Page MenuHomePhabricator

Move AMS-IX port to 802.1q tagged and get "private vlan" added
Closed, ResolvedPublic


We will connect to Nawas to test/use their DDoS mitigation service over our existing physical connection at AMS-IX in Amsterdam.

This effectively means connecting to two separate layer-2 networks over the same port, which involves the use of Vlan / 802.1q tags on the port.

This task will track 2 actions:

  1. Request AMS-IX change our connection from current untagged mode to use a vlan-based handoff.
    • This will need to be a co-ordinated change with us and AMS-IX engineers, and will involve some interruption during the change.
  2. Once complete we can request a new private interconnect (second Vlan) from AMS-IX on the same port to connect to NaWas.
    • Following this we can provision the service from Nawas for testing.

Related Objects


Event Timeline

AMS-IX NOC emailed to schedule the change, with vlan 380 for IX and 381 for NaWas.

joanna_borun changed the task status from Open to In Progress.Sep 21 2021, 1:32 PM

Mentioned in SAL (#wikimedia-operations) [2021-09-21T13:52:34Z] <XioNoX> disable AMS-IX peering sessions for maintenance - T291407

Updated Netbox, resulting diff:

[edit interfaces ae2]
+   flexible-vlan-tagging;
+   encapsulation flexible-ethernet-services;
[edit interfaces ae2]
-    unit 0 {
-        family inet {
-            address;
-        }
-        family inet6 {
-            address 2001:7f8:1::a501:4907:1/64;
-        }
-    }
+    unit 380 {
+        description "Global peering vlan";
+        vlan-id 380;
+        family inet {
+            address;
+        }
+        family inet6 {
+            address 2001:7f8:1::a501:4907:1/64;
+        }
+    }

Mentioned in SAL (#wikimedia-operations) [2021-09-21T14:17:25Z] <XioNoX> temporarily downpref Telia-Deutsch Telekom to not saturate Telia transit - T291407

Mentioned in SAL (#wikimedia-operations) [2021-09-21T14:34:59Z] <XioNoX> re-enable AMS-IX peering sessions - T291407