- Bird-users - Mailing Lists

minor documentation fixes
by Christoph 20 Sep '19

20 Sep '19

Hello, (for some unknown reason I'm not getting any emails from this mailing list even though I'm subscribed, so please keep me in CC if you reply.) Here are some suggestions for minor documentation fixes (mostly typos): https://bird.network.cz/?get_doc&v=20&f=bird-3.html > You can either use a simple string starting with a letter followed by > any combination of letters and numbers (e.g. R123, myfilter, bgp5) Underscore also appears to be allowed. atribute -> attribute https://bird.network.cz/?get_doc&v=20&f=bird-5.html#ss5.2 Each variable and each value has certain type. -> Each variable and each value has a certain type. that is to prevent you from shooting in the foot -> that is to prevent you from shooting oneself in the foot .is_ip4 which returns bool -> .is_ip4 which returns a bool lclist/ -> lclist https://bird.network.cz/?get_doc&v=20&f=bird-5.html#ss5.3 which checks current route -> which checks the current route https://bird.network.cz/?get_doc&v=20&f=bird-6.html#ss6.13 current: > print "Ignore invalid ROA ", net, " for ASN ", bgp_path.last;" Not the ROA is invalid, the announcement is. Maybe use: print "Ignore RPKI INVALID announcement ", net, " for ASN ", bgp_path.last; kind regards Christoph

2 1

Re: Re: BIRD 2.0.6 and 1.6.8
by Enes Halilović 19 Sep '19

19 Sep '19

Hello, I have problem when trying to install BIRD 2.0.6 from ppa:cz.nic-labs/bird (ubuntu 18.04.2 LTS (Bionic Beaver)): I received following error: bird2 : PreDepends: init-system-helpers (>= 1.56~) but 1.51 is to be installed Regrads, Enes

2 1

Unsupported empty lists - why?
by Nico Schottelius 18 Sep '19

18 Sep '19

Hello, being a bird 1.6 user (Debian), I find myself often in the situation that I'd like to define a variable in either bird.conf or bird6.conf and have a general.conf that defines the filters used in both protocols. However if I have a variable, for instance net_prefer_provider_a = [ s.o.m.e/prefix+ ]; in bird6.conf, but not don't prefer IPv4 traffic from any network of this provider, I'd like to define net_prefer_provider_a = []; However this is not supported in bird1.6. Now I tried to get around this problem by using defined(), however this code also does not work: if defined(net_prefer_to_a) then { if net ~ net_prefer_to_a then { bgp_local_pref = pref_high; } } net_prefer_to_a is defined in IPv6, but not in IPv4. This gives the error message: /etc/bird/general.conf:128:40 net_prefer_to_a: variable expected. How do you handle default or empty values for sets of prefixes? Best, Nico -- Your Swiss, Open Source and IPv6 Virtual Machine. Now on www.datacenterlight.ch.

3 4

[PATCH] Multiple neighbor range protocols in BGP
by Liam Nattrass 17 Sep '19

17 Sep '19

Hey all, I was doing some work with dynamic neighbors in BGP, and found that I am not able to use multiple protocol definitions with neighbor ranges. Connections to the second and subsequent definitions are rejected. The BGP protocol for the subsequent instances depend on a lock, but due to the remote_addresses being the same (null) the subsequent protocols hang, waiting for the first protocol. Attached is a small patch which checks if the protocol is dynamic, and uses the remote_range prefix instead of a zero remote_address for the lock. Hope this helps. Thanks, Liam Nattrass

2 3

BIRD 2.0.6 and 1.6.8
by Ondrej Filip 15 Sep '19

15 Sep '19

Dear BIRD users, we just released two new versions - 1.6.8 and 2.0.6. Version 1.6.8 just includes important bugfixes. Version 2.0.6 o RAdv: Solicited unicast RAs o BGP: Optional Adj-RIB-Out o BGP: Extended optional parameters length o Filter: Sets and set expressions in path masks o Several important bugfixes Cheers! Ondrej

4 5

Advices for a weird multihop setup
by Alarig Le Lay 14 Sep '19

14 Sep '19

Hi, I have a weird setup with a transit. My next-hop is 2a03:94e0:feff:: (with a multihop session) which is reachable via 2a03:94e0:17ff::1 which is on-link on eno1. (your should already tear blood here) So, when I establish the session, the next-hop couldn’t be resolved and the route is marked as unreachable. e.g. 2a00:9600::/47 unreachable [bgp_terrahost_ipv6 12:32:10.864 from 2a03:94e0:feff::] * (100/-) [AS25605i] Type: BGP univ BGP.origin: IGP BGP.as_path: 203629 6939 3356 25605 BGP.next_hop: 2a03:94e0:feff:: BGP.local_pref: 100 So, for now I’m just exporting route with a next-hop different of 2a03:94e0:feff:: and I added a default route (ip -6 r a default via 2a03:94e0:17ff::1 dev eno1 onlink) to a least do the necessary routing on those. 40 protocol kernel kernel_ipv6 { 41 learn; 42 persist; 43 ipv6 { 44 import all; 45 export where bgp_next_hop != 2a03:94e0:feff::; 46 }; 47 } This seems to be a bit ugly for me, so I have to questions: * Is it possible to handle with on-link next-hop with bird? * I think not, so is there a less ugly work-around? 75 protocol static static_terrahost_ipv6 { 76 ipv6 { 77 import all; 78 }; 80 route 2a03:94e0:feff::/128 recursive 2a03:94e0:17ff::1; 81 route 2a03:94e0:17ff::1/128 via "eno1"; 82 } 257 protocol bgp bgp_terrahost_ipv6 from UPSTREAM_IPv6 { 258 description "terrahost"; 259 neighbor 2a03:94e0:feff:: as 203629; 260 multihop 3; 261 262 ipv6 { 263 import filter bgp_filter_terrahost_in_ipv6; 264 }; 265 } Regards, -- Alarig

2 2

Debian packages for BIRD 2
by Ondrej Zajicek 14 Sep '19

14 Sep '19

Hello Several days ago i received info that BIRD 2.0.4 is now packaged in Debian (unstable): https://packages.debian.org/sid/bird2 Thanks to Ondrej Sury and others. -- Elen sila lumenn' omentielvo Ondrej 'Santiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

4 5

bird >=2.0.4 Stack underflow and most routes become filtered
by Дружок 1 13 Sep '19

13 Sep '19

Hi! .. /var/log/bird.log 2019-08-22 15:38:38.604 <ERR> filters, line 1023: Stack underflow 2019-08-22 18:02:27.157 <ERR> filters, line 511: Stack underflow 2019-08-22 18:02:30.616 <ERR> filters, line 0: Stack underflow.... ... function bgp_in(int peer_as; prefix set peer_nets) { if ! (avoid_martians()) then return false; if ! (net ~ peer_nets) then return false; if (bgp_path.first != peer_as ) then return false; # if (is_black()) then return true; # if net.len > 24 then return false; return true; } .. define DataClub_nets = [ 46.183.216.0/21{21,32} <http://46.183.216.0/21%7B21,32%7D>, 84.38.128.0/24{24,32} <http://84.38.128.0/24%7B24,32%7D>, 84.38.130.0/24{24,32} <http://84.38.130.0/24%7B24,32%7D>, 84.38.131.0/24{24,32} <http://84.38.131.0/24%7B24,32%7D>, 84.38.132.0/24{24,32} <http://84.38.132.0/24%7B24,32%7D>, 84.38.134.0/24{24,32} <http://84.38.134.0/24%7B24,32%7D>, 84.38.135.0/24{24,32} <http://84.38.135.0/24%7B24,32%7D>, 109.248.147.0/24{24,32} <http://109.248.147.0/24%7B24,32%7D>, 109.248.148.0/24{24,32} <http://109.248.148.0/24%7B24,32%7D>, 109.248.149.0/24{24,32} <http://109.248.149.0/24%7B24,32%7D>, 185.220.116.0/24{24,32} <http://185.220.116.0/24%7B24,32%7D>, 185.220.117.0/24{24,32} <http://185.220.117.0/24%7B24,32%7D>, 185.220.118.0/24{24,32} <http://185.220.118.0/24%7B24,32%7D>, 194.165.16.0/23{23,32} <http://194.165.16.0/23%7B23,32%7D> ]; .. protocol bgp DataClub from PEERS { description "DataClub/52048/as-dataclub"; neighbor 193.27.39.4 as 52048; ipv4 { import where bgp_in(52048, DataClub_nets); export where bgp_out(52048, 64004); }; } ... I redid the configuration something like ... ipv4 { import filter myfilter; .. ... then I issue test "show route filter myfilter" and get all nets. But in fact, all these routes were filtered. And, finally, only "accept" remained in the filter - this method unfiltered routes. Bug, feature? P.S.: Bird <= 2.0.3 is OK.

5 7

Filter ext_community?
by Chris Herdt 12 Sep '19

12 Sep '19

I have a number of routes that include non-standard bgp_ext_community entries, for example unknown 0x10b (VRF Route Import). Is there a way to filter bgp_ext_community for only route targets? I tried the following, but the ec datatype expects integers, not wildcards: show route filter { if (rt, *, *) ~ bgp_ext_community then accept; reject; } all I'm using bird 2.0.2. Thanks! -- Chris Herdt

2 1

ospf authentication status from bird cli?
by Kenth Eriksson 12 Sep '19

12 Sep '19

Is it possible to see ospf authentication status from bird cli? I have seen that authentication failures are logged to file, but it would be good to have it visible in cli as well. Thanks, Kenth

3 5