May 2010 - Bird-users - Mailing Lists

input filter function <NULL>
by Arjan Filius 27 May '10

27 May '10

Hello bird-users, another question, using bird 1.2.2 defined a function: function bgp_in(int peeras) { # enforce the presence of the peer AS as the first AS of the path if !(bgp_path.first = peeras) then return false; # basic sanity checks if (invalid_prefix()) then return false; return true; } invalid_prefix() is another function started to use the function like: # definition define MYNEIGBORDEFINITIONAS = xxxx; in the bgp protocol definition: import where bgp_in(MYNEIGBORDEFINITIONAS); export filter bgp_out; now, when i do a "birdc# show protocols all" i see a: Input filter: <NULL> Output filter: bgp_out I wasn't expecting a <NULL> here. Is that usual for a function in import, or is it because i do something wrong? Thanks in advance, -- Arjan Filius mailto:iafilius@xs4all.nl

2 1

Adding and deleting communities...
by Simone Morandini 26 May '10

26 May '10

Hi all, I need your help to understand what I'm missing... One of the rs clients sends a route with no-export community, so I have to strip it on ingress and re-attach it on egress. I thought I have two alternatives: using "interpret community no" in the bgp table of the peer, or playing with bgp_community.add and delete. I would expect to receive a "duplicate" network on my peering router, one learned via the direct peering and one learned via the route server. So far I only see the network from the direct peering. Relevant part of the config file: protocol pipe P_MYPEER { table master; mode transparent; peer table T_MYPEER; export where bgp_out(<mypeer>) = true; import where bgp_mypeer_in(<mypeer>) = true; } in the bgp_mypeer_in function, after checking that it is a legitimate network for that peer, I added: bgp_community.delete ((65535, 65281)); just before the final "return true". in the bgp_out function, after checking if a filtering community is set, I added: if (bgp_path.first = <mypeer>) then bgp_community.add ((65535, 65281)); just before the final "return true". I also set "interpret community no" in protocol bgp MYPEER. If I issue a "show route where bgp_path.first=<my-peer> all" I see that the no-export community is actually being stripped, but I still see one network on my peering router (sh ip bgp regexp ^<mypeer>, via the direct peering). TIA for any help, Simone. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 4

choice version (ubuntu 10.04 LTS) native or ppa/latest greatest ?
by Arjan Filius 25 May '10

25 May '10

Hello, i'm configuring 2 ubuntu 10.05 LTS bgp (production) servers for eBGP/iBGP standard bird version is : 1.1.5-1 i saw there are quite some newer version already, and even a ppa version is created on https://launchpad.net/~ondrej/+archive/bird latest version there 1.2.2-1~lucid+1 which is also the latest on bird.network.cz. as the 1.1.5-1 is almost a year old i can imagine it is preferred to have a later version installed. has anyone an (strong) opininion/advice what to take for a new bgp setup? Regards, -- Arjan Filius mailto:iafilius@xs4all.nl

2 2

iBGP over redundant link/ospf and dummy interface
by Arjan Filius 25 May '10

25 May '10

Hello bird users. new on the list. What i like to do is a bird (linux) doing iBGP with another bird bgp router, direct connected with 2 links (for redundancy) until now, i wanted to do this with a single iBGP session to/from IP's configured on a dummy(loopback) interface, and let a simple ospf handle this. iBGP should then become multihop, and there starts my trouble. My gateway (neigbour iBGP) is dynamic (ospf) and bird likes to have a predefined one. My questions: 1)am i on the right track with ospf handling the local redundancy/routing ? 2)or is it perhaps a better idea to have to iBGP sessions over both (redundant) links ? Another question, not related. this morning i found my disk full (bird debug logging), and noticed my ubuntu 10.04 TLS didn't handle that. is there a preferred way to handle logrotte/reopen logfiles without any change distubing the bird/bgp proces? Regards, and thanks in advance. -- Arjan Filius mailto:iafilius@xs4all.nl

2 3

rpsltool templates for BIRD route servers
by md＠Linux.IT 24 May '10

24 May '10

I released a new version of rpsltool[1] which contains an example configuration file and template for generating the complete configuration of a BIRD route server. (There is an OpenBGPd template as well, does anybody want to contribute one for quagga?) It has been used in production at MINAP[2] for more than one month, and at least by another IX as well. rpsltool is a program which can be used to generate the complete BGP configuration of a router using a template, a configuration file containing the list of peers (in YAML, a simple and human-readable serialization format) and IRR data. It is usually used to generate the BGP configuration and filters of IX peerings sessions, but it can used for customer sessions or a route server as well. Just like irrtoolset, except that it is made of 1500 lines of perl instead of tens of thousands of C++. [1] http://www.linux.it/~md/software/rpsltool-1.5.tgz [2] http://www.minap.it/ the other IX in Milano -- ciao, Marco

3 7

BIRD OSPF floods illegal LSA seq no 0x80000000 after premature aging
by Dennis Koegel 24 May '10

24 May '10

Cheers, we have reproducible case in the lab where BIRD's OSPF sends LSUPDs with illegal sequence number 0x80000000. Here's what happens: - The OSPF is up and running fine, including BIRD - A change to bird.conf is made that affects OSPF routes - BIRD receives a SIGHUP - Apparently as part of reconfiguration, BIRD floods LSAs with MaxAge and MaxSequenceNumber 0x7fffffff (premature aging -- so far ok) - Immediately after that, but before any other OSPF packet is received (!), BIRD floods the same LSAs again, but with an Age of 2 or 3 (NOT MaxAge) and sequence number 0x80000000 We have a capture file (pcap) of this. If this is any help, I'm happy to e-mail it. The bug here is that sequence number 0x80000000 is reserved and not to be used (RFC 2328, section 12.1.6). As far as I can see, originate_ext_lsa() is called and simply looks up a matching entry in its database (*en). It finds the previously- originated entry with 0x7fffffff, blindly increments it to 0x80000000 (proto/ospf/topology.c:990) and then floods it.

2 3

Multiple BIRD instances on the same machine
by Simone Morandini 19 May '10

19 May '10

Dear all, is it possible to "split" BIRD and use the same physical machine as a route server on two separate LANs? If yes, how can I do it? If feasible, is it something that is discouraged? Thanks, Simone. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

3 2

[PATCH 1/2] flex: Avoid REJECT name conflict.
by Joakim Tjernlund 17 May '10

17 May '10

REJECT is a reserved word in flex and REJECT is also used as %token in bison grammar. Rename REJECT to Reject in bison grammar to avoid name conflict. Same thing for ECHO but that does not seem to cause any conflicts ATM so leave as is. Also delete some dead code in flex output by using the apropiate %option statements. Signed-off-by: Joakim Tjernlund <Joakim.Tjernlund(a)transmode.se> --- conf/cf-lex.l | 5 +++-- filter/config.Y | 4 ++-- proto/static/config.Y | 4 ++-- 3 files changed, 7 insertions(+), 6 deletions(-) diff --git a/conf/cf-lex.l b/conf/cf-lex.l index 3fe3c2e..6612d3c 100644 --- a/conf/cf-lex.l +++ b/conf/cf-lex.l @@ -25,7 +25,6 @@ */ %{ -#undef REJECT /* Avoid name clashes */ #include <errno.h> #include <stdlib.h> @@ -71,12 +70,14 @@ linpool *cfg_mem; int (*cf_read_hook)(byte *buf, unsigned int max); #define YY_INPUT(buf,result,max) result = cf_read_hook(buf, max); -#define YY_NO_UNPUT + #define YY_FATAL_ERROR(msg) cf_error(msg) %} %option noyywrap +%option nounput +%option noinput %x COMMENT CCOMM CLI diff --git a/filter/config.Y b/filter/config.Y index 7723658..cab5dbe 100644 --- a/filter/config.Y +++ b/filter/config.Y @@ -28,7 +28,7 @@ static int make_pair(int i1, int i2) CF_DECLS CF_KEYWORDS(FUNCTION, PRINT, PRINTN, UNSET, RETURN, - ACCEPT, REJECT, ERROR, QUITBIRD, + ACCEPT, Reject, ERROR, QUITBIRD, INT, BOOL, IP, PREFIX, PAIR, QUAD, SET, STRING, BGPMASK, BGPPATH, CLIST, IF, THEN, ELSE, CASE, TRUE, FALSE, @@ -506,7 +506,7 @@ term: break_command: QUITBIRD { $$ = F_QUITBIRD; } | ACCEPT { $$ = F_ACCEPT; } - | REJECT { $$ = F_REJECT; } + | Reject { $$ = F_REJECT; } | ERROR { $$ = F_ERROR; } | PRINT { $$ = F_NOP; } | PRINTN { $$ = F_NONL; } diff --git a/proto/static/config.Y b/proto/static/config.Y index a7e5016..20f07ed 100644 --- a/proto/static/config.Y +++ b/proto/static/config.Y @@ -16,7 +16,7 @@ static struct static_route *this_srt; CF_DECLS -CF_KEYWORDS(STATIC, ROUTE, VIA, DROP, REJECT, PROHIBIT, PREFERENCE) +CF_KEYWORDS(STATIC, ROUTE, VIA, DROP, Reject, PROHIBIT, PREFERENCE) CF_GRAMMAR @@ -54,7 +54,7 @@ stat_route: add_tail(&((struct static_config *) this_proto)->iface_routes, &this_srt->n); } | stat_route0 DROP { this_srt->dest = RTD_BLACKHOLE; } - | stat_route0 REJECT { this_srt->dest = RTD_UNREACHABLE; } + | stat_route0 Reject { this_srt->dest = RTD_UNREACHABLE; } | stat_route0 PROHIBIT { this_srt->dest = RTD_PROHIBIT; } ; -- 1.6.4.4

7 37

Send community
by Simone Morandini 14 May '10

14 May '10

Hi all, is it possible to send a specific community from a given RS participant to another RS partecipant? Thanks, Simone. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 1

Malformed AS_PATH
by Simone Morandini 10 May '10

10 May '10

Hi all, I've just started playing around with BIRD: I configured a server with v. 1.2.1 Simple configuration, just to test, with 2 routers: one is ours, the other is a member's router. From what I see, the session between the member and the RS is ok, while the session between our router and the RS cannot be established. The logfile says: 07-05-2010 15:33:43 <RMT> MIX: Received: Malformed AS_PATH: 4002040201315d and birdc says: bird> show protocols all MIX name proto table state since info MIX BGP T_MIX start 15:33 Idle Received: Malformed AS_PATH Description: MIX Preference: 100 Input filter: ACCEPT Output filter: ACCEPT Routes: 0 imported, 0 exported, 0 preferred Route change stats: received rejected filtered ignored accepted Import updates: 0 0 0 0 0 Import withdraws: 0 0 --- 0 0 Export updates: 0 0 0 --- 0 Export withdraws: 0 --- --- --- 0 Pipe protocols are declared in transparent mode. On my peering router the session with the RS goes from Idle to Active, than Idle again. The route server is currently configured with a private AS, but I think it shouldn't be a problem. Thanks in advance, Simone. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 2