Business Services
IP TRANSIT
SERVICES
|
QUALITY
FAST
SECURE
AFFORDABLE
|
|
0
DATA CENTRES
Point of Presence
2
PERCENT
Availabity
0
MILLION EYEBALLS
Customer Base
0
Gbps
Broadband Connections
5 steps to level up
What to expect once you submit the 'contact us' form?
|
1
Introductory conversation
with our account manager |
Proposal
Creation 2
|
3
Future cooperation discussion
|
Contract
Signing 4
|
5
Implementation
and operational phase |
Service
locations
We operate PoPs in the major international datacentres in Austria, Belgium, France, Germany, Ireland, the Netherlands, Poland, Italy, Switzerland, the UK and the USA.
Or take a look at the map overview opposite.
|
-
What is a Tier-1 network?
-
The internet consists of a set of networks, both large and small. At the lowest level there are local or national networks, the so called Tier-3 networks. When these networks peer up they can transit data beyond their own networks. A level higher – Tier 2, is often a regional network. On top of this hierarchy you will find Tier-1 networks. These are truly global networks, with access to the international internet backbone.
Liberty Global is one of 15 true Tier-1 suppliers. With our IP Transit Services we offer direct access to the international internet backbone, giving our customers access to a global, high quality network. -
How can you access the upstream network of a Tier-1 IP transit provider?
-
Smaller networks often work together on an equal basis. They give each other access to their networks on a no-charge basis,
because both parties profit equally from this sharing of networks. This is called IP peering. However, there are limitations to IP peering. The data needs of both parties need to be equal.
What if you need access beyond the network of your peering partner? Then you probably need to step up to IP transit and start buying data transit from a Tier-1 network provider. These providers can give you access to a global network. As the networks connected with these Tier-1 networks become available; they become known as upstream networks. -
What are Autonomous System Numbers (ASNs)?
-
The internet works with networks called autonomous systems. Each system has its own unique number, by which it is identified, the so called ASN: autonomous system number. With this number a network advertises the IP addresses that are linked within that network.
Our network (AS6830) has private peering relationships with all the major ASNs who are directly connected to us ensuring the fastest and shortest routes for your traffic. -
What are the 6 recommendations for securing routing and signaling?
-
1. Understand current Border Gateway Protocol (BGP) peering relationships and seek to collaborate with peers to better identify BGP hijacks and be able to effectively respond.
2. Strongly consider joining the Mutually Agreed Norms for Routing Security (MANRS) project and implementing MANRS requirements.
3. Implement BCP38 (or similar) ingress filtering to reduce the ease with which some types of DDoS can be undertaken and the value of infrastructure to attackers.
4. Appropriately manage access to and use of protocols such as DNS which can be used to enact DDoS attacks.
5. Raise awareness of the security vulnerabilities of SS7 and implement relevant solutions (e.g. the GSMA SS7 filtering standard) to better protect customers. Ensure that the next generation of signalling is better secured.
6. Enable The Domain Name System Security Extensions (DNSSEC) validation in resolvers and encourage customers to DNSSEC-sign the zones for which they are authoritative. -
How does RPKI (Resource Public Key Infrastructure) enhance Network Security?
-
Internet routing works with networks called autonomous systems. Each network has its own
unique number by which it is identified, the so called ASN: autonomous system number. With
this number a network advertises the IP addresses that are linked within that network.
How can you be sure that this information is true? The IETF (Internet Engineering Task Force) has worked to develop the RPKI, Resource Public Key Infrastructure, which is a way to digitally sign and validate route announcements. In other words, proof that the IP addresses you announce are indeed the ones you are allowed to announce, attested by the owner of the IP address.
The IP addresses are signed off with a Route Origin Authorization (ROA) via the Regional Internet Registry (RIR, in Europe this is RIPE) that originally assigned the IP addresses to the owner. It seems easy but in reality it isn’t.
As a Tier 1 provider Liberty Global works according to these standards within its own network. All IP addresses we use on our network and for our customers are RPKI signed. We strongly advise any of our BGP customers that maintain their own IP addresses, to sign their prefixes with ROA’s to protect against BGP hijacks when connecting to our network. RPKI protects BGP routing against both intentional, but also unintentional misconfiguration BGP hijacks. -
What does MANRS Compliancy mean?
-
MANRS stands for Mutually Agreed Norms for Routing Security. It is a set of principles and
actions that the global internet society has set up to further secure the internet and
prevent routing failures. This is done to protect both consumers and companies and make sure
the internet keeps on being the place where information is safely shared, worldwide.
The internet is a collection of networks. Its security depends on the collaboration of these networks to ban malicious parties and to make it very hard for them to be successful. Working together is the key. Liberty Global takes its role very seriously. It not only applies RPKI and BCP38 within its own very large network, but is one of the first providers to be fully MANRS compliant.