January 2012 - Bird-users

upgrade 1.2.4 - 1.3.1 reverted
by Arjan Filius 24 Oct '12

24 Oct '12

Hello, upgraded from bird 1.2.4 to bird 1.3.1 last weekend, but needed to revert due to complaints from high bgp traffic to bgpmon.net and 100% cpu load on a 2x bird bgp routers setup connected with iBGP. Did some research, and noticed a high bgp traffic situation on the iBGP sessions (about 10.000 bgp packets in 1.7 second) Based on graph statistics, i noticed a irregular traffic on the trans-ip's as well (noticed after rollback in statistical graphs) In the logging (mostly on the first bgp router) , i noticed quite some messages (33414 in ~12h) like: 29-05-2011 10:57:49 <WARN> Next hop address X.X.X.242 resolvable through recursive route for X.X.X.0/24 29-05-2011 10:57:49 <WARN> Next hop address Y.Y.35.194 resolvable through recursive route for Y.Y.32.0/19 29-05-2011 10:57:52 <WARN> Next hop address X.X.X.241 resolvable through recursive route for X.X.X.0/24 29-05-2011 10:57:52 <WARN> Next hop address X.X.X.242 resolvable through recursive route for X.X.X.0/24 29-05-2011 10:57:55 <WARN> Next hop address Y.Y.35.194 resolvable through recursive route for Y.Y.32.0/19 29-05-2011 10:57:55 <WARN> Next hop address X.X.X.241 resolvable through recursive route for X.X.X.0/24 29-05-2011 10:57:55 <WARN> Next hop address X.X.X.242 resolvable through recursive route for X.X.X.0/24 These are the subnets of the upstream trans-ip links of it's neigbor router On the second (neighbor) bgp router, noticed only such 15 recursive messages I had those upstream trans-ip interface IP's manually added once to the bird.conf with a "protocol static" definition with a subnet of /32. I thought this might be the problem, and wel, disabled those static trans-ip interface routes, except i forgot one. Noticed a lower CPU afterwards, but problem persisted, and i reverted to 1.2.4. Later i noticed i missed one static route to disable, but no time left to upgrade and test again. I think i should have looked at the recursive routes in bird, but i didn't. Does one know what was going on here, and what to do to prevent it when executing another upgrade? I created a 10.000 packet tcpdump capture (full size) of an iBGP session, in case somone would like to look at it. Regards, Arjan Filius -- Arjan Filius mailto:iafilius@xs4all.nl

4 7

Route aggregation in BIRD - how?
by Maciej Wierzbicki 20 Aug '12

20 Aug '12

Hello. Case study: * importing full BGP table from various uplinks * some routes received by BGP are being exported via OSPF to core1, using filters: (source = RTS_BGP && bgp_path ~ [= * ASNXYZ * =]) Question: how to aggregate routes (whenever possible) before exporting them via OSPF to core? Example: lets say that I've received a.b.c.d/22 and a.b.c.d/24 from asnXYZ via BGP. Lets say that I want to export routes with asnXYZ in aspath via ospf to core1 switch. Obviously, a.b.c.d/24 is in a.b.c.d/22, so I would like to export only a.b.c.d/22. Is it doable in bird? If yes, any hint/keywords in doc? -- * Maciej Wierzbicki * At paranoia's poison door * * VOO1-RIPE *

6 14

real broadcast mode
by Tapio Haapala 16 May '12

16 May '12

Hello, Bird supports with ospf type broadcast. Looks that it actually means hat you execpt from "type mcast". On several networks multicast is broken. Yes it is broken and we cannot do nothing for that because they are metro ethernet and odsl (operator dsl) networks and they are leased from local operators. One solution is make mtmp configuration but if you have 100 router it is nightmare. So I humbly asking new feature. It is real broadcast type. Because of compatibility reasons it is unpossible use type bcast for that and rename multicast for type mcast I suggest that new type is rbcast. It is extension over rfc but it is really usefull one. On real broadcast packets send to 255.255.255.255 so they does not get meshed up with multicast specific rules. I have hear many times "but multicast is broadcast on l2 networks". Pleas dont use that argument. Truck is car, pickup is car but it does not mean that truck is pickup. Some times you have roads where you can drive with pickups but not with trucks. First time when I face this problem I was thiking that "ok this is corner case and solution is ptmp". When we start get these cases on several networks with several operators and several vendors, I start thinking that maybe there is improvement need on ospf. ps How many elese had suffer problems with metro ethernet or dsl network that devices delivery unicast traffic and bcast traffic to ff:ff:ff:ff:ff:ff but does not delivery traffic to 01:00:5e:00:00:05 -- F-Solutions Oy Tapio Haapala PL 7, 90571 Oulu GSM 040-0998371 Skype burner- IRC Burner@ircnet

3 5

New release 1.3.6!
by Ondrej Filip 28 Feb '12

28 Feb '12

Hi! A new version is ready! Changes: Version 1.3.6 o Important bugfix in BGP.

5 5

OSPF: LSA disappeared
by Bjoern Engels 30 Jan '12

30 Jan '12

Hi, we're running redundant pairs of routers using keepalived for VRRP and BIRD for OSPF. (bird-1.3.3 through bird-1.3.6 actually) Static routes are configured in BIRD so when keepalived transitions to master state it adds ip addresses to a bunch of vlan interfaces and the routes' gateways become directly reachable and are being announced. Now when I failover from one primary router to a backup router by stopping keepalived the interfaces' addresses are being deleted on the former master and added to the backup router. Immediately after such a transition all BIRD routers fill their log files periodically with this kind of messages: Jan 25 14:47:06 cr4b bird: OSPF: LSA disappeared (Type: 0005, Id: 192.0.2.0, Rt: 10.10.10.170) Jan 25 14:47:06 cr4b bird: OSPF: LSA disappeared (Type: 0005, Id: 192.0.2.128, Rt: 10.10.10.170) Jan 25 14:47:06 cr4b bird: OSPF: LSA disappeared (Type: 0005, Id: 198.51.100.160, Rt: 10.10.10.170) Jan 25 14:47:06 cr4b bird: OSPF: LSA disappeared (Type: 0005, Id: 192.0.2.0, Rt: 10.10.10.170) Jan 25 14:47:06 cr4b bird: OSPF: LSA disappeared (Type: 0005, Id: 192.0.2.128, Rt: 10.10.10.170) Jan 25 14:47:06 cr4b bird: OSPF: LSA disappeared (Type: 0005, Id: 198.51.100.160, Rt: 10.10.10.170) Jan 25 14:47:11 cr4b bird: OSPF: LSA disappeared (Type: 0005, Id: 192.0.2.0, Rt: 10.10.10.170) Jan 25 14:47:11 cr4b bird: OSPF: LSA disappeared (Type: 0005, Id: 192.0.2.128, Rt: 10.10.10.170) Jan 25 14:47:11 cr4b bird: OSPF: LSA disappeared (Type: 0005, Id: 198.51.100.160, Rt: 10.10.10.170) Jan 25 14:47:11 cr4b bird: OSPF: LSA disappeared (Type: 0005, Id: 192.0.2.0, Rt: 10.10.10.170) Jan 25 14:47:11 cr4b bird: OSPF: LSA disappeared (Type: 0005, Id: 192.0.2.128, Rt: 10.10.10.170) Jan 25 14:47:11 cr4b bird: OSPF: LSA disappeared (Type: 0005, Id: 198.51.100.160, Rt: 10.10.10.170) proto/ospf/lsupd.c says this should never happen: /* Probably flushed LSA, this should not happen */ log(L_WARN "OSPF: LSA disappeared (Type: %04x, Id: %R, Rt: %R)", lsr->lsh.type, lsr->lsh.id, lsr->lsh.rt); Is this some bug in BIRD or caused by the way we use it? Regards Bjoern -- Bjoern Engels OpenIT GmbH engels(a)openit.de In der Steele 33a-41 PGP keyID 1024D/895F13C3 D-40599 Duesseldorf ________________________________________________________________________ HRB 38815 Amtsgericht Duesseldorf USt-Id DE 812951861 Geschaeftsfuehrer: Oliver Haakert, Maurice Kemmann

5 5

Restricted or hardened or read-only birdc and birdc6 - Compiletime or configure option
by Stefan Jakob 25 Jan '12

25 Jan '12

Hi, Iirc there was a compiler/configure option to build a read only or minimal invasive birdc, f.e. to use in a looking glass environment. * No disable option for protocols * No reconfigure or configure and so on stuff Sadly I couldn't find the old post. Any hint appreciated. Rgds, Stefan

2 2

FreeBSD bugs ;)
by Pawel Tyll 23 Jan '12

23 Jan '12

Hi list, After using bird for some time now, I've found few things that are annoying me, or simply break things that should work flawlessly ;) bird> show protocols all [some BGP protocol] Routes: 19186 imported, 2 exported, 84627 preferred My guess is that it has something to do with pipes. I have multiple pipes that do import filter { if proto="[some BGP protocol]" then accept; reject; }; Problem 2: bird's reality: ng6 up (index=35) PtP Multicast AdminUp LinkUp MTU=1492 local.ip/32 (Primary, opposite 192.168.16.35, scope univ) vlan3372 up (index=36) PtP Multicast AdminUp LinkUp MTU=1492 local.ip/32 (Primary, opposite 192.168.16.171, scope univ) ng7 up (index=37) PtP Multicast AdminUp LinkUp MTU=1492 local.ip/32 (Primary, opposite 192.168.17.123, scope univ) reality's reality: ng4: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> metric 0 mtu 1492 inet local.ip --> 192.168.16.35 netmask 0xffffffff ng6: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> metric 0 mtu 1492 inet local.ip --> 192.168.16.171 netmask 0xffffffff ng7: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> metric 0 mtu 1492 inet local.ip --> 192.168.17.123 netmask 0xffffffff # ifconfig vlan3372 ifconfig: interface vlan3372 does not exist Above happened after I decided that I don't feel like wanting vlan3372 and changed it to something else. In the meantime some customer decided to open PPPoE session, not knowing this will spell his doom :> bird also happily ignores interface name changes, which hinders nice features such as interface "name*" etc. Thanks for reading. :)

4 11

simple patch for RIPng
by Goesta Smekal 21 Jan '12

21 Jan '12

Dear List, as I stated earlier last November, there are some simple issues, which prevent RIPng (aka IPv6 RIP) from working. Despite my rather basic knowledge of C I endeavoured to try and fix it. So far, two things are fixed by my patch: the UDP port is set to 521 (instead of 520 for IPv4 RIP) and the version number set to 1. At least the protocol dissector of wireshark now accepts the packets as correct RIPng messages (instead of "unknown protocol"). Anyway, my virtualized test setup does not yet exchange routes. This may as well be due to an error in my setup. Feedback is very appreciated ... Goesta -- #!/usr/bin/perl foreach $c (split(/ /,"47 6f 65 73 74 61 20 53 6d 65 6b 61 6c 0d 0a")) { print pack("C", hex($c));}

1 0

BSD and carp take 2
by fredrik danerklint 20 Jan '12

20 Jan '12

Hi. I've made an patch that I would like to know if this is how it should be done. What I want to achieve is to only announce a carp interface if it is in the master state. Otherwise ignore it. Hopefully someone else is in the master state and do the announcement in that case. -- //fredan

3 4

VRRP Question
by dspazman＠epicup.com 20 Jan '12

20 Jan '12

Hi there. I have started selling bandwidth in a data center, using bird as my main router, and it's working well. I need to put in a redundant router though, and so was starting to look into that. I'm just curious if there are any special considerations / examples of setting up VRRP on a bird router running BGP / BGPv6?

2 1