May 2011 - mice-discuss - lists.micemn.net

Re: Looking Glass / Route Server for MICE

by Jay Hanke

> We have 12K routes? :) > > Oh right, HE.... (just kidding, I am poking fun) The switch role is L2 in our current config. So we're really going to use about 50 entries in the mac-address-table and enough routes to manage the box. > Code? James, didn't we talk to someone from DE-CIX back in the formative stages? They might be able to help us out. Jay ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

May 13, 2011

Re: Looking Glass / Route Server for MICE

by Mike Horwath

On 5/13/11 12:25 PM, "Jay Hanke" <jayhanke(a)MANKATONETWORKS.NET> wrote: >On Fri, May 13, 2011 at 11:53 AM, Owen DeLong <owend(a)he.net> wrote: >> If the Juniper systems are stackable EX series switches, then, they will >> not take a full BGP table. > >Very True. The FIB limit on the ex4200 is about 12k and there isn't a >huge amount of memory for a RIB. We have 12K routes? :) Oh right, HE.... (just kidding, I am poking fun) >It looks like DE-CIX might have already rolled a solution for bird. > >http://lg.de-cix.net/ Code? -- Mike Horwath ipHouse - Welcome home! drechsau(a)iphouse.net The universe is an island, surrounded by whatever it is that surrounds universes. - Berkeley Fortune ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

May 13, 2011

Re: Looking Glass / Route Server for MICE

by Jay Hanke

On Fri, May 13, 2011 at 11:53 AM, Owen DeLong <owend(a)he.net> wrote: > If the Juniper systems are stackable EX series switches, then, they will > not take a full BGP table. Very True. The FIB limit on the ex4200 is about 12k and there isn't a huge amount of memory for a RIB. It looks like DE-CIX might have already rolled a solution for bird. http://lg.de-cix.net/ jay ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

May 13, 2011

Re: Looking Glass / Route Server for MICE

by Owen DeLong

If the Juniper systems are stackable EX series switches, then, they will not take a full BGP table. Owen On May 13, 2011, at 9:12 AM, Mike Horwath wrote: > On 5/13/11 11:09 AM, "Justin Krejci" <jkrejci(a)USINTERNET.COM> wrote: > >> On Fri, 2011-05-13 at 15:46 +0000, Mike Horwath wrote: >>> On 5/13/11 10:43 AM, "Justin Krejci" <jkrejci(a)USINTERNET.COM> wrote: >>> >>>> On Fri, 2011-05-13 at 15:11 +0000, Mike Horwath wrote: >>>>> On 5/12/11 6:57 PM, "Justin Krejci" <jkrejci(a)USINTERNET.COM> wrote: >>>>> >>>>>> As I understand it there is currently no public looking glass or >>> route >>>>>> server for MICE users or the public in general. Any interest in >>> setting >>>>>> something up? I could donate a server or some time to the cause. >>> They >>>>> are >>>>>> quite useful in troubleshooting routing issues or network changes. >>>>> >>>>> You are correct, there isn't. >>>>> >>>>> This could easily run on the system that handles the statistics >>> easily >>>>> enough, just I have no idea how I would tie bird into a LG setup. >>>>> >>>> >>>> Looks like using its CLI will not be immediately compatible with most >>>> (all?) LG tools out there which are seemingly mostly geared around >>>> Cisco, Juniper, and Zebra/Quagga systems it seems. Unless someone knows >>>> of a really great and flexible LG app. >>> >>> Yah, that was my finding as well. >>> >>>> Perhaps a small C/J router could peer up with the two servers to suck >>> in >>>> the routes and be used as the LG source and as a publicly telnet >>>> accessible route server as well. >>> >>> There will be a Juniper in place soon - once that is done, we can look >>> at >>> putting it into the 'route' subsystem (this is *not* a requirement for >>> operation of the peering point, in fact, it could create other issues if >>> something breaks) but we could then query that for data. >> >> If there will be a Juniper router already going into the network anyways >> that would certainly work I should think. Then it can be polled by the >> existing stats server you mentioned. > > ...for a looking glass system. > > (finishing your sentence :) > >>>> >>>> ALso OpenBSD has a good bgp daemon with their own bgplg toools (web and >>>> cli) included. >>> >>>> http://www.openbsd.org/cgi-bin/man.cgi?query=bgp&sektion=0&manpath=OpenB >>>> SD >>>> +Current&arch=amd64&apropos=1&format=html >>> >>> We aren't using OpenBSD anywhere though...we are using BIRD. >> >> A small OpenBSD server, even a small Soekris style box, can still suck >> up a read-only copy of the routes from the route servers via BGP. No >> real maintenance or overhead once its up and running. The only real >> difference between something like this and using a C/J would be that >> OBSD has all of the tools built in already, so it's a matter of >> convenience and the general dependable security of an OBSD system. I >> have a such Soekris box with a flash drive I could donate to the cause >> as I've been looking for something to do with it besides accessorize my >> desk. I only mention this as an option as I have used OBSD for a long >> time and am familiar with it and it would meet the needs from what I can >> see. > > Sorry, I was being flippant with my comment. > > I'll be direct: no hackery > > When the new Juniper systems are in place, hopefully they are licensed for > BGP, and if that is the case, we can query that with a looking glass > system and use the current stats server to handle this. > > If this does *not* happen then we need to research another solution. > Additional hardware should *not* be needed at all. > > -- > Mike Horwath ipHouse - Welcome home! drechsau(a)iphouse.net > The universe is an island, surrounded by whatever it is > that surrounds universes. - Berkeley Fortune > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

May 13, 2011

Re: Looking Glass / Route Server for MICE

by Owen DeLong

Another option would be to run an instance of quagga on the BIRD box and peer it with the BIRD instance in receive-only mode. Then you could do the LG stuff against that. Owen On May 13, 2011, at 9:09 AM, Justin Krejci wrote: > On Fri, 2011-05-13 at 15:46 +0000, Mike Horwath wrote: >> On 5/13/11 10:43 AM, "Justin Krejci" <jkrejci(a)USINTERNET.COM> wrote: >> >>> On Fri, 2011-05-13 at 15:11 +0000, Mike Horwath wrote: >>>> On 5/12/11 6:57 PM, "Justin Krejci" <jkrejci(a)USINTERNET.COM> wrote: >>>> >>>>> As I understand it there is currently no public looking glass or route >>>>> server for MICE users or the public in general. Any interest in setting >>>>> something up? I could donate a server or some time to the cause. They >>>> are >>>>> quite useful in troubleshooting routing issues or network changes. >>>> >>>> You are correct, there isn't. >>>> >>>> This could easily run on the system that handles the statistics easily >>>> enough, just I have no idea how I would tie bird into a LG setup. >>>> >>> >>> Looks like using its CLI will not be immediately compatible with most >>> (all?) LG tools out there which are seemingly mostly geared around >>> Cisco, Juniper, and Zebra/Quagga systems it seems. Unless someone knows >>> of a really great and flexible LG app. >> >> Yah, that was my finding as well. >> >>> Perhaps a small C/J router could peer up with the two servers to suck in >>> the routes and be used as the LG source and as a publicly telnet >>> accessible route server as well. >> >> There will be a Juniper in place soon - once that is done, we can look at >> putting it into the 'route' subsystem (this is *not* a requirement for >> operation of the peering point, in fact, it could create other issues if >> something breaks) but we could then query that for data. > > If there will be a Juniper router already going into the network anyways > that would certainly work I should think. Then it can be polled by the > existing stats server you mentioned. > >>> >>> ALso OpenBSD has a good bgp daemon with their own bgplg toools (web and >>> cli) included. >>> http://www.openbsd.org/cgi-bin/man.cgi?query=bgp&sektion=0&manpath=OpenBSD >>> +Current&arch=amd64&apropos=1&format=html >> >> We aren't using OpenBSD anywhere though...we are using BIRD. > > A small OpenBSD server, even a small Soekris style box, can still suck > up a read-only copy of the routes from the route servers via BGP. No > real maintenance or overhead once its up and running. The only real > difference between something like this and using a C/J would be that > OBSD has all of the tools built in already, so it's a matter of > convenience and the general dependable security of an OBSD system. I > have a such Soekris box with a flash drive I could donate to the cause > as I've been looking for something to do with it besides accessorize my > desk. I only mention this as an option as I have used OBSD for a long > time and am familiar with it and it would meet the needs from what I can > see. > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

May 13, 2011

Re: Looking Glass / Route Server for MICE

by Mike Horwath

On 5/13/11 11:09 AM, "Justin Krejci" <jkrejci(a)USINTERNET.COM> wrote: >On Fri, 2011-05-13 at 15:46 +0000, Mike Horwath wrote: >> On 5/13/11 10:43 AM, "Justin Krejci" <jkrejci(a)USINTERNET.COM> wrote: >> >> >On Fri, 2011-05-13 at 15:11 +0000, Mike Horwath wrote: >> >> On 5/12/11 6:57 PM, "Justin Krejci" <jkrejci(a)USINTERNET.COM> wrote: >> >> >> >> >As I understand it there is currently no public looking glass or >>route >> >> >server for MICE users or the public in general. Any interest in >>setting >> >> >something up? I could donate a server or some time to the cause. >>They >> >>are >> >> >quite useful in troubleshooting routing issues or network changes. >> >> >> >> You are correct, there isn't. >> >> >> >> This could easily run on the system that handles the statistics >>easily >> >> enough, just I have no idea how I would tie bird into a LG setup. >> >> >> > >> >Looks like using its CLI will not be immediately compatible with most >> >(all?) LG tools out there which are seemingly mostly geared around >> >Cisco, Juniper, and Zebra/Quagga systems it seems. Unless someone knows >> >of a really great and flexible LG app. >> >> Yah, that was my finding as well. >> >> >Perhaps a small C/J router could peer up with the two servers to suck >>in >> >the routes and be used as the LG source and as a publicly telnet >> >accessible route server as well. >> >> There will be a Juniper in place soon - once that is done, we can look >>at >> putting it into the 'route' subsystem (this is *not* a requirement for >> operation of the peering point, in fact, it could create other issues if >> something breaks) but we could then query that for data. > >If there will be a Juniper router already going into the network anyways >that would certainly work I should think. Then it can be polled by the >existing stats server you mentioned. ...for a looking glass system. (finishing your sentence :) >> > >> >ALso OpenBSD has a good bgp daemon with their own bgplg toools (web and >> >cli) included. >> >>>http://www.openbsd.org/cgi-bin/man.cgi?query=bgp&sektion=0&manpath=OpenB >>>SD >> >+Current&arch=amd64&apropos=1&format=html >> >> We aren't using OpenBSD anywhere though...we are using BIRD. > >A small OpenBSD server, even a small Soekris style box, can still suck >up a read-only copy of the routes from the route servers via BGP. No >real maintenance or overhead once its up and running. The only real >difference between something like this and using a C/J would be that >OBSD has all of the tools built in already, so it's a matter of >convenience and the general dependable security of an OBSD system. I >have a such Soekris box with a flash drive I could donate to the cause >as I've been looking for something to do with it besides accessorize my >desk. I only mention this as an option as I have used OBSD for a long >time and am familiar with it and it would meet the needs from what I can >see. Sorry, I was being flippant with my comment. I'll be direct: no hackery When the new Juniper systems are in place, hopefully they are licensed for BGP, and if that is the case, we can query that with a looking glass system and use the current stats server to handle this. If this does *not* happen then we need to research another solution. Additional hardware should *not* be needed at all. -- Mike Horwath ipHouse - Welcome home! drechsau(a)iphouse.net The universe is an island, surrounded by whatever it is that surrounds universes. - Berkeley Fortune ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

May 13, 2011

Re: Looking Glass / Route Server for MICE

by Justin Krejci

On Fri, 2011-05-13 at 15:46 +0000, Mike Horwath wrote: > On 5/13/11 10:43 AM, "Justin Krejci" <jkrejci(a)USINTERNET.COM> wrote: > > >On Fri, 2011-05-13 at 15:11 +0000, Mike Horwath wrote: > >> On 5/12/11 6:57 PM, "Justin Krejci" <jkrejci(a)USINTERNET.COM> wrote: > >> > >> >As I understand it there is currently no public looking glass or route > >> >server for MICE users or the public in general. Any interest in setting > >> >something up? I could donate a server or some time to the cause. They > >>are > >> >quite useful in troubleshooting routing issues or network changes. > >> > >> You are correct, there isn't. > >> > >> This could easily run on the system that handles the statistics easily > >> enough, just I have no idea how I would tie bird into a LG setup. > >> > > > >Looks like using its CLI will not be immediately compatible with most > >(all?) LG tools out there which are seemingly mostly geared around > >Cisco, Juniper, and Zebra/Quagga systems it seems. Unless someone knows > >of a really great and flexible LG app. > > Yah, that was my finding as well. > > >Perhaps a small C/J router could peer up with the two servers to suck in > >the routes and be used as the LG source and as a publicly telnet > >accessible route server as well. > > There will be a Juniper in place soon - once that is done, we can look at > putting it into the 'route' subsystem (this is *not* a requirement for > operation of the peering point, in fact, it could create other issues if > something breaks) but we could then query that for data. If there will be a Juniper router already going into the network anyways that would certainly work I should think. Then it can be polled by the existing stats server you mentioned. > > > >ALso OpenBSD has a good bgp daemon with their own bgplg toools (web and > >cli) included. > >http://www.openbsd.org/cgi-bin/man.cgi?query=bgp&sektion=0&manpath=OpenBSD > >+Current&arch=amd64&apropos=1&format=html > > We aren't using OpenBSD anywhere though...we are using BIRD. A small OpenBSD server, even a small Soekris style box, can still suck up a read-only copy of the routes from the route servers via BGP. No real maintenance or overhead once its up and running. The only real difference between something like this and using a C/J would be that OBSD has all of the tools built in already, so it's a matter of convenience and the general dependable security of an OBSD system. I have a such Soekris box with a flash drive I could donate to the cause as I've been looking for something to do with it besides accessorize my desk. I only mention this as an option as I have used OBSD for a long time and am familiar with it and it would meet the needs from what I can see. ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

May 13, 2011

Re: Looking Glass / Route Server for MICE

by Mike Horwath

On 5/13/11 10:43 AM, "Justin Krejci" <jkrejci(a)USINTERNET.COM> wrote: >On Fri, 2011-05-13 at 15:11 +0000, Mike Horwath wrote: >> On 5/12/11 6:57 PM, "Justin Krejci" <jkrejci(a)USINTERNET.COM> wrote: >> >> >As I understand it there is currently no public looking glass or route >> >server for MICE users or the public in general. Any interest in setting >> >something up? I could donate a server or some time to the cause. They >>are >> >quite useful in troubleshooting routing issues or network changes. >> >> You are correct, there isn't. >> >> This could easily run on the system that handles the statistics easily >> enough, just I have no idea how I would tie bird into a LG setup. >> > >Looks like using its CLI will not be immediately compatible with most >(all?) LG tools out there which are seemingly mostly geared around >Cisco, Juniper, and Zebra/Quagga systems it seems. Unless someone knows >of a really great and flexible LG app. Yah, that was my finding as well. >Perhaps a small C/J router could peer up with the two servers to suck in >the routes and be used as the LG source and as a publicly telnet >accessible route server as well. There will be a Juniper in place soon - once that is done, we can look at putting it into the 'route' subsystem (this is *not* a requirement for operation of the peering point, in fact, it could create other issues if something breaks) but we could then query that for data. > >ALso OpenBSD has a good bgp daemon with their own bgplg toools (web and >cli) included. >http://www.openbsd.org/cgi-bin/man.cgi?query=bgp&sektion=0&manpath=OpenBSD >+Current&arch=amd64&apropos=1&format=html We aren't using OpenBSD anywhere though...we are using BIRD. -- Mike Horwath ipHouse - Welcome home! drechsau(a)iphouse.net The universe is an island, surrounded by whatever it is that surrounds universes. - Berkeley Fortune ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

May 13, 2011

Re: Looking Glass / Route Server for MICE

by Justin Krejci

On Fri, 2011-05-13 at 15:11 +0000, Mike Horwath wrote: > On 5/12/11 6:57 PM, "Justin Krejci" <jkrejci(a)USINTERNET.COM> wrote: > > >As I understand it there is currently no public looking glass or route > >server for MICE users or the public in general. Any interest in setting > >something up? I could donate a server or some time to the cause. They are > >quite useful in troubleshooting routing issues or network changes. > > You are correct, there isn't. > > This could easily run on the system that handles the statistics easily > enough, just I have no idea how I would tie bird into a LG setup. > Looks like using its CLI will not be immediately compatible with most (all?) LG tools out there which are seemingly mostly geared around Cisco, Juniper, and Zebra/Quagga systems it seems. Unless someone knows of a really great and flexible LG app. Perhaps a small C/J router could peer up with the two servers to suck in the routes and be used as the LG source and as a publicly telnet accessible route server as well. ALso OpenBSD has a good bgp daemon with their own bgplg toools (web and cli) included. http://www.openbsd.org/cgi-bin/man.cgi?query=bgp&sektion=0&manpath=OpenBSD+… ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

May 13, 2011

Re: Looking Glass / Route Server for MICE

by Mike Horwath

On 5/12/11 6:57 PM, "Justin Krejci" <jkrejci(a)USINTERNET.COM> wrote: >As I understand it there is currently no public looking glass or route >server for MICE users or the public in general. Any interest in setting >something up? I could donate a server or some time to the cause. They are >quite useful in troubleshooting routing issues or network changes. You are correct, there isn't. This could easily run on the system that handles the statistics easily enough, just I have no idea how I would tie bird into a LG setup. -- Mike Horwath ipHouse - Welcome home! drechsau(a)iphouse.net The universe is an island, surrounded by whatever it is that surrounds universes. - Berkeley Fortune ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

May 13, 2011