Skip to content

Commit 05d5b30

Browse files
Merge pull request #269465 from halkazwini/ip-policy
Internet Peering: Freshness: Peering policy
2 parents d3d729f + a576c6f commit 05d5b30

File tree

1 file changed

+49
-43
lines changed

1 file changed

+49
-43
lines changed

articles/internet-peering/policy.md

Lines changed: 49 additions & 43 deletions
Original file line numberDiff line numberDiff line change
@@ -2,69 +2,75 @@
22
title: Peering policy
33
titleSuffix: Internet Peering
44
description: Learn about Microsoft's peering policy.
5-
services: internet-peering
65
author: halkazwini
7-
ms.service: internet-peering
8-
ms.topic: conceptual
9-
ms.date: 03/08/2023
106
ms.author: halkazwini
11-
ms.custom: template-concept, engagement-fy23
7+
ms.service: internet-peering
8+
ms.topic: concept-article
9+
ms.date: 03/19/2024
10+
11+
#CustomerIntent: As a network architect, I want know Microsoft's peering policy and requirements so that I can design and create a peering with Microsoft.
1212
---
1313

1414
# Peering policy
15-
Microsoft maintains a selective peering policy designed to ensure the best possible customer experience backed by industry standards and best practices, scaling for future demand and strategic placement of peering. As such, Microsoft reserves the right to make exceptions to the policy as deemed necessary. Microsoft's general requirements from your network are explained in the following sections. These requirements are applicable to both Direct peering and Exchange peering requests.
15+
16+
Microsoft maintains a selective peering policy designed to ensure the best possible customer experience backed by industry standards and best practices, scaling for future demand and strategic placement of peering. As such, Microsoft reserves the right to make exceptions to the policy as deemed necessary.
17+
18+
In this article, you learn about Microsoft's general requirements from your network. These requirements are applicable to both Direct peering and Exchange peering requests.
1619

1720
## Technical requirements
1821

19-
* A fully redundant network with sufficient capacity to exchange traffic without congestion.
20-
* Peer has a publicly routable Autonomous System Number (ASN).
21-
* Both IPv4 and IPv6 are supported and Microsoft expects to establish sessions of both types in each peering location.
22-
* MD5 isn't supported.
23-
* **ASN details:**
24-
25-
* Microsoft manages AS8075 and other ASNs as described in AS-SET RADb:AS-MICROSOFT.
26-
* All parties peering with Microsoft agree not to accept routes from AS12076 (ExpressRoute) under any circumstances and should filter out AS12076 on all peers.
27-
28-
* **Routing policy:**
29-
* Peer has at least one publicly routable /24 prefix.
30-
* Microsoft overwrites received Multi Exit Discriminators (MED).
31-
* Microsoft prefers to receive BGP community tags from peers to indicate route origination.
32-
* We recommend peers set a max-prefix of 2000 (IPv4) and 500 (IPv6) routes on peering sessions with Microsoft.
33-
* Unless specifically agreed upon beforehand, peers are expected to announce consistent routes in all locations where they peer with Microsoft.
34-
* In general, Microsoft advertises all Microsoft routes, with some regional specifics as appropriate. All prefixes are properly registered within the RADb.
35-
* Microsoft also announces 3rd party address space under “Bring Your Own IP” and “Bring Your Own ASN” products. BYOIP prefixes are all properly registered as AS8075, and BYOASN ASNs will be included in AS-SET AS-MICROSOFT.
36-
* Neither party will establish a static route, a route of last resort, or otherwise send traffic to the other party for a route not announced via BGP.
37-
* Peers are required to register their routes in a public Internet Routing Registry (IRR) database, for the purposes of filtering, and keep this information up to date.
38-
* Peers adhere to MANRS industry standards for route security. At its sole discretion, Microsoft may choose:
22+
- A fully redundant network with sufficient capacity to exchange traffic without congestion.
23+
- Peer has a publicly routable Autonomous System Number (ASN).
24+
- Both IPv4 and IPv6 are supported and Microsoft expects to establish sessions of both types in each peering location.
25+
- MD5 isn't supported.
26+
27+
- **ASN details:**
28+
- Microsoft manages AS8075 and other ASNs as described in AS-SET RADb:AS-MICROSOFT.
29+
- All parties peering with Microsoft agree not to accept routes from AS12076 (ExpressRoute) under any circumstances and should filter out AS12076 on all peers.
30+
31+
- **Routing policy:**
32+
- Peer has at least one publicly routable /24 prefix.
33+
- Microsoft overwrites received Multi Exit Discriminators (MED).
34+
- Microsoft prefers to receive BGP community tags from peers to indicate route origination.
35+
- We recommend peers set a max-prefix of 2000 (IPv4) and 500 (IPv6) routes on peering sessions with Microsoft.
36+
- Unless specifically agreed upon beforehand, peers are expected to announce consistent routes in all locations where they peer with Microsoft.
37+
- In general, Microsoft advertises all Microsoft routes, with some regional specifics as appropriate. All prefixes are properly registered within the RADb.
38+
- Microsoft also announces third party address space under “Bring Your Own IP” and “Bring Your Own ASN” products. BYOIP prefixes are all properly registered as AS8075, and BYOASN ASNs will be included in AS-SET AS-MICROSOFT.
39+
- Neither party will establish a static route, a route of last resort, or otherwise send traffic to the other party for a route not announced via BGP.
40+
- Peers are required to register their routes in a public Internet Routing Registry (IRR) database, for the purposes of filtering, and keep this information up to date.
41+
- Peers adhere to MANRS industry standards for route security. At its sole discretion, Microsoft may choose:
3942
1. not to establish peering with companies that don't have routes signed and registered
4043
1. to remove invalid RPKI routes
4144
1. not to accept routes from established peers that aren't registered and signed
4245

4346
## Operational requirements
44-
* A fully staffed 24x7 Network Operations Center (NOC) that's capable of assisting in the resolution of all technical and performance issues, security violations, denial of service attacks, or any other abuse originating within the peer or their customers.
45-
* Peers are expected to have a complete and up-to-date profile on [PeeringDB](https://www.peeringdb.com) including a 24x7 NOC email from corporate domain and phone number. We use this information to validate the peer's details such as NOC information, technical contact information, and their presence at the peering facilities etc. Personal Yahoo, Gmail, and Hotmail accounts aren't accepted.
47+
48+
- A fully staffed 24x7 Network Operations Center (NOC) that's capable of assisting in the resolution of all technical and performance issues, security violations, denial of service attacks, or any other abuse originating within the peer or their customers.
49+
50+
- Peers are expected to have a complete and up-to-date profile on [PeeringDB](https://www.peeringdb.com) including a 24x7 NOC email from corporate domain and phone number. We use this information to validate the peer's details such as NOC information, technical contact information, and their presence at the peering facilities etc. Personal Yahoo, Gmail, and Hotmail accounts aren't accepted.
4651

4752
## Physical connection requirements
48-
* The locations where you can connect with Microsoft for Direct peering or Exchange peering are listed in [PeeringDB](https://www.peeringdb.com/net/694)
4953

50-
* **Exchange peering:**
51-
* Peers are expected to have at minimum a 10 Gbps connection to the exchange.
52-
* Peers are expected to upgrade their ports when peak utilization exceeds 50%.
53-
* Microsoft encourages peers to maintain diverse connectivity to exchange to support failover scenarios.
54+
- The locations where you can connect with Microsoft for Direct peering or Exchange peering are listed in [PeeringDB](https://www.peeringdb.com/net/694)
5455

55-
* **Direct peering:**
56-
* Interconnection must be over 100 Gbps single-mode fiber.
57-
* Microsoft only establishes Direct peering with internet service providers (ISPs) or network service providers (NSPs).
58-
* Peers are expected to upgrade their ports when peak utilization exceeds 50% and maintain diverse capacity in each metro, either within a single location or across several locations in a metro.
59-
* Each Direct peering consists of two connections to two Microsoft edge routers from the peer edge routers. Microsoft requires dual BGP sessions across these connections. The peer may choose not to deploy redundant devices at their end.
56+
- **Exchange peering:**
57+
- Peers are expected to have at minimum a 10-Gbps connection to the exchange.
58+
- Peers are expected to upgrade their ports when peak utilization exceeds 50%.
59+
- Microsoft encourages peers to maintain diverse connectivity to exchange to support failover scenarios.
6060

61+
- **Direct peering:**
62+
- Interconnection must be over 100-Gbps single-mode fiber.
63+
- Microsoft only establishes Direct peering with internet service providers (ISPs) or network service providers (NSPs).
64+
- Peers are expected to upgrade their ports when peak utilization exceeds 50% and maintain diverse capacity in each metro, either within a single location or across several locations in a metro.
65+
- Each Direct peering consists of two connections to two Microsoft edge routers from the peer edge routers. Microsoft requires dual BGP sessions across these connections. The peer may choose not to deploy redundant devices at their end.
6166

6267
## Traffic requirements
6368

64-
* Peers over Exchange peering must have at minimum 500 MB of traffic and less than 2 GB. For traffic exceeding 2 GB, Direct peering should be established.
65-
* Microsoft requires at minimum 2 GB for direct peering. Each mutually agreed to peering location must support failover that ensures peering remains localized during a failover scenario.
69+
- Peers over Exchange peering must have at minimum 500 MB of traffic and less than 2 GB. For traffic exceeding 2 GB, Direct peering should be established.
70+
71+
- Microsoft requires at minimum 2 GB for direct peering. Each mutually agreed to peering location must support failover that ensures peering remains localized during a failover scenario.
6672

67-
## Next steps
73+
## Related content
6874

69-
* To learn how to set up Direct peering with Microsoft, see [Direct peering walkthrough](walkthrough-direct-all.md).
70-
* To learn how to set up Exchange peering with Microsoft, see [Exchange peering walkthrough](walkthrough-exchange-all.md).
75+
- To learn how to set up Direct peering with Microsoft, see [Direct peering walkthrough](walkthrough-direct-all.md).
76+
- To learn how to set up Exchange peering with Microsoft, see [Exchange peering walkthrough](walkthrough-exchange-all.md).

0 commit comments

Comments
 (0)