January 2023 - Bird-users

Limit OSPF interface pattern matching to VRFs
by Marcel Menzel 22 Jan '23

22 Jan '23

Hello list, Is there a way to instruct BIRD to only match OSPF interfaces that are enslaved to a certain VRF (or only the main VRF / not enslaved to any VRF)? Trying to set 'vrf default;' or 'vrf "vrf-as207781";' in an OSPF protocol block does not generate any error message at all, but seems to be ignored completely. Looking at "show ospf int" show BIRD picking up all interfaces (in my case xfrm and veth interfaces, because I match for "xfrm*" and "veth*") not belonging to the VRF specified. The config block for running OSPF in the main VRF looks like this: protocol ospf v3 o_home_ipv6 { vrf default; ipv6 { import all; export where source ~ [ RTS_DEVICE, RTS_STATIC ]; }; area 0 { interface "xfrm0", "xfrm2" { #interface "xfrm*" { hello 1; type pointopoint; }; interface "br0" { #interface "br*" { stub; }; }; } The config block for running OSPF in one VRF looks like this: protocol ospf v3 o_as207781_ipv6 { vrf "vrf-as207781"; ipv6 { table t_as207781_ipv6; import all; export where source ~ [ RTS_DEVICE ]; }; area 0 { #interface "xfrm1", "xfrm3" { interface "xfrm*" { hello 1; type pointopoint; }; #interface "veth0", "veth2", "dummy0" { interface "veth*", "dummy*" { stub; }; }; } Yet BIRD picks up all interfaces in all VRFs, although xfrm0 & xfrm2 are not enslaved, and xfrm1 & xfrm3 are VRF enslaved: root@r1-fra ~ # birdc sh ospf int o_home_ipv6 | grep xfrm Interface xfrm0 (IID 0) Interface xfrm2 (IID 0) Interface xfrm1 (IID 0) Interface xfrm3 (IID 0) root@r1-fra ~ # birdc sh ospf int o_as207781_ipv6 | grep xfrm Interface xfrm1 (IID 0) Interface xfrm3 (IID 0) Interface xfrm0 (IID 0) Interface xfrm2 (IID 0) I am running BIRD 2.0.11 on Kernel 6.1.7. My current workaround is to specify each interface directly in the OSPF blocks without using any globbing/patterns at all, but this is getting uncomfortable for an increasing amount of interfaces (as I am planning to move to LXD routed mode and match it's veth interfaces automatically). Thanks & kind regards, Marcel Menzel

2 3

Re: Run bird from a container
by Nell Jerram 20 Jan '23

20 Jan '23

Resending to the list because I was not subscribed with my recently updated email address... On Fri, Jan 20, 2023 at 10:19 AM Nell Jerram <nell(a)tigera.io> wrote: > Hi, I'm from Tigera and responsible for that calico/bird image, so just > adding a few more details in case they are of interest. > > Probably the most important thing is that it's using BIRD 1.6.8 (plus some > deltas as Hugo pointed out); I guess Billy that you will probably prefer > something based on the latest BIRD code. > > It doesn't contain any peering config, but its config file includes > > include "/etc/bird/*.conf"; > > So when we use this for our own network modelling, we start the container > with docker run, then inject the peering config with code like > > cat <<EOF | docker exec -i bird-a1 sh -c "cat > > /etc/bird/peer-rb1.conf" > protocol bgp rb1 { > description "Connection to BGP peer"; > local as 65001; > ... > } > EOF > docker exec bird-a1 birdcl configure > > The code for the fork and image building can be found at > https://github.com/projectcalico/bird. > > Best wishes, > Nell > > > On Fri, Jan 20, 2023 at 4:09 AM Hugo Slabbert via Bird-users < > bird-users(a)network.cz> wrote: > >> If you're looking for vanilla BIRD, I'd package something myself, rather, >> or https://hub.docker.com/r/pierky/bird/ if you want something >> pre-packaged. The repo for that calico/bird image explicitly calls out: >> >> > This is a fork of the BIRD internet routing daemon which provides the >> following additional function used by Calico: >> > * Support for routing using IP-in-IP >> >> Its Dockerfile calls a /opt/bird-wrapper.sh entrypoint ( >> https://github.com/projectcalico/bird/blob/feature-ipinip/dist/amd64/birdy/…) >> which runs split IPv4/IPv6 daemons in bird 1.x style. >> >> My previous gig ran BIRD in a custom container in a large distributed >> environment for heavy production services. >> >> On Thu, Jan 19, 2023 at 2:59 PM Matt Griswold <grizz(a)20c.com> wrote: >> >>> On Thu, Jan 19, 2023 at 10:23:04PM +0000, Billy R Ridgway wrote: >>> > I am interested in running Bird from within a docker container to act >>> as a BGP router. I see that https://hub.docker.com/r/calico/bird exists >>> but when I deploy it it doesn’t seem to have anything inside of it. Maybe I >>> am not using this calico bird container properly? If this is the wrong >>> direction, I can just yum install a bird rpm into a ubi container and move >>> forward that way. Any suggestions would be much appreciated. >>> >>> I have no idea on the calico container, but we run it in production with >>> podman using an image that builds from source on ubi8. We didn't use the >>> yum version because we have specific needs. but I'm sure it would work >>> fine as well. >>> >>> Cheers >>> >>

1 0

Run bird from a container
by Billy R Ridgway 20 Jan '23

20 Jan '23

I am interested in running Bird from within a docker container to act as a BGP router. I see that https://hub.docker.com/r/calico/bird exists but when I deploy it it doesn’t seem to have anything inside of it. Maybe I am not using this calico bird container properly? If this is the wrong direction, I can just yum install a bird rpm into a ubi container and move forward that way. Any suggestions would be much appreciated. Thanks, Billy

3 2

ospf type 4 LSA:s generated by bird
by Kenth Eriksson 19 Jan '23

19 Jan '23

Is there any way to control if bird generates type 4 LSAs? If bird originates type 4 LSA:s, does that mean that bird has taken the role as an ASBR?

2 2

[PATCH] allow setting the 'onlink' route attribute in filters
by Radu CARPA 17 Jan '23

17 Jan '23

Hi bird users, I recently came across the following thread [1] when trying to build an IP-in-IP overlay network with bird. Unfortunately, those patches where never merged upstream. Calico still uses a very old fork of bird with those patches applied [2]. I decided to try the path that Ondrej proposed in the thread from 2016. I made the small change from the attached patch and it worked wonderfully for building a dynamically routed IP-in-IP overlay network. Do you think it will take a lot of work to pass, from this proof of concept, to a patch which could be accepted into bird? Is setting "onlink" this way a good idea? I'd be happy to work on improving the patch. Regards, Radu [1] https://bird.network.cz/pipermail/bird-users/2016-September/010633.html [2] https://github.com/projectcalico/bird

2 1

List-ID and FROM address of the list changed around October 17th
by Andreas Rammhold 17 Jan '23

17 Jan '23

Hi, I just noticed that some of my mail search filters wouldn't apply anymore for this list. It turns out that the List-Id for messages has changed around October the 17th 2022. The list is also sending mails from bird-users(a)trubka.network.cz while the lists address is the same. Mails received since then have the following List-Id header set: List-Id: Discussion of users of BIRD Internet Routing Daemon <bird-users.trubka.network.cz> It used to be: List-Id: Discussion of users of BIRD Internet Routing Daemon <bird-users.network.cz> Not a huge deal for me just thought it would be worth mentioning in case this isn't intentional. Regards, Andi

4 3

LDP and Bird
by Pim van Pelt 16 Jan '23

16 Jan '23

Hoi folks, I work on VPP (a fast userspace based dataplane implementation https://fd.io/) and helped contribute the ability for this dataplane to consume Netlink messages (github.com/pimvanpelt/lcpng) One thing that I've been asked about quite a bit is the ability to program the VPP dataplane with MPLS forwarding. I use Bird2 in my own deployment ( https://ipng.ch/s/articles/2021/09/21/vpp-7.html) and was wondering what the current thinking is for Bird to support signalling with LDP. Last I saw was: - https://bird.network.cz/pipermail/bird-users/2017-September/011528.html - https://birdofluck.livejournal.com/8996.html - https://git.nic.cz/redmine/projects/bird/repository/show?rev=mpls - https://bird.network.cz/pipermail/bird-users/2018-September/012760.html - https://bird.network.cz/ Maria, do you have pointers on the current state of the union for an LDP implementation for Bird? I'd like to add MPLS support to Linux Control Plane (https://ipng.ch/media/virtualnog/index.html) groet, Pim -- Pim van Pelt <pim(a)ipng.nl> PBVP1-RIPE - http://www.ipng.nl/

2 3

Potential OSPF authentication issues with Mikrotik routers
by Theera Kittichareonpot 14 Jan '23

14 Jan '23

Hello, I am very new to Bird so I could be doing something wrong. But it seems Bird 2.0.11 could have compatibility issues with Mikrotik routers when OSPF authentication is used. When simple authentication is used, the neighbor state stays at Init and doesn't change at all. When cryptographic password is used, the Mikrotik router gave errors about wrong SA/SP id: "ospf-instance-1 { version: 2 router-id: 192.168.120.1 } ospf-area-1 { 0.0.0.0 } interface { instance-id: 5 broadcast 192.168.10.1%br-lan } authentication failed from 192.168.10.197 wrong SA ID". I've tried md5 sha256 and sha512, but all gave the same error. Kindly let me know if I did something wrong or what additional info is needed. Thank you. The following is my bird.conf: log syslog all; #debug protocols all; #router id 192.168.10.197; ipv4 table master4; protocol device { } protocol direct direct4 { ipv4; # Connect to default IPv4 table } protocol kernel kernel4 { ipv4 { import all; export all; }; } protocol static static4 { ipv4; } protocol ospf v2 ospf4 { instance id 5; # set to the same as other routers' ipv4 { import all; export all; }; area 0 { interface "eth0" { type broadcast; hello 10; # same as other routers' retransmit 5; transmit delay 1; dead 40; #simple authentication doesn't work with Mikrotik either. The state stays at Init and doesn't change at all. #authentication simple; #password "12345678"; # cryptographic password doesn't seem to work with mikrotik too; got errors about wrong SA/SP id #authentication cryptographic; #password "12345678" { algorithm hmac sha512; }; }; }; } Theera K.

3 5

Babel on a wireless mesh
by Bernd Naumann 13 Jan '23

13 Jan '23

Hey *, Because Babel popped up on the list, I want to use the opportunity to drop a few questions I had over the last days... On my small home-network I currently use OSPFv3 for IPv4 and IPv6 to announce routes from Laptops and PCs, and the Router. (There are some "dumb APs", too in the network but routing happens only on "the router" and like I mentioned, PCs and Laptops. Some wired, some wireless only, some both.) Given the fact that both protocols, OSPFv3 and Babel, are using multicast; would I "gain anything" switching to Babel? Right now I'm only using OSPFv3 because I'm familiar with... And what really puzzles me, and I don't find "useful" answers: If I run a multicast based routing protocol on jittery wireless links, do I need to "tune" multicast options for the wireless radio? And if so, what options; to what value; based on what? (Regarding the multicast radio options of the access points, I'm running OpenWrt.) Thanks for pointers and hints. Bernd PS: Yes, I'm not even sure if I need to "tune" anything or not. Or what to expect. But I would like to "get the picture".

3 3

Question about babel over bird
by Oriol Rico 12 Jan '23

12 Jan '23

Hello: We have a series of wireless antennas deployed in mesh with the babel protocol using bird. Two of those antennas advertise the route 10.0.0.0/8. The rest of the antennas choose one of the two outputs depending on the babel protocol. How can I force it to go out through one or the other exit? Thanks Oriol

4 9