Route control techniques
Embodiments described herein relate to techniques for route control. The techniques may include obtaining, by a routing information base (RIB) agent, a route policy for performing a route action; receiving, by the RIB agent, a route from a routing protocol; analyzing, by the RIB agent, the route using to make a determination about whether to perform the route action; and performing, by the RIB agent, the route action based on the determination. Route actions may include actions relating to route modification, route redistribution, modifications of various attributes of a route, etc.
1. A network device, comprising:
a processor;
a memory that stores a routing information base (RIB); and
wherein the processor is configured to execute a RIB agent that manages entries in the RIB, a first routing protocol agent that implements a first type of routing protocol, and a second routing protocol agent that implements a second type of routing protocol, and
wherein the RIB agent, when executing on the processor, is configured to:
obtain a routing policy;
obtain a first route from the first routing protocol agent and a second route from the second routing protocol agent;
modify, using the routing policy, an initial value of an attribute of the first route to obtain a first updated route with a new value for the attribute, wherein the modifying of the initial value of the attribute occurs before a route selection by the RIB agent;
perform the route selection on the first updated route and the second route to select the first updated route;
perform a next-hop action on the first updated route, wherein the RIB agent uses an item of information that is unavailable to the first and second routing protocol agents to perform the next-hop action;
after performing the next-hop action,
make a determination about whether to distribute the first route to the second routing protocol agent; and
based on the determination, not distribute the first route to the second routing protocol agent or distribute the first route to the second routing protocol agent.
2. The network device of claim 1 , wherein the routing policy comprises a set of statements that determines the modification to be performed on the first route.
3. The network device of claim 1 , wherein the next-hop action is to deny network traffic data units destined for a next-hop of the first updated route, to modify the next-hop of the first updated route to an updated next-hop of the first updated route that is on a path to a same destination, or to modify the next-hop of the first updated route to at least one security policy implementation next-hop.
4. The network device of claim 1 , wherein the first updated route is not distributed to the second routing protocol agent when second routing protocol agent has a less specific route to a same destination as the first updated route.
5. The network device of claim 1 , wherein the RIB agent is configured to modify an entry in the RIB based on the route selection.
6. The network device of claim 1 , wherein the first type of routing protocol is Border Gateway Protocol (BGP) and the second type of routing protocol is Interior Gateway Protocol (IGP).
7. A method, comprising:
obtaining, by a routing information base (RIB) agent, a routing policy;
receiving, by the RIB agent, a Border Gateway Protocol (BGP) route from a BGP agent and a non-BGP route based on a non-BGP protocol;
modifying, by the RIB agent and using the routing policy, an initial value of an attribute of the non-BGP route to obtain an updated non-BGP route with a new value for the attribute, wherein the modifying of the initial value of the attribute occurs before a route selection by the RIB agent;
performing, by the RIB agent, the route selection on the updated non-BGP route and the BGP route to select the updated non-BGP route; and
performing, by the RIB agent, a next-hop action on the updated non-BGP route, wherein the RIB agent uses an item of information indicated by the routing policy and unavailable to the BGP agent to perform the next-hop action.
8. The method of claim 7 , wherein the routing policy comprises a set of statements that determines the modification to be performed on the non-BGP route.
9. The method of claim 7 , wherein the next-hop action is to deny network traffic data units destined for a next-hop of the updated non-BGP route, to modify the next-hop of the updated non-BGP route to an updated next-hop of the updated non-BGP route that is on a path to a same destination, or to modify the next-hop of the updated non-BGP route to at least one security policy implementation next-hop.
10. A non-transitory computer readable medium comprising instructions that, when executed by a processor for a routing information base (RIB) agent that manages entries in a RIB, perform a method, the method comprising:
obtaining, by the RIB agent, a routing policy;
receiving, by the RIB agent, a first route from a first routing protocol agent that implements a first type of protocol and a second route from a second routing protocol agent that implements a second type of protocol;
modifying, by the RIB agent and using the routing policy, an initial value of an attribute of the first route to obtain a first updated route with a new value for the attribute, wherein the modifying of the initial value of the attribute occurs before route selection;
performing the route selection on the first updated route and the second route to select the first updated route;
performing a next-hop action on the first updated route, wherein an item of information that is unavailable to the first and second routing protocol agents to is used to perform the next-hop action;
after performing the next-hop action,
make a determination about whether to distribute the first route to the second routing protocol agent; and
based on the determination, not distribute the first route to the second routing protocol agent or distribute the first route to the second routing protocol agent.
11. The non-transitory computer readable medium of claim 10 , wherein the routing policy comprises a set of statements that determines the modification to be performed on the first route.
12. The non-transitory computer readable medium of claim 10 , wherein the next-hop action is to deny network traffic data units destined for a next-hop of the first updated route, to modify the next-hop of the first updated route to an updated next-hop of the first updated route that is on a path to a same destination, or to modify the next-hop of the first updated route to at least one security policy implementation next-hop.
13. The non-transitory computer readable medium of claim 10 , wherein the first updated route is not distributed to the second routing protocol agent when second routing protocol agent has a less specific route to a same destination as the first updated route.
14. The non-transitory computer readable medium of claim 10 , wherein the second routing protocol agent is a Border Gateway Protocol (BGP) agent that implements BGP and the first routing protocol agent is a non-BGP agent.
15. The non-transitory computer readable medium of claim 14 , wherein the first routing protocol agent is a static route agent.
16. The non-transitory computer readable medium of claim 14 , wherein the first routing protocol agent is an Interior Gateway Protocol (IGP) agent.
17. The non-transitory computer readable medium of claim 14 , wherein the first routing protocol agent is an Open Shortest Path First (OSPF) agent.