Re: BGP dampening [7:65086]

2003-03-13 Thread Peter van Oene
At 07:39 PM 3/11/2003 +, Oliver Hensel wrote:
>Hi!
>
>Can someone point me to a document which explains
>what happens with a prefix that is dampened if
>it's distributed via two providers.

Hi Oliver,

Here is a link to a doc from Randy Bush that covers damping in some detail.

http://psg.com/~randy/021028.zmao-nanog.pdf
 (handily posted to NANOG today :)

For technical info on damping in general, check rfc 2439, and RIPE 229 for 
recent best practise config settings (which are put into serious question 
by the above PDF)

Damping was brought into existence as a means to protect routers which 
could be overwhelmed by a large amount of BGP updates to the extent where 
they would would either crash, or drop BGP sessions themselves thereby 
exacerbating the route churn issue.

At present, newer routers and better BGP implementations are able to deal 
with large amounts of BGP updates without any impact to other processes in 
the router and thus the need to protect them via damping isn't a huge 
priority.  Further, as Randy points out, damping may do more harm than good 
to route convergence in the global Internet.  As a result, I think it is 
safe to say that the need for damping in general is in serious question.

>Will only the penalized route dampened, that is
>will we still have connectivity if one link is
>flapping. I think so, but I'd like to have some
>confirmation for that.

BGP prefixes (NLRI) are damped individually, however damping really only 
impacts you on more remote AS's.   In your case, you have a situation like 
the below:


 you
 /  \
transit1transit2
  | \ /  |
remote1   - -   remote2
  |  \  /  |
remote3  --- remote4

When you advertise 10/8 to transit1 and transit2, assuming these folks are 
clueful and automatically pref customer routes above peer/transit, both of 
them will always prefer the direct route to you.  This is important as 
implicit withdrawals are penalized in the same way as direct 
withdrawals.  This fact, coupled with the fact that damping stats are 
cleared on EBGP sessions when the peer resets will tend to make damping 
irrelevant between neighboring AS's.  However, as you get more and more 
remote, things get worse.

To expand on this, consider remote3.   Assuming you advertise 10/8 to both 
transits, imagine that the update from transit2 gets to remote1  first and 
on to remote3.  In this case, remote3 hits you with an advert penalty and 
posts the route 10/8 via as-path "r1,t2, you"  Shortly thereafter, the 
update from transit1 shows up in remote1 and by virtue of a better AS-PATH 
becomes the best path in remote1.  Remote1 therefore sends an update with 
the new path info to remote3.  This update includes an implicit withdrawal 
of the old path and a subsequent damping penalty applied to 10/8 in 
remote3.Likely these two updates appeared in remote 3 in a pretty 
narrow time window and thus you have a 10/8 prefix that has suffered a nice 
penalty without ever really flapping.  Consider also that depending on AS 
size, router types, BGP advertisement intervals and such, remote 3 may have 
seen an r1,r4,r2,t2 path first, then an r1.r2,t2, then an r1,t1 path and 
may have penalized you once for the initial advert and two more times for 
the implicit withdrawals which might get you damped in remote3 right off 
the bat.

This issue gets worse as you consider ASes more and more remote from you.

For what it's worth, I may have this entirely wrong :-)  But this is my 
understanding of the behavior.  The networks I have designed used graded 
damping and are not tremendously aggressive.  I am however considering 
removing damping from the configs for the few networks I have some impact 
in as I really don't see it serving much of a role.

Pete

>Thanks and best regards,
>
>Oliver
>
>
>--
>Oliver Hensel
>telematis Netzwerke GmbH
>mailto:   [EMAIL PROTECTED]
>Siemensstrasse 23, D-76275 Ettlingen
>Tel: +49 (0) 7243-3448-0, Fax: -498
>visit us:  http://telematis.com
>3




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=65302&t=65086
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: BGP dampening [7:65086]

2003-03-11 Thread Howard C. Berkowitz
At 3:19 AM + 3/12/03, Priscilla Oppenheimer wrote:
>I'll take a stab at it since nobody else did.
>
>Oliver Hensel wrote:
>>
>>  Hi!
>>
>>  Can someone point me to a document which explains
>>  what happens with a prefix that is dampened if
>>  it's distributed via two providers.
>
>I don't think you'll find a document that answers the question explicitly
>because the implicit answer is sort of obvious, as I think you realize.
>
>It's a route that's dampened, not a prefix. With two providers, in most
>cases, there would be two distinct routes to your prefix. A BGP route has
>path attributes including an AS_Path, which is a list of Autonomous System
>numbers. With two providers, the two routes will be distinct and have a
>different set of AS numbers in most situations. Otherwise what would be the
>point?

Depending on how deeply you want to go, there is a very nuanced range 
of ideas in BGP information and how it is propagated.  In our 
http://www.ietf.org/internet-drafts/draft-ietf-bmwg-conterm-04.txt , 
there was tremendous effort to clarify, and part of this 
clarification means that you probably have to understand the 
differences among a dozen or so seemingly alike concepts.  These are 
also being refined in  the new BGP standard, which is at draft 19 
when last I looked -- and probably still has a round or two to go.

Let's put it this way...we ducked going deeply into route flaps, much 
less dampening (an important difference -- they are NOT equivalent) 
in this version of the document. There are concepts that need to be 
most thoroughly internalized -- grokked if you will -- before dealing 
with flap control and propagation.  Quite a bit of theoretical 
analysis is available, but the associated global scalability issues 
are by no means solved.

>
>>
>>  Will only the penalized route dampened, that is
>>  will we still have connectivity if one link is
>>  flapping. I think so, but I'd like to have some
>>  confirmation for that.
>
>If just one of your links is flapping, then just one of your routes will get
>dampened. The other one will still be usable.
>
>If your two links share a circuit to the telco or physically share a path
>that has been dug up by the proverbial back-hoe operator, it's possible both
>links could be flapping, and then they will both get dampened, but hopefully
>you have a network design that avoids that problem. Don't let BGP rain on
>your parade and dampen too much at once! Have good physical diversity. ;-)
>
>Priscilla
>
>>
>>  Thanks and best regards,
>>
>>  Oliver
>>
>>
>>  --
>>  Oliver Hensel
>>  telematis Netzwerke GmbH
>>  mailto:[EMAIL PROTECTED]
>> Siemensstrasse 23, D-76275 Ettlingen
>> Tel: +49 (0) 7243-3448-0, Fax: -498
>>  visit us:  http://telematis.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=65126&t=65086
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


RE: BGP dampening [7:65086]

2003-03-11 Thread Priscilla Oppenheimer
I'll take a stab at it since nobody else did.

Oliver Hensel wrote:
> 
> Hi!
> 
> Can someone point me to a document which explains
> what happens with a prefix that is dampened if
> it's distributed via two providers.

I don't think you'll find a document that answers the question explicitly
because the implicit answer is sort of obvious, as I think you realize.

It's a route that's dampened, not a prefix. With two providers, in most
cases, there would be two distinct routes to your prefix. A BGP route has
path attributes including an AS_Path, which is a list of Autonomous System
numbers. With two providers, the two routes will be distinct and have a
different set of AS numbers in most situations. Otherwise what would be the
point?

> 
> Will only the penalized route dampened, that is
> will we still have connectivity if one link is
> flapping. I think so, but I'd like to have some
> confirmation for that.

If just one of your links is flapping, then just one of your routes will get
dampened. The other one will still be usable.

If your two links share a circuit to the telco or physically share a path
that has been dug up by the proverbial back-hoe operator, it's possible both
links could be flapping, and then they will both get dampened, but hopefully
you have a network design that avoids that problem. Don't let BGP rain on
your parade and dampen too much at once! Have good physical diversity. ;-)

Priscilla

> 
> Thanks and best regards,
> 
> Oliver
> 
> 
> -- 
> Oliver Hensel
> telematis Netzwerke GmbH
> mailto:[EMAIL PROTECTED]
>Siemensstrasse 23, D-76275 Ettlingen
>Tel: +49 (0) 7243-3448-0, Fax: -498
> visit us:  http://telematis.com
> 
> 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=65120&t=65086
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


BGP dampening [7:65086]

2003-03-11 Thread Oliver Hensel
Hi!

Can someone point me to a document which explains
what happens with a prefix that is dampened if
it's distributed via two providers.

Will only the penalized route dampened, that is
will we still have connectivity if one link is
flapping. I think so, but I'd like to have some
confirmation for that.

Thanks and best regards,

Oliver


-- 
Oliver Hensel
telematis Netzwerke GmbH
mailto:[EMAIL PROTECTED]
   Siemensstrasse 23, D-76275 Ettlingen
   Tel: +49 (0) 7243-3448-0, Fax: -498
visit us:  http://telematis.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=65086&t=65086
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]