Questions tagged [bgp]

BGP (Border Gateway Protocol) is one of the core routing protocols of the internet.

Filter by
Sorted by
Tagged with
0
votes
0answers
25 views

incomming connection from GRE tunnel is always in SYN_RECV state

I create a GRE tunnel according to this tutorial : https://community.hetzner.com/tutorials/linux-setup-gre-tunnel/ in base server (server A in tutorial ) i have BGP advertise . when i enable the ...
0
votes
0answers
12 views

ExpressRoute Config on SonicWall BGP?

We have Azure Express route with the following configuration PRIMARY RANGE: 172.16.100.0/30, Peer ASN: 65121, Vlan ID: 100 We then have X0 interface on the firewall with: IP 172.16.20.10 with VLAN ...
0
votes
0answers
15 views

Cisco ISR4431 router randomly reboots

I have a Cisco ISR4431 acting internet edge router that has been randomly rebooting every 5 days or so. When it reboots it takes anywhere from 10-60 minutes before it is back up and network traffic ...
0
votes
1answer
28 views

Routing to a simulated network running inside an AWS Instance

So, we're running a simulated network on a server in AWS and i'm trying to figure our how to enable routing to that simulated network both from inside AWS and from our remote offices. Our VPC CIDR ...
0
votes
0answers
45 views

Firewalling a BGP daemon (bird, port 179) with iptables in anycast scenario

I have a bunch of globally distributed servers which share an IP address using BGP Anycast. Each server announces itself to the next router using the bird BGP daemon. The daemon runs on port 179: # ...
2
votes
1answer
25 views

What kind of routes can be propagated to VPC route tables?

in AWS, What kind of routes can be propagated to VPC route tables ? I know: site-to-site VPN routes via Virtual Private Gateway anything else ?
0
votes
2answers
219 views

VPN between on prem and GCP: routes shared but ping doesn't go through

I have been struggling with the VPN setup between on-prem and GCP for more than a week. I am completely out of ideas at this point, and would love to get some help of network specialists. Goal The ...
0
votes
0answers
34 views

Troubleshooting installation of Quagga with RPKI/RTRlib

I am in the process of installing a Quagga fork which offers support for RPKI but the installation is failing and I need help in understanding why. The installation is happening in a Debian docker ...
0
votes
0answers
23 views

Allow devices in in a VPN direct access to the internet in AWS

Is it possible to route all traffic from a site-to-site VPN connection to the public internet? Currently, I have set up Squid as a proxy. Since I need to forward also non-http/s protocols I would ...
0
votes
0answers
13 views

BGP and authentication

I am reading the TCP/IP guide from 2005 and I am where it is talking about Open messages in BGP. It says Optional Parameters only allow Authentication Information where you set how authentication will ...
0
votes
0answers
20 views

iBGP routes from same router id received but not learned

I'm using FRR for BGP. I have the following setup: router 0, 1, and 2 are all part of the same AS (so everything is iBGP). Router 0 is connected to 1 and 2, 1 and 2 are not connected to each other (0 ...
1
vote
1answer
264 views

Problems with RD, RT import and RT export in MPLS VPN and BGP

I'm learning MPLS VPN with MP-BGP and I'm finding difficulties with undertstanding the RD value and the RT import and export values. From what I've already understand, RD (route distinguisher) ...
0
votes
1answer
47 views

Under volumetric DDoS can I prevent ISP null-routing by turning NIC off briefly?

A server in a data center is getting a volumetric DDoS attack. Congestion starts to build up and the data center/ISP going to solve this by null-routing (RTBH routing) the server's IP address for ...
1
vote
0answers
42 views

Provide internet access on the GCP side to an advertised bgp route

I have been looking for a solution for the above for a few days now and I've not come across a config that works. Current setup: I have a GCP CloudVPN with dynamic routing setup with an external ...
0
votes
1answer
59 views

Virtual Switching Sanity Check - NFS, BGP & Kubernetes

I have a home Kubernetes cluster that runs in 4 VMs on top of Proxmox. Proxmox is tagged to VLAN 20, the Kubernetes VMs are tagged to VLAN 40. The Kubernetes VMs are BGP neighbors of my router so ...
0
votes
1answer
112 views

Get high availability with BGP

I want get high availability with BGP (mostly for DDoS Attack) I have.. Ubuntu servers(not Vultr's) and Vultr's ubuntu servers and I'll rent /24 IP block and AS Number soon..(and link it to vultr) (...
0
votes
1answer
191 views

GCP: Routing to ip alias over IKEv1 VPN without BGP

I have a private GKE cluster running in a single subnet and region. The nodes in the cluster utilize the subnet's CIDR of 10.60.0.0/16. The cluster has two secondary CIDR ranges for its pods and ...
1
vote
0answers
167 views

Juniper SRX300 Maximum BGP routes

I've got a Juniper SRX300 which i'm using to connect to 2 BGP peers. The documentation i've read says this SRX only supports 300,000 BGP routes, so for each peer I created an import policy (based on ...
0
votes
1answer
95 views

IP Transit Using GCP compute instance?

If I announce my IP space on GCP compute engine and connect to GCP via a Dedicated interconnect, as the inbound transfer on GCP is free, can I use GCP as my inbound IP Transit
1
vote
0answers
115 views

Quagga BGP - How do I remove a blackhole from Quagga BGP configuration

In the above screenshot you can see that the preferred route for 10.120.15.0/24 is into a 0.0.0.0 black hole. First, how do I remove that black hole from vtysh Second how do I add a new IP in there ...
0
votes
1answer
769 views

Share AWS DirectConnect between multiple accounts

AWS allows you to share your DirectConnect connection amongst multiple AWS accounts via a hosted virtual interface (instructions here). I have a pfSense device on the local side of an MPLS line for ...
1
vote
1answer
54 views

how can I know since when has a BGP prefix been allocated?

I am a bit confused. I would like to know since when a current ASN (and its corresponding prefixes) have been in place. When I look at the example at team-cymru (http://www.team-cymru.com/IP-ASN-...
0
votes
1answer
38 views

can I still map an IP address to its ASN number when the last octet is masked?

I have a database of IP addresses whose last octet has been masked IpAnonymizer.mask_ip("8.8.4.4") # => "8.8.4.0" Can I still use map these IPs to their respective Autonomous Numbers or the ...
1
vote
0answers
329 views

NGINX: Map IP to ASN

in Preparation for GDPR I want my NGINX to not log IP's any longer, but log the AS Number. To map the ip to an AS number, I would use the BGP datasets from Ripe, and import them in an MySQL table. ...
1
vote
2answers
73 views

Synchronize states of bridge interfaces

We have redundant 10G fiber links to our upstream internet provider in an active/failover configuration. Between our router and the upstream router, we have a pair of firewalls running Vyos in ...
0
votes
1answer
835 views

EdgeOS BGP routes received but not being injected

I'm trying to set up BGP over IPSEC with Google Cloud Platform. The IPSEC tunnel is successfully established, and GCP reports the BGP session as up. EdgeMax router is receiving the routes, but isn't ...
1
vote
0answers
40 views

Can the RPK infrastructure sign a SSL certificate for an IP? Will browsers recognize it?

In theory every AS, ISP provider or whatever, holds a certificate proving that it owns the range of addresses assigned to him. This is the Resource Public Key Infrastructure (RPKI) and it seems well ...
1
vote
1answer
536 views

VPN to Shared VPC in GCP incorrect BGP routes being chosen as best

We have route based VPN tunnels going from a pair of Cisco routers at each of two sites (4 total routers), to two different VPN Gateways in the same shared VPC (XPN). Sharing routes through BGP, to a ...
2
votes
1answer
68 views

Cisco - BGP Best Path Algorithm - Which criteria

I set up below topology on Cisco IOU environment. R1, R2 and R3 routers are configured with one loopback interface on each, having "1.1.1.1", "2.2.2.2" and "3.3.3.3" addresses respectively. These ...
-2
votes
1answer
41 views

How to create a group of servers listening on the same IP-address, allowing failover/takeover? [closed]

I'd like to deploy a web application in a robust manner. The application itself is written using Elixir, which runs on top of Erlang/OTP, meaning that the application can be deployed on different ...
2
votes
1answer
306 views

bind address of application on multihomed server

I have a multi-homed server running bgp via quagga If I fire up an application on this server that initiates a connection, by default it is going to choose the interface with the lowest metric, ie ...
0
votes
0answers
190 views

configuring MD5 bgp authentication on solaris 11 using quagga

I am attempting to configure a BGP router within a solaris zone, using dedicated network interfaces. Upstream provider insists on the use of MD5 authentication. I have no bgp sessions coming up. I ...
0
votes
1answer
225 views

BGP interaction with IGP

I know that there are substantially two ways in which BGP and IGP can interact: 1) Distribution of default 0/0 route into IGP (for example OSPF, IS-IS, RIP,..) 2) Injection of BGP-learned route into ...
11
votes
3answers
1k views

If public IPs are pinned to a single AS, how does BGP anycast work?

It is my understanding that public IP blocks are assigned from IANA, which assigns sub-blocks to RIRs, which assigns sub-blocks to ISPs, which assigns sub-blocks to individual ASs as outlined in this ...
0
votes
1answer
177 views

Separating networks on 2 bgps from 2 ISP

I have Cisco router with 2 bgp's sessions from 2 isp's and want to separate my networks for example 80.80.80.0/24 to go trough first ISP and 90.90.90.0/24 to go trough the second ISP, but to have the ...
0
votes
1answer
1k views

pfSense to Amazon VPC IPsec VPN Tunnel Fails to Connect

I'm trying to setup an IPsec VPN tunnel with BGP routing from a pfSense 2.3.2 firewall to a recently created AWS VPC.I've installed OpenBGPD on the pfSense firewall. I've followed this tutorial: ...
0
votes
2answers
567 views

BGP advertising routes accross connected virtual networks

I have 2 vnets (same subscription), one in AU (10.2.0.0/18) and one in UK (10.2.64.0/18). The vnets are connected together and virtual PCs connected to each vnet can ping each other. Click here for ...
-1
votes
1answer
1k views

How to connect to a BGP network? [closed]

A service provider we're working with delivers us data via two(for resiliency) 1Gbps cross connects. He's located in a datacenter nearby the datacenter where our server is located. We don't have a ...
0
votes
1answer
80 views

BGP advertising prefixes

I've a basic question regarding BGP. How does a public AS's verifying networks that are being advertised to INTERNET? For example I have /25 assigned from RIR and how is this prefix verified by other ...
0
votes
1answer
915 views

pfSense BGP and NAP

We have an AS number for a C class (/24) and 2 providers. Currently I have a Fortigate and a pfSense in the network. Fortigate is doing the BGP, and pfSense is doing the NAT, DMZ, VPN, VLAN. We are ...
0
votes
1answer
92 views

Dumping route changes from openbgpd

I have an openbgpd installation running on FreeBSD. I want to capture the routes whenever there is a change. Is there any way of getting this from the logs, or writing a hook to listen for such events?...
0
votes
2answers
5k views

Bandwidth consideration of using AWS hardware VPN or Direct Connect?

I understand that aws hardware vpn has bandwidth limit of 4Gbps from https://aws.amazon.com/directconnect/ 'You can also use AWS Direct Connect instead of establishing a VPN connection over the ...
0
votes
3answers
3k views

How can I make two routers to speak to each other when they both belong to two different subnet and AS?

Here is my situation, I have a router R1 whose external IP address is 11.11.2.1. I have another router R2 whose external IP address is 5.5.2.1. I am running eBGP on R1 and R2. However, I cannot ping ...
9
votes
1answer
2k views

What happens in the real world Internet - BGP and OSPF?

I have never worked on the customer premises, but my assumption is that one service provider runs IGP services internally - For example - OSPF or IS-IS. Now, when one service provider has to reach ...
0
votes
1answer
377 views

Find IP address of router that is BGP announcing prefixes?

I am trying to determine if it is possible to find the IP addresses of all routers BGP announcing an IP prefix. For example, say 123.123.123.0/24 is being announced on three networks for the purpose ...
2
votes
0answers
929 views

How can one update BGP ASN on an Azure Virtual Network Gateway?

I have an existing Azure Virtual Network Gateway I'm attempting to reconfigure for use for BGP, per https://azure.microsoft.com/en-us/documentation/articles/vpn-gateway-bgp-resource-manager-ps/ . ...
1
vote
0answers
81 views

Sizing Firewall for Micro-Datacenter

We have a small data center we're finishing. We have a core+spline and then redundant TOR switches. Everything is basically whitebox 10gb switches running Cumulus; although, we will upgrade the core ...
1
vote
1answer
272 views

Traceroute and BGP peering

Doing a traceroute for example: 1: 1ms 1ms 1ms 1.1.1.1 2: 2ms 2ms 2ms 2.2.2.2 3: 5ms 5ms 5ms 3.3.3.3 4: 9ms 9ms 9ms 4.4.4.4 My question is: If the AS number of 2.2.2.2 and 3.3.3.3 are not ...
5
votes
1answer
320 views

Overcome asymmetric routing while migrating between sets of ISPs

We are migrating from one set of addresses to another set, both /24, and trying to minimize any down time during the migration. Ideally we'd run both for a period of time as we shut down the old ...
0
votes
1answer
799 views

BIRD BGP Advertise Network with different gateway

I'm looking to use BIRD or similar to advertise a route from a linux box sitting on 169.254.0.3 (on a /28 for eg) to the router at 169.254.0.1 (Which happens to be AWS). The route advertised to AWS ...