21 posts tagged with "bgp"
Cloud gives you LoadBalancer Services for free; bare metal does not. MetalLB in BGP mode advertises Service IPs to your routers for real ECMP load balancing — how to configure the pools, peers, and advertisements, and why BGP mode beats L2.
Two upstreams, real control over traffic. Outbound steering with local-preference, inbound steering with AS-path prepend, MED, and provider communities, and why inbound is always the harder half.
The four MANRS actions turned into real config. Building prefix filters with bgpq4, enforcing AS-path sanity, deploying BCP38 anti-spoofing with uRPF, and keeping your PeeringDB and IRR records honest.
Origin validation only works if your routers have fresh, trusted ROA data. How to run Routinator, feed it to BIRD, FRR, and IOS-XR over RTR, and roll out invalid-dropping without blackholing yourself.
How an internet exchange route server actually works, and how to build one with BIRD 2. Transparent AS_PATH, per-client filtering, RPKI validation, and the BGP communities members use to control who they peer with.
Inter-subnet routing in EVPN-VXLAN fabrics comes in two flavors that behave very differently at scale. How asymmetric and symmetric IRB forward, why VNI sprawl matters, and which one to standardize on.
Build a VXLAN BGP EVPN fabric on Nexus from scratch. Covers the OSPF underlay, BGP EVPN overlay, NVE configuration, distributed anycast gateway, and the verification commands that prove it actually forwards.
Design maintainable Junos routing policies. Covers policy-statement structure, community naming, prefix-lists, and safe defaults that prevent routing disasters.
Understand BGP FlowSpec for traffic filtering. Covers FlowSpec rules, BGP distribution, rate limiting, and why FlowSpec enables network-wide filtering from a single point.
Implement RTBH on VyOS for DDoS mitigation. Covers blackhole routing, BGP communities, triggering procedures, and why RTBH sacrifices the target to save the network.
Run routing protocols over VPN tunnels on VyOS. Covers OSPF over GRE/IPsec, BGP over WireGuard, tunnel interface selection, and why routing over tunnels requires careful planning.
Understand EVPN architecture and concepts. Covers EVPN route types, MAC/IP learning via BGP, multi-homing, VXLAN integration, and why EVPN is the future of overlay networking.
Configure MPLS L3VPN on VyOS. Covers VPNv4 address family, route distinguishers, route targets, PE-CE routing, and why L3VPN provides scalable multi-tenant connectivity.
Configure BGP Labeled Unicast on VyOS. Covers label distribution via BGP, inter-AS MPLS, seamless MPLS concepts, and why BGP-LU replaces LDP in modern designs.
Configure BGP route dampening on VyOS. Covers dampening parameters, penalty calculation, route suppression, reuse thresholds, and why dampening prevents unstable routes from destabilizing your network.
Configure ECMP on VyOS for route-level load balancing. Covers equal-cost paths, multipath BGP, hash algorithms, troubleshooting uneven distribution, and why ECMP is simple but requires understanding.
Master BGP communities on VyOS. Covers standard, extended, and large communities, common use cases, community-based filtering, and why communities are the language networks speak.
Configure OSPF and BGP graceful restart on VyOS. Covers GR mechanics, helper mode, restart timers, and why graceful restart prevents traffic loss during maintenance.
Implement BFD on VyOS for sub-second failure detection. Covers BFD timers, integration with BGP and OSPF, multihop BFD, and why routing protocol keepalives are too slow.
Real-world BGP route validation using RPKI and IRR on VyOS. Covers validator setup, policy storage, prefix validation workflow, and why filtering is a process, not a single configuration.
BGP fundamentals on VyOS using FRR. Covers eBGP/iBGP setup, prefix-lists, route-maps, communities, max-prefix protection, and why BGP without filtering is an incident waiting to happen.