Route Reflector#
Virtual Networks → RRRoute Reflectors
BGP route reflectors are used to eliminate the need for a full-mesh iBGP peering network, where every router needs to establish an iBGP session with every other router in the network. Route reflectors re-advertise the routes they receive from the route reflector clients, removing the need for iBGP sessions between the clients.
EDA creates a derived BGPPeer for every RouteReflectorClient that the RouteReflector targets. This targeting is done by assigning labels to the RouteReflectorClient, and referencing this label in the RouteReflector.
Don't forget to use labels!
If no target label is specified in the ClientSelector property of the RouteReflector resource, the RouteReflector will create BGPPeer resources for every DefaultRouteReflectorClient and RouteReflectorClient.
Example:
RouteReflectorRR1 has noClientSelectorlabelsRouteReflectorRR2 has oneClientSelectorlabel:my-rrc-label=ARouteReflectorClientClient1 has one label:my-rrc-label=ARouteReflectorClientClient2 has one label:my-rrc-label=ARouteReflectorClientClient3 has one label:my-rrc-label=B
In this example, RR1 will create 3 derived BGPPeer resources: one for each client. RR2 will create only 2 derived BGPPeer resources: one towards client1, and one towards client2. Client3 does not have label my-rrc-label=A, and therefore is not selected as client for RR2.
To set up BGP route reflectors in the default VRF, use DefaultRouteReflector instead.
Dependencies#
To configure this resource, the following resources must exist or be created alongside the RouteReflector
- A
BGPGroupthat theRouteReflectorwill inherit settings from, such as local and remote AS numbers - An interface that the
RouteReflectorwill use to establish the client sessions. This can either be aRoutedInterfaceor anIRBInterface
Referenced resources#
BGPGroup#
The BGPPeer resource that the RouteReflector creates towards each selected RouteReflectorClient is always linked to a single BGPGroup. These BGP peers share common parameters, such as BGP import and export policies, local and peer autonomous system numbers, and BGP timers. By specifying these parameters in a BGPGroup, the operator can change these settings in a single location for all client BGP peers.
RoutedInterface#
To know which IP address the router uses to send BGP traffic, EDA must have a reference to a virtual interface. If this interface is a RoutedInterface attached directly to an Interface, a reference to this resource needs to be provided when creating the RouteReflector.
IRBInterface#
To know which IP address the router uses to send BGP traffic, EDA must have a reference to a virtual interface. If this interface is an IRBInterface attached to a BridgeDomain, a reference to this resource needs to be provided when creating the RouteReflector.
Policy#
The BGPPeer resources that the RouteReflector creates towards each selected RouteReflectorClient inherit import/export policies from the assigned BGPGroup. This behavior can be overridden by specifying policies in the RouteReflector. Click here for more information on BGP import/export policies.
Examples#
apiVersion: protocols.eda.nokia.com/v2
kind: RouteReflector
metadata:
labels:
my-rr-label: vnet-bgp
name: my-rr
namespace: eda
spec:
bgpGroup: bgp-ipv4-only
clusterID: 10.0.0.1
interface: spine-1-interface-rr
interfaceKind: RoutedInterface
ipv4ClientSelectors:
- my-rrc-label=vnet-bgp
ipv4Unicast:
enabled: true
ipv6ClientSelectors:
- my-rrc-label=vnet-bgp
ipv6Unicast:
enabled: false
cat << 'EOF' | kubectl apply -f -
apiVersion: protocols.eda.nokia.com/v2
kind: RouteReflector
metadata:
labels:
my-rr-label: vnet-bgp
name: my-rr
namespace: eda
spec:
bgpGroup: bgp-ipv4-only
clusterID: 10.0.0.1
interface: spine-1-interface-rr
interfaceKind: RoutedInterface
ipv4ClientSelectors:
- my-rrc-label=vnet-bgp
ipv4Unicast:
enabled: true
ipv6ClientSelectors:
- my-rrc-label=vnet-bgp
ipv6Unicast:
enabled: false
EOF
Custom Resource Definition#
To browse the Custom Resource Definition go to crd.eda.dev.
RouteReflector
SPEC
RouteReflector enables the configuration of iBGP sessions with RouteReflectorClients. It includes settings for selecting Interfaces, client selectors for IPv4 and IPv6, and the option to specify a BGP group and cluster ID.
-
AS Path Options
-
The maximum number of times the global AS number or a local AS number of the BGP instance can appear in any received AS_PATH before it is considered a loop and considered invalid.
default: 0range: 0 to 255 -
Options for removing private AS numbers (2-byte and 4-byte) from the advertised AS path towards all peers.
-
If set to true then do not delete or replace a private AS number that is the same as the peer AS number.
default: false -
If set to true then only delete or replace private AS numbers that appear before the first occurrence of a non-private ASN in the sequence of most recent ASNs in the AS path.
default: false -
The method by which private AS numbers are removed from the advertised AS_PATH attribute.
default: "Disabled"enum: "Disabled", "Replace", "Delete"
-
-
-
Enable or disable Bi-forward Forwarding Detection (BFD) with fast failover.
-
Reference to BgpGroup
-
List of RR client IPs to which the iBGP sessions are established.
-
Sets the cluster ID for route reflectors.
-
Reference to a Policy CR that will be used to filter routes advertised to peers.
-
Enables Graceful Restart on the peer and sets the stale route time in seconds.
range: 1 to 3600 -
Reference to a Policy CR that will be used to filter routes received from peers.
-
Reference to a RoutedInterface or IRBInterface resource whose IP will be used as a source IP for the BGP session.
-
InterfaceReference type defines whether the provided Reference is a RoutedInterface or IRBInterface.
enum: "RoutedInterface", "IRBInterface" -
Label selector used to select the RouteReflectorClients to which the iBGP sessions are established for IPv4.
-
Parameters relating to the IPv4 unicast AFI/SAFI.
-
Enables advertisement of IPv4 Unicast routes with IPv6 next-hops to peers.
-
Enables the IPv4 unicast AFISAFI.
-
Configures the maximum number of IPv4 unicast prefixes that can be received from a BGP peer.
-
Configuration of the maximum number of prefixes that can be accepted from a BGP peer.
-
Defines the action to take when the maximum number of prefixes is exceeded. Session is reset if set to false, otherwise only a warning is logged.
-
Maximum number of prefixes allowed to be received from the neighbor, counting only accepted routes.
format: int32range: 1 to 4294967295 -
A percentage of the maximum number of prefixes that can be accepted before a warning is logged.
range: 1 to 100
-
-
Configuration of the maximum number of prefixes that can be received from a BGP peer.
-
Defines the action to take when the maximum number of prefixes is exceeded. Session is reset if set to false, otherwise only a warning is logged.
-
Maximum number of prefixes allowed to be received from the neighbor, counting all routes (accepted and rejected by import policies).
format: int32range: 1 to 4294967295 -
A percentage of the maximum number of prefixes that can be received before a warning is logged.
range: 1 to 100
-
-
-
Enables the advertisement of the RFC 5549 capability to receive IPv4 routes with IPv6 next-hops.
-
-
Label selector used to select the RouteReflectorClients to which the iBGP sessions are established for IPv6.
-
Parameters relating to the IPv6 unicast AFI/SAFI.
-
Enables the IPv6 unicast AFISAFI
-
Enables advertisement of IPv6 Unicast routes with IPv4 next-hops to peers.
-
Configuration of the maximum number of prefixes that can be accepted from a BGP peer.
-
Defines the action to take when the maximum number of prefixes is exceeded. Session is reset if set to false, otherwise only a warning is logged.
-
Maximum number of prefixes allowed to be received from the neighbor, counting only accepted routes.
format: int32range: 1 to 4294967295 -
A percentage of the maximum number of prefixes that can be accepted before a warning is logged.
range: 1 to 100
-
-
Configuration of the maximum number of prefixes that can be received from a BGP peer.
-
Defines the action to take when the maximum number of prefixes is exceeded. Session is reset if set to false, otherwise only a warning is logged.
-
Maximum number of prefixes allowed to be received from the neighbor, counting all routes (accepted and rejected by import policies).
format: int32range: 1 to 4294967295 -
A percentage of the maximum number of prefixes that can be received before a warning is logged.
range: 1 to 100
-
-
-
-
Reference to a Keychain resource that will be used for authentication with the BGP peer.
-
The local autonomous system number advertised to peers.
-
Local Autonomous System number.
range: 1 to 4294967295 -
When set to true, the global ASN value is prepended to the AS path in outbound routes towards each BGP peer.
-
When set to true, the local AS value is prepended to the AS path of inbound routes from each EBGP peer.
-
-
When false, all large (12 byte) BGP communities from all outbound routes advertised to the peer are stripped.
-
When false, all standard (4 byte) communities from all outbound routes advertised to the peer are stripped.
-
Options for controlling the generation of default routes towards BGP peers.
-
Enables the sending of a synthetically generated default IPv4 or IPV6 route to each peer.
-
Reference to a Policy that should be applied to the advertised default routes, in order to set their attributes to non-default values.
-
-
Timer configurations
-
The time interval in seconds between successive attempts to establish a session with a peer.
range: 1 to 65535 -
The hold-time interval in seconds that the router proposes to the peer in its OPEN message.
range: 0 to 65535 -
The interval in seconds between successive keepalive messages sent to the peer.
range: 0 to 21845 -
The value assigned to the MinRouteAdvertisementIntervalTimer of RFC 4271, for both EBGP and IBGP sessions, in seconds.
range: 1 to 255
-
STATUS
RouteReflectorStatus defines the observed state of RouteReflector
-
Indicates the health score of the RouteReflector.
-
Indicates the reason for the health score.
-
The time when the state of the resource last changed.
-
Total number of configured route reflector client peers on the route reflector.
-
Total number of configured route reflector client peers on the route reflector that are operationally down.
-
List of route reflector BGPPeers which are operationally down.
-
Operational state of the RouteReflector.
enum: "Up", "Down", "Degraded", "Unknown"