- Bird-users - Mailing Lists

(no subject)
by Anders Hansen 01 Feb '20

01 Feb '20

Hi list I'm having issues with a Debian 10 based router running BIRD 2.0.7. On the router I have several interfaces where OSPFv3 is active. All good. Besides those interfaces, i also have a dummy interface named loopback0. Config example: area 0 { interface "ens*" { type ptp; cost 1; hello 5; }; interface "loopback0" { stub; cost 1; }; }; The ens interfaces work just fine. However, the /128 I have configured on the loopback0 interfaces is constantly not being picked up by BIRD. It's like BIRD completely ignores the existence of that interface. It simply won't announce that /128 out to its peers connected through the ens interfaces. If i change the /128 to a /127 instead, the prefix is advertised by bird. Any clues as to what gives this kinda unexpected (to me) behavior? Why wouldn't BIRD recognize a /128? I'm used to both Cisco and Juniper and have not seen this behavior before. All I'm trying to do is use my loopback for establishing an iBGP mesh - basic use case, i believe :) Thanks! Best Regards Anders Hansen

2 4

wildcard string matching
by Robert Blayzor 28 Jan '20

28 Jan '20

Does pattern matching work with wildcards like below? I tried searching the docs for pattern/wildcard/regex but could not find a definitive answer. It looks like this works with "interface" wildcards.... if (proto = "global_null*") then { bgp_community.add ((MYAS, 888)); } else { -- inoc.net!rblayzor XMPP: rblayzor.AT.inoc.net PGP: https://pgp.inoc.net/rblayzor/

2 1

determining ipv4 or ipv6 net in filter
by Robert Blayzor 28 Jan '20

28 Jan '20

Migrating from BIRD 1.6 to 2.0 and I would like to consolidate some BGP filters and use them for IPv4 or IPv6 sessions.... What is the best way to enumerate if a net is IPv4 or IPv6 if you wanted to make a if/then/else on.. ie: filter MY_FILTER { if ((MYAS, 888) ~ bgp_community) then { if (< Is IPv4 ?>) then { do this...; accept; } else if (< Is IPv6 ?> then { do that...; accept; } else { reject; } } reject; } TIA -- inoc.net!rblayzor XMPP: rblayzor.AT.inoc.net PGP: https://pgp.inoc.net/rblayzor/

3 5

Re: [babel] Purpose of 'generate from/to' and 'accept from/to' for passwords?
by Toke Høiland-Jørgensen 21 Jan '20

21 Jan '20

Juliusz Chroboczek <jch(a)irif.fr> writes: > Thanks, Ondrej. > >> Well, it is requirement of OSPF spec (RFC 2328). I could assume it could >> help for smoother key transitions when clocks are not perfectly synchronized. > > Ah, I see. > > OSPF only allows one key in the trailer, so it needs the ability to send > one key but accept many. Babel-MAC allows multiple keys in the trailer, > and that ability is therefore not required. > > Or am I missing something? No, I think you're right. > I have no objection to keeping the ability, since it's pretty trivial to > implement. No objection to making it optional, since it's not > particularly useful in Babel-MAC. No objection to removing it altogether, > since it's good to avoid unnecessary features. Well, the Bird implementation (which I really should get around to finishing) is going to re-use the existing config syntax, so that is going to implement it in any case. I don't have any strong opinions as to what the spec should say, as long as it doesn't forbid such an option :) -Toke

1 0

Enabling BGP FlowSpec routes export
by posta＠davidepucci.it 21 Jan '20

21 Jan '20

Hi. I'm setting up Bird (2.0.7) as a BGP FlowSpec controller and it has to send out FS routes to two (FRR-based) neighbors. Actual configuration is defined as below: flow4 table flowtab4; protocol static { flow4 { import all; export all; }; route flow4 { src x.x.y.y/32; dst x.x.z.z/32; } { bgp_ext_community.add( (generic, 0x80060000, 0x0) ); }; } template bgp bgp_fs { local x.x.x.x as ABCDG; capabilities off; flow4 { table flowtab4; import all; export all; }; ipv4 { import all; export all; }; } protocol bgp bgp_svc01 from bgp_fs { neighbor y.y.y.y as ABCDE; } protocol bgp bgp_svc02 from bgp_fs { neighbor z.z.z.z as ABCDF; } The FS is properly assigned to the BGP protocol instances, but flowtab4 table is only UP as a channel for static1 protocol, while for bgp_svc01/02 is not (hence, no FS routes advertised BGP-side): bird> show protocol all static1 Name Proto Table State Since Info static1 Static flowtab4 up 13:02:42.987 Channel flow4 State: UP ================== Table: flowtab4 Preference: 200 Input filter: ACCEPT Output filter: ACCEPT Routes: 1 imported, 0 exported, 1 preferred Route change stats: received rejected filtered ignored accepted Import updates: 1 0 0 0 1 Import withdraws: 0 0 --- 0 0 Export updates: 0 0 0 --- 0 Export withdraws: 0 --- --- --- 0 bird> show protocol all bgp_svc01 Name Proto Table State Since Info bgp_svc01 BGP --- up 13:00:17.256 Established BGP state: Established Neighbor address: y.y.y.y Neighbor AS: ABCDE Local AS: ABCDG Neighbor ID: whateverID Local capabilities Neighbor capabilities Session: external Source address: x.x.x.x Hold timer: 4.820/9 Keepalive timer: 2.054/3 Channel flow4 State: DOWN ==================== Table: flowtab4 Preference: 100 Input filter: ACCEPT Output filter: ACCEPT Channel ipv4 State: UP Table: master4 Preference: 100 Input filter: ACCEPT Output filter: ACCEPT Routes: 13 imported, 2 exported, 13 preferred Route change stats: received rejected filtered ignored accepted [...] BGP Next hop: x.x.x.x Looking forward to get some clarifications. Thank you. Kind regards, Davide Pucci.

2 1

Purpose of 'generate from/to' and 'accept from/to' for passwords?
by Toke Høiland-Jørgensen 20 Jan '20

20 Jan '20

Hi Bird people When specifying passwords for protocol authentication in the Bird config, it is possible to specify time windows in which the password will be used to sign messages (the 'generate from/to' configuration options), and a separate time window in which that password will be accepted to authenticate a packet (the 'accept from/to' options). My question is this: What is the purpose of having these two time intervals be separate? I.e., in what deployment scenario is it useful to have a password be accepted to authenticate a message, without also using that password to sign outgoing messages? This question came out of a discussion around whether we should standardise a similar feature in the Babel RFCs. As you can see I'm struggling a little to come up with a definite use case: https://mailarchive.ietf.org/arch/msg/babel/XOahz4fuXXs-nHO4NMGdBwU8AZo -Toke

2 1

BFD getting stuck in Init state when taking down and up the interface
by Julian Schuh 20 Jan '20

20 Jan '20

Hi all, I think I discovered a bug causing BFD sessions to get stuck in the Init state when taking down and up the interface that is being for the BFD session. I'm using bird 2.0.7 on linux 4.19.86. My setup: I have to network namespaces t1 and t2, connected by a veth pair: ip -n t1 addr show > 99: t2_1@if100: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 > link/ether fa:e1:52:51:62:a3 brd ff:ff:ff:ff:ff:ff link-netns t2 > inet6 2001:db8:1::1/64 scope global > valid_lft forever preferred_lft forever > inet6 fe80::f8e1:52ff:fe51:62a3/64 scope link > valid_lft forever preferred_lft forever ip -n t2 addr show > 100: t1_1@if99: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 > link/ether b2:0e:f4:60:1b:08 brd ff:ff:ff:ff:ff:ff link-netns t1 > inet6 2001:db8:1::2/64 scope global > valid_lft forever preferred_lft forever > inet6 fe80::b00e:f4ff:fe60:1b08/64 scope link > valid_lft forever preferred_lft forever The bird config on both sides is almost identical: t1: > protocol device { > debug all; > scan time 10; > } > > router id 1.1.1.1; > > protocol bfd { > debug all; > interface "*" { > min rx interval 50 ms; > min tx interval 100 ms; > idle tx interval 300 ms; > > }; > neighbor 2001:db8:1::2 dev "t2_1" local 2001:db8:1::1; > } t2: > protocol device { > debug all; > scan time 10; > } > > router id 2.2.2.2; > > protocol bfd { > debug all; > interface "*" { > min rx interval 50 ms; > min tx interval 100 ms; > idle tx interval 300 ms; > > }; > neighbor 2001:db8:1::1 dev "t1_1" local 2001:db8:1::2; > } When starting up bird on both sides, the BFD session comes up just as expected. When taking down the interface t1_1 in netns t2 (ip -n t2 link set down dev t1_1), I see the following log message: > bfd1: Session to 2001:db8:1::1 removed Now, when taking up the interface instantly, I get the following log message, the BFD session gets stuck in the Init state and does not recover: > bfd1: Socket error: bind: Cannot assign requested address > bfd1: Session to 2001:db8:1::1 added When I take down the interface and wait for a subsequent device scan (indicated by log message "device1: Scanning interfaces") and only take up the interface after the device scan is carried out, all works fine: >>>> bfd1: Session to 2001:db8:1::1 removed >>>> device1: Scanning interfaces >>>> bfd1: Session to 2001:db8:1::1 added When leaving out the "scan time" statement in the device protocol configuration, it doesn't seem to recover at all (probably, as the documentation states, a large value is used for the scan time by default). Thanks in advance for your feedback. Best Regards Julian Schuh

2 1

Re: Bird exporter
by Irene Lalioti 16 Jan '20

16 Jan '20

Hello Tim, Thanks for your answer. Initially I did not use go to install it. Maybe this is the problem, I guess. My question is how you run it? you just have to run bird or ? In which port is the web server available? 6502? I have installed the bird watcher as well which is python. Do I need the golang necessarily ? So far I get connection refused when I try |wget https://dl.google.com/go/go1.13.4.linux-amd64.tar.gz| | | |Thanks a lot! Irene | || On 1/14/20 11:52 PM, Tim Meusel wrote: > Hi Irene, > > I use the bird exporter, but I'm not sure if I understood your question. > The only thing I needed to configure in the config tog work was the > timeformat setting you already mentioned. Also the three metrics you > posted look correct? > > Cheers, Tim > > On 13.01.20 14:37, Irene Lalioti wrote: >> Hello guys! >> >> I would like to ask you, if anyone of you has deployed bird_exporter for >> Prometheus metrics to Grafana dashboard? >> >> https://github.com/czerwonk/bird_exporter >> >> I have setup Grafana dashboards to visualize the metrics Prometheus >> collects. I have imported the Dashboard for the bird from github. >> >> Now I am not sure how to orchestrate the bird_exporter into the bird >> config, other than : >> >> 1. timeformat protocol iso long; >> >> 2. >> bird_protocol_prefix_import_count{name="bgp1",proto="BGP",ip_version="4"} >> 600000 >> bird_protocol_prefix_import_count{name="bgp1",proto="BGP",ip_version="6"} >> 50000 >> bird_ospfv3_running{name="ospf1"} 1 >> >> >> as instructed in the doc. >> >> My bird is 2.0.7. >> >> >> thanks a lot in advance! >> >> Irene >> >> || >> >> || >> >> || >> >> || >> >> || >> -- Irene Lalioti Network Engineer Fondation RESTENA 2, avenue de l'Université L-4365 Esch/Alzette Tel: +352 424409 1 Fax: +352 422473

1 0

Static route preference incorrect for value 0
by Kenth Eriksson 15 Jan '20

15 Jan '20

When setting preference value of zero on a static route, then this gets shown as preference 200 when doing show route. Preference on static routes is based on a patch from Ondrej with SHA 7a49e97e7ec86bd336dc801411cb8b8f92f38388, but it looks as this has still not made into master. kenth ~ # cat /opt/appl/executing/etc/bird_route.conf protocol static static1 { ipv4 {import all;}; check link 1; route 0.0.0.0/0 via 10.210.137.1 {preference=0;}; } bird> show route Table master4: 0.0.0.0/0 unicast [static1 12:27:07.093] (200) via 10.210.137.1 on eth1 Setting preference to a value >= 1 makes this work correct. /k

2 2

bird conf 1.6 to 2.0
by Mario Rossi 14 Jan '20

14 Jan '20

Hi Bird users, I am trying to migrate the config from 1.6 to 2.0 on CentOS 8. I tried to follow https://gitlab.labs.nic.cz/labs/bird/wikis/transition-notes-to-bird-2 but my test config didn't work. Is there another guide or wiki I can follow to be able to migrate to version 2 ? Thank you ! [...] router id 206.x.y.z; table as65533; table blackholes; [...] # Scans and learns of blackhole routes from table 10, every 10 seconds protocol kernel rtbh { table blackholes; kernel table 10; scan time 20; learn; import filter rtbh_pipe; export all; } # Merges kernel route table 10 into the virtual as65533 routing table protocol pipe { table as65533; peer table blackholes; mode transparent; import filter rtbh_pipe; } protocol bgp ege1a_50_4 { table as65533; description "ege1a_50_4"; local as 65533; neighbor 1.1.1.1 as 12345; multihop; source address 206.x.y.z; # What local address we use for the TCP connection export where source=RTS_STATIC; export filter bgp_out_upstream; }

3 5