March 2019 - Bird-users - Mailing Lists

IETF-104 and Netdev 0x13
by Ondrej Zajicek 18 Mar '19

18 Mar '19

Hi In following days IETF 104 and Netdev 0x13 conferences will be held in Prague and we will be present, if anyone wants to meet us. -- Elen sila lumenn' omentielvo Ondrej 'Santiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

3 2

BFD multihop with Junos
by Arzhel Younsi 14 Mar '19

14 Mar '19

Hi, I'm trying to setup BFD multihop session between Bird 1.6.3 and a Juniper MX router to fast failover eBGP multihop sessions. I tried different configuration with no success, the current one is: ------------------------ protocol bfd { interface "*" { interval 300 ms; multiplier 3; }; multihop { interval 300 ms; multiplier 3; }; } protocol bgp { import none; multihop 2; export filter vips_filter; local 208.80.153.77 as 64605; neighbor 208.80.153.192 as 14907; bfd yes; } ------------------------ And the Juniper side: ------------------------ type external; multihop { ttl 2; } local-address 208.80.153.192; import anycast_import; family inet { unicast { prefix-limit { maximum 50; teardown; } } } export NONE; peer-as 64605; bfd-liveness-detection { minimum-interval 300; } multipath; neighbor 208.80.153.77; ------------------------ The firewalls on both sides allow udp/4784 udp/3784 udp/3785 to/from each side. The Bird's BFD state stays on Init, while Junos on Down. ------------------------ bird> show bfd sessions bfd1: IP address Interface State Since Interval Timeout 208.80.153.192 --- Init 15:47:25 2.000 6.000 ------------------------ cr1-codfw> show bfd session address 208.80.153.77 extensive Detect Transmit Address State Interface Time Interval Multiplier 208.80.153.77 Down 0.000 1.000 3 Client BGP, TX interval 0.300, RX interval 0.300 Local diagnostic None, remote diagnostic None Remote state AdminDown, version 1 Replicated Session type: Multi hop BFD Min async interval 0.300, min slow interval 1.000 Adaptive async TX interval 2.000, RX interval 2.000 Local min TX interval 2.000, minimum RX interval 0.300, multiplier 3 Remote min TX interval 0.000, min RX interval 0.000, multiplier 0 Local discriminator 3556, remote discriminator 0 Echo mode disabled/inactive, no-absorb, no-refresh Multi-hop min-recv-TTL 254, route table 0, local-address 208.80.153.192 Session ID: 0x4d954 1 sessions, 1 clients Cumulative transmit rate 1.0 pps, cumulative receive rate 0.0 pps ------------------------ We can see that Bird does send and receive BFD control packets, from/to the proper IPs. ------------------------ dns2001:~$ sudo tcpdump -p -i eno1 "host 208.80.153.192" 16:11:23.585910 IP cr1-codfw.wikimedia.org.49152 > dns2001.wikimedia.org.4784: UDP, length 24 16:11:23.643194 IP dns2001.wikimedia.org.35807 > cr1-codfw.wikimedia.org.4784: UDP, length 24 ------------------------ dns2001:~$ tailf /tmp/bird-debug.log 2018-11-20 15:49:20 <TRACE> bfd1: Sending CTL to 208.80.153.192 [Init] 2018-11-20 15:49:20 <TRACE> bfd1: CTL received from 208.80.153.192 [Down C] ------------------------ Running "monitor traffic" on the proper Junos interface doesn't show any BFD, but I believe that's because it's offloaded to the hardware (not seen on the routing engine). BGP on the other hand is properly established, so it's not a routing issue. I have some more troubleshooting in our ticket https://phabricator.wikimedia.org/T209989 Any pointers on miss-configurations, items to verify or other troubleshooting commands are welcome. Thank you. -- Arzhel

2 6

GRE interfaces down in bird
by Yuriy Borysov 13 Mar '19

13 Mar '19

Hello. I try to configure OSPF between bird (FreeBSD, BIRD 1.6.4) and Juniper via GRE tunnels. I configure tunnels, they UP and works. I see "ping" and traffic from one host to another. But bird mark all GRE tunnels DOWN: root@gw ~ # birdc show interface sum BIRD 1.6.4 ready. interface state address em0 up 1.1.1.1/26 em1 up 2.2.2.2/29 em2 up 192.168.106.200/24 lo0 up 127.0.0.1/8 gre0 DOWN gre1 DOWN gre2 DOWN gre3 DOWN gre5 DOWN gre10 DOWN gre11 DOWN gre12 DOWN Do I need any special settings for GRE? Thanks! -- WBR, Yuriy B. Borysov YOKO-UANIC | YOKO-RIPE

1 0

bird version 2.0.4 - peering with cisco version ios xe 16.3.5 - invalid open message
by Marco van Tol 13 Mar '19

13 Mar '19

Hi there, I'm trying to setup iBGP peering with a cisco router which is giving me an "invalid open message" that I can't seem to fix. - The same router is peering with Juniper and other bird 1.6.3 routers without issues. - The router is also doing IPv6 based peering with all the other routers, which gives the exact same scenario as with IPv4. The relevant parts of the config look as follows (actual IP and AS spaces replaced with private spaces): -----< cut here >----- router id 10.0.0.1; protocol static default_v4 { ipv4 { preference 50; }; route 0.0.0.0/0 unreachable; } filter bgp_in_v4 { if net ~ [ 10.1.0.0/28 ] then accept; reject; } template bgp type1_v4 { direct; local 10.0.0.1 as 64512; ipv4 { export where proto = "default_v4"; import filter bgp_in_v4; import keep filtered; }; } protocol bgp peer_type1a_v4 from type1_v4 { neighbor 10.0.0.2 as 64512; } -----< cut here >----- The debug messages I'm getting are these: -----< cut here >----- 2019-03-08 11:02:33.199 <TRACE> peer_type1a_v4: Incoming connection from 10.0.0.2 (port 18581) accepted 2019-03-08 11:02:33.199 <TRACE> peer_type1a_v4: Sending OPEN(ver=4,as=64512,hold=240,id=0a000001) 2019-03-08 11:02:33.200 <TRACE> peer_type1a_v4: Got OPEN(as=64512,hold=180,id=10.0.0.2) 2019-03-08 11:02:33.200 <TRACE> peer_type1a_v4: Sending KEEPALIVE 2019-03-08 11:02:33.201 <RMT> peer_type1a_v4: Received: Invalid OPEN message 2019-03-08 11:02:33.201 <TRACE> peer_type1a_v4: State changed to stop 2019-03-08 11:02:33.201 <TRACE> peer_type1a_v4: Down -----< cut here >----- My suspicion is that the ipv6 like address representation in the sent open message router id might confuse the cisco. So the opening message we're sending seems to be having the router id represented in hex form, like 32 bits of an IPv6 address. Is this correct, and is there a way to either fix or work around this? Many thanks! Marco van Tol

2 13

maybe it is a bug in nexthop__same function
by Derek Pan 12 Mar '19

12 Mar '19

Hi I think below function should be used by comparing two netxhop object with different pointer. If this function is called, the X and Y always have different pointer values, but if their values are same, they also can be treated as the same. I think the "return x== y;" should be replaced by "return 1;". Please have a look. Thank. int nexthop__same(struct nexthop *x, struct nexthop *y) { for (; x && y; x = x->next, y = y->next) { if (!ipa_equal(x->gw, y->gw) || (x->iface != y->iface) || (x->flags != y->flags) || (x->weight != y->weight) || (x->labels_orig != y->labels_orig) || (x->labels != y->labels)) return 0; for (int i = 0; i < x->labels; i++) if (x->label[i] != y->label[i]) return 0; } return x == y; }

3 3

all protocol state debug
by Eugene M. Zheganin 11 Mar '19

11 Mar '19

Hello, I want to log all protocols state changes, and I have a question: debug all { states } is valid in birdc, but why debug all { states }; is invalid in bird.conf ? Thanks. Eugene.

2 2

Backportability of bird2 debian package
by Eugene Crosser 11 Mar '19

11 Mar '19

Hi, I have a request to Ondřej Surý: debian-packaged version of bird2 that is currently on https://salsa.debian.org/debian/bird2.git is unbuildable on older distros because of required version of debhelper (cosmic and stretch have version 11) and init-system-helpers (cosmic has 1.54, stretch - 1.48). Could these dependencies be relaxed to ease backporting of the package? Thanks, Eugene

1 0

How to update from v1.6 to v2.0
by Isaac HO 11 Mar '19

11 Mar '19

Dear All, Would I need to uninstall v1.6 or could update the version by simply steps? For v1.6 un-installation, would you mind providing me the steps? or would you please providing me the upgrading steps? Thanks, Isaac

2 1

bird 2.0.4 - should "protocol rpki" be recognised?
by Marco van Tol 08 Mar '19

08 Mar '19

Hi there, I'm trying to setup a router with RPKI checks. I'm using BIRD version 2.0.4. I was checking the documentation here: https://bird.network.cz/?get_doc&v=20&f=bird-6.html#ss6.13 When I put the following in my config, I get the error message: /etc/bird.conf:32:10 syntax error, unexpected SYM Line 32 is the line with "protocol rpki" on it. This is a copy/paste from the relevant part of the config: -----< cut here >----- roa4 table r4; roa6 table r6; protocol rpki { { roa4 { table r4; }; remote "myhost.domain" transport ssh { bird private key "/root/.ssh/rpki_validator" remote public key "/root/.ssh/known_hosts" user "rpki" }; } -----< cut here >----- What I also noticed is that when I type "show ?" in birdc, it does not list the roa option. Do I need to specify certain commandline options to enable rpki perhaps? Just thinking outloud. :-) Many thanks in advance, Marco van Tol

2 2

Showing local router ID for BGP protocols
by Jakub Nowacki 08 Mar '19

08 Mar '19

Hi, I'm trying to find a command that will allow me to verify router ID being used for particular BGP session. When using 'show protocols all <BGP_PROTOCOL_NAME>' it shows verbose info, but it doesn't show Local Router ID. I know it shows 'Source address' but this is not the same. Is there a command to verify that? Kind regards -- Kuba Nowacki

3 2