- Bird-users - Mailing Lists

RPKI doesn’t work with a FQDN
by Alarig Le Lay 11 Jan '20

11 Jan '20

Hi, I have this configuration: asbr02 ~ # cat /etc/bird.conf.d/protocol_rpki/* protocol rpki rpki_alarig { roa4 { table r4; }; roa6 { table r6; }; #remote "msi.no.swordarmor.fr"; remote 2a0e:f42::1; } protocol rpki rpki_conan { roa4 { table r4; }; roa6 { table r6; }; remote "conan.grifon.fr"; } The first protocol establish with the second fails bird> show protocols all rpki_alarig Name Proto Table State Since Info rpki_alarig RPKI --- up 15:54:25.902 Established Cache server: 2a0e:f42::1:323 Status: Established Transport: Unprotected over TCP Protocol version: 1 Session ID: 28569 Serial number: 285 Last update: before 84.055 s Refresh timer : 323.944/408 Retry timer : --- Expire timer : 7115.944/7200 Channel roa4 State: UP Table: r4 Preference: 100 Input filter: ACCEPT Output filter: REJECT Routes: 100516 imported, 0 exported, 100516 preferred Route change stats: received rejected filtered ignored accepted Import updates: 100816 0 0 0 100816 Import withdraws: 300 0 --- 0 300 Export updates: 0 0 0 --- 0 Export withdraws: 0 --- --- --- 0 Channel roa6 State: UP Table: r6 Preference: 100 Input filter: ACCEPT Output filter: REJECT Routes: 16578 imported, 0 exported, 16578 preferred Route change stats: received rejected filtered ignored accepted Import updates: 16641 0 0 0 16641 Import withdraws: 63 0 --- 0 63 Export updates: 0 0 0 --- 0 Export withdraws: 0 --- --- --- 0 bird> show protocols all rpki_conan Name Proto Table State Since Info rpki_conan RPKI --- start 15:54:25.847 Transport-Error Cache server: conan.grifon.fr:323 Status: Transport-Error Transport: Unprotected over TCP Protocol version: 1 Session ID: --- Serial number: --- Last update: --- Refresh timer : --- Retry timer : 451.669/600 Expire timer : --- Channel roa4 State: DOWN Table: r4 Preference: 100 Input filter: ACCEPT Output filter: REJECT Channel roa6 State: DOWN Table: r6 Preference: 100 Input filter: ACCEPT Output filter: REJECT I see the DNS request (and the answer): 15:54:25.851095 IP6 asbr02.cogent-rns.grifon.fr.35411 > drogon.grifon.fr.domain: 167+ A? conan.grifon.fr. (33) 15:54:25.851105 IP6 asbr02.cogent-rns.grifon.fr.35411 > drogon.grifon.fr.domain: 14516+ AAAA? conan.grifon.fr. (33) 15:54:25.851495 IP6 drogon.grifon.fr.domain > asbr02.cogent-rns.grifon.fr.35411: 167 1/0/0 A 89.234.186.8 (49) 15:54:25.851515 IP6 drogon.grifon.fr.domain > asbr02.cogent-rns.grifon.fr.35411: 14516 1/0/0 AAAA 2a00:5884::8 (61) But no SYN over 323. However, I can telnet to it: asbr02 ~ # mtr -bzwe msi.no.swordarmor.fr Start: Sat Jan 11 15:55:59 2020 HOST: asbr02.cogent-rns.grifon.fr Loss% Snt Last Avg Best Wrst StDev 1. AS204092 regis.swordarmor.fr (2a00:5884::1f) 0.0% 10 0.2 0.2 0.1 0.3 0.0 2. AS208627 tinc0.core02-arendal.no.swordarmor.fr (2a0e:f42:fffe::6) 0.0% 10 51.5 51.7 51.2 52.2 0.0 3. AS208627 msi.no.swordarmor.fr (2a0e:f42::1) 0.0% 10 52.0 52.3 51.4 52.8 0.0 asbr02 ~ # mtr -bzwe conan.grifon.fr Start: Sat Jan 11 15:57:47 2020 HOST: asbr02.cogent-rns.grifon.fr Loss% Snt Last Avg Best Wrst StDev 1. AS204092 conan.grifon.fr (2a00:5884::8) 0.0% 10 0.3 0.3 0.2 0.5 0.0 asbr02 ~ # telnet msi.no.swordarmor.fr 323 Trying 2a0e:f42::1... Connected to msi.no.swordarmor.fr. Escape character is '^]'. ^] telnet> quit Connection closed. asbr02 ~ # telnet conan.grifon.fr 323 Trying 2a00:5884::8... Connected to conan.grifon.fr. Escape character is '^]'. ^] telnet> quit Connection closed. And then I see the SYN: 16:01:28.787297 IP6 asbr02.cogent-rns.grifon.fr.60330 > conan.grifon.fr.323: Flags [S], seq 1340260165, win 28800, options [mss 1440,sackOK,TS val 4034128416 ecr 0,nop,wscale 7], le ngth 0 16:01:28.787677 IP6 conan.grifon.fr.323 > asbr02.cogent-rns.grifon.fr.60330: Flags [S.], seq 287295091, ack 1340260166, win 64260, options [mss 1440,sackOK,TS val 4292064010 ecr 403 4128416,nop,wscale 7], length 0 16:01:28.787713 IP6 asbr02.cogent-rns.grifon.fr.60330 > conan.grifon.fr.323: Flags [.], ack 1, win 225, options [nop,nop,TS val 4034128416 ecr 4292064010], length 0 16:01:31.114241 IP6 asbr02.cogent-rns.grifon.fr.60330 > conan.grifon.fr.323: Flags [F.], seq 1, ack 1, win 225, options [nop,nop,TS val 4034130743 ecr 4292064010], length 0 16:01:31.114709 IP6 conan.grifon.fr.323 > asbr02.cogent-rns.grifon.fr.60330: Flags [F.], seq 1, ack 2, win 503, options [nop,nop,TS val 4292066337 ecr 4034130743], length 0 16:01:31.114725 IP6 asbr02.cogent-rns.grifon.fr.60330 > conan.grifon.fr.323: Flags [.], ack 2, win 225, options [nop,nop,TS val 4034130743 ecr 4292066337], length 0 The first protocol only established when I put the IP address directly. Plus, not having the brackets over the literal IPv6 address is a bit confusing. The IP isn’t 2a0e:f42::1:323. Regards, -- Alarig

2 2

Multi thread support
by Marcelo Balbinot 10 Jan '20

10 Jan '20

Hello, About multi thread support (cpu multi-core use) is it in the roadmap? thanks -- Marcelo Balbinot IP/MPLS Backbone Manager at AS53062 G G NET Telecomunicações www.gegnet.com.br INOC 53062*100

2 1

[RFC PATCH 00/20] Context typed filters
by Asbjørn Sloth Tønnesen 08 Jan '20

08 Jan '20

This RFC patch series is a first stab, at adding some syntactic sugar making it more plessant to implement non-trivial dual-stack configurations, like https://bgpfilterguide.nlnog.net/ I'm not completely happy with the naming at this stage, but I want to get this series out before 36C3 ends. Looking forward to your feedback. Asbjørn Sloth Tønnesen (20): add NET_ANY make symbol types maskable add new symbol flags for typed symbols add support for defining typed symbols show symbols: don't show typed symbols add initial FI_TYPED_CONSTANT instruction add generic pseudo filter check function add f_has_typed_symbols helper function use net_type when looking up symbols in SYM_FLAG_SAME check show symbol flags in dump filter all check if functions need to be adapted force consistent number of function arguments use FI_TYPED_CONSTANT for typed constants adapt infrastructure adapt protocol filters adapt sh route filters adapt mrt filters allow typed definitions add typed test config add typed documentation conf/cf-lex.l | 75 ++++++++++++++++++++---- conf/conf.h | 58 +++++++++++++----- conf/confbase.Y | 6 +- doc/bird.sgml | 10 ++++ filter/Makefile | 2 +- filter/adapt.c | 150 +++++++++++++++++++++++++++++++++++++++++++++++ filter/config.Y | 28 +++++++-- filter/decl.m4 | 77 +++++++++++++++++++++--- filter/f-inst.c | 42 ++++++++++++- filter/filter.c | 29 +++++---- filter/filter.h | 16 +++++ filter/test.conf | 41 +++++++++++++ lib/net.c | 1 + lib/net.h | 1 + nest/cmds.c | 3 + nest/config.Y | 8 ++- nest/route.h | 1 + nest/rt-show.c | 9 ++- proto/mrt/mrt.c | 17 +++++- proto/mrt/mrt.h | 2 + 20 files changed, 519 insertions(+), 57 deletions(-) create mode 100644 filter/adapt.c -- 2.24.0

2 3

Static route tracking with BFD
by Юрий Иванов 08 Jan '20

08 Jan '20

Hi, I've successfully bring bfd session up with my router. All seems good, but in some cases I will need to flush static route if bfd session comes down. As far as I know BIRD 2.0.7 support this but how to configure it?

2 3

Fwd: [PDB Announce] Call for volunteers for PeeringDB
by Chriztoffer Hansen 07 Jan '20

07 Jan '20

Fwd to bird-users list, because I thought mayhaps (individual_count >= 1) might be interested... Best Regards, Chriztoffer ---------- Forwarded message --------- From: Stephen McManus <smcmanus(a)peeringdb.com> Date: Mon, 6 Jan 2020 at 22:10 Subject: [PDB Announce] Call for volunteers for PeeringDB To: <pdb-announce(a)lists.peeringdb.com> Hi all, We are looking for volunteers to serve on the PeeringDB Admin and Product Committees. The ideal volunteers are industry professionals who are passionate about improving PeeringDB, and ensuring it meets the needs of the community it supports. We are most interested in people who have significant free time to dedicate to these efforts (as much as 4 or more hours a week). Please don’t volunteer if you can’t commit the time! Admin Committee: • Review requests from community members • Authorize users to organizations and networks • Generally keep PeeringDB’s data trustworthy and correct Product Committee: • Review and prioritize requests for improvements to PeeringDB • Work with developers and community members to specify how to solve problems and implement improvements • Set vision for how PeeringDB can help the community in the future If you are interested in either of these roles, and have time you can commit, please let us know at stefan(a)peeringdb.com for the Admin Committee or smcmanus(a)peeringdb.com for the Product Committee. Please include a sentence or two about yourself, why you want to volunteer and how you think you can help. Thanks! -Steve _______________________________________________ Pdb-announce mailing list Pdb-announce(a)lists.peeringdb.com https://lists.peeringdb.com/cgi-bin/mailman/listinfo/pdb-announce

1 0

Follow up question on "next hop self"
by Nico Schottelius 07 Jan '20

07 Jan '20

Hello, I was wondering about how bird solves the following problem with next hop self enabled: R1 <--------> R2 \ / \ / upstream 1 So both routers receive the same routes from upstream and insert them with the same local_pref. With "next hop self" on, both routers will think that the path is not the same and potentially either of the two routers could start routing via the other router instead of via upstream directly. What is the typical approach to solve this situation correctly? Does making setting the local_pref lower if received from an iBGP router make sense in that case? Best regards, Nico -- Modern, affordable, Swiss Virtual Machines. Visit www.datacenterlight.ch

4 8

Problem with if statements containing && or || expressions
by mikma.bird＠lists.m7n.se 07 Jan '20

07 Jan '20

Hello, I'm having problems with if statements containing &&, or ||. Why do the config file below cause the following error? $ ./bird -d -l bird: filters, line 8: Argument 2 of AND must be of type bool, got type int bird: bird.conf:15:12 Runtime error while evaluating expression; see log for details # bird.conf function dummy() { return 1; } function test() { if (dummy() != 0) && true then { print "Success"; } return 0; } eval test(); protocol device { interface "*"; } /Mikael

2 4

as-path flter problem
by Marcelo Balbinot 06 Jan '20

06 Jan '20

Hello I'm having difficulty using as-path math expressions Look at my case. correct as-path: 65001 65002 65003 I would like to validate if the as-path of the received prefix conforms to the as-path above. But, I would like to allow prepend of all ASes, so: 65001 65001 65002 65003 is valid 65001 65002 65002 65003 is valid 65001 65002 65003 65003 is valid 65001 65001 65002 65002 65002 65003 65003 is valid 65001 65999 65002 65003 is NOT valid The best expression I found was if (bgp_path ~ [= 65001* 65002* 65003* =]) then but it considers the path '65001 65999 65002 65003' to be valid With regex that would be easier, but with bird bgpmask I couldn't solve it. Any suggestion? -- Marcelo Balbinot IP/MPLS Backbone Manager at AS53062 G G NET Telecomunicações www.gegnet.com.br INOC 53062*100

3 5

Bgu repport OSPF IPv6 Bird with wireguard
by alpha_one_x86 31 Dec '19

31 Dec '19

Hi, OSPF IPv6 of bird is buggy over wireguard. Work over OpenVPN. Work OSPF IPv4. *Only in IPv6, the OSPF interface is not detected.* Cheers, -- alpha_one_x86/BRULE Herman <alpha_one_x86(a)first-world.info> Main developer of Supercopier/Ultracopier/CatchChallenger, Esourcing and server management IT, OS, technologies, research & development, security and business department

2 2

[RFC PATCH 20/20] add typed documentation
by Asbjørn Sloth Tønnesen 30 Dec '19

30 Dec '19

--- doc/bird.sgml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/doc/bird.sgml b/doc/bird.sgml index 8548c9c6..b9e5c45d 100644 --- a/doc/bird.sgml +++ b/doc/bird.sgml @@ -1229,6 +1229,16 @@ bird> show route filter { if 127.0.0.5 &tilde; net then accept; } bird> </code> +<p>Constants, functions and filters can also be declared for a specific table type context. + +<code> +define default_route:ipv4 = 0.0.0.0/0; +define default_route:ipv6 = ::/0; + +function is_default_route() + return net = default_route; +} +</code> <sect>Data types <label id="data-types"> -- 2.24.0

1 0