Presentation by R.P.D.C Kaushalya at APRICOT 2019 on Tuesday, 26 February 2019.

1. Setting up an Internet Exchange
Sri Lankan Experience
By R.P.D.C Kaushalya
Peering administrator of SLT-IX
Sri Lanka

2. What makes us to set up SLT-IX
 To improve local internet user experience of Sri Lanka.
 Int’l Bandwidth saving for the country.
 Unavailability of standard IX platform in Sri Lanka at the time.
 To promote direct peering for all local ISPs with each other,
maintaining carrier neutrality.
 Keep local traffic local to stop unnecessary complains from
our own internet customers.
 Venturing into new area where we have no experience.
 Shortcomings of existing arrangements.

3. SLT-IX for local traffic exchange
 All local ISPs are eligible members.
 SLT acts as the facilitator.
 Owns a different ASN and Address space, provided by
APNIC.
 Ability to offer public peering or selective peering with no
influence of SLT.
 Open for value added services DNS, looking glass etc
 More Scalability

4. Network Topology
Tata(Lanka)
AS 4755
L2 switch
Dialog
AS 18001
SLTnet
AS 9329
Lankabell
AS 45224
Mobitel
AS 45356
Etisalat
AS 17470
RS
SLTIX AS131173
RS

5. Basic requirements to be a SLT-IX customer
 Valid isp license holder in Sri Lanka
 Should have their own ASN and IP address space
 Need to comply SLT-IX agreement & peering policy
 Provision for special members on facility providing
such as root servers, looking glass, DNS etc on case by
case basis.

6. What we offer to the members
 L2 Port (FE or GE) at an annual fee.(SLT-IX user guide)
 Ipv4(218.100.61.0/22) and ipv6 address from AS 131173
 Routes of all connected isps via two Route servers as an
aggregated common bgp feed.
 i-Root server directly connected.
 24x7 NOC service (Escalation matrix)
 Profile of Port usage

7. In future……
 10G ports
 Backup port/platform at a Different location.
 DNS, Looking glass services on the way
 Member portal with more info
 More security
 Commercial set-up to offer connectivity to non ISPs

8. In return, we expect ……
 More traffic/applications via the platform to improve
local internet experience, saving Int’l BW of all isps.
 Presence of All local ISPs. (Few more to join)
 As at today (year 2018) 06 local ISP s connected with
peak traffic volume of 500Mbps. Two are waiting…
 Gain experience on maintaining an IX for the industry.

9. Supportive documents
 SLT-IX connection agreement(Extract)
THIS AGREEMENT is made on this ………………………., 2018 at Colombo. Between Sri Lanka Telecom PLC, a Public Company
duly incorporated under the Conversion of Public Corporations and Government Owned Business Undertakings into
Public Companies Act No. 23 of 1987 and by order published in the Gazette (Extraordinary) of the Democratic Socialist
Republic of Sri Lanka No. 942/7 dated 25th September, 1996 and registered under the Companies Act No 7 of 2007 bearing
number PQ 7 and hereinafter called and referred to as “SLT” which term or expression shall where the context so admits or
requires, mean and include the said Sri Lanka Telecom PLC its successors and permitted assigns of the One Part.
And
ABC-ISP PLC a company duly incorporated under the laws of Sri Lanka bearing Registration PQ …. and having its principal
office at No. xyz, Colombo (hereinafter called and referred to as “Customer” which terms or expression shall where the
context so admits requires mean and include the said ABC-ISP PLC . successors and permitted assigns) of the Other Part
WHEREAS SLT has established a SLT Internet Exchange (SLTIX) to be a neutral Internet Exchange facilitating the ISPs to
interconnect with each other for efficient routing of domestic traffic.
AND WHEREAS the Customer is an ISP duly licensed by the Government of Sri Lanka (“Licensor”) to provide Internet
services in Sri Lanka in accordance with the terms of the License granted to it.
NOW the Customer and SLTIX agree as follows:
…………………………………………………………………………………

10. SLT-IX connection agreement(Extract)
2.Services provided by SLTIX to Customer
SLTIX shall:
a) provide and maintain the Connection for Customer.
b) provide router server facility for making the connection.
c) provide installation and support services
d) provide network management related services
e) provide any other services as decided by the SLT
………….…………………………………………………………………………………………………………………………………
……………………………………………………………………………………………………………………………………..
3.Responsibilities of Customer
Customer shall
(a)be open for exchanging IP traffic of all license ISPs on the terms & conditions agreed upon between the Customer and
the particular ISP for the objective of exchanging all local bound traffic without traversing through global internet.
(b)filter traffic or routing table entries to or from ISP’s due to valid reasons.

11. SLT-IX user guidelines(extract)
 General Requirements on configuration
 1.ARP cache time out to be set not less than two hours( 04 hours preferred)
 2 ip block 218.100.61.0/24 is not globally routable. Customer will be assigned one or more addresses of the block based
on the requirement.
 3.Please allow multicast routes only for Broadcast ARP and Multicast ICMPv6 neighbour discovery(ND) packets .
 4.ProxyARP should not allowed on customer interface.
 5.no auto negotiation.in Ethernet interface; speed and duplex be statically configured.
 6.MTU is 1500 bytes in SLT-IX platform.
 7.only one mac address is allowed behind a port. The port is manually bond to customer interface MAC.
 8.Expected way of connecting to SLTIX is directly through a L3 device(a router).
 9 No requirement to talk STP with SLTIX.
 10. no CDP
 11.Peering LAN is for unicast ip traffic only. Only non-unicast traffic is ARP Query.
 12.Each Customer should take the necessary steps to safe guard their network end. Therefore necessary tools such as
filters/access lists to be maintained with regular check ups.

12. SLT-IX User guidelines(extract)
 Joining procedure
 1.the joining party should be a local isp who holds a valid license issued by TRC of Sri Lanka.
 2. They should send their own ip blocks to set up necessary filters in advance. The blocks may contain their own ips
and their customer ip blocks. Their customer should not be a licensed ISP of Sri Lanka.
 3.once the physical set up is completed, customer is assigned an ip and asked to connect to a Test VLAN and the MAC
which is received will be registered .
 4.After the L2 completion, customer will be transferred to operational VLAN with a live ip and the MAC will be bond to
the interface which is assigned to the customer.
 5.customer will be informed to set up bgp with two Route servers. An example of Cisco IOS configuration will be as
follows ;
 This is typical configuration for ipv4 toward route server-1 (RS-1),
 1.enable
 2.Config terminal
 3.router bgp (customerr AS)
 4.no bgp enforce-first-as
 5.neighbor 218.100.61.1 remote –as 131173
 6.address family ipv4 unicast
 7 neighbor 218.100.61.1 activate
 8 exit address-family

13. Operational outputs
 RS1#show ip bgp summary
 Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
 218.100.61.4 4 9329 929183 928136 8217 0 0 42w1d 123
 218.100.61.7 4 4755 92815 92889 8217 0 0 8w2d 9
 218.100.61.13 4 18001 30927 29237 8217 0 0 2w4d 44
 218.100.61.14 4 18001 0 0 1 0 0 never Active
 218.100.61.15 4 45224 218133 239752 8217 0 0 21w4d 63
 218.100.61.20 4 17470 136784 150616 8217 0 0 13w3d 12
 218.100.61.21 4 45356 350715 387502 8217 0 0 34w5d 50
 218.100.61.23 4 8674 0 0 1 0 0 never Idle

14. Operational outputs
 RS1#show ip bgp neighbors 218.100.61.4 advertised-routes
 Network Next Hop Metric LocPrf Weight Path
 *> 14.140.56.0/21 218.100.61.7 0 4755 i
 *> 43.224.124.0/24 218.100.61.4 160 0 9329 i
 *> 43.224.124.0/22 218.100.61.4 160 0 9329 i
 *> 43.224.125.0/24 218.100.61.4 160 0 9329 i
 *> 43.250.240.0/24 218.100.61.21 0 0 45356 ?
 *> 43.250.240.0/22 218.100.61.21 0 0 45356 i
 *> 43.250.241.0/24 218.100.61.21 0 0 45356 ?
 *> 43.250.242.0/24 218.100.61.21 0 0 45356 ?
 *> 43.250.243.0/24 218.100.61.21 0 0 45356 ?
 *> 43.252.12.0/24 218.100.61.20 0 0 17470 17470 17470 17470 17470 17470 i
 *> 43.252.13.0/24 218.100.61.20 0 0 17470 17470 17470 17470 17470 17470 i
 *> 59.163.240.0/22 218.100.61.7 0 4755 i
 *> 59.163.241.0/24 218.100.61.7

15. Snapshot of sample configuration
 router bgp 131173
 bgp log-neighbor-changes
 neighbor 2001:DE9:0:103::1 remote-as 9329
 neighbor 2001:DE9:0:104::1 remote-as 9329
 neighbor 218.100.61.4 remote-as 9329
 neighbor 218.100.61.4 description SLT
 neighbor 218.100.61.4 update-source GigabitEthernet0/1

 address-family ipv4
 redistribute connected

 neighbor 218.100.61.4 activate
 neighbor 218.100.61.4 route-server-client
 neighbor 218.100.61.4 remove-private-as
 neighbor 218.100.61.4 soft-reconfiguration inbound
 neighbor 218.100.61.4 route-map SLT-IN_IX-1 in
 neighbor 218.100.61.4 route-map SLTIX-PEER-OUT out


16. Snapshot of sample configuration
 ip prefix-list SLT-IN seq 10 permit 222.165.191.0/24
 ip prefix-list SLT-IN seq 20 permit 203.94.64.0/18
 ip prefix-list SLT-IN seq 30 permit 220.247.192.0/18 le 24
 ip prefix-list SLT-IN seq 40 permit 203.115.0.0/18 le 24
 ip prefix-list SLT-IN seq 50 permit 124.43.0.0/16 le 24
 ip prefix-list SLT-IN seq 60 permit 103.29.60.0/22 le 24
 i
 ip prefix-list SLTIX-PEER-OUT seq 10 permit 222.165.191.0/24
 ip prefix-list SLTIX-PEER-OUT seq 20 permit 125.214.171.0/24
 ip prefix-list SLTIX-PEER-OUT seq 30 permit 203.94.64.0/18 le 24
 ip prefix-list SLTIX-PEER-OUT seq 40 permit 203.115.0.0/18 le 24
 ip prefix-list SLTIX-PEER-OUT seq 50 permit 222.165.128.0/18 le 24
 ip prefix-list SLTIX-PEER-OUT seq 60 permit 124.43.0.0/16 le 24

17. More to go………
Thank you!