North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: BGP Filtering

  • From: Dave Israel
  • Date: Tue Jan 15 15:42:45 2008



William Herrin wrote:
On Jan 15, 2008 12:51 PM, Dave Israel <[email protected]> wrote:
  
   I think I understand what you want, and you don't want it.  If you
receive a route for, say, 204.91.0.0/16,  204.91.0.0/17, and
204.91.128.0/17, you want to drop the /17s and just care about the /16.  But
a change in topology does not generally result in a complete update of the
BGP table.  Route changes result in route adds and draws, not a flood event.
So if you forgot about the /17s and just kept the /16, and the /16 was
subsequently withdrawn, your router would not magically remember that it had
/17s to route to as well.
    
Dave,

That's half-true.
  
[discussion of FIB vs RIB deleted]

But, as you said yourself:
Ben, coming back to your question: I don't think there is a way to
make the software filter the routes inserted into the FIB. I don't see
a reason why it couldn't be programmed to do that. But the fine folks
at Cisco didn't see fit to write that software. Its a pity 'cause it
would be very useful.
  
Ergo, why I didn't discuss the FIB in my email.  If you want to filter routes, you generally have to filter them at the RIB.

How you move data from the RIB to the FIB is one of those questions that keep router engineers up all night.  The transfer must be fast, reliable, and cheap on the CPU.  Often, this means keeping logic out of it.  A paradigm is decided upon early, and if it takes ten years to actually come back to haunt them, they haven't done too badly.  Fixing something that far down in the nuts and bolts isn't easy.  (I am not saying the presence of a revenue-generating hardware fix doesn't influence the decision not to make a risky change to the software; I'm just saying there's a lot of grey area to play in.)

-Dave