- Bird-users - Mailing Lists

Problem with interfaces and routes on _one_ Debian sid system
by jimpenny＠ykk-usa.com 03 Mar '15

03 Mar '15

I have bird installed on 7 Debian Sid systems with 3.16.0-4 kernel. On 6 of these systems it works fine. On the last, running bird -d shows every non-kernel route with a message that looks like: bird: KRT: Receive route ... with unknown ifindex ... When I go into birdc and do show interfaces, I receive an empty list. ip link and ip route show the expected interfaces and routes. So, can you give me any hints on how to debug this? Where does bird get its interfaces and routes from on linux? Thanks jim

2 1

OSPF type broadcast over GRE for NRHP
by Clint Armstrong 03 Mar '15

03 Mar '15

I am trying to use BIRD to run OSPF inside a Phase 3 DMVPN using OpenNHRP. The problem I'm seeing is that it appears to be impossible to force type broadcast on a GRE interface. When I try, the message "Cannot use interface gre1 as broadcast, forcing nbma" is logged. This may normally make sense, but the OpenNHRP daemon captures multicast traffic on it's interface and forwards it appropriately. A configuration parameter to bypass this protection and allow broadcast on a GRE interface would be very helpful.

3 3

Bird hangs on startup (MIPS, EdgeOS 1.6.0, Debian wheezy)
by Joel Brunenberg 27 Feb '15

27 Feb '15

Hi, I am new to this list so please excuse, if I do look a little bit clumsy. I have a problem with bird 1.3.7 (debian wheezy 1.3.7-1) on mips, namingly EdgeOS 1.6.0 on an EdgeRouter Lite. I am trying to set up Bird to be able to use OSPF on Interfaces that are not supported by EdgeOS natively. Before you let me burn in hell for having that idea, please let me explain my problems. 1) On my platform does not start but hangs forever before the fork can take place - this is, if I have the "device" protocol enabled which I of cause need. I can reproduce that on several devices using the following minimal config (given another config without the device proto, bird starts) (given another config without the device proto, bird starts) (given another config without the device proto, bird starts) (given another config without the device proto, bird starts) (given another config without the device proto, bird starts) (given another config without the device proto, bird starts) (given another config without the device proto, bird starts) (given another config without the device proto, bird starts): ### bird.conf log syslog { warning, error, auth, fatal, bug, info, debug}; router id 10.24.1.104; debug protocols all; protocol device device0 { scan time 10; } ### end of bird.conf (I fixed problem 2 before trying this) I get no error messages or any indication whatsoever why or where it is hanging. Strace shows the last syscall to be the last one completing. recvmsg(5, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\0\0\0\24\0\3\0\2\0\0\21\345\377\377\357\236\0\0\0\0\0\0\0\1\0\10\0\1\177\0\0\1"..., 8192}], msg_controllen=0, msg_flags=0}, 0) = 20 ltrace seems to be unavailable on MIPS with debian wheezy. I have no idea where to look right now. I am not that good with gdb, but I could try something, given instructions. I saw this Post in the mailinglist from 2013: http://comments.gmane.org/gmane.network.bird.user/2371 bit I am not sure if the two issues are related. I have no toolchain installed on this machine and I would rather not install one. I am not that good with crosscompiling either, but if someone could point me in the right direction, I would be glad to try a self-compiled version. 2) I use DHCP to get an IP on my WAN interface (cable modem) and the broadcast address on the interface after configuration is 255.255.255.255, which is not the right broadcast address for the IP assigned. If I do not fix that before starting bird, I get the following error Feb 27 16:16:14 bel bird: KIF: Invalid broadcast address \ 255.255.255.255 for eth1 Of cause, bird is right and the interface broadcast address is wrong. My question is: Is this a fatal error? The interface eth1 is not relevant to me. Can I leave the Broadcast address as it is or will this break bird even if not "using" this interface anywhere? Thank you for looking into this and sorry for the long post, /jbn -- Joel Brunenberg - Troisdorf PGP: 0xAD25981C

2 2

Introduction
by David Jorm 26 Feb '15

26 Feb '15

Hi All I am a security engineer based in Brisbane, Australia. I'm starting to work on a large-scale deployment of BIRD, and look forward to engaging with the BIRD community. I have created a couple of patches which I will send to this list shortly. Thanks David

1 0

bird4 scope link
by Amadeus Alfa 26 Feb '15

26 Feb '15

Hello list, in bird6 I can use the following configuration snippet with IPv6 link local addresses: protocol bgp xxx { neighbor fe80::2ff:c0bb:fe00:1234 % '784648196' as 1234; }; ('784648196' is the interface name) My question is now: How can I use IPv4 scope link addresses in bird4? When I use the line below I get an error: "Link-local address and interface scope must be used together" protocol bgp xxx { neighbor 169.254.0.1 % '784648196' as 1234; }; Thanks, Amadeus

2 4

Bird6 freeze under high load
by Baptiste Jonglez 24 Feb '15

24 Feb '15

Hi, We are experiencing regular "freezes" of bird6 on a BGP router. When this happens, bird6 maxes out a CPU for several minutes. If a command is run in birdc6 during such a freeze, the command hangs, and the result is only returned when birdc6 has stopped using the CPU. Note that this also applies to "cheap" commands like "show protocols", which usually complete instantly (both with bird, and with bird6 in non-freeze conditions). Sometimes (but not always), the non-responsiveness of bird6 causes all BGP sessions to drop, which is really annoying on a full-view BGP router. The freezes happen at random, but seem to happen more frequently when the router is under load (typically, at peak time, each CPU spends ~20% forwarding packets, on a 4-core box). The BGP setup is made of multiple transit and peerings, on multiple VLANs (some BGP neighbours share the same VLAN). The setup is pretty similar on bird and bird6, but only bird6 exhibits these freezes, bird works just fine. The box is running Debian wheezy on amd64, with bird from backports: 1.4.5-1~bpo70+1 Attached is the configuration, and two extracts of the logs when all BGP sessions dropped (with debug { states, interfaces, events }). All files are anonymised, but should be consistent. What do you think? It looks like bird6 gets stuck on some very expensive operation, which prevents it from doing anything else (include maintaining BGP sessions alive). Thanks, Baptiste

4 11

bird & BGP over L2TP
by Alexander Shikov 23 Feb '15

23 Feb '15

Hi All! I'd like to ask for help with some strange issue. I have a L2TP tunnel between two routers. Both routers are running on bird 1.4.5 and CentOS. L2TP tunnel has /30 addressing. For some strange reason bird does not install next-hop received by BGP: bird> show route 185.61.136.0/22 all 185.61.136.0/22 via 185.11.144.1 on ens1f0 [kiev_rtr 2015-02-12 11:13:17 from 185.61.139.5] * (100/?) [i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: BGP.next_hop: 185.61.139.5 BGP.local_pref: 100 185.61.139.5 is reachable: [root@tunnel etc]# ping 185.61.139.5 PING 185.61.139.5 (185.61.139.5) 56(84) bytes of data. 64 bytes from 185.61.139.5: icmp_seq=1 ttl=54 time=40.8 ms ^C --- 185.61.139.5 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 40.818/40.818/40.818/0.000 ms [root@tunnel etc]# arp -n 185.61.139.5 Address HWtype HWaddress Flags Mask Iface 185.61.139.5 ether aa:8a:10:bb:91:02 C tun1 Please advice. Thanks! -- Alexander Shikov Technical Staff, Digital Telecom IX

2 1

bird spawning huge amount of BGP traffic
by Simon Szustkowski 23 Feb '15

23 Feb '15

Hi, i am participating in a virtual network which is created for computer enthusiasts to gain knowledge about advanced routing protocols and stuff. It is called the DN42 (http://dn42.net) Currently i am establishing BGP sessions with the help of quagga, but since it is quite bloated for my small setup, i would like to migrate to bird. I have configured bird4 with the example config provided in the DN42 wiki (https://dn42.net/howto/Bird) (sorry about the HTML entities). The result is: Bird populates my routing table with all the correct routes, but spawns very huge amounts of BGP traffic. I ran it overnight accidentally, and it spawned over 70GB traffic on some interfaces, so these particular peers closed their VPN tunnels to me, which is understandable. I have created a minimal config by myself, which has the same result. However, peering with quagga works as expected, with all routes and little traffic. But since i want to go away from quagga, and use bird, i am asking you for advice in this problem. Where is my error, and how can i use bird in the correct way? Additional info: I am using bird on Debian Wheezy Stable, and the virtual connections to my peers are set up with OpenVPN. I use IPv4 only (currently). So i would be thankful for any help or suggestions how to fix the error. Thanks in advance, Simon --- Before printing this email, think if it is really needed.

3 2

list of networks as global definition
by Tapio Haapala 23 Feb '15

23 Feb '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I try make conf where all networks are at begin of sipmple format as possible at well commented. Rules & other thing use them later. Is it possible to do global network list as variable or are variables possible only in blocks? I tried put thist begind of conf define local_nets = [ 2a00:X::/32, #My networkA 2a00:X::/48 #My network B ]; define own_nets = [ 2a00:X::/32, #My network C at another place local_nets ]; And later at protocol block I tried use them like export filter { if (net ~ own_nets) then accept; }; Clearly this is not way to do it because I get syntax error at that first line :) I can make function what is something like this: function is_local_net() prefix set local_nets; { local_nets = [ 2a00:X::/32, #My networkA 2a00:X::/48 #My network B ]; if net ~ local_nets then return false; return true; } but then I have "code" at my conf section of config file. and it hurts my OCD, ADHD or what ever :) So is it possible to do prefix list definitions as global? - -- F-Solutions Oy Tapio Haapala PL7, 90571 Oulu GSM 0400 998371 Skype burner- IRC Burner@ircnet -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (MingW32) iQEcBAEBAgAGBQJU4HzSAAoJECSUPJ4T/HZPo48IAIY9qdGlLOIhGtR+1/a8fqYC HU5qMYkc2UtL3MAz3zlmNbDn1/HeUQRbic/Q7zI5TSQqtMFBINSVTbAA15Le68te JRANQm9TNokzYZ5us3uj+2teyQoz8+f8Iq2Cro9bOjsaQQKRjLw05tqYwPx70XqX PeKBsrfjxWL8A8mbRnEt9Z+AEamPXbwtH3tuyK1CyRRl7pcfC2oe0AcUuQvN3nRF TE4wsd3mahVPIshKMGvERFtx7pzOG5SW4DB+dBSCGCPIOk00EmDMJMtP6ErgGJzl ke7hokfi4NBop9yN7HU7+dB1e/2c6A/iBapGlsyKHK30rPHRY/dBozuXjQeNgRM= =9O9N -----END PGP SIGNATURE-----

2 1

[PATCH] crash in ospf DBDESC
by Александр Черников 20 Feb '15

20 Feb '15

Hello. I've got the following core for bird 1.4.5: (gdb) bt #0 0x000000000043ecfa in ospf_dbdes_send (n=0x8011018a0, next=1) at ../../../proto/ospf/dbdes.c:145 #1 0x000000000043f6b2 in ospf_dbdes_receive (ps_i=0x8010c9000, ifa=0x8011131a0, n=0x8011018a0) at ../../../proto/ospf/dbdes.c:386 #2 0x0000000000438fdd in ospf_rx_hook (sk=0x80101b8c0, size=28) at ../../../proto/ospf/packet.c:485 #3 0x000000000045f972 in sk_read (s=0x80101b8c0) at io.c:1760 #4 0x000000000046034b in io_loop () at io.c:1975 #5 0x0000000000467da3 in main (argc=3, argv=0x7fffffffed30) at main.c:825 .. (gdb) p n->dbsi $20 = {prev = 0x0, null = 0x0, next = 0x0, node = 0x0} (gdb) p sn $22 = (snode *) 0x0 Investigations has shown, that there was major OSPF instability in that area (~20 quagga boxes and and Juniper device) at that moment with either re-election or DR/BDR hang. Unfortunately, I don't have much logs for that. We also had an (typical) issue with this particular quagga peer just prior to the crash: Feb 19 18:28:34 XXX ospf6d[8387]: SLOW THREAD: task ospf6_receive (7f793a115810) ran for 5044ms (cpu time 5032ms) My guess is that 1) we started to send our DB to the peer and it stopped confirming DD packets for a while 2) Flap happened so part of/most LSADB got flushed 3) Quagga finally awoke from sleep and confirmed last packet 4) we tried to get the next chunk of LSAs but there were no more (unsent ) LSAs in DB 5) this message appeared in the list Something similar to the attached patch should fix this particular issue (at least I hope so).

1 0