Hello guys, Can you recommend software or cloud based solution which monitors if a prefix is advertised to a peer (via his Looking Glass for example) & if traffic is passing thru an interface and if one of them is false it announce this prefix via other upstream providers & remove blackholes? Thanks. Dmitry
On Sun, Sep 27, 2020 at 8:53 AM Dmitry Sherman <dmitry@interhost.net> wrote:
Can you recommend software or cloud based solution which monitors if a prefix is advertised to a peer (via his Looking Glass for example) & if traffic is passing thru an interface and if one of them is false it announce this prefix via other upstream providers & remove blackholes?
Hello, You seem to be looking for external automation to do something that's baked into BGP. Any particular reason? * Announce to all upstreams all the time. * Use prepends on the less-preffered upstreams. * If the less preferred upstream is localprefing to use your routes despite the prepend, ask them what BGP community you should set to disable that behavior. * If an upstream propagates your route without passing your packets often enough to need automation, cancel the contract. I could see value in something local that measures things like packet loss rates and cuts the primary if they get higher than acceptable, but that wouldn't be a cloud service because the cloud wouldn't be reliably reachable when you need to act on that information. Regards, Bill Herrin -- William Herrin bill@herrin.us https://bill.herrin.us/
Dmitry, Hello. ThousandEyes might work for what you're looking for - https://www.thousandeyes.com/solutions/bgp-and-route-monitoring. Best Regards, Mauricio Rodriguez Founder / Owner Fletnet Network Engineering (www.fletnet.com) Mauricio.Rodriguez@fletnet.com Office: +1 786-309-1082 Direct: +1 786-309-5493 On Sun, Sep 27, 2020 at 11:56 AM Dmitry Sherman <dmitry@interhost.net> wrote:
Hello guys,
Can you recommend software or cloud based solution which monitors if a prefix is advertised to a peer (via his Looking Glass for example) & if traffic is passing thru an interface and if one of them is false it announce this prefix via other upstream providers & remove blackholes?
Thanks.
Dmitry
-- This message (and any associated files) may contain confidential and/or privileged information. If you are not the intended recipient or authorized to receive this for the intended recipient, you must not use, copy, disclose or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by sending a reply e-mail and delete this message. Thank you for your cooperation.
I setup an account with https://bgpmon.net/ for my AS and prefixes. I get alerts to prefix withdrawals and changes. I'm not sure if its still totally free or not since it looks like Cisco bought it. On Sun, Sep 27, 2020 at 8:54 AM Dmitry Sherman <dmitry@interhost.net> wrote:
Hello guys,
Can you recommend software or cloud based solution which monitors if a prefix is advertised to a peer (via his Looking Glass for example) & if traffic is passing thru an interface and if one of them is false it announce this prefix via other upstream providers & remove blackholes?
Thanks.
Dmitry
Op 29-09-20 om 00:08 schreef Randy Bush:
have folk looked at https://github.com/nttgin/BGPalerter
Yes. It does the job. And it's easy to install and run. -- Marco
Does anyone have a quick answer as to what public data sources are used? I tried looking at the main github page for the project but I either missed it or it isn't there. Graham -----Original Message----- From: Randy Bush have folk looked at https://github.com/nttgin/BGPalerter randy
Does anyone have a quick answer as to what public data sources are used? I tried looking at the main github page for the project but I either missed it or it isn't there.
have folk looked at https://github.com/nttgin/BGPalerter
ripe/ncc bgp stream
On 29/09/2020 15:36, Graham Johnston wrote:
Does anyone have a quick answer as to what public data sources are used? I tried looking at the main github page for the project but I either missed it or it isn't there.
https://blog.apnic.net/2020/07/27/easy-bgp-monitoring-with-bgpalerter/
Where is the data coming from? BGPalerter connects to public data sources (not managed by NTT) and the entire monitoring is done directly in the application (there are no NTT servers involved).
A data source can be integrated with a connector component. In this way, you can also use your data if you would like.
Currently, BGPalerter connects automatically to RIS live, an amazing project by the RIPE NCC. RIS live collects BGP updates coming from more than 600 peers. The updates are streamed to BGPalerter in real time for an unprecedented detailed and responsive monitoring.
https://raw.githubusercontent.com/nttgin/BGPalerter/v1.26.0/config.yml.examp... --> connectors
Hi, It uses RIS Live (https://ris-live.ripe.net) under the hood. Robert On 2020-09-29 15:36, Graham Johnston wrote:
Does anyone have a quick answer as to what public data sources are used? I tried looking at the main github page for the project but I either missed it or it isn't there.
Graham
-----Original Message----- From: Randy Bush
have folk looked at https://github.com/nttgin/BGPalerter
randy
Randy Bush writes:
have folk looked at https://github.com/nttgin/BGPalerter
We use it, and have it configured to send alerts to the NOC team's chat tool (Mattermost). Seems pretty nice and stable. Kudos to Massimo and NTT for making it available and for maintaining it! The one issue we see is that the server often logs disconnections from the RIS service (to its logfile, fortunately not generating alerts). -- Simon.
Hi Shared appreciation!! (and observation). Cheers, mh 29 septembre 2020 17:16 "Simon Leinen" <simon.leinen@switch.ch> a écrit:
Randy Bush writes:
have folk looked at https://github.com/nttgin/BGPalerter
We use it, and have it configured to send alerts to the NOC team's chat tool (Mattermost). Seems pretty nice and stable. Kudos to Massimo and NTT for making it available and for maintaining it!
The one issue we see is that the server often logs disconnections from the RIS service (to its logfile, fortunately not generating alerts). -- Simon.
Back in the day there was Cyclops... https://cyclops.netsec.colostate.edu/ Not sure it's still a thing, doesn't look like it's been updated in a while. On 9/27/2020 11:52 AM, Dmitry Sherman wrote:
Hello guys,
Can you recommend software or cloud based solution which monitors if a prefix is advertised to a peer (via his Looking Glass for example) & if traffic is passing thru an interface and if one of them is false it announce this prefix via other upstream providers & remove blackholes?
participants (12)
-
Chriztoffer Hansen -
Dmitry Sherman -
Graham Johnston -
Jared Geiger -
Marco Davids -
Mauricio Rodriguez -
Michael Hallgren -
Randy Bush -
Robert Blayzor -
Robert Kisteleki -
Simon Leinen -
William Herrin