Routing Lab

01 · Overview

Hybrid Edge Routing Lab

Purpose: learn BGP/GRE routing and BYOIP path switching in AWS.

   ┌──────────────┐
   │ Test Client  │
   └──────┬───────┘
          │  https
   ┌──────▼───────┐
   │   AWS IGW    │
   └──┬────────┬──┘
      │        │
      │        └────────────► Demo VIP  45.223.189.100  (direct AWS path)
      │
      ▼
  VyOS WAN  10.0.0.254
      │
      │  one GRE tunnel (tun0)  ──►  Imperva POP 107.154.7.48
      │      └── eBGP 65454 ↔ 19551 runs INSIDE this tunnel
      ▼
  Protected path (scrubbed) ──► BYOIP 45.223.189.0/24

Protected path

via VyOS → Imperva

  • Prefix advertised to Imperva over eBGP inside tun0
  • Traffic enters the Imperva POP, then rides GRE back to VyOS
  • Enable with ./.lab-control.sh divert

Direct AWS path

BYOIP advertised from AWS

  • 45.223.189.0/24 advertised straight from AWS
  • Clients reach the demo VIP without the protected hop
  • Enable with ./.lab-control.sh revert

Start here

Deploy the stack, connect through the jump host, then practise switching paths.

Deploy →Operations →Technical Appendix →