본문으로 건너뛰기

MetalLB BGP 사용하기

loading...

eBGP

L3 스위치 설정​

Reference
Device> show version
# Cisco IOS XE Software, Version 17.12.02
# Cisco IOS Software [Dublin], Catalyst L3 Switch Software (CAT9K_IOSXE), Version 17.12.2, RELEASE SOFTWARE (fc2)
# ...
Device> show inventory
# ...
# PID: C9300X-24Y ...
# ...
Device> enable
# Password:
Device# configure terminal
Device(config)# ip routing
Device(config)# router bgp <ASN>
# 삭제: no router bgp <ASN>
neighbor <peerGroup> peer-group
# 삭제: no neighbor <peerGroup> peer-group
neighbor <peerGroup> remote-as <remoteASN>
neighbor <peerIP> peer-group <peerGroup>
neighbor <peerGroup> ebgp-multihop <hops>
maximum-paths <int>

Equal Cost Multi-Path(ECMP) 설정입니다. 기본값은 1입니다.

팁
traceroute <peerIP>

명령어를 통해 나온 hop 수를 기준으로 + 1~2 값을 설정합니다.

end
show ip bgp neighbor
copy running-config startup-config
팁

peer가 인식하는 스위치의 IP 주소를 확인하기 위해 아래 명령어를 실행합니다.

Device# show ip route <peerIP>

via <interface> 형식으로 interface만 표시되는 경우 아래 명령어를 실행하여 IP 주소를 확인합니다.

Device# show run interface <interface>

BFDProfile​

Reference
apiVersion: metallb.io/v1beta1
kind: BFDProfile
metadata:
  name: <name>
  namespace: metallb
spec:
  detectMultiplier: 4
  • receiveInterval: 300ms
  • transmitInterval: 300ms
  • detectMultiplier: <int>: 몇 번 실패하면 링크 끊김으로 판단할지에 대한 값입니다.

BGPPeer​

Reference
apiVersion: metallb.io/v1beta2
kind: BGPPeer
metadata:
  name: <name>
  namespace: metallb
spec:
  myASN: <ASN>
  peerASN: <peerASN>
  peerAddress: <peerAddress>
  ebgpMultiHop: true
  • myASN: <ASN>
    • MetalLB 자기 자신에대한 Autonomous System Numbers(ASN)입니다.
    • 64512 ~ 65534는 Private ASN입니다.
  • peerASN: <peerASN>
  • peerAddress: <peerAddress>
  • ebgpMultiHop: false
  • bfdProfile: <bfdProfileName>

BGPAdvertisement​

Reference
apiVersion: metallb.io/v1beta1
kind: BGPAdvertisement
metadata:
  name: <name>
  namespace: metallb
spec:
  ipAddressPools:
    - <ipAddressPool>
  peers:
    - <peerName>
for speaker in $(kubectl get pods -n metallb -l app.kubernetes.io/component=speaker -o name); do
  kubectl exec -n metallb $speaker -c frr -- vtysh -c "show ip bgp summary"
done