Skip to content

Commit 6ad603e

Browse files
authored
Merge pull request #268036 from paulth1/four-operator-nexus-route-articles
[AQ] edit pass: four-operator-nexus-route-articles
2 parents 528a49c + e5a8f0f commit 6ad603e

File tree

4 files changed

+203
-235
lines changed

4 files changed

+203
-235
lines changed
Lines changed: 30 additions & 34 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
2-
title: "Route Policies in Azure's Operator Nexus Managed Network Fabric"
3-
description: Introduction to Route Policies in Azure Operator Nexus.
2+
title: Route policies in the Azure Operator Nexus managed network fabric
3+
description: This article introduces you to route policies in the Azure Operator Nexus managed network fabric.
44
author: joemarshallmsft
55
ms.author: joemarshall
66
ms.service: azure-operator-nexus
@@ -9,69 +9,65 @@ ms.date: 02/12/2024
99
ms.custom: template-concept
1010
---
1111

12-
# Route Policies in Azure's Operator Nexus Managed Network Fabric
12+
# Route policies in the Azure Operator Nexus managed network fabric
1313

14-
**Route policies** enable operators to control routes learnt and distributed through **Border Gateway Protocol** (BGP). BGP is a routing protocol that exchanges routing information between autonomous systems (AS) on the Internet. BGP uses attributes such as community values and extended community values to tag and filter routes. Route policies can be used to manipulate these attributes and influence the routing behavior.
14+
Route policies enable operators to control routes learned and distributed through Border Gateway Protocol (BGP). BGP is a routing protocol that exchanges routing information between autonomous systems on the internet. BGP uses attributes such as community values and extended community values to tag and filter routes. Route policies can be used to manipulate these attributes and influence the routing behavior.
1515

1616
Route policies are a set of rules that are applied to routes based on their specific attributes. These attributes include IP prefixes, community values, and extended community values. The primary function of these policies is to allow or deny routes and to modify their attributes as needed.
1717

18-
Route policies can be enforced at different endpoints in the network fabric. They can be applied at network-to-network interconnections (NNI) or at different levels in a layer 3 isolation domain, such as external networks, internal networks, and connected subnets. Route policies are applied in the direction of egress or ingress, depending on whether they're export or import policies. Route policies for IPv4 and IPv6 are enforced separately.
18+
Route policies can be enforced at different endpoints in the network fabric. They can be applied at network-to-network interconnections or at different levels in a layer 3 isolation domain, such as external networks, internal networks, and connected subnets. Route policies are applied in the direction of egress or ingress, depending on whether they're export or import policies. Route policies for IPv4 and IPv6 are enforced separately.
1919

2020
Route policies can be specified with combinations of conditions and actions. Conditions are based on IP prefixes, IP communities, and IP extended communities. Actions are based on discarding or permitting routes, and adding, removing, or overwriting community values and extended community values.
2121

22-
Route policies are modeled as Azure Resource Manager (ARM) resources under Microsoft.managednetworkfabric. They can be created, read, and deleted by operators. The operator creates a route policy resource and then applies it at the required enforcement point. A route policy can only be applied at one enforcement point at a time.
22+
Route policies are modeled as Azure Resource Manager resources under `Microsoft.managednetworkfabric`. They can be created, read, and deleted by operators. The operator creates a route policy resource and then applies it at the required enforcement point. A route policy can only be applied at one enforcement point at a time.
2323

2424
## Objective
2525

26-
Route policies are a key component of network management, as they offer control, flexibility, customization, and scalability over route distribution and modification.
26+
Route policies are a key component of network management. They offer control, flexibility, customization, and scalability over route distribution and modification.
2727

28-
Route policies allow operators to control the distribution of routes based on various criteria such as security, performance, or cost. For example, they can prevent routes from an internal network reaching the external networks of a Layer 3 isolation domain, thus enhancing security and performance, and controlling traffic flow.
28+
Route policies allow operators to control the distribution of routes based on criteria like security, performance, or cost. For example, they can prevent routes from an internal network reaching the external networks of a layer 3 isolation domain. The result is enhanced security and performance and controlled traffic flow.
2929

30-
Route policies also allow operators to modify the attributes of routes based on Border Gateway Protocol (BGP). By modifying the BGP attributes, operators can influence the path selection process in BGP and guide traffic along optimal paths.
30+
Route policies also allow operators to modify the attributes of routes based on BGP. By modifying the BGP attributes, operators can influence the path selection process in BGP and guide traffic along optimal paths.
3131

32-
Route policies offer a high degree of flexibility and customization, enabling operators to define their own conditions and actions. This enables operators to implement complex logic or custom scenarios that aren't supported by the default routing behavior in the Network Fabric.
32+
Route policies offer a high degree of flexibility and customization, which enables operators to define their own conditions and actions. Operators can then implement complex logic or custom scenarios that aren't supported by the default routing behavior in the network fabric.
3333

34-
Route policies simplify the management of large-scale networks, as they automate the process of managing routes. For example, operators can use route policies to apply consistent and uniform rules across multiple endpoints of a layer 3 isolation domain, or to update route policies in bulk using ARM templates.
34+
Route policies simplify the management of large-scale networks because they automate the process of managing routes. For example, operators can use route policies to apply consistent and uniform rules across multiple endpoints of a layer 3 isolation domain, or to update route policies in bulk by using Azure Resource Manager templates (ARM templates).
3535

36-
## Specifying the Conditions and Actions of a Route Policy
36+
## Specify the conditions and actions of a route policy
3737

38-
The conditions and actions of a route policy are specified using the IP Prefix, IP Community, and IP Extended Community resources. These resources, modeled as ARM template resources under Microsoft.managednetworkfabric, define the match criteria and the actions for the route policy based on the IP prefix, the IP community, or the IP extended community of the routes.
38+
The conditions and actions of a route policy are specified by using the IP prefix, IP community, and IP extended community resources. These resources, modeled as ARM template resources under `Microsoft.managednetworkfabric`, define the match criteria and the actions for the route policy based on the IP prefix, the IP community, or the IP extended community of the routes.
3939

40-
### IP Prefix Resource
40+
### IP prefix resource
4141

42-
This resource specifies the match conditions for route policies based on the IP prefix (IPv4 or IPv6) of the routes. It contains a list of prefixes with sequence numbers and actions (permit or deny).
42+
This resource specifies the match conditions for route policies based on the IP prefix (IPv4 or IPv6) of the routes. It contains a list of prefixes with sequence numbers and actions (`Permit` or `Deny`).
4343

44-
### IP Community Resource
44+
### IP community resource
4545

4646
This resource specifies the match conditions and actions for route policies based on the community values tagged to the routes. It contains well-known communities or custom community members.
4747

48-
### IP Extended Community Resource
48+
### IP extended community resource
4949

5050
This resource specifies the match conditions and actions for route policies based on the route targets. It contains a list of extended community values and specific properties.
5151

52-
### Condition Property
52+
### Condition property
5353

54-
The condition property of a Route Policy statement defines how routes are matched to the policy:
54+
The condition property of a route policy statement defines how routes are matched to the policy:
5555

56-
- **And**: The policy matches any route that matches **all** of the specified ipPrefixIds, ipCommunityIds, and ipExtendedCommunityIds.
56+
- `And`: The policy matches any route that matches *all* the specified `ipPrefixIds`, `ipCommunityIds`, and `ipExtendedCommunityIds` properties.
57+
- `Or`: The policy matches any route that matches *any* of the `ipPrefixIds`, `ipCommunityIds`, and `ipExtendedCommunityIds` properties.
5758

58-
- **Or**: The policy matches any route that matches **any** of the ipPrefixIds, ipCommunityIds, and ipExtendedCommunityIds.
59+
The `ipPrefixId`, `ipCommunityId`, and `ipExtendedCommunityId` properties are arrays of strings that reference the IP prefix, IP community, and IP extended community resources that define the match criteria for the route attributes.
5960

60-
The ipPrefixId, ipCommunityId, and ipExtendedCommunityId properties are arrays of strings that reference the IP Prefix, IP Community, and IP Extended Community resources that define the match criteria for the route attributes.
61+
### Action property
6162

62-
### Action Property
63+
The `action` property of a route policy statement defines the action to be taken when a route matches the policy:
6364

64-
The action property of a Route Policy statement defines the action to be taken when a route matches the policy:
65+
- `Permit`: Permit the matching route and apply `ipCommunityProperties` to the route.
66+
- `Deny`: Deny the matching route and stop the evaluation of the route policy.
67+
- `Continue`: Apply `ipCommunityProperties` to the route and continue evaluating the route policy with the next statement.
6568

66-
- **Permit**: Permit the matching route and apply the ipCommunityProperties to the route.
69+
### ipCommunityProperties property
6770

68-
- **Deny**: Deny the matching route and stop the evaluation of the route policy.
69-
70-
- **Continue**: Apply the ipCommunityProperties to the route, and continue evaluating the route policy with the next statement.
71-
72-
### ipCommunityProperties Property
73-
74-
The ipCommunityProperties property specifies how the policy affects the community values and extended community values of the route.
75-
76-
It has a set property and a delete property. The set property specifies the IP Community and IP Extended Community resources to add or overwrite to the routes. The delete property specifies the IP Community and IP Extended Community resources to remove from the routes.
71+
The `ipCommunityProperties` property specifies how the policy affects the community values and extended community values of the route.
7772

73+
It has a `set` property and a `delete` property. The `set` property specifies the IP community and IP extended community resources to add or overwrite to the routes. The `delete` property specifies the IP community and IP extended community resources to remove from the routes.

0 commit comments

Comments
 (0)