Friday, August 30, 2019

AS Prepend based on ip address match?

Working at a large community college ... We currently use a single router with two 1GB ISPs. We're using BGP to balance traffic, in an active-active ISP setup.

For a while, we were HEAVILY weighted to where most INCOMING traffic was coming in ISP1 and barely a hint of traffic was incoming via ISP2. After doing some looking glass lookups, noticed most AS Paths were favoring ISP1. So, in an attempt to balance the traffic a bit more, we did an AS Prepend on ISP1.

However, this has shifted much inbound traffic to ISP 2 now. Around lunch time, ISP 2 caps at the 1GB limit, while ISP 1 sits around 200-300 meg in. Many students on netflix , youtube, etc.

So the question is ... can I do an AS Prepend using a route policy where I match for certain IP blocks? (Maybe some of the big data hogs, like Netflix and Akamai servers). I don't want to split the traffic to where i deny certain IP's from coming in one ISP, because we have to maintain a failover environment

maybe something like this, to where I prepend the AS # ONCE to ISP 2 if the IP matches a prefix list where i enter a various range of IP's, to attempt to influence their INBOUND route to come in ISP 1

! -- Preflix List (Match Netflix IP block)-- ip prefix-list Netflix index 5 permit 108.175.32.0 20 less-equal 32 ! -- Route Policy -- route-policy Netflix_Pref permit node 10 if-match ip address prefix-list Netflix apply as-path <AS # here> !--BGP Setup -- address-family ipv4 unicast import-route static route-policy LOCAL-IMPORT network <our network> peer <ISP2 peer here> route-policy Netflix_Pref export 

Thanks!



No comments:

Post a Comment