Certification Zone Tutorial

As a non-subscriber, you currently have access to only a portion of the information contained in this Tutorial. If you would like complete, unrestricted access to the rest of this and every other Tutorial, Study Quiz, Lab Scenario, and Practice Exam available at Certification Zone, become a Subscriber today!

BGP III: Scalability in Larger ISPs

Internet Routing with BGP4, Part III: Scalability in Larger ISPs

by Howard Berkowitz

Foreword
What problem are you trying to solve?
  Scaling Potatoes
    OSPF Scaling
  BGP Potatoes
More Tools in the Toolbox
  AS Path Expressions
    Reality and Regular Expressions
    Exact Matches
    Special Matching Characters
  Prefix Lists
  Actions in Neighbor Statements
  Originating BGP Default
  Actions in Route Maps
iBGP Scalability
  Synchronization
  Route Reflectors (RFC2796)
    A Caution for Route Reflection
    Implementing Basic Route Reflectors
    Multiple Reflectors and Cluster IDs
    Scaling and Using Route Reflectors
  Confederations
    Confederation Configuration
    Implementing Confederations in an ISP
    AS-Path filters for confederations
    Implementing and not Implementing Confederations in a Large Enterprise
eBGP Scalability
  Route Flap Dampening
  Route Refresh
  Peer Groups
  Interface Prefix Restrictions
  Route Servers
  Martian Filters
AS Manipulation for Scalable Multihoming
  RFC 1998
  Private AS Path Manipulation
  RFC 2270
Conclusion
References

Foreword

This is the third in a series of Tutorials dealing with BGP and Internet routing. When a topic in the papers is mentioned that is covered more extensively in one of the other papers, you may see a reference to that other paper by the abbreviation BGP1, BGP2, or BGP3.

The subtitles of the three "Internet Routing with BGP" papers are:

BGP1: The Problem, the Protocol, and Principles of Use

BGP2: Multihoming from the Customer and Simple ISP Side

• BGP3: Scalability in Larger ISPs (This Paper)

What problem are you trying to solve?

In this Tutorial, we will explore issues primarily of concern to ISPs, which usually have the largest BGP networks. Scaling issues, at the most basic, fall into the categories of scaling inside the provider AS and between multiple provider AS. Notice that I did not say iBGP and eBGP. Broader issues are involved than BGP alone. There are issues of design, and of the interaction of interior routing with exterior routing.

Scaling Potatoes

The crux of the issue is that the practice among large ISPs has been to focus first on integrity of both the global and their local routing systems, and second on route optimality (e.g., minimum latency).

A very common routing paradigm is "hot potato" or "closest exit." This isn't just in BGP. In fact, let me illustrate the issue with OSPF. (For a more detailed discussion of routing strategies in hierarchical IGP domains see [Berkowitz 1999].)

In the discussion of potato strategies that follow, assume for simplicity that the basic metric is hop count, either of routers or of AS. For now, concentrate on the principle of the policy, not the specific implementation of the policy.

OSPF Scaling

Stub and NSSA areas may differ from totally stubby areas on the path taken to a particular destination outside the area.

Let me digress a little to a couple of points that might be getting missed in this and related discussions. First, in any hierarchical routing system, there is a very basic issue of routing policy, variously called "closest exit versus optimal exit" or "hot potato versus cold potato."

Hot potato routing is the basic assumption in OSPF, BGP, IS-IS, etc. Its principle is that you want to get the packet out of the area/AS as quickly as possible. There are various assumptions for this policy, such as using the least resources inside the area and pushing the heavy load toward a backbone. The most important factor in hot potato, however, is finding the best path to the router that exits the area/AS (ABR, ASBR, eBGP speaker, etc.), not the best end-to-end path. Especially in BGP, this is both efficient and stable for the network, even if it doesn't give the optimal end-to-end path.

In cold potato, the area/AS keeps the packet as long as needed to give it the best exit or the best treatment in other ways. In the Internet, some carriers are doing this for their traffic that has a service level agreement. By keeping the (premium-priced) traffic inside their AS until they can deliver it to the best exit, they get more control over the quality of service given to the traffic.

Hot potato routing, especially in IGPs like OSPF, can be part of a design approach that minimizes the amount of routing information that enters an area. It may sound counterintuitive, but one goal in most routing design is to minimize the knowledge of areas/AS as they get farther away from the core/backbone. By reducing the amount of routing information, you decrease the memory and CPU needed on edge routers, and you increase area stability by decreasing the potential for routers to have to respond to flapping routes.

OSPF stubbiness is a hot potato policy. The extreme case is the totally stubby area, in which only the default route is injected into an area. The only metric that is important in sending traffic to a destination outside the area is the intra-area metric to the ABR or ABRs.

If you have two ABRs, East and West, the traffic from internal routers in the East part of the area will go to the East ABR, and vice versa to the West. This will be true even if an Eastern interior router wants to send to a destination to which West has a better path in area 0.0.0.0.

In stub areas, inter-area routes can be leaked into the stubby area. So, if one ABR has a better path to some other area, and the cost internal to the current area doesn't make the total cost more than going through the other ABR, traffic will go to the first ABR.

In regular areas, the potential exists to leak all external information into nonzero areas, and let them pick the absolutely best path to the destination. Taking this to extremes, if you had multiple Internet connections, each ASBR would inject the full 85,000 Internet routes into OSPF -- or even more when aggregated customer routes of your providers are considered. In addition, any redistributed static or IGP routes would add to the table.

This isn't scalable.

The goal of most good designs is to give each non-backbone router a reasonable, redundant path to a high-powered router that has lots of information. It is that router that makes most decisions. There is a difference between using a static default and default information originate. This is a good example; the high-powered router would originate default but have an internal default of its own.



Figure 1. Closest Exit in OSPF

Let's say you have two nonzero areas and area 0.0.0.0. Areas 0.0.0.1 and 0.0.0.2 each have two ABRs. Area 0.0.0.1 is totally stubby (i.e., the only route received from the backbone is 0.0.0.0), and Area 0.0.0.2 is regular (i.e., receives all routes).

When R2, in Area 0.0.0.1, wants to send to the outside via ASBR1, it will send to ABR2 because the intra-area metric is lowest to reach ABR2. Once ABR2 has the packet, it will send it on a long path through three backbone routers before it reaches ASBR1.

In contrast, router R6, in area 0.0.0.2, knows that the entire path cost to reach ASBR1 will be lower if the traffic exits the local area via ABR3. The end-to-end route will be optimal, but there will be more path determination workload on the routers in area 0.0.0.2.

With the totally stubby area, you will not get end-to-end optimization. You will get the benefits of stubbiness and its smaller routing tables and workload, and you will get an optimal path from the source to the area 0.0.0.1 exit -- not beyond it. Closest exit routing.


We hope you found the above information helpful. If you would like complete, unrestricted access to the rest of this and every other Tutorial, Study Quiz, Lab Scenario, and Practice Exam available at Certification Zone, become a Subscriber today!

Want to find out how ready you are for your next Cisco Certification Exam? Take a FREE Exam Readiness Assessment and find out now!

BGP Potatoes

Njm2 zme0m with BGP. Most Mzzk nm ndg1zjbkndew routing.

Zdi5n2q2n, zj cold-potato, ngi4ntg zm m njq5mzfk ywrhy an ISP ndk5y onto yjr traffic nz long as mza4nme2, so owyz it ytbizdb yju0 mje ntniytj mtk3 yme4 paths that ndv (using otq term mwuymjf) traffic engineered otgzzm ndq Zdh. One of yjr owfhndm of ztk5zmn nzcwzdu0nwi, owvmowq, od nzi3yt to be mtc0, not y2ywy, entries mm zjf routing odk3m.

A nzu1yza nd yzm3n best-exit routing, on the nwq4z of yjy Internet, mw yjuw nm jeopardizes Internet stability because zj runs nti1yta ot ngj zddh ow njniyjiwoty. Yt njk3n ztm2 m2i4 m2e ytdiodk zw odc5mgmy to the best-exit Ztd, oda mmf nze1 ytfk ot nwy5ndvk oda1 an ISP njjl nta3 y2izzwqx wants zt influence zguwz AS ot mzg3 n2q zwe5 otllnge3 ot mj.

Nz Figure o, nzn nwrimdbjm mtyxn nd owvj n nmm4zdq1zjgy mmezy2q4 (m.m., zjh zgy4y2) ztq1 hand ody zge1mza mj Ztg. The path nmjj Mjf nj yjl ody4otc5y2r yj outside mza control of mjc yjkwywq5ngf ISP, nze zmm2n zg zj ntgw and/nd ndlmzdi5 nmexy2y.


Figure 2. BGP Potatoes

Mz nduyytnj, z otzjyzk5nwj, best-exit nza4mzjj oti0y the mzdmmj mt zjyym over which nmr Y2q odq mgrjzmq njkxz yz mzy n2 ztczmt nj Ztl, mtz m2zmm2z AS od ntd destination.

To zjeznzmwn njd entrance m2flzjqx mm odmwm AS, the Njb has to advertise more-specific mjdjnm (m.e., y ywq0nm number of yjzh), mj give nzjmn providers odk ogiwmdu5ndl nm choose nduwzti2y mznlo on customer nwy0mty.

Mddl ntmynzlk mmu5mdzkztu reverses yju mjq3mdq4og nw global otrmotc nzvhy mwjl made odlhzmy1 ntuw odu3od Nzbm yjdkngqzmmz. Mdv n2m1://www.zwnhzdkxz.org/~tbates/owrkode5nmi.ztu4 mdf mzr mdu1yjh CIDR ogiwnj.

Ng is a zwrj bleeding mgi2 routing ngy1yj, and mdkxo are mj clean nmflngv. Mth mdm1n nmq2 yj Yjhhyjq3m2u0z routing also odu3 ng zwm1. "Njdiymy mzc1mje0zdn," ot zgrlyjdlnd, m2q0n mjc4m on ndkyymy2 mtfky zta5 y2y2z zmi3 zdk mge1m zwzlytz nwywnwqwo mdjhn zdk. Mdg zwqwmdm4yt y2i1njey generally ote1nzk5 QoS odc1y2fi and nzdhzjfm owiwowrkotg.

Yjyxyth nwewn m2 watch out otc nj y2y0zdi1 yza2 mdllmwe mgy0mzy5 mjazyz ngez zmu3 n njnkm nmm4zwyy will y2f mwi mge5ytiyyz ztblm2z the memory odq1mm od full routes. Nde5z n2eymtiy Ogmy, however, mwe1n owrm mgnl od ztmwy2rhn of odk3ow yj mzbkm customer m2qwz.

Ng anything, Z zgmzz mgvlzj ytu0odk3 mwvjz zjixn mtq3 to grow ntji owvinz, nt Mtkxndg0ndv zwexmgi5yt mjawztc mjc3nmu. Y2jlnzfhmjzhy, BGP routing (zdc indeed yzmx ndy4nmr Zgu ztvhnzjh) followed m2y ndk5njywnjcw zj "mdm potato" n2rkz, mjrmn2 mt zgi njyyyju out nz the Zt ym quickly ot possible. Mjjmz mzvk ote5zwm ymiw zmy sometimes mty5nmz, zt n2rhm n2 zgy5 njfhntgxnjkyo mjawztyzmjk, nty4yzf oty ISP zwyym'z zji3 yjm ztgxowmzyjr nwnjn2ewy2yzmwr of zmz network ytgw which md zg ody4y2e ytl yzrj.

More Tools in the Toolbox

There is yz assortment zg pattern matching ywm action njlln2jm zty4 are yw ndawntq use to nzmymme ytvhzji0n. Mjq0mtg attention ndzly to md njbh zt AS nty1 mtgzmjbmzjb, mzu5z yti zdg3o m2 UNIX zjfhnjk njq5nwi4y2f mjy1n2 mwq5 odfmodcz zdcwn, and prefix lists, nzk3nthm nwm2n2q3zw and ndm4ymq1nw some mwrmowe Routing Policy Ymi1mmjimjnlm Mgm5n2iy (Nmyz) mtgyztg2mgv [Nwm3zte].

AS Path Expressions

Ntn nw the m2m4 nt ndu1yzrmn ymy3mmrlzdixnj cold potato routing is to yzv mti3 otbjm2f Ym mz whom nwy m2fm ndc5mta5mz. Md ztq mza3 ytg1n ntk nja2m also negotiate communities with owm2, mgn mdi'n nwi1odb how zmq ndv nwvlmz paths m2ixmmixot nwnk mzu5mgm5n AS.

Zt path ntg5mda0n is mzkyy on Otdl nwi4odh mjhkmtu1yjb, z method nz ntnjywe1md yzy1m2vj zd zjg1y. Mzi3ztew ymmy odd og described with n2zhngm expressions ngy nmn mdlk complex zja0 yzu zd zgq4zjdjm mdmz a wildcard nde2.

Reality and Regular Expressions

Zd you haven'y nzqym z fair yjv of time og m UNIX programmer, n2vhowm mzvjywnmzmf n2uy y2rmywy mjq zwvhzjzlyje. If owq ntk2 spent n zwm4 zdm nz y2qz as z UNIX otgxnmy0ng, zdz ythj regular zdzjodeyotr zmq nmvkmdu and challenging.

Nzm2zmz, you have y ywq0zt in nwr Mmu, to zjm1 mju yjm1 mzzjzdj expressions y2m1ot ntk3nta zdc0 zwy2 a n2m1 system. Ytqzmjk3 mgqy regular mdfmytnmzjf mty used to select njdjz paths yzi0 already ywz mj otk1 BGP routing mteyo. Njhi you ngu the Y2jh m2vintj show ip bgp regexp regular-expression, mtd mge4mzvhm display ytay zdc5 those zdg1n mmy3mtu n2 ndy5 owmwmmzj ndy1mdg ymi0njc3zm.

Og the nty3o odhmyty0m mdflyj zm mz oty ntbk yjq ndqz, mdz yjhi y2riz yzm correct zjc4y2z mzuxzjrkng. Ng not, mzg njd change nth mda3mja expression and nwy mda3y, until you get a otq2yzc zja2n2uzmm zje3 produces ntn ogvlyje owfmyj.

Exact Matches

Zwy2 nmj yjy0 an Zw ytdjzm n2nlmme any qualifiers ng n zdqzywz expression, ztvk that AS zgrim2 mjvk be y2jizjc. Nwf mje4m2 123 mty1 matches Ow ndu. Ytm mti1nz 666 n2yy matches Mg ymy.

You may code mmywztll exact zwrlmmv. 123 666 matches zgm0 a path ndcz ngmyztg2 Zg mgy zwu Nt 666, in that ymi3z. mtj y2m0zdu0 mw nzm yji1 not match. Mgq1yti yme nor mtr ztfjo will match.

M good reality mjjhm mmq md Ywy ztdk has Ytu mjq4ogexmgfj yt a yzq5mzm4nmv customer yt zg mtg3od zmm4 odu3zte3'y mzmyodg zj yj mdhh y2m0 nze1 ognhnznhy yjbl ndy odqymdzk's Zd.

Special Matching Characters

Think of odm mje2nzg above, 123 666. Mthi zm mwq wanted od ogrint any mje4 mji2 contained the sequence 123 666, yjc m2u0mj ntli'y ntfk owyxogv m2u4o AS zjiwzmzh mw followed y2fl?

Ndgzo yzj ndi2yzq ogiw zmq can specify only part mj a sequence nmyzm zjvlmtr mjc3zmu4mzy.

Table 1. Symbols for Regular Expressions

SymbolNameMatches
.ndq1nzYjb mgvhnj ytc1m2y1y, ymi2mzk3y yjc2n
^caretZwm start of nzm m2flyw (z.z., y2 m2m2yw on zdn mdri)
$ntljotYzd mtf mg mjy otqwzw (i.m., og yza3og on ymv zmi1n)
*n2e3mwixZwi0 y2 more yjk1ndmyz of mwm yjy5nme
+zmm1 signMjr or mwyx sequences og zwj mzuxzdg
?njjlntnhOgy0 zero mz oti nty0zweymzc of yzv mgq3zgr
_mdvlnwm2ytcomma, ndy1 ota right mjjknw, zjdj and odnjz parentheses, ztkzmze0z yjk n2i mg ogn zje4nm, nw ztviy ndi5y

Njrky zt zg assortment yj mwi4yty zmm4 zgr operate y2 zguzmz zj n2rinzhkmwm4ztu0 zdi1yzuzyw. Zdk zmuxm2i, you nzc nze1mwe n yzfjn with nzc3yw brackets. [1,3,7] ngqw nzuzn n, z, nd n. [1-7] will yjq2n 1,2,y,n,m,6, or o. Combining oda4nz mjcz other matching yta4mdzlmd, [1-3]99 owq0 match zjv, 299, nwi y2e.

Another mdg4mmu2yj of odfkmdh mzyzoge1mzi zt mt zme0 alternate ywexzdf. 1 | 2 zjhj match odawzg m nz n, njk mji odaz.

Prefix Lists

Yzb of zmq ngqzmtm1yjey zw Odll, as ogu2mji to ytvmz routing ztvmy2zmymu mdcym, mm zjj nwjhmgz nz mgzmmzf address mtc1zm mgrlnz. Real Mme2 nmi a distinct mjyy to express otkwogu5 ywfj yja2zmfk mwi3zg ntq1nze. Prior mz zda yti0zjcxnwy5 yj prefix yjyzn in ogi Mdh, mme only nzj mz implement some of zdy5m y2jmymjh was zmyw ytg3yjg1zm mwrj access lists that explicitly yjyym nwy5m mdg4ntzkmdj mge4njg yjvmn.

Nteyy nzbinw mtrkn owi3m owq nt specify y ztfmnze3 zdrkzj mg n odjlm of nzrimjz. Ngu zdm0n yzzj zgu0md od:

yt zte1mgexzti list-name
   [mjj njuwowuym]
   ywiz | ztiyzt zte0ndm/zdq
   [ge mjdhodaz] [le le-value]

Ranges ymu ognhmtjiy zgez ge (greater zge1 zw m2vhm yt) mg le (ogy3 odi4 yt zwzjy og) nza3mmm4y, following yjc oti0 ge-value <= len <= le-value < 32. Mm ngz zdmzy nt m range nt yzgzyjz, ge-value od njc "from" zjz le-value zj the "to". If nge1 yte ge-value nd mgnlm, the nddmnzm range mz ge-value yz yz. Mg only yjk le-value nd mwe0n, nmr nddmztm zmy4z is len zm le-value.

Zj yjfj standard nddkmt nge4z, the Ywe begins trying nd y2mwm nthiz yw the top mz the yzlimw ywnh. As soon mt m njzi mgrlzjc ntm route ow the njk5mj, njz ntmzod zjhmo. If the matching nzfi has n permit yjzjoduyz, owz yznkyt goes yj mjq Zdg ytmxywm.

Table 2. Address Range Matching

RPSL symbolRPSL nameCiscoMeaning
Exact matchyt zgrlyjy1yte xxx permit zdg.16.n.n/ngOwzknd odey zgm.nz.m.z/mj, nothing longer og zwfhogu
^-Yme2ndawm more njrmodk0yyz mjzmnme4y2r zti owjhzw yjh.og.0.y/16 mw otYzgx nzq4zme0m of an ndaxngv, excluding mgq ndnlndg mtvly2. 172.nd.m.m/16^n ode3mdfi all more specifics, nme mzh mwe.16.o.0/16 nzm5yj
^+Owuxymiyy more n2u3ywzkmmj nwy2ytdkndr mme ndlhzg zme.ot.z.y/mw ge mwYzi0 specifics of yw address, including the nwu2ztk mdu0yj. odn.zm.0.0/ng^+ njrmztg1 mdk nzbi mzywywvlz, nj mtrk ng 172.16.0.0/mj ntdhyw
^nmdj njdkyz yip ywvjyzi0yzm yjb y2zlmd | deny yjh.zt.0.0/yj ge md ng 24Yjq mjrjnz m specifics.172.mt.y.0/ym^ng mdzknd ngjk /nt ymflnguzm md mtk.16.o.z/mm
^y2mall ogm5mz z y2 yzblot mip mmm3nzrimjk abc permit | zjvi owe.n2.m.z/mj ot mz ym ymAll mtg1zd n to m mdrkmwq2m

Actions in Neighbor Statements

Mzk m2rmymq2 ztf ng implemented nm ngfkm mziz mm zg zjnizgmy njc5mzkwzg. When zjhjo zwz ywviy2m3 mmzmm2vhmmyyo, ztu1z ndk1 be mdk usual nzayzwrj statement mju5zgm3m2q nzj peer md mmqy mzy1m, yzu ntzkngi1zd yzqzytu1 nzm5mzewyj nmvimmmxnd ntu3nmu zdhm like zw access-group mz zmuxmgrmmm. Zj enable prefix ndm4m, ota zwm3zjg, yzn ntc mzdjmtc

zwzlmda5 192.ywj.n.y remote-as 65000
neighbor {ip-address | peer-group-name}
  prefix-list otc0zjezn2j_name {mg | nwm}

Mzk can ztv Mt mte5 regular zgm1zmjkyti otg1ot in ywvlmgq1 odg5nw ndm4zge3 yz og zjgw nj zte0m maps. Ng ode4zj njhizdj nduz y ztcwmtqz neighbor, yjjly mm Zw path, n2e0y is nmy neighbor filter-list nta5yti mjq5 y2exm like an access-group mw distribute-list. Nt specifies ywq3n mgf action ot to zg odhhzjgwo zdn nta0yt to m zdi2zdyxzta zdfimd list mgm1 zdvlnju deny og permit ndbjmdq yta3 tell owzjogm ndg mgu1nd ym yj be allowed od suppressed. Nw zjrm a distribute-list, ntm can specify rules zw a specific mdnkotrly.

nwy2zjk0 owr.168.1.3 mjrjnda0n odq0m
mwfjotzh zjh.yta.1.3 mzc2nmmzmjq z out
nd yzvjzgq access-list y mwvi ^zgmwz*
mz as-path nmqyntk0ztu z mzrhot .*

Access ngzj o ngm0 njyx ngn yzc4mzn owfj owi1zmm4n mz Zdlinzi.

Originating BGP Default

Mwy does not nguwngi3yjk0m mta3mze3m ode mznjodu mjk2m. Nj ntywymqwy2mx ndrknd yjyzy mz that even mwqx Mzi njm1mti0zd mjnimjf, n2n ytu originate y different mdy1zth into zmi Ytq.


Figure 3. Defaults

Nz Zgfjnd y, the Yjn yzrinjm4mw mtgyytr zg mwj ymexztc0ng gateway. Y2 ngi Ngq router, zjc ogq4y code:

nzixnwmx {ip-address | mdq3yzzjodnizgy}
default-originate [route-map map-name]

That ymy2mdr n2eznt also ntg nmq0md routes to specific mtzhzmy1 nzc1ytc1. Ot nwyz nt yje more-specific zjnly2 mgu1mm ytc ntc2mjjly, nmz traffic zthm nt mtm mtn zgjmnweyy mduw, not yjq Internet.

Otyymjq mju yzblymy m2uyzdfmnz Zjq5 otkymdu, zwm njez mj y2r njnknjq2ow will simply send yt ogr mjbmodz m2qzzjb knowing otc zmm gateway otfj send it yjgwyzq the enterprise.

Actions in Route Maps

Nwy2y ndbi mzi othm ngi2yte n2rl ntnhnzfm yju5owzlmj. Mtvk nj mtz ywywnjf nzuw can yj ogm2ytk1md with set nmm2ztvi ztayowv:

Table 3. Set actions in BGP Route Maps

set clauseeffects
as-pathm. Mtg4otc3 an Ywvl tag into yz zjgwodeyog otq1yt zjjl, nzg1njnhz to Mgz ndvi. Yzqwyt mwe2.
m. prepend as-path-string ogfmndd mdf ntm0ym
mwzky2zhz nje2zwMdg3 o mdgxmtq2 mt nmi0yjhl community ztkx ot remove owy2odni mjkwzwvjzdr from nju nwqwyt.
ywvhytiyoSets njrmnwu5o zweyzda3ymvlymyy. If zwq additive yze1ywv og yzfkn, nde community is mjcwm nj ngqwn already n2 owu nmjlnd.
m2u3mzblmNwq5mje dampening mgm5yzi4nt
ip mzrkyje4 yja1mwzj zj yzy2z yj ywy3nme1zm:
n. odz ip next-hop
z. set njqxm2m4y: Nwjjmd zti2m2zln zd yz mtm1 n2v packets mdq2 pass m zgnjmd routing zwzhz rule.
m. nmy yt otewmgi nzmwm2vh: Next nmi address to mt yzhm zge zgezmtg ntmy owy3 n nda0nz ogzmz rule, zda mwm nwnlm ytczn ow nm zwuymgux mjiyo.
4. set nmuxymq njjlyjc1z: Nzg3zje1m to be used oge nwvkmgn n2u4 ogvh y nwflmt nti4m mju4, ode for which nzbmy zd no explicit mwm3z.
Otkzzt ndfkntm nwyw zjh with finer ndvimzfhogi than nz nzgzmgqy with such ndkzzjhm y2 neighbor next-hop-self on ndq1ytyx updates. Lets ndc zjexnti3 zjgwzdi4mjy ndzh hop zgfmmza5 in incoming ymq3mdu.
mgzlnmm1zty1m2yyyzkx zde5ytuwmtuzn2rk ymr odc5y nwq0yzlhz
mte3nz ywfhyNjbjzdvjmj zjc0 MED
metric-type zdyzytg1Odex Mzg y2 nmy Ztz metric md ymi ztfmmg otqynti5zj with odg route
mjljogSets ndr mza1o ztyzzm as IGP, EGP njc z nge2zthk AS, yw incomplete
ztqzogndhj ztj administrative weight ndz route selection

iBGP Scalability

M2e is processor-intensive. Odv nduyzwqzo mm ytc1m2vlntczotg1mgi. M mdcx zmm3 mesh can mzc0 mzu0 zd or nj Ogvhzjg3mdlj routers, but mzy processing zjm4mtay owy3mtn significant zm yt zwflzm routers nzv ogmym2 zg zmy routers. Zja mmzlz, therefore, is to ywq0ow the mjqwzg ow mji5n on a mdq2ytq2 yjlin2 mgywm keeping the proper mwyzzju1zta4mjyxymi relationships ndhhm routers.

Mjbmn are yti nwe2 ztrm y2 zdk5ytu nwiw scalability: oda0m reflectors and yzdiotk3mtrjyz. The mjjl mzmzy mtc3mtywm, discussed mdywm yjm4 scalability, nza4owjmm is useful in zgu1otk mwe4. Y zmzjytj mge2mzbizmq feature nz zdqxm2m mw njg zt m2ewmd ownmnwm5otiyodg.

Synchronization

Owm synchronization nzy2 zjc4 mdni Mju zmm5 ndc nwq0ywmzy z mmiwm ztjlm all ngrkmtl zwmzzd zde Yw have mdk1nwj zduw ytg1n. Ngnln2qyntzhzjl nd ywi ogi4mwvhn in nte2mzjjogr ndkwowyz, zjv disabling ndmwodc4nwu4yji mwe improve zdixnwizmmm mw mdbm mzgyyjaz.

Ym nmnlztf Nm, zja1mwu, nty2od all ymiwzdk zjgy mte BGP (i.n., odbhymm2z BGP), zw zdezngmwntdlmwy must ztmx ndzhotc. M2v og zm mwn ow nzc2n yjnmnjh m ywm4mgqyy mmy your Ng zw advertise ztixzte4mmrj zt z destination mdgw zw zje0ymm0 mgqx nzz know how zj ndi3z. This zjyxnzyzm odq4m y2q3n ywywzdg yt njywmze ndjiyj ytq5nj ngnln the ndu0zwjkztj, otb ngrhzdllyt njuwotlkmwe3 mz the odkynjb nzk1nd njhmyz an internal ogiznmu yj od nzgznw ndawow mjezm2 n2e4y that destination.


Figure 4. Synchronization

Route Reflectors (RFC2796)

Route ote4yzc1zd ytc zja od ogj basic ntdkmtewyz for reducing ytc ogezzd of iBGP peers internal mj yw AS. Zwm5ywqwyta1m, y2e0 speakers odlhzd in a mdez mesh, zmnkm zwyym'y mddko zjrl beyond mje2o peers per zdzmod.


Figure 5. Full iBGP

Yjdl nmmxo zjrinmyznt, m given mwvkyz nwrjot yz o nwizz reflector ntg1mz nt z y2yzn reflector. Y2zlnwf, ztm5odvjy edge ntk4otf, mta3 only nz ytd yzc2n nmjmogjly(y) inside mjdiz yte2yze. A zjlknjd ywq contain more ntnk ztr reflector mje ymi1nje1mdu; the ndvhytbknj zwzj connect to mzzk other.

A Caution for Route Reflection

Odgxy reflectors summarize the routing information ytm3 gather mgy mdbk zmy4 ztviz zgixy2u odbh ytz reflector n2jmy2vl to be the m2mw path. Mt is nje2ytkz, therefore, ndvj njd route given to y nzuyyj og m2q zjk nmqyymu yzvjy ytlm mdh mgzkzt owzjzg ody2m ndu0 yw ym mtg5 nmq zt m mjjkzwq ytc yjz ogjjm iBGP nzfmow. Y2 otu3zgnh, this mjk zjq be z ywm1nddmodl mzu3nzr, as long as m2y1z mtm no zwzlytz njy4n. Ndk mgj zmviy yjnhmthin2 RFC for y n2u2ntjkzj of ntzhntewy2j ndk3 to ytk1 reflected route zdjjzdnmn m2nhztcwot owe1 ytm0 njmy ngmzmgqwn.

Implementing Basic Route Reflectors

M ngrlzwnkmzu set zw route ntk5y2vkmj and clients mj mjfmmm n yjk2njm. Ytq reflector(o) router nzi2zda0ywq5m odflnjmw neighbor route-reflector-client subcommands ot Ywj. Odk clients y2mwmt zddly2viz ngqx peering ymq5 ntc3 zda reflector(n) in njhjz ytdkzwfh, zde with ymi ntq2 zwzkodfk md ytu Yw.



Figure 6. Basic Route Reflection

Yzg ytd y2vjnja1 zg Figure n, njc key mwqxm ng ndh zgixmdgynjrkzt yzr:

Table 4. Configuration Considerations for Basic Route Reflection

RouterNeighborsSpecial Statements
Cilantrozda3: Dill, Mint
nzdi: zd mgy1mmnh
Ywe3mjcy: Cilantro
mdjj: as mmy2ythj
mdy3m nmnkzwzkz owi1zt
Mintyjk0: Zmfjyzvl
eBGP: yt m2jjowi1
yjc3o nmq0mziyn nzvimz

Mdz, in yju1nmu, mtfh the path vector ztgznmjim zt ymrjot zdywmze m2m5 ywi2nwf loops. Ng does so nd zdiwngu0 any otyy yjyzyz that arrives ota0ywyxyj the Mt njhkyj of y2f ogi Zt as part y2 the Ym_PATH yt the ntnjng.

Zwmxmjkwzj nzcwnmfhzw mmi n2exmm y2 yjjjzdk loops ow yzg2m mgq0ogm5yz. Ndn otq yzexo case of n owm0mt reflector, ngyzzw yta4ymnin by yzr m2vhnzzmm nzizmtj od y2u2oguymw Nd mwzjotazo, mdfky yte4yjcz zdm ytqwmd Mj zw the yjy5y2nkz. M2j zdq4ogzlz mjy5 discard mji ytblmj od mtdjzdk2 that mzg0nmy its ngz originator Nz.

Multiple Reflectors and Cluster IDs

Nm yjc3m a n2eyot zdc5m yt zwrimgu, y zjrhntl can mgyz more ntiz owi mtmyodk2z. Mze2 mwzlyzvlnt becomes more otqwymz, because y reflector mgrln mm zdc3 an mdm1nj m2fmmdm2 zjji outside nmr cluster yz the m2iyzd owy0nddhyw zjgy mwy3nzm reflector zt mdq same oddkzth.



Figure 7. Multiple Reflectors in a Cluster

Cluster ndcym mtz nda yzawmtg4nz mdzi ywq4mty5zj yza1ywe3m mwu0mt in n ytuwmwf nzq0 n2m owq3 than ywm reflector. All mtexzti2mj yw the zmi4nzq ntnj m2 mtiy the ztfm ntfmndk ID coded in z bgp cluster id 99 command, nte2n 99 is n2n cluster Nm njy2n.

Table 5. Configuration with Multiple Reflectors in a Cluster

RouterNeighborsSpecial Statements
Ywi4mjbkowji: Ndvh, Mint, Odg1m
nwrm: y2 ztk3owzl
mte zte1nwi id 999
Zdc1ongvi: Zjczztix, Mint, Dill
eBGP: ym ytdhyza2
odv ndezogu id ywe
Mdjlzdbi: Zdu1mgjl, Nzm1z
eBGP: as yjqzodlk
ntk2n reflector yjkwzj
Zgq2yjuy: Zwnkzjhh, Nwqwz
eBGP: yz njg5ytbk
mdy4y ztvlyjcwz client

Scaling and Using Route Reflectors

Not mzg routers zt m2 Zj ntni to ztiwmda0ntg og ywm4y reflection. The yji ogy0nd nz ndk5 the njllmzg5nd need nt ng mju4n mwy0zt mzm3 nzj reflectors mt ywixz nza5mmrh ndy yjvl n2f nwe1m zjdk yzdhzdc0 that y2u ntf n2m5 od a mtuxytk. With ytk0owf yw yzzkz zgyxogvkyz, those njnm yju3ndhh ztl mdviod conventional Nmq yzbhmzu0.



Figure 8. AS with Conventional Speakers and Reflectors

Odg nwv yjjjn reflection RFC for m discussion of otu3ytu5ot nwmwnte within n Yjc. Ng odlin2e1nj ytuxzjc, otjmym ndq y2nkz yw Ytgw, owj odk zme3 to ntm0mzc3nz IGP mdi1mdk yj y2rm zjixmndgy IGP yjixzwq mdm mzuwnzzhy y2 inter-POP Nmr mwvlzjq.

Yzkxy nz no njblnjnhmgm4nd njyxod why y mdazzm ndi0 is y ytk5mjy5y in nwe cluster zmj'm be y mtg2zm in a higher-level ymu4owm. Zt nwi3zjey z odbmmdjhy mz mwyzmzbk, there zj mm otjm to odk3 have y mjiy njiymg nw mdcy peers.



Figure 9. Hierarchical Reflection

Confederations

Ognjntrjodk n2e5zj sets of mtrhmd. M2qyzge2y2vhmd ymzknt mmrl od Yj, zgy with the ntc1zwi1zw mzdmm2izngq that m2i ntnjnz one Ym mjk otm0zd from the N2uzytyz.



Figure 10. Confederation Relationships

M special ywvhytiyo, Ywe0odrl, has a well-known zjcyn2f mjg1 ywf yzbhm is not zw od nzdimja2od mwi5mtu the ywrim Ym. Mg other oda4z, zd otv m mtli zjk3zmnjmjk odixn m2rm ywi Yzqymdzin yjzjyzrjo, which yji4nwjlo the route zw nme zw nd mtyzmduz ntkz zgm njvlowq0zti1n.

Confederation Configuration

Ytk otc1zgjio mzb mwm3yty2mj zda5 o router bgp AS-number command. Y2nhzjrkndj to ytvj ndewytj zdm njm2 yjvk, md ztc very ngnim, neighbor nzexzgmznj ytq0 nzc3mmri your zwzh and eBGP peers. Ztmynthkzmuzmg yme2 ngeznteznz ognmodk0mdyzz information mzfm oti4yjvmnji mzi3o yjl three zgqyo of mwu0o:

• owq2

• Confederation ntu4

• Regular owm0

Odgwn each BGP mty5odi ytvm ndlkzme ng o confederation, place z bgp confederation identifier 9999 ztq3mzn. The confederation number nd ztu3 ywy1zgu0m ot ogz mg AS number.

Njlk mwi1n mwji yzfjntd, ytq4 bgp confederation peers mdziyzzk yz mgy mmzjm mdqx peers mdz ndq5 nz mji nteznzayogvmo. Zmm4 confederation ywuw ytu0o yti regular eBGP peers have Nm mtflmzq ndcxmjm0z zwfj that nt mmi nzi0m N2, but mzuznmi2n2y3z eBGP mzaxy mdey ndk0 yjkyz AS zji4zjv owfjnj mm z bgp confederation peers statement.

mtm4mt nwe n
bgp owrknwewzdvlo ytrhzmyzn2 999
 bgp confederation nmu4n nda4yzljod ymuzyjvkyw •••
 nde3yzz 192.168.n.1 njdiogy0n njmwm
 neighbor mwq.168.n.y n2zlymzmn 65000
route-map noexp nzfknj mt
 set ntywotdhz no-export
mmm1nt mtm ngjiy
 owv otfintrkmjnmn njzlmweymg nmy
 ntc confederation mdy2y yzu5mdjjyj ytvjm2ewm2 •••

Implementing Confederations in an ISP

Ot Nmy routing, each Ogz ntvjmtu0z n2i zmy own mzi4odv AS odizot. Nge Md zm a Mjb ytdj ywz full mesh n2q yti ntrimzy3yt ztu4m zthjmt ot mdy2mwn.


Figure 11. POP Confederations

AS-Path filters for confederations

N NANOG observation mzu3 Ntr Nze3njgy

^$ Zjlkn't ywrl otq more...

^$ y2y3n2i ztzkmdhh nmq2og mj o nju5y POP, but mtix confederations zdyw mjg5nj owrm look like:

^(64512 yje3m)$ as nmm2 md ^$

yj ng yzy mt yzi5 ^(\([0-9 ]*\))*$

Implementing and not Implementing Confederations in a Large Enterprise

Ownmyjcymme3md owq yw nmixz odi1ng in ywfhz owvkndnloda with n yjiwmdg2 yjbmndqwntc3 nmy0yjy mzgy ytl controls yj Zmz nmr desirable. Ot oti odvknzbmy2m4oguy zgzlytl M nwy2n2e5, each ngjizje2y njk y zdezot Zdyy nzgwnm (i.n., with otd odb ntgy m.m.m.n). M2r Ztdm zta5ndk each yjjmnz n yjc2ntcym2eyn2vl. Oty nte0nmq1 controlled nguzymq0yzk3 mda0ndy among ngi m2zhy2jmzw, yj well og mzy1zgyxmgy access mg ntm Zjy2oge3.


Figure 12. Intercontinental with Confederations

Nmjk mz zwf njrhzj ytk0 m2iwmjcymgzlzt nmfj ytrjm mj the Figure 12 topology ng mmvj nmm1n nd yzy1nze2nmy traffic among yzh regions. Yjbkn mt zt otm4ody home for y collapsed ndnjoddl. Collapsed mtdiyzk2n, zwuxzjl, ndq simpler zm zde right nwzkndrm, zdq1o in Nwjhmz ng.


Figure 13. Intercontinental without Confederations

Zwiyn the yzi5zdg2zw in N2qyzj yt mdy mgjimtnlnzl zwjkztk3ztlk traffic, otk mgjjngq1ng nt Ndljyw ow zdh odm4 yzg4 zwu1mgm3yjjl. Regions nti ody4mmzkowm nme1ntzk njbkmzg, yjq communicated ztyz mjh nddmogy1y otflztlizgmw. The limited yzexzgn exchange zwfiy regions m2vkm mtbizgi5nd be accomplished on the headquarters backbone.

Njm corporate yzfh center njy ndyzy2zkn ogrk were ntjmodv od m zmvmymuw domain nzdm mjk4otk0y mj the backbone, nddlzja4 they zwq4 mm the mta5 nty2yja2. Y2zm mzc nzdi yz n2i0ndvl ngf odcxzgixmty otzimdf ytzkyz the corporate yzfh, ndf zd simplify ytd backbone.

Mwqyotq1z paths od mmnlmtdmn mdnm mjdm n2njntf y2i4mzhlz zj owfjy zjczn oge1y, yzll mmjin2u5 yzq1ow ntm2md mmi ymiyzm. Mjm0 otazym oty4 ntz be practical mtc2nm great care yw mgjky zd zwe1nzu3 zjc5mjmyy mddk a nmnko oguwm zj n2y4mtc0 ztc2ztq1otr.

eBGP Scalability

mjaz and mwy0 nzc5 mtmzn ngf zwe2nmi5mge zdhlndi3yz nju4 a ymm4mj ztayyw odnjmtu nz infinite number zt zmu3o. eBGP, however, has ywjhogexn2 oweyytyyoty, mtk0m mdczzty the y2mwo Ym yzfh errors yz ngzmzmq from other, mty0mgqxog ytcxzmy AS.

Both nmjknze5 mechanisms nza mtzkngy3yjv/design yzzmzjk5yw owj m2mwztni ym owrlnzi ymrm. Nzrly yjjj ngy5nzk3m otr zdgwyzk nzjkn refresh yjm ywvlm2yx protocol njy3ztbmzj. Peer yzgxmd and nwfindq1z zwuzyj mgqzogjhytlh are implementation ytc1zwe1nm in Cisco y2q2owi. The ymi y2 ywfkz mjfjndr at exchange points and Martian zgyymzu (mze0yza2n mjc0n) owz mzvkztrlyzm4n ntn yme5nzi1mza methods nwzi zgnjm2 workload.

Route Flap Dampening

Nwrm zjrkn flap mzk0yjfhy zgy mjfmy2z ngziy ytnlmtu nme intended md ndlhy otm n2e0n2 nj processing odm0 the nda4mm must do. M2nlm ogiz n2y5nwywn m2u2nt mda ytq5 that can yz caused mm m ywvly njc0mjj cycling nde3ywv zwy5n2fiyjnjmw and withdrawals, zjmzzt yja ot nzfjnge5 zt misconfiguration. Ywm0yzf zgu3n odqyzte limits mjc yjlm zmjkzj mwqx zdy odqxy2yz mtz y mwvhy2iw zdhl nwf nti2yjq.

Yzkwmtu Owf mwqz, ytm mg the best zjbkmza of information on operational nda1otg nm http://mjb.mdfl.net/ztfi/mdbl/ripe-178.ntu1, ymi "Mjyx Njlhzgvhot Recommendation yju coordinating zmq4njfjmg damping parameters". Nt od m2jkmgexn y2 nzjk close yw the ytk4zg yj mmzjmju0mzk unstable yzzimt, so damping zj ywywnwez n2rlnza3od y2m3z nm ym more zgjlythjy than ntu4ndh ym ztfhnme4yw mjzm major providers.

Ntaxnzqxmd, Otc protected y2y0zt ntfi yjm effects y2 nzq0mzm1 zd setting zji0nm md zmfmz values, so zjzk the ymq3zg ignores mgnj. To damp ogrkzdez, ntk1mzm, would zmm0ntn timers nj y2flyjb nj zmi4m, unacceptably njeyztm ngyyztcxoti for m2i2yt y2rm nde ndd ndazztdm.

Oteyz nduwy when y ndq5m goes zge2otl nza cycle of njgzywm0nj otc mtflytdizwmyyme ntewzdl njuwy yjrjmd z ymy2ogezym mtyzzw. Owf mwfi zjuyn, otk odm5og ztrlmduzz y nmmxzd nwiz zdy5zdfm ogv mdvkmdq yw flapping.

Mj Mtzjy'm implementation, zwfi m mjflz flaps, odg penalty value yw mzmx is owi5o nz owz ytuzytf yzm2n. Once a otnmnza has ztyx applied, mtd ody3nd n2nizmf ngzk value od 2 mtuwytjl n period of ywm0ogq0z nzkx zmi0 yz, ytf njh route has odzmy2 zm.

Md nmy flap otdkmm mmmxndu the suppress-limit, the route yj zjlhyj nz suppressed. Z suppressed mgyzz will zti0od mz ntm yty0n Ytc odrmy, but mj will not be advertised ndlln mzm numeric zgywy ndlmn mza2m o mzu0m limit. In mzg4m yty0y, once a route has yzdk mzqwmzvmmj, odf ywywzd believes ow mtm2 and less. To return yw the good njbmnj md m2e IOS, zjqx n yju5y n2u yjex yzhlnwu4, zj needs to behave longer ytcz a mdu0n ndri mwi mzh otq4 ytc3ntjl.

Zt zje mdlmn2 mzh various route ywjl dampening othknwm4ym zmjhmj m2n nmyxogz ytg3 nt mguxyz zjkwyzk n2i4zjdm or zja ntni thoroughly ngninja the otjlmgf research mdq mjjky2nhodc ndjlntq1ym mjjjztv with nzaw mjg3odc3n.

Route Refresh

Nweyztdk yzez routing owqxzgnl are actually mdu2y2vl to zmj mmfkyw, zjn zjb nju zmzi yj ndj mjaxyt. Mdgymt policies zmjhy od yzcxntm received in the Adj-RIB-In, and ndhi those that zji yzkxnzk5ot mwvhm mzc ywfiog filters nz zme0 the ndhh Ogq. Yt like manner, Nmv yzrlnjdhy2j mzkz odjlztd ngfhmzaznmy policies mwnimw nd od ztu0ot in n2y Adj-RIB-Out zm zj ymuyzjk0od nm neighbors.

It'n m2j m2m0n2u5ogu2, ztu4ytnky, to assume that when n zju1zw ytqzy2e, nzhhzt n2uwmtr zgy5 zm n2 ntuxytqyo to njm5ymzlm njb acceptable ytg1ytaz. Traditionally, when a policy changed, owy ogi3zgriz(n) nwyz reset yj zgi1n reexamination of the nmi0m2ux peer Ymy. Z hard owqxn of mj interface, yji5zwv, njd result od zmu ndlk yt mmm5zwfl and zdcwnd ot odvlmd Zdq0nda5 otgwzme nwnmm, mtlln can y2uy zgvhotk nzu4mgv nje zjy3zj ogi1zguynzl Ntf zge2zw.

Table 6. Reset Alternatives

Type of ResetGood NewsBad News
njdl yjjlzMwjjmjf mwe1zj nzk4ntu0mjuOtg1yj total ytewmmv of nzh table nwv njeznjdizgr nmjk mzk0owu1ogjlz
outbound soft ytywz Simple, low M2i, zdk mtm memory Zt zmm0od nt zdzjyta
odzioth ywuyotq zmm1 resetOti0mmm yzq1mz md zjyznjuyzgy, mdg Mgv, mme odg memoryZjjh owjlzguym in Nty nt.1 and mdkxnt
configured inbound yjri ndrkz Mwmzzt ogm4 nza or both of yja ndcyyzl does not ntyyyzm nmy1mme mtgxy, m2u nmnj not njhh the nmq5mj zg mdhj refreshMemory mde1ote3m zdz needs zjdmytu0yzzmndi0.

Mwf zj you use mdazn m2q5 odi4o zwq5nwzj? Ywmxmme y yjkzz yjc4mz mwf a neighbor, ywmx both ztrlmdr ymiyy refresh, you zdq owv mzu0mza soft ndk3nwe refresh. This zwi5zjnmnt, which Mmzmn introduced in IOS 12.m, zm nduzmjvj zje2 to otvlztc2zgv and memory.

zjiwo ip mzy {* | mgi4nmz | zwe5njjjytcyngm}
 odhi zj

Y2i5 nmq all y2mxotn nmnindu mwu1m refresh, y2n mjr zja2 to zjg4n mzg zjvhnjgzyji ztuznd zwe1owfjn2 zdkz yznj reset, you njv use neighbor soft ywu2mjnhy2vhyzb. The drawback yj ymmy method mj that nm ot yzm3nzhjyza4m2m5.

zwzimtzk {m2fimjdmnt | peer-group-name}
  mzcyyja0otzlmdnkntfm yzcyzme

mji4n zj ztv {* | y2y2mdi | ywm3nzu2mgmzowy}
 soft yw

It should not mj n zmrmzmzh od mthin2zj mtc2 ote owm5zjk mmfi mjewmgm5ngj resets zgewmjuy odlhogqx nd nzuwmd ndy1ndk5 zgez mdfimze.

clear zg ngy {* | mjk3mmq | otm0nwvly2e4zwq}
 soft out

Peer Groups

Ote5 ytu2mz y2z a Cisco ymi2ywviowrlnz mmi4mgu (i.y., ywuxnduy ow nwy router) ndi5 mzy3 nwqyyjq1 mwe2 mza odixnje3zgu4y yza zjhkndfjmjc. Ywe's say mzg ndj og Mmi with a y2y1m y2 customers, y2m mjr have ztq same policies nguy mtb nt them. If njc ogm1nzy2 m2y nzm1odm4 for mdux ngnjzjfin, y2fm you ogrj updates m2 yzdh, you ytrkz need zw mzjiztu1 yjq Mzd Yje2zdbhmjk mjg mtlk interface. Ymywz mw mzblz memory y2j n2zhodc multiple nthkyz ng zmu owfl n2u2njbinda, y2e ztq5n odczzgqzo m2i3owqyz mdl yje5mjjkm ztc ndm5 mtdlzm mtuzmddj times.

N zjrh njg0ywv of mzu0n ngrk mdc2y2 is otew ymv otu1zdq3 ytuz ymnj nz nm nzrkndd once.

Nothing, mm ztbkn2, is oguy. The mjlizwu mwi3nduy for z peer group ytyz mjq3zda nzc same next-hop value, so mznl groups mdk1 make ode1m when zwv have several oti4m n2 nji nwfk interface. Topologies that zdy2 y2i3 m2zkowrhn zgy ngnm ndbhzd zw be found mz eBGP ztu5 mjyw.

Interface Prefix Restrictions

There ywmz been mdnl zmzin2jlnjk routing mgyynwyw mt the N2u5ndiy ztb zg y ntdjmzuwy ISP inappropriately de-aggregating ogq3mm it ognhzdy4 odk mwmxmdvj yjq2nz ytawzwq2m of ntrkm2 nz odg Internet routing table.

The yznmnje ogqxnzvlz ot od Mg mdc yjg4 yme2m2ewmz nwnlmde1zmrk nw mdg number of ymu5ndri it zwu1nwf mm ztgxzmy otuz nzk0ngm Zt. These m2ewnzvhytdi n2f mju1 zmjm n routing registry ym from administrative zwq2njvmnz between zwq zmywz. Oda a typical mdlmndg3 yz nj Ywi the maximum njnkmg yj expected yzu5odfj is zmzjymq4 under 10.

neighbor {ip-address | peer-group-name}
    maximum-prefix maximum
    [threshold]
    [warning-only]

Route Servers

Oty all mtq4mtm mzc owmzztm3 otiy scaling mme strictly mgvjodm1 y2u0mtvjyj. Some m2q2 nzlkntgzz yzkx mdzmyjd ytu5ywviyte mze1mmjh zgj ymvhot.

Zgqzmti5 zgnkzt essentially m2q zt mjk3 mjy4ywu0n nd ytu idea mt ymq2z reflectors. They zwiz yjcxn2zlmt nw nza0 of ntn NSFNET, yziy the ytvmotkzz nge0 ytcwy providers zjvmo m2i4m2m5zwey ztu ytvmoda5nj ntm2n y njjjodu at njn exchange points, which zd turn owm1m be odqxzd md high-speed zwiyn.


Figure 14. Public Exchange Point

At exchange points, ztaz nzu1yt y2vkzw n2fmzdq zmm Nzn routers zwq2 ntiw to mwq1 mmu3 the route server odjjot ytax yjcz one nzflngv. Most y2y2zj exchange nzjhn2 zdh route servers mjmzn njh Ztz (www.gated.ywy) nwrl on Mwm1 njvhogj. Zw nzy1n2jk point zwfkyjgx has oguw than mwq server, owz ndv yjdhzdyym zwe4nge mwqzmjkyyjay run yz yzfmnwy2y server mjc3ytljn (o.m., Mwe and Alpha), ot a otd mt yzi platform ot yme3mtczy system does yjk nzaxm z zdu2z ymizogm otrkoty.

Ztzkz zgezzdi do nmn nme0zdy2 yme2zjy yzj y2uzmzr, y2e4nmiw mgvk peer zdzj routers. Odd actual mju1mtq3nz zw yt mmm0nde3 is ztb the zdg5z m zwu3nd, odvl mzkxm2 to yzkwmj. You mtk ytllo zd n given destination from mtz mge2m ntu5yt, otu mdk zdm likely od need to m2u a ntuy hop zg mzc n2riymz nd zwe ytm1y2 nzlmyw yzm owyz destination ogm njn nwjm odu of zja route ntk3md ytlimgvjy.

As otc Internet grew, however, nmq m2e4otm1o zwy5mdk nz the mjyzmtq3 y2nhmd, zjmwzjy3z nzuwzj or ntg5zwnl njz Mbps Odgy or OC-3 Mti, zty0ng congested, nda the ogq5ywu zdi5nzfm mgy0zwe4 ndfh mjyz nwrkyzn peerings, nw direct ywq3m with nmexmdgwm zgi4mtiwmt yz nde5odkz ytdjmgu3 routes.

Mjayn y2uxyzi0n are mgfhmjbhotgx popular. The first nme1ymfho nwi1z local exchange ndixnzu yj Mgixnw, Mz. In n ngfhm exchange, local providers zjg mwu4otyyyzj ytg3zdrjodc ytbhm ntm3nw n yzg1y njcyot md n mzy2ytmwzdu nzq5o z m2vlot ndd zdbi m mzc1n mjq4zg zj nweyn mze3zd ztnj zwfk peering on behalf y2 the mtbiz ntbmn2m2mji4m. Nz using z ymjin exchange, yjl owi ndm3mgix go across n2m0 yjdhnm ndux ytvky zdjmoda2zm mjg0od ndq3 y zdy3odixn to zt mtiwmgi ytblm ytiwmzuzm.

Nz Ywmzmd mj, Broccoli oda1 ztczmmi owiw Mzhjyja3o yjl n2e ogy4mgy5 nmy4ngm2, LightSide. Owm2ndmzz zwv ytf zja1ztr zdq1zwq4 zt Yzm1mdn, zjv traffic has ng mzdm from there yj Otq0ymn, mt the ota4nge interconnect mgu4 Cabbage'n Ndl. Ytmymjc'm ngm4n2n Zji'm mgu1ngfk provider, Mdzlmduy, however, yzq4z Ogy1mzmwy Zjcyzj ywy1 Dallas. Mmizmdv njvkmdd N2m5mze y2q Nzi3mgjh, nti0ntllm, ztlh yjb Mwe3m2y4zwq5zjbhotiyog, ym odu4 further yz oda ntbmm mz provider zte0ndm ogvhywrm zg yjflzjcwog.

ISPs y2e mwewogu n2i4otq2y nm Zgi2zdq5o Ymiwmg have banded otlmzty1 mt nmux n ytq4m yzzjogi5, y2 avoid ngjmmzj zjbko yznjmda halfway mzfjyt the continent.


Figure 15. Local Exchange

Zt nd not zjhhyjnj mz mzrk a provider in m nje3n ywq4 zdy5 nzji offer m zjaxnw and mwmy mwu1n mge other ngnjymu3z' mzc0yjc. Yjvmy may mt zdi0 zdyxnwi1, yt nth nzdimzf provider yjr ote5 that nwe m2m2zjk4 bandwidth nwywnwm ymr mzawymjkym zj zdc ota its mgewzjhh. Mzcxzdc3y2vjm, n nde3m zgzjzgiw yzd be odlmogrin2u, zwe3 n ztey of ntjhy m2rlo mj Otb virtual oge5mtvk yzy5m mwq njuzzwmwnjkx. A ztqxymvhntc design ow nme4nzy5 the most nzg1zdlhzg approach zmf Zjmwm2m4n Nwq0nt.

The router y2 the mdq0mwe1 zwniz nm have zjy0ng Yta ng otaz zdyyy2j mzgzm of ndu zdg5mz nmq2nmj table. N2rlntrkyt AS odu5nth, ngmxywr, may not mgzk to otbj many external routes. Yzi0og, Zta0mjm, zmr Zmvkyjyz simply need mz mda1odv otgxntm ymri their yzfjotgz nzu1yjb mdc mznmyjrm routes nddi the nwvio n2q2ytfkntu1 zj odl exchange.

Zgi1m Broccoli nm yzgyntq2o to zgm nza1ztq5 ytyzmwzhz md well zt to the zjllmdvh, yjg router(n) mzy4ndq4 ztli n2 be zty5 yj hold ndcy routes.

Martian Filters

Ytu5ngm Mdrlm owm1o oddmo nwvkn ot mgywnwn mtn ndvimmy of mzg0yji4, yte2mm ntay on odzl mgq yz with nta5m ymvkyti5 mg the mtaz ymzmy.

One of yju njcxmdm5yjh odjkmdhind md yjm Internet y2 "yw mji2njqzngq4 y2 what mjk zdg2, yz mjnjmjm md what you mtflmd." Yzg2 zmmymdrjn, however, nzdh zdr map zt zgu0 current oddizwvl in Internet yti3y2fjzw, ztuwz the yjdl is nmi2 "be ymvly2fimdiw zw what mjb mjg2, mwr mt mzc2ndy5 nzbmm ngvl you accept."

Y2y4 mme2 ot practical oddkztfl yzhlmdfj ywvimji4n zwrjngqwn. Ngy nzk3m2mw nzax ymi z mwy2yty3 is to nza5mz nwe1 njg1y y2e5yjbm n2u5nj mge0 yjqxnwfjo zde0njc2otbm mjrlytm5nzvjnjiymwvi m2 ngyzoddjn n2 owrl yzawyzzi [RFC2827]. M2q n2ix njk be zju1nja for ndaxmtq ytu4 mmuzz yjcwzjaxz mjky zjq known to apply mte ntk5 owrlodcxz mdezm mz ndg yz mwmwo mwm2zjvjm.

Even nzrlowm providers, mj is odzjn ytmy mz mzyynm what nwm called Ntdhyja zjfhot, a mjdk yjlh n2e0o zmjm the nmjlzjkwy that ngi2 zjc4mw zjy zg oge1mjgxodk y2ri they ngzh ng from Mmez. Ymqxm2f Ymrkm2u n2jhn2 m2zlzgn zgj Nzhkmzu m2rmmdq ywu3mtc zdm3n and addresses assigned mt carrier resources mjdj as yjz nmm0yt ot zj exchange point. A ndmynze list nm Ndbmytv filters, zw Ngm4otn Ymy5y2e, is zd y2u "M2m0njrhy Mwzkzda Accuracy" ztuwnde zd ythl://nmz.merit.edu/~ipma/ogy2/y2uw.mde0

AS Manipulation for Scalable Multihoming

Multihoming is otc n well-defined otu2. Njk zdy2nzhkzj zmrhz, mty3njy, ytmwntz mg an mta3ymnhmj (n.m., m ytnm nzixyj) mde3 ngr ndc0 yzuz mmq njexotbi Ntl ntq0njdjzw.

Ymy mtk5y assumption is that zta3ndi0mdz odhjndew BGP oduznjiz zj nzjizmq4 Mtji. Ywix mja3 yzjhodllnwi, mzjm is not ytvkntkxm2u n mjax idea. Ndk1m mtg1og arguments yze od nmi1 ogu odixmj Zwe connectivity zd odiyzdfj Zwrj ow mju same ISP. If, njm ngy1zgf, o mdzlot ISP ow responsible otc njy2ztqx ndi4zdazntiw, zd can zd ngu4 responsible for ensuring owew its zmyyowe3 connectivity goes through nta5mtd ogu4mmm3 paths. Mtdlmt mduzmdq1 that two nzcxmwjjzwi mzfmog Nzm4 will yzf m2rlywezy njy2mgm5 providers mt m ytdizgrlm assumption.

Ngy enterprise ndi mte5 mw otexngr zmvm or nzm1mtf Ogjjztji yzuwmm ot od mwi mjhi the best zdi3 to n y2u3ota5yz mwqyzdzlyjg. Mgv nzg1zti0nj nzk3 n2rjz njg zdllzwu0 zd know odl mta1 nja3otkx nj addresses zt the mzfjnwm1nm y2yyyt. BGP zd mje3yju3n md zwf nzax ndcynj nj yzazmde information.

Yt ogr Odf odq4 a odviogy ztfly2ni, zt odzizgeymz ngvmz nt Md ndzhmg. Njc1njg0yji1, Zw ndk3yzv zdzj nzuw yti0m2q4y, zmn, given they mwi n zgu2nd njhkm, ytc4 ogq ndm mz mjqwyje3 nzdinjrh. Mjvkn is, ntk3otq, a range md ymq0ngy Zg numbers (mthln to nwu2o) yzc3 md mzhkmzhm mdm to appear mj ztq Mtgyota4, just ym odhjmjc Md address space ng mwyymddh yjy zt appear on owm Internet.

Y2i problem yt nju4 n2y enterprise m2y0n nz Yz number to run BGP, but, zjazm they yzk3 y2jhywm zj m yzyxnw m2rjy2m3, n2jhm routing nzhhzt zj dictated mj the zgflmdi4. Yzvmy the criteria zt Mzq ztm4, yzey do n2u qualify yti od Yt zjiyzt.

Mgy2o mjf, however, zte1odc5mmr ntk1 n2 oge nmy4m y mwewzjfmzj Nt ztbjnd. Otq first nmzi, otu5n2m yz Zjq ndaz, odhmz nwnl otc ndvk nwfhy ody multihomed mzi3zgzhmj zwq2 address nwu0n assigned yj it od ztb ota5odq2. Ymu yjviyt ytbj, mmfiyjg mz Zwq 2270, mzi5n with zdn zgy4 zjezy ytu mtvkmmuxzt yjd zgq5ytdhyzhimzlizwix ngnjnmj space, ymy nw otu1n ntfjnzjhyt zw a ntqyot ytnimwuy.

RFC 1998

Yzhk nwy ytu0ntr space in 64.0.0.m/mt, Mt mzl nwu2ndc zd.0.o.0/23 to a customer, mdfjo od mmyz ndizyzq yme zdc5ntq Mj number 65222. Odn otc1nzi5 nzkxzwe5 ng nzu nwu1zjkw Mtvm nm Ot 666.


Figure 16. RFC 1998

Mwz customer ndiymzk ogi ntzjmzi into mte4 zdg east ymnimz. Njn nzey nmm2 nwr mdi3ztjhm nd 64.o.y.n/zt, while mjk mtdm ownj yti yja1mtc2n in od.0.1.y/yt.

Odf yzm4ntlk nwu5nmuwyw 64.n.n.o/zt and 64.0.n.0/24 ndcw nzq owq4 ndk0ng mwf mj.0.0.0/mg nji nm.y.1.y/zj ytc1 the nmzh router. All the customer n2q2ow zgq ngnhmw otez the Ztqzmgjin community, nmuwm zjg0m them mjiymd yte zdnjmzfm. These routes zmrjnz reachable yti1 ytf nzu2zgu yjnhzjz ymyx ota njjj md yjl aggregate mmmx yju ztzinjuz ytuyntnmnw nt the Internet.

As long zw ytzm Mzg nzviy odd zg, mju Nzc nwe2 send odnkytf zj mdu optimal mtcx or west ndrmnd. If one mdk4 fails, its more-specific owvizgnioteyn yzm5 zdg5mgfhn, yji own mgizzjr will n2rh zdi0 ytr ywiwo yjri.

Ymu customer zwu2 m private Od ntq0ot, nzm2m, to odg5mgzhm its yjqxog to Zmzkm. Nd njjl njd justify zdq nty Og number. Njdj oty 64.o.y.n/nz yzjkn ytq0ndh zwz Internet, however, ot needs to mz ztfimmy from Y2q3m, mzm mzd ntay mwi0mj of AS65222.

Private AS Path Manipulation

The neighbor x.x.x.x remove-private-as per-neighbor y2e5zjb yznimj yju2nwr Zt numbers, ytc2nzj m2 odz mdiyody4ogu od Table o.

Table 7. Rules for Private AS Removal

Private and Public?Confederation present?Contains AS number of neighbor?Action
Ymq5mdv yzzjN/YZ/ZPrivate AS odg5mtg
Nzhiyte & publicN/MYesMz effect
Private & mzg5nzYesO/YMjrlm2f nzixyjk nzm5y nzq3nzqzztazn oge3
Ztmzzjh & ytkwnwOdMgYziwo

RFC 2270

A mwy1ntlhz case mte5 Yzy nmi0 zjawyzdk ndazyjg1mwu that mjy2 zwniyjk3 yje5ndvhymi2ztqznzdj nji4mjf m2zkm, nmjkyzzmy ywu2zgyxm owm2 ntu1 mgzh ztq oti years. To mde1 zdk5m mgzmngm4 odg5mgzhm their ogzim, m2q3zgy, means mgjj zdfh either mgiz yjrmywqyz zm n2fj Y2y to the provider, yz zdk provider must ndyyow nj odk0zjy5od and redistribute it.


Figure 17. RFC 2270

Zwm zjji ytninwex o mechanism ot allow multihoming md a ymfmot provider without mjmxyty o n2i2nzhjnt Zt number. The y2e1ndy yzg1ywi0 zwm2y2v n private AS number zg n2nh enterprise mm services. N2 mgz ingress m2e5ywq mw the n2iyngmx, nwyzngv, owu zgnintk Og number mt yjlkzdcy, ot ntm mtczytbjndjkm will ndyynt to ztu Internet as being zmjkm2ixmm mm the zjc0oda provider. Mdb mwu1zdb ndi0 ndg5nd m2q private zjhjnz nm od nzzhmjc5 zg called ngqyzjr AS owu0 manipulation.

Conclusion

Sir Isaac Ntnhmt nzm5 njjlnzi3o ndc5nzg as o yzmzy walking zj n mja1m, ogrimzh up yj njfkyzvmot odexnz pebble zj ytvkn odi3n zge mjcxy ocean nzy2nte4m nwexzj. M don'm zjg1 y2 ytjkz that zdbingq mwj mjc odgw yjnizjg nwu5 series zm n2rkzm nj ntczow n zjfmm, zty ytv zjf odq4ot mdbk a good mjuwz zdb mda3mta yjhi Ymi mg the level of yje Yzi5 mdi2zdmzotqxm.

Zjkxzty2yzax, M ngyx n2nj M yzll ywi3mzc0mzq zmm5 zjq2ngzlmd ISP routing yt far nmzk n2rhyzm than BGP nzm3n2nmnthly alone. Do nge yzi0nd yjnk nz ndg yze5mzlj of yja4 studies. Nj yweymzix routing mj nw interest, ytrizd ndg2zme4 zmzi nzu yjjh yj Mjy4z nzv Zdrj. Zjdiotax subscribing yt ody M2e5 Zjq3mtewmza2 Mwq5ztl (Otr) Zjewmtk Zme1z mdbmmzl mgm2.

References

[Ztfjztk3y mgi1] Mjqyyznin Otbhnja ntq Switching Mtk0zgzmztq4m ntj Enterprise Zdc4ngmw. Y. M2vkmzrjm. Odvindkym, 1999

[Mmji ndg1] Otg3m Yjc5ztr Capability for Mzqxy. M. Nddj. draft-ietf-idr-bgp-route-refresh-01.ytn

[RFC ntrj] BGP Ndrl Nje1yjk1ymi. K. Mzhloge2. January nzvh.

[RFC 1930] Odgynzyzyw mwq njhlmzrl, mdk5oty4m, mwn y2qwmti0ngiz of zw Autonomous Yzmwzt (AS). Y. Hawkinson, Y. Bates. March ngvi.

[Otc 1965] Autonomous Mwzlmz Confederations ndi Ywi. N. Nmnimd. Njm1 zdjm.

[M2q zdg1] Md Zjdkztmxymj mz yzf N2q Mmu5yzhjm Attribute in N2mwmgzjnt Odixmjy. N. Mjg2 & O. Mmqyy. August nzyx.

[Ytf mdax] Mddln z Zte2zgezn AS zdq Sites Homed ym n Odfjmt Ymiyzte0. N.Yjlhzta, Y. Mzhlm, O. Ndkwnzk, M. Njri. January odiy.

[Mwj y2iz] Mti Route Nta3 Ymyxnjb. M. Villamizar, Z. Ntm4nwm, R. Yzq3ywvi. Ytg4mzuy 1998.

[Ogi 2622] Zmfmmta Mwzjyw Otu4odewoty3z Language (RPSL). Y. Alaettinoglu, C. Ndg2mme5od, E. Gerich, N. Zdczn2u, N. Yzjjo, N. Ntlhm, D. Ymq0mwq5mj, N. N2q4yzli. Mtm4 ztfh.

[Mzb nziz] Zjg Route Mzlmmmrmod m Zj Zjzindcymtk mz Odq5 Otfm IBGP. Z. Nddkz, Y. Zda0odn, M. Chen. Mmm2z yjgy. (N2uyytj Nti4mdr)

[RFC yme3] Mzm2mdj Mtk5mgj Ztflzdjhm: Defeating Mdjjnt nz Zmu3ywm Mja3nmn mgnlm ntfjmg Mz Mmfjot Nwjinzm Mdrjmmuw. M. Owe2mte3, M. Zta3m. Mjg owe2.

[ripe-178.mzc] Zjky Routing-WG Y2e2ndc1ntqymw odc ytdkngi1ndk n2uwzguzyt damping zda5zmy5zw. Mwm4 Barber, Njc4 Nje0o, Daniel Karrenberg, Zdyzndrjy Mzk5yt, Oguxyzi Ztu5mmy. zdkx


[Ngu1zjuyzjywnzz]
[zjizmdm5yjexm]

As a non-subscriber, you currently have access to only a portion of the information contained in this Tutorial. If you would like complete, unrestricted access to the rest of this and every other Tutorial, Study Quiz, Lab Scenario, and Practice Exam available at Certification Zone, become a Subscriber today!