- Bird-users - Mailing Lists

Add two bfd session with same dest ip and different local ip, can it work?
by bbk bbk 05 Nov '18

05 Nov '18

hi, Can the bird add two BFD sessions with same destination ip and different local ip? My testing is only one session can be added as if.

2 1

bird logging
by Alexander Zubkov 29 Oct '18

29 Oct '18

Hi, When I specify relative log file path, the file is created relative to the current working directory. But for the include directive relative path are applied relative to the config file. Probably it would be better to have a consistent path resolution? I also suppose it could have been done intentionally. But I did not find description of this behaviour in the documentation. And I did not find anything on this question with google.

2 1

[PATCH 2.x branch] BGP: Bind listen socket to VRF
by Alexander Zubkov 26 Oct '18

26 Oct '18

BGP protocol could not bind to the interface in a VRF even if the vrf option was specified in the configuration. Signed-off-by: Alexander Zubkov <green(a)qrator.net> --- proto/bgp/bgp.c | 1 + 1 file changed, 1 insertion(+) diff --git a/proto/bgp/bgp.c b/proto/bgp/bgp.c index e7479df..3aa35ae 100644 --- a/proto/bgp/bgp.c +++ b/proto/bgp/bgp.c @@ -168,6 +168,7 @@ bgp_open(struct bgp_proto *p) sock *sk = sk_new(proto_pool); sk->type = SK_TCP_PASSIVE; + sk->vrf = p->p.vrf; sk->ttl = 255; sk->saddr = addr; sk->sport = port; -- 1.9.1

2 4

segfault in bird v1.6.4
by Alexander Velkov 26 Oct '18

26 Oct '18

Hello bird-team, I have a bird v1.6.4. configuration that works fine. A certain set of actions leads to a segfault and a crash of the bird binary. I have configured and built bird 1.6.4. with IPv6 support that runs on a box with a i686 linux with kernel v4.14.75. My bird configuration: ### bird6.conf: protocol device { scan time 10; } protocol direct C_main { interface "*"; preference 255; check link; } protocol kernel K_main { preference 255; scan time 20; export all; learn; } include "*.conff"; ### ospfv3.conff in the same directory: debug protocols all; log syslog { info, remote, warning, error, auth, fatal, bug }; protocol ospf O_main { preference 145; instance id 0; area 172.16.0.0 { interface "vti0" { dead 120; hello 30; cost 1; priority 1; type pointopoint; neighbors { fe80::e68:3ff:fe26:5130; }; }; interface "eth1" { dead 40; hello 10; cost 1; priority 1; type broadcast; stub yes; }; }; import filter { accept; }; export filter { reject; }; } ### The following actions lead to a crash of bird6: EEPD[~]# /sbin/bird6 -P /var/run/bird6.pid -c /var/etc/bird6/bird6.conf Oct 24 14:23:08 EEPD info bird6 [ 4684]: Started EEPD[~]# ps | grep bird6 4930 root 1500 S /sbin/bird6 -P /var/run/bird6.pid -c /var/etc/bird6/bird6.conf 4932 root 1284 S grep bird6 EEPD[~]# EEPD[~]# ip -6 link add vti0 type vti6 local fd00::38 remote fd00::1b ikey 2 okey 2; EEPD[~]# ip -6 link set vti0 up; EEPD[~]# ifconfig vti0 mtu 1422 Oct 24 14:23:17 EEPD err bird6 [ 4684]: KIF: Received address message for unknown interface 33 Oct 24 14:23:20 EEPD err bird6 [ 4684]: O_main: Socket error on vti0: Invalid argument Oct 24 14:23:20 EEPD info kernel: [ 4684]: segfault at 58e ip b7eed103 sp bf9acad8 error 4 in libuClibc-1.0.30.so[b7ebd000+72000] EEPD[~]# EEPD[~]# ps | grep bird6 4988 root 1284 S grep bird6 EEPD[~]# ### Further testing - bird does NOT crash if the contents of bird6.conf and ospfv3.conf are placed in a single file without inclusion. - bird does NOT crash if the call 'ifconfig vti0 mtu 1422' is executed before 'ip -6 link set vti0 up'. Hope this information helps. Best Regards Alex

3 3

BIRD 2.0.2 VPNv4 RD Filter
by Hombach, Tobias 25 Oct '18

25 Oct '18

Hi, Is it possible in current BIRD 2.0.2 release to filter (more dynamically) VPNv4 prefixes based on RD? In our scenario, we want to use BIRD to connect large VPNv4 landscapes and want to filter prefixes based on RD on Route Server ingress. I can extract RD from VPNv4 prefix with special operator '.rd' filter vpnv4_ingress { if (net.rd = 5000:200) then accept; reject; } This is working but I don't want 1x if-statement per RD as we have lots of RD's. Any ranges or wildcards are not allowed. Something like '5000:200..299' does not work. Or '5000:*' also does not work. I tried to create a constant for a VPNv4 prefix to use it in a filter: function some_function() prefix set test; { test = [ 0:5000:200 10.0.0.0/24 ]; } Also not allowed. Creating a constant of data type 'vpnrd' did not work. Then I tried to handle the output of 'net.rd' as string to maybe use shell pattern. filter vpnv4_ingress string test; { test = "5000:20?"; if net.rd ~ test then accept; reject; } Results in error: "<ERR> filters, line 90: ~ applied on unknown type pair". Changing the if-statement to 'if net.rd = test then accept;' does work w/o error but all prefixes are filtered. The shell pattern is not working. I guess the output of 'net.rd' is not a string. I also cannot save 'net.rd' output in a string variable. Last but not least. I have found a undocumented function 'format()'. This function seems to return a string and shell patterns work. I guess the function should not be used in production so I just used it for testing. define test = "5000:20?"; filter vpnv4_ingress { if format(net.rd) ~ test then accept; reject; } <TRACE> some-router > added [best] 5000:200 200.200.200.0/24 unicast But this works only once. As soon as I run 'configure' in BIRD client, BIRD does crash. <INFO> Reconfiguring <BUG> Unknown instruction 70 in same (F) Long story short. Is there a best practice to filter VPNv4 based on RD? Or anything on the roadmap? Filtering on RT with Communities works fine but does not fit our purpose. Thanks in advance! Regards Tobias

2 2

Tell BGP Partner to prefer a specific bgp session
by Kevin Schmitz 20 Oct '18

20 Oct '18

Hi guys, how i can tell my bgp partner where to route the traffic? I have two sessions to my BGP partner and announce the same ip-range. Is there a way to do it from my site? Thanks in advance

2 1

bgp sorted tables
by Milen Bogunski 18 Oct '18

18 Oct '18

Hello, I'm trying to use sorted table feature (despite it is described as a little bit slower) I'm trying on 1.6.3, 1.6.4 with table master sorted; also on 2.0.2 format ipv4 table master4 sorted; But is does not seem to work, when show route from birdc routes are still in random order. anyone help on that, is this sorting still working ? Thanks in advance. Milen Bogunski

3 6

Bird debian repo now over https only?
by Adam Pribyl 18 Oct '18

18 Oct '18

We have embedded debian instalations using the debian bird package. However the repo url http://bird.network.cz/debian/ is redirected to https. This causes a problems, because our installations do not have https and apt ends with: The method driver /usr/lib/apt/methods/https could not be found. In my opinion the explicit http request should not be automaticaly rewriten to https. Adam Pribyl

7 12

Lost withdrawal message
by oldnick 17 Oct '18

17 Oct '18

Hi! I am observing strange BGP announcement problem. BGP peering is between bird router (version 2.0.2) and cisco router. BIRD 10.0.0.1 <---> 10.0.0.2 Cisco I am announcing prefix 10.10.10.10/32 from bird to cisco. My initial bird configuration is as follows: ################## [root@localhost ~]# cat /etc/bird.conf router id 10.0.0.1; filter filter1 { accept; } protocol kernel { persist yes; learn yes; scan time 10; ipv4 { import none; export none; }; } protocol device { scan time 10; } protocol direct { interface "lo"; ipv4 { import filter filter1; export none; }; } protocol bgp peer1 { local as 65001; neighbor 10.0.0.2 as 65002; hold time 45; ipv4 { import none; export filter filter1; }; } ##################### IP address 10.10.10.10/32 is configured on loopback interface: lo:1: flags=73<UP,LOOPBACK,RUNNING> mtu 65536 inet 10.10.10.10 netmask 255.255.255.255 It works just fine with this configuration. I can see announcement of 10.10.10.10/32 on cisco router: R1#show ip bgp Network Next Hop Metric LocPrf Weight Path *> 10.10.10.10/32 10.0.0.1 0 65001 i Strange thing happens when I make a change to filter1, instead of: filter filter1 { accept; } I change it to: filter filter1 { if ( net = 10.10.10.10/32 ) then { reject; } accept; } Basically I am blocking import of prefix 10.10.10.10/32 into direct protocol and at the same time I am blocking export of prefix 10.10.10.10/32 to peer1 (it is the same filter filter1 both for direct import and for peer1 export). After the change of /etc/bird.conf I am making "birdc configure" and I am expecting to see the withdrawal message on cisco side, but there is none (I checked it with tcpdump). Here is what I can still see on cisco side: R1#show ip bgp Network Next Hop Metric LocPrf Weight Path *> 10.10.10.10/32 10.0.0.1 0 65001 i This is the output of birdc "show route": bird> show route bird> This is the output of birdc "show route export peer1": bird> show route export peer1 bird> So there is no route according to bird, but it seems like bird does not send withdrawal message. Either I am doing something wrong, or it is a bird bug. Appreciate your help. -- Regards, Sergey

2 1

BGP neighbor
by Arvin Gan 15 Oct '18

15 Oct '18

Hi All, I notice that if BGP is directly connected, when BGP started, the bgp_start_locked() is called and using neigh_find2() to lookup the neighbor. In neigh_find2(), bird will loop iface_list and comparing the remote IP address with the IP prefix of interface, checking whether is the subnet. Now, I have a question that why not using route table to find the neighbor ? Since I have one case that make me have some confusion. Test Case: DUT1 DUT2 DUT3 lo interface 2000::1111/128 , interface3 3000:1::8/112 <-----------------------> interface4 3000:1::9/112, lo interface: 2000::2222/128 interface1 2000::1/112 <------>interface2: 2000::1/112 Igor the route table configuration, suppose the route is correct. 1. Anyone known the topology connection is normal or correct ? 2. if yes, create BGP peer with loopback interface 2000::1111, remote IP 2000::2222, directly connection. 3. BGP peer will use 2000::2222 to compare with interface prefix on DUT1, find the neighbor interface2 with prefix 2000::1/112 [interface2 on DUT2] BUT, actually, BGP peer TCP connection is not directly connected, and TCP connection don't using interface2 on DUT2, but using interface3 on DUT2 to connect interface4 of DUT3. Best Regards, Arvin Gan

1 0