November 2014 - Bird-users

New in BIRD
by Ilias Pallikarakis 23 Aug '16

23 Aug '16

Hi, I recently started trying to learn BIRD. I should also mention I have no previous experience with any other Routing daemon either. I want to configure a bgp monitor for both ipv4 and ipv6. I am running BIRD in a Ubuntu 13.10 VM. I managed to install both bird and bird6 but I have some problems with the configurations. In ipv4 : I created a very simple configuration which I attach. The conf is compiled but in birdc the bgp session is considered idle. I tried to do a tcpdump and found that the router sends a TCP SYN on the VM's bgp port but the VM responds with a RST and never tries to set a BGP session itself. In ipv6 : No matter the configuration (my configuration or the sample coming with bird6 or examples found on the web) the configuration is not compiled giving the following error : BIRD ipv6 doesn't run (bird: /usr/local/etc/bird6.conf, line 1: Router ID must be configured manually on IPv6 routers) Could anyone give me some pointers on what I am doing wrong ? Thank you for your help, Ilias Pallikarakis

5 8

Bird as an MPLS RR
by Evelio VILA 16 Feb '16

16 Feb '16

Hi guys, I'm following the instructions from http://bird.mpls.in/projects/mpls-bird/wiki/Bird_rr but I get a syntax error when adding the table statements. I'm using Bird 1.4.5 for Ubuntu utopic installed from this ppa: deb http://ppa.launchpad.net/cz.nic-labs/bird/ubuntu utopic main deb-src http://ppa.launchpad.net/cz.nic-labs/bird/ubuntu utopic main But it seems that version is not yet compiled for VPNv4 (AFI/SAFI 1/128) capabilities. already checked this link with no luck... https://www.mail-archive.com/bird-users%40atrey.karlin.mff.cuni.cz/msg03141… any ideas? Thanks! Evelio Vila

3 2

IS-IS
by kveri new 01 Jun '15

01 Jun '15

Hello, I would like to implement IS-IS as a part of my master thesis. Are there any apparent problems which would prevent successful implementation, political and/or technical? Also I would like to hear opinions of the authors. Implementation timeframe is 2013 (if we live past 21th). Regards, Martin Čechvala Faculty of Informatics and Information Technologies Slovak Technical University

7 8

OSPF route selection
by Thomas Goldberg 22 May '15

22 May '15

Hello, we're using OSPF for anycast routing and came across a small problem. We've a BIRD v1.4.4 router which sits in area 0 and 16. Here's the relevant state information (10.236.144.144/32 is announced from two different routers in two areas): area 0.0.0.0 router 10.236.144.241 distance 33 external 10.236.144.144/32 metric 1 area 0.0.0.16 router 10.17.224.253 distance 111 external 10.236.144.144/32 metric 1 The route via area 16 is considered best: 10.236.144.144/32 via 10.176.3.29 on vlan542 [o_internal 2014-10-07 16:49:56] * E1 (150/112) [10.17.224.253] Given that both E1 routes are reachable via intra-area paths. We're wondering why the path via area 16 (higher costs than area 0) is chosen. Is this the intended behavior? Is there any way to make bird prefer routes via a specific/backbone area in a situation like this? Best Regards, Freddy

4 4

RTD_BLACKHOLE overridden by matching route.
by Thomas Johnson 29 Nov '14

29 Nov '14

I am having some difficulty blackholing a route. The route in question is received from a multihop BGP session (emulating cymru), and I am setting the dest attribute to RTD_BLACKHOLE. However, if the same route is received via another BGP session, the blackhole is overriden, as shown here: bird> show route 10.0.2.0/24 all 10.0.2.0/24 via 38.8.8.105 on em1 [bgp_cogent 17:38:53] * (100) [AS174i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: 174 BGP.next_hop: 38.8.8.105 BGP.local_pref: 100 blackhole [l3_bogons 18:00:03 from 10.0.1.255] (100) [AS3356i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: 3356 BGP.next_hop: 10.0.1.255 BGP.local_pref: 255 BGP.community: (65332,888) The relevant parts of my test configuration are below. Is there some trick to making the blackhole "absolute"? filter bgp_in_cogent { if ! rt_import_all(174) then reject; accept; } template bgp cymru_bogons_full { local as 68; multihop 255; export none; import filter { bgp_community.add((65332,888)); dest = RTD_BLACKHOLE; bgp_local_pref = 255; accept; }; } protocol bgp bgp_cogent from ebgp { neighbor 38.8.8.105 as 174; import filter bgp_in_cogent; } protocol bgp l3_bogons from cymru_bogons_full { local 162.9.5.3 as 68; neighbor 10.0.1.255 as 3356; } Thank you!

2 1

BFD to Juniper SRX
by Tom Harbert 27 Nov '14

27 Nov '14

Hello, I am running BIRD 1.4.0 on an Ubuntu linux machine which peers BGP successfully with a Juniper SRX firewall. I am having difficulties getting BFD past the Init state. See below for both BIRD and SRX config and logs. It appears as though the firewall is not receiving the BFD messages. I have confirmed that there are no access control restrictions for BFD hitting the SRX (host-inbound-traffic as well as loopback filter). I have already adjusted the Linux source port selection with: sysctl -w net.ipv4.ip_local_port_range="49152 65535" I am sure its something basic, troubleshooting suggestions appreciated. Thanks, Tom. // bird.conf protocol bfd { interface "172.30.6.8/32" { interval 1000 ms; multiplier 3; }; } protocol bgp iBGP_1 { .... neighbor 172.30.6.1 as z; source address 172.30.6.8; .... bfd; .... } // bird host $ sudo ip addr show eth0 | grep inet inet 172.30.6.8/24 brd 172.30.6.255 scope global eth0 $ sudo birdc show bfd session BIRD 1.4.0 ready. bfd1: IP address Interface State Since Interval Timeout 172.30.6.1 --- Init 05:27:46 1.000 3.000 $ sudo tcpdump -i eth0 udp port 3784 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes 05:47:35.873663 IP srx-host.49152 > bird-host.3784: BFDv1, Control, State Down, Flags: [none], length: 24 05:47:36.642025 IP srx-host.49152 > bird-host.3784: BFDv1, Control, State Down, Flags: [none], length: 24 05:47:37.521546 IP srx-host.49152 > bird-host.3784: BFDv1, Control, State Down, Flags: [none], length: 24 05:47:38.349886 IP srx-host.49152 > bird-host.3784: BFDv1, Control, State Down, Flags: [none], length: 24 05:53:19.824960 IP (tos 0xc0, ttl 255, id 16504, offset 0, flags [none], proto UDP (17), length 52) srx-host.49152 > bird-host.3784: BFDv1, length: 24 Control, State Down, Flags: [none], Diagnostic: No Diagnostic (0x00) Detection Timer Multiplier: 3 (3000 ms Detection time), BFD Length: 24 My Discriminator: 0x0000000f, Your Discriminator: 0x00000000 Desired min Tx Interval: 1000 ms Required min Rx Interval: 1000 ms Required min Echo Interval: 0 ms $ sudo tail -f /var/log/bird.log | grep bfd 2014-11-27 05:27:42 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Down] 2014-11-27 05:27:43 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Down] 2014-11-27 05:27:43 <TRACE> bfd1: CTL received from 172.30.6.1 [AdminDown] 2014-11-27 05:27:43 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Down] 2014-11-27 05:27:43 <TRACE> bfd1: CTL received from 172.30.6.1 [AdminDown] 2014-11-27 05:27:43 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Down] 2014-11-27 05:27:43 <TRACE> bfd1: CTL received from 172.30.6.1 [AdminDown] 2014-11-27 05:27:43 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Down] 2014-11-27 05:27:43 <TRACE> bfd1: CTL received from 172.30.6.1 [AdminDown] 2014-11-27 05:27:46 <TRACE> bfd1: CTL received from 172.30.6.1 [Down] 2014-11-27 05:27:46 <TRACE> bfd1: Session to 172.30.6.1 changed state from Down to Init 2014-11-27 05:27:46 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Init] 2014-11-27 05:27:46 <TRACE> bfd1: CTL received from 172.30.6.1 [Down] 2014-11-27 05:27:46 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Init] 2014-11-27 05:27:46 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Init] 2014-11-27 05:27:46 <TRACE> bfd1: CTL received from 172.30.6.1 [Down] // juniper firewall set protocols bgp group X bfd-liveness-detection minimum-interval 1000 set security zones security-zone X interfaces reth2.106 host-inbound-traffic protocols bfd > show bfd session Detect Transmit Address State Interface Time Interval Multiplier 172.30.6.8 Down reth2.106 0.000 1.000 3 172.30.6.9 Down reth2.106 0.000 1.000 3 2 sessions, 2 clients Cumulative transmit rate 2.0 pps, cumulative receive rate 0.0 pps // traceoptions Nov 27 16:25:23.540758 Initiated BFD session to peer 172.30.6.8 (Internal AS 65000): address=172.30.6.8 ifindex=151 ifname=reth2.106 txivl=1000 rxivl=1000 mult=3 ver=255 Nov 27 16:25:27.562265 Initiated BFD session to peer 172.30.6.9 (Internal AS 65000): address=172.30.6.9 ifindex=151 ifname=reth2.106 txivl=1000 rxivl=1000 mult=3 ver=255 Nov 27 16:26:59.795599 Terminated BFD session to peer 172.30.6.8 (Internal AS 65000) (Closing) Nov 27 16:26:59.798422 Terminated BFD session to peer 172.30.6.9 (Internal AS 65000) (Closing) Nov 27 16:27:31.810248 Initiated BFD session to peer 172.30.6.8 (Internal AS 65000): address=172.30.6.8 ifindex=151 ifname=reth2.106 txivl=1000 rxivl=1000 mult=3 ver=255 Nov 27 16:27:35.811656 Initiated BFD session to peer 172.30.6.9 (Internal AS 65000): address=172.30.6.9 ifindex=151 ifname=reth2.106 txivl=1000 rxivl=1000 mult=3 ver=255

2 1

Source address selection for transit-router with "blackholed" linknet
by oskar＠cetex.se 13 Nov '14

13 Nov '14

Hi! I'm working on getting a few linux-routers with bird up and running and I'm wondering: Is there any way to influence source-address selection for the routes installed by bird? (how do other bird-users handle this?, I guess I'm not alone?) We have a transit from a provider that doesn't announce the linknet, as a lot of providers do. (and i shouldn't source traffic from the linknet, i should use own addresses) When i source traffic from the server/router it seems linux default-action is to select the interface closest to the destination which is the peering-linknet and it happily sends tcp / udp / icmp requests to the world. The replies never make it back though since the ip isn't reachable from anywhere else. With ip route there seems to be this flag "src <addr>", so you can specify "ip route add x.x.x.x/y via z.z.z.z src a.a.a.a", this influences the kernel to select src a.a.a.a when sending traffic to x.x.x.x/y, but i haven't found such an option in the kernel-table in bird. If i have a router where only the "inside"-ip is reachable from the internet, and all routes point to the outside, how do i make it source all locally generated traffic from the inside-ip? Do you setup multiple routing-tables and set the default-table to direct traffic to the inside, then on the inside-interface have the full routing table (would this work?), or how do you handle this? Best regards Oskar Stenman

3 2

Bird on ubuntu
by Prashant Chougule 13 Nov '14

13 Nov '14

Hi, I have two ubuntu(14.04) hosts running bird(1.4.0) on it, my bird.conf is as follows, *On Host-1*, router id 192.168.1.101; protocol device { scan time 10; } protocol kernel { export all; scan time 15; } protocol static static_bgp { import all; } protocol bgp { import all; export where proto = "static_bgp"; local as 200; neighbor 10.0.6.2 as 1000; } *On Host-2* router id 192.168.1.102; protocol device { scan time 10; } protocol kernel { export all; scan time 15; } protocol static static_bgp { import all; } protocol bgp { import all; export where proto = "static_bgp"; local as 1000; neighbor 10.0.6.1 as 200; } I am not able establish connection between them,it say , no route to host in last error message. how do I configure bird between two ubuntu hosts? -- Thanks &Regards, Prashant Chougule.

2 1

How to export address from loopback via BGP
by Eugene Prokopiev 11 Nov '14

11 Nov '14

Hi, How to export address 1.1.1.1/32 from lo interface via BGP? I tried to do: router id 2.2.2.2; protocol kernel { } protocol static { route 1.1.1.1/32 via "lo"; } protocol bgp { local as 65000; neighbor 2.2.2.1 as 65000; export filter { accept; }; } but there are no any prefixes on neighbor 2.2.2.1 :( -- WBR, Eugene Prokopiev

5 7

Malformed AS_PATH error
by Jiřík Tomáš 06 Nov '14

06 Nov '14

Hi, I am seeing this error message in bird's log and I am unable to find reason. <RMT> PEER: Error: Malformed AS_PATH: 40022002080000b8800000b8800000b8 Weird thing is that if my peer sends me just his prefixes everything is alright. When he sends me full IP table and I apply filter to accept just my peer prefixes, the error occurs again. I have theory, that when BIRD reads route with a malformed path even if he does not accept it, it drops BGP connection with this error. So I have 2 questions. Am I correct in my theory? And if so is there way around it? best regards, Tomas Jirik

2 1