- Bird-users - Mailing Lists

add bird repository information to documentation?
by Christoph 04 Oct '19

04 Oct '19

Hello, I only found out via this mailing list that there are RPM packages and apparently debian packages. Maybe you could add it to the documentation ("Installing BIRD" section?) if these are the official, maintained and recommended repos to use? https://bird.network.cz/?get_doc&v=20&f=bird-1.html#ss1.2 https://bird.network.cz/?download&tdir=debian/ > There are backported packages for the BIRD Internet Routing Daemon > available. Packages are maintained by Ondrej Sury , > currently i386 and amd64 ports are available for Debian and Ubuntu. > > If you want use this Debian package repository for BIRD, please > execute following commands as root: > > # wget -O - http://bird.network.cz/debian/apt.key | apt-key add - you probably want to replace http with https there. This appears to be key AC0E47584A7A714D: public key "CZ.NIC Labs Archive Automatic Signing Key <ftpmaster(a)labs.nic.cz>" but that does not appear to be the key that is used for signing: apt update [...] Err:2 https://bird.network.cz/debian buster InRelease The following signatures couldn't be verified because the public key is not available: NO_PUBKEY B188E2B695BD4743 Could you clarify and update the file on the server? > # apt-get install lsb-release > # echo "deb http://bird.network.cz/debian/ $(lsb_release -sc) main" > /etc/apt/sources.list.d/bird.list http -> https thanks, Christoph

1 0

Is BIRD on BSD a second class citizen?
by Christoph 04 Oct '19

04 Oct '19

Hello, (reminder: please keep me in CC, the mailing list issue is still unsolved) so far we get the impression that BIRD on BSD appears to be somewhat less supported when compared to Linux based systems. The two main points being so far: - security: no privilege dropping on BSD - performance issue when syncing with kernel routing table? Are there more limitations of BIRD on BSD? Do you actively recommend running BIRD on Linux (and against BSD)? thanks, Christoph

6 9

Re: Is BIRD on BSD a second class citizen?
by Mike Mazarick 03 Oct '19

03 Oct '19

Years ago, in the 2009-2010 timeframe, a telecom operator the "next rack over" told me that Linux didn't have the necessary security structures for telephone conversations and BSD had them. He used OpenBSD because what he wanted to do wasn't practical in Linux. I really didn't follow up and don't know what the advantages of were for BSD deployments back then. If you wanted to describe the inherent security advantages of BSD over Linux today, this would be welcomed. A lot has happened in 9-10 years in both BSD and Linux. At one time, I though BSD was a contender for Linux. Because of the volume, I'm not sure of this presently. Mike Mazarick --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

1 0

OSPF over openvpn; adjacency problems
by Thorsten Alteholz 02 Oct '19

02 Oct '19

Hi, I am trying to use OSPF over an openvpn link. tcpdump tells me that both ends send their HELLO packet but bird does not want to recognize them. When looking at ospf_rc_hook() in proto/ospf/packet.c the HELLO packet arrives in bird, but is discarded because of "strange address combinations": src_local is 0: sk->faddr = 10.25.0.26 ifa->addr->prefix = 10.25.0.2 ifa->addr->pxlen = 32 dst_mcast is 1: sk->laddr = 224.0.0.5 ifa->all_routers = 224.0.0.5 ifa->des_routers = 224.0.0.6 dst_mcast = 1 || 0 >From my point of view these values do not look that bad (the tun interface on this server has an address of 10.25.0.1 and on the client it is 10.25.0.26). But of course (dst_mcast && !src_local) is 1 and the HELLO packet is ignored. Does anybody have any idea what went wrong here? Best regards Thorsten The OSPF configuration on the server: protocol ospf { debug all; import all; export none; area 10.10.10.0 { interface "tun1" { type ptp; cost 2000; neighbors { 10.25.0.1; }; }; }; }

3 3

Explicit as-path filtering (with prepending allowed)
by Nigel Kukard 02 Oct '19

02 Oct '19

Hi guys, Is there perhaps an equivalent in BIRD for the following... ^(65000_)+(65101_)+(65253_)+$ The closest I could come was the following, but I am unsure if it would match if any of the networks prepend. if (bgp_path ~ [= 65000 65101 65253 =]) -N

2 2

Resolve a BGP next-hop with another BGP route
by Alarig Le Lay 30 Sep '19

30 Sep '19

Hello, It seems that bird can’t resolve the next-hop in that case. But there is no issue when the next-hop is announced by OSPF. bird> show route all for 45.91.127.1 Table master4: 45.91.127.0/24 unreachable [ibgp_hv02_ipv4 16:16:24.927 from 89.234.186.40] * (100/-) [i] Type: BGP univ BGP.origin: IGP BGP.as_path: BGP.next_hop: 89.234.186.116 BGP.local_pref: 100 unreachable [ibgp_nominoe_ipv4 16:01:40.402 from 89.234.186.33] (100/-) [i] Type: BGP univ BGP.origin: IGP BGP.as_path: BGP.next_hop: 89.234.186.116 BGP.med: 150 BGP.local_pref: 100 BGP.originator_id: 89.234.186.40 BGP.cluster_list: 89.234.186.33 bird> show route all for 89.234.186.116 Table master4: 89.234.186.116/32 unicast [ibgp_hv02_ipv4 16:21:11.352] * (100/0) [i] via 89.234.186.40 on enp3s0f1.33 Type: BGP univ BGP.origin: IGP BGP.as_path: BGP.next_hop: 89.234.186.40 BGP.local_pref: 100 unicast [ibgp_nominoe_ipv4 16:20:22.754 from 89.234.186.33] (100/0) [i] via 89.234.186.40 on enp3s0f1.33 Type: BGP univ BGP.origin: IGP BGP.as_path: BGP.next_hop: 89.234.186.40 BGP.med: 150 BGP.local_pref: 100 BGP.originator_id: 89.234.186.40 BGP.cluster_list: 89.234.186.33 But cisco works well: asbr01#sh ip route 45.91.127.1 Routing entry for 45.91.127.0/24 Known via "bgp 204092", distance 200, metric 150, type internal Last update from 89.234.186.116 00:07:07 ago Routing Descriptor Blocks: * 89.234.186.116, from 89.234.186.40, 00:07:07 ago Route metric is 150, traffic share count is 1 AS Hops 0 MPLS label: none asbr01#ping 45.91.127.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 45.91.127.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms asbr01# asbr01#sh ip route 89.234.186.116 Routing entry for 89.234.186.116/32 Known via "bgp 204092", distance 200, metric 150, type internal Last update from 89.234.186.40 01:13:29 ago Routing Descriptor Blocks: * 89.234.186.40, from 89.234.186.40, 01:13:29 ago Route metric is 150, traffic share count is 1 AS Hops 0 MPLS label: none Am I missing something? Regards, -- Alarig

3 4

BFD neighbor reload issue
by Winston Chen 30 Sep '19

30 Sep '19

Hi, I am using BFD neighbor to config BFD sessions statically. I found that if I add/remove BFD neighbors in bird.conf and ask bird to reload with HUP signal, bird cannot reload the configuration correctly. Here is the BFD config I used to test. If I start bird with this configuration, then comment one of the neighbors and send HUP with kill to bird, bird simply says session reconfigured without remove the commented neighbor. protocol bfd { interface "*" { passive; }; neighbor 172.17.0.2; neighbor 172.17.0.3; } After digging into the code, I found that it looks like there is a bug in function bfd_reconfigure_neighbors. It loops to check neighbor in old and new configuration. There is a return in the block if (bfd_same_neighbor(nn, on)). If there is neighbor existing in both new and old, reconfiguration might be skipped. I tried to modify the code to make it work. And the attached patch is the one I got. Hopefully this is the proper way to solve the issue. Regards. Chen.

2 1

every minute: "I/O loop cycle took .... ms for 2 events"
by Christoph 30 Sep '19

30 Sep '19

Hello, (please keep me in CC the mailing list issues are still not solved) we get the following WARN log entry exactly once a minute: I/O loop cycle took 6343 ms for 2 events Is this something to worry about? Is this related to hard drive I/O or some other kind of I/O? thanks, Christoph

3 3

BIRD on HW ASIC
by Роман Вартичан 28 Sep '19

28 Sep '19

Hello! We are going to implement BIRD on HW ASIC platform. We try to understand how to untie bird from linux kernel and route its netlink or unix socket commands to ASIC driver (we carefully studied mail list, but did not find any info about this). We see that ioctl in BIRD will be deprecated in near future. Could you kindly clarify which is the best way of connecting of BIRD with proprietary hardware driver which runs in user space? -- Roman

2 1

OSPF key expire rules violates RFC 2293?
by Kenth Eriksson 27 Sep '19

27 Sep '19

Hi! When an OSPF key lifetime expires then bird stops using that key. E.g. if the configured parameter "generate from time" expires, then bird reverts to an OSPF interface in unauthenticated mode. Is this intentional? Or is it something that can be configured? I think it is not according to the RFC. In appendix D of RFC 2293, the following is stated; "In the event that the last key associated with an interface expires, it is unacceptable to revert to an unauthenticated condition, and not advisable to disrupt routing." Thanks, Kenth

2 2