Core Router: Role, Architecture and Design Rules

01 /Core versus edge and aggregation

Routers are named for their position. Edge routers terminate customers and services: access lists, NAT, VPN termination, per-customer VRFs. Aggregation routers collect many edge devices into a few high-speed uplinks. The core connects aggregation points to each other and to peering and transit, with the fewest devices, the highest port speeds and the shortest feature list. Policy belongs at the edge; the core only forwards, so nothing on it changes when a customer changes.

02 /Forwarding plane versus control plane

The control plane runs the protocols: OSPF or IS-IS inside, BGP outside, LDP or RSVP for MPLS, plus management, and produces a routing table (RIB) on the management CPU. The forwarding plane receives a compiled version (the FIB) and does the per-packet work in ASICs on each line card, without the CPU touching packets; that distribution is what lets a chassis scale to terabits. A core router has a forwarding plane fast enough that every port runs at full speed at once, called line rate, and protects its control plane so a flood of unusual packets cannot starve it.

03 /Chassis versus fixed

04 /Redundancy that matters

• Dual management modules with state synchronisation, so losing the active module does not reset forwarding or BGP sessions.
• N+1 power from separate feeds; confirm a full chassis with one supply failed still meets total draw.
• Redundant switch fabric, so a failed fabric card degrades capacity rather than isolating line cards.
• Two of everything at the topology level: two core routers, two paths between any pair of aggregation points, no single link or building whose loss partitions the network.
• Hitless software upgrade, or a tested procedure for failing over to the second core while patching the first.

05 /Route table scale

A provider core carrying the full internet table holds more than a million IPv4 prefixes plus a growing IPv6 table, each needing a FIB entry in fast memory on every line card. That memory sets a hard ceiling; mid-2000s routers sized for 256k or 512k routes had to be replaced or filtered as the table crossed those marks. Enterprise cores carrying only internal and default routes need a small fraction of that and can use switch-class hardware. Plan for the table size at end of life, not at purchase.

06 /Collapsed core and data centre core

Most enterprises do not need three tiers. A collapsed core merges core and distribution into one redundant pair of Layer 3 switches that terminate the closet VLANs, run VRRP for gateways, route between them and connect to the firewall and WAN. It saves a tier and suits up to a few thousand users. The limit is blast radius: any change to the pair touches everything, and the pair must carry both distribution policy and core throughput.

Data centre cores changed shape in the 2010s. The two-router core above rows of aggregation switches gave way to leaf-and-spine fabrics: every leaf connects to every spine, equal-cost multipath spreads flows across all paths, and no spine is special. The spine is the core in all but name: routed links, no spanning VLANs, line rate, no policy. The rules are unchanged: simple, redundant, fast.

07 /Foundry heritage: NetIron and BigIron cores

Foundry launched the NetIron 400 and 800 around 1999 and 2000 as internet core routers with full BGP tables and wire-speed chassis forwarding, when incumbent core routers were expensive and comparatively slow. The BigIron chassis served as the enterprise and data centre core; the original site carried a data centre core solutions page built around it. The NetIron MLX and XMR, around 2005 to 2007, brought 10 Gbit/s density and MPLS to provider cores and outlived the Brocade acquisition by years.

show chassis
show module
show redundancy
show ip route summary
show ip bgp summary