<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">Hi, Maria, <br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">Hereafter is the (very slightly
modified) full configuration. <br>
</div>
<div class="moz-cite-prefix">Please tell me if you need any more
context information about it. <br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">Regards,</div>
<div class="moz-cite-prefix">Radu</div>
<br>
<div class="moz-cite-prefix">On 5/28/25 3:04 PM, Maria Matejka
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:aDcJ3bvvoEkYzcfv@struhadlo.private.jmq.cz">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<meta charset="utf-8">
<meta name="generator" content="pandoc">
<meta name="viewport"
content="width=device-width, initial-scale=1.0, user-scalable=yes">
<style>html {
line-height: 1.2;
font-family: serif;
font-size: 0.9em;
color: black;
background-color: white;
}body {
margin: 0;
margin-right: auto;
max-width: 36em;
padding: 1em;
hyphens: auto;
overflow-wrap: break-word;
text-rendering: optimizeLegibility;
font-kerning: normal;
}p {
margin: 1em 0;
}a {
color: black;
}a:visited {
color: black;
}img {
max-width: 100%;
}h1, h2, h3, h4, h5, h6 {
margin-top: 1.4em;
}h5, h6 {
font-size: 1em;
font-style: italic;
}h6 {
font-weight: normal;
}ol, ul {
padding-left: 1.7em;
margin-top: 1em;
}li > ol, li > ul {
margin-top: 0;
}blockquote {
margin: 0.5em;
padding-left: 0.5em;
border-left: 2px solid #e6e6e6;
color: #444;
}code {
font-family: 'Lucida Console', monospace;
font-size: 95%;
margin: 0;
}pre {
margin: 1em 0;
overflow: auto;
max-width: unset;
width: fit-content;
}pre code {
padding: 0;
overflow: visible;
overflow-wrap: normal;
max-width: unset;
white-space: pre-wrap;
}pre code span {
white-space: pre;
}.sourceCode {
background-color: transparent;
overflow: visible;
}code.diff span.kw,
code.diff span.dt {
font-weight: bold;
}code.diff span.va {
background-color: rgba(192, 255, 192, 64);
color: rgb(0, 64, 0);
}code.diff span.st {
background-color: rgba(255, 192, 192, 64);
color: rgb(64, 0, 0);
}pre.diff {
background-color: rgb(240, 240, 240);
padding: 0.4em;
border: 1pt solid grey;
}hr {
background-color: black;
border: none;
height: 1px;
margin: 1em 0;
}table {
margin: 1em 0;
border-collapse: collapse;
width: 100%;
overflow-x: auto;
display: block;
font-variant-numeric: lining-nums tabular-nums;
}table caption {
margin-bottom: 0.75em;
}tbody {
margin-top: 0.5em;
border-top: 1px solid black;
border-bottom: 1px solid black;
}th {
border-top: 1px solid black;
padding: 0.25em 0.5em 0.25em 0.5em;
}td {
padding: 0.125em 0.5em 0.25em 0.5em;
}header {
margin-bottom: 4em;
text-align: center;
}code{white-space: pre-wrap;}span.smallcaps{font-variant: small-caps;}span.underline{text-decoration: underline;}div.column{display: inline-block; vertical-align: top; width: 50%;}div.hanging-indent{margin-left: 1.5em; text-indent: -1.5em;}ul.task-list{list-style: none;}q { quotes: "„" "”" "»" "«"; }.display.math{display: block; text-align: center; margin: 0.5rem auto;}</style>
<p>Which protocol originates the routes which are filtered by
<code>from_kubernetes</code>? It looks like the <code>from</code>
attribute is not set (which is probably another bug).</p>
</blockquote>
<p><br>
</p>
<div class="moz-cite-prefix">```</div>
<div class="moz-cite-prefix">router id from "-tun*", "*";<br>
<br>
filter from_kubernetes {<br>
if ( net ~ 10.0.0.0/16 ) then {<br>
ifname = "tunl0";<br>
onlink = true;<br>
gw = from;<br>
accept;<br>
}<br>
reject;<br>
}<br>
<br>
filter direct_tunl0 {<br>
if ( net ~ 10.0.0.0/16 && source = RTS_DEVICE ) then {<br>
accept;<br>
}<br>
reject;<br>
};<br>
<br>
protocol direct {<br>
debug { states };<br>
ipv4;<br>
interface "tunl0";<br>
}<br>
<br>
protocol kernel {<br>
merge paths on limit 32;<br>
learn;<br>
persist;<br>
scan time 2;<br>
ipv4 {<br>
table master4;<br>
import all;<br>
export filter from_kubernetes;<br>
};<br>
graceful restart;<br>
}<br>
<br>
protocol device {<br>
debug { states };<br>
scan time 2;<br>
}<br>
<br>
template bgp bgp_template {<br>
passive on; # Kubernetes nodes will connect to us.<br>
debug { states };<br>
password "password";<br>
local as 64512;<br>
ipv4 {<br>
import filter from_kubernetes;<br>
export filter direct_tunl0;<br>
add paths on;<br>
};<br>
graceful restart;<br>
connect delay time 2;<br>
connect retry time 5;<br>
error wait time 5,30;<br>
}<br>
<br>
protocol bgp kube_nodes from bgp_template {<br>
neighbor range 10.0.0.0/16 internal;<br>
}<br>
<br>
log syslog all;<br>
```</div>
<p><br>
</p>
</body>
</html>