Border Gateway Protocol
The border gateway protocol (BGP) is one of the core routing protocols in the Internet. It works by maintaining a table of IP networks or 'prefixes' which designate network reachability between autonomous systems (AS). It is described as a path vector protocol. The current version of BGP, BGP version 4, is specified in request for comment RFC 1771.
BGP supports classless interdomain routing and uses route aggregation to decrease the size of routing tables. Since 1994, version four of the protocol has been in use on the Internet; all previous versions are considered obsolete.
BGP was created to replace the EGP routing protocol to allow fully decentralized routing in order to allow the removal of the NSFNET Internet backbone network. This allowed the Internet to become a truly decentralized system.
Very large private IP networks can also make use of BGP; an example would be the joining of a number of large OSPF networks where OSPF by itself would not scale to size. Another reason to use BGP would be multihoming a network for better redundancy.
Most Internet users do not use BGP directly. However, since all Internet service providers must use BGP to establish routing between one another, it is one of the most important protocols of the Internet. Compare and contrast this with Signalling System 7, which is the inter-provider core call setup protocol on the PSTN.
BGP operation
BGP neighbours, or peers, are established by manual configuration between routers to create a TCP session on port 179. Among routing protocols, BGP is unique in using TCP as its transport protocol.
BGP comprises two parts: Interior Border Gateway Protocol and Exterior Border Gateway Protocol. IBGP is used within a single autonomous system (AS) while EBGP is used between different autonomous systems. All routers within a single AS and participating in BGP routing must be configured in a full mesh: each router must be configured as peer to every other router. This causes obvious scaling problems, since the number of required connections grows quadratically with the number of routers involved. To get around this, two solutions are built into BGP: route reflectors and confederations.
Route reflectors reduce the number of connections required in an AS. A single router (or two for redundancy) can be made a route reflector: other routers in the AS need only be configured as peer to them.
Confederations are used in very large networks where a large AS can be configured to encompass smaller more manageable internal ASs. Confederations can be used in conjunction with route reflectors.
BGP problems and mitigation
Route flapping
A feature known as "dampening" is built into BGP to mitigate the effects of route flapping. Flapping of routes can be caused by WAN links or physical interfaces mending and breaking or by misconfigured or mismanaged routers. Without dampening, routes can be injected and withdrawn rapidly from routing tables, possibly causing a heavy processing load on routers thus affecting overall routing stability.
With dampening, a route's flapping is exponentially decayed. At first instance when a route becomes unavailable but quickly reappears for whatever reason, then the dampening does not take effect, so as to maintain the normal fail-over times of BGP. At the second occurrence, BGP shuns that prefix for a certain length of time; subsequent occurrences are timed out exponentially. After the abnormalities have ceased and a suitable length of time has passed for the offending route, prefixes can be reinstated and its slate wiped clean. Dampening can also mitigate malicious denial of service attacks; dampening timings are highly customisable.
As backbone links and router processors have become faster, some network architects have suggested that flap dampening may not be as important as it used to be, since changes to the routing table can be absorbed much faster by routers. Some have even suggested that dampening may make things worse, not better, in such an environment. This topic is controversial, and the subject of much research.
Routing table growth
One of the largest problems faced by BGP, and indeed the Internet infrastructure as a whole, comes from the growth of the Internet routing table. If the global routing table grows to the point where some older, less capable, routers cannot cope with the memory requirements or the CPU load of maintaining the table, these routers will cease to be effective gateways between the parts of the Internet they connect. In addition, and perhaps even more importantly, larger routing tables take longer to stabilize (see above) after a major connectivity change, leaving network service unreliable, or even unavailable, in the interim.
Until 2001, the global routing table was growing exponentially, threatening an eventual widespread breakdown of connectivity. In an attempt to prevent this from happening, there is now a cooperative effort by ISPs to keep the global routing table as small as possible, by using CIDR and route aggregation. This has slowed the growth of the routing table to a linear process, greatly extending the time available before older routers need to be replaced.
External links
- BGP Routing Resources (includes a dedicated section on BGP & ISP Core Security)
- RFC 1771 and its companion document, RFC 1772
- BGP table statistics
- Linux Magazine: Demystifying BGP (Good, Detailed BGP explanation)
- Zebra, free BGP4 routing software
- Quagga, a fork of Zebra