feat: initial commit
This commit is contained in:
commit
25b963a07d
GPG key ID:
0AA29A52FB33CFB5
7 changed files with 299 additions and 0 deletions
40
README.md
Normal file
40
README.md
Normal file
|
|
@ -0,0 +1,40 @@
|
|||
# routing-lab
|
||||
|
||||
Hi, this is [me](https://s3lph.me) getting some hands-on experience with routing protocols by building a small docker-compose based lab environment.
|
||||
|
||||
> [!IMPORTANT]
|
||||
> This lab environment uses IPv6 **exclusively**.
|
||||
> [IPv6 support](https://docs.docker.com/config/daemon/ipv6/) **must** be enabled in Docker beforehand!
|
||||
|
||||
## Network Architecture
|
||||
|
||||
- There are 3 AS: AS23, AS42 and AS1337
|
||||
- Each pair of AS' has its own direct interconnect in a dedicated docker network.
|
||||
- Exception: There are two AS23-AS42 interconnects, each in its own docker network.
|
||||
- The IP range used in each interconnect is `fd00:d0ca:<ASN1><ASN2>:<IC#>::/64`, where AS1337 uses `13` instead. `<IC#>` is the interconnect ID (as there's tw between AS23 and AS42).
|
||||
|
||||
## eBGP
|
||||
|
||||
- Each AS runs an OpenBGPD router for eBGP peering.
|
||||
- An [alice-lg](https://github.com/alice-lg/alice-lg) looking class connecting to all 3 BGP routers is started on [http://localhost:7340](http://localhost:7340).
|
||||
- Each AS announces the `fd00:d0ca:<ASN>:1::/64` prefix.
|
||||
|
||||
|
||||
Example: traceroute from AS42 eBGP router to AS23 eBGP router: When the link is taken offline, the traffic is routed via AS1337 instead:
|
||||
|
||||
```shell-session
|
||||
routing-lab-as42-1:/ # traceroute fd00:d0ca:23:1::10
|
||||
traceroute to fd00:d0ca:23:1::10 (fd00:d0ca:23:1::10), 30 hops max, 72 byte packets
|
||||
1 fd00:d0ca:23:1::10 (fd00:d0ca:23:1::10) 0.022 ms 0.016 ms 0.014 ms
|
||||
routing-lab-as42-1:/ # bgpctl -s /run/bgpd.sock.42 neigh as23_1 down
|
||||
request processed
|
||||
routing-lab-as42-1:/ # traceroute fd00:d0ca:23:1::10
|
||||
traceroute to fd00:d0ca:23:1::10 (fd00:d0ca:23:1::10), 30 hops max, 72 byte packets
|
||||
1 routing-lab-as1337-1.routing-lab_as42_as1337_1 (fd00:d0ca:4213:1::1337) 0.059 ms 0.016 ms 0.020 ms
|
||||
2 fd00:d0ca:23:1::10 (fd00:d0ca:23:1::10) 0.031 ms 0.019 ms 0.017 ms
|
||||
routing-lab-as42-1:/ # bgpctl -s /run/bgpd.sock.42 neigh as23_1 up
|
||||
request processed
|
||||
routing-lab-as42-1:/ # traceroute fd00:d0ca:23:1::10
|
||||
traceroute to fd00:d0ca:23:1::10 (fd00:d0ca:23:1::10), 30 hops max, 72 byte packets
|
||||
1 fd00:d0ca:23:1::10 (fd00:d0ca:23:1::10) 0.017 ms 0.018 ms 0.018 ms
|
||||
```
|
||||
14
alice-lg/Dockerfile
Normal file
14
alice-lg/Dockerfile
Normal file
|
|
@ -0,0 +1,14 @@
|
|||
FROM debian:bookworm AS builder
|
||||
|
||||
RUN apt update \
|
||||
&& apt install --yes curl jq \
|
||||
&& curl https://api.github.com/repos/alice-lg/alice-lg/releases \
|
||||
| jq -r '.[0].assets[] | select(.name | test("alice-lg_.*_linux_x86_64.tar.gz")).browser_download_url' | xargs curl -L -o /tmp/alice-lg.tar.gz \
|
||||
&& tar -C /bin -xf /tmp/alice-lg.tar.gz alice-lg \
|
||||
&& chmod +x /bin/alice-lg
|
||||
|
||||
FROM scratch
|
||||
COPY --from=builder /bin/alice-lg /bin/alice-lg
|
||||
ADD alice.conf /etc/alice-lg/alice.conf
|
||||
EXPOSE 3000 7340
|
||||
ENTRYPOINT ["/bin/alice-lg", "-config", "/etc/alice-lg/alice.conf"]
|
||||
24
alice-lg/alice.conf
Normal file
24
alice-lg/alice.conf
Normal file
|
|
@ -0,0 +1,24 @@
|
|||
[server]
|
||||
listen_http = [::]:7340
|
||||
|
||||
|
||||
|
||||
[source.as23]
|
||||
name = AS 23
|
||||
|
||||
[source.as23.openbgpd-bgplgd]
|
||||
api = http://[fd00:d0ca:23:1::10]:9099/
|
||||
|
||||
|
||||
[source.as42]
|
||||
name = AS 42
|
||||
|
||||
[source.as42.openbgpd-bgplgd]
|
||||
api = http://[fd00:d0ca:42:1::10]:9099/
|
||||
|
||||
|
||||
[source.as1337]
|
||||
name = AS 1337
|
||||
|
||||
[source.as1337.openbgpd-bgplgd]
|
||||
api = http://[fd00:d0ca:42:1::10]:9099/
|
||||
29
as1337/conf/bgpd.conf
Normal file
29
as1337/conf/bgpd.conf
Normal file
|
|
@ -0,0 +1,29 @@
|
|||
|
||||
AS 1337
|
||||
socket "/run/bgpd.sock.1337"
|
||||
|
||||
prefix-set mynetworks {
|
||||
fd00:d0ca:1337:1::/64
|
||||
}
|
||||
|
||||
network prefix-set mynetworks
|
||||
|
||||
neighbor fd00:d0ca:2313:1::23 {
|
||||
remote-as 23
|
||||
descr "as23_1"
|
||||
multihop 10
|
||||
announce IPv6 unicast
|
||||
}
|
||||
|
||||
neighbor fd00:d0ca:4213:1::42 {
|
||||
remote-as 42
|
||||
descr "as42_1"
|
||||
multihop 10
|
||||
}
|
||||
|
||||
#allow to ebgp prefix-set mynetworks
|
||||
allow to ebgp
|
||||
allow from ebgp
|
||||
|
||||
# restricted bgpd socket for bgplgd
|
||||
socket "/run/bgpd/bgpd.rsock" restricted
|
||||
34
as23/conf/bgpd.conf
Normal file
34
as23/conf/bgpd.conf
Normal file
|
|
@ -0,0 +1,34 @@
|
|||
|
||||
AS 23
|
||||
socket "/run/bgpd.sock.23"
|
||||
|
||||
prefix-set mynetworks {
|
||||
fd00:d0ca:23:1::/64
|
||||
}
|
||||
|
||||
network prefix-set mynetworks
|
||||
|
||||
neighbor fd00:d0ca:2342:1::42 {
|
||||
remote-as 42
|
||||
descr "as42_1"
|
||||
multihop 10
|
||||
}
|
||||
|
||||
#neighbor fd00:d0ca:2342:2::42 {
|
||||
# remote-as 42
|
||||
# descr "as42_2"
|
||||
# multihop 20
|
||||
#}
|
||||
|
||||
neighbor fd00:d0ca:2313:1::1337 {
|
||||
remote-as 1337
|
||||
descr "as1337_1"
|
||||
multihop 10
|
||||
}
|
||||
|
||||
#allow to ebgp prefix-set mynetworks
|
||||
allow to ebgp
|
||||
allow from ebgp
|
||||
|
||||
# restricted bgpd socket for bgplgd
|
||||
socket "/run/bgpd/bgpd.rsock" restricted
|
||||
34
as42/conf/bgpd.conf
Normal file
34
as42/conf/bgpd.conf
Normal file
|
|
@ -0,0 +1,34 @@
|
|||
|
||||
AS 42
|
||||
socket "/run/bgpd.sock.42"
|
||||
|
||||
prefix-set mynetworks {
|
||||
fd00:d0ca:42:1::/64
|
||||
}
|
||||
|
||||
network prefix-set mynetworks
|
||||
|
||||
neighbor fd00:d0ca:2342:1::23 {
|
||||
remote-as 23
|
||||
descr "as23_1"
|
||||
multihop 20
|
||||
}
|
||||
|
||||
#neighbor fd00:d0ca:2342:2::23 {
|
||||
# remote-as 23
|
||||
# descr "as23_2"
|
||||
# multihop 10
|
||||
#}
|
||||
|
||||
neighbor fd00:d0ca:4213:1::1337 {
|
||||
remote-as 1337
|
||||
descr "as1337_1"
|
||||
multihop 10
|
||||
}
|
||||
|
||||
#allow to ebgp prefix-set mynetworks
|
||||
allow to ebgp
|
||||
allow from ebgp
|
||||
|
||||
# restricted bgpd socket for bgplgd
|
||||
socket "/run/bgpd/bgpd.rsock" restricted
|
||||
124
docker-compose.yml
Normal file
124
docker-compose.yml
Normal file
|
|
@ -0,0 +1,124 @@
|
|||
---
|
||||
|
||||
networks:
|
||||
|
||||
as23_1:
|
||||
driver: bridge
|
||||
enable_ipv6: true
|
||||
ipam:
|
||||
config:
|
||||
- subnet: fd00:d0ca:23:1::/64
|
||||
ip_range: fd00:d0ca:23:1::/96
|
||||
|
||||
as42_1:
|
||||
driver: bridge
|
||||
enable_ipv6: true
|
||||
ipam:
|
||||
config:
|
||||
- subnet: fd00:d0ca:42:1::/64
|
||||
ip_range: fd00:d0ca:42:1::/96
|
||||
|
||||
as1337_1:
|
||||
driver: bridge
|
||||
enable_ipv6: true
|
||||
ipam:
|
||||
config:
|
||||
- subnet: fd00:d0ca:1337:1::/64
|
||||
ip_range: fd00:d0ca:1337:1::/96
|
||||
|
||||
as23_as42_1:
|
||||
driver: bridge
|
||||
enable_ipv6: true
|
||||
ipam:
|
||||
config:
|
||||
- subnet: fd00:d0ca:2342:1::/64
|
||||
ip_range: fd00:d0ca:2342:1::/96
|
||||
|
||||
as23_as42_2:
|
||||
driver: bridge
|
||||
enable_ipv6: true
|
||||
ipam:
|
||||
config:
|
||||
- subnet: fd00:d0ca:2342:2::/64
|
||||
ip_range: fd00:d0ca:2342:2::/96
|
||||
|
||||
as23_as1337_1:
|
||||
driver: bridge
|
||||
enable_ipv6: true
|
||||
ipam:
|
||||
config:
|
||||
- subnet: fd00:d0ca:2313:1::/64
|
||||
ip_range: fd00:d0ca:2313:1::/96
|
||||
|
||||
as42_as1337_1:
|
||||
driver: bridge
|
||||
enable_ipv6: true
|
||||
ipam:
|
||||
config:
|
||||
- subnet: fd00:d0ca:4213:1::/64
|
||||
ip_range: fd00:d0ca:4213:1::/96
|
||||
|
||||
|
||||
services:
|
||||
|
||||
as23:
|
||||
image: docker.io/openbgpd/openbgpd
|
||||
volumes:
|
||||
- ./as23/conf:/etc/bgpd
|
||||
- ./as23/rpki:/var/lib/rpki-client
|
||||
- ./as23/run:/run/bgpd
|
||||
sysctls:
|
||||
- net.ipv6.conf.all.forwarding=1
|
||||
cap_add:
|
||||
- NET_ADMIN
|
||||
networks:
|
||||
as23_1:
|
||||
ipv6_address: fd00:d0ca:23:1::10
|
||||
as23_as42_1:
|
||||
ipv6_address: fd00:d0ca:2342:1::23
|
||||
as23_as42_2:
|
||||
ipv6_address: fd00:d0ca:2342:2::23
|
||||
as23_as1337_1:
|
||||
ipv6_address: fd00:d0ca:2313:1::23
|
||||
|
||||
as42:
|
||||
image: docker.io/openbgpd/openbgpd
|
||||
volumes:
|
||||
- ./as42/conf:/etc/bgpd
|
||||
- ./as42/rpki:/var/lib/rpki-client
|
||||
- ./as42/run:/run/bgpd
|
||||
sysctls:
|
||||
- net.ipv6.conf.all.forwarding=1
|
||||
cap_add:
|
||||
- NET_ADMIN
|
||||
networks:
|
||||
as42_1:
|
||||
ipv6_address: fd00:d0ca:42:1::10
|
||||
as23_as42_1:
|
||||
ipv6_address: fd00:d0ca:2342:1::42
|
||||
as23_as42_2:
|
||||
ipv6_address: fd00:d0ca:2342:2::42
|
||||
as42_as1337_1:
|
||||
ipv6_address: fd00:d0ca:4213:1::42
|
||||
|
||||
as1337:
|
||||
image: docker.io/openbgpd/openbgpd
|
||||
volumes:
|
||||
- ./as1337/conf:/etc/bgpd
|
||||
- ./as1337/rpki:/var/lib/rpki-client
|
||||
- ./as1337/run:/run/bgpd
|
||||
sysctls:
|
||||
- net.ipv6.conf.all.forwarding=1
|
||||
cap_add:
|
||||
- NET_ADMIN
|
||||
networks:
|
||||
as1337_1:
|
||||
ipv6_address: fd00:d0ca:1337:1::10
|
||||
as23_as1337_1:
|
||||
ipv6_address: fd00:d0ca:2313:1::1337
|
||||
as42_as1337_1:
|
||||
ipv6_address: fd00:d0ca:4213:1::1337
|
||||
|
||||
alice-lg:
|
||||
build: ./alice-lg
|
||||
network_mode: host
|
||||
Loading…
Reference in a new issue