Docker with BGP - OpenDNS
-
Upload
bacongobbler -
Category
Software
-
view
3.039 -
download
6
Transcript of Docker with BGP - OpenDNS
Project Quadra
- PaaS built on Docker- Python- Run on EC2, OpenStack, Bare Metal
Amazon EC2
- VPC- direct connect- extends our internal network- secondary ip address limitations
Overlay network
- GRE- MTU issues- EC2 instances with jumbo frame support CC2, C3, R3, CG1, CR1 G2, HS1, HI1, I2, M3
GRE configuration#ip tunnel del gre1
ip tunnel add gre1 mode gre remote 67.215.78.24 local 10.70.74.187 ttl 255
ip tunnel add gre1 mode gre remote 10.1.1.1 local 10.70.74.187 ttl 255
ip link set gre1 up
ip addr add 10.71.0.2/30 dev gre1
echo 200 quadranet >> /etc/iproute2/rt_tables
ip rule add from 10.71.1.0/24 table quadranet
ip route add default via 10.71.0.1 dev gre1 table quadranet
BGP: Border Gateway Protocol
● dynamic routing protocol● core internet routing protocol● quagga, bird, exabgp
Quagga configurationrouter bgp 65535
bgp router-id 10.70.74.187
redistribute kernel
timers bgp 3 20
neighbor 10.71.0.1 remote-as 36692
neighbor 10.71.0.1 prefix-list DOCKER out
neighbor 10.71.0.1 next-hop-self
neighbor 10.71.0.1 route-map anycast-out out
!
ip prefix-list DOCKER seq 5 permit 10.71.1.0/24 le 32
ip prefix-list DOCKER seq 10 deny any
!
route-map anycast-out permit 10
set local-preference 100
set origin igp
Docker Networking
- docker0 bridge- veth interfaces- 172.17.0.0/16- iptables nat rules
Linux Network Namespaces# Add the address to the containers loopback interfaceip netns exec "${NSPID}" ip addr add "${GUEST_IPADDR}" dev lo
# Add a route to the host's table for the guest's new IPip route add "${GUEST_IPADDR}/32" via "${DOCKER_IPADDR}"
DEMO
Whats next?
● OSPF?● fully meshed network● automated GRE tunnels● public ip addresses
SORRY NO QUESTIONS!!!