- Bird-users - Mailing Lists

Making bulk CLI queries / CLI performance / bird-bulk tool in Python
by Baptiste Jonglez 12 Dec '19

12 Dec '19

Hi, For a research project, I need to query routes through the Bird CLI around 10k times per second. To do this, I wrote a small Python tool that talks to the Bird CLI over its Unix socket and parses CLI replies. For anyone interested, the first version of the code is here: https://github.com/jonglezb/bird-bulk The parsing code is not terribly efficient and it would be much faster in C or Go, but it's fast enough for my needs: it can perform 17k queries per second on a Bird daemon with a full BGP view. Out of curiosity, I started several instances of my benchmark script in parallel, and Bird maxed out at 50k queries per second. This is quite impressive considering that it is loaded with almost 800k routes. Conclusion: Bird *is* efficient :) Let me know if you are interested in re-using this code, I can package it properly in pip. Regards, Baptiste

1 0

rejected by protocol <prefix> unicast
by wax xitau 11 Dec '19

11 Dec '19

Hi, Prefixes sent over a eBGP session are getting rejected "by protocol" as can be seen in the logs below. The prefixes are "added" and then get "rejected" by protocol. This means that they are visible using the "show route protocol <protocol>" but not "show route all" (and therefore impossible to push them to the kernel routing table). // logs 2019-12-10 21:15:00.774 <TRACE> pe1: BGP session established 2019-12-10 21:15:00.774 <TRACE> pe1: State changed to up 2019-12-10 21:15:00.774 <TRACE> pe1: Sending END-OF-RIB 2019-12-10 21:15:00.984 <TRACE> pe1: Got UPDATE 2019-12-10 21:15:00.984 <TRACE> pe1 > *added [best] 10.2.34.0/24 <http://10.2.34.0/24> unicast* 2019-12-10 21:15:00.984 <TRACE> pe1 < *rejected by protocol 10.2.34.0/24 <http://10.2.34.0/24> unicast* 2019-12-10 21:15:00.984 <TRACE> pe1: Got UPDATE 2019-12-10 21:15:00.984 <TRACE> pe1 > *added [best] 10.1.12.0/24 <http://10.1.12.0/24> unicast* 2019-12-10 21:15:00.984 <TRACE> pe1 < *rejected by protocol 10.1.12.0/24 <http://10.1.12.0/24> unicast* 2019-12-10 21:15:00.984 <TRACE> pe1: Got UPDATE 2019-12-10 21:15:00.984 <TRACE> pe1: Got END-OF-RIB Tcp dump of the corresponding update message(s): // tcpdump 21:18:59.652705 IP (tos 0xc0, ttl 1, id 7035, offset 0, flags [none], proto TCP (6), length 177) *192.168.254.1*.bgp > 192.168.254.0.41073: Flags [P.], cksum 0x4356 (correct), seq 83:208, ack 73, win 16384, options [nop,nop,TS val 2249949122 ecr 1355158152], length 125: BGP Update Message (2), length: 51 Origin (1), length: 1, Flags [T]: IGP 0x0000: 00 AS Path (2), length: 10, Flags [T]: 65001 65500 0x0000: 0202 0000 fde9 0000 ffdc Next Hop (3), length: 4, Flags [T]: 192.168.254.1 0x0000: c0a8 fe01 Updated routes: 10.1.12.0/24 Update Message (2), length: 51 Origin (1), length: 1, Flags [T]: Incomplete 0x0000: 02 AS Path (2), length: 10, Flags [T]: 65001 65500 0x0000: 0202 0000 fde9 0000 ffdc Next Hop (3), length: 4, Flags [T]: *192.168.254.1* 0x0000: c0a8 fe01 Updated routes: 10.2.34.0/24 Update Message (2), length: 23 End-of-Rib Marker (empty NLRI) The bgp session is over directly connected interfaces and the NLRI prefix next hops are therefore directly connected. // Configuration: protocol bgp pe1 { debug all; description "ebgp"; hold time 90; local 192.168.254.0 as my_asn; neighbor 192.168.254.1 as peer_asn; direct; interpret communities off; ipv4 { table t_pe1; import all; export none; gateway direct; }; } protocol device { scan time 10; }; protocol direct { ipv4; }; protocol kernel { scan time 10; learn; persist; ipv4 { import filter { if net ~ [0.0.0.0/0, 192.168.255.0/24] then reject; }; }; } // relevant show results bird> *show route protocol pe1* Table t_pe1: *10.2.34.0/24 <http://10.2.34.0/24>* unicast [pe1 21:46:13.530] * (100) [AS65500?] via 192.168.254.1 on ens5 *10.1.12.0/24 <http://10.1.12.0/24>* unicast [pe1 21:46:13.530] * (100) [AS65500i] via 192.168.254.1 on ens5 bird> bird> *show route all* Table master4: 172.16.0.11/32 unicast [rt_nh 20:25:25.379] * (200) via 192.168.254.1 on ens5 Type: static univ 192.168.254.2/31 unicast [direct1 20:56:03.498] * (240) dev ens6 Type: device univ 192.168.254.0/31 unicast [direct1 20:56:03.498] * (240) dev ens5 Type: device univ 192.168.255.0/24 unicast [direct1 20:56:03.498] * (240) dev ens4 Type: device univ 172.16.0.33/32 unicast [rt_nh 20:25:25.379] * (200) via 192.168.254.3 on ens6 Type: static univ Thanks,

4 7

Show route across multiple route tables
by Logan Rawlins 09 Dec '19

09 Dec '19

Is there a way to utilize show route where statements to look for routes across many routing tables and return all matches ? Sent from my iPhone

3 2

Need some help
by keksbg 08 Dec '19

08 Dec '19

Hello, I need some help with my BIRD configuration file. I currently cannot figure out how to fix this issue (I'm a newbie!) and most of the other people that I know that use BIRD haven't been able to help me. So here I am. Error: /etc/bird.conf:19:1 Channel not specified (Line 19 is the closing bracket of protocol static) bird.conf: 1 router id 2.235.240.1; 1 2 protocol bgp as6939 { 3 local as 207764; 4 source address 2001:470:12:a6::2; 5 ipv6 { 6 import all; 7 export filter { 8 if net ~ [2a0f:85c0:920::/48] then accept; 9 reject; 10 }; 11 graceful restart on; 12 }; 13 neighbor 2001:470:12:a6::1 as 6939; 14 } 15 16 protocol static { 17 route 2a0f:85c0:920::/48 reject; 18 } 19 20 protocol device { 21 scan time 10; 22 } Thanks in advance.

2 1

How to determine when reconfiguration is complete?
by Kenth Eriksson 04 Dec '19

04 Dec '19

Hi! How can I tell when bird is done with reconfiguration? E.g. bird can respond: "Reconfiguration in progress", but how do you know when it is ready? Invoking configure again will trigger full re-configure again I guess? Thanks, Kenth

5 16

How to unset "gw" attribute when exporting
by Yousong Zhou 03 Dec '19

03 Dec '19

Hi list, I just tried running BGP over WireGuard link and noticed that routes were exported to kernel with "via x.x.x.x" attributes. It's a L3 point-to-point link. While routing works with or without this attribute, I am wondering if there is a way to eliminate it. 10.168.222.0/24 via 169.254.169.1 dev wg1 proto bird metric 32 vs. 10.168.222.0/24 wg1 scope link I tried setting "gw = 0.0.0.0" using an export filter, but bird will complain "Invalid gw address" because 0.0.0.0 is considered as IADDR_INVALID. I am relatively new with routing daemons and protocols at the moment, so any comments are welcome. Thanks in advance. Regards, yousong

3 3

Option to not open the server-port (179)
by Lars Ekman G 01 Dec '19

01 Dec '19

Hi, We have a use-case where we want to deploy multiple BIRD instances on the same machine. The BIRD instance would be a part of public applications with their own (virtual) addreesses. These BIRD instances shall announce the application addresses (only) but not set any local routes. The goal is to deploy applications independently of each other. A problem is that BIRD requires that a server port is opened (default 179). While the port is configurable the port numbers must be different for all applications which is hard to do (to assign each application a port is ... undesirable). Another alternative is to have a central BIRD instance and invent some way for applications to communicate their addresses. While this is certainly doable it adds an unwanted complexity, especially for testing. I would like an option to not open the server-port. As an alternative I disabled the check for setting the server port to 0 (any). It is a tiny code change and removes the coordination problem. BIRD will open an ephemeral server port which is of course useless, but we can take the waste of ports. Best Regards, Lars Ekman

3 3

bird bgp_mask/ regex with sets
by Mazur, Dariusz 22 Nov '19

22 Nov '19

Hello Bird users, I am trying to filter routing table entries based on as-path regex ( I try to write regex: 32934 (3|5|7) ) bird> show route all where bgp_path ~ [= 32934 [3,5,7] =] syntax error, unexpected '[' -> I get this error bird> According to documentation I should be able to use sets inside [= =] bgpmask BGP masks are patterns used for BGP path matching (using path ~ [= 2 3 5 * =] syntax). The masks resemble wildcard patterns as used by UNIX shells. Autonomous system numbers match themselves, * matches any (even empty) sequence of arbitrary AS numbers and ? matches one arbitrary AS number. For example, if bgp_path is 4 3 2 1, then: bgp_path ~ [= * 4 3 * =] is true, but bgp_path ~ [= * 4 5 * =] is false. BGP mask expressions can also contain integer expressions enclosed in parenthesis and integer variables, for example [= * 4 (1+2) a =]. You can also use ranges (e.g. [= * 3..5 2 100..200 * =]) and sets (e.g. [= 1 2 [3, 5, 7] * =]). I tried some other options mentioned in documentation and all works, only this one with sets doesn’t work: bird> show route all where bgp_path ~ [= 32934 (4+1) =] -> works bird> show route all where bgp_path ~ [= 32934 1..5 =] -> works Is it possible to use sets, or I faced bug? Thanks, Dariusz

2 3

Problems with compiling bird 2.7 on Debian Squeeze
by Alex D. 19 Nov '19

19 Nov '19

Hi, i tried to compile bird 2.7 on an quite ancient Debian Squeeze. Unfortunately, 'make' throws an error (see below). Yes, I know that i should update the system quite soon... But does anybody know which packages i have to update to compile successfully ? alex@rs:/src/bird-2.0.7# make fatal: Not a git repository (or any of the parent directories): .git MKDIR -p obj/client obj/conf obj/doc obj/filter obj/lib obj/nest obj/test obj/proto/bfd obj/proto/babel obj/proto/bgp obj/proto/mrt obj/proto/ospf obj/proto/perf obj/proto/pipe obj/proto/radv obj/proto/rip obj/proto/static obj/sysdep/linux obj/sysdep/unix obj/doc m4 -P conf/gen_parser.m4 conf/confbase.Y conf/flowspec.Y client/cmds.Y filter/config.Y nest/config.Y proto/bfd/config.Y proto/babel/config.Y proto/bgp/config.Y proto/mrt/config.Y proto/ospf/config.Y proto/perf/config.Y proto/pipe/config.Y proto/radv/config.Y proto/rip/config.Y proto/static/config.Y sysdep/linux/netlink.Y sysdep/unix/config.Y sysdep/unix/krt.Y >obj/conf/cf-parse.y bison -dv -pcf_ -b obj/conf/cf-parse obj/conf/cf-parse.y obj/conf/cf-parse.y: conflicts: 2 shift/reduce m4 -P conf/gen_keywords.m4 conf/confbase.Y conf/flowspec.Y client/cmds.Y filter/config.Y nest/config.Y proto/bfd/config.Y proto/babel/config.Y proto/bgp/config.Y proto/mrt/config.Y proto/ospf/config.Y proto/perf/config.Y proto/pipe/config.Y proto/radv/config.Y proto/rip/config.Y proto/static/config.Y sysdep/linux/netlink.Y sysdep/unix/config.Y sysdep/unix/krt.Y >obj/conf/keywords.h m4 -P conf/gen_commands.m4 conf/confbase.Y conf/flowspec.Y client/cmds.Y filter/config.Y nest/config.Y proto/bfd/config.Y proto/babel/config.Y proto/bgp/config.Y proto/mrt/config.Y proto/ospf/config.Y proto/perf/config.Y proto/pipe/config.Y proto/radv/config.Y proto/rip/config.Y proto/static/config.Y sysdep/linux/netlink.Y sysdep/unix/config.Y sysdep/unix/krt.Y >obj/conf/commands.h m4 -DTARGET=I -P filter/decl.m4 filter/f-inst.c obj/.dir-stamp >obj/filter/inst-interpret.c m4 -DTARGET=H -P filter/decl.m4 filter/f-inst.c obj/.dir-stamp >obj/filter/inst-gen.h echo >obj/sysdep/paths.h "/* Generated by Makefile, don't edit manually! */" echo >>obj/sysdep/paths.h "#define PATH_CONFIG_FILE \"/opt/bird-2.0.7/etc/bird.conf\"" echo >>obj/sysdep/paths.h "#define PATH_CONTROL_SOCKET \"/opt/bird-2.0.7/var/run/bird.ctl\"" if test -n "/etc/iproute2" ; then echo >>obj/sysdep/paths.h "#define PATH_IPROUTE_DIR \"/etc/iproute2\"" ; fi CC -o obj/conf/cf-parse.tab.o -c obj/conf/cf-parse.tab.c obj/conf/cf-parse.y: In function 'cf_parse': obj/conf/cf-parse.y:1926: error: unknown field 'asn' specified in initializer obj/conf/cf-parse.y:1926: warning: missing braces around initializer obj/conf/cf-parse.y:1926: warning: (near initialization for '(anonymous).val.pmi.<anonymous>') obj/conf/cf-parse.y:1927: error: unknown field 'from' specified in initializer obj/conf/cf-parse.y:1927: warning: missing braces around initializer obj/conf/cf-parse.y:1927: warning: (near initialization for '(anonymous).val.pmi.<anonymous>') obj/conf/cf-parse.y:1927: error: unknown field 'to' specified in initializer obj/conf/cf-parse.y:1927: warning: initialized field overwritten obj/conf/cf-parse.y:1927: warning: (near initialization for '(anonymous).val.pmi.kind') obj/conf/cf-parse.y:1930: error: unknown field 'set' specified in initializer obj/conf/cf-parse.y:1930: warning: missing braces around initializer obj/conf/cf-parse.y:1930: warning: (near initialization for '(anonymous).val.pmi.<anonymous>') obj/conf/cf-parse.y:1930: warning: initialization makes integer from pointer without a cast obj/conf/cf-parse.y:2184: error: unknown field 'sym' specified in initializer obj/conf/cf-parse.y:2184: warning: missing braces around initializer obj/conf/cf-parse.y:2184: warning: (near initialization for '(anonymous).<anonymous>') obj/conf/cf-parse.y:2186: error: unknown field 'sa' specified in initializer obj/conf/cf-parse.y:2186: warning: missing braces around initializer obj/conf/cf-parse.y:2186: warning: (near initialization for '(anonymous).<anonymous>') obj/conf/cf-parse.y:2186: error: incompatible types when initializing type 'struct symbol *' using type 'struct f_static_attr' obj/conf/cf-parse.y:2187: error: unknown field 'da' specified in initializer obj/conf/cf-parse.y:2187: warning: missing braces around initializer obj/conf/cf-parse.y:2187: warning: (near initialization for '(anonymous).<anonymous>') obj/conf/cf-parse.y:2187: error: incompatible types when initializing type 'struct symbol *' using type 'struct f_dynamic_attr' make: *** [obj/conf/cf-parse.tab.o] Error 1 Thanks in advance. Regards, Alex

3 2

IPv6 Flowspec isn't displayed correctly with "show route"
by Alex D. 18 Nov '19

18 Nov '19

Hello, i have a problem when i try to get infos about a specific IPv6 FlowSpec route by issuing "show route <route>" or "show route <route> all". It works, when i don't specify a particular route: bird> show route ~ ~ Table flowspec_table_v6: flow6 { dst 2a02:5a0:1212:1212::199/128; src 2a02:3f8::1/128; dport 389; } [flowspec_v6 2019-11-08] * (200) flow6 { dst 2a02:5a0:15ff:3::1/128; src ::/0; next header 58; } [vs_dis_r1_6838 23:46:47.465 from 172.28.18.113] * (100) [AS9063i] bird> ... and it also works when i specify a route which is imported in BGP from a local static route: bird> show route flow6 { dst 2a02:5a0:1212:1212::199/128; src 2a02:3f8::1/128; dport 389; } Table flowspec_table_v6: flow6 { dst 2a02:5a0:1212:1212::199/128; src 2a02:3f8::1/128; dport 389; } [flowspec_v6 2019-11-08] * (200) bird> show route flow6 { dst 2a02:5a0:1212:1212::199/128; src 2a02:3f8::1/128; dport 389; } all Table flowspec_table_v6: flow6 { dst 2a02:5a0:1212:1212::199/128; src 2a02:3f8::1/128; dport 389; } [flowspec_v6 2019-11-08] * (200) Type: static univ BGP.ext_community: (generic, 0x80060000, 0x0) bird> But when I try to show a route received via eBGP, output wrongly states that the network could ne be found: bird> show route flow6 { dst 2a02:5a0:15ff:3::1/128; src ::/0; next header 58; } Network not found bird> bird> show route flow6 { dst 2a02:5a0:15ff:3::1/128; src ::/0; next header 58; } all Network not found bird> I tried BIRD versions 2.2, 2.4 and 2.7. I could reproduce the issue in all versions. With IPv4 Flowspec, all output (for local static as well as eBGP-learned) is fine. Does anybody noticed the same behaviour ? Or is it a known bug ? If you need further informations, don't hesitate to ask for it. Thanks in advance for your replies. Regards, Alex

2 2