Core Entity Brief
| Entity | Andreas Duering |
|---|---|
| Public role | Because Duering’s public adherence to MANRS and transparent security practices make AS216427 a useful benchmark for individual operator routing hygiene; changes in his configuration can affect a small set of peers and self-hosted services, and the lack of independent biographical verification introduces uncertainty. |
| Region | Germany |
| Category | Individual registry-holder label |
| Primary domain | Infrastructure |
| Signal focus | Institution Type |
| Time horizon | Quarter (30-120d) |
| Impact | Medium |
| Confidence | 0.95 |
| Evidence coverage | 8 public source references |
| Related coverage | Profile anchor article |
| Website | Public evidence pending |
| Last update | Jun 02, 2026 |
AS216427 is a personal, non-commercial IPv6 autonomous system operated by Andreas Duering for educational and experimental purposes.
What It Does
- Operating model: Duering operates the AS as a private individual without customers or revenue. It serves as a platform for learning and self-hosting.
- Sponsorship: iFog GmbH sponsors the AS, and Securebit AG sponsors the IPv6 prefix. These relationships provide infrastructure without transferring control.
Operating Snapshot
- Network type: IPv6-only autonomous system with a documented prefix 2a06:de00:ad00::/48, peering at FogIXP and BGP.Exchange, and upstreams including iFog, comtrance, and Freetransit/Openfactory.
- Traffic level: Low traffic, no transit services, and no SLA. The network hosts lightweight websites and experimental services.
- Security practices: Implements bogon filtering, RPKI validation with stayrtr and FORT, import filters, and MANRS participation.
Control Surface
- Routing policy: Duering controls import and export filters, RPKI ROAs, route-set AS216427:AS-OWN, and peering criteria. He can unilaterally change announcements, peering partners, and filter rules.
- Registry and exchange presence: He maintains records in RIPE, PeeringDB, MANRS, FogIXP, and BGP.Exchange, which define his public network identity and reachability.
Watchpoints
- Prefix count consistency: PeeringDB lists two prefixes while bgp.tools shows one; verifying the current assertion set ensures accurate footprint reporting.
- Sponsor continuity: If iFog or Securebit withdraw support, Duering's ability to maintain connectivity may change.
- MANRS status: Losing MANRS participation would weaken the public trust signal, though the network scale is small.
- Operational change: Shift to commercial services or transit would materially alter the operating model and impact analysis.

