Glossary

IGMP Snooping

Internet Group Management Protocol Snooping

What is IGMP Snooping

IGMP Snooping (Internet Group Management Protocol Snooping) is a Layer 2 multicast protocol that switches use to manage and control multicast traffic on a local network. Its core job is to optimize how multicast traffic is forwarded across a switched (Layer 2) network.

Without IGMP Snooping, multicast traffic is flooded to every port in the broadcast domain, regardless of whether the connected host actually wants it. Every device on the segment receives the traffic, wasting bandwidth and creating unnecessary exposure to data it never asked for — a real problem in networks carrying multicast video conferencing, IPTV, or market-data feeds.

IGMP Snooping solves this by having the switch listen in on ("snoop") the IGMP messages exchanged between Layer 3 multicast routers and hosts. By reading these messages, the switch learns which ports have interested receivers and builds a Layer 2 multicast forwarding table, so multicast traffic is delivered only to the ports that actually asked for it.

How IGMP Snooping Works

IGMP Snooping is built on top of IGMP, so understanding it starts with the underlying protocol.

IGMP has three versions in common use — IGMPv1 (RFC 1112), IGMPv2 (RFC 2236), and IGMPv3 (RFC 3376) — each adding more control. All three share four basic message types: general queries (routers periodically asking who's still listening), group-specific queries (checking whether a group still has members after a leave), membership reports (hosts declaring or confirming group membership), and leave-group messages (IGMPv2+, hosts explicitly announcing they're leaving a group).

On top of these messages, a switch running IGMP Snooping builds and maintains two key concepts:

  • Router ports: the ports connecting toward the multicast router or querier — learned dynamically from received queries or PIM Hello messages, or configured statically.

  • Member ports: the ports connecting toward hosts that want a given multicast group — learned dynamically from membership reports, or configured statically.

Using these, the switch assembles a Layer 2 multicast forwarding table that maps each multicast group address to its member ports, ages out entries dynamically as hosts leave, and forwards matching multicast traffic only to those ports — while everything is still sent, unmodified, to the router ports so the upstream Layer 3 topology stays correct.

Two extensions build on this base mechanism:

  • IGMP Snooping Querier: In pure Layer 2 networks or networks with statically configured forwarding, there's no Layer 3 device sending IGMP queries. An IGMP Snooping Querier lets the switch itself generate general and group-specific queries, so the Layer 2 forwarding table can still be built and maintained correctly.

  • IGMP Snooping Proxy: In networks with many hosts, forwarding every individual report and leave message upstream creates unnecessary load on the router. An IGMP Snooping Proxy has the switch act as a single host toward the upstream router — consolidating reports and leaves from multiple downstream hosts into a single, deduplicated exchange — while still acting as a querier toward its downstream hosts.

Why IGMP Snooping is Beneficial

  • Eliminates unnecessary multicast flooding: Traffic reaches only the ports that actually joined a group, instead of every port on the VLAN, freeing up bandwidth for other traffic.

  • Reduces unwanted data exposure: Hosts that never joined a multicast group simply don't receive its traffic, which limits unnecessary exposure to data they have no reason to see.

  • Works in both Layer-2-only and Layer-3-integrated networks: A Snooping Querier lets pure Layer 2 segments maintain accurate forwarding state on their own, while a Snooping Proxy reduces the IGMP message load a router has to process when many hosts sit behind a switch.

  • Standards-based interoperability: IGMP Snooping's behavior is documented in RFC 4541, so it interoperates predictably with any standards-compliant multicast router or querier.

  • Purpose-built for multicast-heavy environments: IPTV, video conferencing, live-streaming distribution, and multicast market-data feeds all depend on efficient, receiver-aware forwarding — exactly what IGMP Snooping is designed to provide.

At Asteraix

What We Can Do at Asteraix

AsterNOS delivers a complete IGMP Snooping implementation as part of the same open, SONiC-based operating system running across the Asterfusion switch portfolio — no separate multicast appliance needed.

  • Full protocol coverage: AsterNOS supports snooping for IGMPv1, IGMPv2, and IGMPv3, so it correctly builds and maintains Layer 2 forwarding state regardless of which IGMP version the hosts and routers on the network are running.

  • IGMP Snooping Querier for pure Layer 2 networks: When a segment has no Layer 3 querier — or forwarding entries are statically configured — AsterNOS can generate general and group-specific queries itself, keeping the Layer 2 multicast forwarding table accurate without any upstream router involvement.

  • IGMP Snooping Proxy to offload upstream routers: AsterNOS can consolidate membership reports and leave messages from many downstream hosts into a single exchange with the upstream router, cutting the IGMP processing load on routers in networks with a large number of multicast receivers.

  • Flexible router-port and member-port control: Both dynamic (learned) and static (manually configured) router ports and member ports are supported, giving network operators precise control in mixed dynamic/static multicast deployments.

  • Fits both typical deployment models: AsterNOS supports IGMP Snooping in Layer 3 multicast networks (working alongside PIM on the upstream router) and in pure Layer 2 multicast networks (using the Snooping Querier), covering the two most common multicast topologies operators run today.