Action 1: Prevent propagation of incorrect routing information
We use prefix-filters which are part of the allowlist. These IPs include our and our customer IPs. All outbound networks announced go through this prefix-filter. These prefix-filters are generated via automation which checks valid signed ROAs.
Action 2: Prevent traffic with spoofed source IP addresses
Our VPC implementation blocks invalid source addresses to be dropped by other predefined ACLs which prevent malicious users and attackers.
Action 3: Facilitate global operational communication and coordination
We use an up to date peeringDB profile https://www.peeringdb.com/net/34728 for global coordination
Action 4: Facilitate validation of routing information on a global scale
We create appropriate ROAs for the all the prefixes we advertise which are RPKI valid and also maintain our as-set AS152129:AS-CUSTOMERS which includes all our downstream customers
Action 5: Encourage MANRS adoption
We ask customers to maintain a MANRS profile and also follow all MANRS principles.