Technical Requirements

Security policy of the shared Layer 2 infrastructure

Extreme IX aims to ensure the Members reliable and uninterrupted Service as well as to limit the risks of deliberate or accidental mistakes, defective equipment or lack of speed of certain Member to reflect the quality of the others.

According to this the following restrictions and rules apply:

Access Layer

  1. Extreme IX PHYSICAL INTERFACES and MEMBERS PHYSICAL INTERFACES shall work in full-duplex regime.
  1. Frames forwarded to Extreme IX ports shall have one of the following ethertypes:
    – 0x0800 – IPv4
    – 0x0806 – ARP
    – 0x86dd – IPv6
    and restricts all other ethertypes.
  1. Only one MAC address is allowed on a service port and all traffic originating from this port should come with the same source MAC address, otherwise traffic will be discarded.
    In the case of VLAN Interconnect service, we allow one MAC address per VLAN ID.
  1. Frames forwarded to Extreme IX ports SHALL NOT be addressed to a multicast or broadcast MAC destination address except as follows:
    – broadcast ARP (Address Resolution Protocol) packages
    – multicast IPv6 Neighbor Discovery (ND) packages
  1. Maximum broadcast packages forwarded from the MEMBER’S equipment must not exceed 50 (fifty) in number per second per PHYSICAL INTERFACE.
  2. Link-local protocols, such as IRDP, ICMP redirects, Discovery protocols (CDP, EDP), VLAN/trunking protocols (VTP, DTP), BOOTP/DHCP, etc are SHOULD BE DISABLED.
  3. It is NOT ALLOWED to use Spanning Tree Protocol enabled on a port connected to Extreme-IX.
  4. It is NOT ALLOWED to use proxy ARP enabled on a router port connected to Extreme-IX.
  5. For the purpose of monitoring on Extreme IX site, Members should not forbid ICMP (Internet Control Message Protocol) communication from/to Extreme IX IP address space.
  6. Extreme IX has implemented Quarantine VLAN. Аll new ports are placed in their own separate VLAN, together with a monitor port.

 

Network Layer

  1. Interfaces connected to Extreme IX ports SHALL ONLY use IP addresses (IPv4 and IPv6) and netmasks assigned to them by Extreme IX.
  1. IP packets addressed to Extreme IX Peering LAN’s directed broadcast address SHALL NOT be automatically forwarded to Extreme IX ports.
  1. IP address space assigned to Extreme IX Peering LANs SHALL NOT be advertised to other networks.
  2. Members SHALL NOT announce to the ROUTE SERVERS IP address space reserved for Private networks (Private IPs).
  1. Members SHALL NOT announce to the ROUTE SERVERS AS numbers reserved for private use (Private AS).
  2. The Member must aggregate as far as possible the announced prefixes (MEMBER ADDRESS SPACE).
    The smallest IP address block allowed to be announced is /24 (256 IP addresses).     NOTE: DO NOT advertise the full routing table to us, we need your DNS IP Pools and End user IP Pools only!
  3. Extreme IX can limit the PUBLIC PEERING traffic in both directions (source and destination), when source IP address space or destination IP address space is not part of the prefixes announced by the Member to ROUTE SERVERS.

 

IP Traffic Exchange

IP traffic should be exchanged between Extreme IX members using BGP protocol by the following ways:

  1. Using Route Servers (RS) – two RSs for redundancy and resilience.
  2. Bilateral BGP sessions between Extreme IX Members / Content providers with theirs mutual agreements.

 

Route Servers Peering Policies

  1. Disabling first AS check
    The Route Servers do not have their AS first in the AS_PATH. In some cases you might need to disable the first AS check in your BGP configuration.
    – On Cisco routers please specify ‘no bgp enforce-first-as’ or ‘bgp enforce-first-as disable’ to disable the enforcement.
    – On Huawei routers please specify ‘undo check-first-as’ to disable the enforcement.
  1. Autonomous System Number (ASN)
    Extreme IX supports both 16-bit and 32-bit AS numbers.
  1. Incoming Prefixes Filtering
    Extreme IX Route Servers’ filtering policy is as follows:

    – Drop small prefixes – longer than /24 for ipv4 and longer than /48 for ipv6.
    – Drop all well-known Martians and bogons.
    – Ensure that there is at least 1 ASN and less than 64 ASNs in the AS path.
    – Ensure that the peer AS is the same as the first AS in the AS path.
    – Drop any prefix where the next-hop IP address is not the same as the peer IP address. This prevents prefix hijacking.
    – Drop any prefix with a transit network (Internet or IP Transit) ASN in the AS path.
    – Ensure that origin AS is in the set of ASNs from the client’s IRRDB AS-SET.
    – If the prefix is evaluated as RPKI valid, it is accepted.
    – If the prefix is evaluated as RPKI invalid, it will be dropped.
    – If the prefix is evaluated as RPKI unknown, revert to the standard IRRDB prefix filtering.

 

Route Servers Details

Mumbai

Route Servers RS 1 RS 2
ASN AS49378 AS49378
IPv4 Address 103.77.108.200 103.77.108.240
IPv6 Address 2001:df2:1900:2::200 2001:df2:1900:2::240

 

Delhi

Route Servers RS 1 RS 2
ASN AS49378 AS49378
IPv4 Address 45.120.248.200 45.120.248.240
IPv6 Address 2001:df2:1900:1::200 2001:df2:1900:1::240

 

Hyderabad

Route Servers RS 1 RS 2
ASN AS49378 AS49378
IPv4 Address 103.77.110.200 103.77.110.240
IPv6 Address 2001:df2:1900:4::200 2001:df2:1900:4::240

 

Chennai

Route Servers RS 1 RS 2
ASN AS49378 AS49378
IPv4 Address 45.120.251.200 45.120.251.240
IPv6 Address 2001:df2:1900:3::200 2001:df2:1900:3::240

 

Kolkata

Route Servers RS 1 RS 2
ASN AS49378 AS49378
IPv4 Address 45.120.249.200 45.120.249.240
IPv6 Address 2001:df2:1900:5::200 2001:df2:1900:5::240

 

Communities

Extreme IX RSs remove their own AS from the route, which will make them seem directly connected without a necessary BGP session between each member.

All members of Extreme IX route servers can use communities to control incoming and outgoing information.

Concerning the incoming traffic (which announces are accepted) the control is on the member side – He can filter which received prefixes from RS he will accept.

With the help of BGP Communities, Extreme IX member may decide who he wants to “give” the traffic to. The following BGP Community is maintained for every announced prefix.

Standard Communities coming from Extreme IX RS:

0:peer AS Prefix is announced from peer AS

 

Communities that are accepted from Extreme IX RS:

49378:0 Block Your prefix to all peers
49378:0 49378:ASPEER Block Your prefix to all peers EXCEPT ASPEER
49378:ASPEER Block Your prefix to ASPEER

 

Also, large BGP communities are supported:

Large BGP communities:

49378:0:0 Block Your prefix to all peers
49378:1:ASPEER Announce a route to a certain ASPEER
49378:0:ASPEER Prevent announcement of a prefix to a ASPEER

 

AS path prepending control is also available. Those large communities allow the member to prepend prefixes to a specific member of the route servers and can leave the rest of prefixes announced as they are with no prepends.

49378:101:ASPEER Prepend to peer AS once
49378:102:ASPEER Prepend to peer AS twice
49378:103:ASPEER Prepend to peer AS three times

 

For Example, you can prepend your prefixes to ASN1 three times and keep your prefixes without prepends when advertised to the rest of the members using this community:
49378:103:ASN1

 

Please note that you are advised not to mix standard with large communities (Please choose one or the other)

 

Standard Communities for Mumbai peers with 32-bit ASNs:


Extreme IX implements N:M filtering based on standard community strings. As standard BGP communities support only 4
bytes, this only works for 2-byte ASNs and peers with 2-byte ASNs.

For BGP peers with 32-bit ASN use current table for community:

Peer 32-bit ASN BGP Community
Cloudnet Communications 135207 65001
Logon Broadband 133968 65002
Balaji Infra Ray 135171 65003
Yotta Network Services 140641 65004
Utopia Networks 133315 65005
Multinet Udaipur 133469 65007
Digital Info Systems 136360 65008
Smartlink Solutions 134331 65009
Big Ventures Media 146902 65011
Juweriyah Networks 138296 65012
Sukain Infoway 134937 65013
Optical Broadband Communications 135839 65015
Sada Smartlinks Communication 138762 65016
Hightec Network Solutions (OPC) 141324 65017
Maxtech Broadban 133311 65018
Galaxynet Connections 135852 65019
Inet Fiber 135685 65020
JPR Networks 132220 65021
UCN Cable Networks 133007 65022
Ethernet Xpress 134053 65023
Allnet Broadband 135724 65024
Zpoint Fibernet 134875 65025
Seven Star Digital Networks 132296 65026
Soft call Cust-O-Care 133720 65027
Khetan Cable Network 132445 65028
Laxmi Internet Service 134012 65029
Speed Global Telecom Network 135810 65030
Dreamlink Technologies 136481 65031
Gcore 199524 65032
Optical Broadband Communication 135839 65034
Speedking Infotech 138787 65035
Spaceworld Communications 140160 65036
Basak Telecom 136677 65037
Elxer Communications 133255 65038
NAS Internet Services 134316 65039
Gazon Communications 132770 65040
Five Network Broadband Solution 132768 65041
V Net Networks 132956 65042
ASCSC Digital 141856 65043
Adarsh Infosolutions 133674 65044
Flashcom Network 137594 65045
Net 4 U Services 134014 65046
Mauli Shiv Cable Internet Services 138741 65047
TGN Networks 136300 65048
Access Smart Solutions 133309 65049
Way2Internet 134850 65050
Airtech Internet Solutions 136302 65051
Riyaz Internet Services 132752 65052
Classicnet Broadband Network 134307 65053
Ezinet Broadband Services 140204 65054
Runet Infotech 135721 65055
Macro Signal 137645 65056
Alien DNS 141845 65057
GTPL KCBPL Broadband 135872 65058
Swastik Internet & Cables 133724 65060
Allied IT Infrastructure 134006 65061
Bluelotus Support Services 132556 65062
Briskcom infoway 146847 65063
Sun Broadband and Data Services 133684 65064
Alegra Communication 136902 65065
Sheng Li Telecom India 134006 65066
Yashash Cable Network 131210 65067
Wefe Technology 133695 65068
Soliton NetLink 134916 65069
DeeNet Services 136308 65070
Esto Internet 132051 65071
Airnet Networks 133001 65072
Powergrid Corporation 132215 65073
Digital Satellite Connect 137166 65074
Gigaline Teleservices 137633 65075
Shikhar Broadband Enterprises 136646 65076
Paradise Telecom 136284 65077
Vijay Network Services India 141863 65078
NGC Broadband 136323 65079
Vilite Multimedia 135735 65080
Haash Media Networks 141480 65081
Redking India IT Services 136673 65082
Falconet Internet 136287 65083
Speedostar Telco 139498 65084
Ellinovations 136665 65085
Fiberzone Communications 135808 65086
Kings Broadband 132976 65087
Jetspot Network 134325 65088
Compatible Network 138241 65089
Allsafe Technologies 141449 65090
Genstar Network Solutions 134022 65091
Intermedia Cable Communications 134055 65092
Nuozen Telecom 138712 65093
Swiftnet Broadband 133713 65094
Sifi Online 136696 65095
Specific Net 138771 65096
Shree Omkar Infocom 132137 65097
Gtel Communications 135218 65098
Mahabal Net Service Provider 139543 65099
HI REACH BROADBAND 134033 65100
NetSat Communications 135139 65101
Hyosec Solutions 141253 65102
Orange Waves Networks 136678 65103
Ashok Secure Broadband Network 134942 65104
Vortex Netsol 136334 65105
Sanchar Telenetwork 131215 65106
Sanjeevan Networks 135809 65107
QualiSpace Web Services 396904 65108
Apple Broadband Services 136716 65109
TATA Sky 134674 65110
MNR Broadband 133648 65111
Max-Tech Media and Communications 133597 65112
SVB Networks 142487 65113
Kenstar Web Solutions 138329 65114
Giga5 Fiber Network 134345 65115
Rural Broadband 134177 65116
Sistemos Information 132772 65117
VPS Broadband and Telecommunications 135756 65118
Udayatel Communication 136376 65120
Delix Net Solutions 137098 65121
Streamonn Internet Services 138227 65122
Silicon Care Broadnet 135795 65123
Jetway Broadband India 134913 65124
Imperium Digital Network 141524 65125
RK Broadband HIFI Services 137142 65126
Skylink Fibernet 135139 65127
Hibird Infocom 138222 65128
Develentcorp 139331 65129
Multicraft Digital Technologies 135834 65130
Gramin Broadband Network 132958 65131
Wandoor Multiventures 135766 65132
Antarjal IT Communication 138737 65133
Web Werks India 133296 65134
Opticom Networks 138300 65135
One Eight Technologies 138225 65136
Protoact Digital Network 137678 65137
INRI Communications 141266 65138
Orange City Internet Services 134929 65139
Om Internet Broadband Service 141516 65141
CloudSky Broadband Services 134340 65142
Amk Sunbeam Communication 141492 65143
Dronagiri Infotech 135561 65144
Hybrid Hash 138281 65145
Tencent Peering 132203 65146
Vilas Internet Services 139482 65147
EM-CYBER SPACE SERVICES 141804 65148
Sibasakti Cablenet Services 136328 65149
Navkar Supertech 137127 65150
Limerick Technologies 138311 65151
First Mile Digital 142033 65152
Andhra Pradesh State Fibernet Limited (APSFL) 133287 65153
Scud Communications 136639 65154
Nesecure Networks 141321 65155
Endurance International Group 394695 65156
More Wifi Internet 141261 65157
Light Wave Digital Network 137145 65158
Threesa Broadband 132996 65159
Getincity IT Services 141520 65160
Perfect Internet 132323 65161

 

Standard Communities for Delhi peers with 32-bit ASNs:


Extreme IX implements N:M filtering based on standard community strings. As standard BGP communities support only 4
bytes, this only works for 2-byte ASNs and peers with 2-byte ASNs.

For BGP peers with 32-bit ASN use current table for community:

Peer 32-bit ASN BGP Community
Web Werks India 133296 65001
Foxcell Communications 135227 65004
Tachyon Communications 135697 65005
Weebo Networks 136946 65006
ANI Broadband Services 132116 65007
Octel Network 141285 65008
LM Energy and Software 135719 65009
Megahertz Internet Network 135208 65010
MPR Infonet Systems 141814 65011
MyWorld Internet Services 140133 65012
DDC Broadband 135706 65013
Speed4net Technologies 133279 65014
Sphier Infotech 133272 65015
JDM Broadband Services 134341 65016
Praction Networks 135799 65017
Ultranet 134026 65018
SAT International 135716 65019
Rgasaa Communication 134917 65020
Fusionnet 134375 65021
Broadstar Net India 134861 65022
Softech Infosol 133680 65023
S R CABLES TV NETWORK 141573 65024
Fastnet Communications 133692 65025
Gigantic Infotel 133275 65026
Lalat Internet service 141339 65027
Dehradun E-net Solutions 133278 65028
Flixtel Communication 138768 65029
SVD Digital Networks 135763 65030
Ookla Telecom 136625 65031
iForce Networks 134858 65032
Nextgen Broadband Private Limited 141265 65033
Excitel(Netmagic-Noida) 133982 65034
Digitax India Communications 135848 65035
MNR Broadband 133648 65036
Powernet Communications 135772 65037
Hiveloop Technology 141202 65038
Fiblib Digital Networks 135714 65039
Touch Net India 132004 65040
Gigatel Networks 135193 65041
RI Networks 135031 65042
Triveniview Enterprises 141331 65043
Touchnet Broadband Services 135693 65044
Hardwork Cable & Internet Services 133967 65045
Dheera Net Services 135842 65046
Airwaves Internet 134019 65047
Indophone Networks 134946 65046
Daksh Broadband 135773 65048
Sistemos Information 132772 65049
Arichwal IT Services 134884 65050
Triple Play Broadband Services 137134 65051
Bhaukaal Baba Technologies Gurgaon 134337 65052
Realtel 132754 65053
BPS Communication & Services 133980 65054
Zapbytes Technologies 133652 65055
NEXA BROADBAND 138275 65056
Tripleplay Broadband 132453 65057
Perfect Internet 132323 65058
Skynet Wireless Network 137667 65059
Gatiman Broadband 134875 65060
Skynet Broadband 140112 65061
Trivoz Digital Networks 136338 65062
Sifi Online 136696 65063
SBR Telecom 133989 65064
Linkwave Technologies 136377 65065
Racsann Technologies 133965 65066
Vajra Telecom 136632 65067
Skymax Broadband 132934 65068
Elyzium Technologies 134319 65069
Instalinks 135183 65070
IAXN Telecom 134316 65071
Tata Sky Broadband 134674 65072
Exnet Broadband 136370 65073
SDH Network 135258 65074
Net NCR Technology 135683 65075
Cyber City 136286 65076
iGen Network 134905 65077
Acme Diginet Corporation 134874 65078
Ultranet Infotech Solutions 132932 65079
DM Lot Infotech 137095 65080
Alphanet Broadband 135793 65081
Blue Sky Broadband 134945 65082
Nextel Communication 137627 65083
Reticule Infotech 134943 65084
Esto Internet 135817 65085
Jolly Broadband 139562 65086
Uzaina Business India 138287 65087
ADN Broadband 135738 65088
MicroNet IT Services 137650 65089
NR IT Service 134013 65090
Spiderlink Networks 134928 65091
Skyhunt IT Park 133718 65092
IPnet Communications 135232 65093
Fibre Air Services 132771 65094
Falconet Internet 136287 65095
Srinagar Net Tech 133317 65096
Sai Technix 136722 65097
Bakliwal Telecom Services 138734 65098
Winmax Telecommunication India 138716 65099
Gstech Software Systems 133676 65100
VMO Broadband 137587 65101
Nexusnet Networks 141280 65102
Realtel Communication 132754 65103
Mrezhi Internet 141827 65104
Reisnet Broadband 140171 65105
Ajwa Kaif 140134 65106
Multicraft Digital Technologies 135834 65107
Staredge Communications 141275 65108
Udayatel Communications 136376 65109
Indtel Infra 141799 65110
RP World Telecom 134294 65111
HYOSEC SOLUTIONS 141253 65112
Nesecure Networks 141321 65113
Speednet Unique Network 135760 65114
Nextia Broadband 142488 65115
NGC Broadband 136323 65116
Manisha Traders 138713 65117

 

Standard Communities for Hyderabad peers with 32-bit ASNs:


Extreme IX implements N:M filtering based on standard community strings. As standard BGP communities support only 4
bytes, this only works for 2-byte ASNs and peers with 2-byte ASNs.

For BGP peers with 32-bit ASN use current table for community:

Peer 32-bit ASN BGP Community
SVCPL 134305 65002
Delix Net Solutions 137098 65003
Blackpride Tech 135691 65004
Hi Reach Broadband 134033 65005
Zoom Fiber Solutions 132998 65006

 

Standard Communities for Chennai peers with 32-bit ASNs:


Extreme IX implements N:M filtering based on standard community strings. As standard BGP communities support only 4
bytes, this only works for 2-byte ASNs and peers with 2-byte ASNs.

For BGP peers with 32-bit ASN use current table for community:

Peer 32-bit ASN BGP Community
Ficus Telecom 132931 65001
Velocity Internet 134016 65002
RV Broadband 135192 65003
Skylink Fibernet 135139 65004
Knet Solutions 135247 65005
Pulse Telesystems – Retail Network 140135 65007
Ultron Broadband 139528 65009
F2H Network 136708 65010
C32 Broadband 135801 65011
Gigaline Teleservices OPC 137633 65012
RMAX Broadband 133971 65013
Alacriy Net System Service 135758 65014
Airgenie Communications 134021 65015
HYFY Giga Fiber 137132 65016
Rainbow Internet Teleservices 136349 65017
Signum Digital Networks 133685 65018
Blu Ultraband 131459 65019
Deshkal Network 132559 65020
Netfire Communications 135202 65021
Sri Vari Network 134877 65022
Sigaram Networks 134911 65023
Cloudsky Superfast 134340 65024
Netrexo Communications 135815 65025
Zees Broadband 141798 65026
SP Internet Technologies 134863 65027
Raagav Communication 134054 65028
Durgamba Broadband Network 138717 65029
Livefibernet Service 138746 65030
Dhanam Internet Services 136706 65031
Netzy Internet Services 139575 65032
Stampede Communications 136714 65033
Sarva Airworld Network 136326 65034
TATA Sky Broadband 134674 65035
Allnet Broadband Network 135724 65036
Bluwaves Internet Services India 135206 65037
One Pipe Telecom 138279 65038
Arjun Telecom 133000 65040
Thamizhaga Internet Communication 136336 65041
Excitel Broadband 133982 65042
Bluelotus Support Services 132556 65043
Softech Infosol 138705 65044
GLO Internet Services 136279 65045
Kerala Vision Broadband 138754 65046
White Stallion Networks 136684 65047
Vizag Broadband Communications 133678 65048
Hiveloop Technology 141202 65049
Vizag Broadcasting Company 133593 65050
Deenet Services 136308 65051
Stackbit Internet Services 136230 65052
Lalat Internet service 141339 65053
Airdesign Broadcast Media 134326 65054
Smart Net India 135225 65055

 

Standard Communities for Kolkata peers with 32-bit ASNs:


Extreme IX implements N:M filtering based on standard community strings. As standard BGP communities support only 4
bytes, this only works for 2-byte ASNs and peers with 2-byte ASNs.

For BGP peers with 32-bit ASN use current table for community:

Peer 32-bit ASN BGP Community
Hiveloop Technology 141202 65032
Tata Sky Broadband 134674 65034

 

Extreme IX Operations

Extreme IX provides 24/7/365 First level of support and Business hours Second Level of support to all its members.