bird4.conf

router id 192.0.2.2;
define rs_as = 999;

log "/var/log/bird.log" all;
log syslog all;
debug protocols { states, routes, filters, interfaces, events };

protocol device {};

table master sorted;



# ---------------------------------------------------------
# RPKI

roa table RPKI {
};

# RPKI ROAs used as route objects
define RPKI_ROAs_as_route_objects_AS10745 = [
	192.136.136.0/24, 	192.149.252.0/24, 	199.43.0.0/24
];
define RPKI_ROAs_as_route_objects_AS3333 = [
	193.0.24.0/24, 	193.0.12.0/23, 	193.0.18.0/23, 	193.0.0.0/21,
	193.0.22.0/23, 	193.0.10.0/23, 	193.0.20.0/23, 	193.0.24.0/22{22,26}
];


# ---------------------------------------------------------
# COMMON

# This function returns True if 'net' is a bogon prefix
# or falls within a bogon prefix.
function prefix_is_bogon()
prefix set bogons;
{
	bogons = [
		# Default route
		0.0.0.0/0,

		# IANA - Local Identification
		0.0.0.0/8{8,32},

		# RFC 1918 - Private Use
		10.0.0.0/8{8,32},

		# IANA - Loopback
		127.0.0.0/8{8,32},

		# RFC 3927 - Link Local
		169.254.0.0/16{16,32},

		# RFC 1918 - Private Use
		172.16.0.0/12{12,32},

		# RFC 5737 - TEST-NET-1
		192.0.2.0/24{24,32},

		# RFC 1918 - Private Use
		192.168.0.0/16{16,32},

		# RFC 2544 - Network Interconnect Device Benchmark Testing
		198.18.0.0/15{15,32},

		# RFC 5737 - TEST-NET-2
		198.51.100.0/24{24,32},

		# RFC 5737 - TEST-NET-3
		203.0.113.0/24{24,32},

		# RFC 5771 - Multcast (formerly Class D)
		224.0.0.0/3{3,32},

		# RFC 6598 - Shared Address Space
		100.64.0.0/10{10,32}
	];

	if net ~ bogons then return true;
	return false;
}

# This function returns True if 'net' falls within a
# prefix contained in the global blacklist (for example,
# local networks)
function prefix_is_in_global_blacklist()
prefix set global_blacklist;
{
	global_blacklist = [
		# Local network
		192.0.2.0/24{24,32}
	];

	if net ~ global_blacklist then return true;
	return false;
}

# This function returns True if the length of 'net' prefix
# falls within the range 'min'-'max' (included).
function prefix_len_is_valid (int pref_len_min; int pref_len_max) {
	if net.len < pref_len_min then return false;
	if net.len > pref_len_max then return false;
	return true;
}

# This function returns True if the AS_PATH contains one or
# more private/reserved ASN.
function as_path_contains_invalid_asn() 
int set invalid_asns;
{
	# http://www.iana.org/assignments/as-numbers/as-numbers.xhtml
	invalid_asns = [
		# 16-bit
		0,			# Reserved. RFC7607
		23456,			# AS_TRANS. RFC6793
		64496..64511,		# Reserved for use in documentation and sample code. RFC5398
		64512..65534,		# Reserved for Private Use. RFC6996
		65535,			# Reserved. RFC7300

		# 32-bit
		65536..65551,		# Reserved for use in documentation and sample code. RFC5398
		65552..131071,		# Reserved.
		4200000000..4294967294, # Reserved for Private Use. [RFC6996]
		4294967295		# Reserved. RFC7300
	];
	return bgp_path ~ invalid_asns;
}

# This function returns True if the AS_PATH contains one or
# more transit-free ASNs in a position different from the first.
function as_path_contains_transit_free_asn()
int set transit_free_asns;
{
	transit_free_asns = [
		174, 		209, 		286, 		701, 		1239, 
		1299, 		2828, 		2914, 		3257, 		3320, 
		3356, 		3549, 		5511, 		6453, 		6461, 
		6762, 		6830, 		7018, 		12956
	];
	if bgp_path.first ~ transit_free_asns then
		return false;
	return bgp_path ~ transit_free_asns;
}

# This function returns the RTT measured for the peer given in client_ip.
# If the RTT is not available it returns 0.
function get_peer_rtt(ip client_ip) {
	case client_ip {
		192.0.2.11 : return 604; # 604.0
		192.0.2.22 : return 123; # 123.0
	}

	return 0;
}

# This function scrubs BGP communities used by the route server
# for signaling purpose toward its clients. (RFC7454, Section 11)
# It must be applied on routes entering the route server.
function scrub_communities_in() {
	# origin_not_present_in_as_set
        bgp_community.delete([(65530, 0)]);
        bgp_large_community.delete([(999, 65530, 0)]);

	# origin_present_in_as_set
        bgp_community.delete([(65530, 1)]);
        bgp_large_community.delete([(999, 65530, 1)]);

	# prefix_validated_via_rpki_roas
        bgp_community.delete([(65530, 2)]);
        bgp_large_community.delete([(999, 65530, 2)]);

	# route_validated_via_white_list
        bgp_community.delete([(65530, 3)]);
        bgp_large_community.delete([(999, 65530, 3)]);

	# from_europe
        bgp_community.delete([(65534, 1)]);
        bgp_large_community.delete([(999, 65534, 1)]);
        bgp_ext_community.delete([(rt, 65534, 1)]);

	# from_usa
        bgp_community.delete([(65534, 2)]);
        bgp_large_community.delete([(999, 65534, 2)]);
        bgp_ext_community.delete([(rt, 65534, 2)]);

}

# This function scrubs BGP communities used by clients to instruct
# the route server to perform some actions.
# It must be applied on routes leaving the route server.
function scrub_communities_out() {
	# add_noadvertise_to_any
        bgp_community.delete([(65508, 999)]);
        bgp_large_community.delete([(999, 65508, 999)]);
        bgp_ext_community.delete([(rt, 65508, 999)]);

	# add_noadvertise_to_peer
        bgp_community.delete([(65510, 1..64511)]);
        bgp_large_community.delete([(999, 65510, 1..64511)]);
        bgp_large_community.delete([(999, 65510, 131072..4199999999)]);
        bgp_ext_community.delete([(rt, 65510, 1..64511)]);
        bgp_ext_community.delete([(rt, 65510, 131072..4199999999)]);

	# add_noexport_to_any
        bgp_community.delete([(65507, 999)]);
        bgp_large_community.delete([(999, 65507, 999)]);
        bgp_ext_community.delete([(rt, 65507, 999)]);

	# add_noexport_to_peer
        bgp_community.delete([(65509, 1..64511)]);
        bgp_large_community.delete([(999, 65509, 1..64511)]);
        bgp_large_community.delete([(999, 65509, 131072..4199999999)]);
        bgp_ext_community.delete([(rt, 65509, 1..64511)]);
        bgp_ext_community.delete([(rt, 65509, 131072..4199999999)]);

	# announce_to_peer
        bgp_community.delete([(999, 1..64511)]);
        bgp_large_community.delete([(999, 999, 1..64511)]);
        bgp_large_community.delete([(999, 999, 131072..4199999999)]);
        bgp_ext_community.delete([(rt, 999, 1..64511)]);
        bgp_ext_community.delete([(rt, 999, 131072..4199999999)]);

	# announce_to_peers_with_rtt_higher_than
        bgp_community.delete([(64514, *)]);
        bgp_large_community.delete([(999, 64514, *)]);
        bgp_ext_community.delete([(rt, 64514, *)]);

	# announce_to_peers_with_rtt_lower_than
        bgp_community.delete([(64513, *)]);
        bgp_large_community.delete([(999, 64513, *)]);
        bgp_ext_community.delete([(rt, 64513, *)]);

	# blackholing
        bgp_community.delete([(65534, 0)]);
        bgp_large_community.delete([(999, 666, 0)]);

	# do_not_announce_to_any
        bgp_community.delete([(0, 999)]);
        bgp_large_community.delete([(999, 0, 999)]);
        bgp_ext_community.delete([(rt, 0, 999)]);

	# do_not_announce_to_peer
        bgp_community.delete([(0, 1..64511)]);
        bgp_large_community.delete([(999, 0, 1..64511)]);
        bgp_large_community.delete([(999, 0, 131072..4199999999)]);
        bgp_ext_community.delete([(rt, 0, 1..64511)]);
        bgp_ext_community.delete([(rt, 0, 131072..4199999999)]);

	# do_not_announce_to_peers_with_rtt_higher_than
        bgp_community.delete([(64512, *)]);
        bgp_large_community.delete([(999, 64512, *)]);
        bgp_ext_community.delete([(rt, 64512, *)]);

	# do_not_announce_to_peers_with_rtt_lower_than
        bgp_community.delete([(64511, *)]);
        bgp_large_community.delete([(999, 64511, *)]);
        bgp_ext_community.delete([(rt, 64511, *)]);

	# prepend_once_to_any
        bgp_community.delete([(65501, 999)]);
        bgp_large_community.delete([(999, 65501, 999)]);
        bgp_ext_community.delete([(rt, 65501, 999)]);

	# prepend_once_to_peer
        bgp_community.delete([(65504, 1..64511)]);
        bgp_large_community.delete([(999, 65504, 1..64511)]);
        bgp_large_community.delete([(999, 65504, 131072..4199999999)]);
        bgp_ext_community.delete([(rt, 65504, 1..64511)]);
        bgp_ext_community.delete([(rt, 65504, 131072..4199999999)]);

	# prepend_once_to_peers_with_rtt_higher_than
        bgp_community.delete([(64518, *)]);
        bgp_large_community.delete([(999, 64518, *)]);
        bgp_ext_community.delete([(rt, 64518, *)]);

	# prepend_once_to_peers_with_rtt_lower_than
        bgp_community.delete([(64515, *)]);
        bgp_large_community.delete([(999, 64515, *)]);
        bgp_ext_community.delete([(rt, 64515, *)]);

	# prepend_thrice_to_any
        bgp_community.delete([(65503, 999)]);
        bgp_large_community.delete([(999, 65503, 999)]);
        bgp_ext_community.delete([(rt, 65503, 999)]);

	# prepend_thrice_to_peer
        bgp_community.delete([(65506, 1..64511)]);
        bgp_large_community.delete([(999, 65506, 1..64511)]);
        bgp_large_community.delete([(999, 65506, 131072..4199999999)]);
        bgp_ext_community.delete([(rt, 65506, 1..64511)]);
        bgp_ext_community.delete([(rt, 65506, 131072..4199999999)]);

	# prepend_thrice_to_peers_with_rtt_higher_than
        bgp_community.delete([(64520, *)]);
        bgp_large_community.delete([(999, 64520, *)]);
        bgp_ext_community.delete([(rt, 64520, *)]);

	# prepend_thrice_to_peers_with_rtt_lower_than
        bgp_community.delete([(64517, *)]);
        bgp_large_community.delete([(999, 64517, *)]);
        bgp_ext_community.delete([(rt, 64517, *)]);

	# prepend_twice_to_any
        bgp_community.delete([(65502, 999)]);
        bgp_large_community.delete([(999, 65502, 999)]);
        bgp_ext_community.delete([(rt, 65502, 999)]);

	# prepend_twice_to_peer
        bgp_community.delete([(65505, 1..64511)]);
        bgp_large_community.delete([(999, 65505, 1..64511)]);
        bgp_large_community.delete([(999, 65505, 131072..4199999999)]);
        bgp_ext_community.delete([(rt, 65505, 1..64511)]);
        bgp_ext_community.delete([(rt, 65505, 131072..4199999999)]);

	# prepend_twice_to_peers_with_rtt_higher_than
        bgp_community.delete([(64519, *)]);
        bgp_large_community.delete([(999, 64519, *)]);
        bgp_ext_community.delete([(rt, 64519, *)]);

	# prepend_twice_to_peers_with_rtt_lower_than
        bgp_community.delete([(64516, *)]);
        bgp_large_community.delete([(999, 64516, *)]);
        bgp_ext_community.delete([(rt, 64516, *)]);

}

# This function verifies if the route is tagged with one of
# the blackhole filtering communities.
function is_blackhole_filtering_request() {
	if (65535, 666) ~ bgp_community then
		return true;

	if (65534, 0) ~ bgp_community then
		return true;
	if (999, 666, 0) ~ bgp_large_community then
		return true;

	return false;
}

# This function must be applied to outgoing routes.
# It applies the blackhole filtering policy to the current route.
function apply_blackhole_filtering_policy() {
	# Configured policy: rewrite-next-hop
	bgp_community.add((65535, 666));
	bgp_next_hop = 192.0.2.66;
	# NO_EXPORT
	bgp_community.add((65535, 65281));
}

# This function verifies if the current route can be announced to
# the given client on the basis of the attached control BGP
# communities.
function route_can_be_announced_to(int peer_as; ip client_ip; string client_id)
int client_rtt;
{
	# do_not_announce_to_peer
	if peer_as <= 65535 then {
		if (0, peer_as) ~ bgp_community then
			return false;
	}
	if (999, 0, peer_as) ~ bgp_large_community then
		return false;
	if (rt, 0, peer_as) ~ bgp_ext_community then
		return false;

	# announce_to_peer
	if peer_as <= 65535 then {
		if (999, peer_as) ~ bgp_community then
			return true;
	}
	if (999, 999, peer_as) ~ bgp_large_community then
		return true;
	if (rt, 999, peer_as) ~ bgp_ext_community then
		return true;

	client_rtt = get_peer_rtt(client_ip);

	if client_rtt > 0 then {
		# do_not_announce_to_peers_with_rtt_higher_than

		# 5 ms
		if (64512, 5) ~ bgp_community then
			{ if client_rtt > 5 then
			return false; }
		if (999, 64512, 5) ~ bgp_large_community then
			{ if client_rtt > 5 then
			return false; }
		if (rt, 64512, 5) ~ bgp_ext_community then
			{ if client_rtt > 5 then
			return false; }

		# 10 ms
		if (64512, 10) ~ bgp_community then
			{ if client_rtt > 10 then
			return false; }
		if (999, 64512, 10) ~ bgp_large_community then
			{ if client_rtt > 10 then
			return false; }
		if (rt, 64512, 10) ~ bgp_ext_community then
			{ if client_rtt > 10 then
			return false; }

		# 15 ms
		if (64512, 15) ~ bgp_community then
			{ if client_rtt > 15 then
			return false; }
		if (999, 64512, 15) ~ bgp_large_community then
			{ if client_rtt > 15 then
			return false; }
		if (rt, 64512, 15) ~ bgp_ext_community then
			{ if client_rtt > 15 then
			return false; }

		# 20 ms
		if (64512, 20) ~ bgp_community then
			{ if client_rtt > 20 then
			return false; }
		if (999, 64512, 20) ~ bgp_large_community then
			{ if client_rtt > 20 then
			return false; }
		if (rt, 64512, 20) ~ bgp_ext_community then
			{ if client_rtt > 20 then
			return false; }

		# 30 ms
		if (64512, 30) ~ bgp_community then
			{ if client_rtt > 30 then
			return false; }
		if (999, 64512, 30) ~ bgp_large_community then
			{ if client_rtt > 30 then
			return false; }
		if (rt, 64512, 30) ~ bgp_ext_community then
			{ if client_rtt > 30 then
			return false; }

		# 50 ms
		if (64512, 50) ~ bgp_community then
			{ if client_rtt > 50 then
			return false; }
		if (999, 64512, 50) ~ bgp_large_community then
			{ if client_rtt > 50 then
			return false; }
		if (rt, 64512, 50) ~ bgp_ext_community then
			{ if client_rtt > 50 then
			return false; }

		# 100 ms
		if (64512, 100) ~ bgp_community then
			{ if client_rtt > 100 then
			return false; }
		if (999, 64512, 100) ~ bgp_large_community then
			{ if client_rtt > 100 then
			return false; }
		if (rt, 64512, 100) ~ bgp_ext_community then
			{ if client_rtt > 100 then
			return false; }

		# 200 ms
		if (64512, 200) ~ bgp_community then
			{ if client_rtt > 200 then
			return false; }
		if (999, 64512, 200) ~ bgp_large_community then
			{ if client_rtt > 200 then
			return false; }
		if (rt, 64512, 200) ~ bgp_ext_community then
			{ if client_rtt > 200 then
			return false; }

		# 500 ms
		if (64512, 500) ~ bgp_community then
			{ if client_rtt > 500 then
			return false; }
		if (999, 64512, 500) ~ bgp_large_community then
			{ if client_rtt > 500 then
			return false; }
		if (rt, 64512, 500) ~ bgp_ext_community then
			{ if client_rtt > 500 then
			return false; }


		# do_not_announce_to_peers_with_rtt_lower_than

		# 5 ms
		if (64511, 5) ~ bgp_community then
			{ if client_rtt <= 5 then
			return false; }
		if (999, 64511, 5) ~ bgp_large_community then
			{ if client_rtt <= 5 then
			return false; }
		if (rt, 64511, 5) ~ bgp_ext_community then
			{ if client_rtt <= 5 then
			return false; }

		# 10 ms
		if (64511, 10) ~ bgp_community then
			{ if client_rtt <= 10 then
			return false; }
		if (999, 64511, 10) ~ bgp_large_community then
			{ if client_rtt <= 10 then
			return false; }
		if (rt, 64511, 10) ~ bgp_ext_community then
			{ if client_rtt <= 10 then
			return false; }

		# 15 ms
		if (64511, 15) ~ bgp_community then
			{ if client_rtt <= 15 then
			return false; }
		if (999, 64511, 15) ~ bgp_large_community then
			{ if client_rtt <= 15 then
			return false; }
		if (rt, 64511, 15) ~ bgp_ext_community then
			{ if client_rtt <= 15 then
			return false; }

		# 20 ms
		if (64511, 20) ~ bgp_community then
			{ if client_rtt <= 20 then
			return false; }
		if (999, 64511, 20) ~ bgp_large_community then
			{ if client_rtt <= 20 then
			return false; }
		if (rt, 64511, 20) ~ bgp_ext_community then
			{ if client_rtt <= 20 then
			return false; }

		# 30 ms
		if (64511, 30) ~ bgp_community then
			{ if client_rtt <= 30 then
			return false; }
		if (999, 64511, 30) ~ bgp_large_community then
			{ if client_rtt <= 30 then
			return false; }
		if (rt, 64511, 30) ~ bgp_ext_community then
			{ if client_rtt <= 30 then
			return false; }

		# 50 ms
		if (64511, 50) ~ bgp_community then
			{ if client_rtt <= 50 then
			return false; }
		if (999, 64511, 50) ~ bgp_large_community then
			{ if client_rtt <= 50 then
			return false; }
		if (rt, 64511, 50) ~ bgp_ext_community then
			{ if client_rtt <= 50 then
			return false; }

		# 100 ms
		if (64511, 100) ~ bgp_community then
			{ if client_rtt <= 100 then
			return false; }
		if (999, 64511, 100) ~ bgp_large_community then
			{ if client_rtt <= 100 then
			return false; }
		if (rt, 64511, 100) ~ bgp_ext_community then
			{ if client_rtt <= 100 then
			return false; }

		# 200 ms
		if (64511, 200) ~ bgp_community then
			{ if client_rtt <= 200 then
			return false; }
		if (999, 64511, 200) ~ bgp_large_community then
			{ if client_rtt <= 200 then
			return false; }
		if (rt, 64511, 200) ~ bgp_ext_community then
			{ if client_rtt <= 200 then
			return false; }

		# 500 ms
		if (64511, 500) ~ bgp_community then
			{ if client_rtt <= 500 then
			return false; }
		if (999, 64511, 500) ~ bgp_large_community then
			{ if client_rtt <= 500 then
			return false; }
		if (rt, 64511, 500) ~ bgp_ext_community then
			{ if client_rtt <= 500 then
			return false; }


		# announce_to_peers_with_rtt_higher_than

		# 5 ms
		if (64514, 5) ~ bgp_community then
			{ if client_rtt > 5 then
			return true; }
		if (999, 64514, 5) ~ bgp_large_community then
			{ if client_rtt > 5 then
			return true; }
		if (rt, 64514, 5) ~ bgp_ext_community then
			{ if client_rtt > 5 then
			return true; }

		# 10 ms
		if (64514, 10) ~ bgp_community then
			{ if client_rtt > 10 then
			return true; }
		if (999, 64514, 10) ~ bgp_large_community then
			{ if client_rtt > 10 then
			return true; }
		if (rt, 64514, 10) ~ bgp_ext_community then
			{ if client_rtt > 10 then
			return true; }

		# 15 ms
		if (64514, 15) ~ bgp_community then
			{ if client_rtt > 15 then
			return true; }
		if (999, 64514, 15) ~ bgp_large_community then
			{ if client_rtt > 15 then
			return true; }
		if (rt, 64514, 15) ~ bgp_ext_community then
			{ if client_rtt > 15 then
			return true; }

		# 20 ms
		if (64514, 20) ~ bgp_community then
			{ if client_rtt > 20 then
			return true; }
		if (999, 64514, 20) ~ bgp_large_community then
			{ if client_rtt > 20 then
			return true; }
		if (rt, 64514, 20) ~ bgp_ext_community then
			{ if client_rtt > 20 then
			return true; }

		# 30 ms
		if (64514, 30) ~ bgp_community then
			{ if client_rtt > 30 then
			return true; }
		if (999, 64514, 30) ~ bgp_large_community then
			{ if client_rtt > 30 then
			return true; }
		if (rt, 64514, 30) ~ bgp_ext_community then
			{ if client_rtt > 30 then
			return true; }

		# 50 ms
		if (64514, 50) ~ bgp_community then
			{ if client_rtt > 50 then
			return true; }
		if (999, 64514, 50) ~ bgp_large_community then
			{ if client_rtt > 50 then
			return true; }
		if (rt, 64514, 50) ~ bgp_ext_community then
			{ if client_rtt > 50 then
			return true; }

		# 100 ms
		if (64514, 100) ~ bgp_community then
			{ if client_rtt > 100 then
			return true; }
		if (999, 64514, 100) ~ bgp_large_community then
			{ if client_rtt > 100 then
			return true; }
		if (rt, 64514, 100) ~ bgp_ext_community then
			{ if client_rtt > 100 then
			return true; }

		# 200 ms
		if (64514, 200) ~ bgp_community then
			{ if client_rtt > 200 then
			return true; }
		if (999, 64514, 200) ~ bgp_large_community then
			{ if client_rtt > 200 then
			return true; }
		if (rt, 64514, 200) ~ bgp_ext_community then
			{ if client_rtt > 200 then
			return true; }

		# 500 ms
		if (64514, 500) ~ bgp_community then
			{ if client_rtt > 500 then
			return true; }
		if (999, 64514, 500) ~ bgp_large_community then
			{ if client_rtt > 500 then
			return true; }
		if (rt, 64514, 500) ~ bgp_ext_community then
			{ if client_rtt > 500 then
			return true; }


		# announce_to_peers_with_rtt_lower_than

		# 5 ms
		if (64513, 5) ~ bgp_community then
			{ if client_rtt <= 5 then
			return true; }
		if (999, 64513, 5) ~ bgp_large_community then
			{ if client_rtt <= 5 then
			return true; }
		if (rt, 64513, 5) ~ bgp_ext_community then
			{ if client_rtt <= 5 then
			return true; }

		# 10 ms
		if (64513, 10) ~ bgp_community then
			{ if client_rtt <= 10 then
			return true; }
		if (999, 64513, 10) ~ bgp_large_community then
			{ if client_rtt <= 10 then
			return true; }
		if (rt, 64513, 10) ~ bgp_ext_community then
			{ if client_rtt <= 10 then
			return true; }

		# 15 ms
		if (64513, 15) ~ bgp_community then
			{ if client_rtt <= 15 then
			return true; }
		if (999, 64513, 15) ~ bgp_large_community then
			{ if client_rtt <= 15 then
			return true; }
		if (rt, 64513, 15) ~ bgp_ext_community then
			{ if client_rtt <= 15 then
			return true; }

		# 20 ms
		if (64513, 20) ~ bgp_community then
			{ if client_rtt <= 20 then
			return true; }
		if (999, 64513, 20) ~ bgp_large_community then
			{ if client_rtt <= 20 then
			return true; }
		if (rt, 64513, 20) ~ bgp_ext_community then
			{ if client_rtt <= 20 then
			return true; }

		# 30 ms
		if (64513, 30) ~ bgp_community then
			{ if client_rtt <= 30 then
			return true; }
		if (999, 64513, 30) ~ bgp_large_community then
			{ if client_rtt <= 30 then
			return true; }
		if (rt, 64513, 30) ~ bgp_ext_community then
			{ if client_rtt <= 30 then
			return true; }

		# 50 ms
		if (64513, 50) ~ bgp_community then
			{ if client_rtt <= 50 then
			return true; }
		if (999, 64513, 50) ~ bgp_large_community then
			{ if client_rtt <= 50 then
			return true; }
		if (rt, 64513, 50) ~ bgp_ext_community then
			{ if client_rtt <= 50 then
			return true; }

		# 100 ms
		if (64513, 100) ~ bgp_community then
			{ if client_rtt <= 100 then
			return true; }
		if (999, 64513, 100) ~ bgp_large_community then
			{ if client_rtt <= 100 then
			return true; }
		if (rt, 64513, 100) ~ bgp_ext_community then
			{ if client_rtt <= 100 then
			return true; }

		# 200 ms
		if (64513, 200) ~ bgp_community then
			{ if client_rtt <= 200 then
			return true; }
		if (999, 64513, 200) ~ bgp_large_community then
			{ if client_rtt <= 200 then
			return true; }
		if (rt, 64513, 200) ~ bgp_ext_community then
			{ if client_rtt <= 200 then
			return true; }

		# 500 ms
		if (64513, 500) ~ bgp_community then
			{ if client_rtt <= 500 then
			return true; }
		if (999, 64513, 500) ~ bgp_large_community then
			{ if client_rtt <= 500 then
			return true; }
		if (rt, 64513, 500) ~ bgp_ext_community then
			{ if client_rtt <= 500 then
			return true; }


	}

	# do_not_announce_to_any
	if (0, 999) ~ bgp_community then
		return false;
	if (999, 0, 999) ~ bgp_large_community then
		return false;
	if (rt, 0, 999) ~ bgp_ext_community then
		return false;

	return true;
}

# This function prepends the left-most ASN <times> times.
function do_prepend(int times) {
	case times {
		1: bgp_path.prepend(bgp_path.first);
		2: bgp_path.prepend(bgp_path.first); bgp_path.prepend(bgp_path.first);
		3: bgp_path.prepend(bgp_path.first); bgp_path.prepend(bgp_path.first); bgp_path.prepend(bgp_path.first);
	}
}

# This function verifies if the current route matches one of the
# control communities in charge of prepending client's ASN.
function apply_prepend(int peer_as; ip client_ip)
int client_rtt;
{
	# prepend_once_to_peer
	if peer_as <= 65535 then {
		if (65504, peer_as) ~ bgp_community then
			{ do_prepend(1); return true; }
	}
	if (999, 65504, peer_as) ~ bgp_large_community then
		{ do_prepend(1); return true; }
	if (rt, 65504, peer_as) ~ bgp_ext_community then
		{ do_prepend(1); return true; }

	# prepend_twice_to_peer
	if peer_as <= 65535 then {
		if (65505, peer_as) ~ bgp_community then
			{ do_prepend(2); return true; }
	}
	if (999, 65505, peer_as) ~ bgp_large_community then
		{ do_prepend(2); return true; }
	if (rt, 65505, peer_as) ~ bgp_ext_community then
		{ do_prepend(2); return true; }

	# prepend_thrice_to_peer
	if peer_as <= 65535 then {
		if (65506, peer_as) ~ bgp_community then
			{ do_prepend(3); return true; }
	}
	if (999, 65506, peer_as) ~ bgp_large_community then
		{ do_prepend(3); return true; }
	if (rt, 65506, peer_as) ~ bgp_ext_community then
		{ do_prepend(3); return true; }


	client_rtt = get_peer_rtt(client_ip);

	if client_rtt > 0 then {
		# prepend_once_to_peers_with_rtt_higher_than 500 ms
		if (64518, 500) ~ bgp_community then
			{ if client_rtt > 500 then
			{ do_prepend(1); return true; } }
		if (999, 64518, 500) ~ bgp_large_community then
			{ if client_rtt > 500 then
			{ do_prepend(1); return true; } }
		if (rt, 64518, 500) ~ bgp_ext_community then
			{ if client_rtt > 500 then
			{ do_prepend(1); return true; } }

		# prepend_twice_to_peers_with_rtt_higher_than 500 ms
		if (64519, 500) ~ bgp_community then
			{ if client_rtt > 500 then
			{ do_prepend(2); return true; } }
		if (999, 64519, 500) ~ bgp_large_community then
			{ if client_rtt > 500 then
			{ do_prepend(2); return true; } }
		if (rt, 64519, 500) ~ bgp_ext_community then
			{ if client_rtt > 500 then
			{ do_prepend(2); return true; } }

		# prepend_thrice_to_peers_with_rtt_higher_than 500 ms
		if (64520, 500) ~ bgp_community then
			{ if client_rtt > 500 then
			{ do_prepend(3); return true; } }
		if (999, 64520, 500) ~ bgp_large_community then
			{ if client_rtt > 500 then
			{ do_prepend(3); return true; } }
		if (rt, 64520, 500) ~ bgp_ext_community then
			{ if client_rtt > 500 then
			{ do_prepend(3); return true; } }

		# prepend_once_to_peers_with_rtt_higher_than 200 ms
		if (64518, 200) ~ bgp_community then
			{ if client_rtt > 200 then
			{ do_prepend(1); return true; } }
		if (999, 64518, 200) ~ bgp_large_community then
			{ if client_rtt > 200 then
			{ do_prepend(1); return true; } }
		if (rt, 64518, 200) ~ bgp_ext_community then
			{ if client_rtt > 200 then
			{ do_prepend(1); return true; } }

		# prepend_twice_to_peers_with_rtt_higher_than 200 ms
		if (64519, 200) ~ bgp_community then
			{ if client_rtt > 200 then
			{ do_prepend(2); return true; } }
		if (999, 64519, 200) ~ bgp_large_community then
			{ if client_rtt > 200 then
			{ do_prepend(2); return true; } }
		if (rt, 64519, 200) ~ bgp_ext_community then
			{ if client_rtt > 200 then
			{ do_prepend(2); return true; } }

		# prepend_thrice_to_peers_with_rtt_higher_than 200 ms
		if (64520, 200) ~ bgp_community then
			{ if client_rtt > 200 then
			{ do_prepend(3); return true; } }
		if (999, 64520, 200) ~ bgp_large_community then
			{ if client_rtt > 200 then
			{ do_prepend(3); return true; } }
		if (rt, 64520, 200) ~ bgp_ext_community then
			{ if client_rtt > 200 then
			{ do_prepend(3); return true; } }

		# prepend_once_to_peers_with_rtt_higher_than 100 ms
		if (64518, 100) ~ bgp_community then
			{ if client_rtt > 100 then
			{ do_prepend(1); return true; } }
		if (999, 64518, 100) ~ bgp_large_community then
			{ if client_rtt > 100 then
			{ do_prepend(1); return true; } }
		if (rt, 64518, 100) ~ bgp_ext_community then
			{ if client_rtt > 100 then
			{ do_prepend(1); return true; } }

		# prepend_twice_to_peers_with_rtt_higher_than 100 ms
		if (64519, 100) ~ bgp_community then
			{ if client_rtt > 100 then
			{ do_prepend(2); return true; } }
		if (999, 64519, 100) ~ bgp_large_community then
			{ if client_rtt > 100 then
			{ do_prepend(2); return true; } }
		if (rt, 64519, 100) ~ bgp_ext_community then
			{ if client_rtt > 100 then
			{ do_prepend(2); return true; } }

		# prepend_thrice_to_peers_with_rtt_higher_than 100 ms
		if (64520, 100) ~ bgp_community then
			{ if client_rtt > 100 then
			{ do_prepend(3); return true; } }
		if (999, 64520, 100) ~ bgp_large_community then
			{ if client_rtt > 100 then
			{ do_prepend(3); return true; } }
		if (rt, 64520, 100) ~ bgp_ext_community then
			{ if client_rtt > 100 then
			{ do_prepend(3); return true; } }

		# prepend_once_to_peers_with_rtt_higher_than 50 ms
		if (64518, 50) ~ bgp_community then
			{ if client_rtt > 50 then
			{ do_prepend(1); return true; } }
		if (999, 64518, 50) ~ bgp_large_community then
			{ if client_rtt > 50 then
			{ do_prepend(1); return true; } }
		if (rt, 64518, 50) ~ bgp_ext_community then
			{ if client_rtt > 50 then
			{ do_prepend(1); return true; } }

		# prepend_twice_to_peers_with_rtt_higher_than 50 ms
		if (64519, 50) ~ bgp_community then
			{ if client_rtt > 50 then
			{ do_prepend(2); return true; } }
		if (999, 64519, 50) ~ bgp_large_community then
			{ if client_rtt > 50 then
			{ do_prepend(2); return true; } }
		if (rt, 64519, 50) ~ bgp_ext_community then
			{ if client_rtt > 50 then
			{ do_prepend(2); return true; } }

		# prepend_thrice_to_peers_with_rtt_higher_than 50 ms
		if (64520, 50) ~ bgp_community then
			{ if client_rtt > 50 then
			{ do_prepend(3); return true; } }
		if (999, 64520, 50) ~ bgp_large_community then
			{ if client_rtt > 50 then
			{ do_prepend(3); return true; } }
		if (rt, 64520, 50) ~ bgp_ext_community then
			{ if client_rtt > 50 then
			{ do_prepend(3); return true; } }

		# prepend_once_to_peers_with_rtt_higher_than 30 ms
		if (64518, 30) ~ bgp_community then
			{ if client_rtt > 30 then
			{ do_prepend(1); return true; } }
		if (999, 64518, 30) ~ bgp_large_community then
			{ if client_rtt > 30 then
			{ do_prepend(1); return true; } }
		if (rt, 64518, 30) ~ bgp_ext_community then
			{ if client_rtt > 30 then
			{ do_prepend(1); return true; } }

		# prepend_twice_to_peers_with_rtt_higher_than 30 ms
		if (64519, 30) ~ bgp_community then
			{ if client_rtt > 30 then
			{ do_prepend(2); return true; } }
		if (999, 64519, 30) ~ bgp_large_community then
			{ if client_rtt > 30 then
			{ do_prepend(2); return true; } }
		if (rt, 64519, 30) ~ bgp_ext_community then
			{ if client_rtt > 30 then
			{ do_prepend(2); return true; } }

		# prepend_thrice_to_peers_with_rtt_higher_than 30 ms
		if (64520, 30) ~ bgp_community then
			{ if client_rtt > 30 then
			{ do_prepend(3); return true; } }
		if (999, 64520, 30) ~ bgp_large_community then
			{ if client_rtt > 30 then
			{ do_prepend(3); return true; } }
		if (rt, 64520, 30) ~ bgp_ext_community then
			{ if client_rtt > 30 then
			{ do_prepend(3); return true; } }

		# prepend_once_to_peers_with_rtt_higher_than 20 ms
		if (64518, 20) ~ bgp_community then
			{ if client_rtt > 20 then
			{ do_prepend(1); return true; } }
		if (999, 64518, 20) ~ bgp_large_community then
			{ if client_rtt > 20 then
			{ do_prepend(1); return true; } }
		if (rt, 64518, 20) ~ bgp_ext_community then
			{ if client_rtt > 20 then
			{ do_prepend(1); return true; } }

		# prepend_twice_to_peers_with_rtt_higher_than 20 ms
		if (64519, 20) ~ bgp_community then
			{ if client_rtt > 20 then
			{ do_prepend(2); return true; } }
		if (999, 64519, 20) ~ bgp_large_community then
			{ if client_rtt > 20 then
			{ do_prepend(2); return true; } }
		if (rt, 64519, 20) ~ bgp_ext_community then
			{ if client_rtt > 20 then
			{ do_prepend(2); return true; } }

		# prepend_thrice_to_peers_with_rtt_higher_than 20 ms
		if (64520, 20) ~ bgp_community then
			{ if client_rtt > 20 then
			{ do_prepend(3); return true; } }
		if (999, 64520, 20) ~ bgp_large_community then
			{ if client_rtt > 20 then
			{ do_prepend(3); return true; } }
		if (rt, 64520, 20) ~ bgp_ext_community then
			{ if client_rtt > 20 then
			{ do_prepend(3); return true; } }

		# prepend_once_to_peers_with_rtt_higher_than 15 ms
		if (64518, 15) ~ bgp_community then
			{ if client_rtt > 15 then
			{ do_prepend(1); return true; } }
		if (999, 64518, 15) ~ bgp_large_community then
			{ if client_rtt > 15 then
			{ do_prepend(1); return true; } }
		if (rt, 64518, 15) ~ bgp_ext_community then
			{ if client_rtt > 15 then
			{ do_prepend(1); return true; } }

		# prepend_twice_to_peers_with_rtt_higher_than 15 ms
		if (64519, 15) ~ bgp_community then
			{ if client_rtt > 15 then
			{ do_prepend(2); return true; } }
		if (999, 64519, 15) ~ bgp_large_community then
			{ if client_rtt > 15 then
			{ do_prepend(2); return true; } }
		if (rt, 64519, 15) ~ bgp_ext_community then
			{ if client_rtt > 15 then
			{ do_prepend(2); return true; } }

		# prepend_thrice_to_peers_with_rtt_higher_than 15 ms
		if (64520, 15) ~ bgp_community then
			{ if client_rtt > 15 then
			{ do_prepend(3); return true; } }
		if (999, 64520, 15) ~ bgp_large_community then
			{ if client_rtt > 15 then
			{ do_prepend(3); return true; } }
		if (rt, 64520, 15) ~ bgp_ext_community then
			{ if client_rtt > 15 then
			{ do_prepend(3); return true; } }

		# prepend_once_to_peers_with_rtt_higher_than 10 ms
		if (64518, 10) ~ bgp_community then
			{ if client_rtt > 10 then
			{ do_prepend(1); return true; } }
		if (999, 64518, 10) ~ bgp_large_community then
			{ if client_rtt > 10 then
			{ do_prepend(1); return true; } }
		if (rt, 64518, 10) ~ bgp_ext_community then
			{ if client_rtt > 10 then
			{ do_prepend(1); return true; } }

		# prepend_twice_to_peers_with_rtt_higher_than 10 ms
		if (64519, 10) ~ bgp_community then
			{ if client_rtt > 10 then
			{ do_prepend(2); return true; } }
		if (999, 64519, 10) ~ bgp_large_community then
			{ if client_rtt > 10 then
			{ do_prepend(2); return true; } }
		if (rt, 64519, 10) ~ bgp_ext_community then
			{ if client_rtt > 10 then
			{ do_prepend(2); return true; } }

		# prepend_thrice_to_peers_with_rtt_higher_than 10 ms
		if (64520, 10) ~ bgp_community then
			{ if client_rtt > 10 then
			{ do_prepend(3); return true; } }
		if (999, 64520, 10) ~ bgp_large_community then
			{ if client_rtt > 10 then
			{ do_prepend(3); return true; } }
		if (rt, 64520, 10) ~ bgp_ext_community then
			{ if client_rtt > 10 then
			{ do_prepend(3); return true; } }

		# prepend_once_to_peers_with_rtt_higher_than 5 ms
		if (64518, 5) ~ bgp_community then
			{ if client_rtt > 5 then
			{ do_prepend(1); return true; } }
		if (999, 64518, 5) ~ bgp_large_community then
			{ if client_rtt > 5 then
			{ do_prepend(1); return true; } }
		if (rt, 64518, 5) ~ bgp_ext_community then
			{ if client_rtt > 5 then
			{ do_prepend(1); return true; } }

		# prepend_twice_to_peers_with_rtt_higher_than 5 ms
		if (64519, 5) ~ bgp_community then
			{ if client_rtt > 5 then
			{ do_prepend(2); return true; } }
		if (999, 64519, 5) ~ bgp_large_community then
			{ if client_rtt > 5 then
			{ do_prepend(2); return true; } }
		if (rt, 64519, 5) ~ bgp_ext_community then
			{ if client_rtt > 5 then
			{ do_prepend(2); return true; } }

		# prepend_thrice_to_peers_with_rtt_higher_than 5 ms
		if (64520, 5) ~ bgp_community then
			{ if client_rtt > 5 then
			{ do_prepend(3); return true; } }
		if (999, 64520, 5) ~ bgp_large_community then
			{ if client_rtt > 5 then
			{ do_prepend(3); return true; } }
		if (rt, 64520, 5) ~ bgp_ext_community then
			{ if client_rtt > 5 then
			{ do_prepend(3); return true; } }

		# prepend_once_to_peers_with_rtt_lower_than 5 ms
		if (64515, 5) ~ bgp_community then
			{ if client_rtt <= 5 then
			{ do_prepend(1); return true; } }
		if (999, 64515, 5) ~ bgp_large_community then
			{ if client_rtt <= 5 then
			{ do_prepend(1); return true; } }
		if (rt, 64515, 5) ~ bgp_ext_community then
			{ if client_rtt <= 5 then
			{ do_prepend(1); return true; } }

		# prepend_twice_to_peers_with_rtt_lower_than 5 ms
		if (64516, 5) ~ bgp_community then
			{ if client_rtt <= 5 then
			{ do_prepend(2); return true; } }
		if (999, 64516, 5) ~ bgp_large_community then
			{ if client_rtt <= 5 then
			{ do_prepend(2); return true; } }
		if (rt, 64516, 5) ~ bgp_ext_community then
			{ if client_rtt <= 5 then
			{ do_prepend(2); return true; } }

		# prepend_thrice_to_peers_with_rtt_lower_than 5 ms
		if (64517, 5) ~ bgp_community then
			{ if client_rtt <= 5 then
			{ do_prepend(3); return true; } }
		if (999, 64517, 5) ~ bgp_large_community then
			{ if client_rtt <= 5 then
			{ do_prepend(3); return true; } }
		if (rt, 64517, 5) ~ bgp_ext_community then
			{ if client_rtt <= 5 then
			{ do_prepend(3); return true; } }

		# prepend_once_to_peers_with_rtt_lower_than 10 ms
		if (64515, 10) ~ bgp_community then
			{ if client_rtt <= 10 then
			{ do_prepend(1); return true; } }
		if (999, 64515, 10) ~ bgp_large_community then
			{ if client_rtt <= 10 then
			{ do_prepend(1); return true; } }
		if (rt, 64515, 10) ~ bgp_ext_community then
			{ if client_rtt <= 10 then
			{ do_prepend(1); return true; } }

		# prepend_twice_to_peers_with_rtt_lower_than 10 ms
		if (64516, 10) ~ bgp_community then
			{ if client_rtt <= 10 then
			{ do_prepend(2); return true; } }
		if (999, 64516, 10) ~ bgp_large_community then
			{ if client_rtt <= 10 then
			{ do_prepend(2); return true; } }
		if (rt, 64516, 10) ~ bgp_ext_community then
			{ if client_rtt <= 10 then
			{ do_prepend(2); return true; } }

		# prepend_thrice_to_peers_with_rtt_lower_than 10 ms
		if (64517, 10) ~ bgp_community then
			{ if client_rtt <= 10 then
			{ do_prepend(3); return true; } }
		if (999, 64517, 10) ~ bgp_large_community then
			{ if client_rtt <= 10 then
			{ do_prepend(3); return true; } }
		if (rt, 64517, 10) ~ bgp_ext_community then
			{ if client_rtt <= 10 then
			{ do_prepend(3); return true; } }

		# prepend_once_to_peers_with_rtt_lower_than 15 ms
		if (64515, 15) ~ bgp_community then
			{ if client_rtt <= 15 then
			{ do_prepend(1); return true; } }
		if (999, 64515, 15) ~ bgp_large_community then
			{ if client_rtt <= 15 then
			{ do_prepend(1); return true; } }
		if (rt, 64515, 15) ~ bgp_ext_community then
			{ if client_rtt <= 15 then
			{ do_prepend(1); return true; } }

		# prepend_twice_to_peers_with_rtt_lower_than 15 ms
		if (64516, 15) ~ bgp_community then
			{ if client_rtt <= 15 then
			{ do_prepend(2); return true; } }
		if (999, 64516, 15) ~ bgp_large_community then
			{ if client_rtt <= 15 then
			{ do_prepend(2); return true; } }
		if (rt, 64516, 15) ~ bgp_ext_community then
			{ if client_rtt <= 15 then
			{ do_prepend(2); return true; } }

		# prepend_thrice_to_peers_with_rtt_lower_than 15 ms
		if (64517, 15) ~ bgp_community then
			{ if client_rtt <= 15 then
			{ do_prepend(3); return true; } }
		if (999, 64517, 15) ~ bgp_large_community then
			{ if client_rtt <= 15 then
			{ do_prepend(3); return true; } }
		if (rt, 64517, 15) ~ bgp_ext_community then
			{ if client_rtt <= 15 then
			{ do_prepend(3); return true; } }

		# prepend_once_to_peers_with_rtt_lower_than 20 ms
		if (64515, 20) ~ bgp_community then
			{ if client_rtt <= 20 then
			{ do_prepend(1); return true; } }
		if (999, 64515, 20) ~ bgp_large_community then
			{ if client_rtt <= 20 then
			{ do_prepend(1); return true; } }
		if (rt, 64515, 20) ~ bgp_ext_community then
			{ if client_rtt <= 20 then
			{ do_prepend(1); return true; } }

		# prepend_twice_to_peers_with_rtt_lower_than 20 ms
		if (64516, 20) ~ bgp_community then
			{ if client_rtt <= 20 then
			{ do_prepend(2); return true; } }
		if (999, 64516, 20) ~ bgp_large_community then
			{ if client_rtt <= 20 then
			{ do_prepend(2); return true; } }
		if (rt, 64516, 20) ~ bgp_ext_community then
			{ if client_rtt <= 20 then
			{ do_prepend(2); return true; } }

		# prepend_thrice_to_peers_with_rtt_lower_than 20 ms
		if (64517, 20) ~ bgp_community then
			{ if client_rtt <= 20 then
			{ do_prepend(3); return true; } }
		if (999, 64517, 20) ~ bgp_large_community then
			{ if client_rtt <= 20 then
			{ do_prepend(3); return true; } }
		if (rt, 64517, 20) ~ bgp_ext_community then
			{ if client_rtt <= 20 then
			{ do_prepend(3); return true; } }

		# prepend_once_to_peers_with_rtt_lower_than 30 ms
		if (64515, 30) ~ bgp_community then
			{ if client_rtt <= 30 then
			{ do_prepend(1); return true; } }
		if (999, 64515, 30) ~ bgp_large_community then
			{ if client_rtt <= 30 then
			{ do_prepend(1); return true; } }
		if (rt, 64515, 30) ~ bgp_ext_community then
			{ if client_rtt <= 30 then
			{ do_prepend(1); return true; } }

		# prepend_twice_to_peers_with_rtt_lower_than 30 ms
		if (64516, 30) ~ bgp_community then
			{ if client_rtt <= 30 then
			{ do_prepend(2); return true; } }
		if (999, 64516, 30) ~ bgp_large_community then
			{ if client_rtt <= 30 then
			{ do_prepend(2); return true; } }
		if (rt, 64516, 30) ~ bgp_ext_community then
			{ if client_rtt <= 30 then
			{ do_prepend(2); return true; } }

		# prepend_thrice_to_peers_with_rtt_lower_than 30 ms
		if (64517, 30) ~ bgp_community then
			{ if client_rtt <= 30 then
			{ do_prepend(3); return true; } }
		if (999, 64517, 30) ~ bgp_large_community then
			{ if client_rtt <= 30 then
			{ do_prepend(3); return true; } }
		if (rt, 64517, 30) ~ bgp_ext_community then
			{ if client_rtt <= 30 then
			{ do_prepend(3); return true; } }

		# prepend_once_to_peers_with_rtt_lower_than 50 ms
		if (64515, 50) ~ bgp_community then
			{ if client_rtt <= 50 then
			{ do_prepend(1); return true; } }
		if (999, 64515, 50) ~ bgp_large_community then
			{ if client_rtt <= 50 then
			{ do_prepend(1); return true; } }
		if (rt, 64515, 50) ~ bgp_ext_community then
			{ if client_rtt <= 50 then
			{ do_prepend(1); return true; } }

		# prepend_twice_to_peers_with_rtt_lower_than 50 ms
		if (64516, 50) ~ bgp_community then
			{ if client_rtt <= 50 then
			{ do_prepend(2); return true; } }
		if (999, 64516, 50) ~ bgp_large_community then
			{ if client_rtt <= 50 then
			{ do_prepend(2); return true; } }
		if (rt, 64516, 50) ~ bgp_ext_community then
			{ if client_rtt <= 50 then
			{ do_prepend(2); return true; } }

		# prepend_thrice_to_peers_with_rtt_lower_than 50 ms
		if (64517, 50) ~ bgp_community then
			{ if client_rtt <= 50 then
			{ do_prepend(3); return true; } }
		if (999, 64517, 50) ~ bgp_large_community then
			{ if client_rtt <= 50 then
			{ do_prepend(3); return true; } }
		if (rt, 64517, 50) ~ bgp_ext_community then
			{ if client_rtt <= 50 then
			{ do_prepend(3); return true; } }

		# prepend_once_to_peers_with_rtt_lower_than 100 ms
		if (64515, 100) ~ bgp_community then
			{ if client_rtt <= 100 then
			{ do_prepend(1); return true; } }
		if (999, 64515, 100) ~ bgp_large_community then
			{ if client_rtt <= 100 then
			{ do_prepend(1); return true; } }
		if (rt, 64515, 100) ~ bgp_ext_community then
			{ if client_rtt <= 100 then
			{ do_prepend(1); return true; } }

		# prepend_twice_to_peers_with_rtt_lower_than 100 ms
		if (64516, 100) ~ bgp_community then
			{ if client_rtt <= 100 then
			{ do_prepend(2); return true; } }
		if (999, 64516, 100) ~ bgp_large_community then
			{ if client_rtt <= 100 then
			{ do_prepend(2); return true; } }
		if (rt, 64516, 100) ~ bgp_ext_community then
			{ if client_rtt <= 100 then
			{ do_prepend(2); return true; } }

		# prepend_thrice_to_peers_with_rtt_lower_than 100 ms
		if (64517, 100) ~ bgp_community then
			{ if client_rtt <= 100 then
			{ do_prepend(3); return true; } }
		if (999, 64517, 100) ~ bgp_large_community then
			{ if client_rtt <= 100 then
			{ do_prepend(3); return true; } }
		if (rt, 64517, 100) ~ bgp_ext_community then
			{ if client_rtt <= 100 then
			{ do_prepend(3); return true; } }

		# prepend_once_to_peers_with_rtt_lower_than 200 ms
		if (64515, 200) ~ bgp_community then
			{ if client_rtt <= 200 then
			{ do_prepend(1); return true; } }
		if (999, 64515, 200) ~ bgp_large_community then
			{ if client_rtt <= 200 then
			{ do_prepend(1); return true; } }
		if (rt, 64515, 200) ~ bgp_ext_community then
			{ if client_rtt <= 200 then
			{ do_prepend(1); return true; } }

		# prepend_twice_to_peers_with_rtt_lower_than 200 ms
		if (64516, 200) ~ bgp_community then
			{ if client_rtt <= 200 then
			{ do_prepend(2); return true; } }
		if (999, 64516, 200) ~ bgp_large_community then
			{ if client_rtt <= 200 then
			{ do_prepend(2); return true; } }
		if (rt, 64516, 200) ~ bgp_ext_community then
			{ if client_rtt <= 200 then
			{ do_prepend(2); return true; } }

		# prepend_thrice_to_peers_with_rtt_lower_than 200 ms
		if (64517, 200) ~ bgp_community then
			{ if client_rtt <= 200 then
			{ do_prepend(3); return true; } }
		if (999, 64517, 200) ~ bgp_large_community then
			{ if client_rtt <= 200 then
			{ do_prepend(3); return true; } }
		if (rt, 64517, 200) ~ bgp_ext_community then
			{ if client_rtt <= 200 then
			{ do_prepend(3); return true; } }

		# prepend_once_to_peers_with_rtt_lower_than 500 ms
		if (64515, 500) ~ bgp_community then
			{ if client_rtt <= 500 then
			{ do_prepend(1); return true; } }
		if (999, 64515, 500) ~ bgp_large_community then
			{ if client_rtt <= 500 then
			{ do_prepend(1); return true; } }
		if (rt, 64515, 500) ~ bgp_ext_community then
			{ if client_rtt <= 500 then
			{ do_prepend(1); return true; } }

		# prepend_twice_to_peers_with_rtt_lower_than 500 ms
		if (64516, 500) ~ bgp_community then
			{ if client_rtt <= 500 then
			{ do_prepend(2); return true; } }
		if (999, 64516, 500) ~ bgp_large_community then
			{ if client_rtt <= 500 then
			{ do_prepend(2); return true; } }
		if (rt, 64516, 500) ~ bgp_ext_community then
			{ if client_rtt <= 500 then
			{ do_prepend(2); return true; } }

		# prepend_thrice_to_peers_with_rtt_lower_than 500 ms
		if (64517, 500) ~ bgp_community then
			{ if client_rtt <= 500 then
			{ do_prepend(3); return true; } }
		if (999, 64517, 500) ~ bgp_large_community then
			{ if client_rtt <= 500 then
			{ do_prepend(3); return true; } }
		if (rt, 64517, 500) ~ bgp_ext_community then
			{ if client_rtt <= 500 then
			{ do_prepend(3); return true; } }

	}

	# prepend_once_to_any
	if (65501, 999) ~ bgp_community then
		{ do_prepend(1); return true; }
	if (999, 65501, 999) ~ bgp_large_community then
		{ do_prepend(1); return true; }
	if (rt, 65501, 999) ~ bgp_ext_community then
		{ do_prepend(1); return true; }

	# prepend_twice_to_any
	if (65502, 999) ~ bgp_community then
		{ do_prepend(2); return true; }
	if (999, 65502, 999) ~ bgp_large_community then
		{ do_prepend(2); return true; }
	if (rt, 65502, 999) ~ bgp_ext_community then
		{ do_prepend(2); return true; }

	# prepend_thrice_to_any
	if (65503, 999) ~ bgp_community then
		{ do_prepend(3); return true; }
	if (999, 65503, 999) ~ bgp_large_community then
		{ do_prepend(3); return true; }
	if (rt, 65503, 999) ~ bgp_ext_community then
		{ do_prepend(3); return true; }


	return true;
}

# This function adds the BGP communities used to
# keep track of RPKI validation state.
# RFC8097 extended communities are used here.
function add_rpki_community(string comm_name) {
	if comm_name = "valid" then {
		bgp_ext_community.add((unknown 0x4300, 0, 0));
	}
	if comm_name = "unknown" then {
		bgp_ext_community.add((unknown 0x4300, 0, 1));
	}
	if comm_name = "invalid" then {
		bgp_ext_community.add((unknown 0x4300, 0, 2));
	}
}

# This functions performs RPKI validation of the current
# route and adds the informative communities.
function perform_rpki_validation () {
	case roa_check(RPKI) {
		ROA_VALID: add_rpki_community("valid");
		ROA_UNKNOWN: add_rpki_community("unknown");
		ROA_INVALID: add_rpki_community("invalid");
	}
}

# This function returns True if the route is INVALID.
function route_is_rpki_invalid () {
	return (unknown 0x4300, 0, 2) ~ bgp_ext_community;
}

# This function returns True if RPKI INVALID routes
# should be announced to clients.
function announce_rpki_invalid_to_client(int client_asn; ip client_ip; string client_id) {
	return false;
}

# This function adds NO_EXPORT and/or NO_ADVERTISE
# well-known communities.
function add_noexport_noadvertise(int peer_as) {
	# add_noexport_to_any
	
	if (65507, 999) ~ bgp_community then
		{ bgp_community.add((65535, 65281)); }
	if (999, 65507, 999) ~ bgp_large_community then
		{ bgp_community.add((65535, 65281)); }
	if (rt, 65507, 999) ~ bgp_ext_community then
		{ bgp_community.add((65535, 65281)); }

	# add_noadvertise_to_any
	
	if (65508, 999) ~ bgp_community then
		{ bgp_community.add((65535, 65282)); }
	if (999, 65508, 999) ~ bgp_large_community then
		{ bgp_community.add((65535, 65282)); }
	if (rt, 65508, 999) ~ bgp_ext_community then
		{ bgp_community.add((65535, 65282)); }

	# add_noexport_to_peer
	
	if peer_as <= 65535 then {
		if (65509, peer_as) ~ bgp_community then
			{ bgp_community.add((65535, 65281)); }
	}
	if (999, 65509, peer_as) ~ bgp_large_community then
		{ bgp_community.add((65535, 65281)); }
	if (rt, 65509, peer_as) ~ bgp_ext_community then
		{ bgp_community.add((65535, 65281)); }

	# add_noadvertise_to_peer
	
	if peer_as <= 65535 then {
		if (65510, peer_as) ~ bgp_community then
			{ bgp_community.add((65535, 65282)); }
	}
	if (999, 65510, peer_as) ~ bgp_large_community then
		{ bgp_community.add((65535, 65282)); }
	if (rt, 65510, peer_as) ~ bgp_ext_community then
		{ bgp_community.add((65535, 65282)); }

}


function honor_graceful_shutdown() {
	if (65535, 0) ~ bgp_community then {
		bgp_local_pref = 0;
	}
}

function prevent_graceful_shutdown() {
	if (65535, 0) ~ bgp_community then {
		bgp_community.delete([(65535, 0)]);
	}
}


# This function verifies if there is such a ROA for the
# current route's origin ASN to validate the announced prefix.
function prefix_in_rpki_roas_as_route_objects() {
	case bgp_path.last {
		10745: return net ~ RPKI_ROAs_as_route_objects_AS10745;
		3333: return net ~ RPKI_ROAs_as_route_objects_AS3333;
	}
	return false;
}



# ---------------------------------------------------------
# IRRDB

# AS3333, used_by client AS3333_1
define AS_SET_AS3333_asns = [
	3333
];

define AS_SET_AS3333_prefixes = [
	193.0.0.0/21, 	193.0.10.0/23, 	193.0.12.0/23, 	193.0.18.0/23,
	193.0.20.0/22{23,23}
];

# AS10745, used_by client AS10745_1
define AS_SET_AS10745_asns = [
	10745
];

define AS_SET_AS10745_prefixes = [
	192.136.136.0/24, 	192.149.252.0/24, 	199.43.0.0/24
];





# ---------------------------------------------------------
# MEMBERS


# AS-SET for AS10745_1
function origin_as_is_in_AS10745_1_as_set() {
	if bgp_path.last ~ AS_SET_AS10745_asns then
		return true;
	return false;
}

# R-SET for AS10745_1
function prefix_is_in_AS10745_1_as_set() {
	if net ~ AS_SET_AS10745_prefixes then
		return true;
	return false;
}

function next_hop_is_valid_for_AS10745_1()
{
	# Checks if NEXT_HOP is one of those allowed for routes announced by AS10745_1
	if bgp_next_hop = 192.0.2.22 then return true;	# AS10745_1
	return false;
}


function verify_AS10745_1_irrdb()
bool reject_because_of_bad_origin;
bool reject_because_of_bad_prefix;
{
	reject_because_of_bad_origin = false;
	reject_because_of_bad_prefix = false;

	# IRRdb: enforce origin via AS-SET (or tag)
	if !origin_as_is_in_AS10745_1_as_set() then {
		reject_because_of_bad_origin = true;
		
		bgp_community.add((65530, 0));
		bgp_large_community.add((999, 65530, 0));

	} else {
	
		bgp_community.add((65530, 1));
		bgp_large_community.add((999, 65530, 1));

	}

	# IRRdb: enforce prefix via AS-SET (or tag)
	if !prefix_is_in_AS10745_1_as_set() then {
		reject_because_of_bad_prefix = true;
		# "'tag_as_set' is True but 'prefix_not_present_in_as_set' community is not given";
	}


	# Origin ASN is valid, prefix is not: check if a RPKI ROAs exists.
	if !reject_because_of_bad_origin && reject_because_of_bad_prefix && prefix_in_rpki_roas_as_route_objects() then {
		
		bgp_community.add((65530, 2));
		bgp_large_community.add((999, 65530, 2));

		return true;
	}

	if reject_because_of_bad_origin then {
		reject "origin ASN [", bgp_path.last, "] not in allowed as-sets - REJECTING ", net;

	}
	if reject_because_of_bad_prefix then {
		reject "prefix not in client's r_set - REJECTING ", net;

	}
}

filter receive_from_AS10745_1 {
	if !(source = RTS_BGP ) then
		reject "source != RTS_BGP - REJECTING ", net;



	scrub_communities_in();

	# Attach custom BGP communities
	# from_usa
	
		bgp_community.add((65534, 2));
		bgp_large_community.add((999, 65534, 2));
		bgp_ext_community.add((rt, 65534, 2));


	# NEXT_HOP
	if !next_hop_is_valid_for_AS10745_1() then
		reject "NEXT_HOP [", bgp_next_hop, "] not allowed - REJECTING ", net;


	# AS_PATH: length
	if bgp_path.len > 32 then
		reject "AS_PATH len [", bgp_path.len ,"] longer than 32 - REJECTING ", net;


	# AS_PATH: left-most ASN
	if bgp_path.first != 10745 then
		reject "invalid left-most ASN [", bgp_path.first, "] - REJECTING ", net;


	# AS_PATH: invalid ASNs
	if as_path_contains_invalid_asn() then
		reject "AS_PATH [", bgp_path ,"] contains invalid ASN - REJECTING ", net;


	# AS_PATH: transit-free ASNs
	if as_path_contains_transit_free_asn() then
		reject "AS_PATH [", bgp_path ,"] contains transit-free ASN - REJECTING ", net;



	# Prefix: global blacklist
	if prefix_is_in_global_blacklist() then
		reject "prefix is in global blacklist - REJECTING ", net;



	# Prefix: bogon
	if prefix_is_bogon() then
		reject "prefix is bogon - REJECTING ", net;


	# IRRdb checks
	verify_AS10745_1_irrdb();

	# Blackhole request?
	if is_blackhole_filtering_request() then {
		accept "blackhole filtering request from AS10745_1 - ACCEPTING ", net;
	} else {
		perform_rpki_validation();

		if route_is_rpki_invalid() then
			reject "RPKI, route is INVALID - REJECTING ", net;


		# Prefix: length
		if !prefix_len_is_valid(8, 24) then
			reject "prefix len [", net.len, "] not in 8-24 - REJECTING ", net;


		honor_graceful_shutdown();
	}


	accept;
}

filter announce_to_AS10745_1 {


	# Blackhole request?
	if is_blackhole_filtering_request() then {
		apply_blackhole_filtering_policy();
	} else {
		# RPKI: do not announce INVALID to clients
		if route_is_rpki_invalid() then {
			if !announce_rpki_invalid_to_client(10745, 192.0.2.22, "AS10745_1") then
				reject "route is INVALID - NOT ANNOUNCING ", net, " TO AS10745_1";
		}
	}

	# BGP control communities
	if !route_can_be_announced_to(10745, 192.0.2.22, "AS10745_1") then
		reject "route didn't pass control communities checks - NOT ANNOUNCING ", net, " TO AS10745_1";

	apply_prepend(10745, 192.0.2.22);


	add_noexport_noadvertise(10745);

	scrub_communities_out();



	accept;
}

# RTT: 123.0 ms (normalized value: 123)
protocol bgp AS10745_1 {

	local as 999;
	neighbor 192.0.2.22 as 10745;
	rs client;

	passive on;
	ttl security on;
	add paths tx;

	secondary;

	interpret communities off;

	import limit 121 action restart;


	import keep filtered on;

	include "/etc/bird/client.local";

	
	import filter receive_from_AS10745_1;
	export filter announce_to_AS10745_1;
}


# AS-SET for AS3333_1
function origin_as_is_in_AS3333_1_as_set() {
	if bgp_path.last ~ AS_SET_AS3333_asns then
		return true;
	return false;
}

# R-SET for AS3333_1
function prefix_is_in_AS3333_1_as_set() {
	if net ~ AS_SET_AS3333_prefixes then
		return true;
	return false;
}

function next_hop_is_valid_for_AS3333_1()
{
	# Checks if NEXT_HOP is one of those allowed for routes announced by AS3333_1
	if bgp_next_hop = 192.0.2.11 then return true;	# AS3333_1
	return false;
}


function verify_AS3333_1_irrdb()
bool reject_because_of_bad_origin;
bool reject_because_of_bad_prefix;
{
	reject_because_of_bad_origin = false;
	reject_because_of_bad_prefix = false;

	# IRRdb: enforce origin via AS-SET (or tag)
	if !origin_as_is_in_AS3333_1_as_set() then {
		reject_because_of_bad_origin = true;
		
		bgp_community.add((65530, 0));
		bgp_large_community.add((999, 65530, 0));

	} else {
	
		bgp_community.add((65530, 1));
		bgp_large_community.add((999, 65530, 1));

	}

	# IRRdb: enforce prefix via AS-SET (or tag)
	if !prefix_is_in_AS3333_1_as_set() then {
		reject_because_of_bad_prefix = true;
		# "'tag_as_set' is True but 'prefix_not_present_in_as_set' community is not given";
	}


	# Origin ASN is valid, prefix is not: check if a RPKI ROAs exists.
	if !reject_because_of_bad_origin && reject_because_of_bad_prefix && prefix_in_rpki_roas_as_route_objects() then {
		
		bgp_community.add((65530, 2));
		bgp_large_community.add((999, 65530, 2));

		return true;
	}

	if reject_because_of_bad_origin then {
		reject "origin ASN [", bgp_path.last, "] not in allowed as-sets - REJECTING ", net;

	}
	if reject_because_of_bad_prefix then {
		reject "prefix not in client's r_set - REJECTING ", net;

	}
}

filter receive_from_AS3333_1 {
	if !(source = RTS_BGP ) then
		reject "source != RTS_BGP - REJECTING ", net;



	scrub_communities_in();

	# Attach custom BGP communities
	# from_europe
	
		bgp_community.add((65534, 1));
		bgp_large_community.add((999, 65534, 1));
		bgp_ext_community.add((rt, 65534, 1));


	# NEXT_HOP
	if !next_hop_is_valid_for_AS3333_1() then
		reject "NEXT_HOP [", bgp_next_hop, "] not allowed - REJECTING ", net;


	# AS_PATH: length
	if bgp_path.len > 32 then
		reject "AS_PATH len [", bgp_path.len ,"] longer than 32 - REJECTING ", net;


	# AS_PATH: left-most ASN
	if bgp_path.first != 3333 then
		reject "invalid left-most ASN [", bgp_path.first, "] - REJECTING ", net;


	# AS_PATH: invalid ASNs
	if as_path_contains_invalid_asn() then
		reject "AS_PATH [", bgp_path ,"] contains invalid ASN - REJECTING ", net;


	# AS_PATH: transit-free ASNs
	if as_path_contains_transit_free_asn() then
		reject "AS_PATH [", bgp_path ,"] contains transit-free ASN - REJECTING ", net;



	# Prefix: global blacklist
	if prefix_is_in_global_blacklist() then
		reject "prefix is in global blacklist - REJECTING ", net;



	# Prefix: bogon
	if prefix_is_bogon() then
		reject "prefix is bogon - REJECTING ", net;


	# IRRdb checks
	verify_AS3333_1_irrdb();

	# Blackhole request?
	if is_blackhole_filtering_request() then {
		accept "blackhole filtering request from AS3333_1 - ACCEPTING ", net;
	} else {
		perform_rpki_validation();

		if route_is_rpki_invalid() then
			reject "RPKI, route is INVALID - REJECTING ", net;


		# Prefix: length
		if !prefix_len_is_valid(8, 24) then
			reject "prefix len [", net.len, "] not in 8-24 - REJECTING ", net;


		honor_graceful_shutdown();
	}


	accept;
}

filter announce_to_AS3333_1 {


	# Blackhole request?
	if is_blackhole_filtering_request() then {
		apply_blackhole_filtering_policy();
	} else {
		# RPKI: do not announce INVALID to clients
		if route_is_rpki_invalid() then {
			if !announce_rpki_invalid_to_client(3333, 192.0.2.11, "AS3333_1") then
				reject "route is INVALID - NOT ANNOUNCING ", net, " TO AS3333_1";
		}
	}

	# BGP control communities
	if !route_can_be_announced_to(3333, 192.0.2.11, "AS3333_1") then
		reject "route didn't pass control communities checks - NOT ANNOUNCING ", net, " TO AS3333_1";

	apply_prepend(3333, 192.0.2.11);


	add_noexport_noadvertise(3333);

	scrub_communities_out();



	accept;
}

# RTT: 604.0 ms (normalized value: 604)
protocol bgp AS3333_1 {

	local as 999;
	neighbor 192.0.2.11 as 3333;
	rs client;

	passive on;
	ttl security on;
	add paths tx;

	secondary;

	interpret communities off;

	import limit 138 action restart;


	import keep filtered on;

	include "/etc/bird/client.local";

	
	import filter receive_from_AS3333_1;
	export filter announce_to_AS3333_1;
}