橡C14.PDF

Similar documents
All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 1

BGP ( ) BGP4 community community community community July 3, 1998 JANOG2: What is BGP Community? 2

Microsoft PowerPoint - janog20-bgp-public-last.ppt

2004 IPv6 BGP G01P005-5

ネットワークのおべんきょしませんか? 究める BGP サンプル COMMUNITY アトリビュートここまで解説してきた WEIGHT LOCAL_PREFERENCE MED AS_PATH アトリビュートはベストパス決定で利用します ですが COMMUNITY アトリビュートはベストパスの決定とは

Inter-IX IX/-IX 10/21/2003 JAPAN2003 2

JUNOSインターネットソフトウェアとIOSのコンフィグレーション変換

TCP/IP Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.3 Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.4 2

宛先変更のトラブルシューティ ング

PowerPoint プレゼンテーション

橡3-MPLS-VPN.PDF

untitled

JANOG14-コンバージェンスを重視したMPLSの美味しい使い方

Microsoft PowerPoint irs14-rtbh.ppt

untitled

routing_tutorial key

BGPルートがアドバタイズされない場合のトラブルシューティング

関連事項の整理 62 IGP と EGP の違い ルータルータ ルータルータ EGP は Routing Domain 間の中の経路のみ扱う EGP の Next Hop は境界ルータへの IP アドレス Routing Domain - A ルータ ルータ IGP は Routing Domain

ループ防止技術を使用して OSPFv3 を PE-CE プロトコルとして設定する

total.dvi

IP.dvi

untitled

untitled

2011 NTT Information Sharing Platform Laboratories

WG /04/

RENAT - NW検証自動化

15群(○○○)-8編

MR1000 コマンド設定事例集

橡2-TrafficEngineering(revise).PDF

設定例集_Rev.8.03, Rev.9.00, Rev.10.01対応

IP.dvi

tcp/ip.key

ict2-.key

IP... 9 IP... 9 IP IP IP Unnumbered IP PPP IPCP IP DHCP IP IP

untitled

網設計のためのBGP入門

tutorial.dvi

Si-R30コマンドリファレンス

IIJ Technical WEEK SEILシリーズ開発動向:IPv6対応の現状と未来

第1回 ネットワークとは

untitled

BSD Unix IPv6 WIDE Project / ( ) All rights reserved. Copyright(c)2006 WIDE Project 1

BGPベストパス選択の実際

CCIE IP Anycast RP Anycast RP Anycast RP Anycast RP PIM-SM RP RP PIM-SM RP RP RP PIM Register RP PIM-SM RP PIM-SM RP RP RP RP Auto RP/BSR RP RP RP RP

25.pdf

untitled

IPv6 トラブルシューティング~ ISP編~

Microsoft PowerPoint ppt [互換モード]

wide93.dvi

IRS-Meeting-Log txt

The Internet ebgp peering BFD deployment (?) CE (Upstream) stability RIPE-229 fast-external-fallover keepalive/holddown 5sec/15sec BFD

経路奉行の取り組み

untitled

Agenda IPv4 over IPv6 MAP MAP IPv4 over IPv6 MAP packet MAP Protocol MAP domain MAP domain ASAMAP ASAMAP 2

<4D F736F F F696E74202D C F815B834E95D2836E E9197BF2E707074>

今日のトピック 実験結果の共有 RPKI/Router 周りの基本的な動き 今後の課題と展望 2012/7/6 copyright (c) tomop 2

【公開】村越健哉_ヤフーのIP CLOSネットワーク

Clos IP Fabrics with QFX5100 Switches

はじめに xsp のルータにおいて設定を推奨するフィルタの項目について の IPv6 版 最低限 設定することが推奨されるフィルタ について まず議論したい 接続形態に変化はないので IPv6 対応をメインに IETF draft RIR でproposal 進行中のものについては今回の検討外とした

今からはじめるIPv6 ~IPv6標準化最新動向編~

ルータ(IPv6)掲示用池田.PDF

IP IPv4-IPv6


untitled

IP.dvi

IPv4aaSを実現する技術の紹介

VLAN VPN mapped MPLS ~実稼動するVPLSネットワーク~

AirMac ネットワーク構成の手引き

ERA-201D1

Polling Question 1

IP 2.2 (IP ) IP 2.3 DNS IP IP DNS DNS 3 (PC) PC PC PC Linux(ubuntu) PC TA 2

SRT/RTX/RT設定例集

tp2ps output file

MPLS-VPN とは C 社を中心として RFC2547(Informational) に記された ISP サービスとしての IP-VPN 実現技術 網内パケット転送に MPLS(LDP/TDP) VPN 経路情報交換に BGP(mpBGP:RFC2283) を使用 ルーティングプロトコルがエッジ

VyOSではじめるBGPルータ

untitled

PowerPoint プレゼンテーション

SCREENOS NAT ScreenOS J-Series(JUNOS9.5 ) NAT ScreenOS J-Series(JUNOS9.5 ) NAT : Destination NAT Zone NAT Pool DIP IF NAT Pool Egress IF Loopback Grou

BGP/MPLS-VPN とは ルータによる 多様な IF による提供が可能 (ATM~ HSD などの非対称構成も可能 ) 暗号に頼らないセキュリティの確保が可能 (FR などと同等の機能を IP ネットワークで実現 ) お客様側への特別な装置が不要 (a)ipsec-vpn 方式 暗号化装置 (

untitled

untitled

リング型IPカメラ監視ソリューション(マルチキャスト編)

第1回 ネットワークとは

Foil 2 Agenda RIP2 RIP, OSPF OSPF

ip nat outside source list コマンドを使用した設定例

設定例集

ISPのトラフィック制御とBGPコミュニティの使い方

Microsoft PowerPoint ISC203(印刷版).ppt

初めてのBFD

Firepower Threat Defense の BGP

帯域を測ってみよう (適応型QoS/QoS連携/帯域検出機能)

1 IPv6 WG OS SWG PCOSIPv6 Windows Vista 2 3 KAMEUSAGIMacOSX IPv6 2

RPKI in DNS DAY

untitled

橡sirahasi.PDF

Microsoft PowerPoint - Amazon VPCとのVPN接続.pptx

ヤマハルーターのCLI:Command Line Interface

Agenda Security Workshop Control Plane Forwarding Plane Management Plane

技術的条件集別表 26.3 IP 通信網 ISP 接続用ルータ接続インタフェース仕様 (IPv6 トンネル方式 )

Transcription:

BGP4 (( ) InternetWeek 98 ( ) Internet Week98 1998 Toshiya Asaba, Japan Network Information Center

1. 2. BGP 2.1. 2.2. ISP 2.3. IX - 2.4. 2.5. 3. BGP4 3.1. BGP4 3.2. EBGP IBGP 3.3. BGP AS 3.4. AS AS 3.5. 4. 4.1. 4.2. 4.3. 4.4. 4.5. 4.6. 4.7. 5. BGP 5.1. IBGP 5.2. Route Flapping Dampening 5.3. 5.4. 5.5. 5.6. 6. 7. : Cisco

1. ISP BGP4 BGP4 BGP4 2. BGP 2.1. user IX IX IX 2.1.: IX ISP ISP 2.2. ISP ISP IX ISP ISP Internet Service Provider ISP

IX ISP 2.3. IX - ISP IX Internet exchange) ISP FDDI ATM ISP Network Access Point (NAP) Metropolitan Area Exchange (MAE) LINX, NSPIXP,JPIX, MEX,HKIX, etc. ISP ISP LAN Network Access Point(NAP) MCIWORLDCOM MFS Metropolitan Area Exchange NAP MAE West NAP NSF( ) NSF ISP MAE LINX London Internet Exchange NSPIXP JPIX MEX Media Exchange HKIX Hong Kong IX PHIX

ISP ISP ISP Ethernet, FDDI, ATM ISP ISP ISP 2.3.2. IX IX LAN ISP ISP IX 2.4. 2 ISP IX ISP ISP ISP

2 ISP ISP Interior Gateway (or Routing) Protocol (IGP) OSPF, RIP2 Exterior Gateway (or Routing) Protocol (EGP) BGP4 ISP ISP ISP ISP ISP Exterior Gateway Protocol BGP4 ISP ISP ISP OSPF RIP 2.5. 2 CIDR Class-less Inter-Domain Routing (RFC1918) IPv6 (RFC1883)

IP 32 CIDR IPv6 10 CIDR(Classless Inter-Domain Routing) IPv4 202.232.68.0-202.232.68.63 = 202.232.68.0/26 CIDR v4

CIDR 32 32 10 CIDR ( /26) Classless VLSM / / Supernet / Glassful all-0, all-1 Classless CIDR VLSM(Valuable Length Subnet Mask) ( Supernet ) all-0 all-1

( ) OS CIDR

ISP 202.233.0.0/16 202.233.0.0/18 ISP A 202.233.64.0/18 202.233.160.0/27 202.233.128.0/19 ISP B ISP C User E User F 202.233.0.0/23 202.233.4.0/22 202.233.64.0/19 202.233.96.0/21 User A User B User C User D 2.5.2: 2.5.2 ISP ISP ISP 202.233/16 202.233 16 ISP A ISP A /16 ISP /18 ISP /18 /27 User A /19 User F ISP 202.233.0.0/23 /18 202.233.4.0/22 ISP C

U ser F U ser E 202.233.160.0/27 ISP A 202.233.128.0/19 202.233.0.0/16 ISP 202.233.0.0/18 202.233.64.0/18 202.233.0.0/23 U ser A ISP B 202.233.4.0/22 U ser B ISP C 202.233.64.0/19 U ser C 202.233.96.0/21 U ser D 2.5.3: 2.5.3 ISP B /23 A /22 B ISP B ISP B A ISP B B A B ISP B /18 CIDR 10 ISP C ISP A ISP A

2.5.4 2.5.4 2000 2001 2001 CIDR 2007 2008 IPv4 2013 2017 IPv4 IPv6 v6

<SURFNET E Eric-Jan Boss > 2.5.5: 2.5.5 ( ) CIDR 1994 1 CIDR 1994 ISP 2,000 3,000

3. BGP4 3.1. BGP4 BGP4 BGP3 ISP CIDR CIDR BGP4 BGP4 CIDR 1994 95 BGP4(Border Gateway Protocol) RFC1771 AS de-facto Autonomous System (AS) ISP AS AS CIDR CIDR BGP4 RFC1771 AS CIDR BGP4 AS(Autonomous System) ISP AS ISP ISP AS AS UUNET SPRINTLINK AS ISP AS BGP4 AS BGP4 TCP 179 (peer) 1 1

RIP Incremental 16 AS ( IIJ AS2497) Path Vector Preference, etc. Path Attribute) AS Path, Origin, Next Hop, Multi-Exit-Discriminator(MED), Local TCP BGP TCP BGP peer peer RIP ( 30 T3 ) BGP Incremental AS AS BGP 16 IIJ AS2497 AS Path Vector AS Path Origin Next Hop Path Vector

3.2. EBGP IBGP BGP ( ) BGP EBGP (External BGP) AS BGP BGP IBGP (Internal BGP) AS BGP BGP full mesh BGP IBGP peer TCP peer BGP BGP BGP AS BGP BGP EBGP AS BGP IBGP AS AS AS BGP IBGP BGP BGP IBGP IBGP EBGP IBGP IBGP peer IBGP peer IBGP peer

3.3. BGP AS user user ISP AS user ISP user ISP user AS user IX IX IX ISP ISP ISP AS AS user user AS user user user 3.5: BGP AS ISP AS ISP AS ISP AS 3.5 AS BGP AS BGP ISP

3.4. AS AS AS ψ EBGP AS AS ψ IBGP E BGP A S ψ IGP N LRI BGP IGP IGP EBGP IBGP 3.6: AS AS AS BGP AS EBGP AS 3.6 AS BGP AS BGP AS EBGP AS BGP IBGP BGP IBGP IBGP peer IBGP peer IBGP BGP AS EBGP OSPL RIP IBGP NLRI(Network Layer Reachability Information) BGP IGP BGP IBGP IGP BGP IBGP IBGP IGP IGP

AS BGP

3.5. Transitive) Non-Transitive) Mandatory) Optional) BGP peer Origin BGP : IGP, EGP, Incomplete IGP EGP Incomplete( ) AS Origin IGP EGP External Gateway Protocol External Gateway Protocol EGP BGP Origin EGP E BGP4 BGP4 BGP4 Cisco ridistribute Origin EGP Incomplete IGP EGP

AS Path AS / AS Path prepend, stuffing AS Path AS AS AS Path RIP AS Path RFC AS Path RFC AS Path AS Path AS Path prepend stuffing prepend Cisco stuffing Bay Networks 202.221.0.0/16 AS2 AS4 AS1 202.232.0.0/16 AS3 AS5 202.221.0.0/16 3 2 202.221.0.0/16 4 2 202.232.0.0/16 3 2 1 202.232.0.0/16 4 2 1 AS1 2 02.232.0.0/16 AS2 2 02.221.0.0/16 3.7.2: AS Path 3.7.2 AS1 AS2 202.232.0.0/16 202.221.0.0/16 AS5 AS5 202.221.0.0/16 AS2 AS3 AS5 AS AS2 AS3 AS5 3 2 AS Path AS2

AS4 AS5 AS Path 4 2 202.232.0.0/16 AS2 3 5 AS2 4 5 AS Path AS AS Path AS5 Next Hop AS1 R1 202.232.0.0/16 R3 prefix 202.232.0.0/16 Next hop 202.232.1.1 202.232.1.1 202.232.1.2 AS2 R2 EBGP R2 prefix 202.232.0.0/16 Next hop 202.232.1.1 R4 prefix 202.232.0.0/16 Next hop 202.221.10.1 AS3 202.221.10.1 202.221.10.2 R4 EBGP R3 IBGP AS IP IBGP R3 R1 IGP 3.7.3: Next Hop Next Hop IGP OSP RIP Next Hop BGP Next Hop AS AS Next Hop 3.7.3 AS1 202.232.0.0/16 EBGP R2 R3 IBGP AS3 R4 EBGP R1 R2 R2 Next Hop R1 IBGP R3 Next Hop R1 AS Next Hop R3 AS AS Next Hop R3 Next Hop 202.232.1.1 R3 Next Hop IGP

Multi-Exit Discriminator (MED) AS IGP IGP OSPF RIP MED AS MED ISP MED 100 200 MED AS AS AS1 A S2 Link1 Link2 Link1 EBGP MED=100 R1 R3 MED=100 AS1 IBGP IBGP AS2 MED=200 R2 R4 MED=200 EBGP Link2 3.7.4 MED AS1 AS2 EBGP MED Link1 Link2 MED MED Link1 100 Link2 Link1 200 AS1 AS2 Link1 Link1 Link2

Local Preference AS AS AS AS AS AS Preference( ) MED Preference MED

MED AS Local Preference AS AS5 AS1 AS4 AS Path AS3 AS5 A S4 Local_Pref 1 AS2 2 1 AS4 AS1 4 2 1 202.232.0.0/16 1 AS3 3 1 AS5 Local_pref=100 Local_pref=90 3.7.5: Local Preference 3.7.5 AS1 202.232.0.0/16 AS5 AS Path AS5 AS4 AS Path 4 2 1 AS4 AS2 AS1 AS AS3 3 1 AS3 AS1 AS Path AS3 Cisco AS5 Local Preference AS Path AS4 Local Preference 100 AS5 Local Preference 90 AS5 AS4 AS AS 10 Atomic Aggregate Aggregator Atomic Aggregate : Aggregate)

Aggregator : BGP IP AS AS1 AS2 202.232.0.0/24 202.232.1.0/24 AS3 202.232.10.1 202.232.0.0/16 Atomic_Aggregate, Aggregator={3,202.232.10.1} Atomic Aggregate Aggregator 3.7.6: CIDR Aggregate 3.7.6 AS1 2 3 AS3 AS1 202.232.0.0/24 AS2 202.232.1.0/24 AS3 202.232.0.0/16 AS3 Atomic Aggregate Aggregator AS Atomic Aggregate Aggregate Aggregator AS AS Aggregate Community RFC1997 32

Aggregator RFC1771 BGP4 Community RFC1997 AS AS

Community ( ) 0x00000000-0x0000FFFF 0xFFFF0000-0xFFFFFFFF Well-Known Community: NO_EXPORT(0xFFFFFF01): AS NO_ADVERTISE(0xFFFFF02): NO_EXPORT_SUBCONFED(0xFFFFFF03): AS Community 32 Well-Known Community AS NO_EXPORT Community ISP AS Community Community NO_ADVERTISE BGP IBGP peer NO_EXPORT_SUBCONFED AS (AS Confederation) AS BGP Community Well-Known Community Community ( ) AS Community 16 : Community AS 16 : AS Community : AS : Community AS Community AS AS AS Community AS Ingress Filter Community 2497:10

2497:20 peer Community Egress Filter 2497:10 Community upstream AS Community 16 Community AS AS Community AS Community 2497:10 Community 2497:20 peer IX AS Community Community2497:10 AS Egress Filter Ingress Filter Community Egress Filter update Community Egress Filter Community Community AS (Confederation) RFC1965 AS AS AS AS AS AS 64512-65535) AS IGP AS AS IBGP EBGP AS Next Hop, MED, Local Preference AS IBGP

AS (AS Confederation) RFC1771 RFC1965 AS AS AS BGP Confederation AS AS AS AS AS AS AS Confederation AS AS BGP4 AS AS AS IGP IGP OSPF AS External OSPF update Confederation AS OSPF AS AS AS AS BGP peer AS peer IBGP EBGP EBGP IBGP AS EBGP Next Hop Confederation AS EBGP MED EBGP Confederation AS Confederation MED Next Hop AS EBGP Local Preference AS IBGP BGP

Confederation ID2 AS65002 IBGP AS1 EBGP AS Path: 1 AS65001 EBGP AS Path: (65001) 1 AS Path: (65002 65001) 1 AS65003 EBGP AS3 AS Path: 2 1 3.7.8: AS Confederation 3.7.8 AS Confederation AS AS1 AS3 EBGP Confederation AS65001 AS65002 AS65003 EBGP IBGP Confederation AS AS EBGP AS IBGP AS IGP Confederation AS AS Path:1 AS Path AS1 AS65001 IBGP AS AS Path:(65001) 1 65001 1 AS 65001 AS Confederation 1 Confederation AS AS65002 65003 AS65002 AS Path AS AS Path:(65002 65001) 1 AS65003 AS3 EBGP AS AS (Confederation ID) 2

Route Reflector RFC1966 AS BGP AS BGP BGP Route Reflector RFC1771 RFC1966 IBGP peer peer IBGP BGP IBGP peer IBGP Route Reflector AS ( ) BGP BGP IBGP EBGP EBGP IBGP AS Cluster 1 Cluster 2 3.7.9: Route Reflector 3.7.9 Route Reflector Cluster 1 Cluster2 Route Reflector Route Reflector

IBGP BGP Route Reflector IBGP EBGP Route Reflector Route Reflector Route Reflector IBGP peer Route Reflector EBGP IBGP Route Reflector

4. 4.1. ISP(AS) ISP BGP IBGP OSPF AS ISP OSPF ISP ISP BGP AS

4.2. AS AS AS AS AS upstream AS( IX Peer) AS IX peer AS AS upstream AS AS AS AS AS AS AS Path upstream AS

4.3. (2 ) (1 ) (3 ) 1. A S : 2. A S : 3. A S : 4.3: 4.3 AS AS AS AS AS AS AS AS Ingress ( ) Egress ( ) BGP Local_pref, MED, AS Path Prepend Community BGP Ingress Filtering Egress Filtering AS Path AS Path Local_pref MED AS Path Prepend Community AS Community

AS

4.4. AS1 AS2 AS4 AS3 A S4 A S1 A S3 A S_PATH 4.4: AS4 AS1 AS3 AS_PATH 4.4 AS4 ISP AS1 AS3 AS1 AS3 AS4 AS1 AS3 AS3 AS1 4.5. AS AS AS_PATH AS AS AS Path Local Preference NEXT_HOP IGP (Hot Potato) Next Hop Hot Potato Hot Potato Next Hop Next Hop

AS OSPF Next Hop External External IX IX AS PATH AS4 (1) AS Path: AS2 AS1 (2) AS Path: AS3 AS2 AS1 AS Path (1) Ingress Filter (2) AS Path Local_pref AS5 AS4 AS1 IX-A AS2 AS3 IX-B AS4 AS5 AS4 ψ AS Path: AS2 AS1 ψ AS Path A S3 AS2 AS1 ψ AS Path ψ Ingress Filter AS Path Local_Pref AS5 A S4 4.5.1: AS PATH AS Path 4.5.1 AS4 AS1 AS1 AS2 AS4 AS Path AS2 AS1 AS show ip bgp 2 1 AS4 AS3 IX-A AS2 AS1 AS3 AS2 AS1 IX-B AS4 Ingress Filter Local Preference IX-A

AS4 AS5 AS4 AS1 IX-B AS2 AS5 AS5 AS4 AS3 IX-A AS2 AS1 AS5 AS4 IX-B AS2 AS1 BGP Path AS5 AS4 Cisco BGP AS MED MED AS1 R1 R2 MED=100 MED=100 MED=200 MED=200 R3 R4 AS2 4.5.2: AS AS MED 4.5.2 MED=100 MED=200 MED AS MED AS (Hot Potato) AS

MED Next Hop IGP IX ISP A S M E D N ext H op IG P IX ISP A S 1 R 1 R 2 R 3 R 4 A S 2 4.5.3: AS (Hot Potato) Hot Potato AS Hot Potato ITU RFC MED MED MED Next Hop IGP AS1 AS2 Next Hop AS Next Hop IGP IGP BGP IGP Next Hop IBGP MED Next Hop Next Hop Next Hop 10 11 BGP IBGP OSPF ISP IX

MED Hot Potato 4.6. ψ ψ ψ M ED,A S PATH Prepend, Com m unity 4.6. AS AS AS MED AS AS Path Prepend Community AS AS AS

AS1 AS4 AS2 AS1 Ingress Filter local_pref AS4 AS4 202.232.0.0/16 AS4 AS2 AS3 AS2 AS4 local_pref=100 IBGP AS1 AS3 AS4 local_pref=90 Prefix Local_Pref 202.232.0.0/16 90 2 02.232.0.0/16 100 AS Path AS3 AS4 AS2 AS4 4.6.1: AS 4.6.1 AS1 AS4 AS Path AS1 AS1 Ingress Filter AS Path: AS2 AS4 local_pref=100 AS Path: AS3 AS4 local_pref=90 Local Preference BGP AS Path Local Preference (1) AS4 AS1 AS2 AS4 egress filter AS Prepend AS4 AS4 202.232.0.0/16 Prepend AS4 AS4 AS4 AS2 AS3 AS2 AS4 AS3 AS4 AS4 IBGP AS1 Prefix AS Path 202.232.0.0/16 AS3 AS4 AS4 202.232.0.0/16 AS2 AS4 4.6.2: (1) 4.6.2 AS4 AS AS AS4 Ingress Filter AS1 AS Path Prepend AS Path Prepend AS Path AS1

(2) AS4 AS1 AS4 egress filter community AS2 AS1 ingress filter AS Community RFC1998 community local_pref ISP 202.232.0.0/16 community=1:90 community=1:100 100 EBGP AS4 EBGP AS2 AS3 EBGP local_pref=100 IBGP AS1 EBGP local_pref=90 Prefix Local_Pref 202.232.0.0/16 90 202.232.0.0/16 100 Community 1:90 1:100 4.6.3: (2) Community 4.6.3 AS4 AS1 AS2 AS4 Community AS3 community=1:100 AS2 community=1:90 community AS AS1 Community AS4 AS1 Community 1: Local Preference AS4 Community AS1 AS ISP MCI RFC IIJ 4.7. (RR) AS (RS) 2 ISP BGP RR ISP RR

AS AS ISP ISP IX IX IX AS AS update IX ISP B G P R S Policy Info. R R ISP Policy D B ISP ISP ISP ISP 4.7: 4.7 RR RS RR

ITF

5. BGP ISP 5.1. IBGP BGP IBGP IGP AS IBGP IGP IBGP "HACK" IGP OSPF BGP flapping IBGP IBGP IGP Next Hop IGP IBGP BGP BGP AS IBGP IGP AS IBGP IGP AS IGP OSPF Cisco 7500 BGP OSPF OSPF AS External BGP BGP IGP IBGP AS IBGP IGP flapping IGP BGP IGP BGP peer AS

update Route Flapping IBGP "HACK" IBGP IGP BGP IGP IBGP AS IBGP AS BGP IBGP OSPF BGP OSPF IBGP IBGP "HACK" BGP IBGP OSPF BGP BGP OSPF BGP IBGP IBGP "HACK" IBGP BGP IBGP "HACK" n IBGP n IBGP ψ N 2 IBGP ξ peer update ξ 7 BGP 21 IBGP EBGP IBGP AS 5.1.1: IBGP

5.1.1 AS BGP IBGP "HACK" 21 IBGP Confederation 2 A S 2 EBGP 9 I B G P AS 2 AS 1 Confederation 5.1.2: Confederation Confederation Confederation AS 5.1.2 21 IBGP Confederation 9 IBGP Route Reflector 2 3 4 9 IBGP AS 5.1.3: Route Reflector Route Reflector Confederation AS AS 28 Route Reflector 2 IBGP 9 IBGP

Confederation Route Reflector IBGP Route Reflector IGP Confederation AS AS OSPF IGP OSPF BGP OSPF AS AS OSPF Confederation AS AS AS 5.2. Route Flapping Dampening (Route Flapping) UPDATE WITHDRAW CPU Dampening) flap dampening Route Flapping ISP BGP Incremental update update BGP AS EBGP update Dampening

AS Dampening update Flap Dampening Dampening Dampening ψ ψ ψ ψ 5.2: Dampening 5.2 Dampening Flap Flap Flap Dampening (Suppress Limit) Flap (Reuse Limit) ISP Dampening Flap Dampening Dampening AS

5.3. AS AS AS AS Hot Potato Cold Potato MED peer ISP AS Closest Exit Hot Potato Hot Potato Cold Potato AS MED MED peer IX ISP Local Preference ISP IX peer AS IX 24

AS M ED A S A S A S1 R1 R2 Local_pref=90 Local_pref=100 MED=100 R3 R4 MED=200 A S2 5.3.1: ( AS ) 5.3.1 AS2 MED AS1 Local Preference Local Preference AS1 MED Local Preference MED AS1 AS2 AS AS2 AS1 peer peer AS4 A S2 A S3 AS2 A S1 AS1 A S3 p eer A S ψ AS1 AS4 AS1 A S2 A S4 AS4 AS1 A S3 A S4 AS Local_pref=100 Local_pref=110 AS1 IX AS3 AS2 Local_pref=110 AS4 5.3.2.

5.3.2 AS4 AS2 AS3 AS2 AS1 AS1 AS3 IX peer AS Path AS4 AS1 2Hop AS AS4 AS2 AS2 AS1 AS1 AS4 AS1-AS2-AS4 AS4 AS1-AS3-AS4 AS1 Community Local Preference Community AS1 IX 5.4. AS origin AS more specific route Aggregate more specific IX BGP AS Next Hop AS Origin AS AS AS CIDR Aggregate IX AS BGP AS Next Hop IX IX

AS2 172.16.0.0/16 N ext Hop 192.168.1.1 IGP EBGP A S1 AS2 AS3 IX AS1 AS1 192.168.1.1 192.168.1.0/24 EBGP IX AS3 172.16.0.0/16 192.168.10.1 192.168.1.0/24 Next Hop: 192.168.10.1 EBGP AS2 IGP 192.168.1.0/24 IBGP 192.168.1.0/24 172.16.0.0/16 Next Hop: 192.168.1.1 5.4.1: IX AS1 AS2 AS3 IX AS1-AS3 AS3-AS2 peer AS1 AS2 IX 192.168.1.0/24 AS3 172.16.0.0/16 EBGP AS2 AS2 172.16.0.0/16 Next Hop 192.168.1.1 IBGP IBGP "HACK" Next Hop OSPF IGP 172.16.0.0/16 Next Hop 192.168.1.1 IGP AS1 192.168.1.0/24 AS IGP ridistribute BGP AS1 192.168.1.0/24 Next Hop EBGP IBGP AS2 AS2 IGP 192.168.1.0 BGP 192.168.1.0 Cisco BGP IGP BGP BGP AS3 172.16.0.0/16 Next Hop BGP Next Hop 192.168.10.1 AS1 IX IGP BGP

5.5. Ingress AS RR RR ( ) ISP Ingress Filter peer AS AS peer AS BGP update 5.6. DNS Secure BGP AS DNS AS draft-bates-bgp4-nlri-orig-verif-00.txt IPSEC peer PKI Public Key Infrastructure) http://www.net-tech.bbn.com/sbgp/sbgp-index.html

DNS AS CIDR AS DNS AS DNS BGP update AS AS DNS-based NLRI origin AS verification in BGP Secure BGP IPSEC peer Public Key Infrastructure

6. BGP4 AS BGP4 BGP BGP BGP BGP4 AS AS ISP BGP4 AS AS BGP BGP BGP AS BGP AS AS 16 AS RR RS RR UPDATE route flapping

Route Flapping BGP

7. : Cisco Cisco AS65001 R1 R2 AS65002 172.16.0.0/16 192.168.10.1 192.168.10.2 172.17.0.0/16 router bgp 65001 network 172.16.0.0 neighbor 192.168.10.2 remote-as 65002 router bgp 65002 network 172.17.0.0 neighbor 192.168.10.1 remote-as 65001 MED 28 192.168.10.1/32 192.168.20.2/30 192.168.20. /30 EBGP MED=100 R1 R3 MED=100 AS1 IBGP IBGP AS2 MED=200 R2 R4 MED=200 EBGP 192.168.10.2/32 192.168.21.2/30 192.168.21.1/30

MED 1 interface loopback 0 ip address 192.168.10.1 255.255.255.255 router bgp 1 no synchronization neighbor 192.168.10.2 remote-as 1 neighbor 192.168.10.2 update-source loopback0 neighbor 192.168.20.1 remote-as 2 neighbor 192.168.20.1 route-map MED-OUT out route-map MED-OUT permit 10 match as-path 10 set metric 100 ip as-path access-list 10 permit ^$ 2 interface loopback 0 ip address 192.168.10.2 255.255.255.255 router bgp 1 no synchronization neighbor 192.168.10.1 remote-as 1 neighbor 192.168.10.1 update-source loopback0 neighbor 192.168.21.1 remote-as 2 neighbor 192.168.21.1 route-map MED-OUT out route-map MED-OUT permit 10 match as-path 10 set metric 200 ip as-path access-list 10 permit ^$

Aggregate AS1 AS2 202.232.0.0/24 202.232.1.0/24 202.232.10.2/32 AS3 202.232.10.1/32 202.232.0.0/16 Atomic_Aggregate, 202.232.10.3/32 Aggregator={3,202.232.10.1} AS PATH= PATH= 3 3 {1, 2} interface loopback 0 ip address 202.232.10.1 255.255.255.255 router bgp 3 no synchronization network 202.232.10.0 aggregate-address 202.232.0.0 255.255.0.0 as-set summary-only neighbor 202.232.10.2 remote-as 3 neighbor 202.232.10.2 update-source loopback0 neighbor 202.232.10.3 remote-as 3 neighbor 202.232.10.3 update-source loopback0 neighbor X.X.X.X remote-as XX

Local-preference 1 AS2 2 1 AS4 AS1 202.232.0.0/16 1 AS3 192.168.10.5/30 192.168.10.1/30 AS5 3 1 AS1 AS4 AS5 cisco local-preference router bgp 5 100 neighbor 192.168.10.1 remote-as 3 neighbor 192.168.10.1 fromas3 in ip as-path access-list 10 permit ^3_1$ route-map fromas3 permit 10 match as-path 10 set local-preference 90 4 2 1 AS PREPEND 1 AS2 2 1 AS4 AS1 192.168.10.1/30 192.168.10.5/30 4 2 1 202.232.0.0/16 1 1 1 AS3 3 1 1 1 AS5 AS1 router bgp 1 network 202.232.0.0 mask 255.255.0.0 neighbor 192.168.10.1 remote-as 2 neighbor 192.168.10.5 remote-as 3 neighbor 192.168.10.5 route-map PREPEND out route-map PREPEND permit 10 set as-path prepend 1 1

Community local_pref=100 AS4 IBGP local_pref=90 EBGP EBGP EBGP AS2 192.168.10.1/30 AS1 AS3 AS1 ip bgp new-format access-list 10 202.232.0.0 0.0.255.255 router bgp 1 neighbor 192.168.10.1 remote-as 2 neighbor 192.168.10.1 send-community neighbor 192.168.10.1 route-map toas2 out neighbor 192.168.10.5 remote-as 3 EBGP 202.232.0.0/16 192.168.10.5/30 neighbor 192.168.10.5 send-community neighbor 192.168.10.5 route-map toas3 out route-map toas2 permit 10 match ip address 10 set community 4:100 route-map toas3 permit 10 match ip address 10 set community 4:90