- Bird-users - Mailing Lists

Re: IETF-99
by Ondrej Zajicek 17 Jul '17

17 Jul '17

On Mon, Jul 17, 2017 at 05:18:03PM +0200, Juliusz Chroboczek wrote: > 1. Ondrej, if there's so many of us, don't you need to book a table? The two of three restaurants i thought about are usually empty enough. > 2. There's the Babel working group meeting happening at 17:40 in the > Athens/Barcelona room. There are definitely no armed guards present, > we'd be glad if you guys can come. If you cannot, you can participate > over the Internet: Well, i am too shy to enter conference meeting without registration, so i at least watched that remotely. -- Elen sila lumenn' omentielvo Ondrej 'Santiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

1 0

IETF-99
by Clemens Schrimpe 17 Jul '17

17 Jul '17

Hi - will any of the core developers be present at IETF99 in Praha this week and if so: Where could I meet you? Thanks - Clemens IETF Meeting NOC (yes, we do use BIRD in the IETF meeting network! :-)

5 5

Static IPv6 leases on VLAN interface
by Martin Huněk 14 Jul '17

14 Jul '17

Hí, I have recently found out a problem with assigning IPv6 prefix via static protocol for the VLAN interface. When I wrote this: protocol static leases { route 2001:db8:0:100::/56 via fe80::xxxx:xxff:fexx:xxxx%eth1.3330; } It gave me: /etc/bird/leases6.conf, line 2: syntax error However, when I use a host interface for that VLAN (%eth1), it suddenly works. I've also tried to assign prefix via public address used on that interface (say 2001:db8::xxxx (/64). Even though there was no error in configuration phase, the route was ignored by bird. Is there a way how to insert static route pointing to the VLAN interface? Is the "dot" syntax supported? Has anyone had more luck using a static protocol in that manner? If it is a bug, will it be fixed in 1.6.x, or just in bird2? I've tried to do that on version 1.6.0 as well as 1.6.3, no luck in the both cases. Best regards, Martin Hunek Freenet Liberec, z.s.

2 2

re: bird redhat repo missing rpms for 1.6.3
by Logan V. 13 Jul '17

13 Jul '17

This is in reply to the issue mentioned in the thread from May[1] where folks were having problems installing BIRD 1.6.3 from the repo due to the ncurses 6 linking. I experienced the same problem recently and ended up creating a COPR repository[2] to create BIRD 1.6.3 builds that are installable on CentOS 6 and 7. If you just want a working repo to install BIRD 1.6.3 on CentOS from, you can stop reading here and go install from the linked COPR repo. For the nuts and bolts of what is published and what was needed to make this work, read further. The CentOS 6 build references the BIRD 1.6.3 published src.rpm[3], and the CentOS 7 build references the Fedora 26 src.rpm[4]. The CentOS 6 build is very straight forward, because BIRD publishes a src.rpm with an upstart init script.. COPR sources this src.rpm directly, builds it in their CI system, and publishes it to my repo[5]. Unfortunately the src.rpm that BIRD publishes does not produce a usable build on CentOS 7 due to the broken init script and lack of a systemd service unit. I have no idea if any of this has changed since 1.6.3, but as of 1.6.3, there is a line[6] which does not work using systemd's init backwards compatibility on CentOS 7, since "${NETWORKING}" and "${NETWORKING_IPV6}" are not set. I later found that Fedora publishes a BIRD src.rpm along with a systemd service unit that they use to create their builds on Fedora repos[7]. So instead of using the BIRD src.rpm to build for CentOS 7, I used the Fedora 26 src.rpm instead which includes the necessary systemd unit file to create a working CentOS 7 package[8]. For future BIRD releases, I will continue to maintain the COPR repo if necessary so my ansible-bird role[9] will continue to work on EL6/7 systems. It will be a lot more convenient to maintain the COPR if I can source EL6 and EL7 builds directly from the BIRD src.rpm, and it looks like the only roadblock for that is BIRD will need to add a systemd unit and integrate it to their spec file[10]. Logan P.S. Thanks to all of the contributors for this excellent software! [1] http://bird.network.cz/pipermail/bird-users/2017-May/011235.html [2] https://copr.fedorainfracloud.org/coprs/logan2211/bird/ [3] http://rpm.knot-dns.cz/redhat/bird-1.6.3-1.src.rpm [4] https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everythin… [5] https://copr.fedorainfracloud.org/coprs/logan2211/bird/build/578086/ [6] https://gitlab.labs.nic.cz/labs/bird/blob/v1.6.3/misc/bird.init#L30 [7] http://pkgs.fedoraproject.org/cgit/rpms/bird.git/tree/bird.service [8] https://copr.fedorainfracloud.org/coprs/logan2211/bird/build/578083/ [9] https://github.com/logan2211/ansible-bird [10] https://gitlab.labs.nic.cz/labs/bird/blob/v1.6.3/misc/bird.spec

2 1

FreeBSD, OSPF & bird 1.6.0
by Борис Коваленко 12 Jul '17

12 Jul '17

Hello! Have 2 FreeBSD hosts directly connected via VLAN. Host 1 ip: x.x.12.203 Host 2 ip: x.x.12.204 Host 1 is FreeBSD 10.3-p12, running bird 1.6.0 Host 2 is FreeBSD 11-Stable, running bird 1.6.3 The problem is that Host1 can't resolve ARP of Host2 because of this kernel route: X.X.12.204 31.44.12.204 UGH1 lagg0.150 This route is installed by bird. When I filter this route in updates - I see no problems in ARP. But where it is coming from? Imho from (show ospf state) router 0.0.1.2 distance 10 network X.X.12.200/29 metric 10 stubnet 172.31.1.2/32 metric 0 > external X.X.12.200/29 metric2 20 > external X.X.12.204/32 metric2 20 external 172.31.1.2/32 metric2 20 Configs are pretty simple and shown below. So my question is - Is this normal or something wrong with my config? common part of configs: protocol device main_device { scan time 60; } protocol direct main_direct { interface "*"; check link yes; } # # # filter f_main_kernel_import { accept; } filter f_main_kernel_export { if(source = RTS_STATIC || source = RTS_STATIC_DEVICE) then accept; else if(source = RTS_INHERIT) then accept; else if(source = RTS_OSPF || source = RTS_OSPF_IA || source = RTS_OSPF_EXT1 || source = RTS_OSPF_EXT2) then accept; else if(source = RTS_BGP) then { if(bgp_path.len < 2) then accept; else { if(defined(bgp_community) && (bgp_community ~ [(BGP_MC_LOCAL)] || bgp_community ~ [(BGP_MC_LOCAL_INTERNET)] || bgp_community ~ [(BGP_MC_CUSTOMER)])) then accept; else if(defined(bgp_ext_community) && (bgp_ext_community ~ [(BGP_EMC_LOCAL)] || bgp_ext_community ~ [(BGP_EMC_LOCAL_INTERNET)] || bgp_ext_community ~ [(BGP_EMC_CUSTOMER)])) then accept; else if(defined(bgp_community) && bgp_community ~ [(BGP_MC_UPSTREAM)] && fn_ipv4_default()) then accept; else reject; } } else reject "[f_main_kernel_export] reject: ", net, "/", from, "/", source; } # filter f_main_ospf_import { if(fn_ipv4_announced()) then { bgp_community.add(BGP_MC_LOCAL_INTERNET); bgp_ext_community.add(BGP_EMC_LOCAL_INTERNET); } else { bgp_community.add(BGP_MC_LOCAL); bgp_ext_community.add(BGP_EMC_LOCAL); } bgp_local_pref = BGP_LP_LOCAL; if(net = 31.44.12.204/32) then reject; accept; } filter f_main_ospf_export { case source { RTS_INHERIT: ospf_metric2 = 20; accept; RTS_DEVICE: ospf_metric2 = 20; accept; RTS_STATIC_DEVICE: if(fn_ipv4_default()) then ospf_metric2 = 100; else ospf_metric2 = 20; accept; RTS_STATIC: ospf_metric2 = 20; accept; RTS_BGP: if(fn_ipv4_default()) then { ospf_metric2 = 100; accept; } else reject; RTS_OSPF: accept; RTS_OSPF_IA: accept; RTS_OSPF_EXT1: accept; RTS_OSPF_EXT2: accept; else: reject "[f_main_ospf_export] reject: ", net, "/", from, "/", source; } } Host1 OSPF: root@br0:/usr/local/etc/bird# more ipv4_ospf.conf # protocol ospf main_ospf { rfc1583compat yes; tick 2; router id 0.0.1.1; export filter f_main_ospf_export; import filter f_main_ospf_import; area 0.0.0.0 { networks { 172.31.1.1/32; X.X.12.200/29; }; interface "lo*" { cost 10; hello 15; dead 60; type ptp; }; interface "lagg0.150" { cost 10; hello 2; dead 10; }; }; } Host2 OSPF: root@br0:/usr/local/etc/bird# more ipv4_ospf.conf # protocol ospf main_ospf { rfc1583compat yes; tick 2; router id 0.0.1.2; export filter f_main_ospf_export; import filter f_main_ospf_import; area 0.0.0.0 { networks { 172.31.1.2/32; X.X.12.200/29; }; interface "lo*" { cost 10; hello 15; dead 60; type ptp; }; interface "lagg0.150" { cost 10; hello 2; dead 10; }; }; } Regards, Boris -- С уважением, Борис Коваленко

2 3

UNABLE TO CONNECT BIRDC6
by Janvier Rwakagabo 11 Jul '17

11 Jul '17

Hi Can you assist me on this issue, when trying to access birdc6, I got below error #birdc6 Unable to connect to server control socket (/run/bird/bird6.ctl): Connection refused Regards, Janvier R.

2 1

BGP Monitoring Protocol (BMP) support in Bird?
by Baptiste Jonglez 11 Jul '17

11 Jul '17

Hi, I am wondering if somebody is working on BGP Monitoring Protocol (BMP) support in Bird? Note that I'm just asking, I'm not requesting our beloved Bird developers to add this feature with a deadline set to yesterday :) I might try to implement it if nobody else already did. Basically, this is just a way to export BGP data over a TCP connection: http://tools.ietf.org/html/rfc7854 This looks like a useful alternative to dumping to mrtdump files, there are already several free software clients: https://code.google.com/archive/p/bmpreceiver/ http://www.openbmp.org/#!index.md Baptiste

3 3

Re: Next-hop check not needed?
by Vincent Bernat 04 Jul '17

04 Jul '17

❦ 28 juin 2017 14:01 +0200, Ondrej Zajicek <santiago(a)crfreenet.org> : > Note that when learning route from the kernel you could workaround it by > using 'onlink' route flag. Great! It seems to work: $ ip route show table public dev eth2 203.0.113.1 scope link metric 10 203.0.113.10 via 203.0.113.1 metric 10 onlink bird> show route table public 203.0.113.10/32 via 203.0.113.1 on eth2 [kernel_public 15:58:09] * (200) 203.0.113.1/32 dev eth2 [kernel_public 15:58:09] * (200) But BIRD (1.6.3) still seems to be a bit confused, since I got this message in a loop: 2017-06-28 16:01:20 <ERR> KRT: Received route 203.0.113.10/32 with strange next-hop 203.0.113.1 2017-06-28 16:01:20 <WARN> Netlink: File exists Other than that, everything works as expected. I don't know how to interpret the first message (is it receiving two routes?) but the second message seems to say that it tries to reinstall the same route it received. -- 10.0 times 0.1 is hardly ever 1.0. - The Elements of Programming Style (Kernighan & Plauger)

2 5

Bird 1.6.3 strange hangup
by Andrew 04 Jul '17

04 Jul '17

Hi all. Today I saw strange bird hangup, which results in OSPF failure in areas where router is. BIRD works as OSPF + BGP. All returns to work state after bird was killed by SIGKILL and started again. Here's strange logs records: Jul 2 11:33:46 gw2 bird: I/O loop cycle took 7016 ms for 35 events Jul 2 11:33:57 gw2 bird: I/O loop cycle took 7208 ms for 58 events Jul 2 11:34:06 gw2 bird: I/O loop cycle took 5829 ms for 31 events Jul 2 11:34:16 gw2 upsd[8901]: UPS [ups] data is no longer stale Jul 2 11:34:19 gw2 bird: filters, line 47: AS path expected Jul 2 11:34:19 gw2 bird: filters, line 47: AS path expected Jul 2 11:34:19 gw2 bird: filters, line 47: AS path expected Jul 2 11:34:19 gw2 bird: filters, line 47: AS path expected Jul 2 11:34:19 gw2 bird: filters, line 47: AS path expected Jul 2 11:34:19 gw2 bird: ... Jul 2 11:34:25 gw2 bird: filters, line 47: AS path expected Jul 2 11:34:25 gw2 bird: filters, line 47: AS path expected Jul 2 11:34:25 gw2 bird: filters, line 47: AS path expected Jul 2 11:34:25 gw2 bird: filters, line 47: AS path expected Jul 2 11:34:25 gw2 bird: filters, line 47: AS path expected Jul 2 11:34:25 gw2 bird: ... Jul 2 11:34:28 gw2 bird: I/O loop cycle took 9297 ms for 30 events Jul 2 11:34:28 gw2 bird: Kernel dropped some netlink messages, will resync on next scan. Jul 2 11:34:32 gw2 bird: filters, line 47: AS path expected Jul 2 11:34:32 gw2 bird: filters, line 47: AS path expected Jul 2 11:34:32 gw2 bird: filters, line 47: AS path expected Jul 2 11:34:32 gw2 bird: filters, line 47: AS path expected Jul 2 11:34:32 gw2 bird: filters, line 47: AS path expected Jul 2 11:34:32 gw2 bird: ... Jul 2 11:34:33 gw2 bird: Kernel dropped some netlink messages, will resync on next scan. Jul 2 11:34:35 gw2 upsd[8901]: Data for UPS [ups] is stale - check driver Jul 2 11:34:41 gw2 upsd[8901]: UPS [ups] data is no longer stale Jul 2 11:34:52 gw2 bird: bgp_peer_dg_w: Error: Hold timer expired Jul 2 11:34:58 gw2 upsd[8901]: Data for UPS [ups] is stale - check driver Jul 2 11:34:58 gw2 bird: Kernel dropped some netlink messages, will resync on next scan. Jul 2 11:35:08 gw2 upsd[8901]: UPS [ups] data is no longer stale Jul 2 11:35:08 gw2 bird: bgp_peer_dg_ua: Error: Hold timer expired Jul 2 11:35:08 gw2 bird: I/O loop cycle took 9312 ms for 23 events Jul 2 11:35:17 gw2 bird: I/O loop cycle took 8410 ms for 14 events Jul 2 11:35:17 gw2 bird: Next hop address 77.88.200.157 resolvable through recursive route for 77.88.x.x/30 Jul 2 11:35:24 gw2 upsd[8901]: Data for UPS [ups] is stale - check driver Jul 2 11:35:24 gw2 bird: I/O loop cycle took 6134 ms for 12 events Jul 2 11:35:46 gw2 upsd[8901]: UPS [ups] data is no longer stale Jul 2 11:36:03 gw2 bird: bgp_peer_nas2: Error: Hold timer expired Jul 2 11:36:03 gw2 bird: bgp_peer_nas4: Error: Hold timer expired Jul 2 11:36:03 gw2 bird: bgp_peer_nas4_w: Error: Hold timer expired Jul 2 11:36:03 gw2 bird: I/O loop cycle took 37685 ms for 22 events Jul 2 11:36:07 gw2 upsd[8901]: Data for UPS [ups] is stale - check driver Jul 2 11:36:33 gw2 snmpd[8061]: Connection from UDP: [192.168.x.x]:44096->[10.255.x.x]:161 Jul 2 11:36:33 gw2 snmpd[8061]: send response: Failure in sendto (parse header: message overflow: 10 len + 2 delta > 4 len) Jul 2 11:36:33 gw2 snmpd[8061]: -- IF-MIB::ifOutUcastPkts.11 Jul 2 11:36:39 gw2 bird: bgp_peer_g1: Error: Hold timer expired Jul 2 11:36:39 gw2 bird: I/O loop cycle took 34913 ms for 17 events Jul 2 11:36:39 gw2 bird: Next hop address x.x.x.x resolvable through recursive route for x.x.x.x/30 Jul 2 11:36:46 gw2 upsd[8901]: UPS [ups] data is no longer stale Jul 2 11:36:53 gw2 monit[8133]: 'localhost' loadavg(5min) of 7.4 matches resource limit [loadavg(5min)>7.0] Jul 2 11:36:53 gw2 monit[8133]: 'localhost' loadavg(1min) of 15.3 matches resource limit [loadavg(1min)>10.0] Jul 2 11:36:57 gw2 bird: bgp_peer_nas2_w: Error: Hold timer expired Jul 2 11:37:03 gw2 upsd[8901]: Data for UPS [ups] is stale - check driver Jul 2 11:37:02 gw2 bird: bgp_peer_nas1_w: Error: Hold timer expired Jul 2 11:37:02 gw2 bird: bgp_peer_nas3: Error: Hold timer expired Jul 2 11:37:02 gw2 bird: bgp_peer_g1_w: Error: Hold timer expired Jul 2 11:37:02 gw2 bird: I/O loop cycle took 22598 ms for 21 events Jul 2 11:37:15 gw2 bird: I/O loop cycle took 11770 ms for 15 events Jul 2 11:37:52 gw2 bird: bgp_peer_r2_w: Error: Hold timer expired Jul 2 11:37:52 gw2 bird: bgp_peer_r2: Error: Hold timer expired Jul 2 11:37:52 gw2 bird: I/O loop cycle took 35283 ms for 16 events Jul 2 11:37:56 gw2 monit[8133]: 'localhost' loadavg(5min) of 8.8 matches resource limit [loadavg(5min)>7.0] Jul 2 11:37:56 gw2 monit[8133]: 'localhost' loadavg(1min) of 15.2 matches resource limit [loadavg(1min)>10.0] Jul 2 11:38:19 gw2 bird: I/O loop cycle took 24751 ms for 22 events Jul 2 11:38:32 gw2 upsd[8901]: UPS [ups] data is no longer stale Jul 2 11:38:43 gw2 bird: I/O loop cycle took 23370 ms for 11 events Jul 2 11:38:48 gw2 upsd[8901]: Data for UPS [ups] is stale - check driver Jul 2 11:38:54 gw2 bird: I/O loop cycle took 10864 ms for 11 events Jul 2 11:38:56 gw2 monit[8133]: 'localhost' loadavg(5min) of 9.8 matches resource limit [loadavg(5min)>7.0] Jul 2 11:38:56 gw2 monit[8133]: 'localhost' loadavg(1min) of 14.3 matches resource limit [loadavg(1min)>10.0] ... Jul 2 11:39:56 gw2 monit[8133]: 'localhost' cpu system usage of 85.2% matches resource limit [cpu system usage>60.0%] Jul 2 11:39:56 gw2 monit[8133]: 'localhost' loadavg(5min) of 10.0 matches resource limit [loadavg(5min)>7.0] Jul 2 11:39:56 gw2 monit[8133]: 'localhost' loadavg(1min) of 12.0 matches resource limit [loadavg(1min)>10.0] Jul 2 11:39:57 gw2 snmpd[8061]: Connection from UDP: [192.168.x.x]:59167->[10.255.x.x]:161 Jul 2 11:39:57 gw2 snmpd[8061]: send response: Failure in sendto Jul 2 11:39:57 gw2 snmpd[8061]: -- IF-MIB::ifOutUcastPkts.10 Jul 2 11:39:58 gw2 bird: I/O loop cycle took 13685 ms for 15 events Jul 2 11:40:01 gw2 snmpd[8061]: Connection from UDP: [192.168.x.x]:59167->[10.255.x.x]:161 Jul 2 11:40:01 gw2 snmpd[8061]: send response: Failure in sendto Jul 2 11:40:01 gw2 snmpd[8061]: -- IF-MIB::ifOutUcastPkts.10 Jul 2 11:40:56 gw2 monit[8133]: 'localhost' cpu system usage check succeeded [current cpu system usage=30.7%] Jul 2 11:40:56 gw2 monit[8133]: 'localhost' loadavg(5min) of 8.6 matches resource limit [loadavg(5min)>7.0] Jul 2 11:40:56 gw2 monit[8133]: 'localhost' loadavg(1min) check succeeded [current loadavg(1min)=5.9] Jul 2 11:41:06 gw2 snmpd[8061]: Connection from UDP: [192.168.x.x]:42144->[10.255.x.x]:161 Jul 2 11:41:06 gw2 snmpd[8061]: send response: Failure in sendto Jul 2 11:41:06 gw2 snmpd[8061]: -- LM-SENSORS-MIB::lmSensors Jul 2 11:41:11 gw2 snmpd[8061]: Connection from UDP: [192.168.x.x]:42144->[10.255.x.x]:161 Jul 2 11:41:11 gw2 snmpd[8061]: send response: Failure in sendto Jul 2 11:41:11 gw2 snmpd[8061]: -- LM-SENSORS-MIB::lmSensors Jul 2 11:41:35 gw2 bird: Kernel dropped some netlink messages, will resync on next scan. Jul 2 11:41:36 gw2 bird: filters, line 47: AS path expected Jul 2 11:41:36 gw2 bird: filters, line 47: AS path expected Jul 2 11:41:36 gw2 bird: filters, line 47: AS path expected Jul 2 11:41:36 gw2 bird: filters, line 47: AS path expected Jul 2 11:41:36 gw2 bird: filters, line 47: AS path expected Jul 2 11:41:36 gw2 bird: ... Jul 2 11:41:43 gw2 bird: bgp_peer_nas1: Invalid NEXT_HOP attribute in route yy.yy.yy.yy/30 Jul 2 11:41:43 gw2 bird: I/O loop cycle took 6922 ms for 41 events Jul 2 11:41:43 gw2 bird: Kernel dropped some netlink messages, will resync on next scan. Jul 2 11:41:49 gw2 bird: filters, line 47: AS path expected Jul 2 11:41:49 gw2 bird: filters, line 47: AS path expected Jul 2 11:41:49 gw2 bird: filters, line 47: AS path expected Jul 2 11:41:49 gw2 bird: filters, line 47: AS path expected Jul 2 11:41:49 gw2 bird: filters, line 47: AS path expected Jul 2 11:41:49 gw2 bird: ... There's filter config where error message happens: function rt_client(int asn; prefix set nets) { return (net ~ nets && (bgp_path.first = asn || bgp_path ~ [= my_as asn * =]) && bgp_path.last = asn); } How it used: function net_clients() { return rt_client(xxxxx, [91.yyy.yyy.0/24]); } After restart - all seems to be OK, except periodical messages 'Kernel dropped some netlink messages, will resync on next scan.' in log. What was happened? Bad BGP packets? Or some bug in bird?

2 2

Re: Identifying BGP convergence bottleneck
by Patrick.deNiet＠os3.nl 28 Jun '17

28 Jun '17

Thanks for your info Ondrej, it's much appreciated! I've done both unique, overlapping and identical prefixes on these peers. The unique one costs the routeserver more memory than I had unfortunately. I'll let you know if I have anything to share. Regards, Patrick > On Thu, Jun 22, 2017 at 10:26:03AM +0200, Patrick.deNiet(a)os3.nl wrote: >> Hi everyone! >> >> I am currently looking into the performance of BIRD (bgp) as a >> route-server with ~700 peers with 10k prefixes each. I'm noticing an >> increase in convergence time as I increase these numbers (which is not a >> surprise). >> >> Unfortunately, I do not have a deep enough understanding of the code and >> have not managed to identify these points. Is anyone here able to give >> some pointers as to where in the code we could place these markings to >> measure this? > > Hi > > It is hard to tell, esp. it depends on your setting and configuration and > would need some benchmarking. It is single-table or multi-table route > server [1][2]? Personally i would guess that it is in TX, because you > receive a route and then send it about ~700 times (but that depends on > whether prefixes from different peers are shared or unique). You could > benchmark it with 'export none' to see the difference. > > Also note that hash table used for routing table has max size of 64k > buckets. You could try attached patches to fix that. That may help > significantly. > > I would be interested in your performance results. > > [1] > https://gitlab.labs.nic.cz/labs/bird/wikis/Route_server_with_community_base… > [2] > https://gitlab.labs.nic.cz/labs/bird/wikis/Route_server_with_community_base… > > -- > Elen sila lumenn' omentielvo > > Ondrej 'Santiago' Zajicek (email: santiago(a)crfreenet.org) > OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) > "To err is human -- to blame it on a computer is even more so." >

1 0