January 2014 - Bird-users

IS-IS
by kveri new 01 Jun '15

01 Jun '15

Hello, I would like to implement IS-IS as a part of my master thesis. Are there any apparent problems which would prevent successful implementation, political and/or technical? Also I would like to hear opinions of the authors. Implementation timeframe is 2013 (if we live past 21th). Regards, Martin Čechvala Faculty of Informatics and Information Technologies Slovak Technical University

7 8

OSFP LSA_MAXSEQNO problems
by Alexander V. Chernikov 23 Feb '14

23 Feb '14

Hello list! Currently bird performs LSA premature aging in very strange way which sometimes upsets quagga (up to SIGSEGV) and Cisco. Every time aging is done via setting seq number to LSA_MAXSEQNO. RFC 2328, on the opposite, shows us only 2 cases where MaxSequenceNumber is used in outgoing LSAs: 1) Self LSA originating with given seq num (very rare event) 2) [Premature] Aging of LSA from 1) because a) disappeared net and b) seq number increase (12.1.6) For all other cases seq number should be either increased or left intact. Bird, however, insist on setting LSA_MAXSEQNO while: 1) Receiving self-originating LSA which is not in local LSDB ( ospf_lsupd_receive ) which is not a special case according to 14.1 2) In all other places like handling if-down, external route disappear, etc... ( ospf_lsupd_flush_nlsa ) IT takes noticeable time (sometimes up to 5 seconds) for Cisco 65XX with ~40 neighbors to age given LSA (however it seems that problem is repeatable for ASR9k, too). And while such LSA is in database, every new update is ignored due to 13 step (8). (I've got full logs and pcap for given situation). Can we please consider applying attached patch to make it more compliant?

2 3

[PATCH] Add the ability for a sysconfig file to determine extra parameters for bird
by Alex Bligh 06 Feb '14

06 Feb '14

On Ubuntu / Debian, you can use /etc/default/bird{,6} to specify parameters to be passed to the bird daemon. As far as I can tell, using the rpm spec file in the current srpm, you can't. I do NOT claim to be a Redhat expert, but a patch like this would seem to provide equivalent functionality. I am taking it /etc/sysconfig is the right place. Signed-off-by: Alex Bligh <alex(a)alex.org.uk> --- misc/bird.init | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/misc/bird.init b/misc/bird.init index 56842bf..7556dc5 100755 --- a/misc/bird.init +++ b/misc/bird.init @@ -22,6 +22,9 @@ BIRD4="yes" BIRD6="yes" +BIRD4ARGS= +BIRD6ARGS= + [ -f /etc/bird.conf ] || BIRD4="no" [ -f /usr/sbin/bird ] || BIRD4="no" [ "${NETWORKING}" = "yes" ] || BIRD4="no" @@ -30,6 +33,8 @@ BIRD6="yes" [ -f /usr/sbin/bird6 ] || BIRD6="no" [ "${NETWORKING_IPV6}" = "yes" ] || BIRD6="no" +[ -e /etc/sysconfig/bird ] && . /etc/sysconfig/bird + RETVAL=0 # See how we were called. @@ -38,7 +43,7 @@ case "$1" in if [ "$BIRD4" = "yes" ] then echo -n "Starting BIRD for IPv4: " - daemon bird + daemon bird ${BIRD4ARGS} RETVAL=$? echo [ $RETVAL -eq 0 ] && touch /var/lock/subsys/bird @@ -46,7 +51,7 @@ case "$1" in if [ "$BIRD6" = "yes" ] then echo -n "Starting BIRD for IPv6: " - daemon bird6 + daemon bird6 ${BIRD6ARGS} RETVAL=$? echo [ $RETVAL -eq 0 ] && touch /var/lock/subsys/bird6 -- 1.7.9.5

3 4

Include in configuration files
by Pierluigi Rolando 30 Jan '14

30 Jan '14

Hi everyone, Maybe it's common knowledge among power users, but today I found out about a very nifty feature of BIRD: the include directive can be used pretty much anywhere in a configuration file, including inside a protocol section. I don't know if this is intended or not as include is described as a global option in the documentation. If it's an official feature I think it's worth documenting. If not, I think it's worth making one :-) Thanks, Pierluigi

3 2

OSPF weird behaviour
by Eugene M. Zheganin 30 Jan '14

30 Jan '14

Hi. I'm running bird in a large (well, meaning enterprise large, not ISP large) network. I'm using mostly 1.3.11/1.4.0 versions, and FreeBSD on all of the servers that are running bird. My network consists of several network hubs, that local branche offices are attached to. These hubs reside in large cities, and most of them are running some dynamic routing protocols aside from OSPF (BGP and RIP). Of course I'm writing this post not to share this useless information, but to describe a problem that I have. This problem involves two network sites, lets call them A and B. A consists of several networks and several routers, this is a largest site in my network, and site B consists of two bird routers running FreeBSD with VRRP/CARP (one active in each moment) and two dozens of branch offices, running mostly FreeBSD/quagga (they were deployed before I started using bird), and some of them running Cisco IOS/RIP. Site A and B are connected via a gre tunnel and OSPF in it. The problem is, that in some random moment site A receives a route announce from site B containing a route that clearly belongs to a site A. I know this behavior is typical to distance-vector protocol, not for a link state protocol, and it's kind of an impossible situation, but this is exactly what I'm seeing in birdc. The router at site A indicates that it received a route from router at B via OSPF, but in the same time the B router claims that this route clearly points to A. for instance: A: # birdc BIRD 1.3.11 ready. bird> show route for 192.168.7.0 192.168.7.0/24 via 172.16.0.95 on gre13 [ospfv4 10:08] ! E2 (150/10/10000) [192.168.21.2] via 192.168.3.22 on vlan1 [kernel1 10:17] (10) (I manually deleted a 192.168.7.0/24 route from kernel and added one via 192.168.3.22 to solve this temporarily, so OSPF route is this troubled announce) # ifconfig gre13 gre13: flags=b051<UP,POINTOPOINT,RUNNING,LINK0,LINK1,MULTICAST> metric 0 mtu 1476 tunnel inet 89.250.210.69 --> 94.159.37.114 inet 172.16.0.94 --> 172.16.0.95 netmask 0xffffffff inet6 fe80::21a:64ff:fe21:8e80%gre13 prefixlen 64 scopeid 0x1f nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL> B: [emz@moscow-alpha:~]# birdc BIRD 1.4.0 ready. bird> show route 192.168.7.0/24 192.168.7.0/24 via 172.16.0.94 on gre0 [ospfv4 08:08:30] * E2 (150/20/10000) [192.168.3.22] bird> # ifconfig gre0 gre0: flags=b051<UP,POINTOPOINT,RUNNING,LINK0,LINK1,MULTICAST> metric 0 mtu 1476 tunnel inet 94.159.37.114 --> 89.250.210.69 inet 172.16.0.95 --> 172.16.0.94 netmask 0xffffffff inet6 fe80::21a:64ff:fe21:96d5%gre0 prefixlen 64 tentative scopeid 0x8 nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL> I know that this information isn't enough to diagnose the problem, and I wanted to know what should I get to help diagnose this. I should say also, that at this time I get like 100 megabytes per day of bird logs consisting mostly of 'OSPF: LSA disappeared [...]' messages, and, since I get this issue one or two times per month, running bird with full OSPF debug will produce even more. Thanks. Eugene.

2 2

OSPFv2 causes AXUPD link destruction
by Gustavo Ponza 28 Jan '14

28 Jan '14

Hi all, coming back to the 'bird' operation on my hamradio site after two years, or perhaps more, I noted that the actual bird version(s) and including the today 'git' version cause the destruction of AXUDP links of another hamradio application (XNET) which is running on the same 'linux box'. No problem at all with the very fisrt 1.3.x BIRD releases in the same identical situation. I'm running the OSPFv2 by using the following configuration: protocol ospf { tick 2; # rfc1583compat yes; area 0.0.0.254 { stub no; networks { 44.208.0.0/16; 44.134.32.0/24; 44.134.33.0/24; 10.0.0.0/8; }; interface "ax0" { stub; }; interface "ax1" { stub; }; interface "sl0" { stub; }; interface "tun0" { stub; }; interface "ppp0" { type ptp; }; interface "tap0" { type broadcast; }; interface "eth*" { type broadcast; }; }; } Now, my XNET application, apart the AXUDP links towards other XNET or similar nodes, is liked to the linux 'slip' sl0' interface (SDEV0) and to the AX25 'ax0' interface (SDEV1). SDEV0 : SLIP Driver: 38400 Baud SDEV1 : KISS Driver: 38400 Baud However the OSPFv2 (and probably the RIPv2 not yet running here) seems to run OK on its routing task. gus i0ojj

1 0

Re: OSPF dont import routes from LSAdb
by 曾小小 28 Jan '14

28 Jan '14

hi, everybody I have encountered similar problems. My bird version is 1.3.10 I have three devices R0-2, R0 and R1 establish OSPF connections for instance 1, area 20, R0 and R2 establish OSPF connections for instance 2, area 30. I have the same configuration of R1 and R2, just ip address, route-id different: # About R2 ospf configuration filter export_OSPF { if (net = 0.0.0.0 / 0) then { print "net rejected:", net; ospf_metric2 = 20; reject; } if (net = a.b.c.0/24) then { print "net accepted:", net; ospf_metric2 = 20; accept; } reject; } filter import_OSPF { if (net = 0.0.0.0 / 0) then { print "net accepted:", net; ospf_metric2 = 20; accept; } reject; } protocol ospf ospf_business { router id e.f.g.h; debug all; export filter export_OSPF; import filter import_OSPF; area 0.0.0.30 { interface "vlanx" { hello 10; retransmit 5; cost 10; transmit delay 1; dead count 4; wait 40; # Type pointopoint; type broadcast; # Type pointomultipoint; # Priority 0; authentication cryptographic; password "pass"; }; }; } On R0 distribute the default route, you can receive from R0 default route on R1: R1: bird> show ospf lsadb ospf_business 1017-Global Type LS ID Router Age Sequence Checksum 0005 0.0.0.0 x.y.z.1 774 80000533 bf32 Area 0.0.0.20 Type LS ID Router Age Sequence Checksum 0001 x.y.z.1 x.y.z.1 855 80000554 f760 0001 x.y.z.3 x.y.z.3 837 80000552 9ab0 bird> show route protocol ospf_business 1007-0.0.0.0 / 0 via x.y.z.1 on vlan43 [ospf_business 11:24] * E2 (150/10/20) [1] [x.y.z.1] # I can receive from R0 about default route lsadb in R2's lsadb. bird> show ospf lsadb ospf_business 1017 - Global Type LS ID Router Age Sequence Checksum 0005 0.0.0.0 x.y.z.11 481 8000000d ba52 Area 0.0.0.30 Type LS ID Router Age Sequence Checksum 0001 x.y.z.11 x.y.z.11 481 8000054f 829a 0001 x.y.z.12 x.y.z.12 118 8000054a 25ef However, in the routing table, I can not see the default route. Why? Thanks.

2 2

BIRD crashing when disabled OSPF protocol state is requested
by Ondřej Caletka 23 Jan '14

23 Jan '14

Hi, I think I found a bug in BIRD (tested with versions 1.3.9 and 1.4.0). When OSPF state is requested for a disabled OSPF protocol, the BIRD process segfaults. Steps to reproduce: 1. use this bird.conf: ----cut here---- protocol device { scan time 10; } protocol kernel { persist; } protocol ospf something { disabled; area 0.0.0.0 { interface "dummy*"; }; } ----cut here---- 2. run bird 3. query for protocol state: # birdc show ospf state something 4. BIRD crashes I guess there is some null-pointer dereference in the ospf_sh_state function. Regards, Ondřej Caletka, CESNET

2 1

about per_connection and per_packet
by 曾小小 23 Jan '14

23 Jan '14

hi, My system is Ubuntu 13.04, kernel version is 3.8.0-21-generic, bird version is 1.3.10. In order to achieve two functions in r0: Use ecmp functions to achieve load balancing. Using iptables connmark modules in solving the problem of address overlap. I have two devices r0-1, I used the bird's ospf and ecmp function, r0 can learn from r1 to the twodefault route. As follows: default proto bird nexthop via 192.168.0.1 dev tun1 weight 3 nexthop via 192.168.0.2 dev tun2 weight 1 I use tcpdump, Ethereal found on r0 data is based per_packet forwarded to r1. But I'm on r0 configured conntrack. If I use conntrack, so my data from r0 to r1 will generate about connection problems. How do I solve it. Whether per_connection function can solve this connection problem? How to open per_connection on ubuntu system? Thanks for the help you provided earlier, thanks again ...

1 0

Fwd: BIRD unable to read data from TUN/TAP device
by Cyrill Gössi 17 Jan '14

17 Jan '14

Thank you very much for getting back to me in this matter! As for my scenario: in the long run I need to be able to let a single BIRD process run as many as 10000 OSPF protocol instances, each of which communicating locally over an individual TUN/TAP device. In the end, a single Linux system therefore has to be able to support 10000 TUN/TAP devices. As for your ideas and suggestions to check: Having tap1 and tap2 on one system, I'm able to ping tap2 via tap1. Running OSPF in NBMA mode resulted in no messages received by the tap devices at all. I updated my stackoverflow question and included also a strace()-extract of BIRD. In it you see the setup of a socket for a tap device and the inclusion of the file-descriptor for this socket into the set of descriptors observed by the selcet() system call. But unfortunately select() never notices any data ready to be read by this socket file-descriptor. With the additional information about my scenario and the results of your ideas and suggestions, I kindly ask you to take another look at the updated question on stackoverflow. I'm thankful for all the time you or somebody else will invest into supporting me in this matter! Best, Cyrill 2014/1/15 Ondrej Zajicek <santiago(a)crfreenet.org> > On Mon, Jan 13, 2014 at 02:01:48PM +0100, Cyrill Gössi wrote: > > Hi > > > > I'm trying to let BIRD communicate over virtual network devices created > by > > the Linux TUN/TAP module. > > > > As it seems the tap devices receive the messages from BIRD. However, BIRD > > does not seem to receive the messages sent to it over the tap device. > > > > I described the scenario and the issues I run into in more detail on > > stackoverflow. > > I am not sure if i understand your scenario, but if you run both TUN/TAP > endpoints on one machine, i would be surprised if OS network code wouldn't > be confused by that. If not, you should try ping and try to run OSPF > in NBMA mode (which will use just unicasts). > > > If somebody has some experience with running BIRD over TUN/TAP devices, > > Generally, it works over OpenVPN tunnels, which use TUN/TAP devices, > but in that cases both endpoints are on different machines. > > -- > Elen sila lumenn' omentielvo > > Ondrej 'SanTiago' Zajicek (email: santiago(a)crfreenet.org) > OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) > "To err is human -- to blame it on a computer is even more so." > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.9 (GNU/Linux) > > iEYEARECAAYFAlLVz2YACgkQw1GB2RHercOUBACgiI8lV1yRxeTp5tCaMVNvZ9hf > 8TkAnjppe/ei6PnHmEiiJ3Fhp6PAEN+Z > =FDol > -----END PGP SIGNATURE----- > >

1 0