Acceptable Use Policy

• One MAC address per port; only your router interface may appear on the LAN.
• Only IPv4 (0x0800), ARP (0x0806) and IPv6 (0x86dd) frames.
• No broadcast or multicast traffic, apart from ARP and IPv6 neighbour discovery.
• No link-local protocols such as CDP, LLDP, STP/BPDU, VTP, DTP, OSPF, IS-IS, IGMP/MLD, mDNS, DHCP or IPv6 router advertisements.
• Disable proxy-ARP and IPv6 autoconfiguration on your peering interface.

• Use only the IPv4 and IPv6 addresses assigned to you.
• Announce only prefixes you are authorised to announce, with correct IRR objects and RPKI ROAs.
• Send traffic only to destinations learned over BGP from the member concerned; no default routes or static routes pointing at other members without their consent.
• Never announce the NeverIX peering LAN prefixes outside the exchange.
• Do not hijack, leak or spoof routes or source addresses.

Selling or providing transit over the NeverIX fabric is allowed, as long as it does not affect other members or the stability of the exchange.

• Denial-of-service attacks, scanning or probing of other members’ infrastructure without permission.
• Intercepting, monitoring or redirecting other members’ traffic.
• Any attempt to gain unauthorised access to NeverIX systems, including the route servers, collector and portal.
• Using the exchange for any unlawful purpose.

To operate the exchange we monitor port counters, latency to member addresses and BGP sessions, and may inspect frames on the peering LAN to investigate faults or breaches of this policy. See the Privacy Policy.

Breaches may lead to a warning, filtering, shutdown of the affected port or session, or termination of membership. Where the exchange is at risk we may act immediately and inform you afterwards.

Report suspected breaches to abuse@neverix.net, including your ASN, the addresses involved and timestamps (UTC).