回覆: Question: ROA verification does not work properly on bird 2.0.11

Robert Scheck bird at robert-scheck.de
Mon Jan 23 17:03:12 CET 2023


On Mon, 23 Jan 2023, haima via Bird-users wrote:
> function is_rpki_invalid () { }
>         if roa_check(roa_table4, net, bgp_path.last) = ROA_INVALID then return true
>         if roa_check(roa_table6, net, bgp_path.last) = ROA_INVALID then return true;
>         return false;
> }

I might be totally wrong here, but last time I tried this approach, I
finally had to use something like this:

if (net.type = NET_IP4 && roa_check(roa_table4, net, bgp_path.last) = ROA_INVALID) then {
  …
}

if (net.type = NET_IP6 && roa_check(roa_table6, net, bgp_path.last) = ROA_INVALID) then {
  …
}


Regards,
  Robert


More information about the Bird-users mailing list