Static CORE
This section describes the different configuration sections required to set up the static CORE appliance. This includes configuration of the network interfaces, the SCION AS, and the SCION links.
Refer to the Getting Started Setup guide for step-by-step instructions on how to interact with the Anapaya appliance.
Information
The configuration examples below are based on the following information and need to be adapted to your specific setup.
The ISP deploys two CORE appliances in a single ISD-AS, which are connected to each other via the ISP internal network. The internal network is also used to connect the CORE appliances to the EDGE appliances of the customers. The ISP also peers with two other SCION ISPs, using dedicated network interconnects.
CORE appliances
Information defined by the ISP
- SCION ISD-AS:
1-ff00:0:1
- CORE 1:
- Internal IP address:
10.0.0.2/24
- Internal IP gateway:
10.0.0.1
- Internal IP address:
- CORE 2:
- Internal IP address:
10.0.0.3/24
- Internal IP gateway:
10.0.0.1
- Internal IP address:
SCION links to other ISPs
Information to be aligned with the other ISPs
- Underlay network:
fe80:2::/64
(ISP 2) andfe80:3::/64
(ISP 3)
Information defined by ISP 2
- SCION ISD-AS:
1-ff00:2:1
- SCION interface ID:
20
- SCION link underlay address:
[fe80:2::2]:31020
Information defined by ISP 3
- SCION ISD-AS:
3-ff00:3:1
- SCION interface ID:
5
- SCION link underlay address:
[fe80:3::2]:31005
Information defined by the ISP
- SCION link to ISP 2:
- SCION interface ID:
10
- SCION link underlay address:
[fe80:2::1]:31010
- SCION interface ID:
- SCION link to ISP 3:
- SCION interface ID:
20
- SCION link underlay address:
[fe80:3::1]:31020
- SCION interface ID:
SCION links to customer EDGE appliances
Information defined by the ISP
- EDGE WAN interface IP address:
10.10.0.24/24
- EDGE WAN interface gateway:
10.10.0.1
- SCION link from CORE 1:
- SCION interface ID:
100
- SCION link underlay address:
10.0.0.2:31100
- SCION interface ID:
- SCION link from CORE 2:
- SCION interface ID:
200
- SCION link underlay address:
10.0.0.3:31200
- SCION interface ID:
Information defined by the customer
- SCION ISD-AS:
1-ff00:0:10
- SCION link to CORE 1:
- SCION interface ID:
1
- SCION link underlay address:
10.10.0.24:31001
- SCION interface ID:
- SCION link to CORE 2:
- SCION interface ID:
2
- SCION link underlay address:
10.10.0.24:31002
- SCION interface ID:
Summary of SCION links
The following table summarizes the SCION links between the CORE appliances and the customer EDGE
appliances, as well as the SCION links to other SCION ISPs. The SCION interface is a combined representation
of the ISD-AS and the interface ID, e.g., 1-ff00:0:1#100
for CORE 1.
Appliance | SCION interface | Underlay address | Neighbor SCION interface | Neighbor underlay address |
---|---|---|---|---|
CORE 1 | 1-ff00:0:1#100 | 10.0.0.2:31100 | 1-ff00:0:10#1 | 10.10.0.24:31001 |
CORE 2 | 1-ff00:0:1#200 | 10.0.0.3:31200 | 1-ff00:0:10#2 | 10.10.0.24:31002 |
CORE 1 | 1-ff00:0:1#10 | [fe80:2::1]:31010 | 1-ff00:2:1#20 | [fe80:2::2]:31020 |
CORE 2 | 1-ff00:0:1#20 | [fe80:3::1]:31020 | 3-ff00:3:1#5 | [fe80:3::2]:31005 |
Network interfaces
The network interfaces section
describes the configuration of the network interfaces on the CORE appliances. In this example, we
assume that both CORE appliances have two network interfaces: one towards the internal network
internal
and one for the SCION links to other SCION ISPs external
. The internal
interface is
used to connect the CORE appliances to the EDGE appliances of the customers but also to connect the
CORE appliances to each other.
The internal
interface can also be split into two separate interfaces, one for the
connection to the EDGE appliances and one for the connection to the other CORE appliance.
- CORE 1
- CORE 2
SCION
The SCION section describes the configuration of the SCION AS on the CORE appliances. For details, see the SCION configuration documentation covering general AS configuration, data plane, control plane, and SCION neighbors.
Most configuration parameters can be directly derived from the Information section. The following example shows the configuration of the SCION AS on the CORE appliances.
The control and router sections need to be set to enabled: true
for the control and data plane to
be enabled. The address
of the control plane as well as the internal_interface
of the router
need to be set to the internal
interface address.
By default, set the neighbor relationship to CORE
for other SCION ISPs and to CHILD
for customer
EDGE appliances, unless specified otherwise.
- CORE 1
- CORE 2
Cluster
The cluster section describes the configuration of the cluster on the CORE appliances. In this example, the CORE appliances deployed in a sharded manner are part of the same cluster. The cluster configuration is used to synchronize topology as well as SCION beacon and path information amongst each other.
The cluster configuration includes the local cluster endpoint and the list of peers that are part of the cluster. For CORE appliances we recommend to use automatic topology synchronization, see Cluster for more details.
- CORE 1
- CORE 2
Complete configuration
For completeness, we provide the full configuration of both CORE appliances:
- CORE 1
- CORE 2