Initial import

This commit is contained in:
Simon Marsh 2019-05-04 23:59:02 +01:00
commit 8fee84eb0c
Signed by: burble
GPG Key ID: 7B9FE8780CFB6593
22 changed files with 2276 additions and 0 deletions

View File

@ -0,0 +1,71 @@
---
title: 'BGP Communities'
visible: true
hero_classes: ''
hero_image: ''
continue_link: '1'
content:
items: '- ''@self.children'''
limit: '5'
order:
by: date
dir: desc
pagination: '1'
url_taxonomy_filters: '1'
---
Details of the BGP communities supported by the burble.dn42 network.
===
### DN42 Communities
[DN42 Communities](https://dn42.net/howto/Bird-communities) are applied both internally and externally, and are used to influence the [Routing Policy](/home/routing-policy).
|Community  |Description|
|:---|:---|
|( 64511 : 0 < x < 21 ) &nbsp; | Max latency |
|( 64511 : 20 < x < 30 ) &nbsp; | Min bandwidth |
|( 64511 : 30 < x < 35 ) &nbsp; | Min encryption |
|( 64511 : 40 < x < 54 ) &nbsp; | Route Origin |
### Well Known BGP Communities
The following well known communities are implemented in the network.
|Community &nbsp;|Description|Action|
|:---|:---|:---|
| ( 65535 : 65281 ) &nbsp; | No Export | Prefix should not be exported outside of AS4242422601 |
| ( 65535 : 65282 ) &nbsp; | No Advertise &nbsp; | Prefix should not be exported to any peers |
| ( 65535 : 65283 ) &nbsp; | Local-AS | Prefix should not be exported outside of region |
## burble.dn42 Specific Communities
burble.dn42 implements [large BGP communities](http://largebgpcommunities.net/), with [ISO 3166-1 / UNSD](https://en.wikipedia.org/wiki/ISO_3166-1) country, and [UNSD](https://unstats.un.org/unsd/methodology/m49/) region codes.
### Informational Communities
|Community &nbsp;|Description|
|:---|:---|
| ( 4242422601 : 100 : _country code_ ) &nbsp; | Route learned in this country |
| ( 4242422601 : 110 : _region code_ ) &nbsp; | Route learned in this region |
| ( 4242422601 : 120 : _host code_ ) &nbsp; | Route learned on this host |
| ( 4242422601 : 130 : 1 ) &nbsp; | Route is a direct peer |
| ( 4242422601 : 140 : _DN42 region_ ) &nbsp; | Route learned in this DN42 region |
| ( 4242422601 : 150 : _AS-NUM_ ) &nbsp; | Route learned in this burble.dn42 sub-AS |
&nbsp;
#### Host Index Table
|Host &nbsp;|Index|
|:---|:---|
|dn42-fr-rbx1 &nbsp; | 22 |
|dn42-uk-lon1 &nbsp; | 21 |
|dn42-lt-vil1 &nbsp; | 29 |
|dn42-ru-mos1 &nbsp; | 2 |
|dn42-us-dal1 &nbsp; | 31 |
|dn42-us-mia1 &nbsp; | 28 |
|dn42-us-sea1 &nbsp; | 18 |
|dn42-us-lax1 &nbsp; | 30 |
|dn42-sg-sig1 &nbsp; | 27 |
|dn42-au-syd1 &nbsp; | 24 |

18
user/pages/01.home/blog.md Executable file
View File

@ -0,0 +1,18 @@
---
title: home
body_classes: 'title-center title-h1h2'
hero_classes: 'overlay-light hero-large'
content:
items:
- '@self.children'
limit: 5
order:
by: date
dir: desc
pagination: true
url_taxonomy_filters: true
---
<h1 id="mcetoc_1cnblr2bt0">burble.dn42</h1>
<p>experimental global networking</p>
<p>&nbsp;</p>

View File

@ -0,0 +1,109 @@
---
title: Services
visible: true
---
List of public services provided by the burble.dn42 network.
===
#Services
## Public Website
[burble.dn42](http://burble.dn42/) (dn42 link)
[dn42.burble.com](https://dn42.burble.com/) (public internet link)
This website is built using [GRAV](https://getgrav.org/) and currently hosted on dn42-fr-rbx1. The public internet version is protected by [CloudFlare](https://www.cloudflare.com).
Longer term, regional replicas of the DN42 site may be provided however this is not currently configured.
## Looking Glass
[lg.burble.com](https://lg.burble.com) (public internet link)
The burble.dn42 looking glass is based on [bird-lg](https://github.com/sileht/bird-lg) with patches by [Zhaofeng](https://github.com/zhaofengli/bird-lg) and myself to fix the formating and bird2 compatibility.
A fork of sileht/bird-lg that includes Zhaofeng's and my fixes is available on [GitHub](https://github.com/sesa-me/bird-lg).
DN42 registry data in the BGP Map part of the looking glass uses [lgregmapper](https://git.dn42.us/burble/lgregmapper)
to interface with [dn42regsrv](https://git.dn42.us/burble/dn42regsrv).
[collector.burble.com](https://collector.burble.com) (public internet link)
The collector summarises routes from each of the burble.dn42 regions, providing a global view of network connectivity. Generally the collector will be quicker and easier to query when looking for global connectivity to an AS or network, however some functions are not supported (e.g. bgpmap functionality).
Both looking glass are hosted behind [CloudFlare](https://www.cloudflare.com).
## DNS
|Authoritative Service||
|:--|:--|
| ns1.burble.dn42<br/>b.delegation-servers.dn42| 172.20.129.1<br/>fd42:4242:2601:ac53::1 |
|Recursive Service||
|:--|:--|
| dns.burble.dn42<br/>b.recursive-servers.dn42| 172.20.129.2<br/>fd42:4242:2601:ac53::53 |
<br/>
burble.dn42 provides a local, anycast, authoritative and recursive DNS service.
The [DNS Service](/home/dns) has it's own page.
## Registry API Service and Explorer
[dn42regsrv](https://git.dn42.us/burble/dn42regsrv) is a REST API for the DN42 registry
that provides a bridge between interactive applications and the registry.
As well as the main REST API to the DN42 registry, the server can also generate ROA tables
and provides a small web application for exploring registry data.
A public instance of the API and associated explorer web app is available at the
following URLs:
* [https://explorer.burble.com/](https://explorer.burble.com/) (public internet link)
* [http://explorer.collector.dn42/](http://explorer.collector.dn42/) (DN42 link)
## Global Route Collector
* [https://grc.burble.com/](https://grc.burble.com/) (public internet link)
* [https://lg-grc.burble.com/](https://lg-grc.burble.com/) (public internet link)
* [http://collector.dn42/](http://collector.dn42/) (DN42 link)
* [http://lg.collector.dn42/](http://lg.collector.dn42/) (DN42 link)
* ssh shell@collector.dn42
The [global route collector](https://git.dn42.us/burble/grc) provides a central
bird instance that collects routes from peers across the DN42 network.
All users are invited to join the collector and help provide stats for the network.
The route collector can currently be queried by using ssh to connect a bird shell
or via a looking glass.
Additional services and stats are expected to be developed in the future.
## ROA Data
Route Origin Authorisation (ROA) tables are generated using
[dn42regsrv](https://git.dn42.us/burble/dn42regsrv) and published to the
[dn42.burble.com](https://dn42.burble.com/) website for general use.
The JSON output file can be used with [gortr](https://github.com/cloudflare/gortr)
to implement ROA checks via RPKI.
The Bird files can be used directly with Bird to implement ROA checks as detailed
in the DN42 Wiki ([Bird1](https://dn42.net/howto/Bird) / [Bird2](https://dn42.net/howto/Bird2)).
|URL|&nbsp;IPv4/IPv6&nbsp;|Description|
|---|---|---|
|[https://dn42.burble.com/roa/dn42_roa_46.json](https://dn42.burble.com/roa/dn42_roa_46.json) &nbsp; | &nbsp;Both&nbsp; | &nbsp; DN42 ROA data in JSON format |
|[https://dn42.burble.com/roa/dn42_roa_bird1_46.conf](https://dn42.burble.com/roa/dn42_roa_bird1_46.conf) &nbsp; | &nbsp;Both&nbsp; | &nbsp; DN42 ROA data for use with Bird1 |
|[https://dn42.burble.com/roa/dn42_roa_bird1_4.conf](https://dn42.burble.com/roa/dn42_roa_bird1_4.conf) &nbsp; | &nbsp;IPv4 Only&nbsp; | &nbsp; DN42 ROA data for use with Bird1 |
|[https://dn42.burble.com/roa/dn42_roa_bird1_6.conf](https://dn42.burble.com/roa/dn42_roa_bird1_6.conf) &nbsp; | &nbsp;IPv6 Only&nbsp; | &nbsp; DN42 ROA data for use with Bird1 |
|[https://dn42.burble.com/roa/dn42_roa_bird2_46.conf](https://dn42.burble.com/roa/dn42_roa_bird2_46.conf) &nbsp; | &nbsp;Both&nbsp; | &nbsp; DN42 ROA data for use with Bird2 |
|[https://dn42.burble.com/roa/dn42_roa_bird2_4.conf](https://dn42.burble.com/roa/dn42_roa_bird2_4.conf) &nbsp; | &nbsp;IPv4 Only&nbsp; | &nbsp; DN42 ROA data for use with Bird2 |
|[https://dn42.burble.com/roa/dn42_roa_bird2_6.conf](https://dn42.burble.com/roa/dn42_roa_bird2_6.conf) &nbsp; | &nbsp;IPv6 Only&nbsp; | &nbsp; DN42 ROA data for use with Bird2 |
## Network Status and Reporting
[dn42.status.burble.com](https://dn42.status.burble.com/)
Each node in the network is monitored by [UptimeRobot](https://uptimerobot.com/) with alerts if a node becomes unavailable.
Internally, nodes are measured by [netdata](https://github.com/netdata/netdata) which provides a real time view of each node. [prometheus](https://prometheus.io/) is then used to collect and store that data for historical reporting. [grafana](https://grafana.com/) is used for visualisation, but this is not currently a public service.
Syslogs are exported in real time to a central logging node on the internal network.

View File

@ -0,0 +1,109 @@
---
title: Services
visible: true
---
List of public services provided by the burble.dn42 network.
===
#Services
## Public Website
[burble.dn42](http://burble.dn42/) (dn42 link)
[dn42.burble.com](https://dn42.burble.com/) (public internet link)
This website is built using [GRAV](https://getgrav.org/) and currently hosted on dn42-fr-rbx1. The public internet version is protected by [CloudFlare](https://www.cloudflare.com).
Longer term, regional replicas of the DN42 site may be provided however this is not currently configured.
## Looking Glass
[lg.burble.com](https://lg.burble.com) (public internet link)
The burble.dn42 looking glass is based on [bird-lg](https://github.com/sileht/bird-lg) with patches by [Zhaofeng](https://github.com/zhaofengli/bird-lg) and myself to fix the formating and bird2 compatibility.
A fork of sileht/bird-lg that includes Zhaofeng's and my fixes is available on [GitHub](https://github.com/sesa-me/bird-lg).
DN42 registry data in the BGP Map part of the looking glass uses [lgregmapper](https://git.dn42.us/burble/lgregmapper)
to interface with [dn42regsrv](https://git.dn42.us/burble/dn42regsrv).
[collector.burble.com](https://collector.burble.com) (public internet link)
The collector summarises routes from each of the burble.dn42 regions, providing a global view of network connectivity. Generally the collector will be quicker and easier to query when looking for global connectivity to an AS or network, however some functions are not supported (e.g. bgpmap functionality).
Both looking glass are hosted behind [CloudFlare](https://www.cloudflare.com).
## DNS
|Authoritative Service||
|:--|:--|
| ns1.burble.dn42<br/>b.delegation-servers.dn42| 172.20.129.161<br/>fd42:4242:2601:ac53::1 |
|Recursive Service||
|:--|:--|
| dns.burble.dn42<br/>b.recursive-servers.dn42| 172.20.129.163<br/>fd42:4242:2601:ac53::53 |
<br/>
burble.dn42 provides a local, anycast, authoritative and recursive DNS service.
The [DNS Service](/home/dns) has it's own page.
## Registry API Service and Explorer
[dn42regsrv](https://git.dn42.us/burble/dn42regsrv) is a REST API for the DN42 registry
that provides a bridge between interactive applications and the registry.
As well as the main REST API to the DN42 registry, the server can also generate ROA tables
and provides a small web application for exploring registry data.
A public instance of the API and associated explorer web app is available at the
following URLs:
* [https://explorer.burble.com/](https://explorer.burble.com/) (public internet link)
* [http://explorer.collector.dn42/](http://explorer.collector.dn42/) (DN42 link)
## Global Route Collector
* [https://grc.burble.com/](https://grc.burble.com/) (public internet link)
* [https://lg-grc.burble.com/](https://lg-grc.burble.com/) (public internet link)
* [http://collector.dn42/](http://collector.dn42/) (DN42 link)
* [http://lg.collector.dn42/](http://lg.collector.dn42/) (DN42 link)
* ssh shell@collector.dn42
The [global route collector](https://git.dn42.us/burble/grc) provides a central
bird instance that collects routes from peers across the DN42 network.
All users are invited to join the collector and help provide stats for the network.
The route collector can currently be queried by using ssh to connect a bird shell
or via a looking glass.
Additional services and stats are expected to be developed in the future.
## ROA Data
Route Origin Authorisation (ROA) tables are generated using
[dn42regsrv](https://git.dn42.us/burble/dn42regsrv) and published to the
[dn42.burble.com](https://dn42.burble.com/) website for general use.
The JSON output file can be used with [gortr](https://github.com/cloudflare/gortr)
to implement ROA checks via RPKI.
The Bird files can be used directly with Bird to implement ROA checks as detailed
in the DN42 Wiki ([Bird1](https://dn42.net/howto/Bird) / [Bird2](https://dn42.net/howto/Bird2)).
|URL|&nbsp;IPv4/IPv6&nbsp;|Description|
|---|---|---|
|[https://dn42.burble.com/roa/dn42_roa_46.json](https://dn42.burble.com/roa/dn42_roa_46.json) &nbsp; | &nbsp;Both&nbsp; | &nbsp; DN42 ROA data in JSON format |
|[https://dn42.burble.com/roa/dn42_roa_bird1_46.conf](https://dn42.burble.com/roa/dn42_roa_bird1_46.conf) &nbsp; | &nbsp;Both&nbsp; | &nbsp; DN42 ROA data for use with Bird1 |
|[https://dn42.burble.com/roa/dn42_roa_bird1_4.conf](https://dn42.burble.com/roa/dn42_roa_bird1_4.conf) &nbsp; | &nbsp;IPv4 Only&nbsp; | &nbsp; DN42 ROA data for use with Bird1 |
|[https://dn42.burble.com/roa/dn42_roa_bird1_6.conf](https://dn42.burble.com/roa/dn42_roa_bird1_6.conf) &nbsp; | &nbsp;IPv6 Only&nbsp; | &nbsp; DN42 ROA data for use with Bird1 |
|[https://dn42.burble.com/roa/dn42_roa_bird2_46.conf](https://dn42.burble.com/roa/dn42_roa_bird2_46.conf) &nbsp; | &nbsp;Both&nbsp; | &nbsp; DN42 ROA data for use with Bird2 |
|[https://dn42.burble.com/roa/dn42_roa_bird2_4.conf](https://dn42.burble.com/roa/dn42_roa_bird2_4.conf) &nbsp; | &nbsp;IPv4 Only&nbsp; | &nbsp; DN42 ROA data for use with Bird2 |
|[https://dn42.burble.com/roa/dn42_roa_bird2_6.conf](https://dn42.burble.com/roa/dn42_roa_bird2_6.conf) &nbsp; | &nbsp;IPv6 Only&nbsp; | &nbsp; DN42 ROA data for use with Bird2 |
## Network Status and Reporting
[dn42.status.burble.com](https://dn42.status.burble.com/)
Each node in the network is monitored by [UptimeRobot](https://uptimerobot.com/) with alerts if a node becomes unavailable.
Internally, nodes are measured by [netdata](https://github.com/netdata/netdata) which provides a real time view of each node. [prometheus](https://prometheus.io/) is then used to collect and store that data for historical reporting. [grafana](https://grafana.com/) is used for visualisation, but this is not currently a public service.
Syslogs are exported in real time to a central logging node on the internal network.

View File

@ -0,0 +1,22 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

View File

@ -0,0 +1,26 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

View File

@ -0,0 +1,27 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

View File

@ -0,0 +1,66 @@
---
title: 'Certificate Authority'
visible: true
---
burble.dn42 certificate authority details.
===
# Certificate Authority
The burble.dn42 network maintains a self-signed certificate authority to generate X.509 certificates for peers who are unable to use un-signed keys because of restrictions with their router implementations.
Please submit key signing requests to dn42@burble.com, emails should be signed with your PGP identity.
**Certificates are valid for 1 year, and if your certificate expires your peering will be removed.**
Peering using X.509 certificates is supported with the following tunnel types:
* OpenVPN
* IPSec/GRE
## burble.dn42 CA details
|||
|---|---|
|countryName|GB|
|stateOrProvinceName &nbsp;&nbsp; |dn42|
|organizationName|burble.dn2|
|commonName|ca.burble.dn42|
|emailAddress|dn42@burble.com|
##### Certificate Expiry Date: ```Dec 21 09:21:08 2020 GMT```
#### ca.burble.dn42 certificate
[ca-burble-dn42.pem](/home/certificate-authority/certs/ca-burble-dn42.pem)
```
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
```
## Host Certificates
See the [Peering](/peering) page for signed host certificates.

143
user/pages/01.home/dns/default.md Executable file
View File

@ -0,0 +1,143 @@
---
title: DNS
published: true
visible: true
---
burble.dn42 DNS services
===
# DNS Services
burble.dn42 DNS services are anycast across every node to provide fast, local responses network wide
## Authoritative DNS Service
|||
|---|---|
| ns1.burble.dn42<br/>b.delegation-servers.dn42| 172.20.129.1<br/>fd42:4242:2601:ac53::1 |
<br/>
ns1.burble.dn42 is slaved to master.delegation-servers.dn42, and provides
DNSSEC signed, authoritative data for DN42 related zones.
The authoritative service may be used as the root for a local DNS resolver, with the assurance
that returned DNS records are traceable via DNSSEC to the DN42 registry. The service
also supports AXFR and may be used as a master to a local, slaved, root zone.
*Note that ns1.burble.dn42 will not forward DNS queries.
Forwarding is provided by the recursive service, dns.burble.dn42.*
*Slaved DN42 zones*
* .dn42
* .recursive-servers.dn42
* .delegation-servers.dn42
* d.f.ip6.arpa.
* 20.172.in-addr.arpa.
* 21.172.in-addr.arpa.
* 22.172.in-addr.arpa.
* 23.172.in-addr.arpa.
* 31.172.in-addr.arpa.
* 10.in-addr.arpa.
*burble.dn42 zones*
* . (local root zone)
* .burble.dn42.
* .collector.dn42.
* 1.0.6.2.2.4.2.4.2.4.d.f.ip6.arpa.
* 0/27.129.20.172.in-addr.arpa.
* 160/27.129.20.172.in-addr.arpa.
The root zone also includes stubs for resolving domains in networks associated to DN42 (e.g. .hack).
## Recursive DNS Service
|||
|---|---|
| dns.burble.dn42<br/>b.recursive-servers.dn42| 172.20.129.2<br/>fd42:4242:2601:ac53::53 |
<br/>
dns.burble.dn42 is a caching, recursive DNS service for DN42 related zones using
the burble.dn42 authoritative service as a local root zone.
The recursor is DNSSEC enabled and validates all queries.
#### Using the recursive DNS service
Users are encouraged to consult recursive-servers.dn42 to obtain a list of
recursive DNS services and configure at least two independent resolvers
to obtain the best resilience.
```
$ host -l recursive-servers.dn42 fd42:4242:2601:ac53::1
Using domain server:
Name: fd42:4242:2601:ac53::1
Address: fd42:4242:2601:ac53::1#53
Aliases:
recursive-servers.dn42 name server a.recursive-servers.dn42.
recursive-servers.dn42 name server b.recursive-servers.dn42.
recursive-servers.dn42 name server j.recursive-servers.dn42.
recursive-servers.dn42 name server y.recursive-servers.dn42.
a.recursive-servers.dn42 has address 172.20.0.53
a.recursive-servers.dn42 has IPv6 address fd42:d42:d42:54::1
b.recursive-servers.dn42 has address 172.20.129.2
b.recursive-servers.dn42 has IPv6 address fd42:4242:2601:ac53::53
j.recursive-servers.dn42 has address 172.20.1.19
j.recursive-servers.dn42 has IPv6 address fd42:5d71:219:0:1::43
y.recursive-servers.dn42 has address 172.20.20.65
y.recursive-servers.dn42 has IPv6 address fd42:c01d:beef::2
```
Example resolv.conf using IPv6 with IPv4 fallback
```
# DN42 resolve.conf
search dn42
# burble.dn42 service
# b.recursive-servers.dn42
nameserver fd42:4242:2601:ac53::53
# j.recursive-servers.dn42
nameserver fd42:5d71:219:0:1::43
# y.recursive-servers.dn42
nameserver 172.20.20.65
```
## Implementation
The DNS service is implemented as a tiered, anycast service with each node
in the network providing a local cache in front of regional, master nodes.
#### Edge Nodes
Each node in the network runs [dnsdist](https://dnsdist.org/), which forwards
queries to regional master nodes and then caches the responses to provide
a fast, local access to DNS data.
Anycast routes to the DNS servers are advertised to the main Bird2 instance using
[GoBGP](https://github.com/osrg/gobgp) and a health checking script.
#### Master Nodes
| Region | Host | Location |
|:--|:--|:--|
| Europe | dns.fr-rbx1.burble.dn42 | OVH, Roubaix, France |
| Eastern Europe | dns.lt-vil1.burble.dn42 | Time4VPS, Vilnius, Lithuania |
| Americas (East) | dns.ca-bhs2.burble.dn42 | OVH, Beauharnois, Canada |
| Americas (Mid & West) | dns.us-dal3.burble.dn42 | HostDoc, Dallas, USA |
| Asia and Oceania | dns.sg-sin2.burble.dn42 | OVH, Singapore |
<br/>
The master nodes are implemented using [PowerDNS](https://www.powerdns.com/).
The Authoritative DNS servers are configured as slaves replicating from the
DN42 master for .dn42 related zones and a hidden master located on the private,
internal network for burble.dn42 zones. The root zone is built automatically
from the registry using [dn42regsrv](https://git.dn42.us/burble/dn42regsrv).
The recursive service is provided by the pdns-recursor configured with DNSSEC
validation and additional caching.

View File

@ -0,0 +1,100 @@
---
title: 'IPAM'
visible: true
---
burble.dn42 IP addresses
===
## IP Address Management
#### burble.dn42 Services
|DNS|IPv4|IPv6|Comment|
|:--|:--|:--|:--|
|&nbsp;|172.20.129.0|&nbsp;|Reserved|
|ns1.burble.dn42|172.20.129.1|fd42:4242:2601:ac53::1|Authoritative DNS Master|
|dns.burble.dn42|172.20.129.2|fd42:4242:2601:ac53::53|Recursive DNS Resolver|
|www.burble.dn42|172.20.129.3|fd42:4242:2601:ac80::1|Website|
|collector.dn42|172.20.129.4|fd42:4242:2601:ac12::1|Global Route Collector|
|&nbsp;|_172.20.129.5-31_|&nbsp;|_Unallocated_|
|collector.burble.dn42|None|fd42:4242:2601:36::b|burble.dn42 Route Collector|
<br/>
Legacy service addresses, these will be removed shortly
|DNS|IPv4|IPv6|Comment|
|:--|:--|:--|:--|
|&nbsp;|172.20.129.160|&nbsp;|Reserved|
|ns1.burble.dn42|172.20.129.161|fd42:4242:2601:ac53::1|Authoritative DNS Master|
|www.burble.dn42|172.20.129.162|fd42:4242:2601:ac80::1|Website|
|dns.burble.dn42|172.20.129.163|fd42:4242:2601:ac53::53|Recursive DNS Resolver|
|&nbsp;|172.20.129.164|&nbsp;|Unallocated|
|collector.dn42|172.20.129.165|fd42:4242:2601:ac12::1|Global Route Collector|
|&nbsp;|172.20.129.166|&nbsp;|Unallocated|
|&nbsp;|172.20.129.167|&nbsp;|Unallocated|
|&nbsp;|172.20.129.168|&nbsp;|Unallocated|
|collector.burble.dn42|&nbsp;|fd42:4242:2601:36::b|burble.dn42 Route Collector|
<br/>
#### burble.dn42 Nodes (DN42)
|DNS|IPv4|IPv6|Comment|
|:--|:--|:--|:--|
|dn42-us-nyc1.burble.dn42|172.20.129.168|fd42:4242:2601:34::1||
|dn42-de-fra1.burble.dn42|172.20.129.169|fd42:4242:2601:31::1||
|dn42-us-sea2.burble.dn42|172.20.129.170|fd42:4242:2601:2c::1||
|dn42-us-chi2.burble.dn42|172.20.129.171|fd42:4242:2601:2b::1||
|dn42-us-dal3.burble.dn42|172.20.129.172|fd42:4242:2601:2a::1||
|dn42-sg-sin3.burble.dn42|172.20.129.173|fd42:4242:2601:29::1||
|dn42-us-lax2.burble.dn42|172.20.129.174|fd42:4242:2601:28::1||
|dn42-vn-han1.burble.dn42|172.20.129.175|fd42:4242:2601:27::1||
|dn42-no-osl1.burble.dn42|172.20.129.176|fd42:4242:2601:26::1||
|dn42-ca-bhs1.burble.dn42|172.20.129.177|fd42:4242:2601:25::1||
|dn42-uk-lon2.burble.dn42|172.20.129.178|fd42:4242:2601:24::1||
|dn42-tr-ist1.burble.dn42|172.20.129.179|fd42:4242:2601:23::1||
|dn42-au-syd1.burble.dn42|172.20.129.180|fd42:4242:2601:38::1||
|dn42-sg-sin2.burble.dn42|172.20.129.181|fd42:4242:2601:37::1||
|dn42-jp-tyo1.burble.dn42|172.20.129.182|fd42:4242:2601:3e::1||
|dn42-us-mia1.burble.dn42|172.20.129.183|fd42:4242:2601:3c::1||
|dn42-ru-mos1.burble.dn42|172.20.129.184|fd42:4242:2601:22::1||
|dn42-at-vie1.burble.dn42|172.20.129.185|fd42:4242:2601:39::1||
|dn42-us-sea1.burble.dn42|172.20.129.186|fd42:4242:2601:32::1||
|dn42-uk-lon1.burble.dn42|172.20.129.187|fd42:4242:2601:35::1||
|dn42-fr-rbx1.burble.dn42|172.20.129.188|fd42:4242:2601:36::1||
|dn42-lt-vil1.burble.dn42|172.20.129.189|fd42:4242:2601:3d::1||
|dn42-uk-bri1.burble.dn42|172.20.129.190|fd42:4242:2601:20::1||
|&nbsp;|172.20.129.190|fd42:4242:2601:31::1|Reserved|
#### burble.dn42 Nodes (Public)
|DNS|IPv4|IPv6|Comment|
|:--|:--|:--|:--|
|dn42-de-fra1.burble.com|176.96.138.245|2a0d:5940:1:c3::b35c||
|dn42-us-sea2.burble.com|96.8.121.205|&nbsp;||
|dn42-us-chi2.burble.com|198.46.223.227|&nbsp;||
|dn42-us-dal3.burble.com|107.155.79.108|2604:880:398:353::1||
|dn42-sg-sin3.burble.com|139.99.53.118|&nbsp;||
|dn42-us-lax2.burble.com|104.168.88.15|&nbsp;||
|dn42-vn-han1.burble.com|103.199.17.246|&nbsp;||
|dn42-no-osl1.burble.com|185.175.56.155|2a0d:5600:30:18::8c3a||
|dn42-ca-bhs1.burble.com|54.39.20.247|2607:5300:201:3100::3c20||
|dn42-uk-lon2.burble.com|185.121.25.166|2a04:92c7:e:537::96cb||
|dn42-tr-ist1.burble.com|185.181.210.90|&nbsp;||
|dn42-au-syd1.burble.com|139.99.194.24|2402:1f00:8100:400::986||
|dn42-sg-sin2.burble.com|139.99.97.88|2402:1f00:8000:800::8d2||
|dn42-jp-tyo1.burble.com|172.93.221.20|2403:71c0:2000::d:8b97||
|dn42-us-mia1.burble.com|93.119.178.120|2001:550:1d05:30::58e:3ef3||
|dn42-ru-mos1.burble.com|176.32.35.228|2a00:b700::1:1e0||
|dn42-us-sea1.burble.com|199.180.133.100|&nbsp;||
|dn42-uk-lon1.burble.com|185.121.25.242|2a04:92c7:e:bd2::e6b9||
|dn42-fr-rbx1.burble.com|91.121.7.182|2001:41d0:1:5ab6::1||
|dn42-lt-vil1.burble.com|195.181.241.93|2a02:7b40:c3b5:f15d::1||
|dn42-us-nyc1.burble.com|185.213.26.143|2a0d:5600:33:b::1||
|dn42-at-vie1.burble.com|185.175.58.235|2a0d:5600:31:7::1||

View File

@ -0,0 +1,99 @@
---
title: 'IPAM'
visible: true
---
burble.dn42 IP addresses
===
## IP Address Management
#### burble.dn42 Services
|DNS|IPv4|IPv6|Comment|
|:--|:--|:--|:--|
|&nbsp;|172.20.129.0|&nbsp;|Reserved|
|ns1.burble.dn42|172.20.129.1|fd42:4242:2601:ac53::1|Authoritative DNS Master|
|dns.burble.dn42|172.20.129.2|fd42:4242:2601:ac53::53|Recursive DNS Resolver|
|www.burble.dn42|172.20.129.3|fd42:4242:2601:ac80::1|Website|
|collector.dn42|172.20.129.4|fd42:4242:2601:ac12::1|Global Route Collector|
|&nbsp;|_172.20.129.5-31_|&nbsp;|_Unallocated_|
|collector.burble.dn42|None|fd42:4242:2601:36::b|burble.dn42 Route Collector|
<br/>
Legacy service addresses, these will be removed shortly
|DNS|IPv4|IPv6|Comment|
|:--|:--|:--|:--|
|&nbsp;|172.20.129.160|&nbsp;|Reserved|
|ns1.burble.dn42|172.20.129.161|fd42:4242:2601:ac53::1|Authoritative DNS Master|
|www.burble.dn42|172.20.129.162|fd42:4242:2601:ac80::1|Website|
|dns.burble.dn42|172.20.129.163|fd42:4242:2601:ac53::53|Recursive DNS Resolver|
|&nbsp;|172.20.129.164|&nbsp;|Unallocated|
|collector.dn42|172.20.129.165|fd42:4242:2601:ac12::1|Global Route Collector|
|&nbsp;|172.20.129.166|&nbsp;|Unallocated|
|&nbsp;|172.20.129.167|&nbsp;|Unallocated|
|&nbsp;|172.20.129.168|&nbsp;|Unallocated|
|collector.burble.dn42|&nbsp;|fd42:4242:2601:36::b|burble.dn42 Route Collector|
<br/>
#### burble.dn42 Nodes (DN42)
|DNS|IPv4|IPv6|Comment|
|:--|:--|:--|:--|
|dn42-de-fra1.burble.dn42|172.20.129.169|fd42:4242:2601:31::1||
|dn42-us-sea2.burble.dn42|172.20.129.170|fd42:4242:2601:2c::1||
|dn42-us-chi2.burble.dn42|172.20.129.171|fd42:4242:2601:2b::1||
|dn42-us-dal3.burble.dn42|172.20.129.172|fd42:4242:2601:2a::1||
|dn42-sg-sin3.burble.dn42|172.20.129.173|fd42:4242:2601:29::1||
|dn42-us-lax2.burble.dn42|172.20.129.174|fd42:4242:2601:28::1||
|dn42-vn-han1.burble.dn42|172.20.129.175|fd42:4242:2601:27::1||
|dn42-no-osl1.burble.dn42|172.20.129.176|fd42:4242:2601:26::1||
|dn42-ca-bhs1.burble.dn42|172.20.129.177|fd42:4242:2601:25::1||
|dn42-uk-lon2.burble.dn42|172.20.129.178|fd42:4242:2601:24::1||
|dn42-tr-ist1.burble.dn42|172.20.129.179|fd42:4242:2601:23::1||
|dn42-au-syd1.burble.dn42|172.20.129.180|fd42:4242:2601:38::1||
|dn42-sg-sin2.burble.dn42|172.20.129.181|fd42:4242:2601:37::1||
|dn42-jp-tyo1.burble.dn42|172.20.129.182|fd42:4242:2601:3e::1||
|dn42-us-mia1.burble.dn42|172.20.129.183|fd42:4242:2601:3c::1||
|dn42-ru-mos1.burble.dn42|172.20.129.184|fd42:4242:2601:22::1||
|&nbsp;|172.20.129.185|fd42:4242:2601:3f::1|Unallocated|
|dn42-us-sea1.burble.dn42|172.20.129.186|fd42:4242:2601:32::1||
|dn42-uk-lon1.burble.dn42|172.20.129.187|fd42:4242:2601:35::1||
|dn42-fr-rbx1.burble.dn42|172.20.129.188|fd42:4242:2601:36::1||
|dn42-lt-vil1.burble.dn42|172.20.129.189|fd42:4242:2601:3d::1||
|dn42-uk-bri1.burble.dn42|172.20.129.190|fd42:4242:2601:20::1||
|&nbsp;|172.20.129.190|fd42:4242:2601:31::1|Reserved|
#### burble.dn42 Nodes (Public)
|DNS|IPv4|IPv6|Comment|
|:--|:--|:--|:--|
|dn42-de-fra1.burble.com|176.96.138.245|2a0d:5940:1:c3::b35c||
|dn42-us-sea2.burble.com|96.8.121.205|&nbsp;||
|dn42-us-chi2.burble.com|198.46.223.227|&nbsp;||
|dn42-us-dal3.burble.com|107.155.79.108|2604:880:398:353::1||
|dn42-sg-sin3.burble.com|139.99.53.118|&nbsp;||
|dn42-us-lax2.burble.com|104.168.88.15|&nbsp;||
|dn42-vn-han1.burble.com|103.199.17.246|&nbsp;||
|dn42-no-osl1.burble.com|185.175.56.155|2a0d:5600:30:18::8c3a||
|dn42-ca-bhs1.burble.com|54.39.20.247|2607:5300:201:3100::3c20||
|dn42-uk-lon2.burble.com|185.121.25.166|2a04:92c7:e:537::96cb||
|dn42-tr-ist1.burble.com|185.181.210.90|&nbsp;||
|dn42-au-syd1.burble.com|139.99.194.24|2402:1f00:8100:400::986||
|dn42-sg-sin2.burble.com|139.99.97.88|2402:1f00:8000:800::8d2||
|dn42-jp-tyo1.burble.com|172.93.221.20|2403:71c0:2000::d:8b97||
|dn42-us-mia1.burble.com|93.119.178.120|2001:550:1d05:30::58e:3ef3||
|dn42-ru-mos1.burble.com|176.32.35.228|2a00:b700::1:1e0||
|dn42-us-sea1.burble.com|199.180.133.100|&nbsp;||
|dn42-uk-lon1.burble.com|185.121.25.242|2a04:92c7:e:bd2::e6b9||
|dn42-fr-rbx1.burble.com|91.121.7.182|2001:41d0:1:5ab6::1||
|dn42-lt-vil1.burble.com|195.181.241.93|2a02:7b40:c3b5:f15d::1||
|dn42-us-nyc1.burble.com|185.213.26.143|2a0d:5600:33:b::1||
|dn42-at-vie1.burble.com|185.175.58.235|2a0d:5600:31:7::1||

View File

@ -0,0 +1,399 @@
---
title: 'Maintenance Log'
visible: true
---
A log of changes to the burble.dn42 network.
===
## burble.dn42 Maintenance Log
#### 1st May 2019
Seems traceroutes and some Europe Region, IPv4 related DNS lookups weren't working.
Both are fixed now.
Added new peers:
* [AS76140](https://explorer.burble.com/#/aut-num/AS76140) /
[FEUERROT](https://explorer.burble.com/#/mntner/FEUERROT-MNT) at dn42-de-fra1
#### 30th April 2019
New node added and ready for peering
* dn42-ca-bhs2 (Beauharnois, Canada)
With the addition of several new nodes, the internal BGP confederations
have been re-orginised.
This new organisation should provide better balance and allow for more local services.
* The North American region has been split in two, becoming Central & West Coast
and East Coast.
* lt-vil1 and at-vie1 have been moved to the East Europe region.
Added new peers:
* [AS4242423581](https://explorer.burble.com/#/aut-num/AS4242423581) /
[CLOUDYSKIES](https://explorer.burble.com/#/mntner/CLOUDYSKIES-MNT) at dn42-us-lax2
* [AS4242420141](https://explorer.burble.com/#/aut-num/AS4242420141) /
[DEEPWATER](https://explorer.burble.com/#/mntner/DEEPWATER-MNT) at dn42-de-fra1
* [AS4242420246](https://explorer.burble.com/#/aut-num/AS4242420246) /
[XESXEN](https://explorer.burble.com/#/mntner/XESXEN-MNT) at dn42-fr-rbx1 and dn42-uk-lon1
* [AS4242422543](https://explorer.burble.com/#/aut-num/AS4242422543) /
[RESETTRAP](https://explorer.burble.com/#/mntner/RESETTRAP-MNT) at dn42-jp-tyo1
#### 19th April 2019
New nodes added and ready for peering.
* dn42-at-vie1 (Vienna, Austria)
* dn42-us-nyc1 (New York, United States)
#### 18th April 2019
Over the last week, and number of major changes have taken place to the burble.dn42 network.
These include:
* Configuring [Jool](https://www.jool.mx) to provide IPv4 to IPv6 SIIT for the new 172.20.129.0/27 prefix
The aim is for all internal services of the burble.dn42 network to be provided by IPv6, with
SIIT taking place at the network edge for external IPv4 users.
* Configuring Jool to provide a NAT64 service
So that internal, IPv6 only, services can access external IPv4 networks
* Adding a new VXLAN to the WAN overlay
The new VXLAN segregates DN42 traffic from the internal traffic and enables a separate DN42
routing domain. As a side effect, this change also fixes the problem where internal IP addresses were
being leaked and causing confusing traceroutes for DN42 users.
Over time, internal IPv4 services will be removed
#### 12th April 2019
New prefix 172.20.129.0/27 registered to provide space for more nodes
and additional services.
172.20.129.0/27 will be used as anycast addresses for services.
172.20.129.160/27 will be used for burble.dn42 nodes
Added new peers:
* [AS4242421063](https://explorer.burble.com/#/aut-num/AS4242421063) /
[ZIIS](https://explorer.burble.com/#/mntner/ZIIS-MNT) at dn42-uk-lon1
* [AS4242421475](https://explorer.burble.com/#/aut-num/AS4242421475) /
[SIRMYSTERION](https://explorer.burble.com/#/mntner/SIRMYSTERION-MNT) at dn42-us-chi2
#### 7th April 2019
Added an old node in to the DN42 network, dn42-sg-sin2.
RPKI and DNS services have been moved to the node from dn42-sg-sin2
which should improve diversification and stability.
#### 3rd April 2019
Added new peers:
* [AS4242423974](https://explorer.burble.com/#/aut-num/AS4242423974) /
[GIGGA](https://explorer.burble.com/#/mntner/GIGGA-MNT) at dn42-sg-sin3
#### 31st March 2019
The DNS service has gone global, with every node in the burble.dn42 network
now participating in the DNS Anycast service.
More details can be found on the [DNS](/home/dns) page.
#### 26rd March 2019
Added new peers:
* [AS4242420568](https://explorer.burble.com/#/aut-num/AS4242420568) /
[MARSHY](https://explorer.burble.com/#/mntner/MARSHY-MNT) at dn42-au-syd1
* [AS4242423853](https://explorer.burble.com/#/aut-num/AS4242423853) /
[CHENYAO2333](https://explorer.burble.com/#/mntner/CHENYAO2333-MNT) at dn42-ca-bhs1
* [AS4242423328](https://explorer.burble.com/#/aut-num/AS4242423328) /
[DEBOERDN2000](https://explorer.burble.com/#/mntner/DEBOERDN2000-MNT) at dn42-ca-bhs1
* [AS4242423924](https://explorer.burble.com/#/aut-num/AS4242423924) /
[EVILZONE](https://explorer.burble.com/#/mntner/EVILZONE-MNT) at dn42-sg-sin3
#### 11th March 2019
New node added dn42-de-fra1
#### 9th March 2019
Added new peers:
* [AS4242420101](https://explorer.burble.com/#/aut-num/AS4242420101) /
[HEXA](https://explorer.burble.com/#/mntner/HEXA-MNT) at dn42-fr-rbx1
* [AS4242423783](https://explorer.burble.com/#/aut-num/AS4242423783) /
[OZARK](https://explorer.burble.com/#/mntner/OZARK-MNT) at dn42-au-syd1
* [AS4242420571](https://explorer.burble.com/#/aut-num/AS4242420571) /
[CAICAI](https://explorer.burble.com/#/mntner/CAICAI-MNT) at dn42-vn-han1
A new instance of the registry explorer has been created that references
the 'object-fix' branch of the DN42 registry. The main purpose of this
is to support the new [DNS](/home/dns) system being developed.
[http://grc.burble.dn42:8043/](http://grc.burble.dn42:8043/)
A couple of the nodes on the network experienced some downtime over the week:
* dn42-us-mia1 was down to 2 days and had to be rebuilt as my VPS provider's
storage array crashed.
* dn42-us-dal3 was also down for a few hours, the provider accidently
suspended the VPS due to a billing error on their side
#### 7th March 2019
Added new peers
* [AS4242421955](https://explorer.burble.com/#/aut-num/AS4242421955) /
[NOP](https://explorer.burble.com/#/mntner/NOP-MNT) at dn42-fr-rbx1
* [AS4242420161](https://explorer.burble.com/#/aut-num/AS4242420161) /
[ZZZ](https://explorer.burble.com/#/mntner/ZZZ-MNT) at dn42-jp-tyo1
#### 26th February 2019
Initialised [GRC website](https://grc.burble.com)
Added new peers
* [AS4242422626](https://explorer.burble.com/#/aut-num/AS4242422626) /
[HANNIBAL](https://explorer.burble.com/#/mntner/HANNIBAL-MNT) at dn42-fr-rbx1
* [AS4242423156](https://explorer.burble.com/#/aut-num/AS4242423156) /
[BUROA](https://explorer.burble.com/#/mntner/BUROA-MNT) at dn42-us-chi2
#### 21st February 2019
The [Looking Glass](https://lg.burble.com) has been udpated to use
[lgregmapper](https://git.dn42.us/burble/lgregmapper) and data from
[dn42regsrv](https://git.dn42.us/burble/dn42regsrv).
#### 19th February 2019
New peer added:
* [AS4242423975](https://explorer.burble.com/#/aut-num/AS4242423975) /
[FELIX](https://explorer.burble.com/#/mntner/FELIX-MNT) at dn42-fr-rbx1
#### 18th February 2019
The internal and public ROA service has been moved over to using dn42regsrv.
See the [services](/home/burble-dn42-services) page for more details.
New peer added:
* [AS4242423973](https://explorer.burble.com/#/aut-num/AS4242423973) /
[TECHNOPOINT](https://explorer.burble.com/#/mntner/TECHNOPOINT-MNT) at dn42-sg-sin3
#### 16th February 2019
New peers added:
* [AS4242420182](https://explorer.burble.com/#/aut-num/AS4242420812) /
[JAN](https://explorer.burble.com/#/mntner/JAN-MNT) at dn42-uk-lon1
* [AS4242422042](https://explorer.burble.com/#/aut-num/AS4242422042) /
[KLEEN](https://explorer.burble.com/#/mntner/KLEEN-MNT) at dn42-fr-rbx1
* [AS4242423201](https://explorer.burble.com/#/aut-num/AS4242423201) /
[DDPO](https://explorer.burble.com/#/mntner/DDPO-MNT) at dn42-uk-lon1
#### 10th February 2019
Updated the [services](/home/burble-dn42-services) to include new stuff::
* DNS
* Registry REST API and Explorer
* Global Route Collector
New peers added:
* <a href="https://explorer.burble.com/#/aut-num/AS4242420191">AS4242420191</a>
/ <a href="https://explorer.burble.com/#/mntner/TCDUE-MNT">TCDUE</a>
at dn42-uk-lon1
* <a href="https://explorer.burble.com/#/aut-num/AS4242422019">AS4242422019</a>
/ <a href="https://explorer.burble.com/#/mntner/HENOKV-MNT">HENOKV</a>
at dn42-fr-rbx1
* <a href="https://explorer.burble.com/#/aut-num/AS64713">AS64713</a>
/ <a href="https://explorer.burble.com/#/mntner/MARTIN89-MNT">MARTIN89</a>
at dn42-fr-rbx1
* <a href="https://explorer.burble.com/#/aut-num/AS4242423000">AS4242423000</a>
/ <a href="https://explorer.burble.com/#/mntner/RELROD-MNT">RELROD</a>
at dn42-ca-bhs1
* <a href="https://explorer.burble.com/#/aut-num/AS4242421656">AS4242421656</a>
/ <a href="https://explorer.burble.com/#/mntner/PHIIVO-MNT">PHIIVO</a>
at dn42-us-lax2
#### 26th January 2019
New service !
A burble.dn42 route [collector](https://collector.burble.com) has been added, together with
some interesting [stats](/monitoring/network-reach) showing reachability of DN42 from the burble.dn42 network.
A common, global route collector is in progress, see [here](https://git.dn42.us/burble/grc)
#### 21st January 2019
New peer added:
* AS4242423306 / TIMK at dn42-au-syd1
#### 13th January 2019
bgpmap updated to add MNT and prefix info for ASes.
New peers added:
* AS4242420415 / TYLER at dn42-us-lax2
* AS4242423569 / DHE at dn42-us-dal3
* AS4242423585 / JD52RU at dn42-fr-rbx1 and dn42-uk-lon1
#### 12th January 2019
The [Looking Glass](https://lg.burble.com/) now supports bgpmap again.
My bird-lg fixes are available on [github](https://github.com/sesa-me/bird-lg).
New peer added:
* AS4242421501 / ADAMYI at dn42-au-syd1
#### 11th January 2019
Some layout fixes to the [Looking Glass](https://lg.burble.com/), including fixing whois lookups.
#### 3rd January 2019
First new peers of 2019:
* AS4242420505 / 42ISLIFE at dn42-ca-bhs1
* AS4242421114 / GRGR at dn42-us-chi2
* AS4242421050 / NAPSTERBATER at dn42-us-chi2
#### 2nd January 2019
Consolidated number of anycast sessions.
#### 30th December 2018
Migrated US anycast services from dn42-us-dal1 to dn42-us-dal3.
#### 27th December 2018
Added [Certificate Authority](/home/certificate-authority) details.
#### 26th December 2018
Upgraded the [looking glass](https://lg.burble.com) with Zhaofeng [bird-lg fixes](https://github.com/zhaofengli/bird-lg/commits/zhaofengli).
ROA data is available through the burble.dn42 website, see the [Services](home/burble-dn42-services) page.
RPKI service is now replicated across regions to provide additional resiliency.
New version of bird2 deployed, including RPKI fixes from JRB0001.
#### 24th December 2018
Added new peers:
* AS4242422255/LINUXGEMINI at dn42-tr-ist1
* AS4242421191/YAMAKAJA at dn42-fr-rbx1
* AS4242423230/RASP at dn42-au-syd1
Updated the [Services](/home/burble-dn42-services) page to include more implementation details.
Reworked intra-confederation peering to provide more resilience.
Implemented ROA via RPKI updates using [roasrv](https://git.dn42.us/Yamakaja) by Yamakaja and [gortr](https://github.com/cloudflare/gortr)
#### 16th December 2018
New node !
dn42-jp-tyo1 has been commissioned and is open for new peers in Tokyo, Japan.
#### 14th December 2018
Updated host information and network map with new nodes.
#### 10th December 2018
New peers added:
* AS4242423090/HEIAS at dn42-fr-rbx1
* AS4242421979/MDUCHARME at dn42-us-sea2
dn42-us-sea2 is now operational and available for peering.
#### 2nd December 2018
tinc + babeld is not a winning combination. Since introducing babeld, the burble.dn42 WAN overlay has experienced a number of periods of instability, with nodes dropping on and off the network.
The WAN has been updated to use a Wireguard mesh with OSPF as IGP, and is now significantly more stable again.
#### 1st December 2018
New peers added:
* AS4242420260/GISH at dn42-au-syd1
* AS4242421009/KLARA at dn42-no-osl1
* AS4242420058/ILL at dn42-au-syd1
* AS4242422547/LANTIAN at dn42-fr-rbx1 / dn42-us-lax2 / dn42-sg-sin3
#### 30th November 2018
Three new nodes will be available for peering soon:
* dn42-us-chi2 - Chicago, United States
* dn42-us-sea2 - Seattle, United States
* dn42-us-dal3 - Dallas, United States
#### 29th November 2018
dn42-us-dal1 locked up, and has been restarted.
#### 28th November 2018
dn42-uk-lon1, dn42-lt-vil1, dn42-sg-sin1 and dn42-us-mia1 all locked up at 03:00 UTC and have now been restarted.
#### 23nd November 2018
Black Friday has delivered four new nodes to the burble.dn42 network:
* dn42-vn-han1 - Hanoi, Vietnam
* dn42-no-osl1 - Oslo, Norway
* dn42-ca-bhs1 - Beauharnois, Canada
* dn42-us-lax2 - Los Angeles, United States
* dn42-sg-sin3 - Singapore
All nodes are open to new peers, so just contact dn42@burble.com if you'd like to connect to the network.
#### 22nd November 2018
New peers added:
* AS4242420165/ZAICA at dn42-fr-rbx1
* AS42424222673/CORESTORAGE at dn42-uk-lon1
#### 18th November 2018
Updates to reverse DNS.
#### 17th November 2018
Added new peers
* AS4242423640/HESSENET at dn42-fr-rbx1
* AS4242420149/NIRF at dn42-lt-vil1
#### 17th November 2018
The internal routing protocol (IGP) for burble.dn42 has moved from OSPF to using [babeld](https://www.irif.fr/~jch/software/babel/).
All nodes on the burble.dn42 network are inter-connected with a [tinc](https://www.tinc-vpn.org/) mesh. Despite the network physically spanning across contintents, OSPF saw the tinc overlay network as being flat which prevented effective use of technologies such as anycast and forced the use of central resources. The hope is that babel, configured to use an RTT metric, will allow better use of regional services.
Please let me know if you observe any issues due to the new IGP.
#### 16th November 2018
New node in Istanbul, Turkey.
dn42-tr-ist1 has been commissioned and is now open for new peers. See the [peering](/peering) page for more details.

View File

@ -0,0 +1,45 @@
---
title: 'Routing Policy'
visible: true
---
Details of the burble.dn42 routing policy.
===
## Routing Policy
With a global network and multiple peers, the burble.dn42 network typically has many alternative route paths for reaching a particular destination. The routing policy aims to keep route selection sane, and avoid sending traffic outside of a region where possible.
### Policy Rules
1. Direct routes for prefixes belonging to a peer should be given the highest priority.
So that traffic to peer networks is routed over the burble.dn42 network directly to the peer and not via an external 3rd party
3. Routes to the anycast prefixes should be prioritised through stable, low latency peers.
To ensure stability within the network and provide good routes for well known destinations (e.g. DNS and the DN42 wiki)
5. Where prefixes are tagged with a DN42 region, they should be routed locally or within the burble.dn42 network.
To avoid sending traffic across regions when this could have been avoided.
The AS path length is also increased between regions to pursuade external routers to also prefer local hosts.
7. Prioritise by shortest path, then lowest latency
### Policy Implementation
#### bgp local_pref
The local_pref for routes is set on entry, and then propogated across the whole network (including across regions). This forces the network to prefer routes that, where possible, send traffic through the burble.dn42 network to a local peer, rather than sending cross regional traffic through external peers (aka [Cold Potato Routing](https://en.wikipedia.org/wiki/Hot-potato_and_cold-potato_routing)).
|Local Pref &nbsp; | Route Class |
|:---|:---|
| 1000 &nbsp; | Peer networks (AS path len = 1) |
| 900 &nbsp; | Prioritised routes for well known anycast prefixes |
| 500 &nbsp; | Route received in same DN42 region as it originated |
| 100 &nbsp; | Default |
#### bgp med
The med attribute is set _per host_ and not propogated through the network.
The use of med is intended to pursuade the host to choose the lowest latency route to a prefix, in the case where the local_pref and AS path lengths are equal. Routes that originate in a different burble.dn42 region also get an additional med penalty.
```
med = 10 + 4 if cross region + DN42 maxmimum latency via 65411 community (1 to 9)
```

845
user/pages/02.peering/default.md Executable file
View File

@ -0,0 +1,845 @@
---
title: peering
---
Peering with burble.dn42
===
This page provides the information to get started on peering with the burble.dn42 network.
burble.dn42 is a set of global POPs integrated to the [dn42](https://dn42.us/) network, and new peering requests are welcome, whether you are a new starter or already have an established network. A description of the network is available in the [about](/about) page.
####Peering Requests
Please mail **dn42@burble.com** if you'd like to peer with me.
By default, I'll configure a full transit connection with you which could mean I end up routing traffic over your network, but just let me know if you'd prefer a different peering arrangment.
At a minimum, I'll need to know the following in order to establish a peering:
* Your ASN
* The public address of your host
* The tunnel parameters, e.g.
* Port number, if using wireguard or OpenVPN
* Public key for wireguard or IPsec
* Any special config you need that is different to my defaults
* IP addresses of your end of the tunnel
* Typically these will be a single IPv4/32 and IPv6/128 from your DN42 allocation
#### Residential ISPs and Dynamic IP addresses
A 24/7 connection, with static IP addresses are the norm for DN42, and by default I will add firewall rules to limit tunnel traffic to your specific IP address. If you are connecting from a residential ISP or otherwise have a dynamic IP please let me know so that I can configure my side appropriately. If you don't do tell me, the peering will stop working when your IP address changes.
#### Supported Tunnel Types
I prefer to use [wireguard](https://wireguard.io/), it's simple to set up and just works. I have experience with each of the tunnel types listed below, but if you really want to use something else, just drop me an email and we'll work it out.
* **[Wireguard](https://wireguard.io/)**
I use a random port number and unique key for each Wireguard peer, so just mail me to confirm the port number and public key.
Endpoint names and IP addresses are detailed below.
My wireguard AllowedIPs are:
```
AllowedIPs=fe80::/64
AllowedIPs=fd00::/8
AllowedIPs=0.0.0.0/0
```
* **IPSec/GRE**
IPSec/GRE is supported for peers with static IP addresses only.
IPSec public keys for each host are listed below.
X.509 certificates are supported if absolutely required, see the [Certificate Authority](/home/certificate-authority) page.
My preferred ipsec parameters:
```
keyexchange=ikev2
ike=aes256-sha256-modp2048!
esp=aes256-sha256-modp2048!
ikelifetime=28800s
lifetime=3600s
```
My IPsec implementation is [Strongswan](https://www.strongswan.org/).
* **[OpenVPN](https://openvpn.net/)**
By default, I will configure cipher aes-256-cbc, with a random OpenVPN port number and shared key.
A client/server configuration with X.509 certificates can be deployed if required, see the [Certificate Authority](/home/certificate-authority) page.
####Allowed Traffic
Only the network ranges will be forwarded through the DN42 network, all other traffic will be dropped.
**IPv4**
```
172.16.0.0/12
10.0.0.0/8
```
**IPv6**
```
fd00::/8
```
BGP peer addresses are more permissive to allow for link local or non-DN42 IP addresses within the tunnel, but these will not be forwarded through the DN42 network.
#### BGP Configuration
The burble.dn42 network is divided in to a number of BGP confederations
(see the [about](/about) page). The confederations use internal ASNs that are not
valid on DN42 and the network is presented as a single AS using the assigned DN42
ASN (AS4242422601) to external peers.
|||
|---|---|
|**Network Name** |BURBLE|
|**BURBLE-MNT**|dn42@burble.com|
|**ASN**|AS4242422601|
&nbsp;
The burble.dn42 network uses [bird 2](https://bird.network.cz/?get_doc&f=bird.html&v=20), and the following features are supported:
* Multiprotocol BGP [RFC 4760](https://www.rfc-editor.org/info/rfc4760)
* BGP Large Communities [RFC 8092](http://www.rfc-editor.org/info/rfc8092)
* BGP Confederations [RFC 5065](https://www.rfc-editor.org/info/rfc5065)
* dn42 Route Origin Authorisation (ROA - see below section on Route Filtering)
* dn42 [BGP communities](https://wiki.dn42.us/howto/Bird-communities)
* burble.dn42 custom [large communities](/home/bgp-communities)
* burble.dn42 [Routing Policy](/home/routing-policy)
**Route Filtering**
Incoming routes are filtered according the rules in the dn42 registry (data/filter.txt and data/filter6.txt).
Additionally Route Origin Authorisation (ROA) is implemented with updates through RPKI,
using [dn42regsrv](https://git.dn42.us/burble/dn42regsrv) and
[gortr](https://github.com/cloudflare/gortr). This means any advertised prefix that does
not have a corresponding route{,6} object in the DN42 registry will be dropped.
The DN42 ROA data is provided as a public service, see the [Services](/home/burble-dn42-services) page.
Generic Allowed Prefixes:
IPv4
```
172.20.0.0/14{21,29}, # dn42
172.20.0.0/24{28,32}, # dn42 Anycast
172.21.0.0/24{28,32}, # dn42 Anycast
172.22.0.0/24{28,32}, # dn42 Anycast
172.23.0.0/24{28,32}, # dn42 Anycast
172.31.0.0/16+, # ChaosVPN
10.100.0.0/14+, # ChaosVPN
10.0.0.0/8{15,24} # Freifunk.net
```
IPv6
```
fd00::/8{44,64}
```
#### Testing
Within the tunnel, hosts respond to ping and traceroute, but also have the echo (port 7) and daytime (port 13) services enabled. These can be used to check the tunnel is up and configured correctly.
```
$ ping fe80::42:2601:32:1%wg0
PING fe80::42:2601:32:1%wg0(fe80::42:2601:32:1%wg0) 56 data bytes
64 bytes from fe80::42:2601:32:1%wg0: icmp_seq=1 ttl=64 time=4.44 ms
64 bytes from fe80::42:2601:32:1%wg0: icmp_seq=2 ttl=64 time=4.52 ms
64 bytes from fe80::42:2601:32:1%wg0: icmp_seq=3 ttl=64 time=4.96 ms
^C
--- fe80::42:2601:32:1%wg0 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2003ms
rtt min/avg/max/mdev = 4.445/4.643/4.961/0.233 ms
$ netcat fe80::42:2601:32:1%wg0 13
Sun Sep 23 09:57:26 2018
^C
$
```
Once peering is established I have a BGP looking glass [here](https://lg.burble.com/) (public internet link) and global route [collector](https://collector.burble.com) which can be used to check routing.
---
#### Network Information
The burble.dn42 is fully meshed between nodes using wireguard tunnels and VXLAN. However, the network is configured as a number of sub-AS regions within a single BGP confederation to allow for regional services and to reduce the number of iBGP sessions. See the [about](/about) page for more details and a network diagram.
The internal, confederation ASNs documented here are *for information only* as they are not valid DN42 ASNs.
When peering with burble.dn42 the DN42 assigned AS4242422601 should always be used.
|||
|---|---|
|**IPv4 Prefix (Services)** |172.20.129.0/27|
|**IPv4 Prefix (Nodes)** |172.20.129.160/27|
|**IPv6 Prefix**|fd42:4242:2601::/48|
###North and West Europe Core
Internal ASN: AS4226010150
####dn42-fr-rbx1
|||
|---|---|
|**Location**|OVH, Roubaix, France|
|**Alias**|sunflower|
|**Public Hostname**|dn42-fr-rbx1.burble.com|
|**Public IPv4 Address**|91.121.7.182|
|**Public IPv6 Address**|2001:41d0:1:5ab6::1|
|**Tunnel IPv4 Peer Address**|172.20.129.188/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:36:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:36::1/128|
|**X.509 Host Certificate**|[dn42-fr-rbx1.pem](/home/certificate-authority/certs/dn42-fr-rbx1.pem)|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
```
####dn42-uk-lon1
|||
|---|---|
|**Location**|Inception Hosting, London, UK|
|**Alias**|bode|
|**Public Hostname**|dn42-uk-lon1.burble.com|
|**Public IPv4 Address**|185.121.25.242|
|**Public IPv6 Address**|2a04:92c7:e:bd2::e6b9|
|**Tunnel IPv4 Peer Address**|172.20.129.187/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:35:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:35::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
```
####dn42-no-osl1
|||
|---|---|
|**Location**|HostHatch, Oslo, Norway|
|**Alias**|seyfert|
|**Public Hostname**|dn42-no-osl1.burble.com|
|**Public IPv4 Address**|185.175.56.155|
|**Public IPv6 Address**|2a0d:5600:30:18::8c3a|
|**Tunnel IPv4 Peer Address**|172.20.129.176/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:26:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:26::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxWT6No65elo9+0JXxqsB
BGGinuFpELS6hphzqr/4ctv89Z0BmWOjWxIUXvWboW/qFnVbAeeVVwbERUDIefnM
hG/Iu6SkaRYahoEG862FfTiucP8Dqbs3LDOo6ZvbvlBrgC8f45cxzLtiY+HIvjTy
SR5VeGLucjicjrupXtYTRrkjNEA+jGiZVKASmiIC760kyrOTQ2/KpEPv5FC8vU5w
byEvO47ZrLA3nABBKHHKNBsD6GmN332UAyTon+cdJ8wyTEiYYIylX5K4sWaARQPg
aAbGBDUDoXw49JNAlgAosYwMgX8mmuNBRHcHVfw5BoHYyJEuaynCM4h+jmvUeEvY
33OBKjsYwriWIeL3Uv8U9K/YfZMW2C7Vovn++TTW9MxgE6ID3+cvYrKmlK1G75hq
oXZyVn3JAkDonXj3T2cGd6D5Q3wUcmn4FA2hPsk9AmP5BcFLea/0cB7BV2jOCqUB
cydm1zl/Cx744WAcgs46siXsP3T74gb81LUpG1d3tgm+Tro5efnZcwWwUhwpWamm
rMWBfiEHgBDv7a6Xc1JwP0V6uCRWRhkJQ9ogdtKE7nfGWjqrEv00bOepaMQQCPM/
oflRdgswnHa7Qf5J9eKH8PJyIft4Ms3iSQsYwUi4nEhkTJ4BWDx6gQi6hZrTGLqm
d7h5/E4AP001ss5jWUpmMfcCAwEAAQ==
-----END PUBLIC KEY-----
```
####dn42-de-fra1
|||
|---|---|
|**Location**|PHP Friends, Frankfurt, Germany|
|**Alias**|abell|
|**Public Hostname**|dn42-de-fra1.burble.com|
|**Public IPv4 Address**|176.96.138.245|
|**Public IPv6 Address**|2a0d:5940:1:c3::b35c|
|**Tunnel IPv4 Peer Address**|172.20.129.169/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:31:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:31::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
```
###Eastern Europe
Internal ASN: AS4226010151
####dn42-lt-vil1
|||
|---|---|
|**Location**|Time4VPS, Vilnius, Lithuania|
|**Alias**|cosmos|
|**Public Hostname**|dn42-lt-vil1.burble.com|
|**Public IPv4 Address**|195.181.241.93|
|**Public IPv6 Address**|2a02:7b40:c3b5:f15d::1|
|**Tunnel IPv4 Peer Address**|172.20.129.189/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:3d:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:3d::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxHXG1p8nVNCO7neCtysG
U3pGUYblBnrtBPR90pgytIcbcllWU0HmkI5Ez4tdpKqBdZ+cqs7uxpo0/DNlAp0s
6gGS2b5JMV2nZEL+u8AtHCtOCrjUDlMpcY96WvOia8Dmi/kw0GPnxiuvDzJU+pJ8
tRy+UnrN+PGjYrXPv2KnjeexGtp4pXee8d9D8o4PPfnSUr42B4OOjyWfDceOggwV
L83nUIvKJGmJOmwHPpf7wedaPD2sKNobSLuoc4XZ6Hn3SQ980cDqDYqjhYahLifl
7u16O4JtSea74WNST4LM1MM1r/yddEPlk+th3GvkZxv5RcUbMKqtiowfSubduUPM
79a9o7BeJLoj444sStJWB1Yu0pPmYdJsQ+isCUiTkNfFjwLtj69mcQmG6YYfY8vM
p5ADgpTzEMlN7i/l7SLrFDZKa2obYdY9n6CTPud43g+P9r31DF2qXdFvbqxFQroG
UG8GhMvvltUxnxuB5ne5lJBNAwevWoc3jq746BFPqkT1/KI5BDBzNbv55dk6AZy4
Q8zw+KbbW7O6+zmk4jD3D9rZZU5bi7h6eZL/TaNIR8zVherAZk1ZsyQkHPoymnNQ
nAPpGHGblOo3PoNXi9O0GRaj4Y+O84c2FCA43PS6yChtYf5R2xpDdMG/fgZvZDFM
oyK7ejnrTzb42sb/RDkqsqkCAwEAAQ==
-----END PUBLIC KEY-----
```
####dn42-at-vie1
|||
|---|---|
|**Location**|HostHatch, Vienna, Austria|
|**Alias**|tadpole|
|**Public Hostname**|dn42-at-vie1.burble.com|
|**Public IPv4 Address**|185.175.58.235|
|**Public IPv6 Address**|2a0d:5600:31:7::1|
|**Tunnel IPv4 Peer Address**|172.20.129.185/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:39:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:39::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
```
####dn42-tr-ist1
|||
|---|---|
|**Location**|HostTigger, Istanbul, Turkey|
|**Alias**|virgo|
|**Public Hostname**|dn42-tr-ist1.burble.com|
|**Public IPv4 Address**|185.181.210.90|
|**Public IPv6 Address**|`IPv4 Only`|
|**Tunnel IPv4 Peer Address**|172.20.129.179/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:23:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:23::1/128|
|**X.509 Host Certificate**|[dn42-tr-ist1.pem](/home/certificate-authority/certs/dn42-tr-ist1.pem)|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
```
####dn42-ru-mos1
|||
|---|---|
|**Location**|JustHost.ru, Dataline DC, Moscow, Russia|
|**Alias**|cygnus|
|**Public Hostname**|dn42-ru-mos1.burble.com|
|**Public IPv4 Address**|176.32.35.228|
|**Public IPv6 Address**|2a00:b700::1:1e0|
|**Tunnel IPv4 Peer Address**|172.20.129.184/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:22:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:22::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
```
###North America (East Coast)
Internal ASN: AS4226010021
####dn42-ca-bhs2
|||
|---|---|
|**Location**|OVH, Beauharnois, Canada|
|**Alias**|draco|
|**Public Hostname**|dn42-ca-bhs2.burble.com|
|**Public IPv4 Address**|192.99.2.172|
|**Public IPv6 Address**|2607:5300:60:33ac::1|
|**Tunnel IPv4 Peer Address**|172.20.129.167/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:2d:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:2d::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
```
####dn42-ca-bhs1
|||
|---|---|
|**Location**|OVH, Beauharnois, Canada|
|**Alias**|comet|
|**Public Hostname**|dn42-ca-bhs1.burble.com|
|**Public IPv4 Address**|54.39.20.247|
|**Public IPv6 Address**|2607:5300:201:3100::3c20|
|**Tunnel IPv4 Peer Address**|172.20.129.177/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:25:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:25::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
```
####dn42-us-chi2
|||
|---|---|
|**Location**|VirMach, Chicago, United States|
|**Alias**|markarian|
|**Public Hostname**|dn42-us-chi2.burble.com|
|**Public IPv4 Address**|198.46.223.227|
|**Public IPv6 Address**|`IPv4 Only`|
|**Tunnel IPv4 Peer Address**|172.20.129.171/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:2b:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:2b::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
```
####dn42-us-mia1
|||
|---|---|
|**Location**|Virtono, Miami, United States|
|**Alias**|segue|
|**Public Hostname**|dn42-us-mia1.burble.com|
|**Public IPv4 Address**|93.119.178.120|
|**Public IPv6 Address**|2001:550:1d05:30::58e:3ef3|
|**Tunnel IPv4 Peer Address**|172.20.129.183/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:3c:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:3c::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
```
####dn42-us-nyc1
|||
|---|---|
|**Location**|HostHatch, New York, United States|
|**Alias**|sombrero|
|**Public Hostname**|dn42-us-nyc1.burble.com|
|**Public IPv4 Address**|185.213.26.143|
|**Public IPv6 Address**|2a0d:5600:33:b::1|
|**Tunnel IPv4 Peer Address**|172.20.129.168/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:34:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:34::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
```
###North America (Central & West Coast)
Internal ASN: AS4226011021
####dn42-us-dal3
|||
|---|---|
|**Location**|HostDoc, Dallas, United States|
|**Alias**|lacertae|
|**Public Hostname**|dn42-us-dal3.burble.com|
|**Public IPv4 Address**|107.155.79.108|
|**Public IPv6 Address**|2604:880:398:353::1|
|**Tunnel IPv4 Peer Address**|172.20.129.172/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:2a:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:2a::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2dgJHSuUFicSQpzfeuoo
3brR8au/XBhnU8d9AeWg7KMeoKFC/wajXDi0WUEuAbQ602ImXOU763jwUT2SfQMt
iKqerFJJGQn9oGAK6SoowzTsaoHBZexu6vNepX+FhuqXo20g73MzRPkq6Ud/UJmb
uUM6wggPgN/UAKBTe6KJ3Gz2g4DgTGc1LG5DIdnwDPmIYhXdwxJU8FrFH5O5F5/A
ZSm8RjWJ6o6yc7LfZ4Or/C4Ycdh7qXKRCew3yIhts4MUYMSpo7iAVen3t8KT6Bdj
OOIHpQVWeJhrwG/kill7Bcb+VZQm23va8fMAO1t13B6NSIXWr8x1RFTja/KgY7sC
yrioKntqdH3Z4Lfh8gOQ2DRo0yoyHEl4D4CxK0GRvysPNcO3HH3C0OfsrNqtM3lH
6vX1a/FnS/giS95H+nZ9jXzarVLZJq6dbsnk8fsgVOS3tiLNm940g/5Eh5Z0Nmwp
NGG2oea+ZiWmX3xem9JnV4uGN3nB+GguJ0mPaoY9AJzAvbJRvPj0SxdEyJZ/WZa0
HcoWMhe9sohw73rRpPEfhplZXd/fH+g5/HGDBXGpmA98upVGNcsga4zkOgNvYh3F
p2UcnkFJahbltifKAagSObFdbDlF7dYv3qTpxt5+TJj2PRBpqtb+KjQ/OPvJ1rDd
gwj6kVhdIoel1Zm/aOiW3okCAwEAAQ==
-----END PUBLIC KEY-----
```
####dn42-us-lax2
|||
|---|---|
|**Location**|VirMach, Los Angeles, United States|
|**Alias**|messier|
|**Public Hostname**|dn42-us-lax2.burble.com|
|**Public IPv4 Address**|104.168.88.15|
|**Public IPv6 Address**|`IPv4 Only`|
|**Tunnel IPv4 Peer Address**|172.20.129.174/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:28:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:28::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAt5NthwJQEiRix0gEfbl3
NNonA1xULr0lOSSNtau2QjxJW9aX73E/HH4BV05qenEgl0mC0+y4gzRS6yAZ/wVE
W71ApdgHaFUlerBeiypGb+ZknRQYv8BAT/YX6Jn9FC/GN0xlcaLmYsYloCB25MFt
PT+B67ENo2O42hoMwPP+BZgji6cDcnRiN+d5DXwhX90pqOF6CLy3mZt9PIXkU5u3
TclTd+h+qJo+liGgd18dvAPtvWLb95NbJyCZn51g3TGMT6nuGW2xuPUtQxjIwc7A
Ix2Shgotmz7Kiy5ezqnY3M+quy52U5PzBNMm7wThhPJNR6TkzASkKacEe53pxO9s
0wa+gSiiw6TgUcv8QbgtwdbkGbrW6gFY9jxJqSp6vIFcmSonb6C9tbtErMIFP4wq
wLpF3DW0EHrXxhcg99s2T+7/cKYMS+Z5QUK5D4YQbaDpBR58GCCkaRf9EM0pVdHO
mZbS0Fi/gP/XfFJxATya464cZlGgLpEp4LUxiDkeFEs5U0lHf90qr0rSw9ZM9Dy6
0x1b/0a3ABwPGu7BNvY7cd1bI6lpRfC9YALLyEjhbLG1G6o5xrCFu/gXPBDPmv58
H1aYtjBLdJKV0AQEICkRi4K01AooQp68dWKQympvAeWSb3D/Z8/w4udAiNXrzdMF
b2XU7+L4WziRU3afaoSme1ECAwEAAQ==
-----END PUBLIC KEY-----
```
####dn42-us-sea1
`dn42-us-sea1 will be replaced by dn42-us-sea2`
|||
|---|---|
|**Location**|Virpus, Seattle, United States|
|**Alias**|whirlpool|
|**Public Hostname**|dn42-us-sea1.burble.com|
|**Public IPv4 Address**|199.180.133.100|
|**Public IPv6 Address**|`IPv4 Only`|
|**Tunnel IPv4 Peer Address**|172.20.129.186/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:32:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:32::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
```
####dn42-us-sea2
|||
|---|---|
|**Location**|Virmach, Seattle, United States|
|**Alias**|centaurus|
|**Public Hostname**|dn42-us-sea2.burble.com|
|**Public IPv4 Address**|96.8.121.205|
|**Public IPv6 Address**|`IPv4 Only`|
|**Tunnel IPv4 Peer Address**|172.20.129.170/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:2c:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:2c::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
```
###Asia and Oceania
Internal ASN: AS4226010009
####dn42-sg-sin2
|||
|---|---|
|**Location**|OVH, Singapore|
|**Alias**|hoag|
|**Public Hostname**|dn42-sg-sin2.burble.com|
|**Public IPv4 Address**|139.99.97.88|
|**Public IPv6 Address**|2402:1f00:8000:800::8d2|
|**Tunnel IPv4 Peer Address**|172.20.129.181/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:37:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:37::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
```
####dn42-sg-sin3
|||
|---|---|
|**Location**|HostDoc, Singapore|
|**Alias**|starfish|
|**Public Hostname**|dn42-sg-sin3.burble.com|
|**Public IPv4 Address**|139.99.53.118|
|**Public IPv6 Address**|`IPv4 Only`|
|**Tunnel IPv4 Peer Address**|172.20.129.173/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:29:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:29::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
```
####dn42-au-syd1
|||
|---|---|
|**Location**|OVH, Sydney, Australia|
|**Alias**|mice|
|**Public Hostname**|dn42-au-syd1.burble.com|
|**Public IPv4 Address**|139.99.194.24|
|**Public IPv6 Address**|2402:1f00:8100:400::986|
|**Tunnel IPv4 Peer Address**|172.20.129.180/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:38:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:38::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
```
####dn42-vn-han1
|||
|---|---|
|**Location**|GreenCloudVPS, Hanoi, Vietnam|
|**Alias**|starburst|
|**Public Hostname**|dn42-vn-han1.burble.com|
|**Public IPv4 Address**|103.199.17.246|
|**Public IPv6 Address**|`IPv4 Only`|
|**Tunnel IPv4 Peer Address**|172.20.129.175/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:27:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:27::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxAwXzq/mGmxPgxFf9eWK
DyUK29m32gMbuWsrhI0wS6kNtir0ejW0Wi2ALEdOfD7UbxNSaEtoEu4CFynO/+SV
tRN9h7uTZtD1Lb6RGFp25Wqvab7rfaYaUqqbYe+KShpdqNR0dg3wwZa/oYiAvGZ2
1Ne4TBnPc5KYWFMqfaULq9nEnE2a9RPN/TMDB1NzXF1wp88eVIzKaOGuflHblF8L
lSsqtJ8ZHYiH8i+CldbOREtMDZuFj0y0zJZ4VK8SY6xrmAEpSYqpG4+qE3OLu2Wh
JOrZKoCDkISUPS6JL9+Ajoy8ItPNNQE8KB4jAVUu6MO6KRRh3KDCcPWvxMfbXSej
L+t9lkogFKBc5XRrHONtrgL4mACqkZl+Z39CsS8HGAuc8EUfwxur91DIHOIiFZCr
HTcFmv0cZFRMaQKnTwGG1JAsxPZxLW5gFpdvrQFswfoTFt++3zLG2A3yhk9WCz3J
7f+xSk+7hD4WXtsVG8foGMYJj0Rps8uOtQupwhtVjdClx0+iO8UNUh0CshMm4W6l
S3a+HLSJntCo0YXQvYmdlikNDcT+DGtLUncwogVKxbbEzfRSsJmd5KGFn35Msg8O
6kfQzgZYXVUJVy3KSZd8dBA9pokkWVkO3p8YO9E47nyohN0PurDLLDjNvLifyw3f
4sP70m6oofj8wtKov/ovFO0CAwEAAQ==
-----END PUBLIC KEY-----
```
####dn42-jp-tyo1
|||
|---|---|
|**Location**|GreenCloudVPS, Tokyo, Japan|
|**Alias**|blackeye|
|**Public Hostname**|dn42-jp-tyo1.burble.com|
|**Public IPv4 Address**|172.93.221.20|
|**Public IPv6 Address**|2403:71c0:2000::d:8b97|
|**Tunnel IPv4 Peer Address**|172.20.129.182/32|
|**Tunnel IPv6 Link Local**|fe80::42:2601:3e:1/64|
|**Tunnel IPv6 ULA**|fd42:4242:2601:3e::1/128|
|**IPSec Public Key**||
```
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
```
###Other Hosts
uk-bri1 - Bristol, UK
uk-lon2 - Inception Hosting, London, UK
Sorry, these hosts are not currently open for public peering.

File diff suppressed because one or more lines are too long

10
user/pages/03.monitoring/Chart.bundle.min.js vendored Executable file

File diff suppressed because one or more lines are too long

View File

@ -0,0 +1,16 @@
---
title: monitoring
---
# Monitoring
#### Global Route Collector
The [collector](https://collector.burble.com) provides a global summary of routes within the network.
#### Network Reachability
The [network reach](/monitoring/network-reach) page shows various stats related to the connectivity of the network to the rest of DN42.

1
user/pages/03.monitoring/vis.min.css vendored Executable file

File diff suppressed because one or more lines are too long

47
user/pages/03.monitoring/vis.min.js vendored Executable file

File diff suppressed because one or more lines are too long

Binary file not shown.

After

Width:  |  Height:  |  Size: 608 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 607 KiB

39
user/pages/04.about/default.md Executable file
View File

@ -0,0 +1,39 @@
---
title: about
media_order: 'DN42 Map 181224.2.png'
---
#burble.dn42
burble.dn42 is an experimental global network, part of [dn42](https://dn42.us/)
By active peer count, burble.dn42 is the 3rd largest IPv4 and 2nd largest IPv6 network in dn42.
#####Background
I manage a number of virtual and dedicated servers that provide high quality time services for the [NTP Pool Project](https://www.ntppool.org/").
burble.dn42 is a project to integrate these servers with dn42, creating a globally connected set of POPs that are well connected to the dn42 network.
My [NTP Pool Profile Page](https://www.ntppool.org/user/buovss4oiceotdj2o3mb) shows the status of each of my servers in the pool.
#####Topology
All nodes in the burble.dn42 network are directly meshed with wireguard tunnels. A VXLAN, layer 2, overlay sits on
top of the wireguard mesh, providing separation of DN42 traffic from internal traffic. The internal routing protocols
used are OSPF and iBGP for the regional anycast services.
#####DN42 Routing
To simplify the number of iBGP sessions, the network is configured as a number of sub-AS regions within a single [BGP Confederation](https://en.wikipedia.org/wiki/BGP_confederation).
The sub-AS regions, together with tagging using [large BGP communities](http://largebgpcommunities.net/), are used to implement a regional [Routing Policy](/home/routing-policy).
* Europe (region AS4226010150)
* UK Bristol (region AS4226010045)
* Eastern Europe (region AS4226010151)
* North America (region AS4226010021)
* Asia and Oceania (region AS4226010009)
![Network Map](DN42%20Map%20190419.png)
####Network Status
[Status Page](https://dn42.status.burble.com/) provided by [UptimeRobot](https://uptimerobot.com/)