Networking Basics · 7
🗺️ How Routing Works
How data finds its way across the entire internet⏱ ~3 min
🧭Routers are like GPS navigation
When you drive from New York to Los Angeles, your GPS doesn't have one single road — it picks the best route based on current traffic, road quality, and distance. A router does the same thing with data packets: it looks at the destination IP, checks its 'map' (routing table), and forwards the packet toward the best next stop. It doesn't deliver it all the way — it just passes it to the next router, which does the same thing.
The Routing Table — the router's map
Every router holds a routing table: a list of known networks and which direction to send packets for each. When a packet arrives, the router matches the destination IP to the most specific route in the table.
| Destination | Next Hop | Interface | How learned |
|---|---|---|---|
| 192.168.1.0/24 | Directly connected | eth0 | Connected |
| 10.0.0.0/8 | 192.168.1.254 | eth0 | Static |
| 172.16.0.0/12 | 192.168.1.253 | eth0 | OSPF |
| 0.0.0.0/0 | 203.0.113.1 | eth1 | Default gateway |
Static vs Dynamic Routing
Static Routing
- •Admin manually enters every route
- •Predictable — no surprises
- •Zero overhead — no routing protocol traffic
- •Breaks if network changes (no auto-update)
- •Perfect for: small networks, point-to-point links
Dynamic Routing
- •Routers share route info automatically
- •Self-healing — adapts to failures in seconds
- •Small overhead for protocol messages
- •Scales to massive networks
- •Perfect for: enterprise, ISPs, the internet
The Three Routing Protocols That Matter
- •🏢 OSPF (Open Shortest Path First) — the most widely used Interior Gateway Protocol (IGP). Each router builds a complete map of the network (called the LSDB — Link State Database) and uses Dijkstra's algorithm to calculate the shortest path. Open standard, supported by all vendors. Fast failover — reroutes around failures in seconds. Used in enterprise networks and data centers.
- •⚡ EIGRP (Enhanced Interior Gateway Routing Protocol) — originally Cisco-proprietary; Cisco announced plans to open it in 2013 and it was formally published as an informational standard (RFC 7868) in 2016. A hybrid protocol that combines the best of distance-vector and link-state: it only sends updates when something changes (not full table dumps), converges extremely fast, and uses bandwidth and delay as its primary metrics. EIGRP is common in Cisco-heavy enterprise networks and is a key topic in CyberPatriot's Cisco Networking challenge and Cisco certifications (CCNA).
- •🌍 BGP (Border Gateway Protocol) — the protocol that runs the entire internet. Every ISP, cloud provider, and large company uses BGP to announce which IP ranges they own. Unlike OSPF and EIGRP (which optimize for speed), BGP makes routing decisions based on policies — business agreements between networks. When BGP fails, huge parts of the internet go down (see: Facebook 2021 outage).
| Protocol | Type | Used Where | Metric | Convergence |
|---|---|---|---|---|
| OSPF | Link-state (open standard) | Enterprise, data centers | Cost (based on bandwidth) | Fast — seconds |
| EIGRP | Hybrid (Cisco, partially open) | Cisco enterprise networks, CyberPatriot | Bandwidth + Delay | Very fast — sub-second |
| BGP | Path-vector (policy-based) | The internet — between ISPs and cloud providers | AS path + policies | Slow by design — minutes |
★ FactThe 2021 Facebook outage was caused by a BGP misconfiguration. Facebook accidentally withdrew its own BGP routes — effectively telling the entire internet 'we don't exist.' For 6 hours, Facebook, Instagram, and WhatsApp were completely unreachable — even internally. Facebook engineers couldn't even badge into the buildings because the door access systems were offline.
🔒 SecurityBGP Hijacking is one of the most dangerous attacks on the internet. An attacker (or misconfigured router) announces fake ownership of IP ranges, redirecting traffic through their systems. In February 2008, Pakistan Telecom accidentally announced a more specific BGP route for YouTube's IP space, pulling YouTube's global traffic through Pakistani infrastructure and taking the site offline worldwide for roughly two hours. RPKI (Resource Public Key Infrastructure) was developed specifically to prevent this — it lets networks cryptographically prove they own the IP ranges they announce.
🧠Quick Checkfirst try = +5 XP
A company's main router fails. With OSPF enabled, what happens to network traffic?
🎮 Practice what you learned
⭐ 0 XP🔥 0 days