bgp evpn

table. However, prefix filters cannot be well upgraded in terms of operations, especially when there are hundreds or thousands of users. Filter VPN-IPv4 addresses are not as flexible as we like. For example, user A and user B may need to establish A VPN-based intranet between them to transmit A subset of A limited public address space to each other. Fortunately, BGP already has a policy tool dedicated to using flexible policies for a large number of

can also be used to control the source address of a message. If the ACL works on the second layer, the ACL-controlled object changes from the IP address of the third layer to the MAC address of the second layer. According to the working principle of ACL, the ACL inserts an ACL-matching operation in the normal packet forwarding process, which will definitely affect the packet forwarding efficiency, if you need to control a large number of IP addresses, the ACL list will be longer, and the time r

version 2nd (OSPFv2)-it is the second version of OSPF. OSPF is a connection status routing protocol, which is an IETF of an interconnected network engineering task group. The internal gateway protocol workgroup is designed for IP addresses, it is the next link State hierarchical routing algorithm of RIP in the Internet communication body. OSPF features include least-cost routing, multi-path, and load balancing. OSPF was developed from an earlier version of the IS-IS protocol and has two main fe

networks. It is an internal gateway protocol provided by the UNIX Berkeley standard distribution system. Ip rip is defined in RFC 1058 and RFC 1723. RIP2-is the latest enhanced version of RIP. It allows RIP packets to contain more information and provides a simple authentication mechanism. It is described in RFC 1723. Open Shortest Path First version 2nd (OSPFv2)-it is the second version of OSPF. OSPF is a connection status routing protocol, which is an IETF of an interconnected network enginee

and RFC1723. RIP2 Is the latest enhanced version specification of RIP. It allows RIP packets to contain more information and provides a simple authentication mechanism. This is described in RFC1723. Open Shortest Path First version 2nd (OSPFv2) It is the second version of OSPF. OSPF is a connection status routing protocol. It is designed for IP addresses by the Internal Gateway Protocol workgroup of the interconnected network engineering task group (IETF, it is the next link State hierarchical

and calculate the shortest path to each node based on certain algorithms. The Distance Vector-based routing protocol only sends route update information to its neighboring routers. Different from RIP, OSPF divides an autonomous domain into zones. There are two types of routes to be selected: when the source and destination are in the same zone, the intra-zone routes are used; when the source and destination are in different regions, the interval routing is used. This greatly reduces network ove

generating IP packets, such as sendip, Nessus, ipsend, ippacket, And sniffer, The following describes three commonly used tools: sendip, Nessus, And sniffer. 2.1. sendip Tool Sendip is a command line tool in Linux. IP packet, which has a large number of command line parameters to specify the header formats of various protocols. Currently, NTP, BGP, Rip, ripng, TCP, UDP, ICMP or raw IPv4 and IPv6 packet formats, and you can add data to the package at

addition, the flannel CIDR-based design is stupid and can cause a lot of wasted IP addresses.CalicoNext look at Calico, it is a relatively young project, but ambitious, can be used in virtual machines, physical machines and container environment. The protocol used by Calico is a BGP protocol that most people have never heard of, and it's completely based on three-tier routing, and it doesn't have a two-tier concept. So you can see a lot of routing ta

-21 below.　　routing protocols (RIP, OSPF, EIGRP, and BGP)For routers, to find the optimal data transmission path is a more meaningful but very complex work. The optimal path may depend on the number of forwarding times between nodes, the current network operating state, the unavailable connection, the data transfer rate, and the topology structure. To find the optimal path, each router communicates with each other through a routing protocol. The diffe

In the ospf protocol, each interface has a cost value calculated by default formula based on its rate. The ospf protocol uses the cost value to determine the optimal path to the destination, if multiple paths reach the destination, the path with the lowest cost value is preferred. The Cost value is the sum of the cost values of all the interfaces that forward data along the destination. The following is an experiment to verify it. The topology is as follows: The route table on RT11 is as follo

to the out-of-office interface for transmission on the physical media. When a data frame is placed on the media, the out-of-office interface adds a cyclic redundancy check character and a frame ending delimiter on the frame. These characters are verified on the receiving interface of the next hop routing device. Figure 8 The router performs basic switching functionssecond, the route selection process How does a router choose the best route under many routing protocols, manual configuration, and

problems, even in the face of international network interoperability problem we have to rely on third-party services-good IDC and hosting services. In the experience of traditional solutions in the multi-line room. The test certificate of the BGP room (which has been suspected not to be a true BGP room). Also experienced a domestic well-known manufacturers of CDN Acceleration Technology test Certificate, f

# The following is just a summary of their own, deepen memoryBackground Prerequisites Introduction:Work needs, to achieve the two-level Nginx reverse proxy backup request, due to domestic and foreign network instability reasons.Topology: Main Station (Beijing BGP) front-end nginx, back-end TomcatHomemade CDN (nginx reverse proxy)Node 1:HK Hong KongNode 2:BM North AmericaProblem: BM nginx reverse proxy to Beijing B