At IAA, policy control is achieved by the use of BGP Communities. IX peers must tag their routes using the following to control policy via the route server. Please ensure you follow the instructions below to ensure correct set up.

Here at IAA, we use the following standards to connect to any of our peering points:

• 10Gbps
  10GBaseLR – 1310nm – 10km
• 40Gbps
  40GBaseLR4 – 1310nm – 10km
• 100Gbps
  100GBaseLR4 – 1310nm – 10km

For those networks without the requirement to go straight to 100Gbps, we offer Link Aggregation (LAG) to enable gradual increases in bandwidth. LAG cost is calculated by the number of ports times the port price.

Ethernet types:

• 0x800 – IPv4
• 0x806 – ARP
• 0x86DD – IPv6

We request only 1 MAC per port on any of our peering points.

This means frames forwarded to an individual IX port shall have the same MAC Address.

No Proxy ARP. Use of Proxy ARP on the router’s interface to the IX is strictly prohibited. No IP Directed Broadcasts. IP Directed Broadcasts are strictly prohibited.

Frames forwarded on the IX shall be Unicast only. Forwarding traffic to a Multicast or Broadcast MAC destination address is prohibited, except for the following:

• Broadcast ARP Packets
• Multicast ICMPv6 Neighbour Discovery packets (this does not include Route Solicitation or Advertisement packets).

Link local traffic shall not be forwarded to the IX Peering VLAN(s). Link-Local protocols include but are not limited to:

• ICMP redirects
• IEEE 802 Spanning Tree
• BOOTP/DHCP
• ICMPv6 Router Advertisements
• UDLD
• BFD
• PIM
• Interior routing protocol broadcasts (e.g. OSPF, ISIS, IGRP, EIGRP)
• L2 Keepalives
• Vendor proprietary protocols:
  • Discovery protocols: CDP, EDP, FDP
  • VLAN/trunking protocols: VTP, DTP

The following link-local protocols are exceptions and are allowed:

• ARP
• ICMPv6 Network Discovery

We would appreciate it if you practice good network hygiene on your side, to protect your network and the internet community generally. This means signing your routes (we use RPKI and drop invalids), implementing BCP38 on your network broadly and URPF on your ports into the IX. If you ever pass broadcasts, we rate limit Broadcast, Unknown Unicast and Multicast traffic to 200 packets per second.

If you need assistance with RPKI check out APNIC’s RPKI pages or give us a yell.

At IAA, we utilise the Routing Daemon BIRD. There are two route servers per state.

By default, the IX peering AS (7606) is removed from all sessions. However, if you would like us to include this, please advise us when you sign up for a service.

We have also made available communities that are universal across all peering points. These communities allow peers to set specific policies for their sessions.

For a list of communities, please email peering@internet.asn.au