- Bird-users - Mailing Lists

Re: Bird blackhole, example config
by Gregg Berkholtz 01 May '17

01 May '17

> > On Apr 30, 2017, at 8:47 AM, Krzysztof Puchała TriplmeMedia <kpuchala(a)triplemedia.org> wrote: > > Hi, You once added an example of a blackhole configuration in the birde on the mailing list: > http://bird.network.cz/pipermail/bird-users/2012-March/007671.html > I'm trying to implement this in my setup and when I'm overloading the configuration I have an error > bird> configure check > Reading configuration from /etc/bird/bird.conf > /etc/bird/bird.conf, line 49: syntax error > > 49 lines of code: > protocol kernel blackhole { > > Maybe you have an idea why it does not work? > thanks in advance for your answer. > > > Krzysztof Puchała, członek zarządu > mob. 507364853 / mail. kpuchala(a)triplemedia.org > TripleMedia sp.z.o.o. Biuro: 91 852 21 51 > ul. Dworcowa 9/212 73-110 Stargard > www.TripleMedia.org > > TripleMedia sp.z.o.o. Spółka wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy Szczecin Centrum w Szczecinie. XIII Wydział Gospodarczy Krajowego Rejestru Sądowego pod nr. KRS: 0000378029. Wysokość kapitału zakładowego: 5000 PLN. Wysokość kapitału wpłaconego: 5000 PLN. > Hi, I’m replying to list for relevant benefit/discussion. Wow, my example config is over 5 years old now…something probably changed in syntax requirements over the years, as this is what we currently have in place (note that a pipe isn’t used, as we now leverage "ip rule" to separately include the blacklist table): table blackholes; … protocol kernel kblackholes { table blackholes; kernel table 10; scan time 10; learn; import all; export all; } ... filter bgp_out_upstream { if (proto = "kblackholes" ) then { if net.len = 32 then { bgp_community.add((64665,666)); # Replace 64665,666 with your upstream's community designation…if needed, otherwise delete this line printn “Blackhole nulling "; print net; accept; } } if net ~ [192.168.0.0/16] then accept; …replace this with your own netblocks, one netblock per entry reject; } ... protocol bgp upstream { ... export filter bgp_out_upstream; ... } HTH, Gregg Berkholtz Datacenter consulting, hosting & support since 1995 www.tocici.com | 503-488-5461 | AS14613

2 1

Socket error: invalid argument
by Dean 28 Apr '17

28 Apr '17

Hi, I'm running some scalability tests for OSPFv3 using Bird in docker containers. I'm getting some error messages in the logs if I run too many instances. 2017-04-20 21:59:57 <ERR> ospf1: Socket error on ln971_if1: Invalid argument I have 1000 nodes connected linearly (each node connects to two neighbors except the two end nodes that connect to only one neighbor). I'm running Bird 1.6.2 with a kernel version 4.9.0. Is this a memory limitation? Kernel bug? I'll attach the first few lines of the log file.

1 0

Simple BGP with two operators, one advertisement and prepending
by Wojciech Bajorek 27 Apr '17

27 Apr '17

Hi, I have a pretty simple BGP configuration with two ISP and one static subnet to advertise. There is also one prepending configured but I'm not sure if it's working. The thing is that for some reason when I connect both ISP peers, traffic to the advertised ISP#2 networks (with shorter path) stops working after a couple of seconds. Tracert shows the last hop as ISP#2 border router. Similar configuration on Juniper router works without any problem, so I'm afraid that there is an error within my Bird config. Can you please help me out? PS. Without prepending situation is exactly the same. OS: Debian 8 Bird: 1.4.5-1+deb8u1 router id 90.90.90.1; protocol kernel { persist; scan time 15; import all; export all; } protocol device { scan time 10; } filter bgp_isp1_out { if net = 90.90.90.0/24 then { accept; } else reject; } filter bgp_isp2_out { if net = 90.90.90.0/24 then { bgp_path.prepend(12345); bgp_path.prepend(12345); accept; } else reject; } protocol bgp bgp_isp1 { import all; export filter bgp_isp1_out; local as 12345; neighbor 2.3.4.5 as 2345; } protocol bgp bgp_isp2 { import all; export filter bgp_isp2_out; local as 12345; neighbor 3.4.5.6 as 3456; } Thank you. Regards, Wojciech Bajorek

3 5

BGP flowspec support
by Maximilian Eschenbacher 24 Apr '17

24 Apr '17

Hello, am I correct in assuming that bird does currently not support sending bgp flowspec rules (RFC5575) which uses MP_REACH_NLRI attributes? In proto/bgp/bgp.h I found these lines: /* We don't support these: */ #define BA_DPA 0x0b /* ??? */ #define BA_ADVERTISER 0x0c /* [RFC1863] */ #define BA_RCID_PATH 0x0d #define BA_MP_REACH_NLRI 0x0e /* [RFC2283] */ #define BA_MP_UNREACH_NLRI 0x0f [...] Regards Max

2 1

BIRD in Mininet
by Mario Cekic 18 Apr '17

18 Apr '17

Hello everyone, I tried to run BIRD in Mininet but it failed with the error "I found another BIRD running". The calls look something like this: /usr/lib/bird -c routerID.conf -P /tmp/routerID.pid > routerID.log 2>&1 Does anyone know how to run multiple instances of BIRD in this manner within Mininet or is it possible at all? Thank you in advance, Mario Cekic

2 1

freebsd loopback
by e2rd＠piekielko.pl 17 Apr '17

17 Apr '17

Hello On Freebsd 11.0 I've created interface lo1, added ipv6 addres, added to bird6 area0, but sh ospf interface dont show this lo1. Similar configuration with quagga works if I add lo0 insted of lo1 then network connected to lo1 is propagated as external Is there any "more proper way" to configure loobpack iface on freebsd? -- Łukasz

1 0

Protocol Name Variables
by Jason Kopacko 11 Apr '17

11 Apr '17

I am in the initial build stages of a BIRD deployment for route control and black holing. I built a couple functions that display the protocol info, etc. When I add a route in the Ubuntu command line, I get this: [ UBUNTU CLI ] $ sudo ip route add blackhole x.x.x.x/32 protocol LOCAL realm 1020 scope Internet table 120 [ SYSLOG - KERNEL IMPORT ] =`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`= ** Kernel || Import ** ** Protocol: kernel_TEST ** Distribution: Local ** Control Type: Internet ** Realm Name: Test Lab =`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`= =`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`= ** Source: RTS_INHERIT ** Destination: RTD_BLACKHOLE ** Scope: SCOPE_UNIVERSE ** Cast: RTC_UNICAST ** Network: x.x.x.x/32 ** Network Length: 32 ** Preference: 10 ** From: x.x.x.x ** Gateway: 0.0.0.0 ** Protocol: kernel_TEST ** ifname: ** ifindex: 0 ** Metric: (void) =`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`= =`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`= ** krt_source: 200 ** krt_metric: 0 ** krt_prefsrc: (void) ** krt_realm: 1020 ** krt_scope: 111 =`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`= [ SYSLOG - BGP EXPORT ] =`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`= ** BGP || Export ** ** Protocol: kernel_TEST ** Control Type: Internet =`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`= =`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`= ** Source: RTS_INHERIT ** Destination: RTD_BLACKHOLE ** Scope: SCOPE_UNIVERSE ** Cast: RTC_UNICAST ** Network: x.x.x.x/32 ** Network Length: 32 ** Preference: 10 ** From: x.x.x.x ** Gateway: 0.0.0.0 ** Protocol: kernel_TEST ** ifname: ** ifindex: 0 ** Metric: (void) =`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`= =`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`= ** bgp_path: (path 65499) ** bgp_path: [FIRST] 65499 ** bgp_path: [LAST] 65499 ** bgp_local_pref: 100 ** bgp_med: (void) ** bgp_origin: 0 ** bgp_next_hop: x.x.x.x ** bgp_atomic_aggr: (void) ** bgp_community: (clist (65499,999)) ** bgp_ext_community: (eclist ) ** bgp_large_community: (lclist ) ** bgp_originator_id: x.x.x.x ** bgp_cluster_list: (clist ) =`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`=`= Why doesn't the protocol variable update to the name of the BGP protocol in my config? Sent from my Verizon Wireless 4G LTE Droid Turbo 2.

1 0

Route Update Attributes
by Jason Kopacko 11 Apr '17

11 Apr '17

Are there any variables/constants that contain information if a route is and/change/delete type update? Sent from my Verizon Wireless 4G LTE Droid Turbo 2.

1 0

ospf networks IPv4 IPv6
by Robert Sander 10 Apr '17

10 Apr '17

Hi, I am currently playing with OSPF and the networks attribute for an area. It looks like you have to write a list of prefixes directly into the OSPF configuration and cannot use a constant. Is that correct? A constant prefix set would be helpful to have the same OSPF configuration for IPv4 and IPv6 where the constant itself would be defined in specific files separate for IPv4 and IPv6. Regards -- Robert Sander Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-43 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

2 1

Ubuntu Static Routes
by Jason Kopacko 07 Apr '17

07 Apr '17

Hello all, I am new here, so please forgive me if this has been asked before. I am setting up BIRD to handle RTBH and here is my config for reading in local static routes and identifying route info: filter ROUTE_INFO { gw = LOCAL_GW; print "******************************"; if source ~ [ RTS_STATIC ] then { print "** [SOURCE] STATIC Route: ",net; } if source ~ [ RTS_INHERIT ] then { print "** [SOURCE] INHERIT Route: ",net; } if source ~ [ RTS_DEVICE ] then { print "** [SOURCE] DEVICE Route: ",net; } if source ~ [ RTS_STATIC_DEVICE ] then { print "** [SOURCE] STATIC_DEVICE Route: ",net; } if source ~ [ RTS_REDIRECT ] then { print "** [SOURCE] REDIRECT Route: ",net; } if source ~ [ RTS_BGP ] then { print "** [SOURCE] BGP Route: ",net; } if source ~ [ RTS_PIPE ] then { print "** [SOURCE] PIPE Route: ",net; } print "******************************"; if dest ~ [ RTD_ROUTER ] then { print "** [DESTINATION] Neighbor Route: ",net; } if dest ~ [ RTD_DEVICE ] then { print "** [DESTINATION] Directly Connected Route: ",net; } if dest ~ [ RTD_MULTIPATH ] then { print "** [DESTINATION] Multipath Route: ",net; } if dest ~ [ RTD_BLACKHOLE ] then { print "** [DESTINATION] Blackhole Route: ",net; } if dest ~ [ RTD_UNREACHABLE ] then { print "** [DESTINATION] Unreachable Route: ",net; } if dest ~ [ RTD_PROHIBIT ] then { print "** [DESTINATION] Prohibited Route: ",net; } print "******************************"; if scope ~ [ SCOPE_HOST ] then { print "** [SCOPE] Host Route: ",net; } if scope ~ [ SCOPE_LINK ] then { print "** [SCOPE] Link Route: ",net; } if scope ~ [ SCOPE_SITE ] then { print "** [SCOPE] Site Route: ",net; } if scope ~ [ SCOPE_ORGANIZATION ] then { print "** [SCOPE] Organization Route: ",net; } if scope ~ [ SCOPE_UNIVERSE ] then { print "** [SCOPE] Universe Route: ",net; } print "******************************"; if cast ~ [ RTC_UNICAST ] then { print "** [TYPE] Unicast Route: ",net; } if cast ~ [ RTC_BROADCAST ] then { print "** [TYPE] Broadcast Route: ",net; } if cast ~ [ RTC_MULTICAST ] then { print "** [TYPE] Multicast Route: ",net; } if cast ~ [ RTC_ANYCAST ] then { print "** [TYPE] Anycast Route: ",net; } } protocol kernel { description "Kernel Blackholes"; scan time 10; table BH; kernel table 120; learn; import filter ROUTE_INFO; export all; } I found that when I add a route: -- sudo ip route add blackhole x.x.x.x/32 table 120 In my logs on the BIRD server, I see this in my logs: 2017-04-07 12:00:45 <INFO> ****************************** 2017-04-07 12:00:45 <INFO> ** [SOURCE] INHERIT Route: x.x.x.x/32 2017-04-07 12:00:45 <INFO> ****************************** 2017-04-07 12:00:45 <INFO> ** [DESTINATION] Neighbor Route: x.x.x.x/32 2017-04-07 12:00:45 <INFO> ****************************** 2017-04-07 12:00:45 <INFO> ** [SCOPE] Universe Route: x.x.x.x/32 2017-04-07 12:00:45 <INFO> ****************************** 2017-04-07 12:00:45 <INFO> ** [TYPE] Unicast Route: x.x.x.x/32 2017-04-07 12:00:45 <INFO> ****************************** Shouldn't this be showing up as some sort of static or device route? Also, shouldn't the destination be a blackhole route? If these are attributes I need to be changing, I can do that, I just figured they were being identified correctly. Sent from my Verizon Wireless 4G LTE Droid Turbo 2.

1 0