Centralcloudflare

RoutingforanAnycastCDNMartinJLevy@CloudFlareMENOG14-Dubai-March2014WhatisCloudFlareCloudFlaremakeswebsitesfasterandsaferusingourgloballydistributednetworktodeliveressentialservicestoanywebsiteRoutingforanAnycastCDN2PerformanceContentOptimizationSecurity"Analytics"Thirdpartyservices"HowdoesCloudFlareWorkCloudFlareworksatthenetworklevel.
OnceawebsiteispartoftheCloudFlarecommunity,itswebtrafficisroutedthroughCloudFlare'sglobalnetworkof24(andgrowing)datacenters.
Ateachedgenode,CloudFlaremanagesDNS,caching,botfiltering,webcontentoptimizationandthirdpartyappinstallations.
RoutingforanAnycastCDN3IPv4/IPv6–automaticallyenabledWiththeInternet'sexplosivegrowthandthenumberofon-netdevicesclosinginonIPv4'smaximumcapacity,CloudFlarenowoffersanautomaticIPv6gatewayseamlesslybridgingtheIPv4andIPv6networksFormostbusinesses,upgradingtotheIPv6protocoliscostlyandtimeconsumingCloudFlare'ssolutionrequiresNOhardware,software,orotherinfrastructurechangesbythesiteownerorhostingproviderEnabledviatheflipofaswitchonthesiteowner'sCloudFlaredashboardUserscanchoosetwooptions:(FULL)whichwillenableIPv6onallsubdomainsthatareCloudFlareEnabled,or(SAFE)whichwillautomaticallycreatespecificIPv6-onlysubdomains(e.
g.
www.
ipv6.
yoursite.
com)RoutingforanAnycastCDN4AnycastCDNRoutingforanAnycastCDN5AnycastCDNAnycastprefixesSameIPprefixes(IPv4&IPv6)advertisedineachofthe24sitesaroundtheworld(andgrowing)Unicastusedtopulltrafficfrom"origin"websourceTrafficControlHowtheeyeballISProutesIfISPAroutestoCloudFlareinGermanythentrafficwillbeservedforISPAfromFrankfurtIfISPBroutestoCloudFlareinCentralUSAthentrafficwillbeservedforISPBfromDallasorChicagoRoutingforanAnycastCDN6AnycastCDNTraceroutefromHongKongTraceroutefromSingaporeTraceroutefromDubaiRoutingforanAnycastCDN7tracerouteto173.
245.
61.
248(173.
245.
61.
248),30hopsmax,40bytepackets1202-150-221-169.
rev.
ne.
com.
sg(202.
150.
221.
169)0.
351ms0.
406ms0.
456ms2s4-6-r10.
cyberway.
com.
sg(203.
117.
6.
209)0.
610ms0.
652ms0.
692ms3anutsi10.
starhub.
net.
sg(203.
118.
3.
162)2.
579ms2.
575ms2.
562ms4six2utsi1.
starhub.
net.
sg(203.
118.
3.
189)1.
452ms1.
633ms1.
768ms5SH.
gw5.
sin1.
asianetcom.
net(203.
192.
169.
41)1.
561ms1.
620ms1.
610ms6te0-0-2-0.
wr1.
sin0.
asianetcom.
net(61.
14.
157.
109)2.
135ms1.
921ms1.
950ms7gi4-0-0.
gw2.
sin3.
asianetcom.
net(61.
14.
157.
134)1.
909ms1.
907ms1.
882ms8CDF-0003.
gw2.
sin3.
asianetcom.
net(203.
192.
154.
26)1.
417ms1.
504ms1.
493ms9cf-173-245-61-248.
cloudflare.
com(173.
245.
61.
248)1.
470ms1.
461ms1.
520msTracerouteCompleted.
tracerouteto173.
245.
61.
248(173.
245.
61.
248),64hopsmax,44bytepackets1bbs-1-250-0-210.
on-nets.
com(210.
0.
250.
1)0.
423ms0.
329ms0.
320ms210.
2.
193.
17(10.
2.
193.
17)0.
719ms0.
661ms0.
682ms3peer(218.
189.
96.
62)0.
569ms0.
550ms0.
545ms4cloudflare-RGE.
hkix.
net(202.
40.
160.
246)1.
893ms2.
419ms1.
910ms5cf-173-245-61-248.
cloudflare.
com(173.
245.
61.
248)2.
101ms1.
973ms1.
780msTracerouteCompleted.
tracerouteto173.
245.
61.
248(173.
245.
61.
248),64hopsmax,52bytepackets110.
50.
0.
1(10.
50.
0.
1)7.
423ms56.
679ms23.
776ms294.
200.
91.
194(94.
200.
91.
194)22.
342ms35.
165ms9.
889ms310.
171.
0.
49(10.
171.
0.
49)20.
604ms28.
953ms24.
390ms410.
128.
144.
29(10.
128.
144.
29)24.
678ms6.
069ms5.
836ms510.
44.
19.
177(10.
44.
19.
177)9.
389ms7.
570ms8.
151ms610.
44.
247.
89(10.
44.
247.
89)6.
074ms6.
196ms8.
031ms794.
201.
0.
65(94.
201.
0.
65)21.
275ms14.
462ms11.
681ms810.
44.
24.
58(10.
44.
24.
58)194.
345ms162.
052ms199.
916ms9***10cf-173-245-61-248.
cloudflare.
com(173.
245.
61.
248)152.
790ms167.
038ms143.
949ms11TracerouteCompleted.
CloudFlareSingaporeCloudFlareFrankfurtCloudFlareNewYorkAnycastCDNDNSQueryDNSresultreturnedwith"Anycast"IPClientmakesconnectiontoclosestserverCloudFlarerepliesOutageRe-routestonextclosestclusterRoutingforanAnycastCDN8TransitRoutingforanAnycastCDN9TransitWhoChoiceofTransitProviderisVERYimportantWe'vechosenoneproviderperregion–OneinUS/EUandoneinAsia(orthesameproviderforbothregions)SingleProvidermakesroutingeasierTransitprovidershouldoffergoodroutingcontrolsYouneedtobeabletokeeprouteswithinaregionPrependtospecificpeersTransitProvidershouldmakeuseof"HotPotato"routingtotheirpeersi.
e.
PeerandexchangetrafficineverymutuallocationRoutingforanAnycastCDN10TransitRoutingControlsTransitmustbeabletokeepadvertisementswithinregion.
AcustomerofyourEuropeantransitproviderislikelytobeapeerofyourAsiantransitproviderYoudon'twanttoservetrafficfromAsiaforEuropeAlotofworkshouldbedoneinthepresalesstagetounderstandtheprovidersnetworkandhowtheypeer.
ExamplelocationtolookforcontrolsLookingatAS1299's(Telia-Sonera)whoisentrygivesagoodideahowtheypeerSomeroutingcontrolslistedathttp://www.
onesc.
net/communities/RoutingforanAnycastCDN11TransitChoicesManyprovidersgiveyougoodcoverageforcommonUS/EUlocations(LA,NewYork,London,Amsterdam,etc.
.
.
)Oneprovidercan'tdoitallinAsiaAsiannetworksareusuallysomewhat'disconnected'FewpeerwithNTTinAsia&NTT,PacnetandTATAarealldisconnectedfromeachotherTransitintheUS/EUcouldbefarcheaperfortheproviderthanwithinAsiaorAfricaorMiddleEastSupplementthiswithpeeringinallregionsRoutingforanAnycastCDN12PeeringRoutingforanAnycastCDN13PeeringNorthAmericaPeeringIsiteconomictopeerTransitiscloudflare.
comAS13335RoutingforanAnycastCDN18