June 2018 - Bird-users - Mailing Lists

Re: [bird-support #905971] bird.network.cz on HTTPS
by Christoffer Hansen 17 Jun '18

17 Jun '18

Dear Webmaster(s) for the BIRD project Q: Is there any consideration for moving the project homepage to HTTPS ? Currently the homepage for the HTTPS enabled edition is just the defailt Apache2.4 installation page on Fedora https://bird.network.cz/ -- "This page is used to test the proper operation of the Apache HTTP server after it has been installed. If you can read this page, it means that the web server installed at this site is working properly, but has not yet been configured." Christoffer Hansen netravnen [at] gmail [dot] com 0xC8B382A8A1CDCDB771FEB24CC654948FDA86BECD "You might think that your government is vigilant when it comes to securing your personal information, or that of your children. You would be wrong." - Jake Tapper, CNN Chief Washington Correspondent Den 17-06-2018 kl. 19:03 skrev Darina Strakova via RT: > Dear Sirs, > > this contact address is reserved for members of the paid support program. > > If you are interested in membership that ensures premium customer care at > guaranteed times, advanced security notifications or priority development > of your preferred features, let us know in reply to this email. Detailed > information about the support program and its options <http://bird.network.cz/?support>. > > Otherwise, direct your query to the BIRD user community discussion forum <http://bird.network.cz/mailman/listinfo/bird-users> > > Kind Regards. > > Team BIRD, CZ.NIC > > Dne Ne 17.čen.2018 15:31:42, netravnen(a)gmail.com napsal(a): >> Dear Webmaster >> >> Is there any consideration for moving the project homepage to HTTPS ? >> >> -- >> >> Currently the homepage for the HTTPS enabled edition is just the >> defailt Apache2.4 installation page on Fedora >> >> https://bird.network.cz/ -- "This page is used to test the proper >> operation of the Apache HTTP server after it has been installed. If >> you can read this page, it means that the web server installed at this >> site is working properly, but has not yet been configured." >> >> Christoffer Hansen >> 0xC8B382A8A1CDCDB771FEB24CC654948FDA86BECD >> Also available on IRC, Telegram and Signal. >> >> "You might think that your government is vigilant when it comes to >> securing your personal information, or that of your children. You >> would be wrong." - Jake Tapper, CNN Chief Washington Correspondent >

1 0

Routing between BGP Sessions
by Matthias Merkel 17 Jun '18

17 Jun '18

I have a Debian server which has multiple BGP sessions established via BIRD. I'm not trying to make it so that the server acts as router between these sessions (meaning it would redistribute the routes it receives from peers and route incoming traffic from peers to the peer the IPs are announced by). My config can be found at https://hasteb.in/soxeyago.nginx As this is a test system the peers are connected via GRE. I have replaced the passwords with PASSWORD GOES HERE. Matthias Merkel CTO BoltN Hosting Limited c-Level Phone +498941207255 Mobile +4915752259219 Email matthias(a)boltn-hosting.com Skype matthias_merkel1 Follow us <https://img.beta.newoldstamp.com/r/27887/twitter> <https://img.beta.newoldstamp.com/r/27887/linkedin> <https://img.beta.newoldstamp.com/r/27887/android> <https://img.beta.newoldstamp.com/r/27887/whatsapp>

1 0

BGP Connection reset on fast timers
by saksham 15 Jun '18

15 Jun '18

Hi All, I am testing BGP stability with extremely aggressive timers. The timers are 1/3. I see BGP flapping 2-3 times every 24 hours. Attached is a packet capture, captured on the system running bird. 10.194.8.11 is a Cisco ASR. 10.194.8.13 is the running bird instance. I see multiple keep-alives coming in from .11, but the bird instance responds with hold timer expired. This was about after 12 hours in established state. Connection opens right back up again. I don't see the same issue on upping the timers to 3/9 seconds. Anyone see anything like this before? Thanks, Saksham

4 4

BGP: AS private number check
by Arvin Gan 15 Jun '18

15 Jun '18

Hi All, According to RFC1930, the AS number 64512 to 65535 are reserved for private, I cannot find the implementation for checking private AS number in BIRD, anybody know it or it's lost in BGP ? RFC1930 10<https://tools.ietf.org/html/rfc1930.html#section-10>. Reserved AS Numbers The Internet Assigned Numbers Authority (IANA) has reserved the following block of AS numbers for private use (not to be advertised on the global Internet): 64512 through 65535 Thanks Arvin

2 5

Recall: BGP: AS private number check
by Arvin Gan 15 Jun '18

15 Jun '18

Arvin Gan would like to recall the message, "BGP: AS private number check ".

1 0

Recall: BGP: AS private number check
by Arvin Gan 15 Jun '18

15 Jun '18

Arvin Gan would like to recall the message, "BGP: AS private number check ".

1 0

RE: BGP: AS private number check
by Arvin Gan 15 Jun '18

15 Jun '18

Hi all, Sorry, my understand is incorrect, can ignore the mail. Thanks Arvin From: Arvin Gan Sent: Friday, June 15, 2018 2:14 PM To: bird-users(a)network.cz Subject: BGP: AS private number check Hi All, According to RFC1930, the AS number 64512 to 65535 are reserved for private, I cannot find the implementation for checking private AS number in BIRD, anybody know it or it's lost in BGP ? RFC1930 10<https://tools.ietf.org/html/rfc1930.html#section-10>. Reserved AS Numbers The Internet Assigned Numbers Authority (IANA) has reserved the following block of AS numbers for private use (not to be advertised on the global Internet): 64512 through 65535 Thanks Arvin

1 0

RE: BIRD router/route server functions
by Rae Ho (ITSC) 14 Jun '18

14 Jun '18

Dear MO, Thank you very much for your response. Yes, I followed the sample to set up the routers but don’t why the peering session between them is not established. Rae From: mo(a)linx.net <mo(a)linx.net> Sent: Monday, June 4, 2018 4:40 PM To: Rae Ho (ITSC) <raeho(a)cuhk.edu.hk> Cc: bird-users(a)network.cz Subject: Re: BIRD router/route server functions On 4 Jun 2018, at 07:08, Rae Ho (ITSC) <raeho(a)cuhk.edu.hk<mailto:raeho@cuhk.edu.hk>> wrote: Dear All, I’m Rae of CUHK. We are exploring BIRD router/route server functions. Now I set up 2 BIRD routers to from BGP session between them, seems It can’t form the peering (in active status). Questions: 1. Is there any pre-config need to be set up? (i.e. interface? Internal Subnet?) 2. Would you mind sending me some sample configurations? Rae Try looking here. https://gitlab.labs.nic.cz/labs/bird/wikis/Examples Mo

7 19

RE: BGP keepalive_time
by Arvin Gan 13 Jun '18

13 Jun '18

Hi all, Anyone meet the issue as below reason that cause BGP hold timer timeout (keepalive_time > hold_time) and switch action between closing and opening session? Thanks Arvin From: Arvin Gan Sent: Friday, June 08, 2018 3:22 PM To: 'Ondrej Zajicek' <santiago(a)crfreenet.org> Cc: bird-users(a)network.cz Subject: BGP keepalive_time Hi all, When I used bird, found a question that BGP session received OPEN message, hold_time is updated with min(config_hold_time, peer_hold_time), but keepalive_time is not updated if keepalive_time is not zero, that maybe cause keepalive_time is more than the updated hold_time after received OPEN message. Line 702 in packets.cc for bgp protocol : conn->keepalive_time = p->cf->keepalive_time ? : conn->hold_time / 3; RFC 4271: 4.4. KEEPALIVE Message Format BGP does not use any TCP-based, keep-alive mechanism to determine if peers are reachable. Instead, KEEPALIVE messages are exchanged between peers often enough not to cause the Hold Timer to expire. A reasonable maximum time between KEEPALIVE messages would be one third of the Hold Time interval. KEEPALIVE messages MUST NOT be sent more frequently than one per second. An implementation MAY adjust the rate at which it sends KEEPALIVE messages as a function of the Hold Time interval. Thanks Arvin

2 3

BGP make client (default) announcement depend on ibgp/upstream peers being "up"
by Patrick Schaaf 12 Jun '18

12 Jun '18

Hi, new bird / BGP user here, please bear with me :) Consider a scenario with a bird box acting as (one of several possible) gateway for a set of clients, while having an iBGP and/or upstream BGP connection where the "real routes" come from. Towards the client(s) a default route should be announced. Is it possible to make the client default route announcement depend on at least one of the upstream peers (iBGP, real upstream) being "up" and having sent us all its routes? Or, even more ideally, one of them being up, having sent all its routes, _and_ bird having gotten around to installing them all in the kernel (data plane)? Conversely, if for any reason no more upstream peers are up, kernel routes are withdrawm (shutdown), withdraw that default announce to the clients? Is this possible? (using bird 2.0.2) Is there a different approach to make sure the clients won't be fooled into sending us data plane traffic already while we're not ready for it yet? best regards Patrick

2 2