- Bird-users - Mailing Lists

BIRD 2 does not re-validate RPKI status?
by Tim Bruijnzeels 24 Jun '19

24 Jun '19

Hi, I am not sure if this is an artefact of my set-up, or a missing feature / bug in Bird. I recently set up a lab with Bird 2.0.4, connecting to routinator using the rpki-rtr protocol. All works fine so-far. Many thanks for supporting this! However, I found that when ROAs get updated and the cache has new Verified ROA Payloads (VRPs), the existing routes are not re-evaluated. Bird seems to do this validation only when an actual update is seen. I.e. if a prefix was dropped because it was RPKI invalid it stays dropped even if it is now RPKI valid, and vice versa: if it was accepted because it was (in my config case) RPKI unknown or valid, it stays accepted even if it is now RPKI invalid. According to RFC6811 affected prefixes MUST be re-validated when the cache has changes: https://tools.ietf.org/html/rfc6811#section-4 My work-around was to restart the sessions with peers and this forced re-validation. But it is not the best solution. I also loose all the routes temporarily. Is this a local issue? Did I miss something in my set-up? Or is this expected behaviour in Bird? If so, is supporting re-validation on the roadmap? For a lab this doesn't matter too much, but in a real networking environment I think it's important that this works. Otherwise changes in RPKI only become effective when there are changes in BGP (I assume it's doing validation just when updates are seen), and if wrong ROAs are issued by accident, and fixed again, then prefixes may stay unreachable until a session is restarted. Kind regards, Tim Bruijnzeels

2 2

BIRD support in OpenBSD rpki-client?
by Robert Scheck 20 Jun '19

20 Jun '19

Hello all, the portable variant [1] of the recently developed OpenBSD rpki-client [2] is available, however it only supports OpenBGPD so far. I wonder if somebody already had a look to it regarding BIRD support. I know BIRD consumes libssh (for RTRlib [3], but also for the RIPE NCC RPKI Validator as it seems [4]). While I'm not used to OpenBGPD, it feels like they're using a configuration file generated by the rpki-client to feed ROA data in. As this concept is different from BIRD's [5] (maybe I'm overlooking something?), I would be interested how BIRD support at OpenBSD rpki-client could technically look like (and if there are preferences), given there is also remote control [6] via the Unix socket. [1] https://github.com/kristapsdz/rpki-client [2] https://github.com/openbsd/src/tree/master/usr.sbin/rpki-client [3] https://bird.network.cz/?get_doc&v=20&f=prog-5.html [4] https://github.com/tmshlvck/smart-validator/wiki/Connecting-to-BGP-router [5] https://gitlab.labs.nic.cz/labs/bird/commit/46610354319b55df172be87985455b1… [6] https://bird.network.cz/doc/bird-4.html Regards, Robert

1 0

Prevent duplicate routes with OSPF
by Kees Meijs 20 Jun '19

20 Jun '19

Hi list, This is probably a question that was answered many times before: how can I prevent duplicate routes originating from OSPF? For example, a routing table with BIRD2 shut down: > # ip r s > default via 192.168.255.1 dev eth0 > 192.168.255.0/24 dev eth0 proto kernel scope link src 192.168.255.82 And... with BIRD2 running: > # ip r s > default via 192.168.255.1 dev eth0 > 1.2.3.4 dev dummy0 proto bird scope link metric 32 > 1.2.3.7 via 192.168.255.213 dev eth0 proto bird metric 32 > 192.168.255.0/24 dev eth0 proto kernel scope link src 192.168.255.82 > 192.168.255.0/24 dev eth0 proto bird scope link metric 32 In this example at least 192.168.255.0/24 is a duplicate. Configuration used: > log syslog all; > protocol device { > } > > protocol direct { > disabled; # Disable by default > ipv4; # Connect to default IPv4 table > ipv6; # ... and to default IPv6 table > } > > protocol kernel { > ipv4 { # Connect protocol to IPv4 table by channel > export all; # Export to protocol. default is export none > }; > } > > protocol kernel { > ipv6 { # Connect protocol to IPv4 table by channel > export all; # Export to protocol. default is export none > }; > } > > protocol static { > ipv4; # Again, IPv4 channel with default options > } > > protocol static { > ipv6; > } > > protocol ospf v2 foobar { > area 0.0.0.0 { > interface "dummy0" { > stub; > }; > interface "eth0" { > }; > }; > } How can I prevent direct connected routes from showing up from OSPF as well ending up in duplicates? Thanks in advance! Regards, Kees -- https://nefos.nl/contact Nefos IT bv Ambachtsweg 25 (industrienummer 4217) 5627 BZ Eindhoven Nederland KvK 66494931 /Aanwezig op maandag, dinsdag, woensdag en vrijdag/

2 2

[PATCH 2/3] Fix issue where cli socket buffer may get full
by Kenth Eriksson 14 Jun '19

14 Jun '19

The cli module must reset the socket io buffer rpos when all characters in the socket buffer has been processed. The method cli_get_command is always invoked twice for every CLI command, thus rxpos may also be reset at the second invocation if no newline was found and no new data is input to the socket buffer. Signed-off-by: Kenth Eriksson <kenth.eriksson(a)infinera.com> --- sysdep/unix/main.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sysdep/unix/main.c b/sysdep/unix/main.c index 921115b1..cf5f4a3c 100644 --- a/sysdep/unix/main.c +++ b/sysdep/unix/main.c @@ -403,7 +403,10 @@ cli_get_command(cli *c) { t++; c->rx_pos = c->rx_buf; - c->rx_aux = t; + if (t < tend) + c->rx_aux = t; + else + c->rx_aux = s->rpos = s->rbuf; *d = 0; return (d < dend) ? 1 : -1; } -- 2.21.0

4 8

string shell pattern match
by Robert Sander 14 Jun '19

14 Jun '19

Hi, according to the documentation for BIRD 1.6 it should be possible to use "shell patterns" with the ~ operator on strings: https://bird.network.cz/?get_doc&v=16&f=bird-5.html#ss5.2 I tried to apply this within a filter but the expression does not match: if ifname ~ "bond0.4[2345]" then { reject; } I can only match if I "unroll" the expression and create four different if statements. What does "shell pattern" from the documentation mean in this case? Are [ and ] not valid here? Regards -- Robert Sander Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin https://www.heinlein-support.de Tel: 030 / 405051-43 Fax: 030 / 405051-19 Amtsgericht Berlin-Charlottenburg - HRB 93818 B Geschäftsführer: Peer Heinlein - Sitz: Berlin

2 3

Kernel protocol and different namespaces
by Jakub Nowacki 13 Jun '19

13 Jun '19

Hi, I'm trying to figure out if it's possible to use protocol kernel to export routes to OS routing table that are in different Linux namespaces. Is this possible at all? I've found previous post https://bird.network.cz/pipermail/bird-users/2014-October/009393.html suggesting that only option is to use multiple instances of Bird, each running in different namespace. I was hoping I could just stick to one instance and export routes to different namespaces. Regards -- Kuba Nowacki

9 20

bird suddenly stops learning routes through bgp
by Kurt Wauters 13 Jun '19

13 Jun '19

Hi, We're running BIRD 1.6.4 as a bgp routeserver but suddenly he stopped learning and advertising routes. All BGP sessions are established and prefixes are grouped in dedicated routing tables. Does anybody have an idea what the problem might be? We've got an interconnection with one of our other ASN's and can confrim that - routes are advertised to bird but not installed on bird - no routes are received from bird Everything was working before so i don't see immediately what he problem might be birdcl show status BIRD 1.6.4 ready. BIRD 1.6.4 Router ID is 10.246.87.228 Current server time is 2019-06-13 05:12:22 Last reboot on 2019-06-13 05:07:56 Last reconfiguration on 2019-06-13 05:07:56 Daemon is up and running birdcl show protocols BIRD 1.6.4 ready. name proto table state since info kernel1 Kernel master up 05:07:56 device1 Device master up 05:07:56 LINX_24232_1 BGP LINX start 05:07:56 Active Socket: No route to host LINX_14340_1 BGP LINX up 05:08:01 Established LINX_8426_1 BGP LINX up 05:08:06 Established birdcl show route table LINX BIRD 1.6.4 ready. Thanks Kurt

1 0

Code style?
by Kenth Eriksson 12 Jun '19

12 Jun '19

Is there a code style guide to be used when submitting patches to bird? An emacs file, clang-format or similar would be useful. Thanks, Kenth

4 4

Fwd: bird (2.0.4) does not install multipath route in kernel
by Arno O 11 Jun '19

11 Jun '19

One more (last) question: since when (which Bird) -release is ECMP like this supported? Thx BR Ar Am Di., 11. Juni 2019 um 15:39 Uhr schrieb Kenth Eriksson < Kenth.Eriksson(a)infinera.com>: > On Tue, 2019-06-11 at 15:13 +0200, Arno O wrote: > > all, Alexander, > > > > bingo, "ip route" does the job ( sorry, was not aware about that > > difference). > > Thanx > > > Message only sent to me, please re-post to list so that they can see > your resolution of the problem. > > > Enjoy the day > > BR > > Ar > > > > [root@localhost ~]# ip route > > 10.10.10.0/24 dev enp0s3 proto bird scope link metric 10 > > 10.10.10.0/24 dev enp0s3 proto kernel scope link src 10.10.10.1 > > metric 100 > > 50.50.50.0/24 proto bird metric 10 > > nexthop via 10.10.10.2 dev enp0s3 weight 11 > > nexthop via 10.10.10.3 dev enp0s3 weight 11 > > 192.168.122.0/24 dev virbr0 proto kernel scope link src 192.168.122.1 > > linkdown > > 192.168.122.0/24 via 10.10.10.3 dev enp0s3 proto bird metric 10 > > [root@localhost ~]# > > > > Am Di., 11. Juni 2019 um 14:56 Uhr schrieb Arno O <odermaar(a)gmail.com > > >: > > > Dear Kenth, > > > > > > there is no such error trace in syslog > > > > > > (bird log setting: > > > # Configure logging > > > log syslog all;) > > > > > > How to proceed? > > > > > > BR > > > Ar > > > > > > > > > Am Di., 11. Juni 2019 um 14:36 Uhr schrieb Kenth Eriksson < > > > Kenth.Eriksson(a)infinera.com>: > > > > On Tue, 2019-06-11 at 14:18 +0200, Arno O wrote: > > > > > CAUTION: This email originated from outside of the > > > > organization. Do > > > > > not click links or open attachments unless you recognize the > > > > sender > > > > > and know the content is safe. > > > > > > > > > > This topic was already discussed around March 1st 2019, > > > > without > > > > > having received a clear outcome. > > > > > > > > > > Now, dealing with ECMP with OSPF in Bird 2.04 on Fedora30, I > > > > run in > > > > > same problems: > > > > > > > > > > -> multiple next hops to same destination (50.50.50.0/24) are > > > > in the > > > > > route table of bird: > > > > > bird> sho route > > > > > Table master4: > > > > > 10.10.10.0/24 unicast [OIPv46 13:39:16.979] I (150/10) > > > > > [10.10.10.1] > > > > > dev enp0s3 > > > > > 192.168.122.0/24 unicast [OIPv46 13:46:18.979] E2 > > > > (150/10/10000) > > > > > [10.10.10.3] > > > > > via 10.10.10.3 on enp0s3 > > > > > 50.50.50.0/24 unicast [OIPv46 13:46:18.979] E2 > > > > (150/10/100) > > > > > [10.10.10.3] > > > > > via 10.10.10.2 on enp0s3 weight 11 > > > > > via 10.10.10.3 on enp0s3 weight 11 > > > > > bird> > > > > > [root@localhost ~]# > > > > > > > > > > but kernel route table looks unexpectedly different: > > > > > root@localhost ~]# netstat -rn > > > > > Kernel IP routing table > > > > > Destination Gateway Genmask Flags MSS > > > > Window > > > > > irtt Iface > > > > > 10.10.10.0 0.0.0.0 255.255.255.0 U 0 0 > > > > > > > > > 0 enp0s3 > > > > > 50.50.50.0 10.10.10.2 255.255.255.0 UG 0 0 > > > > > > > > > 0 enp0s3 > > > > > 192.168.122.0 10.10.10.3 255.255.255.0 UG 0 0 > > > > > > > > > 0 enp0s3 > > > > > [root@localhost ~]# > > > > > > > > > Do you see them if you do 'ip route'? I think iproute2 is better > > > > at > > > > displaying multipath routes. > > > > > > > > > Kernel looks configured correctly > > > > (CONFIG_IP_ROUTE_MULTIPATH=y), > > > > > etc.etc. > > > > > > > > > If the kernel is mis-configured, I believe you get an error trace > > > > in > > > > the bird log. Something along the following lines; > > > > > > > > <WARN> Netlink: Invalid argument > > > > > > > > I tested it on 2.0.4 and kernel 4.14.92+ and that seems to work. > > > > > > > > > > > > > > Bird config on ECMPed bird router: > > > > > protocol ospf OIPv46 { > > > > > tick 2; > > > > > rfc1583compat yes; > > > > > ecmp yes limit 8; > > > > > merge external yes; > > > > > ipv4 { > > > > > import all; > > > > > export all; > > > > > }; > > > > > area 0 { > > > > > interface "enp0*" { > > > > > # type broadcast; # Detected by default > > > > > cost 10; # Interface metric > > > > > ecmp weight 11; > > > > > > > > > > What is missing either in the bird-config or the kernel part? > > > > > > > > > > Thx > > > > > > > > > > BR > > > > > Ar > > > > > >

2 2

[PATCH 3/3] Fix cli socket close due to io buffer full
by Kenth Eriksson 11 Jun '19

11 Jun '19

The pointer rpos in the socket io module is only restored if the rx_hook callback returns 1. Previously the cli_rx hook always returned 0. Guarantee by design that we return 1 if we are at the end of the socket buffer. Signed-off-by: Kenth Eriksson <kenth.eriksson(a)infinera.com> --- sysdep/unix/main.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sysdep/unix/main.c b/sysdep/unix/main.c index cf5f4a3c..6a6d1d2b 100644 --- a/sysdep/unix/main.c +++ b/sysdep/unix/main.c @@ -422,7 +422,7 @@ static int cli_rx(sock *s, uint size UNUSED) { cli_kick(s->data); - return 0; + return s->rbuf+s->rbsize==s->rpos? 1 : 0; } static void -- 2.21.0

3 2