Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

To enable anycast for DNS queries, you configure two or more DNS servers within the AS routing domain with the same anycast address. When you select OSPF as the routing protocol, the upstream router determines the nearest server within the group of servers configured with that anycast address. (The "nearest" DNS server may not necessarily be the geographically closest DNS server; it is the DNS server with the lowest cost associated with its reachability from the current node. This is calculated through the OSPF routing algorithm, a discussion of which is far beyond the scope of this manual.) The nearest DNS server configured with the correct anycast address then responds to the DNS query. In the case where the nearest server becomes unavailable, the next nearest server responds to the query. OSPF anycast provides a dynamically routed failover to ensure that DNS can always resolve client requests within the AS. From the client perspective, anycasting is transparent and the group of DNS servers with the anycast address appears to be a single DNS server.

Image Added

Excerpt
hiddentrue
nameAnycast_OSFP_BloxOne_DDI_Final.drawio

Drawio
border1
baseUrlhttps://infoblox-docs.atlassian.net/wiki
diagramNameAnycast_OSFP_BloxOne_DDI_Final
width763
linksauto
zoom1
tbstyletop
custContentId7080346
pageId9535790
lbox1
contentVer1
revision1

Anycast and BGP4

BGP4 (also referred to as BGP) is designed to distribute routing information among ASs, exchange routing, and reachability information with other BGP systems using a destination-based forwarding paradigm. Unlike OSPF, which calculates routes within a single AS, BGP is a vector routing protocol that distributes routing information among different ASs. A unique ASN (autonomous system number) is allocated to each AS to identify the individual network in BGP routing. A BGP session between two BGP peers is an eBGP (external BGP) session if the BGP peers are in different ASs. A BGP session between two BGP peers is an iBGP (internal BGP) session if the BGP peers are in the same AS.

BGP configuration enables large enterprises using BGP as the internetworking protocol, to provide resilient DNS services using the Infoblox solution. While BGP is mostly used by ISPs, it is also used in larger enterprise environments that must interconnect networks, that span geographical and administrative boundaries. In these environments, it is required to use BGP to advertise anycast routes. Using BGP allows the appliance to advertise DNS anycast addresses to neighboring routers across multiple ASs, that also use BGP as their routing protocols.

To enable anycast for DNS queries among three different networks that span different geographical regions, you can configure two DNS servers with the same DNS anycast addresses in the AS 65497 network. Since other network routers in AS 65498 and AS 65499 also use BGP as the routing protocol, the DNS anycast addresses can be advertised across these networks.

Enterprise network AS 65497 uses Infoblox DNS servers to provide DNS services. Anycast DNS addresses and BGP are configured on the appliances so the anycast addresses can be advertised to the enterprise networks AS 65498 and AS 65499, which contains BGP configured routers. Similarly, BGP filters are applied to ensure that the DNS servers only receive default route advertisements from the neighboring routers.Image Added

Excerpt
hiddentrue
nameAnycast_BGP_BloxOne_DDI1.drawio

Drawio
border1
baseUrlhttps://infoblox-docs.atlassian.net/wiki
diagramNameAnycast_BGP_BloxOne_DDI1
width773
linksauto
zoom1
tbstyletop
custContentId7932379
pageId9535790
lbox1
contentVer1
revision1

You can configure anycast addressing on the DNS servers and select BGP as the protocol to advertise the anycast addresses to Router 1 and 2 in AS 65499. For more information, see Configuring Anycast Addresses. Once you have configured the DNS servers, the appliances automatically add filters on the advertising interfaces to limit the advertisements to the configured anycast IP addresses. Similarly, BGP filters are applied to ensure that the DNS servers only receive default route advertisements from the neighboring routers.

Configure anycast addresses on the appliances, select BGP as the routing protocol, and then configure Timers, Keep Alive, Hold Down, two Router IPs, and an ASN. Both routers are configured with BGP and peered with the Infoblox DNS servers. Admins can configure filters on the routers to limit advertisements received from the DNS servers.Image Added

Excerpt
hiddentrue
nameAnycast_BGP_BloxOneDDI_Configure_Appliance.drawio

Drawio
border1
baseUrlhttps://infoblox-docs.atlassian.net/wiki
diagramNameAnycast_BGP_BloxOneDDI_Configure_Appliance
width626
linksauto
zoom1
tbstyletop
custContentId8653277
pageId9535790
lbox1
contentVer1
revision1

For additional information on Anycast, see the following:

...