-
Notifications
You must be signed in to change notification settings - Fork 6
/
peers.conf
167 lines (139 loc) · 3.56 KB
/
peers.conf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
protocol bgp UPSTREAM_AS3257_v4 from upstream4 {
description "GTT";
local 192.0.2.2 as 65536;
neighbor 192.0.2.1 as 3257;
ipv4 {
export filter {
add_as_specific_prepends(3257);
handle_as_specific_no_export(3257);
upstream_export();
};
};
}
protocol bgp UPSTREAM_AS3257_v6 from upstream6 {
description "GTT";
local fd00:192:0:2::2 as 65536;
neighbor fd00:192:0:2::1 as 3257;
ipv6 {
export filter {
add_as_specific_prepends(3257);
handle_as_specific_no_export(3257);
upstream_export();
};
};
}
protocol bgp pmacctd_v4 from telemetry4 {
description "pmacctd";
local 127.0.0.1 as 65536;
neighbor 127.0.0.2 port 180 as 65536;
rr client;
}
protocol bgp LOOKINGGLASS_AS199036_v4 from lookingglass4 {
description "NLNOG RING";
local 198.51.100.1 as 65536;
neighbor 82.94.230.130 as 199036;
multihop;
}
protocol bgp LOOKINGGLASS_AS199036_v6 from lookingglass6 {
description "NLNOG RING";
local 2001:db8::200:5eff:fe15:429e as 65536;
neighbor 2001:888:2001::130 as 199036;
multihop;
}
protocol bgp core1_v4 from core4 {
description "Core Router";
local 169.254.253.1 as 65536;
neighbor 169.254.253.2 as 65536;
rr client;
}
protocol bgp core1_v6 from core6 {
description "Core Router";
local fd00:169:254:253::1 as 65536;
neighbor fd00:169:254:253::2 as 65536;
rr client;
}
define AS_SET_FOR_65551_4 = [
140.82.112.0/20,
140.82.112.0/20{24,24},
143.55.64.0/20,
185.199.108.0/22{22,24},
192.30.252.0/22{22,24}
];
define PREFIX_WHITELIST_FOR_65551_4 = [
192.0.2.0/24
];
protocol bgp CUSTOMER_AS65551_v4 from customer4 {
description "ACME Inc.";
local 203.0.113.4 as 65536;
neighbor 203.0.113.220 as 65551;
disabled yes;
ipv4 {
import filter {
if !(net ~ AS_SET_FOR_65551_4) then
reject "prefix is not in IRR AS SET AS-GITHUB - REJECTING ", net;
if !(net ~ PREFIX_WHITELIST_FOR_65551_4) then
reject "prefix is not in prefix whitelist - REJECTING ", net;
customer_import();
};
export filter {
add_as_specific_prepends(65551);
handle_as_specific_no_export(65551);
customer_export();
};
};
}
define AS_SET_FOR_65551_6 = [
2620:112:3000::/44,
2620:112:3000::/48,
2a0a:a440::/29
];
define PREFIX_WHITELIST_FOR_65551_6 = [
2001:db8::/32
];
protocol bgp CUSTOMER_AS65551_v6 from customer6 {
description "ACME Inc.";
local fd00:504:36::3b4:0 as 65536;
neighbor fd00:504:36:0:3:2:0 as 65551;
disabled yes;
ipv6 {
import filter {
if !(net ~ AS_SET_FOR_65551_6) then
reject "prefix is not in IRR AS SET AS-GITHUB - REJECTING ", net;
if !(net ~ PREFIX_WHITELIST_FOR_65551_6) then
reject "prefix is not in prefix whitelist - REJECTING ", net;
customer_import();
};
export filter {
add_as_specific_prepends(65551);
handle_as_specific_no_export(65551);
customer_export();
};
};
}
protocol bgp PEER_AS15169_v4 from peer4 {
description "Google";
local 203.0.113.4 as 65536;
neighbor 203.0.113.41 as 15169;
password "912ec803b2c";
ipv4 {
export filter {
add_as_specific_prepends(15169);
handle_as_specific_no_export(15169);
peer_export();
};
};
}
protocol bgp PEER_AS15169_v6 from peer6 {
description "Google";
local fd00:504:36::3b4:0 as 65536;
neighbor fd00:504:36::3b41:0 as 15169;
password "912ec803b2c";
ipv6 {
export filter {
add_as_specific_prepends(15169);
handle_as_specific_no_export(15169);
peer_export();
};
};
}
# vim: set ft=bird nofoldenable: