- Bird-users - Mailing Lists

Simple two bird BGPs two Uplinks one Peering Provider config
by Yves Illi 26 May '19

26 May '19

Hi there, I am really new to the complete topic of BGP. So please have a bit mercy with me if I ask something very stupid. But I am trying to build that for the first time ever and I am feeling like a donkey in front of a big mountain. Last but not least it is currently running, but I guess its more luck than something else. Like I said I am completely new to the topic of BGP. What I don't get is how I configure them together so they work (as a HA-Cluster) and currently I can only route a.b.c.249/29 instead of a.b.c.0/22. Here is what I am trying to build (https://imgur.com/a/NtWE6MY) And here are my two configs: /* * My example bgp01 configuration */ log syslog all; log "/var/log/bird.log" all; # d.e.f.124/29 is my IP in the transfer network /29 to my peering uplink1 # d.e.f.125/29 is my 2nd bird bgp in the transfer network /29 to my peering uplink1 router id d.e.f.124; define myasn = XXXX; define myaddr = d.e.f.124; protocol device { scan time 10; # Scan interfaces every 10 seconds } ipv4 table master4; protocol direct { ipv4; # Tells bird to only do ipv4 interface "enp3s0f4"; # Restrict network interfaces BIRD works with } protocol kernel { ipv4{ table master4; import all; export all; }; persist; } #a.b.c.0 is my own /22 ip range protocol static static_bgp { ipv4; route a.b.c.0/22 via d.e.f.124; } protocol bgp link1 { local d.e.f.124 as XXXX; neighbor d.e.f.121 as YYYY; #d.e.f.121 is the first router of my peering uplink 1 ipv4 { import all;export where proto = "static_bgp"; }; } protocol bgp link2 { local d.e.f.124 as XXXX; neighbor d.e.f.122 as YYYY; #d.e.f.122 is the second router of my peering uplink 1 ipv4 { import all;export where proto = "static_bgp"; }; } /* * My example bgp02 configuration */ log syslog all; log "/var/log/bird.log" all; # d.e.f.124/29 is my IP in the transfer network /29 to my peering provider1 # d.e.f.125/29 is my 2nd bird bgp in the transfer network /29 to my peering provider1 router id d.e.f.125; define myasn = XXXX; define myaddr = d.e.f.125; protocol device { scan time 10; # Scan interfaces every 10 seconds } ipv4 table master4; protocol direct { ipv4; # Tells bird to only do ipv4 interface "enp3s0f4"; # Restrict network interfaces BIRD works with } protocol kernel { ipv4{ table master4; import all; export all; }; persist; } #a.b.c.0 is my own /22 ip range protocol static static_bgp { ipv4; route a.b.c.0/22 via d.e.f.125; } protocol bgp link1 { local d.e.f.125 as XXXX; neighbor d.e.f.121 as YYYY; #d.e.f.121 is the first router of my peering provider1 ipv4 { import all;export where proto = "static_bgp"; }; } protocol bgp link2 { local d.e.f.125 as XXXX; neighbor d.e.f.122 as YYYY; #d.e.f.122 is the second router of my peering provider1 ipv4 { import all;export where proto = "static_bgp"; }; } Thanks a lot for your help and inputs Best Regards, Yves

4 5

bird external script hook?
by Michael Schwartzkopff 23 May '19

23 May '19

Hi, some time ago there was in interesting discussion to add hooks to call external scripts to bird. See: https://bird.network.cz/pipermail/bird-users/2014-July/009167.html As far as ask my google, these hooks are not yet implemented in bird. Am I correct? Any idea how to get an external script run after a route change? Mit freundlichen Grüßen, -- [*] sys4 AG https://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG,80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer, Wolfgang Stief Aufsichtsratsvorsitzender: Florian Kirstein

2 1

bgp add paths to select only equal routes
by Alexander Zubkov 16 May '19

16 May '19

Hello, If "add paths" config option is enabled for a bgp protocol than it sends every route matching the filter on export. But I would like to have an option to send only the best route with routes similar to it (equal localpref, aspath length, ...). Like it is done in the kernel protocol and its "merge paths" option. So for example if I had 2 routes for the same prefix with different bgp_local_pref or bgp_path length, than only the route with better attributes would be announced to the peer. Currently both routes would be announced.

2 2

show route for ... filtered (not working)
by Terra Nova 13 May '19

13 May '19

Greetings, Ubuntu-16.04.6 LTS bird-1.6.6 (built from source) Our upstream BGP configuration is using: import keep filtered on I was checking the master table for a (filtered) destination IPv6 address (and network) doing the following. bird> show route for 2620:0:6b0:ff00::20 Network not in table bird> show route for 2620:0:6b0:ff00::20 all Network not in table bird> show route for 2620:0:6b0:ff00::20 filtered Network not in table bird> show route where bgp_path ~ [= * 23028 =] bird> show route where bgp_path ~ [= * 23028 =] filtered 2604:8800::/32 via 2001:590::xxxx:xxxx on edge.411 [gtt6 01:53:36] * (100 / 95) [AS 820048060 174 23028i] 2620:0:6b0::/48 via 2001:590::xxxx:xxxx on edge.411 [gtt6 01:53:36] * (100 / 95) [AS 820048060 174 23028i] bird> show route filtered for 2604:8800::/32 Network not in table bird> show route for 2604:8800::/32 filtered Network not in table bird> show route for 2620:0:6b0::/48 filtered Network not in table bird> show route table master for 2620:0:6b0:ff00::20 filtered Network not in table Why will the 'show route' only show this filtered route using 'bgp_path' and not directly using 'for'? This route is filtered in the 'master' table and there are no Pipes being used. Am I misusing the 'filtered' option? Thank you for looking. -- Terra

3 4

'prefer older' does not work?
by Alexander Shikov 13 May '19

13 May '19

Hello! All of our BGP peers have 'prefer older' option enabled. But I noticed that best route is not the oldest one: bird> show route for 91.226.190.1 all 91.226.190.0/24 via 193.25.181.44 on bge0 [ITSTARCOM 2019-05-10 11:05:56] * (100) [AS50981i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: 48422 50981 BGP.next_hop: 193.25.181.44 BGP.local_pref: 100 BGP.community: (65005,10804) (31210,31210) BGP.ext_community: (rt, 31210, 31210) via 193.25.180.141 on bge0 [SATELLITE 2019-05-09 15:16:08] (100) [AS50981i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: 44416 50981 BGP.next_hop: 193.25.180.141 BGP.local_pref: 100 BGP.community: (44416,2) (65005,10804) (31210,31210) BGP.ext_community: (rt, 31210, 31210) What am I missing? Thanks! -- Alexander Shikov Technical Staff, Digital Telecom IX Tel.: +380 44 201 14 07 Mob.: +380 50 410 30 57 http://dtel-ix.net/

3 3

Debian packages for BIRD2
by Kees Meijs 13 May '19

13 May '19

Hi list, Yesterday I attended T-DOSE (http://t-dose.org/) and spoke to some other BIRD users, mostly on Debian. As a collective, we were a little surprised that https://bird.network.cz/?download&tdir=debian/pool/main/b/bird/ only shows BIRD 1.6 packages and not 2.0. Compiling 2.0 (at least for Stretch; didn't test Buster yet) works quite well, for example when using the tree as of https://salsa.debian.org/debian/bird2/ Maybe there's another place to look (and we didn't look in the right place) or maybe there's simply no one compiling the packages for the public. If applicable, I would like to help out albeit by hosting a package repository or compiling (or both). Cheers, Kees -- https://nefos.nl/contact Nefos IT bv Ambachtsweg 25 (industrienummer 4217) 5627 BZ Eindhoven Nederland KvK 66494931 /Aanwezig op maandag, dinsdag, woensdag en vrijdag/

8 8

static default route not always pushed to kernel (2.0.4)
by Kenth Eriksson 08 May '19

08 May '19

Hi! There are cases where bird does not push a static default route to the kernel. One way to see this is as follows; A default route from the kernel bird> show route for 0.0.0.0 Table master4: 0.0.0.0/0 unicast [kernel1 13:46:07.958] (215) via 10.210.137.1 on eth1 Add two static default routes bird> show static 0.0.0.0/0 via 10.210.137.1 0.0.0.0/0 via 192.168.120.1 (dormant) bird> The static default route has higher preference, hece I expected it to be pushed to the kernel. But it is not... bird> show route for 0.0.0.0 Table master4: 0.0.0.0/0 unicast [kernel1 13:46:07.958] (215) via 10.210.137.1 on eth1 bird> Next remove both static routes, configure, add one of them back again and both are shown. bird> show route for 0.0.0.0 Table master4: 0.0.0.0/0 unicast [static1 14:13:16.762] * (255) via 10.210.137.1 on eth1 unicast [kernel1 13:46:07.958] (215) via 10.210.137.1 on eth1 bird> Thanks, Kenth

3 11

Re: 100% CPU load with device scanning enabled
by Saso Tavcar 07 May '19

07 May '19

Hi, this is an OVS issue, already discussed: https://mail.openvswitch.org/pipermail/ovs-discuss/2016-November/043007.html <https://mail.openvswitch.org/pipermail/ovs-discuss/2016-November/043007.html> ... https://mail.openvswitch.org/pipermail/ovs-discuss/2016-November/043063.html <https://mail.openvswitch.org/pipermail/ovs-discuss/2016-November/043063.html> Official OVS quote: > We'd accept patches to improve OVS's routing table code. It's not > designed to scale to 1,800,000 routes. We'd also take code to suppress > the routing table code in cases where it isn't actually needed, since > it's not always needed. But we can't take a patch to just delete it; > I'm sure you understand. I tried to apply this patch at that time, but was already useless for newer versions: https://mail.openvswitch.org/pipermail/ovs-discuss/attachments/20161123/537… <https://mail.openvswitch.org/pipermail/ovs-discuss/attachments/20161123/537…> Our workaround was to scale VM with 3 vCPU-s, since our average system load is 1.5 for BGP. You can see what is happening: [root@bgp1 ~]# top ... PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 654 root 10 -10 1284492 1.0g 20276 R 98.0 27.0 2513:01 ovs-vswitchd 16 root 20 0 0 0 0 S 2.0 0.0 24:45.60 ksoftirqd/1 [root@bgp1 ~]# ip route show ... 1.0.0.0/24 via 89.212.47.185 dev t2-v24-ha proto bird 1.0.4.0/24 via 89.212.47.185 dev t2-v24-ha proto bird 1.0.4.0/22 via 89.212.47.185 dev t2-v24-ha proto bird 1.0.5.0/24 via 89.212.47.185 dev t2-v24-ha proto bird Routes being constantly added and deleted: [root@bgp1 ~]# ip monitor ... Deleted 2620:11d:6000::/42 via 2a01:260:1021::1 dev t2-v26-ha proto bird metric 1024 pref medium 2620:11d:6000::/42 via 2a01:260:1021::1 dev t2-v26-ha proto bird metric 1024 pref medium Deleted 2620:11d:6000::/42 via 2a01:260:1021::1 dev t2-v26-ha proto bird metric 1024 pref medium 2620:11d:6000::/42 via 2a01:260:1021::1 dev t2-v26-ha proto bird metric 1024 pref medium Deleted 2620:11d:6000::/42 via 2a01:260:1021::1 dev t2-v26-ha proto bird metric 1024 pref medium 2620:11d:6000::/42 via 2a01:260:1021::1 dev t2-v26-ha proto bird metric 1024 pref medium Deleted 68.69.37.0/24 via 89.212.47.185 dev t2-v24-ha proto bird 68.69.37.0/24 via 89.212.47.185 dev t2-v24-ha proto bird Deleted 103.115.180.0/22 via 89.212.47.185 dev t2-v24-ha proto bird 103.115.180.0/22 via 89.212.47.185 dev t2-v24-ha proto bird Deleted 103.115.180.0/22 via 89.212.47.185 dev t2-v24-ha proto bird 103.115.180.0/22 via 89.212.47.185 dev t2-v24-ha proto bird Deleted 2.16.70.0/23 via 89.212.47.185 dev t2-v24-ha proto bird Deleted 88.221.28.0/22 via 89.212.47.185 dev t2-v24-ha proto bird Deleted 23.50.188.0/22 via 89.212.47.185 dev t2-v24-ha proto bird Deleted 92.122.68.0/22 via 89.212.47.185 dev t2-v24-ha proto bird Deleted 88.221.100.0/22 via 89.212.47.185 dev t2-v24-ha proto bird Deleted 92.123.208.0/22 via 89.212.47.185 dev t2-v24-ha proto bird ..... Regards, saso > On 6 May 2019, at 19:30, Kees Meijs <kees(a)nefos.nl <mailto:kees@nefos.nl>> wrote: > > Hi list, > > We're in the process of replacing Quagga with BIRD but stumble upon a > little problem. > > When device scanning is on (obviously default) our testing machine > completely fills up a CPU core. The culprit isn't BIRD itself but an > Open vSwitch daemon. > > After disabling the device protocol and restarting BIRD, everything goes > back to it's quiet state. > > BIRD (1.6.3-2) and Open vSwitch (2.6.2~pre+git20161223-3) both were > installed as Debian stable packages. > > The configuration is as simple as: > >> # This is a minimal configuration file, which allows the bird daemon >> to start >> # but will not cause anything else to happen. >> # >> # Please refer to the documentation in the bird-doc package or BIRD User's >> # Guide on http://bird.network.cz/ <http://bird.network.cz/> for more information on configuring >> BIRD and >> # adding routing protocols. >> >> # Change this into your BIRD router ID. It's a world-wide unique >> identification >> # of your router, usually one of router's IPv4 addresses. >> router id 1.2.3.4; >> >> # The Device protocol is not a real routing protocol. It doesn't >> generate any >> # routes and it only serves as a module for getting information about >> network >> # interfaces from the kernel. >> protocol device { >> } >> >> # The Kernel protocol is not a real routing protocol. Instead of >> communicating >> # with other routers in the network, it performs synchronization of BIRD's >> # routing tables with the OS kernel. >> protocol kernel { >> metric 64; # Use explicit kernel route metric to avoid collisions >> # with non-BIRD routes in the kernel routing table >> import none; >> export all; # Actually insert routes into the kernel routing table >> } >> >> protocol bgp test { >> description "BGP test"; >> local as REDACTED; >> neighbor 1.2.3.4 as REDACTED; >> direct; >> next hop self; >> deterministic med on; >> export none; >> import all; >> } > > Meanwhile log messages such as below arise: > >> bird: Kernel dropped some netlink messages, will resync on next scan. > > For a test I deleted all existing Open vSwitch bridges and the load > dropped again. After adding an empty new bridge, the load spikes again > in an instant. > > This is unexpected behaviour. Maybe it's an implementation problem in > Open vSwitch or maybe in BIRD. Anyway, it should happen I guess. > > Any clues? > > Thanks in advance! > > Regards, > Kees > >

5 9

100% CPU load with device scanning enabled
by Kees Meijs 06 May '19

06 May '19

Hi list, We're in the process of replacing Quagga with BIRD but stumble upon a little problem. When device scanning is on (obviously default) our testing machine completely fills up a CPU core. The culprit isn't BIRD itself but an Open vSwitch daemon. After disabling the device protocol and restarting BIRD, everything goes back to it's quiet state. BIRD (1.6.3-2) and Open vSwitch (2.6.2~pre+git20161223-3) both were installed as Debian stable packages. The configuration is as simple as: > # This is a minimal configuration file, which allows the bird daemon > to start > # but will not cause anything else to happen. > # > # Please refer to the documentation in the bird-doc package or BIRD User's > # Guide on http://bird.network.cz/ for more information on configuring > BIRD and > # adding routing protocols. > > # Change this into your BIRD router ID. It's a world-wide unique > identification > # of your router, usually one of router's IPv4 addresses. > router id 1.2.3.4; > > # The Device protocol is not a real routing protocol. It doesn't > generate any > # routes and it only serves as a module for getting information about > network > # interfaces from the kernel. > protocol device { > } > > # The Kernel protocol is not a real routing protocol. Instead of > communicating > # with other routers in the network, it performs synchronization of BIRD's > # routing tables with the OS kernel. > protocol kernel { > metric 64; # Use explicit kernel route metric to avoid collisions > # with non-BIRD routes in the kernel routing table > import none; > export all; # Actually insert routes into the kernel routing table > } > > protocol bgp test { > description "BGP test"; > local as REDACTED; > neighbor 1.2.3.4 as REDACTED; > direct; > next hop self; > deterministic med on; > export none; > import all; > } Meanwhile log messages such as below arise: > bird: Kernel dropped some netlink messages, will resync on next scan. For a test I deleted all existing Open vSwitch bridges and the load dropped again. After adding an empty new bridge, the load spikes again in an instant. This is unexpected behaviour. Maybe it's an implementation problem in Open vSwitch or maybe in BIRD. Anyway, it should happen I guess. Any clues? Thanks in advance! Regards, Kees

1 2

Full (regression) test suite?
by Robert Scheck 04 May '19

04 May '19

Hello all, is there something like a full (regression) test suite for BIRD that one could run after building BIRD 2.0.x? Regards, Robert

4 10