Details the operational workflow of BGP flowspec redirects from global VRF to L3VPN and segment routing policies, illustrating procedural logic and packet-handling processes in complex routing environments.
This process redirects packets arriving on a global VRF interface with destination IPs found only in a customer VRF. Without this redirect, packets are dropped. The BGP Flowspec server programs and sends redirect rules via BGP NLRI to neighbors, which store and activate them. Matching packets are then forwarded to the correct VRF using the specified route target through L3VPN or Segment Routing Policy. This ensures accurate routing and precise traffic control in complex networks.
Summary
The key components involved in this process are:
-
BGP Flowspec server: Programs and distributes redirect rules using BGP NLRI to neighbors.
-
BGP Flowspec neighbors (clients): Store and activate the redirect rules in their databases.
-
Network interfaces (for example, VRFA): Receive incoming packets that require VRF-specific routing.
-
Routing tables (global VRF and customer VRF): Contain destination IP information used for packet forwarding.
-
L3VPN and Segment Routing Policy (SR-Policy): Mechanisms used to forward packets to the correct VRF instance.
Workflow
These stages describe How BGP flowspec redirect from global VRF to L3VPN and segment routing policy works.
- Incoming packets arrive on a global VRF interface with destination IPs that exist only in a customer VRF routing table.
- Without intervention, these packets are dropped due to lookup failure in the global VRF.
- The BGP Flowspec server programs redirect rules and propagates them to BGP Flowspec neighbors via BGP NLRI.
- Neighbors store and activate these rules in their databases.
- Incoming packets matching the active rules are redirected to the appropriate customer VRF instance.
- The redirect action specifies the correct route target to ensure accurate routing.
- Forwarding occurs through L3VPN or Segment Routing Policy, enabling precise traffic control and preventing packet loss.
Result
This process ensures that packets with destination IPs only present in customer VRFs are correctly redirected and forwarded, preventing packet drops and enabling fine-grained traffic control within complex network environments.