June 2018 - Bird-users - Mailing Lists

BGP hostentry update
by Arvin Gan 28 Jun '18

28 Jun '18

Hi All, When I using bird 2.0.2 version ,I have an issue route include "unreachable", but I think this application is reasonable , anyone can help me ? Error is reported in codes: rt_update_hostentry() { .... if (a->hostentry) { /* Recursive route should not depend on another recursive route */ -------do you know the reason ?? log(L_WARN "Next hop address %I resolvable through recursive route for %N", he->addr, n->n.addr); goto done; } ...... } bird> show route all Table master4: 192.170.13.0/24 unreachable [bgp1 04:31:13.630 from 192.170.23.15] * (55/-) [AS2000i] Type: IBGP univ BGP.origin: IGP BGP.as_path: 2000 BGP.next_hop: 192.170.40.13 BGP.local_pref: 100 192.170.15.0/24 unicast [bgp1 04:31:13.630] * (55/0) [?] via 192.170.23.15 on A3IF1 Type: IBGP univ BGP.origin: Incomplete BGP.as_path: BGP.next_hop: 192.170.23.15 BGP.local_pref: 100 192.170.23.0/24 unicast [direct1 04:31:07.741] * (255) dev A3IF1 Type: device univ unicast [bgp1 04:31:13.630] (55/0) [?] via 192.170.23.15 on A3IF1 Type: IBGP univ BGP.origin: Incomplete BGP.as_path: BGP.next_hop: 192.170.23.15 BGP.local_pref: 100 192.170.27.0/24 unreachable [bgp1 04:31:13.630 from 192.170.23.15] * (55/-) [?] Type: IBGP univ BGP.origin: Incomplete BGP.as_path: BGP.next_hop: 192.170.15.27 BGP.local_pref: 100 unicast [kernel2 04:31:06.395] (10) via 192.170.23.15 on A3IF1 onlink Type: inherit univ Kernel.source: 4 Kernel.metric: 5 192.169.23.0/24 unicast [direct1 04:31:08.093] * (255) dev N1IF1 Type: device univ 192.170.40.0/24 unicast [bgp1 04:31:13.630] * (55/0) [?] via 192.170.23.15 on A3IF1 Type: IBGP univ BGP.origin: Incomplete BGP.as_path: BGP.next_hop: 192.170.23.15 BGP.local_pref: 100 unicast [kernel2 04:31:06.395] (10) via 192.170.23.15 on A3IF1 onlink Type: inherit univ Kernel.source: 4 Kernel.metric: 5 Thanks Arvin

2 5

BIRD 2.x and arrays
by Carlo Rengo 27 Jun '18

27 Jun '18

Hi, I'm testing BIRD 2 (version 2.0.2) but I am having issue with the new syntax. More specifically, with arrays. This is a snippet of my configuration: protocol direct direct1 { interface "lo"; debug all; ipv4 { import where net ~ 192.168.60.0/24 ; export none; }; } I start bird and this is the logged output: 2018-06-27T15:26:21.123818+02:00 my.bird.router.com bird: direct1 < address 127.0.0.0/8 on interface lo added 2018-06-27T15:31:19.396405+02:00 my.bird.router.com bird: direct1 < address 192.168.60.10/32 on interface lo added 2018-06-27T15:31:19.396527+02:00 my.bird.router.com bird: direct1 > filtered out 192.168.60.10/32 unicast 2018-06-27T15:31:19.396653+02:00 my.bird.router.com bird: direct1 < address 192.168.60.20/32 on interface lo added 2018-06-27T15:31:19.396778+02:00 my.bird.router.com bird: direct1 > filtered out 192.168.60.20/32 unicast 2018-06-27T15:31:19.397165+02:00 my.bird.router.com bird: direct1 < address 192.168.60.21/32 on interface lo added 2018-06-27T15:31:19.397295+02:00 my.bird.router.com bird: direct1 > filtered out 192.168.60.21/32 unicast 2018-06-27T15:31:19.397419+02:00 my.bird.router.com bird: direct1 < address 192.168.60.12/32 on interface lo added 2018-06-27T15:31:19.397541+02:00 my.bird.router.com bird: direct1 > filtered out 192.168.60.12/32 unicast This works as expected. Now, if I try to use even a 1-member array, like this: protocol direct direct1 { interface "lo"; debug all; ipv4 { import where net ~ [ 192.168.60.0/24 ]; export none; }; } the result is that bird filters out my IPs. These are the relevant log lines: 2018-06-27T15:26:21.123818+02:00 my.bird.router.com bird: direct1 < address 127.0.0.0/8 on interface lo added 2018-06-27T15:26:21.123943+02:00 my.bird.router.com bird: direct1 < address 192.168.60.10/32 on interface lo added 2018-06-27T15:26:21.124277+02:00 my.bird.router.com bird: direct1 > added [best] 192.168.60.10/32 unicast 2018-06-27T15:26:21.124406+02:00 my.bird.router.com bird: direct1 < address 192.168.60.20/32 on interface lo added 2018-06-27T15:26:21.124534+02:00 my.bird.router.com bird: direct1 > added [best] 192.168.60.20/32 unicast 2018-06-27T15:26:21.124913+02:00 my.bird.router.com bird: direct1 < address 192.168.60.21/32 on interface lo added 2018-06-27T15:26:21.125041+02:00 my.bird.router.com bird: direct1 > added [best] 192.168.60.21/32 unicast 2018-06-27T15:26:21.125177+02:00 my.bird.router.com bird: direct1 < address 192.168.60.12/32 on interface lo added 2018-06-27T15:26:21.125304+02:00 my.bird.router.com bird: direct1 > added [best] 192.168.60.12/32 unicast "import where net ~" + "array" has always worked fine with BIRD 1.6. Did the syntax change on v2? Is this a bug? Thanks, Carlo

2 5

BGP channel add/remove
by Arvin Gan 27 Jun '18

27 Jun '18

Hi All, I am using Bird 2.0.2 version, I create a BGP instance with one channel IPV4, that all work normally. Then I modified configuration file and add new channel IPV6, and using command "configure" under birdc , found the new added channel IPV6 is not announced to peer and channel ipv6 is down state. Then I used "restart bgp", all channels IPV4 and IPV6 are announced, work normally. I also do another test that delete channel in configure file and used "configure", it work normally. Anyone know the difference of actions between "configure" and "restart "? The command "configure" can dynamically modify the BGP protocol configuration, cant the action "configure" re-announce the added/removed capability to peer to update ? Appreciated your help in advance...... Thanks Arvin

3 6

RE: BGP channel add/remove
by Arvin Gan 27 Jun '18

27 Jun '18

Hi All, After investigate the codes for command "configure", found that when delete/add channel, the function proto_configure_channel() always return value "1" , that mean the same is true in function bgp_reconfigure(), line 917 of proto.c will ignore the change(add/delete channel).... Is my understand correct ? Thanks Arvin From: Arvin Gan Sent: Friday, June 22, 2018 5:23 PM To: bird-users(a)network.cz Subject: BGP channel add/remove Hi All, I am using Bird 2.0.2 version, I create a BGP instance with one channel IPV4, that all work normally. Then I modified configuration file and add new channel IPV6, and using command "configure" under birdc , found the new added channel IPV6 is not announced to peer and channel ipv6 is down state. Then I used "restart bgp", all channels IPV4 and IPV6 are announced, work normally. I also do another test that delete channel in configure file and used "configure", it work normally. Anyone know the difference of actions between "configure" and "restart "? The command "configure" can dynamically modify the BGP protocol configuration, cant the action "configure" re-announce the added/removed capability to peer to update ? Appreciated your help in advance...... Thanks Arvin

2 1

BGP between Cisco and BIRD
by Isaac HO 26 Jun '18

26 Jun '18

dear all, finally, stop the iptables. 2 BIRD routers can establish BGP. But cannot form BGP with Cisco csr1000v router Last error: Socket: Connection refused <-- 1. can traceroute from cisco router to a BIRD 2. cannot traceroute from the BIRD router to the Cisco router 3. can ping together 4. iptables service is stopped on BIRD Would you please help.

1 0

Flowspec Extended communities
by Tim Weippert 25 Jun '18

25 Jun '18

Hi List, i do some testing on Bird as FlowSpec Controller. I added a static protocol for inserting flowspec routes: flow4 table flowtab4; # RFC 5575 flow specification protocol static flowstat4 { flow4; route flow4 { src 80.147.231.118/32; dst 185.55.234.2/32; }; } and setting en export filter on the peer to add the needed extended community to discard the traffic: # IPv4 Flowspec (1/133) flow4 { # connects to flowtab4 table by default import all; export filter { # Rate Limit 0 == discard bgp_ext_community.add((generic, 0x80060000, 0x00000000)); accept; }; }; With this approach i can successfully drop all flow4 entries on a cisco ASR 1001-X. But how would i add several flow routes to the flow table and deside differntly on the action? Is it possible to add the community directly to the route entry in the static table, as it is possible in a ipv4 static channel/protocol? I haven't found anything in the documentation. Or do i need to write an filter which match on different flow attributes to set individual actions? Additional i can't really calculate a rate-limit, does someone had an example for this? regards, tim -- Tim Weippert http://weiti.org - weiti(a)weiti.org GPG Fingerprint - E704 7303 6FF0 8393 ADB1 398E 67F2 94AE 5995 7DD8

3 4

BIRD BGP logging
by ABBAS, KASHIF 21 Jun '18

21 Jun '18

Team : trying to observe the BPG protocol hick up traces in Bird logs....(BIRD daemon only spitting (Received: Administrative reset) messages.. no info about the bgp peeing up time ...do I need to enable more elaborate traces ?? ... any recommendation?? log syslog all; Thanks, Kashif Abbas

1 0

Automating BIRD configuration
by Matthias Merkel 20 Jun '18

20 Jun '18

We're trying to integrate BIRD with our automated DDoS detection and mitigation system. For this we need a way to have our software create static routes (to be more exact blackholes) and add BGP communities to announcements. Is there any way to do using CLI or control socket or would we have to make the software modify the config file and reload BIRD? Matthias Merkel CTO BoltN Hosting Limited c-Level Phone +498941207255 Mobile +4915752259219 Email matthias(a)boltn-hosting.com Skype matthias_merkel1 Follow us <https://img.beta.newoldstamp.com/r/27887/twitter> <https://img.beta.newoldstamp.com/r/27887/linkedin> <https://img.beta.newoldstamp.com/r/27887/android> <https://img.beta.newoldstamp.com/r/27887/whatsapp>

4 3

running two bird daemons which listen on loopback IP
by Pavlos Parissis 19 Jun '18

19 Jun '18

Hi, For testing purposes I want to run two bird instances which listen on two different IPs. Those IP addresses are assigned to loopback interface(Linux box). I have configured BGP but each daemon is waiting the other to become neighbor. I run tcpdump on loopback interface and I don't see any network traffic, and I am wondering if using loopback inteface isn't supported. Cheers, Pavlos

3 3

how to check syntax of bird.conf ?
by Илья Шипицин 19 Jun '18

19 Jun '18

hello, we are going to add automation on top of bird.conf is there some way to check syntax of it ?

2 4