- Bird-users - Mailing Lists

kernel dropped netlink messages
by Erwin Lubbers 23 Feb '17

23 Feb '17

Hi, Since we upgraded our Bird installation to 1.6.3 (from 1.6.0), we do get some "bird: Kernel dropped some netlink messages, will resync on next scan." messages in our syslogs. What does this message mean and how can we prevent it? Regards, Erwin

1 0

Re: Bird / OpenBSD / BGP MD5 authentication walkthrough
by Darren Marshall 21 Feb '17

21 Feb '17

Thanks Pawel, Yeah I have this working on FreeBSD and Quagga but Bird / OpenBSD I am struggling with :( . Anyone out there got a working example of the steps required from MD5 authentication for BGP neighbours using Bird on OpenBSD?. Thanks daz On 21 February 2017 at 17:43, Paweł Nastachowski < Pawel.Nastachowski(a)eu.equinix.com> wrote: > Hi, > > sorry my fault, I use setkey on freebsd. Maybe You can try > http://man.openbsd.org/ipsec.conf.5 > > Wiadomość napisana przez Darren Marshall <darren(a)tuff.org.uk> w dniu > 21.02.2017, o godz. 18:35: > > Hi Pawel, > > Thanks for this , much appreciated , do you know what package set key is > part of , I don't have it on my system at the moment! > > Cheers daz > > On 21 February 2017 at 17:00, Paweł Nastachowski <Pawel.Nastachowski@eu. > equinix.com> wrote: > >> >> Wiadomość napisana przez Darren Marshall <darren(a)tuff.org.uk> w dniu >> 21.02.2017, o godz. 17:01: >> >> >> I'm googling like crazy and can't seem to find an example of how to >> configure MD5 authentication between BGP peers using Bird running on >> OpenBSD, does someone out there have a guide for this? The Bird config is >> straightforward but I'm missing the 'glue' at the OS level! Also does >> anyone know if the stock Generic kernel supports TCP MD5 signatures out of >> the box (OpenBSD 6.0) , looking at the kernel config file it would appear >> it has the option compiled in , anyone know how to check?. >> >> You can use setkey. For example: >> >> cat bgp-md5.conf >> flush; >> add 195.182.218.100 195.182.218.39 tcp 0x1000 -A tcp-md5 „password” >> >> and >> >> setkey -f bgp-mf5.conf >> >> >> — >> Paweł Nastachowski >> Technical Manager >> >> EQUINIX | Al. Jerozolimskie 65/79 Warsaw 00-697 Warszawa, Poland >> E pawel.nastachowski(a)eu.equinix.com | T +48 22 427 39 98 | M +48 667 383 >> 108 <+48%20667%20383%20108> >> >> HOW ARE WE DOING? <http://www.customersat3.com/csc/equinix> Please >> click here to Tell Equinix - We're Listening >> >> Equinix.com <http://www.equinix.com/> | Twitter >> <https://twitter.com/equinix> | LinkedIn >> <http://www.linkedin.com/company/equinix> | Facebook >> <http://www.facebook.com/Equinix> | YouTube >> <http://www.youtube.com/user/equinixvideos> >> Equinix (Poland) Sp. z o.o. jest wpisana do Rejestru Przedsiębiorców >> Krajowego Rejestru Sądowego prowadzonego przez Sąd Rejonowy dla m. st. >> Warszawy w Warszawie, XII Wydział Gospodarczy, pod numerem KRS 0000295130, >> NIP 7010109699, REGON 141274596. Kapitał zakładowy spółki wynosi 530.000zł. >> Equinix (Poland) Sp. z o.o. is entered into the National Court Register >> maintained by the District Court for the Capital City of Warsaw, XII >> Economic Department in Warsaw, under KRS number 0000295130, VAT-ID >> PL7010109699, REGON 141274596.The share capital is PLN 530,000 >> >> >> >> >> > > — > Paweł Nastachowski > Technical Manager > > EQUINIX | Al. Jerozolimskie 65/79 Warsaw 00-697 Warszawa, Poland > E pawel.nastachowski(a)eu.equinix.com | T +48 22 427 39 98 | M +48 667 383 > 108 <+48%20667%20383%20108> > > HOW ARE WE DOING? <http://www.customersat3.com/csc/equinix> Please click > here to Tell Equinix - We're Listening > > Equinix.com <http://www.equinix.com/> | Twitter > <https://twitter.com/equinix> | LinkedIn > <http://www.linkedin.com/company/equinix> | Facebook > <http://www.facebook.com/Equinix> | YouTube > <http://www.youtube.com/user/equinixvideos> > Equinix (Poland) Sp. z o.o. jest wpisana do Rejestru Przedsiębiorców > Krajowego Rejestru Sądowego prowadzonego przez Sąd Rejonowy dla m. st. > Warszawy w Warszawie, XII Wydział Gospodarczy, pod numerem KRS 0000295130, > NIP 7010109699, REGON 141274596. Kapitał zakładowy spółki wynosi 530.000zł. > Equinix (Poland) Sp. z o.o. is entered into the National Court Register > maintained by the District Court for the Capital City of Warsaw, XII > Economic Department in Warsaw, under KRS number 0000295130, VAT-ID > PL7010109699, REGON 141274596.The share capital is PLN 530,000 > > > > >

1 0

FreeBSD ECMP Bird OSPF
by Cassiano Peixoto 21 Feb '17

21 Feb '17

Hi guys, Anyone knows if Bird OSPF supports FreeBSD ECMP (RADIX_MPATH kernel option)? I heard there is no compatibility. Please anyone who is running ou had success can confirm? Thanks.

4 5

Remove Private As Example
by Darren Marshall 20 Feb '17

20 Feb '17

Hi guys, Does anyone have an example bird configuration for remove private-as numbers , looking for same functionaility as the Cisco remove-private-AS knob. Thanks daz

3 4

filter & filter function
by Борис Коваленко 19 Feb '17

19 Feb '17

Hello! A little question I haven't found an answer in docs. When I use filter I use accept or reject for prefixes. But what if I use import/export where construction? May I use accept and reject too instead of return true/false? Regards, Boris -- С уважением, Борис Коваленко

1 0

bit operators
by Борис Коваленко 19 Feb '17

19 Feb '17

Hello! I have an idea to write common filters like define RF_REDISTRIBUTE_CONNECTED 0x10 define RF_REDISTRIBUTE_STATIC 0x20 ..... protocol ospf main_ospf { export where f_main_ospf_e(RF_REDISTRIBUTE_CONNECTED | RF_REDISTRIBUTE_STATIC); ..... } function f_main_ospf_e(int flags) { if(source ~ [RTS_STATIC, RTS_STATIC_DEVICE] && (flags & RF_REDISTRIBUTE_STATIC) ........ } Unfortunatelly there are not bit operators :( But may be there is another way? Regards, Boris -- С уважением, Борис Коваленко

2 2

Route attributes overwritten during reconfiguration
by João Taveira Araújo 17 Feb '17

17 Feb '17

Hi, I've run into a bug which manifests itself during reconfiguration. Unfortunately, the bird config in question is extremely large and I can't easily cut it down to something replicable. I'm running into this particular issue in bird6, but have no reason to believe IPv4 would fair any better. All results are using bird 1.6.2. My setup is as follows: - a static protocol, in which the import stanza adds extended communities: route 2001:db8::/48 via "lo" { bgp_ext_community.add((ro, 2, 0)); bgp_ext_community.add((ro, 3, 0)); ... } - based on these communities, the static route makes its way through a pipe from the master table, to an external table Typically all is fine - we export the route to our transits. Since we have multiple egress devices, a "show route" will show our local, static route, as well as the same route learnt through our providers: sudo birdc6 show route for 2001:db8::/48 BIRD 1.6.2 ready. 2001:db8::/48 dev lo [static_protocol 04:42:26] * (200) via xxx on et1 [transit_1 03:44:07] (100) via xxx on et2 [transit_2 03:44:07] (100) We actually have three transits, but one of our transits does not export any routes we happen to be exporting to them. Such a case happens on reconfiguring BIRD. During a reconfiguration, the static protocol gets reloaded: <TRACE> static_protocol > 2001:db8::/48 added [best] dev lo in this brief moment, a window of opportunity arises for our thus far silent transit to make an unwanted appearance: sudo birdc6 show route for 2001:db8::/48 BIRD 1.6.2 ready. 2001:db8::/48 dev lo [static_protocol 05:44:07] * (200) via xxx on et3 [transit_3 05:44:07] (100) via xxx on et1 [transit_1 03:44:07] (100) via xxx on et2 [transit_2 03:44:07] (100) This, it turns out, is tragic, because somehow the extended communities we apply to the route learnt from transit_3 clobber the ones we apply in static_protocol. I'm pretty sure something screws up the rta associated to the static route, but I'm also confused as to why the static protocol seems to get reloaded at all given there is no configuration change in the first place. We definitely want to allow local as: since the routes are potentially anycast, it is useful to have an alternate route in case we shut down the static announcement. Thanks, - j

3 7

OSPF ptmp
by Борис Коваленко 17 Feb '17

17 Feb '17

Hello! Trying to run bird on ethernet interface with type = ptmp. Yes, I know that ethernet is broadcast interface, but there is a good practice to use ptmp on ethernet. I found a strange bug. When type = ptmp, bird sends only one Hello packet and then stops (and even receive?) next packets until I fully restart bird, while other side (cisco or mikrotik) sends packets every 10s (as configured). There is no problems with type = broadcast Here is my simple test configuration: protocol ospf main_ospf { import all; instance id 0; tick 5; area 0.0.0.0 { networks { X.X.16.78/32; X.X.16.80/28; }; interface "lo1" { type ptp; hello 60; retransmit 10; dead 30; }; interface "em0.102" { cost 10; type ptmp; hello 10; retransmit 5; dead 40; # authentication cryptographic; password "XXXXX" { id 1; algorithm keyed md5; }; }; }; } FreeBSD - 11-STABLE Bird 1.6.3 With regards, Boris -- С уважением, Борис Коваленко

2 2

Invalid example for RIPv2 in User's Guide
by Steve Leung 17 Feb '17

17 Feb '17

http://bird.network.cz/?get_doc&f=bird-6.html#ss6.10 In the link above, the RIP section's example will return config error in bird v1.6.3. Is this an outdated example for older version of bird? protocol rip { debug all; port 1520; period 12; garbage time 60; interface "eth0" { metric 3; mode multicast; }; interface "eth*" { metric 2; mode broadcast; }; authentication cryptographic; password "secret-shared-key" { algorithm hmac sha256; }; import filter { print "importing"; accept; }; export filter { print "exporting"; accept; }; } Best regards, Steve

2 1

BGP dynamic filtering
by Liran Schour 15 Feb '17

15 Feb '17

Hi all, I want to implement a dynamic filter where I will export a route based on matching against a dynamic set of prefixes. The set is maintained according to a database. 1. Can I maintain a dynamic set of prefixes and change the set on the fly? What are the performance impacts of this? 2.. Where can I find such an example? - Liran

3 2