Skip to content
ciklista edited this page Mar 24, 2021 · 41 revisions

Resinfra Project Documentation

About this Wiki

Why documentation is cool...

To BGP or not to BGP?

BGP is a protocol used to make inter-routing decisions. We could use this to configure the routes between our networks. Rough collection of pro/con of using BGP for our project by @johanngoltz and @ciklista:

  • standard for dynamic routing between networks, pushed by VM vendors (but our network setup is rather static)
  • GCP requires BGP for HA (99,99%) VPN connections, they must have their reasons
  • BGP configuration extra difficult for Hetzner & Proxmox, but probably not for real cloud providers
  • failover between tunnels might be easier than with classic DPD, but advantages limited if we use only one gateway node on Hetzner & Proxmox
  • transit routing in case one tunnel fails, but others are still available (but how well can we market this feature to those who will grade us?), like so:

Full mesh transit routing

Gateway as the Single Point of Failure

Virtual Router Redundancy Protocol

How to setup an IPSec tunnel with Strongswan with high-availability on Linux

Resources

  • Scrum - useful resources