01
ASN and addressing design
RIR justification, IPv4/IPv6 addressing plan, aggregation policy and RPSL/IRR objects.
Service
Network Architecture and BGP/MPLS
ASN design, peering, IP transit, global routing tables and multihoming redundancy.
We design and operate autonomous numbering from the RIR application to the established session: ASN, IP blocks, RPSL objects, peering and transit. Built for ISPs that need real redundancy, not an untested failover.
The goal is predictability: filtered routes, redundant sessions and a plan B that was tested before you need it.
What's included
What this service includes
02
Peering and transit
IXP and transit selection, eBGP sessions, active/passive multihoming and preference control through communities.
03
Route filtering and security
Prefix-lists, AS-path filters, RPKI/ROA validation, max-prefix and BCP38 at the edge.
04
MPLS and segmentation
L3VPN, VRF, MP-BGP, LDP or RSVP-TE, and separation of corporate traffic from customer traffic.
05
High availability
BFD, VRRP, session balancing and recovery design for the loss of a transit provider or an edge device.
06
Topology documentation
Layer 1/2/3 diagrams, session table, routing policy and contingency runbooks.
Common questions
Frequently asked questions
Do you handle the ASN application with the RIR?
Yes. We prepare the documentation, the technical justification and the addressing plan, and we support the process through to assignment.
Can you audit an edge that is already in production?
Yes. The audit reviews sessions, filters, preferences, max-prefix and RPKI validation, and delivers a prioritized remediation plan.
Do you work with regional IXPs?
Yes. We coordinate ports, sessions and export policies with the IXP and with your peers.
Related services
Usually delivered together
DNS Server and Linux Services Administration
Deployment, optimization and maintenance of DNS infrastructure, centralized monitoring with SNMP, Bash/Python automation and hosting of critical applications on Linux.
- Zones signed with DNSSEC and keys rotated
- Resolution verified from multiple regions
- Alerts that arrive before the user report
Cybersecurity, Hardening and Filtering
Protection against DDoS attacks, DNSSEC, vulnerability mitigation, traffic isolation, advanced firewalls and infrastructure audits.
- Verified external exposure inventory
- Findings with severity and evidence
- Firewall policies documented and versioned
Shall we apply this to your network?
Send us the symptom, the topology and what changed before the failure. We reply with a first technical read.