Tunnels and IXP
Connect by GRE (IPv4 and IPv6), SIT (IPv6) or WireGuard to a FreeTransit location, or directly at an internet exchange where we are present. You choose the BGP address families you need.
What the portal offers
Features
FreeTransit gives your own ASN free, non-commercial IP transit by tunnel or at an internet exchange, and can sponsor your ASN and IP resources at RIPE. Everything runs through one self-service portal. This page gives an overview; the details are in the user manual after sign-in, and recent changes are in the changelog.
Getting connected
Guided ordering
Sign in with PeeringDB, pick the exact ASN you manage and enter your endpoint. Your request shows every authorization step and what, if anything, is still needed from you.
Automatic provisioning
Once your ASN is approved, complete requests are deployed automatically. The portal shows both endpoints, inner addresses, deployment progress and a WireGuard configuration to download.
Self-service tunnel settings
Change your endpoint address, path MTU, WireGuard key or port yourself. The portal calculates the inner MTU for DSL and other reduced-MTU links. Your prefixes and sessions stay allocated.
Routing and security
RPKI and ASPA
Every route is checked with RPKI route origin validation, and RPKI-invalid routes are rejected. ASPA path verification is checked and tagged on every route.
Informational communities
Routes you receive carry large communities showing where we learned them (node, upstream, IXP, peer or customer) and their RPKI and ASPA state.
Traffic steering
Tag your announcements to keep them away from a specific network or node, prepend AS41051 up to three times, or announce only to internet exchanges or only to upstreams.
Filtered and checked
Your prefix filter is generated from your registry data. We regularly check your routing policy, ASPA and PeeringDB settings, and email you clearly when something needs attention, including a reminder to add a second upstream if FreeTransit is your only one.
Visibility
Session status
See the BGP state and tunnel health of every session, with warnings before inactive services are removed.
Looking glass
Each BGP session shows your current inbound prefix filter and the routes the router accepted and rejected, refreshed every few minutes.
Prometheus and Grafana
Create a metrics token to scrape your own tunnel and BGP telemetry: traffic counters, endpoint latency and loss, BGP state, route counts and whether each announced prefix was accepted. A ready-made Grafana dashboard is included.
RIPE sponsorship
ASN and IP resources
Request a sponsored ASN together with IPv6 PI or PA space from openfactory nordic oy as your sponsoring LIR. The request asks for exactly what RIPE needs, and the portal tracks the case until RIPE assigns your resources.
Agreements online
Your sponsorship agreement is generated for you. Upload your signed copy; the countersigned version stays available in your documents.
Your resources
See your sponsored ASNs, PI objects and assigned PA prefixes in one list. See pricing for sponsorship fees; transit itself is free.
Your account
PeeringDB sign-in
Prove control of your network through PeeringDB and recover access the same way. Two-factor authentication with any TOTP app is available.
Cases and messages
Your requests, support conversations, account notices and the emails we sent you are kept together in one place.
Invoices and data export
View and download your invoices, and export the data we hold about your account at any time.