- Bird-users - Mailing Lists

Using a custom forwarding plane
by Jigar Mehta 08 Apr '15

08 Apr '15

I am new to BIRD and routing engines in general. I needed to understand feasibility of using BIRD if the device has its own custom forwarding plane instead of letting Kernel do the forwarding. I have read through the coder's/user's documents but did not find answers to few questions : 1. What is the best possible way of getting routes and route updates from Bird. I am looking for something like FPM interface provided by Quagga. I also wanted to store these routes in a mysql database for the purpose of my product. 2. How does Device protocol deal with TUN/TAP interfaces. Does it treat like a regular iface or do i need any special handling for them.

2 1

per interface route filtering
by olivier a 08 Apr '15

08 Apr '15

Is there a way to filter RIP announced routes on an interface basis ? I've had a look at the filtering part in the doc, but I'm still clueless about this ... Thanks for any help :-)

2 2

Inject BGP routes with non directly-connected next-hop
by Jan Huňka 07 Apr '15

07 Apr '15

Hello, I'm currently trying to configure BIRD for BGP injection. Routes which are added on BIRD should be distributed to specified neighbor router (in this case Cisco) and added to it's routing table. I also need to specify next-hop IP address of these routes, because injected routes should divert the matching traffic through another way until BIRDS stops to distribute these routes. I was able to configure BIRD to inject these routes with specified next-hop using internal BGP. But I also need it to work with external BGP. The problem is that the next-hop IP of injected routes is a directly connected network of the Cisco router and not BIRD's. BIRD doesn't know anything about this network. So the question is, is it possible to inject routes from BIRD to Cisco router using external BGP with next-hop IP address, which is not directly connected to the BIRD router? I should add that the BGP injection using external BGP works too, but only If the next-hop IP is a directly connected network od the BIRD router. Thank you for any advice. Jan Huňka Configuration of BIRD: protocol device { scan time 10; } protocol static static_10 { route 5.100.100.0/24 reject; } # filters section (DO NOT REMOVE!) filter filter_10 { if ( proto = "static_10" ) then { bgp_community.add((25511,444)); bgp_next_hop=3.100.100.1; accept; } else { reject; } } protocol bgp bgp_10 { local as 25511; neighbor Y.Y.Y.Y as 25512; import all; export filter filter_10; } Configuration of the bgp process on the CISCO router: router bgp 25512 neighbor X.X.X.X remote-as 25511 ! address-family ipv4 neighbor X.X.X.X activate no auto-summary !

2 1

RIP TTL security Ubuntu bug ?
by olivier a 07 Apr '15

07 Apr '15

Hi Trying to use 'ttl security enable' with RIP protocol in BIRD, I get : /etc/bird.conf, line 30, syntax error It happens on three machines : . Ubuntu 14.04 LTS / Bird installed by repository . Ubuntu 14.04 LTS / Bird installed with 1.4.5 sources compile . Raspbian OS, Bird installed with 1.4.5 sources compile I tried with different syntaxes ( enable, yes, on, .. ) with same pb Did I miss a compile option ? ttl security if functioning OK with BIRD/BGP Thanks for any insight :-)

2 2

BIRD / BGP / IPv6 / source address directive : auto vs link local vs GUA
by olivier a 04 Apr '15

04 Apr '15

Hi ! I'm learning BGP and I'm really puzzled about the 'source address' directive in the context of IPv6. I've seen some people explicit a GUA source address ( example : source address 2001:db8:0:0::1; ) Reading the documentation, watching the debug logs and playing with bird6c didn't help me understand. Leaving to auto ( no directive ) was functioning ok, but my BGP setup is rather simple. What is better ? No directive, link local or Global Unicast Address ? Thank you for any clue :-)

3 3

Modifying function called in filter does not take effect
by Eric Cables 01 Apr '15

01 Apr '15

I'm hoping someone can tell me whether this behavior is expected or not. I am using BIRD as a RR, and running into a behavior where modifying a policy, within a function called by a filter, requires a hard BGP session reset or stop/start of BIRD, rather than a 'configure soft.' Route Refresh is supported by the RR client. I am using a unique filter for each RR client; each filter calls a function that is shared amongst all filters -- basically matching routes that all RR clients should receive. This was first instantiated with a single BGP community match in the function, and a 'configure soft' worked fine. I then went back and added a second if statement to the function, expecting 'configure soft' to put the new policy into effect, but what I noticed is that the only way for RR clients to receive the newly accepted routes was to hard down/up the BGP session. Anecdotally, a 'show route filter router1_out' (after 'configure soft') did match the routes I was expecting the RR client to receive, but until the BGP session was hard cleared to the RR client, they were not advertised by BIRD. Here is the relevant configuration (I've bolded the new configuration that was added, which did not result in an advertisement to the RR client): # RR client template template bgp rr_client { description "Template for route reflector clients"; local as 65412; hold time 180; source address 2.2.2.2 ; rr client; rr cluster id 1.1.1.1; import all; export none; add paths; } # Globally reflected routes function function global_routes() { # Match 65000-65499,100-200 if bgp_community ~ [(65000..65499,100..200)] then accept; * # Match 65000-65499,300-400* * if bgp_community ~ [(65000..65499,300..400)] then accept;* } # Outbound filter for router1 filter router1_out { global_routes(); reject; } protocol bgp 'router1' from rr_client { neighbor 1.2.3.4 as 65412; import all; export filter router1_out; } As mentioned, the output of 'show route filter router1_out' (after a 'configure soft') did return the expected routes, but they were not advertised to the 'router1' RR client until the session was hard cleared. Is this expected behavior? -- Eric Cables

2 1

Is it good practice to use same router id for bird and bird6 ?
by olivier a 28 Mar '15

28 Mar '15

Hi ! Is it good practice to use same router id for bird and bird6 ? I'm wondering if there are some drawbacks or pitfalls ? I'm using RIP, OSPF and BGP Thanks for any advice :-)

5 6

RIP and directly connected routes
by olivier a 28 Mar '15

28 Mar '15

I'm studying RIP and have a really hard time understanding the rationals behind to automatically pulling directly connected routes. If I connect 4 RIP routers in a circle and neither is advertising it's connected routes, it's going to be very quiet ... Please help me understand :-) Secondly, I use 'protocol direct' to have these connected routes pulled from kernel tables to RIP and advertised. Is that the right way to do it ? Lastly, these 'protocol direct' routes override the split horizon rule. Is there a way to prevent an interface to multicast its own subnet ? Thanks, I 'm just discovering BIRD, I may be asking clumsy questions ;-)

2 3

New version, v0.5, of BPGSEC implementation for BIRD
by Michael Baer 24 Mar '15

24 Mar '15

Hi all, I wanted to announce a new, v0.5, version of BGPsec protocol supporting code for BIRD. It's been updated to work with v1.4.5 BIRD and is available as a patch or as a full source tarball at: http://bgpsec.tislabs.com This is an ongoing project following the IETF's SIDR Working Group's BGPsec implementation. This version has been updated to match the current changes in the draft BGPsec protocol specification. Notably, the code also includes a client, bgpsec-bird-client, that uses RTRlib (http://rpki.realmv6.org/trac/) to download RPKI data from a Resource Public Key Infrastructure (RPKI) to Router Protocol server and populate BIRD's ROA tables. It will also download router keys from the RPKI to Router protocol server. SIDR working group and protocol links: http://datatracker.ietf.org/wg/sidr/charter/ http://datatracker.ietf.org/doc/draft-ietf-sidr-bgpsec-protocol/ http://tools.ietf.org/html/rfc6810 (RPKI to Router Protocol) The code is still at the experimental/testing stage and should not be use used for production services. If any one wants to play with the code, please feel free to email me any questions or bug reports. Thanks, Mike -- Michael Baer PARSONS baerm(a)tislabs.com

1 0

Force BGP add-path configuration option
by Eric Cables 20 Mar '15

20 Mar '15

I realize that BGP add-path is a negotiated capability, but I'm running into an instance where I am attempting to send multiple copies of the same prefix, with different BGP attributes (next hop, etc.), but since the receiving router does not support add path BIRD is only sending its "best" prefix. Would it be possible to add a "add paths force" configuration option? What potential implications would this cause for the receiving device that is unaware of this capability, and likely will never have support for it? -- Eric

1 0