July 2013 - Bird-users - Mailing Lists

Injecting ISP Default Route into OSPF
by Daniel Gomez 18 Jul '13

18 Jul '13

Greetings to everyone, I have two linux systems (routers) running debian with kernel 2.6.38 and BIRD 1.2.5. Every router has an outside interface towards a different ISP (ISP1 and ISP2) for Backup/Redundant purposes. The internal interface does VRRP. I am trying that both routers share the daufault routes toward ISP1 and IPS2. The routers should send all packets that they receive to towards the first ISP1 and when the ISP1 is down, the default route towards ISP2 must take place and the packets should be rerouted over the backup line (ISP2) My actuall problem is that I cannot see both static defined default routes on the Kernel table, and when I shutdown the outside interface the new default route is also not appearing on the routing table. Any ideas? That the actual configuration on both systems: protocol static { check link; route 0.0.0.0/0 via DFGW1; # Default route route 0.0.0.0/0 via DFGW2; # Default route } protocol kernel { # learn; # Learn all alien routes from the kernel persist; # Don't remove routes on bird shutdown scan time 10; # Scan kernel routing table every 20 seconds import none; # Default is import all export all; # Default is export none # kernel table 5; # Kernel table to synchronize with (default: main) } protocol direct { interface "intern"; # Restrict network interfaces it works with import all; # Default is import all } # This pseudo-protocol watches all interface up/down events. protocol device { scan time 10; # Scan interfaces every 10 seconds } protocol ospf MyOSPF { tick 2; rfc1583compat yes; import all; export all; area 0.0.0.0 { interface "intern" { cost 1; hello 5; priority 1; retransmit 7; }; }; } Thanks in Advance, Daniel Gomez

2 3

checking static routes against interface
by Sri Rao 18 Jul '13

18 Jul '13

Hi, I am trying to see if it is possible to have static route prefixes checked against an interface. If that prefix or a larger prefix is configured on the interface than allow it to be exported. Situation is: I have something like 10.0.1.1/24 on the loopback(lo) interface. I have static routes like: route 10.0.1.3/32 dev lo; route 10.0.1.6/32 dev lo; route 10.0.1.9/32 dev lo; route 10.0.2.3/32 dev lo; I would like to have the 10.0.1.{3,6,9} routes exported but not 10.0.2.3/32. is that possible? check link on; seems to only check if the interface is up or not which isn't exactly what I want. Thanks for any info you can provide. Sri

2 1

Bird Documented fixed variables
by Daniel Gomez 18 Jul '13

18 Jul '13

Good Morning to everyone, I have seen in example the use of already defined variables like bgp_path.last, RTS_DEVICE, RTS_BGP, bgp_communitya and oder nice and usefull variables. But I cannot find any documentation where all this variables are listed and explained. Do exist such a documentation? Greetings, Daniel

2 1

bird-tool script
by Will Dowling 11 Jul '13

11 Jul '13

Hi all, Just popping my head in to say hello and introduce myself. I've been helping put together some useful BIRD scripts for Joe, who has mentioned it a few times on the list. Since then, the script has come a ways from just showing peer info - and I figure it is probably useful to a lot of you. bird-tool can: * Show peer information - Session/Route Table name - Session State & Uptime - Total/Accepted/Filtered Route counts * Nagios check mode (alarm if peers down or * Cacti perfdata mode - export peer info to cacti * Show prefixes - Accepted & Filtered in peer information - Accepted-only as an unformatted list (handy for scripting) There are also some handy Cacti data templates and scripts for pulling cached copies of the perfdata for graphs. Anyway, figured this might be of interest to some people here - you can get it from Github here: https://github.com/dowlingw/bird-tool More importantly, if you have any dramas getting it going or find a bug - feel free to reach out via email or github. Cheers :) Will Dowling

6 8

Exporting IPSec routes to OSPF
by Michael Ludvig 10 Jul '13

10 Jul '13

Hi I've got a handful of Linux IPsec gateways, some running OpenSwan some with ipsec-tools. Each gateway handles a number of tunnels with dozens of remote subnets. Unfortunately these remote subnets don't show up in the Linux routing table, i.e. "ip route show" only comes up with the standard two records for the link subnet and for the default route. Obviously bird doesn't see the ipsec routes either. Now I've got a script that parses the output of "ip xfrm policy show" and exports them as static routes but that involves a manual rebuild every time the tunnels change and "birdc configure" to propagate the changes. Is there any way to automatically export these ipsec routes to OSPF? Thanks! Michael

6 8

bird6 segfault common?
by Joe Wooller 09 Jul '13

09 Jul '13

Hey All, Has there been any know issues with bird6 segfaulting? I noticed a segfault on 2 systems of mine for bird6 almost at the same time, these systems are identical, the only difference is one is in UTC and the other is in EST. Jul 8 22:20:18 rs1 kernel: [1185678.702517] show_signal_msg: 9 callbacks suppressed Jul 8 22:20:18 rs1 kernel: [1185678.702523] bird6[895]: segfault at 21 ip 00007fa1832d0603 sp 00007fffbcd0be98 error 6 in bird6[7fa1832bd000+6a000] Jul 9 08:21:02 rs2 kernel: [1185673.284503] show_signal_msg: 9 callbacks suppressed Jul 9 08:21:02 rs2 kernel: [1185673.284509] bird6[889]: segfault at 341700110004 ip 00007f31f0ab4603 sp 00007ffff1a9b398 error 6 in bird6[7f31f0aa1000+6a000] Regards Joe

2 1

Kernel table support in OpenBSD
by JLP 07 Jul '13

07 Jul '13

Hi everyone, I'm trying to use kernel table option of kernel protocol in BIRD on OpenBSD 5.3 (version 1.3.9p0 from standard package) but it seems like it does not work at all (I get a syntax error message). Are rdomains from OpenBSD officially supported ? Regards.

8 11

bird generating 600Mbit traffic
by Arkadiusz Miśkiewicz 07 Jul '13

07 Jul '13

Hello, bird (1.3.10, earlier versions too) sometimes starts flooding my network with ospf packets, generating over 600Mbit of traffic. tcpdump shows traffic between two bird machines, problematic one sends LS- Request then receives LS-Update, asks Request again, receives LS-Update and so on. http://ixion.pld-linux.org/~arekm/p2/log-bird.txt Any ideas on what could be the reason for such behaviour? Thanks, -- Arkadiusz Miśkiewicz, arekm / maven.pl

2 3

inject more specific route
by Thilo Bangert 03 Jul '13

03 Jul '13

Hi, basically i have a setup where bird gets a default route from a peer and i want bird to inject a more specific route into the local kernel table. is this possible? any hints on how to achieve this? thanks kind regards Thilo

2 1

show route filtered
by Joe Wooller 01 Jul '13

01 Jul '13

Hey All, I sent this to the euro-ix bird list, with little response. It was suggested that I send it here. I am a little confused as to what show route filtered is meant to do. I was under the impression it would show filtered routes. <SNIP> If BIRD is configured to keep filtered routes (see import keep filtered option), you can show them instead of routes by using filtered switch. </SNIP> I have set; import keep filtered; in my template. Unfortunately show route filtered delivers nothing. Am I missing something? If I do: show route table master protocol R_AS1234x1 I can see only the routes that are allowed to pass (not filtered). If i do: show route protocol R_AS1234x1 I see all routes include routes that get filtered out of the master table. But if I do bird> show route table master filtered bird> show route table master filtered protocol R_AS1234x1 bird> show route filtered bird> show route filtered protocol R_AS1234x1 I get nothing.. Here is an snippet of config; ## ## Protocol Templates ## template bgp IXP { local as ixasn; start delay time 10; debug { states, events }; mrtdump all; #import all; import keep filtered; export all; rs client; } template pipe PIPES { table master; mode transparent; } ## AS1234 - Peer1 table T_AS1234; filter bgp_in_AS1234 prefix set allnet; int set allasn; { if !(avoid_martians()) then reject; if (bgp_path.first != 1234 ) then reject; allasn = [ 1234 ]; if !(bgp_path.last ~ allasn) then reject; accept; } protocol pipe P_AS1234 from PIPES { description "Pipe for AS1234 - Peer1"; peer table T_AS1234; import filter bgp_in_AS1234; export where bgp_out(1234, false); } protocol bgp R_AS1234x1 from IXP { description "RIB for AS1234 - Peer1"; debug { states, events }; neighbour 1.2.3.4 as 1234; route limit 500; table T_AS1234; } If my understanding of how the filtered option works is completely wrong please let me know! Any help/advise would be greatly appreciated. Cheers Joe

2 1