Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It is kinda funny, right before this whole Facebook thing happened I started trying to explore BGP more. I actually found a really cool guide(https://labs.ripe.net/author/samir_jafferali/build-your-own-...) from RIPE that walks you through setting up an AS to do anycast.

I have been doing some pretty heavy networking stuff for years, but I finally got an AS number and IPv6 block assigned to me. My thought is that if it is cheaper to just do something to learn it rather than taking a class you should just do it.



How much did the AS number and ipv6 block cost, out of curiosity?


The least expensive way, if you have a networking presence in their service region, is to retain the services of a sponsoring LIR in the RIPE area. For example, Securebit will do it for 60CHF setup and 15CHF per year: https://www.securebit.ch/internet/resources

Snapserv is 150EUR per year but comes with an assigned provider independent IPv6 block: https://snapserv.net/services/ripe/

If you really want to dive into the shark tank of cutthroat sponsoring LIRs, look at this thread on LowEndTalk: https://www.lowendtalk.com/discussion/160162/the-aio-ip-rela...

You need to show that you will have connectivity through two upstreams to justify receiving an ASN. This is easy to do, pick two providers from bgp.services (or pick one other provider and also list Securebit's tunnelbroker.ch service).

You will also need to show that you have a network presence in the RIPE service area. This is also easy to do, rent an inexpensive dedicated server or a couple of BGP virtual machines in Europe and have a copy of the invoice ready to give to your chosen sponsoring LIR.

Regarding IPv6 blocks, there are two types of IP space assigned from the registries: provider aggregated and provider independent space. The latter is directly assigned to you as an end user for your own use (you can't assign it to customers for their networks, for example). If you have PI space, you can move it from one LIR to another without changing numbers. The free IPv6 space that LIRs and others will lend you is PA space so you can't take those numbers with you. There's no real distinction if you are just learning, but you might want to choose a sponsoring LIR bundle that comes with PI IPv6 space in case you think you might change LIRs and want to keep your existing IP setup.

Oh, one other thing: the provider independent assignments from RIPE are /48, or the smallest IPv6 subnet that can be announced (akin to an IPv4 /24). If you want to announce multiple IPv6 subnets into the global BGP table, you will need a larger allocation, usually from your sponsoring LIR. Every sponsoring LIR I've seen will give you anywhere from a /44 to a /40 for free and that's many /48s for you to play with.

(It's no longer possible to get PI IPv4 space from registries. You'd have to buy it on the open market and it is expensive. You can either buy IPv4 PA space from the open market or you can join RIPE and get a single /24, and both are expensive.)


Awesome write up. This is likely extremely helpful for people interested in trying this out!

I wasn’t one of those people before reading this thread, but now… I’m kinda curious…


If you are at all interested in networking, I highly recommend doing this or joining the private DN42 network that's mentioned elsewhere in the thread. Setting this all up and actually seeing your IP addresses respond to pings from a machine halfway around the world is, to me, an amazing feeling.

We aren't going to run out of 32-bit (six digit) ASNs or IPv6 addresses any time soon, so you're not consuming a scarce resource by doing this.


Awesome writeup; I used SnapServ and so far the guy that runs it has been nothing but awesome. I am not experienced what it comes to this specific area of networking since it is my first time trying to get my own IP block; he walked me through everything and even corrected dumb mistakes I made in my RIPE registration with great explanations as to what my mistakes were.


Besides BGP, are there other somewhat-obscure Internet protocols that have the power to cause major outages?


BGP is spoken between networks. There are a lesser known "IGP" protocols stitching together the insides of those networks. IS-IS and OSPF being the most notable. Though the nature of the beast is that when you screw up BGP everyone sees it, and when you screw up your IGP it could just look like servers or load balancers having a bad day. Though if a telco messes them up everyone notices.


DNS


DNS isn't obscure, most people who've ever used the internet have seen that acronym.


Neither is BGP


BGP isn't used by end-user devices, so consequently no one outside of those who researched how the internet works knows about it.


Hey, small world. I know the author. :)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: