WORK-IX Technical Requirements

Scope

These Technical Requirements (TR) define the ways in which you may or may not make use of the WORK-IX services. This document will be regularly reviewed and revised in the light of operational experience to ensure maximum protection of service to WORK-IX members. Subsequent versions of this document are effective after 10 working days of having been posted upon WORK-IX website.

 

0 Motivation

Members' use of the WORK-IX network shall at all times conform to the relevant standards as laid out in STD0001 and associated Internet STD documents.

 

1 Physical

1.1 Ethernet interfaces attached to WORK-IX ports shall be explicitly configured with duplex, speed and other configuration settings and shall not be auto-sensing.

 

2 MAC Layer

2.1 Frames forwarded to WORK-IX ports shall have one of the following ethertypes

• 0x0800 - IPv4

• 0x0806 - ARP

• 0x86dd - IPv6

2.2 All frames of a service forwarded to an individual WORK-IX port shall have the same source MAC address.

2.3 Frames forwarded to WORK-IX ports shall not be addressed to a multicast or broadcast MAC destination address except as follows:

• broadcast ARP packets

• multicast IPv6 Neighbor Discovery (ND) packets

• if explicitly allowed for that port (e.g. multicast service)

2.4 Traffic for link-local protocols shall not be forwarded to WORK-IX ports except for the following:

• ARP except proxy ARP

• IPv6 ND

These link-local protocols include but are not limited to the following list

• IRDP

• ICMP redirects

• IEEE802 Spanning Tree

• Vendor proprietary discovery protocols (e.g. CDP)

• Interior routing protocol broad/multicasts (e.g. OSPF, IS-IS, IGRP, EIGRP)

• BOOTP/DHCP

• PIM-SM

• PIM-DM

• DVMRP

2.5 ARP traffic shall not exceed 20 pps per port/vlan.

 

3 IP Layer

3.1 Interfaces connected to WORK-IX ports shall only use IP addresses and netmasks (prefix lengths)assigned to them by WORK-IX. In particular:

• IPv6 addresses (link & global scope) shall be explicitly configured and not auto-configured

• IPv6 site-local addresses shall not be used

3.2 IP packets addressed to WORK-IX peering LAN directed broadcast address shall not be automatically forwarded to WORK-IX ports.

 

4 Routing

4.1 All exchange of routes across the WORK-IX network shall be via BGP4(+).

4.2 AS numbers used in BGP4(+) sessions across the WORK-IX network shall not be from range reserved for private use.

4.3 All routes advertised shall be aggregated as far as possible.

4.4 IP address space assigned to WORK-IX peering LAN shall not be advertised to other networks without explicit permission of WORK-IX. All routes advertised across the WORK-IX network shall point to the router advertising it unless an agreement has been made in advance in writing by WORK-IX and the members involved. All routes to be advertised in a peering session across WORK-IX shall be registered in the RIPE or other public routing registry. Members may use more than one ASN for their WORK-IX peering provided that each ASN presented shares the same NOC and peering contact details.

 

5 Forwarding

5.1 Traffic shall only be forwarded to a WORK-IX member when permission has been given by the receiving member either:

• by advertising a route across the WORK-IX network (directly or via the routeserver)

• or explicitly in writing

5.2 Traffic shall not be routinely exchanged between two WORK-IX ports owned by the same WORK-IX member.