January 2010 - Bird-users

BIRD in OpenWRT - patch
by Ondrej Zajicek 12 Apr '10

12 Apr '10

Hello Here is a patch for building BIRD in OpenWRT buildsystem. I hope it will be merged to OpenWRT soon. (package names are bird4, birdc4, bird6 and birdc6, not just bird). -- Elen sila lumenn' omentielvo Ondrej 'SanTiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

2 7

[patch] kernel protocol learn on FreeBSD 7
by Eugene Perevyazko 02 Mar '10

02 Mar '10

Hello bird-users readers! I'm trying to use bird on PPP access-server running FreeBSD 7. The first problem I've met was bird not learning routes that are added and removed by ppp daemon based on Radius user-data. I've made a simple patch but not sure if it is full and correct. Can anyone review it? Especially I'm not sure what should be marked as KRT_SRC_REDIRECT and what are the consequences of not using this value. --- sysdep/bsd/krt-sock.c.old 2009-11-09 17:42:47.000000000 +0200 +++ sysdep/bsd/krt-sock.c 2009-11-09 17:48:58.000000000 +0200 @@ -269,6 +269,8 @@ int src; int flags = msg->rtm.rtm_flags; int addrs = msg->rtm.rtm_addrs; + pid_t sender_pid = msg->rtm.rtm_pid; + pid_t my_pid; int masklen = -1; if (!(flags & RTF_UP)) @@ -375,6 +377,12 @@ } src = KRT_SRC_UNKNOWN; /* FIXME */ + src = KRT_SRC_ALIEN; + my_pid = getpid(); + if (sender_pid == my_pid) + { + src = KRT_SRC_BIRD; + } e = rte_get_temp(&a); e->net = net; +++ sysdep/cf/bsd.h.old 2009-11-09 18:06:53.000000000 +0200 --- sysdep/cf/bsd.h 2009-11-09 17:38:21.000000000 +0200 @@ -7,7 +7,7 @@ */ #define CONFIG_AUTO_ROUTES -#undef CONFIG_SELF_CONSCIOUS +#define CONFIG_SELF_CONSCIOUS #undef CONFIG_MULTIPLE_TABLES #undef CONFIG_UNIX_IFACE -- Eugene Perevyazko

2 7

New release 1.2.0
by Ondrej Filip 26 Feb '10

26 Feb '10

Hi! New version is ready. Santiago made a great job in bugfixing my very old code. And he added OSPFv3. :-) Version 1.2.0 (2010-01-05) o Implements OSPFv3 (IPv6 support for OSPF). Because the code is shared with OSPFv2 and there were deep changes in it, we suggest caution during upgrade to OSPF users. Some advanced features (like NSSA, vlinks and authentication) are not yet implemented. o Implements MRTdump - binary logging protocol compatible with other routing daemons. Only BGP part of MRTdump is yet implemented. o Changes default value of BGP attribute LOCAL_PREF from 0 to 100. Use 'default bgp_local_pref 0' BGP protocol option for the old behavior. The new value is suggested by RFC 4277. o Changes default mode of pipes from opaque to transparent. Use 'mode opaque' protocol option if the old behavior is needed. Opaque pipe mode is deprecated and might be removed in the future. All distro packages will follow soon. Ondrej

3 3

Re: [Euro-ix-rs-vwg] New release 1.2.0
by Ondrej Zajicek 01 Feb '10

01 Feb '10

On Mon, Jan 25, 2010 at 07:12:50PM +0300, Mikhail A. Grishin wrote: > Ondrej Zajicek ?????: >> On Mon, Jan 25, 2010 at 03:15:14PM +0300, Mikhail A. Grishin wrote: >>> Yes, we had some filters on pipes for every client. >>> Upon your explanation, we transfered filters from pipes to the >>> "protocol bgp" section of the config. >>> >>> Now "show protocols all" output shows all needed information. >> >> Just a note that moving filters from pipes to bgp protocols have several >> other consequences, some positive, some negative: >> >> 1) You see just what is accepted and you cannot directly see rejected routes >> (but they can be seen in log, if enabled). > > Yes, we planned for that case temporary transfer filters back to pipes > for some peer... But if it could be done by logs, may be you can show an > example? You can use 'debug { filters }' in a bgp protocol section and it will log all routes in filters of that bgp protocol. > Very valuable info for us! > In general, we want to minimize causes of restarting BGP sessions with > our clients. > Is this task (new behavior of 'configure' command) have a good priority > for developers? Other IXes that use BIRD use (AFAIK) 'configure soft' and 'reload' approach, so it was not a big demand for this change yet. But it should not be hard to do that change and i would like to have this change soon. > One more question, about routes with "no-export" community == > ((65535,65281)) > > We need to transparently advertise such routes through RS to RS clients. > > We try to transparently advertise, these routes seen in 'show routes > all', and in 'show routes all table Tanother_peer', but peer > 'another_peer' doesn't receive routes with community (65535,65281). Handling of no-export community is hardcoded in BIRD, so such routes are not exported to the external neighbors, as it is expected. I can send you a patch that causes BIRD to ignore well-known communities (and leaves such behavior to configured filters) and we will make this behavior configurable in the next version. -- Elen sila lumenn' omentielvo Ondrej 'SanTiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

2 13

Re: [Euro-ix-rs-vwg] New release 1.2.0
by Ondrej Zajicek 26 Jan '10

26 Jan '10

On Fri, Jan 22, 2010 at 12:14:51AM +0300, Alexander Ilin wrote: > > The line with 'Routes:' is probably what you want. > > Hi Ondrej. > > You are not right - these values are not the same. Look at our output: These values should be the same. It is strange that they are not in your case. But i see that your R15835x1 is connected to table T15835, but you run 'show' command on table master. What if you use command: show route protocol R15835x1 table T15835 count it is the same as the value in 'show protocols all' ? -- Elen sila lumenn' omentielvo Ondrej 'SanTiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

2 5

Re: [Euro-ix-rs-vwg] New release 1.2.0
by Ondrej Zajicek 25 Jan '10

25 Jan '10

On Mon, Jan 25, 2010 at 03:15:14PM +0300, Mikhail A. Grishin wrote: > Yes, we had some filters on pipes for every client. > Upon your explanation, we transfered filters from pipes to the "protocol > bgp" section of the config. > > Now "show protocols all" output shows all needed information. Just a note that moving filters from pipes to bgp protocols have several other consequences, some positive, some negative: 1) You see just what is accepted and you cannot directly see rejected routes (but they can be seen in log, if enabled). 2) Rejected routes does not eat memory. 3) If you change filters and call 'configure', the appropriate protocol si restarted. If it is a pipe, it causes a route flap (routes propagated through the pipe a withdrawn and immediately repropagated), if it is a bgp protocol, it also causes a session flap (BGP session is restarted). Possible workaround is to use 'configure soft' command (which ignores changes related to filters) and then 'reload' command for protocols with changed filters. We will change the behavior of 'configure' command to do this automatically in next versions. -- Elen sila lumenn' omentielvo Ondrej 'SanTiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

1 0

Re: [Euro-ix-rs-vwg] New release 1.2.0
by Ondrej Zajicek 22 Jan '10

22 Jan '10

On Fri, Jan 22, 2010 at 10:18:24AM +0300, Alexander Ilin wrote: > On Thu, Jan 21, 2010 at 11:09:52PM +0100, Ondrej Zajicek wrote: > > On Fri, Jan 22, 2010 at 12:14:51AM +0300, Alexander Ilin wrote: > > > > The line with 'Routes:' is probably what you want. > > > > > > Hi Ondrej. > > > > > > You are not right - these values are not the same. Look at our output: > > > > These values should be the same. It is strange that they are not in your case. > > But i see that your R15835x1 is connected to table T15835, but you run 'show' > > command on table master. What if you use command: > > > > show route protocol R15835x1 table T15835 count > > > > it is the same as the value in 'show protocols all' ? > > Hi Ondrej, thanks for a fast reply. Really, your command show another amount > of prefixes, Is that value the same as the value in 'show protocols all' ? > but we want to see amount of prefixes, that accepted from peer, > and as we could see ' show route protocol R15835x1 count' show exactly amount > of prefixes, that accepted from peer. So, I have two questions: > > 1. Could you help us to understood what is the difference between the commands > and why we see a little bit more prefixes with 'show route protocol R15835x1 > table T15835 count' instead of 'show route protocol R15835x1 count' ? In your BIRD config, there are several routing tables and pipes between them. Prefixes accepted from protocol R15835x1 are put to table T15835 and then they are propagated through some pipe to table master. The difference between the commands is that each show the number of prefixes in the different table. I am not sure why there is any difference, perhaps you have some configured filter on that pipe? > 2. Are there any way to see amount of accepted prefixes (show route protocol > R15835x1 count) in show protocols all? You can look at 'Routes: ' line in 'show protocols all' not for R15835x1 but for the pipe connecting T15835 and master. But this is also something slightly different (if there is more protocols connected to table T15835) and statistics for pipes works in one direction only (which is a bug and will be fixed). -- Elen sila lumenn' omentielvo Ondrej 'SanTiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

1 0

Re: [Euro-ix-rs-vwg] New release 1.2.0
by Ondrej Zajicek 21 Jan '10

21 Jan '10

On Thu, Jan 21, 2010 at 06:41:15PM +0300, Mikhail A. Grishin wrote: > Hi, > > Another one question regarding looking glass output. > Is it possible to show current prefix count in 'show protocols' output? > > Right now, if we want to collect prefix counters, we need to apply 'show > route protocol R1234x1 count' commands for every router which has > "Established" state in 'show protocols' output. > You can use 'show protocols all' command: ospf1 OSPF master up Jan07 Running Preference: 150 Input filter: ACCEPT Output filter: REJECT Routes: 1 imported, 0 exported, 0 preferred Route change stats: received rejected filtered ignored accepted Import updates: 4 0 0 3 1 Import withdraws: 0 0 --- 0 0 Export updates: 2 1 1 --- 0 Export withdraws: 0 --- --- --- 0 The line with 'Routes:' is probably what you want. -- Elen sila lumenn' omentielvo Ondrej 'SanTiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

1 0

Re: [Euro-ix-rs-vwg] New release 1.2.0
by Ondrej Zajicek 21 Jan '10

21 Jan '10

On Tue, Jan 19, 2010 at 12:54:43PM +0300, Mikhail A. Grishin wrote: > About full time and date info in "show" output -- yes, please send to us > the patch. And thank you very much for it! Here is one. > Do you have a plans to integrate that patch in main source code in the > future releases? We will probably implement soome configurable time format. > About running the BIRD as "non-root" uid: We'll wait for stable > solution. If it requires big changes in source codes (or not so big in > RS case), we think that quick patches can reduce the overall stability > of the product and should be well-tested. OK > P.S. MSK-RSM2, that running BIRD for IPv4, is stable and we didn't see > any major issues. That is nice. -- Elen sila lumenn' omentielvo Ondrej 'SanTiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

1 0

Setting up anycast DNS using bird
by K Storbeck 19 Jan '10

19 Jan '10

Fellow birdwatchers, We're running a set of resolvers here using an anycast setup. We currently do this on FreeBSD using openbsd's bgpd. Bgpd is started with a bare config defining the local as, the neighbor and its as. After starting up our DNS servers on a local dummy0 interface, and we're confident that they work, we're using bgpctl (openbgp's CLI) to announce one or more prefixes. So far I have a working setup, but I'm not completely satisfied: log syslog {info, warning, error, fatal, debug, trace, remote, auth}; log "/var/log/bird.log" all; router id 192.168.1.1; listen bgp address 192.168.1.1 port 179; protocol kernel { persist; # Don't remove routes on BIRD shutdown scan time 20; # Scan kernel routing table every 20 seconds } protocol device { scan time 10; # Scan interfaces every 10 seconds } # only guesswork here: I'm presuming this scans all dummy interfaces, and looks what is up and configured? protocol direct { interface "dummy*"; } protocol bgp { debug all; local as 65516; neighbor 192.168.1.2 as 3265; source address 192.168.1.1; # again: guesswork, does this announce all 'protocol direct' stuff? export all; } My preference would be to explicitly list the prefixes that I want to announce, not having to rely on what I'm really configuring on my linux dummy interface. Is that coming, or did I misinterpret the docs? I'd love to setup a v4 and a v6 bgp session with 1 daemon, since my DNS software is fine with it. Do I understand it correctly that this currently isn't possible? Regards, Kai

3 2