Fading away ...
AS286/KPN International was taken over by AS3257/GTT in December 2019. AS286 will be integrated into / migrated to 3257 and fade away. Therefore some of the information found on these pages might be outdated / obsolete.
Introduction
This document only applies to the KPN International IP backbone AS286.
The hereby described communities may be adjusted, altered and updated any time. Even our processes cover updates to documentation, there's no guarantee, that it's always up-to-date. In case of doubt, transit customers should contact our NOC and peers (if any left) should contact peering@as286.net
A general description on routing policies of AS286 can be found here https://as286.net/AS286-routing-policy.html.
The "standard" communities (supported for peers as well)
gshut (65535:0)
|
lower local-pref to minimum (1) - BGP graceful shutdown
|
no-export (65535:65281)
|
do not export to any customer or peer of AS286
|
no-advertise (65535:65282)
|
do not advertise beyond direct attached PE
|
Please note that the use of GSHUT (BGP graceful shutdown) will be monitored and must not be
used for traffic engineering purposes. We'll remove support (on a per peer basis) for GSHUT
if we observe frequent - non-maintenance related - use of this community.
Customers should be aware, that sBH/erBH and rtsdCoS received announcements will remain active
with a higher local-pref (status 20171115, but might change).
ENG: (selective) Blackhole traffic and change CoS behavior (transit customers only)
Transit customers are only allowed to tag prefixes (or more specifics of them) of address space registered with an IRR and visible through whois.radb.net under his AS-set. Tagged prefixes will not be advertised to any other peer or customer and not (yet) to other peers or IX blackhole services (nor whatever comes rtsdCoS close).
286:66
|
traffic to prefixes tagged with 286:66 will be discard / routed to null
|
65535:666
|
proposed "standard" IETF BH community (draft-ietf-grow-blackholing) will be treated like 286:66 (and rewritten to it)
|
286:6xyz
|
selective BH/erBH communities, for details see https://as286.net/AS286-erBH.html
|
286:5xyz
|
selective rtCoS communities, for details see https://as286.net/AS286-rtsdCoS.html
|
ENG: Local preference (transit customers only)
Routes of customer will get a standard local preference of 100 assigned. (FYI: peering routes are usually between 50 and 90.)
286:70
|
lower local preference of route inside AS286 to 91
|
286:80
|
lower local preference of route inside AS286 to 94
|
286:90
|
lower local preference of route inside AS286 to 97
|
ENG: Prepending / suppressing AS286 announcements (transit customers only)
Transit customer can suppress or prepend announcements of their prefixes through AS286 on any other direct BGP session KPN operates.
If a prefix is tagged with multiple prepend communities and if those are applicable for the announcement, only ONE prepend community will be used (no accumulation) and the standard ones will be leading, an AS specific will take precedence over an IX over a regional one and a do-not-announce over do-not-prepend over prepend-once over prepend-twice over triple-prepend over quad-prepend.
Regional communities
A "peer" in this context is a BGP sessions between AS286 and another AS, exchanging customer (or partial) routes only - BGP sessions to customers of KPN on which KPN does provide transit, are NOT included.
286:19
|
do not announce to European peers
|
286:10019
|
do not prepend to European peers
|
286:11
|
prepend one time to European peers
|
286:12
|
prepend two times to European peers
|
286:13
|
prepend three times to European peers
|
286:14
|
prepend four times to European peers
|
286:49
|
do not announce to US peers
|
286:10049
|
do not prepend to US peers
|
286:41
|
prepend one time to US peers
|
286:42
|
prepend two times to US peers
|
286:43
|
prepend three times to US peers
|
286:44
|
prepend four times to US peers
|
286:79
|
do not announce to Asian peers
|
286:10079
|
do not prepend to Asian peers
|
286:71
|
prepend one time to Asian peers
|
286:72
|
prepend two times to Asian peers
|
286:73
|
prepend three times to Asian peers
|
286:74
|
prepend four times to Asian peers
|
Exchange related communities
Announcements on the following public Exchanges KPN is present can be suppressed or prepended with the following communities:
Exchange
|
do-not-announce / no prepend / prepend 1x / 2x / 3x / 4x
|
AMS-IX
|
286:1010 / 286:11014 / 286:1011 / 286:1012 / 286:1013 / 286:1014
|
NL-IX
|
286:1020 / 286:11024 / 286:1021 / 286:1022 / 286:1023 / 286:1024
|
LINX
|
286:1070 / 286:11074 / 286:1071 / 286:1072 / 286:1073 / 286:1074
|
DE-CIX FFM
|
286:1080 / 286:11084 / 286:1081 / 286:1082 / 286:1083 / 286:1084
|
N-IX
|
286:1100 / 286:11104 / 286:1101 / 286:1102 / 286:1103 / 286:1104
|
VIX
|
286:1110 / 286:11114 / 286:1111 / 286:1112 / 286:1113 / 286:1114
|
Equinix Palo Alto
|
286:1120 / 286:11124 / 286:1121 / 286:1122 / 286:1123 / 286:1124
|
NOTA
|
286:1140 / 286:11144 / 286:1141 / 286:1142 / 286:1143 / 286:1144
|
CIXP
|
286:1150 / 286:11154 / 286:1151 / 286:1152 / 286:1153 / 286:1154
|
DECIX HH
|
286:1160 / 286:11164 / 286:1161 / 286:1162 / 286:1163 / 286:1164
|
Equinix Ashburn
|
286:1170 / 286:11174 / 286:1171 / 286:1172 / 286:1173 / 286:1174
|
Equinix Chicago
|
286:1180 / 286:11184 / 286:1181 / 286:1182 / 286:1183 / 286:1184
|
Equinix Dallas
|
286:1190 / 286:11194 / 286:1191 / 286:1192 / 286:1193 / 286:1194
|
Equinix New York
|
286:1200 / 286:11204 / 286:1201 / 286:1202 / 286:1203 / 286:1204
|
Equinix San Jose
|
286:1210 / 286:11214 / 286:1211 / 286:1212 / 286:1213 / 286:1214
|
ECIX Düsseldorf
|
286:1220 / 286:11224 / 286:1221 / 286:1222 / 286:1223 / 286:1224
|
BCIX Speedbone
|
286:1240 / 286:11244 / 286:1241 / 286:1242 / 286:1243 / 286:1244
|
FL-IX (Florida)
|
286:1250 / 286:11254 / 286:1251 / 286:1252 / 286:1253 / 286:1254
|
ECIX Frankfurt
|
286:1260 / 286:11264 / 286:1261 / 286:1262 / 286:1263 / 286:1264
|
R_ix Rotterdam
|
286:1270 / 286:11274 / 286:1271 / 286:1272 / 286:1273 / 286:1274
|
Equinix London
|
286:1280 / 286:11284 / 286:1281 / 286:1282 / 286:1283 / 286:1284
|
Equinix Manchester
|
286:1290 / 286:11294 / 286:1291 / 286:1292 / 286:1293 / 286:1294
|
Equinix Paris
|
286:1300 / 286:11304 / 286:1301 / 286:1302 / 286:1303 / 286:1304
|
AS specific communities
Announcement can also be suppressed or prepended to any AS (peer or customer) KPN
has a direct BGP session.
Due to 32bit AS numbers (ASN - luckily the Internet got them), some "basic" math is needed, at least
for 32bit ASN ...
In the following table,
    d stands for ASN >> 16 (or ASN / 65536)
    asmod for ASN & 0xffff (or ASN % 65536)
In words: d is the quotient of the ASN divided by 65536 and asmod the remainder of it.
This works out for all currently allocated ASN (d<=6) and 65535:666 is also pretty far away.
This reads more complicated than it is: for 16bit ASN (<65536), d=0 and asmod is simply the ASN. E.g. if you want have your prefixes prepend once on the BGP session of AS286 to AS3320, just tag your prefix with 65001:3320.
(65000+d*10):asmod
|
do not prepend towards ASN
|
(65001+d*10):asmod
|
prepend once towards ASN
|
(65002+d*10):asmod
|
prepend twice towards ASN
|
(65003+d*10):asmod
|
prepend three times towards ASN
|
(65004+d*10):asmod
|
prepend four times towards ASN
|
(65009+d*10):asmod
|
do not announce to ASN
|
Again, for 16bit ASN this is quite simple
65000:ASN
|
do not prepend towards ASN
|
65001:ASN
|
prepend once towards ASN
|
65002:ASN
|
prepend twice towards ASN
|
65003:ASN
|
prepend three times towards ASN
|
65004:ASN
|
prepend four times towards ASN
|
65009:ASN
|
do not announce to ASN
|
Other legacy communities for suppressing or prepending announcements are not supported anymore (286:21-24,29; 286:37-39 and all the legacy to AS mapped communities 286:100-286:299).
INF: Route type (not settable)
AS286 tags routes internally based on their type (customer, peer, IX, PI, "full" PA block, more specific, static, interface, IGP, .... some of those communities can only be seen on AS286 Looking Glass or RouteServer, as prefixes tagged with them might never be announced to eBGP peers.
Some of the listed communities are classified as legacy (LG) and will vanish soon or later in AS286.
286:286
|
own or customer prefix
|
|
286:800
|
peering route
|
|
286:888
|
peering route
|
|
286:3000
|
AS286 originated "allocation"
|
|
(LG) 286:3002
|
AS286 originated "allocation" announced only in Africa
|
|
(LG) 286:3003
|
AS286 originated "allocation" announced only in Europe
|
|
(LG) 286:3004
|
AS286 originated "allocation" announced only in North America
|
|
(LG) 286:3005
|
AS286 originated "allocation" announced only in South America
|
|
(LG) 286:3006
|
AS286 originated "allocation" announced only in Australia
|
|
(LG) 286:3009
|
AS286 originated "allocation" announced only in Asia
|
|
(LG) 286:3800
|
interface route, internal address space
|
|
(LG) 286:3801
|
interface route, public address space
|
|
(LG) 286:3802
|
static route
|
|
286:3803
|
more specific of AS286 "allocation"
|
|
(LG) 286:3808
|
more specific of AS286 allocation static routes to customer
|
|
286:3809
|
customer PI space announced by AS286
|
|
286:3810
|
more specific of customer PI space
|
|
286:3811
|
IX (Internet Exchange) space AS286 is present
|
|
286:3850
|
peering with customer route
|
|
286:3855
|
manual configured selective blackhole (sBH/erBH) route
|
|
286:3866
|
manual configured network wide blackhole route
|
|
286:3900
|
static or aggregate route
|
|
286:3901
|
interface / connected route
|
|
286:3902
|
IGP re-advertised route
|
|
286:3903
|
Access / Access-internal re-advertised route
|
|
286:3876
|
"unclassified" connected, static, aggregate route
|
|
286:3999
|
de-aggregated AS286 "allocation" (for announcement)
|
INF: Route origin (not settable)
AS286 tags prefixes learned with regional, country and city (KPN PoP) information where the PE is located. Countries follow the notation 286:(3000+E.164) notation (unless there's a clash with other used communities), cities are "somewhere" between 286:4000 and 286:46xx ... The PoP names are KPN notation.
286:4990
|
Europe
|
|
286:4991
|
North America
|
|
286:4992
|
South America
|
|
286:4993
|
Asia
|
|
286:4994
|
Africa
|
|
286:4995
|
Australia
|
|
286:3001
|
Unites States
|
|
286:3007
|
Russia
|
|
286:3031
|
Netherlands
|
|
286:3032
|
Belgium
|
|
286:3033
|
France
|
|
286:3034
|
Spain
|
|
286:3039
|
Italy
|
|
286:3041
|
Switzerland
|
|
286:3043
|
Austria
|
|
286:3044
|
United Kingdom
|
|
286:3045
|
Denmark
|
|
286:3046
|
Sweden
|
|
286:3047
|
Norway
|
|
286:3048
|
Poland
|
|
286:3049
|
Germany
|
|
286:3065
|
Singapore
|
|
286:3086
|
China
|
|
286:3090
|
Turkey
|
|
286:3351
|
Portugal
|
|
286:3352
|
Luxemburg
|
|
286:3353
|
Ireland
|
|
286:3358
|
Finland
|
|
286:3420
|
Czech Republic
|
|
286:3421
|
Slovakia
|
|
286:3852
|
Hong Kong
|
|
(LG) 286:4001
|
KPN National (Amsterdam DC2)
|
|
(LG) 286:4002
|
KPN National (Rotterdam DC2)
|
|
(LG) 286:4003
|
KPN National (Utrecht DC2)
|
|
(LG) 286:4004
|
KPN National (Den Haag DC2)
|
|
(LG) 286:4005
|
KPN National (Amsterdam Nikhef)
|
|
(LG) 286:4006
|
KPN National (Amsterdam SARA)
|
|
(LG) 286:4007
|
KPN National (Amsterdam PBW)
|
|
(LG) 286:4008
|
KPN National (Amsterdam Telecity)
|
|
(LG) 286:4009
|
KPN National (Amsterdam CC59)
|
|
(LG) 286:4030
|
AT - wien-s1 (Vienna, University)
|
|
286:4029
|
AT - wien-s2 (Vienna, Interxion)
|
|
286:4055
|
BE - ant-s1 (Antwerpen, Noorderlaan)
|
|
286:4013
|
BE - zvtm-s1 (Brussels, Excelsiorlaan)
|
|
286:4529
|
BE - zvtm-s4 (Brussels, Interxion)
|
|
286:4016
|
CH - gnve-s1 (Geneve, CERN)
|
|
(LG) 286:4031
|
CH - zrch-s1 (Zürich, IX Europe)
|
|
286:4601
|
CN - honk-s2 (Hong Kong, Mega iAdvantage)
|
|
286:4065
|
CZ - pra-s1 (Prague, Sitel)
|
|
(LG) 286:4011
|
DE - blnb-s1 (Velten, Am Jägerberg)
|
|
286:4520
|
DE - blnb-s3 (Berlin, Speedbone)
|
|
(LG) 286:4047
|
DE - brlb-s1 (Barleben, An der Sülze)
|
|
(LG) 286:4048
|
DE - brm-s1 (Bremen, Sirius Park)
|
|
286:4034
|
DE - dssd-s2 (Düsseldorf, Vogelsanger Weg)
|
|
286:4035
|
DE - dssd-s3 (Interxion)
|
|
(LG) 286:4046
|
DE - essn-s1 (Essen, Kruppstr.)
|
|
286:4015
|
DE - ffm-s1 (Frankfurt, Equinix FR5 / Kleyerstr. 90)
|
|
(LG) 286:4014
|
DE - ffm-s2 (Frankfurt, Interxion FRA2)
|
|
286:4523
|
DE - ffm-s6 (Frankfurt, Interxion FRA4)
|
|
(LG) 286:4530
|
DE - ffm-s7 (Frankfurt, E-Shelter)
|
|
286:4017
|
DE - hmb-s2 (Hamburg, Wendenstr. 251)
|
|
286:4057
|
DE - hmb-s3 (Hamburg, Incolocate / Wendenstr. 379)
|
|
(LG) 286:4033
|
DE - hnvr-s1 (Hannover, Vahrenwalderstr.)
|
|
(LG) 286:4527
|
DE - kehl-s2 (Kehl, Hafenstr.)
|
|
(LG) 286:4045
|
DE - koln-s1 (Cologne, GIP Park)
|
|
(LG) 286:4044
|
DE - ksrh-s1 (Karlsruhe, Techpark / Emmy-Noether-Str.)
|
|
(LG) 286:4041
|
DE - ksrh-s2 (Karlsruhe, Techpark / TelemaxX IP-Center-2)
|
|
(LG) 286:4049
|
DE - lzg-s1 (Leipzig, Döbichauer Str.)
|
|
286:4022
|
DE - mchn-s1 (Munich, Seibelstr./Arnulfstr.)
|
|
(LG) 286:4043
|
DE - mnh-s1 (Mannheim, Markircher Str.)
|
|
286:4040
|
DE - nbg-s1 (Nürnberg, Deutschherrnstr.)
|
|
(LG) 286:4042
|
DE - stgt-s1 (Stuttgart-Vaihingen, Breitwiesenstr.)
|
|
286:4059
|
DK - kbhv-s1 (Copenhagen, Telia PowerCom)
|
|
(LG) 286:4056
|
ES - bcln-s1 (Barcelona, Telvent Carrier House)
|
|
286:4020
|
ES - mdd-s2 (Madrid, Carrier House 2)
|
|
(LG) 286:4018
|
FI - hski-s1 (Helsinki, Linnoitustie)
|
|
(LG) 286:4032
|
FR - abvl-s1 (Aubervilliers, Interxion)
|
|
286:4025
|
FR - nntr-s1 (Nanterre, Le Capitole)
|
|
(LG) 286:4026
|
FR - prs-s1 (Paris)
|
|
286:4028
|
FR - prs-s4 (Paris, Telehouse 2)
|
|
286:4062
|
FR - sdns-s1 (Saint Denis, Equinix PA3)
|
|
286:4038
|
IE - dbln-s2 (Dublin, Data Electronics U7)
|
|
286:4021
|
IT - mla-s1 (Milan, KPNQWest IT)
|
|
286:4062
|
LU - bmbg-s1 (Bettembourg, Luxconnect DC1)
|
|
(LG) 286:4060
|
LU - lxbg-s3 (Luxembourg, EBRC)
|
|
286:4512
|
NL - alr-s1 (Almere, Cybercenter)
|
|
286:4010
|
NL - asd2 (Amsterdam, Barbara Strozzilaan)
|
|
286:4066
|
NL - asd-s14 (Amsterdam, Global Switch)
|
|
286:4513
|
NL - asd-s15 (Amsterdam, Equinix AM1)
|
|
286:4514
|
NL - asd-s16 (Amstelveen, IDC Infonet NL)
|
|
286:4063
|
NL - asd-s17 (Schiphol Rijk, Interxion AMS5)
|
|
286:4515
|
NL - asd-s4 (Amsterdam, Nikhef)
|
|
286:4516
|
NL - asd-s5 (Amsterdam, Sara)
|
|
286:4517
|
NL - asd-s6 (Amsterdam, Telecity 1)
|
|
286:4518
|
NL - asd-s7 (Amsterdam, Interxion AMS3)
|
|
286:4519
|
NL - asd-s8 (Amsterdam, Telecity 2)
|
|
286:4050
|
NL - asmr-s1 (Aalsmeer, Lakenblekerstraat)
|
|
(LG) 286:4521
|
NL - bura (Burum, Wytsmaweg)
|
|
(LG) 286:4522
|
NL - bura2 (Burum, Wytsmaweg)
|
|
(LG) 286:4524
|
NL - gv2 (Den Haag, Prinses Beatrixlaan)
|
|
286:4515
|
NL - hlm-s1 (Haarlem, Evoswitch)
|
|
286:4051
|
NL - oudmr-s1 (Oude Meer, Anthony Fokkerpark)
|
|
286:4012
|
NL - rt2 (Rotterdam, Anthony Fokkerweg)
|
|
(LG) 286:4023
|
NO - oslo-s1 (Oslo, BaneTele AS)
|
|
286:4037
|
PL - wsw-s1 (Warsaw, LIM / PLIX)
|
|
(LG) 286:4039
|
PT - lsb-s2 (Lisbon, Telvent Carrier House)
|
|
286:4027
|
SE - sthm-s1 (Stockholm, Interxion)
|
|
(LG) 286:4024
|
SE - sthm-s2 (Stockholm, Telecity)
|
|
(LG) 286:4036
|
SK - brlv-s1 (Bratislava, Kopcianska)
|
|
286:4080
|
TR - ankr-s1 (Ankara, Turkcell Superonline)
|
|
286:4531
|
TR - gbze-s1 (Gebze, Turkcell Superonline)
|
|
(LG) 286:4058
|
TR - itb-s1 (Istanbul Uskudar, KocNET)
|
|
286:4526
|
TR - itb-s3 (Istanbul, Camlica Is Merkezi)
|
|
286:4053
|
UK - ldn-s1 (London, Telelinks / Greenwich view place)
|
|
286:4054
|
UK - ldn-s10 (London, Telehouse North / Coriander Avenue)
|
|
286:4019
|
UK - ldn-s2 (London, Telehouse East / Coriander Avenue)
|
|
286:4052
|
UK - ldn-s3 (London, Telecity Bonnington House)
|
|
286:4061
|
UK - mchr-s1 (Manchester, Telecity Kilburn House)
|
|
(LG) 286:4528
|
UK - rncn-s1 (Runcorn, The Babbage Center)
|
|
286:4503
|
US - ahbn-s1 (Ashburn, Equinix DC5)
|
|
286:4504
|
US - chg-s1 (Chicago, Equinix CH1)
|
|
286:4505
|
US - dlls-s1 (Dallas, DA1)
|
|
286:4511
|
US - lags-s1 (Los Angeles, CoreSite)
|
|
286:4510
|
US - miaf-s1 (Miami, Terremark)
|
|
286:4501
|
US - nyk-s1 (New York, TelX, Hudson 60)
|
|
286:4502
|
US - nyk-s2 (New York, Switch and Data / 8th Avenue 111)
|
|
286:4506
|
US - sjca-s1 (San Jose, Equinix SV1)
|
INF: Misc communities (not settable)
Some additional communities might be seen, which are purely internal "functional" communities ... not all of them will be explained here, but if you miss one and need information about it, please contact us.
(LG) 286:50-52
|
legacy markers for more-specifics, superblocks of AS286, AS1136, AS8737
|
|
(LG) 286:60-61
|
(no public info)
|
|
(LG) 286:1136
|
routes accepted from KPN national (AS1136) not matching AS-KPNNL
|
|
286:11000
|
prepend action already done
|
|
286:28601
|
local eBGP learned route
|
|
286:28610
|
rPKI/ROA valid
|
|
286:28611
|
rPKI/ROA invalid (downstream routes)
|
|
286:28612
|
rPKI/ROA unknown
|
|
286:28613
|
rPKI/ROA invalid (peering routes)
|
|
286:28655
|
rt(s)dCos active (change CoS)
|
|
286:28666
|
blackhole helper
|
|
286:28667
|
erBH / rtsdCos helper
|
|
286:28680
|
internal marker (bleaching 1)
|
|
286:28681
|
internal marker (bleaching 2)
|
|
286:28683
|
internal marker (protect 1)
|
|
286:28684
|
internal marker (Tier1*--nonTier1+--Tier1+--.* paths from peers)
|
|
286:28690
|
286->3257 more-specific leaking
|
|
286:28699
|
286<-3257 integration LU Lo tag
|
|
286:64512-64599
|
"insight" tags
|
|
286:900
|
rejected by prefix filter (IRR/manual)
|
|
286:901
|
rejected by as-path filter (IRR/manual)
|
|
286:905
|
rejected by rPKI filter (invalid)
|
|
286:910
|
rejected by prefix filter (our address space, no exception)
|
|
286:911
|
rejected by prefix filter (RFC space)
|
|
286:912
|
rejected by prefix filter (IX space we are present)
|
|
286:915
|
rejected by as-path filter ("Tier-1" in path)
|
|
286:920
|
rejected by prefix filter (default route)
|
|
286:921
|
rejected by as-path filter (long as path)
|
|
286:922
|
rejected by community filter (too many communities)
|
|
286:923
|
rejected by as-path filter (bogon AS)
|
|
286:924
|
rejected by prefix filter (too specific /24|/48 (peers only))
|
|
286:925
|
rejected by too-unspecific prefix filter (0/0,1-7 & ::/0,1-15)
|