1 / 30

BGP Policy Atoms

BGP Policy Atoms. Yehuda Afek Omer Ben-Shalom Anat Bremler-Barr Tel-Aviv University. Outline. Atom definition Atom calculation methods Atom stability Correlation to BGP update Atom creation points Using Atoms. BGP ‘reminder’. The internet is a group of Autonomous systems (ASs)

nickan
Télécharger la présentation

BGP Policy Atoms

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript


  1. BGP Policy Atoms Yehuda Afek Omer Ben-Shalom Anat Bremler-Barr Tel-Aviv University

  2. Outline • Atom definition • Atom calculation methods • Atom stability • Correlation to BGP update • Atom creation points • Using Atoms

  3. BGP ‘reminder’ • The internet is a group of Autonomous systems (ASs) • BGP is the routing protocol between AS • Distance vector by AS hop count • Same for any prefix destination • AS path built dynamically • Per prefix attributes to affect policy

  4. multiple AS path to prefixes in the same AS • BGP tables may contain different BGP AS paths to different prefixes on the same destination AS

  5. Why different AS path ? • AS path same for all prefix by default • Human intervention (Policy) • By changing attributes per prefix • By selectively blocking updates • Finding out where policy was set is not easy !

  6. AS 34 AS 1 AS 2 AS 56 Network 56.0.8.0/21Network 56.0.16.0/21 AS 34 BGP table: 56.0.16.0 filter here ? Ingress ? Egress ? 56.0.16.0 filter here ? Ingress ? Egress ?

  7. Atom definition - local • Atom definition by Andre Broido and kc claffy • a group of prefixes sharing the same BGP AS path attributes globally • For single router – groups of prefixes with same AS path in the BGP table

  8. View of a single router in AS 9 – two atoms

  9. View of a single router in AS 8 – two atoms

  10. Atom definition - global • An Atom is defined globally if ANY backbone router agrees all ‘global’ atom member prefixes belong in it’s same ‘local’ atom • An Atom is likely the result of policy, fault should not make a distinction.

  11. Joint view of AS 8 + 9Three atoms

  12. Scale comparison Atoms are much closer to AS in scope !!!

  13. AS, Atom and Prefix size

  14. Practical Atom definition • Defined in theory by all BGP tables • Can be calculated well by sample (8) of BGP views taken in a ‘snapshot’ • Analog to viewing a very complex ‘3D’ graph from 8 spatial locations • Beware of ‘same angle’

  15. Practical Atom calculation • Get ‘snapshot’ of many BGP tables • Create an ‘AS PATH’ set for each prefix • Each distinct set defines an atom

  16. Alternate Calculation • Is the snapshot method valid ? • Uses distributed snapshot • No guarantee of synchronization • Filter out prefixes not assured converged • Search for stable prefix cliques during 4 hours -> Atoms • Results close to ‘snapshot’ method (2-3%)

  17. Atom Stability • Atoms calculated stable to 3% of prefixes in 8 hour period • Much more stable then the prefix AS path attribute. • Still Less stable then expected • Policy set Manually or by script but by design

  18. BGP updates • BGP groups prefixes in same update if they share same attributes TIME: 09/01/01 12:23:27 TYPE: BGP4MP/MESSAGE/Update FROM: 64.211.147.146 AS3549 TO: 193.0.0.1 AS12654 ORIGIN: IGP ASPATH: 3549 6453 12956 4926 NEXT HOP: 64.211.147.146 COMMUNITY : 3549:2246 3549:9840 ANNOUNCE 200.16.216.0=24 192.67.345.0=24

  19. Correlating Atoms to updates • Fault should affect full atoms and be in one update • All attributes are the same • 75% of updates include single, full atom • 86% contain prefixes from one atom only • Full AS prefix set appears in just 20% of updates

  20. Atom split locations • Where do atoms get created ? • Policy normally enforced in source AS or neighbor • How can we calculate the ‘split’ location ?

  21. Atom split example All prefixes belong to AS 12 (len 1)

  22. Atom split example New atom due to different path at R3 (len 2)

  23. Atom split example New atom by different path at R1 (len 3)

  24. Atom split example Longer paths will not provide extra resolution

  25. Atom Split location • 85% of atoms are created between origin AS and neighbor AS • Consistent with Atoms resulting from policy.

  26. Application of Atoms • Differentiate Fault from Policy • Tweak update hold timers: • Panelize partial Atom updates • Reward full updates • Reduce scope of tags used in MPLS • Set on a per prefix basis • Could be reduced by as much as 1:5

  27. Application of Atoms • Reduce load of active measurements • Use Atoms sampling and not prefix sampling • Results are not very favorable • Compress BGP updates • Gain limited to 66% of prefix section • Shows limit on route table reduction while keeping information • Renumbering to CIDR by atoms gain 50% only

  28. Administration and distribution of Atom structure • Central body (CAIDA ?) • ‘Perfect’ results • How to distribute ? • Origin AS tag by extended community • Knowledge propagation within BGP • How to automate and not introduce more administration overhead • Use ‘local’ versions of Atoms • No distribution • Reduces potential benefits

More Related