Xerrada a càrrec de Paolo Lucente, de NTT Communications, sobre el BGP Monitoring Protocol (BMP), prèvia a la reunió número 44 de la Comissió Tècnica del CATNIX del 2 de juliol de 2021.
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
BMP: the pa amb tomàquet your BGP monitoring was missing
1. BMP: the pa amb tomàquet that
your BGP monitoring was missing
Paolo Lucente
Principal Network Tools Engineer
Global IP Network Division at NTT Ltd
02 July 2021 - CATNIX Technical Commission Meeting
2. Global IP Network | AS2914
whoami
Paolo Lucente
paololucente
plucente
@Paolo_Lucente
3. Global IP Network | AS2914
BGP
(The) control-plane protocol to advertise
Reachability Information
4. Global IP Network | AS2914
Why monitoring BGP?
• To verify correct functioning of control-plane
• To correlate control-plane data to:
o Material aspects, ie. reliability of pipes or volumes of traffic
o Business aspects, ie. cost of traffic trajectories, adherence to SLAs
• To contribute enablement of closed-loop operations
5. Global IP Network | AS2914
What is the main feature of BGP?
Massive scale.
So massive that BGP is the control-plane protocol that governs exchange of
Reachability Information on the global Internet.
7. Global IP Network | AS2914
Credits to: Gary Bernhardt @ CodeMash 2012
8. Global IP Network | AS2914
Wow!
How does BGP achieve massive scale?
By applying information hiding
9. Global IP Network | AS2914
BGP Add-path
trying to untangle information hiding
Credits to: E. Jasinska (Netflix), P. Lucente (pmacct) @ NANOG61
10. Global IP Network | AS2914
BMP: untangling information hiding!
• BGP Monitoring Protocol (BMP)
• Seminal work became IETF RFC 7854 in 2016
• Uncomplicated protocol design
• Get visibility, in a standardized fashion, of all reachability information in
every processing stage
11. Global IP Network | AS2914
Example: traditional BGP monitoring
Peers Vantage
Point
Best
Path
Peering
Router
P0
P1
P2
P3
P4
P3
And VP does not even
know why P3 was chosen
Credits to: R. Bush (IIJ) @ BMP BoF, RIPE74
12. Global IP Network | AS2914
Example: monitoring with BMP
Peers Vantage
Point
Peering
Router
P0
P1
P2
P3
P4
Credits to: R. Bush (IIJ) @ BMP BoF, RIPE74
All
Paths
P0-4
With BMP, I learn all the paths the peering
router heard
13. Global IP Network | AS2914
Static
BGP Peer-B
Adj-Rib-In (Pre)
Adj-Rib-In (Post)
Filters/Policy Filters/Policy
Accepted Accepted
Adj-Rib-In (Post)
Adj-Rib-Out (Pre)
Adj-Rib-Out (Post)
Filters/Policy
BGP Peer-A
Adj-Rib-In (Pre)
ISIS
BMP visibility
Loc-Rib
Credits to: T. Evens (Cisco), S. Bayraktar (Cisco), P. Lucente (NTT) @ GROW WG, IETF 98
BMP visibility
BMP
visibility
BMP visibility
15. Global IP Network | AS2914
Loc-RIB use-cases
• Monitor routes selected and used by the router:
o ECMP
o Correlation with NetFlow/IPFIX
o Next-hop preservation
• Monitor locally originated and BGP routes without requiring peering
• Policy verification
Credits to: T. Evens (Cisco), S. Bayraktar (Cisco), P. Lucente (NTT) @ GROW WG, IETF 98
17. Global IP Network | AS2914
Adj-Rib-Out use-cases
• Policy verification
• Monitor routes advertised to peers
o Routing hygiene
o Closed-loop operations
Credits to: T. Evens (Cisco), S. Bayraktar (Cisco), P. Lucente (NTT) @ GROW WG, IETF 98
19. Global IP Network | AS2914
Use-cases for TLVs
• Which paths are active, which backup, etc.?
o draft-cppy-grow-bmp-path-marking-tlv
• Which policy on which node did filter out a route?
o draft-xu-grow-bmp-route-policy-attr-trace
• Countless others
20. Global IP Network | AS2914
Recap: current works on BMP
• Make the protocol extensible
• Polish registries
• Get extra visibility in certain Routing Information Base (RIB) characteristics
• Get visibility in BGP policies
• Quick restore of BMP sessions
21. Global IP Network | AS2914
Recap: where does BMP fit?
Forwarding
Plane
Control
Plane
Topology
Data Collection
Network
Big Data & Analytics
BMP IPFIX
In Situ OAM
sFlow
Netstream
Netflow
gRPC
gNMI
OpenConfig
YANG
Credits to: T. Graf (Swisscom) @ UBBF 2018
23. Thank you.
Paolo Lucente
Principal Network Tools Engineer
Global IP Network
paolo.lucente@global.ntt
www.gin.ntt.net
@GinNTTnet #globalipnetwork #AS2914