Questions tagged [bgp]
BGP (Border Gateway Protocol) is one of the core routing protocols of the internet.
176
questions
0
votes
1
answer
943
views
Ubuntu 18.04 IP forwarding will not forward packets received over GRE tunnel
I have two servers, Server A and Server B. Traffic for subnet 192.168.1.0/24 comes in through server A. Server A has a GRE tunnel setup with Server B, and routes all traffic received for 192.168.1.0/...
- 36.8k
1
vote
0
answers
106
views
StrongSwan and Bird BGP route propagation
I have the following networks successfully connected through IPSec StrongSwan tunnel (ie. I can ping both sides through private IP addresses):
VPS1: 192.168.8.44 -- VPS2: 192.168.1.21
I want to ...
- 21
1
vote
3
answers
4k
views
Looking Glass script
Can you recommend good and secure looking glass scripts with traceroute,ping and bgp?
I want to install it to my website, and connect to Cisco routers.
0
votes
0
answers
86
views
bare-metal k8s zone routing for use with Multus cni
I have a Kubernetes cluster, every node is located in a different network (different data centers)
So I need to route a public IP address range to this cluster and use those IPv4 addresses within the ...
0
votes
0
answers
2k
views
Bird2 BGP [unreachable XXXX dev lo proto bird metric 32 pref medium]
The information I have obtained from the supplier is as follows.
Router ASN:AS56655
Router endpoint:2a03:94e0:f254::
Your endpoint:2a03:94e0:ffff:185:243:218::43
Multihop:Yes
Route table:Full
So I ...
- 1
0
votes
1
answer
47
views
Routing to custom remote destinations from VPCs through dynamic BGP VPN
I have a dynamic BGP VPN between a VPC and an on-premise site (on-premise uses vyOS router/vpn concentrator).
Servers in the VPC and on-premise subnets can communicate directly through he VPN.
The on-...
- 257
0
votes
1
answer
3k
views
AWS Site-to-Site VPN with BGP - how routes are advertized via BGP?
I've configured redundant site-to-site VPN between AWS and GCP with 2 VPN connections, 4 tunnels and BGP dynamic routing. Everything works, all good, servers on both sides of the tunnels can reach ...
google-cloud-platform
0
votes
1
answer
1k
views
FRR not sending BGP advertisements on debian 11
I am trying to get bgp working in a lab environment between 4 routers. I have 1 central router and 3 branches. 3 of the 4 machines are debian11 machines and 1 branch is a windows server 2019 which I ...
- 11
0
votes
1
answer
631
views
load balancing with Bird
I have the following routes pushed into my edge router
192.0.10.0/32 via 192.168.166.110 on br166 [master01 22:53:55] * (100) [AS64514?]
via 192.168.166.116 on br166 [worker_03 ...
- 3,553
0
votes
1
answer
128
views
Will anycast failover to the next server if it encounters a 404 from an nginx server?
I know that anycast will failover for layer 3 issues but will anycast failover if a file is not present? I.E. like a 404?
It seems like it won't, like as long as nginx returns something anycast will ...
- 11.7k
1
vote
1
answer
4k
views
BIRD iBGP - Route not reachable
i have two machines participating in the DN42 network, a darknet driven by the Chaos Computer Club and others to play around with advanced routing techniques like BGP and stuff.
The machines are ...
CommunityBot
- 1
1
vote
1
answer
213
views
IPv6 Forwarding working 1 way externally
Originally Asked on Network Engineering but told to ask on here instead.
I'm having a problem with routing my own ipv6 prefix for anycast.
I got my ASN and IPV6/48 sponsored with RIPE and I am ...
- 25k
0
votes
1
answer
2k
views
pfSense to Amazon VPC IPsec VPN Tunnel Fails to Connect
I'm trying to setup an IPsec VPN tunnel with BGP routing from a pfSense 2.3.2 firewall to a recently created AWS VPC.I've installed OpenBGPD on the pfSense firewall.
I've followed this tutorial: ...
CommunityBot
- 1
0
votes
0
answers
1k
views
BGP: I cannot ping an address even though it exists in the routing table
I have the topology from the attached image with I-BGP neighborship between 192.168.21.1 and 192.168.21.2 and E-BGP neighborship between 192.168.6.1 and 192.168.6.2. I have advertised network 2.2.2.2/...
0
votes
1
answer
51
views
Nagios on a virtual network
I am trying to emulate a virtual network in Kathara (ex. NetKit), based on OSPF and BGP routing and I am new to this. After emulating the network I need to monitor it using Nagios, but my question is ...
- 3,819
1
vote
1
answer
151
views
About MPLS label range
In most routers or switches that support MPLS, if transit label and uhp LSP label need to have a different label range? when protocol(LDP or BGP) assign labels, I know that VPN label and LSP tunnel ...
- 2,179
0
votes
0
answers
2k
views
bird2 BGP how to announce subnets from the same ASN but from another router
I am trying to learn more about BGP / IPv6, this is my goal:
Currently, for testing, I have a VM from a provider that gives me an /44 network
This is the current configuration on that VM:
router id &...
- 568
1
vote
1
answer
532
views
Why does bgp OPEN message get Connect Socket: Connection reset by peer when node is on a different subnet/gateway
My network setup:
Kubernetes network setup
With this setup, only nodes on same subnet can establish bgp connection. Other nodes (that do a full 3 way tcp handshake), responds to hte OPEN message with [...
- 11
0
votes
1
answer
322
views
Reached cloud router limits
I have reached the limit of 5 cloud routers per region, if I edit the quotas I can see only a project limit, is it possible to increase the limit of 5 cloud routers per region? if yes, how?
Also I ...
- 4,514
0
votes
1
answer
160
views
Forwarding packets using multiple servers
I have a IP block from RIR.
I'm using two providers for make anycast to "some" IPs. I will call this as A and B.
I want forward to other provider when that IP not at that location. I'm using ...
- 113
0
votes
1
answer
2k
views
Configuring BGP with local-preference set with FRRouting
I want to configure a multi-homed BGP router with preference for one ISP. My actual setup will only receive the default routes and not the full BGP feed from the upstream ISPs. But in this test setup ...
1
vote
0
answers
152
views
Provide internet access on the GCP side to an advertised bgp route
I have been looking for a solution for the above for a few days now and I've not come across a config that works.
Current setup:
I have a GCP CloudVPN with dynamic routing setup with an external ...
1
vote
0
answers
267
views
High usage IRQ/CPU on Centos 8 router BGP
PRC | sys 0.34s | user 0.10s | | #proc 124 | #trun 2 | #tslpi 93 | | #tslpu 0 | #zombie 0 | clones 0 | | #exit 0 |
CPU | sys ...
- 11
0
votes
1
answer
540
views
Is it possible to filter directly connected networks redistribute with BGP based on a peer basis?
Assume a simplified case in which router R1 is connected to two BGP peers: one eBGP peer and one iBGP peer. Is there a possibility to advertise directly connected routes only to one of them ...
1
vote
2
answers
5k
views
linux routing or natting with ip on loopback interface as alias
Ive got
eth0:0 192.168.2.10 (for bgp network announce, no vlan, alias on eth0)
eth0.1 192.168.3.20 (for bgp session 1,vlan3 transport to bgp router)
eth0.2 192.168.4.30 (for bgp session 2,vlan4 ...
- 318
17
votes
4
answers
10k
views
How are IP addresses actually assigned?
I'm having a hard time understanding how a governing body assigns IP addresses, companies use BGP to advertise those IPs, and how the internet works. Then, where the hell does DNS come in?
Can ...
CommunityBot
- 1
0
votes
1
answer
224
views
Route-Distinguisher (RD) to import and export the prefixes?
Why can't we use Route Distinguisher(RD) as a tag to import and export the prefixes/routes. It is also a unique value per customer, why use the second parameter?
- 2,179
1
vote
1
answer
854
views
Problems with RD, RT import and RT export in MPLS VPN and BGP
I'm learning MPLS VPN with MP-BGP and I'm finding difficulties with undertstanding the RD value and the RT import and export values.
From what I've already understand, RD (route distinguisher) ...
0
votes
2
answers
1k
views
BGP advertising routes accross connected virtual networks
I have 2 vnets (same subscription), one in AU (10.2.0.0/18) and one in UK (10.2.64.0/18).
The vnets are connected together and virtual PCs connected to each vnet can ping each other.
Click here for ...
1
vote
0
answers
1k
views
Cisco ISR4431 router randomly reboots
I have a Cisco ISR4431 acting internet edge router that has been randomly rebooting every 5 days or so. When it reboots it takes anywhere from 10-60 minutes before it is back up and network traffic ...
- 1,689
0
votes
1
answer
146
views
Virtual Switching Sanity Check - NFS, BGP & Kubernetes
I have a home Kubernetes cluster that runs in 4 VMs on top of Proxmox. Proxmox is tagged to VLAN 20, the Kubernetes VMs are tagged to VLAN 40.
The Kubernetes VMs are BGP neighbors of my router so ...
- 251
0
votes
1
answer
138
views
Routing to a simulated network running inside an AWS Instance
So, we're running a simulated network on a server in AWS and i'm trying to figure our how to enable routing to that simulated network both from inside AWS and from our remote offices.
Our VPC CIDR ...
- 2,179
1
vote
2
answers
3k
views
VPN between on prem and GCP: routes shared but ping doesn't go through
I have been struggling with the VPN setup between on-prem and GCP for more than a week. I am completely out of ideas at this point, and would love to get some help of network specialists.
Goal
The ...
2
votes
1
answer
679
views
What kind of routes can be propagated to VPC route tables?
in AWS, What kind of routes can be propagated to VPC route tables ?
I know:
site-to-site VPN routes via Virtual Private Gateway
anything else ?
- 1,084
0
votes
0
answers
31
views
Allow devices in in a VPN direct access to the internet in AWS
Is it possible to route all traffic from a site-to-site VPN connection to the public internet?
Currently, I have set up Squid as a proxy. Since I need to forward also non-http/s protocols I would ...
- 103
0
votes
0
answers
81
views
iBGP routes from same router id received but not learned
I'm using FRR for BGP.
I have the following setup: router 0, 1, and 2 are all part of the same AS (so everything is iBGP). Router 0 is connected to 1 and 2, 1 and 2 are not connected to each other (0 ...
- 111
0
votes
1
answer
176
views
Under volumetric DDoS can I prevent ISP null-routing by turning NIC off briefly?
A server in a data center is getting a volumetric DDoS attack. Congestion starts to build up and the data center/ISP going to solve this by null-routing (RTBH routing) the server's IP address for ...
- 2,179
0
votes
1
answer
296
views
Get high availability with BGP
I want get high availability with BGP (mostly for DDoS Attack)
I have.. Ubuntu servers(not Vultr's) and Vultr's ubuntu servers and I'll rent /24 IP block and AS Number soon..(and link it to vultr)
(...
- 33.3k
0
votes
1
answer
498
views
GCP: Routing to ip alias over IKEv1 VPN without BGP
I have a private GKE cluster running in a single subnet and region. The nodes in the cluster utilize the subnet's CIDR of 10.60.0.0/16. The cluster has two secondary CIDR ranges for its pods and ...
1
vote
0
answers
411
views
Juniper SRX300 Maximum BGP routes
I've got a Juniper SRX300 which i'm using to connect to 2 BGP peers. The documentation i've read says this SRX only supports 300,000 BGP routes, so for each peer I created an import policy (based on ...
- 111
0
votes
1
answer
202
views
IP Transit Using GCP compute instance?
If I announce my IP space on GCP compute engine and connect to GCP via a Dedicated interconnect, as the inbound transfer on GCP is free, can I use GCP as my inbound IP Transit
0
votes
3
answers
6k
views
How can I make two routers to speak to each other when they both belong to two different subnet and AS?
Here is my situation, I have a router R1 whose external IP address is 11.11.2.1.
I have another router R2 whose external IP address is 5.5.2.1.
I am running eBGP on R1 and R2. However, I cannot ping ...
- 26
0
votes
1
answer
2k
views
Share AWS DirectConnect between multiple accounts
AWS allows you to share your DirectConnect connection amongst multiple AWS accounts via a hosted virtual interface (instructions here). I have a pfSense device on the local side of an MPLS line for ...
- 1,084
1
vote
0
answers
262
views
Quagga BGP - How do I remove a blackhole from Quagga BGP configuration
In the above screenshot you can see that the preferred route for 10.120.15.0/24 is into a 0.0.0.0 black hole.
First, how do I remove that black hole from vtysh
Second how do I add a new IP in there ...
- 111
1
vote
1
answer
121
views
how can I know since when has a BGP prefix been allocated?
I am a bit confused.
I would like to know since when a current ASN (and its corresponding prefixes) have been in place.
When I look at the example at team-cymru (http://www.team-cymru.com/IP-ASN-...
- 248k
0
votes
1
answer
110
views
can I still map an IP address to its ASN number when the last octet is masked?
I have a database of IP addresses whose last octet has been masked
IpAnonymizer.mask_ip("8.8.4.4")
# => "8.8.4.0"
Can I still use map these IPs to their respective Autonomous Numbers or the ...
- 80.3k
3
votes
0
answers
925
views
NGINX: Map IP to ASN
in Preparation for GDPR I want my NGINX to not log IP's any longer, but log the AS Number.
To map the ip to an AS number, I would use the BGP datasets from Ripe, and import them in an MySQL table.
...
- 51
1
vote
2
answers
162
views
Synchronize states of bridge interfaces
We have redundant 10G fiber links to our upstream internet provider in an active/failover configuration. Between our router and the upstream router, we have a pair of firewalls running Vyos in ...
- 1,243
0
votes
1
answer
2k
views
EdgeOS BGP routes received but not being injected
I'm trying to set up BGP over IPSEC with Google Cloud Platform. The IPSEC tunnel is successfully established, and GCP reports the BGP session as up. EdgeMax router is receiving the routes, but isn't ...
1
vote
0
answers
79
views
Can the RPK infrastructure sign a SSL certificate for an IP? Will browsers recognize it?
In theory every AS, ISP provider or whatever, holds a certificate proving that it owns the range of addresses assigned to him. This is the Resource Public Key Infrastructure (RPKI) and it seems well ...
- 200
Related Tags
routing × 51
networking × 44
cisco × 24
router × 14
linux × 12
vpn × 12
ospf × 11
quagga × 10
internet × 9
bird × 9
ip × 6
mpls × 6
load-balancing × 5
anycast × 5
peering × 5
as-number × 5
firewall × 4
linux-networking × 4
monitoring × 4
failover × 4
route × 4
more related tags
Hot Network Questions
- What words of endearment may I use for describing a misbehaving child?
- Homemade garlic salt - risk of botulism?
- What kind of lightbulb is pictured here, having a clear bulb window and 4 yellow vertical rods?
- Is it possible to prove that this matrix is invertible?
- High-capacity floppy drives from the early 2000s, what were they?
- How to find fundamental cycles in a multiple edge graph?
- Michael Noll's early computer art - arranging graphic elements in a circular manner
- How does quantum teleportation not lose information?
- Did any country in the G20 not condemn the Iranian drone & missile attack on Israel?
- Ways to Say "Forcibly Inducted"
- What animals would herbivorous humans most likely domesticate?
- ER diagram with empty boxes as a worksheet
- How to make a device to randomly choose one of three possibilities, with caveat that sometimes one of them is not available?
- What is known about finite dimensional modules over the nilCoxeter algebra?
- How do you measure specific impulse Isp of a rocket engine?
- Will the door fit in a rough opening only oversized 2 inches?
- Why do Chinese people complicate the matter in choosing the words for translation
- How can my book purchase get the most money to an author?
- Looking for a movie or made for tv film or miniseries that I saw in the 80s. Featuring VR and the decline of humanity
- Is this a photo of a historical reinactment of an 1868 treaty signing?
- Writing a general solution to differential equation with Bessel functions
- Short novel. A human astronaut is exploring a huge structure in space. It has tunnels and can exit on different planets
- Output a 1-2-3 sequence
- What happens if the US President-elect is sent to prison before assuming power?