Re: Policy-based routing is evil? Discuss.

2013-11-25 Thread Eugeniu Patrascu
On Mon, Nov 25, 2013 at 9:43 AM, Michael Smith mksm...@mac.com wrote: On Nov 24, 2013, at 10:36 PM, Eugeniu Patrascu eu...@imacandi.net wrote: On Fri, Oct 11, 2013 at 8:27 PM, William Waites wwai...@tardis.ed.ac.uk wrote: I'm having a discussion with a small network in a part of the world

Re: Policy-based routing is evil? Discuss.

2013-11-24 Thread Eugeniu Patrascu
On Fri, Oct 11, 2013 at 8:27 PM, William Waites wwai...@tardis.ed.ac.ukwrote: I'm having a discussion with a small network in a part of the world where bandwidth is scarce and multiple DSL lines are often used for upstream links. The topic is policy-based routing, which is being described as

Re: Policy-based routing is evil? Discuss.

2013-11-24 Thread Michael Smith
On Nov 24, 2013, at 10:36 PM, Eugeniu Patrascu eu...@imacandi.net wrote: On Fri, Oct 11, 2013 at 8:27 PM, William Waites wwai...@tardis.ed.ac.ukwrote: I'm having a discussion with a small network in a part of the world where bandwidth is scarce and multiple DSL lines are often used for

Re: Policy-based routing is evil? Discuss.

2013-10-13 Thread John Osmon
On Sat, Oct 12, 2013 at 10:48:03AM -0700, Octavio Alvarez wrote: On 10/11/2013 10:27 AM, William Waites wrote: I'm having a discussion with a small network in a part of the world where bandwidth is scarce and multiple DSL lines are often used for upstream links. The topic is policy-based

Re: Policy-based routing is evil? Discuss.

2013-10-12 Thread Octavio Alvarez
On 10/11/2013 10:27 AM, William Waites wrote: I'm having a discussion with a small network in a part of the world where bandwidth is scarce and multiple DSL lines are often used for upstream links. The topic is policy-based routing, which is being described as load balancing where end-user

Re: Policy-based routing is evil? Discuss.

2013-10-12 Thread Jimmy Hess
On Sat, Oct 12, 2013 at 12:48 PM, Octavio Alvarez alvar...@alvarezp.ods.org wrote: This depends on how flexible the PBR implementation on your router is. If your router can have conditionals like this: * match: source address A link P available -- send it to link P * match: source address

Policy-based routing is evil? Discuss.

2013-10-11 Thread William Waites
I'm having a discussion with a small network in a part of the world where bandwidth is scarce and multiple DSL lines are often used for upstream links. The topic is policy-based routing, which is being described as load balancing where end-user traffic is assigned to a line according to source

Re: Policy-based routing is evil? Discuss.

2013-10-11 Thread Jared Mauch
On Oct 11, 2013, at 1:27 PM, William Waites wwai...@tardis.ed.ac.uk wrote: I'm having a discussion with a small network in a part of the world where bandwidth is scarce and multiple DSL lines are often used for upstream links. The topic is policy-based routing, which is being described as

Re: Policy-based routing is evil? Discuss.

2013-10-11 Thread Dobbins, Roland
On Oct 12, 2013, at 12:27 AM, William Waites wwai...@tardis.ed.ac.uk wrote: But I'm having a distinct lack of success locating rants and diatribes or even well-reasoned articles supporting this opinion. Possibly because it's so commonly known that PBR is generally a Very Bad Idea for the

Re: Policy-based routing is evil? Discuss.

2013-10-11 Thread joel jaeggli
On Oct 11, 2013, at 10:27 AM, William Waites wwai...@tardis.ed.ac.uk wrote: I'm having a discussion with a small network in a part of the world where bandwidth is scarce and multiple DSL lines are often used for upstream links. The topic is policy-based routing, which is being described as

Re: Policy-based routing is evil? Discuss.

2013-10-11 Thread Michael Hallgren
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Le 11/10/2013 19:41, joel jaeggli a écrit : On Oct 11, 2013, at 10:27 AM, William Waites wwai...@tardis.ed.ac.uk wrote: I'm having a discussion with a small network in a part of the world where bandwidth is scarce and multiple DSL lines are

Re: Policy-based routing is evil? Discuss.

2013-10-11 Thread John Kristoff
On Fri, 11 Oct 2013 18:27:00 +0100 (BST) William Waites wwai...@tardis.ed.ac.uk wrote: I'm having a discussion with a small network in a part of the world where bandwidth is scarce and multiple DSL lines are often used for upstream links. The topic is policy-based routing, which is being

Re: Policy-based routing is evil? Discuss.

2013-10-11 Thread William Waites
On Fri, 11 Oct 2013 10:41:46 -0700, joel jaeggli joe...@bogus.com said: you take all the useful information that an IGP could be (or is) providing you, and then you ignore it and do something else. Yes, that's another part of the conversation, encouraging the use of an IGP, which has

Re: Policy-based routing is evil? Discuss.

2013-10-11 Thread Jon Lewis
On Fri, 11 Oct 2013, Jared Mauch wrote: I think this all depends on how it's configured, and if you can monitor/detect failures. I've seen folks do things like this with a Linux box with multiple routing tables. If you have something validate the link is working, you can easily have it

Re: Policy-based routing is evil? Discuss.

2013-10-11 Thread Fred Reimer
Most if not all IGPs can be configured to work without multicast. Now if you're talking IPv6 you may have some issuesŠ On 10/11/13 2:13 PM, William Waites wwai...@tardis.ed.ac.uk wrote: On Fri, 11 Oct 2013 10:41:46 -0700, joel jaeggli joe...@bogus.com said: you take all the useful

Re: Policy-based routing is evil? Discuss.

2013-10-11 Thread Jay Ashworth
- Original Message - From: joel jaeggli joe...@bogus.com you take all the useful information that an IGP could be (or is) providing you, and then you ignore it and do something else. Well, I tell you what. My perception of where this was a good idea is the use case a recent client

Re: Policy-based routing is evil? Discuss.

2013-10-11 Thread Christopher Morrow
On Fri, Oct 11, 2013 at 2:13 PM, William Waites wwai...@tardis.ed.ac.uk wrote: On Fri, 11 Oct 2013 10:41:46 -0700, joel jaeggli joe...@bogus.com said: evil is not a synonym for ugly patch placed over a problem that could be handled better. Ok, fair enough. My first experience with

Re: Policy-based routing is evil? Discuss.

2013-10-11 Thread Fred Reimer
I think they are referring to something like Cisco PBR, where you configure routing policy statically on each hop. Yes, it can be configured to fail over, etc, but inherently it is a management nightmare if you are configuring PBR on each device in your network. May as well move back to static

Re: Policy-based routing is evil? Discuss.

2013-10-11 Thread Leo Bicknell
On Oct 11, 2013, at 12:27 PM, William Waites wwai...@tardis.ed.ac.uk wrote: I'm having a discussion with a small network in a part of the world where bandwidth is scarce and multiple DSL lines are often used for upstream links. The topic is policy-based routing, which is being described as

Re: Policy-based routing is evil? Discuss.

2013-10-11 Thread Stuart Sheldon
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi all, We use Linux for our edge routers which have multiple interfaces to different BGP peers. Policy based routing allows us to insure that traffic originating from a particular external IP address on the router, goes out the matching network.

Re: Policy-based routing is evil? Discuss.

2013-10-11 Thread Jimmy Hess
On Fri, Oct 11, 2013 at 12:27 PM, William Waites wwai...@tardis.ed.ac.ukwrote: In my opinion the main problems with this are: - It's brittle, when a line fails, traffic doesn't re-route Yes, but this is no worse than if you just had one single DSL link. Manual failover is a perfectly valid

RE: Policy-based routing is evil? Discuss.

2013-10-11 Thread Phil Bedard
I'm having a discussion with a small network in a part of the world where bandwidth is scarce and multiple DSL lines are often used for upstream links. The topic is policy-based routing, which is being described as load balancing where end-user traffic is assigned to a line according to source

Re: Policy-based routing is evil? Discuss.

2013-10-11 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Phil Bedard wrote: I'm having a discussion with a small network in a part of the world where bandwidth is scarce and multiple DSL lines are often used for upstream links. The topic is policy-based routing, which is being described as load

Re: Policy-based routing is evil? Discuss.

2013-10-11 Thread Jeff Kell
As others have pointed out, PBR ... * Is a fragile configuration. You're typically forcing next-hop without a [direct] failover option, * Often incurs a penalty (hardware cycles, conflicting feature sets, or outright punting to software), * Doesn't naturally load-balance (you pick the source