28
[email protected] Internet Routing Registr ies 1 Internet Routing Registries Abha Ahuja [email protected]

[email protected] Routing Registries1 Abha Ahuja [email protected]

Embed Size (px)

Citation preview

Page 1: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 1

Internet Routing Registries

Abha [email protected]

Page 2: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 2

What is the Routing Registry?

Distributed database collectively known as Internet Routing Registry (IRR) RADB, RIPE, CW, ANS, Canet

Providers register routing policyUsed for planning, debugging and

generating backbone router configshttp://www.radb.net/

Page 3: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 3

What is the Routing Registry?

Can be used by anyone worldwide debugging configuring engineering routing addressing

Page 4: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 4

What is the Routing Registry?

contact names, email addresses and telephone numbers for an AS

routing policy for an AS (what other ASes does it connect to, which routes do they exchange)

information about routes (most important is which AS originates the route)

several other types of information

Page 5: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 5

What happens if I don’t use a database?

Routing Horror Stories AS7007

filtering would have prevented this

announcing bogus routes

Page 6: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 6

So, I need to use the database because…..

Filters generated off the IRR protect against inaccurate routing information

Makes troubleshooting and debugging easier

Keep track of policySecurityFilter! Filter! Filter!!

Page 7: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 7

Why Bother with all of this?

View of global routing policy in a single cooperatively maintained database

to improve integrity of Internet’s routing

generate router configs protect against inaccurate routing info

distribution verification of Internet routing

Page 8: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 8

Why Bother using the database (con)

Many providers require that you register your policy peering customer relationship

Route Servers

Page 9: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 9

What is Internet2 going to do?

Merit is setting up a database for I2 community source: I2 register Internet2 routing policy and

informationWill be RPSLUp by end of July

Page 10: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 10

Policy Languages

express policy with aut-num objects, route objects, AS-MACROS

currently RIPE-181moving to RPSL

more policy control

Page 11: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 11

What is RPSL?

Routing Policy Specification Language

Designed to replace current language (RIPE-181)

Enhanced and more generalized

Page 12: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 12

How does the language work?

Object-orientedExpress policy in objects

person mntner role aut-num route

Can make sets of objects

Page 13: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 13

Describing Policy

Use the language to describe your relationship with other Peers routes importing routes exporting specific policies

interfaces, MEDs, communities

Page 14: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 14

Querying the Database

whois -h whois.radb.net AS237whois -h whois.radb.net MAINT-

AS237whois -h whois.radb.net

198.108.60.0

Page 15: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 15

How to Register your IRR policy

Register one or more maintainersRegister AS and policy informationRegister RoutesDescribes your import and export

policy At the very least, provides contact

information

Page 16: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 16

Register your maintainer

mntner: MAINT-AS237descr: Maintainer for AS 237admin-c: Abha Ahujaupd-to: [email protected]: [email protected]: MAINT-AS237auth: MAIL-FROM [email protected]: [email protected] 941219source: RADB

Page 17: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 17

Register your Routes

route: 35.0.0.0/8descr: Merit Network, Inc.descr: University of Michigandescr: 4251 Plymouth Road, Suite Cdescr: Ann Arbordescr: MI 48105-2785, USAorigin: AS237mnt-by: MAINT-AS237changed: [email protected] 931113source: RADB

Page 18: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 18

Register your aut-num

Describe your policy!Peering relationshipsimport-fromexport-tocan use AS-sets

Page 19: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 19

Register your aut-num (con)aut-num: AS237as-name: MICHNET-ASNdescr: MichNet Primary ASdescr: Merit Network Inc.descr: Ann Arbor, MI USAas-in: AS3561 accept ANYas-out: AS3561 announce AS237admin-c: JMD24tech-c: JMD24notify: [email protected]: MERIT-MAINT-MCIchanged: [email protected] 980202source: CW

Page 20: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 20

Register your aut-num (con)as-set: AS237:AS-CUSTOMERSdescr: ASs for which MichNet provides descr: transit servicemembers: AS229,AS237,AS238,AS7016,AS10330tech-c: MichNet NOCadmin-c: MichNet NOCremark: transit ASs of MichNetnotify: [email protected]: MAINT-AS237changed: [email protected] 990222source: RADB

Page 21: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 21

Router Configuration

Currently configs by hand - slow and inaccurate

Configuring routers using the IRR lots of tools available!!! RtConfig by ISI

route and Aspath filters.Import and export

Filtering is a good thing...

Page 22: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 22

Router Configuration

Currently configs by hand - slow and inaccurate

Configuring routers using the IRR lots of tools available!!!

Filtering is a good thing... Plans for some routers to support

RPSL directly

Page 23: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 23

Router Configuration

SD

GRF 400

IR R

IRR Database Server

Configuration Machine

Page 24: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 24

How do I use the IRR to generate configs?

Tools available to generate config files gated rsd Cisco

RAToolSet http://www.isi.edu/ra/RAToolSet RtConfig Aoe, Roe

Page 25: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 25

RIPE181 whois queries, flags, objects RPSL whois queries, flags, objects Complete support for RAToolSet

queries (fast!) Cisco configuration and management

interface Complete automated mirroring support

What does the RADB support now?

Page 26: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 26

How do I participate?

Register your policyRun IRRd locally

local copy of db for configs http://www.irrd.net

Page 27: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 27

Resourceshttp://www.radb.nethttp://www.irrd.nethttp://www.isi.edu/ra/rpshttp://www.isi.edu/ra/RAToolSethttp://www.ietf.org/html.charters/rps-

charter.htmlhttp://www.rsng.nethttp://www.ripe.net

Page 28: Ahuja@merit.eduInternet Routing Registries1 Abha Ahuja ahuja@merit.edu

[email protected] Internet Routing Registries 28

Specifics

Register your policy in the RADB Merit can assist ([email protected])

Questions? Need help? [email protected] [email protected]