May 2011 - Bird-users - Mailing Lists

[patch] permit including other files in bird.conf
by Alexander V. Chernikov 13 May '11

13 May '11

Hello list! bird filters/functions are very powerful mechanism for managing route announces and redistribution. However, building complicated filters or/and applying filters on peers based on RIPE (or MERIT, or ..) database makes bird.conf grow very fast. Additionally, all this machine-generated stuff needs to be in the beginning since config parser requires filters to be defined _before_ using them. As a result, human re-configuration becomes more complicated. Proposed solution is to add include directive to permit (recursive) include of other files from bird[6].conf. Patch is attached, comments/reviews are welcome. http link: http://static.ipfw.ru/patches/bird_includes_20110513.diff -- WBR, Alexander MELI-RIPE

1 0

Directory name clash.
by Lars-Johan Liman 13 May '11

13 May '11

I wanted to attempt to build BIRD under MacOS X, but already at unpacking I ran into the following tcsh> tar zxf bird-1.3.1.tar.gz tar: Cannot rename bird-1.3.1/Doc.naNlkt to bird-1.3.1/Doc (Is a directory) tcsh> ... which stems from the fact that the source tree contains both a "Doc/" subdirectory and a "doc/" directory, tcsh> tar ztf bird-1.3.1.tar.gz | egrep -i 'bird-1.3.1/doc$' bird-1.3.1/doc bird-1.3.1/Doc tcsh> which of course works just fine in most *nix file systems, since they traditionally are case sensitive. However, HFS(+) on the Mac can be installed either as case sensitive or as case INsensitive, with the latter being the default. (No, I don't advocate this! I just note that as a fact.) The result is of course a name clash on most Mac systems. Is there any change that you can change one of the names to avoid the clash in future releases? Cheers, /Liman PS. I realise there is more work to make this compile on a Mac, but I have to start somewhere ... ;-) #---------------------------------------------------------------------- # Lars-Johan Liman, M.Sc. ! E-mail: liman(a)netnod.se # Senior Systems Specialist ! Tel: +46 8 - 562 860 12 # Netnod Internet Exchange, Stockholm ! http://www.netnod.se/ #----------------------------------------------------------------------

2 2

Re: password encryption
by Pierre Rivenez 12 May '11

12 May '11

The password is write in the file bird.conf in plain text. So any people who read the file have the password and can change the configuration. I would like to know if it's possible to encrypte the password in the configuration file PR ----- Mail Original ----- De: "Martin Kraus" <martin.kraus(a)wujiman.net> À: "Pierre Rivenez" <pierre.rivenez(a)celeste.fr> Cc: bird-users(a)network.cz Envoyé: Jeudi 12 Mai 2011 16h33:40 GMT +01:00 Amsterdam / Berlin / Berne / Rome / Stockholm / Vienne Objet: Re: password encryption On Thu, May 12, 2011 at 04:18:47PM +0200, Pierre Rivenez wrote: > I use bird for the ospf > I would like to use encryption. > So I use a password for the ospf session, but the password is write in clear test in the file bird.conf > Is it a solution to encrypt this password in the configuration file. I guess the problem is that you'd have to have the key to the encryption in plain somewhere on the computer as well which kind of defeats the purpose of password encryption in the configuration file. mk

5 4

password encryption
by Pierre Rivenez 12 May '11

12 May '11

Hi I use bird for the ospf I would like to use encryption. So I use a password for the ospf session, but the password is write in clear test in the file bird.conf Is it a solution to encrypt this password in the configuration file. Pierre Rivenez

2 1

Silly question about bgp_local_pref
by fredrik danerklint 11 May '11

11 May '11

Hi! Can someone show me a working example how that works with iBGP? I've tried with: protocol bgp bgp4_1_2_3 { import filter { bgp_local_pref=150; accept; }; etc.... }; without any success with 'show route': bird> show route 10.20.30.0/24 via 1.2.3.4 on igb1 [bgp4_1_2_3] 16:28 from 1.2.3.5] * (100/5) [i] -- //fredan

2 1

BIRD 1.3.1 compilation with BGP option error?
by Aris Lambrianidis 05 May '11

05 May '11

Hello to all, I am trying to compile BIRD 1.3.1 only with bgp enabled since I am not interested in the other protocols and I always act on a need-to-have basis. The debug output attached is from the command on a Gentoo system: ( ./configure --with-protocols=bgp && make ) > debug.txt 2>&1 This is my system information: Linux xxx.xxx.xxx 2.6.32.16 #1 SMP Sun Jul 25 21:32:42 UTC 2010 i686 Intel(R) Xeon(R) CPU 5130 @ 2.00GHz GenuineIntel GNU/Linux And this is my gcc environment: Using built-in specs. Target: i686-pc-linux-gnu Configured with: /var/tmp/portage/sys-devel/gcc-4.3.4/work/gcc-4.3.4/configure --prefix=/usr --bindir=/usr/i686-pc-linux-gnu/gcc-bin/4.3.4 --includedir=/usr/lib/gcc/i686-pc-linux-gnu/4.3.4/include --datadir=/usr/share/gcc-data/i686-pc-linux-gnu/4.3.4 --mandir=/usr/share/gcc-data/i686-pc-linux-gnu/4.3.4/man --infodir=/usr/share/gcc-data/i686-pc-linux-gnu/4.3.4/info --with-gxx-include-dir=/usr/lib/gcc/i686-pc-linux-gnu/4.3.4/include/g++-v4 --host=i686-pc-linux-gnu --build=i686-pc-linux-gnu --disable-altivec --disable-fixed-point --enable-nls --without-included-gettext --with-system-zlib --disable-checking --disable-werror --enable-secureplt --disable-multilib --enable-libmudflap --disable-libssp --enable-libgomp --disable-libgcj --with-arch=i686 --enable-languages=c,c++,treelang,fortran --enable-shared --enable-threads=posix --enable-__cxa_atexit --enable-clocale=gnu --with-bugurl=http://bugs.gentoo.org/ --with-pkgversion='Gentoo 4.3.4 p1.0, pie-10.1.5' Thread model: posix gcc version 4.3.4 (Gentoo 4.3.4 p1.0, pie-10.1.5) Note that this also happens on debian-wheezy when trying to configure the source package and rebuild it, on a virtual machine (I can give the output for that as well if needed) . I thank you in advance for any suggestions and apologize if this has been already answered. -- Aris Lambrianidis

2 2

Redistributing kernel routes
by Alex Bligh 03 May '11

03 May '11

I am having difficulty redistributing kernel routes into any other protocol. The question is similar to the one asked here: http://www.mail-archive.com/bird-users@atrey.karlin.mff.cuni.cz/msg01036.htm l (subject "Problem with redistribute static routes from venet (openvz pseudointerface)") but a) the solution proposed there does not work. b) I cannot get normal static "via" routes to distribute. What I am trying to do at the moment is to get device routes (e.g. those created like ip route add 4.4.4.4/32 proto SOMEPROTO nexthop dev evrr-000001 to register in bird). Ultimately I'd like to redistribute them into ospf or similar. Right now the problem is that they do not show up at all. For test purposes I added normal static routes too: # ip route add 6.6.6.6/32 proto static nexthop via 172.16.1.22 # ip route add 7.7.7.7/32 proto boot nexthop via 172.16.1.22 These don't show up either. The interface routes, however, do show up. I am in control of the population of the routing table, so can set the protocol as appropriate. I would have thought "static" would be the most appropriate protocol. I have tried with and without "device routes yes" set in the kernel section. I have tried with and without the patch to ./sysdep/linux/netlink/netlink.c. As far as I can tell the patch special-cases routes with RTPROT_BOOT. I have installed dummy /32 routes with the protocols BOOT (i.e. the default), static, kernel, and 234. They all behave the same (i.e. bird does not see them). It also doesn't seem to apply to non-device routes. I can't help but think I must be doing something really stupid here. -- Alex Bligh root@alex-test:/# uname -a Linux alex-test 2.6.32-28-generic #55-Ubuntu SMP Mon Jan 10 23:42:43 UTC 2011 x86_64 GNU/Linux root@alex-test:/# ip r s 7.7.7.7 via 172.16.1.22 dev evrr-000001 2.3.4.5 dev evrr-000001 proto 234 5.5.5.5 dev evrr-000001 6.6.6.6 via 172.16.1.22 dev evrr-000001 proto static 1.1.1.1 dev evrr-000001 proto static 4.4.4.4 dev evrr-000001 proto kernel 2.2.2.2/31 dev evrr-000001 proto static 10.99.99.0/24 dev dummy proto kernel scope link src 10.99.99.1 172.16.1.0/24 dev evrr-000001 proto kernel scope link src 172.16.1.223 root@alex-test:/# ip a l 534: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 535: dummy2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 42:e8:af:c7:30:db brd ff:ff:ff:ff:ff:ff inet6 fe80::40e8:afff:fec7:30db/64 scope link valid_lft forever preferred_lft forever 536: dummy: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 1a:ca:93:5b:db:93 brd ff:ff:ff:ff:ff:ff inet 10.99.99.1/24 scope global dummy inet6 fe80::18ca:93ff:fe5b:db93/64 scope link valid_lft forever preferred_lft forever 537: evrr-000000: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 46:b6:4d:d3:74:c7 brd ff:ff:ff:ff:ff:ff inet6 fe80::44b6:4dff:fed3:74c7/64 scope link valid_lft forever preferred_lft forever 539: evrr-000001: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 12:ed:07:23:66:68 brd ff:ff:ff:ff:ff:ff inet 172.16.1.223/24 scope global evrr-000001 inet6 fe80::10ed:7ff:fe23:6668/64 scope link valid_lft forever preferred_lft forever root@alex-test:/# ip link show 534: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 535: dummy2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 42:e8:af:c7:30:db brd ff:ff:ff:ff:ff:ff 536: dummy: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 1a:ca:93:5b:db:93 brd ff:ff:ff:ff:ff:ff 537: evrr-000000: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 46:b6:4d:d3:74:c7 brd ff:ff:ff:ff:ff:ff 539: evrr-000001: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 12:ed:07:23:66:68 brd ff:ff:ff:ff:ff:ff root@alex-test:/# birdc BIRD 1.2.5 ready. bird> show route all 10.99.99.0/24 dev dummy [MyOSPF 19:46] * I (150/10) [10.99.99.1] Type: OSPF unicast univ OSPF.metric1: 10 OSPF.metric2: 16777215 OSPF.tag: 0x00000000 OSPF.router_id: 10.99.99.1 172.16.1.0/24 dev evrr-000001 [MyOSPF 19:46] * I (150/10) [10.99.99.1] Type: OSPF unicast univ OSPF.metric1: 10 OSPF.metric2: 16777215 OSPF.tag: 0x00000000 OSPF.router_id: 10.99.99.1 bird> root@alex-test:/# cat /etc/bird.conf protocol kernel { persist; # Don't remove routes on BIRD shutdown scan time 5; # Scan kernel routing table every 20 seconds export all; # Default is export none import all; device routes yes; } protocol device { scan time 10; # Scan interfaces every 10 seconds } protocol ospf MyOSPF { rfc1583compat yes; tick 2; export filter { accept; }; import filter { accept; }; area 0.0.0.0 { interface "dummy" { cost 10; stub yes; }; interface "evrr*" { cost 10; stub yes; }; }; } diff -ur --exclude='*~' ../bird-1.2.5.original-from-natty/sysdep/linux/netlink/netlink.c ./sysdep/linux/netlink/netlink.c --- ../bird-1.2.5.original-from-natty/sysdep/linux/netlink/netlink.c 2010-08-03 16:44:51.000000000 +0100 +++ ./sysdep/linux/netlink/netlink.c 2011-05-02 19:43:48.560597108 +0100 @@ -706,8 +706,10 @@ * for their 'alien' routes. */ +#if 0 if (i->rtm_protocol == RTPROT_BOOT) src = KRT_SRC_KERNEL; +#endif } break;

2 4

Ubuntu package repository
by Ondrej Filip 03 May '11

03 May '11

Dear Ubuntu users, the location of BIRD package repository has changed. You can find it at the following URL: https://launchpad.net/~cz.nic-labs/+archive/bird Use the following command to activate the repository on your system: sudo add-apt-repository ppa:cz.nic-labs/bird Ondrej

1 0

New release 1.3.1!
by Ondrej Filip 02 May '11

02 May '11

Hi! New version is ready! It includes mainly minor bugfixes and minor improvements related to BGP and Linux port, all made by Santiago. We are working on packaging and other stuff. Changes: Version 1.3.1 (2011-05-02) o Added Linux kernel route attributes krt_prefsrc and krt_realm. o Added BGP option 'med metric' related to MED handling. o Allows to use constants from /etc/iproute2/rt_* files. o Several bugfixes. Ondrej

5 7

Blog post about monitoring bird with Nagios
by David J Craigon 02 May '11

02 May '11

Hello, I've written a blog post about how I monitor Bird protocol sessions using Nagios and SNMP, which I thought might be of interest to people who read this list. I'm also interested as to whether it makes any sense, because if it doesn't make any sense to folk on this list I've no hope. Anyhow, it's at http://www.littleowlconsultancy.com/blog/how-we-monitor-bird-using-snmp-and… David

2 1