BGP SOO is a BGP extended community attribute and stands for BGP Site of Origin. SoO uniquely identifies the site that has originated the route.
SoO is also useful to prevent routing loops and suboptimal routing, especially used to prevent routing loops on dual-homed sites.
SoO can be used even when IGP is used between PE-CE routers and can also be used when BGP is used between PE-CE routers.
SoO value needs to be defined in one of the below Naming Conventions –
- A 16-bit autonomous system number, a colon, and a 32-bit number, for example, 45000:3
- A 32-bit IP address, a colon, and a 16-bit number, for example, 192.168.10.2:51
BGP SOO Rule of Operation
SOO is applied on updates coming to PE1 from CE router and when these routes are advertised as VPNV4 route to PE router PE2, the PE2 router doesn’t advertise the routes back to the CE router hence avoiding the routing loop.
SOO Works and Configuration
BELOW IS A SCENARIO WHICH WILL HELP UNDERSTAND MORE ON HOW SOO WORKS AND ITS CONFIGURATION –
In the topology below the CE, a router is dual-homed to two service provider PEs (PE1 & PE2). When the routing update of 184.108.40.206 is received on PE1 it imposes an SoO on the incoming update.
When this routing update is passed onto PE2 it checks the SoO tag for this prefix already configured on itself. If the SoO tag matches the route is not propagated back to the CE.
Routing update of 220.127.116.11 is propagated to PE1 and an inbound route-map is applied to set SoO value 200:1 to the incoming update.
PE2 isn’t having any SoO value configured for 18.104.22.168 and is seen to be advertising the route back to CE.
Note: As we have configured AS override the CE may accept the route from PE2 if it has the prefix 22.214.171.124 from a source which is less preferred than an update from PE2.
#No SoO applied#
verify on PE2 if it is advertising the 126.96.36.199 prefix back to CE without an SoO value configured which could possibly create routing loops.
We apply the SoO on the router PE2 for 188.8.131.52 prefix and can see now PE2 now doesn’t advertise the 184.108.40.206 update back to the CE router.
If SOO is applied to any other routing protocol than BGP, the route-map configured is called with a ip vrf site-mapcommand.
You can also set SOO for connected and static routes when they are redistributed.
Related- BGP Interview Questions
Related- BGP Origin Attribute