Статья "Traffic Engineering: Incoming Traffic" рассказывает о методах контроля (балансировка, ограничение и т.д.) входящего трафика используя протокол BGP. Ниже краткое излодение на примерах:
Через метрики (MED)
router bgp 60055
neighbor 192.0.254.17 remote-as 40077
neighbor 192.0.254.17 route-map ispa-out out
neighbor 219.2.19.1 remote-as 50066
neighbor 219.2.19.1 route-map ispb-out out
!
route-map ispa-out permit 10
set metric 10
!
route-map ispb-out permit 10
set metric 20
!
Искуственное удлинение пути.
router bgp 60055
neighbor 219.2.19.1 remote-as 50066
neighbor 219.2.19.1 route-map ispb-out out
!
route-map ispb-out permit 10
set as-path prepend 60055
!
Для временного запрета приема BGP сессий с 192.0.254.17:
!
router bgp 60055
neighbor 192.0.254.17 shutdown
!
Или по AS через access-list:
ip as-path access-list 2 permit ^(60055_)*$
Common Community Actions: Setting a community to indicate a backup route
!
router bgp 60055
neighbor 219.2.19.1 remote-as 50066
neighbor 219.2.19.1 route-map ispb-backup-out out
neighbor 219.2.19.1 send-community
!
route-map ispb-backup-out permit 10
set community 50066:5010 50066:70
!
Setting a community to prepend the path
!
router bgp 60055
neighbor 219.2.19.1 remote-as 50066
neighbor 219.2.19.1 route-map ispb-out out
neighbor 219.2.19.1 send-community
!
route-map ispb-out permit 10
set community 50066:5010 50066:10041
!
|