IP transit with a grip on your traffic.
The full routing table or a default, over IPv4 and IPv6, on our own network AS211588. With automatic DDoS mitigation at our edge and a customer dashboard where you follow your BGP sessions, attacks, prefix lists and commit yourself. From 1GE to 100GE.
IP transit with us fits if you:
- Have your own AS number and IP space, or are about to request them
- Run services where a DDoS attack costs revenue or customers straight away
- Want to multihome alongside another upstream
- Want to see what your traffic does yourself, without having to e-mail for it
No options you buy later.
This comes with every transit connection, from day one.
What you can see and arrange yourself.
Every transit customer gets access to our customer dashboard. Not a report afterwards, but the same data we work with. The examples below were made with demo data and show the Dutch interface; the dashboard is also available in English.
Your BGP sessions and their status
Per session your address and ours, the prefix limit, BFD and MD5, and whether it is up. Handy during set-up, and when you want to know whether a problem is on your side or ours.
Every DDoS attack, with what reached you
Per attack the target, the vectors, the origin and the measures taken automatically. The column that makes the difference: how much of the attack reached your port.
How to follow an attack →Prefix lists you approve yourself
If your AS-SET changes a lot, you see the difference side by side and approve the new version. Until then the current version stays on our routers, and you get a mail when a version is waiting for you.
From intake to session.
- IntakeAS number, AS-SET, location and port. We check your registrations in the IRR, PeeringDB and RPKI before anything reaches a router.
- Filter and policyYour prefix list is built from your AS-SET, and your import policy follows a fixed standard. It is on the technical page.
- SessionWe set up the session and check that it comes up and accepts your routes. The details and the status are then in your dashboard.
- ChangesChanges on our routers come with an automatic fallback: if your session does not stay healthy, the change rolls itself back.
Technology that earns trust.
- Deep knowledge of routing, BGP and network infrastructure
- Direct contact with engineers
- Solutions tailored to real-world practice and usage
- Integration with colocation and network architecture
IP transit at Xyphen IT is about control, speed and continuity. Availability, coverage and how we handle an incident are set out in our written SLA — we walk through that with the proposal.
“Yvan from Xyphen IT is technically highly skilled and clearly knows what he is talking about. He responds quickly, thinks along with us and can effortlessly step in on a wide range of technical questions, from Grafana dashboards and BGP anycast setups to custom (D)DoS filtering. He has already bailed us out several times!”
Frequently asked questions about IP transit
What is IP transit and when do I need it?
IP transit is the connection through which your network reaches the entire internet: you set up a BGP session to our network and receive the full table. It is meant for organisations with their own ASN or network that need low latency, stable performance and scalable capacity, or that want to keep control over how their traffic flows.
On which network does Xyphen IT deliver IP transit?
On AS211588, our own network. The optical layer, the routers and the NOC are ours: leased dark fibre lit with our own DWDM equipment, routing on Arista, Juniper and Huawei, and an EVPN/VXLAN backbone between our locations. We are present at internet exchanges such as NL-ix, SPEED-IX, Frys-IX and ERA-IX. We resolve incidents ourselves, without an intermediary.
Which port speeds and protocols are supported?
Delivery from 1GE up to 100GE. IPv4 and IPv6 dual-stack on the same session or separated, however your network is set up. Every session comes with BFD for fast failover and RFC 8092 large communities for traffic engineering. An MD5 key on the session is also shown in your dashboard; TCP-AO we enable on request. Max-prefix limits are agreed during the intake.
How quickly is a DDoS attack filtered?
In practice we often see mitigation become active within seconds, but that is not a guarantee: it depends on the shape and size of the attack. Per attack the dashboard shows when which measure took effect, and what still reached you. Baseline protection comes with every transit connection; extended, tailored DDoS protection is available on request.
What do I see in the customer dashboard?
Your BGP sessions and their status, your prefix lists with the versions waiting for approval, your IP addresses and reverse DNS, DDoS attacks with their course and measures, and your transit traffic against your commit. You give colleagues access with exactly the rights they need.
Can I combine IP transit with colocation?
Yes. IP transit connects directly to our colocation and to your existing network architecture, so rack, power and connectivity form one managed whole. If you do not have your own IPv6 space yet, you can request an IPv6 prefix from us as a transit customer.
How does implementation work?
After the intake we check your registrations in the IRR, PeeringDB and RPKI, build your prefix list from your AS-SET and set up the session with a fixed import policy. You then see the details and the status in the dashboard. Availability, coverage and incident handling are set out in our written SLA, which we walk through with the proposal.
Can you set it up for me?
Yes. You can set up the session yourself, but we can also take care of the entire configuration for you. You keep full autonomy over your own network and ASN, while the configuration is done by engineers who do this every day. If you want to manage it yourself afterwards, you can also follow a training with us.
Get a network that moves with you.
Whether it's about growth, optimisation or stability — we make sure IP transit contributes to performance and clarity.