Using AS-SET to build filters

Recently, in order to establish BGP Peers with some friends who are new to the field, I also taught them how to use AS-SET for filtering. What is AS-SET AS-SET is an object that can add ASN and AS-SET. Usually used to filter routes exchanged through the BGP protocol. (such as BGP Peer Neighbor, Internet Exchange Route Server, etc.) We usually query all Route Objects in this AS-SET through Whois and recursion....

June 27, 2021 · SteveYi

Become a MANRS participant!

At the end of last year, I submitted an application for MANRS for SteveYi Network Service. At the beginning of this year, we passed the review and officially became a participant in MANRS! Our member introduction can be found here: https://www.manrs.org/isps/participants/entry/1484/ So, let’s talk about how we implement MANRS policies. MANRS has four main policies, which are: Prevent propagation of incorrect routing information Prevent traffic with incorrect spoofed source IP addresses Promote coordination between network operators Facilitate global operational communication and coordination...

January 25, 2021 · SteveYi

Building an Internal Network with Friends using BGP

Hi! Long time no see! In early 2020, I obtained my first ASN number - AS209557 I also used IP Addresses defined by RFC 1918, and with some friends, I built a large internal network using BGP and Internet tunnels. So let’s get started! First, we use Ubuntu 20.04 to establish a tunnel and establish BGP peerings with others. Usually, I use GRE, SIT, or WireGuard. Among them, GRE or SIT tunnels are non-encrypted tunnels that can be viewed on the public network....

January 24, 2021 · SteveYi

Applying for your own ASN through RIPE

Today we will talk about how to obtain your own ASN through LIR in RIPE. First of all, some people may wonder: Why choose RIPE? Isn’t APNIC or ARIN a good choice? The author has two ASNs, one under RIPE and the other under APNIC. When the author makes changes to some whois information, RIPE allows direct web access to make changes, while APNIC requires sending emails… which is more troublesome (actually it’s about the same)....

November 21, 2020 · SteveYi

Creating Objects in RIPE DataBase

In this article, we will share with you how to register MAINTAINER, PERSON/ROLE, and ORGANIZATION objects in the RIPE DataBase. These objects are also necessary to register ASN. If you want to apply for ASN, you can refer to this tutorial. First, we need to register for a RIPE account registration website here. After completing the registration, we enter the RIPE Database and click “Create an Object”. Then we select the first “role and maintainer pair”....

November 21, 2020 · SteveYi

Building interconnectivity between different network segments through BGP

As a child, I often struggled with managing my home network. For example, my home had three floors and three routers. I wanted to make sure that devices connected to each router could communicate with each other. However, if I turned on DHCP Server on each of the routers, the routers would become independent networks that couldn’t communicate with each other. Later, I discovered that by using a bridge to turn one router into a DHCP server and the others into AP or switch, I could achieve the same network and interconnectivity....

August 11, 2020 · SteveYi

FRRouting Installation Tutorial

It’s been a while since I last shared anything! Recently, I have been learning about BGP knowledge and testing. Previously, I used Bird1 to broadcast BGP, but when I tried to peer with my friend, we couldn’t establish a connection (it was strange, but I could connect with IX). So I uninstalled Bird1 and installed FRRouting instead. FRRouting is a routing suite that comes from Quagga Fork, and its functionality is also very powerful (its commands are similar to Cisco or Quagga)....

July 12, 2020 · SteveYi

Using WireGuard on Linux

WireGuard is a point-to-point encryption network. I have been using it to manage/connect all my cloud servers. Today, let’s share how to use WireGuard! Install WireGuard Basically, the WireGuard Install Page provides complete installation methods and commands for various versions, so you can refer to it directly. Create WireGuard Profile First, go to the WireGuard installation folder. If it does not exist, please create it. cd /etc/wireguard Use the command to generate a public and private key, and use “cat” to view the contents of the public and private keys....

May 16, 2020 · SteveYi

Announce IPv6 on Vultr with BIRD

It is recommended to refer to the article Building an Internal Network with Friends via BGP on January 24, 2021. This time, let’s share how to broadcast IP on Vultr! Setting the AS number and IP prefix First, we need to activate the BGP function! Click here to go to the Vultr BGP page After entering this page, click Get Started. Select I have my own IP space and I have own my ASN (if there is no ASN, you do not need to select it)...

April 10, 2020 · SteveYi