- Bird-users - Mailing Lists

RE: Bird redundant routers with same AS on same location and prefix delegation to lower router
by Gelderman, Richard 26 Oct '17

26 Oct '17

Hi Andrew, As I am new to Bird I can not find a good example how to create a RR cluster with two routers R1 + R2. Do you have experience with a RR cluster with multiple routers? My biggest question is acquily how to config the sessions between R1 + R2 as clustermembers without creating a loop. Regards, Richard Van: Andrew [mailto:nitr0@seti.kr.ua] Verzonden: donderdag 7 september 2017 16:55 Aan: Gelderman, Richard <r.gelderman(a)rtvoost.nl> Onderwerp: Re: Bird redundant routers with same AS on same location and prefix delegation to lower router You may redistribute all routes between R1 and R2 using RR (both received from R3 and received from uplinks), and redistribute just default to R3 using separate table (with static default and routes peering to main table). On 07.09.2017 17:38, Gelderman, Richard wrote: Hi Adrew, I thought about this option, I don't want to pass a full BGP table towards R3. In other words R1 + R2 should be used for routing for all routes and R3 should only route net A and net B and must route through to reach other networks. Regards, Richard Van: Bird-users [mailto:bird-users-bounces@network.cz] Namens Andrew Verzonden: donderdag 7 september 2017 15:06 Aan: bird-users(a)network.cz<mailto:bird-users@network.cz> Onderwerp: Re: Bird redundant routers with same AS on same location and prefix delegation to lower router Hi. You should configure R1 and R2 as route reflectors. On 07.09.2017 14:17, Gelderman, Richard wrote: I am trying to achieve a redundant routing setup with two routers with the same ASN who do prefix delegation to a lower router. The setup is the following: AS1000 ISP1 ISP2 AS2000 | | | | AS10000 R1 ======== R2 AS10000 prefix /22 \ iBGP / prefix /22 \ / \ / \ / R3 AS65000 / \ / \ net A net B prefix /24 prefix /24 Does anybody has experience with this kind of setup? Regards, Richard

4 4

Dynamic add BGP config
by Magnus Löfqvist 20 Oct '17

20 Oct '17

Hi, It is possible to dynamic add BGP neighbors to the config when a "unknown" tries to estsblish a BGP session? We have a iBGP RR that we connect routers connected to a transport network. It should be nice that we dont need to change the configuration at the RR when we add a new router. To day I have predefined passive neighbors, but maybe it are some better way of doing this? / Magnus Sent from Nine<http://www.9folders.com/>

1 0

conf ch -> kill bird
by Mikhail Mayorov 20 Oct '17

20 Oct '17

bird ~ # birdc BIRD 1.6.3 ready. bird> configure check Reading configuration from /usr/local/etc/bird/bird.conf Configuration OK bird> configure Connection closed by server Can't catch an error in a configuration file. In testing, everything OK. But when you apply all the bad and the bird just falls. In log file I got: Oct 20 17:10:42 bird bird[19609]: Reconfiguring Oct 20 17:10:42 bird bird[19609]: Unknown instruction 8574 in same (~) After start I got: Oct 20 17:10:44 bird bird[19675]: Graceful restart started Oct 20 17:10:44 bird bird[19675]: Started Oct 20 17:10:44 bird bird[19675]: filters, line 11: ~ applied on unknown type pair Oct 20 17:10:44 bird bird[19675]: filters, line 11: ~ applied on unknown type pair Oct 20 17:10:44 bird bird[19675]: filters, line 11: ~ applied on unknown type pair Oct 20 17:10:44 bird bird[19675]: filters, line 11: ~ applied on unknown type pair Oct 20 17:10:44 bird bird[19675]: filters, line 11: ~ applied on unknown type pair Oct 20 17:10:44 bird bird[19675]: ... Oct 20 17:10:56 bird bird[19675]: I/O loop cycle took 11494 ms for 13 events Oct 20 17:10:56 bird bird[19675]: Kernel dropped some netlink messages, will resync on next scan. Oct 20 17:10:56 bird bird[19675]: papa_ipv4: Received: Cease Oct 20 17:10:56 bird bird[19675]: Kernel dropped some netlink messages, will resync on next scan. Oct 20 17:10:56 bird bird[19675]: blockhole_rfc7999_ipv4_bgpin: set RTD_BLACKHOLE for 194.85.16.6/32 from 193.232.140.100 Oct 20 17:10:58 bird bird[19675]: filters, line 11: ~ applied on unknown type pair Oct 20 17:10:58 bird bird[19675]: filters, line 11: ~ applied on unknown type pair Oct 20 17:10:58 bird bird[19675]: filters, line 11: ~ applied on unknown type pair Oct 20 17:10:58 bird bird[19675]: filters, line 11: ~ applied on unknown type pair Oct 20 17:10:58 bird bird[19675]: filters, line 11: ~ applied on unknown type pair Oct 20 17:10:59 bird bird[19675]: ... Oct 20 17:10:59 bird bird[19675]: Kernel dropped some netlink messages, will resync on next scan. I suspect that the error in the file bird-all.functions function tier1. My configuration: BIRD.rndbird bird # cat bird.conf include "bird-all.conf"; include "bird-ipv4.functions"; include "bird-roa4.conf"; [skip] BIRD.rndbird bird # cat bird-all.functions function clear_my_comm() pair set my_comm; { my_comm = [ (49037, *) ]; bgp_community = delete( bgp_community, my_comm ); } function tier1(bgppath cp) { if cp ~ [= * 1 * =] then return true; # Level 3 Communications if cp ~ [= * 209 * =] then return true; # CenturyLink if cp ~ [= * 286 * =] then return true; # KPN International if cp ~ [= * 701 * =] then return true; # Verizon Enterprise Solutions if cp ~ [= * 702 * =] then return true; # Verizon Enterprise Solutions if cp ~ [= * 703 * =] then return true; # Verizon Enterprise Solutions if cp ~ [= * 1239 * =] then return true; # Sprint if cp ~ [= * 1299 * =] then return true; # Telia Carrier if cp ~ [= * 2828 * =] then return true; # Verizon Enterprise Solutions if cp ~ [= * 2914 * =] then return true; # NTT Communications if cp ~ [= * 3257 * =] then return true; # Global Telecom & Technology (GTT) if cp ~ [= * 3320 * =] then return true; # Deutsche Telekom AG (ICSS) if cp ~ [= * 3356 * =] then return true; # Level 3 Communications if cp ~ [= * 3549 * =] then return true; # Level 3 Communications if cp ~ [= * 3561 * =] then return true; # CenturyLink if cp ~ [= * 4436 * =] then return true; # Global Telecom & Technology (GTT) if cp ~ [= * 5511 * =] then return true; # Orange if cp ~ [= * 6453 * =] then return true; # Tata Communications (INDIA) if cp ~ [= * 6461 * =] then return true; # Zayo Group if cp ~ [= * 6762 * =] then return true; # Telecom Italia Sparkle (Seabone) if cp ~ [= * 6830 * =] then return true; # Liberty Global if cp ~ [= * 7018 * =] then return true; # AT&T if cp ~ [= * 12956 * =] then return true; # Telefonica Global Solutions return false; } function aggroute() { if tier1(bgp_path) then return true; return false; } -- Regards, Mikhail V. Majorov Megalink Company, Director of engineering 318, Chehova street, Taganrog, Russia, 347932 tel work: +7 8634 431431 (ext 101) tel mobile: +7 918 5565520 sip: 000101(a)tagan.ru www.tagan.ru

2 2

bgp announce default route to lower router, what is the bird version of default-originate / default-information orginate?
by Gelderman, Richard 20 Oct '17

20 Oct '17

How can I announce a default route to a lower router who does not need a full table. What is de Bird equivalent of "default-orginitate" or "default-information originate". Currently I use a filter with a static blackhole route: protocol static { route 0.0.0.0/0 blackhole; } filter senddefault { if net = 0.0.0.0/0 then accept; reject; } template bgp local_as_ibgp_lowrouter { # export filter senddefault; }

3 2

Issues in Babel
by Ondrej Zajicek 19 Oct '17

19 Oct '17

Hi Toke (and others) I updated Babel to use microsecond timers [1] and during testing i noticed several unrelated issues. 1) Hello expiration was not properly implemented, as i understand RFC, it should reset the timer based on last packet hello interval and time-out repeatedly until hello map is zero. Fixed in [2]. 2) In some setups unicast seqno requests were sent repeatedly and seqno was increased indefinitely due to last case in babel_handle_update(), when the RFC specifies it should be done only if unfeasible route would otherwise become best. Fixed in [3], by this condition handling all unicast seqno requests: if (!feasible && (metric != BABEL_INFINITY) && (!best || (r == best) || (metric < best->metric))) babel_unicast_seqno_request(e, s, nbr); It also changes the behavior by sending seqno request when receiving infeasible update if there is no previous route from that neighbor. 3) Seems like the fix of hello expiration caused that when neighbor disappears, it is no longer removed timely and routes have to wait for route timeout, which is about a minute for 4 s hello interval. It seems that by RFC, we should recompute route metrics whanever rxcost reported by IHU is changed, so IHU expiration should be enough to make all related routes unreachable. Apparently, this is not done in BIRD. 4) Seems like we do not trigger updates when a route update with just increased seqno due to forwarded unicast request is received. That also slows convergence. IMHO we should do in babel_handle_update() something like: if (route_is_selected() && matching_entry_in_seqno_request_cache()) babel_trigger_update() Do you think that my interpretation of these issues and the fixes are correct? [1] https://gitlab.labs.nic.cz/labs/bird/commit/8a76785a6fb23a64fcc93f998336794… [2] https://gitlab.labs.nic.cz/labs/bird/commit/c7fa4efd701716a9c40620f2e3e8f06… [3] https://gitlab.labs.nic.cz/labs/bird/commit/c54526afeb4187d55993c3ab777fcfe… -- Elen sila lumenn' omentielvo Ondrej 'Santiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

2 3

Limit on how many neighbors
by Magnus Löfqvist 15 Oct '17

15 Oct '17

Hi, We are running Bird with OSPF between embedded routers (openwrt) (mobile routers). The routers are connected to our main server with openvpn, and we are using bird ontop on openvpn to deliver routes to the end routers. This have worked quite well, but today we notice some glitches. We had some routers that did not finish election (ie, stand in init instead of being full). When we count, there are exactly 100 devices that are in "full", and 3 in init. Are there any limit on how many neighbors/routers? Med vänlig hälsning / Best regards Magnus Löfqvist

4 6

OSPF routes not filtered
by Войнович Андрей Александрович 10 Oct '17

10 Oct '17

3 6

import where IPv6 BGP
by Robert Blayzor 09 Oct '17

09 Oct '17

When running IPv6 daemon, I have a BGP peer: protocol bgp bogon_1 from BH_SERVER { import where net.len < 33; import filter BLACKHOLE_IN; import limit 100000 action warn; } The filter is simply an “accept;”. The problem I’m seeing however is that I’m getting prefixes imported that are longer than 32. In fact, it looks like “import where” is completely ignored in IPv6 (at least for net.len?). If I put “import where net.len = 0” I still see all the longer prefixes getting imported. If I go into the filter and add a “if net.len < 33 then reject;” then I see it work. Is this the expected behavior, a bug or am I missing something? -- inoc.net!rblayzor XMPP: rblayzor.AT.inoc.net PGP: https://inoc.net/~rblayzor/

2 1

Graceful BGP session shutdown
by Johannes Moos 09 Oct '17

09 Oct '17

Hi BIRD team and fellow BIRD users, are there any plans to implement Graceful BGP session shutdown (https://tools.ietf.org/html/draft-ietf-grow-bgp-gshut) in future releases? Ingress is pretty easy and only needs to be implemented once by the user: Check for BGP Community 65535:0 and set local pref to 0 on match Egress is also simple, but more effortful. It also needs a config change in every maintenance window: - Modify egress filter to add 65535:0 - Reload config and egress filter BIRD could automate this by offering a command like "birdc disable bgp1 graceful 15" which would send 65535:0 immediately and then disable the session after a configurable time, in this case 15 minutes. What do you think? Regards, Johannes -- Johannes Moos Systems Engineer DE-CIX Management GmbH | Lindleystr. 12 | 60314 Frankfurt am Main | Germany | www.de-cix.net Phone +49 69 1730902 45 | Mobile +49 160 97997723 | Fax +49 69 4056 2716 | johannes.moos(a)de-cix.net Geschaeftsfuehrer Harald A. Summa | Registergericht AG Koeln HRB 51135

1 0

Bird for RTBH trigger
by Robert Blayzor 04 Oct '17

04 Oct '17

I am attempting to setup Bird on a VM to act as a RTBH trigger… Bird 1.6.0 on FreeBSD 11.1 Is there a alternative way to advertise null routes from Bird rather than using a kernel table? I have tried using static routes, but because assuming the next hop is not reachable, the routes do not export. I guess I’m looking for a way you would normally do something like a null route in Cisco and get that route into BGP. Using the kernel table at the moment is not desirable… Also other than other routing protocol peering sessions or the kernel, is there another way to get a static null route into Bird? protocol static trig1 { route 192.0.2.0/24 blackhole; route 192.168.255.254/32 via 192.0.2.1; import none; export all; } bird> show static 192.0.2.0/24 blackhole 192.168.255.254/32 via 192.0.2.1 (dormant) name proto table state since info trig1 Static master up 00:02:27 Preference: 200 Input filter: REJECT Output filter: ACCEPT Routes: 0 imported, 0 exported, 0 preferred Route change stats: received rejected filtered ignored accepted Import updates: 1 0 1 0 0 Import withdraws: 0 0 --- 1 0 Export updates: 0 0 0 --- 0 Export withdraws: 0 --- --- — 0 -- inoc.net!rblayzor XMPP: rblayzor.AT.inoc.net PGP: https://inoc.net/~rblayzor/

3 6