+defnet sgo noloop
+ addr !172.29.198.0/23
+ addr 10.0.0.0/8
+ addr 172.16.0.0/12
+ addr 192.168.0.0/16
+ forwards househub colohub
+defnet vpn safe
+ addr 172.29.199.128/27 2001:ba8:1d9:6000::/64
+ forwards househub colohub
+ host crybaby 1
+ host terror 2
+defnet anycast trusted
+ addr 172.29.199.224/27 2001:ba8:1d9:0::/64
+ forwards dmz unsafe safe untrusted jump colo vpn