nanog mailing list archives

Re: Routing Suggestions


From: Adrian Chadd <adrian () creative net au>
Date: Thu, 13 Jan 2011 09:20:14 +0800

On Wed, Jan 12, 2011, Jon Lewis wrote:

Unless you'd like to ensure the sensitive traffic doesn't cross an
"unsafer" default rout path if the XC is down.

BGP would have that same issue since B is default routing to their 
provider.

[config for B]
ip route <A's prefix> <mask> <gw to A>
ip route <A's prefix> <mask> null0 250
ip route 0.0.0.0 0.0.0.0 <B's provider>

problem solved.  If the gw to A is reachable, traffic goes via the cross 
connect.  If the gw is down, traffic goes nowhere.

I was just making the observation; the solution is pretty simple.
(Yes, I've seen "secure" network cross-connects get bitten by this. :-)



Adrian

-- 
- Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid Support -
- $24/pm+GST entry-level VPSes w/ capped bandwidth charges available in WA -


Current thread: