head

HKOX Connection Policy

There are two types of policy:  

  • HKOX Layer 2 Policy (Private NREN VLAN Establishment)
  • HKOX Layer 3 Policy (Multilateral Peering/Bilateral Peering)

By default, all new NREN partners are assumed to join the HKOX Layer 3 service and follow HKOX Layer 3 policy.

 A.   HKOX Layer 3 Policy (Multilateral Peering/Bilateral Peering)

  • HKOX supports Ethernet connection port speed of 1G, 10G or 100G
  • HKOX assigns IP address to NREN partner for establishing BGP session with HKOX Core Router for Multilateral Peering or for establishing BGP session with other NREN partners for Bilateral Peering
  • All routes will be sent to all peering partners by default
  • HKOX peers must not advertise default route, or point default route to another HKOX peer
  • HKOX peers recommend taking higher preference for the received routes from HKOX
  • HKOX supports BGP community, which gives NRENs peering partners the ability to control BGP route advertisements (please refer to the following table)

BGP Community

Action

3662:{$NREN-AS}

Announce routes to specific NREN peering partner(s) only

{$NREN-AS}:0

Don’t announce routes to specific NREN peering partner(s)

Default if no BGP community set

Announce routes to all NREN peering partners

Remarks:  Please set only one type of above BGP community, while $NREN-AS can be multiple (for example 3662:64512 & 3662:64513 to announce a prefix only to AS64512 and AS64513, or 64512:0 & 64513:0 to announce a prefix to all but not to AS64512 and AS64513)

B.   HKOX Layer 2 Policy (Private NREN VLAN Establishment)

  • HKOX supports Ethernet connection port speed of 1G, 10G or 100G
  • HKOX supports Access Port and Trunking Port Connection (Trunking Port preferred)
  • HKOX supports Jumbo Frames of up to at least 9,000 bytes of Ethernet payload
  • HKOX supports Static (initially) and Dynamic VLAN provisioning (under planning)
  • HKOX supports setting up of a dedicated point-to-point VLAN between two parties for private communication and direct BGP peering
  • The VLAN numbers shall be agreed by HKOX and NREN parties for configuration

Besides the two types of HKOX Connection Policy, all NREN partners shall follow below general policy:

 

  • HKOX peers should take all necessary precautions to ensure that abuse of network resources does not occur
  • HKOX peers should not hold HKOX responsible for any loss and damages as a result of connecting to HKOX
  • HKOX reserves the right to amend any guidelines stated above, but HKOX will make every effort to inform members of any policy changes as and when they occur