Dynamic Redundancy (BGP)
In this deployment example, we will configure the Anapaya EDGE to dynamically advertise routes that are reachable.
IP prefixes that are learned from the SCION network are advertised to the LAN via BGP, conversely, IP prefixes that are reachable in the LAN need to be advertised to the EDGE appliances via BGP as well. When an IP prefix is no longer reachable via the SCION network, it is retracted from BGP and the LAN will no longer use that EDGE appliance to reach the SCION network.
In the dynamic redundancy setup both EDGE appliances can be used for outgoing traffic simultaneously, this can be influenced by the operator of the LAN side BGP router.
Refer to the Getting Started Setup guide for step-by-step instructions on how to interact with the Anapaya appliance.
Information
The configuration examples below are based on the connected EDGE setup and need to be adapted to your specific setup.
Additional information provided by the customer
| BGP Router | Router IP | ASN |
|---|---|---|
| EDGE 1 | 10.10.0.12 | 65012 |
| EDGE 2 | 10.10.0.13 | 65013 |
| LAN side | 10.10.0.1 | 65001 |
BGP
The following BGP section is added to configure the eBGP session between the EDGE appliances and a BGP router in the internal network.
- EDGE 1
- EDGE 2
IP-in-SCION tunneling
The IP-in-SCION tunneling
section needs to be adjusted.
The static_announcements list is no longer required. Instead, the EDGE appliances propagate the IP
prefixes that are received via BGP from the LAN side router to the SCION network. The rest of the
IP-in-SCION tunneling configuration remains the same as in the connected EDGE setup
example.
- EDGE 1
- EDGE 1 (diff)
- EDGE 2
- EDGE 2 (diff)
Complete configuration
For completeness, we provide the full configuration of the EDGE appliance:
- EDGE 1
- EDGE 1 (diff)
- EDGE 2
- EDGE 2 (diff)
Advanced configuration
Multiple LAN interfaces
If the EDGE appliances have multiple LAN interfaces, each with its own BGP session, the configuration should be updated as follows:
- Add a BGP neighbor entry for each BGP session in the
bgp.neighborslist. - Configure a loopback interface on each EDGE appliance, and bind the router, control service, and tunneling endpoint to this loopback address.
- Include the loopback address as a network in the BGP configuration.
- Ensure connectivity so that the other EDGE appliance can reach the loopback address.
- Set the loopback addresses as cluster peers to enable proper communication between appliances.