- Bird-users - Mailing Lists

BGP channel add/remove
by Arvin Gan 27 Jun '18

27 Jun '18

Hi All, I am using Bird 2.0.2 version, I create a BGP instance with one channel IPV4, that all work normally. Then I modified configuration file and add new channel IPV6, and using command "configure" under birdc , found the new added channel IPV6 is not announced to peer and channel ipv6 is down state. Then I used "restart bgp", all channels IPV4 and IPV6 are announced, work normally. I also do another test that delete channel in configure file and used "configure", it work normally. Anyone know the difference of actions between "configure" and "restart "? The command "configure" can dynamically modify the BGP protocol configuration, cant the action "configure" re-announce the added/removed capability to peer to update ? Appreciated your help in advance...... Thanks Arvin

3 6

RE: BGP channel add/remove
by Arvin Gan 27 Jun '18

27 Jun '18

Hi All, After investigate the codes for command "configure", found that when delete/add channel, the function proto_configure_channel() always return value "1" , that mean the same is true in function bgp_reconfigure(), line 917 of proto.c will ignore the change(add/delete channel).... Is my understand correct ? Thanks Arvin From: Arvin Gan Sent: Friday, June 22, 2018 5:23 PM To: bird-users(a)network.cz Subject: BGP channel add/remove Hi All, I am using Bird 2.0.2 version, I create a BGP instance with one channel IPV4, that all work normally. Then I modified configuration file and add new channel IPV6, and using command "configure" under birdc , found the new added channel IPV6 is not announced to peer and channel ipv6 is down state. Then I used "restart bgp", all channels IPV4 and IPV6 are announced, work normally. I also do another test that delete channel in configure file and used "configure", it work normally. Anyone know the difference of actions between "configure" and "restart "? The command "configure" can dynamically modify the BGP protocol configuration, cant the action "configure" re-announce the added/removed capability to peer to update ? Appreciated your help in advance...... Thanks Arvin

2 1

BGP between Cisco and BIRD
by Isaac HO 26 Jun '18

26 Jun '18

dear all, finally, stop the iptables. 2 BIRD routers can establish BGP. But cannot form BGP with Cisco csr1000v router Last error: Socket: Connection refused <-- 1. can traceroute from cisco router to a BIRD 2. cannot traceroute from the BIRD router to the Cisco router 3. can ping together 4. iptables service is stopped on BIRD Would you please help.

1 0

Flowspec Extended communities
by Tim Weippert 25 Jun '18

25 Jun '18

Hi List, i do some testing on Bird as FlowSpec Controller. I added a static protocol for inserting flowspec routes: flow4 table flowtab4; # RFC 5575 flow specification protocol static flowstat4 { flow4; route flow4 { src 80.147.231.118/32; dst 185.55.234.2/32; }; } and setting en export filter on the peer to add the needed extended community to discard the traffic: # IPv4 Flowspec (1/133) flow4 { # connects to flowtab4 table by default import all; export filter { # Rate Limit 0 == discard bgp_ext_community.add((generic, 0x80060000, 0x00000000)); accept; }; }; With this approach i can successfully drop all flow4 entries on a cisco ASR 1001-X. But how would i add several flow routes to the flow table and deside differntly on the action? Is it possible to add the community directly to the route entry in the static table, as it is possible in a ipv4 static channel/protocol? I haven't found anything in the documentation. Or do i need to write an filter which match on different flow attributes to set individual actions? Additional i can't really calculate a rate-limit, does someone had an example for this? regards, tim -- Tim Weippert http://weiti.org - weiti(a)weiti.org GPG Fingerprint - E704 7303 6FF0 8393 ADB1 398E 67F2 94AE 5995 7DD8

3 4

BIRD BGP logging
by ABBAS, KASHIF 21 Jun '18

21 Jun '18

Team : trying to observe the BPG protocol hick up traces in Bird logs....(BIRD daemon only spitting (Received: Administrative reset) messages.. no info about the bgp peeing up time ...do I need to enable more elaborate traces ?? ... any recommendation?? log syslog all; Thanks, Kashif Abbas

1 0

Automating BIRD configuration
by Matthias Merkel 20 Jun '18

20 Jun '18

We're trying to integrate BIRD with our automated DDoS detection and mitigation system. For this we need a way to have our software create static routes (to be more exact blackholes) and add BGP communities to announcements. Is there any way to do using CLI or control socket or would we have to make the software modify the config file and reload BIRD? Matthias Merkel CTO BoltN Hosting Limited c-Level Phone +498941207255 Mobile +4915752259219 Email matthias(a)boltn-hosting.com Skype matthias_merkel1 Follow us <https://img.beta.newoldstamp.com/r/27887/twitter> <https://img.beta.newoldstamp.com/r/27887/linkedin> <https://img.beta.newoldstamp.com/r/27887/android> <https://img.beta.newoldstamp.com/r/27887/whatsapp>

4 3

running two bird daemons which listen on loopback IP
by Pavlos Parissis 19 Jun '18

19 Jun '18

Hi, For testing purposes I want to run two bird instances which listen on two different IPs. Those IP addresses are assigned to loopback interface(Linux box). I have configured BGP but each daemon is waiting the other to become neighbor. I run tcpdump on loopback interface and I don't see any network traffic, and I am wondering if using loopback inteface isn't supported. Cheers, Pavlos

3 3

how to check syntax of bird.conf ?
by Илья Шипицин 19 Jun '18

19 Jun '18

hello, we are going to add automation on top of bird.conf is there some way to check syntax of it ?

2 4

Re: [bird-support #905971] bird.network.cz on HTTPS
by Christoffer Hansen 17 Jun '18

17 Jun '18

Dear Webmaster(s) for the BIRD project Q: Is there any consideration for moving the project homepage to HTTPS ? Currently the homepage for the HTTPS enabled edition is just the defailt Apache2.4 installation page on Fedora https://bird.network.cz/ -- "This page is used to test the proper operation of the Apache HTTP server after it has been installed. If you can read this page, it means that the web server installed at this site is working properly, but has not yet been configured." Christoffer Hansen netravnen [at] gmail [dot] com 0xC8B382A8A1CDCDB771FEB24CC654948FDA86BECD "You might think that your government is vigilant when it comes to securing your personal information, or that of your children. You would be wrong." - Jake Tapper, CNN Chief Washington Correspondent Den 17-06-2018 kl. 19:03 skrev Darina Strakova via RT: > Dear Sirs, > > this contact address is reserved for members of the paid support program. > > If you are interested in membership that ensures premium customer care at > guaranteed times, advanced security notifications or priority development > of your preferred features, let us know in reply to this email. Detailed > information about the support program and its options <http://bird.network.cz/?support>. > > Otherwise, direct your query to the BIRD user community discussion forum <http://bird.network.cz/mailman/listinfo/bird-users> > > Kind Regards. > > Team BIRD, CZ.NIC > > Dne Ne 17.čen.2018 15:31:42, netravnen(a)gmail.com napsal(a): >> Dear Webmaster >> >> Is there any consideration for moving the project homepage to HTTPS ? >> >> -- >> >> Currently the homepage for the HTTPS enabled edition is just the >> defailt Apache2.4 installation page on Fedora >> >> https://bird.network.cz/ -- "This page is used to test the proper >> operation of the Apache HTTP server after it has been installed. If >> you can read this page, it means that the web server installed at this >> site is working properly, but has not yet been configured." >> >> Christoffer Hansen >> 0xC8B382A8A1CDCDB771FEB24CC654948FDA86BECD >> Also available on IRC, Telegram and Signal. >> >> "You might think that your government is vigilant when it comes to >> securing your personal information, or that of your children. You >> would be wrong." - Jake Tapper, CNN Chief Washington Correspondent >

1 0

Routing between BGP Sessions
by Matthias Merkel 17 Jun '18

17 Jun '18

I have a Debian server which has multiple BGP sessions established via BIRD. I'm not trying to make it so that the server acts as router between these sessions (meaning it would redistribute the routes it receives from peers and route incoming traffic from peers to the peer the IPs are announced by). My config can be found at https://hasteb.in/soxeyago.nginx As this is a test system the peers are connected via GRE. I have replaced the passwords with PASSWORD GOES HERE. Matthias Merkel CTO BoltN Hosting Limited c-Level Phone +498941207255 Mobile +4915752259219 Email matthias(a)boltn-hosting.com Skype matthias_merkel1 Follow us <https://img.beta.newoldstamp.com/r/27887/twitter> <https://img.beta.newoldstamp.com/r/27887/linkedin> <https://img.beta.newoldstamp.com/r/27887/android> <https://img.beta.newoldstamp.com/r/27887/whatsapp>

1 0