Thursday, 26 February 2026

๐ŸŒ๐Ÿ“ก BGP — The Protocol That Runs the Internet


Every time you open a website, stream a video, or connect to cloud services…
๐Ÿ‘‰ BGP is silently deciding the path your traffic takes.

But here’s the key:

๐Ÿšซ BGP does NOT choose the shortest path
✅ BGP chooses the best policy-based path

๐Ÿง  What is BGP?
✔ Internet routing protocol
✔ Exchanges routes between Autonomous Systems (AS)
✔ Controls how traffic enters and leaves networks
✔ Used by ISPs, enterprises, and cloud providers
๐Ÿ‘‰ Without BGP, the internet wouldn’t function.

๐ŸŒ Types of BGP
๐Ÿ”น eBGP (External BGP)
Used between different AS networks
๐Ÿ‘‰ Example: Enterprise ↔ ISP

๐Ÿ”น iBGP (Internal BGP)
Used inside the same AS
๐Ÿ‘‰ Example: Core routers inside a data center

๐Ÿ”Œ How BGP Actually Works
1️⃣ Configure neighbor
2️⃣ Establish TCP session (Port 179)
3️⃣ Exchange OPEN messages
4️⃣ Send KEEPALIVE messages
5️⃣ Advertise routes
6️⃣ Withdraw routes if links fail
๐Ÿ‘‰ Only ONE best path gets installed in the routing table.

๐ŸŽฏ Key BGP Attributes Engineers Must Know
✔ Weight (Cisco local attribute)
✔ Local Preference (controls exit path)
✔ AS-PATH (loop prevention + path length)
✔ NEXT-HOP (where traffic goes next)
✔ MED (suggest preferred entry point)
✔ COMMUNITY (policy tagging)
๐Ÿ‘‰ These attributes are how engineers control traffic.

๐Ÿ›ก️ BGP Security Matters
✔ Prefix filtering prevents route leaks
✔ MD5 authentication secures neighbors
✔ RPKI validation protects against hijacks
๐Ÿ‘‰ Misconfigured BGP can break the internet.

๐ŸŒ Real-World Use Cases
✔ Multi-ISP redundancy
✔ Traffic engineering
✔ Cloud connectivity (AWS / Azure / GCP)
✔ ISP peering & global routing

๐Ÿง  BGP isn’t just a protocol — it’s the control system of the internet.



No comments:

Post a Comment

Why do many Palo Alto engineers open a TAC case immediately… without checking anything first?

A production issue happens. Application team says “network issue.” Users say “firewall problem.” And within minutes someone says: “Let’s ope...