August 2011 - Bird-users

BGP, FreeBSD and password
by fredrik danerklint 22 Aug '11

22 Aug '11

Hi! The manual page says: password string Use this password for MD5 authentication of BGP sessions. Default: no authentication. Password has to be set by external utility (e.g. setkey(8)) on BSD systems. Can someone provide me with an example of how that does work? -- //fredan

2 5

Build failure from git archive
by Neil Wilson 18 Aug '11

18 Aug '11

Hi, I've got a launchpad auto-build locked onto the git archive, and I've been getting a persistent build failure from it. gcc -I../../ -I../../.. -g -O2 -o topology.o -c ../../../proto/ospf/topology.c ../../../proto/ospf/topology.c: In function 'originate_ext_lsa_body': ../../../proto/ospf/topology.c:935:7: error: 'n' undeclared (first use in this function) ../../../proto/ospf/topology.c:935:7: note: each undeclared identifier is reported only once for each function it appears in make[3]: *** [topology.o] Error 1 Looks like an error introduced by change 7ff5803b Rgs Neil

2 1

bird 1.3.2 - kernel / learn / filters
by Alex Bligh 17 Aug '11

17 Aug '11

Is it possible either to control what routes the kernel protocol learns from the kernel using "learn" by what /kernel/ protocol they are (meaning the "protocol xxxx" field to the "ip route add" command on linux), or alternatively to filter which of those are exported? -- Alex Bligh

2 9

Reload fails - bird 1.3.2
by Alex Bligh 17 Aug '11

17 Aug '11

I think this is harmless, but reload all does this: bird> reload all kernel1: reload failed device1: reload failed MyBGP: reloading If I understand rightly what reload is meant to do for kernel/device (nothing), shouldn't this either report 'reloading' or say 'skipped' or something? I spent a little while debugging this thinking I've done something wrong. Config below (same as before) just in case I have. -- Alex Bligh protocol kernel { persist; # Don't remove routes on bird shutdown scan time 10; # Scan kernel routing table every 20 seconds import all; export all; learn; # Learn all alien routes from the kernel } # This pseudo-protocol watches all interface up/down events. protocol device { scan time 10; # Scan interfaces every 10 seconds } protocol bgp MyBGP { local as 65000; neighbor 10.255.199.1 as 65000; export filter { accept; }; import filter { accept; }; next hop self; import all; export all; }

2 1

Unreachable next-hop over bgp
by Alex Bligh 17 Aug '11

17 Aug '11

Another bird newbie question I'm afraid. I have the following config: 10.255.199.3 10.255.199.1 [Quagga]----------------------------- [BIRD] 10.255.199.0/24 My bird config and quagga config are at the bottom of this email. Bird is learning a kernel route (6.6.6.6) and advertising it to quagga. This works fine. Quagga is originating a default route (0.0.0.0/32) and advertising it to bird. The advertisement works fine, but I see: bird> show route 6.6.6.6/32 via 10.99.99.2 on dummy [kernel1 18:02] * (10) 0.0.0.0/0 unreachable [MyBGP 18:26 from 10.255.199.1] * (100/-) [i] bird> show route 0.0.0.0/0 all 0.0.0.0/0 unreachable [MyBGP 18:26 from 10.255.199.1] * (100/-) [i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: BGP.next_hop: 10.255.199.1 BGP.local_pref: 100 Bird has marked the route as unreachable. Obviously the route is not unreachable, because it is the next hop (quagga is doing next-hop-self). The only reason for this I can see is because bird is determining reachability on the basis of its FIB only (as opposed to the kernel routing table) and there is no FIB entry for 10.255.199.0/24 (from show route). How are such interface routes meant to get into the FIB? -- Alex Bligh Bird config: protocol kernel { persist; # Don't remove routes on bird shutdown scan time 10; # Scan kernel routing table every 20 seconds import all; export all; learn; # Learn all alien routes from the kernel } # This pseudo-protocol watches all interface up/down events. protocol device { scan time 10; # Scan interfaces every 10 seconds } protocol bgp MyBGP { local as 65000; neighbor 10.255.199.1 as 65000; export filter { accept; }; import filter { accept; }; next hop self; import all; export all; } Quagga config: router bgp 65000 bgp router-id 10.255.199.1 neighbor 10.255.199.3 remote-as 65000 neighbor 10.255.199.3 next-hop-self neighbor 10.255.199.3 default-originate neighbor 10.255.199.3 soft-reconfiguration inbound Log from Quagga 2011/08/17 18:19:43 BGP: 10.255.199.3 went from Idle to Connect 2011/08/17 18:19:43 BGP: 10.255.199.3 passive open 2011/08/17 18:19:43 BGP: 10.255.199.3 went from Active to OpenSent 2011/08/17 18:19:43 BGP: 10.255.199.3 rcv message type 1, length (excl. header) 26 2011/08/17 18:19:43 BGP: 10.255.199.3 rcv OPEN, version 4, remote-as (in open) 65000, holdtime 240, id 10.99.99.1 2011/08/17 18:19:43 BGP: 10.255.199.3 sending OPEN, version 4, my as 65000, holdtime 180, id 10.255.199.1 2011/08/17 18:19:43 BGP: 10.255.199.3 send message type 1, length (incl. header) 53 2011/08/17 18:19:43 BGP: 10.255.199.3 rcv OPEN w/ OPTION parameter len: 16 2011/08/17 18:19:43 BGP: 10.255.199.3 rcvd OPEN w/ optional parameter type 2 (Capability) len 14 2011/08/17 18:19:43 BGP: 10.255.199.3 OPEN has MultiProtocol Extensions capability (1), length 4 2011/08/17 18:19:43 BGP: 10.255.199.3 OPEN has MP_EXT CAP for afi/safi: 1/1 2011/08/17 18:19:43 BGP: 10.255.199.3 OPEN has Route Refresh capability (2), length 0 2011/08/17 18:19:43 BGP: message index 65 [4-octet AS number] found in position 4 (max is 8) 2011/08/17 18:19:43 BGP: 10.255.199.3 OPEN has 4-octet AS number capability (65), length 4 2011/08/17 18:19:43 BGP: 10.255.199.3 went from OpenSent to Deleted 2011/08/17 18:19:43 BGP: 10.255.199.3 send message type 4, length (incl. header) 19 2011/08/17 18:19:43 BGP: 10.255.199.3 went from OpenSent to OpenConfirm 2011/08/17 18:19:43 BGP: 10.255.199.3 rcv message type 4, length (excl. header) 0 2011/08/17 18:19:43 BGP: 10.255.199.3 went from OpenConfirm to Established 2011/08/17 18:19:43 BGP: 10.255.199.3 send message type 4, length (incl. header) 19 2011/08/17 18:19:43 BGP: 10.255.199.3 send UPDATE 0.0.0.0/0 nexthop 10.255.199.1, origin i, mp_nexthop ::, path 2011/08/17 18:19:43 BGP: 10.255.199.3 rcvd UPDATE w/ attr: nexthop 10.255.199.3, origin i, localpref 100, path 2011/08/17 18:19:43 BGP: 10.255.199.3 rcvd 6.6.6.6/32

3 6

GTSM (TTL security)/RFC 5082 support?
by Henrique de Moraes Holschuh 16 Aug '11

16 Aug '11

Is anyone currently working on adding GTSM support to bird? It should be possible to support it for both Linux and FreeBSD where available as a kernel-level supported socket option, and I am considering trying my hand at it as a way to get to know the bird codebase a bit better before we decide to deploy it at work... -- "One disk to rule them all, One disk to find them. One disk to bring them all and in the darkness grind them. In the Land of Redmond where the shadows lie." -- The Silicon Valley Tarot Henrique Holschuh

3 9

Activate back learning from user-defined routes in kernel protocol?
by Benjamin Cama 14 Aug '11

14 Aug '11

Hi, I am currently evaluating BIRD, and stumbled on some difficulty, which looks quite similar to the one encountered by Łukasz here: http://www.mail-archive.com/bird-users@atrey.karlin.mff.cuni.cz/msg01039.ht… In my case, it's l2tpns [1] that generates additional routes on a tun interface, and that get ignored by BIRD. As Ondrej showed, the reason why BIRD does that is because Linux IPv6 supposedly don't distinguish between “native” device routes and user defined one. And, as the comment tells us, the best way to fix that is to set the protocol on the added routes to something correct when adding them (which wouldn't be static in my case, but rather something else like “l2tp” on a custom proto #). I'm working on patching l2tpns to do that. Still, I wondered why this comment was here, because on my linux 3.0 box, “native” routes are actually set as “proto kernel”. I tested on a 2.6.32, and it's also the case. But no luck on a 2.6.26. So, I searched in the kernel git, and found the culprit : commit 4f72427998b105392e60bae7a6798a0c96fe4f0a which can be viewed here http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h… This dates back to may 2009, and coincidentally was done to please quagga ;-) And it appeared juste before 2.6.30. On the BIRD side, it's commit ff2857b03db854f99902766ad842aaa5fa29ec3c that included the workaround to ignore all PROTO_BOOT routes. See here https://git.nic.cz/redmine/projects/bird/repository/revisions/ff2857b03db85… And it actually happened after the kernel charge, in february 2010! So, I was wondering if you would consider getting back to the “old” behavior of not ignoring PROTO_BOOT routes on kernel >= 2.6.30? It would be quite a change, still, and it may look strange that BIRD behave differently on kernel before and after 2.6.30. But it would help people like me who struggled to get their routes taken into account, just to find after a painful search that it's because of a kernel “bug”. I don't know what's the right answer to this, but I wanted to inform you of this change in Linux's behavior, in case you didn't notice it. Regard, Benjamin [1] http://sourceforge.net/projects/l2tpns/

2 1

bird filter fails after upgrade from 1.3.1 -> 1.3.2
by Matthew Whittaker-Williams 08 Aug '11

08 Aug '11

Hi, I am having some issues with a filter of mine since my last upgrade to 1.3.2. Aug 6 00:00:04 bird: filters, line 72: AS path expected Aug 6 00:00:04 bird: filters, line 72: AS path expected filter national int set asnums; { # Exceptions asnums = [ 286, 47377, 8514, 5430, 6848, 3300]; # Failes on this line below: if ( bgp_path.last ~ asnums) then { accept; } else { reject; } } Changing it to : if bgp_path.last ~ [ 286, 47377, 8514, 5430, 6848, 3300 ] then { accept; } Then its all fine, has the way on setting int changed? Thanks Kind regards, Matthew

2 1

Merging bird and bird6
by Alexander V. Chernikov 07 Aug '11

07 Aug '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello list! Are there any plans to move from different daemons to single one? - From user point of view: We will live with both v4+v6 for the next 10+ years, having all dynamic routing in single place with single CLI is much more convenient. - From developer point of view: At the moment all code is based on ip_addr address type which is defined to be v4 OR v6 at compile time. FIBs API assume the same: IPv4 OR IPv6. Speaking about advanced (mostly MPLS-related) features (VPNv4, LDP, MP-BGP in general) - they all need fibs which are not bound to specific address family. At the moment developer has to implement such tables himself. using different processes for different AF makes some MP-BGP aspects very hard to implement. Protocols interaction is also bound to fibs. Even calling protocol hooks is bound to ip_addr and prefix. For example, I'm stuck in sending MPLS labels into kernel at the moment. Of course, I can add a custom hook to kernel protocol but than I will have to support another custom patch which should be avoided. Maybe it is time to start a discussion? I can supply patches if there is any chance for review/commit -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk4UzxwACgkQwcJ4iSZ1q2lJJQCfWNRQZF8/8Rtk1PmYVLZ2MhZl BJMAoKI1aYjuvafYnGP1rePFIZ7X1+ub =2/AD -----END PGP SIGNATURE-----

4 14