February 2015 - Bird-users

bird & BGP over L2TP
by Alexander Shikov 23 Feb '15

23 Feb '15

Hi All! I'd like to ask for help with some strange issue. I have a L2TP tunnel between two routers. Both routers are running on bird 1.4.5 and CentOS. L2TP tunnel has /30 addressing. For some strange reason bird does not install next-hop received by BGP: bird> show route 185.61.136.0/22 all 185.61.136.0/22 via 185.11.144.1 on ens1f0 [kiev_rtr 2015-02-12 11:13:17 from 185.61.139.5] * (100/?) [i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: BGP.next_hop: 185.61.139.5 BGP.local_pref: 100 185.61.139.5 is reachable: [root@tunnel etc]# ping 185.61.139.5 PING 185.61.139.5 (185.61.139.5) 56(84) bytes of data. 64 bytes from 185.61.139.5: icmp_seq=1 ttl=54 time=40.8 ms ^C --- 185.61.139.5 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 40.818/40.818/40.818/0.000 ms [root@tunnel etc]# arp -n 185.61.139.5 Address HWtype HWaddress Flags Mask Iface 185.61.139.5 ether aa:8a:10:bb:91:02 C tun1 Please advice. Thanks! -- Alexander Shikov Technical Staff, Digital Telecom IX

2 1

bird spawning huge amount of BGP traffic
by Simon Szustkowski 23 Feb '15

23 Feb '15

Hi, i am participating in a virtual network which is created for computer enthusiasts to gain knowledge about advanced routing protocols and stuff. It is called the DN42 (http://dn42.net) Currently i am establishing BGP sessions with the help of quagga, but since it is quite bloated for my small setup, i would like to migrate to bird. I have configured bird4 with the example config provided in the DN42 wiki (https://dn42.net/howto/Bird) (sorry about the HTML entities). The result is: Bird populates my routing table with all the correct routes, but spawns very huge amounts of BGP traffic. I ran it overnight accidentally, and it spawned over 70GB traffic on some interfaces, so these particular peers closed their VPN tunnels to me, which is understandable. I have created a minimal config by myself, which has the same result. However, peering with quagga works as expected, with all routes and little traffic. But since i want to go away from quagga, and use bird, i am asking you for advice in this problem. Where is my error, and how can i use bird in the correct way? Additional info: I am using bird on Debian Wheezy Stable, and the virtual connections to my peers are set up with OpenVPN. I use IPv4 only (currently). So i would be thankful for any help or suggestions how to fix the error. Thanks in advance, Simon --- Before printing this email, think if it is really needed.

3 2

list of networks as global definition
by Tapio Haapala 23 Feb '15

23 Feb '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I try make conf where all networks are at begin of sipmple format as possible at well commented. Rules & other thing use them later. Is it possible to do global network list as variable or are variables possible only in blocks? I tried put thist begind of conf define local_nets = [ 2a00:X::/32, #My networkA 2a00:X::/48 #My network B ]; define own_nets = [ 2a00:X::/32, #My network C at another place local_nets ]; And later at protocol block I tried use them like export filter { if (net ~ own_nets) then accept; }; Clearly this is not way to do it because I get syntax error at that first line :) I can make function what is something like this: function is_local_net() prefix set local_nets; { local_nets = [ 2a00:X::/32, #My networkA 2a00:X::/48 #My network B ]; if net ~ local_nets then return false; return true; } but then I have "code" at my conf section of config file. and it hurts my OCD, ADHD or what ever :) So is it possible to do prefix list definitions as global? - -- F-Solutions Oy Tapio Haapala PL7, 90571 Oulu GSM 0400 998371 Skype burner- IRC Burner@ircnet -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (MingW32) iQEcBAEBAgAGBQJU4HzSAAoJECSUPJ4T/HZPo48IAIY9qdGlLOIhGtR+1/a8fqYC HU5qMYkc2UtL3MAz3zlmNbDn1/HeUQRbic/Q7zI5TSQqtMFBINSVTbAA15Le68te JRANQm9TNokzYZ5us3uj+2teyQoz8+f8Iq2Cro9bOjsaQQKRjLw05tqYwPx70XqX PeKBsrfjxWL8A8mbRnEt9Z+AEamPXbwtH3tuyK1CyRRl7pcfC2oe0AcUuQvN3nRF TE4wsd3mahVPIshKMGvERFtx7pzOG5SW4DB+dBSCGCPIOk00EmDMJMtP6ErgGJzl ke7hokfi4NBop9yN7HU7+dB1e/2c6A/iBapGlsyKHK30rPHRY/dBozuXjQeNgRM= =9O9N -----END PGP SIGNATURE-----

2 1

[PATCH] crash in ospf DBDESC
by Александр Черников 20 Feb '15

20 Feb '15

Hello. I've got the following core for bird 1.4.5: (gdb) bt #0 0x000000000043ecfa in ospf_dbdes_send (n=0x8011018a0, next=1) at ../../../proto/ospf/dbdes.c:145 #1 0x000000000043f6b2 in ospf_dbdes_receive (ps_i=0x8010c9000, ifa=0x8011131a0, n=0x8011018a0) at ../../../proto/ospf/dbdes.c:386 #2 0x0000000000438fdd in ospf_rx_hook (sk=0x80101b8c0, size=28) at ../../../proto/ospf/packet.c:485 #3 0x000000000045f972 in sk_read (s=0x80101b8c0) at io.c:1760 #4 0x000000000046034b in io_loop () at io.c:1975 #5 0x0000000000467da3 in main (argc=3, argv=0x7fffffffed30) at main.c:825 .. (gdb) p n->dbsi $20 = {prev = 0x0, null = 0x0, next = 0x0, node = 0x0} (gdb) p sn $22 = (snode *) 0x0 Investigations has shown, that there was major OSPF instability in that area (~20 quagga boxes and and Juniper device) at that moment with either re-election or DR/BDR hang. Unfortunately, I don't have much logs for that. We also had an (typical) issue with this particular quagga peer just prior to the crash: Feb 19 18:28:34 XXX ospf6d[8387]: SLOW THREAD: task ospf6_receive (7f793a115810) ran for 5044ms (cpu time 5032ms) My guess is that 1) we started to send our DB to the peer and it stopped confirming DD packets for a while 2) Flap happened so part of/most LSADB got flushed 3) Quagga finally awoke from sleep and confirmed last packet 4) we tried to get the next chunk of LSAs but there were no more (unsent ) LSAs in DB 5) this message appeared in the list Something similar to the attached patch should fix this particular issue (at least I hope so).

1 0

Help with IBGP not advertisement routes - "rejected by protocol"
by Jeronimo de A. Barros 18 Feb '15

18 Feb '15

Hi, I have two routers running bird connected to two peers where one peer is my own ISP and AS which lets us use his AS and was kind enough to allocate two /24 for our networks so that we can have two sites in different locations using BGP with a second ISP to be a multi-home system using only two /24. This is our network (I hope you can understand my sketch): Internet <-> BR1-AS1 <-> R1-AS1 <-> R2-AS1 <-> BR-AS2 <-> Internet | | ^ ^ +> BR2-AS1 <+ +-> Net1/24 +-> Net2/24 So, our main ISP has IBGP sessions from its border-routers (BRx-AS1) to our main router (R1-AS1) which in turn has another IBGP session with our second router located at a remote site (R2-AS1). R2-AS1 has an BGP session with the second ISP border router (BR-AS2). Well, when all sessions are UP, Net1 and Net2 can reach the Internet and each other without problems. But, for example, if the BGP session between R2-AS1 and BR-AS2 goes down, traffic between Net1 and Net2 continues OK, but Net2 can't reach the Internet anymore. Or, in other words, the routes received from BRx-AS1 at R1-AS1 are not being advertised to R2-AS1, in fact a "show protocol all" on R1-AS1 shows its advertising only the direct connected networks and the static routes to R2-AS1 and vice-versa: BIRD 1.4.5 ready. name proto table state since info R2-AS1 BGP master up 17:39:21 Established Router ID: x.y.w.249 Preference: 100 Input filter: ACCEPT Output filter: ACCEPT Routes: 5 imported, 10 exported, 2 preferred Route change stats: received rejected filtered ignored accepted Import updates: 5 0 0 0 5 Import withdraws: 0 0 --- 0 0 Export updates: 527178 527168 0 --- 10 Export withdraws: 20 --- --- --- 0 BGP state: Established Neighbor address: x.y.w.251 Neighbor AS: xxxx Neighbor ID: x.y.w.251 Neighbor caps: refresh restart-aware AS4 Session: internal AS4 Source address: x.y.w.249 Hold timer: 188/240 Keepalive timer: 66/80 The debug shows a lot of "rejected by protocol" messages, which I can't find a clear description of what is its meaning: 2015-02-18 16:55:48 <TRACE> kernel1 < replaced 148.208.146.0/24 via x.y.z.29 on bond1 2015-02-18 16:55:48 <TRACE> BR1-AS1 < rejected by protocol 148.208.146.0/24 via x.y.z.29 on bond1 2015-02-18 16:55:48 <TRACE> BR2-AS1 < rejected by protocol 148.208.146.0/24 via x.y.z.29 on bond1 2015-02-18 16:55:48 <TRACE> R2-AS1 < rejected by protocol 148.208.146.0/24 via x.y.z.29 on bond1 2015-02-18 16:55:49 <TRACE> BR2-AS1 > added [best] 177.10.158.0/24 via x.y.z.29 on bond1 2015-02-18 16:55:49 <TRACE> kernel1 < replaced 177.10.158.0/24 via x.y.z.29 on bond1 2015-02-18 16:55:49 <TRACE> BR1-AS1 < rejected by protocol 177.10.158.0/24 via x.y.z.29 on bond1 2015-02-18 16:55:49 <TRACE> BR2-AS1 < rejected by protocol 177.10.158.0/24 via x.y.z.29 on bond1 2015-02-18 16:55:49 <TRACE> R2-AS1 < rejected by protocol 177.10.158.0/24 via x.y.z.29 on bond1 2015-02-18 16:55:49 <TRACE> BR1-AS1 > removed 177.10.158.0/24 via x.y.z.27 on bond1 This is the template for the IBGP session between R1-AS1 and R2-AS1 (as simple as possible): template bgp ibgp_sites { local as myas; import all; export all; direct; } I know that BGP has a lot of subtle behaviors, and I'd like to know if there is any way to make this work or if it's a dead end approach. Thanks in advance for any help. Jero ps: sorry for my broken English

1 0

"show route" command not using "table master" by default?
by Arnaud Fenioux 18 Feb '15

18 Feb '15

Hello, I’m running BIRD 1.4.5 on an IXP with this setup : "Route server with community based filtering and multiple RIBs" https://gitlab.labs.nic.cz/labs/bird/wikis/Route_server_with_community_base… I have noticed a strange behaviour of the "show route" command whenever I specify “table master” or not. (IP/AS have been anonymised in order to follow the example above) : root@rs2-th2:~# birdc "show route all 12.34.0.0/16 protocol R111x1" BIRD 1.4.5 ready. 12.34.0.0/16 via 10.0.0.11 on eth1 [R111x1 2015-02-16 10:43:59] * (100) [AS111i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: 111 BGP.next_hop: 10.0.0.11 BGP.med: 0 BGP.local_pref: 100 BGP.community: (0,51706) root@rs2-th2:~# birdc "show route table master all 12.34.0.0/16 protocol R111x1" BIRD 1.4.5 ready. 12.34.0.0/16 via 10.0.0.11 on eth1 [R111x1 2015-02-17 11:05:45] * (100) [AS111i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: 111 BGP.next_hop: 10.0.0.11 BGP.med: 0 BGP.local_pref: 100 BGP.community: (51706,64650) (51706,64602) (0,51706) When explicitly specifying “table master” I see communities added from filter “bgp_in_AS111”. When not specifying any table I see route from T111 (the table declared in "protocol bgp R111x1"). Actually I was expecting to have same output on both commands, as it explained in documentation : "If you want to see routes that where accepted from this router to the master routing table then type: bird> show route protocol R222x1" Does any body also noticed this behaviour? Regards, -- Arnaud Fenioux Network Engineer - FranceIX

2 2

Re: Patch to reveal more information in SHOW ROUTE
by Andrew Francis 17 Feb '15

17 Feb '15

Hi Ondrej + Ondrej, Sorry for going quiet for a while. I can probably send an actual patch in a couple of days; is there anything I can do make things easier? Also, is there an indent command I can run to align my spacing with all the other code in the project? :) Thanks Andrew Francis | *Twitch* <http://www.twitch.tv/> | Engineering On Mon, Jan 26, 2015 at 1:11 PM, Ondrej Zajicek <santiago(a)crfreenet.org> wrote: > On Fri, Jan 23, 2015 at 09:16:59PM -0800, Andrew Francis wrote: > > Thanks Ondrej, > > > > That query does seem to return all the routes of interest, but it takes a > > long time (many seconds per query). I'm guessing it's not FIB > accelerated? > > That is true, "show route where 192.168.168.168 ~ net" just applies filter > (where ...) to all routes. > > -- > Elen sila lumenn' omentielvo > > Ondrej 'Santiago' Zajicek (email: santiago(a)crfreenet.org) > OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) > "To err is human -- to blame it on a computer is even more so." >

1 0

[PATCH] Dynamic BGP templates
by Alexander V. Chernikov 15 Feb '15

15 Feb '15

1 2

BIRD Issues for a Newbie
by J Boyle 06 Feb '15

06 Feb '15

Hi, very new to BIRD, we use Quagga but I'm looking at implementing both. I have a Cisco 7200 peering with BIRD, as soon as I enable the peering the 7200 gets the full internet routing table but then hits 100% CPU until I disable the peering. I have peered the 7200 with Quagga and sent the full table and it has no problems at all, sits at around 40% CPU with the same full table. Here is the relevant config which is very basic, I've changed most of the settings without any change in the behaviour :( protocol kernel { # learn; # Learn all alien routes from the kernel # persist; # Don't remove routes on bird shutdown # scan time 20; # Scan kernel routing table every 20 seconds # import all; # Default is import all # export all; # Default is export none # kernel table 5; # Kernel table to synchronize with (default: main) } # This pseudo-protocol watches all interface up/down events. protocol device { scan time 1000; # Scan interfaces every 10 seconds protocol bgp RR_Test { description "RR_Test"; local as yyyy; neighbor x.x.x.x as yyyy; rr client; # export filter bgp_out; rr cluster id 0.0.0.10; export all; multihop; # import filter bgp_in; next hop self; source address x.x.x.x; ________________________________ NOTICE AND DISCLAIMER This e-mail (including any attachments) is intended for the above-named person(s). If you are not the intended recipient, notify the sender immediately, delete this email from your system and do not disclose or use for any purpose. We may monitor all incoming and outgoing emails in line with current legislation. We have taken steps to ensure that this email and attachments are free from any virus, but it remains your responsibility to ensure that viruses do not adversely affect you

1 2

RAdv and AdvRouterAddr
by Vangass 06 Feb '15

06 Feb '15

Hi, Is it possible to configure Bird to set the AdvRouterAddr value in RAdv protocol? Now AdvRouterAddr is send with local-link address but I want to set it to send default gateway from advertised prefix. I did this using radvd but cannot in Bird. Best regards, Vangass

1 0