NETWORK

AS402194 is an independent Canadian network operator. We run IPv6 transition infrastructure: NAT64 and DNS64 gateways, WireGuard IPv6 tunnels, and BGP sessions for subscribers who announce their own prefixes. Everything is provisioned from the subscriber portal, with no ticket needed for a tunnel or a NAT64 whitelist.

We are IPv6-first. Every service is addressed from our IPv6 space, and access to the IPv4 Internet is provided through our NAT64 translators rather than through scarce public IPv4 addresses.

Choose Toronto or Montréal when ordering your tunnel. Availability is shown on the network status page.

• Prefixes announced over a subscriber BGP session are accepted only from the verified ASN, and only while they match IRR route objects and RPKI ROAs.
• Prefix filters are regenerated automatically from IRR and RPKI data. RPKI-invalid routes are dropped.
• Source address validation is enforced on every tunnel: a peer can only send traffic from the prefixes routed to it.
• Outbound SMTP (TCP 25), BGP (TCP 179, unless the BGP add-on is active), SMB and common amplification ports are blocked for all subscribers.
• Blackhole community 65535:666 (RFC 7999) is honoured on subscriber sessions.

AS402194 has an open peering policy and welcomes interconnection with networks of all sizes. Our IRR as-set is ARIN::AS-MGNETWORKS. Routing data is published on PeeringDB and bgp.tools.

Tunnel subscribers receive a static IPv6 prefix from our provider-aggregatable space, routed to their tunnel. The prefix stays with the subscriber for as long as the subscription is active. NAT64 subscribers keep their own IPv6 addresses and whitelist them on our gateway.

IPv4 is shared: outbound sessions leave through the NAT64 exit address of the chosen city. Inbound IPv4 reachability is available by announcing your own IPv4 prefix over a BGP session (bring your own IP), or by fronting a web service with a CDN that speaks IPv4 to clients and IPv6 to your origin.