Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [bgp]

BGP (Border Gateway Protocol) is one of the core routing protocols of the internet.

Filter by
Sorted by
Tagged with
0 votes
0 answers
38 views

AWS Site-to-Site VPN with BGP - how routes are advertized via BGP?

I've configured redundant site-to-site VPN between AWS and GCP with 2 VPN connections, 4 tunnels and BGP dynamic routing. Everything works, all good, servers on both sides of the tunnels can reach ...
user avatar
  • 1
0 votes
0 answers
18 views

GCP Route in IPSec VPN between AWS TGW and GCP

I am setting up IPSec VPN with BGP between AWS and GCP. On the AWS side, I am using TGW. It is a HA VPN with two Site-to-Site-VPN on AWS side. There 4 tunnels in total. As confirmed from both the AWS ...
user avatar
  • 101
0 votes
0 answers
18 views

How to send data from bird6 to an API?

I have a ubuntu server with bird6 installed that receives block advertisements via BGP, and I intended that these advertisements that the server received were periodically forwarded to an API? Does ...
user avatar
  • 101
1 vote
1 answer
37 views

About MPLS label range

In most routers or switches that support MPLS, if transit label and uhp LSP label need to have a different label range? when protocol(LDP or BGP) assign labels, I know that VPN label and LSP tunnel ...
user avatar
  • 11
0 votes
0 answers
139 views

iBGP with recursive next-hop (FRR)

I'm trying to set up k8s cluster on Hetzner and export pods routes to server (172.20.0.5 in topology below) with FRR(Quagga) running on it. I use calico with BIRD as cni plugin. The problem is that ...
user avatar
0 votes
0 answers
20 views

RIPE inetnum and route objects

As i know the route object is a mandatory thing for successful prefixes advertising to the ISPs. But do the route object can be bigger than the actual prefix my DC is advertising ? for example if ...
user avatar
  • 53
0 votes
0 answers
308 views

bird2 BGP how to announce subnets from the same ASN but from another router

I am trying to learn more about BGP / IPv6, this is my goal: Currently, for testing, I have a VM from a provider that gives me an /44 network This is the current configuration on that VM: router id &...
user avatar
  • 548
1 vote
1 answer
101 views

Why does bgp OPEN message get Connect Socket: Connection reset by peer when node is on a different subnet/gateway

My network setup: Kubernetes network setup With this setup, only nodes on same subnet can establish bgp connection. Other nodes (that do a full 3 way tcp handshake), responds to hte OPEN message with [...
user avatar
  • 11
0 votes
0 answers
22 views

Minimal BGP confguration fails with Sophos SG230 and Alcatel Omniswitch

I got a really minimal network setup with just three BGP routers each in its separate AS. There are two Alcatel Omniswitch and one Sophos SG230, which is connected to both the Alcatels. As soon as one ...
user avatar
0 votes
1 answer
91 views

Reached cloud router limits

I have reached the limit of 5 cloud routers per region, if I edit the quotas I can see only a project limit, is it possible to increase the limit of 5 cloud routers per region? if yes, how? Also I ...
user avatar
  • 3
0 votes
1 answer
82 views

Forwarding packets using multiple servers

I have a IP block from RIR. I'm using two providers for make anycast to "some" IPs. I will call this as A and B. I want forward to other provider when that IP not at that location. I'm using ...
user avatar
0 votes
1 answer
343 views

Configuring BGP with local-preference set with FRRouting

I want to configure a multi-homed BGP router with preference for one ISP. My actual setup will only receive the default routes and not the full BGP feed from the upstream ISPs. But in this test setup ...
user avatar
0 votes
1 answer
393 views

Attempting to use Ubuntu 18.04 IP forwarding, but it will not forwarding packets received over GRE tunnel

I have two servers, server A and server B. Traffic for a certain subnet, 192.168.1.0/24, comes in through server A. Server A has a GRE tunnel setup with server B, and routes all traffic received for ...
user avatar
1 vote
0 answers
104 views

High usage IRQ/CPU on Centos 8 router BGP

PRC | sys 0.34s | user 0.10s | | #proc 124 | #trun 2 | #tslpi 93 | | #tslpu 0 | #zombie 0 | clones 0 | | #exit 0 | CPU | sys ...
user avatar
  • 11
0 votes
1 answer
154 views

Is it possible to filter directly connected networks redistribute with BGP based on a peer basis?

Assume a simplified case in which router R1 is connected to two BGP peers: one eBGP peer and one iBGP peer. Is there a possibility to advertise directly connected routes only to one of them ...
user avatar
0 votes
1 answer
136 views

Route-Distinguisher (RD) to import and export the prefixes?

Why can't we use Route Distinguisher(RD) as a tag to import and export the prefixes/routes. It is also a unique value per customer, why use the second parameter?
user avatar
1 vote
0 answers
547 views

Cisco ISR4431 router randomly reboots

I have a Cisco ISR4431 acting internet edge router that has been randomly rebooting every 5 days or so. When it reboots it takes anywhere from 10-60 minutes before it is back up and network traffic ...
user avatar
  • 1,649
0 votes
1 answer
64 views

Routing to a simulated network running inside an AWS Instance

So, we're running a simulated network on a server in AWS and i'm trying to figure our how to enable routing to that simulated network both from inside AWS and from our remote offices. Our VPC CIDR ...
user avatar
  • 1
2 votes
1 answer
143 views

What kind of routes can be propagated to VPC route tables?

in AWS, What kind of routes can be propagated to VPC route tables ? I know: site-to-site VPN routes via Virtual Private Gateway anything else ?
user avatar
  • 1,524
1 vote
2 answers
2k views

VPN between on prem and GCP: routes shared but ping doesn't go through

I have been struggling with the VPN setup between on-prem and GCP for more than a week. I am completely out of ideas at this point, and would love to get some help of network specialists. Goal The ...
user avatar
  • 121
0 votes
0 answers
25 views

Allow devices in in a VPN direct access to the internet in AWS

Is it possible to route all traffic from a site-to-site VPN connection to the public internet? Currently, I have set up Squid as a proxy. Since I need to forward also non-http/s protocols I would ...
user avatar
  • 103
0 votes
0 answers
29 views

iBGP routes from same router id received but not learned

I'm using FRR for BGP. I have the following setup: router 0, 1, and 2 are all part of the same AS (so everything is iBGP). Router 0 is connected to 1 and 2, 1 and 2 are not connected to each other (0 ...
user avatar
1 vote
1 answer
533 views

Problems with RD, RT import and RT export in MPLS VPN and BGP

I'm learning MPLS VPN with MP-BGP and I'm finding difficulties with undertstanding the RD value and the RT import and export values. From what I've already understand, RD (route distinguisher) ...
user avatar
  • 113
0 votes
1 answer
109 views

Under volumetric DDoS can I prevent ISP null-routing by turning NIC off briefly?

A server in a data center is getting a volumetric DDoS attack. Congestion starts to build up and the data center/ISP going to solve this by null-routing (RTBH routing) the server's IP address for ...
user avatar
  • 103
1 vote
0 answers
85 views

Provide internet access on the GCP side to an advertised bgp route

I have been looking for a solution for the above for a few days now and I've not come across a config that works. Current setup: I have a GCP CloudVPN with dynamic routing setup with an external ...
user avatar
  • 11
0 votes
1 answer
109 views

Virtual Switching Sanity Check - NFS, BGP & Kubernetes

I have a home Kubernetes cluster that runs in 4 VMs on top of Proxmox. Proxmox is tagged to VLAN 20, the Kubernetes VMs are tagged to VLAN 40. The Kubernetes VMs are BGP neighbors of my router so ...
user avatar
0 votes
1 answer
203 views

Get high availability with BGP

I want get high availability with BGP (mostly for DDoS Attack) I have.. Ubuntu servers(not Vultr's) and Vultr's ubuntu servers and I'll rent /24 IP block and AS Number soon..(and link it to vultr) (...
user avatar
  • 1
0 votes
1 answer
329 views

GCP: Routing to ip alias over IKEv1 VPN without BGP

I have a private GKE cluster running in a single subnet and region. The nodes in the cluster utilize the subnet's CIDR of 10.60.0.0/16. The cluster has two secondary CIDR ranges for its pods and ...
user avatar
1 vote
0 answers
278 views

Juniper SRX300 Maximum BGP routes

I've got a Juniper SRX300 which i'm using to connect to 2 BGP peers. The documentation i've read says this SRX only supports 300,000 BGP routes, so for each peer I created an import policy (based on ...
user avatar
  • 111
0 votes
1 answer
145 views

IP Transit Using GCP compute instance?

If I announce my IP space on GCP compute engine and connect to GCP via a Dedicated interconnect, as the inbound transfer on GCP is free, can I use GCP as my inbound IP Transit
user avatar
1 vote
0 answers
171 views

Quagga BGP - How do I remove a blackhole from Quagga BGP configuration

In the above screenshot you can see that the preferred route for 10.120.15.0/24 is into a 0.0.0.0 black hole. First, how do I remove that black hole from vtysh Second how do I add a new IP in there ...
user avatar
0 votes
1 answer
1k views

Share AWS DirectConnect between multiple accounts

AWS allows you to share your DirectConnect connection amongst multiple AWS accounts via a hosted virtual interface (instructions here). I have a pfSense device on the local side of an MPLS line for ...
user avatar
1 vote
1 answer
62 views

how can I know since when has a BGP prefix been allocated?

I am a bit confused. I would like to know since when a current ASN (and its corresponding prefixes) have been in place. When I look at the example at team-cymru (http://www.team-cymru.com/IP-ASN-...
user avatar
0 votes
1 answer
66 views

can I still map an IP address to its ASN number when the last octet is masked?

I have a database of IP addresses whose last octet has been masked IpAnonymizer.mask_ip("8.8.4.4") # => "8.8.4.0" Can I still use map these IPs to their respective Autonomous Numbers or the ...
user avatar
1 vote
0 answers
568 views

NGINX: Map IP to ASN

in Preparation for GDPR I want my NGINX to not log IP's any longer, but log the AS Number. To map the ip to an AS number, I would use the BGP datasets from Ripe, and import them in an MySQL table. ...
user avatar
  • 31
1 vote
2 answers
117 views

Synchronize states of bridge interfaces

We have redundant 10G fiber links to our upstream internet provider in an active/failover configuration. Between our router and the upstream router, we have a pair of firewalls running Vyos in ...
user avatar
  • 1,203
0 votes
1 answer
1k views

EdgeOS BGP routes received but not being injected

I'm trying to set up BGP over IPSEC with Google Cloud Platform. The IPSEC tunnel is successfully established, and GCP reports the BGP session as up. EdgeMax router is receiving the routes, but isn't ...
user avatar
  • 205
1 vote
0 answers
50 views

Can the RPK infrastructure sign a SSL certificate for an IP? Will browsers recognize it?

In theory every AS, ISP provider or whatever, holds a certificate proving that it owns the range of addresses assigned to him. This is the Resource Public Key Infrastructure (RPKI) and it seems well ...
user avatar
  • 190
1 vote
1 answer
753 views

VPN to Shared VPC in GCP incorrect BGP routes being chosen as best

We have route based VPN tunnels going from a pair of Cisco routers at each of two sites (4 total routers), to two different VPN Gateways in the same shared VPC (XPN). Sharing routes through BGP, to a ...
user avatar
2 votes
1 answer
78 views

Cisco - BGP Best Path Algorithm - Which criteria

I set up below topology on Cisco IOU environment. R1, R2 and R3 routers are configured with one loopback interface on each, having "1.1.1.1", "2.2.2.2" and "3.3.3.3" addresses respectively. These ...
user avatar
-2 votes
1 answer
47 views

How to create a group of servers listening on the same IP-address, allowing failover/takeover? [closed]

I'd like to deploy a web application in a robust manner. The application itself is written using Elixir, which runs on top of Erlang/OTP, meaning that the application can be deployed on different ...
user avatar
  • 119
2 votes
1 answer
428 views

bind address of application on multihomed server

I have a multi-homed server running bgp via quagga If I fire up an application on this server that initiates a connection, by default it is going to choose the interface with the lowest metric, ie ...
user avatar
  • 255
0 votes
0 answers
219 views

configuring MD5 bgp authentication on solaris 11 using quagga

I am attempting to configure a BGP router within a solaris zone, using dedicated network interfaces. Upstream provider insists on the use of MD5 authentication. I have no bgp sessions coming up. I ...
user avatar
  • 255
0 votes
1 answer
316 views

BGP interaction with IGP

I know that there are substantially two ways in which BGP and IGP can interact: 1) Distribution of default 0/0 route into IGP (for example OSPF, IS-IS, RIP,..) 2) Injection of BGP-learned route into ...
user avatar
11 votes
3 answers
2k views

If public IPs are pinned to a single AS, how does BGP anycast work?

It is my understanding that public IP blocks are assigned from IANA, which assigns sub-blocks to RIRs, which assigns sub-blocks to ISPs, which assigns sub-blocks to individual ASs as outlined in this ...
user avatar
0 votes
1 answer
187 views

Separating networks on 2 bgps from 2 ISP

I have Cisco router with 2 bgp's sessions from 2 isp's and want to separate my networks for example 80.80.80.0/24 to go trough first ISP and 90.90.90.0/24 to go trough the second ISP, but to have the ...
user avatar
0 votes
1 answer
1k views

pfSense to Amazon VPC IPsec VPN Tunnel Fails to Connect

I'm trying to setup an IPsec VPN tunnel with BGP routing from a pfSense 2.3.2 firewall to a recently created AWS VPC.I've installed OpenBGPD on the pfSense firewall. I've followed this tutorial: ...
user avatar
0 votes
2 answers
762 views

BGP advertising routes accross connected virtual networks

I have 2 vnets (same subscription), one in AU (10.2.0.0/18) and one in UK (10.2.64.0/18). The vnets are connected together and virtual PCs connected to each vnet can ping each other. Click here for ...
user avatar
-1 votes
1 answer
1k views

How to connect to a BGP network? [closed]

A service provider we're working with delivers us data via two(for resiliency) 1Gbps cross connects. He's located in a datacenter nearby the datacenter where our server is located. We don't have a ...
user avatar
  • 231
0 votes
1 answer
86 views

BGP advertising prefixes

I've a basic question regarding BGP. How does a public AS's verifying networks that are being advertised to INTERNET? For example I have /25 assigned from RIR and how is this prefix verified by other ...
user avatar
  • 33