1、ahujamerit.edu,Internet Routing Registries,1,Internet Routing Registries,Abha Ahuja ahujamerit.edu,ahujamerit.edu,Internet Routing Registries,2,What is the Routing Registry?,Distributed database collectively known as Internet Routing Registry (IRR) RADB, RIPE, CW, ANS, Canet Providers register routi
2、ng policy Used for planning, debugging and generating backbone router configs http:/ Routing Registries,3,What is the Routing Registry?,Can be used by anyone worldwide debugging configuring engineering routing addressing,ahujamerit.edu,Internet Routing Registries,4,What is the Routing Registry?,cont
3、act names, email addresses and telephone numbers for an AS routing policy for an AS (what other ASes does it connect to, which routes do they exchange) information about routes (most important is which AS originates the route) several other types of information,ahujamerit.edu,Internet Routing Regist
4、ries,5,What happens if I dont use a database?,Routing Horror Stories AS7007 filtering would have prevented this announcing bogus routes,ahujamerit.edu,Internet Routing Registries,6,So, I need to use the database because,Filters generated off the IRR protect against inaccurate routing information Mak
5、es troubleshooting and debugging easier Keep track of policy Security Filter! Filter! Filter!,ahujamerit.edu,Internet Routing Registries,7,Why Bother with all of this?,View of global routing policy in a single cooperatively maintained database to improve integrity of Internets routing generate route
6、r configs protect against inaccurate routing info distribution verification of Internet routing,ahujamerit.edu,Internet Routing Registries,8,Why Bother using the database (con),Many providers require that you register your policy peering customer relationship Route Servers,ahujamerit.edu,Internet Ro
7、uting Registries,9,What is Internet2 going to do?,Merit is setting up a database for I2 community source: I2 register Internet2 routing policy and information Will be RPSL Up by end of July,ahujamerit.edu,Internet Routing Registries,10,Policy Languages,express policy with aut-num objects, route obje
8、cts, AS-MACROS currently RIPE-181 moving to RPSL more policy control,ahujamerit.edu,Internet Routing Registries,11,What is RPSL?,Routing Policy Specification Language Designed to replace current language (RIPE-181) Enhanced and more generalized,ahujamerit.edu,Internet Routing Registries,12,How does
9、the language work?,Object-oriented Express policy in objects person mntner role aut-num route Can make sets of objects,ahujamerit.edu,Internet Routing Registries,13,Describing Policy,Use the language to describe your relationship with other Peers routes importing routes exporting specific policies i
10、nterfaces, MEDs, communities,ahujamerit.edu,Internet Routing Registries,14,Querying the Database,whois -h AS237 whois -h MAINT-AS237 whois -h 198.108.60.0,ahujamerit.edu,Internet Routing Registries,15,How to Register your IRR policy,Register one or more maintainers Register AS and policy informat
11、ion Register Routes Describes your import and export policy At the very least, provides contact information,ahujamerit.edu,Internet Routing Registries,16,Register your maintainer,mntner: MAINT-AS237 descr: Maintainer for AS 237 admin-c: Abha Ahuja upd-to: ahujamerit.edu mnt-nfy: ahujamerit.edu mnt-b
12、y: MAINT-AS237 auth: MAIL-FROM ahujamerit.edu changed: ahujamerit.edu 941219 source: RADB,ahujamerit.edu,Internet Routing Registries,17,Register your Routes,route: 35.0.0.0/8 descr: Merit Network, Inc. descr: University of Michigan descr: 4251 Plymouth Road, Suite C descr: Ann Arbor descr: MI 48105-
13、2785, USA origin: AS237 mnt-by: MAINT-AS237 changed: ahujamerit.edu 931113 source: RADB,ahujamerit.edu,Internet Routing Registries,18,Register your aut-num,Describe your policy! Peering relationships import-from export-to can use AS-sets,ahujamerit.edu,Internet Routing Registries,19,Register your au
14、t-num (con),aut-num: AS237 as-name: MICHNET-ASN descr: MichNet Primary AS descr: Merit Network Inc. descr: Ann Arbor, MI USA as-in: AS3561 accept ANY as-out: AS3561 announce AS237 admin-c: JMD24 tech-c: JMD24 notify: MCI-notifymerit.edu mnt-by: MERIT-MAINT-MCI changed: sobomerit.edu 980202 source: C
15、W,ahujamerit.edu,Internet Routing Registries,20,Register your aut-num (con),as-set: AS237:AS-CUSTOMERS descr: ASs for which MichNet provides descr: transit service members: AS229,AS237,AS238,AS7016,AS10330 tech-c: MichNet NOC admin-c: MichNet NOC remark: transit ASs of MichNet notify: routing-notify
16、merit.edu mnt-by: MAINT-AS237 changed: ahujamerit.edu 990222 source: RADB,ahujamerit.edu,Internet Routing Registries,21,Router Configuration,Currently configs by hand - slow and inaccurate Configuring routers using the IRR lots of tools available! RtConfig by ISI route and Aspath filters. Import and
17、 export Filtering is a good thing.,ahujamerit.edu,Internet Routing Registries,22,Router Configuration,Currently configs by hand - slow and inaccurate Configuring routers using the IRR lots of tools available! Filtering is a good thing. Plans for some routers to support RPSL directly,ahujamerit.edu,I
18、nternet Routing Registries,23,Router Configuration,ahujamerit.edu,Internet Routing Registries,24,How do I use the IRR to generate configs?,Tools available to generate config files gated rsd Cisco RAToolSet http:/www.isi.edu/ra/RAToolSet RtConfig Aoe, Roe,ahujamerit.edu,Internet Routing Registries,25
19、,RIPE181 whois queries, flags, objects RPSL whois queries, flags, objects Complete support for RAToolSet queries (fast!) Cisco configuration and management interface Complete automated mirroring support,What does the RADB support now?,ahujamerit.edu,Internet Routing Registries,26,How do I participat
20、e?,Register your policy Run IRRd locally local copy of db for configs http:/,ahujamerit.edu,Internet Routing Registries,27,Resources,http:/ http:/ http:/www.isi.edu/ra/rps http:/www.isi.edu/ra/RAToolSet http:/www.ietf.org/html.charters/rps-charter.html http:/ http:/,ahujamerit.edu,Internet Routing Registries,28,Specifics,Register your policy in the RADB Merit can assist (db-) Questions? Need help? irrd-supportmerit.edu db-,