Skip to main content

AS registration

To connect to the SCION network, you first need to register an AS number and create an initial certificate. This section explains the required steps.

AS number​

Every participant in a SCION network needs their own SCION AS number. Refer to ISD-and-AS numbering for more details on the numbering scheme.

Currently, Anapaya is the only organization assigning SCION AS numbers for the productive SCION networks. For specific ISDs, other organizations are assigning SCION AS numbers on behalf of Anapaya.

BGP AS numbers

The entire 4-byte BGP AS numbering space is reserved for organizations that own the respective BGP AS number. Thus, if your organization already has a BGP AS number assigned by an official BGP numbering authority, it can claim the same SCION AS number.

Depending on the ISD follow the respective process listed below.

Request AS number for public ISDs and SSHN participants​

Reach out to the Anapaya CSE team to request a SCION AS number from Anapaya. Your request should include

  • Your organization details,
  • Your technical contacts responsible for SCION,
  • The Isolation Domains you want to connect to.
public listing

Once assigned, the AS number and your organization will be added to the public AS list.

Request AS number for SSFN participants​

SIX issues SCION AS numbers for participants in SSFN. Follow the instructions on the SIX SSFN website on how to apply for a SSFN certificate and reach out to SIX. In the process, when required to fill in AS Number, leave the field empty and SIX will assign an AS number.

Request AS number for SEPN​

The SEPN Association issues SCION AS numbers for participants in SEPN. Follow the instructions on the SEPN website on how to apply for a SEPN certificate and reach out to the SEPN Association.

Request AS number for SSUN participants​

Axpo Systems issues SCION AS numbers for participants in SSUN. Please reach out to info.ssun@axpo-systems.com to gather information on joining SSUN and requesting a SCION AS number.

AS certificate​

A SCION AS needs a SCION AS certificate for every isolation domain it should be part of. Requesting an initial AS certificate is a manual process which is described below. Once the AS certificate is uploaded to the Anapaya appliance, SCION connectivity to the rest of the network can be established. AS certificate renewals are then automated and are performed by the appliance every few days.

Create certificate signing request​

First, create a Certificate Signing Request (CSR) for the AS certificate. Follow the steps in Provision AS certificate. Be sure to include the relevant subject details.

ISD specific subject details

When creating a CSR for a SCION AS in the following ISD, make sure the values match with the contract values agreed upon with the corresponding ISD management.

Request the AS certificate​

For public ISDs, send the CSR to the Anapaya CSE team.

For other ISDs respect the ISD specific process, a non-complete list can be found below:

Install the AS certificate​

Upon receiving the AS certificate from the issuing party, you need to install it in the Anapaya appliance. Follow the steps in Provision AS certificate.