September 2020 - Bird-users

Inject ethernet-based defaults to OSPF
by daniele 04 Dec '20

04 Dec '20

Hello list, I???m looking for some advice from someone that has more experience. I'm running bird 1.6.6. I have two routers R1 and R2, each with a single internet uplink U1 and U2, running OSPF and sharing a LAN ethernet segment. Both U1 and U2 are dhcp-based ethernet segments themselves with a next-hop IP address that can change. I want R1 to be the primary LAN internet gateway and R2 the secondary. Should U1 fail, R1 has to route to R2 in order to reach internet through U2. How would you recommend to inject U1 and U2 default routes into OSPF? I cannot use the next-hop ip address as it changes along time, and an interface-based static route would not work. thanks a lot, d

3 8

[patch]: Uninitialized list nodes
by Mikael 24 Nov '20

24 Nov '20

Hi, I have found two occurrences of uninitialized list nodes in bird's master branch. The following config causes asserts (when built with debugging). # Router ID in IPv4 format router id 62.168.0.1; protocol device { interface "*"; } # Static route feed template static t1 { ipv4 { export all; }; route 10.0.0.0/24 unreachable; } protocol static from t1 { } The attached patches solves the problems. /Mikael

2 1

Unable to get Bird 2 to listen on the BGP socket
by Skyler Mäntysaari 23 Nov '20

23 Nov '20

Hi there, I’m fairly certain that my issue is something rather small, or stupid but I’m unable to get Bird to listen on the 179 port. The other side has direct in the protocol definition which is correct, and I tried this side with that as well but it only says “as213021_hel_node: Waiting for fe80:10::1%wg1 to become my neighbor” so I don’t really have more clues. I did try to do strace and look for bind events, but couldn’t find any except for the control socket. My config can be seen here: https://dpaste.com/6P6NAUPNX <https://dpaste.com/6P6NAUPNX> & peer config: https://dpaste.com/HJ3SNL8RH <https://dpaste.com/HJ3SNL8RH>

10 20

[PATCH v2 0/7] Add MAC authentication support to the Babel protocol
by Toke Høiland-Jørgensen 17 Nov '20

17 Nov '20

This series adds MAC authentication support to the Babel protocol as specified in by the IETF Babel working group in draft-babel-hmac-10: https://tools.ietf.org/html/draft-ietf-babel-hmac-10 This is the follow-up to v1, posted in February[0]. See changelog below. I have performed basic interoperability testing between this implementation and the current babeld HMAC implementation[1]. The two implementations were able to successfully exchange authenticated messages with both HMAC-256 and Blake2s keys. Given the above, and the close-to-final state of the specification at the IETF, I believe this series is ready for merging (subject to review, of course). For those wanting to test the code, a version of Bird with this series applied is available on Github[2] for easy consumption. [0] http://trubka.network.cz/pipermail/bird-users/2020-February/014251.html [1] https://github.com/jech/babeld/pull/52 [2] https://github.com/tohojo/bird/tree/babel-mac-02 Changelog: v2: - Don't reinvent AC_CHECK_FUNCS() for configure - Make sure random_bytes() never fails (without taking the whole daemon with it) - Use existing endianness defines in blake2s code - Just leave MAC-related code in babel.c/packets.c instead of adding a new file - Add blake2s test vectors (new patch 3) - Support supplying mac keys as raw hexadecimal bytes and allow algorithms to validate keys on configure (new patches 4-5) v1: - Add wrapper function to bird sysdep code to pick a suitable source of random bytes - Import reference Blake2 implementations into lib/ - Rename function names and data structures to use an auth_ prefix instead of hmac_ - Perform a separate authentication pass before parsing the packet, and move the authentication-related code to its own source file - Enforce key length recommendation from the specification - Add a 'permissive' configuration mode where outgoing packets are signed but incoming packets are accepted even though they fail authentication - Add user documentation for the authentication configuration, and function docstrings to the main authentication functions - Fix a bunch of nits and code style issues --- Toke Høiland-Jørgensen (7): sysdep: Add wrapper to get random bytes nest: Add Blake2s and Blake2b hash functions mac_test: Add tests for blake2s and blake2b nest: Allow specifying security keys as hex bytes as well as strings config: Allow MAC algorithms to specify a function to validate their keys babel: Refactor TLV parsing code for easier reuse babel: Add MAC authentication support conf/cf-lex.l | 31 + conf/conf.h | 5 + conf/confbase.Y | 2 + doc/bird.sgml | 47 +- lib/Makefile | 2 +- lib/blake2-impl.h | 160 ++ lib/blake2-kat.h | 4111 +++++++++++++++++++++++++++++++++++++++++ lib/blake2-ref.h | 112 ++ lib/blake2.c | 62 + lib/blake2.h | 69 + lib/blake2b-ref.c | 270 +++ lib/blake2s-ref.c | 263 +++ lib/mac.c | 9 + lib/mac.h | 12 + lib/mac_test.c | 91 + lib/string.h | 1 + lib/strtoul.c | 27 + nest/config.Y | 53 +- nest/password.c | 6 + nest/password.h | 1 + proto/babel/Makefile | 2 +- proto/babel/babel.c | 156 +- proto/babel/babel.h | 66 +- proto/babel/config.Y | 45 +- proto/babel/packets.c | 661 ++++++- 25 files changed, 6152 insertions(+), 112 deletions(-) create mode 100644 lib/blake2-impl.h create mode 100644 lib/blake2-kat.h create mode 100644 lib/blake2-ref.h create mode 100644 lib/blake2.c create mode 100644 lib/blake2.h create mode 100644 lib/blake2b-ref.c create mode 100644 lib/blake2s-ref.c

2 10

typo in 2.x bird documentation.
by Sergey Kulikov 05 Oct '20

05 Oct '20

I was writing import filter to use with both v4 and v6 prefixes and set krt_prefsrc, so I need to identify prefix belonging to v4 or v6. So docs saying this: "Whether the address is IPv4 or not may be checked by .is_ip4 which returns a bool." But it's not working, and as I can see from sources in fact correct name for that function is ".is_v4" in config.Y: | term '.' IS_V4 { $$ = f_new_inst(FI_IS_V4, $1); } and it works, is this mailing list correct place to report this typo? Other users can experience issues trying to use ".is_ip4". -- Best regards, Sergey mailto:serg@rangerovers.ru

2 1

Nexthop/nexthop groups question
by Alexander V. Chernikov 03 Oct '20

03 Oct '20

Hi folks, Cumulus people implemented nexthop objects/nexthop groups [1] in Linux kernel some time ago. These changes allow for more efficient communications between kernel and userspace w/ wide multipath & large amount of routes. Initial support landed [2] in FRR in 2019 and has notably improved since then. Are there any plans to support this functionality in bird? [1]: https://linuxplumbersconf.org/event/4/contributions/434/attachments/251/436… [2]: https://github.com/FRRouting/frr/commit/50d8965075cf59744dde685ae01400d9b7e… /Alexander

3 4

Unable to build Bird2 with --with-protocols=bgp
by Nabeel Omer 30 Sep '20

30 Sep '20

Hi Everyone, I am trying to build Bird2 with `./configure --with-protocols=bgp` and it prints the following information: ubuntu@ip-172-26-14-214:~/bird$ make MKDIR -p obj/client obj/conf obj/doc obj/filter obj/lib obj/nest obj/test obj/proto/bgp obj/sysdep/linux obj/sysdep/unix obj/doc m4 -s -P conf/gen_parser.m4 conf/confbase.Y conf/flowspec.Y client/cmds.Y filter/config.Y nest/config.Y proto/bgp/config.Y sysdep/linux/netlink.Y sysdep/unix/config.Y sysdep/unix/krt.Y >obj/conf/cf-parse.y bison -Dparse.lac=full -Dparse.error=verbose -dv -pcf_ -b obj/conf/cf-parse obj/conf/cf-parse.y conf/gen_parser.m4: warning: 11 nonterminals useless in grammar [-Wother] conf/gen_parser.m4: warning: 34 rules useless in grammar [-Wother] conf/confbase.Y:111.13-29: warning: nonterminal useless in grammar: label_stack_start [-Wother] %type <mls> label_stack_start label_stack ^^^^^^^^^^^^^^^^^ conf/confbase.Y:111.31-41: warning: nonterminal useless in grammar: label_stack [-Wother] %type <mls> label_stack_start label_stack ^^^^^^^^^^^ conf/confbase.Y:107.22-25: warning: nonterminal useless in grammar: time [-Wother] %type <time> expr_us time ^^^^ nest/config.Y:94.162-164: warning: nonterminal useless in grammar: tos [-Wother] %token END CLI_MARKER INVALID_TOKEN ELSECOL DDOT ^^^ nest/config.Y:438.1-13: warning: nonterminal useless in grammar: password_list [-Wother] And gets stuck. Does not produce any further output and doesn’t quit. Ctrl+C produces the following output: conf/Makefile:23: recipe for target 'obj/conf/cf-parse.tab.c' failed make: *** [obj/conf/cf-parse.tab.c] Interrupt Does anyone have any idea about why this might be happening? I am able to build successfully without passing --with-protocols=bgp to autoconf. Thanks, Nabeel Omer https://nabeelomer.me

3 2

Reload filter used in protocol?
by Bernd Naumann 30 Sep '20

30 Sep '20

Hi *, Again, I have "such" a question... If I can reload (or restart) a single protocol, would that also re-read the filter used for that protocol? Or would do I need `configure` anyway? Thanks again! Bernd

2 3

Dump/Show current running config?
by Bernd Naumann 29 Sep '20

29 Sep '20

Hi *, Sorry if this was asked before but my googlefu didn't provide me anything. Is there in bird 1.7 (or in 2.0) a feature to show or dump the current loaded/running config? If not: Is this on the roadmap somewhere? (Or is it somehow complicated to translate the config back into the syntax used in the conf-file?) Thanks. Bernd

3 3

[BIRD 1.6.x] Unix: fix compilation with GCC 10
by Vincent Bernat 28 Sep '20

28 Sep '20

GCC 10 will now error when declaring a global variable twice: https://gcc.gnu.org/gcc-10/porting_to.html#common Fix this issue by declaring the variable as `extern' in `krt.h'. The variable is really declared in `krt.c'. LD -r -o all.o cf-parse.tab.o cf-lex.o conf.o /usr/bin/ld: cf-lex.o:/home/bernat/code/exoscale/bird/build~/conf/../lib/krt.h:115: multiple definition of `kif_proto'; cf-parse.tab.o:/home/bernat/code/exoscale/bird/build~/conf/../lib/krt.h:115: first defined here This issue was already fixed in BIRD 2.x. --- sysdep/unix/krt.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sysdep/unix/krt.h b/sysdep/unix/krt.h index d4a8717e38ec..fe79efc3717d 100644 --- a/sysdep/unix/krt.h +++ b/sysdep/unix/krt.h @@ -112,7 +112,7 @@ struct kif_proto { struct kif_state sys; /* Sysdep state */ }; -struct kif_proto *kif_proto; +extern struct kif_proto *kif_proto; #define KIF_CF ((struct kif_config *)p->p.cf) -- 2.28.0

2 1