March 2018 - Bird-users - Mailing Lists

Bird2: BGP password & setkey
by Leo Vandewoestijne 08 Mar '18

08 Mar '18

Hello, The setkey option caught my attention when reading the 2.x manual... I'm using FreeBSD 11.1 and was trying to have Bird manage the IPSEC (MD5 checksum), which I've succesfully done already in OpenBGPd before NIC.CZ picked up the Bird project. So I have a number of upstream pears that have it enabled. When the password option arrived in Bird I still used setkey, but in the later 1.x releases I needed to use only the 'password' option in bird.conf, and had to drop my IPSEC settings at the OS level. When I now -using bird 2.0.1- put in a BGP protocol block: password "bla"; setkey enabled; I get returned: bird: /usr/local/etc/bird.conf, line 42: Number expected So therefor (after `enabled/disabled`) I tried `1/0`, and then `yes/no`, even `true/false`. But nothing seems make the behaviour different. What was allowed was: password "bla"; setkey; But... having `setkey` in bird.conf -or not- doesn't seem to make any difference. Meaning I still need to define the password both my regular IPSEC settings AND those in Bird. So yes, I got it working, but -reading the manual- I highly doubt double config was intented. What is the correct/simple/efficient method to do this? FYI in /etc/rc.conf I still have: ipsec_enable="YES" ipsec_program="/sbin/setkey" ipsec_file="/etc/setkey.conf" The double config also makes me wonder if I might be confusing things; I find both "IPSEC" or "MD5 TCP checksum" sounds like improving authenticity of a transport, where "BGP password" -to me- sounds like authentication. But reading both the Bird manual as well as the setkey manual it looks like that's the same thing. Anyway, I also discovered you can set a password in a template (which I use in a cascading way), and further on can overwrite/reset it for particular sessions using `password "";`. As the manual doesn't mention it, I'm unsure if that's a bug or a feature, but that's very nice! Another nice new behaviour I discovered is that now you can have mixed (enabled/disabled) sessions on the same interface (which -in my case- is having multiple IP's). In 1.6 I never got that working. -- Met vriendelijke groet, With kind regards, Leo Vandewoestijne <%2A%2A%2A(a)dns.company> <www.dns.company>

2 1

BGP bird implement some exterior split horizon process?
by Mattia Milani 08 Mar '18

08 Mar '18

Hello everyone. I wnant to make a question reguarding BGP in particular EBGP, and how message update send is applied on bird. My bird version is 2.0.1. My Configuration have 3 peer virtualized on my pc with bird running three configuration for BGP The configuration is the following: H0.eth1 is connected to H1.eth1 and they can spooke each other without problem, protocols goes on esatbilished state H1.eth1 like i saide before is connected to H0.eth1 H1.eth2 is connected to H2.eth2 and they can spooke each other without problem, protocols goes on esatbilished state The address of the interface are the following: H0.eth1: 10.0.0.1/30 H1.eth1: 10.0.0.2/30 H1.eth2: 10.0.0.5/30 H2.eth1: 10.0.0.6/30 H0 AS id is 0 H1 AS id is 1 H2 AS id is 2 There is two different subnet between the host, like you can see with the address and the netmask assigned. My question is on the logic of the H1 update sending system. The only peer that export a route is H0, it sends the route to H1 that share it The route shared is 100.0.1.0/24 but this is not important for the question. With tcpdump and the option -vvv i had seen that H0 and H1 open the connection H1 and H0 open the connection H1 and H2 open the connection H0 sends to H1 the route 100.0.1.0/24 with an update message H1 recive the route from H0 it elaborates it and with the filter found that it's valid and put it on his routing table H1 now send an update message with the route learned from H0 only to H2 with the AS PATH setted correctly. But why H1 didn't send back the same update message to H0? H0 after it will discard the route because it found his AS id in the AS path On the RFC they talk about the split horizon but it's only for the interior BGP section 9.2 "UPDATE message from an internal peer, the receiving bgp speaker shall not re-distribute the routing information contained in that update message to other internal peer" obiusly anless it acts like a route reflector But for exterior bgp they didn't spoke about limit like that Now why H1 didn't send the route to H0? it's a bird choice? i can disable that setting somthing on the config file (I searched on the web page but i didn't see anything for that)? If there isn't an atribute to change where i need to change the code of bird to make this working? Thanks for the attention, waiting you answer, Mattia

1 0

BIRD 1.6.3 on Centos7
by Georg Kahest 08 Mar '18

08 Mar '18

Hello, I tried installing bird 1.6.3 from bird repos, but the install seems to fail with dependency error: Resolving Dependencies --> Running transaction check ---> Package bird.x86_64 0:1.6.3-1 will be installed --> Processing Dependency: libtinfo.so.6()(64bit) for package: bird-1.6.3-1.x86_64 --> Processing Dependency: libncurses.so.6()(64bit) for package: bird-1.6.3-1.x86_64 --> Finished Dependency Resolution Error: Package: bird-1.6.3-1.x86_64 (bird) Requires: libtinfo.so.6()(64bit) Error: Package: bird-1.6.3-1.x86_64 (bird) Requires: libncurses.so.6()(64bit) Are the packages in BIRD repo broken ? Georg

1 0

How do I configure BIRD to support multiple Linux kernel routing tables?
by Grant Taylor 08 Mar '18

08 Mar '18

Pre Script: I'm a BIRD n00b How do I configure BIRD to support multiple Linux kernel routing tables? I have found and tried a few different things on the web, but none seem to be doing what I want. I want to export routes from my "main" routing table (254) and an additional routing table "default" (253). Aside: I have multiple ip rules to cascade across multiple routing tables (local, main, reject, bogons, …, and finally default) looking for a match. I do this so that I can have Linux's routing stack handle various filtering for me. BIRD is successfully exporting routes from the main (254) routing table. I'd like to also export route(s) from the default (253) routing table. # cat /etc/bird.conf protocol kernel main { learn; export all; import all; persist no; } protocol device { } protocol direct { interface "*"; } protocol rip { export all; import all; interface "eth0", "eth1", "eth2", "eth3" { version 2; }; } I have tried adding additional kernel protocols, including various incarnations of (kernel) table # entries and have had: syntax errors, references to required additional lines, and other unhappy things. So, will someone point me at a document that talks about how to work with multiple Linux routing tables? Thank you in advance. -- Grant. . . . unix || die

3 6

[bird2]: babel compile bug?
by Leo Vandewoestijne 07 Mar '18

07 Mar '18

Hello list, If I compile using the following: BIRD was configured with the following options: Source directory: . Object directory: obj Iproute2 directory: System configuration: ./sysdep/cf/bsd.h Debugging: no POSIX threads: yes Routing protocols: bfd babel bgp static Kernel MPLS support: no Client: yes Then I end up with this: ===> Building for bird-2.0.1 gmake[2]: Entering directory '/usr/ports/net/bird2/work/bird-2.0.1' MKDIR -p obj/client obj/conf obj/doc obj/filter obj/lib obj/nest obj/test obj/proto/bfd obj/proto/babel obj/proto/bgp obj/proto/static obj/sysdep/unix obj/sysdep/bsd obj/doc gm4 -P conf/gen_parser.m4 conf/confbase.Y conf/flowspec.Y obj/.dir-stamp filter/config.Y nest/config.Y proto/bfd/config.Y proto/babel/config.Y proto/bgp/config.Y proto/static/config.Y sysdep/unix/config.Y sysdep/unix/krt.Y sysdep/bsd/krt-sock.Y >obj/conf/cf-parse.y bison -dv -pcf_ -b obj/conf/cf-parse obj/conf/cf-parse.y obj/conf/cf-parse.y:2707.7-14: error: symbol PRIORITY is used, but is not defined as a token and has no rules | TX PRIORITY expr { BABEL_IFACE->tx_priority = $3; } ^^^^^^^^ gmake[2]: *** [conf/Makefile:23: obj/conf/cf-parse.tab.c] Error 1 If I do Routing protocols: bfd bgp static or Routing protocols: bfd babel bgp ospf pipe radv rip static or Routing protocols: bfd babel bgp rip static all goes well. Was I trieng something impossible, or is this an error? Is RIP a dependency for Babel? -- Met vriendelijke groet, With kind regards, Leo Vandewoestijne <%2A%2A%2A(a)dns.company> <www.dns.company>

3 2

BGP Monitoring Protocol (BMP) support in Bird?
by Ori Finkelman 07 Mar '18

07 Mar '18

Hi, I have found this one in the archive from last July. Is BMP still planned for any time soon ? On Thu, Jul 06, 2017 at 04:26:13PM +0300, Mikhail Grishin wrote: >* Hi Ondrej, *> >* Is there any news/updates about BMP support in Bird? * Hi, it is planned for this year. -- *Ori Finkelman*Qwilt | Work: +972-72-2221647 | Mobile: +972-52-3832189 | orif(a)qwilt.com

2 2

Export to kernel table - no gateway
by Tom Funken 07 Mar '18

07 Mar '18

Hey, is there a way to define the gateway when export to the kernel table? I've seen some others using "filter { gw = 10.0.0.0; accept; }" on the import. But, when I do it, it will filter all import routes and non of them will be accepted. Regards, Tom

2 3

bird systemd startup init debian
by Rob Lister 07 Mar '18

07 Mar '18

Hi, I'm working on upgrading our route servers to the latest versions (debian stretch and the bird debian package 1.6.3. I need to specify during startup "-c /path/to/config/file" but whatever I do, it just gets ignored and still tries to use /etc/bird/bird.conf I have tried: - Editing /etc/init.d/bird and adding BIRD_ARGS="-c /etc/bird/bird-vlanid1-ipv4.conf" - Editing /etc/defaults/bird (deprecated??) - Editing /etc/bird/envvars - Editing the systemctl with "systemctl edit bird.service" as suggested here: https://www.mail-archive.com/debian-bugs-dist@lists.debian.org/msg1503154.h… - Restarting systemctl daemon-reload There is clearly some step I am missing to make it pick up the config change, but I can't find what it is. Any help would be appreciated. Thanks, Rob root@rs1f:~# systemctl status bird.service ● bird.service - BIRD Internet Routing Daemon (IPv4) Loaded: loaded (/lib/systemd/system/bird.service; enabled; vendor preset: enabled) Drop-In: /etc/systemd/system/bird.service.d └─override.conf Active: failed (Result: exit-code) since Mon 2018-03-05 19:11:50 UTC; 19s ago Process: 305 ExecStartPre=/usr/sbin/bird -p (code=exited, status=1/FAILURE) Process: 280 ExecStartPre=/usr/lib/bird/prepare-environment (code=exited, status=0/SUCCESS) Mar 05 19:11:49 rs1f.lonap.net systemd[1]: Starting BIRD Internet Routing Daemon (IPv4)... Mar 05 19:11:50 rs1f.lonap.net bird[305]: Unable to open configuration file /etc/bird/bird.conf: No such file or directory Mar 05 19:11:50 rs1f.lonap.net bird[305]: bird: Unable to open configuration file /etc/bird/bird.conf: No such file or directory Mar 05 19:11:50 rs1f.lonap.net systemd[1]: bird.service: Control process exited, code=exited status=1 Mar 05 19:11:50 rs1f.lonap.net systemd[1]: Failed to start BIRD Internet Routing Daemon (IPv4). Mar 05 19:11:50 rs1f.lonap.net systemd[1]: bird.service: Unit entered failed state. Mar 05 19:11:50 rs1f.lonap.net systemd[1]: bird.service: Failed with result 'exit-code'.

5 7

Support for dual AS and AS migration
by Adam Król 07 Mar '18

07 Mar '18

Does BIRD have any support for AS migration mechanism as mentioned in RFC7705 https://tools.ietf.org/html/rfc7705? Something like https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration… I know it can be achieved by functions, but maybe there is already simplier way to get this done. Best regards, Adam Król

6 8

problem installing bird 2.0.1
by Mattia Milani 05 Mar '18

05 Mar '18

Hello, i'm trying to istall bird 2.0.1 from github source code, but i found some problems. command ./configure exited correctly with no problem. command make exited with a lot of warinings but without error. command make install exited with this: /usr/bin/install -c -d //usr/local/sbin //usr/local/etc //usr/local/var/run /usr/bin/install -c ../bird //usr/local/sbin/bird /usr/bin/install -c ../birdcl //usr/local/sbin/birdcl if test -n "birdc" ; then \ /usr/bin/install -c ../birdc //usr/local/sbin/birdc ; \ fi if ! test -f //usr/local/etc/bird.conf ; then \ /usr/bin/install -c -m 644 ../doc/bird.conf.example //usr/local/etc/bird.conf ;\ else \ echo "Not overwriting old bird.conf" ; \ fi Not overwriting old bird.conf and i can't understood how to correct this error and compleate the installation before intalling the latest version of bird I removed bird 1.6.3 that was working with no problems. Thanks, Mattia

2 1