June 2021 - Bird-users - Mailing Lists

bgp_large_community wildcard in conditional
by Brooks Swinnerton 18 Oct '21

18 Oct '21

Hello, I was wondering if it's possible to create a conditional that matches on a wildcard for a part of a BGP large community. For example: if ([*, 600, 6939]) ~ bgp_large_community then reject; This currently results in a syntax error at the position of the comma after the *.

5 7

IPv6 BGP & kernel 4.19
by Robert Sander 25 Aug '21

25 Aug '21

Hi, our routers run on Debian stretch with bird 1.6.4 from bird.network.cz/debian. Yesterday I tried kernel 4.19 from backports.debian.org and ran into a weird issue with IPv6 BGP sessions: All Peerings reported "Error: Hold timer expired" ca. every 40 minutes. IPv6 forwarding was flapping all the time. After rebooting into kernel 4.9 everything worked again. IPv4 BGP was not affected and also OSPF (v4 and v6). I could disable all IPv6 BGP peerings on this router and then it forwarded to another router learned via OSPF for IPv6 without issues. Has anyone seen such a behaviour? Regards -- Robert Sander Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin https://www.heinlein-support.de Tel: 030 / 405051-43 Fax: 030 / 405051-19 Amtsgericht Berlin-Charlottenburg - HRB 93818 B Geschäftsführer: Peer Heinlein - Sitz: Berlin

13 39

[PATCH 1/2] Add mips Debian 8 container
by Skyler Mäntysaari 15 Aug '21

15 Aug '21

Hi! I hope that this will work and help with the mips package building. I originially had forgotten to do the pkg gitlab steps too. Please let me know if I can help with that in any other way and disregard the previous patch. This is basically the same one, with both commits. --- .gitlab-ci.yml | 10 ++++++++++ misc/docker/debian-9-mips/Dockerfile | 26 ++++++++++++++++++++++++++ 2 files changed, 36 insertions(+) create mode 100644 misc/docker/debian-9-mips/Dockerfile diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 3642b671..f6a5bb39 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -17,6 +17,7 @@ stages: allow_failure: true script: - $DOCKER_CMD login -u gitlab-ci-token -p $CI_BUILD_TOKEN registry.labs.nic.cz + - $DOCKER_CMD --rm --privileged aptman/qus -s -- -p mips # Make sure we refresh the base image if it updates (eg. security updates, etc) # If we do just the build, cache is always reused and the freshness of the # base image is never checked. However, pull always asks and updates the @@ -52,6 +53,11 @@ docker_debian-9-i386: IMG_NAME: "debian-9-i386" <<: *docker_build +docker_debian-9-mips: + variables: + IMG_NAME: "debian-9-mips" + <<: *docker_build + docker_debian-10-amd64: variables: IMG_NAME: "debian-10-amd64" @@ -248,6 +254,10 @@ build-debian-9-i386: <<: *build-linux image: registry.labs.nic.cz/labs/bird:debian-9-i386 +build-debian-9-mips: + <<: *build-linux + image: registry.labs.nic.cz/labs/bird:debian-9-mips + build-debian-10-amd64: <<: *build-linux image: registry.labs.nic.cz/labs/bird:debian-10-amd64 diff --git a/misc/docker/debian-9-mips/Dockerfile b/misc/docker/debian-9-mips/Dockerfile new file mode 100644 index 00000000..1600011b --- /dev/null +++ b/misc/docker/debian-9-mips/Dockerfile @@ -0,0 +1,26 @@ +FROM multiarch/debian-debootstrap:mips-stretch-slim +ENV DEBIAN_FRONTEND noninteractive +RUN sed -i 's/deb.debian.org/ftp.cz.debian.org/' /etc/apt/sources.list +RUN apt-get -y update +RUN apt-get -y upgrade +RUN apt-get -y --no-install-recommends install \ + build-essential \ + flex \ + bison \ + autoconf \ + ncurses-dev \ + libreadline-dev \ + libssh-gcrypt-dev \ + linuxdoc-tools-latex \ + texlive-latex-extra \ + opensp \ + docbook-xsl \ + xsltproc +RUN apt-get -y --no-install-recommends install \ + git \ + dpkg-dev \ + debhelper \ + quilt \ + python3 \ + python3-pip \ + python3-setuptools -- 2.26.3

2 6

RAdv protocol in failover router setup
by Tore Anderson 30 Jun '21

30 Jun '21

I am trying to use BIRD v2.0.8 to emit ICMPv6 RAs from a HA pair of routers. The default router address of the router (fe80::1) is failed over using the VRRP protocol, so it is only present on a single router at any given time. I have run into two challenges I cannot quite figure out how to solve: 1) How to make BIRD only emit RAs if the router is active, i.e., only on interfaces where the fe80::1 address is configured. (It appears that RAdv does not support the «interface "*" fe80::1/128 {};» syntax; it just complains «Interface name/mask expected, not IP prefix»). 2) How to make BIRD use the fe80::1 default router address as the source address of the emitted RAs instead of the EUI-64-generated link-local address (which will not fail over to the standby router in the event of a failure, and should therefore not be used as a router by the hosts receiving the RAs). I am grateful for any suggestions. Tore

2 2

Question Regarding Extracting BGP RIB and FIB data from BIRD
by Ali Monfared 24 Jun '21

24 Jun '21

Hello BIRD team, We have recently started to use BIRD in an internal project as a router server which is expected to perform most of the regular operations that our BGP routers do. On that note, we are looking for best practices to extract the RIB and FIB BGP routes from the BIRD server. We have noticed that most of the BGP attributes for any route that is sent to the BIRD server is available inside the logs of the BIRD server but was wondering if there are better ways or best practices that you would suggest if we want to have a way to extract each BGP route that is received in the BIRD server ( so that we can later send it to internal databases for further analysis ) Bests Ali

2 2

RFC: Separate import/export tables
by Asbjørn Sloth Tønnesen 24 Jun '21

24 Jun '21

Hi, We have an internet router setup where we have a few customer connections, and hundreds of peering sessions. A lot of CPU time is wasted running the export filters over the entire internet routing table per peer, in order to find the relatively few prefixes to actually export. I know we could try to work around it, by having a complicated system of tables and pipes, like one table per peer per family. However I would prefer to keep things simple, so if I could just keep a small table containing the few prefixes that are likely to match the export filter, and use that as export table, while still importing prefixes from peers into the master table. Since BGP already has "(import|export) table <switch>", then maybe "table [import|export] <table>" could work. Before I try to implement this, are there any support/comments/ objections to this approach? -- Best regards Asbjørn Sloth Tønnesen

3 3

Importing (and then exporting) stubnet routes
by George Ross 24 Jun '21

24 Jun '21

I'm sure I've seen something like this discussed recently, but I can't find it in the mailing list archives, so apologies if I'm duplicating something. Router A defines some OSPF stubnets. Those are happily propagated to our other OSPF routers. What I can't get to work, though, is to import them from OSPF into BIRD, so that I can then export them to BGP, even using "all" as the import filter. I can add them as direct routes and then export those, but that somehow doesn't feel right. And on router B I can import them from OSPF and then export from there, but then we would end up with asymmetric paths which would break connection-tracking. Suggestions, pointers, explanations gratefully received! Thanks. 2.0.8, in case it matters. -- George D M Ross MSc PhD CEng MBCS CITP University of Edinburgh, School of Informatics, Appleton Tower, 11 Crichton Street, Edinburgh, Scotland, EH8 9LE Mail: gdmr(a)inf.ed.ac.uk Voice: 0131 650 5147 PGP: 1024D/AD758CC5 B91E D430 1E0D 5883 EF6A 426C B676 5C2B AD75 8CC5 The University of Edinburgh is a charitable body, registered in Scotland, with registration number SC005336.

2 1

BGP with BIRD2 and MikroTik CCR1072-1G-8S+
by Kees Meijs | Nefos 21 Jun '21

21 Jun '21

Hi list, I'm configuring a MikroTik CCR1072-1G-8S+ router (6.47.10) and BIRD2 (2.0.7) to do BGP. The initial configuration is was very simple: > protocol bgp downstream { > local REDACTED as REDACTED; > neighbor REDACTED as REDACTED; > > hold time 30; > keepalive time 60; > } And: > 0 ;;; Upstream IPv4 transit > name="bgp0" instance=default remote-address=REDACTED > remote-as=REDACTED tcp-md5-key="" nexthop-choice=default multihop=no > route-reflect=no hold-time=30s keepalive-time=1m ttl=255 in-filter="" > out-filter="" address-families=ip update-source=REDACTED > default-originate=never remove-private-as=no as-override=no passive=no > use-bfd=no I got messages such as *Error: Required capability missing* so enabled debugging on both ends. Debugging showed (MikroTik's end): > 06:10:33 route,bgp,debug Unsupported capability received, code: 64 > 06:10:33 route,bgp,debug Unsupported capability received, code: 70 > 06:10:33 route,bgp,debug Unsupported capability received, code: 71 So I added to the configuration (hopefully the right switches): > graceful restart off; > enable route refresh off; > long lived graceful restart off; Unfortunately it's still not working. Debugging (BIRD2's end) is showing: > Jun 18 09:51:16 router bird: downstream: Connected > Jun 18 09:51:16 router bird: downstream: Sending > OPEN(*ver=4*,as=REDACTED,hold=30,id=5914a2f9) > Jun 18 09:51:16 router bird: downstream: Got > OPEN(as=23456,hold=30,id=185.173.132.2) > Jun 18 09:51:16 router bird: downstream: Error: Required capability > missing > Jun 18 09:51:16 router bird: downstream: State changed to stop > Jun 18 09:51:16 router bird: downstream: Sending NOTIFICATION(code=2.7) > Jun 18 09:51:16 router bird: downstream: Down I suspected the ver=4 is the problem so I've added: > advertise ipv4 off; But alas, BIRD2 is now complaining: > Reading configuration from /etc/bird/bird.conf > /etc/bird/bird.conf:217:2 syntax error, unexpected ADVERTISE Please advice what to do. I'm afraid I'm a little stuck. Thanks! Cheers, Kees -- https://nefos.nl/contact <https://nefos.nl/contact> Nefos IT bv Ambachtsweg 25 (industrienummer 4217) 5627 BZ Eindhoven Nederland KvK 66494931 /Bereikbaar op maandag, dinsdag, woensdag en vrijdag tussen 09:00u en 17:00u./

2 3

Changing OSPF attributes in pipe filter - Bug?
by Paul Donohue 15 Jun '21

15 Jun '21

I'm importing BGP and OSPF routes from several interfaces, and I would like to use the OSPF metrics as-is on the local router. However, I'm exporting these routes via OSPF on several other interfaces, and I'd like to selectively override the OSPF metric on some (but not all) of the routes before performing route selection and exporting them via OSPF on the other interfaces. Having successfully done similar things in the past with bird, I expected I should be able to do this in a pipe filter: protocol pipe master_to_adjusted { table master; peer table adjusted; export filter { if ! defined(ospf_metric1) then accept; if true then ospf_metric1 = ospf_metric1 + 1000; accept; }; } However, that isn't working; ospf_metric1 is not changing. If I use the same filter as an import filter in "protocol ospf" instance, it works fine (except that I don't want the metric changed there, since I don't want this affecting route selection on the local router). If I set a different attribute that doesn't already exist (eg. ospf_metric2 or ospf_tag) in the pipe filter, it works fine. If I set ospf_tag in the "protocol ospf" filter, then try to change it in the pipe filter, the change does not work. If I "unset(ospf_metric1);" in the pipe filter then the routes are silently rejected. I don't have the same problem with BGP routes. For example, "bgp_path.prepend(123);" in the pipe filter works as expected. Similarly, setting ospf_metric1 on a BGP route in the "protocol ospf" filter, then changing it in the pipe filter works as expected. I'm running bird 2.0.7 (installed via the distro package on Ubuntu 18.04) - I have not tested with 2.0.8. Am I doing something wrong, or is this a bug? Thanks! -Paul

3 3

overriding static routes in FreeBSD
by Kajetan Staszkiewicz 15 Jun '21

15 Jun '21

Hello group, I'm running BIRD on FreeBSD and I came across a problem with overriding static routes created outside of BIRD. The situation is that for installation of the operating system (contacting repositories, Puppet and some other services) system needs to have a static default gateway but once the system is fully installed it runs BIRD and talks BGP to core routers. Default routes are created with the usual FreeBSD method: [9:08:14] hwlb-awtest-01 ~/ # cat /etc/rc.conf.d/routing defaultrouter="1.2.3.4" ipv6_defaultrouter="a::f" Routes are created with UGS flags: [9:11:17] hwlb-awtest-01 ~/ # netstat -rn | grep default default 1.2.3.4 UGS public default a::f UGS public Once BIRD is started the log gets full of those messages: Jun 15 08:57:32 hwlb-awtest-01.ndco.ig.local bird[2216] KRT: Error sending route 0.0.0.0/0 to kernel: File exists Jun 15 08:57:50 hwlb-awtest-01.ndco.ig.local bird6[2213] KRT: Error sending route ::/0 to kernel: File exists I've looked at BIRD's source and I understand that BIRD replaces routes using krt_replace_rte and krt_send_route, and that all routes managed by BIRD have RTF_UP | RTF_PROTO1 flags. Those are not the flags created by `route add` on FreeBSD by default. However if I make default routes with those flags via `route add default 1.2.3.4 -proto1 -nostatic`, BIRD will happily replace them. Kernel protocol is configured with "learn" option. Is this a bug? Or should I just adjust the static routes to be BIRD-compatible? -- | pozdrawiam / greetings | Powered by macOS, Debian and FreeBSD | | Kajetan Staszkiewicz | www: http://vegeta.tuxpowered.net | `------------------------^--------------------------------------'

4 4