Border Gateway Protocol (an introduction) Karst Koymans. Tuesday, March 8, 2016

Transcription

1 .. BGP Border Gateway Protocol (an introduction) Karst Koymans Informatics Institute University of Amsterdam (version 15.6, 2016/03/15 22:30:35) Tuesday, March 8, 2016 Karst Koymans (UvA) BGP Tuesday, March 8, / 72

2 . 1 General ideas behind BGP Background Providers, Customers and Peers External and Internal BGP BGP information bases. 2 The BGP protocol BGP attributes BGP messages. 3 Traffic Engineering Outbound Traffic Engineering Inbound Traffic Engineering. 4 IBGP scaling Karst Koymans (UvA) BGP Tuesday, March 8, / 72

3 General ideas behind BGP Outline. 1 General ideas behind BGP Background Providers, Customers and Peers External and Internal BGP BGP information bases. 2 The BGP protocol BGP attributes BGP messages. 3 Traffic Engineering Outbound Traffic Engineering Inbound Traffic Engineering. 4 IBGP scaling Karst Koymans (UvA) BGP Tuesday, March 8, / 72

4 General ideas behind BGP Background Outline. 1 General ideas behind BGP Background Providers, Customers and Peers External and Internal BGP BGP information bases. 2 The BGP protocol BGP attributes BGP messages. 3 Traffic Engineering Outbound Traffic Engineering Inbound Traffic Engineering. 4 IBGP scaling Karst Koymans (UvA) BGP Tuesday, March 8, / 72

5 General ideas behind BGP Background BGP version 4 Border Gateway Protocol version 4 (BGP4) Specified in RFC 4271 The inter-as routing protocol Monopolises the Internet Based on path vector routing which is in-between distance vector and link state routing Uses (often non-coordinated) routing policies which can be problematic for convergence Karst Koymans (UvA) BGP Tuesday, March 8, / 72

6 General ideas behind BGP Background Autonomous system (AS). Definition (AS Autonomous System). A connected group of networks and routers. representing some assigned set of IP prefixes having a single, consistent routing policy both internally and externally Karst Koymans (UvA) BGP Tuesday, March 8, / 72

7 Autonomous system illustration

8 General ideas behind BGP Providers, Customers and Peers Outline. 1 General ideas behind BGP Background Providers, Customers and Peers External and Internal BGP BGP information bases. 2 The BGP protocol BGP attributes BGP messages. 3 Traffic Engineering Outbound Traffic Engineering Inbound Traffic Engineering. 4 IBGP scaling Karst Koymans (UvA) BGP Tuesday, March 8, / 72

9 Providers and Customers Internet IP IP Provider $$ IP Customer Internet The IP means IP data packet flow The $$ means money transfer

10 Peers Provider 1 $$ Provider 2 $$ Provider 3 IP IP $$ $$ $$ Customer 1 Customer 2 No packets Customer 3 No packets here means that packet flow between Customer 1 and Customer 3 usually will not flow through Provider 2.

11 Providers, Customers and Peers G1 IP $$ $$ G2 $$ $$ R1 $$ C1 C2 $$ $$ P1 P2 IP $$ $$ C3 $$ C4 What route will traffic between C1 and C2 take?

12 The AS abstraction

13 Providers, Customers and Peers routing preferences The order of preference for a route is Customers have highest preference Peers have the next highest preference Providers have the lowest preference Transit relationships are enforced by export filtering Do not advertise provider or peer routes to other providers or peers Do advertise all routes to customers Do advertise customer routes to providers and peers

14 Providers, Customers and Peers: Export filtering

15 General ideas behind BGP External and Internal BGP Outline. 1 General ideas behind BGP Background Providers, Customers and Peers External and Internal BGP BGP information bases. 2 The BGP protocol BGP attributes BGP messages. 3 Traffic Engineering Outbound Traffic Engineering Inbound Traffic Engineering. 4 IBGP scaling Karst Koymans (UvA) BGP Tuesday, March 8, / 72

16 General ideas behind BGP External and Internal BGP External and Internal BGP (1) EBGP (External BGP) Used for BGP neighbors between different ASs Exchanging prefixes Implementing policies IBGP (Internal BGP) Used for BGP neighbors within one and the same AS Distributing Internet prefixes across the backbone in order to create a consistent view among all entry/exit points Inserting locally originated prefixes for instance for customers that do not speak BGP Karst Koymans (UvA) BGP Tuesday, March 8, / 72

17 General ideas behind BGP External and Internal BGP External and Internal BGP (2) Routes imported from one IBGP peer are not distributed to another IBGP peer This prevents possible routing loops Loop detection is based on duplicates in AS paths EBGP detects this between different ASs IBGP cannot detect this inside one and the same AS Requires IBGP peers to be configured as a full mesh Karst Koymans (UvA) BGP Tuesday, March 8, / 72

18 General ideas behind BGP BGP information bases Outline. 1 General ideas behind BGP Background Providers, Customers and Peers External and Internal BGP BGP information bases. 2 The BGP protocol BGP attributes BGP messages. 3 Traffic Engineering Outbound Traffic Engineering Inbound Traffic Engineering. 4 IBGP scaling Karst Koymans (UvA) BGP Tuesday, March 8, / 72

19 General ideas behind BGP BGP information bases Routing Information Bases (RIBs) Adj-RIB-In (one per peer) Unprocessed routes received from peer Loc-RIB (only one globally) Routes after input filtering and best path selection Every AS needs an input policy Path selection is a fixed and specified algorithm Adj-RIB-Out (one per peer) Routes after output filtering Every AS needs an output policy Karst Koymans (UvA) BGP Tuesday, March 8, / 72

20 BGP route processing Receive BGP update Install route in Adj-RIB-In Apply import policy, filter and tweak attributes Apply best route selection algorithm Possibly install route in Loc-RIB Influence IP forwarding table Apply export policy, filter and tweak attributes Possibly install route in Adj-RIB-Out Transmit BGP update

21 The BGP protocol Outline. 1 General ideas behind BGP Background Providers, Customers and Peers External and Internal BGP BGP information bases. 2 The BGP protocol BGP attributes BGP messages. 3 Traffic Engineering Outbound Traffic Engineering Inbound Traffic Engineering. 4 IBGP scaling Karst Koymans (UvA) BGP Tuesday, March 8, / 72

22 The BGP protocol BGP protocol Uses TCP over port 179 Usually with a directly connected neighbor on layer 2 except when using multi-hop BGP (not common) Exchanges Network Layer Reachability Information (NLRI) Prefixes that can or can no longer be reached through the router Accompanied by BGP attributes used by the best route selection algorithm Karst Koymans (UvA) BGP Tuesday, March 8, / 72

23 The BGP protocol BGP attributes Outline. 1 General ideas behind BGP Background Providers, Customers and Peers External and Internal BGP BGP information bases. 2 The BGP protocol BGP attributes BGP messages. 3 Traffic Engineering Outbound Traffic Engineering Inbound Traffic Engineering. 4 IBGP scaling Karst Koymans (UvA) BGP Tuesday, March 8, / 72

24 The BGP protocol BGP attributes Some important BGP attributes In order of path selection importance LOCAL PREF (Local Preference) AS PATH ORIGIN (Historical) MULTI EXIT DISC (MED; Multi-exit discriminator) Unrelated to path selection NEXT HOP Must be reachable (directly or via IGP, except in the case of multi-hop BGP) Karst Koymans (UvA) BGP Tuesday, March 8, / 72

25 Next Hop in EBGP and IBGP

26 The BGP protocol BGP attributes BGP attribute types Well-known, mandatory ORIGIN, AS PATH, NEXT HOP Well-known, discretionary LOCAL PREF, ATOMIC AGGREGATE Optional, transitive COMMUNITIES, AGGREGATOR Optional, non-transitive MULTI EXIT DISC Karst Koymans (UvA) BGP Tuesday, March 8, / 72

27 The BGP protocol BGP attributes LOCAL PREF (Local Preference) Advertised within a single AS (via IBGP) Used to implement local policies Can depend on any locally available information This might be learned outside of BGP Default value is 100 Highest value wins Karst Koymans (UvA) BGP Tuesday, March 8, / 72

28 The BGP protocol BGP attributes AS PATH Sequence of ASs An AS can also be generalized to a set of ASs Used for loop detection The sequence length defines the metric (distance) Shortest path wins Prepend your own AS in EBGP updates Possibly multiple times, enabling traffic engineering Leave unchanged in IBGP updates Karst Koymans (UvA) BGP Tuesday, March 8, / 72

29 AS PATH example

30 AS PATH length can be deceptive

31 Traffic often follows AS PATH (in reverse)

32 Sometimes traffic does not follow AS PATH

33 The BGP protocol BGP attributes ORIGIN (Historic attribute) The ORIGIN attribute tells where the route (NLRI) originated Interior to the originating AS: ORIGIN = 0 Via the EGP protocol (historic): ORIGIN = 1 Via some other means: ORIGIN = 2 A lower ORIGIN wins In practice the ORIGIN is always 0 Karst Koymans (UvA) BGP Tuesday, March 8, / 72

34 The BGP protocol BGP attributes MULTI EXIT DISC (Multi-Exit Discriminator or MED) The MED (or metric, formerly INTER AS METRIC) is meant to be advertised between neighboring ASs (via EBGP) Some implementations carry MED on by IBGP Hot potato versus cold potato The MED is non-transitive (is not transferred into a third AS) A lower MED wins The default MED is 0 (lowest possible value) Some implementations choose the highest possible value Karst Koymans (UvA) BGP Tuesday, March 8, / 72

35 Best route selection. Definition (Route selection preference). 1. (Weight; Cisco specific). 2 Highest Local Preference. 3 Shortest AS Path. 4 (Lowest Origin; hardly used; historic). 5 Lowest MED. 6 Prefer EBGP over IBGP. 7 Lowest IGP cost to BGP egress.. 8 Lowest Router ID

36 The BGP protocol BGP messages Outline. 1 General ideas behind BGP Background Providers, Customers and Peers External and Internal BGP BGP information bases. 2 The BGP protocol BGP attributes BGP messages. 3 Traffic Engineering Outbound Traffic Engineering Inbound Traffic Engineering. 4 IBGP scaling Karst Koymans (UvA) BGP Tuesday, March 8, / 72

37 The BGP protocol BGP messages BGP message header Marker Length Type We use the term message and not packet, because BGP packets are in fact part of one single TCP-stream. Karst Koymans (UvA) BGP Tuesday, March 8, / 72

38 The BGP protocol BGP messages BGP header fields. BGP header fields. Marker 128 bits of 1 (compatibility) Length Total length (min 19, max 4096) No padding a, Including header Type 1: OPEN 2: UPDATE 3: NOTIFICATION 4: KEEPALIVE 5: Route-REFRESH. a No superfluous bytes are allowed inside the TCP stream Karst Koymans (UvA) BGP Tuesday, March 8, / 72

39 The BGP protocol BGP messages BGP OPEN message Version My Autonomous System Opt Parm Len Hold Time BGP Identifier Optional Parameters (variable) Karst Koymans (UvA) BGP Tuesday, March 8, / 72

40 The BGP protocol BGP messages OPEN message fields. OPEN message fields. Version 4. My Autonomous System Hold Time BGP Identifier Opt Parm Length Optional Parameters Sender s AS Liveness detection Sender s identifying IP address Length of parameter field TLV-encoded options One interesting parameter is the Capabilities Optional Parameter, which defines (among others) the Route Refresh Capability. Karst Koymans (UvA) BGP Tuesday, March 8, / 72

41 The BGP protocol BGP messages BGP KEEPALIVE message Karst Koymans (UvA) BGP Tuesday, March 8, / 72

42 The BGP protocol BGP messages BGP KEEPALIVE message This page intentionally left blank. Karst Koymans (UvA) BGP Tuesday, March 8, / 72

43 The BGP protocol BGP messages BGP KEEPALIVE message This page intentionally left blank. Karst Koymans (UvA) BGP Tuesday, March 8, / 72

44 The BGP protocol BGP messages KEEPALIVE message fields. KEEPALIVE message fields.. :) Karst Koymans (UvA) BGP Tuesday, March 8, / 72

45 The BGP protocol BGP messages BGP NOTIFICATION message Error code Error subcode Data (variable) Karst Koymans (UvA) BGP Tuesday, March 8, / 72

46 The BGP protocol BGP messages NOTIFICATION message fields. NOTIFICATION message fields. Error code 1: Message Header Error 2: OPEN Error 3: UPDATE Error 4: Hold Timer Expired.... Error subcode Data Depends on error code Depends on error code and subcode Karst Koymans (UvA) BGP Tuesday, March 8, / 72

47 The BGP protocol BGP messages BGP Route-REFRESH message AFI Reserved SAFI Karst Koymans (UvA) BGP Tuesday, March 8, / 72

48 The BGP protocol BGP messages Route-REFRESH message fields. Route-REFRESH message fields. AFI Address Family Identifier Reserved 0. SAFI Subsequent Address Family Identifier Karst Koymans (UvA) BGP Tuesday, March 8, / 72

49 The BGP protocol BGP messages BGP UPDATE message Unfeasible Routes Length Total Path Attribute Length Withdrawn Routes (variable length) Path Attributes (variable length) Network Layer Reachability Information (variable length) Karst Koymans (UvA) BGP Tuesday, March 8, / 72

50 The BGP protocol BGP messages UPDATE message fields. UPDATE message fields. Unfeasible Routes Length Withdrawn Routes Total Path Attribute Length Path Attributes Network Layer Reachability Information a A prefix is specified by its length and just enough bytes of the network IP address to cover this length. Length of Withdrawn Routes List of prefixes a Length of Path Attributes TLV-encoded attributes List of NLRI prefixes Karst Koymans (UvA) BGP Tuesday, March 8, / 72

51 Traffic Engineering Outline. 1 General ideas behind BGP Background Providers, Customers and Peers External and Internal BGP BGP information bases. 2 The BGP protocol BGP attributes BGP messages. 3 Traffic Engineering Outbound Traffic Engineering Inbound Traffic Engineering. 4 IBGP scaling Karst Koymans (UvA) BGP Tuesday, March 8, / 72

52 Tweaking your policies Outbound traffic Influenced by inbound routes and filters Tweak attributes to influence best route selection You are in control yourself Inbound traffic Influenced by outbound routes and filters Tweak attributes trying to influence your peers best route selection You are dependent on your peers policies

53 Traffic Engineering Outbound Traffic Engineering Outline. 1 General ideas behind BGP Background Providers, Customers and Peers External and Internal BGP BGP information bases. 2 The BGP protocol BGP attributes BGP messages. 3 Traffic Engineering Outbound Traffic Engineering Inbound Traffic Engineering. 4 IBGP scaling Karst Koymans (UvA) BGP Tuesday, March 8, / 72

54 Traffic Engineering Outbound Traffic Engineering Outbound Traffic Engineering Outbound TE works by manipulating incoming routes Changing local preference Extending inbound AS paths Manipulating the metric (MED), for instance by using inbound communities It is relatively simple Based on your own policy You are in control yourself Karst Koymans (UvA) BGP Tuesday, March 8, / 72

55 Choice between provider, peer or customer

56 Manipulating local preference Prefer customer over peer over provider

57 Multihomed setup

58 Singlehomed primary and backup links

59 Traffic Engineering Inbound Traffic Engineering Outline. 1 General ideas behind BGP Background Providers, Customers and Peers External and Internal BGP BGP information bases. 2 The BGP protocol BGP attributes BGP messages. 3 Traffic Engineering Outbound Traffic Engineering Inbound Traffic Engineering. 4 IBGP scaling Karst Koymans (UvA) BGP Tuesday, March 8, / 72

60 Traffic Engineering Inbound Traffic Engineering Inbound Traffic Engineering Inbound TE works by manipulating outgoing routes Extending outbound AS PATHs is a traditional hack Manipulating the metric (MED) is the official way Setting outbound communities is a more modern approach Agreements with your neighbors are necessary (common policy) Inbound is more complex than outbound Inbound depends (also) on neighbor s policy You are not in control by yourself Announcing more specific routes Method of last resort, but often a bad idea Karst Koymans (UvA) BGP Tuesday, March 8, / 72

61 Advertising a longer AS PATH

62 Your provider might overrule your effort

63 But you can make an agreement by using a community

64 Hot potato routing

65 Burnt by the hot potato

66 Cold potato routing by honoring MEDs

67 Traffic Engineering Inbound Traffic Engineering Communities An optional transitive attribute A community can be used to communicate preferred treatment of a route Communities can be used with both inbound as well as outbound Some communities have a well-known semantics NO EXPORT: don t export beyond current AS (or confederation) NO ADVERTISE: don t export at all Karst Koymans (UvA) BGP Tuesday, March 8, / 72

68 Traffic Engineering Inbound Traffic Engineering Use of communities Inbound from your upstream Learn where your upstream imported this route You can base policy decisions on that Outbound to your upstream Request specific upstream treatment Setting of local preference Announcements or not to specific ASs AS PATH prepending for certain peerings Your upstream promises to implement the requested policy Karst Koymans (UvA) BGP Tuesday, March 8, / 72

69 IBGP scaling Outline. 1 General ideas behind BGP Background Providers, Customers and Peers External and Internal BGP BGP information bases. 2 The BGP protocol BGP attributes BGP messages. 3 Traffic Engineering Outbound Traffic Engineering Inbound Traffic Engineering. 4 IBGP scaling Karst Koymans (UvA) BGP Tuesday, March 8, / 72

70 IBGP scaling Route reflectors Specified in RFC 4456 A route reflector is a kind of super IBGP peer A route reflector has clients with which it peers via IBGP and for which it reflects (transitively) routes A route reflector is part of a full mesh of other route reflectors and non-clients Karst Koymans (UvA) BGP Tuesday, March 8, / 72

71 Full mesh IBGP

72 Route reflector mesh

73 IBGP scaling Confederations Specified in RFC 5065 Use multiple private ASs inside your main AS Talk to the outside world with your main AS This hides the private ASs Talk to the inside world as if using EBGP and IBGP Using the different private ASs This needs special AS PATH segment types Karst Koymans (UvA) BGP Tuesday, March 8, / 72

74 Confederation with SubAS s