- Bird-users - Mailing Lists

bird4 scope link
by Amadeus Alfa 26 Feb '15

26 Feb '15

Hello list, in bird6 I can use the following configuration snippet with IPv6 link local addresses: protocol bgp xxx { neighbor fe80::2ff:c0bb:fe00:1234 % '784648196' as 1234; }; ('784648196' is the interface name) My question is now: How can I use IPv4 scope link addresses in bird4? When I use the line below I get an error: "Link-local address and interface scope must be used together" protocol bgp xxx { neighbor 169.254.0.1 % '784648196' as 1234; }; Thanks, Amadeus

2 4

Bird6 freeze under high load
by Baptiste Jonglez 24 Feb '15

24 Feb '15

Hi, We are experiencing regular "freezes" of bird6 on a BGP router. When this happens, bird6 maxes out a CPU for several minutes. If a command is run in birdc6 during such a freeze, the command hangs, and the result is only returned when birdc6 has stopped using the CPU. Note that this also applies to "cheap" commands like "show protocols", which usually complete instantly (both with bird, and with bird6 in non-freeze conditions). Sometimes (but not always), the non-responsiveness of bird6 causes all BGP sessions to drop, which is really annoying on a full-view BGP router. The freezes happen at random, but seem to happen more frequently when the router is under load (typically, at peak time, each CPU spends ~20% forwarding packets, on a 4-core box). The BGP setup is made of multiple transit and peerings, on multiple VLANs (some BGP neighbours share the same VLAN). The setup is pretty similar on bird and bird6, but only bird6 exhibits these freezes, bird works just fine. The box is running Debian wheezy on amd64, with bird from backports: 1.4.5-1~bpo70+1 Attached is the configuration, and two extracts of the logs when all BGP sessions dropped (with debug { states, interfaces, events }). All files are anonymised, but should be consistent. What do you think? It looks like bird6 gets stuck on some very expensive operation, which prevents it from doing anything else (include maintaining BGP sessions alive). Thanks, Baptiste

4 11

bird & BGP over L2TP
by Alexander Shikov 23 Feb '15

23 Feb '15

Hi All! I'd like to ask for help with some strange issue. I have a L2TP tunnel between two routers. Both routers are running on bird 1.4.5 and CentOS. L2TP tunnel has /30 addressing. For some strange reason bird does not install next-hop received by BGP: bird> show route 185.61.136.0/22 all 185.61.136.0/22 via 185.11.144.1 on ens1f0 [kiev_rtr 2015-02-12 11:13:17 from 185.61.139.5] * (100/?) [i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: BGP.next_hop: 185.61.139.5 BGP.local_pref: 100 185.61.139.5 is reachable: [root@tunnel etc]# ping 185.61.139.5 PING 185.61.139.5 (185.61.139.5) 56(84) bytes of data. 64 bytes from 185.61.139.5: icmp_seq=1 ttl=54 time=40.8 ms ^C --- 185.61.139.5 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 40.818/40.818/40.818/0.000 ms [root@tunnel etc]# arp -n 185.61.139.5 Address HWtype HWaddress Flags Mask Iface 185.61.139.5 ether aa:8a:10:bb:91:02 C tun1 Please advice. Thanks! -- Alexander Shikov Technical Staff, Digital Telecom IX

2 1

bird spawning huge amount of BGP traffic
by Simon Szustkowski 23 Feb '15

23 Feb '15

Hi, i am participating in a virtual network which is created for computer enthusiasts to gain knowledge about advanced routing protocols and stuff. It is called the DN42 (http://dn42.net) Currently i am establishing BGP sessions with the help of quagga, but since it is quite bloated for my small setup, i would like to migrate to bird. I have configured bird4 with the example config provided in the DN42 wiki (https://dn42.net/howto/Bird) (sorry about the HTML entities). The result is: Bird populates my routing table with all the correct routes, but spawns very huge amounts of BGP traffic. I ran it overnight accidentally, and it spawned over 70GB traffic on some interfaces, so these particular peers closed their VPN tunnels to me, which is understandable. I have created a minimal config by myself, which has the same result. However, peering with quagga works as expected, with all routes and little traffic. But since i want to go away from quagga, and use bird, i am asking you for advice in this problem. Where is my error, and how can i use bird in the correct way? Additional info: I am using bird on Debian Wheezy Stable, and the virtual connections to my peers are set up with OpenVPN. I use IPv4 only (currently). So i would be thankful for any help or suggestions how to fix the error. Thanks in advance, Simon --- Before printing this email, think if it is really needed.

3 2

list of networks as global definition
by Tapio Haapala 23 Feb '15

23 Feb '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I try make conf where all networks are at begin of sipmple format as possible at well commented. Rules & other thing use them later. Is it possible to do global network list as variable or are variables possible only in blocks? I tried put thist begind of conf define local_nets = [ 2a00:X::/32, #My networkA 2a00:X::/48 #My network B ]; define own_nets = [ 2a00:X::/32, #My network C at another place local_nets ]; And later at protocol block I tried use them like export filter { if (net ~ own_nets) then accept; }; Clearly this is not way to do it because I get syntax error at that first line :) I can make function what is something like this: function is_local_net() prefix set local_nets; { local_nets = [ 2a00:X::/32, #My networkA 2a00:X::/48 #My network B ]; if net ~ local_nets then return false; return true; } but then I have "code" at my conf section of config file. and it hurts my OCD, ADHD or what ever :) So is it possible to do prefix list definitions as global? - -- F-Solutions Oy Tapio Haapala PL7, 90571 Oulu GSM 0400 998371 Skype burner- IRC Burner@ircnet -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (MingW32) iQEcBAEBAgAGBQJU4HzSAAoJECSUPJ4T/HZPo48IAIY9qdGlLOIhGtR+1/a8fqYC HU5qMYkc2UtL3MAz3zlmNbDn1/HeUQRbic/Q7zI5TSQqtMFBINSVTbAA15Le68te JRANQm9TNokzYZ5us3uj+2teyQoz8+f8Iq2Cro9bOjsaQQKRjLw05tqYwPx70XqX PeKBsrfjxWL8A8mbRnEt9Z+AEamPXbwtH3tuyK1CyRRl7pcfC2oe0AcUuQvN3nRF TE4wsd3mahVPIshKMGvERFtx7pzOG5SW4DB+dBSCGCPIOk00EmDMJMtP6ErgGJzl ke7hokfi4NBop9yN7HU7+dB1e/2c6A/iBapGlsyKHK30rPHRY/dBozuXjQeNgRM= =9O9N -----END PGP SIGNATURE-----

2 1

[PATCH] crash in ospf DBDESC
by Александр Черников 20 Feb '15

20 Feb '15

Hello. I've got the following core for bird 1.4.5: (gdb) bt #0 0x000000000043ecfa in ospf_dbdes_send (n=0x8011018a0, next=1) at ../../../proto/ospf/dbdes.c:145 #1 0x000000000043f6b2 in ospf_dbdes_receive (ps_i=0x8010c9000, ifa=0x8011131a0, n=0x8011018a0) at ../../../proto/ospf/dbdes.c:386 #2 0x0000000000438fdd in ospf_rx_hook (sk=0x80101b8c0, size=28) at ../../../proto/ospf/packet.c:485 #3 0x000000000045f972 in sk_read (s=0x80101b8c0) at io.c:1760 #4 0x000000000046034b in io_loop () at io.c:1975 #5 0x0000000000467da3 in main (argc=3, argv=0x7fffffffed30) at main.c:825 .. (gdb) p n->dbsi $20 = {prev = 0x0, null = 0x0, next = 0x0, node = 0x0} (gdb) p sn $22 = (snode *) 0x0 Investigations has shown, that there was major OSPF instability in that area (~20 quagga boxes and and Juniper device) at that moment with either re-election or DR/BDR hang. Unfortunately, I don't have much logs for that. We also had an (typical) issue with this particular quagga peer just prior to the crash: Feb 19 18:28:34 XXX ospf6d[8387]: SLOW THREAD: task ospf6_receive (7f793a115810) ran for 5044ms (cpu time 5032ms) My guess is that 1) we started to send our DB to the peer and it stopped confirming DD packets for a while 2) Flap happened so part of/most LSADB got flushed 3) Quagga finally awoke from sleep and confirmed last packet 4) we tried to get the next chunk of LSAs but there were no more (unsent ) LSAs in DB 5) this message appeared in the list Something similar to the attached patch should fix this particular issue (at least I hope so).

1 0

Help with IBGP not advertisement routes - "rejected by protocol"
by Jeronimo de A. Barros 18 Feb '15

18 Feb '15

Hi, I have two routers running bird connected to two peers where one peer is my own ISP and AS which lets us use his AS and was kind enough to allocate two /24 for our networks so that we can have two sites in different locations using BGP with a second ISP to be a multi-home system using only two /24. This is our network (I hope you can understand my sketch): Internet <-> BR1-AS1 <-> R1-AS1 <-> R2-AS1 <-> BR-AS2 <-> Internet | | ^ ^ +> BR2-AS1 <+ +-> Net1/24 +-> Net2/24 So, our main ISP has IBGP sessions from its border-routers (BRx-AS1) to our main router (R1-AS1) which in turn has another IBGP session with our second router located at a remote site (R2-AS1). R2-AS1 has an BGP session with the second ISP border router (BR-AS2). Well, when all sessions are UP, Net1 and Net2 can reach the Internet and each other without problems. But, for example, if the BGP session between R2-AS1 and BR-AS2 goes down, traffic between Net1 and Net2 continues OK, but Net2 can't reach the Internet anymore. Or, in other words, the routes received from BRx-AS1 at R1-AS1 are not being advertised to R2-AS1, in fact a "show protocol all" on R1-AS1 shows its advertising only the direct connected networks and the static routes to R2-AS1 and vice-versa: BIRD 1.4.5 ready. name proto table state since info R2-AS1 BGP master up 17:39:21 Established Router ID: x.y.w.249 Preference: 100 Input filter: ACCEPT Output filter: ACCEPT Routes: 5 imported, 10 exported, 2 preferred Route change stats: received rejected filtered ignored accepted Import updates: 5 0 0 0 5 Import withdraws: 0 0 --- 0 0 Export updates: 527178 527168 0 --- 10 Export withdraws: 20 --- --- --- 0 BGP state: Established Neighbor address: x.y.w.251 Neighbor AS: xxxx Neighbor ID: x.y.w.251 Neighbor caps: refresh restart-aware AS4 Session: internal AS4 Source address: x.y.w.249 Hold timer: 188/240 Keepalive timer: 66/80 The debug shows a lot of "rejected by protocol" messages, which I can't find a clear description of what is its meaning: 2015-02-18 16:55:48 <TRACE> kernel1 < replaced 148.208.146.0/24 via x.y.z.29 on bond1 2015-02-18 16:55:48 <TRACE> BR1-AS1 < rejected by protocol 148.208.146.0/24 via x.y.z.29 on bond1 2015-02-18 16:55:48 <TRACE> BR2-AS1 < rejected by protocol 148.208.146.0/24 via x.y.z.29 on bond1 2015-02-18 16:55:48 <TRACE> R2-AS1 < rejected by protocol 148.208.146.0/24 via x.y.z.29 on bond1 2015-02-18 16:55:49 <TRACE> BR2-AS1 > added [best] 177.10.158.0/24 via x.y.z.29 on bond1 2015-02-18 16:55:49 <TRACE> kernel1 < replaced 177.10.158.0/24 via x.y.z.29 on bond1 2015-02-18 16:55:49 <TRACE> BR1-AS1 < rejected by protocol 177.10.158.0/24 via x.y.z.29 on bond1 2015-02-18 16:55:49 <TRACE> BR2-AS1 < rejected by protocol 177.10.158.0/24 via x.y.z.29 on bond1 2015-02-18 16:55:49 <TRACE> R2-AS1 < rejected by protocol 177.10.158.0/24 via x.y.z.29 on bond1 2015-02-18 16:55:49 <TRACE> BR1-AS1 > removed 177.10.158.0/24 via x.y.z.27 on bond1 This is the template for the IBGP session between R1-AS1 and R2-AS1 (as simple as possible): template bgp ibgp_sites { local as myas; import all; export all; direct; } I know that BGP has a lot of subtle behaviors, and I'd like to know if there is any way to make this work or if it's a dead end approach. Thanks in advance for any help. Jero ps: sorry for my broken English

1 0

"show route" command not using "table master" by default?
by Arnaud Fenioux 18 Feb '15

18 Feb '15

Hello, I’m running BIRD 1.4.5 on an IXP with this setup : "Route server with community based filtering and multiple RIBs" https://gitlab.labs.nic.cz/labs/bird/wikis/Route_server_with_community_base… I have noticed a strange behaviour of the "show route" command whenever I specify “table master” or not. (IP/AS have been anonymised in order to follow the example above) : root@rs2-th2:~# birdc "show route all 12.34.0.0/16 protocol R111x1" BIRD 1.4.5 ready. 12.34.0.0/16 via 10.0.0.11 on eth1 [R111x1 2015-02-16 10:43:59] * (100) [AS111i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: 111 BGP.next_hop: 10.0.0.11 BGP.med: 0 BGP.local_pref: 100 BGP.community: (0,51706) root@rs2-th2:~# birdc "show route table master all 12.34.0.0/16 protocol R111x1" BIRD 1.4.5 ready. 12.34.0.0/16 via 10.0.0.11 on eth1 [R111x1 2015-02-17 11:05:45] * (100) [AS111i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: 111 BGP.next_hop: 10.0.0.11 BGP.med: 0 BGP.local_pref: 100 BGP.community: (51706,64650) (51706,64602) (0,51706) When explicitly specifying “table master” I see communities added from filter “bgp_in_AS111”. When not specifying any table I see route from T111 (the table declared in "protocol bgp R111x1"). Actually I was expecting to have same output on both commands, as it explained in documentation : "If you want to see routes that where accepted from this router to the master routing table then type: bird> show route protocol R222x1" Does any body also noticed this behaviour? Regards, -- Arnaud Fenioux Network Engineer - FranceIX

2 2

Re: Patch to reveal more information in SHOW ROUTE
by Andrew Francis 17 Feb '15

17 Feb '15

Hi Ondrej + Ondrej, Sorry for going quiet for a while. I can probably send an actual patch in a couple of days; is there anything I can do make things easier? Also, is there an indent command I can run to align my spacing with all the other code in the project? :) Thanks Andrew Francis | *Twitch* <http://www.twitch.tv/> | Engineering On Mon, Jan 26, 2015 at 1:11 PM, Ondrej Zajicek <santiago(a)crfreenet.org> wrote: > On Fri, Jan 23, 2015 at 09:16:59PM -0800, Andrew Francis wrote: > > Thanks Ondrej, > > > > That query does seem to return all the routes of interest, but it takes a > > long time (many seconds per query). I'm guessing it's not FIB > accelerated? > > That is true, "show route where 192.168.168.168 ~ net" just applies filter > (where ...) to all routes. > > -- > Elen sila lumenn' omentielvo > > Ondrej 'Santiago' Zajicek (email: santiago(a)crfreenet.org) > OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) > "To err is human -- to blame it on a computer is even more so." >

1 0

[PATCH] Dynamic BGP templates
by Alexander V. Chernikov 15 Feb '15

15 Feb '15

1 2