MANRS is an important step toward a globally robust and secure routing infrastructure
The MANRS Actions were initially designed for network operators, but Internet Exchange Points (IXPs) should also play an active role in protecting the Internet. IXPs represent active communities with common operational objectives and already contribute to a more resilient and secure Internet infrastructure.
MANRS can help IXPs build safe neighborhoods, leveraging the MANRS security baseline. It also demonstrates an IXP’s commitment to security and sustainability of the Internet ecosystem, and dedication to providing high quality services.
IXPs are important partners in the MANRS community
IXPs can be a collaborative focal point to discuss and promote the importance of routing security. To address the unique needs and concerns of IXPs, the community is creating a related but separate set of MANRS actions for IXP members.
Eligibility criteria and proof of implementation
To join, an IXP must demonstrate commitment by implementing a majority of the IXP Programme Actions (at least three out of five). Actions 1 and 2 are mandatory, and the IXP must implement at least one additional Action.
The implementation of specific Actions should be reflected in relevant documentation (e.g. IXP policies, technical briefs, etc.). This documentation should be publicly available, or at least available IXP members. When joining MANRS, an IXP will be asked to provide links to this documentation.
Terms used in this document
- IXP member – a network using interconnection services provided by an IXP. Depending on the IXP model that may be an IXP member, as IXP customer, etc.
- MANRS IXP Programme (MANRS IXPP) participant – an IXP participating in the MANRS IXPP
The IXP Programme Action Set
Action 1. Facilitate prevention of propagation of incorrect routing information. (Mandatory)
- The IXP implements filtering of route announcements at the Route Server based on routing information data (IRR and/or RPKI). Based on the outcome of the validation process, the invalid announcements are filtered in accordance with the IXP published policy.
Action 2. Promote MANRS in the IXP membership. (Mandatory)
- The IXP provides encouragement or assistance for members to implement MANRS actions. (There are 4 separate check-boxes for different levels of incentives; one or more must be checked.)
- Action 2-1: Offer assistance to its members to maintain accurate routing information in an appropriate repository (IRR and/or RPKI), OR
- Action 2-2: Offer assistance in implementing MANRS ISP Actions for the members, OR
- Action 2-3: Indicate MANRS participation on the member list and the website, OR
- Action 2-4: Provide incentives linked to MANRS readiness
Action 3. Protect the peering platform.
- The IXP has a published policy of traffic not allowed on the peering fabric and performs filtering of such traffic.
Action 4. Facilitate global operational communication and coordination between network operators.
- The IXP facilitates communication among members by providing necessary mailing lists and member directories. The IXP and each of its members has at least one valid, active email address and one phone number that other members can use for cases of abuse, security, and operational incidents.
Action 5. Provide monitoring and debugging tools to the members.
- The IXP provides a looking glass for its members.