# Hostname: OX-VBD-MX204 # Model: mx204 # Junos: 22.2R3-S2.8 # JUNOS OS Kernel 64-bit [20230531.cf35cdf_builder_stable_12_222] # JUNOS OS libs [20230531.cf35cdf_builder_stable_12_222] # JUNOS OS runtime [20230531.cf35cdf_builder_stable_12_222] # JUNOS OS time zone information [20230531.cf35cdf_builder_stable_12_222] # JUNOS network stack and utilities [20230902.110149_builder_junos_222_r3_s2] # JUNOS libs [20230902.110149_builder_junos_222_r3_s2] # JUNOS OS libs compat32 [20230531.cf35cdf_builder_stable_12_222] # JUNOS OS 32-bit compatibility [20230531.cf35cdf_builder_stable_12_222] # JUNOS libs compat32 [20230902.110149_builder_junos_222_r3_s2] # JUNOS runtime [20230902.110149_builder_junos_222_r3_s2] # Junos vmguest package [20230902.110149_builder_junos_222_r3_s2] # JUNOS sflow mx [20230902.110149_builder_junos_222_r3_s2] # JUNOS py extensions [20230902.110149_builder_junos_222_r3_s2] # JUNOS py base [20230902.110149_builder_junos_222_r3_s2] # JUNOS OS vmguest [20230531.cf35cdf_builder_stable_12_222] # JUNOS OS crypto [20230531.cf35cdf_builder_stable_12_222] # JUNOS OS boot-ve files [20230531.cf35cdf_builder_stable_12_222] # JUNOS na telemetry [22.2R3-S2.8] # JUNOS Security Intelligence [20230902.110149_builder_junos_222_r3_s2] # JUNOS mx libs compat32 [20230902.110149_builder_junos_222_r3_s2] # JUNOS mx runtime [20230902.110149_builder_junos_222_r3_s2] # JUNOS RPD Telemetry Application [22.2R3-S2.8] # JUNOS Routing mpls-oam-basic [20230902.110149_builder_junos_222_r3_s2] # JUNOS Routing mpls-oam-advanced [20230902.110149_builder_junos_222_r3_s2] # JUNOS Routing lsys [20230902.110149_builder_junos_222_r3_s2] # JUNOS Routing controller-internal [20230902.110149_builder_junos_222_r3_s2] # JUNOS Routing controller-external [20230902.110149_builder_junos_222_r3_s2] # JUNOS Routing 32-bit Compatible Version [20230902.110149_builder_junos_222_r3_s2] # JUNOS Routing aggregated [20230902.110149_builder_junos_222_r3_s2] # Redis [20230902.110149_builder_junos_222_r3_s2] # JUNOS probe utility [20230902.110149_builder_junos_222_r3_s2] # JUNOS common platform support [20230902.110149_builder_junos_222_r3_s2] # JUNOS Openconfig [22.2R3-S2.8] # JUNOS mtx network modules [20230902.110149_builder_junos_222_r3_s2] # JUNOS modules [20230902.110149_builder_junos_222_r3_s2] # JUNOS mx modules [20230902.110149_builder_junos_222_r3_s2] # JUNOS mx libs [20230902.110149_builder_junos_222_r3_s2] # JUNOS L2 RSI Scripts [20230902.110149_builder_junos_222_r3_s2] # JUNOS SQL Sync Daemon [20230902.110149_builder_junos_222_r3_s2] # JUNOS mtx Data Plane Crypto Support [20230902.110149_builder_junos_222_r3_s2] # JUNOS daemons [20230902.110149_builder_junos_222_r3_s2] # JUNOS mx daemons [20230902.110149_builder_junos_222_r3_s2] # JUNOS Broadband Edge User Plane Apps [22.2R3-S2.8] # Junos Remote Attestation package [1.0.0+20230902.110149_builder_junos_222_r3_s2] # JUNOS appidd-mx application-identification daemon [20230902.110149_builder_junos_222_r3_s2] # JUNOS TPM2 [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services URL Filter package [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services TLB Service PIC package [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services Telemetry [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services TCP-LOG [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services SSL [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services SOFTWIRE [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services Stateful Firewall [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services RTCOM [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services RPM [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services PCEF package [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services NAT [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services Mobile Subscriber Service Container package [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services MobileNext Software package [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services Logging Report Framework package [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services LL-PDF Container package [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services Jflow Container package [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services Deep Packet Inspection package [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services IPSec [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services IDS [20230902.110149_builder_junos_222_r3_s2] # JUNOS IDP Services [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services HTTP Content Management package [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services DNS Filter package (i386) [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services Crypto [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services Captive Portal and Content Delivery Container package [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services COS [20230902.110149_builder_junos_222_r3_s2] # JUNOS AppId Services [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services Application Level Gateways [20230902.110149_builder_junos_222_r3_s2] # JUNOS Services AACL Container package [20230902.110149_builder_junos_222_r3_s2] # JUNOS SDN Software Suite [20230902.110149_builder_junos_222_r3_s2] # JUNOS Extension Toolkit [20230902.110149_builder_junos_222_r3_s2] # JUNOS Phone-home [20230902.110149_builder_junos_222_r3_s2] # JUNOS Packet Forwarding Engine Support (wrlinux9) [20230902.110149_builder_junos_222_r3_s2] # JUNOS Packet Forwarding Engine Support (MX/EX92XX Common) [20230902.110149_builder_junos_222_r3_s2] # JUNOS Packet Forwarding Engine Support (M/T Common) [20230902.110149_builder_junos_222_r3_s2] # JUNOS Packet Forwarding Engine Support (aft) [20230902.110149_builder_junos_222_r3_s2] # JUNOS Packet Forwarding Engine Support (MX Common) [20230902.110149_builder_junos_222_r3_s2] # JUNOS Juniper Malware Removal Tool (JMRT) [1.0.0+20230902.110149_builder_junos_222_r3_s2] # JUNOS J-Insight [20230902.110149_builder_junos_222_r3_s2] # JUNOS jfirmware [20230518.103303_builder_junos_222_r3_s1] # JUNOS Online Documentation [20230902.110149_builder_junos_222_r3_s2] # JUNOS jail runtime [20230531.cf35cdf_builder_stable_12_222] # JUNOS dsa dsa [22.2R3-S2.8] # Hardware inventory: # Item Version Part number Serial number Description # Chassis BU261 JNP204 [MX204] # Routing Engine 0 BUILTIN BUILTIN RE-S-1600x8 # CB 0 REV 48 750-069579 CALP3251 JNP204 [MX204] # FPC 0 BUILTIN BUILTIN MPC # PIC 0 BUILTIN BUILTIN 4XQSFP28 PIC # Xcvr 0 NON-JNPR ASTH20072900573 QSFP28-100G-CU3M # Xcvr 1 NON-JNPR HQ20101010007 QSFP28-100G-CU1M # Xcvr 2 NON-JNPR ASTH20121600064 QSFP28-100G-CU2M # Xcvr 3 v NON-JNPR ASTH20072900569 QSFP28-100G-CU2M # PIC 1 BUILTIN BUILTIN 8XSFPP PIC # PEM 0 REV 04 740-070749 1F18C161073 JPSU-650W-AC-AO # PEM 1 REV 04 740-070749 1F18C161074 JPSU-650W-AC-AO # Fan Tray 0 Fan Tray, Front to Back Airflow - AFO # Fan Tray 1 Fan Tray, Front to Back Airflow - AFO # Fan Tray 2 Fan Tray, Front to Back Airflow - AFO # License usage: # Licenses Licenses Licenses # Feature Feature Feature # Feature name used installed needed Expiry # subscriber-accounting 0 1 0 permanent # subscriber-authentication 0 1 0 permanent # subscriber-address-assignment 1 1 0 permanent # subscriber-vlan 0 1 0 permanent # subscriber-ip 0 1 0 permanent # service-dc 0 1 0 permanent # service-accounting 0 1 0 permanent # service-qos 0 1 0 permanent # service-ancp 0 1 0 permanent # service-cbsp 0 1 0 permanent # scale-subscriber 64010 0 permanent # scale-l2tp 0 1000 0 permanent # bgp 1 0 1 invalid # bfd-liveness-detection 1 0 1 invalid # vrrp 1 0 1 invalid # dot1q-tunneling 1 0 1 invalid # l2tp-inline-lns 0 1 0 permanent # l3vpn 1 0 1 invalid # ldp 1 0 1 invalid # l3static 1 0 1 invalid # l3vpn-instance-capacity 3 0 3 invalid # gre_tunnel 1 0 1 invalid # ospf 1 0 1 invalid # # Licenses installed: # License identifier: E408338859 # License version: 4 # Order Type: commercial # Features: # subscriber-accounting - Per Subscriber Radius Accounting # permanent # subscriber-authentication - Per Subscriber Radius Authentication # permanent # subscriber-address-assignment - Radius/SRC Address Pool Assignment # permanent # subscriber-vlan - Dynamic Auto-sensed Vlan # permanent # subscriber-ip - Dynamic and Static IP # permanent # l2tp-inline-lns - L2TP Inline LNS # permanent # # License identifier: E401171420 # License version: 4 # Order Type: commercial # Features: # service-dc - Service Definition Capability # permanent # service-accounting - Per Service Accounting # permanent # service-qos - Dynamic QOS Policy # permanent # service-ancp - ANCP Based QOS Adjustment # permanent # service-cbsp - Cell Based Shaping and Policing # permanent # # License identifier: E000662843 # License version: 2 # Order Type: commercial # Features: # scale-subscriber - Dynamic/Static Subscriber Base Feature # capacity: 64000 # permanent # # # E408338859 aeaqib qgdyps aijcpq dsquqd ri2rju ebiash wlyrjc kozc6v 2angml gg3rrz ox45ri 6ll4so 3w2j46 fnxmng a27d # # # E401171420 aeaqib qfemsc kjrha4 uaqhw3 zx3f2n q7k11g e4bz7m m4pz4a 4tdoeh 31c6jq ps3qdr oe4t1q 7h1kpl qvoout j3i # # # E000662843 aeaqeb qcsacq okayuv uhyqjo hkix6q peknob v5fo2y c6qg4e 7lqzty c6ditk vylsbk 7hn35w goldtv f4ky ## Last commit: 2025-06-30 13:49:09 -03 by diego version 22.2R3-S2.8; groups { bridge-ptt-4096-macs { bridge-domains { <*> { bridge-options { interface-mac-limit { 4096; } } } } } BGP-RIB-GROUPS { protocols { bgp { group <*> { neighbor "<*[.]*>" { family inet { unicast { rib-group inet0->clean; } } } } } } } TEMPLATE-INTERFACE-L3 { logical-systems { { interfaces { { unit <*> { family inet { mtu 1500; policer { arp ARP_POLICER; } } family inet6 { mtu 1500; } } } { unit <*> { family inet { mtu 1500; policer { arp ARP_POLICER; } } family inet6 { mtu 1500; } } } irb { unit <*> { family inet { mtu 1500; policer { arp ARP_POLICER; } } family inet6 { mtu 1500; } } } } } } interfaces { { unit <*> { family inet { inactive: rpf-check { mode loose; } mtu 1500; policer { arp ARP_POLICER; } sampling { input; } } family inet6 { mtu 1500; sampling { input; } } } } irb { unit <*> { family inet { mtu 1500; policer { arp ARP_POLICER; } sampling { input; } } family inet6 { mtu 1500; sampling { input; } } } } { unit <*> { family inet { mtu 1500; policer { arp ARP_POLICER; } sampling { input; } } family inet6 { mtu 1500; sampling { input; } } } } } } BFD-OSPF { logical-systems { <*> { protocols { ospf { area 0.0.0.0 { interface <*> { bfd-liveness-detection { minimum-interval 300; multiplier 4; full-neighbors-only; } } } } } } } routing-instances { <*> { protocols { ospf { area 0.0.0.0 { interface <*> { bfd-liveness-detection { minimum-interval 500; } } } } } } } protocols { ospf { area 0.0.0.0 { interface <*> { bfd-liveness-detection { minimum-interval 500; multiplier 4; full-neighbors-only; } } } } } } TEMPLATE-BGP-CLIENTE { logical-systems { OX-SPO0-CONTEUDO { protocols { bgp { group { neighbor <*> { family inet { unicast { prefix-limit { maximum 1000; teardown { idle-timeout 10; } } } } family inet6 { unicast { prefix-limit { maximum 100; teardown { idle-timeout 10; } } } } } } } } } } protocols { bgp { group { neighbor <*> { family inet { unicast { prefix-limit { maximum 1000; teardown { idle-timeout 10; } } } } family inet6 { unicast { prefix-limit { maximum 100; teardown { idle-timeout 10; } } } } } } } } } TEMPLATE-INTERFACE-MPLS { logical-systems { { interfaces { { unit <*> { family inet { mtu 9100; } family inet6 { mtu 1500; } family mpls { mtu 9100; } } } } } } interfaces { { unit <*> { family inet { mtu 9100; } family inet6 { mtu 9100; } family mpls { mtu 9100; } } } } } TEMPLATE-INTERFACE-WAN { interfaces { { unit <*> { family inet { filter { input-list [ DDOS-CLIENTES-IN DDOS-OPENX DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; output KENTIK-MONITOR-DNS-output; } } } } } } } system { host-name OX-VBD-MX204; root-authentication { encrypted-password "$1$nszc2Yn7$hTQlQU/J0yD1k0tk/BJoR1"; ## SECRET-DATA } configuration-database { max-db-size 314572800; } scripts { language python; ## Warning: 'python' is deprecated } login { class OX-WANGUARD { permissions [ configure view view-configuration ]; allow-configuration-regexps "policy-options policy-statement .* term DDOS"; } class looking-class { idle-timeout 3; } class looking-glass { permissions view-configuration; allow-commands "(show)|(ping)|(traceroute)|(set cli)"; deny-commands "(clear)|(file)|(file show)|(help)|(load)|(monitor)|(op)|(request)|(save)|(set)|(start)|(test)"; allow-configuration show; deny-configuration all; } class show-conf { allow-commands "show configuration|quit"; deny-commands .*; allow-configuration .*; } user alex { uid 2015; class super-user; authentication { encrypted-password "$6$CwamP0Lm$JP6D5CV6q2tGM.zqHe4Tx.6j3xBuIuXANWb4xDDQB1k5PRSjI4uYAXWuk.3u9r7zWlxDvD56nG8YzaLpQOv9c/"; ## SECRET-DATA ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC46LHESkhzw3wEbdo4PAoUBmdhWQsVWNaxEgj39yiHZ4NPpV23XEkJby22ecGH2fyWRTlTd2ShRW2g8OmK8BFpZWGF0b/+0uG0IbNz5XICcKZh60EPJQFGw+/6W8MwFEW7RADJnzpcR73K3xY3PMo6ML4WnRzdZQaSxNt0ZlREXAcYPSHRI2/Z7vZ0j9Flrm/BIOFw/J/pKhwxEj5gcwTDOtjpgNzuKXteD1oslNJJVJyqdCX8Ez0l2Zmd/r+hMN/GixoTxX1n03B5H0BYisBoS4QQneL10es4fL09etY/69AanRPA+ciMufSvPFto2EkTggtTAoXuQ4NF0EjEc56F alex@DESKTOP-L92KODO"; ## SECRET-DATA } } user backup { uid 2011; class super-user; authentication { encrypted-password "$6$uWKMc8.R$XTz.0CsXlmAldle2ptd3dC5WioX792VVIMgOL5M4IGjSbGdIC4U1sij8yHMJ7jnvP7AdWB/3lnj5LGG6.q3y70"; ## SECRET-DATA } } user danilo { uid 2001; class super-user; authentication { ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDMtGtKd0uEuzzX8WO0ki3ehTmZl07hEOrRi1SSosT2o8+on1CETKrSKRSdnkgZHOS3Mg+leQpauA+LWQ1oagUkqwpGwoOi47gNl5e3urlRoE+uxv4xETW0S/4rRwDOV1KWVoGYcklBZEvdBscKckfJk1fDNfK5oRjrCgofwuferXJfIX3247P+/8yigFcSH66koweW9xjXY8HaoJNNgOsY1EWlnc+Ftf5KcMFgPWvC8NoPI9tRuaZyjAqE0pvbR6AGzLvzPYz6FnBKlda708qFmtCCcL0668ustW8uAd70eTg3p78NzzTzfIkb47p2n4uiMhV6yr7u5v//Uv0Yn2sNkPlRF3WtGUtCA/d+ukEMn6ioQu30UKo8KRkY3ckMPX5h7AzdzqU6ShkantW1/NAlGXuL8NLS3Fu0ldLdw1wywq1GvmPGjJ3GgMj/hLaA4ZAfEEJefXQGBVE1RrOpbqxHwco+hLZednXDe10DAejEJXEg3Dl5lJtph7Ev8zmYXts= danilofirmino@MacBook-Air-de-Danilo.local"; ## SECRET-DATA } } user diego { uid 2023; class super-user; authentication { encrypted-password "$6$VSbNpdHB$1dcp5mGV4edigDq2/wE6vL/zZqKDZIe7ARpVcHCuamtqMdqeTXkoxH2OyEuV1o.RxHRkNEgt4kFJq9SKxWIrS0"; ## SECRET-DATA ssh-rsa "ssh-rsa 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 administrador@DIEGO"; ## SECRET-DATA } } user leandro { uid 2014; class super-user; authentication { encrypted-password "$6$qa.V7rtX$FKr7LB61UUOqSdK0zEy87SV5KIk7aDus9utRnVQw1wVzNzxPxdqRVmqsTpa.nhW5JFox4N4aUrNatGEEPQsIM."; ## SECRET-DATA ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs+qQxuRn65bjwFL7+/UmUmSedRF7DdKzJwRvLdXuy0+Kww+4wjzxIokFRVfiN5rbbr13qxncptkid2pf36KgTlJ/UvUDUUYV3yRSQM3dpB1WIMwTgZsgwW3ACunI0NVN+ov1MW4cuYUF2tQlIC3MAU6aj8v33YZRgr5Uv133y7RELA7mMzBOyYHUyjyfCsTfs6B2H8OfkjwebRl3G494AkKIaPKpTfwy01XeQHadMlP6g9NFKO901eJ0vneGl2dhYwWjHiKnFHWXPOZ3kWGX4FGSdDJk3LIzhnfzCpf1EXn/hsSEVZmObjqmrjUzytXHfs07BI/oJY5UarlTgjNMx leandro@MacBook-Air.local"; ## SECRET-DATA } } user lg { uid 2009; class looking-glass; authentication { encrypted-password "$6$154xrMe9$wiZ0AWoc.jMrXesdErC/puMw.y/I870jQy7Jw80NwvkDszRip6/9Ov7t2quV8poCE7Ecy4UmodMNLnipSC6mP."; ## SECRET-DATA ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4uU0WYvr9dUENqgJDrfwp9bjLGmJDXsDD4cLUU8xw90Kif7zvwEBjO6X/nZ78fKp7C+wcMFcrJ5D+Ax1yMU3t87/ibaLsCQYb/bkmryuKwFdn5xyvosYhk1douJKmzFVMJWahX6JRgmGNNBEWIbfks8ikBn3qRvCtnd8ydeiDepSV7JOOUj+veLMZf5I+4AgUNahaXsURRg3Jbl/uzhVWDZWBwqK+egvLADLvWKuJwYS6sGYlMMCIs+lFiYoUiDEG5RD/sn/HPUDGsuUyHRuDCNWetlJUD43Uxgh4MSpGoGMkYXXbbKgl9kyonq0iwMF4ZvpD1RqZOlSbtRETBRP9 docker@openx"; ## SECRET-DATA } } user marcos { uid 2080; class super-user; authentication { encrypted-password "$6$oD4wzmtp$iBOBCYXWJGi0H0XO5CE7F1Mp3QMzz8mCRlxojSEREXCNdN.eZUrQumDUmdiGiRbn4k6uqVjGXGjdN.inujl8D0"; ## SECRET-DATA } } user n8n { uid 2000; class super-user; authentication { ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCn72RO0A67VYLbK6AdzyDxBQCUOqNiKzkJ+x4p5Aqwd9NBANk3rmsB4ow+Un3igV5kHl9ayYNjQPswXoIUZ/JVL/FHmivhD0zCWSBUrd36YWhvNpa8XW7+CEwCr/U06v2ua5nCNlmz3IyORQy+UrrscIJN7CQ27yVrceZuPytWOe2mbfbIiXsoICmW+0IHhxSRMEUzpByI8JWfQWiwwkZybh2ny+FyqfqTmdpzs6n4OaHGgmMKg+a1wYbYfmaQr0trR0WkFvMmrKMZWjRZfw2Cr6/ObMIf75DZEiV5GtwtUKj8jIR9dnV7aEuvdQ2tQcFOaUi1i8z1NV3hhvCimjlJ n8n@openx.com.br"; ## SECRET-DATA } } user openx { uid 2002; class super-user; authentication { encrypted-password "$6$WVHF4bpB$8YDDPzPzG8.APb9qL5L.AFxCm.mqpf/P449AYC3J/Kh/Tg5MfBiCX8PxcQKBfAkKJPVrShIw2q/4rn2J0wkKN."; ## SECRET-DATA } } user osmar { uid 2105; class super-user; authentication { encrypted-password "$6$RKFDWDst$n5wAZ1m8HP0P4Y2YCoMHkVo/.nPiq69f6Ep26T2xffeiTKEp0/JwoKYjU9mtDZeMqk0H48HsjzIwm0N8AtFt80"; ## SECRET-DATA ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2hO2llK2EEFKZOOCl2hQny6YZEJtqoVegMNrqHtnGtRj1ml+HSJRCFTmGEOBIHF7NUrHj04jA5XPGszbfb5cFf5Q4xCwuo4BtI+Iw6SgHU345tahI45Uj47VY0D2DI4L1LenGTXjLuuL7HN8u9nrPnfgtkt7ZWA7a4MKi270MQNndbAe95a3s7TBhdmwpWChLlVyb+xwFyUIKQv1V3k0/tADAguGawJcCQa1l6AEFXA9HDL4rIBpRVDdA4z1V+hQJYSWZ/rpI6Sv/lffLvn7HEc2jdA19vgX0ltgc4dQx25i9d3dDZIKTduBLltTo94gaRUxgygfIA0MGw0PVkczF osmar@MacBook-Air.local"; ## SECRET-DATA } } user raigomes { uid 2024; class super-user; authentication { encrypted-password "$6$bzRrwjzR$l8vC1yRDJq5U9GuKVk9x.m2N4x4khM3dbczHohXGOrevTY6q9oq0ydDVZtLK2VSB6jvxkrJQisOOOvF2uCBpu1"; ## SECRET-DATA ssh-rsa "ssh-rsa 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 raigomes@MacBook-Pro.local” "; ## SECRET-DATA } } user renato { uid 2013; class super-user; authentication { encrypted-password "$6$Wey2vO8q$PqZEQdDLwmbM4wkAT2Rx45dS4okgIv/nynhi3ZeUQ4uuygeDW/dzC0jhbxruIZ7gEI1eizbaTDwjzDjJG/GZd."; ## SECRET-DATA ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA5OzyPxWPGAyjHWOe0bpQ26tdy7hzuKiBTuBIdPOB5dksDjU3MHuTxZuHqEVIWr0L/n4MIOuQjB/1Znu40QOc0Jw5qFxMp85GgPHuVBGo9qsuacNj+Y8CpkrCVNoKgEYnFMEuvCi/N8a1rJGBm+EqgFlvxf7n5zCD74746OIf5ws= renato@joejoe"; ## SECRET-DATA } } user rodrigo { uid 2025; class super-user; authentication { encrypted-password "$6$GmiP9d2c$1zT/8T3YVs07/wt3azTFIQktWjLlx371Y7zMcoFAhFXYIXKmxUqxZiyp.jAf.II.ARAuN3mMS9Wr2wQ6vntn01"; ## SECRET-DATA } } } services { ssh { root-login deny-password; sftp-server; port 5612; } extension-service { request-response { grpc { clear-text { port 32767; } skip-authentication; } } notification { allow-clients { address 0.0.0.0/0; } } } netconf { ssh; } dhcp-local-server { dhcpv6 { group IPOE { overrides { delegated-pool V6-IPOE-PD; delete-binding-on-renegotiation; dual-stack DS-IPOE; } interface ae2.0; interface demux0.0; } } group IPOE { overrides { client-discover-match incoming-interface; delete-binding-on-renegotiation; dual-stack DS-IPOE; } interface ae2.0; } dual-stack-group DS-IPOE { authentication { password OPENX; username-include { domain-name IPOE; relay-agent-remote-id; } } access-profile IPoE-Access-Profile; dynamic-profile SUBS-IPOE-PROFILE; on-demand-address-allocation; classification-key { mac-address; } protocol-master inet; } } subscriber-management { enable; } } time-zone America/Fortaleza; arp { aging-timer 240; passive-learning; } management-instance; authentication-order [ radius password ]; name-server { 177.91.160.100; 8.8.8.8; } radius-server { 177.91.160.80 { port 1812; accounting-port 1813; secret "$9$3vYpnpOhSeKv836SreWXxaJGDjqfT3CpBDiA0"; ## SECRET-DATA source-address 177.91.162.0; } } dynamic-profile-options { versioning; } syslog { user * { any emergency; } host 177.91.160.69 { any any; interactive-commands any; port 5140; } host 177.91.162.90 { any any; interactive-commands any; port 514; source-address 177.91.162.0; structured-data { brief; } } file firewall.log { firewall any; } file interactive-commands { interactive-commands any; } file messages { any any; authorization info; firewall none; archive size 10m files 100; } time-format year millisecond; } auto-configuration { traceoptions { file autoconfig.log; flag all; } } processes { dhcp-service { traceoptions { file dhcp_logfile size 10m files 10; level all; flag packet; flag all; } } } ddos-protection { traceoptions { file ddos-trace size 10m; flag all; } global { flow-detection; flow-detection-mode automatic; } } ntp { server 177.91.162.90; server 177.91.160.90; server 138.36.164.35; source-address 177.91.162.0; } } logical-systems { OX-SPO0-ROUTESERVER { interfaces { lt-0/0/0 { unit 19 { description CORE-SPO0-IP; encapsulation ethernet; peer-unit 18; family inet { address 177.91.162.19/31; } family inet6 { address 2804:11dc:f00:18::2/126; } } } lo0 { unit 2 { family inet { filter { input-list [ accept-common-services accept-bgp accept-ospf accept-established discard-all ]; } address 177.91.162.2/32; } family inet6 { address 2804:11dc:0000::2/128; } } } } protocols { bgp { group IBGP-V6 { type internal; local-address 2804:11dc:0000::2; cluster 177.91.162.2; peer-as 263444; neighbor 2804:11dc:0000::0 { export BGP-OUT-IP; } neighbor 2804:11dc:0000::1 { export BGP-OUT-PEER; } neighbor 2804:11dc:0000::3 { export BGP-OUT-PEER; } neighbor 2804:11dc:1000::0 { export BGP-OUT-IP; } neighbor 2804:11dc:1000::1 { export BGP-OUT-PEER; } neighbor 2804:11dc:1000::2 { export BGP-OUT-PEER; } neighbor 2804:11dc:1000::3 { export BGP-OUT-PEER; } neighbor 2804:11dc:4000::0 { export BGP-OUT-IP; } neighbor 2804:11dc:6000::0 { export BGP-OUT-IP; } neighbor 2804:11dc:6000::1 { export BGP-OUT-PEER; } } group IBGP-V4 { type internal; local-address 177.91.162.2; cluster 177.91.162.2; peer-as 263444; neighbor 177.91.162.0 { export BGP-OUT-IP; } neighbor 177.91.162.3 { export BGP-OUT-PEER; } neighbor 177.91.160.2 { export BGP-OUT-PEER; } neighbor 177.91.160.3 { export BGP-OUT-PEER; } neighbor 177.91.162.14 { export BGP-OUT-PEER; } neighbor 177.91.160.1 { export BGP-OUT-PEER; } neighbor 177.91.160.0 { export BGP-OUT-IP; } neighbor 177.91.162.1 { export BGP-OUT-PEER; } neighbor 177.91.162.75 { passive; export BGP-NEGA-TUDO; } neighbor 177.91.163.0 { export BGP-OUT-IP; } neighbor 177.91.163.1 { export BGP-OUT-PEER; } neighbor 138.36.164.0 { export BGP-OUT-IP; } neighbor 138.36.164.38 { passive; export BGP-NEGA-TUDO; } neighbor 138.36.164.3 { export BGP-OUT-PEER; } neighbor 138.36.165.0 { export BGP-OUT-IP; } neighbor 138.36.165.4 { export BGP-OUT-IP; } } local-as 263444; } ospf { area 0.0.0.0 { interface lo0.2 { passive; } interface lt-0/0/0.19 { interface-type p2p; } } } ospf3 { area 0.0.0.0 { interface lt-0/0/0.19 { interface-type p2p; } interface lo0.2 { passive; } } } } policy-options { prefix-list LOOPBACK { 177.91.162.2/32; } prefix-list router-ipv4 { apply-path "logical-systems OX-SPO0-ROUTESERVER interfaces <*> unit <*> family inet address <*>"; } prefix-list bgp-neighbors { apply-path "logical-systems OX-SPO0-ROUTESERVER protocols bgp group <*> neighbor <*>"; } prefix-list ospf { 224.0.0.5/32; 224.0.0.6/32; } prefix-list rfc1918 { 10.0.0.0/8; 172.16.0.0/12; 192.168.0.0/16; } prefix-list multicast-all-routers { 224.0.0.2/32; } prefix-list snmp-client-lists { apply-path "snmp client-list <*> <*>"; } prefix-list snmp-community-clients { apply-path "snmp community <*> clients <*>"; } prefix-list localhost { 127.0.0.1/32; } prefix-list GERENCIA { 54.207.12.38/32; 177.91.160.0/24; 177.91.162.0/24; 177.91.163.96/29; } prefix-list dns-servers; policy-statement BGP-NEGA-TUDO { term REJECT { then reject; } } policy-statement BGP-OUT-IP { term MEUS-ANUNCIOS { from policy MEUS-ANUNCIOS; then next policy; } term ROTAS { from community [ PREFIX-ASN PREFIX-WAN-PEER PREFIX-CLIENT-IP ]; then accept; } term BLACKHOLE { from community BLACKHOLE; then accept; } term REJECT { then reject; } } policy-statement BGP-OUT-PEER { term MEUS-ANUNCIOS { from policy MEUS-ANUNCIOS; then next policy; } term IMPROVED { from community PREFIX-IMPROVED; then reject; } term ROTAS { from community [ PREFIX-ASN PREFIX-WAN-PEER PREFIX-CLIENT-IP PREFIX-CLIENT-CONTEUDO PREFIX-WAN-PTT-PR ]; then accept; } term BLACKHOLE { from community BLACKHOLE; then accept; } term REJECT { then reject; } } policy-statement MEUS-ANUNCIOS { term 177.91.162.0/23 { from { route-filter 177.91.162.0/23 exact; } then { local-preference 1000; community add PREFIX-ASN; community add PREFIX-ORIGIN-SPO0; community add IP-NO_EXPORT; community add PREFIX-ORIGIN-THIS-ROUTER; } } term 2804:11dc::/32 { from { route-filter 2804:11dc::/32 exact; } then { community add PREFIX-ASN; community add PREFIX-ORIGIN-SPO0; community add PREFIX-ORIGIN-THIS-ROUTER; } } term REJECT { then reject; } term 177.91.160.0/23 { from { route-filter 177.91.162.0/23 exact; } then { local-preference 1000; community add PREFIX-ASN; community add PREFIX-ORIGIN-SPO0; community add IP-NO_EXPORT; community add PREFIX-ORIGIN-THIS-ROUTER; } } } community BLACKHOLE members 65444:666; community IP-DURAND+0 members 65444:2050; community IP-DURAND-NO_EXPORT members 65444:2059; community IP-DURAND-NO_PTT members 22356:65521; community IP-NO_EXPORT members 65444:2999; community IP-SPARKLE+0 members 65444:2040; community IP-SPARKLE-NO_EXPORT members 65444:2049; community NO_EXPORT members 65444:9999; community PREFIX-ASN members 65444:10000; community PREFIX-CLIENT-CONTEUDO members 65444:6000; community PREFIX-CLIENT-DDOS members 65444:9000; community PREFIX-CLIENT-IP members 65444:5000; community PREFIX-CLIENT-IP-CLI members [ 65444:5001 65444:5002 ]; community PREFIX-CLIENT-IP-CLI-CLI members 65444:5002; community PREFIX-DDOS members 65444:9000; community PREFIX-IMPROVED members [ 65444:20000 65444:20001 65444:20002 65444:20004 ]; community PREFIX-ORIGIN members 65444:0; community PREFIX-ORIGIN-SPO0 members 65444:0; community PREFIX-ORIGIN-SPO1 members 65444:1; community PREFIX-ORIGIN-SPO2 members 65444:2; community PREFIX-ORIGIN-THIS-POP members [ PREFIX-ORIGIN-SPO0 PREFIX-ORIGIN-SPO2 ]; community PREFIX-ORIGIN-THIS-ROUTER members 65444:1620; community PREFIX-ORIGIN_REMOTE members PREFIX-ORIGIN-SPO1; community PREFIX-PARCIAL members 65444:1000; community PREFIX-PEER members 65444:4000; community PREFIX-PTT members 65444:3000; community PREFIX-WAN-IP members 65444:2000; community PREFIX-WAN-PEER members 65444:4000; community PREFIX-WAN-PTT members 65444:3000; community PREFIX-WAN-PTT-PR members 65444:3500; community PTT-NO_EXPORT members 65444:3999; } routing-options { rib inet6.0 { static { route 2804:11dc::/32 discard; route 2804:11dc:0000::/36 { discard; community [ 65444:10000 65444:0 ]; } } } static { route 177.91.162.0/23 discard; route 177.91.163.0/24 { discard; community [ 65444:0 65444:10000 65444:1620 ]; } route 177.91.162.0/24 { discard; community [ 65444:0 65444:10000 65444:1620 65444:2709 ]; } } } } TESTE { protocols { bgp { group TESTE { local-as 65124; neighbor 177.91.162.25 { export EXPORT; peer-as 12135; } } } } policy-options { policy-statement EXPORT { term EXPORT { from { route-filter 10.20.30.0/24 exact; } then { as-path-prepend 1234; as-path-expand 4567; accept; } } term REJECT { then reject; } } } routing-options { autonomous-system 263444; static { route 10.20.30.0/24 discard; } } } } chassis { aggregated-devices { ethernet { device-count 3; } } fpc 0 { pic 0 { tunnel-services { bandwidth 50g; } port 0 { speed 100g; } port 1 { speed 100g; } port 2 { speed 100g; } port 3 { speed 100g; } } pic 1 { number-of-ports 0; } port-mirror-instance WANGUARD-SP4; port-mirror-instance KENTIK-MONITOR-DNS; sampling-instance OX-WANGUARD; inline-services { use-extended-flow-memory; flow-table-size { ipv4-flow-table-size 10; ipv6-flow-table-size 5; } } } network-services enhanced-ip; } services { jinsightd { subscribe { health-monitor; } } flow-monitoring { version-ipfix { template ipv4 { flow-active-timeout 60; flow-inactive-timeout 15; template-refresh-rate { packets 30; seconds 30; } option-refresh-rate { packets 30; seconds 30; } ipv4-template; flow-key { flow-direction; vlan-id; } } template ipv6 { flow-active-timeout 60; flow-inactive-timeout 15; template-refresh-rate { packets 30; seconds 30; } option-refresh-rate { packets 30; seconds 30; } ipv6-template; flow-key { flow-direction; vlan-id; } } } } analytics { streaming-server KENTIK-REMOTE { remote-address 208.76.14.254; remote-port 20023; } export-profile KENTIK-PROF { local-address 177.91.162.0; local-port 30010; reporting-rate 30; format gpb; transport udp; } sensor KENTIK-SENSOR { server-name KENTIK-REMOTE; export-name KENTIK-PROF; resource /junos/system/linecard/interface/; } sensor KENTIK-SENSOR_LOGICAL { server-name KENTIK-REMOTE; export-name KENTIK-PROF; resource /junos/system/linecard/interface/logical/usage/; } } } security { certificates { local { lcert { "-----BEGIN PRIVATE KEY-----\nMIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCJ9FIlrVXTnJ9O\n69pHcOx3zT5qLFdetdmlECJ7DrfsLW/olqZwt4yv5KkKOi6QDYDOs4+K9VEoe2H9\nBdJclP4/tTH0En//w0w74q6vT5zysXLC7pBAt6HnaSJWu6CTbOulk2yfLhd+l3l5\nfh/mwlQtgxNFI/rLrkrEhwa12O/rvOD3fKY+zyRVOi1JySQwUdqw09MquTRzLJ14\n6lgpATErRzpZnocGGm+UYNL1x09M9al84C1cJ0F/R7RUF+KgI3UnVfBoFH5DVe0Z\n0ZfoFQufpp5zxLrIbrcyM3k1M9OM2DSfINviH2RXHEhlVC1YfzeneMdY2kBbA62B\nqW+RxEENAgMBAAECggEAFs+Hz8QQB3wD2YRlJN/2sb6Fvf+T+Myf7suyr99YqRxA\nP1i9r7Ch+imYi+Df9yDMdiE5sHPs1gFEzBYs2PMn8TfQSTfP42YTEmnikYlb/cM6\noyHYR2M1ybJYI7hFjmr5sfilAtMXvm5kfyLMOpdSXO4p/wo6e3hX05QyF1qGHVfx\nOiQjFdXDrDy6z69EhNA4rtW+UlSRllrPnJS44ZAyZH0GstVr/EtoPEdLZ0WMSTmK\nPdF/Y1stPyy32JOFW7L1VYgThtkD8wnTh8RepA5j2EyocgaxT5QRIUgxHknUTLDi\nOWc/oP/dmcSEUXpH5WbaXnuGDzHP7xDkmS5DpGs6QQKBgQDCUYSUAL62iucMf0fp\nbiztNolTmPnoZDuBxpZ6kb/PVLbv4h7uA5h240jnkXBx9l1+21c9TZ6fMXBuJ8Gm\nFpKVhwiJmKVymCVxRh3WJm7sdTTOO677mvLwAPP/C4C6K5BMBwbZSeyBwq2xZ7u3\nheXpDjjOoDrNN//YAa96Jyh0LQKBgQC1vpynQy6qz4xC4d3vwzOfLNF7O4vesYkU\n0BLvsRkawukWrL5n8Bt0efdopOSGE7stikJ/kDoqNzXH6JMwBfk4KCdLgL3fE9Ae\nzkhphedHWHO1lC3n8jDEdKCe8hoh7m3cwHavkAZpKWzH0j5Qhy+DUbUiFNd1enmA\nJShfNiqsYQKBgDBi2g98jACqX9QV0ZNHsvoybUmauwfqBYNQLuJAbrGy14auGKON\n06Yu/FVlOsm13hwbhAKo1EmxptxXG/o+fqurHy4cC36YciJdokpT8aUBnm+IHw9Z\nywqGQjuM4rX46Qp1aXgr1y+MiXG2ceDF/7TjrLOO5HV7b0KbUNWq8IDVAoGBAIu6\nepIWEsD8RKf/IzR87SlJudx20XhrIitANe7WR6jNhYsLUHB0p4cLZm2rqI50iQng\nLHQKnM1sGQsTAmZ/kTXdmShxWIkzoGSuz/lhG4k8tek6fXjAOUIxMHRDSlggCZMY\n3abooiUj1iBiwcoDxUG/BfWn9Ga7vMIKz1k0OebBAoGAejL9N3v7BKVALUWBCnCw\nrrC08Cus96snQxyuPw23+IavmUdnSy1e8vWJ6nBP8Z9OmPy4MRLYO3CHmFuKDewm\ntkrR4VXqni4B5uDZFAc2uT1PSsXnV5d3PGxyuG4Y3n9r3Pr7gW5DBcvWB/brZcWo\nx5g3HPi7ZoPuzwOnszBTu80=\n-----END PRIVATE KEY-----\n-----BEGIN CERTIFICATE-----\nMIIDRzCCAi8CFG7hnwU5vFgU/onTr8xZXnp80P71MA0GCSqGSIb3DQEBCwUAMHAx\nCzAJBgNVBAYTAkJSMQswCQYDVQQIDAJTUDESMBAGA1UEBwwJU2FvIFBhdWxvMQ4w\nDAYDVQQKDAVPcGVuWDEQMA4GA1UECwwHSnVuaXBlcjEeMBwGCSqGSIb3DQEJARYP\nY2FAb3BlbnguY29tLmJyMB4XDTI0MDYyMTEzNDUyNVoXDTI1MDYyMTEzNDUyNVow\nUDELMAkGA1UEBhMCQlIxCzAJBgNVBAgMAlNQMRIwEAYDVQQHDAlTYW8gUGF1bG8x\nDjAMBgNVBAoMBU9wZW5YMRAwDgYDVQQLDAdKdW5pcGVyMIIBIjANBgkqhkiG9w0B\nAQEFAAOCAQ8AMIIBCgKCAQEAifRSJa1V05yfTuvaR3Dsd80+aixXXrXZpRAiew63\n7C1v6JamcLeMr+SpCjoukA2AzrOPivVRKHth/QXSXJT+P7Ux9BJ//8NMO+Kur0+c\n8rFywu6QQLeh52kiVrugk2zrpZNsny4Xfpd5eX4f5sJULYMTRSP6y65KxIcGtdjv\n67zg93ymPs8kVTotSckkMFHasNPTKrk0cyydeOpYKQExK0c6WZ6HBhpvlGDS9cdP\nTPWpfOAtXCdBf0e0VBfioCN1J1XwaBR+Q1XtGdGX6BULn6aec8S6yG63MjN5NTPT\njNg0nyDb4h9kVxxIZVQtWH83p3jHWNpAWwOtgalvkcRBDQIDAQABMA0GCSqGSIb3\nDQEBCwUAA4IBAQBHanQt3GkRAwtzpiLY+Fbxy7RvOHOtdvNQMo8Jp9AV9ggNpkPH\ngAoU4CdiAv14jjiqv+m2V0qaTb6tpHNHYHW+CIaWqNV+iVct0Kwtt1sBtq7YVyQD\n7lY1U8soJuD1+yD3OKcvj7dMlRMV7WUdg4j8VhSHo/JFOMTzMnqRH5ON9VnJaRdi\nTDcy0kb2/bszmzGB2pB43a3YQENKQlj+L/d2lR8KBOdbnIxy4bqU+MS7I2mbHtSX\n8mSG3hUY0Ix/veny1FoJxUJT8BecoDa9zjnfWhZ5GicnoSGtgzNKjnDgbGQ2bQ3z\nLGG7XHLzu6E2D35c6GsoXBy87KBgA5j3Fwol\n-----END CERTIFICATE-----\n"; ## SECRET-DATA } } } pki { ca-profile ca1 { ca-identity caid1; } } } interfaces { apply-groups TEMPLATE-INTERFACE-L3; et-0/0/0 { description OX-VBD-EDGECORE-PT9; gigether-options { 802.3ad ae2; fec fec91; } } gr-0/0/0 { unit 10 { clear-dont-fragment-bit; reassemble-packets; tunnel { source 177.91.162.0; destination 177.91.160.0; allow-fragmentation; } family inet { mtu 5000; address 100.99.99.200/31; } } unit 36 { reassemble-packets; description CORE-PBR_NOCTION_SP4; tunnel { source 177.91.162.0; destination 138.36.164.36; allow-fragmentation; } family inet { filter { input IRP-PBR; } address 100.91.255.1/30; } } } lt-0/0/0 { unit 18 { description CORE-SPO0-ROUTESERVER; encapsulation ethernet; peer-unit 19; family inet { address 177.91.162.18/31; } family inet6 { address 2804:11dc:f00:18::1/126; } } } et-0/0/1 { description OX-VBD-EDGECORE-PT10; gigether-options { 802.3ad ae2; fec fec91; } } xe-0/0/1 { flexible-vlan-tagging; encapsulation flexible-ethernet-services; unit 2200 { encapsulation vlan-ccc; vlan-id-list [ 1-2530 2532-4000 ]; input-vlan-map push; output-vlan-map pop; family ccc; } } et-0/0/2 { description OX-VBD-EDGECORE-PT11; gigether-options { 802.3ad ae2; fec fec91; } } et-0/0/3 { description OX-VBD-EDGECORE-PT12; gigether-options { 802.3ad ae2; fec fec91; } } ae2 { description CORE-OX-SPO0-EDGECORE-PO2; flexible-vlan-tagging; auto-configure { vlan-ranges { dynamic-profile Auto-VLAN-Demux { accept [ dhcp-v4 dhcp-v6 ]; ranges { 1002-1002; } } } remove-when-no-subscribers; } mtu 9216; encapsulation flexible-ethernet-services; mac ec:38:73:ec:60:19; aggregated-ether-options { lacp { active; } } unit 10 { description CORE-DMZ-VBD; vlan-id 10; family inet { address 177.91.162.65/27; } family inet6 { address 2804:11dc:0:10::1/64; } } unit 11 { description CLI_IP-UNE-DMZ_VL11; vlan-id 11; family inet { address 177.91.162.36/31; } } unit 17 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 17; } unit 20 { description OX-SPO0-IP->SW0; vlan-id 20; family inet { address 177.91.162.21/31; } family inet6 { address 2804:11dc:4000:20::1/126; } } unit 24 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 24; } unit 30 { description CORE_IP-SPO0-SPO6; vlan-tags outer 662 inner 30; family inet { address 100.91.10.64/31; inactive: address 138.36.167.17/31; } family inet6 { address 2804:11dc:f06:30::1/126; } } unit 35 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 35; } unit 36 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 36; } unit 40 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 40; } unit 41 { description CORE-WANGUARD-MIRROR; vlan-id 41; family inet { address 100.91.255.252/29 { arp 100.91.255.250 mac 90:e2:ba:3d:02:79; } } } unit 44 { vlan-id 44; family inet { filter { input CORERO-clean; group 1; } address 177.91.162.44/31 { arp 177.91.162.45 mac 00:90:0b:bd:ee:b0; } } } unit 45 { description CORERO-DITY; vlan-id 45; family inet { address 177.91.163.44/31; } } unit 46 { vlan-id 46; family inet { filter { input ACTIVEGUARD-INPUT; group 1; } address 177.91.162.46/31; } } unit 91 { description WAN_PEER-GOOGLE-L3_VL91; vlan-id 91; family inet { address 72.14.242.206/30; } family inet6 { address 2001:4860:1:1:4:514:0:3/127; } } unit 100 { apply-groups TEMPLATE-INTERFACE-WAN; description WAN_IP-LEVEL3-VBD_VL100; vlan-id 100; family inet { address 189.125.156.34/30; } family inet6 { address 2001:13b4:4000:2::482/126; } } unit 102 { description WAN_CDN-GOOGLE-VBD_GRU2_VL102; vlan-id 102; family inet { address 177.91.162.129/27; } family inet6 { address 2804:11dc:4000:102::1/64; } } unit 103 { description WAN_CDN-NETFLIX-VBD_VL103; vlan-id 103; family inet { address 177.91.162.161/29; } family inet6 { address 2804:11dc:0:103::1/125; } } unit 124 { description CLI_IP-NETSPEED-MILBR_VL124; vlan-id 124; family inet { mtu 1500; filter { output-list [ DDOS-NETSPEED DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.166/31; } family inet6 { address 2804:11dc:c0:124::1/126; } } unit 125 { description CLI_IP-NETSPEED-MILBR_VL125; vlan-id 125; family inet6 { address 2804:11dc:c0:125::1/126; } } unit 200 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 200; } unit 303 { description CLI_IP-NETSPEED-ENET_VL303; vlan-id 303; family inet { filter { output-list [ DDOS-NETSPEED DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.196/31; } family inet6 { address 2804:11dc:c0:303::5/126; } } unit 304 { description CLI_IP-NETSPEED-ENET_VL304; vlan-id 304; family inet { mtu 1500; address 100.91.163.194/31; } family inet6 { address 2804:11dc:c0:304::1/126; } } unit 305 { description CLI_GER-VSX-ENET; vlan-id 305; family inet { mtu 1500; address 177.91.163.8/31; } } unit 307 { description CLI_IP-NETSPEED-ENET_VL307; vlan-id 307; family inet6 { address 2804:11dc:c0:307::1/126; } } unit 308 { description CLI_IP-AXNET-PIXSP4_VL308; vlan-id 308; family inet { filter { output-list [ DDOS-AXNET DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.10/31; } family inet6 { address 2804:11dc:c0:308::1/126; } } unit 310 { description CLI_CORP-THEGIFT-VBD_VL310; vlan-id 310; family inet { address 177.91.162.237/30; } } unit 312 { description CLI_IP-SPEEDJET-MTX_VL312; vlan-id 312; family inet { mtu 1500; address 177.91.163.110/31; } family inet6 { mtu 1500; address 2804:11dc:c0:312::1/126; } } unit 314 { description CLI_IP-ULTRANET-CTE-VIANET_VL314; vlan-id 314; family inet { mtu 1500; filter { output-list [ DDOS-CTE DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.54/31; } family inet6 { address 2804:11dc:c0:314::1/126; } } unit 315 { description CLI_IP-ULTRANET-CTE-CINBESA_VL315; vlan-id 315; family inet { mtu 1500; filter { output-list [ DDOS-CTE DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.52/31; } } unit 316 { description CLI_IP-GIGABYTEMG-TCF_ALGAR_VL316; vlan-id 316; family inet { filter { output-list [ DDOS-GIGABYTEMG DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.42/31; } family inet6 { address 2804:11dc:c0:316::1/126; } } unit 317 { description CLI_CORP-ELVIRA-VBD_VL317; vlan-id 317; family inet { address 177.91.162.244/31; address 100.91.240.245/30; } } unit 321 { description CLI_IP-TCF-ALGAR_VL321; vlan-id 321; family inet { mtu 1500; address 177.91.163.36/31; } family inet6 { address 2804:11dc:10:321::1/126; } } unit 329 { vlan-id 329; family inet { mtu 1500; address 177.91.163.190/31; } family inet6 { address 2804:11dc:c0:329::1/126; } } unit 330 { description CLI_CORP-ELVIRA-VD_VL330; vlan-id 330; family inet { address 177.91.163.130/31; } family inet6 { address 2804:11dc:c0:330::1/126; } } unit 332 { description CLI_IP-ULTRANET-ENET-LGS_VL332; vlan-id 332; family inet { mtu 1500; filter { output-list [ DDOS-ULTRANET DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.6/31; } family inet6 { address 2804:11dc:c0:332::1/126; } } unit 340 { description CLI_IP-ALT-MX204_VBD_VL340; vlan-id 340; family inet { filter { output-list [ DDOS-ALT DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 100.91.173.42/31; } family inet6 { address 2804:11dc:4010:340::1/126; } } unit 344 { description CLI_IP-JUPITER-ENET_VL344; vlan-id 344; family inet { mtu 1500; address 177.91.163.216/31; } family inet6 { address 2804:11dc:10:344::1/126; } } unit 346 { description CLI_IP-ARIAS-MATRIX_VL346; vlan-id 346; family inet { filter { output-list [ DDOS-ARIAS DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.176/31; } family inet6 { address 2804:11dc:c0:346::1/126; } } unit 347 { description CLI_IP-MEGANET-ASCENTYSP2_VL347; vlan-id 347; family inet { filter { output-list [ DDOS-MEGANET DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.46/31; } family inet6 { address 2804:11dc:c0:347::1/126; } } unit 348 { description CLI_IP-SIDYS-PIXCIRION_VL348; vlan-id 348; family inet { mtu 1500; address 177.91.163.32/31; } family inet6 { address 2804:11dc:c0:348::1/126; } } unit 350 { description CLI_IP-BLZ-ALT_VL350; vlan-id 350; family inet { mtu 1500; filter { output-list [ DDOS-BLZ DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.162/31; } family inet6 { address 2804:11dc:c0:350::1/126; } } unit 352 { description CLI_IP-BLZ-ALT_VL352; vlan-id 352; family inet { mtu 1500; filter { output-list [ DDOS-BLZ DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.164/31; } family inet6 { address 2804:11dc:c0:352::1/126; } } unit 353 { description CLI_IP-MILBR-ENET_VL353; vlan-id 353; family inet { filter { output-list [ DDOS-MILBR DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.204/31; } family inet6 { address 2804:11dc:c0:353::1/126; } } unit 354 { description WAN_PEER-MAXIHOST-VL354; vlan-id 354; family inet { mtu 1500; address 10.255.0.162/30; } family inet6 { mtu 1500; address 2804:391c:1::42/126; } } unit 358 { description CLI_IP-STRATUS-MAP_VL358; vlan-id 358; family inet { address 177.91.163.88/31; } family inet6 { address 2804:11dc:c0:358::1/126; } } unit 359 { description CLI_IP-STRATUS-MAP_VL359; vlan-id 359; family inet { address 177.91.163.236/31; } family inet6 { address 2804:11dc:c0:359::1/128; } } unit 364 { description CLI_IP-IRANET-VD_VL364; vlan-id 364; family inet { address 177.91.163.68/31; } family inet6 { address 2804:11dc:10:364::1/126; } } unit 365 { vlan-id 365; family inet { address 177.91.163.182/31; } family inet6 { address 2804:11dc:4010:365::1/126; } } unit 366 { description CLI_IP-GHNET-ENET_VL366; vlan-id 366; family inet { filter { output-list [ DDOS-GHNET DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.114/31; } family inet6 { address 2804:11dc:10:366::1/126; } } unit 368 { vlan-id 368; family inet { address 177.91.163.34/31; } family inet6 { address 2804:11dc:4010:368::1/126; } } unit 369 { vlan-id 369; family inet { address 177.91.163.30/31; } family inet6 { address 2804:11dc:4010:369::1/126; } } unit 371 { description CLI_IP-IRANET-VD_2_VL371; vlan-id 371; } inactive: unit 374 { description CLI_IP-FASTFIBER-VD_VL374; vlan-id 374; family inet { mtu 1500; address 177.91.163.104/31; } family inet6 { address 2804:11dc:c0:374::1/126; } } unit 376 { description CLI_IP-SCON-VD_VL376; vlan-id 376; family inet { mtu 1500; address 177.91.163.180/31; } family inet6 { address 2804:11dc:c0:376::1/126; } } inactive: unit 377 { description CLI_IP-FASTFIBER-VD_VL377; vlan-id 377; family inet { mtu 1500; address 177.91.163.108/31; } family inet6 { address 2804:11dc:c0:377::1/126; } } unit 380 { description CLI_IP-MEGATELECOM-VBD_VL380; vlan-id 380; family inet { filter { output-list [ DDOS-MEGATELECOM DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.80/31; } family inet6 { address 2804:11dc:c0:380::1/126; } } unit 383 { description CLI_IP-COELHO-4WNET_VL383; vlan-id 383; family inet { mtu 1500; address 177.91.163.148/31; } family inet6 { address 2804:11dc:c0:383::1/128; } } unit 384 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 384; } unit 385 { description CLI_IP-FIREMICRO-ENET_VL385; vlan-id 385; family inet { mtu 1500; filter { output-list [ DDOS-FIREMICRO DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.132/31; } family inet6 { address 2804:11dc:10:385::1/126; } } unit 387 { vlan-id 387; family inet { mtu 1500; filter { output-list [ DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.144/31; } family inet6 { address 2804:11dc:10:387::1/126; } } unit 388 { description CLI_IP-NEOLINK-LAB_VBD; vlan-id 388; family inet { address 177.91.162.252/31; } family inet6 { address 2804:11dc:c0:388::1/126; } } inactive: unit 389 { description CLI_IP-ATPLUS-ALGAR_VL389; vlan-id 389; family inet { mtu 1500; address 177.91.163.198/31; } family inet6 { address 2804:11dc:10:389::1/126; } } unit 390 { description CLI_IP-UNE-COLO_VL390; vlan-id 390; family inet { filter { output-list [ DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 100.89.253.73/29; } family inet6 { address 2804:11dc:40c0:390::1/126; } } unit 393 { description CLI_IP-ROS-ENET_VL393; vlan-id 393; family inet { filter { output-list [ DDOS-ROS DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.246/31; } family inet6 { address 2804:11dc:c0:393::1/126; } } unit 394 { description CLI_IP-FLORESTAWII-HENET_VL394; vlan-id 394; family inet { mtu 1500; filter { output-list [ DDOS-FLORESTAWII DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.22/31; } family inet6 { address 2804:11dc:c0:394::1/126; } } unit 602 { description CLI_IP-ADAPTLINK; vlan-id 602; family inet { address 177.91.163.84/31; } family inet6 { address 2804:11dc:10:602::1/126; } } unit 621 { apply-groups TEMPLATE-INTERFACE-WAN; description WAN_IP-DURAND-PIXENET_VL621; vlan-id 621; family inet { address 177.91.162.240/31; } family inet6 { address 2804:11dc:4010:621::1/126; } } unit 637 { apply-groups TEMPLATE-INTERFACE-WAN; description WAN_IP-DURAND-VD_VL637; vlan-id 637; family inet { address 177.91.162.242/31; } family inet6 { address 2804:11dc:4010:637::1/126; } } unit 647 { description CORE_IP-SPO0-DURAND_VL647; vlan-id 647; family inet { unnumbered-address lo0.0 preferred-source-address 177.91.162.0; } } unit 648 { description CORE_IP-SPO0_DURAND; vlan-id 648; family inet; family inet6 { address 2804:11dc:14:648::2/126; } } unit 650 { apply-groups TEMPLATE-INTERFACE-WAN; description WAN_IP-DURAND-FLYS_VD_VL650; vlan-id 650; family inet { policer { arp limite_arp_ptt-sp; } address 189.1.35.21/31; } family inet6 { address 2804:3e8:0:3b::2/126; } } unit 659 { disable; description WAN_DDOS-DURAND-ARBOR; vlan-id 659; family inet { address 172.16.200.50/30; } } unit 667 { description TESTE-JUPITER; vlan-id 667; family inet { address 177.91.162.225/29; } } unit 676 { apply-groups TEMPLATE-INTERFACE-WAN; description WAN_IP-DECIX-NY_VL676; vlan-id 676; family inet { policer { arp limite_arp_decix; } address 206.82.104.229/22; } family inet6 { address 2001:504:36:0:4:514:0:1/64; } } unit 710 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 710; } unit 711 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 711; } unit 712 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 712; } unit 713 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 713; } unit 732 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 732; } unit 889 { vlan-id 889; } unit 918 { description CLI_IP-ULTRANET-ENET_918; vlan-id 918; family inet { mtu 1500; filter { output-list [ DDOS-ULTRANET DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.66/31; } family inet6 { address 2804:11dc:c0:918::1/126; } } unit 922 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 922; } unit 923 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 923; } unit 924 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 924; } unit 925 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 925; } inactive: unit 972 { description TESTE_MPLS_IRANET; vlan-id 972; family inet { address 10.255.108.1/30; } } unit 985 { description WAN_PTT-IXBR_PR-VBD_ALT_V4_VL985; vlan-id 985; family inet { policer { arp limite_arp_ptt-sp; } address 45.184.146.19/23; } } unit 986 { description WAN_PTT-IXBR_PR-VBD_ALT_V6_VL986; vlan-id 986; family inet6 { nd6-stale-time 14400; address 2001:12f8:0:4::19/64; } } unit 1009 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 1009; } unit 1013 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 1013; } unit 1150 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 1150; } unit 1151 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 1151; } unit 1202 { description CLI_VLAN-ULTRANET-FOR_VL1202; vlan-id 1202; family inet { address 138.36.167.64/31; } } unit 1236 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 1236; } unit 1322 { description CLI_IP-EMITEL-PIXENET_VL1322; vlan-id 1322; family inet { mtu 1500; address 177.91.163.112/31; } family inet6 { address 2804:11dc:c0:1322::1/126; } } unit 1500 { description CLI_CORP-MOVETRULY-VBD_1511_R7; vlan-id 1500; family inet { address 177.91.162.254/31; } } unit 1522 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 1522; } unit 1523 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 1523; } unit 1659 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 1659; } unit 1670 { apply-groups TEMPLATE-INTERFACE-WAN; description WAN_IP-SPARKLE-PIXENET_VL1670; vlan-id 1670; family inet { mtu 1500; address 89.221.42.205/31; } family inet6 { mtu 1500; address 2001:41a8:5200:2::212/126; } } unit 1688 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 1688; } unit 1692 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 1692; } unit 1708 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 1708; } unit 1709 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 1709; } unit 1710 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 1710; } unit 1711 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 1711; } unit 1736 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 1736; } unit 1737 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 1737; } unit 1750 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 1750; } unit 1751 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 1751; } unit 1770 { apply-groups TEMPLATE-INTERFACE-WAN; description WAN_IP-TELXIUS-PIXENET_VL1770; vlan-id 1770; family inet { address 213.140.51.163/31; } family inet6 { address 2001:1498:1:966:1:0:0:992/124; } } unit 1996 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 1996; } unit 2004 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2004; } unit 2006 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2006; } unit 2094 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2094; } unit 2096 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2096; } unit 2164 { description CLI_IP-SONIK-PIXALGAR_VL2164; vlan-id 2164; family inet { mtu 1500; address 177.91.163.56/31; } family inet6 { mtu 1500; address 2804:11dc:10:2164::1/126; } } unit 2215 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2215; } unit 2216 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2216; } unit 2217 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2217; } unit 2218 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2218; } unit 2221 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2221; } unit 2222 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2222; } unit 2236 { description WAN_PTT-IXBR_CE-VBD_V4_VL2236; vlan-id 2236; family inet { policer { arp limite_arp_ptt-sp; } address 45.68.72.146/21; } } unit 2237 { description WAN_PTT-IXBR_CE-VBD_V6_VL2237; vlan-id 2237; family inet6 { nd6-stale-time 14400; address 2001:12f8:0:9::146/64; } } unit 2326 { description CLI_IP-UNE-PIXSP4_VL2326; vlan-id 2326; family inet { address 177.91.163.38/31; } family inet6 { address 2804:11dc:c0:2326::1/126; } } unit 2452 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2452; } unit 2453 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2453; } unit 2460 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2460; } unit 2461 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2461; } unit 2478 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2478; } unit 2479 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2479; } unit 2480 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2480; } unit 2481 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2481; } unit 2521 { description WAN_DDOS-DURAND-VL2521; vlan-id 2521; family inet { address 172.17.16.7/31; } } inactive: unit 2536 { description CLI_IP-VELOZESMG-PIXENET_VL2536; vlan-id 2536; family inet { mtu 1500; address 177.91.163.210/31; } family inet6 { address 2804:11dc:4010:2536::1/126; } } unit 2562 { apply-groups TEMPLATE-INTERFACE-MPLS; description CORE_IP-SPO4_DURAND; vlan-id 2562; family inet { address 100.91.0.200/31; } family inet6 { address 2804:11dc:4000:2562::1/126; } } unit 2798 { description CLI_IP-NEOLINK-PIXENET_VL2798; vlan-id 2798; family inet { mtu 1500; filter { output-list [ DDOS-NEOLINK DDOS-BASICO DDOS-AVANCADO DDOS-ACCEPT ]; } address 177.91.163.24/31; address 172.25.10.5/30; } family inet6 { address 2804:11dc:c0:2798::1/126; } } unit 2868 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2868; } unit 2955 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2955; } unit 2956 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2956; } unit 2972 { description WAN_PTT-IXBR_SP-VBD_V4_VL2972; vlan-id 2972; family inet { policer { arp limite_arp_ptt-sp; } address 187.16.219.181/20; } family inet6; } unit 2973 { description WAN_PTT-IXBR_SP-VBD_V6_VL2973; vlan-id 2973; family inet6 { nd6-stale-time 14400; address 2001:12f8::219:181/64; } } unit 2976 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2976; } unit 2977 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 2977; } unit 3283 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3283; } unit 3284 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3284; } unit 3376 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3376; } unit 3377 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3377; } unit 3380 { vlan-id 3380; } unit 3543 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3543; } unit 3544 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3544; } unit 3674 { apply-groups TEMPLATE-INTERFACE-WAN; description WAN_IP-CDNSTAR-VL3674; vlan-id 3674; family inet { mtu 1500; address 172.16.0.31/31; } family inet6 { mtu 1500; address fc00:8780:1::31/127; } } unit 3728 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3728; } unit 3729 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3729; } unit 3738 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3738; } unit 3739 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3739; } unit 3746 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3746; } unit 3747 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3747; } unit 3754 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3754; } unit 3755 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3755; } unit 3756 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3756; } unit 3757 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3757; } inactive: unit 3900 { description CLI_TEST-FLORESTAWII-HENET_VL3900; vlan-id 3900; family inet { mtu 1500; filter { input RPM-FLORESTAWII; } address 10.40.40.4/29; } } unit 3925 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3925; } unit 3926 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3926; } unit 3927 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3927; } unit 3928 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3928; } unit 3945 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3945; } unit 3946 { apply-groups-except TEMPLATE-INTERFACE-L3; encapsulation vlan-bridge; vlan-id 3946; } unit 10010 { apply-groups TEMPLATE-INTERFACE-MPLS; description CORE_IP-COT_DIR_VL60; vlan-tags outer 60 inner 100; family inet { address 100.91.0.20/31; } } unit 10011 { description CORE_PEER-COT_DIR_VL60; vlan-tags outer 60 inner 200; family inet { address 100.91.1.20/31; } } unit 10020 { apply-groups TEMPLATE-INTERFACE-MPLS; description CORE_IP-SP2-DCI_VIA_COT_VL64; vlan-tags outer 63 inner 100; family inet { address 100.91.0.22/31; } } unit 10023 { description CORE_PEER-SP2-DCI_VIA_COT_VL64; vlan-tags outer 63 inner 201; family inet { address 100.91.1.22/31; } } unit 10040 { apply-groups TEMPLATE-INTERFACE-MPLS; description CORE_IP-SP4-DCI_VIA_COT_VL64; vlan-tags outer 64 inner 100; family inet { address 100.91.0.24/31; } } unit 10041 { apply-groups TEMPLATE-INTERFACE-MPLS; description CORE_PEER-SP4-DCI_VIA_COT_VL64; vlan-tags outer 64 inner 200; family inet { address 100.91.1.24/31; } } unit 10043 { description CORE_PEER-SP4_MX204-1-DCI_VIA_COT_VL64; vlan-tags outer 64 inner 201; family inet { address 100.91.1.32/31; } } unit 10045 { description CORE_PEER-SP4-DCI_VIA_COT_VL64; vlan-tags outer 64 inner 202; family inet { filter { group 1; } address 100.91.1.40/31; } } unit 10080 { apply-groups TEMPLATE-INTERFACE-MPLS; description CORE_IP-ASC-DCI_VIA_LAP_VL56; vlan-tags outer 56 inner 100; family inet { address 100.91.0.32/31; } } unit 11010 { apply-groups TEMPLATE-INTERFACE-MPLS; description CORE_IP-COT-DCI_VIA_LAP; vlan-tags outer 50 inner 100; family inet { address 100.91.0.120/31; } } unit 11011 { description CORE_PEER-COT-DCI_VIA_LAP; vlan-tags outer 50 inner 200; family inet { address 100.91.1.120/31; } } unit 11020 { apply-groups TEMPLATE-INTERFACE-MPLS; description CORE_IP-SP2-DCI_VIA_LAP_VL53; vlan-tags outer 53 inner 100; family inet { address 100.91.0.122/31; } } unit 11023 { description CORE_PEER-SP2-DCI_VIA_LAP_VL53; vlan-tags outer 53 inner 201; family inet { address 100.91.1.122/31; } } unit 11040 { apply-groups TEMPLATE-INTERFACE-MPLS; description CORE_IP-SP4-DCI_VIA_LAP_VL54; vlan-tags outer 54 inner 100; family inet { address 100.91.0.124/31; } } unit 11041 { apply-groups TEMPLATE-INTERFACE-MPLS; description CORE_PEER-SP4-DCI_VIA_LAP_VL54; vlan-tags outer 54 inner 200; family inet { address 100.91.1.124/31; } } unit 11043 { description CORE_PEER-SP4_MX204-1-DCI_VIA_LAP_VL54; vlan-tags outer 54 inner 201; family inet { address 100.91.1.132/31; } } unit 11045 { description CORE_PEER-SP4-DCI_VIA_LAP_VL54; vlan-tags outer 54 inner 202; family inet { filter { group 1; } address 100.91.1.140/31; } } unit 11080 { apply-groups TEMPLATE-INTERFACE-MPLS; description CORE_IP-ASC-DCI_VIA_COT_VL66; vlan-tags outer 66 inner 100; family inet { address 100.91.0.132/31; } } } fxp0 { unit 0 { family inet { address 100.91.240.2/26; } } } irb { unit 40 { description WANGUARD; family inet { address 100.91.8.1/29; } mac 18:2a:d3:d4:6d:f0; } unit 200 { family inet { rpf-check; address 177.91.163.99/29 { vrrp-group 0 { virtual-address 177.91.163.97; priority 20; accept-data; } vrrp-group 1 { virtual-address 177.91.163.98; priority 20; accept-data; } } } family inet6 { address 2804:11dc:0:200::99/64; } } unit 1659 { disable; description CORE_IP-SPO4-PTT; bandwidth 50g; family inet { address 138.36.164.52/31; } family inet6 { address 2804:11dc:4000:1659::1/126; } mac 54:e0:32:cf:a6:c0; } unit 1688 { description CORE_IP-SPO_LUM-PTT; family inet { address 177.91.162.34/31; } family inet6 { address 2804:11dc:14:1688::2/126; } mac 54:e0:32:cf:a6:c0; } unit 2868 { description CORE_IP-SPO2-IP; family inet { address 177.91.162.48/31; } family inet6 { address 2804:11dc:14:2868::1/126; } mac 54:e0:32:cf:a6:c0; } } lo0 { unit 0 { family inet { filter { input-list [ accept-common-services accept-bgp accept-ospf accept-bfd accept-ldp-rsvp accept-established accept-dhcp accept-vrrp discard-all ]; } address 177.91.162.0/32 { primary; preferred; } address 177.91.162.177/32; } family inet6 { filter { input-list [ v6-accept-bgp v6-discard-bgp v6-accept-all ]; } address 2804:11dc::/128 { primary; preferred; } address 2804:11dc:c1::1/128; } family mpls; } unit 1 { family inet { address 100.91.162.0/32; } family inet6 { address 2804:11dc:0000::1/128; } } } } snmp { location "SPO0-VERBO DIVINO"; contact "NOC Open X "; filter-interfaces { interfaces { "et-[0-9]/[0-9]/[0-9]+\.[0-9]+"; } } stats-cache-lifetime 4; filter-duplicates; client-list openx0 { 54.207.12.38/32; 177.91.160.0/24; 177.91.162.0/24; 177.91.163.96/29; 138.36.164.32/28; } community Op3nX { authorization read-only; client-list-name openx0; } community k3nt1k { clients { 209.50.158.0/23; } } routing-instance-access { access-list { *; } } } forwarding-options { sampling { instance { OX-WANGUARD { input { rate 16000; run-length 0; max-packets-per-second 65535; } family inet { output { flow-inactive-timeout 15; flow-active-timeout 60; flow-server 138.36.164.36 { port 2055; autonomous-system-type origin; no-local-dump; version-ipfix { template { ipv4; } } } flow-server 138.36.164.38 { port 1620; autonomous-system-type origin; no-local-dump; version-ipfix { template { ipv4; } } } inactive: flow-server 177.91.162.73 { port 2055; autonomous-system-type origin; no-local-dump; version-ipfix { template { ipv4; } } } flow-server 208.76.14.254 { port 20013; autonomous-system-type origin; no-local-dump; version-ipfix { template { ipv4; } } } inline-jflow { source-address 177.91.162.0; flow-export-rate 3200; } } } family inet6 { output { flow-server 138.36.164.38 { port 1620; autonomous-system-type origin; no-local-dump; version-ipfix { template { ipv6; } } } flow-server 177.91.162.73 { port 2055; autonomous-system-type origin; no-local-dump; version-ipfix { template { ipv6; } } } flow-server 208.76.14.254 { port 20013; autonomous-system-type origin; no-local-dump; version-ipfix { template { ipv6; } } } inline-jflow { source-address 177.91.162.0; } } } } } } port-mirroring { instance { WANGUARD-SP4 { input { rate 1; run-length 1; } family inet { output { interface ae2.41 { next-hop 100.91.255.250; } no-filter-check; } } } KENTIK-MONITOR-DNS { input { rate 1; run-length 1; } family inet { output { interface ae2.10 { next-hop 177.91.162.78; } no-filter-check; } } } } } } policy-options { prefix-list router-ipv4 { apply-path "interfaces <*> unit <*> family inet address <*>"; } prefix-list bgp-neighbors { apply-path "protocols bgp group <*> neighbor <*>"; } prefix-list ospf { 138.36.164.0/32; 138.36.164.1/32; 138.36.164.2/32; 138.36.164.3/32; 177.91.160.0/32; 177.91.160.1/32; 224.0.0.5/32; 224.0.0.6/32; } prefix-list rfc1918 { 10.0.0.0/8; 172.16.0.0/12; 192.168.0.0/16; } prefix-list rip { 224.0.0.9/32; } prefix-list vrrp { 224.0.0.18/32; } prefix-list multicast-all-routers { 224.0.0.2/32; } prefix-list router-ipv4-logical-systems { apply-path "logical-systems <*> interfaces <*> unit <*> family inet address <*>"; } prefix-list bgp-neighbors-logical-systems { apply-path "logical-systems <*> protocols bgp group <*> neighbor <*>"; } prefix-list radius-servers { apply-path "system radius-server <*>"; } prefix-list tacas-servers { apply-path "system tacplus-server <*>"; } prefix-list ntp-server { apply-path "system ntp server <*>"; } prefix-list snmp-client-lists { apply-path "snmp client-list <*> <*>"; } prefix-list snmp-community-clients { apply-path "snmp community <*> clients <*>"; } prefix-list localhost { 127.0.0.1/32; } prefix-list ntp-server-peers { apply-path "system ntp peer <*>"; } prefix-list dns-servers { apply-path "system name-server <*>"; } prefix-list gerencia_openx { 54.207.12.38/32; 100.91.240.0/24; 138.36.164.35/32; 177.91.160.0/24; 177.91.162.0/24; 177.91.163.96/29; 177.185.240.209/32; 187.85.152.42/32; 200.194.178.0/24; } prefix-list KENTIK-NOSEND { 0.0.0.0/0; } prefix-list PREFIXOS-EMITEL { apply-path "logical-systems OX-SPO0-DDOS policy-options policy-statement CLI-EMITEL term V4 from route-filter <*>"; } prefix-list DNS-PUBLIC-RESOLVER { 1.0.0.1/32; 1.1.1.1/32; 8.8.4.4/32; 8.8.8.8/32; 9.9.9.9/32; 9.9.9.11/32; 149.112.112.11/32; 149.112.112.112/32; 177.91.160.99/32; 177.91.160.100/32; 208.67.220.220/32; 208.67.222.222/32; } prefix-list NTP-PUBLIC { 17.253.110.125/32; 20.124.240.168/32; 40.119.6.228/32; 91.189.91.157/32; 91.189.94.4/32; 129.6.15.28/32; 129.6.15.29/32; 132.163.96.1/32; 132.163.96.2/32; 132.163.96.3/32; 132.163.96.4/32; 132.163.96.6/32; 132.163.97.1/32; 132.163.97.2/32; 132.163.97.3/32; 132.163.97.4/32; 132.163.97.6/32; 138.36.164.35/32; 162.159.200.1/32; 162.159.200.123/32; 177.91.160.90/32; 177.91.162.90/32; 185.125.190.56/32; 185.125.190.57/32; 185.125.190.58/32; 192.5.41.40/32; 192.5.41.41/32; 200.189.40.8/32; 216.239.35.0/32; 216.239.35.4/32; 216.239.35.8/32; 216.239.35.12/32; } prefix-list GRE-EXCEPT { 1.1.1.1/32; 162.159.67.228/32; 172.64.243.228/32; } prefix-list CLI-MEGATELECOM-V4 { 8.14.224.0/19; 12.22.166.0/23; 12.68.241.0/24; 12.96.160.0/21; 12.196.101.0/24; 14.0.32.0/19; 14.128.0.0/22; 23.2.84.0/22; 23.3.16.0/20; 23.14.82.0/23; 23.14.96.0/19; 23.43.40.0/22; 23.56.188.0/22; 23.78.140.0/23; 23.91.120.0/21; 23.147.112.0/24; 23.192.161.0/24; 23.193.172.0/24; 23.194.208.0/23; 23.204.128.0/22; 23.209.224.0/19; 23.212.5.0/24; 23.219.166.0/23; 23.246.192.0/19; 23.246.224.0/20; 38.7.130.0/24; 38.10.136.0/22; 38.22.228.0/23; 38.29.208.0/22; 38.52.132.0/22; 38.56.68.0/23; 38.65.144.0/23; 38.65.146.0/23; 38.65.148.0/22; 38.65.152.0/24; 38.65.160.0/24; 38.65.193.0/24; 38.89.100.0/23; 38.120.32.0/19; 38.123.193.0/24; 38.123.194.0/24; 38.123.208.0/22; 38.123.224.0/23; 38.126.234.0/23; 38.126.236.0/23; 38.126.240.0/22; 38.126.248.0/21; 38.156.70.0/23; 38.156.90.0/24; 38.250.197.0/24; 45.4.44.0/22; 45.4.72.0/22; 45.4.232.0/22; 45.6.60.0/22; 45.6.140.0/22; 45.6.160.0/22; 45.71.11.0/24; 45.71.160.0/22; 45.71.212.0/23; 45.161.192.0/22; 45.162.8.0/22; 45.162.44.0/22; 45.162.202.0/23; 45.163.68.0/22; 45.163.84.0/22; 45.165.188.0/22; 45.166.180.0/22; 45.166.216.0/22; 45.167.52.0/22; 45.169.12.0/22; 45.169.136.0/22; 45.170.96.0/22; 45.170.239.0/24; 45.171.116.0/23; 45.171.152.0/22; 45.172.192.0/22; 45.173.46.0/24; 45.173.160.0/23; 45.174.88.0/22; 45.174.124.0/22; 45.174.140.0/22; 45.174.180.0/22; 45.174.196.0/22; 45.175.188.0/22; 45.177.36.0/22; 45.178.152.0/22; 45.178.208.0/22; 45.178.224.0/23; 45.178.232.0/22; 45.179.40.0/22; 45.179.48.0/22; 45.179.52.0/23; 45.180.244.0/22; 45.182.196.0/22; 45.183.32.0/22; 45.183.80.0/22; 45.184.196.0/22; 45.185.0.0/22; 45.185.28.0/23; 45.185.240.0/22; 45.186.172.0/22; 45.187.120.0/22; 45.188.79.0/24; 45.188.240.0/22; 45.189.248.0/22; 45.190.232.0/22; 45.191.60.0/22; 45.191.68.0/22; 45.191.132.0/22; 45.191.152.0/22; 45.224.72.0/22; 45.224.120.0/22; 45.225.108.0/22; 45.226.24.0/22; 45.226.148.0/22; 45.227.112.0/22; 45.229.52.0/22; 45.230.172.0/22; 45.231.6.0/23; 45.231.132.0/22; 45.231.152.0/22; 45.231.172.0/22; 45.232.232.0/22; 45.233.82.0/23; 45.233.172.0/22; 45.234.96.0/22; 45.234.192.0/22; 45.234.204.0/22; 45.235.180.0/22; 45.235.208.0/22; 45.236.72.0/22; 45.236.108.0/22; 45.236.122.0/23; 45.236.208.0/22; 45.237.60.0/22; 45.237.144.0/22; 45.238.116.0/22; 45.238.232.0/22; 45.238.244.0/22; 45.239.156.0/22; 50.22.0.0/17; 50.22.128.0/18; 50.23.0.0/16; 50.97.16.0/23; 50.97.32.0/19; 50.97.64.0/18; 50.97.128.0/17; 61.110.216.0/21; 63.95.128.0/19; 63.96.221.0/24; 63.141.128.0/21; 63.141.144.0/22; 63.141.148.0/23; 63.142.0.0/20; 63.215.188.0/22; 63.246.225.0/24; 63.246.226.0/24; 63.246.231.0/24; 64.68.208.0/20; 64.136.144.0/20; 64.179.176.0/20; 65.39.96.0/19; 65.77.23.0/24; 65.127.140.0/22; 66.33.62.0/23; 66.114.48.0/20; 66.192.13.0/24; 66.194.11.0/24; 66.207.175.0/24; 66.208.112.0/20; 67.17.232.0/21; 67.67.43.0/24; 67.72.21.0/24; 67.211.110.0/24; 68.64.200.0/23; 68.64.224.0/20; 69.1.238.0/24; 69.7.136.0/24; 69.26.128.0/22; 69.26.136.0/22; 69.26.152.0/21; 69.71.130.0/23; 70.243.50.0/24; 76.77.20.0/22; 76.77.24.0/23; 87.252.0.0/15; 91.194.204.0/23; 91.202.200.0/22; 93.188.128.0/21; 103.4.200.0/22; 104.37.58.0/24; 104.93.128.0/19; 104.94.206.0/23; 104.95.16.0/22; 104.124.0.0/24; 104.132.0.0/15; 104.134.240.0/20; 104.135.160.0/23; 104.135.162.0/24; 104.135.165.0/24; 104.135.166.0/24; 104.135.170.0/24; 113.197.106.0/23; 118.107.170.0/23; 119.31.248.0/22; 119.31.252.0/23; 119.31.255.0/24; 128.36.11.0/24; 128.201.140.0/22; 130.250.199.0/24; 131.72.80.0/22; 131.72.212.0/22; 131.72.228.0/22; 131.72.244.0/22; 131.72.252.0/22; 131.100.104.0/22; 131.100.212.0/22; 131.108.184.0/22; 131.161.28.0/22; 131.161.244.0/22; 131.178.0.0/16; 131.221.100.0/22; 131.221.108.0/22; 131.221.172.0/22; 131.221.208.0/22; 132.254.32.0/20; 132.254.48.0/21; 132.254.64.0/21; 132.254.144.0/21; 132.254.192.0/19; 132.254.232.0/24; 132.255.188.0/22; 137.118.224.0/22; 138.0.28.0/22; 138.0.96.0/22; 138.36.152.0/22; 138.43.0.0/20; 138.43.26.0/24; 138.43.28.0/22; 138.59.84.0/22; 138.97.116.0/22; 138.97.168.0/22; 138.97.240.0/22; 138.108.32.0/23; 138.117.60.0/22; 138.117.224.0/22; 138.118.88.0/22; 138.121.8.0/22; 138.121.196.0/22; 138.121.244.0/22; 138.121.248.0/22; 138.122.176.0/22; 138.185.0.0/22; 138.185.180.0/22; 138.185.224.0/22; 138.186.28.0/22; 138.186.184.0/22; 138.186.200.0/22; 138.204.124.0/22; 138.219.36.0/22; 138.219.220.0/22; 138.255.132.0/22; 138.255.148.0/22; 140.148.0.0/17; 140.148.200.0/21; 143.0.128.0/22; 143.0.204.0/22; 143.0.220.0/22; 143.0.240.0/22; 143.137.108.0/22; 143.202.76.0/22; 143.202.78.192/28; 143.202.212.0/22; 143.255.12.0/22; 143.255.56.0/22; 148.52.45.0/24; 148.188.162.0/23; 148.188.172.0/24; 148.201.0.0/16; 148.204.0.0/14; 148.208.0.0/15; 148.210.0.0/15; 148.212.0.0/14; 148.216.0.0/16; 148.220.0.0/16; 148.224.0.0/14; 148.228.0.0/14; 148.232.0.0/16; 148.235.13.0/24; 148.236.0.0/14; 148.240.0.0/13; 148.248.0.0/15; 148.250.0.0/16; 151.249.88.0/21; 155.177.174.0/24; 157.240.155.0/24; 158.116.112.0/24; 158.116.114.0/24; 158.122.7.0/24; 158.122.10.0/24; 158.122.32.0/24; 158.122.35.0/24; 158.122.37.0/24; 158.122.88.0/22; 158.122.92.0/22; 159.16.0.0/16; 161.199.190.0/24; 162.126.201.0/24; 165.193.0.0/24; 166.0.148.0/23; 167.94.168.0/24; 167.94.222.0/24; 167.94.226.0/24; 167.216.0.0/16; 167.228.37.0/24; 167.228.70.0/24; 167.228.85.0/24; 167.246.224.0/24; 167.249.116.0/22; 167.250.32.0/20; 168.0.220.0/22; 168.90.68.0/22; 168.90.116.0/22; 168.121.124.0/22; 168.121.142.0/23; 168.121.245.0/24; 168.165.0.0/16; 168.181.36.0/22; 168.181.76.0/22; 168.181.92.0/22; 168.194.0.0/22; 168.194.88.0/22; 168.195.104.0/22; 168.196.160.0/22; 168.197.148.0/22; 168.205.196.0/22; 168.205.248.0/22; 168.215.213.0/24; 168.216.1.0/24; 168.221.240.0/22; 168.227.92.0/22; 168.228.8.0/22; 168.228.40.0/22; 168.228.160.0/22; 168.232.4.0/22; 168.232.8.0/22; 168.243.31.0/24; 168.255.0.0/16; 169.153.135.0/24; 170.0.0.0/22; 170.0.192.0/22; 170.0.216.0/22; 170.0.224.0/21; 170.25.0.0/16; 170.51.255.0/24; 170.54.8.0/23; 170.54.38.0/23; 170.54.58.0/23; 170.54.61.0/24; 170.54.72.0/24; 170.54.88.0/24; 170.54.108.0/23; 170.54.118.0/23; 170.54.125.0/24; 170.54.126.0/24; 170.54.158.0/23; 170.54.160.0/23; 170.54.198.0/23; 170.54.204.0/23; 170.70.0.0/16; 170.78.8.0/24; 170.78.164.0/22; 170.78.172.0/22; 170.78.232.0/22; 170.79.80.0/22; 170.79.164.0/22; 170.80.236.0/22; 170.81.128.0/22; 170.81.140.0/22; 170.150.12.0/22; 170.150.160.0/22; 170.150.208.0/22; 170.169.0.0/16; 170.233.32.0/22; 170.238.160.0/22; 170.238.172.0/22; 170.239.92.0/22; 170.244.0.0/22; 170.244.8.0/22; 170.244.152.0/22; 170.245.8.0/22; 170.245.172.0/22; 170.246.108.0/22; 170.246.168.0/22; 170.247.224.0/22; 170.247.236.0/22; 170.254.144.0/22; 170.254.208.0/22; 174.35.0.0/17; 175.41.0.0/20; 177.11.8.0/21; 177.11.176.0/21; 177.23.0.0/21; 177.36.64.0/22; 177.36.128.0/19; 177.38.200.0/21; 177.39.160.0/21; 177.47.80.0/21; 177.47.128.0/20; 177.47.240.0/20; 177.52.192.0/21; 177.53.128.0/21; 177.53.180.0/22; 177.66.0.0/22; 177.66.248.0/21; 177.67.32.0/21; 177.70.244.0/23; 177.71.16.0/21; 177.71.128.0/17; 177.72.128.0/20; 177.72.148.0/23; 177.72.240.0/21; 177.73.40.0/22; 177.74.152.0/21; 177.84.184.0/21; 177.84.240.0/21; 177.85.160.0/22; 177.85.239.0/24; 177.86.16.0/21; 177.86.48.0/21; 177.86.136.0/22; 177.86.152.0/22; 177.107.192.0/20; 177.107.224.0/20; 177.107.240.0/20; 177.124.140.0/22; 177.125.0.0/21; 177.125.102.0/24; 177.125.184.0/21; 177.126.0.0/24; 177.126.2.0/23; 177.126.4.0/23; 177.126.7.0/24; 177.126.9.0/24; 177.126.12.0/24; 177.126.14.0/24; 177.128.48.0/22; 177.129.80.0/21; 177.129.232.0/21; 177.131.32.0/20; 177.136.84.0/22; 177.152.120.0/22; 177.152.128.0/20; 177.155.246.0/24; 177.190.240.0/22; 177.221.142.0/23; 177.223.0.0/20; 177.223.156.0/22; 177.224.0.0/13; 177.232.0.0/15; 177.234.0.0/17; 177.236.0.0/14; 177.240.0.0/13; 177.248.0.0/15; 179.0.36.0/22; 179.0.120.0/22; 179.42.141.0/24; 179.48.28.0/22; 179.51.252.0/22; 179.63.112.0/22; 179.63.128.0/22; 179.107.48.0/21; 179.124.192.0/22; 179.127.112.0/22; 181.174.212.0/22; 181.224.8.0/22; 181.224.40.0/22; 181.224.48.0/22; 181.233.188.0/22; 185.37.0.0/23; 185.170.160.0/22; 186.26.84.0/22; 186.194.4.0/22; 186.194.32.0/20; 186.194.48.0/20; 186.194.140.0/22; 186.208.176.0/20; 186.209.120.0/22; 186.216.0.0/18; 186.224.192.0/19; 186.227.160.0/20; 186.237.32.0/20; 186.237.96.0/22; 186.237.128.0/20; 186.250.140.0/22; 186.251.92.0/22; 187.0.168.0/21; 187.16.128.0/20; 187.16.144.0/20; 187.33.96.0/20; 187.33.112.0/20; 187.45.48.0/20; 187.49.164.0/22; 187.62.224.0/19; 187.63.0.0/20; 187.63.120.0/22; 187.84.32.0/20; 187.84.128.0/20; 187.94.112.0/20; 187.102.212.0/22; 187.102.232.0/22; 187.120.0.0/21; 187.120.8.0/22; 187.120.13.0/24; 187.120.14.0/23; 187.120.208.0/20; 187.160.0.0/15; 187.162.0.0/15; 187.164.0.0/14; 187.176.0.0/14; 187.184.0.0/14; 187.188.0.0/15; 187.191.0.0/18; 187.240.0.0/13; 187.249.0.0/16; 187.251.0.0/19; 187.252.0.0/15; 187.254.0.0/16; 189.1.48.0/20; 189.38.112.0/20; 189.39.180.0/22; 189.39.208.0/21; 189.39.220.0/22; 189.39.240.0/20; 189.50.52.0/22; 189.50.128.0/20; 189.84.240.0/20; 189.85.104.0/22; 189.90.0.0/20; 189.127.48.0/20; 189.192.0.0/11; 189.208.191.24/29; 189.211.251.128/25; 189.211.252.0/26; 189.215.135.0/27; 189.215.136.0/27; 189.221.163.0/26; 190.3.160.0/21; 190.9.48.0/21; 190.9.84.0/22; 190.9.88.0/22; 190.9.116.0/22; 190.11.216.0/21; 190.12.140.0/22; 190.83.0.0/23; 190.89.20.0/22; 190.89.140.0/22; 190.109.68.0/22; 190.115.208.0/22; 190.120.236.0/22; 190.180.160.0/19; 191.6.164.0/22; 191.7.16.0/22; 191.36.180.0/22; 191.36.237.0/24; 191.37.64.0/22; 191.37.96.0/19; 191.97.80.0/21; 191.240.196.0/22; 191.241.0.0/20; 191.241.176.0/21; 191.242.32.0/20; 191.243.92.0/22; 191.243.240.0/22; 192.8.16.0/20; 192.8.32.0/20; 192.8.48.0/21; 192.8.56.0/22; 192.8.61.0/24; 192.8.62.0/23; 192.8.64.0/18; 192.8.128.0/18; 192.32.64.0/19; 192.34.148.0/22; 192.85.0.0/16; 192.94.29.0/24; 192.100.157.0/24; 192.100.158.0/23; 192.100.162.0/24; 192.100.165.0/24; 192.100.169.0/24; 192.100.188.0/24; 192.100.192.0/19; 192.100.224.0/20; 192.100.240.0/24; 192.101.46.0/23; 192.119.32.0/20; 192.135.185.0/24; 192.138.238.0/24; 192.141.44.0/24; 192.141.184.0/22; 192.148.175.0/24; 192.153.155.0/24; 192.193.204.0/22; 192.193.229.0/24; 192.193.230.0/24; 192.198.233.0/24; 192.198.234.0/23; 192.198.236.0/22; 192.203.177.0/24; 192.249.52.0/22; 193.118.128.0/19; 193.118.192.0/21; 193.118.200.0/22; 193.118.204.0/23; 193.118.206.0/23; 193.118.208.0/22; 193.118.212.0/23; 193.118.214.0/23; 193.118.216.0/22; 193.118.220.0/22; 195.180.190.0/24; 196.3.54.0/23; 199.7.82.0/23; 199.19.100.0/22; 199.60.22.0/24; 199.124.57.0/24; 199.188.136.0/21; 199.195.170.0/23; 200.0.0.0/16; 200.1.64.0/24; 200.1.66.0/24; 200.1.73.0/24; 200.1.88.0/23; 200.1.95.0/24; 200.1.102.0/23; 200.3.244.0/22; 200.4.0.0/21; 200.4.48.0/22; 200.4.56.0/23; 200.4.70.0/23; 200.4.80.0/20; 200.4.128.0/20; 200.5.32.0/21; 200.6.84.0/22; 200.6.92.0/22; 200.9.160.0/22; 200.9.182.0/23; 200.9.184.0/23; 200.9.219.0/24; 200.10.56.0/22; 200.10.200.0/24; 200.10.246.0/23; 200.12.0.0/15; 200.14.18.0/23; 200.16.32.0/19; 200.16.218.0/23; 200.23.0.0/16; 200.33.1.0/24; 200.33.3.0/24; 200.33.6.0/24; 200.33.9.0/24; 200.33.10.0/23; 200.33.12.0/23; 200.33.14.0/24; 200.33.18.0/24; 200.33.48.0/24; 200.33.50.0/24; 200.33.61.0/24; 200.33.65.0/24; 200.33.79.0/24; 200.33.80.0/24; 200.33.86.0/23; 200.33.109.0/24; 200.33.111.0/24; 200.33.119.0/24; 200.33.120.0/24; 200.33.160.0/22; 200.33.169.0/24; 200.33.176.0/24; 200.33.192.0/21; 200.33.200.0/23; 200.33.202.0/24; 200.33.208.0/20; 200.33.224.0/21; 200.33.240.0/22; 200.33.244.0/23; 200.33.249.0/24; 200.34.64.0/19; 200.34.110.0/23; 200.34.134.0/24; 200.34.141.0/24; 200.34.142.0/24; 200.34.152.0/24; 200.34.155.0/24; 200.34.157.0/24; 200.34.169.0/24; 200.34.173.0/24; 200.34.181.0/24; 200.34.182.0/24; 200.34.184.0/24; 200.34.206.0/24; 200.34.210.0/24; 200.34.220.0/24; 200.34.222.0/24; 200.36.96.0/19; 200.36.128.0/19; 200.36.204.0/22; 200.36.224.0/19; 200.38.64.0/18; 200.38.160.0/19; 200.38.224.0/19; 200.39.32.0/19; 200.39.224.0/19; 200.41.149.0/24; 200.47.0.0/17; 200.47.159.0/24; 200.47.178.0/23; 200.47.184.0/24; 200.47.187.0/24; 200.47.188.0/22; 200.47.212.0/24; 200.47.222.0/23; 200.49.76.0/22; 200.49.80.0/22; 200.51.67.0/24; 200.51.71.0/24; 200.51.78.0/24; 200.51.164.0/23; 200.51.180.0/22; 200.51.220.0/22; 200.52.0.0/20; 200.52.32.0/19; 200.52.96.0/20; 200.52.160.0/19; 200.52.192.0/19; 200.53.0.0/19; 200.53.64.0/19; 200.53.112.0/20; 200.53.128.0/18; 200.53.240.0/20; 200.56.0.0/18; 200.56.64.0/19; 200.56.128.0/18; 200.56.192.0/19; 200.56.240.0/20; 200.57.0.0/19; 200.57.32.0/20; 200.57.64.0/19; 200.57.96.0/19; 200.57.192.0/18; 200.61.0.0/16; 200.66.0.0/16; 200.68.159.0/24; 200.73.216.0/21; 200.76.64.0/20; 200.76.192.0/19; 200.76.224.0/20; 200.77.0.0/17; 200.77.128.0/19; 200.77.160.0/20; 200.77.192.0/19; 200.77.224.0/19; 200.78.128.0/17; 200.79.160.0/20; 200.79.176.0/21; 200.79.192.0/18; 200.92.0.0/16; 200.94.0.0/15; 200.123.236.0/22; 200.143.0.0/18; 200.148.192.0/20; 200.150.160.0/22; 200.150.166.0/24; 200.150.168.0/21; 200.152.0.0/19; 200.155.128.0/18; 200.156.155.0/24; 200.156.156.0/24; 200.159.160.0/19; 200.160.160.0/20; 200.169.80.0/20; 200.170.192.0/18; 200.175.0.0/19; 200.175.32.0/20; 200.188.128.0/19; 200.188.208.0/20; 200.194.248.0/21; 200.201.128.0/19; 200.218.228.0/22; 200.218.229.0/24; 200.218.232.0/21; 200.225.0.0/19; 200.236.112.0/20; 200.239.0.0/18; 201.7.164.0/22; 201.20.144.0/20; 201.23.0.0/19; 201.23.64.0/18; 201.33.208.0/20; 201.54.0.0/19; 201.54.224.0/19; 201.55.196.0/22; 201.55.200.0/22; 201.71.4.0/22; 201.71.56.0/22; 201.71.220.0/22; 201.77.100.0/22; 201.87.129.0/24; 201.87.130.0/24; 201.87.132.0/24; 201.87.138.0/24; 201.87.143.0/24; 201.87.145.0/24; 201.87.151.0/24; 201.87.154.0/23; 201.87.156.0/24; 201.87.158.0/23; 201.106.64.0/19; 201.130.0.0/18; 201.130.64.0/20; 201.130.196.0/22; 201.131.0.0/23; 201.131.8.0/23; 201.131.13.0/24; 201.131.14.0/23; 201.131.20.0/22; 201.131.33.0/24; 201.131.36.0/24; 201.131.40.0/24; 201.131.44.0/24; 201.131.56.0/22; 201.131.64.0/24; 201.131.72.0/24; 201.131.100.0/24; 201.131.104.0/23; 201.131.112.0/24; 201.131.116.0/23; 201.131.120.0/24; 201.131.124.0/22; 201.131.128.0/21; 201.131.192.0/21; 201.131.200.0/24; 201.131.204.0/22; 201.131.248.0/23; 201.131.252.0/22; 201.132.0.0/16; 201.139.0.0/18; 201.139.64.0/20; 201.139.96.0/19; 201.139.128.0/19; 201.139.192.0/20; 201.139.208.0/20; 201.139.224.0/19; 201.140.0.0/14; 201.148.128.0/19; 201.148.192.0/20; 201.149.128.0/17; 201.150.0.0/21; 201.150.8.0/22; 201.150.32.0/20; 201.150.64.0/20; 201.150.128.0/20; 201.156.0.0/19; 201.156.32.0/19; 201.156.64.0/18; 201.156.128.0/17; 201.157.31.0/24; 201.157.128.0/18; 201.158.0.0/21; 201.158.16.0/22; 201.158.32.0/20; 201.158.64.0/21; 201.158.72.0/23; 201.158.74.0/23; 201.158.76.0/22; 201.158.80.0/20; 201.158.128.0/18; 201.158.192.0/18; 201.159.0.0/21; 201.159.16.0/21; 201.159.32.0/21; 201.159.40.0/22; 201.159.48.0/22; 201.159.96.0/21; 201.159.104.0/22; 201.159.111.0/24; 201.159.124.0/22; 201.159.128.0/20; 201.159.160.0/21; 201.159.176.0/22; 201.159.192.0/20; 201.159.208.0/21; 201.159.224.0/20; 201.159.240.0/21; 201.160.0.0/16; 201.161.128.0/17; 201.162.0.0/18; 201.164.0.0/15; 201.166.0.0/17; 201.166.192.0/18; 201.167.0.0/16; 201.172.0.0/15; 201.174.0.0/16; 201.175.0.0/19; 201.175.32.0/20; 201.175.64.0/18; 201.175.128.0/17; 201.182.69.0/24; 201.182.164.0/22; 201.182.176.0/22; 201.216.124.0/22; 201.219.248.0/22; 202.72.46.0/23; 204.9.192.0/21; 204.48.136.0/21; 204.80.143.0/24; 204.126.12.0/23; 204.126.140.0/23; 204.145.201.0/24; 204.153.24.0/23; 204.199.206.0/24; 205.184.114.0/24; 205.241.76.0/22; 205.241.80.0/23; 206.72.64.0/20; 206.72.80.0/21; 206.72.88.0/22; 206.122.0.0/16; 206.128.64.0/20; 206.169.38.0/23; 206.169.46.0/23; 206.169.64.0/24; 206.169.89.0/24; 206.169.206.0/24; 206.190.74.0/24; 206.220.224.0/22; 207.83.192.0/19; 207.114.137.0/24; 207.114.164.0/24; 207.114.177.0/24; 207.181.12.0/23; 207.248.32.0/19; 207.248.80.0/24; 207.248.105.0/24; 207.248.107.0/24; 207.248.116.0/23; 207.248.160.0/19; 207.249.0.0/19; 207.249.64.0/18; 207.249.128.0/18; 207.249.192.0/18; 208.2.186.0/24; 208.3.185.0/24; 208.47.103.0/24; 208.80.248.0/23; 208.80.251.0/24; 208.101.213.0/24; 208.101.214.0/23; 208.101.216.0/23; 208.101.220.0/23; 208.117.96.0/20; 208.248.243.0/24; 208.248.244.0/24; 209.14.28.0/22; 209.127.5.0/24; 209.127.116.0/24; 209.127.149.0/24; 209.203.84.0/23; 209.203.93.0/24; 209.205.84.0/24; 209.213.48.0/20; 209.213.64.0/24; 209.234.183.0/24; 211.43.144.0/22; 211.43.148.0/23; 211.43.151.0/24; 211.43.152.0/21; 213.225.238.0/24; 214.80.0.0/20; 216.64.185.0/24; 216.118.221.0/24; 216.152.248.0/21; 216.171.64.0/19; 216.194.132.0/23; 216.194.136.0/21; 216.229.50.0/24; 217.147.176.0/21; } prefix-list CLI-MEGATELECOM-V6 { 2001:448::/32; 2001:448:3:300::/60; 2001:1230::/32; 2001:1270::/32; 2001:12b0::/32; 2001:13a8::/48; 2006:201::/32; 2604:d600::/32; 2605:70c0::/32; 2607:fe48::/32; 2620:107:9058::/48; 2801:80:390::/48; 2801:80:4c0::/48; 2801:80:620::/48; 2801:80:2560::/48; 2801:80:3400::/48; 2801:80:3510::/48; 2801:c4:15::/48; 2801:c4:30::/48; 2801:c4:40::/48; 2801:c5:ff::/48; 2801:c5:ffe::/47; 2801:f0:28:101::/64; 2804:e0::/32; 2804:110::/32; 2804:138::/32; 2804:164::/32; 2804:1a0::/32; 2804:368::/32; 2804:3c0::/32; 2804:3d4::/32; 2804:4cc::/32; 2804:560::/32; 2804:618::/32; 2804:68c::/32; 2804:6a4::/32; 2804:6d8::/32; 2804:718::/32; 2804:72c::/32; 2804:7dc::/32; 2804:800::/32; 2804:8c8::/32; 2804:918::/32; 2804:a78::/32; 2804:b3c::/32; 2804:c04::/32; 2804:d68::/32; 2804:f70::/32; 2804:10cc::/32; 2804:112c::/32; 2804:1250::/32; 2804:132c::/32; 2804:14a4::/32; 2804:14d4::/32; 2804:14e4::/32; 2804:165c::/32; 2804:1688::/32; 2804:1728::/32; 2804:1868::/32; 2804:1894::/32; 2804:18c0::/32; 2804:1948::/32; 2804:1964::/32; 2804:1c90::/32; 2804:1cec::/32; 2804:1d50::/32; 2804:1e5c::/32; 2804:1f22::/32; 2804:210c::/32; 2804:2138::/32; 2804:245c::/32; 2804:2474::/32; 2804:247c::/32; 2804:2554::/32; 2804:2620::/32; 2804:2878::/32; 2804:2928::/32; 2804:2990::/32; 2804:2b30::/32; 2804:2b38::/32; 2804:2ef4::/32; 2804:2f48::/32; 2804:2f94::/32; 2804:2fe8::/32; 2804:3020::/32; 2804:3138::/32; 2804:3378::/32; 2804:354c::/32; 2804:3668::/32; 2804:3908::/32; 2804:39b8::/32; 2804:39ec::/32; 2804:3ef4::/32; 2804:4208::/32; 2804:42cc::/32; 2804:4330::/32; 2804:444c::/32; 2804:4488::/32; 2804:448c::/32; 2804:4508::/32; 2804:4588::/32; 2804:45f0::/32; 2804:4618::/32; 2804:46fc::/32; 2804:487c::/32; 2804:493c::/32; 2804:49fc::/32; 2804:4a10::/32; 2804:4a80::/32; 2804:4ac0::/32; 2804:4b60::/32; 2804:4c78::/32; 2804:4c90::/32; 2804:4cec::/32; 2804:4cf4::/32; 2804:4d5c::/32; 2804:4db4::/32; 2804:4de0::/32; 2804:4df8::/32; 2804:4e48::/32; 2804:4ea8::/32; 2804:4eb4::/32; 2804:4f48::/32; 2804:4f60::/32; 2804:4fb4::/32; 2804:4fcc::/32; 2804:4ff0::/32; 2804:51ec::/32; 2804:5220::/32; 2804:52dc::/32; 2804:5308::/32; 2804:5514::/32; 2804:5640::/32; 2804:5654::/32; 2804:56e0::/32; 2804:57d8::/32; 2804:5844::/32; 2804:58e8::/32; 2804:59b8::/32; 2804:5b24::/32; 2804:5b88::/32; 2804:5bbc::/32; 2804:5c98::/32; 2804:5d50::/32; 2804:5e9c::/32; 2804:5ea0::/32; 2804:5ea4::/32; 2804:5ea8::/32; 2804:5ebc::/32; 2804:5ed8::/32; 2804:5f30::/32; 2804:6174::/32; 2804:6200::/32; 2804:62a8::/32; 2804:6328::/32; 2804:6348::/32; 2804:6480::/32; 2804:6550::/32; 2804:65d8::/32; 2804:6678::/32; 2804:6718::/32; 2804:67d8::/32; 2804:680c::/32; 2804:6828::/32; 2804:6838::/32; 2804:683c::/32; 2804:6970::/32; 2804:69a4::/32; 2804:69d4::/32; 2804:69fc::/32; 2804:6a34::/32; 2804:6aa4::/32; 2804:6b54::/32; 2804:6d0c::/32; 2804:6ddc::/32; 2804:6edc::/32; 2804:6ef8::/32; 2804:6f58::/32; 2804:6f60::/32; 2804:6f70::/32; 2804:6fe4::/32; 2804:7008::/32; 2804:7094::/32; 2804:710c::/32; 2804:7134::/32; 2804:71f8::/32; 2804:7230::/32; 2804:7248::/32; 2804:7344::/32; 2804:73a0::/32; 2804:7420::/32; 2804:74fc::/32; 2804:750c::/32; 2804:75b4::/32; 2804:767c::/32; 2804:780c::/32; 2804:7918::/32; 2804:7a00::/32; 2804:7a48::/32; 2804:7b38::/32; 2804:7b50::/32; 2804:7b70::/32; 2804:7c24::/32; 2804:7d18::/32; 2804:7d3c::/32; 2804:7d60::/32; 2804:7dbc::/32; 2804:7de8::/32; 2804:7dfc::/32; 2804:7e0c::/32; 2804:7e20::/32; 2804:7e38::/32; 2804:7e54::/32; 2804:7e90::/32; 2804:7eac::/32; 2804:81f4::/32; 2804:8200::/32; 2804:82ac::/32; 2804:8364::/32; 2804:8374::/32; 2804:8388::/32; 2804:83a8::/32; 2804:8428::/32; 2804:8448::/32; 2804:84c0::/32; 2804:8520::/32; 2804:8584::/32; 2804:86ac::/32; 2804:86c4::/32; 2804:871c::/32; 2804:872c::/32; 2804:8794::/32; 2804:87e8::/32; 2804:8830::/32; 2804:8900::/32; 2804:89f8::/32; 2804:8a34::/32; 2804:8a6c::/32; 2804:8a98::/32; 2804:8ab4::/32; 2804:8b20::/32; 2804:8b2c::/32; 2806:203::/32; 2806:20b:1000::/36; 2806:20c::/31; 2806:210::/32; 2806:213::/32; 2806:21a::/40; 2806:21a:6000::/35; 2806:21a:8000::/34; 2806:21c::/32; 2806:220::/32; 2806:239::/32; 2806:239:205::/64; 2806:250::/32; 2806:260::/32; 2806:2f8::/32; 2806:327::/32; 2806:331::/32; 2806:34b::/32; 2806:3d0::/32; 2a04:2b00:13bb::/48; 2a0b:2900::/32; 2d07:d8f0::/33; 2d07:d8f1::/33; 2d07:d8f2::/33; 2d07:d8f3::/33; } prefix-list ldp-peers { apply-path "protocols ldp neighbor <*>"; } prefix-list CLI-WEBBY-V6 { 2804:2af8::/32; } prefix-list CLI-WEBBY-V4 { 45.6.32.0/22; 45.6.76.0/22; 45.6.184.0/22; 45.70.136.0/22; 45.70.148.0/22; 45.71.248.0/22; 45.160.236.0/22; 45.163.148.0/22; 45.163.188.0/22; 45.166.48.0/22; 45.171.228.0/22; 45.172.64.0/22; 45.172.84.0/22; 45.172.200.0/22; 45.173.124.0/22; 45.173.232.0/22; 45.174.10.0/23; 45.177.112.0/22; 45.178.100.0/22; 45.178.236.0/22; 45.180.72.0/22; 45.182.156.0/22; 45.184.40.0/22; 45.185.96.0/22; 45.186.164.0/22; 45.188.96.0/22; 45.190.112.0/22; 45.190.148.0/22; 45.191.180.0/22; 45.225.4.0/22; 45.226.108.0/22; 45.226.152.0/22; 45.231.240.0/22; 45.232.212.0/22; 45.233.212.0/22; 45.234.204.0/22; 45.238.36.0/22; 45.238.228.0/22; 131.108.228.0/22; 131.196.152.0/22; 131.255.196.0/22; 138.0.32.0/22; 138.0.224.0/22; 138.97.128.0/22; 138.99.88.0/22; 138.117.46.0/23; 138.117.112.0/20; 138.118.120.0/22; 138.122.40.0/22; 138.255.24.0/22; 138.255.216.0/22; 143.0.28.0/22; 143.137.52.0/22; 143.208.60.0/22; 143.208.112.0/22; 143.208.124.0/22; 160.20.204.0/22; 167.249.176.0/22; 168.0.248.0/22; 168.90.228.0/22; 168.121.148.0/22; 168.121.216.0/22; 168.194.60.0/22; 168.194.212.0/22; 168.194.220.0/22; 168.228.156.0/22; 168.228.236.0/22; 168.232.56.0/22; 168.232.224.0/22; 170.2.132.0/22; 170.79.148.0/22; 170.80.216.0/22; 170.81.188.0/22; 170.82.16.0/22; 170.82.132.0/22; 170.83.200.0/22; 170.84.216.0/22; 170.231.188.0/22; 170.238.88.0/22; 170.238.132.0/22; 170.238.140.0/22; 170.239.52.0/22; 170.245.16.0/22; 170.247.124.0/22; 177.8.48.0/21; 177.8.52.0/22; 177.20.160.0/20; 177.46.4.0/23; 177.53.0.0/21; 177.53.8.0/21; 177.53.204.0/22; 177.55.48.0/20; 177.73.104.0/22; 177.73.148.0/22; 177.86.240.0/22; 177.91.120.0/21; 177.105.128.0/20; 177.124.64.0/21; 177.128.56.0/21; 177.128.120.0/22; 177.128.144.0/20; 177.130.96.0/20; 177.131.32.0/20; 177.152.96.0/22; 177.185.144.0/21; 177.190.72.0/21; 177.221.136.0/22; 177.223.96.0/20; 179.0.78.0/24; 179.96.128.0/20; 179.96.144.0/20; 179.97.16.0/21; 179.107.52.0/22; 179.127.64.0/21; 181.192.124.0/22; 181.225.164.0/22; 186.2.248.0/22; 186.208.128.0/20; 186.219.64.0/20; 186.219.232.0/22; 186.224.0.0/20; 186.224.16.0/21; 186.233.120.0/21; 186.233.208.0/21; 186.235.32.0/20; 186.249.240.0/21; 186.251.0.0/21; 187.17.192.0/20; 187.45.128.0/20; 187.73.192.0/20; 187.73.196.0/22; 187.73.200.0/22; 187.73.208.0/20; 187.86.112.0/20; 187.111.112.0/20; 187.121.160.0/20; 189.45.224.0/20; 189.84.48.0/20; 189.90.96.0/20; 189.113.16.0/20; 189.124.0.0/20; 189.124.0.0/21; 189.124.8.0/22; 189.124.12.0/24; 189.124.80.0/20; 189.126.240.0/20; 190.111.128.0/22; 190.123.8.0/23; 191.52.216.0/22; 191.242.48.0/21; 192.141.28.0/22; 200.36.144.0/22; 200.36.204.0/22; 200.49.28.0/22; 200.152.64.0/20; 200.162.160.0/20; 200.192.240.0/21; 200.219.24.0/22; 201.49.192.0/20; 201.62.64.0/20; 201.62.80.0/20; 201.182.252.0/22; 201.216.80.0/22; 206.85.190.0/23; } prefix-list CLI-SONIK-V6 { 2804:3e88::/32; } prefix-list CLI-SONIK-V4 { 170.244.72.0/22; } prefix-list CLI-CTE-V4-CINBESA { 187.73.105.16/30; 187.73.105.128/26; } prefix-list CLI-CTE-V4 { 38.210.120.0/23; 38.253.115.0/24; 45.71.80.0/22; 45.163.44.0/22; 45.163.100.0/22; 45.163.236.0/22; 45.165.208.0/22; 45.165.212.0/22; 45.167.36.0/22; 45.167.140.0/22; 45.172.200.0/22; 45.173.172.0/22; 45.176.180.0/22; 45.189.72.0/22; 45.224.84.0/22; 45.224.108.0/22; 45.227.228.0/22; 128.201.172.0/22; 128.201.208.0/22; 131.72.64.0/22; 131.108.252.0/22; 131.196.120.0/22; 131.221.140.0/22; 131.221.212.0/22; 131.255.64.0/22; 132.255.156.0/22; 132.255.176.0/22; 138.0.52.0/22; 138.0.176.0/22; 138.36.124.0/22; 138.94.8.0/22; 138.94.80.0/22; 138.97.92.0/22; 138.99.72.0/22; 138.99.124.0/22; 138.118.4.0/22; 138.118.192.0/22; 138.118.220.0/22; 138.122.8.0/22; 138.122.240.0/22; 138.185.192.0/22; 143.137.28.0/22; 143.137.200.0/22; 168.0.80.0/22; 168.121.160.0/22; 168.195.148.0/22; 168.196.8.0/22; 168.196.228.0/22; 168.197.12.0/22; 168.197.28.0/22; 168.232.16.0/22; 168.232.80.0/22; 170.83.136.0/22; 170.84.100.0/22; 170.239.200.0/22; 170.244.68.0/22; 170.245.228.0/22; 170.254.248.0/22; 177.8.0.0/20; 177.8.16.0/20; 177.12.128.0/20; 177.12.144.0/20; 177.23.24.0/22; 177.36.240.0/20; 177.53.196.0/22; 177.55.64.0/20; 177.72.200.0/22; 177.86.132.0/22; 177.124.88.0/21; 177.137.48.0/21; 177.185.128.0/20; 179.48.232.0/22; 179.49.148.0/22; 179.49.184.0/22; 179.49.192.0/22; 179.107.52.0/22; 179.124.224.0/20; 181.224.76.0/22; 181.232.216.0/22; 181.233.92.0/22; 186.216.0.0/18; 187.62.112.0/22; 187.62.224.0/19; 187.73.96.0/20; 189.14.120.0/22; 189.76.208.0/20; 189.76.224.0/20; 189.89.224.0/19; 190.3.164.0/22; 190.89.240.0/22; 190.180.148.0/22; 191.7.64.0/21; 191.36.136.0/21; 191.36.230.0/24; 192.140.48.0/22; 192.141.224.0/22; 200.39.52.0/22; 200.39.144.0/22; 200.94.252.0/22; 200.229.92.0/22; } prefix-list CLI-CTE-V6 { 2801:80:d80::/48; 2801:80:3530::/48; 2804:14::/32; 2804:164::/32; 2804:2f8::/32; 2804:3e4::/32; 2804:4fc::/32; 2804:b10::/32; 2804:1484::/32; 2804:14ac::/32; 2804:17dc::/32; 2804:1b04::/32; 2804:1e7c::/32; 2804:20fc::/32; 2804:21dc::/32; 2804:2360::/32; 2804:23b4::/32; 2804:24c4::/32; 2804:2524::/32; 2804:2550::/32; 2804:2698::/32; 2804:27ac::/32; 2804:29b0::/32; 2804:29e8::/32; 2804:2a58::/32; 2804:2c88::/32; 2804:3034::/32; 2804:303c::/32; 2804:3160::/32; 2804:3344::/32; 2804:3484::/32; 2804:34e4::/32; 2804:36a8::/32; 2804:3890::/32; 2804:3900::/32; 2804:3948::/32; 2804:3cac::/32; 2804:3f28::/32; 2804:3fb8::/32; 2804:4228::/32; 2804:44bc::/32; 2804:4534::/32; 2804:4818::/32; 2804:52e8::/32; 2804:539c::/32; 2804:5524::/32; 2804:5584::/32; 2804:5598::/32; 2804:5634::/32; 2804:5698::/32; 2804:5b30::/32; 2804:5d14::/32; 2804:66a4::/32; 2804:68dc::/32; 2804:6b74::/32; 2804:70f4::/32; 2804:7148::/32; 2804:7210::/32; 2804:73d8::/32; 2804:747c::/32; 2804:74ac::/32; 2804:74b0::/32; 2804:7558::/32; 2804:759c::/32; 2804:77b4::/32; 2804:77d0::/32; 2804:78fc::/32; 2804:790c::/32; 2804:7a1c::/32; 2804:7b3c::/32; 2804:7b94::/32; 2804:7d4c::/32; 2804:7d7c::/32; 2804:7e1c::/32; 2804:8318::/32; 2804:83c4::/32; 2804:8498::/32; 2804:8714::/32; 2804:89bc::/32; 2804:89f0::/32; 2804:8bdc::/32; 2804:9020::/32; 2804:9134::/32; } prefix-list CLI-JUPITER-V4 { 187.61.107.0/24; } prefix-list CLI-ULTRANET-V4 { 143.0.140.0/22; 168.227.132.0/22; 170.78.120.0/22; } prefix-list CLI-ULTRANET-V6 { 2804:2954::/32; } prefix-list APNIC { 14.0.0.0/8; 27.0.0.0/8; 36.0.0.0/8; 39.0.0.0/8; 42.0.0.0/8; 49.0.0.0/8; 58.0.0.0/8; 59.0.0.0/8; 60.0.0.0/8; 61.0.0.0/8; 101.0.0.0/8; 103.0.0.0/8; 106.0.0.0/8; 110.0.0.0/8; 111.0.0.0/8; 112.0.0.0/8; 113.0.0.0/8; 114.0.0.0/8; 115.0.0.0/8; 116.0.0.0/8; 117.0.0.0/8; 118.0.0.0/8; 119.0.0.0/8; 120.0.0.0/8; 121.0.0.0/8; 122.0.0.0/8; 123.0.0.0/8; 124.0.0.0/8; 125.0.0.0/8; 126.0.0.0/8; 169.208.0.0/12; 175.0.0.0/8; 180.0.0.0/8; 182.0.0.0/8; 183.0.0.0/8; 202.0.0.0/8; 203.0.0.0/8; 210.0.0.0/8; 211.0.0.0/8; 218.0.0.0/8; 219.0.0.0/8; 220.0.0.0/8; 221.0.0.0/8; 222.0.0.0/8; 223.0.0.0/8; } prefix-list ROS-AS264911 { 168.228.156.0/22; } prefix-list SYN_52_BLACK { 2.16.0.0/16; 2.17.0.0/16; 2.18.0.0/16; 2.19.0.0/16; 2.20.0.0/16; 2.21.0.0/16; 2.22.0.0/16; 2.23.0.0/16; 2.135.144.0/22; 3.162.0.0/16; 3.163.0.0/16; 3.164.0.0/16; 5.9.0.0/16; 5.75.0.0/16; 14.0.0.0/16; 14.0.40.0/22; 14.0.44.0/22; 14.0.76.0/22; 14.0.112.0/22; 14.128.0.0/22; 14.136.136.0/22; 14.225.0.0/16; 14.225.20.0/22; 14.225.236.0/22; 14.225.240.0/22; 14.238.0.0/16; 14.238.4.0/22; 14.238.112.0/22; 14.238.116.0/22; 14.238.248.0/22; 15.204.0.0/16; 15.235.136.0/22; 17.250.0.0/16; 17.253.0.0/16; 18.67.0.0/16; 23.0.0.0/16; 23.1.0.0/16; 23.2.0.0/16; 23.3.0.0/16; 23.4.0.0/16; 23.5.0.0/16; 23.6.0.0/16; 23.7.0.0/16; 23.8.0.0/16; 23.9.0.0/16; 23.10.0.0/16; 23.11.0.0/16; 23.12.0.0/16; 23.13.0.0/16; 23.14.0.0/16; 23.15.0.0/16; 23.32.0.0/16; 23.33.0.0/16; 23.34.0.0/16; 23.35.0.0/16; 23.36.0.0/16; 23.37.0.0/16; 23.38.0.0/16; 23.39.0.0/16; 23.40.0.0/16; 23.41.0.0/16; 23.42.0.0/16; 23.43.0.0/16; 23.44.0.0/16; 23.45.0.0/16; 23.46.0.0/16; 23.47.0.0/16; 23.48.0.0/16; 23.49.0.0/16; 23.50.0.0/16; 23.51.0.0/16; 23.52.0.0/16; 23.53.0.0/16; 23.54.0.0/16; 23.55.0.0/16; 23.56.0.0/16; 23.57.0.0/16; 23.58.0.0/16; 23.59.0.0/16; 23.60.0.0/16; 23.61.0.0/16; 23.62.0.0/16; 23.63.0.0/16; 23.64.0.0/16; 23.65.0.0/16; 23.66.0.0/16; 23.67.0.0/16; 23.72.0.0/16; 23.73.0.0/16; 23.74.0.0/16; 23.75.0.0/16; 23.76.0.0/16; 23.77.0.0/16; 23.78.0.0/16; 23.79.0.0/16; 23.88.0.0/16; 23.90.184.0/22; 23.104.208.0/22; 23.104.212.0/22; 23.106.0.0/16; 23.106.36.0/22; 23.106.236.0/22; 23.108.84.0/22; 23.152.0.0/16; 23.192.0.0/16; 23.193.0.0/16; 23.194.0.0/16; 23.195.0.0/16; 23.196.0.0/16; 23.197.0.0/16; 23.198.0.0/16; 23.199.0.0/16; 23.200.0.0/16; 23.201.0.0/16; 23.202.0.0/16; 23.203.0.0/16; 23.204.0.0/16; 23.205.0.0/16; 23.206.0.0/16; 23.207.0.0/16; 23.208.0.0/16; 23.209.0.0/16; 23.210.0.0/16; 23.211.0.0/16; 23.212.0.0/16; 23.213.0.0/16; 23.214.0.0/16; 23.215.0.0/16; 23.216.0.0/16; 23.217.0.0/16; 23.218.0.0/16; 23.219.0.0/16; 23.220.0.0/16; 23.221.0.0/16; 23.222.0.0/16; 23.223.0.0/16; 23.236.104.0/22; 23.251.104.0/22; 23.251.120.0/22; 24.144.0.0/16; 24.199.0.0/16; 27.105.60.0/22; 27.221.0.0/16; 31.13.0.0/16; 34.8.0.0/16; 34.8.188.0/22; 34.13.0.0/16; 34.16.0.0/16; 34.19.0.0/16; 34.22.0.0/16; 34.23.0.0/16; 34.27.0.0/16; 34.28.0.0/16; 34.29.0.0/16; 34.30.0.0/16; 34.31.0.0/16; 34.32.0.0/16; 34.34.0.0/16; 34.35.0.0/16; 34.36.0.0/16; 34.36.128.0/22; 34.38.0.0/16; 34.41.0.0/16; 34.42.0.0/16; 34.43.0.0/16; 34.44.0.0/16; 34.45.0.0/16; 34.46.0.0/16; 34.47.0.0/16; 34.48.0.0/16; 34.49.0.0/16; 34.49.132.0/22; 34.51.0.0/16; 34.54.0.0/16; 34.54.12.0/22; 34.54.80.0/22; 34.54.212.0/22; 34.55.0.0/16; 34.56.0.0/16; 34.57.0.0/16; 34.58.0.0/16; 34.59.0.0/16; 34.60.0.0/16; 34.64.0.0/16; 34.65.0.0/16; 34.66.0.0/16; 34.67.0.0/16; 34.68.0.0/16; 34.69.0.0/16; 34.70.0.0/16; 34.71.0.0/16; 34.72.0.0/16; 34.73.0.0/16; 34.74.0.0/16; 34.75.0.0/16; 34.76.0.0/16; 34.77.0.0/16; 34.78.0.0/16; 34.79.0.0/16; 34.80.0.0/16; 34.81.0.0/16; 34.82.0.0/16; 34.83.0.0/16; 34.84.0.0/16; 34.85.0.0/16; 34.86.0.0/16; 34.87.0.0/16; 34.88.0.0/16; 34.89.0.0/16; 34.90.0.0/16; 34.91.0.0/16; 34.92.0.0/16; 34.93.0.0/16; 34.94.0.0/16; 34.95.0.0/16; 34.95.84.0/22; 34.96.0.0/16; 34.97.0.0/16; 34.98.0.0/16; 34.100.0.0/16; 34.101.0.0/16; 34.102.0.0/16; 34.102.192.0/22; 34.102.208.0/22; 34.104.32.0/22; 34.105.0.0/16; 34.107.0.0/16; 34.110.0.0/16; 34.110.216.0/22; 34.111.0.0/16; 34.111.16.0/22; 34.111.28.0/22; 34.111.148.0/22; 34.116.0.0/16; 34.117.0.0/16; 34.117.164.0/22; 34.118.0.0/16; 34.120.0.0/16; 34.120.108.0/22; 34.120.168.0/22; 34.121.0.0/16; 34.122.0.0/16; 34.123.0.0/16; 34.124.0.0/16; 34.125.0.0/16; 34.126.0.0/16; 34.127.0.0/16; 34.128.0.0/16; 34.128.140.0/22; 34.129.0.0/16; 34.131.0.0/16; 34.132.0.0/16; 34.133.0.0/16; 34.134.0.0/16; 34.135.0.0/16; 34.136.0.0/16; 34.138.0.0/16; 34.139.0.0/16; 34.140.0.0/16; 34.141.0.0/16; 34.142.0.0/16; 34.143.0.0/16; 34.144.0.0/16; 34.144.192.0/22; 34.145.0.0/16; 34.146.0.0/16; 34.147.0.0/16; 34.148.0.0/16; 34.149.0.0/16; 34.149.16.0/22; 34.149.24.0/22; 34.149.144.0/22; 34.149.184.0/22; 34.150.0.0/16; 34.151.0.0/16; 34.154.0.0/16; 34.159.0.0/16; 34.160.0.0/16; 34.160.8.0/22; 34.160.92.0/22; 34.160.104.0/22; 34.162.0.0/16; 34.163.0.0/16; 34.165.0.0/16; 34.168.0.0/16; 34.169.0.0/16; 34.170.0.0/16; 34.171.0.0/16; 34.172.0.0/16; 34.173.0.0/16; 34.174.0.0/16; 34.175.0.0/16; 35.184.0.0/16; 35.185.0.0/16; 35.186.0.0/16; 35.187.0.0/16; 35.188.0.0/16; 35.189.0.0/16; 35.190.0.0/16; 35.192.0.0/16; 35.193.0.0/16; 35.194.0.0/16; 35.195.0.0/16; 35.196.0.0/16; 35.197.0.0/16; 35.198.0.0/16; 35.199.0.0/16; 35.200.0.0/16; 35.201.0.0/16; 35.201.52.0/22; 35.202.0.0/16; 35.203.0.0/16; 35.204.0.0/16; 35.205.0.0/16; 35.214.0.0/16; 35.220.0.0/16; 35.221.0.0/16; 35.222.0.0/16; 35.223.0.0/16; 35.224.0.0/16; 35.225.0.0/16; 35.226.0.0/16; 35.227.0.0/16; 35.228.0.0/16; 35.229.0.0/16; 35.230.0.0/16; 35.231.0.0/16; 35.232.0.0/16; 35.233.0.0/16; 35.234.0.0/16; 35.235.0.0/16; 35.236.0.0/16; 35.237.0.0/16; 35.238.0.0/16; 35.239.0.0/16; 35.240.0.0/16; 35.241.0.0/16; 35.242.0.0/16; 35.243.0.0/16; 35.244.0.0/16; 35.245.0.0/16; 35.246.0.0/16; 35.247.0.0/16; 36.99.0.0/16; 36.131.0.0/16; 36.147.0.0/16; 36.150.0.0/16; 36.156.0.0/16; 36.158.0.0/16; 36.159.0.0/16; 37.19.0.0/16; 37.27.0.0/16; 37.111.0.0/16; 37.186.68.0/22; 37.187.0.0/16; 37.236.56.0/22; 37.237.232.0/22; 37.238.248.0/22; 38.56.0.0/16; 39.125.0.0/16; 39.130.0.0/16; 39.173.0.0/16; 41.189.252.0/22; 42.113.0.0/16; 42.113.8.0/22; 42.115.0.0/16; 42.115.108.0/22; 42.117.244.0/22; 42.202.0.0/16; 43.132.0.0/16; 43.141.0.0/16; 43.152.0.0/16; 43.159.0.0/16; 43.174.0.0/16; 43.175.0.0/16; 43.245.0.0/16; 43.245.200.0/22; 45.4.76.0/22; 45.32.0.0/16; 45.33.0.0/16; 45.41.0.0/16; 45.41.96.0/22; 45.55.0.0/16; 45.56.0.0/16; 45.57.0.0/16; 45.62.0.0/16; 45.64.0.0/16; 45.64.20.0/22; 45.70.220.0/22; 45.76.0.0/16; 45.77.0.0/16; 45.79.0.0/16; 45.90.208.0/22; 45.116.80.0/22; 45.120.84.0/22; 45.124.0.0/16; 45.160.0.0/16; 45.164.0.0/16; 45.165.0.0/16; 45.168.0.0/16; 45.173.0.0/16; 45.179.88.0/22; 45.183.0.0/16; 45.187.0.0/16; 45.188.0.0/16; 45.200.108.0/22; 45.224.128.0/22; 45.226.0.0/16; 45.237.0.0/16; 46.101.0.0/16; 46.105.0.0/16; 47.88.0.0/16; 47.89.0.0/16; 47.89.64.0/22; 47.246.0.0/16; 47.246.0.0/22; 47.246.4.0/22; 47.246.8.0/22; 47.246.12.0/22; 47.246.20.0/22; 47.246.24.0/22; 47.246.28.0/22; 47.246.36.0/22; 47.246.40.0/22; 47.246.44.0/22; 47.246.48.0/22; 47.246.56.0/22; 47.254.0.0/16; 47.254.112.0/22; 49.12.0.0/16; 49.13.0.0/16; 49.229.0.0/16; 49.231.0.0/16; 50.2.184.0/22; 50.87.0.0/16; 50.116.0.0/16; 51.15.0.0/16; 51.38.0.0/16; 51.68.0.0/16; 51.75.0.0/16; 51.77.0.0/16; 51.81.0.0/16; 51.83.0.0/16; 51.89.0.0/16; 51.91.0.0/16; 51.158.0.0/16; 51.159.0.0/16; 51.161.200.0/22; 51.178.0.0/16; 51.195.0.0/16; 51.210.0.0/16; 51.222.0.0/16; 54.36.0.0/16; 54.37.0.0/16; 54.38.0.0/16; 54.174.0.0/16; 57.128.0.0/16; 57.129.0.0/16; 57.144.0.0/16; 58.26.4.0/22; 58.26.100.0/22; 58.27.0.0/22; 58.145.184.0/22; 58.186.0.0/16; 58.186.188.0/22; 58.187.252.0/22; 58.216.0.0/16; 59.148.180.0/22; 60.188.0.0/16; 61.61.68.0/22; 61.61.160.0/22; 61.110.0.0/16; 61.110.192.0/22; 61.110.196.0/22; 61.110.240.0/22; 61.110.252.0/22; 61.170.0.0/16; 61.221.116.0/22; 61.241.0.0/16; 64.23.0.0/16; 64.120.88.0/22; 64.225.0.0/16; 64.226.0.0/16; 64.227.0.0/16; 65.21.0.0/16; 65.108.0.0/16; 65.109.0.0/16; 66.114.56.0/22; 66.205.8.0/22; 67.20.0.0/16; 67.205.0.0/16; 67.207.0.0/16; 68.183.0.0/16; 69.192.0.0/16; 69.195.0.0/16; 71.18.0.0/16; 71.18.0.0/22; 71.18.36.0/22; 71.18.72.0/22; 71.18.80.0/22; 71.18.92.0/22; 71.18.100.0/22; 71.18.104.0/22; 71.18.132.0/22; 71.18.144.0/22; 72.246.0.0/16; 72.247.0.0/16; 74.125.0.0/16; 74.222.20.0/22; 78.46.0.0/16; 78.47.0.0/16; 78.140.180.0/22; 78.142.192.0/22; 79.127.0.0/16; 79.127.204.0/22; 79.133.0.0/16; 80.209.240.0/22; 81.17.120.0/22; 82.148.0.0/16; 82.148.120.0/22; 82.197.36.0/22; 84.17.40.0/22; 84.54.100.0/22; 85.206.168.0/22; 85.255.0.0/16; 86.51.92.0/22; 86.104.248.0/22; 87.98.0.0/16; 88.99.0.0/16; 88.198.0.0/16; 88.221.0.0/16; 89.21.64.0/22; 89.147.120.0/22; 89.187.116.0/22; 89.187.160.0/22; 89.187.184.0/22; 89.213.0.0/16; 89.248.0.0/16; 90.84.160.0/22; 90.84.164.0/22; 91.106.108.0/22; 91.194.204.0/22; 91.243.176.0/22; 92.122.0.0/16; 92.123.0.0/16; 94.23.0.0/16; 94.102.0.0/16; 94.130.0.0/16; 94.139.0.0/16; 94.206.156.0/22; 95.85.0.0/16; 95.100.0.0/16; 95.101.0.0/16; 95.104.124.0/22; 95.216.0.0/16; 95.217.0.0/16; 96.6.0.0/16; 96.7.0.0/16; 96.16.0.0/16; 96.17.0.0/16; 96.99.224.0/22; 98.96.0.0/16; 98.96.200.0/22; 98.98.0.0/16; 98.98.44.0/22; 98.98.60.0/22; 98.98.64.0/22; 98.98.108.0/22; 98.98.116.0/22; 98.98.152.0/22; 98.98.180.0/22; 98.98.200.0/22; 101.33.0.0/16; 101.79.0.0/16; 101.79.208.0/22; 101.79.224.0/22; 101.255.16.0/22; 103.4.200.0/22; 103.6.216.0/22; 103.12.72.0/22; 103.12.176.0/22; 103.56.116.0/22; 103.90.0.0/16; 103.90.220.0/22; 103.119.48.0/22; 103.125.0.0/16; 103.130.16.0/22; 103.131.16.0/22; 103.136.248.0/22; 103.141.0.0/16; 103.145.0.0/16; 103.145.136.0/22; 103.147.212.0/22; 103.151.0.0/16; 103.151.240.0/22; 103.154.224.0/22; 103.160.152.0/22; 103.161.20.0/22; 103.189.120.0/22; 103.198.200.0/22; 103.235.44.0/22; 103.247.44.0/22; 104.21.0.0/16; 104.65.0.0/16; 104.66.0.0/16; 104.67.0.0/16; 104.68.0.0/16; 104.69.0.0/16; 104.71.0.0/16; 104.73.0.0/16; 104.74.0.0/16; 104.75.0.0/16; 104.76.0.0/16; 104.77.0.0/16; 104.79.0.0/16; 104.80.0.0/16; 104.81.0.0/16; 104.82.0.0/16; 104.83.0.0/16; 104.85.0.0/16; 104.86.0.0/16; 104.87.0.0/16; 104.89.0.0/16; 104.90.0.0/16; 104.91.0.0/16; 104.93.0.0/16; 104.94.0.0/16; 104.96.0.0/16; 104.97.0.0/16; 104.98.0.0/16; 104.99.0.0/16; 104.100.0.0/16; 104.101.0.0/16; 104.102.0.0/16; 104.103.0.0/16; 104.104.0.0/16; 104.107.0.0/16; 104.108.0.0/16; 104.109.0.0/16; 104.110.0.0/16; 104.114.0.0/16; 104.115.0.0/16; 104.116.0.0/16; 104.117.0.0/16; 104.118.0.0/16; 104.119.0.0/16; 104.120.0.0/16; 104.121.0.0/16; 104.122.0.0/16; 104.123.0.0/16; 104.125.0.0/16; 104.131.0.0/16; 104.154.0.0/16; 104.155.0.0/16; 104.156.0.0/16; 104.166.0.0/16; 104.166.180.0/22; 104.166.188.0/22; 104.193.0.0/16; 104.193.88.0/22; 104.196.0.0/16; 104.197.0.0/16; 104.198.0.0/16; 104.199.0.0/16; 104.223.96.0/22; 104.236.0.0/16; 104.237.0.0/16; 104.248.0.0/16; 106.227.0.0/16; 107.151.152.0/22; 107.155.0.0/16; 107.155.0.0/22; 107.155.24.0/22; 107.155.56.0/22; 107.167.244.0/22; 107.170.0.0/16; 107.178.0.0/16; 108.139.0.0/16; 108.158.0.0/16; 108.165.0.0/16; 108.167.0.0/16; 109.61.0.0/16; 109.61.92.0/22; 110.49.0.0/16; 111.0.0.0/16; 111.6.0.0/16; 111.7.0.0/16; 111.12.0.0/16; 111.19.0.0/16; 111.31.0.0/16; 111.42.0.0/16; 111.51.0.0/16; 111.62.0.0/16; 111.123.0.0/16; 112.13.0.0/16; 112.46.0.0/16; 112.48.0.0/16; 112.197.24.0/22; 112.198.40.0/22; 113.96.0.0/16; 113.171.232.0/22; 113.219.0.0/16; 114.124.132.0/22; 114.129.28.0/22; 115.67.0.0/16; 115.84.0.0/16; 115.84.64.0/22; 115.84.108.0/22; 115.84.124.0/22; 115.127.224.0/22; 115.127.228.0/22; 115.127.232.0/22; 115.164.0.0/16; 115.164.8.0/22; 115.164.12.0/22; 115.164.112.0/22; 115.166.116.0/22; 116.103.0.0/16; 116.103.104.0/22; 116.103.200.0/22; 116.103.204.0/22; 116.153.0.0/16; 116.162.0.0/16; 116.162.48.0/22; 116.162.88.0/22; 116.177.0.0/16; 116.193.84.0/22; 116.202.0.0/16; 116.203.0.0/16; 116.206.0.0/16; 117.0.16.0/22; 117.1.156.0/22; 117.68.0.0/16; 117.147.0.0/16; 117.161.0.0/16; 118.107.172.0/22; 118.214.0.0/16; 118.215.0.0/16; 118.253.0.0/16; 119.2.104.0/22; 119.31.248.0/22; 119.84.0.0/16; 119.147.0.0/16; 119.167.0.0/16; 119.188.0.0/16; 119.206.200.0/22; 120.220.0.0/16; 120.221.0.0/16; 120.222.0.0/16; 120.226.0.0/16; 120.232.0.0/16; 120.233.0.0/16; 120.240.0.0/16; 122.10.0.0/16; 122.201.16.0/22; 122.228.0.0/16; 123.6.0.0/16; 123.31.0.0/16; 123.31.32.0/22; 123.176.124.0/22; 124.95.0.0/16; 124.163.0.0/16; 124.217.0.0/16; 124.217.128.0/22; 124.217.136.0/22; 124.225.0.0/16; 124.236.0.0/16; 125.24.0.0/16; 125.31.0.0/16; 125.31.20.0/22; 128.1.0.0/16; 128.1.44.0/22; 128.1.100.0/22; 128.1.156.0/22; 128.14.0.0/16; 128.14.84.0/22; 128.14.108.0/22; 128.14.116.0/22; 128.14.180.0/22; 128.14.244.0/22; 128.14.248.0/22; 128.116.0.0/16; 128.127.104.0/22; 128.140.0.0/16; 128.199.0.0/16; 128.201.0.0/16; 129.227.0.0/16; 130.41.0.0/16; 130.211.0.0/16; 131.221.0.0/16; 131.255.0.0/16; 134.122.0.0/16; 134.199.0.0/16; 134.209.0.0/16; 134.238.0.0/16; 135.125.0.0/16; 135.148.0.0/16; 135.181.0.0/16; 136.243.0.0/16; 137.184.0.0/16; 138.0.0.0/16; 138.68.0.0/16; 138.99.0.0/16; 138.113.0.0/16; 138.113.8.0/22; 138.113.12.0/22; 138.113.16.0/22; 138.113.20.0/22; 138.113.24.0/22; 138.113.28.0/22; 138.113.40.0/22; 138.113.48.0/22; 138.113.52.0/22; 138.113.56.0/22; 138.113.72.0/22; 138.113.80.0/22; 138.113.84.0/22; 138.113.88.0/22; 138.113.92.0/22; 138.113.100.0/22; 138.113.104.0/22; 138.113.108.0/22; 138.113.112.0/22; 138.113.116.0/22; 138.113.120.0/22; 138.113.124.0/22; 138.113.128.0/22; 138.113.132.0/22; 138.113.136.0/22; 138.113.140.0/22; 138.113.144.0/22; 138.113.148.0/22; 138.113.152.0/22; 138.113.156.0/22; 138.113.164.0/22; 138.113.180.0/22; 138.113.184.0/22; 138.113.188.0/22; 138.113.192.0/22; 138.113.196.0/22; 138.113.204.0/22; 138.113.208.0/22; 138.113.212.0/22; 138.113.216.0/22; 138.113.220.0/22; 138.113.228.0/22; 138.113.232.0/22; 138.113.236.0/22; 138.113.240.0/22; 138.113.244.0/22; 138.113.248.0/22; 138.113.252.0/22; 138.117.216.0/22; 138.118.0.0/16; 138.197.0.0/16; 138.199.0.0/16; 138.199.8.0/22; 138.201.0.0/16; 139.59.0.0/16; 139.99.140.0/22; 139.104.0.0/16; 139.144.0.0/16; 139.162.0.0/16; 139.177.0.0/16; 139.177.224.0/22; 139.177.244.0/22; 139.177.248.0/22; 140.82.0.0/16; 140.150.0.0/16; 140.150.0.0/22; 140.150.12.0/22; 140.150.20.0/22; 140.150.24.0/22; 140.150.32.0/22; 140.150.36.0/22; 140.248.0.0/16; 140.249.0.0/16; 141.94.0.0/16; 141.95.0.0/16; 142.4.0.0/16; 142.93.0.0/16; 142.132.0.0/16; 143.110.0.0/16; 143.198.0.0/16; 143.208.0.0/16; 143.244.0.0/16; 143.255.0.0/16; 144.49.0.0/16; 144.76.0.0/16; 144.126.0.0/16; 144.217.0.0/16; 145.239.0.0/16; 146.19.0.0/16; 146.59.0.0/16; 146.71.124.0/22; 146.75.0.0/16; 146.112.20.0/22; 146.148.0.0/16; 146.190.0.0/16; 147.135.0.0/16; 147.146.0.0/16; 147.154.0.0/16; 147.182.0.0/16; 147.189.160.0/22; 148.113.0.0/16; 148.153.0.0/16; 148.251.0.0/16; 148.253.244.0/22; 149.20.0.0/16; 149.28.0.0/16; 149.202.0.0/16; 150.109.0.0/16; 150.138.0.0/16; 150.139.0.0/16; 150.195.0.0/16; 151.101.0.0/16; 151.186.92.0/22; 152.42.0.0/16; 152.255.0.0/16; 154.74.184.0/22; 154.85.0.0/16; 154.85.64.0/22; 154.85.68.0/22; 154.85.72.0/22; 154.85.76.0/22; 154.85.80.0/22; 154.85.84.0/22; 154.85.88.0/22; 154.85.92.0/22; 154.92.24.0/22; 154.92.28.0/22; 154.93.0.0/16; 154.93.108.0/22; 154.94.0.0/16; 154.94.68.0/22; 154.196.0.0/16; 154.203.156.0/22; 155.102.0.0/16; 155.102.0.0/22; 155.102.4.0/22; 155.102.8.0/22; 155.102.12.0/22; 155.102.16.0/22; 155.102.20.0/22; 155.102.28.0/22; 155.102.32.0/22; 155.102.36.0/22; 155.102.40.0/22; 155.102.44.0/22; 155.102.52.0/22; 155.102.56.0/22; 155.102.60.0/22; 155.190.68.0/22; 155.190.76.0/22; 155.190.92.0/22; 155.190.100.0/22; 155.190.104.0/22; 156.59.0.0/16; 156.225.0.0/16; 156.225.96.0/22; 156.225.104.0/22; 156.225.108.0/22; 156.227.12.0/22; 156.227.196.0/22; 156.227.200.0/22; 156.229.0.0/16; 156.229.28.0/22; 156.236.20.0/22; 156.238.128.0/22; 156.238.132.0/22; 156.246.20.0/22; 156.251.0.0/16; 156.251.64.0/22; 156.251.68.0/22; 156.251.72.0/22; 157.90.0.0/16; 157.185.0.0/16; 157.185.128.0/22; 157.185.132.0/22; 157.185.136.0/22; 157.185.144.0/22; 157.185.148.0/22; 157.185.156.0/22; 157.185.160.0/22; 157.185.164.0/22; 157.185.168.0/22; 157.185.172.0/22; 157.185.176.0/22; 157.185.180.0/22; 157.185.188.0/22; 157.230.0.0/16; 157.240.0.0/16; 157.245.0.0/16; 159.65.0.0/16; 159.69.0.0/16; 159.89.0.0/16; 159.203.0.0/16; 159.223.0.0/16; 161.35.0.0/16; 161.49.0.0/16; 161.69.0.0/16; 161.132.20.0/22; 162.19.0.0/16; 162.55.0.0/16; 162.128.0.0/16; 162.144.0.0/16; 162.214.0.0/16; 162.240.0.0/16; 162.241.0.0/16; 162.243.0.0/16; 163.171.0.0/16; 163.171.72.0/22; 163.171.92.0/22; 163.171.108.0/22; 163.171.128.0/22; 163.171.132.0/22; 163.171.136.0/22; 163.171.140.0/22; 163.171.144.0/22; 163.171.148.0/22; 163.171.152.0/22; 163.171.156.0/22; 163.171.160.0/22; 163.171.176.0/22; 163.171.180.0/22; 163.171.184.0/22; 163.171.188.0/22; 163.171.192.0/22; 163.171.196.0/22; 163.171.200.0/22; 163.171.204.0/22; 163.171.208.0/22; 163.171.212.0/22; 163.171.220.0/22; 163.172.0.0/16; 163.181.0.0/16; 163.181.0.0/22; 163.181.16.0/22; 163.181.20.0/22; 163.181.24.0/22; 163.181.32.0/22; 163.181.36.0/22; 163.181.40.0/22; 163.181.48.0/22; 163.181.52.0/22; 163.181.56.0/22; 163.181.60.0/22; 163.181.64.0/22; 163.181.68.0/22; 163.181.72.0/22; 163.181.76.0/22; 163.181.80.0/22; 163.181.84.0/22; 163.181.88.0/22; 163.181.92.0/22; 163.181.96.0/22; 163.181.104.0/22; 163.181.108.0/22; 163.181.116.0/22; 163.181.120.0/22; 163.181.124.0/22; 163.181.128.0/22; 163.181.136.0/22; 163.181.140.0/22; 163.181.144.0/22; 163.181.152.0/22; 163.181.160.0/22; 163.181.164.0/22; 163.181.196.0/22; 163.181.200.0/22; 163.181.204.0/22; 163.181.212.0/22; 163.181.216.0/22; 163.181.220.0/22; 163.181.228.0/22; 163.181.236.0/22; 164.90.0.0/16; 164.92.0.0/16; 164.163.0.0/16; 165.22.0.0/16; 165.227.0.0/16; 165.232.0.0/16; 167.71.0.0/16; 167.82.0.0/16; 167.99.0.0/16; 167.172.0.0/16; 167.179.8.0/22; 167.235.0.0/16; 168.119.0.0/16; 168.227.0.0/16; 168.235.192.0/22; 168.235.200.0/22; 168.253.96.0/22; 168.253.104.0/22; 169.150.228.0/22; 170.64.0.0/16; 170.82.0.0/16; 170.83.0.0/16; 170.84.0.0/16; 170.150.0.0/16; 170.187.0.0/16; 170.231.0.0/16; 170.239.0.0/16; 170.244.0.0/16; 170.244.72.0/22; 171.105.0.0/16; 171.108.0.0/16; 171.231.96.0/22; 171.237.128.0/22; 171.244.0.0/16; 171.244.192.0/22; 172.104.0.0/16; 172.105.0.0/16; 172.217.0.0/16; 172.224.0.0/16; 172.232.0.0/16; 172.233.0.0/16; 172.234.0.0/16; 172.236.0.0/16; 173.194.0.0/16; 173.222.0.0/16; 173.223.0.0/16; 173.232.228.0/22; 173.254.0.0/16; 173.255.0.0/16; 174.35.0.0/16; 174.35.4.0/22; 174.35.16.0/22; 174.35.56.0/22; 174.35.60.0/22; 174.35.76.0/22; 174.35.116.0/22; 174.138.0.0/16; 175.12.0.0/16; 175.97.0.0/16; 175.100.0.0/16; 176.9.0.0/16; 177.37.0.0/16; 177.43.0.0/16; 177.52.60.0/22; 177.53.0.0/16; 177.53.252.0/22; 177.54.0.0/16; 177.54.220.0/22; 177.55.0.0/16; 177.66.0.0/16; 177.74.224.0/22; 177.87.120.0/22; 177.89.0.0/16; 177.89.8.0/22; 177.89.20.0/22; 177.89.32.0/22; 177.89.44.0/22; 177.89.48.0/22; 177.89.56.0/22; 177.89.160.0/22; 177.89.168.0/22; 177.89.176.0/22; 177.89.188.0/22; 177.89.224.0/22; 177.89.232.0/22; 177.89.236.0/22; 177.91.0.0/16; 177.101.0.0/16; 177.124.0.0/16; 177.129.0.0/16; 177.130.0.0/16; 177.130.200.0/22; 177.135.0.0/16; 177.136.204.0/22; 177.136.224.0/22; 177.159.0.0/16; 177.174.0.0/16; 177.177.204.0/22; 177.207.0.0/16; 178.32.0.0/16; 178.33.0.0/16; 178.62.0.0/16; 178.128.0.0/16; 179.0.200.0/22; 179.48.0.0/16; 179.67.240.0/22; 179.106.0.0/16; 179.106.56.0/22; 179.127.0.0/16; 179.184.0.0/16; 179.190.0.0/16; 179.190.144.0/22; 179.190.148.0/22; 179.190.160.0/22; 179.190.168.0/22; 179.190.176.0/22; 179.190.180.0/22; 179.190.192.0/22; 179.190.196.0/22; 179.190.216.0/22; 179.190.224.0/22; 179.190.228.0/22; 179.190.232.0/22; 179.190.236.0/22; 179.190.240.0/22; 179.190.244.0/22; 179.248.0.0/16; 180.97.0.0/16; 180.163.0.0/16; 181.176.252.0/22; 181.189.0.0/16; 181.191.0.0/16; 182.40.0.0/16; 182.239.0.0/16; 182.239.104.0/22; 182.242.0.0/16; 182.247.0.0/16; 183.60.0.0/16; 183.61.0.0/16; 183.78.4.0/22; 183.80.0.0/16; 183.80.80.0/22; 183.131.0.0/16; 183.201.0.0/16; 183.204.0.0/16; 183.214.0.0/16; 183.240.0.0/16; 184.24.0.0/16; 184.25.0.0/16; 184.26.0.0/16; 184.27.0.0/16; 184.28.0.0/16; 184.29.0.0/16; 184.30.0.0/16; 184.31.0.0/16; 184.50.0.0/16; 184.51.0.0/16; 184.84.0.0/16; 184.85.0.0/16; 184.86.0.0/16; 184.87.0.0/16; 185.135.76.0/22; 185.148.0.0/22; 185.175.0.0/16; 185.175.228.0/22; 185.193.0.0/16; 185.198.0.0/16; 185.236.0.0/16; 186.193.0.0/16; 186.194.0.0/16; 186.209.112.0/22; 186.215.0.0/16; 186.226.0.0/16; 186.226.56.0/22; 186.228.0.0/16; 186.228.52.0/22; 186.229.0.0/16; 186.229.96.0/22; 186.231.0.0/16; 186.231.72.0/22; 186.233.0.0/16; 186.235.0.0/16; 186.236.0.0/16; 186.236.192.0/22; 186.236.200.0/22; 186.236.204.0/22; 186.236.208.0/22; 186.236.212.0/22; 186.248.0.0/16; 186.250.0.0/16; 187.9.0.0/16; 187.18.0.0/16; 187.18.204.0/22; 187.18.224.0/22; 187.18.232.0/22; 187.19.0.0/16; 187.28.0.0/16; 187.29.0.0/16; 187.51.0.0/16; 187.60.0.0/16; 187.61.0.0/16; 187.61.128.0/22; 187.61.148.0/22; 187.61.160.0/22; 187.61.164.0/22; 187.61.172.0/22; 187.61.196.0/22; 187.61.208.0/22; 187.61.216.0/22; 187.61.220.0/22; 187.61.232.0/22; 187.61.236.0/22; 187.61.248.0/22; 187.61.252.0/22; 187.72.0.0/16; 187.84.0.0/16; 187.85.0.0/16; 187.102.0.0/16; 187.111.0.0/16; 187.111.224.0/22; 187.111.228.0/22; 187.111.236.0/22; 187.115.0.0/16; 187.126.60.0/22; 188.40.0.0/16; 188.165.0.0/16; 188.166.0.0/16; 188.214.0.0/16; 188.214.64.0/22; 188.214.68.0/22; 188.240.60.0/22; 188.245.0.0/16; 189.1.0.0/16; 189.2.0.0/16; 189.3.0.0/16; 189.6.0.0/16; 189.7.0.0/16; 189.16.0.0/16; 189.17.0.0/16; 189.22.0.0/16; 189.23.0.0/16; 189.26.0.0/16; 189.42.0.0/16; 189.43.0.0/16; 189.44.0.0/16; 189.45.0.0/16; 189.45.108.0/22; 189.45.112.0/22; 189.45.116.0/22; 189.45.120.0/22; 189.50.0.0/16; 189.51.0.0/16; 189.52.0.0/16; 189.53.0.0/16; 189.76.0.0/16; 189.86.0.0/16; 189.87.0.0/16; 189.89.0.0/16; 189.108.0.0/16; 189.124.0.0/16; 189.124.144.0/22; 189.124.164.0/22; 189.124.176.0/22; 189.124.188.0/22; 189.124.216.0/22; 189.124.220.0/22; 189.124.252.0/22; 189.125.0.0/16; 190.89.236.0/22; 191.34.0.0/16; 191.36.0.0/16; 191.37.0.0/16; 191.61.0.0/16; 191.232.0.0/16; 191.232.64.0/22; 191.235.0.0/16; 191.235.248.0/22; 191.238.72.0/22; 191.240.252.0/22; 191.249.0.0/16; 191.252.0.0/16; 191.253.0.0/16; 192.34.0.0/16; 192.99.0.0/16; 192.141.0.0/16; 192.144.112.0/22; 192.169.0.0/16; 192.169.120.0/22; 192.178.0.0/16; 192.185.0.0/16; 192.241.0.0/16; 192.254.0.0/16; 192.254.84.0/22; 194.34.132.0/22; 194.107.16.0/22; 195.201.0.0/16; 197.227.28.0/22; 198.57.0.0/16; 198.199.0.0/16; 198.211.0.0/16; 198.244.0.0/16; 199.91.72.0/22; 199.232.0.0/16; 200.150.0.0/16; 200.150.196.0/22; 200.150.200.0/22; 200.150.204.0/22; 200.166.0.0/16; 200.174.0.0/16; 200.178.0.0/16; 200.179.0.0/16; 200.182.0.0/16; 200.183.0.0/16; 200.187.68.0/22; 200.205.0.0/16; 200.208.0.0/16; 200.209.0.0/16; 200.210.0.0/16; 200.211.0.0/16; 200.212.0.0/16; 200.213.0.0/16; 200.214.0.0/16; 200.227.0.0/16; 200.231.0.0/16; 200.240.0.0/16; 200.241.0.0/16; 200.248.0.0/16; 200.250.0.0/16; 200.252.0.0/16; 201.0.0.0/16; 201.6.0.0/16; 201.7.0.0/16; 201.16.0.0/16; 201.17.0.0/16; 201.31.0.0/16; 201.44.0.0/16; 201.56.0.0/16; 201.57.0.0/16; 201.63.0.0/16; 201.64.0.0/16; 201.71.0.0/16; 201.72.0.0/16; 201.73.0.0/16; 201.86.0.0/16; 201.90.0.0/16; 201.91.0.0/16; 202.55.0.0/22; 202.75.32.0/22; 202.75.140.0/22; 202.75.144.0/22; 202.75.188.0/22; 202.122.144.0/22; 202.138.0.0/16; 202.165.92.0/22; 202.173.120.0/22; 202.179.116.0/22; 202.191.0.0/16; 202.191.96.0/22; 203.78.0.0/16; 203.78.40.0/22; 203.82.72.0/22; 203.82.84.0/22; 203.82.92.0/22; 203.96.240.0/22; 203.144.0.0/16; 203.144.88.0/22; 203.186.32.0/22; 203.211.0.0/16; 204.48.0.0/16; 206.81.0.0/16; 206.189.0.0/16; 207.126.84.0/22; 207.126.88.0/22; 207.126.92.0/22; 207.154.0.0/16; 208.127.0.0/16; 209.38.0.0/16; 209.97.0.0/16; 209.206.0.0/16; 210.1.240.0/22; 210.14.104.0/22; 210.19.120.0/22; 210.61.0.0/16; 210.61.180.0/22; 210.61.204.0/22; 210.65.0.0/16; 210.65.160.0/22; 210.65.176.0/22; 210.71.0.0/16; 210.71.196.0/22; 210.79.156.0/22; 210.210.172.0/22; 210.245.0.0/16; 210.245.48.0/22; 210.245.64.0/22; 211.22.248.0/22; 211.43.144.0/22; 211.72.32.0/22; 211.76.108.0/22; 213.158.172.0/22; 216.194.0.0/16; 216.205.0.0/16; 216.252.0.0/16; 217.170.52.0/22; 217.182.0.0/16; 218.208.56.0/22; 219.144.0.0/16; 220.181.0.0/16; 221.178.0.0/16; 221.204.0.0/16; 222.88.0.0/15; 222.166.0.0/16; 222.166.0.0/22; 222.186.0.0/16; 223.109.0.0/16; 223.111.0.0/16; 223.119.0.0/16; 223.119.20.0/22; 223.119.252.0/22; 223.121.16.0/22; 223.223.0.0/16; 223.223.172.0/22; } prefix-list SYN_52_WHITE { 1.13.0.0/16; 1.14.0.0/16; 1.94.0.0/16; 1.95.0.0/16; 2.18.0.0/16; 3.226.0.0/16; 8.219.0.0/16; 8.222.0.0/16; 14.103.0.0/16; 17.57.0.0/16; 18.189.0.0/16; 20.135.0.0/16; 34.160.0.0/16; 43.130.0.0/16; 43.135.0.0/16; 43.152.0.0/16; 43.166.0.0/16; 47.85.0.0/16; 47.236.0.0/16; 47.241.0.0/16; 47.246.0.0/16; 52.46.0.0/16; 52.97.0.0/16; 52.183.0.0/16; 54.83.0.0/16; 57.144.0.0/16; 65.20.0.0/16; 67.195.0.0/16; 71.18.0.0/16; 74.119.0.0/16; 93.93.0.0/16; 96.47.0.0/16; 98.82.0.0/16; 101.33.0.0/16; 101.34.0.0/16; 101.35.0.0/16; 101.37.0.0/16; 101.42.0.0/16; 101.43.0.0/16; 101.71.0.0/16; 101.126.0.0/16; 101.132.0.0/16; 101.200.0.0/16; 101.201.0.0/16; 103.167.0.0/16; 104.18.16.0/20; 104.234.0.0/16; 104.237.0.0/16; 106.14.0.0/16; 106.15.0.0/16; 106.52.0.0/16; 106.53.0.0/16; 106.54.0.0/16; 106.55.0.0/16; 106.75.0.0/16; 106.227.0.0/16; 108.158.146.0/23; 108.181.0.0/16; 110.40.0.0/16; 110.41.0.0/16; 110.42.0.0/16; 111.6.0.0/16; 111.13.0.0/16; 111.19.0.0/16; 111.31.0.0/16; 111.32.0.0/16; 111.42.0.0/16; 111.48.0.0/16; 111.51.0.0/16; 111.62.0.0/16; 111.170.0.0/16; 111.206.0.0/16; 111.229.0.0/16; 111.230.0.0/16; 111.231.0.0/16; 112.13.0.0/16; 112.29.0.0/16; 112.30.0.0/16; 112.46.0.0/16; 112.48.0.0/16; 112.74.0.0/16; 112.124.0.0/16; 113.142.0.0/16; 113.219.0.0/16; 113.240.0.0/16; 114.55.0.0/16; 114.80.0.0/16; 114.119.0.0/16; 114.132.0.0/16; 115.159.0.0/16; 115.231.0.0/16; 116.62.0.0/16; 116.136.0.0/16; 116.153.0.0/16; 116.162.0.0/16; 116.169.0.0/16; 116.177.0.0/16; 116.196.0.0/16; 116.205.0.0/16; 117.50.0.0/16; 117.68.0.0/16; 117.135.0.0/16; 117.147.0.0/16; 117.161.0.0/16; 117.187.0.0/16; 118.25.0.0/16; 118.31.0.0/16; 118.89.0.0/16; 118.178.0.0/16; 118.195.0.0/16; 119.3.0.0/16; 119.23.0.0/16; 119.28.0.0/16; 119.29.0.0/16; 119.36.0.0/16; 119.45.0.0/16; 119.84.0.0/16; 119.91.0.0/16; 119.147.0.0/16; 119.167.0.0/16; 119.188.0.0/16; 120.24.0.0/16; 120.25.0.0/16; 120.26.0.0/16; 120.27.0.0/16; 120.46.0.0/16; 120.53.0.0/16; 120.55.0.0/16; 120.76.0.0/16; 120.77.0.0/16; 120.78.0.0/16; 120.79.0.0/16; 120.201.0.0/16; 120.220.0.0/16; 120.221.0.0/16; 120.222.0.0/16; 120.226.0.0/16; 120.232.0.0/16; 120.233.0.0/16; 120.240.0.0/16; 121.36.0.0/16; 121.37.0.0/16; 121.40.0.0/16; 121.41.0.0/16; 121.42.0.0/16; 121.43.0.0/16; 121.196.0.0/16; 121.199.0.0/16; 122.9.0.0/16; 122.51.0.0/16; 122.228.0.0/16; 123.6.0.0/16; 123.56.0.0/16; 123.57.0.0/16; 123.60.0.0/16; 123.129.0.0/16; 123.207.0.0/16; 123.249.0.0/16; 124.70.0.0/16; 124.71.0.0/16; 124.95.0.0/16; 124.163.0.0/16; 124.220.0.0/16; 124.221.0.0/16; 124.222.0.0/16; 124.223.0.0/16; 124.225.0.0/16; 124.236.0.0/16; 125.39.0.0/16; 128.14.0.0/16; 128.116.0.0/16; 130.44.0.0/16; 135.236.0.0/15; 137.184.0.0/16; 139.9.0.0/16; 139.129.0.0/16; 139.159.0.0/16; 139.196.0.0/16; 139.199.0.0/16; 139.224.0.0/16; 140.143.0.0/16; 140.179.0.0/16; 140.207.0.0/16; 140.249.0.0/16; 143.92.0.0/16; 147.136.0.0/16; 148.153.0.0/16; 150.107.0.0/16; 150.138.0.0/16; 150.158.0.0/16; 151.101.0.0/16; 152.136.0.0/16; 152.244.128.0/18; 157.148.0.0/16; 157.230.0.0/16; 159.75.0.0/16; 161.189.0.0/16; 162.159.128.0/19; 165.154.0.0/16; 168.138.0.0/16; 170.106.0.0/16; 172.67.0.0/16; 172.217.0.0/16; 174.137.0.0/16; 175.6.0.0/16; 175.12.0.0/16; 175.27.0.0/16; 175.178.0.0/16; 179.131.0.0/20; 180.101.0.0/16; 180.163.0.0/16; 180.184.0.0/16; 182.40.0.0/16; 182.92.0.0/16; 182.140.0.0/16; 182.242.0.0/16; 182.247.0.0/16; 183.60.0.0/16; 183.61.0.0/16; 183.131.0.0/16; 183.201.0.0/16; 183.204.0.0/16; 183.232.0.0/16; 183.240.0.0/16; 185.151.0.0/16; 185.236.0.0/16; 187.120.0.0/16; 188.175.0.0/16; 189.125.0.0/16; 191.61.0.0/16; 193.112.0.0/16; 200.211.0.0/16; 203.205.0.0/16; 213.187.0.0/16; } prefix-list CLI-GHNET-V4 { 177.124.104.0/22; } prefix-list CLI-67TELECOM-V4 { 45.173.124.0/22; 45.173.164.0/22; 45.183.60.0/22; 45.232.212.0/22; 45.234.68.0/22; 45.238.4.0/22; 181.224.168.0/22; 186.251.24.0/22; 191.5.172.0/22; } prefix-list ROBLOX { 103.140.28.0/23; 128.116.0.0/17; 141.193.3.0/24; 205.201.62.0/24; } prefix-list CLI-NEOLINK-V4 { 131.255.48.0/22; 138.219.208.0/22; 168.121.188.0/22; 170.80.180.0/22; 177.93.176.0/21; 177.128.248.0/21; 186.233.16.0/21; } prefix-list CLI-SINALBR-V6 { 2804:8e54::/32; } prefix-list router-ipv6 { apply-path "interfaces <*> unit <*> family inet6 address <*>"; } prefix-list bgp-neighbors-routing-instances { apply-path "routing-instances <*> protocols bgp group <*> neighbor <*>"; } route-filter-list BOGONS { 0.0.0.0/8 orlonger; 10.0.0.0/8 orlonger; 100.64.0.0/10 orlonger; 127.0.0.0/8 orlonger; 169.254.0.0/16 orlonger; 172.16.0.0/12 orlonger; 192.0.0.0/24 orlonger; 192.0.2.0/24 orlonger; 192.168.0.0/16 orlonger; 198.18.0.0/15 orlonger; 198.51.100.0/24 orlonger; 203.0.113.0/24 orlonger; 224.0.0.0/3 orlonger; } route-filter-list PTTs { 187.16.208.0/20 orlonger; 200.219.140.0/24 orlonger; 45.184.144.0/22 orlonger; } route-filter-list SPARKLE-DDOS { 187.85.144.0/20 upto /24; 186.211.96.0/20 upto /24; 177.155.128.0/20 upto /24; 170.150.236.0/22 upto /24; 131.255.188.0/22 upto /24; 132.255.28.0/22 upto /24; 179.97.112.0/21 upto /24; 179.97.120.0/21 upto /24; 170.150.68.0/22 upto /24; 132.255.56.0/22 upto /24; 45.235.52.0/22 upto /24; 170.254.144.0/22 upto /24; 177.91.160.0/22 upto /24; 138.36.164.0/22 upto /24; 200.194.176.0/20 upto /24; 187.73.160.0/20 upto /24; 201.77.128.0/20 upto /24; 186.193.208.0/20 upto /24; 187.60.144.0/20 upto /24; 201.148.252.0/22 upto /24; 170.233.60.0/22 upto /24; 187.60.128.0/20 upto /24; 138.185.168.0/22 upto /24; 189.89.208.0/20 upto /24; 187.85.80.0/20 upto /24; 177.126.224.0/20 upto /24; 190.108.96.0/19 upto /24; 170.246.208.0/22 upto /24; 189.90.192.0/20 upto /24; 177.52.48.0/21 upto /24; 177.84.152.0/22 upto /24; 138.99.240.0/22 upto /24; 170.239.156.0/22 upto /24; 177.8.216.0/22 upto /24; 186.232.128.0/21 upto /24; 138.36.48.0/22 upto /24; 186.232.112.0/21 upto /24; 138.186.92.0/22 upto /24; 177.92.136.0/21 upto /24; 189.90.32.0/20 upto /24; 186.193.176.0/20 upto /24; 170.231.128.0/22 upto /24; 170.231.132.0/22 upto /24; 190.109.64.0/22 upto /24; 168.195.100.0/22 upto /24; 187.120.240.0/20 upto /24; 191.7.72.0/21 upto /24; 143.0.220.0/22 upto /24; 186.227.144.0/21 upto /24; } route-filter-list PREFIX_V4-BLZ { 45.177.224.0/22 upto /32; 179.49.176.0/22 upto /32; 177.67.232.0/21 upto /32; 143.0.116.0/22 upto /32; 170.233.184.0/22 upto /32; 179.42.92.0/23 upto /32; 170.239.76.0/22 upto /32; 45.70.76.0/22 upto /32; 45.71.4.0/24 upto /32; 45.224.16.0/22 upto /32; 45.167.72.0/22 upto /32; 186.226.240.0/20 upto /32; 45.167.32.0/22 upto /32; 45.188.4.0/22 upto /32; 170.79.228.0/22 upto /32; 177.86.68.0/22 upto /32; 186.235.92.0/22 upto /32; 168.0.144.0/22 upto /32; 177.38.160.0/21 upto /32; 168.0.240.0/22 upto /32; 190.89.124.0/22 upto /32; 177.38.48.0/21 upto /32; 204.157.100.0/22 upto /32; 45.234.222.0/24 upto /32; } route-filter-list PREFIX_V6-BLZ { 2804:5dd8::/32 upto /128; 2804:77d8::/32 upto /128; 2804:c20::/32 upto /128; 2804:3280::/32 upto /128; 2804:76f8::/32 upto /128; 2804:367c::/32 upto /128; 2804:43a4::/32 upto /128; 2801:80:2240::/48 upto /128; 2804:4638::/32 upto /128; 2804:5680::/32 upto /128; 2804:3c28::/32 upto /128; 2804:5650::/32 upto /128; 2804:6680::/32 upto /128; 2804:35dc::/32 upto /128; 2804:1660::/32 upto /128; 2804:2d0c::/32 upto /128; 2801:80:1280::/48 upto /128; 2804:6af0::/32 upto /128; 2804:438c::/32 upto /128; 2804:8a1c::/32 upto /128; 2804:8d6c::/32 upto /128; 2804:4c94::/32 upto /128; } route-filter-list PREFIX_V4-IPCONECT { 45.224.172.0/22 upto /32; } route-filter-list PREFIX_V6-IPCONECT { 2804:4564::/32 upto /128; } route-filter-list PREFIX_V4-SPEEDJET { 45.189.68.0/22 upto /32; 179.42.108.0/22 upto /32; } route-filter-list PREFIX_V6-SPEEDJET { 2804:66a0::/32 upto /128; 2804:8540::/32 upto /128; 2804:7708::/32 upto /128; } route-filter-list CLI-IPCONECT { 200.80.100.0/22 upto /32; 2804:7a44::/32 upto /128; } route-filter-list PREFIX_V4-JUPITER { 138.122.32.0/22 upto /32; 177.55.64.0/20 upto /32; 138.97.92.0/22 upto /32; 168.121.160.0/22 upto /32; 170.83.80.0/22 upto /32; 177.190.72.0/21 upto /32; 189.90.32.0/20 upto /32; 186.193.176.0/20 upto /32; 143.137.200.0/22 upto /32; 143.202.180.0/22 upto /32; 131.100.216.0/22 upto /32; 191.242.196.0/22 upto /32; 190.180.148.0/22 upto /32; 138.118.192.0/22 upto /32; 177.53.116.0/22 upto /32; 170.231.128.0/22 upto /32; 170.231.132.0/22 upto /32; 189.89.0.0/20 upto /32; 168.197.12.0/22 upto /32; 170.83.136.0/22 upto /32; 177.67.92.0/22 upto /32; 170.80.128.0/22 upto /32; 201.149.108.0/22 upto /32; 170.244.68.0/22 upto /32; 200.9.67.0/24 upto /32; 128.201.172.0/22 upto /32; 177.125.20.0/22 upto /32; 45.71.172.0/22 upto /32; 200.12.139.0/24 upto /32; 170.78.52.0/22 upto /32; 45.5.100.0/22 upto /32; 45.163.100.0/22 upto /32; 45.168.108.0/22 upto /32; 177.54.224.0/20 upto /32; 177.105.144.0/20 upto /32; 177.124.88.0/21 upto /32; 45.165.212.0/22 upto /32; 45.167.140.0/22 upto /32; 45.182.208.0/22 upto /32; 131.255.224.0/22 upto /32; 143.255.204.0/22 upto /32; 170.238.72.0/22 upto /32; 45.7.24.0/22 upto /32; 168.195.44.0/22 upto /32; 170.233.148.0/22 upto /32; 177.86.248.0/22 upto /32; 167.249.12.0/22 upto /32; 177.129.224.0/22 upto /32; 177.136.104.0/21 upto /32; 170.84.112.0/22 upto /32; 187.62.112.0/22 upto /32; 45.163.24.0/22 upto /32; 45.178.236.0/22 upto /32; 138.0.52.0/22 upto /32; 177.84.108.0/22 upto /32; 138.185.108.0/22 upto /32; 170.246.96.0/22 upto /32; 131.0.192.0/22 upto /32; 128.201.24.0/22 upto /32; 164.163.220.0/22 upto /32; 186.249.208.0/21 upto /32; 138.36.20.0/22 upto /32; 201.182.220.0/22 upto /32; 186.227.184.0/22 upto /32; 131.72.64.0/22 upto /32; 168.232.204.0/22 upto /32; 201.182.252.0/22 upto /32; 45.189.72.0/22 upto /32; 189.14.120.0/22 upto /32; 179.49.192.0/22 upto /32; 177.223.148.0/22 upto /32; 138.99.124.0/22 upto /32; 200.196.136.0/22 upto /32; 143.208.136.0/2 upto /32; 45.169.8.0/22 upto /32; 131.255.28.0/22 upto /32; 201.71.12.0/22 upto /32; 181.174.244.0/22 upto /32; 170.231.216.0/22 upto /32; 138.204.240.0/22 upto /32; 186.227.76.0/22 upto /32; 187.86.160.0/22 upto /32; 181.224.80.0/22 upto /32; 191.7.0.0/23 upto /32; } route-filter-list PREFIX_V6-JUPITER { 2804:25e8::/32 upto /128; 2804:4fc::/32 upto /128; 2804:2360::/32 upto /128; 2804:7a1c::/32 upto /128; 2804:174c::/32 upto /128; 2804:c2c::/32 upto /128; 2804:2a58::/32 upto /128; 2804:1c7c::/32 upto /128; 2804:3f28::/32 upto /128; 2804:d80::/32 upto /128; 2804:4474::/32 upto /128; 2801:80:16c0::/48 upto /128; 2804:3504::/32 upto /128; 2804:3a8c::/32 upto /128; 2804:539c::/32 upto /128; 2804:574c::/32 upto /128; 2804:4bc::/32 upto /128; 2804:3484::/32 upto /128; 2804:5584::/32 upto /128; 2804:5698::/32 upto /128; 2804:6180::/32 upto /128; 2804:2084::/32 upto /128; 2804:3e04::/32 upto /128; 2804:33a0::/32 upto /128; 2804:32bc::/32 upto /128; 2804:2a64::/32 upto /128; 2804:fe0::/32 upto /128; 2804:68dc::/32 upto /128; 2804:541c::/32 upto /128; 2804:5f78::/32 upto /128; 2804:20fc::/32 upto /128; 2804:2664::/32 upto /128; 2804:1b50::/32 upto /128; 2804:3ee4::/32 upto /128; 2804:41c4::/32 upto /128; 2804:a28::/32 upto /128; 2804:42fc::/32 upto /128; 2804:ed4::/32 upto /128; 2804:29e8::/32 upto /128; 2804:308c::/32 upto /128; 2804:43f8::/32 upto /128; 2804:66a4::/32 upto /128; 2804:7210::/32 upto /128; 2804:78fc::/32 upto /128; 2804:74d4::/32 upto /128; 2804:74b0::/32 upto /128; 2804:1f3c:8200::/40 upto /128; 2804:192c::/32 upto /128; 2804:57a0::/32 upto /128; 2804:1ecc::/32 upto /128; 2804:69ac::/32 upto /128; 2804:8c90::/32 upto /128; 2804:7bc4::/32 upto /128; 2804:279c::/32 upto /128; 2804:8e84::/32 upto /128; 2804:8f0c::/32 upto /128; 2804:8208::/32 upto /128; 2804:749c::/32 upto /128; 2804:7cd0::/32 upto /128; 2804:3900::/32 upto /128; } route-filter-list PREFIX_V4-NEOLINK { 45.175.116.0/22 upto /32; 186.233.16.0/21 upto /32; 177.128.248.0/21 upto /32; 177.93.176.0/21 upto /32; 138.219.208.0/22 upto /32; 168.121.188.0/22 upto /32; 170.80.180.0/22 upto /32; 131.255.48.0/22 upto /32; 45.235.192.0/22 upto /32; } route-filter-list PREFIX_V6-NEOLINK { 2804:814::/32 upto /128; 2804:4e0c::/32 upto /128; } route-filter-list PREFIX_V4-GHNET { 177.37.48.0/20 upto /32; 187.102.16.0/20 upto /32; 143.208.68.0/22 upto /32; 170.79.64.0/22 upto /32; 45.160.136.0/22 upto /32; 170.81.56.0/22 upto /32; 45.179.120.0/22 upto /32; 186.192.0.0/20 upto /32; 186.235.64.0/20 upto /32; 189.91.128.0/20 upto /32; 187.85.224.0/20 upto /32; 187.85.240.0/20 upto /32; 45.185.120.0/22 upto /32; 24.152.44.0/22 upto /32; 200.187.100.0/22 upto /32; 181.233.64.0/22 upto /32; 189.76.80.0/20 upto /32; 177.23.104.0/22 upto /32; 45.186.32.0/22 upto /32; 177.36.48.0/20 upto /32; 138.255.160.0/22 upto /32; 45.182.148.0/22 upto /32; 177.124.104.0/22 upto /32; } route-filter-list PREFIX_V6-GHNET { 2804:8464::/32 upto /128; 2804:2a80::/32 upto /128; 2804:3598::/32 upto /128; 2804:50c4::/32 upto /128; 2804:3760::/32 upto /128; 2804:5f38::/32 upto /128; 2804:3360::/32 upto /128; 2804:63c0::/32 upto /128; 2804:6cf0::/32 upto /128; 2804:6fc4::/32 upto /128; 2804:7ae8::/32 upto /128; 2804:ab0::/32 upto /128; 2804:6464::/32 upto /128; 2804:702c::/32 upto /128; 2804:8e44::/32 upto /128; 2804:28b4::/32 upto /128; 2804:6188::/32 upto /128; 2804:7c4::/32 upto /128; } route-filter-list PREFIX_V4-GIGABYTE { 177.129.204.0/22 upto /32; 132.255.228.0/22 upto /32; 138.255.200.0/22 upto /32; 138.118.108.0/22 upto /32; 45.65.236.0/22 upto /32; 45.163.196.0/22 upto /32; 45.171.32.0/22 upto /32; 45.173.132.0/22 upto /32; 45.176.172.0/22 upto /32; 45.239.232.0/22 upto /32; 138.97.36.0/22 upto /32; 143.202.236.0/22 upto /32; 170.80.0.0/22 upto /32; 177.12.92.0/22 upto /32; 177.87.252.0/22 upto /32; 200.52.232.0/22 upto /32; 200.215.240.0/22 upto /32; 186.227.16.0/20 upto /32; } route-filter-list PREFIX_V6-GIGABYTE { 2804:3aac::/32 upto /128; 2804:67f0::/32 upto /128; 2804:6778::/32 upto /128; 2804:20c0::/32 upto /128; 2804:68f8::/32 upto /128; 2804:2510::/32 upto /128; 2804:118c::/32 upto /128; 2804:1044::/32 upto /128; 2804:1574::/32 upto /128; 2804:22e4::/32 upto /128; 2804:3d5c::/32 upto /128; 2804:5070::/32 upto /128; 2804:5320::/32 upto /128; 2804:5958::/32 upto /128; 2804:5b3c::/32 upto /128; 2804:5d10::/32 upto /128; 2804:6eb4::/32 upto /128; 2804:7508::/32 upto /128; } route-filter-list PREFIX_V4-ULTRANET { 177.37.64.0/20 upto /32; 177.37.80.0/21 upto /32; 177.37.88.0/21 upto /32; 179.51.180.0/22 upto /32; 177.128.216.0/22 upto /32; 179.96.168.0/21 upto /32; 177.73.253.0/24 upto /32; 45.163.12.0/22 upto /32; 138.0.68.0/22 upto /32; 170.239.196.0/22 upto /32; 179.43.4.0/22 upto /32; 179.127.116.0/22 upto /32; 186.232.152.0/21 upto /32; 177.129.200.0/22 upto /32; 168.90.28.0/22 upto /32; 186.219.56.0/22 upto /32; 45.160.204.0/22 upto /32; 145.238.172.0/22 upto /32; 177.86.120.0/22 upto /32; 190.115.220.0/22 upto /32; 45.71.64.0/22 upto /32; 131.255.132.0/22 upto /32; 168.195.228.0/22 upto /32; 179.63.176.0/23 upto /32; 45.164.26.0/24 upto /32; 177.125.181.0/24 upto /32; 177.200.128.0/22 upto /32; 131.196.164.0/22 upto /32; 177.223.136.0/22 upto /32; 45.163.72.0/22 upto /32; 45.6.116.0/22 upto /32; 181.232.128.0/22 upto /32; 45.178.16.0/22 upto /32; 177.67.52.0/22 upto /32; 45.168.4.0/22 upto /32; 45.173.220.0/22 upto /32; 131.108.56.0/22 upto /32; } route-filter-list PREFIX_V6-ULTRANET { 2804:e24::/32 upto /128; 2804:7768::/32 upto /128; 2804:1548::/32 upto /128; 2804:7090::/32 upto /128; 2804:5384::/32 upto /128; 2804:211c::/32 upto /128; 2804:7268::/32 upto /128; 2804:16e0::/32 upto /128; 2804:934::/32 upto /128; 2804:904::/32 upto /128; 2804:1204::/32 upto /128; 2804:50c8::/32 upto /128; 2801:80:2430::/48 upto /128; 2804:830::/32 upto /128; 2804:7208::/32 upto /128; 2804:4440::/32 upto /128; 2804:2054::/32 upto /128; 2804:7e84::/32 upto /128; 2804:7368::/32 upto /128; 2804:1d00::/32 upto /128; 2804:5b40::/32 upto /128; 2804:c34::/32 upto /128; 2804:5724::/32 upto /128; 2804:5ecc::/32 upto /128; 2804:7cb0::/32 upto /128; 2804:7758::/32 upto /128; 2804:3fc8::/32 upto /128; } route-filter-list PREFIX_V4-ROS { 45.182.156.0/22 upto /32; 177.124.64.0/21 upto /32; 177.91.120.0/21 upto /32; 170.231.188.0/22 upto /32; 45.183.128.0/23 upto /32; 45.190.112.0/22 upto /32; 45.191.180.0/22 upto /32; 45.234.204.0/22 upto /32; 186.233.120.0/21 upto /32; 187.86.112.0/20 upto /32; 168.228.156.0/22 upto /32; 143.208.112.0/22 upto /32; 170.239.52.0/22 upto /32; 186.219.232.0/22 upto /32; 160.20.204.0/22 upto /32; 167.250.172.0/22 upto /32; 186.227.32.0/20 upto /32; 131.0.120.0/22 upto /32; 45.178.100.0/22 upto /32; 45.171.228.0/22 upto /32; 190.111.128.0/22 upto /32; 189.126.240.0/20 upto /32; 187.17.176.0/20 upto /32; 177.22.240.0/21 upto /32; 179.124.0.0/21 upto /32; 45.185.96.0/22 upto /32; 200.219.24.0/22 upto /32; 45.185.216.0/22 upto /32; 177.73.104.0/22 upto /32; 45.190.148.0/22 upto /32; 177.128.120.0/22 upto /32; 45.188.180.0/22 upto /32; 45.171.204.0/22 upto /32; 45.188.96.0/22 upto /32; 45.172.84.0/22 upto /32; 45.6.76.0/22 upto /32; 45.232.212.0/22 upto /32; 143.208.124.0/22 upto /32; 170.84.216.0/22 upto /32; 45.5.240.0/22 upto /32; 170.82.16.0/22 upto /32; 181.189.72.0/22 upto /32; 168.121.4.0/22 upto /32; 177.53.164.0/22 upto /32; 38.211.3.0/24 upto /32; 38.183.94.0/24 upto /32; } route-filter-list PREFIX_V6-ROS { 2804:6160::/32 upto /128; 2804:bac::/32 upto /128; 2804:3258::/32 upto /128; 2804:6220::/32 upto /128; 2804:67a4::/32 upto /128; 2804:686c::/32 upto /128; 2804:4cf4::/32 upto /128; 2804:bf4::/32 upto /128; 2804:e50::/32 upto /128; 2804:2fc4::/32 upto /128; 2804:2af8::/32 upto /128; 2804:6e9c::/32 upto /128; 2804:3c74::/32 upto /128; 2804:1c4::/32 upto /126; 2804:7aec::/32 upto /128; 2804:5e4c::/32 upto /128; 2804:5a10::/32 upto /128; 2804:6b28::/32 upto /128; 2804:130::/32 upto /128; 2804:639c::/32 upto /128; 2804:71cc::/32 upto /128; 2804:63f4::/32 upto /128; 2804:3ba0::/32 upto /128; 2804:67f8::/32 upto /128; 2804:594c::/32 upto /128; 2804:6608::/32 upto /128; 2804:5a74::/32 upto /128; 2804:65cc::/32 upto /128; 2804:5a3c::/32 upto /128; 2804:3bec::/32 upto /128; 2804:4afc::/32 upto /128; 2804:2af0::/32 upto /128; 2804:3b04::/32 upto /128; 2804:37d0::/32 upto /128; 2804:84c8::/32 upto /128; 2804:2dcc::/32 upto /128; 2804:bb0::/32 upto /128; } route-filter-list PREFIX_V4-OPENX; route-filter-list PREFIX_V6-OPENX; route-filter-list PREFIX_V4-FLORESTAWII { 45.172.76.0/22 upto /32; } route-filter-list PREFIX_V6-FLORESTAWII { 2804:5a2c::/32 upto /128; } route-filter-list PREFIX_V4-ADAPTLINK { 186.219.120.0/21 upto /32; 138.204.212.0/22 upto /32; 170.150.24.0/22 upto /32; } route-filter-list PREFIX_V6-ADAPTLINK { 2804:eb4::/32 upto /128; } route-filter-list PREFIX_V4-ALT { 191.52.192.0/20 upto /32; 191.52.128.0/18 upto /32; } route-filter-list PREFIX_V4-ARIAS { 45.226.72.0/22 upto /32; 45.7.180.0/22 upto /32; 164.163.104.0/22 upto /32; 45.190.232.0/22 upto /32; 177.53.28.0/22 upto /32; 177.73.40.0/24 upto /32; 187.86.16.0/20 upto /32; 187.45.80.0/20 upto /32; 187.86.0.0/20 upto /32; 190.89.80.0/22 upto /32; 131.0.48.0/23 upto /32; } route-filter-list PREFIX_V6-ARIAS { 2804:4600::/32 upto /128; 2804:3e7c::/32 upto /128; 2804:1abc::/32 upto /128; 2804:6cf0::/32 upto /128; 2804:405c::/32 upto /128; 2804:67d8::/32 upto /128; 2804:72a0::/32 upto /128; 2804:6e58::/32 upto /128; 2804:86c4::/32 upto /128; 2804:8684::/32 upto /128; 2804:88::/32 upto /128; 2804:6b34::/32 upto /128; } route-filter-list PREFIX_V4-COELHO { 138.0.52.0/22 upto /32; 131.221.228.0/22 upto /32; 168.90.124.0/22 upto /32; 200.9.67.0/24 upto /32; 45.185.120.0/22 upto /32; 45.176.180.0/22 upto /32; 177.55.64.0/20 upto /32; 177.23.24.0/22 upto /32; 168.232.80.0/22 upto /32; 138.118.4.0/22 upto /32; 168.196.8.0/22 upto /32; 179.48.232.0/22 upto /32; 45.173.172.0/22 upto /32; 179.49.148.0/22 upto /32; 138.122.240.0/22 upto /32; 45.71.80.0/22 upto /32; 190.109.92.0/22 upto /32; 168.195.44.0/22 upto /32; 128.201.208.0/22 upto /32; 45.191.104.0/22 upto /32; 143.255.204.0/22 upto /32; 170.238.72.0/22 upto /32; 131.255.224.0/22 upto /32; 187.49.0.0/21 upto /32; 187.49.12.0/22 upto /32; 187.49.11.0/24 upto /32; 177.84.48.0/21 upto /32; 201.149.124.0/22 upto /32; 177.75.224.0/20 upto /32; 200.53.64.0/22 upto /32; 177.52.88.0/21 upto /32; 186.192.64.0/20 upto /32; 187.85.48.0/21 upto /32; 189.113.56.0/21 upto /32; 187.62.224.0/19 upto /32; 186.216.0.0/18 upto /32; 186.0.148.0/22 upto /32; 38.226.188.0/23 upto /32; } route-filter-list PREFIX_V6-COELHO { 2804:1ebc::/32 upto /128; 2801:80:1280::/48 upto /128; 2804:20fc::/32 upto /128; 2804:63c0::/32 upto /128; 2804:5d14::/32 upto /128; 2804:4fc::/32 upto /128; 2804:74ac::/32 upto /128; 2804:3034::/32 upto /128; 2804:24c4::/32 upto /128; 2804:759c::/32 upto /128; 2801:80:3530::/48 upto /128; 2804:77b4::/32 upto /128; 2804:268c::/32 upto /128; 2804:4408::/32 upto /128; 2804:7920::/32 upto /128; 2804:33a0::/32 upto /128; 2804:3f98::/32 upto /128; 2804:689c::/32 upto /128; 2804:2084::/32 upto /128; 2804:85e4::/32 upto /128; 2804:d4::/32 upto /128; 2804:65c::/32 upto /128; 2804:1a4c::/32 upto /128; 2804:7c90::/32 upto /128; 2804:ba0::/32 upto /128; 2804:a1c::/32 upto /128; 2804:5f94::/32 upto /128; 2804:6d00::/32 upto /128; 2804:8a3c::/32 upto /128; } route-filter-list PREFIX_V4-EMITEL { 138.59.220.0/22 upto /32; 128.201.100.0/22 upto /32; 45.5.252.0/22 upto /32; 201.182.216.0/22 upto /32; 45.186.32.0/22 upto /32; 138.0.48.0/22 upto /32; 186.192.0.0/20 upto /32; 186.235.64.0/20 upto /32; 168.195.0.0/22 upto /32; 132.255.152.0/22 upto /32; 167.249.64.0/22 upto /32; 168.196.4.0/22 upto /32; 45.237.248.0/22 upto /32; 164.163.220.0/22 upto /32; 38.9.54.0/23 upto /32; 190.89.4.0/22 upto /32; 138.97.148.0/22 upto /32; 45.228.0.0/22 upto /32; 164.163.192.0/22 upto /32; 179.63.138.0/23 upto /32; 45.224.236.0/22 upto /32; 179.42.12.0/22 upto /32; 177.125.192.0/22 upto /32; 128.201.68.0/22 upto /32; 45.185.44.0/22 upto /32; 177.155.240.0/21 upto /32; 45.160.136.0/22 upto /32; 170.81.56.0/22 upto /32; 45.165.0.0/22 upto /32; 187.102.16.0/20 upto /32; 143.208.68.0/22 upto /32; 45.189.220.0/22 upto /32; 38.224.255.0/24 upto /32; 138.36.228.0/22 upto /32; 45.175.72.0/22 upto /32; 143.137.52.0/22 upto /32; 38.56.244.0/23 upto /32; } route-filter-list PREFIX_V6-EMITEL { 2804:22dc::/32 upto /128; 2804:3ed8::/32 upto /128; 2804:3ae0::/32 upto /128; 2804:42f8::/32 upto /128; 2804:6464::/32 upto /128; 2804:2134::/32 upto /128; 2804:3360::/32 upto /128; 2804:33a8::/32 upto /128; 2804:20b0::/32 upto /128; 2804:4f00::/32 upto /128; 2804:41c4::/32 upto /128; 2804:7e44::/32 upto /128; 2804:6b6c::/32 upto /128; 2804:2404::/32 upto /128; 2804:82d0::/32 upto /128; 2804:4770::/32 upto /128; 2804:409c::/32 upto /128; 2804:4524::/32 upto /128; 2804:3f34::/32 upto /128; 2804:3eb8::/32 upto /128; 2804:6490::/32 upto /128; 2804:6360::/32 upto /128; 2804:b70::/32 upto /128; 2804:50c4::/32 upto /128; 2804:3760::/32 upto /128; 2804:54b0::/32 upto /128; 2804:2a80::/32 upto /128; 2804:673c::/32 upto /128; 2804:88c0::/32 upto /128; 2804:2238::/32 upto /128; 2804:5c1c::/32 upto /128; 2804:29bc::/32 upto /128; 2804:93b8::/32 upto /128; 2804:940c::/32 upto /128; } route-filter-list PREFIX_V4-FIREMICRO { 177.126.144.0/21 upto /32; 170.247.12.0/22 upto /32; 45.161.60.0/22 upto /32; 45.189.128.0/22 upto /32; 170.0.132.0/22 upto /32; } route-filter-list PREFIX_V6-FIREMICRO { 2804:c78::/32 upto /128; 2804:5178::/32 upto /128; 2804:66d0::/32 upto /128; 2804:30f0::/32 upto /128; } route-filter-list PREFIX_V4-IRANET { 170.150.72.0/22 upto /32; 45.233.56.0/22 upto /32; 45.172.180.0/22 upto /32; 138.94.64.0/22 upto /32; } route-filter-list PREFIX_V6-IRANET { 2804:31b4::/32 upto /128; 2804:4b30::/32 upto /128; 2804:5a6c::/32 upto /128; 2804:22f8::/32 upto /128; } route-filter-list PREFIX_V4-LIBERTAS { 189.89.223.0/24 upto /32; 189.89.221.0/24 upto /32; 189.89.220.0/24 upto /32; } route-filter-list PREFIX_V6-LIBERTAS { 2804:200::/32 upto /128; } route-filter-list PREFIX_V4-PIB { 200.194.176.0/20 upto /32; } route-filter-list PREFIX_V4-MILBR { 187.120.240.0/20 upto /32; 191.7.72.0/21 upto /32; 189.51.192.0/20 upto /32; 187.0.48.0/20 upto /32; 201.159.180.0/22 upto /32; 45.70.16.0/22 upto /32; 191.241.176.0/21 upto /32; 45.226.76.0/22 upto /32; } route-filter-list PREFIX_V6-MILBR { 2804:141c::/32 upto /128; 2804:ae0::/32 upto /128; 2804:1978::/32 upto /128; 2804:4304::/32 upto /128; 2804:1170::/32 upto /128; } route-filter-list PREFIX_V4-NETSPEED { 45.70.16.0/22 upto /32; 45.70.128.0/22 upto /32; 45.160.228.0/22 upto /32; 45.225.168.0/22 upto /32; 167.250.228.0/22 upto /32; 177.39.112.0/21 upto /32; 177.155.160.0/20 upto /32; 187.0.48.0/20 upto /32; 187.120.240.0/20 upto /32; 189.51.192.0/20 upto /32; 189.76.64.0/20 upto /32; 191.5.128.0/20 upto /32; 191.7.72.0/21 upto /32; 191.241.176.0/21 upto /32; 201.159.180.0/22 upto /32; 177.190.152.0/21 upto /32; 186.250.228.0/22 upto /32; } route-filter-list PREFIX_V6-NETSPEED { 2804:ae0::/32 upto /128; 2804:2c90::/32 upto /128; 2804:121c::/32 upto /128; 2804:1978::/32 upto /128; } route-filter-list PREFIX_V4-SCON { 45.233.56.0/22 upto /32; 45.224.172.0/22 upto /32; 24.152.64.0/22 upto /32; 45.172.180.0/22 upto /32; } route-filter-list PREFIX_V6-SCON { 2804:4b30::/32 upto /128; 2804:4564::/32 upto /128; 2804:6cac::/32 upto /128; 2804:5a6c::/32 upto /128; } route-filter-list PREFIX_V4-SONIK { 131.255.176.0/22 upto /32; 170.247.252.0/22 upto /32; 138.219.52.0/22 upto /32; 168.232.172.0/22 upto /32; 177.84.20.0/22 upto /32; 45.230.68.0/22 upto /32; 128.201.8.0/22 upto /32; 200.142.225.0/24 upto /32; } route-filter-list PREFIX_V6-SONIK { 2804:2074::/32 upto /128; 2804:27d4::/32 upto /128; 2804:4900::/32 upto /128; 2804:3e88::/32 upto /128; 2804:8b6c::/32 upto /128; } route-filter-list PREFIX_V4-STRATUS { 189.89.208.0/20 upto /32; 138.185.168.0/22 upto /32; 187.60.128.0/20 upto /32; 45.238.132.0/22 upto /32; } route-filter-list PREFIX_V6-STRATUS { 2804:200::/32 upto /128; 2804:274c::/32 upto /128; 2804:4f70::/32 upto /128; } route-filter-list PREFIX_V4-UNE { 186.194.172.0/22 upto /32; 45.163.144.0/22 upto /32; 177.12.212.0/22 upto /32; 38.183.90.0/23 upto /32; } route-filter-list PREFIX_V6-UNE { 2804:7118::/32 upto /128; 2804:11dc:b000::/36 upto /128; 2804:532c::/32 upto /128; 2804:70d0::/32 upto /128; 2804:90ac::/32 upto /128; } route-filter-list PREFIX_V4-GOTCHANET { 168.181.246.0/23 upto /32; 201.131.46.0/24 upto /32; 187.102.111.0/24 upto /32; 168.181.244.0/22 upto /32; } route-filter-list PREFIX_V6-GOTCHANET { 2804:7bd8::/32 upto /128; 2804:829c::/32 upto /128; 2804:2eb0::/32 upto /128; } route-filter-list PREFIX_V4-G6 { 181.224.76.0/22 upto /32; } route-filter-list PREFIX_V6-G6 { 2804:7c60::/32 upto /128; } route-filter-list PREFIX_V4-WSNET { 177.136.96.0/21 upto /32; 170.244.28.0/22 upto /32; } route-filter-list PREFIX_V6-WSNET { 2804:fdc::/32 upto /128; } route-filter-list PREFIX_V4-WEBBY { 45.163.148.0/22 upto /32; 200.36.144.0/22 upto /32; 138.255.24.0/22 upto /32; 189.124.8.0/22 upto /32; 189.124.0.0/21 upto /32; 181.225.164.0/22 upto /32; 186.219.64.0/20 upto /32; 189.124.12.0/24 upto /32; 177.152.96.0/22 upto /32; 206.85.190.0/23 upto /32; 179.0.78.0/24 upto /32; 45.172.200.0/22 upto /32; 179.107.52.0/22 upto /32; 138.117.46.0/23 upto /32; 186.224.0.0/20 upto /32; 186.224.16.0/21 upto /32; 138.0.32.0/22 upto /32; 168.0.248.0/22 upto /32; 170.238.88.0/22 upto /32; 170.81.188.0/22 upto /32; 177.105.128.0/20 upto /32; 179.96.128.0/20 upto /32; 179.96.144.0/20 upto /32; 189.90.96.0/20 upto /32; 201.62.64.0/20 upto /32; 201.62.80.0/20 upto /32; } route-filter-list PREFIX_V6-WEBBY { 2804:530c::/32 upto /128; 2804:7968::/32 upto /128; 2804:124::/32 upto /128; 2804:1d2c::/32 upto /128; 2804:7434::/32 upto /128; 2804:428::/32 upto /128; 2804:6e44::/32 upto /128; 2804:5b30::/32 upto /128; 2804:8d88::/32 upto /128; 2804:19c::/32 upto /128; 2804:128::/32 upto /128; } route-filter-list PREFIX_V4-NOVONET { 149.18.32.0/23 upto /32; 149.57.32.0/23 upto /32; } route-filter-list PREFIX_V6-NOVONET { 2804:8730::/32 upto /128; } route-filter-list PREFIX_V4-INFORNET { 138.117.116.0/22 upto /32; 170.80.100.0/22 upto /32; } route-filter-list PREFIX_V6-INFORNET { 2804:249c::/32 upto /128; } route-filter-list PREFIX_V4-GIGABYTEPA { 201.149.124.0/22 upto /32; 177.75.224.0/20 upto /32; } route-filter-list PREFIX_V6-GIGABYTEPA { 2804:1a4c::/32 upto /128; } route-filter-list PREFIX_V4-NETSPEED_NETMG { 191.241.176.0/21 upto /32; } route-filter-list PREFIX_V6-NETSPEED_NETMG { 2804:2c90::/32 upto /128; } route-filter-list PREFIX_V4-MEGANET { 45.170.196.0/22 upto /32; 200.53.84.0/22 upto /32; } route-filter-list PREFIX_V6-MEGANET { 2804:5924::/32 upto /128; 2804:7950::/32 upto /128; } route-filter-list PREFIX_V4-CONECTAMG { 190.89.220.0/22 upto /32; 45.180.4.0/22 upto /32; } route-filter-list PREFIX_V6-CONECTAMG { 2804:6b70::/32 upto /128; 2804:8cc4::/32 upto /128; 2804:5f94::/32 upto /128; } route-filter-list PREFIX_V4-AXNET { 187.102.48.0/20 upto /32; 177.84.112.0/21 upto /32; } route-filter-list PREFIX_V6-AXNET { 2804:43c4::/32 upto /128; 2804:66c::/32 upto /128; } route-filter-list PREFIX_V4-WCM { 45.161.232.0/22 upto /32; } route-filter-list PREFIX_V6-WCM { 2804:51cc::/32 upto /128; } route-filter-list PREFIX_V4-SONIK-TESTE { 131.255.176.0/22 upto /32; } route-filter-list CLI-CONECTAMG-V4 { 206.62.56.0/22 upto /32; } route-filter-list PREFIX_V4-SIDYS { 177.105.176.0/20 upto /32; 138.219.204.0/22 upto /32; 170.238.92.0/22 upto /32; } route-filter-list PREFIX_V6-SIDYS { 2804:770::/32 upto /128; } route-filter-list PREFIX_V4-LAZERNET { 186.227.16.0/20 upto /32; 45.176.172.0/22 upto /32; 45.65.236.0/22 upto /32; 45.173.132.0/22 upto /32; 45.190.204.0/22 upto /32; 177.87.252.0/22 upto /32; 138.97.36.0/22 upto /32; 45.171.32.0/22 upto /32; 45.163.196.0/22 upto /32; 143.202.236.0/22 upto /32; 170.80.0.0/22 upto /32; 177.12.92.0/22 upto /32; 45.239.232.0/22 upto /32; 200.52.232.0/22 upto /32; 200.215.240.0/22 upto /32; } route-filter-list PREFIX_V6-LAZERNET { 2804:118c::/32 upto /128; 2804:5d10::/32 upto /128; 2804:3d5c::/32 upto /128; 2804:5b3c::/32 upto /128; 2804:6778::/32 upto /128; 2804:1574::/32 upto /128; 2804:22e4::/32 upto /128; 2804:5958::/32 upto /128; 2804:5320::/32 upto /128; 2804:1044::/32 upto /128; 2804:6eb4::/32 upto /128; 2804:7508::/32 upto /128; 2804:5070::/32 upto /128; } route-filter-list PREFIX_V4-MEGATELECOM { 200.220.128.0/20 upto /32; 179.109.16.0/20 upto /32; 186.236.80.0/20 upto /32; 189.127.0.0/20 upto /32; 131.255.24.0/22 upto /32; 186.236.64.0/20 upto /32; 187.95.208.0/22 upto /32; } route-filter-list PREFIX_V6-MEGATELECOM { 2804:64::/32 upto /128; 2804:6d9c::/32 upto /128; } route-filter-list PREFIX_V4-CTE { 191.7.2.0/23 upto /32; 170.239.140.0/22 upto /32; 200.108.172.0/22 upto /32; } route-filter-list PREFIX_V6-CTE { 2804:8b9c::/32 upto /128; 2804:3684::/32 upto /128; 2804:6938::/32 upto /128; } route-filter-list PREFIX_V4-VEXNET { 177.124.104.0/22 upto /32; } route-filter-list PREFIX_V6-VEXNET { 2804:7c4::/32 upto /128; } policy-statement BGP-CDN-GOOGLE-out { term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term +0 { from community [ CDN-GOOGLE+0 CDN+0 ]; then accept; } term NO_EXPORT { from community [ NO_EXPORT CDN-NO_EXPORT CDN-GOOGLE-NO_EXPORT ]; then reject; } term +1 { from community [ CDN-GOOGLE+1 CDN+1 ]; then { as-path-prepend 263444; accept; } } term +2 { from community [ CDN-GOOGLE+2 CDN+2 ]; then { as-path-prepend "263444 263444"; accept; } } term +3 { from community [ CDN-GOOGLE+3 CDN+3 ]; then { as-path-prepend "263444 263444 263444"; accept; } } term PREFIX-CLIENT-IP { from community PREFIX-CLIENT-IP; then accept; } term PREFIX-CLIENT-CONTEUDO { from community PREFIX-CLIENT-CONTEUDO; then accept; } term PREFIX-ASN { from community PREFIX-ASN; then { metric 1; accept; } } term REJECT { then reject; } } policy-statement BGP-CDN-NETFLIX-out { term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term +0 { from community [ CDN-NETFLIX+0 CDN+0 ]; then accept; } term NO_EXPORT { from community [ NO_EXPORT CDN-NO_EXPORT CDN-NETFLIX-NO_EXPORT ]; then reject; } term +1 { from community [ CDN-NETFLIX+1 CDN+1 ]; then { as-path-prepend 263444; accept; } } term +2 { from community [ CDN-NETFLIX+2 CDN+2 ]; then { as-path-prepend "263444 263444"; accept; } } term +3 { from community [ CDN-NETFLIX+3 CDN+3 ]; then { as-path-prepend "263444 263444 263444"; accept; } } term PREFIX-CLIENT-IP { from community PREFIX-CLIENT-IP; then accept; } term PREFIX-CLIENT-CONTEUDO { from community PREFIX-CLIENT-CONTEUDO; then accept; } term PREFIX-ASN { from community PREFIX-ASN; then accept; } term REJECT { then reject; } } policy-statement BGP-CLI-OUT-DEFAULT { term DEFAULT { from policy DEFAULT; then { next-hop self; accept; } } term ROTAS { from community PREFIX-ASN; then { next-hop self; accept; } } term REJECT { then reject; } } policy-statement BGP-CLI-OUT-FULL { term DEFAULT { from policy DEFAULT; then accept; } term BLACKHOLE { from community BLACKHOLE; then reject; } term DIVERT { from community DIVERT; then reject; } inactive: term IMPROVED { from community PREFIX-IMPROVED; then reject; } term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term ACCEPT { from protocol bgp; then { next-hop self; accept; } } } policy-statement BGP-CLI-OUT-PARCIAL { term DEFAULT { from policy DEFAULT; then accept; } term ROTAS { from community [ PREFIX-ASN PREFIX-CLIENT-IP PREFIX-WAN-PEER ]; then accept; } term REJECT { then reject; } } policy-statement BGP-CLI-OUT-PARCIAL-PTT { term DEFAULT { from policy DEFAULT; then accept; } term ROTAS { from community [ PREFIX-ASN PREFIX-CLIENT-IP PREFIX-WAN-PEER PREFIX-WAN-PTT ]; then accept; } term REJECT { then reject; } } policy-statement BGP-DDOS-DURAND-out { term CLIENTES { from community DDOS-DURAND; then accept; } term REJECT { then reject; } } policy-statement BGP-DECIX-NY-in { term REJECT { then reject; } term RPKI-CHECK { from policy RPKI-CHECK; } term FILTRO-REJECT-in { from policy FILTRO-REJECT-in; then reject; } term AS-CLIENTES { from as-path-group AS-CLIENTES; then reject; } term DENY { from as-path-group AS-DECIX-DENY; then reject; } term MELHORAR { from as-path-group AS-DECIX-MELHORAR; then { local-preference 260; accept; } } term PIORAR { from as-path-group AS-DECIX-PIORAR; then { local-preference 240; accept; } } term ACCEPT { then { local-preference 250; community add PREFIX-IP-DECIX; accept; } } } policy-statement BGP-DECIX-NY-out { term IMPROVED { from community PREFIX-IMPROVED; then reject; } term BGP-IP-FILTRO { from policy FILTRO-IP-out; then next term; } term FILTRO-BLACKHOLE { from policy FILTRO-BLACKHOLE; then { community add IP-DECIX-BLACKHOLE; accept; } } term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term NO_ADVERTISE { then { community add IP-DECIX-NO_ADVERTISE; next term; } } term +0 { from community IP-DECIX+0; then accept; } term +1 { from community IP-DECIX+1; then { as-path-prepend 263444; accept; } } term +2 { from community IP-DECIX+2; then { as-path-prepend "263444 263444"; accept; } } term +3 { from community IP-DECIX+3; then { as-path-prepend "263444 263444 263444"; accept; } } term NO_EXPORT { from community [ NO_EXPORT IP-NO_EXPORT IP-DECIX-NO_EXPORT ]; then reject; } term IP+1 { from community IP+1; then { as-path-prepend 263444; next term; } } term IP+2 { from community IP+2; then { as-path-prepend "263444 263444"; next term; } } term IP+3 { from community IP+3; then { as-path-prepend "263444 263444 263444"; next term; } } term PREFIX-CLIENT-IP { from community PREFIX-CLIENT-IP; then { metric 1000; accept; } } term PREFIX-ASN { from community PREFIX-ASN; then accept; } term REJECT { then reject; } } policy-statement BGP-FILTRO-BOGON-in { term V4 { from { family inet; community BOGON-NO_EXPORT; } then { community add NO_EXPORT; community add no-export; next-hop discard; accept; } } term V6 { from { family inet6; community BOGON-NO_EXPORT; } then { community add NO_EXPORT; community add no-export; next-hop discard; accept; } } then reject; } policy-statement BGP-FILTRO-CLIENTE-FLOW-in { term BLACKHOLE { from policy FILTRO-BLACKHOLE; then { local-preference 666; next-hop discard; accept; } } term FILTRO-REJECT-in { from policy FILTRO-REJECT-in; then reject; } term MITIGACAO { then { local-preference 550; community add PREFIX-ORIGIN-THIS-ROUTER; community set IP-NO_EXPORT; community add PTT-NO_EXPORT; community add IP-TATA-DDOS; community add IP-CHINA+1; community add IP-CDNSTAR+0; community add IP-SPARKLE+3; community add PEER-EDGEUNO-NO_EXPORT; community add PEER-GOOGLE-NO_EXPORT; community add IP-VIVO+0; next-hop peer-address; accept; } } } policy-statement BGP-FILTRO-CLIENTE-IP-in { term BLACKHOLE { from policy FILTRO-BLACKHOLE; then { local-preference 666; next-hop discard; accept; } } term FILTRO-REJECT-in { from policy FILTRO-CLI-REJECT-in; then reject; } term ACCEPT { then { local-preference 550; community add PREFIX-CLIENT-IP; community add PREFIX-ORIGIN-THIS-ROUTER; next-hop peer-address; accept; } } } policy-statement BGP-FILTRO-PTT-in { term BLACKLIST { from community BLACKLIST_GERAL; then { community delete BLACKLIST_GERAL; next term; } } term MEUS-PREFIXOS { from policy MEUS-PREFIXOS; then accept; } term RPKI-CHECK { from policy RPKI-CHECK; } } policy-statement BGP-IP-CDNSTAR-in { term RPKI-CHECK { from policy RPKI-CHECK; } term FILTRO-REJECT-in { from policy FILTRO-REJECT-in; then reject; } term RPKI-DROP { from validation-database invalid; then reject; } term AS-CLIENTES { from as-path-group AS-CLIENTES; then reject; } term AS { from as-path-group AS-CDNSTAR; then { local-preference 360; community add PREFIX-WAN-IP; accept; } } term MELHORAR { from as-path-group AS-CDNSTAR-MELHORAR; then { local-preference 260; community add PREFIX-WAN-IP; accept; } } term PIORAR { from as-path-group AS-CDNSTAR-PIORAR; then { local-preference 240; community add PREFIX-WAN-IP; accept; } } term ACCEPT { then { local-preference 250; community add PREFIX-WAN-IP; accept; } } } policy-statement BGP-IP-CDNSTAR-out { term BGP-IP-FILTRO { from policy FILTRO-IP-out; then next term; } term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term ALGAR_INT-NO_EXPORT { then { community add IP-CDNSTAR-ALGAR_INT-NO_EXPORT; next term; } } term NO_ADVERTISE { then { community add CDNSTAR-NO_ADVERTISE; next term; } } term +0 { from community [ IP-CDNSTAR+0 IP+0 ]; then accept; } term +1 { from community [ IP-CDNSTAR+1 IP+1 ]; then { as-path-prepend 263444; accept; } } term +2 { from community [ IP-CDNSTAR+2 IP+2 ]; then { as-path-prepend "263444 263444"; accept; } } term +3 { from community [ IP-CDNSTAR+3 IP+3 ]; then { as-path-prepend "263444 263444 263444"; accept; } } term NO_EXPORT { from community [ IP-CDNSTAR-NO_EXPORT NO_EXPORT IP-NO_EXPORT ]; then reject; } term PREFIX-CLIENT-IP { from community PREFIX-CLIENT-IP; then accept; } term PREFIX-ASN { from community PREFIX-ASN; then accept; } term REJECT { then reject; } } policy-statement BGP-IP-DURAND-in { term MEUS-PREFIXOS { from policy MEUS-PREFIXOS; then reject; } term CONECTADOS { from { route-filter-list PTTs; } then reject; } term BOGONS { from { route-filter-list BOGONS; } then reject; } term BOGONS-ASN { from as-path-group BOGON-ASN; then reject; } term RPKI-CHECK { from policy RPKI-CHECK; } term RPKI-DROP { from validation-database invalid; then reject; } term AS-DURAND-BUGADO { from as-path-group AS-DURAND-BUGADO; then reject; } term ROTAS-DURAND-OK { from community [ IP-DURAND-FROM_4230 IP-DURAND-FROM_10429 IP-DURAND-FROM_3549 ]; then { local-preference 250; accept; } } term AS-CLIENTES { from as-path-group AS-CLIENTES; then reject; } term CLOUDFARE { from policy FILTRO-CLOUDFARE; then reject; } term AS { from as-path-group AS-DURAND; then { local-preference 360; community add PREFIX-WAN-PEER; accept; } } term MELHORAR { from as-path-group AS-DURAND-MELHORAR; then { local-preference 260; community add PREFIX-WAN-IP; accept; } } term PIORAR { from as-path-group AS-DURAND-PIORAR; then { local-preference 240; community add PREFIX-WAN-IP; accept; } } term ACCEPT { then { local-preference 250; community add PREFIX-WAN-IP; accept; } } } policy-statement BGP-IP-DURAND-out { term IMPROVED { from community PREFIX-IMPROVED; then reject; } term BGP-IP-FILTRO { from policy FILTRO-IP-out; then next term; } term FILTRO-BLACKHOLE { from policy FILTRO-BLACKHOLE; then { community add IP-DURAND-BLACKHOLE; accept; } } term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term SEMPRE { from community IP-DURAND-SEMPRE; then accept; } term COMMUNITIES_ADICIONAIS { then { community add IP-DURAND-NO_PTT; next term; } } inactive: term NO_ADVERTISE { then { community add IP-DURAND-NO_VIVO; next term; } } term +0 { from community [ IP-DURAND+0 IP+0 ]; then accept; } term +1 { from community [ IP-DURAND+1 IP+1 ]; then { as-path-prepend 263444; accept; } } term +2 { from community [ IP-DURAND+2 IP+2 ]; then { as-path-prepend "263444 263444"; accept; } } term +3 { from community [ IP-DURAND+3 IP+3 ]; then { as-path-prepend "263444 263444 263444"; accept; } } term NO_EXPORT { from community [ NO_EXPORT IP-NO_EXPORT IP-DURAND-NO_EXPORT ]; then reject; } term PREFIX-CLIENT-IP { from community PREFIX-CLIENT-IP; then { community add IP-DECIX-NO_ADVERTISE; accept; } } term PREFIX-ASN { from community PREFIX-ASN; then accept; } term REJECT { then reject; } } policy-statement BGP-IP-DURAND_BKP-out { term MED+1 { from policy BGP-IP-DURAND-out; then { metric add 1; accept; } } term REJECT { then reject; } } policy-statement BGP-IP-FLYS-in { term RPKI-CHECK { from policy RPKI-CHECK; } term FILTRO-REJECT-in { from policy FILTRO-REJECT-in; then reject; } term AS-CLIENTES { from as-path-group AS-CLIENTES; then reject; } term AS { from as-path-group AS-FLYS; then { local-preference 360; community add PREFIX-WAN-IP; accept; } } term MELHORAR { from as-path-group AS-FLYS-MELHORAR; then { local-preference 260; community add PREFIX-WAN-IP; accept; } } term PIORAR { from as-path-group AS-FLYS-PIORAR; then { local-preference 240; community add PREFIX-WAN-IP; accept; } } term ACCEPT { then { local-preference 240; community add PREFIX-WAN-IP; accept; } } } policy-statement BGP-IP-FLYS-out { term IMPROVED { from community PREFIX-IMPROVED; then reject; } term BGP-IP-FILTRO { from policy FILTRO-IP-out; then next term; } term FILTRO-BLACKHOLE { from policy FILTRO-BLACKHOLE; then { community add IP-DURAND-BLACKHOLE; accept; } } term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term SEMPRE { from community IP-DURAND-SEMPRE; then accept; } term COMMUNITIES_ADICIONAIS { then { community add IP-DURAND-NO_PTT; next term; } } inactive: term NO_ADVERTISE { then { community add IP-DURAND-NO_VIVO; next term; } } term +0 { from community [ IP-DURAND+0 IP+0 ]; then accept; } term +1 { from community [ IP-FLYS+1 IP+1 ]; then { as-path-prepend 263444; accept; } } term +2 { from community [ IP-FLYS+2 IP+2 ]; then { as-path-prepend "263444 263444"; accept; } } term +3 { from community [ IP-FLYS+3 IP+3 ]; then { as-path-prepend "263444 263444 263444"; accept; } } term NO_EXPORT { from community [ NO_EXPORT IP-NO_EXPORT IP-FLYS-NO_EXPORT ]; then reject; } term PREFIX-CLIENT-IP { from community PREFIX-CLIENT-IP; then { community add IP-DECIX-NO_ADVERTISE; accept; } } term PREFIX-ASN { from community PREFIX-ASN; then accept; } term REJECT { then reject; } } policy-statement BGP-IP-LEVEL3-in { term MEUS-PREFIXOS { from policy MEUS-PREFIXOS; then reject; } term BOGONS { from { route-filter-list BOGONS; } then reject; } term BOGONS-ASN { from as-path-group BOGON-ASN; then reject; } term RPKI-CHECK { from policy RPKI-CHECK; } term AS { from as-path-group AS-LEVEL3; then { local-preference 360; community add PREFIX-WAN-PEER; accept; } } term CLOUDFARE { from policy FILTRO-CLOUDFARE; then reject; } term MELHORAR { from as-path-group AS-LEVEL3-MELHORAR; then { local-preference 260; community add PREFIX-WAN-IP; accept; } } term PIORAR { from as-path-group AS-LEVEL3-PIORAR; then { local-preference 240; community add PREFIX-WAN-IP; accept; } } term ACCEPT { then { local-preference 250; community add PREFIX-WAN-IP; accept; } } } policy-statement BGP-IP-LEVEL3-out { term IMPROVED { from community PREFIX-IMPROVED; then reject; } term BGP-IP-FILTRO { from policy FILTRO-MED-out; then next term; } term FILTRO-BLACKHOLE { from policy FILTRO-BLACKHOLE; then { community add IP-LEVEL3-BLACKHOLE; accept; } } term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term LP { then { community add LEVEL3_LP; next term; } } term +0 { from community [ IP-LEVEL3+0 IP+0 ]; then accept; } term FREEFIRE { from community IP-LEVEL3-FREEFIRE; then { community add LEVEL3-NO_EXPORT; accept; } } inactive: term NO_EXPORT-SPO1 { from community PREFIX-ORIGIN-THIS-POP; then reject; } term +1 { from community [ IP-LEVEL3+1 IP+1 ]; then { as-path-prepend 263444; accept; } } term +2 { from community [ IP-LEVEL3+2 IP+2 ]; then { as-path-prepend "263444 263444"; accept; } } term +3 { from community [ IP-LEVEL3+3 IP+3 ]; then { as-path-prepend "263444 263444 263444"; accept; } } term NO_EXPORT { from community [ NO_EXPORT IP-NO_EXPORT IP-LEVEL3-NO_EXPORT ]; then reject; } term PREFIX-CLIENT-IP { from community PREFIX-CLIENT-IP; then { inactive: community add LEVEL3-NO_EXPORT; accept; } } term PREFIX-ASN { from community PREFIX-ASN; then accept; } term REJECT { then reject; } } policy-statement BGP-IP-SPARKLE-in { term MEUS-PREFIXOS { from policy MEUS-PREFIXOS; then reject; } term RPKI-CHECK { from policy RPKI-CHECK; } term RPKI-DROP { from validation-database invalid; then reject; } term DENY { from as-path-group DENY_SPARKLE-IN; then reject; } term BOGONS { from { route-filter-list BOGONS; } then reject; } term BOGONS-ASN { from as-path-group BOGON-ASN; then reject; } term AS { from as-path-group AS-SPARKLE; then { local-preference 360; community add PREFIX-WAN-PEER; accept; } } term CLOUDFARE { from policy FILTRO-CLOUDFARE; then reject; } term MELHORAR { from as-path-group AS-SPARKLE-MELHORAR; then { local-preference 260; community add PREFIX-WAN-IP; accept; } } term PIORAR { from as-path-group AS-SPARKLE-PIORAR; then { local-preference 240; community add PREFIX-WAN-IP; accept; } } term ACCEPT { then { local-preference 250; community add PREFIX-WAN-IP; accept; } } } policy-statement BGP-IP-SPARKLE-out { term LEVEL3 { then { community add SPARKLE_LEVEL3+3; next term; } } term EBT { then { community add SPARKLE_EBT+3; next term; } } term IMPROVED { from community PREFIX-IMPROVED; then reject; } term BGP-IP-FILTRO { from policy FILTRO-IP-out; then next term; } term DDOS { from { route-filter-list SPARKLE-DDOS; } then { community add SPARKLE-DDOS; next term; } } term FLOW { from { rib inetflow.0; community IP-SPARKLE-FLOW; } then accept; } term FILTRO-BLACKHOLE { from policy FILTRO-BLACKHOLE; then { community add IP-SPARKLE-BLACKHOLE; accept; } } term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term +0 { from community [ IP-SPARKLE+0 IP+0 ]; then accept; } term +1 { from community [ IP-SPARKLE+1 IP+1 ]; then { as-path-prepend 263444; accept; } } term +2 { from community [ IP-SPARKLE+2 IP+2 ]; then { as-path-prepend "263444 263444"; accept; } } term +3 { from community [ IP-SPARKLE+3 IP+3 ]; then { as-path-prepend "263444 263444 263444"; accept; } } term NO_EXPORT { from community [ NO_EXPORT IP-NO_EXPORT IP-SPARKLE-NO_EXPORT ]; then reject; } term PREFIX-CLIENT-IP { from community PREFIX-CLIENT-IP; then accept; } term PREFIX-ASN { from community PREFIX-ASN; then accept; } term REJECT { then reject; } } policy-statement BGP-IP-TELXIUS-BH-out { term IMPROVED { from community PREFIX-IMPROVED; then reject; } term BGP-IP-FILTRO { from policy FILTRO-IP-out; then next term; } term FILTRO-BLACKHOLE { from policy FILTRO-BLACKHOLE; then { community add IP-TELXIUS-BLACKHOLE; accept; } } term REJECT { then reject; } } policy-statement BGP-IP-TELXIUS-in { term MEUS-PREFIXOS { from policy MEUS-PREFIXOS; then reject; } term RPKI-CHECK { from policy RPKI-CHECK; } term BGP-PTT-PEER-in { from validation-database invalid; then reject; } term RPKI-DROP { from validation-database invalid; then reject; } term BOGONS { from { route-filter-list BOGONS; } then reject; } term BOGONS-ASN { from as-path-group BOGON-ASN; then reject; } term AS-CLIENTES { from as-path-group AS-CLIENTES; then reject; } term AS { from as-path-group AS-TELXIUS; then { local-preference 360; community add PREFIX-WAN-PEER; accept; } } term MELHORAR { from as-path-group AS-TELXIUS-MELHORAR; then { local-preference 260; community add PREFIX-WAN-IP; accept; } } term PIORAR { from as-path-group AS-TELXIUS-PIORAR; then { local-preference 240; community add PREFIX-WAN-IP; accept; } } term ACCEPT { then { local-preference 250; community add PREFIX-WAN-IP; accept; } } } policy-statement BGP-IP-TELXIUS-out { term IMPROVED { from community PREFIX-IMPROVED; then reject; } term BGP-IP-FILTRO { from policy FILTRO-IP-out; then next term; } inactive: term FILTRO-BLACKHOLE { from policy FILTRO-BLACKHOLE; then { community add IP-TELXIUS-BLACKHOLE; accept; } } term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term NO_ADVERTISE { then { community add IP-TELXIUS-NO_ADVERTISE; next term; } } term +0 { from community [ IP-TELXIUS+0 IP+0 ]; then accept; } term +1 { from community [ IP-TELXIUS+1 IP+1 ]; then { as-path-prepend 263444; accept; } } term +2 { from community [ IP-TELXIUS+2 IP+2 ]; then { as-path-prepend "263444 263444"; accept; } } term +3 { from community [ IP-TELXIUS+3 IP+3 ]; then { as-path-prepend "263444 263444 263444"; accept; } } term NO_EXPORT { from community [ NO_EXPORT IP-NO_EXPORT IP-TELXIUS-NO_EXPORT ]; then reject; } term PREFIX-CLIENT-IP { from community PREFIX-CLIENT-IP; then accept; } term PREFIX-ASN { from community PREFIX-ASN; then accept; } term REJECT { then reject; } } policy-statement BGP-LG-out { term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term DEFAULT { from policy DEFAULT; then reject; } term BOGONS { from { route-filter-list BOGONS; } then reject; } term PTTs { from { route-filter-list PTTs; } then reject; } term IMPROVED { from community PREFIX-IMPROVED; then reject; } term DIVERT { from community DIVERT; then reject; } term ACCEPT { from protocol bgp; then accept; } } policy-statement BGP-NEGA-TUDO { term REJECT { then reject; } } policy-statement BGP-NETFLOW-out { term GOOGLE { from { route-filter 177.91.162.128/27 exact; route-filter 177.91.160.128/26 exact; } then { as-path-prepend 15169; as-path-expand 263444; accept; } } term NETFLIX { from { route-filter 177.91.162.160/31 exact; route-filter 177.91.160.244/31 exact; } then { as-path-prepend 2916; as-path-expand 263444; accept; } } term AKAMAI { from { route-filter 177.91.160.224/28 exact; } then { as-path-prepend 20940; as-path-expand 263444; accept; } } term MEUS-PREFIXOS { from { route-filter 177.91.160.0/22 upto /32; } then { as-path-expand 263444; accept; } } term ACCEPT { from protocol bgp; then accept; } term REJECT { then reject; } } policy-statement BGP-PEER-GOOGLE-in { term RPKI-CHECK { from policy RPKI-CHECK; } term FILTRO-REJECT-in { from policy FILTRO-REJECT-in; then reject; } term REJECT_TESTE { from { route-filter 35.200.0.0/14 upto /24; } then reject; } term ACCEPT { then { local-preference 450; community add PREFIX-WAN-PEER; accept; } } } policy-statement BGP-PEER-GOOGLE-out { term BGP-PEER-FILTRO { from policy FILTRO-IP-out; then next term; } term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term GOOGLE-TOP_PRIO { then { community add GOOGLE-TOP_PRIO; next term; } } term +0 { from community [ PEER+0 PEER-GOOGLE+0 ]; then accept; } term NO_EXPORT { from community [ NO_EXPORT PEER-NO_EXPORT PEER-GOOGLE-NO_EXPORT ]; then reject; } term +1 { from community [ PEER+1 PEER-GOOGLE+1 ]; then { as-path-prepend 263444; accept; } } term +2 { from community [ PEER+2 PEER-GOOGLE+2 ]; then { as-path-prepend "263444 263444"; accept; } } term +3 { from community [ PEER+3 PEER-GOOGLE+3 ]; then { as-path-prepend "263444 263444 263444"; accept; } } term PREFIX-CLIENT-IP { from community PREFIX-CLIENT-IP; then accept; } term PREFIX-CLIENT-CONTEUDO { from community PREFIX-CLIENT-CONTEUDO; then accept; } term PREFIX-ASN { from community PREFIX-ASN; then accept; } term REJECT { then reject; } } policy-statement BGP-PEER-MAXIHOST-in { term MEUS-PREFIXOS { from policy MEUS-PREFIXOS; then reject; } term RPKI-CHECK { from policy RPKI-CHECK; } term BGP-PTT-PEER-in { from validation-database invalid; then reject; } term RPKI-DROP { from validation-database invalid; then reject; } term BOGONS { from { route-filter-list BOGONS; } then reject; } term BOGONS-ASN { from as-path-group BOGON-ASN; then reject; } term AS-CLIENTES { from as-path-group AS-CLIENTES; then reject; } term AS { from as-path-group AS-MAXIHOST; then { local-preference 360; community add PREFIX-WAN-PEER; accept; } } term MELHORAR { from as-path-group AS-MAXIHOST-MELHORAR; then { local-preference 270; community add PREFIX-WAN-IP; accept; } } term PIORAR { from as-path-group AS-MAXIHOST-PIORAR; then { local-preference 240; community add PREFIX-WAN-IP; accept; } } term ACCEPT { then { local-preference 250; community add PREFIX-WAN-IP; accept; } } } policy-statement BGP-PEER-MAXIHOST-out { term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term MED5 { then { metric 5; next term; } } term +0 { from community [ PEER-MAXIHOST+0 PEER+0 ]; then accept; } term NO_EXPORT { from community PEER-MAXIHOST-NO_EXPORT; then reject; } term +1 { from community [ PEER-MAXIHOST+1 PEER+1 ]; then { as-path-prepend 263444; next term; } } term +2 { from community [ PEER-MAXIHOST+2 PEER+2 ]; then { as-path-prepend "263444 263444"; next term; } } term +3 { from community [ PEER-MAXIHOST+3 PEER+3 ]; then { as-path-prepend "263444 263444 263444"; next term; } } term PREFIX-CLIENT-IP { from community PREFIX-CLIENT-IP; then accept; } term PREFIX-ASN { from community PREFIX-ASN; then accept; } term REJECT { then reject; } } policy-statement BGP-PTT-IXBR_CE-in { term MEUS-PREFIXOS { from policy MEUS-PREFIXOS; then reject; } term AS-CLIENTES { from as-path-group AS-CLIENTES; then reject; } term AS270967 { from as-path AS270967; then reject; } term ACCEPT { then { community add PREFIX-WAN-PTT; community add PREFIX-WAN-PTT-CE; accept; } } then reject; } policy-statement BGP-PTT-IXBR_CE-out { term REJECT { then reject; } term BGP-PTT-FILTRO { from policy FILTRO-MED-out; then next term; } term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term +0 { from community PTT-CE+0; then accept; } term NO_EXPORT { from community [ NO_EXPORT PTT-NO_EXPORT PTT-CE-NO_EXPORT ]; then reject; } term PTT-CE-NO_ADVERTISE { then { community add PTT-CE-NO_ADVERTISE; } } term +1 { from community PTT-CE+1; then { as-path-prepend 263444; accept; } } term +2 { from community PTT-CE+2; then { as-path-prepend "263444 263444"; accept; } } term +3 { from community PTT-CE+3; then { as-path-prepend "263444 263444 263444"; accept; } } term PREFIX-ASN { from community PREFIX-ASN; then accept; } term PREFIX-IP { from community PREFIX-CLIENT-IP; then accept; } } policy-statement BGP-PTT-IXBR_PR-in { term MEUS-PREFIXOS { from policy MEUS-PREFIXOS; then reject; } term AS-CLIENTES { from as-path-group AS-CLIENTES; then reject; } term AS270967 { from as-path AS270967; then reject; } term ACCEPT { then { community add PREFIX-WAN-PTT; community add PREFIX-WAN-PTT-PR; accept; } } } policy-statement BGP-PTT-IXBR_PR-out { term BGP-PTT-FILTRO { from policy FILTRO-MED-out; then next term; } term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term +0 { from community PTT-PR+0; then accept; } term NO_EXPORT { from community [ NO_EXPORT PTT-NO_EXPORT PTT-PR-NO_EXPORT ]; then reject; } term +1 { from community PTT-PR+1; then { as-path-prepend 263444; accept; } } term +2 { from community PTT-PR+2; then { as-path-prepend "263444 263444"; accept; } } term +3 { from community PTT-PR+3; then { as-path-prepend "263444 263444 263444"; accept; } } term PREFIX-ASN { from community PREFIX-ASN; then accept; } term PREFIX-IP { from community PREFIX-CLIENT-IP; then accept; } term REJECT { then reject; } } policy-statement BGP-PTT-IXBR_SP-in { term AS-CLIENTES { from as-path-group AS-CLIENTES; then reject; } term DENY_PTT_IN { from as-path-group DENY_PTT_IN; then reject; } term FILTRO-PTT { from policy BGP-FILTRO-PTT-in; } term AS40260 { from as-path AS40260; then { community add PREFIX-WAN-PEER; next term; } } term ACCEPT { then { local-preference 350; community add PREFIX-WAN-PTT; accept; } } } policy-statement BGP-PTT-IXBR_SP-out { term BGP-PTT-FILTRO { from policy FILTRO-MED-out; then next term; } term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term +0 { from community [ PTT-SP+0 PTT+0 ]; then accept; } term NO_EXPORT { from community [ NO_EXPORT PTT-NO_EXPORT PTT-SP-NO_EXPORT ]; then reject; } term PTT-SP-NO_ADVERTISE { then { community add PTT-SP-NO_ADVERTISE; } } term +1 { from community [ PTT-SP+1 PTT+1 ]; then { as-path-prepend 263444; accept; } } term +2 { from community [ PTT-SP+2 PTT+2 ]; then { as-path-prepend "263444 263444"; accept; } } term +3 { from community [ PTT-SP+3 PTT+3 ]; then { as-path-prepend "263444 263444 263444"; accept; } } term PREFIX-CLIENT-IP { from community PREFIX-CLIENT-IP; then accept; } term PREFIX-CLIENT-CONTEUDO { from community PREFIX-CLIENT-CONTEUDO; then accept; } term PREFIX-ASN { from community PREFIX-ASN; then accept; } term REJECT { then reject; } } policy-statement BGP-PTT-PEER-AMAZON-out { term BGP-PTT-FILTRO { from policy FILTRO-MED-out; then next term; } term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term +0 { from community PTT-SP+0; then accept; } term NO_EXPORT { from community [ NO_EXPORT PTT-SP-AMAZON-NO_EXPORT ]; then reject; } term PTT-SP-NO_ADVERTISE { then { community add PTT-SP-NO_ADVERTISE; } } term +1 { from community [ PTT-SP+1 PTT+1 ]; then { as-path-prepend 263444; accept; } } term +2 { from community [ PTT-SP+2 PTT+2 ]; then { as-path-prepend "263444 263444"; accept; } } term +3 { from community [ PTT-SP+3 PTT+3 ]; then { as-path-prepend "263444 263444 263444"; accept; } } term PREFIX-CLIENT-IP { from community PREFIX-CLIENT-IP; then accept; } term PREFIX-CLIENT-CONTEUDO { from community PREFIX-CLIENT-CONTEUDO; then accept; } term PREFIX-ASN { from community PREFIX-ASN; then accept; } term REJECT { then reject; } } policy-statement BGP-PTT-PEER-CDNTV-out { term BGP-PTT-FILTRO { from policy FILTRO-MED-out; then next term; } term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term MED { then next term; } term +0 { from community PTT-SP+0; then accept; } term NO_EXPORT { from community [ NO_EXPORT PTT-SP-CDNTV-NO_EXPORT ]; then reject; } term PTT-SP-NO_ADVERTISE { then { community add PTT-SP-NO_ADVERTISE; } } term +1 { from community [ PTT-SP+1 PTT+1 ]; then { as-path-prepend 263444; accept; } } term +2 { from community [ PTT-SP+2 PTT+2 ]; then { as-path-prepend "263444 263444"; accept; } } term +3 { from community [ PTT-SP+3 PTT+3 ]; then { as-path-prepend "263444 263444 263444"; accept; } } term PREFIX-CLIENT-IP { from community PREFIX-CLIENT-IP; then accept; } term PREFIX-CLIENT-CONTEUDO { from community PREFIX-CLIENT-CONTEUDO; then accept; } term PREFIX-ASN { from community PREFIX-ASN; then accept; } term REJECT { then reject; } } policy-statement BGP-PTT-PEER-EDGEUNO-in { term RPKI-CHECK { from policy RPKI-CHECK; } term FILTRO-REJECT-in { from policy FILTRO-REJECT-in; then reject; } term RPKI-DROP { from validation-database invalid; then reject; } term AS-CLIENTES { from as-path-group AS-CLIENTES; then reject; } term AS { from as-path-group AS-EDGEUNO; then { local-preference 360; community add PREFIX-WAN-PEER; accept; } } term MELHORAR { from as-path-group AS-EDGEUNO-MELHORAR; then { local-preference 260; community add PREFIX-WAN-IP; accept; } } term PIORAR { from as-path-group AS-EDGEUNO-PIORAR; then { local-preference 240; community add PREFIX-WAN-IP; accept; } } term ACCEPT { then { local-preference 250; community add PREFIX-WAN-PEER; accept; } } } policy-statement BGP-PTT-PEER-EDGEUNO-out { term BGP-PTT-FILTRO { from policy FILTRO-MED-out; then next term; } term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term +0 { from community PEER-EDGEUNO+0; then accept; } term +1 { from community PEER-EDGEUNO+1; then { as-path-prepend 263444; accept; } } term +2 { from community PEER-EDGEUNO+2; then { as-path-prepend "263444 263444"; accept; } } term +3 { from community PEER-EDGEUNO+3; then { as-path-prepend "263444 263444 263444"; accept; } } term NO_EXPORT { from community [ NO_EXPORT PEER-EDGEUNO-NO_EXPORT ]; then reject; } term PREFIX-CLIENT-IP { from community PREFIX-CLIENT-IP; then accept; } term PREFIX-CLIENT-CONTEUDO { from community PREFIX-CLIENT-CONTEUDO; then accept; } term PREFIX-ASN { from community PREFIX-ASN; then accept; } term REJECT { then reject; } } policy-statement BGP-PTT-PEER-in { term MEUS-PREFIXOS { from policy MEUS-PREFIXOS; then reject; } term DENY_PEER_IN { from as-path-group DENY_PEER_IN; then reject; } term AS-CLIENTES { from as-path-group AS-CLIENTES; then reject; } term RPKI-CHECK { from policy RPKI-CHECK; } term RPKI-DROP { from validation-database invalid; then reject; } term ACCEPT { then { local-preference 450; community add PREFIX-WAN-PEER; accept; } } } policy-statement BGP-PTT-PEER-out { term BGP-PTT-FILTRO { from policy FILTRO-MED-out; then next term; } term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term +0 { from community PTT-SP+0; then accept; } term NO_EXPORT { from community NO_EXPORT; then reject; } term PTT-SP-NO_ADVERTISE { then { community add PTT-SP-NO_ADVERTISE; } } term +1 { from community [ PTT-SP+1 PTT+1 ]; then { as-path-prepend 263444; accept; } } term +2 { from community [ PTT-SP+2 PTT+2 ]; then { as-path-prepend "263444 263444"; accept; } } term +3 { from community [ PTT-SP+3 PTT+3 ]; then { as-path-prepend "263444 263444 263444"; accept; } } term PREFIX-CLIENT-IP { from community PREFIX-CLIENT-IP; then accept; } term PREFIX-CLIENT-CONTEUDO { from community PREFIX-CLIENT-CONTEUDO; then accept; } term PREFIX-ASN { from community PREFIX-ASN; then accept; } term REJECT { then reject; } term MED_PROVISORIO { then { metric add 15; next term; } } } policy-statement BGP-PTT-SP-GLOBO-out { term BGP-PTT-FILTRO { from policy FILTRO-MED-out; then next term; } term FILTRO-PREFIX-SMALL { from policy FILTRO-PREFIX-SMALL; then reject; } term MED { then { metric add 30; next term; } } term PREPEND { then { as-path-prepend 263444; next term; } } term +0 { from community PTT-SP+0; then accept; } term NO_EXPORT { from community [ NO_EXPORT PTT-GLOBO-NO_EXPORT ]; then reject; } term +1 { from community [ PTT-SP+1 PTT+1 ]; then { as-path-prepend 263444; accept; } } term +2 { from community [ PTT-SP+2 PTT+2 ]; then { as-path-prepend "263444 263444"; accept; } } term +3 { from community [ PTT-SP+3 PTT+3 ]; then { as-path-prepend "263444 263444 263444"; accept; } } term PREFIX-CLIENT-IP { from community PREFIX-CLIENT-IP; then accept; } term PREFIX-CLIENT-CONTEUDO { from community PREFIX-CLIENT-CONTEUDO; then accept; } term PREFIX-ASN { from community PREFIX-ASN; then accept; } term REJECT { then reject; } } policy-statement CLI-NEOLINK { term V4 { from { prefix-list-filter CLI-NEOLINK-V4 orlonger; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-ADAPTLINK { term V4 { from { route-filter-list PREFIX_V4-ADAPTLINK; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term V6 { from { route-filter-list PREFIX_V6-ADAPTLINK; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-ALT { term V4 { from { route-filter-list PREFIX_V4-ALT; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } inactive: term V6 { from { route-filter-list PREFIX_V6-ALT; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-ARIAS { term V4 { from { route-filter-list PREFIX_V4-ARIAS; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term V6 { from { route-filter-list PREFIX_V6-ARIAS; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-AXNET { term V4 { from { route-filter-list PREFIX_V4-AXNET; } to policy BGP-FILTRO-CLIENTE-IP-in; then { community add IP-SPARKLE-NO_EXPORT; accept; } } term V6 { from { route-filter-list PREFIX_V6-AXNET; } to policy BGP-FILTRO-CLIENTE-IP-in; then { community add IP-SPARKLE-NO_EXPORT; accept; } } term REJECT { then reject; } } policy-statement CLI_IP-BLZ { term V4 { from { route-filter-list PREFIX_V4-BLZ; } to policy BGP-FILTRO-CLIENTE-IP-in; then { community add IP-NETIX-NO_EXPORT; accept; } } term V6 { from { route-filter-list PREFIX_V6-BLZ; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-COELHO { term V4 { from { route-filter-list PREFIX_V4-COELHO; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term V6 { from { route-filter-list PREFIX_V6-COELHO; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-CTE { term V4 { from { prefix-list-filter CLI-CTE-V4 orlonger; } to policy BGP-FILTRO-CLIENTE-IP-in; then { community add IP-DURAND+3; community add IP-SPARKLE+3; accept; } } term V6 { from { prefix-list-filter CLI-CTE-V6 orlonger; } to policy BGP-FILTRO-CLIENTE-IP-in; then { community add IP-SPARKLE+3; community add IP-DURAND+3; accept; } } term REJECT { then reject; } } policy-statement CLI_IP-CTE-CINBESA { term V4 { from { prefix-list-filter CLI-CTE-V4-CINBESA orlonger; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-EMITEL { term V4 { from { route-filter-list PREFIX_V4-EMITEL; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term V6 { from { route-filter-list PREFIX_V6-EMITEL; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-FIREMICRO { inactive: term ATAQUE { from { route-filter 45.189.128.0/22 upto /24; route-filter 177.126.144.0/21 upto /24; } to policy BGP-FILTRO-CLIENTE-FLOW-in; then accept; } term V4 { from { route-filter-list PREFIX_V4-FIREMICRO; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term V6 { from { route-filter-list PREFIX_V6-FIREMICRO; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-FLORESTAWII { term V4 { from { route-filter-list PREFIX_V4-FLORESTAWII; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term V6 { from { route-filter-list PREFIX_V6-FLORESTAWII; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-GHNET { term V4 { from { route-filter-list PREFIX_V4-GHNET; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term V6 { from { route-filter-list PREFIX_V6-GHNET; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-GIGABYTE { term V4 { from { route-filter-list PREFIX_V4-GIGABYTE; } to policy BGP-FILTRO-CLIENTE-IP-in; then { inactive: community add IP-DURAND-NO_EXPORT; accept; } } term V6 { from { route-filter-list PREFIX_V6-GIGABYTE; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-GOTCHANET { term V4 { from { route-filter-list PREFIX_V4-GOTCHANET; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term V6 { from { route-filter-list PREFIX_V6-GOTCHANET; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-IRANET { term V4 { from { route-filter-list PREFIX_V4-IRANET; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term V6 { from { route-filter-list PREFIX_V6-IRANET; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-JUPITER { term V4 { from { route-filter-list PREFIX_V4-JUPITER; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term V6 { from { route-filter-list PREFIX_V6-JUPITER; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-LIBERTAS { term V4 { from { route-filter-list PREFIX_V4-LIBERTAS; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term V6 { from { route-filter-list PREFIX_V6-LIBERTAS; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-MEGANET { term V4 { from { route-filter-list PREFIX_V4-MEGANET; } to policy BGP-FILTRO-CLIENTE-IP-in; then { community add IP-SPARKLE-DDOS; community add IP-NO_EXPORT; community add IP-COGENT+0; accept; } } term V6 { from { route-filter-list PREFIX_V6-MEGANET; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-MEGATELECOM { term V4 { from { prefix-list-filter CLI-MEGATELECOM-V4 orlonger; } to policy BGP-FILTRO-CLIENTE-IP-in; then { community add IP-NYIIX-NO_EXPORT; community add IP-DECIX-NO_EXPORT; community add IP-LEVEL3-NO_EXPORT; accept; } } term V6 { from { prefix-list-filter CLI-MEGATELECOM-V6 orlonger; } to policy BGP-FILTRO-CLIENTE-IP-in; then { community add IP-NYIIX-NO_EXPORT; community add IP-DECIX-NO_EXPORT; community add IP-LEVEL3-NO_EXPORT; accept; } } term REJECT { then reject; } } policy-statement CLI_IP-MILBR { term V4 { from { route-filter-list PREFIX_V4-MILBR; } to policy BGP-FILTRO-CLIENTE-IP-in; then { community add IP-FLYS-NO_EXPORT; accept; } } term V6 { from { route-filter-list PREFIX_V6-MILBR; } to policy BGP-FILTRO-CLIENTE-IP-in; then { community add IP-FLYS-NO_EXPORT; accept; } } term REJECT { then reject; } } policy-statement CLI_IP-NEOLINK { term V4 { from { route-filter-list PREFIX_V4-NEOLINK; } to policy BGP-FILTRO-CLIENTE-IP-in; then { community add IP-TELXIUS-NO_EXPORT; accept; } } term V6 { from { route-filter-list PREFIX_V6-NEOLINK; } to policy BGP-FILTRO-CLIENTE-IP-in; then { community add IP-TELXIUS-NO_EXPORT; accept; } } term REJECT { then reject; } } policy-statement CLI_IP-NETSPEED { term V4 { from { route-filter-list PREFIX_V4-NETSPEED; } to policy BGP-FILTRO-CLIENTE-IP-in; then { inactive: community add PTT+0; accept; } } term V6 { from { route-filter-list PREFIX_V6-NETSPEED; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-PIB { term V4 { from { route-filter-list PREFIX_V4-PIB; } then { as-path-prepend 65523; as-path-expand 65522; accept; } } term REJECT { then reject; } } policy-statement CLI_IP-ROS { term V4 { from { route-filter-list PREFIX_V4-ROS; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term V6 { from { route-filter-list PREFIX_V6-ROS; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-SCON { term V4 { from { route-filter 45.233.56.0/22 upto /32; route-filter 45.224.172.0/22 upto /32; route-filter 24.152.64.0/22 upto /32; route-filter 45.172.180.0/22 upto /32; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term V6 { from { route-filter 2804:4b30::/32 upto /128; route-filter 2804:4564::/32 upto /128; route-filter 2804:6cac::/32 upto /128; route-filter 2804:5a6c::/32 upto /128; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-SIDYS { term V4 { from { route-filter-list PREFIX_V4-SIDYS; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term V6 { from { route-filter-list PREFIX_V6-SIDYS; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-SONIK { term V4 { from { route-filter-list PREFIX_V4-SONIK; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term V6 { from { route-filter-list PREFIX_V6-SONIK; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-SPEEDJET { term V4 { from { route-filter-list PREFIX_V4-SPEEDJET; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term V6 { from { route-filter-list PREFIX_V6-SPEEDJET; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-STRATUS { term V4 { from { route-filter-list PREFIX_V4-STRATUS; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term V6 { from { route-filter-list PREFIX_V6-STRATUS; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement CLI_IP-ULTRANET { term V4 { from { route-filter-list PREFIX_V4-ULTRANET; } to policy BGP-FILTRO-CLIENTE-IP-in; then { community add IP-SPARKLE+3; community add IP-DURAND+3; accept; } } term V6 { from { route-filter-list PREFIX_V6-ULTRANET; } to policy BGP-FILTRO-CLIENTE-IP-in; then { community add IP-DURAND+3; community add IP-SPARKLE+3; accept; } } term REJECT { then reject; } } policy-statement CLI_IP-UNE { term V4 { from { route-filter-list PREFIX_V4-UNE; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term V6 { from { route-filter-list PREFIX_V6-UNE; } to policy BGP-FILTRO-CLIENTE-IP-in; then accept; } term REJECT { then reject; } } policy-statement DEFAULT { term V4 { from { route-filter 0.0.0.0/0 exact; } then accept; } term V6 { from { route-filter ::0/0 exact; } then accept; } term REJECT { then reject; } } policy-statement FILTRO-BLACKHOLE { term BLACKHOLE { from { community BLACKHOLE; policy FILTRO-PREFIX-HOST; } then { local-preference 666; next-hop discard; accept; } } term REJECT { then reject; } } policy-statement FILTRO-CLI-REJECT-in { term MEUS-PREFIXOS { from policy MEUS-PREFIXOS; then accept; } term BOGONS { from { route-filter-list BOGONS; } then accept; } inactive: term BOGONS-ASN { from as-path-group BOGON-ASN; then accept; } term RPKI-DROP { from validation-database invalid; then accept; } term ACCEPT { then { community delete BLACKLIST_CLIENTE; reject; } } } policy-statement FILTRO-CLOUDFARE { term REJECT-PICADOS { from { route-filter 104.16.0.0/12 prefix-length-range /20-/20; } then accept; } then reject; } policy-statement FILTRO-DDOS { term DIVERT { from community DIVERT; then accept; } term BLACKHOLE { from { community BLACKHOLE; policy FILTRO-PREFIX-HOST; } then { local-preference 6666; next-hop discard; accept; } } term REJECT { then reject; } } policy-statement FILTRO-DIVERT { term DIVERT { from community DIVERT; then accept; } term CORERO { from community DIVERT-CORERO; then { next-hop next-table DDOS-VBD-CORERO.inet.0; accept; } } term REJECT { then { inactive: reject; } } } policy-statement FILTRO-IP-out { term IMPROVED { from community PREFIX-IMPROVED; then reject; } term ORIGIN-THIS-ROUTER { from community PREFIX-ORIGIN-THIS-ROUTER; then { metric add 5; accept; } } term ORIGIN-THIS-POP { from community PREFIX-ORIGIN-THIS-POP; then { metric add 15; accept; } } term ORIGIN-ALT { from community PREFIX-ORIGIN-ALT; then { metric add 35; accept; } } term ORIGIN-BKP { from community PREFIX-ORIGIN-BKP; then { metric add 55; accept; } } term REJECT { then reject; } } policy-statement FILTRO-MED-out { term IMPROVED { from community PREFIX-IMPROVED; then reject; } term ORIGIN-THIS-ROUTER { from community PREFIX-ORIGIN-THIS-ROUTER; then { metric add 5; accept; } } term ORIGIN-THIS-POP { from community PREFIX-ORIGIN-THIS-POP; then { metric add 15; accept; } } term ORIGIN-ALT { from community PREFIX-ORIGIN-ALT; then { metric add 35; accept; } } term ORIGIN-BKP { from community PREFIX-ORIGIN-BKP; then { metric add 55; accept; } } term REJECT { then reject; } } policy-statement FILTRO-PREFIX-HOST { term PREFIX-HOST-V4 { from { route-filter 0.0.0.0/0 upto /31; } then reject; } term PREFIX-HOST-V6 { from { route-filter ::/0 upto /127; } then reject; } term ACCEPT { then accept; } } policy-statement FILTRO-PREFIX-SMALL { term PREFIX-SMALL-V4 { from { route-filter 0.0.0.0/0 prefix-length-range /25-/32; } then accept; } term PREFIX-SMALL-V6 { from { route-filter ::/0 prefix-length-range /49-/128; } then accept; } term REJECT { then reject; } } policy-statement FILTRO-REJECT-in { term MEUS-PREFIXOS { from policy MEUS-PREFIXOS; then accept; } term BOGONS { from { route-filter-list BOGONS; } then accept; } term BOGONS-ASN { from as-path-group BOGON-ASN; then accept; } term RPKI-DROP { from validation-database invalid; then accept; } term ACCEPT { then reject; } } policy-statement IBGP-BIRD_IN { term ACCEPT { then { community set IP-NO_EXPORT; community add PTT-NO_EXPORT; community add IP-TATA-LOC_PREF; community add IP-TATA-DDOS; community add IP-CHINA+1; community add IP-CDNSTAR+0; community add IP-SPARKLE+3; community add PEER-EDGEUNO-NO_EXPORT; community add IP-VIVO+0; } } } policy-statement IBGP-BLACKHOLE { term BLACKHOLE { from community BLACKHOLE; then { next-hop discard; accept; } } term ACCEPT { then accept; } } policy-statement IBGP-IP-OUT { term ROTAS-CLI-LOCAL { from community PREFIX-ORIGIN-THIS-POP; then { next-hop self; accept; } } term ROTAS-CLI { from community PREFIX-CLIENT-IP; then accept; } term IMPROVED { from community PREFIX-IMPROVED; then accept; } term DECIX { from community PREFIX-IP-DECIX; then { next-hop self; accept; } } inactive: term REJECT { then reject; } } policy-statement IBGP-NOCTION-in { term BOGONS-ASN { from as-path-group BOGON-ASN; then reject; } } policy-statement IBGP-OUT { term DEFAULT { from policy DEFAULT; then accept; } term ROTAS-CLI-LOCAL { from community PREFIX-ORIGIN-THIS-POP; then { next-hop self; accept; } } term ROTAS-CLI { from community PREFIX-CLIENT-IP; then accept; } } policy-statement IBGP-RS-OUT { term BLACKHOLE { from community BLACKHOLE; then accept; } term ROTAS-LOCAL { from community PREFIX-ORIGIN-THIS-POP; then { next-hop self; accept; } } term ROTAS { from community [ PREFIX-ASN PREFIX-WAN-PEER PREFIX-CLIENT-IP PREFIX-CLIENT-CONTEUDO ]; then accept; } term IMPROVED { from community PREFIX-IMPROVED; then accept; } term REJECT { then reject; } } policy-statement IBGP-RS-in { term MEUS-PREFIXOS { from policy MEUS-PREFIXOS; then accept; } term DIVERT { from community DIVERT; then accept; } term RPKI-CHECK { from policy RPKI-CHECK; } term BLACKHOLE { from community BLACKHOLE; then { next-hop discard; accept; } } term RPKI-DROP { from validation-database invalid; then reject; } term ACCEPT { then accept; } } policy-statement KENTIK-OUT { term DEFAULT { from policy DEFAULT; then reject; } term ACCEPT { then accept; } } policy-statement Load-Balance-Per-Packet { then { load-balance per-packet; } } policy-statement MEUS-PREFIXOS { term 177.91.160.0/22 { from { route-filter 177.91.160.0/22 upto /32; } then accept; } term 138.36.164.0/22 { from { route-filter 138.36.164.0/22 upto /32; } then accept; } term 2804:11dc::/32 { from { route-filter 2804:11dc::/32 upto /128; } then accept; } term REJECT { then reject; } } policy-statement OSPF-out { term PREFIX-ASN { from community PREFIX-ASN; then reject; } term STATIC { from protocol static; then accept; } term CONNECTED { from protocol direct; then accept; } term REJECT { then reject; } } policy-statement RI-CONTEUDO { term PREFIX-CLIENT-IP { from { instance master; community PREFIX-CLIENT-IP; } then accept; } term PREFIX-ASN { from { instance master; community PREFIX-ASN; } then accept; } term DIRECT_MASTER { from { instance master; protocol [ direct local static access access-internal ]; } then accept; } term OSPF_MASTER { from { instance master; protocol ospf; } then accept; } term REJECT { then reject; } } policy-statement RI-MASTER { term CONTEUDO_DEFAULT_REJECT { from { instance CONTEUDO; policy DEFAULT; } then reject; } term CONTEUDO { from { instance CONTEUDO; protocol [ direct local static ]; } then accept; } term PREFIX-WAN-PEER { from { instance CONTEUDO; community PREFIX-WAN-PEER; } then accept; } term REJECT { then reject; } } policy-statement RPKI-CHECK { term VALID { from { protocol bgp; validation-database valid; } then { validation-state valid; community add origin-validation-state-valid; } } term INVALID { from { protocol bgp; validation-database invalid; } then { validation-state invalid; community add origin-validation-state-invalid; } } term UNKNOWN { from { protocol bgp; validation-database unknown; } then { validation-state unknown; community add origin-validation-state-unknown; } } } policy-statement VRF-CLEAN-import { term cliente { from community PREFIX-CLIENT-IP; then accept; } term reject { then reject; } } policy-statement VRF-DIRTY-import { term cliente { from community PREFIX-CLIENT-IP; to rib DDOS-VBD-CORERO.inet.0; then accept; } term reject { then reject; } } policy-statement flowspec-in { term redirect { from community CORERO-DIRTY; to instance DDOS-VBD-CORERO; then { local-preference 666; next term; } } term accept-all { then accept; } } policy-statement nhself { then { next-hop self; } } community BLACKHOLE members 65444:666; community BLACKHOLE-RT members target:263444L:666; community BLACKLIST_CLIENTE members [ 65444:5000 "65444:16[0-7][0-9]" 65444:6000 65444:10000 ]; community BLACKLIST_GERAL members "65444:[0-9]+"; community BOGON-NO_EXPORT members 65332:888; community CDN+0 members 65444:8990; community CDN+1 members 65444:8991; community CDN+2 members 65444:8992; community CDN+3 members 65444:8993; community CDN-GOOGLE+0 members 65444:8020; community CDN-GOOGLE+1 members 65444:8021; community CDN-GOOGLE+2 members 65444:8022; community CDN-GOOGLE+3 members 65444:8023; community CDN-GOOGLE-NO_EXPORT members 65444:8029; community CDN-NETFLIX+0 members 65444:8040; community CDN-NETFLIX+1 members 65444:8041; community CDN-NETFLIX+2 members 65444:8042; community CDN-NETFLIX+3 members 65444:8043; community CDN-NETFLIX-NO_EXPORT members 65444:8049; community CDN-NO_EXPORT members 65444:8999; community CDNSTAR-NO_ADVERTISE members [ 65000:62017 65000:62018 65000:62023 65000:62030 65000:62036 65000:62037 target:65000:32475 ]; community CLIENTE-CDN-GERAL members 28158:1000; community CLIENTE-GERAL members 28158:200; community CLIENTE-NETFLIX members 28158:300; community CLI_IP-SPARKLE-DDOS members 65444:2045; community CORERO-DIRTY members redirect:666:666; community Cymru-in members 65332:888; community DDOS-DURAND members 65444:2058; community DIVERT members 65444:665; community DIVERT-CORERO members 65444:669; community GOOGLE-TOP_PRIO members 15169:13300; community IP+0 members 65444:2990; community IP+1 members 65444:2991; community IP+2 members 65444:2992; community IP+3 members 65444:2993; community IP-ARELION+0 members 65444:2140; community IP-ARELION+1 members 65444:2141; community IP-ARELION+2 members 65444:2142; community IP-ARELION+3 members 65444:2143; community IP-ARELION-BLACKHOLE members 1299:666; community IP-ARELION-NO_EXPORT members 65444:2149; community IP-CDNSTAR+0 members 65444:2890; community IP-CDNSTAR+1 members 65444:2891; community IP-CDNSTAR+2 members 65444:2892; community IP-CDNSTAR+3 members 65444:2893; community IP-CDNSTAR-ALGAR_INT-NO_EXPORT members 16735:900; community IP-CDNSTAR-NO_EXPORT members 65444:2899; community IP-CHINA+0 members 65444:2120; community IP-CHINA+1 members 65444:2121; community IP-CHINA+2 members 65444:2122; community IP-CHINA+3 members 65444:2123; community IP-CHINA-BLACKHOLE members 23764:666; community IP-CHINA-NO_ADVERTISE members 65000:123; community IP-CHINA-NO_EXPORT members 65444:2129; community IP-CHINA-PTT_NO_ADVERTISE members 26162:51000; community IP-COGENT+0 members 65444:2090; community IP-COGENT+1 members 65444:2091; community IP-COGENT+2 members 65444:2092; community IP-COGENT+3 members 65444:2093; community IP-COGENT-BLACKHOLE members 2914:666; community IP-COGENT-HIGHPREF members 174:135; community IP-COGENT-NO_EXPORT members 65444:2099; community IP-DECIX+0 members 65444:2500; community IP-DECIX+1 members 65444:2501; community IP-DECIX+2 members 65444:2502; community IP-DECIX+3 members 65444:2503; community IP-DECIX-BLACKHOLE members 65535:666; community IP-DECIX-LEVEL3-NO_EXPORT members [ 0:3549 0:3356 ]; community IP-DECIX-NO_ADVERTISE members [ 0:23106 0:3549 0:3356 0:16735 0:6939 target:0.0.0.0:262589L 64700:1047 large:6695:0:262589 0:36351 0:1351 0:1031 ]; community IP-DECIX-NO_EXPORT members 65444:2509; community IP-DURAND+0 members 65444:2050; community IP-DURAND+1 members 65444:2051; community IP-DURAND+2 members 65444:2052; community IP-DURAND+3 members 65444:2053; community IP-DURAND-BLACKHOLE members 22356:666; community IP-DURAND-FROM_10429 members 22356:10429; community IP-DURAND-FROM_3549 members 22356:3549; community IP-DURAND-FROM_4230 members 22356:4230; community IP-DURAND-IGNORE-in members 3:32700; community IP-DURAND-NO_ALGAR members 22356:50735; community IP-DURAND-NO_EDGEUNO_COGENT members 64055:174; community IP-DURAND-NO_EXPORT members 65444:2059; community IP-DURAND-NO_PTT members [ 22356:65521 28663:65521 ]; community IP-DURAND-NO_VIVO members 0:10429; community IP-DURAND-SEMPRE members 65444:2055; community IP-FLYS+0 members 65444:2080; community IP-FLYS+1 members 65444:2081; community IP-FLYS+2 members 65444:2082; community IP-FLYS+3 members 65444:2083; community IP-FLYS-NO_EXPORT members 65444:2089; community IP-HIGHWINDS+0 members 65444:2080; community IP-HIGHWINDS+1 members 65444:2081; community IP-HIGHWINDS+2 members 65444:2082; community IP-HIGHWINDS+3 members 65444:2083; community IP-HIGHWINDS-NO_EXPORT members 65444:2089; community IP-LEVEL3+0 members 65444:2060; community IP-LEVEL3+1 members 65444:2061; community IP-LEVEL3+2 members 65444:2062; community IP-LEVEL3+3 members 65444:2063; community IP-LEVEL3+6 members 65444:2066; community IP-LEVEL3-BLACKHOLE members 22356:666; community IP-LEVEL3-FREEFIRE members 65444:2068; community IP-LEVEL3-NO_EXPORT members 65444:2069; community IP-NETIX+0 members 65444:2510; community IP-NETIX+1 members 65444:2511; community IP-NETIX+2 members 65444:2512; community IP-NETIX+3 members 65444:2513; community IP-NETIX-BLACKHOLE members 52863:666; community IP-NETIX-NO_EXPORT members 65444:2519; community IP-NO_EXPORT members 65444:2999; community IP-NTT+0 members 65444:2090; community IP-NTT+1 members 65444:2091; community IP-NTT+2 members 65444:2092; community IP-NTT+3 members 65444:2093; community IP-NTT-BLACKHOLE members 2914:666; community IP-NTT-NO_EXPORT members 65444:2099; community IP-NYIIX-NO_EXPORT members 65444:2809; community IP-PEER1+0 members 65444:2700; community IP-PEER1-NO_EXPORT members 65444:2709; community IP-SPARKLE+0 members 65444:2040; community IP-SPARKLE+1 members 65444:2041; community IP-SPARKLE+2 members 65444:2042; community IP-SPARKLE+3 members 65444:2043; community IP-SPARKLE-BLACKHOLE members 6762:666; community IP-SPARKLE-DDOS members 6762:700; community IP-SPARKLE-FLOW members 65444:2048; community IP-SPARKLE-NO_EXPORT members 65444:2049; community IP-TATA+0 members 65444:2130; community IP-TATA+1 members 65444:2131; community IP-TATA+2 members 65444:2132; community IP-TATA+3 members 65444:2133; community IP-TATA-BLACKHOLE members 6453:666; community IP-TATA-DDOS members [ 65444:2137 65444:5000 ]; community IP-TATA-LOC_PREF members 6453:110; community IP-TATA-NO_ADVERTISE members [ 65000:123 65009:30058 ]; community IP-TATA-NO_EXPORT members 65444:2139; community IP-TELXIUS+0 members 65444:2110; community IP-TELXIUS+1 members 65444:2111; community IP-TELXIUS+2 members 65444:2112; community IP-TELXIUS+3 members 65444:2113; community IP-TELXIUS-BLACKHOLE members 12956:666; community IP-TELXIUS-NO_ADVERTISE members 65000:123; community IP-TELXIUS-NO_EXPORT members 65444:2119; community IP-VIVO+0 members 65444:2100; community IP-VIVO+1 members 65444:2101; community IP-VIVO+2 members 65444:2102; community IP-VIVO+3 members 65444:2103; community IP-VIVO-BLACKHOLE members 2914:666; community IP-VIVO-NO_EXPORT members 65444:2109; community LEVEL3-NO_EXPORT members 65000:0; community LEVEL3_LP members 3356:350; community NO_EXPORT members 65444:9999; community PEER+0 members 65444:4990; community PEER+1 members 65444:4991; community PEER+2 members 65444:4992; community PEER+3 members 65444:4993; community PEER-AMAZON-NO_EXPORT members 65444:4919; community PEER-ATC-NO_EXPORT members 65444:4159; community PEER-CLARO+0 members 65444:4520; community PEER-CLARO+1 members 65444:4521; community PEER-CLARO+2 members 65444:4522; community PEER-CLARO+3 members 65444:4523; community PEER-CLARO-NO_EXPORT members 65444:4529; community PEER-CLOUDFLARE-NO_EXPORT members 65444:4839; community PEER-EDGEUNO+0 members 65444:4070; community PEER-EDGEUNO+1 members 65444:4071; community PEER-EDGEUNO+2 members 65444:4072; community PEER-EDGEUNO+3 members 65444:4073; community PEER-EDGEUNO-NO_EXPORT members 65444:4079; community PEER-FACEBOOK_NO_EXPORT members 65444:8039; community PEER-GOOGLE+0 members 65444:4020; community PEER-GOOGLE+1 members 65444:4021; community PEER-GOOGLE+2 members 65444:4022; community PEER-GOOGLE+3 members 65444:4023; community PEER-GOOGLE-NO_EXPORT members 65444:4029; community PEER-MAXIHOST+0 members 65444:4680; community PEER-MAXIHOST+1 members 65444:4681; community PEER-MAXIHOST+2 members 65444:4682; community PEER-MAXIHOST+3 members 65444:4683; community PEER-MAXIHOST-NO_EXPORT members 65444:4689; community PEER-MICROSOFT+0 members 65444:4960; community PEER-MICROSOFT+1 members 65444:4961; community PEER-MICROSOFT+2 members 65444:4962; community PEER-MICROSOFT+3 members 65444:4963; community PEER-MICROSOFT-NO_EXPORT members 65444:4969; community PEER-NO_EXPORT members 65444:4999; community PREFIX-ASN members 65444:10000; community PREFIX-CLIENT-CONTEUDO members 65444:6000; community PREFIX-CLIENT-DDOS members 65444:9000; community PREFIX-CLIENT-IP members 65444:5000; community PREFIX-CLIENT-IP-CLI members 65444:5001; community PREFIX-CLIENT-IP-CLI-CLI members 65444:5002; community PREFIX-DDOS members 65444:9000; community PREFIX-IMPROVED members "65444:2000[0-9]"; community PREFIX-IP-DECIX members 65444:2508; community PREFIX-ORIGIN-ALT members "65444:160[0-9]"; community PREFIX-ORIGIN-BKP members "65444:164[0-9]|65444:165[0-9]"; community PREFIX-ORIGIN-THIS-POP members "65444:162[0-9]"; community PREFIX-ORIGIN-THIS-ROUTER members 65444:1620; community PREFIX-PARCIAL members 65444:1000; community PREFIX-PEER members 65444:4000; community PREFIX-PTT members 65444:3000; community PREFIX-WAN-IP members 65444:2000; community PREFIX-WAN-PEER members 65444:4000; community PREFIX-WAN-PTT members 65444:3000; community PREFIX-WAN-PTT-CE members 65444:3600; community PREFIX-WAN-PTT-PR members 65444:3500; community PTT+0 members 65444:3990; community PTT+1 members 65444:3991; community PTT+2 members 65444:3992; community PTT+3 members 65444:3993; community PTT-CE+0 members 65444:3060; community PTT-CE+1 members 65444:3061; community PTT-CE+2 members 65444:3062; community PTT-CE+3 members 65444:3063; community PTT-CE-NO_ADVERTISE members [ 65000:6939 target:65000:396986 ]; community PTT-CE-NO_EXPORT members 65444:3069; community PTT-EQX-MIA+0 members 65444:3270; community PTT-EQX-MIA+1 members 65444:3271; community PTT-EQX-MIA+2 members 65444:3272; community PTT-EQX-MIA+3 members 65444:3273; community PTT-EQX-MIA-NO_EXPORT members 65444:3279; community PTT-FL-IX+0 members 65444:3280; community PTT-FL-IX+1 members 65444:3281; community PTT-FL-IX+2 members 65444:3282; community PTT-FL-IX+3 members 65444:3283; community PTT-FL-IX-NO_EXPORT members 65444:3289; community PTT-GLOBO-NO_EXPORT members 65000:28604; community PTT-NO_EXPORT members 65444:3999; community PTT-PR+0 members 65444:3050; community PTT-PR+1 members 65444:3051; community PTT-PR+2 members 65444:3052; community PTT-PR+3 members 65444:3053; community PTT-PR-NO_EXPORT members 65444:3059; community PTT-SP+0 members 65444:3010; community PTT-SP+1 members 65444:3011; community PTT-SP+2 members 65444:3012; community PTT-SP+3 members 65444:3013; community PTT-SP-AMAZON-NO_EXPORT members 65000:16509; community PTT-SP-CDNTV-NO_EXPORT members target:65000:268843; community PTT-SP-NO_ADVERTISE members [ 65000:6939 65000:32934 65000:6507 65000:61832 65000:57463 65000:52925 65000:28604 65000:11802 65000:58593 65000:1916 ]; community PTT-SP-NO_ADVERTISE_FACEBOOK members 65000:32934; community PTT-SP-NO_ADVERTISE_GOOGLE members 65000:15169; community PTT-SP-NO_EXPORT members 65444:3019; community PTT_NO_ADVERTISE members [ 65000:6939 65000:16509 65000:20940 65000:32787 65000:28604 65000:31898 target:65000:262731 65000:58593 target:65000:265175 ]; community SPARKLE-DDOS members 6762:700; community SPARKLE_EBT+1 members 6762:20170; community SPARKLE_EBT+2 members 6762:20270; community SPARKLE_EBT+3 members 6762:20370; community SPARKLE_LEVEL3+3 members [ 6762:20315 6762:20109 6762:20309 ]; community TARGET-CLIENT-IP members target:65444:5000; community no-export members no-export; community origin-validation-state-invalid members 0x4300:0.0.0.0:2; community origin-validation-state-unknown members 0x4300:0.0.0.0:1; community origin-validation-state-valid members 0x4300:0.0.0.0:0; community well-know-no_export members no-export; as-path-match { memory-limit 16m; } community-match { memory-limit 16m; } as-path OPENX 263444; as-path BLUE3 265198; as-path SOCITEL 267474; as-path ARIAS 266961; as-path AS262814 ".* (262814|262814 .+)"; as-path AS270967 ".* (270967|270967 .+)"; as-path AS40260 ".* (40260|40260 .+)"; as-path-group AS-DURAND-PIORAR { as-path NTT ".+ 2914"; as-path AS264583 ".+ 264583"; as-path AS16276 ".* (16276|16276 .+)"; as-path AS20116 ".* (20116|20116 .+)"; as-path AS13878 ".+ (13878|13878 .+)"; as-path AS23106 ".* (23106|23106 .+)"; as-path AS28658 ".* (28658|28658 .+)"; as-path AS271354 ".* (271354|271354 .+)"; as-path AS46475 ".* (46475|46475 .+)"; } as-path-group AS-DURAND { as-path DURAND "22356$"; } as-path-group AS-DURAND-BUGADO { as-path AS32281 ".* (32281|32281 .+)"; as-path AS28215 ".* (28215|28215 .+)"; as-path AS17222 ".* (17222|17222 .+)"; as-path AS10954 ".* (10954|10954 .+)"; as-path AS271354 ".* (271354|271354 .+)"; } as-path-group AS-SPARKLE-PIORAR { as-path NTT 2914; as-path AS262470 ".+ (262470|262470 .+)"; as-path AS262462 ".+ (262462|262462 .+)"; as-path AS7162 ".+ (7162|7162 .+)"; as-path EMBRATEL ".* (4230|4230 .+)"; as-path AS26599 ".+ (26599|26599 .+)"; as-path AS16276 ".+ (16276|16276 .+)"; as-path AS60068 ".+ (60068|60068 .+)"; as-path AS46475 ".+ (46475|46475 .+)"; as-path AMAZON ".+ (16509|16509 .+)"; } as-path-group AS-SPARKLE { as-path SPARKLE "6762$"; } as-path-group DENY_SPARKLE-IN { as-path AS262654 ".* (262654|262654 .+)"; as-path AS53222 ".* (53222|53222 .+)"; as-path AS28246 ".* (28246|28246 .+)"; } as-path-group AS-DECIX-PIORAR { as-path ELETRONET ".* (267613|267613 .+)"; as-path DURAND ".* (22356|22356 .+)"; as-path INTERNEXA ".* (262589|262589 .+)"; as-path MEGATELECOM ".* (22381|22381 .+)"; as-path VOGEL ".* (25933|25933 .+)"; as-path WIRELINK ".* (61832|61832 .+)"; as-path FLYS ".* (28663|28663 .+)"; as-path HE ".* (6939|6939 .+)"; as-path AS269452 ".* (269452|269452 .+)"; as-path AS266925 ".* (266925|266925 .+)"; as-path AS14840 ".* (14840|14840 .+)"; as-path LOCAWEB ".* (27715|27715 .+)"; as-path AS262595 ".* (262595|262595 .+)"; as-path AS16276 ".* (16276|16276 .+)"; as-path SCALA ".* (7162|7162 .+)"; } as-path-group BOGON-ASN { as-path zero ".* 0 .*"; as-path as_trans ".* 23456 .*"; as-path examples1 ".* [64496-64511] .*"; as-path examples2 ".* [65536-65551] .*"; as-path reserved1 ".* [64512-65534] .*"; as-path reserved2 ".* [4200000000-4294967294] .*"; as-path last16 ".* 65535 .*"; as-path last32 ".* 4294967295 .*"; as-path iana-reserved ".* [65552-131071] .*"; } as-path-group AS-MAXIHOST { as-path MAXIHOST "262287$"; } as-path-group AS-MAXIHOST-MELHORAR { as-path MAXIHOST ".+ 262287"; } as-path-group AS-MAXIHOST-PIORAR { as-path MAXIHOST ".+ 123456"; } as-path-group BRADESCO { as-path AS28586 ".* (28586|28586 .+)"; } as-path-group BB { as-path AS11993 ".* (11993|11993 .+)"; } as-path-group AS-CDNSTAR-MELHORAR { as-path CDNSTAR ".+ 272713"; } as-path-group AS-CDNSTAR-PIORAR { as-path CDNSTAR ".+ 264096"; } as-path-group AS-CDNSTAR { as-path CDNSTAR "272713$"; } as-path-group AS-CLIENTES { as-path AS11835 ".* (11835|11835 .+)"; as-path AS13335 ".* (13335|13335 .+)"; as-path AS13357 ".* (13357|13357 .+)"; as-path AS1916 ".* (1916|1916 .+)"; as-path AS19318 ".* (19318|19318 .+)"; as-path AS20255 ".* (20255|20255 .+)"; as-path AS21574 ".* (21574|21574 .+)"; as-path AS21741 ".* (21741|21741 .+)"; as-path AS22080 ".* (22080|22080 .+)"; as-path AS22177 ".* (22177|22177 .+)"; as-path AS22381 ".* (22381|22381 .+)"; as-path AS22431 ".* (22431|22431 .+)"; as-path AS23201 ".* (23201|23201 .+)"; as-path AS262183 ".* (262183|262183 .+)"; as-path AS262196 ".* (262196|262196 .+)"; as-path AS262200 ".* (262200|262200 .+)"; as-path AS262250 ".* (262250|262250 .+)"; as-path AS262273 ".* (262273|262273 .+)"; as-path AS262280 ".* (262280|262280 .+)"; as-path AS262282 ".* (262282|262282 .+)"; as-path AS262288 ".* (262288|262288 .+)"; as-path AS262292 ".* (262292|262292 .+)"; as-path AS262304 ".* (262304|262304 .+)"; as-path AS262316 ".* (262316|262316 .+)"; as-path AS262317 ".* (262317|262317 .+)"; as-path AS262331 ".* (262331|262331 .+)"; as-path AS262342 ".* (262342|262342 .+)"; as-path AS262343 ".* (262343|262343 .+)"; as-path AS262351 ".* (262351|262351 .+)"; as-path AS262352 ".* (262352|262352 .+)"; as-path AS262353 ".* (262353|262353 .+)"; as-path AS262364 ".* (262364|262364 .+)"; as-path AS262379 ".* (262379|262379 .+)"; as-path AS262382 ".* (262382|262382 .+)"; as-path AS262398 ".* (262398|262398 .+)"; as-path AS262404 ".* (262404|262404 .+)"; as-path AS262406 ".* (262406|262406 .+)"; as-path AS262408 ".* (262408|262408 .+)"; as-path AS262417 ".* (262417|262417 .+)"; as-path AS262422 ".* (262422|262422 .+)"; as-path AS262423 ".* (262423|262423 .+)"; as-path AS262427 ".* (262427|262427 .+)"; as-path AS262452 ".* (262452|262452 .+)"; as-path AS262453 ".* (262453|262453 .+)"; as-path AS262456 ".* (262456|262456 .+)"; as-path AS262462 ".* (262462|262462 .+)"; as-path AS262469 ".* (262469|262469 .+)"; as-path AS262483 ".* (262483|262483 .+)"; as-path AS262484 ".* (262484|262484 .+)"; as-path AS262487 ".* (262487|262487 .+)"; as-path AS262490 ".* (262490|262490 .+)"; as-path AS262493 ".* (262493|262493 .+)"; as-path AS262496 ".* (262496|262496 .+)"; as-path AS262505 ".* (262505|262505 .+)"; as-path AS262514 ".* (262514|262514 .+)"; as-path AS262518 ".* (262518|262518 .+)"; as-path AS262520 ".* (262520|262520 .+)"; as-path AS262535 ".* (262535|262535 .+)"; as-path AS262540 ".* (262540|262540 .+)"; as-path AS262541 ".* (262541|262541 .+)"; as-path AS262569 ".* (262569|262569 .+)"; as-path AS262576 ".* (262576|262576 .+)"; as-path AS262579 ".* (262579|262579 .+)"; as-path AS262581 ".* (262581|262581 .+)"; as-path AS262588 ".* (262588|262588 .+)"; as-path AS262607 ".* (262607|262607 .+)"; as-path AS262612 ".* (262612|262612 .+)"; as-path AS262638 ".* (262638|262638 .+)"; as-path AS262641 ".* (262641|262641 .+)"; as-path AS262644 ".* (262644|262644 .+)"; as-path AS262649 ".* (262649|262649 .+)"; as-path AS262657 ".* (262657|262657 .+)"; as-path AS262663 ".* (262663|262663 .+)"; as-path AS262684 ".* (262684|262684 .+)"; as-path AS262693 ".* (262693|262693 .+)"; as-path AS262699 ".* (262699|262699 .+)"; as-path AS262702 ".* (262702|262702 .+)"; as-path AS262711 ".* (262711|262711 .+)"; as-path AS262721 ".* (262721|262721 .+)"; as-path AS262722 ".* (262722|262722 .+)"; as-path AS262725 ".* (262725|262725 .+)"; as-path AS262727 ".* (262727|262727 .+)"; as-path AS262738 ".* (262738|262738 .+)"; as-path AS262743 ".* (262743|262743 .+)"; as-path AS262744 ".* (262744|262744 .+)"; as-path AS262755 ".* (262755|262755 .+)"; as-path AS262756 ".* (262756|262756 .+)"; as-path AS262758 ".* (262758|262758 .+)"; as-path AS262761 ".* (262761|262761 .+)"; as-path AS262770 ".* (262770|262770 .+)"; as-path AS262777 ".* (262777|262777 .+)"; as-path AS262783 ".* (262783|262783 .+)"; as-path AS262793 ".* (262793|262793 .+)"; as-path AS262818 ".* (262818|262818 .+)"; as-path AS262828 ".* (262828|262828 .+)"; as-path AS262841 ".* (262841|262841 .+)"; as-path AS262861 ".* (262861|262861 .+)"; as-path AS262866 ".* (262866|262866 .+)"; as-path AS262873 ".* (262873|262873 .+)"; as-path AS262880 ".* (262880|262880 .+)"; as-path AS262895 ".* (262895|262895 .+)"; as-path AS262909 ".* (262909|262909 .+)"; as-path AS262911 ".* (262911|262911 .+)"; as-path AS262940 ".* (262940|262940 .+)"; as-path AS262961 ".* (262961|262961 .+)"; as-path AS262962 ".* (262962|262962 .+)"; as-path AS262972 ".* (262972|262972 .+)"; as-path AS262975 ".* (262975|262975 .+)"; as-path AS262986 ".* (262986|262986 .+)"; as-path AS262989 ".* (262989|262989 .+)"; as-path AS263011 ".* (263011|263011 .+)"; as-path AS263026 ".* (263026|263026 .+)"; as-path AS263027 ".* (263027|263027 .+)"; as-path AS263028 ".* (263028|263028 .+)"; as-path AS263040 ".* (263040|263040 .+)"; as-path AS263046 ".* (263046|263046 .+)"; as-path AS263049 ".* (263049|263049 .+)"; as-path AS263059 ".* (263059|263059 .+)"; as-path AS263062 ".* (263062|263062 .+)"; as-path AS263069 ".* (263069|263069 .+)"; as-path AS263075 ".* (263075|263075 .+)"; as-path AS263083 ".* (263083|263083 .+)"; as-path AS263084 ".* (263084|263084 .+)"; as-path AS263104 ".* (263104|263104 .+)"; as-path AS263105 ".* (263105|263105 .+)"; as-path AS263124 ".* (263124|263124 .+)"; as-path AS263131 ".* (263131|263131 .+)"; as-path AS263135 ".* (263135|263135 .+)"; as-path AS263143 ".* (263143|263143 .+)"; as-path AS263169 ".* (263169|263169 .+)"; as-path AS263192 ".* (263192|263192 .+)"; as-path AS263255 ".* (263255|263255 .+)"; as-path AS263256 ".* (263256|263256 .+)"; as-path AS263266 ".* (263266|263266 .+)"; as-path AS263270 ".* (263270|263270 .+)"; as-path AS263290 ".* (263290|263290 .+)"; as-path AS263294 ".* (263294|263294 .+)"; as-path AS263299 ".* (263299|263299 .+)"; as-path AS263303 ".* (263303|263303 .+)"; as-path AS263304 ".* (263304|263304 .+)"; as-path AS263309 ".* (263309|263309 .+)"; as-path AS263320 ".* (263320|263320 .+)"; as-path AS263335 ".* (263335|263335 .+)"; as-path AS263336 ".* (263336|263336 .+)"; as-path AS263342 ".* (263342|263342 .+)"; as-path AS263343 ".* (263343|263343 .+)"; as-path AS263345 ".* (263345|263345 .+)"; as-path AS263349 ".* (263349|263349 .+)"; as-path AS263370 ".* (263370|263370 .+)"; as-path AS263374 ".* (263374|263374 .+)"; as-path AS263389 ".* (263389|263389 .+)"; as-path AS263401 ".* (263401|263401 .+)"; as-path AS263412 ".* (263412|263412 .+)"; as-path AS263419 ".* (263419|263419 .+)"; as-path AS263425 ".* (263425|263425 .+)"; as-path AS263435 ".* (263435|263435 .+)"; as-path AS263444 ".* (263444|263444 .+)"; as-path AS263451 ".* (263451|263451 .+)"; as-path AS263457 ".* (263457|263457 .+)"; as-path AS263459 ".* (263459|263459 .+)"; as-path AS263469 ".* (263469|263469 .+)"; as-path AS263470 ".* (263470|263470 .+)"; as-path AS263489 ".* (263489|263489 .+)"; as-path AS263493 ".* (263493|263493 .+)"; as-path AS263495 ".* (263495|263495 .+)"; as-path AS263516 ".* (263516|263516 .+)"; as-path AS263532 ".* (263532|263532 .+)"; as-path AS263535 ".* (263535|263535 .+)"; as-path AS263536 ".* (263536|263536 .+)"; as-path AS263537 ".* (263537|263537 .+)"; as-path AS263541 ".* (263541|263541 .+)"; as-path AS263558 ".* (263558|263558 .+)"; as-path AS263567 ".* (263567|263567 .+)"; as-path AS263571 ".* (263571|263571 .+)"; as-path AS263578 ".* (263578|263578 .+)"; as-path AS263589 ".* (263589|263589 .+)"; as-path AS263600 ".* (263600|263600 .+)"; as-path AS263601 ".* (263601|263601 .+)"; as-path AS263608 ".* (263608|263608 .+)"; as-path AS263614 ".* (263614|263614 .+)"; as-path AS263623 ".* (263623|263623 .+)"; as-path AS263625 ".* (263625|263625 .+)"; as-path AS263626 ".* (263626|263626 .+)"; as-path AS263627 ".* (263627|263627 .+)"; as-path AS263641 ".* (263641|263641 .+)"; as-path AS263643 ".* (263643|263643 .+)"; as-path AS263651 ".* (263651|263651 .+)"; as-path AS263668 ".* (263668|263668 .+)"; as-path AS263672 ".* (263672|263672 .+)"; as-path AS263674 ".* (263674|263674 .+)"; as-path AS263676 ".* (263676|263676 .+)"; as-path AS263727 ".* (263727|263727 .+)"; as-path AS263732 ".* (263732|263732 .+)"; as-path AS263737 ".* (263737|263737 .+)"; as-path AS263750 ".* (263750|263750 .+)"; as-path AS263801 ".* (263801|263801 .+)"; as-path AS263813 ".* (263813|263813 .+)"; as-path AS263837 ".* (263837|263837 .+)"; as-path AS263859 ".* (263859|263859 .+)"; as-path AS263878 ".* (263878|263878 .+)"; as-path AS263896 ".* (263896|263896 .+)"; as-path AS263913 ".* (263913|263913 .+)"; as-path AS263920 ".* (263920|263920 .+)"; as-path AS263924 ".* (263924|263924 .+)"; as-path AS263929 ".* (263929|263929 .+)"; as-path AS263935 ".* (263935|263935 .+)"; as-path AS263936 ".* (263936|263936 .+)"; as-path AS263940 ".* (263940|263940 .+)"; as-path AS263944 ".* (263944|263944 .+)"; as-path AS263952 ".* (263952|263952 .+)"; as-path AS263971 ".* (263971|263971 .+)"; as-path AS263974 ".* (263974|263974 .+)"; as-path AS263978 ".* (263978|263978 .+)"; as-path AS263980 ".* (263980|263980 .+)"; as-path AS263983 ".* (263983|263983 .+)"; as-path AS263995 ".* (263995|263995 .+)"; as-path AS263997 ".* (263997|263997 .+)"; as-path AS264000 ".* (264000|264000 .+)"; as-path AS264001 ".* (264001|264001 .+)"; as-path AS264005 ".* (264005|264005 .+)"; as-path AS264022 ".* (264022|264022 .+)"; as-path AS264031 ".* (264031|264031 .+)"; as-path AS264043 ".* (264043|264043 .+)"; as-path AS264048 ".* (264048|264048 .+)"; as-path AS264053 ".* (264053|264053 .+)"; as-path AS264070 ".* (264070|264070 .+)"; as-path AS264092 ".* (264092|264092 .+)"; as-path AS264106 ".* (264106|264106 .+)"; as-path AS264127 ".* (264127|264127 .+)"; as-path AS264128 ".* (264128|264128 .+)"; as-path AS264129 ".* (264129|264129 .+)"; as-path AS264135 ".* (264135|264135 .+)"; as-path AS264146 ".* (264146|264146 .+)"; as-path AS264147 ".* (264147|264147 .+)"; as-path AS264155 ".* (264155|264155 .+)"; as-path AS264158 ".* (264158|264158 .+)"; as-path AS264178 ".* (264178|264178 .+)"; as-path AS264180 ".* (264180|264180 .+)"; as-path AS264197 ".* (264197|264197 .+)"; as-path AS264204 ".* (264204|264204 .+)"; as-path AS264208 ".* (264208|264208 .+)"; as-path AS264210 ".* (264210|264210 .+)"; as-path AS264214 ".* (264214|264214 .+)"; as-path AS264228 ".* (264228|264228 .+)"; as-path AS264232 ".* (264232|264232 .+)"; as-path AS264233 ".* (264233|264233 .+)"; as-path AS264234 ".* (264234|264234 .+)"; as-path AS264241 ".* (264241|264241 .+)"; as-path AS264242 ".* (264242|264242 .+)"; as-path AS264248 ".* (264248|264248 .+)"; as-path AS264257 ".* (264257|264257 .+)"; as-path AS264259 ".* (264259|264259 .+)"; as-path AS264262 ".* (264262|264262 .+)"; as-path AS264267 ".* (264267|264267 .+)"; as-path AS264269 ".* (264269|264269 .+)"; as-path AS264273 ".* (264273|264273 .+)"; as-path AS264285 ".* (264285|264285 .+)"; as-path AS264286 ".* (264286|264286 .+)"; as-path AS264290 ".* (264290|264290 .+)"; as-path AS264310 ".* (264310|264310 .+)"; as-path AS264316 ".* (264316|264316 .+)"; as-path AS264321 ".* (264321|264321 .+)"; as-path AS264334 ".* (264334|264334 .+)"; as-path AS264351 ".* (264351|264351 .+)"; as-path AS264352 ".* (264352|264352 .+)"; as-path AS264353 ".* (264353|264353 .+)"; as-path AS264358 ".* (264358|264358 .+)"; as-path AS264366 ".* (264366|264366 .+)"; as-path AS264375 ".* (264375|264375 .+)"; as-path AS264396 ".* (264396|264396 .+)"; as-path AS264403 ".* (264403|264403 .+)"; as-path AS264412 ".* (264412|264412 .+)"; as-path AS264413 ".* (264413|264413 .+)"; as-path AS264415 ".* (264415|264415 .+)"; as-path AS264427 ".* (264427|264427 .+)"; as-path AS264432 ".* (264432|264432 .+)"; as-path AS264433 ".* (264433|264433 .+)"; as-path AS264436 ".* (264436|264436 .+)"; as-path AS264446 ".* (264446|264446 .+)"; as-path AS264448 ".* (264448|264448 .+)"; as-path AS264452 ".* (264452|264452 .+)"; as-path AS264465 ".* (264465|264465 .+)"; as-path AS264466 ".* (264466|264466 .+)"; as-path AS264478 ".* (264478|264478 .+)"; as-path AS264491 ".* (264491|264491 .+)"; as-path AS264496 ".* (264496|264496 .+)"; as-path AS264510 ".* (264510|264510 .+)"; as-path AS264512 ".* (264512|264512 .+)"; as-path AS264517 ".* (264517|264517 .+)"; as-path AS264525 ".* (264525|264525 .+)"; as-path AS264536 ".* (264536|264536 .+)"; as-path AS264542 ".* (264542|264542 .+)"; as-path AS264551 ".* (264551|264551 .+)"; as-path AS264553 ".* (264553|264553 .+)"; as-path AS264557 ".* (264557|264557 .+)"; as-path AS264565 ".* (264565|264565 .+)"; as-path AS264567 ".* (264567|264567 .+)"; as-path AS264569 ".* (264569|264569 .+)"; as-path AS264576 ".* (264576|264576 .+)"; as-path AS264578 ".* (264578|264578 .+)"; as-path AS264580 ".* (264580|264580 .+)"; as-path AS264582 ".* (264582|264582 .+)"; as-path AS264584 ".* (264584|264584 .+)"; as-path AS264585 ".* (264585|264585 .+)"; as-path AS264591 ".* (264591|264591 .+)"; as-path AS264598 ".* (264598|264598 .+)"; as-path AS264599 ".* (264599|264599 .+)"; as-path AS264633 ".* (264633|264633 .+)"; as-path AS264705 ".* (264705|264705 .+)"; as-path AS264756 ".* (264756|264756 .+)"; as-path AS264770 ".* (264770|264770 .+)"; as-path AS264807 ".* (264807|264807 .+)"; as-path AS264853 ".* (264853|264853 .+)"; as-path AS264862 ".* (264862|264862 .+)"; as-path AS264867 ".* (264867|264867 .+)"; as-path AS264872 ".* (264872|264872 .+)"; as-path AS264877 ".* (264877|264877 .+)"; as-path AS264880 ".* (264880|264880 .+)"; as-path AS264891 ".* (264891|264891 .+)"; as-path AS264905 ".* (264905|264905 .+)"; as-path AS264911 ".* (264911|264911 .+)"; as-path AS264912 ".* (264912|264912 .+)"; as-path AS264936 ".* (264936|264936 .+)"; as-path AS264938 ".* (264938|264938 .+)"; as-path AS264941 ".* (264941|264941 .+)"; as-path AS264957 ".* (264957|264957 .+)"; as-path AS264960 ".* (264960|264960 .+)"; as-path AS264961 ".* (264961|264961 .+)"; as-path AS264968 ".* (264968|264968 .+)"; as-path AS264972 ".* (264972|264972 .+)"; as-path AS264974 ".* (264974|264974 .+)"; as-path AS264984 ".* (264984|264984 .+)"; as-path AS264985 ".* (264985|264985 .+)"; as-path AS264987 ".* (264987|264987 .+)"; as-path AS264997 ".* (264997|264997 .+)"; as-path AS265007 ".* (265007|265007 .+)"; as-path AS265010 ".* (265010|265010 .+)"; as-path AS265023 ".* (265023|265023 .+)"; as-path AS265032 ".* (265032|265032 .+)"; as-path AS265041 ".* (265041|265041 .+)"; as-path AS265044 ".* (265044|265044 .+)"; as-path AS265046 ".* (265046|265046 .+)"; as-path AS265050 ".* (265050|265050 .+)"; as-path AS265055 ".* (265055|265055 .+)"; as-path AS265064 ".* (265064|265064 .+)"; as-path AS265068 ".* (265068|265068 .+)"; as-path AS265069 ".* (265069|265069 .+)"; as-path AS265071 ".* (265071|265071 .+)"; as-path AS265072 ".* (265072|265072 .+)"; as-path AS265078 ".* (265078|265078 .+)"; as-path AS265082 ".* (265082|265082 .+)"; as-path AS265085 ".* (265085|265085 .+)"; as-path AS265101 ".* (265101|265101 .+)"; as-path AS265111 ".* (265111|265111 .+)"; as-path AS265121 ".* (265121|265121 .+)"; as-path AS265123 ".* (265123|265123 .+)"; as-path AS265126 ".* (265126|265126 .+)"; as-path AS265128 ".* (265128|265128 .+)"; as-path AS265130 ".* (265130|265130 .+)"; as-path AS265140 ".* (265140|265140 .+)"; as-path AS265151 ".* (265151|265151 .+)"; as-path AS265153 ".* (265153|265153 .+)"; as-path AS265164 ".* (265164|265164 .+)"; as-path AS265176 ".* (265176|265176 .+)"; as-path AS265188 ".* (265188|265188 .+)"; as-path AS265189 ".* (265189|265189 .+)"; as-path AS265192 ".* (265192|265192 .+)"; as-path AS265207 ".* (265207|265207 .+)"; as-path AS265210 ".* (265210|265210 .+)"; as-path AS265223 ".* (265223|265223 .+)"; as-path AS265225 ".* (265225|265225 .+)"; as-path AS265227 ".* (265227|265227 .+)"; as-path AS265242 ".* (265242|265242 .+)"; as-path AS265255 ".* (265255|265255 .+)"; as-path AS265257 ".* (265257|265257 .+)"; as-path AS265265 ".* (265265|265265 .+)"; as-path AS265266 ".* (265266|265266 .+)"; as-path AS265269 ".* (265269|265269 .+)"; as-path AS265270 ".* (265270|265270 .+)"; as-path AS265273 ".* (265273|265273 .+)"; as-path AS265275 ".* (265275|265275 .+)"; as-path AS265288 ".* (265288|265288 .+)"; as-path AS265300 ".* (265300|265300 .+)"; as-path AS265304 ".* (265304|265304 .+)"; as-path AS265314 ".* (265314|265314 .+)"; as-path AS265320 ".* (265320|265320 .+)"; as-path AS265324 ".* (265324|265324 .+)"; as-path AS265328 ".* (265328|265328 .+)"; as-path AS265332 ".* (265332|265332 .+)"; as-path AS265334 ".* (265334|265334 .+)"; as-path AS265335 ".* (265335|265335 .+)"; as-path AS265337 ".* (265337|265337 .+)"; as-path AS265342 ".* (265342|265342 .+)"; as-path AS265359 ".* (265359|265359 .+)"; as-path AS265378 ".* (265378|265378 .+)"; as-path AS265384 ".* (265384|265384 .+)"; as-path AS265385 ".* (265385|265385 .+)"; as-path AS265386 ".* (265386|265386 .+)"; as-path AS265389 ".* (265389|265389 .+)"; as-path AS265391 ".* (265391|265391 .+)"; as-path AS265400 ".* (265400|265400 .+)"; as-path AS265401 ".* (265401|265401 .+)"; as-path AS265405 ".* (265405|265405 .+)"; as-path AS265407 ".* (265407|265407 .+)"; as-path AS265408 ".* (265408|265408 .+)"; as-path AS265409 ".* (265409|265409 .+)"; as-path AS265410 ".* (265410|265410 .+)"; as-path AS265415 ".* (265415|265415 .+)"; as-path AS265430 ".* (265430|265430 .+)"; as-path AS265446 ".* (265446|265446 .+)"; as-path AS265455 ".* (265455|265455 .+)"; as-path AS265463 ".* (265463|265463 .+)"; as-path AS265466 ".* (265466|265466 .+)"; as-path AS265470 ".* (265470|265470 .+)"; as-path AS265474 ".* (265474|265474 .+)"; as-path AS265487 ".* (265487|265487 .+)"; as-path AS265495 ".* (265495|265495 .+)"; as-path AS265661 ".* (265661|265661 .+)"; as-path AS265703 ".* (265703|265703 .+)"; as-path AS265728 ".* (265728|265728 .+)"; as-path AS265759 ".* (265759|265759 .+)"; as-path AS265789 ".* (265789|265789 .+)"; as-path AS265864 ".* (265864|265864 .+)"; as-path AS265883 ".* (265883|265883 .+)"; as-path AS265885 ".* (265885|265885 .+)"; as-path AS265910 ".* (265910|265910 .+)"; as-path AS265911 ".* (265911|265911 .+)"; as-path AS265912 ".* (265912|265912 .+)"; as-path AS265916 ".* (265916|265916 .+)"; as-path AS265919 ".* (265919|265919 .+)"; as-path AS265929 ".* (265929|265929 .+)"; as-path AS265953 ".* (265953|265953 .+)"; as-path AS265954 ".* (265954|265954 .+)"; as-path AS265976 ".* (265976|265976 .+)"; as-path AS265979 ".* (265979|265979 .+)"; as-path AS265980 ".* (265980|265980 .+)"; as-path AS265983 ".* (265983|265983 .+)"; as-path AS265995 ".* (265995|265995 .+)"; as-path AS266000 ".* (266000|266000 .+)"; as-path AS266023 ".* (266023|266023 .+)"; as-path AS266035 ".* (266035|266035 .+)"; as-path AS266093 ".* (266093|266093 .+)"; as-path AS266095 ".* (266095|266095 .+)"; as-path AS266115 ".* (266115|266115 .+)"; as-path AS266124 ".* (266124|266124 .+)"; as-path AS266128 ".* (266128|266128 .+)"; as-path AS266137 ".* (266137|266137 .+)"; as-path AS266144 ".* (266144|266144 .+)"; as-path AS266153 ".* (266153|266153 .+)"; as-path AS26616 ".* (26616|26616 .+)"; as-path AS266163 ".* (266163|266163 .+)"; as-path AS266164 ".* (266164|266164 .+)"; as-path AS266166 ".* (266166|266166 .+)"; as-path AS266167 ".* (266167|266167 .+)"; as-path AS266170 ".* (266170|266170 .+)"; as-path AS266177 ".* (266177|266177 .+)"; as-path AS266180 ".* (266180|266180 .+)"; as-path AS266188 ".* (266188|266188 .+)"; as-path AS266200 ".* (266200|266200 .+)"; as-path AS266203 ".* (266203|266203 .+)"; as-path AS266204 ".* (266204|266204 .+)"; as-path AS266213 ".* (266213|266213 .+)"; as-path AS266217 ".* (266217|266217 .+)"; as-path AS266226 ".* (266226|266226 .+)"; as-path AS266228 ".* (266228|266228 .+)"; as-path AS266231 ".* (266231|266231 .+)"; as-path AS266236 ".* (266236|266236 .+)"; as-path AS266248 ".* (266248|266248 .+)"; as-path AS266252 ".* (266252|266252 .+)"; as-path AS266255 ".* (266255|266255 .+)"; as-path AS266266 ".* (266266|266266 .+)"; as-path AS266273 ".* (266273|266273 .+)"; as-path AS266280 ".* (266280|266280 .+)"; as-path AS266295 ".* (266295|266295 .+)"; as-path AS266297 ".* (266297|266297 .+)"; as-path AS266311 ".* (266311|266311 .+)"; as-path AS266317 ".* (266317|266317 .+)"; as-path AS266333 ".* (266333|266333 .+)"; as-path AS266337 ".* (266337|266337 .+)"; as-path AS266351 ".* (266351|266351 .+)"; as-path AS266353 ".* (266353|266353 .+)"; as-path AS266354 ".* (266354|266354 .+)"; as-path AS266355 ".* (266355|266355 .+)"; as-path AS266362 ".* (266362|266362 .+)"; as-path AS266367 ".* (266367|266367 .+)"; as-path AS266408 ".* (266408|266408 .+)"; as-path AS266410 ".* (266410|266410 .+)"; as-path AS266416 ".* (266416|266416 .+)"; as-path AS266421 ".* (266421|266421 .+)"; as-path AS266429 ".* (266429|266429 .+)"; as-path AS266433 ".* (266433|266433 .+)"; as-path AS266437 ".* (266437|266437 .+)"; as-path AS266440 ".* (266440|266440 .+)"; as-path AS266447 ".* (266447|266447 .+)"; as-path AS266452 ".* (266452|266452 .+)"; as-path AS266463 ".* (266463|266463 .+)"; as-path AS266484 ".* (266484|266484 .+)"; as-path AS266486 ".* (266486|266486 .+)"; as-path AS266498 ".* (266498|266498 .+)"; as-path AS266503 ".* (266503|266503 .+)"; as-path AS266504 ".* (266504|266504 .+)"; as-path AS266506 ".* (266506|266506 .+)"; as-path AS266517 ".* (266517|266517 .+)"; as-path AS266525 ".* (266525|266525 .+)"; as-path AS266526 ".* (266526|266526 .+)"; as-path AS266529 ".* (266529|266529 .+)"; as-path AS266542 ".* (266542|266542 .+)"; as-path AS266559 ".* (266559|266559 .+)"; as-path AS266568 ".* (266568|266568 .+)"; as-path AS266578 ".* (266578|266578 .+)"; as-path AS266599 ".* (266599|266599 .+)"; as-path AS266603 ".* (266603|266603 .+)"; as-path AS266614 ".* (266614|266614 .+)"; as-path AS266615 ".* (266615|266615 .+)"; as-path AS266616 ".* (266616|266616 .+)"; as-path AS266617 ".* (266617|266617 .+)"; as-path AS266624 ".* (266624|266624 .+)"; as-path AS266627 ".* (266627|266627 .+)"; as-path AS266631 ".* (266631|266631 .+)"; as-path AS266633 ".* (266633|266633 .+)"; as-path AS266643 ".* (266643|266643 .+)"; as-path AS266644 ".* (266644|266644 .+)"; as-path AS266645 ".* (266645|266645 .+)"; as-path AS266650 ".* (266650|266650 .+)"; as-path AS266694 ".* (266694|266694 .+)"; as-path AS266784 ".* (266784|266784 .+)"; as-path AS266803 ".* (266803|266803 .+)"; as-path AS266805 ".* (266805|266805 .+)"; as-path AS266814 ".* (266814|266814 .+)"; as-path AS266831 ".* (266831|266831 .+)"; as-path AS266858 ".* (266858|266858 .+)"; as-path AS266876 ".* (266876|266876 .+)"; as-path AS266911 ".* (266911|266911 .+)"; as-path AS266923 ".* (266923|266923 .+)"; as-path AS266942 ".* (266942|266942 .+)"; as-path AS266947 ".* (266947|266947 .+)"; as-path AS266961 ".* (266961|266961 .+)"; as-path AS266976 ".* (266976|266976 .+)"; as-path AS266984 ".* (266984|266984 .+)"; as-path AS266992 ".* (266992|266992 .+)"; as-path AS266998 ".* (266998|266998 .+)"; as-path AS266999 ".* (266999|266999 .+)"; as-path AS267006 ".* (267006|267006 .+)"; as-path AS267009 ".* (267009|267009 .+)"; as-path AS267022 ".* (267022|267022 .+)"; as-path AS267031 ".* (267031|267031 .+)"; as-path AS267032 ".* (267032|267032 .+)"; as-path AS267045 ".* (267045|267045 .+)"; as-path AS267054 ".* (267054|267054 .+)"; as-path AS267056 ".* (267056|267056 .+)"; as-path AS267078 ".* (267078|267078 .+)"; as-path AS267080 ".* (267080|267080 .+)"; as-path AS267091 ".* (267091|267091 .+)"; as-path AS267094 ".* (267094|267094 .+)"; as-path AS267097 ".* (267097|267097 .+)"; as-path AS267103 ".* (267103|267103 .+)"; as-path AS267114 ".* (267114|267114 .+)"; as-path AS267127 ".* (267127|267127 .+)"; as-path AS267135 ".* (267135|267135 .+)"; as-path AS267138 ".* (267138|267138 .+)"; as-path AS267150 ".* (267150|267150 .+)"; as-path AS267156 ".* (267156|267156 .+)"; as-path AS267158 ".* (267158|267158 .+)"; as-path AS267163 ".* (267163|267163 .+)"; as-path AS267164 ".* (267164|267164 .+)"; as-path AS267176 ".* (267176|267176 .+)"; as-path AS267180 ".* (267180|267180 .+)"; as-path AS267182 ".* (267182|267182 .+)"; as-path AS267183 ".* (267183|267183 .+)"; as-path AS267191 ".* (267191|267191 .+)"; as-path AS267194 ".* (267194|267194 .+)"; as-path AS267195 ".* (267195|267195 .+)"; as-path AS267200 ".* (267200|267200 .+)"; as-path AS267204 ".* (267204|267204 .+)"; as-path AS267208 ".* (267208|267208 .+)"; as-path AS267233 ".* (267233|267233 .+)"; as-path AS267234 ".* (267234|267234 .+)"; as-path AS267246 ".* (267246|267246 .+)"; as-path AS267264 ".* (267264|267264 .+)"; as-path AS267265 ".* (267265|267265 .+)"; as-path AS267276 ".* (267276|267276 .+)"; as-path AS267283 ".* (267283|267283 .+)"; as-path AS267284 ".* (267284|267284 .+)"; as-path AS267289 ".* (267289|267289 .+)"; as-path AS267293 ".* (267293|267293 .+)"; as-path AS267330 ".* (267330|267330 .+)"; as-path AS267339 ".* (267339|267339 .+)"; as-path AS267358 ".* (267358|267358 .+)"; as-path AS267379 ".* (267379|267379 .+)"; as-path AS267380 ".* (267380|267380 .+)"; as-path AS267389 ".* (267389|267389 .+)"; as-path AS267396 ".* (267396|267396 .+)"; as-path AS267403 ".* (267403|267403 .+)"; as-path AS267407 ".* (267407|267407 .+)"; as-path AS267418 ".* (267418|267418 .+)"; as-path AS267420 ".* (267420|267420 .+)"; as-path AS267434 ".* (267434|267434 .+)"; as-path AS267451 ".* (267451|267451 .+)"; as-path AS267453 ".* (267453|267453 .+)"; as-path AS267455 ".* (267455|267455 .+)"; as-path AS267502 ".* (267502|267502 .+)"; as-path AS267503 ".* (267503|267503 .+)"; as-path AS267508 ".* (267508|267508 .+)"; as-path AS267521 ".* (267521|267521 .+)"; as-path AS267523 ".* (267523|267523 .+)"; as-path AS267528 ".* (267528|267528 .+)"; as-path AS267531 ".* (267531|267531 .+)"; as-path AS267536 ".* (267536|267536 .+)"; as-path AS267539 ".* (267539|267539 .+)"; as-path AS267540 ".* (267540|267540 .+)"; as-path AS267541 ".* (267541|267541 .+)"; as-path AS267543 ".* (267543|267543 .+)"; as-path AS267558 ".* (267558|267558 .+)"; as-path AS267563 ".* (267563|267563 .+)"; as-path AS267571 ".* (267571|267571 .+)"; as-path AS267574 ".* (267574|267574 .+)"; as-path AS267575 ".* (267575|267575 .+)"; as-path AS267581 ".* (267581|267581 .+)"; as-path AS267582 ".* (267582|267582 .+)"; as-path AS267583 ".* (267583|267583 .+)"; as-path AS267592 ".* (267592|267592 .+)"; as-path AS267593 ".* (267593|267593 .+)"; as-path AS267596 ".* (267596|267596 .+)"; as-path AS267603 ".* (267603|267603 .+)"; as-path AS267605 ".* (267605|267605 .+)"; as-path AS267613 ".* (267613|267613 .+)"; as-path AS267619 ".* (267619|267619 .+)"; as-path AS267633 ".* (267633|267633 .+)"; as-path AS267635 ".* (267635|267635 .+)"; as-path AS267640 ".* (267640|267640 .+)"; as-path AS267648 ".* (267648|267648 .+)"; as-path AS267650 ".* (267650|267650 .+)"; as-path AS267651 ".* (267651|267651 .+)"; as-path AS267675 ".* (267675|267675 .+)"; as-path AS267702 ".* (267702|267702 .+)"; as-path AS267704 ".* (267704|267704 .+)"; as-path AS267723 ".* (267723|267723 .+)"; as-path AS267767 ".* (267767|267767 .+)"; as-path AS267829 ".* (267829|267829 .+)"; as-path AS267837 ".* (267837|267837 .+)"; as-path AS267850 ".* (267850|267850 .+)"; as-path AS267885 ".* (267885|267885 .+)"; as-path AS267905 ".* (267905|267905 .+)"; as-path AS267914 ".* (267914|267914 .+)"; as-path AS267939 ".* (267939|267939 .+)"; as-path AS267983 ".* (267983|267983 .+)"; as-path AS267988 ".* (267988|267988 .+)"; as-path AS267990 ".* (267990|267990 .+)"; as-path AS268004 ".* (268004|268004 .+)"; as-path AS268011 ".* (268011|268011 .+)"; as-path AS268012 ".* (268012|268012 .+)"; as-path AS268017 ".* (268017|268017 .+)"; as-path AS268019 ".* (268019|268019 .+)"; as-path AS268024 ".* (268024|268024 .+)"; as-path AS268027 ".* (268027|268027 .+)"; as-path AS268030 ".* (268030|268030 .+)"; as-path AS268037 ".* (268037|268037 .+)"; as-path AS268053 ".* (268053|268053 .+)"; as-path AS268057 ".* (268057|268057 .+)"; as-path AS268065 ".* (268065|268065 .+)"; as-path AS268067 ".* (268067|268067 .+)"; as-path AS268073 ".* (268073|268073 .+)"; as-path AS268076 ".* (268076|268076 .+)"; as-path AS268077 ".* (268077|268077 .+)"; as-path AS268081 ".* (268081|268081 .+)"; as-path AS268082 ".* (268082|268082 .+)"; as-path AS268085 ".* (268085|268085 .+)"; as-path AS268087 ".* (268087|268087 .+)"; as-path AS268092 ".* (268092|268092 .+)"; as-path AS268094 ".* (268094|268094 .+)"; as-path AS268096 ".* (268096|268096 .+)"; as-path AS268099 ".* (268099|268099 .+)"; as-path AS268100 ".* (268100|268100 .+)"; as-path AS268116 ".* (268116|268116 .+)"; as-path AS268120 ".* (268120|268120 .+)"; as-path AS268138 ".* (268138|268138 .+)"; as-path AS268141 ".* (268141|268141 .+)"; as-path AS268149 ".* (268149|268149 .+)"; as-path AS268170 ".* (268170|268170 .+)"; as-path AS268171 ".* (268171|268171 .+)"; as-path AS268172 ".* (268172|268172 .+)"; as-path AS268177 ".* (268177|268177 .+)"; as-path AS268183 ".* (268183|268183 .+)"; as-path AS268184 ".* (268184|268184 .+)"; as-path AS268213 ".* (268213|268213 .+)"; as-path AS268221 ".* (268221|268221 .+)"; as-path AS268225 ".* (268225|268225 .+)"; as-path AS268238 ".* (268238|268238 .+)"; as-path AS268239 ".* (268239|268239 .+)"; as-path AS268244 ".* (268244|268244 .+)"; as-path AS268246 ".* (268246|268246 .+)"; as-path AS268251 ".* (268251|268251 .+)"; as-path AS268257 ".* (268257|268257 .+)"; as-path AS268258 ".* (268258|268258 .+)"; as-path AS268285 ".* (268285|268285 .+)"; as-path AS268297 ".* (268297|268297 .+)"; as-path AS268310 ".* (268310|268310 .+)"; as-path AS268312 ".* (268312|268312 .+)"; as-path AS268319 ".* (268319|268319 .+)"; as-path AS268327 ".* (268327|268327 .+)"; as-path AS268334 ".* (268334|268334 .+)"; as-path AS268342 ".* (268342|268342 .+)"; as-path AS268352 ".* (268352|268352 .+)"; as-path AS268357 ".* (268357|268357 .+)"; as-path AS268363 ".* (268363|268363 .+)"; as-path AS268368 ".* (268368|268368 .+)"; as-path AS268376 ".* (268376|268376 .+)"; as-path AS268389 ".* (268389|268389 .+)"; as-path AS268409 ".* (268409|268409 .+)"; as-path AS268410 ".* (268410|268410 .+)"; as-path AS268411 ".* (268411|268411 .+)"; as-path AS268417 ".* (268417|268417 .+)"; as-path AS268428 ".* (268428|268428 .+)"; as-path AS268434 ".* (268434|268434 .+)"; as-path AS268438 ".* (268438|268438 .+)"; as-path AS268441 ".* (268441|268441 .+)"; as-path AS268442 ".* (268442|268442 .+)"; as-path AS268445 ".* (268445|268445 .+)"; as-path AS268447 ".* (268447|268447 .+)"; as-path AS268454 ".* (268454|268454 .+)"; as-path AS268455 ".* (268455|268455 .+)"; as-path AS268456 ".* (268456|268456 .+)"; as-path AS268459 ".* (268459|268459 .+)"; as-path AS268471 ".* (268471|268471 .+)"; as-path AS268478 ".* (268478|268478 .+)"; as-path AS268479 ".* (268479|268479 .+)"; as-path AS268487 ".* (268487|268487 .+)"; as-path AS268494 ".* (268494|268494 .+)"; as-path AS268495 ".* (268495|268495 .+)"; as-path AS268503 ".* (268503|268503 .+)"; as-path AS268513 ".* (268513|268513 .+)"; as-path AS268518 ".* (268518|268518 .+)"; as-path AS268521 ".* (268521|268521 .+)"; as-path AS268526 ".* (268526|268526 .+)"; as-path AS268527 ".* (268527|268527 .+)"; as-path AS268529 ".* (268529|268529 .+)"; as-path AS268538 ".* (268538|268538 .+)"; as-path AS268541 ".* (268541|268541 .+)"; as-path AS268549 ".* (268549|268549 .+)"; as-path AS268554 ".* (268554|268554 .+)"; as-path AS268556 ".* (268556|268556 .+)"; as-path AS268557 ".* (268557|268557 .+)"; as-path AS268560 ".* (268560|268560 .+)"; as-path AS268565 ".* (268565|268565 .+)"; as-path AS268571 ".* (268571|268571 .+)"; as-path AS268587 ".* (268587|268587 .+)"; as-path AS268589 ".* (268589|268589 .+)"; as-path AS268592 ".* (268592|268592 .+)"; as-path AS268595 ".* (268595|268595 .+)"; as-path AS268599 ".* (268599|268599 .+)"; as-path AS268610 ".* (268610|268610 .+)"; as-path AS268611 ".* (268611|268611 .+)"; as-path AS268622 ".* (268622|268622 .+)"; as-path AS268626 ".* (268626|268626 .+)"; as-path AS268629 ".* (268629|268629 .+)"; as-path AS268633 ".* (268633|268633 .+)"; as-path AS268649 ".* (268649|268649 .+)"; as-path AS268656 ".* (268656|268656 .+)"; as-path AS268665 ".* (268665|268665 .+)"; as-path AS268668 ".* (268668|268668 .+)"; as-path AS268684 ".* (268684|268684 .+)"; as-path AS268692 ".* (268692|268692 .+)"; as-path AS268702 ".* (268702|268702 .+)"; as-path AS268714 ".* (268714|268714 .+)"; as-path AS268719 ".* (268719|268719 .+)"; as-path AS268733 ".* (268733|268733 .+)"; as-path AS268736 ".* (268736|268736 .+)"; as-path AS268737 ".* (268737|268737 .+)"; as-path AS268741 ".* (268741|268741 .+)"; as-path AS268746 ".* (268746|268746 .+)"; as-path AS268753 ".* (268753|268753 .+)"; as-path AS268757 ".* (268757|268757 .+)"; as-path AS268764 ".* (268764|268764 .+)"; as-path AS268772 ".* (268772|268772 .+)"; as-path AS268774 ".* (268774|268774 .+)"; as-path AS268786 ".* (268786|268786 .+)"; as-path AS268791 ".* (268791|268791 .+)"; as-path AS268798 ".* (268798|268798 .+)"; as-path AS268811 ".* (268811|268811 .+)"; as-path AS268813 ".* (268813|268813 .+)"; as-path AS268824 ".* (268824|268824 .+)"; as-path AS268828 ".* (268828|268828 .+)"; as-path AS268838 ".* (268838|268838 .+)"; as-path AS268849 ".* (268849|268849 .+)"; as-path AS268854 ".* (268854|268854 .+)"; as-path AS268858 ".* (268858|268858 .+)"; as-path AS268887 ".* (268887|268887 .+)"; as-path AS268888 ".* (268888|268888 .+)"; as-path AS268916 ".* (268916|268916 .+)"; as-path AS268931 ".* (268931|268931 .+)"; as-path AS268938 ".* (268938|268938 .+)"; as-path AS268939 ".* (268939|268939 .+)"; as-path AS268942 ".* (268942|268942 .+)"; as-path AS268946 ".* (268946|268946 .+)"; as-path AS268948 ".* (268948|268948 .+)"; as-path AS268949 ".* (268949|268949 .+)"; as-path AS268973 ".* (268973|268973 .+)"; as-path AS268974 ".* (268974|268974 .+)"; as-path AS268976 ".* (268976|268976 .+)"; as-path AS268977 ".* (268977|268977 .+)"; as-path AS268991 ".* (268991|268991 .+)"; as-path AS268996 ".* (268996|268996 .+)"; as-path AS268997 ".* (268997|268997 .+)"; as-path AS269000 ".* (269000|269000 .+)"; as-path AS269011 ".* (269011|269011 .+)"; as-path AS269016 ".* (269016|269016 .+)"; as-path AS269018 ".* (269018|269018 .+)"; as-path AS269024 ".* (269024|269024 .+)"; as-path AS269030 ".* (269030|269030 .+)"; as-path AS269038 ".* (269038|269038 .+)"; as-path AS269039 ".* (269039|269039 .+)"; as-path AS269050 ".* (269050|269050 .+)"; as-path AS269051 ".* (269051|269051 .+)"; as-path AS269054 ".* (269054|269054 .+)"; as-path AS269060 ".* (269060|269060 .+)"; as-path AS269061 ".* (269061|269061 .+)"; as-path AS269074 ".* (269074|269074 .+)"; as-path AS269084 ".* (269084|269084 .+)"; as-path AS269090 ".* (269090|269090 .+)"; as-path AS269096 ".* (269096|269096 .+)"; as-path AS269102 ".* (269102|269102 .+)"; as-path AS269105 ".* (269105|269105 .+)"; as-path AS269110 ".* (269110|269110 .+)"; as-path AS269120 ".* (269120|269120 .+)"; as-path AS269130 ".* (269130|269130 .+)"; as-path AS269136 ".* (269136|269136 .+)"; as-path AS269141 ".* (269141|269141 .+)"; as-path AS269205 ".* (269205|269205 .+)"; as-path AS269223 ".* (269223|269223 .+)"; as-path AS269231 ".* (269231|269231 .+)"; as-path AS269238 ".* (269238|269238 .+)"; as-path AS269244 ".* (269244|269244 .+)"; as-path AS269245 ".* (269245|269245 .+)"; as-path AS269247 ".* (269247|269247 .+)"; as-path AS269258 ".* (269258|269258 .+)"; as-path AS269260 ".* (269260|269260 .+)"; as-path AS269263 ".* (269263|269263 .+)"; as-path AS269269 ".* (269269|269269 .+)"; as-path AS269272 ".* (269272|269272 .+)"; as-path AS269277 ".* (269277|269277 .+)"; as-path AS269281 ".* (269281|269281 .+)"; as-path AS269289 ".* (269289|269289 .+)"; as-path AS269303 ".* (269303|269303 .+)"; as-path AS269306 ".* (269306|269306 .+)"; as-path AS269320 ".* (269320|269320 .+)"; as-path AS269323 ".* (269323|269323 .+)"; as-path AS269325 ".* (269325|269325 .+)"; as-path AS269336 ".* (269336|269336 .+)"; as-path AS269338 ".* (269338|269338 .+)"; as-path AS269342 ".* (269342|269342 .+)"; as-path AS269343 ".* (269343|269343 .+)"; as-path AS269347 ".* (269347|269347 .+)"; as-path AS269357 ".* (269357|269357 .+)"; as-path AS269366 ".* (269366|269366 .+)"; as-path AS269368 ".* (269368|269368 .+)"; as-path AS269371 ".* (269371|269371 .+)"; as-path AS269372 ".* (269372|269372 .+)"; as-path AS269381 ".* (269381|269381 .+)"; as-path AS269388 ".* (269388|269388 .+)"; as-path AS269394 ".* (269394|269394 .+)"; as-path AS269425 ".* (269425|269425 .+)"; as-path AS269435 ".* (269435|269435 .+)"; as-path AS269450 ".* (269450|269450 .+)"; as-path AS269461 ".* (269461|269461 .+)"; as-path AS269474 ".* (269474|269474 .+)"; as-path AS269477 ".* (269477|269477 .+)"; as-path AS269496 ".* (269496|269496 .+)"; as-path AS269503 ".* (269503|269503 .+)"; as-path AS269508 ".* (269508|269508 .+)"; as-path AS269515 ".* (269515|269515 .+)"; as-path AS269529 ".* (269529|269529 .+)"; as-path AS269535 ".* (269535|269535 .+)"; as-path AS269556 ".* (269556|269556 .+)"; as-path AS269558 ".* (269558|269558 .+)"; as-path AS269564 ".* (269564|269564 .+)"; as-path AS269572 ".* (269572|269572 .+)"; as-path AS269573 ".* (269573|269573 .+)"; as-path AS269574 ".* (269574|269574 .+)"; as-path AS269579 ".* (269579|269579 .+)"; as-path AS269582 ".* (269582|269582 .+)"; as-path AS269584 ".* (269584|269584 .+)"; as-path AS269591 ".* (269591|269591 .+)"; as-path AS269601 ".* (269601|269601 .+)"; as-path AS269606 ".* (269606|269606 .+)"; as-path AS269609 ".* (269609|269609 .+)"; as-path AS269615 ".* (269615|269615 .+)"; as-path AS269630 ".* (269630|269630 .+)"; as-path AS269641 ".* (269641|269641 .+)"; as-path AS269645 ".* (269645|269645 .+)"; as-path AS269648 ".* (269648|269648 .+)"; as-path AS269654 ".* (269654|269654 .+)"; as-path AS269658 ".* (269658|269658 .+)"; as-path AS269660 ".* (269660|269660 .+)"; as-path AS269662 ".* (269662|269662 .+)"; as-path AS269675 ".* (269675|269675 .+)"; as-path AS269690 ".* (269690|269690 .+)"; as-path AS269691 ".* (269691|269691 .+)"; as-path AS269698 ".* (269698|269698 .+)"; as-path AS269704 ".* (269704|269704 .+)"; as-path AS269711 ".* (269711|269711 .+)"; as-path AS269712 ".* (269712|269712 .+)"; as-path AS269721 ".* (269721|269721 .+)"; as-path AS269726 ".* (269726|269726 .+)"; as-path AS269731 ".* (269731|269731 .+)"; as-path AS269748 ".* (269748|269748 .+)"; as-path AS269783 ".* (269783|269783 .+)"; as-path AS269878 ".* (269878|269878 .+)"; as-path AS269930 ".* (269930|269930 .+)"; as-path AS269932 ".* (269932|269932 .+)"; as-path AS269976 ".* (269976|269976 .+)"; as-path AS270014 ".* (270014|270014 .+)"; as-path AS270052 ".* (270052|270052 .+)"; as-path AS270096 ".* (270096|270096 .+)"; as-path AS270240 ".* (270240|270240 .+)"; as-path AS270241 ".* (270241|270241 .+)"; as-path AS270244 ".* (270244|270244 .+)"; as-path AS270256 ".* (270256|270256 .+)"; as-path AS270262 ".* (270262|270262 .+)"; as-path AS270266 ".* (270266|270266 .+)"; as-path AS270283 ".* (270283|270283 .+)"; as-path AS270284 ".* (270284|270284 .+)"; as-path AS270304 ".* (270304|270304 .+)"; as-path AS270306 ".* (270306|270306 .+)"; as-path AS270336 ".* (270336|270336 .+)"; as-path AS270348 ".* (270348|270348 .+)"; as-path AS270349 ".* (270349|270349 .+)"; as-path AS270350 ".* (270350|270350 .+)"; as-path AS270352 ".* (270352|270352 .+)"; as-path AS270353 ".* (270353|270353 .+)"; as-path AS270355 ".* (270355|270355 .+)"; as-path AS270357 ".* (270357|270357 .+)"; as-path AS270361 ".* (270361|270361 .+)"; as-path AS270362 ".* (270362|270362 .+)"; as-path AS270367 ".* (270367|270367 .+)"; as-path AS270368 ".* (270368|270368 .+)"; as-path AS270382 ".* (270382|270382 .+)"; as-path AS270385 ".* (270385|270385 .+)"; as-path AS270388 ".* (270388|270388 .+)"; as-path AS270398 ".* (270398|270398 .+)"; as-path AS270399 ".* (270399|270399 .+)"; as-path AS270400 ".* (270400|270400 .+)"; as-path AS270401 ".* (270401|270401 .+)"; as-path AS270405 ".* (270405|270405 .+)"; as-path AS270418 ".* (270418|270418 .+)"; as-path AS270422 ".* (270422|270422 .+)"; as-path AS270433 ".* (270433|270433 .+)"; as-path AS270434 ".* (270434|270434 .+)"; as-path AS270438 ".* (270438|270438 .+)"; as-path AS270441 ".* (270441|270441 .+)"; as-path AS270452 ".* (270452|270452 .+)"; as-path AS270459 ".* (270459|270459 .+)"; as-path AS270470 ".* (270470|270470 .+)"; as-path AS270483 ".* (270483|270483 .+)"; as-path AS270484 ".* (270484|270484 .+)"; as-path AS270491 ".* (270491|270491 .+)"; as-path AS270501 ".* (270501|270501 .+)"; as-path AS270502 ".* (270502|270502 .+)"; as-path AS270506 ".* (270506|270506 .+)"; as-path AS270520 ".* (270520|270520 .+)"; as-path AS270524 ".* (270524|270524 .+)"; as-path AS270535 ".* (270535|270535 .+)"; as-path AS270567 ".* (270567|270567 .+)"; as-path AS270571 ".* (270571|270571 .+)"; as-path AS270576 ".* (270576|270576 .+)"; as-path AS270579 ".* (270579|270579 .+)"; as-path AS270585 ".* (270585|270585 .+)"; as-path AS270590 ".* (270590|270590 .+)"; as-path AS270601 ".* (270601|270601 .+)"; as-path AS270603 ".* (270603|270603 .+)"; as-path AS270607 ".* (270607|270607 .+)"; as-path AS270608 ".* (270608|270608 .+)"; as-path AS270613 ".* (270613|270613 .+)"; as-path AS270614 ".* (270614|270614 .+)"; as-path AS270616 ".* (270616|270616 .+)"; as-path AS270623 ".* (270623|270623 .+)"; as-path AS270648 ".* (270648|270648 .+)"; as-path AS270683 ".* (270683|270683 .+)"; as-path AS270684 ".* (270684|270684 .+)"; as-path AS270685 ".* (270685|270685 .+)"; as-path AS270690 ".* (270690|270690 .+)"; as-path AS270713 ".* (270713|270713 .+)"; as-path AS270717 ".* (270717|270717 .+)"; as-path AS270722 ".* (270722|270722 .+)"; as-path AS270733 ".* (270733|270733 .+)"; as-path AS270734 ".* (270734|270734 .+)"; as-path AS270735 ".* (270735|270735 .+)"; as-path AS270737 ".* (270737|270737 .+)"; as-path AS270750 ".* (270750|270750 .+)"; as-path AS270758 ".* (270758|270758 .+)"; as-path AS270766 ".* (270766|270766 .+)"; as-path AS270770 ".* (270770|270770 .+)"; as-path AS270812 ".* (270812|270812 .+)"; as-path AS270824 ".* (270824|270824 .+)"; as-path AS270829 ".* (270829|270829 .+)"; as-path AS270830 ".* (270830|270830 .+)"; as-path AS270834 ".* (270834|270834 .+)"; as-path AS270850 ".* (270850|270850 .+)"; as-path AS270859 ".* (270859|270859 .+)"; as-path AS270865 ".* (270865|270865 .+)"; as-path AS270881 ".* (270881|270881 .+)"; as-path AS270885 ".* (270885|270885 .+)"; as-path AS270894 ".* (270894|270894 .+)"; as-path AS270908 ".* (270908|270908 .+)"; as-path AS270914 ".* (270914|270914 .+)"; as-path AS270931 ".* (270931|270931 .+)"; as-path AS270941 ".* (270941|270941 .+)"; as-path AS270943 ".* (270943|270943 .+)"; as-path AS270944 ".* (270944|270944 .+)"; as-path AS270956 ".* (270956|270956 .+)"; as-path AS270957 ".* (270957|270957 .+)"; as-path AS270959 ".* (270959|270959 .+)"; as-path AS270960 ".* (270960|270960 .+)"; as-path AS270963 ".* (270963|270963 .+)"; as-path AS270965 ".* (270965|270965 .+)"; as-path AS270972 ".* (270972|270972 .+)"; as-path AS270979 ".* (270979|270979 .+)"; as-path AS270984 ".* (270984|270984 .+)"; as-path AS270992 ".* (270992|270992 .+)"; as-path AS270996 ".* (270996|270996 .+)"; as-path AS270997 ".* (270997|270997 .+)"; as-path AS271006 ".* (271006|271006 .+)"; as-path AS271007 ".* (271007|271007 .+)"; as-path AS271019 ".* (271019|271019 .+)"; as-path AS271021 ".* (271021|271021 .+)"; as-path AS271031 ".* (271031|271031 .+)"; as-path AS271040 ".* (271040|271040 .+)"; as-path AS271056 ".* (271056|271056 .+)"; as-path AS271058 ".* (271058|271058 .+)"; as-path AS271066 ".* (271066|271066 .+)"; as-path AS271072 ".* (271072|271072 .+)"; as-path AS271079 ".* (271079|271079 .+)"; as-path AS271090 ".* (271090|271090 .+)"; as-path AS271098 ".* (271098|271098 .+)"; as-path AS271099 ".* (271099|271099 .+)"; as-path AS271102 ".* (271102|271102 .+)"; as-path AS271113 ".* (271113|271113 .+)"; as-path AS271117 ".* (271117|271117 .+)"; as-path AS271131 ".* (271131|271131 .+)"; as-path AS271139 ".* (271139|271139 .+)"; as-path AS271145 ".* (271145|271145 .+)"; as-path AS271146 ".* (271146|271146 .+)"; as-path AS271148 ".* (271148|271148 .+)"; as-path AS271150 ".* (271150|271150 .+)"; as-path AS271170 ".* (271170|271170 .+)"; as-path AS271175 ".* (271175|271175 .+)"; as-path AS271194 ".* (271194|271194 .+)"; as-path AS271202 ".* (271202|271202 .+)"; as-path AS271203 ".* (271203|271203 .+)"; as-path AS271225 ".* (271225|271225 .+)"; as-path AS271229 ".* (271229|271229 .+)"; as-path AS271241 ".* (271241|271241 .+)"; as-path AS271244 ".* (271244|271244 .+)"; as-path AS271249 ".* (271249|271249 .+)"; as-path AS271265 ".* (271265|271265 .+)"; as-path AS271267 ".* (271267|271267 .+)"; as-path AS271278 ".* (271278|271278 .+)"; as-path AS271284 ".* (271284|271284 .+)"; as-path AS271286 ".* (271286|271286 .+)"; as-path AS271291 ".* (271291|271291 .+)"; as-path AS271292 ".* (271292|271292 .+)"; as-path AS271294 ".* (271294|271294 .+)"; as-path AS271298 ".* (271298|271298 .+)"; as-path AS271302 ".* (271302|271302 .+)"; as-path AS271303 ".* (271303|271303 .+)"; as-path AS271306 ".* (271306|271306 .+)"; as-path AS271313 ".* (271313|271313 .+)"; as-path AS271324 ".* (271324|271324 .+)"; as-path AS271326 ".* (271326|271326 .+)"; as-path AS271329 ".* (271329|271329 .+)"; as-path AS271348 ".* (271348|271348 .+)"; as-path AS271359 ".* (271359|271359 .+)"; as-path AS271361 ".* (271361|271361 .+)"; as-path AS271362 ".* (271362|271362 .+)"; as-path AS271373 ".* (271373|271373 .+)"; as-path AS271376 ".* (271376|271376 .+)"; as-path AS271391 ".* (271391|271391 .+)"; as-path AS271399 ".* (271399|271399 .+)"; as-path AS271400 ".* (271400|271400 .+)"; as-path AS271406 ".* (271406|271406 .+)"; as-path AS271413 ".* (271413|271413 .+)"; as-path AS271416 ".* (271416|271416 .+)"; as-path AS271419 ".* (271419|271419 .+)"; as-path AS271421 ".* (271421|271421 .+)"; as-path AS271439 ".* (271439|271439 .+)"; as-path AS271441 ".* (271441|271441 .+)"; as-path AS271453 ".* (271453|271453 .+)"; as-path AS271458 ".* (271458|271458 .+)"; as-path AS271483 ".* (271483|271483 .+)"; as-path AS271492 ".* (271492|271492 .+)"; as-path AS271503 ".* (271503|271503 .+)"; as-path AS271504 ".* (271504|271504 .+)"; as-path AS271509 ".* (271509|271509 .+)"; as-path AS271520 ".* (271520|271520 .+)"; as-path AS271542 ".* (271542|271542 .+)"; as-path AS271552 ".* (271552|271552 .+)"; as-path AS271598 ".* (271598|271598 .+)"; as-path AS271601 ".* (271601|271601 .+)"; as-path AS271603 ".* (271603|271603 .+)"; as-path AS271609 ".* (271609|271609 .+)"; as-path AS271612 ".* (271612|271612 .+)"; as-path AS271613 ".* (271613|271613 .+)"; as-path AS271627 ".* (271627|271627 .+)"; as-path AS271631 ".* (271631|271631 .+)"; as-path AS271633 ".* (271633|271633 .+)"; as-path AS271642 ".* (271642|271642 .+)"; as-path AS271689 ".* (271689|271689 .+)"; as-path AS271969 ".* (271969|271969 .+)"; as-path AS272021 ".* (272021|272021 .+)"; as-path AS272062 ".* (272062|272062 .+)"; as-path AS272099 ".* (272099|272099 .+)"; as-path AS272158 ".* (272158|272158 .+)"; as-path AS272263 ".* (272263|272263 .+)"; as-path AS272432 ".* (272432|272432 .+)"; as-path AS272462 ".* (272462|272462 .+)"; as-path AS272470 ".* (272470|272470 .+)"; as-path AS272524 ".* (272524|272524 .+)"; as-path AS272547 ".* (272547|272547 .+)"; as-path AS272674 ".* (272674|272674 .+)"; as-path AS272694 ".* (272694|272694 .+)"; as-path AS272764 ".* (272764|272764 .+)"; as-path AS273363 ".* (273363|273363 .+)"; as-path AS273431 ".* (273431|273431 .+)"; as-path AS273586 ".* (273586|273586 .+)"; as-path AS273648 ".* (273648|273648 .+)"; as-path AS273656 ".* (273656|273656 .+)"; as-path AS273774 ".* (273774|273774 .+)"; as-path AS273785 ".* (273785|273785 .+)"; as-path AS273792 ".* (273792|273792 .+)"; as-path AS27697 ".* (27697|27697 .+)"; as-path AS27768 ".* (27768|27768 .+)"; as-path AS27795 ".* (27795|27795 .+)"; as-path AS28033 ".* (28033|28033 .+)"; as-path AS28103 ".* (28103|28103 .+)"; as-path AS28135 ".* (28135|28135 .+)"; as-path AS28136 ".* (28136|28136 .+)"; as-path AS28138 ".* (28138|28138 .+)"; as-path AS28145 ".* (28145|28145 .+)"; as-path AS28153 ".* (28153|28153 .+)"; as-path AS28154 ".* (28154|28154 .+)"; as-path AS28158 ".* (28158|28158 .+)"; as-path AS28160 ".* (28160|28160 .+)"; as-path AS28162 ".* (28162|28162 .+)"; as-path AS28164 ".* (28164|28164 .+)"; as-path AS28172 ".* (28172|28172 .+)"; as-path AS28182 ".* (28182|28182 .+)"; as-path AS28184 ".* (28184|28184 .+)"; as-path AS28187 ".* (28187|28187 .+)"; as-path AS28188 ".* (28188|28188 .+)"; as-path AS28191 ".* (28191|28191 .+)"; as-path AS28194 ".* (28194|28194 .+)"; as-path AS28195 ".* (28195|28195 .+)"; as-path AS28205 ".* (28205|28205 .+)"; as-path AS28218 ".* (28218|28218 .+)"; as-path AS28223 ".* (28223|28223 .+)"; as-path AS28227 ".* (28227|28227 .+)"; as-path AS28229 ".* (28229|28229 .+)"; as-path AS28230 ".* (28230|28230 .+)"; as-path AS28246 ".* (28246|28246 .+)"; as-path AS28247 ".* (28247|28247 .+)"; as-path AS28264 ".* (28264|28264 .+)"; as-path AS28265 ".* (28265|28265 .+)"; as-path AS28284 ".* (28284|28284 .+)"; as-path AS28287 ".* (28287|28287 .+)"; as-path AS28292 ".* (28292|28292 .+)"; as-path AS28309 ".* (28309|28309 .+)"; as-path AS28324 ".* (28324|28324 .+)"; as-path AS28352 ".* (28352|28352 .+)"; as-path AS28360 ".* (28360|28360 .+)"; as-path AS28364 ".* (28364|28364 .+)"; as-path AS28590 ".* (28590|28590 .+)"; as-path AS28640 ".* (28640|28640 .+)"; as-path AS28654 ".* (28654|28654 .+)"; as-path AS28656 ".* (28656|28656 .+)"; as-path AS373681 ".* (373681|373681 .+)"; as-path AS52227 ".* (52227|52227 .+)"; as-path AS52251 ".* (52251|52251 .+)"; as-path AS52418 ".* (52418|52418 .+)"; as-path AS52445 ".* (52445|52445 .+)"; as-path AS52468 ".* (52468|52468 .+)"; as-path AS52531 ".* (52531|52531 .+)"; as-path AS52539 ".* (52539|52539 .+)"; as-path AS52542 ".* (52542|52542 .+)"; as-path AS52548 ".* (52548|52548 .+)"; as-path AS52549 ".* (52549|52549 .+)"; as-path AS52557 ".* (52557|52557 .+)"; as-path AS52560 ".* (52560|52560 .+)"; as-path AS52570 ".* (52570|52570 .+)"; as-path AS52581 ".* (52581|52581 .+)"; as-path AS52591 ".* (52591|52591 .+)"; as-path AS52593 ".* (52593|52593 .+)"; as-path AS52594 ".* (52594|52594 .+)"; as-path AS52602 ".* (52602|52602 .+)"; as-path AS52612 ".* (52612|52612 .+)"; as-path AS52618 ".* (52618|52618 .+)"; as-path AS52624 ".* (52624|52624 .+)"; as-path AS52635 ".* (52635|52635 .+)"; as-path AS52638 ".* (52638|52638 .+)"; as-path AS52652 ".* (52652|52652 .+)"; as-path AS52656 ".* (52656|52656 .+)"; as-path AS52680 ".* (52680|52680 .+)"; as-path AS52684 ".* (52684|52684 .+)"; as-path AS52688 ".* (52688|52688 .+)"; as-path AS52695 ".* (52695|52695 .+)"; as-path AS52705 ".* (52705|52705 .+)"; as-path AS52708 ".* (52708|52708 .+)"; as-path AS52714 ".* (52714|52714 .+)"; as-path AS52715 ".* (52715|52715 .+)"; as-path AS52721 ".* (52721|52721 .+)"; as-path AS52724 ".* (52724|52724 .+)"; as-path AS52726 ".* (52726|52726 .+)"; as-path AS52741 ".* (52741|52741 .+)"; as-path AS52742 ".* (52742|52742 .+)"; as-path AS52744 ".* (52744|52744 .+)"; as-path AS52752 ".* (52752|52752 .+)"; as-path AS52774 ".* (52774|52774 .+)"; as-path AS52778 ".* (52778|52778 .+)"; as-path AS52783 ".* (52783|52783 .+)"; as-path AS52794 ".* (52794|52794 .+)"; as-path AS52801 ".* (52801|52801 .+)"; as-path AS52804 ".* (52804|52804 .+)"; as-path AS52808 ".* (52808|52808 .+)"; as-path AS52833 ".* (52833|52833 .+)"; as-path AS52837 ".* (52837|52837 .+)"; as-path AS52840 ".* (52840|52840 .+)"; as-path AS52845 ".* (52845|52845 .+)"; as-path AS52870 ".* (52870|52870 .+)"; as-path AS52893 ".* (52893|52893 .+)"; as-path AS52904 ".* (52904|52904 .+)"; as-path AS52905 ".* (52905|52905 .+)"; as-path AS52907 ".* (52907|52907 .+)"; as-path AS52910 ".* (52910|52910 .+)"; as-path AS52915 ".* (52915|52915 .+)"; as-path AS52917 ".* (52917|52917 .+)"; as-path AS52918 ".* (52918|52918 .+)"; as-path AS52927 ".* (52927|52927 .+)"; as-path AS52936 ".* (52936|52936 .+)"; as-path AS52951 ".* (52951|52951 .+)"; as-path AS52962 ".* (52962|52962 .+)"; as-path AS52963 ".* (52963|52963 .+)"; as-path AS52971 ".* (52971|52971 .+)"; as-path AS52972 ".* (52972|52972 .+)"; as-path AS52989 ".* (52989|52989 .+)"; as-path AS53005 ".* (53005|53005 .+)"; as-path AS53041 ".* (53041|53041 .+)"; as-path AS53048 ".* (53048|53048 .+)"; as-path AS53049 ".* (53049|53049 .+)"; as-path AS53051 ".* (53051|53051 .+)"; as-path AS53054 ".* (53054|53054 .+)"; as-path AS53059 ".* (53059|53059 .+)"; as-path AS53062 ".* (53062|53062 .+)"; as-path AS53067 ".* (53067|53067 .+)"; as-path AS53075 ".* (53075|53075 .+)"; as-path AS53079 ".* (53079|53079 .+)"; as-path AS53094 ".* (53094|53094 .+)"; as-path AS53095 ".* (53095|53095 .+)"; as-path AS53102 ".* (53102|53102 .+)"; as-path AS53130 ".* (53130|53130 .+)"; as-path AS53133 ".* (53133|53133 .+)"; as-path AS53139 ".* (53139|53139 .+)"; as-path AS53153 ".* (53153|53153 .+)"; as-path AS53156 ".* (53156|53156 .+)"; as-path AS53182 ".* (53182|53182 .+)"; as-path AS53183 ".* (53183|53183 .+)"; as-path AS53185 ".* (53185|53185 .+)"; as-path AS53193 ".* (53193|53193 .+)"; as-path AS53195 ".* (53195|53195 .+)"; as-path AS53196 ".* (53196|53196 .+)"; as-path AS53199 ".* (53199|53199 .+)"; as-path AS53205 ".* (53205|53205 .+)"; as-path AS53214 ".* (53214|53214 .+)"; as-path AS53217 ".* (53217|53217 .+)"; as-path AS53225 ".* (53225|53225 .+)"; as-path AS61512 ".* (61512|61512 .+)"; as-path AS61577 ".* (61577|61577 .+)"; as-path AS61586 ".* (61586|61586 .+)"; as-path AS61594 ".* (61594|61594 .+)"; as-path AS61595 ".* (61595|61595 .+)"; as-path AS61598 ".* (61598|61598 .+)"; as-path AS61599 ".* (61599|61599 .+)"; as-path AS61632 ".* (61632|61632 .+)"; as-path AS61636 ".* (61636|61636 .+)"; as-path AS61637 ".* (61637|61637 .+)"; as-path AS61650 ".* (61650|61650 .+)"; as-path AS61658 ".* (61658|61658 .+)"; as-path AS61684 ".* (61684|61684 .+)"; as-path AS61685 ".* (61685|61685 .+)"; as-path AS61699 ".* (61699|61699 .+)"; as-path AS61706 ".* (61706|61706 .+)"; as-path AS61708 ".* (61708|61708 .+)"; as-path AS61717 ".* (61717|61717 .+)"; as-path AS61718 ".* (61718|61718 .+)"; as-path AS61719 ".* (61719|61719 .+)"; as-path AS61723 ".* (61723|61723 .+)"; as-path AS61724 ".* (61724|61724 .+)"; as-path AS61734 ".* (61734|61734 .+)"; as-path AS61737 ".* (61737|61737 .+)"; as-path AS61743 ".* (61743|61743 .+)"; as-path AS61749 ".* (61749|61749 .+)"; as-path AS61753 ".* (61753|61753 .+)"; as-path AS61755 ".* (61755|61755 .+)"; as-path AS61775 ".* (61775|61775 .+)"; as-path AS61776 ".* (61776|61776 .+)"; as-path AS61782 ".* (61782|61782 .+)"; as-path AS61796 ".* (61796|61796 .+)"; as-path AS61799 ".* (61799|61799 .+)"; as-path AS61829 ".* (61829|61829 .+)"; as-path AS61831 ".* (61831|61831 .+)"; as-path AS61839 ".* (61839|61839 .+)"; as-path AS61851 ".* (61851|61851 .+)"; as-path AS61857 ".* (61857|61857 .+)"; as-path AS61858 ".* (61858|61858 .+)"; as-path AS61873 ".* (61873|61873 .+)"; as-path AS61876 ".* (61876|61876 .+)"; as-path AS61882 ".* (61882|61882 .+)"; as-path AS61890 ".* (61890|61890 .+)"; as-path AS61892 ".* (61892|61892 .+)"; as-path AS61896 ".* (61896|61896 .+)"; as-path AS61917 ".* (61917|61917 .+)"; as-path AS61918 ".* (61918|61918 .+)"; as-path AS61919 ".* (61919|61919 .+)"; as-path AS61937 ".* (61937|61937 .+)"; as-path AS61942 ".* (61942|61942 .+)"; as-path AS267952 ".* (267952|267952 .+)"; as-path AS61694 ".* (61694|61694 .+)"; as-path AS271201 ".* (271201|271201 .+)"; as-path AS270779 ".* (270779|270779 .+)"; as-path AS263841 ".* (263841|263841 .+)"; as-path AS265909 ".* (265909|265909 .+)"; as-path AS267481 ".* (267481|267481 .+)"; as-path AS273618 ".* (273618|273618 .+)"; as-path AS52852 ".* (52852|52852 .+)"; as-path AS270828 ".* (270828|270828 .+)"; as-path AS273532 ".* (273532|273532 .+)"; as-path AS272218 ".* (272218|272218 .+)"; as-path AS272176 ".* (272176|272176 .+)"; as-path AS263164 ".* (263164|263164 .+)"; as-path AS266196 ".* (266196|266196 .+)"; as-path AS263478 ".* (263478|263478 .+)"; as-path AS271108 ".* (271108|271108 .+)"; as-path AS265025 ".* (265025|265025 .+)"; as-path AS263453 ".* (263453|263453 .+)"; as-path AS263519 ".* (263519|263519 .+)"; as-path AS268990 ".* (268990|268990 .+)"; as-path AS271523 ".* (271523|271523 .+)"; as-path AS272791 ".* (272791|272791 .+)"; as-path AS274597 ".* (2745975|274597 .+)"; as-path AS272467 ".* (272467|272467 .+)"; as-path AS267308 ".* (267308|267308.+)"; as-path AS271510 ".* (271510|271510 .+)"; as-path AS263322 ".* (263322|263322 .+)"; as-path AS274625 ".* (274625|274625 .+)"; as-path AS271050 ".* (271050|271050 .+)"; as-path AS263357 ".* (263357|263357 .+)"; as-path AS272678 ".* (272678|272678 .+)"; as-path AS53216 ".* (53216|53216 .+)"; as-path AS273623 ".* (273623|273623 .+)"; as-path AS269502 ".* (269502|269502 .+)"; as-path AS263975 ".* (263975|263975 .+)"; as-path AS264982 ".* (264982|264982 .+)"; as-path AS52699 ".* (52699|52699 .+)"; as-path AS266055 ".* (266055|266055 .+)"; as-path AS271152 ".* (271152|271152 .+)"; as-path AS272686 ".* (272686|272686 .+)"; as-path AS273481 ".* (273481|273481 .+)"; as-path AS271517 ".* (271517|271517 .+)"; as-path AS22341 ".* (22341|22341 .+)"; as-path AS28634 ".* (28634|28634 .+)"; as-path AS27693 ".* (27693 |27693 .+)"; as-path AS271207 ".* (271207|271207 .+)"; as-path AS52878 ".* (52878|52878 .+)"; as-path AS262378 ".* (262378|262378 .+)"; as-path AS263887 ".* (263887|263887 .+)"; as-path AS265994 ".* (265994|265994 .+)"; as-path AS266339 ".* (266339|266339 .+)"; as-path AS266937 ".* (266937|266937 .+)"; as-path AS267172 ".* (267172|267172 .+)"; as-path AS267535 ".* (267535|267535 .+)"; as-path AS267630 ".* (267630|267630 .+)"; as-path AS267656 ".* (267656|267656 .+)"; as-path AS268119 ".* (268119|268119 .+)"; as-path AS268314 ".* (268314|268314 .+)"; as-path AS268544 ".* (268544|268544 .+)"; as-path AS268640 ".* (268640|268640 .+)"; as-path AS268663 ".* (268663|268663 .+)"; as-path AS268930 ".* (268930|268930 .+)"; as-path AS269107 ".* (269107|269107 .+)"; as-path AS269229 ".* (269229|269229 .+)"; as-path AS269301 ".* (269301|269301 .+)"; as-path AS269466 ".* (269466|269466 .+)"; as-path AS269514 ".* (269514|269514 .+)"; as-path AS269528 ".* (269528|269528 .+)"; as-path AS269530 ".* (269530|269530 .+)"; as-path AS270426 ".* (270426|270426 .+)"; as-path AS270428 ".* (270428|270428 .+)"; as-path AS270499 ".* (270499|270499 .+)"; as-path AS270832 ".* (270832|270832 .+)"; as-path AS270842 ".* (270842|270842 .+)"; as-path AS271084 ".* (271084|271084 .+)"; as-path AS271383 ".* (271383|271383 .+)"; as-path AS271732 ".* (271732|271732 .+)"; as-path AS271746 ".* (271746|271746 .+)"; as-path AS272772 ".* (272772|272772 .+)"; as-path AS273394 ".* (273394|273394 .+)"; as-path AS273448 ".* (273448|273448 .+)"; as-path AS273756 ".* (273756|273756 .+)"; as-path AS273779 ".* (273779|273779 .+)"; as-path AS262503 ".* (262503|262503 .+)"; as-path AS52617 ".* (52617|52617 .+)"; as-path AS270953 ".* (270953|270953 .+)"; as-path AS269240 ".* (269240|269240 .+)"; as-path AS264009 ".* (264009|264009 .+)"; as-path AS263338 ".* (263338|263338 .+)"; as-path AS266361 ".* (266361|266361 .+)"; as-path AS52579 ".* (52579|52579 .+)"; as-path AS264363 ".* (264363|264363 .+)"; as-path AS273345 ".* (273345|273345 .+)"; as-path AS264370 ".* (264370|264370 .+)"; as-path AS268490 ".* (268490|268490 .+)"; as-path AS263502 ".* (263502|263502 .+)"; as-path AS271564 ".* (271564|271564 .+)"; as-path AS61614 ".* (61614|61614 .+)"; as-path AS269549 ".* (269549|269549 .+)"; as-path AS64165 ".* (64165|64165 .+)"; as-path AS269478 ".* (269478|269478 .+)"; as-path AS270913 ".* (270913|270913 .+)"; as-path AS262611 ".* (262611|262611 .+)"; as-path AS61589 ".* (61589|61589 .+)"; as-path AS268308 ".* (268308|268308 .+)"; as-path AS271312 ".* (271312|271312 .+)"; as-path AS263609 ".* (263609|263609 .+)"; as-path AS266168 ".* (266168|266168 .+)"; as-path AS268127 ".* (268127|268127 .+)"; as-path AS270478 ".* (270478|270478 .+)"; as-path AS52890 ".* (52890|52890 .+)"; as-path AS264141 ".* (264141|264141 .+)"; as-path AS271727 ".* (271727|271727 .+)"; as-path AS269664 ".* (269664|269664 .+)"; as-path AS267363 ".* (267363|267363 .+)"; as-path AS271111 ".* (271111|271111 .+)"; as-path AS263539 ".* (263539|263539 .+)"; as-path AS263959 ".* (263959|263959 .+)"; as-path AS269403 ".* (269403|269403 .+)"; as-path AS271224 ".* (271224|271224 .+)"; as-path AS266192 ".* (266192|266192 .+)"; as-path AS264547 ".* (264547|264547 .+)"; as-path AS270544 ".* (270544|270544 .+)"; as-path AS274744 ".* (274744|274744 .+)"; as-path AS262498 ".* (262498|262498 .+)"; as-path AS264449 ".* (264449|264449 .+)"; as-path AS268674 ".* (268674|268674 .+)"; as-path AS269322 ".* (269322|269322 .+)"; as-path AS268493 ".* (268493|268493 .+)"; as-path AS269622 ".* (269622|269622 .+)"; as-path AS268130 ".* (268130|268130 .+)"; as-path AS28657 ".* (28657|28657 .+)"; as-path AS273374 ".* (273374|273374 .+)"; as-path AS52758 ".* (52758|52758 .+)"; as-path AS271422 ".* (271422|271422 .+)"; as-path AS268191 ".* (268191|268191 .+)"; as-path AS273744 ".* (273744|273744 .+)"; as-path AS266969 ".* (266969|266969 .+)"; as-path AS262805 ".* (262805|262805 .+)"; as-path AS61587 ".* (61587|61587 .+)"; as-path AS270912 ".* (270912|270912 .+)"; as-path AS270930 ".* (270930|270930 .+)"; as-path AS214657 ".* (214657|214657 .+)"; as-path AS213613 ".* (213613|213613 .+)"; as-path AS267280 ".* (267280|267280 .+)"; as-path AS52675 ".* (52675|52675 .+)"; as-path AS61688 ".* (61688|61688 .+)"; as-path AS268829 ".* (268829|268829 .+)"; as-path AS268047 ".* (268047|268047 .+)"; as-path AS269057 ".* (269057|269057 .+)"; as-path AS265914 ".* (265914|265914 .+)"; as-path AS271172 ".* (271172|271172 .+)"; as-path AS271512 ".* (271512|271512 .+)"; as-path AS268573 ".* (268573|268573 .+)"; as-path AS266157 ".* (266157|266157 .+)"; as-path AS264486 ".* (264486|264486 .+)"; as-path AS271629 ".* (271629|271629 .+)"; as-path AS274796 ".* (274796|274796 .+)"; as-path AS267467 ".* (267467|267467 .+)"; as-path AS266625 ".* (266625|266625 .+)"; as-path AS270460 ".* (270460|270460 .+)"; as-path AS266414 ".* (266414|266414 .+)"; as-path AS262312 ".* (262312|262312 .+)"; as-path AS267652 ".* (267652|267652 .+)"; as-path AS266301 ".* (266301|266301 .+)"; as-path AS273544 ".* (273544|273544 .+)"; as-path AS262377 ".* (262377|262377 .+)"; as-path AS52874 ".* (52874|52874 .+)"; as-path AS269554 ".* (269554|269554 .+)"; as-path AS270312 ".* (270312|270312 .+)"; as-path AS262815 ".* (262815|262815 .+)"; as-path AS274594 ".* (274594|274594 .+)"; as-path AS274599 ".* (274599|274599 .+)"; as-path AS28326 ".* (28326|28326 .+)"; as-path AS266025 ".* (266025|266025 .+)"; as-path AS271513 ".* (271513|271513 .+)"; as-path AS267495 ".* (267495|267495 .+)"; as-path AS273547 ".* (273547|273547 .+)"; as-path AS273474 ".* (273474|273474 .+)"; as-path AS268446 ".* (268446|268446 .+)"; as-path AS52814 ".* (52814|52814 .+)"; as-path AS269193 ".* (269193|269193 .+)"; as-path AS273624 ".* (273624|273624 .+)"; as-path AS213920 ".* (213920|213920 .+)"; as-path AS273408 ".* (273408|273408 .+)"; as-path AS265094 ".* (265094|265094 .+)"; as-path AS262321 ".* (262321|262321 .+)"; as-path AS263151 ".* (263151|263151 .+)"; as-path AS262373 ".* (262373|262373 .+)"; as-path AS265336 ".* (265336|265336 .+)"; as-path AS270414 ".* (270414|270414 .+)"; as-path AS270682 ".* (270682|270682 .+)"; as-path AS271118 ".* (271118|271118 .+)"; as-path AS270264 ".* (270264|270264 .+)"; as-path AS271589 ".* (271589|271589 .+)"; as-path AS269139 ".* (269139|269139 .+)"; as-path AS269117 ".* (269117|269117 .+)"; as-path AS272601 ".* (272601|272601 .+)"; as-path AS28249 ".* (28249|28249 .+)"; as-path AS266638 ".* (266638|266638 .+)"; as-path AS265396 ".* (265396|265396 .+)"; as-path AS266102 ".* (266102|266102 .+)"; as-path AS271063 ".* (271063|271063 .+)"; as-path AS274818 ".* (274818|274818 .+)"; as-path AS268182 ".* (268182|268182 .+)"; as-path AS263561 ".* (263561|263561 .+)"; as-path AS28629 ".* (28629|28629 .+)"; as-path AS267944 ".* (267944|267944 .+)"; as-path AS273764 ".* (273764|273764 .+)"; as-path AS52567 ".* (52567|52567 .+)"; as-path AS28220 ".* (28220|28220 .+)"; as-path AS268188 ".* (268188|268188 .+)"; as-path AS27712 ".* (27712|27712 .+)"; as-path AS52800 ".* (52800|52800 .+)"; } as-path-group AS-TELXIUS { as-path TELXIUS 12956; } as-path-group AS-TELXIUS-PIORAR { as-path AS12345 ".+ 12345â€"; } as-path-group AS-TELXIUS-MELHORAR { as-path TELXIUS ".+ 12345"; } as-path-group AS-DECIX-DENY { as-path APPLE ".* (714|714 .+)"; as-path DIGITALOCEAN ".* (14061|14061 .+)"; } as-path-group AS-SPARKLE-MELHORAR { as-path XXX ".+ 123"; } as-path-group AS-DURAND-MELHORAR { as-path XXX ".+ 123"; } as-path-group AS-DECIX-MELHORAR { as-path DEFAULT ". (1234|1234 .+)"; } as-path-group DENY_PTT_IN { as-path AS7195 ".* (7195|7195 .+)"; as-path NETIX ".* (57463|57463 .+)"; as-path SERPRO ".* (10954|10954 .+)"; as-path EQUINIX ".* (16397|16397 .+)"; as-path GVT ".* (18881|18881 .+)"; as-path MANDIC ".* (262545|262545 .+)"; as-path RIOT ".* (6507|6507 .+)"; as-path HE ".* (6939|6939 .+)"; as-path ASCENTY ".* (52925|52925 .+)"; as-path UNIVERSITY-ILLINOIS ".* (38|38 .+)"; as-path CAIXA ".* (20116|20116 .+)"; as-path SGP ".* (270967|270967 .+)"; as-path GLOBO ".* (28604|28604 .+)"; as-path BRFIBRA ".* (14840|14840 .+)"; as-path AS11802 ".* (11802|11802 .+)"; as-path AS10670 ".* (10670|10670 .+)"; } as-path-group DENY_PEER_IN { as-path SGP ".* (270967|270967 .+)"; as-path BRFIBRA ".* (14840|14840 .+)"; as-path AS10670 ".* (10670|10670 .+)"; } as-path-group AS-EDGEUNO { as-path EDGEUNO "7195$"; } as-path-group AS-EDGEUNO-MELHORAR { as-path AS19281 ".+ (19281|19281 .+)"; } as-path-group AS-EDGEUNO-PIORAR { as-path AS53057 ".* (53057|53057 .+)"; } as-path-group AS-PEER1-PIORAR { as-path AMAZON ".* (16509|16509 .+)"; } as-path-group AS-FLYS-MELHORAR { as-path AS16276 ".+ (16276|16276 .+)"; } as-path-group AS-FLYS-PIORAR { as-path XXX ".+ 123"; } as-path-group AS-FLYS { as-path FLYS ".+ 28663"; } as-path-group AS-LEVEL3 { as-path GBLX "3549$"; as-path LEVEL3 "3356$"; as-path GBLX2 ".* 3549"; } as-path-group AS-LEVEL3-PIORAR { as-path LEVEL3 "3356$"; as-path AS53055 ".+ (53055|53055 .+)"; as-path AS267662 ". + (267662|267662 .+)"; as-path AS30083 ". + (30083|30083 .+)"; as-path AS10670 ". + (10670|10670 .+)"; as-path AS8167 ". + (8167|8167 .+)"; } as-path-group AS-LEVEL3-MELHORAR { as-path XXX ".+ 123"; } } firewall { family inet { prefix-action management-police-set { apply-flags omit; policer management-1m; count; filter-specific; subnet-prefix-length 24; destination-prefix-length 32; } prefix-action management-high-police-set { apply-flags omit; policer management-5m; count; filter-specific; subnet-prefix-length 24; destination-prefix-length 32; } filter ACTIVEGUARD-INPUT { term NEXTHOP { then { next-interface { ae2.46; } } } } filter ACTIVEGUARD-TESTE { term NEXTHOP { then next term; } term DROP { from { protocol tcp; port 2300; } then { discard; } } term ACCEPT { then accept; } } filter CORERO-clean { term redirect { then { count ACCEPT-CLEAN; routing-instance CLEAN-VBD-CORERO; } } } filter DDOS-ACCEPT { term DDOS-ACCEPT-PROTO-OK { filter DDOS-ACCEPT-PROTO-OK; } term ACCEPT-OTHER { then { count ACCEPT-OTHER; accept; } } } filter DDOS-ACCEPT-LOCAL { term ACCEPT-LOCAL { from { source-prefix-list { router-ipv4; } } then { count ACCEPT-LOCAL; accept; } } } filter DDOS-ACCEPT-PROTO-OK { term ACCEPT-TCP { from { protocol tcp; } then { count ACCEPT-TCP; accept; } } term ACCEPT-UDP-FRAG { from { is-fragment; protocol udp; } then { count ACCEPT-UDP-FRAG; accept; } } term ACCEPT-UDP { from { protocol udp; } then { count ACCEPT-UDP; accept; } } term ACCEPT-ICMP { from { protocol icmp; } then { count ACCEPT-ICMP; accept; } } term ACCEPT-IGMP { from { protocol igmp; } then { count ACCEPT-IGMP; accept; } } term ACCEPT-GRE { from { protocol gre; } then { count ACCEPT-GRE; accept; } } term ACCEPT-IPIP { from { protocol ipip; } then { count ACCEPT-IPIP; accept; } } term ACCEPT-ESP { from { protocol esp; } then { count ACCEPT-ESP; accept; } } } filter DDOS-ACCEPT-QUIC { term ACCEPT-QUIC { from { packet-length [ 1228 1248 1260 1274 1278 1280 1298 1328 1348 1378 1398 1428 1468 1480 ]; protocol udp; source-port 443; } then { count ACCEPT-QUIC; accept; } } term LIMIT-QUIC { from { protocol udp; source-port 443; } then { policer POLICER-DDOS-1G; count ACCEPT-LIMIT-QUIC; accept; } } } filter DDOS-ACCEPT-WIREGUARD-VPN { term ACCEPT { from { protocol udp; source-port 13231; } then { count ACCEPT-WIREGUARD-VPN; accept; } } } filter DDOS-ALT { term ACCEPT-DNS-RECURSIVE { from { destination-address { 191.52.184.5/32; 191.52.186.34/32; } protocol udp; source-port 53; } then { count ACCEPT-DNS-RECURSIVE; accept; } } term IPs_NAO_MITIGADOS { from { destination-address { 0.0.0.0/0; 191.52.192.0/20 except; 191.52.128.0/18 except; } } then { count PASS-NAO_MITIGADOS; accept; } } term DDOS-LIMIT-GRE { filter DDOS-LIMIT-GRE; } } filter DDOS-ARIAS { term ACCEPT-TELEFONIA { from { source-address { 179.131.8.0/21; } destination-address { 131.0.48.116/32; } } then { count PASS-NAO_MITIGADOS; accept; } } term ACCEPT-DNS-RECURSIVE { from { destination-address { 45.226.72.34/32; 45.226.72.38/32; 164.163.107.237/32; 164.163.107.238/32; } protocol udp; source-port 53; } then { count ACCEPT-DNS-RECURSIVE; port-mirror-instance KENTIK-MONITOR-DNS; accept; } } term IPs_NAO_MITIGADOS { from { destination-address { 0.0.0.0/0; 45.190.232.0/22 except; 45.226.72.0/22 except; 131.0.48.0/23 except; 164.163.104.0/22 except; 177.73.40.0/24 except; } } then { count PASS-NAO_MITIGADOS; accept; } } term DDOS-LIMIT-GRE { filter DDOS-LIMIT-GRE; } } filter DDOS-AVANCADO { term LIMIT-MTPORTMON { from { protocol tcp; destination-port 7421; } then { policer POLICER-DDOS-10M; count ACCEPT-LIMIT-MTPORTMON; accept; } } term LIMIT-COAP { from { protocol udp; source-port 5683; } then { policer POLICER-DDOS-COAP; count ACCEPT-LIMIT-COAP; accept; } } term LIMIT-SADP { from { protocol udp; source-port 37020; } then { policer POLICER-DDOS-SADP; count ACCEPT-LIMIT-SADP; accept; } } term LIMIT-APPLE-RDP { from { protocol udp; source-port 3283; } then { policer POLICER-DDOS-APPLE-RDP; count ACCEPT-LIMIT-APPLE-RDP; accept; } } term ACCEPT-SPEEDTEST { from { protocol udp; source-port [ 8080 9090 9091 ]; } then { count ACCEPT-SPEEDTEST; accept; } } term ACCEPT-ROBLOX { from { source-prefix-list { ROBLOX; } protocol udp; } then { count ACCEPT-ROBLOX; accept; } } term LIMIT-PKTSIZE-1-299 { from { packet-length 32-158; protocol udp; port-except [ 53 80 443 28575 ]; } then { policer POLICER-DDOS-300M; count ACCEPT-LIMIT-UDP-AVANCADO_1:299; accept; } } term LIMIT-PKTSIZE-400-499 { from { packet-length 400-499; protocol udp; port-except [ 443 28575 ]; } then { policer POLICER-DDOS-100M; count ACCEPT-LIMIT-UDP-AVANCADO_400:499; accept; } } term LIMIT-PKTSIZE-500-599 { from { packet-length 500-599; protocol udp; port-except [ 443 28575 ]; } then { policer POLICER-DDOS-300M; count ACCEPT-LIMIT-UDP-AVANCADO_500:599; accept; } } term LIMIT-PKTSIZE-600-699 { from { packet-length 600-699; protocol udp; port-except [ 443 28575 ]; } then { policer POLICER-DDOS-100M; count ACCEPT-LIMIT-UDP-AVANCADO_600:699; accept; } } term LIMIT-PKTSIZE-795 { from { packet-length 795; protocol udp; } then { policer POLICER-DDOS-300M; count ACCEPT-LIMIT-UDP-AVANCADO_795; accept; } } term LIMIT-PKTSIZE-700-799 { from { packet-length 700-799; protocol udp; port-except [ 443 28575 ]; } then { policer POLICER-DDOS-300M; count ACCEPT-LIMIT-UDP-AVANCADO_700:799; accept; } } term LIMIT-PKTSIZE-800-899 { from { packet-length 800-899; protocol udp; port-except [ 443 28575 ]; } then { policer POLICER-DDOS-100M; count ACCEPT-LIMIT-UDP-AVANCADO_800:899; accept; } } term LIMIT-PKTSIZE-900-999 { from { packet-length 900-999; protocol udp; port-except [ 443 28575 ]; } then { policer POLICER-DDOS-300M; count ACCEPT-LIMIT-UDP-AVANCADO_900:999; accept; } } term LIMIT-PKTSIZE-1055-1056 { from { packet-length [ 1055 1056 ]; protocol udp; } then { policer POLICER-DDOS-4G; count ACCEPT-LIMIT-UDP-AVANCADO_1055:1056; accept; } } term LIMIT-PKTSIZE-1000-1099 { from { packet-length 1000-1099; protocol udp; port-except [ 53 80 443 28575 ]; } then { policer POLICER-DDOS-300M; count ACCEPT-LIMIT-UDP-AVANCADO_1000:1099; accept; } } term LIMIT-PKTSIZE-1100-1199 { from { packet-length 1100-1199; protocol udp; port-except [ 53 80 443 28575 ]; } then { policer POLICER-DDOS-300M; count ACCEPT-LIMIT-UDP-AVANCADO_1100:1199; accept; } } term LIMIT-PKTSIZE-1200-1299 { from { packet-length 1200-1299; protocol udp; port-except [ 53 80 443 28575 ]; } then { policer POLICER-DDOS-500M; count ACCEPT-LIMIT-UDP-AVANCADO_1200:1299; accept; } } term LIMIT-PKTSIZE-1300-1399 { from { packet-length [ 1300-1347 1349-1372 1374-1375 1377 1379-1397 1379-1399 ]; protocol udp; port-except [ 53 80 443 28575 ]; } then { policer POLICER-DDOS-300M; count ACCEPT-LIMIT-UDP-AVANCADO_1300:1399; accept; } } term LIMIT-PKTSIZE-1400-1439 { from { packet-length [ 1400-1427 1429-1439 ]; protocol udp; port-except [ 53 80 443 28575 ]; } then { policer POLICER-DDOS-300M; count ACCEPT-LIMIT-UDP-AVANCADO_1400:1499; accept; } } term LIMIT-PKTSIZE-1500 { from { packet-length 1500; protocol udp; } then { policer POLICER-DDOS-100M; count ACCEPT-LIMIT-UDP-AVANCADO_1500; accept; } } term ACCEPT-GRE { from { source-prefix-list { GRE-EXCEPT; } protocol gre; } then { count ACCEPT-GRE; accept; } } term LIMIT-GRE { from { protocol gre; } then { policer POLICER-DDOS-GRE; count ACCEPT-LIMIT-GRE; accept; } } term DDOS-LIMIT-ICMP { filter DDOS-LIMIT-ICMP; } } filter DDOS-AXNET { term ACCEPT-DNS-RECURSIVE { from { destination-address { 187.102.48.210/32; 187.102.48.10/32; 187.102.48.18/32; 187.102.48.19/32; } protocol udp; source-port 53; } then { count ACCEPT-DNS-RECURSIVE; port-mirror-instance KENTIK-MONITOR-DNS; accept; } } term IPs_NAO_MITIGADOS { from { destination-address { 0.0.0.0/0; 187.102.48.0/20 except; 177.84.112.0/21 except; } } then { count PASS-NAO_MITIGADOS; accept; } } term DDOS-LIMIT-GRE { filter DDOS-LIMIT-GRE; } } filter DDOS-BASICO { term DDOS-ACCEPT-LOCAL { filter DDOS-ACCEPT-LOCAL; } term DDOS-LIMIT-DNS { filter DDOS-LIMIT-DNS; } term DDOS-LIMIT-NTP { filter DDOS-LIMIT-NTP; } term DDOS-LIMIT-SNMP { filter DDOS-LIMIT-SNMP; } term DDOS-ACCEPT-WIREGUARD-VPN { filter DDOS-ACCEPT-WIREGUARD-VPN; } term DDOS-ACCEPT-QUIC { filter DDOS-ACCEPT-QUIC; } term DDOS-DROP-PORT-0 { filter DDOS-DROP-PORT-0; } term DDOS-TCP-FLAGS { filter DDOS-TCP-FLAGS; } term DDOS-DROP-CHARGEN { filter DDOS-DROP-CHARGEN; } term DDOS-DROP-SLP { filter DDOS-DROP-SLP; } term DDOS-DROP-CLDAP { filter DDOS-DROP-CLDAP; } term DDOS-DROP-SSDP { filter DDOS-DROP-SSDP; } term DDOS-DROP-PROTO-0 { filter DDOS-DROP-PROTO-0; } term DDOS-DROP-MEMCACHED { filter DDOS-DROP-MEMCACHED; } term DDOS-LIMIT-SYN+ACK_BLACK+WHITE { filter DDOS-LIMIT-SYN-ACK-BLACK+WHITE; } term DDOS-LIMIT-SYN+ACK_GERAL { filter DDOS-LIMIT-SYN-ACK-GERAL; } term DDOS-LIMIT-RST-BLACK+WHITE { filter DDOS-LIMIT-RST-BLACK+WHITE; } } filter DDOS-BLZ { term ACCEPT-DNS-RECURSIVE { from { destination-address { 177.67.232.1/32; 177.67.232.3/32; } protocol udp; source-port 53; } then { count ACCEPT-DNS-RECURSIVE; accept; } } inactive: term IPs_NAO_MITIGADOS { from { destination-address { 0.0.0.0/0; 45.177.224.0/22 except; 177.67.232.0/21 except; 143.0.116.0/22 except; 186.226.240.0/20 except; 45.167.32.0/22 except; 190.89.124.0/22 except; } } then { count PASS-NAO_MITIGADOS; accept; } } term DDOS-LIMIT-GRE { filter DDOS-LIMIT-GRE; } term LIMIT-PKTSIZE-52 { from { destination-address { 179.42.92.0/23; } packet-length 52; protocol tcp; tcp-flags 0x02; } then { policer POLICER-DDOS-10M; count ACCEPT-LIMIT-BLZ-SYN_52; accept; } } term LIMIT-PKTSIZE-60 { from { destination-address { 179.42.92.0/23; } packet-length 60; protocol tcp; tcp-flags 0x02; } then { policer POLICER-DDOS-1M; count ACCEPT-LIMIT-BLZ-SYN_60; accept; } } } filter DDOS-CLIENTES-IN { term 67TELECOM-PSH+ACK_1440 { from { destination-prefix-list { CLI-67TELECOM-V4; } packet-length 1440; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x18; } then { policer POLICER-DDOS-20M; count LIMIT-67TELECOM-INPUT-PSH+ACK_1500; accept; } } term 67TELECOM-PSH+ACK_1500 { from { destination-prefix-list { CLI-67TELECOM-V4; } packet-length 1500; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x18; } then { policer POLICER-DDOS-100M; count ACCEPT-LIMIT-67TELECOM-INPUT-PSH+ACK_1500; accept; } } term MEGATELECOM-PSH+ACK_1440 { from { destination-prefix-list { CLI-MEGATELECOM-V4; } packet-length 1440; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x18; } then { policer POLICER-DDOS-100M; count ACCEPT-LIMIT-MEGA-INPUT-PSH+ACK_1440; accept; } } term MEGATELECOM-PSH+ACK_1500 { from { destination-prefix-list { CLI-MEGATELECOM-V4; } packet-length 1500; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x18; } then { policer POLICER-DDOS-100M; count ACCEPT-LIMIT-MEGA-INPUT-PSH+ACK_1500; accept; } } term WEBBY-PSH+ACK_1440 { from { destination-prefix-list { CLI-WEBBY-V4; } packet-length 1440; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x18; } then { policer POLICER-DDOS-20M; count ACCEPT-LIMIT-WEBBY-INPUT-PSH+ACK_1440; accept; } } term WEBBY-PSH+ACK_1500 { from { destination-prefix-list { CLI-WEBBY-V4; } packet-length 1500; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x18; } then { policer POLICER-DDOS-100M; count ACCEPT-LIMIT-WEBBY-INPUT-PSH+ACK_1500; accept; } } } filter DDOS-CTE { term ACCEPT-DNS-RECURSIVE { from { destination-address { 177.37.69.1/32; 177.37.69.2/32; 177.37.69.3/32; 177.37.94.3/32; 177.37.69.13/32; 177.37.69.37/32; } protocol udp; source-port 53; } then { count ACCEPT-DNS-RECURSIVE; accept; } } inactive: term BYPASS { from { destination-address { 132.255.178.254/32; } } then accept; } inactive: term IPs_NAO_MITIGADOS { from { destination-address { 0.0.0.0/0; 187.73.96.0/20 except; 177.137.48.0/21 except; 132.255.176.0/22 except; 170.84.100.0/22 except; 138.0.52.0/22 except; 45.71.80.0/22 except; 138.122.240.0/22 except; 128.201.208.0/22 except; 189.76.208.0/20 except; 189.76.224.0/20 except; 177.8.0.0/20 except; 177.8.16.0/20 except; 179.124.224.0/20 except; 138.94.8.0/22 except; 177.124.88.0/21 except; 131.221.212.0/22 except; 168.195.148.0/22 except; 131.255.64.0/22 except; 177.86.132.0/22 except; 45.224.108.0/22 except; 45.176.180.0/22 except; 138.118.220.0/22 except; 168.197.28.0/22 except; 45.163.44.0/22 except; 168.0.80.0/22 except; 131.221.140.0/22 except; 177.55.64.0/20 except; 177.23.24.0/22 except; 200.94.252.0/22 except; 190.89.240.0/22 except; 168.232.80.0/22 except; 138.118.4.0/22 except; 168.196.8.0/22 except; 179.48.232.0/22 except; 45.173.172.0/22 except; 179.49.148.0/22 except; 200.39.144.0/22 except; 138.36.124.0/22 except; 177.53.196.0/22 except; 138.94.80.0/22 except; 143.137.28.0/22 except; 177.36.240.0/20 except; 191.7.64.0/21 except; 132.255.156.0/22 except; 138.122.8.0/22 except; 45.224.84.0/22 except; 45.167.36.0/22 except; 138.99.72.0/22 except; 170.245.228.0/22 except; 170.239.200.0/22 except; 181.232.216.0/22 except; 170.254.248.0/22 except; 189.89.224.0/19 except; 177.12.128.0/20 except; 177.12.144.0/20 except; 200.229.92.0/22 except; 190.3.164.0/22 except; 45.227.228.0/22 except; 181.233.92.0/22 except; 187.62.224.0/19 except; 186.216.0.0/18 except; 168.232.16.0/22 except; } } then { count PASS-NAO_MITIGADOS; accept; } } term DDOS-LIMIT-GRE { filter DDOS-LIMIT-GRE; } } filter DDOS-DROP-CHARGEN { term DROP-CHARGEN { from { protocol udp; source-port 19; } then { count DROP-CHARGEN; discard; } } } filter DDOS-DROP-CLDAP { term DROP-CLDAP { from { protocol udp; source-port 389; } then { count DROP-CLDAP; discard; } } } filter DDOS-DROP-DNS { term ACCEPT-DNS { from { source-prefix-list { DNS-PUBLIC-RESOLVER; } protocol udp; source-port 53; } then { count ACCEPT-DNS-PUBLIC; accept; } } term DROP-DNS { from { protocol udp; source-port 53; } then { count DROP-DNS; discard; } } } filter DDOS-DROP-ICMP-FRAG { term DROP-ICMP-FRAG { from { is-fragment; protocol icmp; } then { count DROP-ICMP-FRAG; discard; } } } filter DDOS-DROP-LDAP { term DROP-LDAP { from { protocol udp; source-port 389; } then { count DROP-LDAP; discard; } } } filter DDOS-DROP-MEMCACHED { term DROP-MEMCACHED { from { protocol udp; source-port 11211; } then { count DROP-MEMCACHED; discard; } } } filter DDOS-DROP-NTP { term ACCEPT-NTP { from { source-prefix-list { NTP-PUBLIC; } protocol udp; source-port 123; } then { count ACCEPT-NTP-PUBLIC; accept; } } term DROP-NTP { from { protocol udp; source-port 123; } then { count DROP-NTP; discard; } } } filter DDOS-DROP-OTHER-PROTOCOLS { term DROP-OTHER-PROTOCOLS { then { count DROP-OTHER-PROTOCOLS; discard; } } } filter DDOS-DROP-PORT-0 { term DROP-UDP-DPORT-0 { from { protocol udp; destination-port 0; } then { count DROP-UDP-DPORT-0; discard; } } term DROP-UDP-SPORT-0 { from { protocol udp; source-port 0; } then { count DROP-UDP-SPORT-0; discard; } } term DROP-TCP-DPORT-0 { from { protocol tcp; destination-port 0; } then { count DROP-TCP-DPORT-0; discard; } } term DROP-TCP-SPORT-0 { from { protocol tcp; source-port 0; } then { count DROP-TCP-SPORT-0; discard; } } } filter DDOS-DROP-PROTO-0 { term DDOS-DROP-PROTO-0 { from { protocol 0; } then { count DROP-PROTO-0; discard; } } } filter DDOS-DROP-SLP { term DROP-SLP { from { protocol udp; source-port [ 427 19 ]; } then { count DROP-SLP; discard; } } } filter DDOS-DROP-SNMP { term DROP-SNMP { from { protocol udp; source-port 161; } then { count DROP-SNMP; discard; } } } filter DDOS-DROP-SSDP { term DROP-SSDP-SRC { from { protocol udp; source-port 1900; } then { count DROP-SSDP-SRC; discard; } } term DROP-SSDP-DST { from { protocol udp; destination-port 1900; } then { count DROP-SSDP-DST; discard; } } } filter DDOS-FIREMICRO { term ACCEPT-DNS-RECURSIVE { from { destination-address { 177.126.144.2/32; 177.126.144.10/32; } protocol udp; source-port 53; } then { count ACCEPT-DNS-RECURSIVE; accept; } } term BYPASS { from { source-address { 187.103.32.2/32; 200.254.47.50/32; } } then accept; } term IPs_NAO_MITIGADOS { from { destination-address { 0.0.0.0/0; 45.189.128.0/22 except; 45.161.60.0/22 except; 170.247.12.0/22 except; 177.126.144.0/21 except; 170.0.132.0/22 except; } } then { count PASS-NAO_MITIGADOS; accept; } } term DDOS-LIMIT-GRE { filter DDOS-LIMIT-GRE; } } filter DDOS-FLORESTAWII { term ACCEPT-DNS-RECURSIVE { from { destination-address { 45.179.91.76/32; } protocol udp; source-port 53; } then { count ACCEPT-DNS-RECURSIVE; port-mirror-instance KENTIK-MONITOR-DNS; accept; } } term IPs_NAO_MITIGADOS { from { destination-address { 0.0.0.0/0; 45.172.76.0/22 except; } } then { count PASS-NAO_MITIGADOS; accept; } } term DDOS-LIMIT-GRE { filter DDOS-LIMIT-GRE; } } filter DDOS-GHNET { term ACCEPT-DNS-RECURSIVE { from { destination-address { 187.102.16.11/32; 187.102.16.19/32; } protocol udp; source-port 53; } then { count ACCEPT-DNS-RECURSIVE; port-mirror-instance KENTIK-MONITOR-DNS; accept; } } term BYPASS { from { destination-address { 187.102.18.123/32; } } then accept; } term IPs_NAO_MITIGADOS { from { destination-address { 0.0.0.0/0; 181.233.64.0/22 except; 187.102.16.0/20 except; 143.208.68.0/22 except; 177.36.48.0/20 except; } } then { count PASS-NAO_MITIGADOS; accept; } } term DDOS-LIMIT-GRE { filter DDOS-LIMIT-GRE; } } filter DDOS-GIGABYTEMG { term ACCEPT-DNS-RECURSIVE { from { destination-address { 177.129.205.243/32; 177.129.204.235/32; 177.129.204.130/32; 177.129.204.131/32; 186.227.16.33/32; 186.227.16.37/32; } protocol udp; source-port 53; } then { count ACCEPT-DNS-RECURSIVE; port-mirror-instance KENTIK-MONITOR-DNS; accept; } } term IPs_NAO_MITIGADOS { from { destination-address { 0.0.0.0/0; 177.129.204.0/22 except; 186.227.16.0/20 except; 45.190.204.0/22 except; } } then { count PASS-NAO_MITIGADOS; accept; } } term DDOS-LIMIT-GRE { filter DDOS-LIMIT-GRE; } } filter DDOS-LIMIT-DNS { term ACCEPT-DNS { from { source-prefix-list { DNS-PUBLIC-RESOLVER; } protocol udp; source-port 53; } then { count ACCEPT-DNS-PUBLIC; port-mirror-instance KENTIK-MONITOR-DNS; accept; } } term LIMIT-DNS { from { protocol udp; source-port 53; } then { policer POLICER-DDOS-DNS; count ACCEPT-LIMIT-DNS; port-mirror-instance KENTIK-MONITOR-DNS; accept; } } } filter DDOS-LIMIT-GRE { term ACCEPT-GRE { from { source-prefix-list { GRE-EXCEPT; } protocol gre; } then { count ACCEPT-GRE; accept; } } term LIMIT-GRE { from { protocol gre; } then { policer POLICER-DDOS-GRE; count ACCEPT-LIMIT-GRE; accept; } } } filter DDOS-LIMIT-ICMP { term LIMIT-ICMP-PORT-UNREACH { from { protocol icmp; source-port 771; } then { policer POLICER-DDOS-ICMP-PORT-UNREACH; count ACCEPT-LIMIT-ICMP-PORT-UNREACH; accept; } } } filter DDOS-LIMIT-NTP { term ACCEPT-NTP { from { source-prefix-list { NTP-PUBLIC; } protocol udp; source-port 123; } then { count ACCEPT-NTP-PUBLIC; accept; } } term LIMIT-NTP { from { protocol udp; source-port 123; } then { policer POLICER-DDOS-NTP; count ACCEPT-LIMIT-NTP; accept; } } } filter DDOS-LIMIT-RST-BLACK+WHITE { term LIMIT-TCP-RST_BLACK_PPS { from { source-prefix-list { SYN_52_BLACK; } protocol tcp; source-port [ 80 443 ]; tcp-flags rst; } then { policer POLICER-DDOS-15K-PPS; count ACCEPT-LIMIT-TCP-RST_BLACK_PPS; accept; } } term LIMIT-TCP-RST_BPS { from { source-prefix-list { SYN_52_BLACK; } protocol tcp; source-port [ 80 443 ]; tcp-flags rst; } then { policer POLICER-DDOS-5M; count ACCEPT-LIMIT-TCP-RST_BLACK_BPS; accept; } } } filter DDOS-LIMIT-SNMP { term LIMIT-SNMP { from { protocol udp; source-port 161; } then { policer POLICER-DDOS-SNMP; count ACCEPT-LIMIT-SNMP; accept; } } } filter DDOS-LIMIT-SYN-ACK-BLACK+WHITE { term "ACCEPT-TCP-!SYN+ACK" { from { packet-length [ 40 44 48 52 60 64 552 ]; protocol tcp; tcp-flags "(!0x02 & 0x10)"; } then { count "ACCEPT-TCP-!SYN+ACK"; accept; } } term LIMIT-TCP-SIZE48_WHITE_BPS { from { source-prefix-list { SYN_52_WHITE; } packet-length 48; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { count ACCEPT-LIMIT-TCP-SIZE48_WHITE_BPS; accept; } } term LIMIT-TCP-SIZE52_WHITE_BPS { from { source-prefix-list { SYN_52_WHITE; } packet-length 52; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { count ACCEPT-LIMIT-TCP-SIZE52_WHITE_BPS; accept; } } term LIMIT-TCP-SIZE60_WHITE_BPS { from { source-prefix-list { SYN_52_WHITE; } packet-length 60; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { count ACCEPT-LIMIT-TCP-SIZE60_WHITE_BPS; accept; } } term LIMIT-TCP-SIZE64_WHITE_BPS { from { source-prefix-list { SYN_52_WHITE; } packet-length 64; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { count ACCEPT-LIMIT-TCP-SIZE64_WHITE_BPS; accept; } } term LIMIT-TCP-SIZE552_WHITE_BPS { from { source-prefix-list { SYN_52_WHITE; } packet-length 552; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { count ACCEPT-LIMIT-TCP-SIZE552_WHITE_BPS; accept; } } term LIMIT-TCP-SIZE48_BLACK_PPS { from { source-prefix-list { SYN_52_BLACK; } packet-length 48; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-15K-PPS; count ACCEPT-LIMIT-TCP-SIZE48_BLACK_PPS; accept; } } term LIMIT-TCP-SIZE52_BLACK_PPS { from { source-prefix-list { SYN_52_BLACK; } packet-length 52; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-150K-PPS; count ACCEPT-LIMIT-TCP-SIZE52_BLACK_PPS; accept; } } term LIMIT-TCP-SIZE60_BLACK_PPS { from { source-prefix-list { SYN_52_BLACK; } packet-length 60; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-15K-PPS; count ACCEPT-LIMIT-TCP-SIZE560_BLACK_PPS; accept; } } term LIMIT-TCP-SIZE64_BLACK_PPS { from { source-prefix-list { SYN_52_BLACK; } packet-length 64; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-15K-PPS; count ACCEPT-LIMIT-TCP-SIZE564_BLACK_PPS; accept; } } term LIMIT-TCP-SIZE552_BLACK_PPS { from { source-prefix-list { SYN_52_BLACK; } packet-length 552; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-15K-PPS; count ACCEPT-LIMIT-TCP-SIZE552_BLACK_PPS; accept; } } term LIMIT-TCP-SIZE48_BLACK_BPS { from { source-prefix-list { SYN_52_BLACK; } packet-length 48; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-5M; count ACCEPT-LIMIT-TCP-SIZE48_BLACK_BPS; accept; } } term LIMIT-TCP-SIZE52_BLACK_BPS { from { source-prefix-list { SYN_52_BLACK; } packet-length 52; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-5M; count ACCEPT-LIMIT-TCP-SIZE52_BLACK_BPS; accept; } } term LIMIT-TCP-SIZE60_BLACK_BPS { from { source-prefix-list { SYN_52_BLACK; } packet-length 60; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-5M; count ACCEPT-LIMIT-TCP-SIZE60_BLACK_BPS; accept; } } term LIMIT-TCP-SIZE64_BLACK_BPS { from { source-prefix-list { SYN_52_BLACK; } packet-length 64; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-5M; count ACCEPT-LIMIT-TCP-SIZE64_BLACK_BPS; accept; } } term LIMIT-TCP-SIZE552_BLACK_BPS { from { source-prefix-list { SYN_52_BLACK; } packet-length 552; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-10M; count ACCEPT-LIMIT-TCP-SIZE552_BLACK_BPS; accept; } } } filter DDOS-LIMIT-SYN-ACK-GERAL { term LIMIT-TCP-SIZE48 { from { packet-length 48; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-5M; count ACCEPT-LIMIT-TCP-SIZE48_BPS; accept; } } term LIMIT-TCP-SIZE52 { from { packet-length 52; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-5M; count ACCEPT-LIMIT-TCP-SIZE52_BPS; accept; } } term LIMIT-TCP-SIZE60 { from { packet-length 60; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-5M; count ACCEPT-LIMIT-TCP-SIZE60_BPS; accept; } } term LIMIT-TCP-SIZE64 { from { packet-length 64; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-5M; count ACCEPT-LIMIT-TCP-SIZE64_BPS; accept; } } term LIMIT-TCP-SIZE552 { from { packet-length 552; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-10M; count ACCEPT-LIMIT-TCP-SIZE552_BPS; accept; } } term LIMIT-TCP-SIZE48-PPS { from { packet-length 48; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-150K-PPS; count ACCEPT-LIMIT-TCP-SIZE48_PPS; accept; } } term LIMIT-TCP-SIZE52-PPS { from { packet-length 52; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-150K-PPS; count ACCEPT-LIMIT-TCP-SIZE52_PPS; accept; } } term LIMIT-TCP-SIZE60-PPS { from { packet-length 60; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-150K-PPS; count ACCEPT-LIMIT-TCP-SIZE60_PPS; accept; } } term LIMIT-TCP-SIZE64-PPS { from { packet-length 64; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-150K-PPS; count ACCEPT-LIMIT-TCP-SIZE64_PPS; accept; } } term LIMIT-TCP-SIZE552-PPS { from { packet-length 552; protocol tcp; source-port [ 80 443 ]; tcp-flags 0x12; } then { policer POLICER-DDOS-150K-PPS; count ACCEPT-LIMIT-TCP-SIZE552_PPS; accept; } } } filter DDOS-MEGANET { inactive: term IPs_NAO_MITIGADOS { from { destination-address { 0.0.0.0/0; 45.170.196.0/22 except; } } then { count PASS-NAO_MITIGADOS; accept; } } term DDOS-LIMIT-GRE { filter DDOS-LIMIT-GRE; } } filter DDOS-MEGATELECOM { term ACCEPT-DNS-RECURSIVE { from { destination-address { 45.163.177.63/32; } protocol udp; source-port 53; } then { count ACCEPT-DNS-RECURSIVE; port-mirror-instance KENTIK-MONITOR-DNS; accept; } } inactive: term IPs_NAO_MITIGADOS { from { destination-address { 0.0.0.0/0; } } then { count PASS-NAO_MITIGADOS; accept; } } term DDOS-LIMIT-GRE { filter DDOS-LIMIT-GRE; } term LIMIT-ICMP-2048 { from { protocol icmp; port 2048; } then { policer POLICER-DDOS-ICMP_PORT-2048; count ACCEPT-LIMIT-ICMP-PORT-2048; accept; } } term LIMIT-ACK-PKTSIZE-1200-1299 { from { destination-address { 177.222.188.0/22; } source-prefix-list { SYN_52_BLACK; } packet-length 1200-1299; protocol tcp; } then { policer POLICER-DDOS-50M; count ACCEPT-LIMIT-MEGATELECOM-ACK_1200:1299; accept; } } term LIMIT-ACK-PKTSIZE-1300-1399 { from { destination-address { 177.222.188.0/22; } source-prefix-list { SYN_52_BLACK; } packet-length 1300-1399; protocol tcp; } then { policer POLICER-DDOS-50M; count ACCEPT-LIMIT-MEGATELECOM-ACK_1300:1399; accept; } } } filter DDOS-MILBR { term ACCEPT-DNS-RECURSIVE { from { destination-address { 187.120.240.12/32; 187.120.240.13/32; 187.120.240.57/32; 187.120.240.58/32; } protocol udp; source-port 53; } then { count ACCEPT-DNS-RECURSIVE; accept; } } term BYPASS { from { source-address { 187.120.252.250/32; } } then accept; } term IPs_NAO_MITIGADOS { from { destination-address { 0.0.0.0/0; 187.120.240.0/20 except; 191.7.72.0/21 except; } } then { count PASS-NAO_MITIGADOS; accept; } } term DDOS-LIMIT-GRE { filter DDOS-LIMIT-GRE; } } filter DDOS-NEOLINK { term ACCEPT-DNS-RECURSIVE { from { destination-address { 45.235.193.251/32; 45.235.193.253/32; 45.235.193.254/32; 45.235.194.252/32; 45.235.194.253/32; 186.233.16.8/32; 186.233.16.15/32; 186.233.16.16/32; 186.233.20.6/32; } protocol udp; source-port 53; } then { count ACCEPT-DNS-RECURSIVE; accept; } } term IPs_NAO_MITIGADOS { from { destination-address { 0.0.0.0/0; 177.93.176.0/21 except; 177.128.248.0/21 except; 186.233.16.0/21 except; 45.175.116.0/22 except; 45.235.192.0/22 except; 131.255.48.0/22 except; 138.219.208.0/22 except; 168.121.188.0/22 except; 170.80.180.0/22 except; } } then { count PASS-NAO_MITIGADOS; accept; } } term DDOS-LIMIT-GRE { filter DDOS-LIMIT-GRE; } } filter DDOS-NETSPEED { term ACCEPT-DNS-RECURSIVE { from { destination-address { 189.51.193.102/32; 201.159.180.246/32; 189.51.192.182/32; 189.51.192.183/32; 201.159.180.249/32; } protocol udp; source-port 53; } then { count ACCEPT-DNS-RECURSIVE; port-mirror-instance KENTIK-MONITOR-DNS; accept; } } term BYPASS { from { destination-address { 191.241.177.83/32; 177.190.159.0/24; 186.250.231.66/32; } } then { count PASS-NAO_MITIGADOS; accept; } } term IPs_NAO_MITIGADOS { from { destination-address { 0.0.0.0/0; 45.70.16.0/22 except; 167.250.228.0/22 except; 177.190.155.0/24 except; 187.0.48.0/20 except; 189.51.192.0/20 except; 191.241.176.0/24 except; 201.159.180.0/22 except; 186.250.228.0/22 except; } } then { count PASS-NAO_MITIGADOS; accept; } } term DDOS-LIMIT-GRE { filter DDOS-LIMIT-GRE; } term LIMIT-ACK-PPS-MIKROTIK { from { source-address { 186.249.45.150/32 except; } destination-address { 189.51.193.86/32; } packet-length 1500; protocol tcp; tcp-flags ack; } then { policer POLICER-DDOS-1K-PPS; count ACCEPT-LIMIT-NETSPEED-ACK_1500; accept; } } } filter DDOS-OPENX { term ACCEPT-DNS-RECURSIVE { from { destination-address { 177.91.160.99/32; 177.91.160.100/32; } protocol udp; source-port 53; } then { count ACCEPT-DNS-RECURSIVE; accept; } } term BYPASS { from { source-address { 162.159.72.210/32; 172.64.248.169/32; } protocol gre; } then accept; } term IPs_NAO_MITIGADOS { from { destination-address { 0.0.0.0/0; 177.91.160.0/22 except; 138.36.164.0/22 except; } } then accept; } } filter DDOS-ROS { term ACCEPT-CLI-IP-BIOSNET { from { destination-address { 45.182.157.0/30; } } then { count ACCEPT-CLI-IP-BIOSNET; accept; } } term ACCEPT-DNS-RECURSIVE { from { destination-address { 45.190.112.10/32; 170.239.55.4/32; 170.239.55.14/32; 177.124.64.2/32; 177.124.64.112/32; 177.124.64.113/32; 186.233.120.10/32; } protocol udp; source-port 53; } then { count ACCEPT-DNS-RECURSIVE; accept; } } inactive: term IPs_NAO_MITIGADOS { from { destination-address { 0.0.0.0/0; 45.182.156.0/22 except; 177.124.64.0/21 except; 177.91.120.0/21 except; 168.228.156.0/22 except; 170.239.55.0/24 except; 45.191.180.0/22 except; 186.233.120.0/21 except; 168.121.4.0/22 except; 45.234.204.0/22 except; } } then { count PASS-NAO_MITIGADOS; accept; } } term DDOS-LIMIT-GRE { filter DDOS-LIMIT-GRE; } } filter DDOS-TCP-FLAGS { term FIN_SYN { from { tcp-flags "(fin & syn)"; } then { count DROP-TCP_FIN_SYN; discard; } } term "FIN_!ACK" { from { tcp-flags "(fin & !ack)"; } then { count "DROP-TCP_FIN_!ACK"; discard; } } term FIN_RST { from { tcp-flags "(fin & rst)"; } then { count DROP-TCP_FIN_RST; discard; } } term "!FIN_!SYN_!RST_!ACK" { from { tcp-flags "(!fin & !syn & !rst & !ack)"; } then { count "DROP-TCP_!FIN_!SYN_!RST_!ACK"; discard; } } term SYN_RST { from { tcp-flags "(syn & rst)"; } then { count DROP-TCP_SYN_RST; discard; } } term FIN_URG { from { tcp-flags "(fin & urg)"; } then { count DROP-TCP_FIN_URG; discard; } } term RST_URG { from { tcp-flags "(rst & urg)"; } then { count DROP-TCP_RST_URG; discard; } } term PSH { from { tcp-flags "(psh & !ack)"; } then { policer POLICER-DDOS-TCP_PSH; count "ACCEPT-LIMIT-TCP_PSH_!ACK"; } } term URG { from { tcp-flags urg; } then { policer POLICER-DDOS-TCP_URG; count ACCEPT-LIMIT-TCP_URG; } } } filter DDOS-ULTRANET { term BYPASS { from { destination-address { 138.0.68.0/22; 168.90.29.225/32; 177.37.64.48/29; 177.37.69.71/32; 177.129.201.0/24; 179.96.172.0/24; 168.90.31.0/24; } } then accept; } term ACCEPT-DNS-RECURSIVE { from { destination-address { 177.37.64.5/32; 177.37.69.1/32; 177.37.69.2/32; 179.43.4.253/32; 138.0.68.11/32; 138.0.68.12/32; 177.128.216.82/32; 177.128.216.83/32; 177.128.216.110/32; 177.128.217.42/32; } protocol udp; source-port 53; } then { count ACCEPT-DNS-RECURSIVE; port-mirror-instance KENTIK-MONITOR-DNS; accept; } } inactive: term IPs_NAO_MITIGADOS { from { destination-address { 0.0.0.0/0; 177.37.64.0/20 except; 177.37.80.0/21 except; 177.37.88.0/21 except; 45.163.12.0/22 except; 138.0.68.0/22 except; 170.239.196.0/22 except; 177.128.216.0/22 except; 179.43.4.0/22 except; 179.96.168.0/21 except; 177.73.253.0/24 except; 179.127.116.0/24 except; 179.127.118.0/24 except; 177.129.200.0/22 except; 168.90.28.0/22 except; } } then { count PASS-NAO_MITIGADOS; accept; } } term DDOS-LIMIT-GRE { filter DDOS-LIMIT-GRE; } term LIMIT-TCP-SPORT-443 { from { destination-address { 177.37.69.73/32; } protocol tcp; source-port [ 443 80 ]; } then { policer POLICER-DDOS-UDP-443; count ACCEPT-LIMIT-ULTRA-TCP-443; accept; } } term DROP-ICMP-769 { from { protocol icmp; port 769; } then { count DROP-ICMP-769; discard; } } term DROP-ICMP-771 { from { protocol icmp; port 771; } then { count DROP-ICMP-771; discard; } } term LIMIT-ICMP-2048 { from { protocol icmp; port 2048; } then { policer POLICER-DDOS-ICMP_PORT-2048; count ACCEPT-LIMIT-ULTRA-ICMP_2048; accept; } } } filter DDOS-UNE { term IPs_NAO_MITIGADOS { from { destination-address { 0.0.0.0/0; 186.194.172.0/22 except; 177.12.212.0/22 except; 38.183.90.0/23 except; } } then { count PASS-NAO_MITIGADOS; accept; } } term DDOS-LIMIT-GRE { filter DDOS-LIMIT-GRE; } } filter IRP-PBR { term CDNSTAR-VL3674 { from { source-address { 177.91.162.8/32; } } then { next-ip 172.16.0.30/32; } } term FLYS-VBD_VL650 { from { source-address { 177.91.162.9/32; } } then { next-ip 189.1.35.20/32; } } term DURAND-PIXENET_VL621 { from { source-address { 177.91.162.10/32; } } then { next-ip 177.91.162.241/32; } } term DURAND-VBD_VL637 { from { source-address { 177.91.162.11/32; } } then { next-ip 177.91.162.243/32; } } term SPARKLE-PIXENET_VL1670 { from { source-address { 177.91.162.12/32; } } then { next-ip 89.221.42.204/32; } } term TELXIUS-PIXENET_VL1770 { from { source-address { 177.91.162.13/32; } } then { next-ip 213.140.51.162/32; } } term LEVEL3-VBD_VL100 { from { source-address { 177.91.162.14/32; } } then { next-ip 189.125.156.33/32; } } term default { then accept; } } filter KENTIK-MONITOR-DNS { term DNS { from { protocol udp; port 53; } then { port-mirror-instance KENTIK-MONITOR-DNS; accept; } } } filter KENTIK-MONITOR-DNS-output { term DNS { filter KENTIK-MONITOR-DNS; } term ACCEPT { then accept; } } filter WANGUARD-IN-NSFOCUS-OUT { term PBR { from { destination-address { 200.9.154.0/23; 191.96.224.0/23; 191.96.78.0/23; 191.101.131.0/24; 102.165.46.0/24; 209.14.130.0/23; 190.102.40.0/22; } } then { next-ip 100.91.164.51/32; } } term ACCEPT { then accept; } } filter WAN_IN { term DROP-PORTAS-RISCO { from { protocol udp; destination-port [ 19 53 123 137-139 161 1900 ]; } then { discard; } } term ACCEPT-ALL { then accept; } } filter accept-all { apply-flags omit; term accept-all-tcp { from { protocol tcp; } then { count accept-all-tcp; log; syslog; accept; } } term accept-all-udp { from { protocol udp; } then { count accept-all-udp; log; syslog; accept; } } term accept-all-igmp { from { protocol igmp; } then { count accept-all-igmp; log; syslog; accept; } } term accept-icmp { from { protocol icmp; } then { count accept-all-icmp; log; syslog; accept; } } term accept-all-unknown { then { count accept-all-unknown; log; syslog; accept; } } } filter accept-bfd { apply-flags omit; term accept-bfd { from { source-prefix-list { router-ipv4; router-ipv4-logical-systems; } destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol udp; source-port 49152-65535; destination-port 3784-3785; } then { count accept-bfd; accept; } } } filter accept-bgp { apply-flags omit; term accept-bgp { from { source-prefix-list { bgp-neighbors; bgp-neighbors-logical-systems; } destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol tcp; port bgp; } then { count accept-bgp; accept; } } term accept-bmp { from { port 7854; } } } filter accept-common-services { apply-flags omit; term accept-icmp { filter accept-icmp; } term accept-traceroute { filter accept-traceroute; } term accept-ssh { filter accept-ssh; } term accept-snmp { filter accept-snmp; } term accept-ntp { filter accept-ntp; } term accept-web { filter accept-web; } term accept-dns { filter accept-dns; } term accept-rtr { filter accept-rtr; } } filter accept-dhcp { term dhcp-client-accept { from { source-address { 0.0.0.0/32; } destination-address { 255.255.255.255/32; } protocol udp; source-port 68; destination-port 67; } then { count dhcp-client-accept; accept; } } term dhcp-server-accept { from { protocol udp; source-port [ 67 68 ]; destination-port [ 67 68 ]; } then { count dhcp-server-accept; accept; } } } filter accept-dns { apply-flags omit; term accept-dns { from { source-prefix-list { dns-servers; } destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol udp; source-port 53; } then { policer management-1m; count accept-dns; accept; } } } filter accept-established { apply-flags omit; term accept-established-tcp-ssh { from { destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } source-port [ ssh 5612 ]; tcp-established; } then { policer management-5m; count accept-established-tcp-ssh; accept; } } term accept-established-tcp-ftp { from { destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } source-port ftp; tcp-established; } then { policer management-5m; count accept-established-tcp-ftp; accept; } } term accept-established-tcp-ftp-data-syn { from { destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } source-port ftp-data; tcp-initial; } then { policer management-5m; count accept-established-tcp-ftp-data-syn; accept; } } term accept-established-tcp-ftp-data { from { destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } source-port ftp-data; tcp-established; } then { policer management-5m; count accept-established-tcp-ftp-data; accept; } } term accept-established-tcp-telnet { from { destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } source-port telnet; tcp-established; } then { policer management-5m; count accept-established-tcp-telnet; accept; } } term accept-established-tcp-fetch { from { destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } source-port [ http https ]; tcp-established; } then { policer management-5m; count accept-established-tcp-fetch; accept; } } term accept-established-udp-ephemeral { from { destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol udp; destination-port 49152-65535; } then { policer management-5m; count accept-established-udp-ephemeral; accept; } } } filter accept-ftp { apply-flags omit; term accept-ftp { from { source-prefix-list { rfc1918; gerencia_openx; } destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol tcp; port [ ftp ftp-data ]; } then { policer management-5m; count accept-ftp; accept; } } } filter accept-icmp { apply-flags omit; term no-icmp-fragments { from { is-fragment; protocol icmp; } then { count no-icmp-fragments; log; discard; } } term accept-icmp { from { protocol icmp; ttl-except 1; icmp-type [ echo-reply echo-request time-exceeded unreachable source-quench router-advertisement parameter-problem ]; } then { policer management-5m; count accept-icmp; accept; } } } filter accept-igp { apply-flags omit; term accept-ospf { filter accept-ospf; } term accept-rip { filter accept-rip; } } filter accept-ldp { apply-flags omit; term accept-ldp-discover { from { source-prefix-list { router-ipv4; router-ipv4-logical-systems; } destination-prefix-list { multicast-all-routers; } protocol udp; destination-port ldp; } then { count accept-ldp-discover; accept; } } term accept-ldp-unicast { from { source-prefix-list { ldp-peers; } destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol tcp; port ldp; } then { count accept-ldp-unicast; accept; } } term accept-tldp-discover { from { destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol udp; destination-port ldp; } then { count accept-tldp-discover; accept; } } term accept-ldp-igmp { from { source-prefix-list { router-ipv4; router-ipv4-logical-systems; } destination-prefix-list { multicast-all-routers; } protocol igmp; } then { count accept-ldp-igmp; accept; } } } filter accept-ldp-rsvp { apply-flags omit; term accept-ldp { filter accept-ldp; } term accept-rsvp { filter accept-rsvp; } } filter accept-ntp { term accept-ntp-server { from { source-prefix-list { ntp-server; } destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol udp; destination-port ntp; } then { policer management-1m; count accept-ntp-server; accept; } } term accept-ntp-peer { from { source-prefix-list { ntp-server-peers; } destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol udp; destination-port ntp; } then { policer management-1m; count accept-ntp-peer; accept; } } term accept-ntp-local { from { source-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol udp; port ntp; } then { policer management-1m; count accept-ntp-local; accept; } } } filter accept-ospf { apply-flags omit; term accept-ospf { from { source-prefix-list { router-ipv4; router-ipv4-logical-systems; } destination-prefix-list { router-ipv4; ospf; router-ipv4-logical-systems; } protocol ospf; } then { count accept-ospf; accept; } } } filter accept-radius { apply-flags omit; term accept-radius { from { source-prefix-list { radius-servers; } destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol udp; source-port [ radacct radius ]; tcp-established; } then { policer management-1m; count accept-radius; accept; } } } filter accept-remote-auth { apply-flags omit; term accept-radius { filter accept-radius; } term accept-tacas { filter accept-tacas; } } filter accept-rip { apply-flags omit; term accept-rip { from { source-prefix-list { router-ipv4; router-ipv4-logical-systems; } destination-prefix-list { rip; } protocol udp; destination-port rip; } then { count accept-rip; accept; } } term accept-rip-igmp { from { source-prefix-list { router-ipv4; router-ipv4-logical-systems; } destination-prefix-list { rip; } protocol igmp; } then { count accept-rip-igmp; accept; } } } filter accept-rsvp { apply-flags omit; term accept-rsvp { from { destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol rsvp; } then { count accept-rsvp; accept; } } } filter accept-rtr { apply-flags omit; term accept-rtr { from { source-prefix-list { rfc1918; gerencia_openx; } destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol tcp; source-port 3323; } then { policer management-5m; count accept-rtr; accept; } } } filter accept-snmp { apply-flags omit; term accept-snmp { from { source-prefix-list { snmp-client-lists; snmp-community-clients; } destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol udp; destination-port snmp; } then { policer management-5m; count accept-snmp; accept; } } } filter accept-ssh { apply-flags omit; term accept-ssh { from { source-prefix-list { rfc1918; gerencia_openx; } destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol tcp; destination-port [ ssh 830 5612 32767 ]; } then { policer management-5m; count accept-ssh; accept; } } } filter accept-tacas { apply-flags omit; term accept-tacas { from { source-prefix-list { tacas-servers; } destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol [ tcp udp ]; source-port [ tacacs tacacs-ds ]; tcp-established; } then { policer management-1m; count accept-tacas; accept; } } } filter accept-telnet { apply-flags omit; term accept-telnet { from { source-prefix-list { rfc1918; } destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol tcp; destination-port telnet; } then { policer management-1m; count accept-telnet; accept; } } } filter accept-traceroute { apply-flags omit; term accept-traceroute-udp { from { destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol udp; ttl 1; destination-port 33435-33450; } then { policer management-1m; count accept-traceroute-udp; accept; } } term accept-traceroute-icmp { from { destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol icmp; ttl 1; icmp-type [ echo-request timestamp time-exceeded ]; } then { policer management-1m; count accept-traceroute-icmp; accept; } } } filter accept-vrrp { apply-flags omit; term accept-vrrp { from { source-prefix-list { router-ipv4; router-ipv4-logical-systems; } destination-prefix-list { vrrp; } protocol [ vrrp ah ]; } then { count accept-vrrp; accept; } } } filter accept-web { apply-flags omit; term accept-web { from { source-prefix-list { rfc1918; gerencia_openx; } destination-prefix-list { router-ipv4; router-ipv4-logical-systems; } protocol tcp; destination-port [ http https ]; } then { policer management-5m; count accept-web; accept; } } } filter discard-all { apply-flags omit; term discard-ip-options { from { ip-options any; } then { count discard-ip-options; discard; } } term discard-TTL_1-unknown { from { ttl 1; } then { count discard-all-TTL_1-unknown; discard; } } term discard-tcp { from { protocol tcp; } then { count discard-tcp; discard; } } term discard-netbios { from { protocol udp; destination-port 137; } then { count discard-netbios; discard; } } term discard-udp { from { protocol udp; } then { count discard-udp; discard; } } term discard-icmp { from { protocol icmp; } then { count discard-icmp; discard; } } term discard-unknown { then { count discard-unknown; discard; } } } } family inet6 { filter v6-accept-all { apply-flags omit; term accept-all-tcp { from { payload-protocol tcp; } then { count accept-all-tcp; accept; } } term accept-all-udp { from { payload-protocol udp; } then { count accept-all-udp; accept; } } term accept-all-igmp { from { payload-protocol igmp; } then { count accept-all-igmp; accept; } } term accept-all-unknown { then { count accept-all-unknown; accept; } } } filter v6-accept-bgp { apply-flags omit; term accept-bgp { from { source-prefix-list { bgp-neighbors; bgp-neighbors-routing-instances; } destination-prefix-list { router-ipv6; } payload-protocol tcp; port bgp; } then { count accept-bgp; accept; } } term accept-bmp { from { port 7854; } } } filter v6-discard-bgp { apply-flags omit; term discard-bgp { from { payload-protocol tcp; port bgp; } then { count discard-bgp; syslog; discard; } } } } policer 50M { filter-specific; logical-interface-policer; if-exceeding { bandwidth-limit 50m; burst-size-limit 3840000; } then discard; } policer ARP_POLICER { if-exceeding { bandwidth-limit 150k; burst-size-limit 250k; } then discard; } policer POLICER-DDOS-100M { apply-flags omit; if-exceeding { bandwidth-limit 100m; burst-size-limit 128k; } then discard; } policer POLICER-DDOS-10M { apply-flags omit; if-exceeding { bandwidth-limit 10m; burst-size-limit 128k; } then discard; } policer POLICER-DDOS-150K-PPS { if-exceeding-pps { pps-limit 150k; packet-burst 15k; } then discard; } policer POLICER-DDOS-15K-PPS { if-exceeding-pps { pps-limit 15k; packet-burst 1k; } then discard; } policer POLICER-DDOS-1G { if-exceeding { bandwidth-limit 1g; burst-size-limit 100m; } then discard; } policer POLICER-DDOS-1K-PPS { if-exceeding-pps { pps-limit 1k; packet-burst 1k; } then discard; } policer POLICER-DDOS-1M { apply-flags omit; if-exceeding { bandwidth-limit 1m; burst-size-limit 100k; } then discard; } policer POLICER-DDOS-20M { apply-flags omit; if-exceeding { bandwidth-limit 20m; burst-size-limit 128k; } then discard; } policer POLICER-DDOS-2G { if-exceeding { bandwidth-limit 2g; burst-size-limit 200m; } then discard; } policer POLICER-DDOS-300M { apply-flags omit; if-exceeding { bandwidth-limit 300m; burst-size-limit 30m; } then discard; } policer POLICER-DDOS-400K-PPS { if-exceeding-pps { pps-limit 400k; packet-burst 100k; } then discard; } policer POLICER-DDOS-4G { if-exceeding { bandwidth-limit 4g; burst-size-limit 256m; } then discard; } policer POLICER-DDOS-500M { apply-flags omit; if-exceeding { bandwidth-limit 500m; burst-size-limit 50m; } then discard; } policer POLICER-DDOS-50M { apply-flags omit; if-exceeding { bandwidth-limit 50m; burst-size-limit 128k; } then discard; } policer POLICER-DDOS-5G { if-exceeding { bandwidth-limit 5g; burst-size-limit 500m; } then discard; } policer POLICER-DDOS-5M { apply-flags omit; if-exceeding { bandwidth-limit 5m; burst-size-limit 128k; } then discard; } policer POLICER-DDOS-800M { apply-flags omit; if-exceeding { bandwidth-limit 800m; burst-size-limit 80m; } then discard; } policer POLICER-DDOS-APPLE-RDP { if-exceeding { bandwidth-limit 5m; burst-size-limit 125k; } then discard; } policer POLICER-DDOS-COAP { if-exceeding { bandwidth-limit 1m; burst-size-limit 125k; } then discard; } policer POLICER-DDOS-DNS { apply-flags omit; if-exceeding { bandwidth-limit 50m; burst-size-limit 6250000; } then discard; } policer POLICER-DDOS-DPORT-607 { apply-flags omit; if-exceeding { bandwidth-limit 200m; burst-size-limit 12800000; } then discard; } policer POLICER-DDOS-GRE { apply-flags omit; if-exceeding { bandwidth-limit 200m; burst-size-limit 1m; } then discard; } policer POLICER-DDOS-ICMP-PORT-UNREACH { apply-flags omit; if-exceeding { bandwidth-limit 1m; burst-size-limit 125k; } then discard; } policer POLICER-DDOS-ICMP_PORT-2048 { if-exceeding { bandwidth-limit 1m; burst-size-limit 100k; } then discard; } policer POLICER-DDOS-NTP { apply-flags omit; if-exceeding { bandwidth-limit 5m; burst-size-limit 625k; } then discard; } policer POLICER-DDOS-PKTSIZE { apply-flags omit; if-exceeding { bandwidth-limit 200m; burst-size-limit 6250000; } then discard; } policer POLICER-DDOS-PKTSIZE-1-1000 { apply-flags omit; if-exceeding { bandwidth-limit 50m; burst-size-limit 375k; } then discard; } policer POLICER-DDOS-PKTSIZE-29 { apply-flags omit; if-exceeding { bandwidth-limit 30m; burst-size-limit 375k; } then discard; } policer POLICER-DDOS-PKTSIZE-2G5 { apply-flags omit; if-exceeding { bandwidth-limit 2500000000; burst-size-limit 31250000; } then discard; } policer POLICER-DDOS-PKTSIZE-RANGE { apply-flags omit; if-exceeding { bandwidth-limit 500m; burst-size-limit 6250000; } then discard; } policer POLICER-DDOS-PKTSIZE-RANGE-0-100 { apply-flags omit; if-exceeding { bandwidth-limit 50m; burst-size-limit 375k; } then discard; } policer POLICER-DDOS-PKTSIZE-RANGE-30m { apply-flags omit; if-exceeding { bandwidth-limit 30m; burst-size-limit 375k; } then discard; } policer POLICER-DDOS-PKTSIZE-TCP-PSH-ACK { apply-flags omit; if-exceeding { bandwidth-limit 200m; burst-size-limit 375k; } then discard; } policer POLICER-DDOS-SADP { if-exceeding { bandwidth-limit 1m; burst-size-limit 125k; } then discard; } policer POLICER-DDOS-SNMP { apply-flags omit; if-exceeding { bandwidth-limit 5m; burst-size-limit 625k; } then discard; } policer POLICER-DDOS-TCP_100M { if-exceeding { bandwidth-limit 100m; burst-size-limit 125k; } then discard; } policer POLICER-DDOS-TCP_ACK { if-exceeding { bandwidth-limit 2g; burst-size-limit 125k; } then discard; } policer POLICER-DDOS-TCP_ACK_1040 { if-exceeding { bandwidth-limit 30m; burst-size-limit 125k; } then discard; } policer POLICER-DDOS-TCP_ACK_552 { if-exceeding { bandwidth-limit 30m; burst-size-limit 125k; } then discard; } policer POLICER-DDOS-TCP_DPORT_5_10M { apply-flags omit; if-exceeding { bandwidth-limit 10m; burst-size-limit 640k; } then discard; } policer POLICER-DDOS-TCP_PSH { if-exceeding { bandwidth-limit 30m; burst-size-limit 125k; } then discard; } policer POLICER-DDOS-TCP_PSH_ACK { if-exceeding { bandwidth-limit 500m; burst-size-limit 125k; } then discard; } policer POLICER-DDOS-TCP_PSH_ACK_22 { if-exceeding { bandwidth-limit 15m; burst-size-limit 125k; } then discard; } policer POLICER-DDOS-TCP_RST_ACK { if-exceeding { bandwidth-limit 1m; burst-size-limit 125k; } then discard; } policer POLICER-DDOS-TCP_URG { if-exceeding { bandwidth-limit 30m; burst-size-limit 125k; } then discard; } policer POLICER-DDOS-UDP-443 { apply-flags omit; if-exceeding { bandwidth-limit 50m; burst-size-limit 375k; } then discard; } policer POLICER-DDOS-UDP-DIVERSOS { apply-flags omit; if-exceeding { bandwidth-limit 200m; burst-size-limit 12800000; } then discard; } policer limite_arp_decix { if-exceeding { bandwidth-limit 4m; burst-size-limit 500k; } then discard; } policer limite_arp_ptt-sp { if-exceeding { bandwidth-limit 2m; burst-size-limit 250k; } then discard; } policer management-1m { apply-flags omit; if-exceeding { bandwidth-limit 1m; burst-size-limit 625k; } then discard; } policer management-5m { apply-flags omit; if-exceeding { bandwidth-limit 5m; burst-size-limit 625k; } then discard; } filter RPM-FLORESTAWII { term recos { from { source-address { 10.40.40.0/29; } destination-address { 10.40.40.0/29; } } then { loss-priority high; forwarding-class network-control; } } term accept { then accept; } } filter WANGUARD-SP4 { term 1 { then port-mirror-instance WANGUARD-SP4; } } } access { profile IPOE-Access-Profile { authentication-order none; authorization-order none; domain-name-server { 177.91.160.100; 177.91.160.99; } domain-name-server-inet6 { 2001:4860:4860::8888; 2001:4860:4860::8844; } } address-assignment { neighbor-discovery-router-advertisement V6-IPOE-WAN; pool V4-IPOE { family inet { network 177.91.162.176/28; range 1 { low 177.91.162.178; high 177.91.162.190; } dhcp-attributes { maximum-lease-time 3600; router { 177.91.162.177; } } } } pool V6-IPOE-WAN { family inet6 { prefix 2804:11dc:c1::/64; range v6-range { low 2804:11dc:c1::2/128; high 2804:11dc:c1::ffff:ffff/128; } } } pool V6-IPOE-PD { family inet6 { prefix 2804:11dc:c0::/48; range L prefix-length 56; } } } domain { map IPOE { access-profile IPOE-Access-Profile; address-pool V4-IPOE; } } } routing-instances { CLEAN-VBD-CORERO { instance-type vrf; routing-options { static { route 0.0.0.0/0 next-table inet.0; } } route-distinguisher 65444:1620; vrf-target target:65444:1620; } inactive: CLI_IP { instance-type virtual-router; routing-options { interface-routes { rib-group inet CLI_IPV4->IPV4; } static { route 0.0.0.0/0 discard; } } } CONTEUDO { instance-type virtual-router; routing-options { static { route 0.0.0.0/0 next-table inet.0; } instance-import RI-CONTEUDO; } protocols { bgp { group WAN_PTT-IXBR_SP-V4 { type external; local-preference 350; import BGP-PTT-IXBR_SP-in; export BGP-PTT-IXBR_SP-out; peer-as 26162; neighbor 187.16.216.253 { description PTT-SP-RS1; } neighbor 187.16.216.254 { description PTT-SP-RS2; } neighbor 187.16.216.252 { peer-as 20121; } } group WAN_PTT-IXBR_SP-V6 { type external; local-preference 350; import BGP-PTT-IXBR_SP-in; export BGP-PTT-IXBR_SP-out; peer-as 26162; neighbor 2001:12f8::253; neighbor 2001:12f8::254; neighbor 2001:12f8::252 { peer-as 20121; } } group WAN_PTT-IXBR_SP_PEER-V4 { type external; local-preference 350; import [ BGP-PTT-PEER-in BGP-PTT-PEER-EDGEUNO-in ]; export BGP-PTT-PEER-out; inactive: neighbor 187.16.216.68 { description RIOT-GAMES; peer-as 6507; } neighbor 187.16.218.22 { description YAHOO; peer-as 10310; } neighbor 187.16.218.31 { description YAHOO; peer-as 10310; } neighbor 187.16.218.82 { description FACEBOOK; peer-as 32934; } neighbor 187.16.218.139 { description MICROSOFT; peer-as 8075; } neighbor 187.16.218.144 { description MICROSOFT; peer-as 8075; } neighbor 187.16.219.111 { description CLOUDFLARE; import BGP-NEGA-TUDO; peer-as 13335; } inactive: neighbor 187.16.220.140 { description LINKEDIN; peer-as 14413; } neighbor 187.16.220.213 { description SOFTLAYER; peer-as 36351; } neighbor 187.16.220.240 { description FACEBOOK; peer-as 32934; } neighbor 187.16.221.197 { description HURRICANE; import BGP-NEGA-TUDO; export BGP-NEGA-TUDO; peer-as 6939; } neighbor 187.16.222.60 { description FACEBOOK; peer-as 32934; } inactive: neighbor 187.16.216.177 { description HIGHWINDS; peer-as 12989; } neighbor 187.16.220.8 { description AKAMAI; peer-as 20940; } inactive: neighbor 187.16.216.69 { description RIOT-GAMES; peer-as 6507; } inactive: neighbor 187.16.218.175 { description CDNetworks; authentication-key "$9$u9yk1cyWLxVs2vMjHqPzFSyle8x-VwaGDbwfTQF/9vW8"; ## SECRET-DATA peer-as 36408; } neighbor 187.16.217.238 { description EDGEUNO; import BGP-PTT-PEER-EDGEUNO-in; export BGP-PTT-PEER-EDGEUNO-out; peer-as 7195; } inactive: neighbor 187.16.217.161 { description Seaborn; peer-as 13786; } inactive: neighbor 187.16.217.163 { description Amazon; export BGP-PTT-PEER-AMAZON-out; peer-as 16509; } inactive: neighbor 187.16.216.95 { description Amazon; export BGP-PTT-PEER-AMAZON-out; peer-as 16509; } inactive: neighbor 187.16.221.239 { description Amazon; export BGP-PTT-PEER-AMAZON-out; peer-as 16509; } inactive: neighbor 187.16.221.99 { description Amazon; export BGP-PTT-PEER-AMAZON-out; peer-as 16509; } neighbor 187.16.218.72 { description Globo.com; export BGP-PTT-SP-GLOBO-out; peer-as 28604; } neighbor 187.16.219.62 { description Globo.com; export BGP-PTT-SP-GLOBO-out; peer-as 28604; } inactive: neighbor 187.16.217.83 { description EAI; family inet { unicast { prefix-limit { maximum 500; teardown { idle-timeout 5; } } } } peer-as 61599; } inactive: neighbor 187.16.219.83 { description EDGECAST; peer-as 15133; } inactive: neighbor 187.16.220.105 { description EDGECAST; peer-as 15133; } neighbor 187.16.213.181 { description Apple; peer-as 714; } neighbor 187.16.213.182 { description Apple; peer-as 714; } neighbor 187.16.217.135 { description BYTEDANCE; peer-as 396986; } neighbor 187.16.218.17 { description BYTEDANCE; peer-as 396986; } inactive: neighbor 187.16.210.20 { description TENCENT_ACE_CDN; peer-as 139341; } neighbor 187.16.219.155 { description TENCENT_ACE_CDN; peer-as 139341; } neighbor 187.16.211.155 { description TENCENT_ACE_CDN; peer-as 139341; } inactive: neighbor 187.16.217.11 { description TENCENT; peer-as 132203; } neighbor 187.16.212.227 { description TENCENT; peer-as 132203; } neighbor 187.16.212.226 { description TENCENT; peer-as 132203; } inactive: neighbor 187.16.210.21 { description TENCENT; peer-as 132203; } neighbor 187.16.213.88 { description CDNTV; export BGP-PTT-PEER-CDNTV-out; peer-as 268843; } neighbor 187.16.216.219 { description BRFIBRA; peer-as 14840; } neighbor 187.16.221.205 { description ORACLE; peer-as 31898; } inactive: neighbor 187.16.220.126 { description ORACLE; peer-as 31898; } neighbor 187.16.213.228 { description ORACLE; peer-as 31898; } neighbor 187.16.214.32 { description HYPERFILTER; peer-as 60503; } neighbor 187.16.223.63 { description HYPERFILTER; peer-as 60503; } inactive: neighbor 187.16.223.245 { description AKAMAI; peer-as 20940; } neighbor 187.16.223.244 { description AKAMAI; peer-as 20940; } neighbor 187.16.221.28 { description AKAMAI; peer-as 20940; } neighbor 200.219.140.55 { description FERENZ; peer-as 266400; } inactive: neighbor 187.16.223.173 { description FERENZ; peer-as 266400; } neighbor 187.16.219.214 { description HUAWEI_1; peer-as 136907; } neighbor 187.16.218.131 { description HUAWEI_2; peer-as 136907; } neighbor 187.16.223.64 { description EDGEUNO; import BGP-PTT-PEER-EDGEUNO-in; export BGP-PTT-PEER-EDGEUNO-out; peer-as 7195; } neighbor 187.16.208.188 { description CLOUDFLARE; import BGP-NEGA-TUDO; peer-as 13335; } neighbor 187.16.218.97 { description CACHEFLY; peer-as 30081; } } group WAN_PTT-IXBR_SP_PEER-V6 { type external; local-preference 350; import BGP-PTT-PEER-in; export BGP-PTT-PEER-out; neighbor 2001:12f8::218:22 { description OATH; peer-as 10310; } neighbor 2001:12f8::218:31 { description OATH; peer-as 10310; } neighbor 2001:12f8::218:82 { description FACEBOOK; peer-as 32934; } neighbor 2001:12f8::218:139 { description MICROSOFT; peer-as 8075; } neighbor 2001:12f8::218:144 { description MICROSOFT; peer-as 8075; } neighbor 2001:12f8::219:111 { description CLOUDFLARE; import BGP-NEGA-TUDO; peer-as 13335; } inactive: neighbor 2001:12f8::220:140 { description LINKEDIN; peer-as 14413; } neighbor 2001:12f8::220:213 { description SOFTLAYER; peer-as 36351; } inactive: neighbor 2001:12f8::220:240 { description FACEBOOK; peer-as 32934; } neighbor 2001:12f8::221:197 { description HURRICANE; import BGP-NEGA-TUDO; export BGP-NEGA-TUDO; peer-as 6939; } inactive: neighbor 2001:12f8::222:60 { description FACEBOOK; peer-as 32934; } inactive: neighbor 2001:12f8::177 { description HIGHWINDS; peer-as 12989; } neighbor 2001:12f8::220:8 { description AKAMAI; peer-as 20940; } neighbor 2001:12f8::217:238 { description EDGEUNO; import BGP-PTT-PEER-EDGEUNO-in; export BGP-PTT-PEER-EDGEUNO-out; peer-as 7195; } inactive: neighbor 2001:12f8::217:161 { description Seaborn; peer-as 13786; } inactive: neighbor 2001:12f8::217:163 { description Amazon; export BGP-PTT-PEER-AMAZON-out; peer-as 16509; } inactive: neighbor 2001:12f8::221:239 { description Amazon; export BGP-PTT-PEER-AMAZON-out; peer-as 16509; } inactive: neighbor 2001:12f8::221:99 { description Amazon; export BGP-PTT-PEER-AMAZON-out; peer-as 16509; } neighbor 2001:12f8::218:72 { description Globo.com; export BGP-PTT-SP-GLOBO-out; peer-as 28604; } neighbor 2001:12f8::219:62 { description Globo.com; export BGP-PTT-SP-GLOBO-out; peer-as 28604; } inactive: neighbor 2001:12f8::217:83 { description EAI; family inet6 { unicast { prefix-limit { maximum 200; teardown { idle-timeout 5; } } } } peer-as 61599; } inactive: neighbor 2001:12f8::219:83 { description EDGECAST; peer-as 15133; } inactive: neighbor 2001:12f8::220:105 { description EDGECAST; peer-as 15133; } neighbor 2001:12f8::213:181 { description Apple; peer-as 714; } neighbor 2001:12f8::213:182 { description Apple; peer-as 714; } neighbor 2001:12f8::217:135 { description BYTEDANCE; peer-as 396986; } neighbor 2001:12f8::218:17 { description BYTEDANCE; peer-as 396986; } inactive: neighbor 2001:12f8::210:20 { description TENCENT_ACE_CDN; peer-as 139341; } neighbor 2001:12f8::219:155 { description TENCENT_ACE_CDN; peer-as 139341; } neighbor 2001:12f8::211:155 { description TENCENT_ACE_CDN; peer-as 139341; } inactive: neighbor 2001:12f8::217:11 { description TENCENT; peer-as 132203; } neighbor 2001:12f8::212:227 { description TENCENT; peer-as 132203; } neighbor 2001:12f8::212:226 { description TENCENT; peer-as 132203; } inactive: neighbor 2001:12f8::210:21 { description TENCENT; peer-as 132203; } neighbor 2001:12f8::213:88 { description CDNTV; export BGP-PTT-PEER-CDNTV-out; peer-as 268843; } inactive: neighbor 2001:12f8::216:95 { export BGP-PTT-PEER-AMAZON-out; peer-as 16509; } neighbor 2001:12f8::219 { description BRFIBRA; peer-as 14840; } neighbor 2001:12f8::213:228 { description ORACLE; peer-as 31898; } inactive: neighbor 2001:12f8::220:126 { description ORACLE; peer-as 31898; } neighbor 2001:12f8::221:205 { description ORACLE; peer-as 31898; } inactive: neighbor 2001:12f8::223:244 { description AKAMAI; peer-as 20940; } inactive: neighbor 2001:12f8::223:245 { description AKAMAI; peer-as 20940; } inactive: neighbor 2001:12f8::221:28 { description AKAMAI; peer-as 20940; } neighbor 2001:12f8::219:214 { description HUAWEI_1; peer-as 136907; } neighbor 2001:12f8::218:131 { description HUAWEI_2; peer-as 136907; } neighbor 2001:12f8::223:64 { description EDGEUNO; import BGP-PTT-PEER-EDGEUNO-in; export BGP-PTT-PEER-EDGEUNO-out; peer-as 7195; } neighbor 2001:12f8::208:188 { description CLOUDFLARE; import BGP-NEGA-TUDO; peer-as 13335; } neighbor 2001:12f8::218:97 { description CACHEFLY; peer-as 30081; } } group WAN_CDN-V4 { type external; import BGP-NEGA-TUDO; neighbor 177.91.162.158 { description WAN_CDN-GOOGLE-GRU2; import BGP-NEGA-TUDO; export BGP-CDN-GOOGLE-out; peer-as 11344; } neighbor 177.91.162.162 { description WAN_CDN-NETFLIX-MATRIX_1; export BGP-CDN-NETFLIX-out; peer-as 40027; } neighbor 177.91.162.163 { description WAN_CDN-NETFLIX-MATRIX_2; export BGP-CDN-NETFLIX-out; peer-as 40027; } neighbor 177.91.162.164 { description WAN_CDN-NETFLIX-MATRIX_3; export BGP-CDN-NETFLIX-out; peer-as 40027; } } group WAN_CDN-V6 { type external; import BGP-NEGA-TUDO; neighbor 2804:11dc:0:103::2 { description WAN_CDN-NETFLIX-MATRIX_1; local-address 2804:11dc:0:103::1; export BGP-CDN-NETFLIX-out; peer-as 40027; } neighbor 2804:11dc:0:103::3 { description WAN_CDN-NETFLIX-MATRIX_2; local-address 2804:11dc:0:103::1; export BGP-CDN-NETFLIX-out; peer-as 40027; } neighbor 2804:11dc:0:103::4 { description WAN_CDN-NETFLIX-MATRIX_3; local-address 2804:11dc:0:103::1; export BGP-CDN-NETFLIX-out; peer-as 40027; } neighbor 2804:11dc:4000:102::fffe { description WAN_CDN-GOOGLE-GRU2; import BGP-NEGA-TUDO; export BGP-CDN-GOOGLE-out; peer-as 11344; } } group WAN_PTT-IXBR_PR-V4 { type external; local-preference 345; hold-time 45; import BGP-PTT-IXBR_PR-in; export BGP-PTT-IXBR_PR-out; peer-as 26162; neighbor 45.184.147.253 { description IXBR_PR-RS1; } neighbor 45.184.147.254 { description IXBR_PR-RS2; } } group WAN_PTT-IXBR_PR-V6 { type external; local-preference 345; hold-time 45; import BGP-PTT-IXBR_PR-in; export BGP-PTT-IXBR_PR-out; peer-as 26162; inactive: neighbor 2001:12f8:0:4::1 { description IXBR_PR-RS1; } inactive: neighbor 2001:12f8:0:4::2 { description IXBR_PR-RS1; } } group WAN_PTT-IXBR_CE-V6 { type external; local-preference 345; hold-time 45; import BGP-PTT-IXBR_CE-in; export BGP-NEGA-TUDO; peer-as 26162; neighbor 2001:12f8:0:9::252 { peer-as 20121; } neighbor 2001:12f8:0:9::253 { description PTT-IXBR_CE-RS1; } neighbor 2001:12f8:0:9::254 { description PTT-IXBR_CE-RS2; } } group WAN_PTT-IXBR_CE-V4 { type external; local-preference 345; hold-time 45; import BGP-PTT-IXBR_CE-in; export BGP-NEGA-TUDO; peer-as 26162; neighbor 45.68.79.252 { peer-as 20121; } neighbor 45.68.79.253 { description PTT-CE-RS1; } neighbor 45.68.79.254 { description PTT-CE-RS1; } } group WAN_PTT-IXBR_CE_PEER-V4 { type external; local-preference 350; import BGP-PTT-PEER-in; export BGP-PTT-PEER-out; inactive: neighbor 45.184.146.144 { description AMAZON; import BGP-NEGA-TUDO; export BGP-NEGA-TUDO; peer-as 16509; } neighbor 45.68.74.154 { description BYTEDANCE; peer-as 396986; } neighbor 45.68.74.165 { description BYTEDANCE; peer-as 396986; } neighbor 45.68.74.195 { description EDGEUNO; import BGP-NEGA-TUDO; export BGP-NEGA-TUDO; peer-as 7195; } neighbor 45.68.73.162 { description EDGEUNO; import BGP-NEGA-TUDO; export BGP-NEGA-TUDO; peer-as 7195; } neighbor 45.68.72.137 { description CLOUDFLARE; import BGP-NEGA-TUDO; export BGP-NEGA-TUDO; peer-as 13335; } } group WAN_PTT-IXBR_CE_PEER-V6 { type external; local-preference 350; import BGP-PTT-PEER-in; export BGP-PTT-PEER-out; neighbor 2001:12f8:0:9::146:154 { description BYTEDANCE; peer-as 396986; } neighbor 2001:12f8:0:9::146:165 { description BYTEDANCE; peer-as 396986; } neighbor 2001:12f8:0:9::146:195 { description EDGEUNO; import BGP-NEGA-TUDO; export BGP-NEGA-TUDO; peer-as 7195; } neighbor 2001:12f8:0:9::145:162 { description EDGEUNO; import BGP-NEGA-TUDO; export BGP-NEGA-TUDO; peer-as 7195; } neighbor 2001:12f8:0:9::137 { description CLOUDFLARE; import BGP-NEGA-TUDO; export BGP-NEGA-TUDO; peer-as 13335; } } local-as 263444; } ospf { apply-groups BFD-OSPF; area 0.0.0.0 { interface lo0.1 { passive; } interface ae2.10041 { interface-type p2p; metric 35; } interface ae2.11041 { interface-type p2p; metric 34; } interface ae2.10045 { interface-type p2p; metric 35; } interface ae2.11045 { interface-type p2p; metric 34; } interface ae2.10011 { interface-type p2p; metric 34; } interface ae2.11011 { interface-type p2p; metric 35; } } export OSPF-out; } } interface ae2.102; interface ae2.103; interface ae2.985; interface ae2.986; interface ae2.2236; interface ae2.2237; interface ae2.2972; interface ae2.2973; interface ae2.10011; interface ae2.10023; interface ae2.10041; interface ae2.10043; interface ae2.10045; interface ae2.11011; interface ae2.11023; interface ae2.11041; interface ae2.11043; interface ae2.11045; interface lo0.1; } DDOS-DIRTY-CORERO-SP4 { instance-type vrf; route-distinguisher 1620:1640; vrf-target target:666:1640; } DDOS-VBD-CORERO { instance-type vrf; routing-options { static { defaults { resolve; } route 0.0.0.0/0 next-hop 177.91.162.45; } } interface ae2.44; route-distinguisher 666:1620; vrf-target target:666:1620; } mgmt_junos { routing-options { static { route 0.0.0.0/0 next-hop 100.91.240.1; } } description OX-GERENCIA; } } dynamic-profiles { Auto-VLAN-Demux { interfaces { demux0 { unit "$junos-interface-unit" { actual-transit-statistics; demux-source [ inet inet6 ]; proxy-arp; vlan-id "$junos-vlan-id"; demux-options { underlying-interface "$junos-underlying-interface"; } family inet { unnumbered-address lo0.0 preferred-source-address 177.91.162.177; } family inet6 { unnumbered-address lo0.0 preferred-source-address 2804:11dc:c1::1; } } } } } SUBS-IPOE-PROFILE { routing-instances { "$junos-routing-instance" { interface "$junos-interface-name"; routing-options { rib "$junos-ipv6-rib" { access { route $junos-framed-route-ipv6-address-prefix { qualified-next-hop "$junos-interface-name"; metric "$junos-framed-route-ipv6-cost"; preference "$junos-framed-route-ipv6-distance"; tag "$junos-framed-route-ipv6-tag"; } } } access { route $junos-framed-route-ip-address-prefix { qualified-next-hop "$junos-interface-name"; metric "$junos-framed-route-cost"; preference "$junos-framed-route-distance"; } } access-internal { route $junos-subscriber-ip-address { qualified-next-hop "$junos-interface-name"; } } } } } interfaces { demux0 { unit "$junos-interface-unit" { actual-transit-statistics; no-traps; proxy-arp; demux-options { underlying-interface "$junos-underlying-interface"; } family inet { demux-source { $junos-subscriber-ip-address; } inactive: filter { input "$junos-input-filter"; output "$junos-output-filter"; } unnumbered-address "$junos-loopback-interface" preferred-source-address "$junos-preferred-source-address"; } family inet6 { inactive: filter { input "$junos-input-ipv6-filter"; output "$junos-output-ipv6-filter"; } demux-source { "$junos-subscriber-ipv6-address"; } unnumbered-address "$junos-loopback-interface" preferred-source-address "$junos-preferred-source-ipv6-address"; } } } } protocols { router-advertisement { interface "$junos-interface-name" { managed-configuration; other-stateful-configuration; prefix 2804:11dc:c1::/64; } } } } } routing-options { rib inet6.0 { static { route ::/0 discard; route 2804:11dc:0:ca5a::/64 next-hop 2804:11dc:0:200::100; route 2804:11dc:0:ca7a::/64 next-hop 2804:11dc:0:200::97; route 2001:1498:1::32:73/128 next-hop 2001:1498:1:966:1:0:0:991; } } interface-routes { rib-group inet IPV4->CLI_IPV4; } router-id 177.91.162.0; flow { interface-group 1 exclude; term-order standard; } bmp { station NOCTION { local-address 177.91.162.0; connection-mode active; station-address 138.36.164.36; station-port 7854; } } static { route 0.0.0.0/0 discard; route 177.91.163.150/31 next-hop 100.91.163.151; route 177.91.162.42/31 next-hop 177.91.162.41; route 177.91.162.0/23 { discard; community [ 65444:0 65444:10000 65444:1620 ]; } route 177.91.162.192/28 next-hop 100.89.253.74; route 192.168.66.66/32 next-hop 177.91.163.213; route 177.91.162.46/31 next-hop 177.91.162.45; inactive: route 192.168.0.10/32 next-hop 177.91.162.255; route 189.57.150.194/32 next-hop 177.91.162.243; route 85.215.114.161/32 { discard; community 65444:666; } route 177.91.160.0/23 { discard; community [ 65444:0 65444:10000 ]; } route 138.36.167.3/32 next-hop 89.221.42.204; inactive: route 177.105.176.0/20 next-hop 138.0.40.228; route 138.36.167.66/31 next-hop 89.221.42.204; route 213.140.32.112/32 next-hop 213.140.51.162; route 138.36.167.62/31 next-hop 177.91.162.241; route 186.232.200.0/21 { next-hop 177.91.162.241; no-readvertise; } route 187.1.32.0/20 { next-hop 177.91.162.241; no-readvertise; } route 170.239.0.0/22 { next-hop 177.91.162.241; no-readvertise; } route 138.36.167.0/32 next-hop 177.91.162.241; route 138.36.167.5/32 next-hop 177.91.162.241; route 138.255.179.0/24 discard; route 177.91.162.8/29 next-hop 100.91.255.2; route 177.91.162.16/32 next-hop 177.91.163.247; } rib-groups { CLI_IPV4->IPV4 { import-rib [ CLI_IP.inet.0 inet.0 ]; } IPV4->CLI_IPV4 { import-rib [ inet.0 CLI_IP.inet.0 ]; } IPV6->CLI_IPV6 { import-rib [ inet6.0 CLI_IP.inet6.0 ]; } inet0->clean { import-rib [ inet.0 CLEAN-VBD-CORERO.inet.0 ]; import-policy VRF-CLEAN-import; } } route-record; instance-import RI-MASTER; forwarding-table { export Load-Balance-Per-Packet; } validation { group OPENX { session 177.91.162.71 { inactive: traceoptions { file validation.log size 5m files 10; flag error; flag state; } port 3323; local-address 177.91.162.0; } } } } protocols { router-advertisement { interface ae2.10 { prefix 2804:11dc:0:10::/64; } } bgp { group IBGP { inactive: apply-groups BGP-RIB-GROUPS; type internal; local-address 177.91.162.0; import IBGP-RS-in; export BGP-CLI-OUT-PARCIAL; peer-as 263444; inactive: neighbor 177.91.162.75 { passive; import FILTRO-DIVERT; family inet { unicast; flow { no-validate flowspec-in; } } export BGP-NEGA-TUDO; } neighbor 177.91.160.0 { family inet { unicast; flow { no-validate flowspec-in; } } family inet-vpn { unicast; } export IBGP-IP-OUT; } neighbor 177.91.162.2 { import IBGP-RS-in; export IBGP-RS-OUT; cluster 177.91.162.0; } neighbor 177.91.160.2 { import IBGP-RS-in; export IBGP-RS-OUT; cluster 177.91.162.0; } inactive: neighbor 100.91.152.21 { local-address 100.91.152.20; export BGP-CLI-OUT-DEFAULT; } neighbor 100.91.152.41 { local-address 100.91.152.40; passive; import FILTRO-BLACKHOLE; export BGP-NEGA-TUDO; } neighbor 138.36.164.36 { family inet { unicast { add-path { send { path-count 6; } } } } export BGP-CLI-OUT-FULL; cluster 177.91.162.0; } neighbor 138.36.164.0 { family inet { unicast; flow { no-validate flowspec-in; } } export IBGP-IP-OUT; } neighbor 138.36.164.40 { export BGP-CLI-OUT-FULL; } neighbor 138.36.165.5 { export IBGP-IP-OUT; } neighbor 138.36.164.38 { passive; import FILTRO-DIVERT; family inet { unicast; flow { no-validate flowspec-in; } } export BGP-NEGA-TUDO; cluster 177.91.162.0; } neighbor 138.36.165.0 { family inet { unicast; flow { no-validate flowspec-in; } } export IBGP-IP-OUT; } neighbor 138.36.167.0 { description OX-FOR-NE40; export IBGP-RS-OUT; } neighbor 138.36.164.5 { family inet-vpn { unicast; } } neighbor 138.36.164.35 { description OX-SP4-BIRD_FIX; hold-time 240; import IBGP-BIRD_IN; export BGP-NEGA-TUDO; } neighbor 138.36.165.4 { family inet { unicast; flow { no-validate flowspec-in; } } export IBGP-IP-OUT; } neighbor 177.91.160.90 { description OX-COT-BIRD_FIX; hold-time 240; export BGP-NEGA-TUDO; } } group CLIENTE { inactive: apply-groups BGP-RIB-GROUPS; type external; enforce-first-as; export BGP-CLI-OUT-FULL; neighbor 177.91.163.117 { description JUPITER; import CLI_IP-JUPITER; remove-private; peer-as 28191; } neighbor 177.91.163.115 { description GHNET; import CLI_IP-GHNET; peer-as 53094; } neighbor 177.91.163.205 { description CLI_IP-MILBR-ENET; import CLI_IP-MILBR; export BGP-CLI-OUT-FULL; peer-as 53130; } neighbor 177.91.163.69 { description CLI_IP-IRANET-VD_VL364; import CLI_IP-IRANET; export BGP-CLI-OUT-FULL; peer-as 265032; } neighbor 177.91.163.183 { description CLI_IP-COELHO-ENET_VL365; import CLI_IP-COELHO; peer-as 264525; bfd-liveness-detection { minimum-interval 10000; multiplier 3; } } neighbor 2804:11dc:4010:365::2 { description CLI_IP-COELHO-ENET_VL365; import CLI_IP-COELHO; peer-as 264525; } neighbor 177.91.163.181 { description CLI_IP-SCON-VD_VL376; import CLI_IP-SCON; export BGP-CLI-OUT-FULL; peer-as 267289; } neighbor 177.91.162.5 { description OX-SPO0-CCR-PIB; multihop { ttl 5; } import CLI_IP-PIB; export BGP-CLI-OUT-DEFAULT; peer-as 12135; } neighbor 177.91.163.85 { description CLI_IP-ADAPTLINK-PTT_VL602; import CLI_IP-ADAPTLINK; peer-as 61890; } neighbor 177.91.163.189 { description CLI_IP-NETSPEED-MILBR_VL124; import CLI_IP-NETSPEED; export BGP-CLI-OUT-FULL; peer-as 28352; } neighbor 177.91.163.167 { description CLI_IP-NETSPEED-MILBR_VL124; import CLI_IP-NETSPEED; export BGP-CLI-OUT-FULL; peer-as 28352; } inactive: neighbor 177.91.163.211 { description CLI_IP-VELOZESMG-PIXENET_VL2536; import CLI-VELOZESMG; peer-as 265437; } inactive: neighbor 2804:11dc:4010:2536::2 { description CLI_IP-VELOZESMG-PIXENET_VL2536; import CLI-VELOZESMG; peer-as 265437; } neighbor 2804:11dc:10:602::2 { description CLI_IP-ADAPTLINK-PTT_VL602; import CLI_IP-ADAPTLINK; peer-as 61890; } neighbor 177.91.163.133 { description CLI_IP-FIREMICRO-ENET_VL385; import CLI_IP-FIREMICRO; peer-as 52714; bfd-liveness-detection { minimum-interval 2000; multiplier 3; } } neighbor 2804:11dc:10:385::2 { description CLI_IP-FIREMICRO-ENET_VL385; import CLI_IP-FIREMICRO; peer-as 52714; } neighbor 2804:11dc:10:364::2 { description CLI_IP-IRANET-VD_VL364; import CLI_IP-IRANET; peer-as 265032; } neighbor 2804:11dc:10:366::2 { description CLI_IP-GHNET-ENET_VL366; import CLI_IP-GHNET; peer-as 53094; } neighbor 177.91.163.217 { description CLI_IP-JUPITER-ENET_VL344; import CLI_IP-JUPITER; export BGP-CLI-OUT-FULL; peer-as 28191; } neighbor 2804:11dc:10:344::2 { description CLI_IP-JUPITER-ENET_VL344; import CLI_IP-JUPITER; peer-as 28191; } neighbor 2804:11dc:c0:376::2 { description CLI_IP-SCON-VD_VL376; import CLI_IP-SCON; peer-as 267289; } neighbor 177.91.163.247 { description CLI_IP-ROS-ENET_VL393; import CLI_IP-ROS; peer-as 262317; } neighbor 2804:11dc:c0:393::2 { description CLI_IP-ROS-ENET_VL393; import CLI_IP-ROS; peer-as 262317; } neighbor 2804:11dc:c0:1322::2 { description CLI_IP-EMITEL-PIXENET_VL1322; import CLI_IP-EMITEL; peer-as 264127; } neighbor 2804:11dc:c0:124::2 { description CLI_IP-NETSPEED-MILBR_VL124; import CLI_IP-NETSPEED; peer-as 28352; } neighbor 177.91.163.177 { description CLI_IP-ARIAS-MATRIX_VL346; import CLI_IP-ARIAS; export BGP-CLI-OUT-FULL; peer-as 266961; } neighbor 2804:11dc:c0:346::2 { description CLI_IP-ARIAS-MATRIX_VL346; import CLI_IP-ARIAS; export BGP-CLI-OUT-FULL; peer-as 266961; } neighbor 2804:11dc:c0:352::2 { description CLI_IP-BLZ-ALT_VL352; import CLI_IP-BLZ; export BGP-CLI-OUT-FULL; peer-as 52680; } neighbor 177.91.163.165 { description CLI_IP-BLZ-ALT_VL352; import CLI_IP-BLZ; export BGP-CLI-OUT-FULL; peer-as 52680; } neighbor 177.91.163.149 { description CLI_IP-COELHO-4WNET_VL383; import CLI_IP-COELHO; export BGP-CLI-OUT-FULL; peer-as 270996; } neighbor 2804:11dc:c0:383::2 { description CLI_IP-COELHO-4WNET_VL383; import CLI_IP-COELHO; peer-as 270996; } inactive: neighbor 177.91.163.111 { description CLI_IP-SPEEDJET-MTX_VL312; import CLI_IP-SPEEDJET; export BGP-CLI-OUT-FULL; peer-as 269572; } inactive: neighbor 2804:11dc:c0:312::2 { description CLI_IP-SPEEDJET-MTX_VL312; import CLI_IP-SPEEDJET; export BGP-CLI-OUT-FULL; peer-as 269572; } neighbor 2804:11dc:c0:353::2 { description CLI_IP-MILBR-ENET; import CLI_IP-MILBR; export BGP-CLI-OUT-FULL; peer-as 53130; } neighbor 177.91.163.113 { description CLI_IP-EMITEL-PIXENET_VL1322; import CLI_IP-EMITEL; peer-as 264127; } neighbor 177.91.163.89 { description CLI_IP-STRATUS-MAP_VL358; import CLI_IP-STRATUS; export BGP-CLI-OUT-FULL; peer-as 28187; } neighbor 2804:11dc:c0:358::2 { description CLI_IP-STRATUS-MAP_VL358; import CLI_IP-STRATUS; peer-as 28187; } neighbor 177.91.163.197 { traceoptions { file bgp-netspeed.log size 10m files 10; flag route receive; flag policy; } description CLI_IP-NETSPEED-ENET_VL303; import CLI_IP-NETSPEED; export BGP-CLI-OUT-FULL; peer-as 28352; } neighbor 2804:11dc:c0:303::6 { description CLI_IP-NETSPEED-ENET_VL303; import CLI_IP-NETSPEED; export BGP-CLI-OUT-FULL; peer-as 28352; } neighbor 177.91.163.237 { description CLI_IP-STRATUS-MAP_VL359; import CLI_IP-STRATUS; export BGP-CLI-OUT-PARCIAL; peer-as 28187; } neighbor 2804:11dc:c0:359::2 { description CLI_IP-STRATUS-MAP_VL359; import CLI_IP-STRATUS; peer-as 28187; } neighbor 177.91.163.43 { description CLI_IP-GIGABYTE-TCF_ALGAR_VL316; import CLI_IP-GIGABYTE; export BGP-CLI-OUT-FULL; peer-as 262940; } neighbor 2804:11dc:c0:316::2 { description CLI_IP-GIGABYTE-TCF_ALGAR_VL316; import CLI_IP-GIGABYTE; peer-as 262940; } neighbor 2804:11dc:c0:125::2 { description CLI_IP-NETSPEED-MILBR_VL125; import CLI_IP-NETSPEED; peer-as 28352; } neighbor 2804:11dc:c0:307::2 { description CLI_IP-NETSPEED-ENET_VL307; import CLI_IP-NETSPEED; peer-as 28352; } neighbor 177.91.163.163 { description CLI_IP-BLZ-ALT_VL350; import CLI_IP-BLZ; export BGP-CLI-OUT-FULL; peer-as 52680; } neighbor 2804:11dc:c0:350::2 { description CLI_IP-BLZ-ALT_VL350; import CLI_IP-BLZ; export BGP-CLI-OUT-FULL; peer-as 52680; } neighbor 2804:11dc:c0:313::2 { export BGP-CLI-OUT-FULL; peer-as 269366; } neighbor 177.91.163.67 { description CLI_IP-ULTRANET-ENET_918; import CLI_IP-ULTRANET; export BGP-CLI-OUT-FULL; peer-as 262417; } neighbor 2804:11dc:c0:918::2 { description CLI_IP-ULTRANET-ENET_918; import CLI_IP-ULTRANET; export BGP-CLI-OUT-FULL; peer-as 262417; } neighbor 177.91.163.57 { description CLI_IP-SONIK-PIXALGAR_VL2164; import CLI_IP-SONIK; export BGP-CLI-OUT-FULL; peer-as 264491; } neighbor 2804:11dc:10:2164::2 { description CLI_IP-SONIK-PIXALGAR_VL2164; import CLI_IP-SONIK; peer-as 264491; } neighbor 177.91.163.23 { description CLI_IP-FLORESTAWII-HENET_VL394; import CLI_IP-FLORESTAWII; export BGP-CLI-OUT-FULL; peer-as 268753; } neighbor 2804:11dc:c0:394::2 { description CLI_IP-FLORESTAWII-HENET_VL394; import CLI_IP-FLORESTAWII; peer-as 268753; } neighbor 177.91.163.25 { description CLI_IP-NEOLINK-PIXENET_VL2798; import CLI_IP-NEOLINK; export BGP-CLI-OUT-FULL; peer-as 262777; } neighbor 2804:11dc:c0:2798::2 { description CLI_IP-NEOLINK-PIXENET_VL2798; import CLI_IP-NEOLINK; peer-as 262777; } neighbor 100.91.173.43 { description CLI_IP-ALT-VL340; import CLI_IP-ALT; export BGP-CLI-OUT-FULL; peer-as 53062; } neighbor 2804:11dc:c0:314::2 { description CLI_IP-ULTRANET-CTE-VIANET_VL314; import CLI_IP-CTE; export BGP-CLI-OUT-FULL; peer-as 53048; } neighbor 177.91.163.39 { description CLI_IP-UNE-PIXSP4_VL2326; import CLI_IP-UNE; export BGP-CLI-OUT-DEFAULT; peer-as 270766; } neighbor 2804:11dc:c0:343::2 { description CLI_IP-NETSPEED-NETMG_VL343; import CLI_IP-NETSPEED; peer-as 263676; } neighbor 177.91.163.47 { description CLI_IP-MEGANET-ASCENTYSP2_VL347; import CLI_IP-MEGANET; export BGP-CLI-OUT-FULL; peer-as 268171; } neighbor 2804:11dc:c0:347::2 { description CLI_IP-MEGANET-ASCENTYSP2_VL347; import CLI_IP-MEGANET; export BGP-CLI-OUT-FULL; peer-as 268171; } neighbor 177.91.163.81 { apply-groups-except TEMPLATE-BGP-CLIENTE; description CLI_IP-MEGATELECOM-VBD_VL380; import CLI_IP-MEGATELECOM; family inet { unicast { prefix-limit { maximum 5000; teardown { idle-timeout 10; } } } } export BGP-CLI-OUT-FULL; peer-as 22381; } neighbor 2804:11dc:c0:380::2 { apply-groups-except TEMPLATE-BGP-CLIENTE; description CLI_IP-MEGATELECOM-VBD_VL380; import CLI_IP-MEGATELECOM; family inet6 { unicast { prefix-limit { maximum 3000; teardown { idle-timeout 10; } } } } export BGP-CLI-OUT-FULL; peer-as 22381; } neighbor 177.91.163.11 { description CLI_IP-AXNET; import CLI_IP-AXNET; export BGP-CLI-OUT-FULL; peer-as 53095; } neighbor 2804:11dc:c0:308::2 { description CLI_IP-AXNET; import CLI_IP-AXNET; export BGP-CLI-OUT-FULL; peer-as 53095; } neighbor 177.91.163.33 { description CLI_IP-SIDYS-PIXCIRION_VL348; import CLI_IP-SIDYS; export BGP-CLI-OUT-FULL; peer-as 262649; } neighbor 2804:11dc:c0:348::2 { description CLI_IP-SIDYS-PIXCIRION_VL348; import CLI_IP-SIDYS; export BGP-CLI-OUT-FULL; peer-as 262649; } neighbor 2804:11dc:c0:2326::2 { description CLI_IP-UNE-PIXSP4_VL2326; import CLI_IP-UNE; export BGP-CLI-OUT-DEFAULT; peer-as 270766; } neighbor 177.91.163.55 { description CLI_IP-ULTRANET-CTE-VIANET_VL314; import CLI_IP-CTE; export BGP-CLI-OUT-FULL; peer-as 53048; } neighbor 177.91.163.53 { description CLI_IP-ULTRANET-CTE-CINBESA_VL315; import CLI_IP-CTE-CINBESA; export BGP-NEGA-TUDO; peer-as 53048; } neighbor 2804:11dc:40c0:390::2 { description CLI_IP-UNE-VL390; import CLI_IP-UNE; export BGP-CLI-OUT-DEFAULT; peer-as 270766; } neighbor 100.91.163.195 { description CLI_IP-NETSPEED-ENET_VL304; import CLI_IP-NETSPEED; export BGP-CLI-OUT-FULL; peer-as 28352; } neighbor 2804:11dc:c0:304::2 { description CLI_IP-NETSPEED-ENET_VL304; import CLI_IP-NETSPEED; export BGP-CLI-OUT-FULL; peer-as 28352; } neighbor 177.91.163.7 { description CLI_IP-ULTRANET-ENET-LGS_918; import CLI_IP-ULTRANET; export BGP-CLI-OUT-FULL; peer-as 262417; } neighbor 2804:11dc:c0:332::2 { description CLI_IP-ULTRANET-ENET-LGS_918; import CLI_IP-ULTRANET; export BGP-CLI-OUT-FULL; peer-as 262417; } neighbor 177.91.162.253 { import CLI-NEOLINK; export BGP-CLI-OUT-DEFAULT; peer-as 262777; } } group WAN { hold-time 30; neighbor 177.91.162.243 { description DURAND-VD; import BGP-IP-DURAND-in; export BGP-IP-DURAND-out; peer-as 22356; } neighbor 2804:11dc:4010:637::2 { description DURAND-VD; import BGP-IP-DURAND-in; export BGP-IP-DURAND-out; peer-as 22356; } neighbor 2804:11dc:4010:621::2 { description DURAND-PIX-ENET; metric-out 5; import BGP-IP-DURAND-in; export BGP-IP-DURAND_BKP-out; peer-as 22356; } neighbor 177.91.162.241 { description DURAND-PIX-ENET; metric-out 5; import BGP-NEGA-TUDO; export [ BGP-NEGA-TUDO BGP-IP-DURAND-out ]; peer-as 22356; } neighbor 89.221.42.204 { description WAN_IP-SPARKLE_PIXENET; import BGP-IP-SPARKLE-in; family inet { unicast; flow; } export BGP-IP-SPARKLE-out; peer-as 6762; } neighbor 2001:41a8:5200:2::211 { description WAN_IP-SPARKLE_PIXENET; import BGP-IP-SPARKLE-in; export BGP-IP-SPARKLE-out; peer-as 6762; } neighbor 189.1.35.20 { description DURAND-FLYS; import BGP-NEGA-TUDO; export BGP-IP-FLYS-out; peer-as 28663; } neighbor 2804:3e8:0:3b::1 { description DURAND-FLYS; import BGP-NEGA-TUDO; export BGP-IP-FLYS-out; peer-as 28663; } neighbor 172.17.16.6 { description WAN_DDOS-DURAND-VL2521; export BGP-NEGA-TUDO; peer-as 22356; } neighbor 172.16.0.30 { description WAN_IP-CDNSTAR-VL3674; import BGP-IP-CDNSTAR-in; export BGP-IP-CDNSTAR-out; peer-as 272713; } neighbor fc00:8780:1::30 { description WAN_IP-CDNSTAR-VL3674; import BGP-IP-CDNSTAR-in; export BGP-IP-CDNSTAR-out; peer-as 272713; } neighbor 213.140.51.162 { description WAN_IP-TELXIUS-PIXENET_VL1770; hold-time 90; import BGP-IP-TELXIUS-in; export BGP-IP-TELXIUS-out; peer-as 12956; } neighbor 2001:1498:1:966:1:0:0:991 { description WAN_IP-TELXIUS-PIXENET_VL1770; hold-time 90; import BGP-IP-TELXIUS-in; export BGP-IP-TELXIUS-out; peer-as 12956; } neighbor 213.140.32.112 { description WAN_IP-TELXIUS-PIXENET_BH_VL1770; multihop { ttl 255; } local-address 177.91.162.0; hold-time 90; import BGP-NEGA-TUDO; export BGP-IP-TELXIUS-BH-out; peer-as 12956; } neighbor 2001:1498:1::32:73 { description WAN_IP-TELXIUS-PIXENET_BH_VL1770; multihop { ttl 255; } local-address 2804:11dc::; hold-time 90; import BGP-NEGA-TUDO; export BGP-IP-TELXIUS-BH-out; peer-as 12956; } neighbor 189.125.156.33 { description WAN_IP-LEVEL3-VBD_VL100; import BGP-IP-LEVEL3-in; export BGP-IP-LEVEL3-out; peer-as 3356; } neighbor 2001:13b4:4000:2::481 { description WAN_IP-LEVEL3-VBD_VL100; import BGP-IP-LEVEL3-in; export BGP-IP-LEVEL3-out; peer-as 3356; } } group IBGP-V6 { type internal; local-address 2804:11dc:0000::0; export IBGP-OUT; cluster 177.91.162.0; peer-as 263444; neighbor 2804:11dc:0::2 { import IBGP-RS-in; } neighbor 2804:11dc:1000::2 { import IBGP-RS-in; } neighbor 2804:11dc:4000:: { description OX-SPO4-MX204; export IBGP-IP-OUT; } neighbor 2804:11dc:1000:: { description OX-SPO1-MX204; export IBGP-IP-OUT; } neighbor 2804:11dc:2000:: { export IBGP-IP-OUT; } neighbor 2804:11dc:8000:: { description OX-ASC-MX204; export IBGP-IP-OUT; } } group BOGON { multihop { ttl 255; } import BGP-FILTRO-BOGON-in; family inet { unicast; } family inet6 { unicast; } authentication-key "$9$PQ6Au0IRcyKMik.f6/levL7dbsgGUi"; ## SECRET-DATA export BGP-NEGA-TUDO; peer-as 65332; neighbor 38.229.6.20; neighbor 38.229.46.20; } group NETFLOW { type internal; local-address 177.91.162.0; import BGP-NEGA-TUDO; family inet { any; } family inet6 { any; } export BGP-NETFLOW-out; peer-as 263444; local-as 263444; inactive: neighbor 177.91.162.73; } group DECIX { type external; local-preference 255; hold-time 30; import BGP-DECIX-NY-in; export BGP-DECIX-NY-out; peer-as 63034; neighbor 206.82.104.254; neighbor 206.82.106.254; neighbor 2001:504:36::f63a:afc:1; neighbor 2001:504:36::f63a:afd:1; neighbor 206.82.104.24 { metric-out 1000; peer-as 714; } neighbor 2001:504:36::2ca:0:2 { metric-out 1000; peer-as 714; } neighbor 2001:504:36::2ca:0:1 { metric-out 1000; peer-as 714; } neighbor 206.82.104.65 { metric-out 1000; peer-as 714; } neighbor 206.82.104.89 { description WAN_IP-DECIX-ROBLOX-1; import BGP-DECIX-NY-in; export BGP-DECIX-NY-out; peer-as 22697; } neighbor 206.82.104.74 { description WAN_IP-DECIX-ROBLOX-1; import BGP-DECIX-NY-in; export BGP-DECIX-NY-out; peer-as 22697; } neighbor 2001:504:36::58a9:0:2 { description WAN_IP-DECIX-ROBLOX-2; import [ BGP-DECIX-NY-in BGP-NEGA-TUDO ]; export BGP-DECIX-NY-out; peer-as 22697; } neighbor 2001:504:36::58a9:0:1 { description WAN_IP-DECIX-ROBLOX-1; import [ BGP-DECIX-NY-in BGP-NEGA-TUDO ]; export BGP-DECIX-NY-out; peer-as 22697; } neighbor 206.82.104.68 { description CLOUDFLARE; import BGP-NEGA-TUDO; peer-as 13335; } neighbor 206.82.104.31 { description CLOUDFLARE; import BGP-NEGA-TUDO; peer-as 13335; } neighbor 2001:504:36::3417:0:1 { description CLOUDFLARE; import BGP-NEGA-TUDO; peer-as 13335; } neighbor 2001:504:36::3417:0:2 { description CLOUDFLARE; import BGP-NEGA-TUDO; peer-as 13335; } } group LG-V4 { local-address 177.91.162.0; export BGP-LG-out; remove-private { all; } neighbor 178.248.237.29 { description QRATOR; multihop { ttl 255; } import BGP-NEGA-TUDO; family inet { unicast; } family inet6 { unicast; } authentication-key "$9$Ej.ceMLxdbwgX7Giq.F3/9A0BREcr"; ## SECRET-DATA remove-private { all; } peer-as 197068; } neighbor 177.91.160.93 { export BGP-CLI-OUT-FULL; peer-as 263444; } neighbor 185.230.223.56 { description BGP.TOOLS; multihop { ttl 255; } import BGP-NEGA-TUDO; family inet { unicast; } family inet6 { unicast; } remove-private { all; } peer-as 212232; } } group LG-V6 { local-address 2804:11dc::0; export BGP-LG-out; remove-private; } group MAXIHOST { type external; hold-time 30; import BGP-PEER-MAXIHOST-in; export BGP-PEER-MAXIHOST-out; peer-as 262287; neighbor 10.255.0.161; neighbor 2804:391c:1::41; } group PEER { type external; neighbor 2001:4860:1:1:4:514:0:2 { description WAN_PEER-GOOGLE-L3_VL91; import BGP-PEER-GOOGLE-in; authentication-key "$9$KhfWX-YgJjkPoJGiqfn6M8LX7Vg4JUDkO1b2oaHkBIRSyK-Vw"; ## SECRET-DATA export BGP-PEER-GOOGLE-out; peer-as 15169; shutdown; } neighbor 72.14.242.205 { description WAN_PEER-GOOGLE-L3_VL91; hold-time 15; import BGP-PEER-GOOGLE-in; authentication-key "$9$N5Vs4Ujq5z6HqmTF/0Odbws2ajiqPfzylJDHkQzreK8LN4aZ"; ## SECRET-DATA export BGP-PEER-GOOGLE-out; peer-as 15169; shutdown; } } group route-consumers_v6 { type internal; hold-time 720; family inet6 { unicast; flow { no-validate flowspec-in; } } export KENTIK-OUT; cluster 177.91.162.0; neighbor 2620:129:1:2::1 { description Kentik-Detect; local-address 2804:11dc::; mtu-discovery; } } group route-consumers_v4 { type internal; hold-time 720; family inet { unicast; flow { no-validate flowspec-in; legacy-redirect-ip-action { receive; } } } family inet-vpn { unicast; } export KENTIK-OUT; cluster 177.91.162.0; neighbor 208.76.14.223 { description Kentik-Detect; local-address 177.91.162.0; mtu-discovery; } } inactive: traceoptions { file bgp.log size 5m files 50; flag state; } local-as 263444; } ldp { transport-address router-id; interface ae2.2562; interface ae2.10010; interface ae2.10020; interface ae2.10040; interface ae2.10080; interface ae2.11010; interface ae2.11020; interface ae2.11040; interface ae2.11080; interface lo0.0; neighbor 138.36.164.0; neighbor 177.91.160.0; session 138.36.164.5; } mpls { interface ae2.10020; interface ae2.10040; interface ae2.11020; interface ae2.11040; interface lo0.0; interface ae2.10010; interface ae2.11010; interface ae2.2562; interface ae2.10080; interface ae2.11080; } ospf { apply-groups BFD-OSPF; area 0.0.0.0 { interface lo0.0 { passive; } interface ae2.647 { interface-type p2p; metric 37; } interface irb.1688 { interface-type p2p; metric 38; } interface ae2.20 { interface-type p2p; metric 8; } interface lt-0/0/0.0 { interface-type p2p; metric 8; } interface ae2.50 { interface-type p2p; } interface lt-0/0/0.18 { interface-type p2p; } interface ae1.30 { interface-type p2p; metric 3; } interface ae2.2562 { interface-type p2p; metric 37; } interface irb.1659 { interface-type p2p; metric 38; } interface irb.2868 { interface-type p2p; metric 38; } interface irb.200; interface ae2.10010 { interface-type p2p; metric 34; } interface ae2.30 { interface-type p2p; metric 3; } interface ae2.11010 { interface-type p2p; metric 35; } interface ae2.11040 { interface-type p2p; metric 34; } interface ae2.10040 { interface-type p2p; metric 35; } interface ae2.10020 { interface-type p2p; metric 35; } interface ae2.11020 { interface-type p2p; metric 34; } interface ae2.10080 { interface-type p2p; metric 34; } interface ae2.11080 { interface-type p2p; metric 34; } interface ae2.10 { priority 1; } } export OSPF-out; } ospf3 { area 0.0.0.0 { interface lo0.0 { passive; } interface ae2.647 { interface-type p2p; metric 4; } interface irb.1688 { interface-type p2p; metric 3; } interface ae2.20 { interface-type p2p; metric 8; } interface ae1.30 { interface-type p2p; metric 3; } interface lt-0/0/0.0 { interface-type p2p; metric 8; } interface lt-0/0/0.18 { interface-type p2p; } interface ae4.2184 { metric 3; } interface irb.1659 { interface-type p2p; metric 7; } interface irb.200; interface ae2.50 { interface-type p2p; } interface ae2.2562 { interface-type p2p; metric 4; } interface irb.2868 { interface-type p2p; metric 4; } interface ae2.10010 { interface-type p2p; metric 34; } interface ae2.63 { metric 2; } interface ae2.10040 { interface-type p2p; metric 2; } interface ae2.11040 { interface-type p2p; metric 34; } interface ae2.10020 { interface-type p2p; metric 3; } interface ae2.11020 { interface-type p2p; metric 2; } interface ae2.11010 { interface-type p2p; metric 5; } interface ae2.10080 { interface-type p2p; metric 34; } interface ae2.11080 { interface-type p2p; metric 34; } } export OSPF-out; } lldp { port-id-subtype interface-name; port-description-type interface-description; interface all; } } bridge-domains { VL1659 { vlan-id 1659; interface ae2.1659; routing-interface irb.1659; } VL1688 { vlan-id 1688; interface ae2.1688; routing-interface irb.1688; } VL200 { vlan-id 200; interface ae2.200; routing-interface irb.200; } VL2868 { vlan-id 2868; interface ae2.2868; routing-interface irb.2868; } VL384 { vlan-id 384; interface ae2.384; routing-interface irb.384; } VL40 { vlan-id 40; interface ae2.40; routing-interface irb.40; } }