search for: bgp

Hi, I have successfully shape bandwidth using htb.init using ip address , but when i try to shape zebra BGP using their ip address and BGP port it can''t match the class for BGP and always get the default class. Here''s my htb.init script in the bridge : #eth0-2:50.bgp RATE=128kbit RULE=192.168.192.163 RULE=192.168.199.22 RULE=*:179 #eth1-2:50.bgp RATE=128kbit RULE=192.168.192.163, RUL...

...nts hitting the load balancer at one of the facilities, therefore defeating your purpose of redundancy...if they can't hit the load balancer, they can't hit the secondary site! As for Brian's Message: 1) You are right, to a point. I'm not saying that my idea was a replacement for BGP. I even state that by saying "This is no substitution for BGP". 2) You are correct in saying that you need to change in how the world sees you (whether that be in the application or layer3 routing). That can be done at the application layer or at layer 3. But, if you are a small compan...

Hi, I plan to implement a redundant Internet connection using BGP on 2 different Linux Routers. The routing daemon software I will be using is Zebra (zebra.org). I''m wondering if I should have my Linux firewall behind the 2 BGP routers, or could I keep the shorewall on both BGP routers? Has anyone had any experience with this? Any help is much apprec...

Refering to pppoe i have next problem : I asked my isp if i can buy a class of real ip`s to be routed by them. They said elegantly it can`t be done . I want opinions . I am using an ADSL connection through a Speedtouch 510 configured in bridge. About Bgp : i asked someone if i can peer 2 different locations on 2 different ip`s using private asn number and he said yes , and what i don`t understood is how can do that peer without using bgp. Thanks. Gladly waiting an answer.

Hi list, My network was assigned a private AS and my ISP(4) urged me to use BGP ! My Other 3 providers on my Shorewall BOX are typical aDSL lines while the 4th is an 1G optical uplink with 64 addresses. Currently I am in a balance, track mode in shorewall ISP setup.. After I installed - configured and started zebra + bgp my static routing tables got filled with about 850...

...ty branches, and the following sections, please visit <URL:http://security.FreeBSD.org/>. I. Background Tcpdump is a commonly used network diagnostic utility which decodes packets received on the wire into human readable format. II. Problem Description An un-checked return value in the BGP dissector code can result in an integer overflow. This value is used in subsequent buffer management operations, resulting in a stack based buffer overflow under certain circumstances. III. Impact By crafting malicious BGP packets, an attacker could exploit this vulnerability to execute code or...

...ty branches, and the following sections, please visit <URL:http://security.FreeBSD.org/>. I. Background Tcpdump is a commonly used network diagnostic utility which decodes packets received on the wire into human readable format. II. Problem Description An un-checked return value in the BGP dissector code can result in an integer overflow. This value is used in subsequent buffer management operations, resulting in a stack based buffer overflow under certain circumstances. III. Impact By crafting malicious BGP packets, an attacker could exploit this vulnerability to execute code or...

...nexthop via 80.245.176.11 dev eth0 weight 1 nexthop via 80.245.176.13 dev eth0 weight 1 As you can see there is no equalize keyword in here. Also I have trouble using multipath quagga, it simply doesn''t put multipath route in routing table. For example: faramir# sh ip bgp 10.100.0.1 BGP routing table entry for 10.101.0.0/22 Paths: (2 available, best #1, table Default-IP-Routing-Table) Not advertised to any peer Local 80.245.176.13 (metric 1) from 80.245.176.13 (80.245.177.4) Origin IGP, metric 0, localpref 100, weight 150, valid, internal, best...

...s (~150) when I associate a class with a qdisc. I tried sfq, fifo but none works. If I dont''t associate a qdisc with a class classification occurs well. I''m pretty sure the config is ok. Just was wondering if someone has already steped into this one. This box runs zebra and bgpd as it is a bgp border router. I found this post on google which is quite similar to my case: http://mailman.isi.edu/pipermail/6bone/2002-May/005420.html. Thank you. -- + Lorin + I tought I taw a putty cat...I did! I did taw a putty cat! + http://si-bemol.ro

hi all, first i wann to explain my network & it''s problem, i am using a redhat el5 for multigateway routing, i have 3 adsl lines which is connected with eth0, eth2 and eth3. eth1 is my local network. those 3 lines comes with adsl modem from same isp with equal bandwidth (512 Kbps). In this adsl modems there is one lan and one wan port, adsl modem''s lan ip is gateway for my

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=554 ------- Additional Comments From fhagur@gmail.com 2007-04-17 05:04 MET ------- I have been wondering about this bug and had similar problems myself here in my Debian system, linux-kernel 2.6.18 iptables 1.3.6. I too saw that some packets became transmitted illegally through the ppp0 interface, when they just shoudn't. What I

http://www.uniras.gov.uk/vuls/2004/236929/index.htm ----Quote---- "The impact of this vulnerability varies by vendor and application, but in some deployment scenarios it is rated critical. Please see the vendor section below for further information. Alternatively contact your vendor for product specific information. If exploited, the vulnerability could allow an attacker to create a

We currently have a backup site at a different location to our main site. This backup site mirrors (as closely as possible) our main services, particularly web serving. Is there a way to have the backup site act as a failover for the main site using something like Linux-HA? They are on seperate internet connections with different IP ranges. Thanks -- Tim Edwards

hi all, i have been able to find only a trickle of information concerning possible strategies for a 2 adsl setup using two different isp''s. has anyone had experience in the usa or elsewhere working with their providers to carry bgp tables, or would you recommend/implement a round-robin arrangement? how ? :-) yours sincerely christopher cuse, rhce/ccna ccuse@tiscali.fr redhat 8.0 _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO...

...t is working beautifully. My question is what are the general hardware requirements for routing to about 20 subnets (class c), traffic shaping for about 50 fiber customers (TC QDISC), 2 T1s (straight into the Linux router) and about 35MB of traffic out to the next ISP? We are planning to implement BGP sometime in the near future. I have been searching everywhere for some kind of guidelines, but I see none. If anyone could give me a round about answer that would point me in the right direction I would be obliged. This is what I have been looking at: 2.0GHz Dual-Core Xeon, 4GB 667MGz RAM, 2x1Gb...

...2 and 3 Box B connects to ISPs 1 and 4 Boxes A and B are both connected to each other and the rest of the network. 1) I would like to set up some dynamic routing in such a way that any given outgoing packet from Box A or B would go out over the ISP that had the "best" path (according to BGP) to the destination. I would like to be able to assign ''weights'' to these routes (based on their available bandwidth), but it is not necessary. 2) I would like to have any given *nix box on the network pick the right gateway (A or B) given the destination of its packets. I unde...

In a nutshell and very first of all, you need at least 2 internet connections. Those ISP must be willing to setup BGP peering between your routers and theirs. Once that agreement has been made, you need to get their AS Numbers and submit the ASN request located on ARIN's website (http://www.arin.net). After some paperwork and money exchanges, ARIN assigns you an AS number. At that point, you can configure t...

One final consideration I forgot to mention, make sure you have a beefy router. Depending on your BGP configurations, if you want to receive all routes from the internet, that can seriously bog down a low end router. I'm not saying you can't get by with a low-end router, just make sure your router can handle the results of your BGP configs. --Todd -----Original Message----- From: cent...

Hi - I am trying to find a Linux based solution for one of my clients, I want to bond two adsl lines into one, with redundancy (if one fails the other does all the work). I''ve been looking into ECMP (Equal Cost Multipath), I know BGP would work, but something like ECMP would be much simpler. I have full control of both ends of the connections and I can have both ADSL lines terminate in the same router on each end. I guess my question for the list is; is ECMP a solution for this? I know it does the round-robin distribution of p...

Last week someone in my localnetwork "abused" from our link, making everything slow... So I want to put the current Linux router as a traffic shaper. The setup is: +--- 128Kbit | "International" Local net --- [Linux router with ] -- ISP -- [magic routers]