June 2015 - Bird-users - Mailing Lists

Support for BGP Flow Spec / RFC 5575
by Pavel Odintsov 12 Jun '15

12 Jun '15

Hello, Bird team! Do you have any plans about BGP Flow Spec (RFC 5575) implementation? It's very important protocol for traffic filtering and DDoS mitigation and it's must for modern route servers. Cisco and Juniper have complete support for it but in open source routing side there are no news on this field :( Fortunately, we have ExaBGP which could generate flow spec announces automatically. And Bird could add partial support for route reflection for flow spec NLRI and we could use ExaBGP as source for flow spec announces. There are excellent guide about this feature implementation in Cisco: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/… -- Sincerely yours, Pavel Odintsov

3 4

Bird OSPF. Mask for advertised prefixes.
by Пьянков Алексей 11 Jun '15

11 Jun '15

Hello. We have bird 1.4.5 on servers with CentOS 6.5. We use it for advertise loopback sub-interfaces by OSPF. All subifs with /32 mask. We use IPVS+keepalived to bring up and down loopback subifs. Ifconfig: # ifconfig eth0.79 Link encap:Ethernet HWaddr 00:50:56:BA:37:70 inet addr:10.1.79.2 Bcast:10.1.79.255 Mask:255.255.255.0 inet6 addr: fe80::250:56ff:feba:3770/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:34948906 errors:0 dropped:0 overruns:0 frame:0 TX packets:34154161 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:3954197378 (3.6 GiB) TX bytes:3820153316 (3.5 GiB) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:65536 Metric:1 RX packets:19544 errors:0 dropped:0 overruns:0 frame:0 TX packets:19544 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:977404 (954.4 KiB) TX bytes:977404 (954.4 KiB) lo:34 Link encap:Local Loopback inet addr:10.9.200.100 Mask:255.255.255.255 UP LOOPBACK RUNNING MTU:65536 Metric:1 OSPF works on eth0.79 interface. Problem - when IPVS+keepalived brings up any loopback subif - Bird additionally accept same network but with /8 mask and advertise it to the network. >From Bird log: Jun 11 10:36:23 bird: net accepted:10.0.0.0/8 2015-06-11 10:36:22 <INFO> net accepted:10.9.200.100/32 So in network I see: 10.0.0.0/8, ubest/mbest: 1/0 *via 10.1.79.2, Vlan79, [110/10], 00:02:06, ospf-0, type-2 and 10.9.200.100/32, ubest/mbest: 1/0 *via 10.1.79.2, Vlan79, [110/10], 02:12:08, ospf-0, type-2 Filter for the Bird to advertise loopbacks: protocol direct { interface "lo*"; # Restrict network interfaces it works with } filter connected_OSPF { # redistribute connected if ( source = RTS_DEVICE ) then { print "net accepted:", net; ospf_metric2 = 10; accept; } } As workaround we configure another filter that accept only /32 nets: filter connected_OSPF # redistribute connected prefix set DEVICE_NETWORKS; { DEVICE_NETWORKS = [ 0.0.0.0/0{32,32} ]; if ( source = RTS_DEVICE && net ~ DEVICE_NETWORKS ) then { print "net accepted:", net; ospf_metric2 = 10; accept; } reject; } Is it expected behavior of Bird to advertise prefixes like this or I missed something? Alexey

1 0

How to export prefixes configured on loopback via OSPF
by Madhuri 11 Jun '15

11 Jun '15

Hi, How to export prefixes configured on loobback interfaces through OSPF. working fine with BGP. following is the configuration that I have tried. But 192.168.1x.1 are not shown in neighbor's route table. Thanks in advance. *ifconfig output :* lo:11 Link encap:Local Loopback inet addr:192.168.11.1 Mask:255.255.255.0 UP LOOPBACK RUNNING MTU:65536 Metric:1 lo:12 Link encap:Local Loopback inet addr:192.168.12.1 Mask:255.255.255.0 UP LOOPBACK RUNNING MTU:65536 Metric:1 *bird.conf* router id 1.1.1.1; protocol direct { interface "eth1","eth2","lo*"; } protocol kernel { persist; scan time 20; export all; } protocol device { scan time 10; } protocol ospf R1 { tick 2; rfc1583compat yes; area 0.0.0.0 { stub no; interface "eth1","eth2" { hello 9; retransmit 6; cost 10; transmit delay 5; dead count 5; wait 50; type broadcast; authentication simple; password "admin"; }; }; } Thanks, Madhuri

2 2

BGP multipath support
by Alexander Frolkin 08 Jun '15

08 Jun '15

Hello, I was wondering how hard it would be to add BGP multipath support to BIRD, or if anyone was working on it already? I'm not a C guru, but I could maybe have a look at doing this, especially if someone who knows the code could point me in the right direction... :-) Thanks! Alex

5 10

BGP extented communities checks
by Arnaud Fenioux 08 Jun '15

08 Jun '15

Hi folks! I have played with extended communities with some of my peers, and have written this function below to facilitate my checks. On the examples found on github (https://gitlab.labs.nic.cz/labs/bird/wikis/Route_server_with_community_base… and https://gitlab.labs.nic.cz/labs/bird/wikis/Route_server_with_community_base…) I have noticed that RO are used : if (ro,myas,peeras) ~ bgp_ext_community then return true; bgp_ext_community.delete([(ro,0,*)]); But according to my tests, RT should be used. Did anybody made the same ascertainment? ----- ### Chek if the community or ext_community is present function is_community(int left; int right) { if right > 65535 then { #Check of the extended community for 32b ASN if (rt,left,right) ~ bgp_ext_community then return true; } else { #Check of the extended (and not ext) community for 16b ASN if ((left,right) ~ bgp_community) || ((rt,left,right) ~ bgp_ext_community) then return true; } return false; } ---- Cheers, -- Arnaud Fenioux Network Engineer - FranceIX

2 4

OSPFv3 and stub interfaces without lladdr
by Christian Tacke 04 Jun '15

04 Jun '15

Hi, I am trying to get ipv6 routes to openvpn server into ospf. if have an interface "tun*" { stub; }; in my bird6.conf. openvpn does not add link level addrs to its interfaces. That's why ospf ignores this interface. Ignoring it for doing ospf on it is okay, as ospf really wants to run over lladdrs. But do stub networks require a lladdr to be used in ospf? This is at least confusing to me. bird> sh int tun2 up (index=20) PtP Multicast AdminUp LinkUp MTU=1500 fdxx:xxxx:xxxx:4000::1/64 (Primary, scope site) bird> show ospf interface "tun2" ospf1: A workaround is to add fe80::1/64 to tun2 in some "up" script in openvpn, so that bird6 sees the interface. But that does not feel right, really. Cheers Christian -- www.cosmokey.com

3 4

Bird4 ospf not learning/distributing p2p links routes
by daniele 03 Jun '15

03 Jun '15

Hi all, Is it normal that routes flagged as H, ie. /32 routes in p2p links in linux routing table, are not learnt and distributed by ospf? In my ospf area I need all the routers to know about the different p2p endpoint addresses which are not distributed by ospf in bird4. The only networks that are distributed are non-p2p subnets. Currently the only way to make this happen is to manually set some /32 static routes.. not really flexible. thanks daniele

2 2

IS-IS
by kveri new 01 Jun '15

01 Jun '15

Hello, I would like to implement IS-IS as a part of my master thesis. Are there any apparent problems which would prevent successful implementation, political and/or technical? Also I would like to hear opinions of the authors. Implementation timeframe is 2013 (if we live past 21th). Regards, Martin Čechvala Faculty of Informatics and Information Technologies Slovak Technical University

7 8

[PATCH] Fix typo: OSPF designated router
by Hans van Kranenburg 01 Jun '15

01 Jun '15

Hi, attached a small patch to correct the naming of the OSPF designated router in the output of show ospf interface. Have fun, -- Hans van Kranenburg - System / Network Engineer T +31 (0)10 2760434 | hans.van.kranenburg(a)mendix.com | www.mendix.com

2 1