Following on from our infrastructure upgrades this month, today LONAP joined the Mutually Agreed Norms for Routing Security (MANRS) IXP Programme. This is a collaborative effort by network operators and Internet Exchange Points to reduce and mitigate the weaknesses that exist in routing security. These weaknesses include Route hijacking, route leaks, IP address spoofing, and other harmful activities that can lead to DDoS attacks, traffic inspection, lost revenue and reputational damage. The effects of an attack cascades out from the target network and can be experienced by a significant number of users.
LONAP encourages its members to join the MANRS program and improve the routing hygiene for all users of the internet.
|1. Facilitate prevention of propagation of incorrect routing information||LONAP Route servers have always implemented route filtering based on IRRDB. We are also implementing RPKI. More details and filtering policy|
|2. Promote MANRS in the IXP membership||2-1 LONAP uses IXP Manager, which provides tools for members to identify filtered prefixes. During the member provisioning process, LONAP Support also checks IRRDB and RPKI information and offers assistance and guidance when needed.
2-2 LONAP Periodically runs Peering and BGP introductory training courses: https://www.lonap.net/events.shtml
This hands-on training course includes the MANRS principles of routing Security.
|3. Protect the Peering Platform||LONAP provides filtering and has a published policy.
We also implement rate-limiting of certain traffic and port security features on our switches.
Route server filtering details
We provide further documentation for members within the portal.
|4. Facilitate global operational communication and coordination between network operators||Our portal allows members to see contact details of all other members.
We maintain a mailing list for all LONAP members for announcements and discussion.
LONAP Members are strongly encouraged to join PeeringDB.
|5. Provide monitoring and debugging tools to participants||LONAP provides collector router and route server looking glasses
Our portal allows members to see the status of prefixes filtered by the route servers.
For more information see: