User Tools

Site Tools


peering-toolbox:single_upstream_ixp

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
peering-toolbox:single_upstream_ixp [2022/08/01 17:03] – [Single Upstream with IXP] philippeering-toolbox:single_upstream_ixp [2023/04/30 15:54] (current) – [Peering at an IXP] philip
Line 1: Line 1:
 {{peering-toolbox/peeringtoolbox.png?400|}} {{peering-toolbox/peeringtoolbox.png?400|}}
  
-====== Single Upstream with IXP ======+====== Peering at an IXP ======
  
 This section discusses how we scale multiple peerings with our network, using what is known as an Internet Exchange Point. This section discusses how we scale multiple peerings with our network, using what is known as an Internet Exchange Point.
Line 7: Line 7:
 Internet Exchange Points are open neutral interconnects where network operators (with their own Internet resources) are able to freely interconnect. An IXP is the most efficient and effective way of scaling interconnections between network operators in any one location. Internet Exchange Points are open neutral interconnects where network operators (with their own Internet resources) are able to freely interconnect. An IXP is the most efficient and effective way of scaling interconnections between network operators in any one location.
  
-Lots of information about IXPs is available from many locations, including the [[https://www.euro-ix.net/|Euro-IX]] website, the [[https://ixpdb.euro-ix.net/|IXPDB]], as well as in the links noted at the foot of the page.+Lots of information about IXPs is available from many locations, including the [[https://www.euro-ix.net/|Euro-IX]] website, the [[https://ixpdb.euro-ix.net/|IXPDB]], as well as in the links noted on the Toolbox site.
  
 A diagram showing the typical physical layout of this scenario is shown below: A diagram showing the typical physical layout of this scenario is shown below:
  
-{{:peering-toolbox:1-upstream-ixp.png?600| }}+{{ :peering-toolbox:1-upstream-ixp.png?600 | }}
  
- ===== Participating in an IXP =====+ ===== Participating at an IXP =====
  
 The section describes how to participate at an Internet Exchange Point. The description is high level as each and every IXP will have their own nuances, variations on the general theme. Discussion with the IXP operator is important to understand their requirements. The section describes how to participate at an Internet Exchange Point. The description is high level as each and every IXP will have their own nuances, variations on the general theme. Discussion with the IXP operator is important to understand their requirements.
  
-We won't discuss why joining an IXP is important - the Value of Peering has already covered why peering is essential for a network operator's business.+We won't discuss why joining an IXP is important - the Value of Peering section of the Toolbox has already covered why peering is essential for a network operator's business.
  
 Nor will we discuss which IXP to join - there are many factors involved, but common advice is to join the "local IXP" as that will host network operators with similar common interest, content, and customers, and likely will give the best peering opportunities. Nor will we discuss which IXP to join - there are many factors involved, but common advice is to join the "local IXP" as that will host network operators with similar common interest, content, and customers, and likely will give the best peering opportunities.
Line 60: Line 60:
 For a newcomer to peering and BGP in general, setting up a session with the Route Servers at the IXP is the easiest way to get up and running. For a newcomer to peering and BGP in general, setting up a session with the Route Servers at the IXP is the easiest way to get up and running.
  
-Your existing outbound policy applies with the Route Server peering too - you have a prefix-list which only allows your prefixes out to the EBGP peer. Inbound policy, in the basic instance is quite simple: you set up a prefix-list that allows everything, but set up a prefix-limit on the EBGP session to 100% more than the number of routes the Route Server is advertising (which you will find out once you bring the peering up). This protects against any of the peers at the IXP accidentally announcing a large portion of the BGP table via the Route Server. Note that most IXPs will have this protection on their Route Server in any case, but it's a good idea/recommendation that you do this too.+The existing outbound policy applies with the Route Server peering too - the newcomer has a prefix filter which only allows their prefixes out to the EBGP peer. 
  
-And then establishing the EBGP session is the same as for any private peer, as we saw earlier. There is one point to note though. The Route Server will NOT insert its AS number into the AS path of the routes you will hear from the IX. BGP implementations which conform with the standard require that the first AS in the path is the same as that of the peer AS - so this will cause an issue. You need to turn this feature off. On Cisco, for example, the command is: +Inbound policy, in the basic instance is quite simple: the newcomer creates a prefix-list that allows everything, but set up a prefix-limit on the EBGP session to 100% more than the number of routes the Route Server is advertising (which will clear once the peering has been brought up - or is available from the IX Looking Glass if available). This protects against any of the peers at the IXP accidentally announcing a large portion of the BGP table via the Route Server. Note that most IXPs will have this protection on their Route Server in any case, but it's a good idea/recommendation that the newcomer does this too. 
 + 
 +And then establishing the EBGP session is the same as for any private peer, as was shown earlier. There is one point to note though. The Route Server will NOT insert its AS number into the AS path of the routes heard from the IX. BGP implementations which conform with the standard require that the first AS in the path is the same as that of the peer AS - so this will cause an issue. This feature needs to be turned off. On Cisco, for example, the command is: 
 <code> <code>
 router bgp <ASN> router bgp <ASN>
Line 69: Line 71:
 Thereafter the EBGP session with the Route Server will be established, and connectivity to all the IX peers will be via the IX LAN. (Note that traffic does not go via the Route Server.) Thereafter the EBGP session with the Route Server will be established, and connectivity to all the IX peers will be via the IX LAN. (Note that traffic does not go via the Route Server.)
  
-If the IX has two Route Servers, bringing up the EBGP session with the second one will be by the same process - and provides important redundancy should either of the Route Servers go off line (for maintenance or otherwise).+If the IX has two Route Servers (normally the case), bringing up the EBGP session with the second one will be by the same process - and provides important redundancy should either of the Route Servers go off line (for maintenance or otherwise).
  
 ==== Bilateral Peering ==== ==== Bilateral Peering ====
 +
 +(UPDATED CONTENT)
  
 The other type of peering at an IXP is known as Bilateral Peering, and is where one member sets up an EBGP session directly with the other member across the IXP fabric. This type of peering is used by network operators who implement a Selective peering policy. The other type of peering at an IXP is known as Bilateral Peering, and is where one member sets up an EBGP session directly with the other member across the IXP fabric. This type of peering is used by network operators who implement a Selective peering policy.
  
-Establishing a peering with such an operator usually requires initiating contact with them first (via the IXP membership portal or via PeeringDB), agreeing on the peering and any other requirements that either operator may have.+Establishing a peering with such an operator usually requires initiating contact with them first (via the IXP membership portal or via PeeringDB), agreeing on the peering and any other requirements that either operator may have. Most IXP's membership portal is software developed by [[https://www.inex.ie/|INEX]] called [[https://www.ixpmanager.org/|IXP Manager]]. IXP Manager is a fully featured management platform for the IXP making many normally tedious manual tasks straight forward to implement. IXP Manager includes administration, a customer portal, end to end provisioning, as well as teaching and implementing current best practices. IXP Manager's customer portal can be used by the newcomer to the IXP to request bi-lateral peering with another member of the IXP. The Peering Request form would look something like this: 
 +<code> 
 +Dear [Network] Peering Team, 
 +We are [Company Name & Website] and we are fellow members of [IXP]. 
 +We would like to arrange peering session(s) with you on the following interface(s):
  
-Once this is done, establishing the EBGP session is no different from establishing EBGP with a private peer. Your outbound policy is already known, and the inbound policy only needs to be a prefix filter allowing the prefixes that the other operator said they'd be announcing.+[IXP & Location] 
 +``` 
 +Our AS Number:      
 +Our IPv4 Address:   
 +Our IPv4 AS Macro:  
 + 
 +Our IPv6 Address:   
 +Our IPv6 AS Macro:  
 + 
 +We're on PeeringDB: https://www.peeringdb.com/ 
 + 
 +NOC Details for [Network Name] 
 +The following are our NOC details for your reference: 
 +* NOC Hours: 24x7 
 +* NOC/Technical Phone:  
 +* NOC/Technical Email:      
 + 
 +Kind regards, 
 + 
 +</code> 
 +Even if there is no IXP Manager being used at the IX, the above form is still very useful as part of the peering request as it includes all the information needed to establish the peering (and should match the PeeringDB entry for the entity). 
 + 
 +Once this is done, establishing the EBGP session is no different from establishing EBGP with a private peer. The outbound policy is already known, and the inbound policy only needs to be a prefix filter allowing the prefixes that the other operator said they'd be announcing. Thereafter any updates to filters are done by exchange of emails or by whatever process the two peering operators have agreed upon.
  
 ==== Looking Glass ==== ==== Looking Glass ====
  
-Most IXPs offer a general service to members and the public called a Route Collector. A Route Collector collects routes from peers for use by a Looking Glass.+Most IXPs offer a general service made available to members and the public called a Route Collector. A Route Collector collects routes from peers for use by a Looking Glass.
  
 A Route Collector is functionally identical to a Route Server but with one very important difference: it does **NOT** send any routes to its peers. A Route Collector is functionally identical to a Route Server but with one very important difference: it does **NOT** send any routes to its peers.
Line 91: Line 121:
 Others IXPs keep the facility separate and will request their members to set up a bi-lateral peering with their IXP's Route Collector - in that sense the configuration is no different from any other bi-lateral peer, but there will be no routes received from the Route Collector itself. Others IXPs keep the facility separate and will request their members to set up a bi-lateral peering with their IXP's Route Collector - in that sense the configuration is no different from any other bi-lateral peer, but there will be no routes received from the Route Collector itself.
  
-All IXP members are encouraged to peer with the Route Collector - it helps with awareness, promoting peerability (showing the available routes)and equally importantly, with troubleshooting connectivity and reachability issues.+All IXP members are encouraged to peer with the Route Collector - it helps with awareness, promoting peerability (showing the available routes from all the peers) andequally importantly, with troubleshooting connectivity and reachability issues
 + 
 +The diagram below shows how a Route Collector may be connected to the IX, and with the Looking Glass website attached behind it.
  
-===== References =====+{{ :peering-toolbox:ixp-rc.png?400 | }}
  
-This content is sourced from many contributors, including: 
-  * [[https://bgp4all.com/pfs/_media/workshops/03-ixp-design.pdf |IXP Design Presentation]] - Philip Smith 
-  * [[https://bgp4all.com/pfs/_media/workshops/02-value-of-peering.pdf |Value of Peering Presentation]] - Philip Smith 
-  * [[https://learn.nsrc.org/bgp |BGP Videos]] - Network Startup Resource Center  
  
 [[:peering-toolbox/next-steps| Back to 'Establishing Peering' page]] [[:peering-toolbox/next-steps| Back to 'Establishing Peering' page]]
peering-toolbox/single_upstream_ixp.1659337437.txt.gz · Last modified: 2022/08/01 17:03 by philip