AS213372Filtiwan Network Console

Personal research network · RIPE NCC · since 2020

Research driven.
Network fabric.

Filtiwan Network (AS213372) is a personal, non-profit autonomous system. We run an independent backbone to research next-generation programmable data planes and hybrid virtualization.

Network information Contact the NOC
AS213372 network fabric AS213372 runs on an IP fabric built from Arista, FortiGate and Huawei hardware, with an OSPFv2 and OSPFv3 underlay and an MP-BGP EVPN overlay over VXLAN. Five to nine Proxmox VE hosts run FRR and announce their /32 and /128 routes into the fabric. AS213372 Filtiwan Network · Reims IP fabric Arista · FortiGate · Huawei Overlay MP-BGP EVPN · VXLAN Underlay OSPFv2 · OSPFv3 Proxmox FRR Proxmox FRR Proxmox FRR Proxmox FRR Proxmox FRR 5–9 × Proxmox VE · routing on the host
ASN
213372
Prefixes
1 × v4 · 2 × v6
Upstreams
4 transit
RPKI
Valid
PoP
Reims, FR

01 Network

Network information

Public routing records, interconnection details and upstream connectivity for AS213372.

Registry RIPE NCC

Autonomous system

aut-num:
AS213372
as-name:
FILTIWANNETWORK
descr:
Filtiwan Network
as-set:
AS-FILTIWANNETWORK
created:
2020-04-14
source:
RIPE
Peering policy OpenPeeringDB net 23035

Origin AS213372 RPKI valid

Announced prefixes

PrefixAFIROA
150.241.67.0/24IPv4valid · /24
2a0e:b107:8e0::/44IPv6valid · ≤ /48
2a10:2f00:128::/48IPv6valid · /48

ROA column: validation state and maximum length.

Interconnection 4 upstreams

Upstream connectivity

Diverse IP transit from four upstream providers.

AS2027MilkyWan Association
AS198831GENIUSWEER SAS
AS20473The Constant Company (Vultr)
AS211615Netaris SAS
Point of presence Ikoula IKDC1 City Reims, France Role Primary interconnection facility

02 Engineering

Engineering & architecture

Our infrastructure is designed as a live laboratory, with strict isolation between the management, control and data planes.

OverlayMP-BGP EVPN

An MP-BGP EVPN control plane over VXLAN encapsulation, with IP prefixes carried as EVPN Type-5 routes.

EVPNVXLANType-5

UnderlayIGP

A distributed topology with OSPF as the underlay IGP, distributing loopback reachability.

OSPFv2OSPFv3

HostsRouting on the host

Proxmox VE nodes run FRRouting and take part in the routing domain directly, announcing /32 and /128 routes. No Layer 2 to stretch between hosts.

Proxmox VEFRR/32 · /128

HardwareMulti-vendor

A resilient multi-vendor IP fabric, integrated with the Proxmox compute nodes.

AristaFortiGateHuawei

Hardware In-house

Homemade PLCs

We build our own PLCs and run them on custom firmware. They drive the automation and supervision of our server room.

Custom firmwareModbusSNMP
The server room →

Software

Development stack

A diverse set of languages for core routing logic, automation and backend management.

C (core)PHPPythonSCL (PLC)

03 Facility

Our own server room

AS213372 runs on its own hardware: a small server room in Hauts-de-France, built for self-sufficiency and redundancy, from the power path to the routers.

Region
Hauts-de-France
Rack
1 · raised floor
Hypervisors
5–9 × Proxmox VE
Backup power
Diesel generator
UPS
Redundant

Power Automatic transfer

Power path

One utility feed, backed by a diesel generator. A DeepSea controller runs the automatic transfer; redundant UPS units bridge the switchover and feed remotely switchable APC PDUs.

Utility feedSingle grid supply
Diesel generatorStandby supply
ATSAutomatic transfer, DeepSea controller
UPSRedundant units
Switched PDUsAPC, remotely switchable
RackProxmox VE nodes, routers, firewalls

Compute 1 rack

Compute & storage

Five to nine hypervisors, deployed on the fly, sharing a hyper-converged Ceph pool, with a separate tier for cold data.

  • Hypervisors5 to 9 × Proxmox VE, on demand
  • CPU32–40 per node
  • Memory128 GB per node
  • Hot storageCeph on NVMe, every node
  • Cold storageiSCSI · 20+ TB

Network

Network & security

Routers are always deployed redundantly, and the firewalls run as a high-availability cluster.

  • RoutingHuawei · Arista, redundant
  • FirewallFortiGate · HA
  • Power controlAPC switched PDUs

Environment

Cooling & safety

Precision cooling, and a raised technical floor watched by sensors.

  • CoolingDaikin CRAC · R32
  • Raised floorTemperature · humidity · smoke
  • Fire detectionOptical sensor
  • VideoCameras on site

Automation In-house

Home-grown control

Waveshare and Minkels I/O modules, driven and supervised by our own code on Raspberry Pi, with Modbus and SNMP used throughout.

The generator transfer is handled on its own by a DeepSea controller, which monitors and manages the genset and reports back to the I/O.

ModbusSNMPRaspberry PiWaveshareMinkelsDeepSea

04 Research

Research & development

Working past the limits of the standard Linux networking stack, from the driver hook up to purpose-built unikernels.

R1 Active

XDP packet processing

XDP (eXpress Data Path) runs our code in the driver's receive path, before the kernel allocates an sk_buff. We use it for high-performance firewalling, DDoS mitigation and security enhancements.

Current experiments include low-level encryption offload, to cut the CPU cost of a secure proxy.

XDPeBPFDDoS mitigationEncryption offload

R2 Active

Custom control protocols

We develop our own control protocols that drive XDP maps, for finer control over network flows.

AF_XDPNetlinkClang/LLVM

R3 Porting

Network as a kernel

We are porting our network code to Unikraft unikernels. Network functions run as specialized, single-address-space machine images, without general-purpose OS overhead.

  • TechUnikraft / unikernel
  • GoalZero-overhead routing
UnikraftMicroVMPorting

R4 Upcoming release

Our code

We believe in open research. We are preparing to release our internal XDP hooks, control-plane utilities and automation scripts to the public.

Open sourceXDP hooksAutomation

05 Team

The team

The engineers maintaining the non-profit backbone.

Lead architect

Michael Poissonnier-Millard

Network Engineer @ Ikoula

Specialist in core routing, routing policies, and C/PHP development. Based in Reims.

C / PHPProtocolsRouting policy
LinkedIn profile

Ops & infrastructure

Dylan Logette

PLC Engineer @ IPTE

Multidisciplinary engineer (PLC, electronics, electrical) bringing a fresh perspective to infrastructure automation and maintenance.

PLC (SCL)ElectronicsAutomation
LinkedIn profile

06 Contact

NOC & contact

Please reference AS213372 in all correspondence.

Operations

Network operations center

Peering requests, routing issues and general enquiries.

Abuse

Report abuse

Spam, attacks or unlawful content originating from AS213372 address space.