Client interconnect and setup
The ISP’s colocated in the Sicily Hub in Palermo can request an interconnect between their device (router) and the assigned port on the IXPConnect peering platform.
The ports can be configured using the same criteria adopted by each federated IXP, with particular attention on the control and the limitation of the traffic, in order to avoid any impact of a local malfunctioning to the entire IXPConnect infrastructure.
- Each VLAN exported by the federated IXP’s to Palermo will be made visible by means of VLAN tagging (802.1q) on the client port. Each federated IXP will assign to his remote user an IP address belonging to its originating VLAN(s).
- An ACL will be configured on the assigned port in order to allow only the ether-types for IP(v4/v6) and ARP traffic. A limitation on inbound broadcast traffic will also be imposed.
- The port will be also configured with a port-security to allow traffic to originate from a single authorized MAC address per VLAN.
- In case a customer buys a nominal capacity that is lower than the full port physical capacity, a policing will be applied to the inbound traffic with rate limiting equal to the nominal capacity requested plus a 10% excess margin, above which the traffic will be rejected (drop/discard