Build a full BGP session on AS398999 self-service from the panel. Bring your own IP space (BYOIP) and announce your /24, run GRE / WireGuard / VXLAN tunnels, and stay IRR / RPKI-aware. Free anycast DDoS on announced space. From $6.72/mo — free trial.
Monthly pricing in USD, tax-inclusive. Hourly billing from $0.010/hr with a monthly cap. Every plan can run a full self-service BGP session on AS398999, announce your own IP space (BYOIP), and terminate GRE / WireGuard / VXLAN tunnels — with free anycast DDoS on announced prefixes.
Most hosts hand you a static IP and a firewall. We hand you a BGP adjacency and a routing table.
A genuine BGP adjacency with AS398999 — send your prefixes and AS_PATH, receive a default or table. Not a static route in disguise.
Bring your own IPv4 /24 or IPv6 /48 with an LOA and IRR object, and originate it over our network in minutes.
Bring the session up on the VM or over a tunnel to your own edge — all self-service from the Nexus panel.
We auto-add your AS / AS-SET to AS-BOREAL and honour ROAs, so your announced space propagates cleanly.
You get real routing to AS398999. Configure the neighbour on your VPS with your favourite daemon, we accept your registered prefixes, and you are in the DFZ. Here is the whole flow.
Deploy any VM and enable BGP from the panel. You receive your neighbour IP, our ASN (398999), and — if you want the session over a tunnel — a GRE, WireGuard or VXLAN endpoint to bring up first.
Add a route / route6 object for each prefix in IRR and, ideally, a valid RPKI ROA. We auto-add your AS and AS-SET to AS-BOREAL so upstreams and peers accept your announcements.
Configure the neighbour on your VPS with BIRD, FRR or any router you like. Once the session is Established you originate your own space over our network.
Originate your /24 or /48, or anycast one prefix across our PoPs. Announced space rides free anycast DDoS mitigation — no separate scrubbing contract.
Announce 203.0.113.0/24 (documentation space shown; use your own registered prefix) to AS398999. Replace the neighbour address and your origin ASN.
router id 203.0.113.1;
protocol static my_prefixes {
ipv4;
route 203.0.113.0/24 reject; # your BYOIP block
}
protocol bgp sucura {
local as 65001; # your origin ASN
neighbor 198.51.100.1 as 398999; # your Sucura neighbor
ipv4 {
import filter { reject; }; # take a default via static, or accept as needed
export where proto = "my_prefixes";
};
}
The same idea on a classic vendor CLI: define the neighbour, advertise your network, and let our IRR/RPKI filters do the rest.
router bgp 65001 bgp router-id 203.0.113.1 neighbor 198.51.100.1 remote-as 398999 ! address-family ipv4 unicast network 203.0.113.0 mask 255.255.255.0 neighbor 198.51.100.1 activate neighbor 198.51.100.1 soft-reconfiguration inbound exit-address-family
Prefixes and ASNs above are RFC 5737 / RFC 5398 documentation values — swap in your own neighbour IP, origin ASN and registered BYOIP block. Full worked examples, tunnel setup and our community list live on the network pages linked below.
Most VPS hosts won't let you touch the network. We built our whole panel around it.
Bring your own prefixes (BYOIP) and originate them over AS398999 from your VM. IRR and RPKI-aware, with our BGP community list documented on the network pages.
Terminate protected tunnels into your VPS or your own edge and carry the BGP session over them. Set them up yourself from the Nexus panel — no ticket, no waiting.
We add your ASN and AS-SET to our AS-SET, AS-BOREAL, and honour your ROAs — so upstreams and peers accept your announcements without manual chasing.
Canadian-owned, running our own ASN across multiple PoPs — not a faceless reseller. Real network engineers you can actually reach.
From getting your first ASN live to anycasting a global service — a real BGP session unlocks all of it.
Just got an RIR allocation? Bring up your first eBGP session, originate your own ASN and prefixes, and go live in the DFZ without waiting on an upstream's ticket queue.
Originate one prefix from VMs in multiple PoPs and let BGP steer users to the nearest node — DNS, an API edge or a game frontend, all on IP space you control.
Take a session as one of several upstreams for redundancy, or route space that already lives elsewhere through our anycast DDoS mitigation over a tunnel.
Practice route filtering, communities, RPKI and AS-PATH prepending against a live network instead of a simulator — a real adjacency, not GNS3.
Common questions about BGP sessions, BYOIP and tunnels on AS398999.
Yes. Every VM on our platform can establish a full eBGP session with AS398999 self-service from the Nexus panel. You get real routing — you send us your prefixes and AS_PATH, we send you a default or a full/partial table depending on your plan. It is a genuine BGP adjacency to our routers, not a static route dressed up as BGP.
Yes. If you hold your own IPv4 or IPv6 prefixes — an RIR allocation or an LOA-backed assignment — you can announce them (BYOIP) over AS398999 from your VPS. The most specific we accept in the DFZ is a /24 for IPv4 and a /48 for IPv6. Provide a valid LOA and matching IRR route object and you can be announcing in minutes.
Our filters are IRR- and RPKI-aware. We auto-add your ASN and AS-SET to our AS-SET, AS-BOREAL, so upstreams and peers accept your prefixes. You should create a route/route6 object for each prefix and, ideally, a valid RPKI ROA authorising AS398999 (or your own origin ASN over a tunnel) to originate the prefix. Invalid ROAs are dropped, so RPKI-signed space propagates cleanly.
You can peer directly on the VPS's interface, or bring the session up over a tunnel: GRE, WireGuard or VXLAN. Tunnels let you terminate the BGP session and your announced space on your own edge or another VPS, and they carry the free anycast DDoS-protected transit. You set them up yourself from the panel — no ticket.
Yes. Prefixes you announce over AS398999 ride our always-on anycast SucuraGuard mitigation at no extra cost, covering L3/L4 volumetric floods and L7 attacks. You can anycast your own service across our PoPs and get protected transit for it without a separate scrubbing contract.
Plans start at $6.72 per month for VM-1C-2G (1 vCPU, 2GB RAM) and scale to VM-8C-32G at $110.21/mo. The BGP session, BYOIP announcements and tunnels are self-service features of the platform. Billing is hourly from $0.010/hr with a monthly cap, prices are in USD and tax-inclusive, and a free trial is available.
Common uses are announcing your own ASN, anycasting your own service across multiple PoPs, taking protected transit for space you already hold, running failover/multihoming across providers, and learning BGP in a real DFZ environment. If you run an AS-SET, we add your downstreams' objects to AS-BOREAL so their space propagates too.
Full eBGP on AS398999, BYOIP, GRE/WireGuard/VXLAN tunnels, free anycast DDoS on announced space — all self-service. Deploy in minutes, or start a free trial.
BGP, communities and DDoS-protected VMs on the same Sucura Networks platform.