKI/ROA unknown
286:28613
rPKI/ROA invalid (peering routes)
286:28655
rt(s)dCos active (change CoS)
286:28666
blackhole helper
286:28667
erBH / rtsdCos helper
286:28680
internal marker (bleaching 1)
286:28681
internal marker (bleaching 2)
286:28683
internal marker (protect 1)
286:28684
internal marker (Tier1*--nonTier1+--Tier1+--.* paths from peers)
286:28690
286->3257 more-specific leaking
286:28699
286<-3257 integration LU Lo tag
286:64512-64599
"insight" tags
286:900
rejected by prefix filter (IRR/manual)
286:901
rejected by as-path filter (IRR/manual)
286:905
rejected by rPKI filter (invalid)
286:910
rejected by prefix filter (our address space, no exception)
286:911
rejected by prefix filter (RFC space)
286:912
rejected by prefix filter (IX space we are present)
286:915
rejected by as-path filter ("Tier-1" in path)
286:920
rejected by prefix filter (default route)
286:921
rejected by as-path filter (long as path)
286:922
rejected by community filter (too many communities)
286:923
rejected by as-path filter (bogon AS)
286:924
rejected by prefix filter (too specific /24|/48 (peers only))
286:925
rejected by too-unspecific prefix filter (0/0,1-7 & ::/0,1-15)