跳至内容

多边对等交换

多边对等交换 (MLPE) 通过路由服务器自动实现开放网络之间的对等连接,从而使新的对等网络和现有参与者受益。

MLPE包括:

  • 支持 IPv4 和 IPv6 单播路由
  • 每个位置都配备冗余路由服务器
  • 使用互联网路由注册表 (IRR) 表实现对虚假路由和参与者通告的过滤。
  • 透明地移除 MLPE ASN 跳转
  • BGP MD5 认证
  • 基于 BGP 社区的路由通告和 AS 预置过滤

多边对等互连的工作原理

  1. 双边对等互连和多边对等互连共享相同的 VLAN 和 IP。
  2. 对等互联客户与 Equinix 冗余 MLPE 服务器建立 eBGP 会话。
  3. 您与 MLPE 服务器交换路由。
  4. MLPE 服务器使用互联网路由注册数据库 (IRRDB) 和资源公钥基础设施 (RPKI) 来过滤这些路由。

请求MLPE参与

申请参与MLPE:

  1. 请输入您组织的 AS-Set。您可以选择使用 MD5 加密的安全会话,还可以使用自由文本框输入特殊要求。

  2. 每个区域都已展开,以帮助您选择与所列位置建立对等连接的端口 IP 地址。允许连接多个位置。

  3. 点击提交MLPE请求。

要申请和管理您的 MLPE 参与,请登录 客户门户 并点击申请 MLPE 参与。

更多详情,请点击MLPE 信息

MLPE路由服务器BGP社区

所有 Equinix 多边对等交换 (MLPE) 路由服务器都允许参与者使用边界网关协议 (BGP) 社区来更好地控制其路由的出站通告。您可以允许或拒绝所有路由,并可设置例外情况;此外,您还可以允许在路由名称前添加最多 3 次 ASN。

**提示:**使用 MLPE 服务时,BGP 社区并非强制性的。但是,大型对等体通常会使用 BGP 社区来避免通过 MLPE 传输来自其他大型对等体的流量。

以下部分包括社区信息和Cisco配置示例。

信息和对等操作社区(由 MLPE 路由服务器发送给对等方)

CommunityDescriptionNotes
24115:65012RPKI Valid
24115:65023RPKI Unknown
65535:65281No ExportRFC1997
65535:65282No AdvertiseRFC1997
24115:1000:1RPKI Valid
24115:1000:2RPKI Unknown
24115:1000:3RPKI Not Checked
24115:1001:1IRRDB ValidPrefix exists in IRRDB (ASN or AS-SET)
24115:1001:2IRRDB Not CheckedStatic Prefix List
24115:1002:RSNRoute Server TracerRoute Server Marker
24115:1003:MSPeer Round Trip TimeMilliseconds
24115:1004:ASNIncoming Peer ASN

运营社区(由 MLPE 路由服务器从参与者处接收)

CommunityDescriptionNotes
24115:65281-65283No ExportRFC1997
65535:65281-65283No ExportRFC1997
24115:24115Default Open PolicyAnnounce to all peers
0:24115Default Closed PolicyDo not announce to any peers
24115:24115 0:ASNDefault Open except for ASNAnnounce to all peers except ASN
0:24115 24115:ASNDefault Closed Policy except for ASNDo not announce to any peers except ASN
65535:0Graceful ShutdownRFC8326
65535:666RTBH PrefixRFC7999
65501:24115Prepend 24115 1x to PrefixPrepend AS24115 to Path
65501:ASNPrepend 1x to Neighbor ASNPrepend Peer AS to Path
65502:ASNPrepend 2x to Neighbor ASNPrepend Peer AS to Path
65503:ASNPrepend 3x to Neighbor ASNPrepend Peer AS to Path
65001:40Local Preference 40
65001:50Local Preference 50
65001:140Local Preference 140
65001:150Local Preference 150
RT:0:ASNDefault Open Except for ASNAnnounce to all peers except ASN
RT:24115:ASNAllow Export to ASNAnnounce only to ASN
RT:65501:ASNPrepend Peer ASN 1x to Neighbor ASN
RT:65502:ASNPrepend Peer ASN 2x to Neighbor ASN
RT:65503:ASNPrepend Peer ASN 3x to Neighbor ASN
24115:1:24115Default Open PolicyAnnounce to all peers
24115:0:24115Default Closed PolicyDo not announce to any peers
24115:0:ASNNo Export to ASNDo not Advertise to Neighbor ASN
24115:1:ASNAllow Export to ASNAdvertise to Neighbor ASN
24115:2:MSNo Export to Neighbors above MS5ms increment from 5ms to 200ms
24115:101:ASNPrepend 1x to Neighbor ASNPrepend Peer AS to Path
24115:102:ASNPrepend 2x to Neighbor ASNPrepend Peer AS to Path
24115:103:ASNPrepend 3x to Neighbor ASNPrepend Peer AS to Path
24115:111:MSPrepend 1x for Latency above MS5ms increment from 5ms to 200ms
24115:112:MSPrepend 2x for Latency above MS5ms increment from 5ms to 200ms
24115:113:MSPrepend 3x for Latency above MS5ms increment from 5ms to 200ms

已筛选的信息社区(仅在 IX Portal 的 Looking Glass 中显示)

CommunityDescriptionNotes
24115:1101:1Prefix Length too longMaximum Length IPv4: 24, IPv6: 64
24115:1101:2Prefix Length too shortMinimum Length IPv4: 24, IPv6: 64 (RTBH only)
24115:1101:3Bogon PrefixCymru IPv4 and IPv6 bogons
24115:1101:4Bogon ASN in PathBogon ASN in Path
24115:1101:5AS Path too longIPv4: 24, IPv6: 64
24115:1101:6AS Path too shortIPv4: 0, IPv6: 0
24115:1101:7Invalid First ASNFirst AS in Path not Peer AS
24115:1101:8Invalid Next Hop AddressNext Hop address is not Peer Address
24115:1101:9IRRDB Prefix not foundPrefix was not found in Peer ASN or AS-SET
24115:1101:13RPKI InvalidInvalid ROA, Origin AS, and/or Prefix Length
24115:1101:20AS LoopAS Loop in Path
24115:1102:1Advertising Peer declines PrefixAdvertising Peer Policy excludes Recipient Peer

使用 BGP 团体的示例配置

默认打开,但 AS10、AS20 和 AS30 除外

router bgp 40
neighbor 202.79.197.126 remote-as 24115
neighbor 202.79.197.126 route-map eqixsg-in in
neighbor 202.79.197.126 route-map eqixsg-out out

# set default-open community on outbound and
# set communities to restrict annoucnements from AS10, 20 and 30.
route-map eqixsg-out permit 10
set community 24115:24115 0:10 0:20 0:30

# reject routes received from AS 10, 20 and 30
route-map eqixsg-in deny 10
match as-path 10
ip as-path access-list 10 permit ^10_
ip as-path access-list 10 permit ^20_
ip as-path access-list 10 permit ^30_

默认关闭,AS10、AS20 和 AS100030 除外

router bgp 40
neighbor 202.79.197.126 remote-as 24115
neighbor 202.79.197.126 route-map eqixsg-in in
neighbor 202.79.197.126 route-map eqixsg-out out

# set default-closed community on outbound and
# set communities on announcements to AS10, AS20, and AS100030
route-map eqixsg-out permit 10
set community 0:24115 24115:10 24115:20 24115:30
set extcommunity rt 0:100030

# accept routes from AS10, AS20, and AS100030
route-map eqixsg-in permit 10
match as-path 10

ip as-path access-list 10 permit ^10_
ip as-path access-list 10 permit ^20_
ip as-path access-list 10 permit ^100030_

本地路线覆盖所有人,国际路线仅限往返 AS10 和 AS100020。

router bgp 40
neighbor 202.79.197.126 remote-as 24115
neighbor 202.79.197.126 route-map eqixsg-in in
neighbor 202.79.197.126 route-map eqixsg-out out

# announce local routes with default open community
route-map eqixsg-out permit 10
match community 40:4000 # local routes
set community 24115:24115

# announce international routes with default closed community
# and community to announce to AS10 and AS100020 only
route-map eqixsg-out permit 20
match community 40:5000 # international routes
set community 0:24115 24115:10
set extcommunity rt 24115:100020

在 AS10 前添加 AS40 1x,在 AS20 前添加 AS40 2x,在 AS100030 前添加 AS40 3x

router bgp 40
neighbor 202.79.197.126 remote-as 24115
neighbor 202.79.197.126 route-map eqixsg-in in
neighbor 202.79.197.126 route-map eqixsg-out out
route-map eqixsg-out permit 10
set community 65501:10 65502:20
set extcommunity rt 65503:100030

遥控触发黑洞

# signals to MLPE route-servers to set next-hop as Black Hole host for configured network/host
router bgp 40
network 1.1.1.1 mask 255.255.255.255
neighbor 202.79.197.126 remote-as 24115
neighbor 202.79.197.126 route-map RM-RTBH-OUT out
neighbor 202.79.197.126 send-community

route-map RM-RTBH-OUT permit 10
match ip address prefix-list PL-RTBH-OUT
set community 65535:666

ip prefix-list PL-RTBH-OUT seq 10 permit 1.1.1.1/32
ip route 1.1.1.1 255.255.255.255 Null0

此页面有帮助吗?