Overview
| Type | Description | Use Case |
|---|---|---|
| Static Routing | Administrator manually defines routes | Small networks, lab setups, or edge routing with predictable paths |
| Dynamic Routing | Routers exchange routes automatically using protocols (e.g. OSPF, BGP) | Large, scalable, or frequently changing environments |
Static Routing
Static routes are manually configured and do not change unless the admin modifies them. They’re predictable and simple but don’t adapt to network failures automatically.Advantages
Full Control
No route advertisement leaks
Low Overhead
Minimal CPU/RAM, no protocol chatter
Easy Auditing
You know every path explicitly
Disadvantages
No Failover
No automatic failover
High Admin Overhead
High admin overhead at scale
Error Prone
Prone to human error (typos, forgotten updates)
Configuration Examples
- Linux
- Cisco IOS
Dynamic Routing
Dynamic routing protocols learn and share routes automatically. They detect network changes and reroute traffic when links fail — ideal for large, redundant topologies.Common Protocols
| Protocol | Type | Notes |
|---|---|---|
| RIP | Distance-vector | Obsolete; max 15 hops; good for labs |
| OSPF | Link-state | Hierarchical; ideal for enterprise LANs |
| EIGRP | Hybrid | Cisco-proprietary (now partially open) |
| BGP | Path-vector | Used for ISPs, multi-site, and AWS Transit Gateway |
Advantages
Auto-learns Topology
Automatically learns network topology
Failover Support
Supports failover and load balancing
Lower Admin Work
Reduces admin workload
Disadvantages
Complexity
More complex to configure and troubleshoot
Resource Usage
Consumes CPU/RAM for routing table updates
Misconfig Risk
Protocol misconfigurations can propagate quickly
Configuration Examples
- Cisco - OSPF
- Linux - OSPF (FRRouting)
AWS VPC Routing
| Type | Description | Example |
|---|---|---|
| Static Route | Added manually to route table | 10.0.2.0/24 → nat-0abc12345 |
| Dynamic Route | Propagated from VPN / Direct Connect / TGW | Automatically updates with BGP peers |
AWS route propagation uses BGP under the hood when connected via VPN or Direct Connect gateways.
When to Use Which
| Scenario | Recommended |
|---|---|
| Small lab / testbed | Static |
| Branch offices with few routes | Static or OSPF stub |
| Multi-site enterprise | OSPF / EIGRP |
| Internet peering, cloud hybrid | BGP |
| AWS VPCs with VPN or TGW | Dynamic (BGP propagation) |
Security Considerations
Disable Unused Protocols
Disable unused routing protocols (
no router rip if not in use)Authenticate Neighbors
Authenticate OSPF or BGP neighbours (MD5 / keychain)
Filter Advertisements
Filter route advertisements (prefix-lists, route-maps)
Prevent Route Leaks
Avoid default route leaks in hybrid environments