Re: [c-nsp] Best Practices to make one BGP link prefer for egrees and ingress traffic of one subnet
Gert Doering via cisco-nsp <[email protected]> Mon, 23 Feb 2026 13:32:14 +0100
| Newsgroups | gmane.network.nsp.cisco |
|---|---|
| Message-ID | <[email protected]> |
--===============5064347641392187970==
Content-Type: multipart/signed; micalg=pgp-sha256;
protocol="application/pgp-signature"; boundary="7VyuCYYxPvKQrDIZ"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
--7VyuCYYxPvKQrDIZ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Hi,
On Mon, Feb 23, 2026 at 02:50:55PM +0300, Muhammad Atif Jauhar via cisco-ns=
p wrote:
> However, for outbound traffic, we are presently relying on Policy-Based
> Routing (PBR) to steer traffic via the preferred uplink. While this
> approach is functional, we would prefer to achieve the desired path
> selection using BGP-native mechanisms, if possible, to ensure better
> scalability and operational simplicity.
There is none. BGP does not care about packet source addresses.
(That said, you could trick around with VRFs, but it's questionable
if that will be more satisfactory in the end)
Symmetric traffic is an illusion, and trying to achieve that in
"the Internet" is time not spent well.
gert
--=20
"If was one thing all people took for granted, was conviction that if you=
=20
feed honest figures into a computer, honest figures come out. Never doubte=
d=20
it myself till I met a computer with a sense of humor."
Robert A. Heinlein, The Moon is a Harsh Mistre=
ss
Gert Doering - Munich, Germany [email protected]=
=2Ede
--7VyuCYYxPvKQrDIZ
Content-Type: application/pgp-signature; name=signature.asc
Content-Transfer-Encoding: 7bit
-----BEGIN PGP SIGNATURE-----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=iH5U
-----END PGP SIGNATURE-----
--7VyuCYYxPvKQrDIZ--
--===============5064347641392187970==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KY2lzY28tbnNw
IG1haWxpbmcgbGlzdCAgY2lzY28tbnNwQHB1Y2submV0aGVyLm5ldApodHRwczovL3B1Y2submV0
aGVyLm5ldC9tYWlsbWFuL2xpc3RpbmZvL2Npc2NvLW5zcAphcmNoaXZlIGF0IGh0dHA6Ly9wdWNr
Lm5ldGhlci5uZXQvcGlwZXJtYWlsL2Npc2NvLW5zcC8K
--===============5064347641392187970==--