I worked at a company that just finished making this transition to EBGP as the primary routing for the WAN back in 2012. The primary factor driving the change was the advantage of detailed control at scale. With EBGP each site having their own AS and a flexible import and export policy made security of the sites to the dual data centers much smaller in scope. We could use simple unreachability to preclude intrusions, escalation and penetration deeper into the sites and infrastructure without the need for even more firewalls, monitoring and other intrusion prevention.
The setup also made mergers of new sites from acquisitions a simpler process. The initial routing interface to the new sites provided a simple point to apply temporary NAT during migration processes and again a simpler security choke point.
------------------------------
Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
http://puluka.com/home------------------------------
Original Message:
Sent: 03-01-2025 23:53
From: LEEBAHI
Subject: EBGP as replacement for WAN IGP say OSPF
Hi guys,
I would like to hear from community what they think using EBGP as WAN IGP , replacing OSPF.
Currently , we have 50 sites, connected over OSPF WAN. Our new architecture wants to replace OSPF with EBGP .
What are some reasons you guys would do or would not do it?
Much appreciated!!
------------------------------
Be kind!!
------------------------------