HKOX Connection Policy
There are two types of policy:
- HKOX Layer 2 Policy (Private NREN VLAN Establishment)
- HKOX Layer 3 Policy (Multilateral Peering/Bilateral Peering)
By default, all new NREN partners are assumed to join the HKOX Layer 3 service and follow HKOX Layer 3 policy.
A. HKOX Layer 3 Policy (Multilateral Peering/Bilateral Peering)
- HKOX supports Ethernet connection port speed of 1G, 10G or 100G
- HKOX assigns IP address to NREN partner for establishing BGP session with HKOX Core Router for Multilateral Peering or for establishing BGP session with other NREN partners for Bilateral Peering
- All routes will be sent to all peering partners by default
- HKOX peers must not advertise default route, or point default route to another HKOX peer
- HKOX peers recommend taking higher preference for the received routes from HKOX
- HKOX supports BGP community, which gives NRENs peering partners the ability to control BGP route advertisements (please refer to the following table)
BGP Community |
Action |
3662:{$NREN-AS} |
Announce routes to specific NREN peering partner(s) only |
{$NREN-AS}:0 |
Don’t announce routes to specific NREN peering partner(s) |
Default if no BGP community set |
Announce routes to all NREN peering partners |
Remarks: Please set only one type of above BGP community, while $NREN-AS can be multiple (for example 3662:64512 & 3662:64513 to announce a prefix only to AS64512 and AS64513, or 64512:0 & 64513:0 to announce a prefix to all but not to AS64512 and AS64513)
B. HKOX Layer 2 Policy (Private NREN VLAN Establishment)
- HKOX supports Ethernet connection port speed of 1G, 10G or 100G
- HKOX supports Access Port and Trunking Port Connection (Trunking Port preferred)
- HKOX supports Jumbo Frames of up to at least 9,000 bytes of Ethernet payload
- HKOX supports Static (initially) and Dynamic VLAN provisioning (under planning)
- HKOX supports setting up of a dedicated point-to-point VLAN between two parties for private communication and direct BGP peering
- The VLAN numbers shall be agreed by HKOX and NREN parties for configuration
Besides the two types of HKOX Connection Policy, all NREN partners shall follow below general policy:
- HKOX peers should take all necessary precautions to ensure that abuse of network resources does not occur
- HKOX peers should not hold HKOX responsible for any loss and damages as a result of connecting to HKOX
- HKOX reserves the right to amend any guidelines stated above, but HKOX will make every effort to inform members of any policy changes as and when they occur