Researching, Implementation, and Documentation (All at once!) |
Finally getting around to this project; alot of friends have mentioned / suggested the idea in the past as a project, but I've never had the means to complete it.
Now I do, so I figured better now than never!
Explain:
Before I get started, I'd like to lay out a few ideas, or questions and answers so that you can determine if this is for you, or not. I asked myself these questions several times before committing to this project.
a) Why?
b) What is BGP?
c) Why is BGP needed?
d) Why IPv6?
e) Financial Requirements
f) Other Requirements
Explain:
For starters, you'll need to establish a relationship with your local RIR. They control everything in "IP address space" for your locality, and have the power to issue you IP address prefixes. But there are alot of steps involved before you can get there. Below are a list of terms and descriptions, these will help you better understand the basics before proceeding.
a) RIRs (ARIN - United States)
b) Prefixes
c) ORG (Organization)
d) ASN (Autonomous Systems Number)
e) Routing Security (Brief, IRR, RPKI)
Explain:
Once you've been allocated a prefix, you'll want to split it up into smaller subnets or "zones" as I call them. These help break up how you're going to make use of your space, and also help you plan head.
a) Basic subnetting and CIDR
| Subnet Address: 2602:F370::/40 | Description: |
|---|---|
| 2602:F370:0000::/48 | Core Network (Routers, Firewalls, Etc.) |
| 2602:F370:0001::/48 | IPMI / OOB, Management Interfaces |
| 2602:F370:0002::/48 | VOIP/SIP/Communications |
| 2602:F370:0003::/48 | VPN Egress / Tunnels / Routes |
| ...And so on and so fourth | ...Continuing on |
b) Zoning your CIDR subnets
c) Decide what you want now, because coming back to fix it later is either very difficult, or impossible
d) Leave room for testing subnets, and plan for growth with the remainder of your CIDR subnets
Explain:
In order to route traffic on the global internet, you'll need a few things.
a) What is peering?
b) What is IP transit?
Pick your BGP routing software / solution
Explain:
Also, another thing you'll need to route traffic is a BGP router, whether that be physical hardware, or software-based routing.
a) Options (Pick your poison)
b) PathVector + Bird
Explain:
a) Announcing prefixes via upstream bgp peer (transit peer)
b) Verify prefixes are being announced properly via bgp.tools
c) Verify IRR + RPKI is properly setup
Explain:
a) How are you going to route traffic from your bgp router to your hosts?
b) Explain vIXes and how they work.
c) Break down BGP over Wireguard
Explain:
a) Install a default route on your router via BGP (Setup BGP on your internal network router)
b) Discuss the pitfalls of asymmetric routing, and how it will create issues.
c) Setup policy based routing
d) Further subdivide prefixes at sites if needed