- Bird-users - Mailing Lists

Reject log message; bgp_community comparaison
by Arnaud Fenioux 29 Jan '15

29 Jan '15

Hello the bird community, I’ve two small questions, I've put them in the same mail even if they are not related : 1/ I currently use this code in my config to reject “martians” if ( is_martian() ) then { reject "prefix rejected by is_martian"; } Which prints in logs : <INFO> prefix rejected by is_martian Do you know if there is a way to add some variables in the log (like bgp_path.first, from or net) ? 2/ I’ve notice a “strange” behaviour when comparing communities, is this voluntary? Pair set have to be compared on the right : bird> show route where bgp_community ~ [ (51706,51706) ] count 2467 of 2467 routes for 2426 networks bird> show route where [ (51706,51706) ] ~ bgp_community count 0 of 2467 routes for 2426 networks Pair have to be compared on the left : bird> show route where (51706,51706) ~ bgp_community count 2467 of 2467 routes for 2426 networks bird> show route where bgp_community ~ (51706,51706) count 0 of 2467 routes for 2426 networks Thanks -- Arnaud Fenioux Network Engineer - FranceIX

3 3

OSPFv3 help
by Andre Nathan 27 Jan '15

27 Jan '15

Hello I'm trying to setup a simple lab test for OSPFv3 with bird. The configuration is as follows: eth1 eth0 eth0 eth1 <net 1>-------|router 1|------------|router 2|------<net 2> Both routers have on eth0 an fe80 (link-local) address but also an fd77/16 address. The configuration works but the routers export their link-local address as the gateway for their respective networks. For example: bird> show route fd77:a:b:c::/80 via fe80::21e:67ff:fe7b:31c9 on eth1 How do I override this behavior and export the fd77 address as the gateway address? Thanks, Andre

3 4

Re: Disable BFD on specific interfaces
by Pavlos Parissis 27 Jan '15

27 Jan '15

On 23/01/2015 01:49 μμ, Ondrej Zajicek wrote: > On Wed, Jan 14, 2015 at 01:15:10PM +0100, Pavlos Parissis wrote: >> On 14/01/2015 12:47 μμ, Jeronimo de A. Barros wrote: >> but my logic was wrongly applied to the conf, it should haven been: >> protocol bfd { >> debug { states, routes, filters, interfaces, events }; >> interface "bond0" { >> min rx interval 400 ms; >> min tx interval 400 ms; >> idle tx interval 1000 ms; >> multiplier 3; >> }; >> interface "eth*" { >> disabled yes; >> } >> } >> >> but I get config error at the line ' disabled yes;' > > Hi > > There is no 'disabled' option, there is 'passive' option, which does something > slightly different. > > But you don't really need such option, because BFD is active only on interfaces > where internal BFD clients (OSPF, BGP) requested a session. So you could > configure in OPSF/BGF whether given OSPF interface / BGP session should > use BFD (option 'bfd'). OK great, thanks for the clarification. Cheers, Pavlos

1 0

Cisco receive route problem.
by Abu Naser 26 Jan '15

26 Jan '15

Hi, I am new bird user. I have installed bird as Route server. In this scenario bird is receiving route from cisco router client but cisco is not receiving any route from bird. However I haven't apply any export filter in bird. Please help me. Thanks Naser Sent from my Windows Phone

2 1

Patch to reveal more information in SHOW ROUTE
by Andrew Francis 26 Jan '15

26 Jan '15

Hi, Twitch's network operations department uses BIRD as a centralized looking glass. It's a BGP route reflector that is peered with all our border routers. Staff use the route reflector to inspect how a destination network can be reached from our different points-of-presence. Some peers will advertise the same IP as part of different prefix lengths, likely due to aggregation or filtering. For instance, one provider advertises 117.120.24.0/22 to us, but all others only advertise a /21. Querying SHOW ROUTE on the looking glass shows the /22 on one border router, and hides the /21's. This makes sense as a routing decision from the location of the looking glass, but doesn't give us the global visibility we want. I have a patch which adds an option to SHOW ROUTE to reveal all prefixes, regardless of length / best-match, covering a particular IP. This produces tons of output. I am also working on an option to print the single best prefix for each unique BGP.next_hop / BGP.originator_id. This gives us exactly what we want: the route taken to a particular IP from each border router. Would the community be interested in integrating this feature? If so, I'll start the process here to get a patch released publicly. Thanks Andrew Francis | *Twitch* <http://www.twitch.tv/> | Engineering

4 4

Re: Disable BFD on specific interfaces
by Ondrej Zajicek 23 Jan '15

23 Jan '15

On Wed, Jan 14, 2015 at 01:15:10PM +0100, Pavlos Parissis wrote: > On 14/01/2015 12:47 μμ, Jeronimo de A. Barros wrote: > but my logic was wrongly applied to the conf, it should haven been: > protocol bfd { > debug { states, routes, filters, interfaces, events }; > interface "bond0" { > min rx interval 400 ms; > min tx interval 400 ms; > idle tx interval 1000 ms; > multiplier 3; > }; > interface "eth*" { > disabled yes; > } > } > > but I get config error at the line ' disabled yes;' Hi There is no 'disabled' option, there is 'passive' option, which does something slightly different. But you don't really need such option, because BFD is active only on interfaces where internal BFD clients (OSPF, BGP) requested a session. So you could configure in OPSF/BGF whether given OSPF interface / BGP session should use BFD (option 'bfd'). -- Elen sila lumenn' omentielvo Ondrej 'Santiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

1 0

Re: BGP lost routes problem
by Mike C 22 Jan '15

22 Jan '15

Reduced the setup slightly, all routers are in single AS 65001. Just one common route between 10.72.1.1 and 10.72.1.2, which is 10.0.0.0/8. Removed the third router, so just .1 and .2. Two routers, same AS, both exporting the same network, which results in both withdrawing the same network. How can I stop this? I want bird to install the BGP route for 10.0.0.0/8 if ever the local route is gone (i.e in my case, it's a vpn that installs a static route for 10.0.0.0/8). How can I do this? Is it even supported? Using tcpdump, I can see sometimes one and sometimes both .1 and .2 withdraw the route from each other. Sometimes its not withdrawn at all - normally the first time everyone sees each others routes. If I restart .1 or .2 bird instance, then I will see one or both of them withdraw the route. For example, this tcpdump shows both .1 and .2 withdraw the route from each other: # 10.72.1.1's logs (tcpdump + syslog) 19:02:18.408782 IP (tos 0xc0, ttl 64, id 56703, offset 0, flags [DF], proto TCP (6), length 86) 10.72.1.2.37302 > 10.72.1.1.179: Flags [P.], cksum 0xe441 (correct), seq 69:115, ack 69, win 5840, length 46: BGP, length: 46 Update Message (2), length: 46 Origin (1), length: 1, Flags [T]: IGP 0x0000: 00 AS Path (2), length: 0, Flags [T]: empty Next Hop (3), length: 4, Flags [T]: 10.72.1.2 0x0000: 0a48 0102 Local Preference (5), length: 4, Flags [T]: 980 0x0000: 0000 03d4 Updated routes: 10.0.0.0/8 <---------- .2 advertises 10.0.0.0/8 to .1 19:02:18.408972 IP (tos 0xc0, ttl 64, id 56928, offset 0, flags [DF], proto TCP (6), length 157) 10.72.1.1.179 > 10.72.1.2.37302: Flags [P.], cksum 0xba2f (correct), seq 69:186, ack 115, win 5840, length 117: BGP, length: 117 Update Message (2), length: 46 Origin (1), length: 1, Flags [T]: IGP 0x0000: 00 AS Path (2), length: 0, Flags [T]: empty Next Hop (3), length: 4, Flags [T]: 10.72.1.1 0x0000: 0a48 0101 Local Preference (5), length: 4, Flags [T]: 990 0x0000: 0000 03de Updated routes: 10.0.0.0/8 <---------- .1 advertises 10.0.0.0/8 to .2 Update Message (2), length: 48 Origin (1), length: 1, Flags [T]: IGP 0x0000: 00 AS Path (2), length: 0, Flags [T]: empty Next Hop (3), length: 4, Flags [T]: 10.72.1.1 0x0000: 0a48 0101 Local Preference (5), length: 4, Flags [T]: 100 0x0000: 0000 0064 Updated routes: 10.99.10.0/24 Update Message (2), length: 23 End-of-Rib Marker (empty NLRI) 19:02:18.409201 IP (tos 0xc0, ttl 64, id 56704, offset 0, flags [DF], proto TCP (6), length 88) 10.72.1.2.37302 > 10.72.1.1.179: Flags [P.], cksum 0x7b7c (correct), seq 115:163, ack 186, win 5840, length 48: BGP, length: 48 Update Message (2), length: 48 Origin (1), length: 1, Flags [T]: IGP 0x0000: 00 AS Path (2), length: 0, Flags [T]: empty Next Hop (3), length: 4, Flags [T]: 10.72.1.2 0x0000: 0a48 0102 Local Preference (5), length: 4, Flags [T]: 1000 0x0000: 0000 03e8 Updated routes: 10.88.10.0/24 19:02:18.420970 IP (tos 0xc0, ttl 64, id 56929, offset 0, flags [DF], proto TCP (6), length 65) 10.72.1.1.179 > 10.72.1.2.37302: Flags [P.], cksum 0x8f42 (correct), seq 186:211, ack 163, win 5840, length 25: BGP, length: 25 Update Message (2), length: 25 Withdrawn routes: 10.0.0.0/8 <---------- .1 withdraws 10.0.0.0/8 19:02:18.421204 IP (tos 0xc0, ttl 64, id 56705, offset 0, flags [DF], proto TCP (6), length 88) 10.72.1.2.37302 > 10.72.1.1.179: Flags [P.], cksum 0x7a0e (correct), seq 163:211, ack 211, win 5840, length 48: BGP, length: 48 Update Message (2), length: 23 End-of-Rib Marker (empty NLRI) Update Message (2), length: 25 Withdrawn routes: 10.0.0.0/8 <---------- .2 also withdraws 10.0.0.0/8 19:02:18.460407 IP (tos 0xc0, ttl 64, id 56930, offset 0, flags [DF], proto TCP (6), length 40) 10.72.1.1.179 > 10.72.1.2.37302: Flags [.], cksum 0x9d3b (correct), seq 211, ack 211, win 5840, length 0 Syslogs: Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2: Incoming connection from 10.72.1.2 (port 37302) accepted Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2: Sending OPEN(ver=4,as=65001,hold=240,id=0a1810e1) Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2: Got OPEN(as=65001,hold=240,id=0a480102) Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2: Got KEEPALIVE Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2: BGP session established Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2: Connected to table master Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2: State changed to feed Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2: Sending KEEPALIVE Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2 < filtered out 0.0.0.0/0 via 2.127.238.77 on ppp0 Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2 < added 10.0.0.0/8 dev vpn-3b42d3c8 Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2 < filtered out 10.72.0.0/16 dev eth0 Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2 < filtered out 10.168.254.0/24 dev vlan254 Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2 < filtered out 192.168.0.0/16 dev vpn-3b42d3c8 Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2: Got UPDATE Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2 > added [best] 10.0.0.0/8 via 10.72.1.2 on eth0 Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2 < rejected by protocol 10.0.0.0/8 via 10.72.1.2 on eth0 Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2 < removed 10.0.0.0/8 dev vpn-3b42d3c8 Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2 < rejected by protocol 10.88.10.0/24 via 10.72.1.2 on eth0 Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2: Sending UPDATE Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2: Got UPDATE Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2: Got End-of-RIB Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2: Got UPDATE Jan 22 19:02:18 lanrouter daemon.debug bird: AS65001_2 > removed [replaced] 10.0.0.0/8 via 10.72.1.2 on eth0 # ip route list proto bird 10.88.10.0/24 via 10.72.1.2 dev eth0 # ip route list | grep 10.0.0.0 10.0.0.0/8 dev vpn-3b42d3c8 proto vpn scope link src 10.72.1.1 metric 10 # 10.72.1.2's logs (tcpdump + syslog) tcpdump - see both advertise 10.0.0.0/8 and then both withdraw 10.0.0.0/8. 19:02:17.982785 IP (tos 0xc0, ttl 64, id 56703, offset 0, flags [DF], proto TCP (6), length 86) 10.72.1.2.37302 > 10.72.1.1.179: Flags [P.], cksum 0xe441 (correct), seq 69:115, ack 69, win 5840, length 46: BGP, length: 46 Update Message (2), length: 46 Origin (1), length: 1, Flags [T]: IGP 0x0000: 00 AS Path (2), length: 0, Flags [T]: empty Next Hop (3), length: 4, Flags [T]: 10.72.1.2 0x0000: 0a48 0102 Local Preference (5), length: 4, Flags [T]: 980 0x0000: 0000 03d4 Updated routes: 10.0.0.0/8 <---------- .2 advertises 10.0.0.0/8 to .1 19:02:17.983121 IP (tos 0xc0, ttl 64, id 56928, offset 0, flags [DF], proto TCP (6), length 157) 10.72.1.1.179 > 10.72.1.2.37302: Flags [P.], cksum 0xba2f (correct), seq 69:186, ack 115, win 5840, length 117: BGP, length: 117 Update Message (2), length: 46 Origin (1), length: 1, Flags [T]: IGP 0x0000: 00 AS Path (2), length: 0, Flags [T]: empty Next Hop (3), length: 4, Flags [T]: 10.72.1.1 0x0000: 0a48 0101 Local Preference (5), length: 4, Flags [T]: 990 0x0000: 0000 03de Updated routes: 10.0.0.0/8 <---------- .1 advertises 10.0.0.0/8 to .2 Update Message (2), length: 48 Origin (1), length: 1, Flags [T]: IGP 0x0000: 00 AS Path (2), length: 0, Flags [T]: empty Next Hop (3), length: 4, Flags [T]: 10.72.1.1 0x0000: 0a48 0101 Local Preference (5), length: 4, Flags [T]: 100 0x0000: 0000 0064 Updated routes: 10.99.10.0/24 Update Message (2), length: 23 End-of-Rib Marker (empty NLRI) 19:02:17.983224 IP (tos 0xc0, ttl 64, id 56704, offset 0, flags [DF], proto TCP (6), length 88) 10.72.1.2.37302 > 10.72.1.1.179: Flags [P.], cksum 0x7b7c (correct), seq 115:163, ack 186, win 5840, length 48: BGP, length: 48 Update Message (2), length: 48 Origin (1), length: 1, Flags [T]: IGP 0x0000: 00 AS Path (2), length: 0, Flags [T]: empty Next Hop (3), length: 4, Flags [T]: 10.72.1.2 0x0000: 0a48 0102 Local Preference (5), length: 4, Flags [T]: 1000 0x0000: 0000 03e8 Updated routes: 10.88.10.0/24 19:02:17.995110 IP (tos 0xc0, ttl 64, id 56929, offset 0, flags [DF], proto TCP (6), length 65) 10.72.1.1.179 > 10.72.1.2.37302: Flags [P.], cksum 0x8f42 (correct), seq 186:211, ack 163, win 5840, length 25: BGP, length: 25 Update Message (2), length: 25 Withdrawn routes: 10.0.0.0/8 <---------- .1 withdraws 10.0.0.0/8 19:02:17.995220 IP (tos 0xc0, ttl 64, id 56705, offset 0, flags [DF], proto TCP (6), length 88) 10.72.1.2.37302 > 10.72.1.1.179: Flags [P.], cksum 0x7a0e (correct), seq 163:211, ack 211, win 5840, length 48: BGP, length: 48 Update Message (2), length: 23 End-of-Rib Marker (empty NLRI) Update Message (2), length: 25 Withdrawn routes: 10.0.0.0/8 <---------- .2 withdraws 10.0.0.0/8 19:02:18.034539 IP (tos 0xc0, ttl 64, id 56930, offset 0, flags [DF], proto TCP (6), length 40) 10.72.1.1.179 > 10.72.1.2.37302: Flags [.], cksum 0x9d3b (correct), seq 211, ack 211, win 5840, length 0 Syslogs: Jan 22 19:02:17 lanrouter daemon.debug bird: AS65001_2: Connecting to 10.72.1.1 from local address 0.0.0.0 Jan 22 19:02:17 lanrouter daemon.debug bird: AS65001_2: Connected Jan 22 19:02:17 lanrouter daemon.debug bird: AS65001_2: Sending OPEN(ver=4,as=65001,hold=240,id=0a480102) Jan 22 19:02:17 lanrouter daemon.debug bird: AS65001_2: Got OPEN(as=65001,hold=240,id=0a1810e1) Jan 22 19:02:17 lanrouter daemon.debug bird: AS65001_2: Sending KEEPALIVE Jan 22 19:02:17 lanrouter daemon.debug bird: AS65001_2: Got KEEPALIVE Jan 22 19:02:17 lanrouter daemon.debug bird: AS65001_2: BGP session established Jan 22 19:02:17 lanrouter daemon.debug bird: AS65001_2: Connected to table master Jan 22 19:02:17 lanrouter daemon.debug bird: AS65001_2: State changed to feed Jan 22 19:02:17 lanrouter daemon.debug bird: AS65001_2 < filtered out 0.0.0.0/0 via 10.64.64.65 on ppp1 Jan 22 19:02:17 lanrouter daemon.debug bird: AS65001_2 < added 10.0.0.0/8 dev vpn-3b42d3c8 Jan 22 19:02:17 lanrouter daemon.debug bird: AS65001_2 < filtered out 10.73.10.0/24 dev eth0 Jan 22 19:02:17 lanrouter daemon.debug bird: AS65001_2 < filtered out 10.72.0.0/16 dev eth1 Jan 22 19:02:17 lanrouter daemon.debug bird: AS65001_2 < added 10.88.10.0/24 via 10.73.10.123 on eth0 Jan 22 19:02:17 lanrouter daemon.debug bird: AS65001_2 < filtered out 192.168.0.0/16 dev vpn-3b42d3c8 Jan 22 19:02:17 lanrouter daemon.debug bird: AS65001_2: Got UPDATE Jan 22 19:02:17 lanrouter daemon.debug bird: AS65001_2 > removed [replaced] 10.0.0.0/8 via 10.72.1.1 on eth1 Jan 22 19:02:17 lanrouter daemon.debug bird: AS65001_2 < filtered out 10.0.0.0/8 dev vpn-3b42d3c8 # ip route list proto bird 10.99.10.0/24 via 10.72.1.1 dev eth1 # ip route list | grep 10.0.0.0 10.0.0.0/8 dev vpn-3b42d3c8 proto vpn scope link src 10.72.1.2 metric 20 Regards, Mike On Fri, Jan 16, 2015 at 1:44 PM, Mike C <smith.not.western(a)gmail.com> wrote: > Hi, > > I'm using bird 1.4.5 with BGP and have a problem where routes seem to be > lost under my setup. > > I find that if two BGP peers with the same routes are importing each > others routes, a third BGP peer someone ends up picking neither of their > routes after killing and restarting bird on one peer only. > > The problem goes away if I configure these two peers to not import each > others routes - however that is not ideal as while both peers share some > common routes, they also have some unique routes which should be shared. > > Apologies for the long email. The setup is: > > 10.72.1.1 - (AS 65001) - Primary Internet feed > 10.72.1.2 - (AS 65002) - Secondary Internet feed > 10.72.1.254 (AS 65003) - LAN Router (LAN is NAT'd, 192.168.18.0/24) > > I have various VPNs connecting into both .1 and .2, so they have some > resilience to outages. The remote ends take care of route weighting so .1 > is prioritised over .2 using static routes (no BGP or other routing > protocol etc). I want .254 to always have the best route to these VPNs. > > * Each router has a BGP link to the others. > * .254 (65003) imports all routes exported by .1 (65001) and .2 (65002). > * .254 (65003) exports a single LAN route, 192.186.18.0/24 to .1 and .2 > * .1 (65001) imports all routes exported by .2 and .254 > * .1 (65001) exports all routes from the ipsec0 device or 'vpn' rt_protos > * .2 (65002) imports all routes exported by .1 and .254 > * .2 (65002) exports all routes from the ipsec0 device or 'vpn' rt_protos > > The routes exported by .1 & .2 have their bgp localpref offset based on > the linux metric of the static route being imported, so BGP knows .2's > routes are less important than .1's. > > The 'vpn' rt_protos routes on .1 look like: > > 10.10.10.0/29 dev vpn-3b42d3c8 proto vpn scope link src 10.72.1.1 > metric 15 > 192.168.3.0/24 dev vpn-3b42d3c8 proto vpn scope link src 10.72.1.1 > metric 10 > 192.168.2.0/24 dev vpn-3b42d3c8 proto vpn scope link src 10.72.1.1 > metric 10 > 192.168.254.0/24 dev vpn-3b42d3c8 proto vpn scope link src 10.72.1.1 > metric 10 > 192.168.0.0/16 dev vpn-3b42d3c8 proto vpn scope link src 10.72.1.1 > metric 10 > 172.16.0.0/12 dev vpn-3b42d3c8 proto vpn scope link src 10.72.1.1 > metric 10 > 10.0.0.0/8 dev vpn-3b42d3c8 proto vpn scope link src 10.72.1.1 metric > 10 > > The 'vpn' rt_protos routes on .2 look like: > > 192.168.3.0/24 dev vpn-3b42d3c8 proto vpn scope link src 10.72.1.2 > metric 20 > 192.168.2.0/24 dev vpn-3b42d3c8 proto vpn scope link src 10.72.1.2 > metric 20 > 192.168.254.0/24 dev vpn-3b42d3c8 proto vpn scope link src 10.72.1.2 > metric 20 > 192.168.0.0/16 dev vpn-3b42d3c8 proto vpn scope link src 10.72.1.2 > metric 20 > 172.16.0.0/12 dev vpn-3b42d3c8 proto vpn scope link src 10.72.1.2 > metric 20 > 10.0.0.0/8 dev vpn-3b42d3c8 proto vpn scope link src 10.72.1.2 metric > 20 > > When I kill & restart .2, .254 loses routing info to not just .2 but also > .1. I need .1 and .2 to be exchanging routes with each other, as there will > be some VPNs that will only terminate on .1 and some that will only > terminate on .2 and I want to be able to route traffic between them. E.g. A > remote endpoint on .2 should be able to access a non-common/unique remote > endpoint on .1. In this example, it's 10.10.10.0/29. > > Below are my tests demonstrating > 1. The problem when both peers are importing from each other > 2. No problem when both peers aren't importing from each other > > All logs are taken from .254 (AS 65003). The immediate cause of the > problem is the "rejected by protocol" messages here, although I do not know > why the protocol feels like it must reject routes. > > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_1 > removed > [replaced] 10.0.0.0/8 via 10.72.1.1 on eth0 > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_1 < filtered out > 10.0.0.0/8 via 10.72.1.2 on eth0 > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_2 < rejected by > protocol 10.0.0.0/8 via 10.72.1.2 on eth0 > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_1 > removed > [replaced] 192.168.0.0/16 via 10.72.1.1 on eth0 > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_1 < filtered out > 192.168.0.0/16 via 10.72.1.2 on eth0 > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_2 < rejected by > protocol 192.168.0.0/16 via 10.72.1.2 on eth0 > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_1 > removed > [replaced] 192.168.2.0/24 via 10.72.1.1 on eth0 > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_1 < filtered out > 192.168.2.0/24 via 10.72.1.2 on eth0 > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_2 < rejected by > protocol 192.168.2.0/24 via 10.72.1.2 on eth0 > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_1 > removed > [replaced] 192.168.3.0/24 via 10.72.1.1 on eth0 > > Full tests: > > #### #### #### Where .1 and .2 import each others routes ### ### ### > > ### Start bird > > Jan 16 13:01:08 lanrouter daemon.debug bird: AS65003_1: Initializing > Jan 16 13:01:08 lanrouter daemon.debug bird: AS65003_2: Initializing > Jan 16 13:01:08 lanrouter daemon.info bird: Chosen router ID 10.72.1.254 > according to interface eth0 > Jan 16 13:01:08 lanrouter daemon.debug bird: AS65003_1: Starting > Jan 16 13:01:08 lanrouter daemon.debug bird: AS65003_1: State changed to > start > Jan 16 13:01:08 lanrouter daemon.debug bird: AS65003_2: Starting > Jan 16 13:01:08 lanrouter daemon.debug bird: AS65003_2: State changed to > start > Jan 16 13:01:08 lanrouter daemon.info bird: Started > Jan 16 13:01:08 lanrouter daemon.debug bird: AS65003_2: Started > Jan 16 13:01:08 lanrouter daemon.debug bird: AS65003_2: Connect delayed by > 5 seconds > Jan 16 13:01:08 lanrouter daemon.debug bird: AS65003_1: Started > Jan 16 13:01:08 lanrouter daemon.debug bird: AS65003_1: Connect delayed by > 5 seconds > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_2: Incoming > connection from 10.72.1.2 (port 58289) accepted > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_2: Sending > OPEN(ver=4,as=65003,hold=240,id=0a4801fe) > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_1: Incoming > connection from 10.72.1.1 (port 58374) accepted > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_2: Got > OPEN(as=65002,hold=240,id=0a480102) > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_2: Got KEEPALIVE > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_2: BGP session > established > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_2: Connected to table > master > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_2: State changed to > feed > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_1: Sending > OPEN(ver=4,as=65003,hold=240,id=0a4801fe) > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_2: Sending KEEPALIVE > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_2 < filtered out > 0.0.0.0/0 via 10.72.1.1 on eth0 > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_2: Got End-of-RIB > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_1: Got > OPEN(as=65001,hold=240,id=027e8ddb) > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_1: Got KEEPALIVE > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_1: BGP session > established > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_1: Connected to table > master > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_1: State changed to > feed > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_1: Sending KEEPALIVE > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_1 < filtered out > 0.0.0.0/0 via 10.72.1.1 on eth0 > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_1 < filtered out > 10.0.0.0/8 via 10.72.1.2 on eth0 > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_1 < filtered out > 10.72.1.0/24 dev eth0 > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_1 < filtered out > 192.168.0.0/16 via 10.72.1.2 on eth0 > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_1 < filtered out > 192.168.2.0/24 via 10.72.1.2 on eth0 > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_1 < filtered out > 192.168.3.0/24 via 10.72.1.2 on eth0 > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_1 < added > 192.168.18.0/24 dev breth1 > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_1 < filtered out > 192.168.19.0/24 dev eth2 > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_2 < filtered out > 172.16.0.0/12 via 10.72.1.1 on eth0 > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_1 < rejected by > protocol 172.16.0.0/12 via 10.72.1.1 on eth0 > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_1: Got UPDATE > Jan 16 13:01:12 lanrouter daemon.debug bird: AS65003_1: Got End-of-RIB > > ### .1 and .2 connected. bird knows about both. Correct linux routes > installed: > > # ip route list proto bird > 10.10.10.0/29 via 10.72.1.1 dev eth0 > 192.168.3.0/24 via 10.72.1.1 dev eth0 > 192.168.2.0/24 via 10.72.1.1 dev eth0 > 192.168.254.0/24 via 10.72.1.1 dev eth0 > 192.168.0.0/16 via 10.72.1.1 dev eth0 > 172.16.0.0/12 via 10.72.1.1 dev eth0 > 10.0.0.0/8 via 10.72.1.1 dev eth0 > > # birdcl show route all > BIRD 1.4.5 ready. > 0.0.0.0/0 via 10.72.1.1 on eth0 [kernel1 13:01:09] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 10.72.1.254 > 10.0.0.0/8 via 10.72.1.1 on eth0 [AS65003_1 13:01:12] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > via 10.72.1.2 on eth0 [AS65003_2 13:01:12] (100) > [AS65002i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65002 > BGP.next_hop: 10.72.1.2 > BGP.local_pref: 100 > 10.10.10.0/29 via 10.72.1.1 on eth0 [AS65003_1 13:01:12] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > 10.72.1.0/24 dev eth0 [kernel1 13:01:09] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 10.72.1.254 > 192.168.0.0/16 via 10.72.1.1 on eth0 [AS65003_1 13:01:12] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > via 10.72.1.2 on eth0 [AS65003_2 13:01:12] (100) > [AS65002i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65002 > BGP.next_hop: 10.72.1.2 > BGP.local_pref: 100 > 192.168.2.0/24 via 10.72.1.1 on eth0 [AS65003_1 13:01:12] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > via 10.72.1.2 on eth0 [AS65003_2 13:01:12] (100) > [AS65002i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65002 > BGP.next_hop: 10.72.1.2 > BGP.local_pref: 100 > 192.168.3.0/24 via 10.72.1.1 on eth0 [AS65003_1 13:01:12] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > via 10.72.1.2 on eth0 [AS65003_2 13:01:12] (100) > [AS65002i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65002 > BGP.next_hop: 10.72.1.2 > BGP.local_pref: 100 > 192.168.18.0/24 dev breth1 [kernel1 13:01:09] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 192.168.18.253 > 192.168.19.0/24 dev eth2 [kernel1 13:01:09] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 192.168.19.253 > 192.168.254.0/24 via 10.72.1.1 on eth0 [AS65003_1 13:01:12] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > via 10.72.1.2 on eth0 [AS65003_2 13:01:12] (100) > [AS65002i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65002 > BGP.next_hop: 10.72.1.2 > BGP.local_pref: 100 > 172.16.0.0/12 via 10.72.1.1 on eth0 [AS65003_1 13:01:12] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > via 10.72.1.2 on eth0 [AS65003_2 13:01:12] (100) > [AS65002i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65002 > BGP.next_hop: 10.72.1.2 > BGP.local_pref: 100 > Jan 16 13:02:15 lanrouter daemon.debug bird: AS65003_1: Sending KEEPALIVE > Jan 16 13:02:18 lanrouter daemon.debug bird: AS65003_2: Got KEEPALIVE > Jan 16 13:02:22 lanrouter daemon.debug bird: AS65003_1: Got KEEPALIVE > Jan 16 13:02:27 lanrouter daemon.debug bird: AS65003_2: Sending KEEPALIVE > > ### I kill -9 bird on .2 > > Jan 16 13:02:38 lanrouter daemon.err bird: AS65003_2: Received: > Administrative shutdown > Jan 16 13:02:38 lanrouter daemon.debug bird: AS65003_2: BGP session closed > Jan 16 13:02:38 lanrouter daemon.debug bird: AS65003_2: State changed to > stop > Jan 16 13:02:38 lanrouter daemon.debug bird: AS65003_2 > removed > 10.0.0.0/8 via 10.72.1.2 on eth0 > Jan 16 13:02:38 lanrouter daemon.debug bird: AS65003_2 > removed > 192.168.0.0/16 via 10.72.1.2 on eth0 > Jan 16 13:02:38 lanrouter daemon.debug bird: AS65003_2 > removed > 192.168.2.0/24 via 10.72.1.2 on eth0 > Jan 16 13:02:38 lanrouter daemon.debug bird: AS65003_2 > removed > 192.168.3.0/24 via 10.72.1.2 on eth0 > Jan 16 13:02:38 lanrouter daemon.debug bird: AS65003_2 > removed > 192.168.254.0/24 via 10.72.1.2 on eth0 > Jan 16 13:02:38 lanrouter daemon.debug bird: AS65003_2 > removed > 172.16.0.0/12 via 10.72.1.2 on eth0 > Jan 16 13:02:38 lanrouter daemon.debug bird: AS65003_2: Down > Jan 16 13:02:38 lanrouter daemon.debug bird: AS65003_2: State changed to > down > > ### bird internally still knows about the routes on .1 > > # birdcl show route all > BIRD 1.4.5 ready. > 0.0.0.0/0 via 10.72.1.1 on eth0 [kernel1 13:01:08] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 10.72.1.254 > 10.0.0.0/8 via 10.72.1.1 on eth0 [AS65003_1 13:01:11] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > 10.10.10.0/29 via 10.72.1.1 on eth0 [AS65003_1 13:01:11] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > 10.72.1.0/24 dev eth0 [kernel1 13:01:08] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 10.72.1.254 > 192.168.0.0/16 via 10.72.1.1 on eth0 [AS65003_1 13:01:11] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > 192.168.2.0/24 via 10.72.1.1 on eth0 [AS65003_1 13:01:11] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > 192.168.3.0/24 via 10.72.1.1 on eth0 [AS65003_1 13:01:11] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > 192.168.18.0/24 dev breth1 [kernel1 13:01:08] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 192.168.18.253 > 192.168.19.0/24 dev eth2 [kernel1 13:01:08] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 192.168.19.253 > 192.168.254.0/24 via 10.72.1.1 on eth0 [AS65003_1 13:01:11] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > 172.16.0.0/12 via 10.72.1.1 on eth0 [AS65003_1 13:01:11] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > > ### I restart bird on .2 > > Jan 16 13:02:42 lanrouter daemon.debug bird: AS65003_2: Connecting to > 10.72.1.2 from local address 10.72.1.254 > Jan 16 13:02:42 lanrouter daemon.debug bird: AS65003_2: Connected > Jan 16 13:02:42 lanrouter daemon.debug bird: AS65003_2: Sending > OPEN(ver=4,as=65003,hold=240,id=0a4801fe) > Jan 16 13:02:42 lanrouter daemon.debug bird: AS65003_2: Got > OPEN(as=65002,hold=240,id=0a480102) > Jan 16 13:02:42 lanrouter daemon.debug bird: AS65003_2: Sending KEEPALIVE > Jan 16 13:02:42 lanrouter daemon.debug bird: AS65003_2: Got KEEPALIVE > Jan 16 13:02:42 lanrouter daemon.debug bird: AS65003_2: BGP session > established > Jan 16 13:02:42 lanrouter daemon.debug bird: AS65003_2: Connected to table > master > Jan 16 13:02:42 lanrouter daemon.debug bird: AS65003_2: State changed to > feed > Jan 16 13:02:42 lanrouter daemon.debug bird: AS65003_2 < filtered out > 0.0.0.0/0 via 10.72.1.1 on eth0 > Jan 16 13:02:42 lanrouter daemon.debug bird: AS65003_2 < filtered out > 10.0.0.0/8 via 10.72.1.1 on eth0 > Jan 16 13:02:42 lanrouter daemon.debug bird: AS65003_2 < filtered out > 10.10.10.0/29 via 10.72.1.1 on eth0 > Jan 16 13:02:43 lanrouter daemon.debug bird: AS65003_2: Got UPDATE > Jan 16 13:02:43 lanrouter daemon.debug bird: AS65003_2 > added 10.0.0.0/8 > via 10.72.1.2 on eth0 > Jan 16 13:02:43 lanrouter daemon.debug bird: AS65003_2 > added > 192.168.0.0/16 via 10.72.1.2 on eth0 > Jan 16 13:02:43 lanrouter daemon.debug bird: AS65003_2 > added > 192.168.2.0/24 via 10.72.1.2 on eth0 > Jan 16 13:02:43 lanrouter daemon.debug bird: AS65003_2 > added > 192.168.3.0/24 via 10.72.1.2 on eth0 > Jan 16 13:02:43 lanrouter daemon.debug bird: AS65003_2 > added > 192.168.254.0/24 via 10.72.1.2 on eth0 > Jan 16 13:02:43 lanrouter daemon.debug bird: AS65003_2 > added > 172.16.0.0/12 via 10.72.1.2 on eth0 > Jan 16 13:02:43 lanrouter daemon.debug bird: AS65003_2: Got UPDATE > Jan 16 13:02:43 lanrouter daemon.debug bird: AS65003_2: Got End-of-RIB > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_1: Got UPDATE > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_1 > removed > [replaced] 10.0.0.0/8 via 10.72.1.1 on eth0 > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_1 < filtered out > 10.0.0.0/8 via 10.72.1.2 on eth0 > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_2 < rejected by > protocol 10.0.0.0/8 via 10.72.1.2 on eth0 > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_1 > removed > [replaced] 192.168.0.0/16 via 10.72.1.1 on eth0 > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_1 < filtered out > 192.168.0.0/16 via 10.72.1.2 on eth0 > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_2 < rejected by > protocol 192.168.0.0/16 via 10.72.1.2 on eth0 > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_1 > removed > [replaced] 192.168.2.0/24 via 10.72.1.1 on eth0 > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_1 < filtered out > 192.168.2.0/24 via 10.72.1.2 on eth0 > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_2 < rejected by > protocol 192.168.2.0/24 via 10.72.1.2 on eth0 > Jan 16 13:02:44 lanrouter daemon.debug bird: AS65003_1 > removed > [replaced] 192.168.3.0/24 via 10.72.1.1 on eth0 > > ### Bird internally now lost all routes it used to know about on .1, and > hasn’t picked up any routes from .2 > ### Except for the one route that .1 & .2 don’t have in common ( > 10.10.10.0/29). > > # birdcl show route all > BIRD 1.4.5 ready. > 0.0.0.0/0 via 10.72.1.1 on eth0 [kernel1 13:01:09] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 10.72.1.254 > 10.10.10.0/29 via 10.72.1.1 on eth0 [AS65003_1 13:01:12] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > 10.72.1.0/24 dev eth0 [kernel1 13:01:09] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 10.72.1.254 > 192.168.18.0/24 dev breth1 [kernel1 13:01:09] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 192.168.18.253 > 192.168.19.0/24 dev eth2 [kernel1 13:01:09] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 192.168.19.253 > > # ip route list proto bird > 10.10.10.0/29 via 10.72.1.1 dev eth0 > > > > ### Config on .1 (AS 65001): > > filter kernel_import1 { > accept; > } > filter kernel_export1 { > accept; > } > filter export_AS65001_1 { > if ifname ~ "ipsec0" then { > bgp_local_pref=1000-krt_metric; > accept; > } > if krt_source = ipp_vpn then { > bgp_local_pref=1000-krt_metric; > accept; > } > reject; > } > filter export_AS65001_2 { > if ifname ~ "ipsec0" then { > bgp_local_pref=1000-krt_metric; > accept; > } > if krt_source = ipp_vpn then { > bgp_local_pref=1000-krt_metric; > accept; > } > reject; > } > protocol kernel kernel1 { > persist; > scan time 20; > export filter kernel_export1; > import filter kernel_import1; > learn; > } > protocol device device1 { > scan time 10; > } > protocol bgp AS65001_1 { > local as 65001; > neighbor 10.72.1.254 as 65003; > import all; > export filter export_AS65001_1; > } > protocol bgp AS65001_2 { > local as 65001; > neighbor 10.72.1.2 as 65002; > import all; > export filter export_AS65001_2; > } > > ### Config on .2 (AS 65002): > > filter kernel_import1 { > accept; > } > filter kernel_export1 { > accept; > } > filter export_AS65002_1 { > if ifname ~ "ipsec0" then { > bgp_local_pref=1000-krt_metric; > accept; > } > if krt_source = ipp_vpn then { > bgp_local_pref=1000-krt_metric; > accept; > } > reject; > } > filter export_AS65002_2 { > if ifname ~ "ipsec0" then { > bgp_local_pref=1000-krt_metric; > accept; > } > if krt_source = ipp_vpn then { > bgp_local_pref=1000-krt_metric; > accept; > } > reject; > } > protocol kernel kernel1 { > persist; > scan time 20; > export filter kernel_export1; > import filter kernel_import1; > learn; > } > protocol device device1 { > scan time 10; > } > protocol bgp AS65002_1 { > local as 65002; > neighbor 10.72.1.254 as 65003; > import all; > export filter export_AS65002_1; > } > protocol bgp AS65002_2 { > local as 65002; > neighbor 10.72.1.1 as 65001; > import all; > export filter export_AS65002_2; > } > > ### Config on .254 (AS 65003): > > filter kernel_import1 { > accept; > } > filter kernel_export1 { > accept; > } > > filter lans { > if ifname ~ "breth1" then { > accept; > } > reject; > } > > protocol kernel kernel1 { > persist; > scan time 20; > export filter kernel_export1; > import filter kernel_import1; > learn; > } > protocol device device1 { > scan time 10; > } > protocol bgp AS65003_1 { > debug all; > local as 65003; > neighbor 10.72.1.1 as 65001; > import all; > export filter lans; > } > protocol bgp AS65003_2 { > debug all; > local as 65003; > neighbor 10.72.1.2 as 65002; > import all; > export filter lans; > } > > #### #### #### Where .1 and .2 do not import each others routes ### ### ### > > ### Start bird > > Jan 16 13:11:40 lanrouter daemon.debug bird: AS65003_1: Initializing > Jan 16 13:11:40 lanrouter daemon.debug bird: AS65003_2: Initializing > Jan 16 13:11:40 lanrouter daemon.info bird: Chosen router ID 10.72.1.254 > according to interface eth0 > Jan 16 13:11:40 lanrouter daemon.debug bird: AS65003_1: Starting > Jan 16 13:11:40 lanrouter daemon.debug bird: AS65003_1: State changed to > start > Jan 16 13:11:40 lanrouter daemon.debug bird: AS65003_2: Starting > Jan 16 13:11:40 lanrouter daemon.debug bird: AS65003_2: State changed to > start > Jan 16 13:11:40 lanrouter daemon.info bird: Started > Jan 16 13:11:40 lanrouter daemon.debug bird: AS65003_2: Started > Jan 16 13:11:40 lanrouter daemon.debug bird: AS65003_2: Connect delayed by > 5 seconds > Jan 16 13:11:40 lanrouter daemon.debug bird: AS65003_1: Started > Jan 16 13:11:40 lanrouter daemon.debug bird: AS65003_1: Connect delayed by > 5 seconds > Jan 16 13:11:42 lanrouter daemon.debug bird: AS65003_2: Incoming > connection from 10.72.1.2 (port 41464) accepted > Jan 16 13:11:42 lanrouter daemon.debug bird: AS65003_2: Sending > OPEN(ver=4,as=65003,hold=240,id=0a4801fe) > Jan 16 13:11:42 lanrouter daemon.debug bird: AS65003_2: Got > OPEN(as=65002,hold=240,id=0a480102) > Jan 16 13:11:42 lanrouter daemon.debug bird: AS65003_2: Sending KEEPALIVE > Jan 16 13:11:42 lanrouter daemon.debug bird: AS65003_2: Got KEEPALIVE > Jan 16 13:11:42 lanrouter daemon.debug bird: AS65003_2: BGP session > established > Jan 16 13:11:42 lanrouter daemon.debug bird: AS65003_2: Connected to table > master > Jan 16 13:11:42 lanrouter daemon.debug bird: AS65003_2: State changed to > feed > Jan 16 13:11:42 lanrouter daemon.debug bird: AS65003_2 < filtered out > 0.0.0.0/0 via 10.72.1.1 on eth0 > Jan 16 13:11:42 lanrouter daemon.debug bird: AS65003_2 < filtered out > 10.72.1.0/24 dev eth0 > Jan 16 13:11:42 lanrouter daemon.debug bird: AS65003_2 < added > 192.168.18.0/24 dev breth1 > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1: Incoming > connection from 10.72.1.1 (port 44841) accepted > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1: Sending > OPEN(ver=4,as=65003,hold=240,id=0a4801fe) > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1: Got > OPEN(as=65001,hold=240,id=027e8ddb) > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1: Sending KEEPALIVE > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1: Got KEEPALIVE > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1: BGP session > established > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1: Connected to table > master > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1: State changed to > feed > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1 < filtered out > 0.0.0.0/0 via 10.72.1.1 on eth0 > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1 < filtered out > 10.0.0.0/8 via 10.72.1.2 on eth0 > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1 < filtered out > 10.72.1.0/24 dev eth0 > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1 < filtered out > 192.168.0.0/16 via 10.72.1.2 on eth0 > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1 < filtered out > 192.168.2.0/24 via 10.72.1.2 on eth0 > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1 < filtered out > 192.168.3.0/24 via 10.72.1.2 on eth0 > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1 < added > 192.168.18.0/24 dev breth1 > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1 < filtered out > 192.168.19.0/24 dev eth2 > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1 < filtered out > 192.168.254.0/24 via 10.72.1.2 on eth0 > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1 < filtered out > 172.16.0.0/12 via 10.72.1.2 on eth0 > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1: State changed to up > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1: Sending UPDATE > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1: Sending End-of-RIB > Jan 16 13:11:44 lanrouter daemon.debug bird: AS65003_1: Got UPDATE > > > ### .1 and .2 connected. bird knows about both. Correct linux routes > installed: > > # ip route list proto bird > 10.10.10.0/29 via 10.72.1.1 dev eth0 > 192.168.3.0/24 via 10.72.1.1 dev eth0 > 192.168.2.0/24 via 10.72.1.1 dev eth0 > 192.168.254.0/24 via 10.72.1.1 dev eth0 > 192.168.0.0/16 via 10.72.1.1 dev eth0 > 172.16.0.0/12 via 10.72.1.1 dev eth0 > 10.0.0.0/8 via 10.72.1.1 dev eth0 > > # birdcl show route all > BIRD 1.4.5 ready. > 0.0.0.0/0 via 10.72.1.1 on eth0 [kernel1 13:11:40] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 10.72.1.254 > 10.0.0.0/8 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > via 10.72.1.2 on eth0 [AS65003_2 13:11:42] (100) > [AS65002i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65002 > BGP.next_hop: 10.72.1.2 > BGP.local_pref: 100 > 10.10.10.0/29 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > 10.72.1.0/24 dev eth0 [kernel1 13:11:40] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 10.72.1.254 > 192.168.0.0/16 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > via 10.72.1.2 on eth0 [AS65003_2 13:11:42] (100) > [AS65002i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65002 > BGP.next_hop: 10.72.1.2 > BGP.local_pref: 100 > 192.168.2.0/24 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > via 10.72.1.2 on eth0 [AS65003_2 13:11:42] (100) > [AS65002i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65002 > BGP.next_hop: 10.72.1.2 > BGP.local_pref: 100 > 192.168.3.0/24 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > via 10.72.1.2 on eth0 [AS65003_2 13:11:42] (100) > [AS65002i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65002 > BGP.next_hop: 10.72.1.2 > BGP.local_pref: 100 > 192.168.18.0/24 dev breth1 [kernel1 13:11:40] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 192.168.18.253 > 192.168.19.0/24 dev eth2 [kernel1 13:11:40] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 192.168.19.253 > 192.168.254.0/24 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > via 10.72.1.2 on eth0 [AS65003_2 13:11:42] (100) > [AS65002i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65002 > BGP.next_hop: 10.72.1.2 > BGP.local_pref: 100 > 172.16.0.0/12 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > via 10.72.1.2 on eth0 [AS65003_2 13:11:42] (100) > [AS65002i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65002 > BGP.next_hop: 10.72.1.2 > BGP.local_pref: 100 > > Jan 16 13:12:44 lanrouter daemon.debug bird: AS65003_2: Got KEEPALIVE > Jan 16 13:12:49 lanrouter daemon.debug bird: AS65003_2: Sending KEEPALIVE > Jan 16 13:12:49 lanrouter daemon.debug bird: AS65003_1: Sending KEEPALIVE > Jan 16 13:12:50 lanrouter daemon.debug bird: AS65003_1: Got KEEPALIVE > > ### I kill -9 bird on .2 > > Jan 16 13:13:06 lanrouter daemon.debug bird: AS65003_2: Connection closed > Jan 16 13:13:06 lanrouter daemon.debug bird: AS65003_2: BGP session closed > Jan 16 13:13:06 lanrouter daemon.debug bird: AS65003_2: State changed to > stop > Jan 16 13:13:06 lanrouter daemon.debug bird: AS65003_2 > removed > 10.0.0.0/8 via 10.72.1.2 on eth0 > Jan 16 13:13:06 lanrouter daemon.debug bird: AS65003_2 > removed > 192.168.0.0/16 via 10.72.1.2 on eth0 > Jan 16 13:13:06 lanrouter daemon.debug bird: AS65003_2 > removed > 192.168.2.0/24 via 10.72.1.2 on eth0 > Jan 16 13:13:06 lanrouter daemon.debug bird: AS65003_2 > removed > 192.168.3.0/24 via 10.72.1.2 on eth0 > Jan 16 13:13:06 lanrouter daemon.debug bird: AS65003_2 > removed > 192.168.254.0/24 via 10.72.1.2 on eth0 > Jan 16 13:13:06 lanrouter daemon.debug bird: AS65003_2 > removed > 172.16.0.0/12 via 10.72.1.2 on eth0 > Jan 16 13:13:06 lanrouter daemon.debug bird: AS65003_2: Down > Jan 16 13:13:06 lanrouter daemon.debug bird: AS65003_2: State changed to > down > > ### bird internally still knows about the routes on .1 > > # birdcl show route all > BIRD 1.4.5 ready. > 0.0.0.0/0 via 10.72.1.1 on eth0 [kernel1 13:11:40] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 10.72.1.254 > 10.0.0.0/8 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > 10.10.10.0/29 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > 10.72.1.0/24 dev eth0 [kernel1 13:11:40] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 10.72.1.254 > 192.168.0.0/16 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > 192.168.2.0/24 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > 192.168.3.0/24 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > 192.168.18.0/24 dev breth1 [kernel1 13:11:40] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 192.168.18.253 > 192.168.19.0/24 dev eth2 [kernel1 13:11:40] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 192.168.19.253 > 192.168.254.0/24 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > 172.16.0.0/12 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > > > ### I restart bird on .2 > > Jan 16 13:13:31 lanrouter daemon.debug bird: AS65003_2: Connecting to > 10.72.1.2 from local address 10.72.1.254 > Jan 16 13:13:31 lanrouter daemon.debug bird: AS65003_2: Connected > Jan 16 13:13:31 lanrouter daemon.debug bird: AS65003_2: Sending > OPEN(ver=4,as=65003,hold=240,id=0a4801fe) > Jan 16 13:13:31 lanrouter daemon.debug bird: AS65003_2: Got > OPEN(as=65002,hold=240,id=0a480102) > Jan 16 13:13:31 lanrouter daemon.debug bird: AS65003_2: Sending KEEPALIVE > Jan 16 13:13:31 lanrouter daemon.debug bird: AS65003_2: Got KEEPALIVE > Jan 16 13:13:31 lanrouter daemon.debug bird: AS65003_2: BGP session > established > Jan 16 13:13:31 lanrouter daemon.debug bird: AS65003_2: Connected to table > master > Jan 16 13:13:31 lanrouter daemon.debug bird: AS65003_2: State changed to > feed > Jan 16 13:13:31 lanrouter daemon.debug bird: AS65003_2 < filtered out > 0.0.0.0/0 via 10.72.1.1 on eth0 > Jan 16 13:13:31 lanrouter daemon.debug bird: AS65003_2 < filtered out > 10.0.0.0/8 via 10.72.1.1 on eth0 > Jan 16 13:13:31 lanrouter daemon.debug bird: AS65003_2 < filtered out > 10.10.10.0/29 via 10.72.1.1 on eth0 > > > ### Bird internally now lost all routes it used to know about on .1, and > hasn’t picked up any routes from .2 > ### Except for the one route that .1 & .2 don’t have in common ( > 10.10.10.0/29). > > # birdcl show route all > BIRD 1.4.5 ready. > 0.0.0.0/0 via 10.72.1.1 on eth0 [kernel1 13:11:40] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 10.72.1.254 > 10.0.0.0/8 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > via 10.72.1.2 on eth0 [AS65003_2 13:13:31] (100) > [AS65002i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65002 > BGP.next_hop: 10.72.1.2 > BGP.local_pref: 100 > 10.10.10.0/29 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > 10.72.1.0/24 dev eth0 [kernel1 13:11:40] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 10.72.1.254 > 192.168.0.0/16 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > via 10.72.1.2 on eth0 [AS65003_2 13:13:31] (100) > [AS65002i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65002 > BGP.next_hop: 10.72.1.2 > BGP.local_pref: 100 > 192.168.2.0/24 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > via 10.72.1.2 on eth0 [AS65003_2 13:13:31] (100) > [AS65002i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65002 > BGP.next_hop: 10.72.1.2 > BGP.local_pref: 100 > 192.168.3.0/24 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > via 10.72.1.2 on eth0 [AS65003_2 13:13:31] (100) > [AS65002i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65002 > BGP.next_hop: 10.72.1.2 > BGP.local_pref: 100 > 192.168.18.0/24 dev breth1 [kernel1 13:11:40] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 192.168.18.253 > 192.168.19.0/24 dev eth2 [kernel1 13:11:40] * (10) > Type: inherit unicast univ > Kernel.source: 3 > Kernel.metric: 0 > Kernel.prefsrc: 192.168.19.253 > 192.168.254.0/24 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > via 10.72.1.2 on eth0 [AS65003_2 13:13:31] (100) > [AS65002i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65002 > BGP.next_hop: 10.72.1.2 > BGP.local_pref: 100 > 172.16.0.0/12 via 10.72.1.1 on eth0 [AS65003_1 13:11:44] * (100) > [AS65001i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65001 > BGP.next_hop: 10.72.1.1 > BGP.local_pref: 100 > via 10.72.1.2 on eth0 [AS65003_2 13:13:31] (100) > [AS65002i] > Type: BGP unicast univ > BGP.origin: IGP > BGP.as_path: 65002 > BGP.next_hop: 10.72.1.2 > BGP.local_pref: 100 > > # ip route list proto bird > 10.10.10.0/29 via 10.72.1.1 dev eth0 > 192.168.3.0/24 via 10.72.1.1 dev eth0 > 192.168.2.0/24 via 10.72.1.1 dev eth0 > 192.168.254.0/24 via 10.72.1.1 dev eth0 > 192.168.0.0/16 via 10.72.1.1 dev eth0 > 172.16.0.0/12 via 10.72.1.1 dev eth0 > 10.0.0.0/8 via 10.72.1.1 dev eth0 > > > > > ### Config on .1 (AS 65001): > > filter kernel_import1 { > accept; > } > filter kernel_export1 { > accept; > } > filter export_AS65001_1 { > if ifname ~ "ipsec0" then { > bgp_local_pref=1000-krt_metric; > accept; > } > if krt_source = ipp_vpn then { > bgp_local_pref=1000-krt_metric; > accept; > } > reject; > } > filter export_AS65001_2 { > if ifname ~ "ipsec0" then { > bgp_local_pref=1000-krt_metric; > accept; > } > if krt_source = ipp_vpn then { > bgp_local_pref=1000-krt_metric; > accept; > } > reject; > } > protocol kernel kernel1 { > persist; > scan time 20; > export filter kernel_export1; > import filter kernel_import1; > learn; > } > protocol device device1 { > scan time 10; > } > protocol bgp AS65001_1 { > local as 65001; > neighbor 10.72.1.254 as 65003; > import all; > export filter export_AS65001_1; > } > protocol bgp AS65001_2 { > local as 65001; > neighbor 10.72.1.2 as 65002; > import none; > export filter export_AS65001_2; > } > > ### Config on .2 (AS 65002): > > filter kernel_import1 { > accept; > } > filter kernel_export1 { > accept; > } > filter export_AS65002_1 { > if ifname ~ "ipsec0" then { > bgp_local_pref=1000-krt_metric; > accept; > } > if krt_source = ipp_vpn then { > bgp_local_pref=1000-krt_metric; > accept; > } > reject; > } > filter export_AS65002_2 { > if ifname ~ "ipsec0" then { > bgp_local_pref=1000-krt_metric; > accept; > } > if krt_source = ipp_vpn then { > bgp_local_pref=1000-krt_metric; > accept; > } > reject; > } > protocol kernel kernel1 { > persist; > scan time 20; > export filter kernel_export1; > import filter kernel_import1; > learn; > } > protocol device device1 { > scan time 10; > } > protocol bgp AS65002_1 { > local as 65002; > neighbor 10.72.1.254 as 65003; > import all; > export filter export_AS65002_1; > } > protocol bgp AS65002_2 { > local as 65002; > neighbor 10.72.1.1 as 65001; > import none; > export filter export_AS65002_2; > } > > ### Config on .254 (AS 65003): > > filter kernel_import1 { > accept; > } > filter kernel_export1 { > accept; > } > > filter lans { > if ifname ~ "breth1" then { > accept; > } > reject; > } > > protocol kernel kernel1 { > persist; > scan time 20; > export filter kernel_export1; > import filter kernel_import1; > learn; > } > protocol device device1 { > scan time 10; > } > protocol bgp AS65003_1 { > debug all; > local as 65003; > neighbor 10.72.1.1 as 65001; > import all; > export filter lans; > } > protocol bgp AS65003_2 { > debug all; > local as 65003; > neighbor 10.72.1.2 as 65002; > import all; > export filter lans; > } > > Is this a bug? Is it intentional and I need to be using a different > approach? > > Kind Regards, > > Mike >

1 0

Re: Missing archives on the mailing list
by Ondrej Filip 20 Jan '15

20 Jan '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 20.1.2015 10:07, Baptiste Jonglez wrote: > Hi, > > The archives of the mailing seem to have stopped in October: > I apologize. I will be fixed soon. Ondrej > http://bird.network.cz/pipermail/bird-users/ > > Thanks, Baptiste > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJUviHzAAoJED82D4RIDoWPr10P/1xb8VHxuISUGfTFlma5z/2C jvoxeHlI/aVAigp9xCCnm47E9EnCqz/73jqEqSqnN7ZMsXHNN06HffVo+pBa6G8z SZgfmYtegM2W+JKcFOctrtNJ+W0oAlie/uiHcP4a1z+lMohV2+egIACSa4bi6uUg srOWq43jD6ms0OaboW9TR1U1sk/ERp12zZQIWiDOLHf+U6iCMU+pWi6+GahisNps qoK7oQ+sVIvoxScCitwkUUJbr75tt9AZ+EgD5hcjeXL6ZmMduDtv313aE/QXMeUC uhCVjAEQ0dsCnqdWfjgXLloq+vL+yLTKitO5ghP3JSwpNYW1wZGYdZA8BAzOgvYM blCjuc9eDymHjw4lBzuvrPwTBg99o3TFgTw6aAucDxkorspgPfyuVlSqevrWfrSy ksl3Knp/YNmgQCYKbXDuT1kvMrgHF2u/5HAaSyWaKIIZN6GJLTXvOkr+uKI75/+a R5OEay9+zUB8lZsBr4cuAbIuUymvKLl84GkTVLmJ5I5rHCYjxvMZWEILqiqDM9IR Kc86Dc4PpmL7g/SB4lBza+aU+TvU7/N23DJiGi/H02FccoY6X1M5Z+PPgKliL6WR v+qaRUk6nyIYahYPvIymIDbN+gsRCyxkv7H7sUXh9KvFVO9KYfd3IihG6anGNTgR Ko4C+mOePP/LuIXTWf5w =kkZW -----END PGP SIGNATURE-----

2 2

IPv6 BGP segfault with bird 1.4.5
by Matthias Schiffer 20 Jan '15

20 Jan '15

Hi, recently bird6 has been crashing quite often (several times a week) on one of our systems (I don't know why only one of two systems with very similar config is affected). Our config contains ~50 BGP peerings, the number of exchanged routes is about 100 in total. I was able to get a core of the crash, it can be found at http://home.universe-factory.net/neoraider/bird6.core I've put the corresponding binary (with debug information) at http://home.universe-factory.net/neoraider/bird6 bird was built on Arch Linux with GCC 4.9.2. Please let me know if you need any more information... Thanks in advance, Matthias

3 5

BGP Link Bandwidth Extended Community?
by dave seddon 12 Jan '15

12 Jan '15

Greetings, Sorry for the dumb question, but I'm trying to work out how to set the extended communities. Anybody know how to set the Link Bandwidth Extended communities? As defined here: https://tools.ietf.org/html/draft-ietf-idr-link-bandwidth-04 Where we're hoping to do this: http://www.juniper.net/techpubs/en_US/junos14.1/topics/topic-map/bgp-multip… Basically, need to set the community to: " This document defines a specific application of the two-octet AS specific extended community. IANA is requested to assign a sub- type value of 0x04 for the link bandwidth extended community. Name Value ---- ----- non-transitive Link Bandwidth Ext. Community 0x4004 " I've been reading at the data types section of the bird doco ( http://bird.network.cz/?get_doc&f=bird-5.html ), and trying different way for a while now, and just don't seem to be able to get it right. e.g. export filter { bgp_ext_community.add((4, 65300, 999)); accept; }; ( Mostly stolen from this nice example: http://bird.mpls.in/projects/mpls-bird/wiki/Bird_pe/2 ) On a juniper this is a config to apply a link bandwidth community: ------------------------- protocols { bgp { group CORE { type internal; description "core full mesh"; passive; log-updown; family inet { unicast; } family inet-vpn { unicast; } export [ beer ]; peer-as 65300; local-as 65300; multipath; neighbor 10.1.0.2 { description bird1; local-address 10.1.0.1; } } } policy-options { policy-statement beer { from { route-filter 9.9.9.9/32 exact; } then { community add beer; accept; } } community beer members bandwidth:65300:9999; } ------------------------- So the community "beer" has this value "bandwidth" which the junos knows is 0x04. In bird it looks like this: ------------------------- bird> show route 9.9.9.9/32 all 9.9.9.9/32 via 10.1.0.1 on VLAN100 [core 17:38:44] * (100/0) [i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: BGP.next_hop: 10.1.0.1 BGP.local_pref: 100 BGP.ext_community: (unknown 0x4, 65300, 1176255488) ------------------------- When tcpdump-ed the update has the values: 0x0004 ff14 461c3c00 Attached is the pcap of the bgp update with the community value set via the juniper. Kind regards, Dave

2 5