<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.apple-tab-span
{mso-style-name:apple-tab-span;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-AU" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Hi<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">I will have to monitor that.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">We suffered from an outage recently, with a provider we have 2 links with. We have multiple providers.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">As a review of the incident the business asked about the 3m hold timer. In theory the way I read it, is the routes could be held for up to 3 min whilst the
link is down…<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">One of the questions was why did it take soo long ~ 8-9min for traffic to appear on the other link. Waiting for feedback on that<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">I am presuming with a lower hold timer/keep alive I can get pretty fast response as its only on this providers network I am failing over.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Alex<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Tom Berryman [mailto:Tom@connectivityit.com.au]
<br>
<b>Sent:</b> Tuesday, 27 January 2015 11:09 PM<br>
<b>To:</b> Alex Samad - Yieldbroker<br>
<b>Cc:</b> David Hughes; ausnog@lists.ausnog.net<br>
<b>Subject:</b> Re: [AusNOG] BGP hold timer values<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">There is a bit more than just a few extra packets (as your cost) - BGP can/does have notable CPU impact on low-mid range routing gear.
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">With eBGP, you are talking propagation of your routes to the internet, so not all of the internet is going to see your changes for maybe up to 180 seconds. That said, it's likely most of it will be sooner than that.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Tom<o:p></o:p></p>
<div>
<table class="MsoNormalTable" border="0" cellpadding="0">
<tbody>
<tr>
<td colspan="2" style="padding:.75pt .75pt .75pt .75pt"></td>
</tr>
<tr style="orphans: auto;text-align:start;widows: auto;-webkit-text-stroke-width: 0px;word-spacing:0px">
<td style="padding:.75pt .75pt .75pt .75pt"></td>
<td style="padding:0cm 0cm 0cm 0cm"></td>
</tr>
</tbody>
</table>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">On 27 Jan 2015, at 11:01 pm, Alex Samad - Yieldbroker <<a href="mailto:Alex.Samad@yieldbroker.com">Alex.Samad@yieldbroker.com</a>> wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Hi<br>
<br>
Okay its eBGP, currently have 4 providers, some with multiple connections. So I am thinking 6 / 20 might be good for me, business requirement for approx. 30sec response.<br>
I am presuming all I am looking at is extra BGP packets .. every 6 sec compared to 1 min..<br>
<br>
<br>
Alex<br>
<br>
<br>
<o:p></o:p></p>
<p class="MsoNormal">-----Original Message-----<br>
From: David Hughes [<a href="mailto:david@hughes.com.au">mailto:david@hughes.com.au</a>]<br>
Sent: Tuesday, 27 January 2015 9:37 PM<br>
To: Alex Samad - Yieldbroker<br>
Cc: <a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a><br>
Subject: Re: [AusNOG] BGP hold timer values<br>
<br>
<br>
I gave a lightning talk about this sort of thing a while ago at an APRICOT. I just<br>
googled to find the slides and can now see just how many years ago it was.<br>
Gotta say I'm feeling old :)<br>
<br>
But, it's probably still relevant although the defaults may have changed. This<br>
reflected what we were running at the time - and we were trying to be<br>
pretty aggressive.<br>
<br>
<a href="http://archive.apnic.net/meetings/21/docs/sigs/routing/routing-">http://archive.apnic.net/meetings/21/docs/sigs/routing/routing-</a><br>
pres-hughes-bgp.pdf<br>
<br>
For reference I'm currently happy to run<br>
<br>
eBGP<span class="apple-tab-span"><o:p></o:p></span></p>
<p class="MsoNormal">: 10 / 30<br>
iBGP<span class="apple-tab-span"><o:p></o:p></span></p>
<p class="MsoNormal">: 5 / 15<br>
<br>
And I'd run this even to a single upstream. If it fails at least you'll have<br>
something in your logs to say why you fell off the net for a while. Silent<br>
failures are a bugger to troubleshoot.<br>
<br>
<br>
Thanks<br>
<br>
David<br>
...<br>
<br>
<br>
<br>
On 27/01/2015, at 6:47 PM, Alex Samad - Yieldbroker<br>
<<a href="mailto:Alex.Samad@yieldbroker.com">Alex.Samad@yieldbroker.com</a>> wrote:<br>
<br>
<br>
<o:p></o:p></p>
<p class="MsoNormal">Hi<br>
<br>
I'm wonder what is considered "best practice" or good/responsible hold<o:p></o:p></p>
<p class="MsoNormal">timer values for BGP.<br>
<br>
<o:p></o:p></p>
<p class="MsoNormal"><br>
Currently I'm set at 3m, but I am considering lowering this to 30s and keep<o:p></o:p></p>
<p class="MsoNormal">alive down to 20s, potentially even lower. Or if possible to use BFD & BGP,<br>
what's the uptake on BFD ?<br>
<br>
<o:p></o:p></p>
<p class="MsoNormal"><br>
Alex<br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a><o:p></o:p></p>
<p class="MsoNormal"><br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</body>
</html>