topic Re: BGP/route based VPN - routed restarts in Firewall and Security Management

BGP/route based VPN - routed restarts

abihsot__ — Tue, 21 Jul 2020 06:43:21 GMT

Hello,

We never used BGP on gaia and wanted to get some insight from you. I've configured tunnels and BGP with AWS according to sk108958. The interesting issue I noticed is whenever I do some change in gaia. Let say, adding additional inbound route filter or even adding some static route on the gateway I get routed refreshed/restarted and thus making BGP sessions go down incuring downtime for a brief moment. Is this the way it works?

R80.20 JHF118

Re: BGP/route based VPN - routed restarts

Timothy_Hall — Tue, 21 Jul 2020 11:39:09 GMT

Do you have BGP Graceful Restart enabled?

sk100499: BGP on Gaia OS - configuring Graceful Restart

Re: BGP/route based VPN - routed restarts

abihsot__ — Tue, 21 Jul 2020 11:51:53 GMT

No, I don't have it enabled. Default setting is "off", so I just followed the procedure in SK when I was configuring.

I think I had some article from AWS telling something in the lines "we do support graceful restart feature, but do not recommend using it", but unfortunately I can't find that article anymore. But anyway, worth trying as this is very inconvenient if each time routes are lost.

Re: BGP/route based VPN - routed restarts

Beowulff — Thu, 24 Sep 2020 01:12:44 GMT

hello, did you manage to solve the problem?

Re: BGP/route based VPN - routed restarts

Beowulff — Thu, 24 Sep 2020 03:27:47 GMT

hello, did you manage to solve the problem?

Re: BGP/route based VPN - routed restarts

abihsot__ — Wed, 28 Oct 2020 18:37:24 GMT

Sort of... I don't like how R80.20 works in general on that gateway. Hopefully will move soon to R80.40 to see if it is any better.

Re: BGP/route based VPN - routed restarts

Adam_Doyle — Tue, 15 Mar 2022 14:54:58 GMT

Did you ever resolve this issue? We've had this happen on R80.20 as well. We just jumbo patched our R80.40 appliances with Take 139 and this is still occurring. If I add a static route, routed restarts and the gateway cluster status goes DOWN causing a failover. There is a new GA jumbo, but we were waiting a grace period for it to bake in before patching to the latest.