IXP Best Common Practices trilogy - for the Infrastructure
0 likes336 views
The document outlines best common practices for Internet Exchange Points (IXPs) management infrastructure, emphasizing dedicated monitoring and management systems such as DMZ or VLANs. Key elements to monitor include MAC address changes, chassis status, ports, and overall network traffic, alongside ensuring the security of management access. It also highlights the importance of monitoring both the IXP infrastructure and the monitoring systems themselves.
IXP Best Common Practices trilogy - for the Infrastructure
- 1. Best Common Practices for IXPs management infrastructure Franck Simon – France IX Services fsimon@franceix.net
- 2. BCP for IXPs – Management infrastructure • Monitoring and management : – Dedicated infrastructure (DMZ or VLAN dedicated to management) – OOB management • Console access • SSH access and VPNs – In-‐band management => Secure/restrict access to your equipment 2
- 3. BCP for IXPs – Monitoring • Deploy servers/monitoring tools • Elements to monitor: – Detect any chance of MAC address on the IXP (ARPwatch…) – Chassis: • CPU/processor (including linecards CPU when appropriate) • Memory usage • Fans • Power units 3
- 4. • Elements to monitor: – Ports (both members and backbone ports): • Ports status changes • CRC, input errors… • Unicast packets, non Unicast packets, average packets size … • OpXcal levels and opXcs temperatures • In/out traffic => Don’t forget to also monitor your monitoring infrastructure, not only the IXP infrastructure ! 4 BCP for IXPs – Monitoring
- 5. Cf. Euro-‐IX document : h^ps://www.euro-‐ix.net/documents/1391-‐euro-‐ix-‐ ixp-‐bcops-‐221014-‐pdf?download=yes 5 BCP for IXPs
- 6. QuesXons ??? 6 BCP for IXPs