GÉANT IP Product Description

High Level Description

Introduction

The GÉANT IP service provides high-bandwidth, international Internet connectivity for over 50 million users through GÉANT, the pan-European research and education network that interconnects Europe's National Research and Education Networks (NRENs).

The service has been designed to provide general-purpose, IP transit services between participating NRENs and other approved research and education partners and providers. Its core function is to provide a private service for IP traffic, separated from general-use Internet access.

Offering a neutral IP routing facility, without constraints imposed on access control, protocol or inter-domain routing, the award-winning network natively supports both IPv4 and IPv6 to offer NRENs maximum flexibility.

A wide range of connectivity up to 100Gbps per port and resiliency options to support NREN data connections across Europe is on offer.

With interconnectivity between GÉANT and all the major R&E networks, GÉANT IP breaks down geographical boundaries and supports advanced research worldwide.

The service available to members of the GÉANT community, and is co-funded by the NRENs and the European Union's Horizon 2020 Programme. Access is available to non - GÉANT NRENs only by special agreement.

Technical Description

IPv4 and IPv6 support.

Access Description

The GÉANT IP service can be provided at capacities up to 100Gbps over a single interface. The capacity available to each NREN will depend on the capacity at the nearest GÉANT IP PoP or, if the GÉANT PoP is not co-located with suitable NREN access equipment, the available capacity of dedicated circuits from the NREN access equipment and the GÉANT IP PoP.

An NREN can connect to the GÉANT IP service following one of the three scenarios highlighted below:

• NREN on dark fibre: Where dark fibre is available in Location A and B, an NREN is connected to GÉANT in Location B through the Juniper MX for its primary connection. The backup connection is delivered through its Juniper MX in location A via the Infinera optical platform (DTN-X).

This configuration is the most resilient setup, with service availability of 99.999%, and the capability to deliver capacity up to 100Gbps per port.     

Figure 1: NREN is connected to GÉANT through the Juniper MX

• Multi-homed NRENs: If an NREN is collocated in Location A and wants to connect to a location where dark fibre is not available,the back-up is provided through another Juniper MX in the same location.

This configuration is a highly resilient setup, with 99.99% service availability and delivered capacity up to 100Gbps per port.

Figure 2: Multi-Homed NRENs backup

• Single homed NRENs: If an NREN wants to connect to a location where dark fibre is not present but they are collocated with the GÉANT PoP and require long-haul connectivity provided by a sub contracted provider.

This scenario can be implemented with or without backup, depending on the requirements.

This configuration can be as resilient as required but availability figures will depend on the exact setup and the selected provider. Capacity up to 100Gbps per port is available on GÉANT equipment.

Figure 3: Example of long-haul connectivity

Load Sharing

When an NREN connects to more than one PoP, it is possible to request for the load to be shared across the number of accesses available, as seen below in Figure 4.

Figure 4: Example of load sharing on multiple PoPs

Load sharing is achieved by setting both IP access with the same Border Gateway Protocol (BGP) local preference and letting BGP select the best Autonomous System Border Routers (ASBR).

When load sharing is enabled, the total volume of traffic across all the active accesses must remain within the NREN's primary IP capacity.

Routing Information

GÉANT maintains prefix lists on each NREN peering, to ensure integrity of the route announcement. Each of these lists are built on the RIPE object maintained by the NRENs to ensure the latest information is used. It is the NRENs responsibility to ensure the RIPE information are kept up to date.

More information regarding the GÉANT routing policies can also be found here:

https://partner.geant.net/sites/partner/Operational%20Information/GEANT%20Routing%20Policies.doc?Web=1

Security

As an IP transit service, GÉANT IP provides security by monitoring the network for suspicious behavior and the GEANT CERT is the Computer Emergency Response Team (CERT) makes sure that an appropriate response is given to possible threats. The team will inform NRENs if any security incident affecting them is detected. NRENs are also able to subscribe to the Network Security Handling and Response Process (NSHaRP), without incurring any additional cost. 

By subscribing to the NSHaRP service, the NRENs will be able to decide which events they want to be informed about and will start receiving automated emails informing about anomalies. More information on NSHaRP is available at:

http://www.geant.org/Networks/Network_Operations/Pages/NSHaRP.aspx

Demarcation Points

The management demarcation point between GÉANT and the NREN network is a port on the Optical Distribution Frame (ODF) rack, as described in Figure 8, below. The exact port will be specified at the time of the connection.  

Figure 5: Illustration of the management demarcation point

The responsibility of the GÉANT Operations Centre (OC) ends at the declared demarcation point. Patching beyond this point is the responsibility of the ordering NREN.

Configuration Details

The following configuration details will be provided by GÉANT: 

• IP addresses to be used in the GÉANT network and on the NREN access router.
• IP address space to be used for the access link.
• Authentication Server (AS) number of the GÉANT network.
• Domain Name Service (DNS) record, corresponding to GÉANT network address space.
• Message Digest Algorithm 5 (MD5) password for the BGP session (unless the NREN prefers not to use MD5).
• MSDP peer address (if multicast is being supported).
• Any other interface-specific configuration.

The NREN must specify:

•     AS number of customer NREN.
•     RIPE DB as-set (as-macro) to be accepted by GÉANT.
•     MSDP peer address (if Multicast is being supported).

Service Description

Availability Target

The Service Level Target (SLT) for the GÉANT IP service is calculated from the GÉANT demarcation point and does not include any local tail that may be the NREN's responsibility. A service is considered unavailable when all access circuits are physically down at the same time.

The table below shows the three types of access available to connect to GÉANT, with their associated SLTs.

Time to Fix a Fault and Time to Respond Target

In order to meet these targets, the following timelines to respond to and fix a fault have been put in place.

The GÉANT Operation Centre (OC) provides 24×7 support throughout the year. Notifications are issued to the affected partner within 15 minutes of incident detection by the central monitoring system.

GÉANT IP also offers access to GÉANT traffic monitoring tools to view traffic statistics that are either specific to the service, or for overall IP traffic on NREN access links. These are available on the Tool Portal: https://tools.geant.net/portal/

Any requirement for bespoke reporting mechanism for GÉANT IP traffic statistics and availability should be discussed with the GÉANT Partner Relations Team (partner-relations@geant.org).

Requesting additional GÉANT Access Capacity

To request an IP upgrade, please go to the GÉANT Partner Portal at: https://partner.geant.net/Pages/Home.aspx

Service Implementation and Delivery Time

Dark Fibre Upgrades

Requests for further physical capacity upgrades, which do not exceed the available physical capacity of the infrastructure, will be completed within ten working days from the upgrade request being accepted by the Partner Relations team.

For capacity upgrade requiring further physical capacity the upgrade will be completed within ten weeks from the solution being agreed.

Managed Wavelength Upgrades

 In case of a connection being provided over a managed wavelength, the lead time will vary from provider to provider. Delivery times will be confirmed on a case-by-case basis. Please contact the Partner Relations team for more information: partner-relations@geant.org

Interface Options

Subscriptions of 40Gbps or below will be delivered on N x 10Gbps interfaces and subscriptions of 50Gbps and over will be delivered over a 100Gbps interface.

A total capacity upgrade of 40Gbps is offered over multiple 10Gbps interfaces by default, with the option of a 100Gbps interface instead of extra cost.

The table below details what interfaces are included in subscription upgrades. Port prices for the upgrade options can be found in the service price list at: https://partner.geant.net/Service_Catalogue/Pages/overview.aspx

Pricing      

The GÉANT IP access is inclusive of all the required interfaces on the IP equipment (unless a non-standard delivery option is required). An annual cost for the service is calculated annually by the GÉANT Cost Sharing Model. For the current version of the Cost Sharing Model, please see the Partner Portal https://partner.geant.net.

The GÉANT IP Service provides NREN access to the GÉANT IP Service, as well as to other GÉANT services, such as GÉANT Plus and GÉANT L3VPN. See https://partner.geant.net/Pages/Home.aspx for more information on those services.

Charges may apply to backhaul a backup circuit to a neighbouring PoP to increase the resilience.

A one-off charge applies for the backhaul of a backup circuit.

• 10G: €7500    
• 100G: €104 000    
• An additional €1000 per interface installation fee

Please note that all prices are quoted before the European Commission rebate.

For more information or questions, please email partner-relations@geant.org.