L2 / L3 TUNNELS
GRE, WireGuard, IP-in-IP and IPsec between your sites and our core.
If your hardware is not with us, reach the AS202831 core over a tunnel: GRE, IP-in-IP, IPsec or WireGuard. MTU and MSS clamping are agreed during setup, so nothing gets silently truncated inside GRE.
We run a BGP session inside the tunnel — that is how our downstreams announce their IPv6 prefixes through AS202831. The same large communities as on transit work there, blackholing included.
IPsec when traffic crosses untrusted networks. Transparent L2 over L3 for segments split between sites. Turn-up usually fits into one business day.
- GRE / IPIP with agreed MTU and MSS clamping
- IPsec whenever traffic leaves the trusted path
- Transparent L2 over L3 for split segments
- Turn-up within one business day
OPEN POLICY
We peer with anyone holding an ASN and an interest in fewer hops. No NDA required for that.
- A registered ASN with correct IRR objects (RADb / RIPE)
- Signed ROAs for every announced prefix
- A max-prefix limit agreed during turn-up
- A working NOC contact that answers
- No transit announcements through our session without prior agreement
| COMMUNITY | ACTION |
|---|---|
| 202831:666:0 | BLACKHOLE — drop here, at every upstream and IX (/48–/128 within your ROAs) |
| 202831:911:0 | BLACKHOLE — transits only, stays reachable here and at IXes |
| 202831:100:N | PREPEND ×N (1–3) to transits |
| 202831:101:N | PREPEND ×N (1–3) to IXes and peers |
| 202831:300:0 | DO NOT ANNOUNCE to transits (IXes and peers only) |
| 202831:301:0 | DO NOT ANNOUNCE to IXes and peers (transits only) |
| 202831:2:ASN | INFO — set by us: route learned from customer ASN |
Large communities only (RFC 8092): AS202831 is a 32-bit ASN, classic 202831:666 cannot exist. Transits are GlobalNet and HE; IXes are DATA-IX, Piter-IX and Cloudflare. By default customer routes go to GlobalNet and DATA-IX with a ×2 prepend. Honoured on customer IPv6 tunnel sessions.
- BIRD 3.x on the MSK and FRA cores
- prefix-list or origin + RPKI ROV, invalids dropped
- MD5 on request, BFD where it earns its keep
- MP-BGP, IPv4 and IPv6 in one session or separately
- flow accounting and alerts on session state change
GET IN TOUCH
Three addresses and one messenger. There is no eight-item phone menu.
Send your AS number, the bandwidth you want and the site — that is enough for a first reply.