June 2011 - Bird-users - Mailing Lists

upgrade 1.2.4 - 1.3.1 reverted
by Arjan Filius 24 Oct '12

24 Oct '12

Hello, upgraded from bird 1.2.4 to bird 1.3.1 last weekend, but needed to revert due to complaints from high bgp traffic to bgpmon.net and 100% cpu load on a 2x bird bgp routers setup connected with iBGP. Did some research, and noticed a high bgp traffic situation on the iBGP sessions (about 10.000 bgp packets in 1.7 second) Based on graph statistics, i noticed a irregular traffic on the trans-ip's as well (noticed after rollback in statistical graphs) In the logging (mostly on the first bgp router) , i noticed quite some messages (33414 in ~12h) like: 29-05-2011 10:57:49 <WARN> Next hop address X.X.X.242 resolvable through recursive route for X.X.X.0/24 29-05-2011 10:57:49 <WARN> Next hop address Y.Y.35.194 resolvable through recursive route for Y.Y.32.0/19 29-05-2011 10:57:52 <WARN> Next hop address X.X.X.241 resolvable through recursive route for X.X.X.0/24 29-05-2011 10:57:52 <WARN> Next hop address X.X.X.242 resolvable through recursive route for X.X.X.0/24 29-05-2011 10:57:55 <WARN> Next hop address Y.Y.35.194 resolvable through recursive route for Y.Y.32.0/19 29-05-2011 10:57:55 <WARN> Next hop address X.X.X.241 resolvable through recursive route for X.X.X.0/24 29-05-2011 10:57:55 <WARN> Next hop address X.X.X.242 resolvable through recursive route for X.X.X.0/24 These are the subnets of the upstream trans-ip links of it's neigbor router On the second (neighbor) bgp router, noticed only such 15 recursive messages I had those upstream trans-ip interface IP's manually added once to the bird.conf with a "protocol static" definition with a subnet of /32. I thought this might be the problem, and wel, disabled those static trans-ip interface routes, except i forgot one. Noticed a lower CPU afterwards, but problem persisted, and i reverted to 1.2.4. Later i noticed i missed one static route to disable, but no time left to upgrade and test again. I think i should have looked at the recursive routes in bird, but i didn't. Does one know what was going on here, and what to do to prevent it when executing another upgrade? I created a 10.000 packet tcpdump capture (full size) of an iBGP session, in case somone would like to look at it. Regards, Arjan Filius -- Arjan Filius mailto:iafilius@xs4all.nl

4 7

how to confirm which capabilities have been negotiated
by Eiichiro Watanabe 24 Oct '11

24 Oct '11

Hello, Do we have an appropriate command to show which BGP capabilities have been negotiated on bird after a peer has been established? Of course, I known I can recognize when I look into packets captured, or confirm it on the neighbor router by using "show ip bgp neighbor x.x.x.x" command (in the case of CiscoIOS). it wouldn't be smart. Thanks, eiichiro -- ################################################### Eiichiro Watanabe Internet Multifeed Co.

4 5

Looking-Glass
by Mihai Claudiu Capatina 29 Sep '11

29 Sep '11

Hi, Does anybody know about an open-source looking-glass for BIRD ? Best Regards, Mihai Claudiu Capatina Managing Partner Vector Communications SRL Address : Aleea Cetatuia, Nr. 4, Bl. M22, Sc. 5, Et. 2, Ap. 276, Sect. 6, Bucuresti, 060834 Romania Phone: +40-729-087003 Fax: +40-318-146297 www.vector-communications.net

8 10

Show BGP peer data when session is down?
by Lars-Johan Liman 14 Sep '11

14 Sep '11

If you have an established BGP session, you can find out a lot of the session details using # birdc show protocols all <bgp_proto_id> Specifically, you can look at BGP state: ... Session: ... Neighbor AS: ... Neighbor ID: ... Neighbor address: ... Nexthop address: ... Source address: ... Neighbor caps: ... Route limit: ... Hold timer: ... Keepalive timer: ... Now, if the session is terminated for one reason or another, the info disappears. BGP state: Passive Last error: Received: Administrative shutdown and that's it. This makes it very hard to create scripts that keep an eye on specific peering sessions based on the identity (remote IP address) of the peer, because once the session is down, you can no longer find it, because the IP address is nowhere in the output. :-P Is there a birdc command that shows me BGP session info including the _expected_ peer info, as configured, so I can identify my sessions and keep an eye on them as they come and go? I have mentally explored two alternative ways: a) To code the remote IP into the BGP protocol identifier for that particular session and make my script match on that, or b) to parse the BIRD config file to establish the mapping between a certan BGP protocol identifier and the corresponding remote IP. Both strike me as "suboptimal" ... :-/ If the answer to my question above is "no", please consider this a feature request ... ;-) Cheers, /Liman #---------------------------------------------------------------------- # Lars-Johan Liman, M.Sc. ! E-mail: liman(a)netnod.se # Senior Systems Specialist ! Tel: +46 8 - 562 860 12 # Netnod Internet Exchange, Stockholm ! http://www.netnod.se/ #----------------------------------------------------------------------

2 4

Feature requests
by Ondrej Zajicek 11 Jul '11

11 Jul '11

Hello We (BIRD developers) would like to know which major features you miss in BIRD and would like to be implemented. If you have some opinions on that issue, please write suggested features together with several sentences about why you think that is the feature we should implement or why you need that. This inquiry is oriented on long-term, major features, but if you have some minor requests, you are also welcome. Our current short-term plan is to fix RIP (and multipath for RIP) and implement Route Origin Authorization / RPKI drafts for BGP. Some examples: OSPF NSSA OSPF opaque LSAs .. or some other OSPF extensions BGP confederations BGP extended communities .. or some other BGP extensions MRT routing table dumps Some monitoring/statistics integration (SNMP, collectd ...) Route aggregation engine Static routes depedent on ping reachability BFD (Bidirectional Forwarding Detection) IS-IS Some ad-hoc wireless routing like OSPF MANET or OLSR Multicast routing? .. or perhaps no new big features, just some more work to already implemented areas? BTW, from these examples, my personal preference is currently on BFD. -- Elen sila lumenn' omentielvo Ondrej 'SanTiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

19 33

Loopback not redistributed
by Pierre Rivenez 04 Jul '11

04 Jul '11

Hi, I have a problem using bird. I have two ospf instances running on a router. This router are connected to two routers. One instance for each link. On the two links I send two loopbacks with different ospf tag. But when a link fail and come back the ospf don't send again the loopback to the remote router. Do you know why ? Pierre

1 1

Allowas-in in BIRD - possible to implement?
by Adrian Czapek 04 Jul '11

04 Jul '11

Hello, I am in dire need to accept my own AS in AS-PATH from my upstream provider. Is there any way to achieve it using bird? Regards -- Adrian Czapek

3 4

Hold timer expired: difference between Received/Error
by Arnold Nipper 01 Jul '11

01 Jul '11

Quick question: what's the difference between 2011-04-29 18:24:36 <RMT> XXXX: Received: Hold timer expired 2011-04-30 00:05:42 <RMT> YYYY: Error: Hold timer expired We are running BIRD 1.2.5 ready. TIA and best regards, Arnold -- Arnold Nipper / nIPper consulting, Sandhausen, Germany email: arnold(a)nipper.de phone: +49 6224 9259 299 mobile: +49 152 53717690 fax: +49 6224 9259 333

3 8

Fwd: Re: ospf loading for ever...
by Tapio Haapala 29 Jun '11

29 Jun '11

I resend this because I forgot complete subscription first. So if this is duplicate message I am sorry. But to the problem: I have similar issue but I dont have multiple ip addresses or mtu problem. Looks that on some cases another side router stuck to loading state and another side is on full state. On this point I must restart this side what says that it is on full state. So looks that some how that router what ways "loading" wait something from that router what says "full" but because this "full" it does not send it any more... Or something :) wierd thing is that even stop and start this router what is on loading state it not help. I must stop and start this router what is on full state. This was reason why I just upgrade my bird on routers to 1.3.1 but looks that it does not help for this problem. This problem is random but when my network comes larger problems appears more often. I have ~170 routes from ospf and I use hello 1 and dead 10. ps. What bird does if loading routes takes more time than hello timer is? > On Thursday 24 of March 2011, Ondrej Zajicek wrote: > > On Thu, Mar 24, 2011 at 08:57:23AM +0100, Arkadiusz Miskiewicz wrote: > > > > Tou can always check it with tcpdump or wireshark on ospf lan. > > > > > > > > tcpdump -vv -nn -i<interface> host 224.0.0.5 > > > > > > I don't see bad IPs used, dump using > > > tcpdump -vv -nn -i eth0 ether host mac-addr and proto 89 > > > athttp://carme.pld-linux.org/~arekm/p/ospf.log.gz<http://carme.pld-linux.org/%7Earekm/p/ospf.log.gz> > > > > Don't you have assymetric MTU? > > > > It seems that there is MTU 9000 on x.x.5.135 and MTU 1500 on x.x.5.159 > > MTU have to be the same, otherwise x.x.5.135 would send big packets > > and x.x.5.159 would drop them. > That seem to be it, thanks! -- Kaikki viestissä ilmoitetut summat ovat alvittomia, ellei toisin ole kyseisen summan yhteydessä ilmoitettu. -- F-Solutions Oy Tapio Haapala PL 7, 90571 Oulu GSM 040-0998371 Skype burner- IRC Burner@ircnet

2 2

FW: [sidr] Announcing BRITE - BGPSEC / RPKI Interoperability Test & Evaluation system
by Spies, Sebastian Martin 29 Jun '11

29 Jun '11

This might be interesting for developers and users of bird. > -----Original Message----- > From: sidr-bounces(a)ietf.org [mailto:sidr-bounces@ietf.org] On Behalf Of > Montgomery, Douglas > Sent: Tuesday, June 28, 2011 11:07 AM > To: sidr(a)ietf.org > Cc: nanog(a)nanog.org > Subject: [sidr] Announcing BRITE - BGPSEC / RPKI Interoperability Test > & Evaluation system > > BRITE is a web-based test and evaluation framework for exercising > implementations, configurations and deployments of emerging IETF BGP > security technologies, including some components of the Resource Public > Key Infrastructure (RPKI) and routers that support BGP security > extensions. > > BRITE is currently capable of testing: RPKI validation caches and BGP > routers that perform origin validation based upon RPKI ROAs. Future > extensions will support BGP routers that support full path validation. > > BRITE currently supports the following capabilities / protocol > interfaces: > * rsync of RPKI objects from BRITE test suite repositories, > * RPKI/Router Protocol (draft-ietf-sidr-rpki-rtr-12 - TCP plain > sockets, > no SSH transport or TCP-AO) > * BGP-4 (tested interoperability with Cisco IOS, JUNOS, Quagga, > OpenBGPD > and BIRD) > > BRITE is driven by test scripts that describe carefully crafted > Test Scenarios (stimulus inputs from BRITE using the protocols above) > and > corresponding goals (expected responses from the Implementation Under > Test > (IUT) using the protocols above). BRITE allows users to login, select a > specific test case, interactively configure and run the test case and > then > browse/download detailed test reports, packet captures and log files. > > Current test scripts & data sets are available for: > * BGP routers that implement the rpki-rtr protocol and simple BGP > origin > validation route policies. > > Additional test suites & data sets are in development and will be > announced when available. > > To get additional information, browse existing test suites, or use the > BRITE system, goto: > http://brite.antd.nist.gov/ > > Questions or comments can be directed to brite-dev(a)nist.gov. > > > dougm > > -- > Doug Montgomery Mgr. Internet & Scalable Systems Research / ITL / > NIST > > > > > _______________________________________________ > sidr mailing list > sidr(a)ietf.org > https://www.ietf.org/mailman/listinfo/sidr

1 0