Skip to content

What do you use for automated prefix list updates?

Networking by pablowild 3 replies 207 views
#1

Is very manual now. I have the spreadsheets. Is very bad. I am thinking to use GitOps but ¿is secure? I see some people use Ansible for this, but is very slow for 50 peers. I am using BIRD and the prefix lists are 5000 lines each. Jajaja I am crying actually not laughing.

I tried to write a long post about my architecture but deleted. Is too embarrassing. Now you get the short version. Please help.

#2

Could NOT pass on this one
RackNerd had a "BGP automation template" for $12/YR ARE YOU KIDDING
Bought in 2023, price went to $48/YR next month
Still using it, still worth it
Tracks IRR changes and pushes to my GreenCloudVPS VMs in ~90 seconds
https://www.racknerd.com

world record: 4min Arch install
#3
HOST: gw01.pingplot.net                   Loss%   Snt   Last   Avg  Best  Wrst StDev
  1.|-- 192.0.2.1                           0.0%    10    0.3   0.4   0.3   0.6   0.1
  2.|-- 198.51.100.5                        0.0%    10    1.2   1.5   1.1   3.4   0.7
  3.|-- peeringdb.com                 0.0%    10    0.8   0.9   0.7   1.8   0.3

Peer better. MTR to your automation pipeline matters more than the tool.

We use GitOps with 40ms commit-to-deploy. Data:

  • Tool: custom + git + BIRD socket
  • Validation: two-pass RPKI + IRR
  • Rollback: 15 seconds via git revert

AS64500 runs this at scale. Clinical but effective.

#4

Prices only go up. /24 will cost you a kidney. Manual prefix lists are how you leak routes and get depeered. Automation isn't optional anymore; it's survival. Saw a /22 lease hit $18k/month last week. You can't afford to misannounce at those prices.

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft