- Bird-users - Mailing Lists

'Netlink: File exists' messages out of bird6
by Michael Fincham 01 Dec '14

01 Dec '14

Hi all, I'm periodically seeing bird6 log these message (and get rate limited, which implies there were quite a few at once...) Nov 30 03:38:17 wlg-por-router2 bird6: Netlink: File exists Nov 30 03:38:17 wlg-por-router2 bird6: ... Any hints on how best to troubleshoot this? -- Michael

2 1

RTD_BLACKHOLE overridden by matching route.
by Thomas Johnson 29 Nov '14

29 Nov '14

I am having some difficulty blackholing a route. The route in question is received from a multihop BGP session (emulating cymru), and I am setting the dest attribute to RTD_BLACKHOLE. However, if the same route is received via another BGP session, the blackhole is overriden, as shown here: bird> show route 10.0.2.0/24 all 10.0.2.0/24 via 38.8.8.105 on em1 [bgp_cogent 17:38:53] * (100) [AS174i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: 174 BGP.next_hop: 38.8.8.105 BGP.local_pref: 100 blackhole [l3_bogons 18:00:03 from 10.0.1.255] (100) [AS3356i] Type: BGP unicast univ BGP.origin: IGP BGP.as_path: 3356 BGP.next_hop: 10.0.1.255 BGP.local_pref: 255 BGP.community: (65332,888) The relevant parts of my test configuration are below. Is there some trick to making the blackhole "absolute"? filter bgp_in_cogent { if ! rt_import_all(174) then reject; accept; } template bgp cymru_bogons_full { local as 68; multihop 255; export none; import filter { bgp_community.add((65332,888)); dest = RTD_BLACKHOLE; bgp_local_pref = 255; accept; }; } protocol bgp bgp_cogent from ebgp { neighbor 38.8.8.105 as 174; import filter bgp_in_cogent; } protocol bgp l3_bogons from cymru_bogons_full { local 162.9.5.3 as 68; neighbor 10.0.1.255 as 3356; } Thank you!

2 1

BFD to Juniper SRX
by Tom Harbert 27 Nov '14

27 Nov '14

Hello, I am running BIRD 1.4.0 on an Ubuntu linux machine which peers BGP successfully with a Juniper SRX firewall. I am having difficulties getting BFD past the Init state. See below for both BIRD and SRX config and logs. It appears as though the firewall is not receiving the BFD messages. I have confirmed that there are no access control restrictions for BFD hitting the SRX (host-inbound-traffic as well as loopback filter). I have already adjusted the Linux source port selection with: sysctl -w net.ipv4.ip_local_port_range="49152 65535" I am sure its something basic, troubleshooting suggestions appreciated. Thanks, Tom. // bird.conf protocol bfd { interface "172.30.6.8/32" { interval 1000 ms; multiplier 3; }; } protocol bgp iBGP_1 { .... neighbor 172.30.6.1 as z; source address 172.30.6.8; .... bfd; .... } // bird host $ sudo ip addr show eth0 | grep inet inet 172.30.6.8/24 brd 172.30.6.255 scope global eth0 $ sudo birdc show bfd session BIRD 1.4.0 ready. bfd1: IP address Interface State Since Interval Timeout 172.30.6.1 --- Init 05:27:46 1.000 3.000 $ sudo tcpdump -i eth0 udp port 3784 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes 05:47:35.873663 IP srx-host.49152 > bird-host.3784: BFDv1, Control, State Down, Flags: [none], length: 24 05:47:36.642025 IP srx-host.49152 > bird-host.3784: BFDv1, Control, State Down, Flags: [none], length: 24 05:47:37.521546 IP srx-host.49152 > bird-host.3784: BFDv1, Control, State Down, Flags: [none], length: 24 05:47:38.349886 IP srx-host.49152 > bird-host.3784: BFDv1, Control, State Down, Flags: [none], length: 24 05:53:19.824960 IP (tos 0xc0, ttl 255, id 16504, offset 0, flags [none], proto UDP (17), length 52) srx-host.49152 > bird-host.3784: BFDv1, length: 24 Control, State Down, Flags: [none], Diagnostic: No Diagnostic (0x00) Detection Timer Multiplier: 3 (3000 ms Detection time), BFD Length: 24 My Discriminator: 0x0000000f, Your Discriminator: 0x00000000 Desired min Tx Interval: 1000 ms Required min Rx Interval: 1000 ms Required min Echo Interval: 0 ms $ sudo tail -f /var/log/bird.log | grep bfd 2014-11-27 05:27:42 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Down] 2014-11-27 05:27:43 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Down] 2014-11-27 05:27:43 <TRACE> bfd1: CTL received from 172.30.6.1 [AdminDown] 2014-11-27 05:27:43 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Down] 2014-11-27 05:27:43 <TRACE> bfd1: CTL received from 172.30.6.1 [AdminDown] 2014-11-27 05:27:43 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Down] 2014-11-27 05:27:43 <TRACE> bfd1: CTL received from 172.30.6.1 [AdminDown] 2014-11-27 05:27:43 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Down] 2014-11-27 05:27:43 <TRACE> bfd1: CTL received from 172.30.6.1 [AdminDown] 2014-11-27 05:27:46 <TRACE> bfd1: CTL received from 172.30.6.1 [Down] 2014-11-27 05:27:46 <TRACE> bfd1: Session to 172.30.6.1 changed state from Down to Init 2014-11-27 05:27:46 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Init] 2014-11-27 05:27:46 <TRACE> bfd1: CTL received from 172.30.6.1 [Down] 2014-11-27 05:27:46 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Init] 2014-11-27 05:27:46 <TRACE> bfd1: Sending CTL to 172.30.6.1 [Init] 2014-11-27 05:27:46 <TRACE> bfd1: CTL received from 172.30.6.1 [Down] // juniper firewall set protocols bgp group X bfd-liveness-detection minimum-interval 1000 set security zones security-zone X interfaces reth2.106 host-inbound-traffic protocols bfd > show bfd session Detect Transmit Address State Interface Time Interval Multiplier 172.30.6.8 Down reth2.106 0.000 1.000 3 172.30.6.9 Down reth2.106 0.000 1.000 3 2 sessions, 2 clients Cumulative transmit rate 2.0 pps, cumulative receive rate 0.0 pps // traceoptions Nov 27 16:25:23.540758 Initiated BFD session to peer 172.30.6.8 (Internal AS 65000): address=172.30.6.8 ifindex=151 ifname=reth2.106 txivl=1000 rxivl=1000 mult=3 ver=255 Nov 27 16:25:27.562265 Initiated BFD session to peer 172.30.6.9 (Internal AS 65000): address=172.30.6.9 ifindex=151 ifname=reth2.106 txivl=1000 rxivl=1000 mult=3 ver=255 Nov 27 16:26:59.795599 Terminated BFD session to peer 172.30.6.8 (Internal AS 65000) (Closing) Nov 27 16:26:59.798422 Terminated BFD session to peer 172.30.6.9 (Internal AS 65000) (Closing) Nov 27 16:27:31.810248 Initiated BFD session to peer 172.30.6.8 (Internal AS 65000): address=172.30.6.8 ifindex=151 ifname=reth2.106 txivl=1000 rxivl=1000 mult=3 ver=255 Nov 27 16:27:35.811656 Initiated BFD session to peer 172.30.6.9 (Internal AS 65000): address=172.30.6.9 ifindex=151 ifname=reth2.106 txivl=1000 rxivl=1000 mult=3 ver=255

2 1

Source address selection for transit-router with "blackholed" linknet
by oskar＠cetex.se 13 Nov '14

13 Nov '14

Hi! I'm working on getting a few linux-routers with bird up and running and I'm wondering: Is there any way to influence source-address selection for the routes installed by bird? (how do other bird-users handle this?, I guess I'm not alone?) We have a transit from a provider that doesn't announce the linknet, as a lot of providers do. (and i shouldn't source traffic from the linknet, i should use own addresses) When i source traffic from the server/router it seems linux default-action is to select the interface closest to the destination which is the peering-linknet and it happily sends tcp / udp / icmp requests to the world. The replies never make it back though since the ip isn't reachable from anywhere else. With ip route there seems to be this flag "src <addr>", so you can specify "ip route add x.x.x.x/y via z.z.z.z src a.a.a.a", this influences the kernel to select src a.a.a.a when sending traffic to x.x.x.x/y, but i haven't found such an option in the kernel-table in bird. If i have a router where only the "inside"-ip is reachable from the internet, and all routes point to the outside, how do i make it source all locally generated traffic from the inside-ip? Do you setup multiple routing-tables and set the default-table to direct traffic to the inside, then on the inside-interface have the full routing table (would this work?), or how do you handle this? Best regards Oskar Stenman

3 2

Bird on ubuntu
by Prashant Chougule 13 Nov '14

13 Nov '14

Hi, I have two ubuntu(14.04) hosts running bird(1.4.0) on it, my bird.conf is as follows, *On Host-1*, router id 192.168.1.101; protocol device { scan time 10; } protocol kernel { export all; scan time 15; } protocol static static_bgp { import all; } protocol bgp { import all; export where proto = "static_bgp"; local as 200; neighbor 10.0.6.2 as 1000; } *On Host-2* router id 192.168.1.102; protocol device { scan time 10; } protocol kernel { export all; scan time 15; } protocol static static_bgp { import all; } protocol bgp { import all; export where proto = "static_bgp"; local as 1000; neighbor 10.0.6.1 as 200; } I am not able establish connection between them,it say , no route to host in last error message. how do I configure bird between two ubuntu hosts? -- Thanks &Regards, Prashant Chougule.

2 1

How to export address from loopback via BGP
by Eugene Prokopiev 11 Nov '14

11 Nov '14

Hi, How to export address 1.1.1.1/32 from lo interface via BGP? I tried to do: router id 2.2.2.2; protocol kernel { } protocol static { route 1.1.1.1/32 via "lo"; } protocol bgp { local as 65000; neighbor 2.2.2.1 as 65000; export filter { accept; }; } but there are no any prefixes on neighbor 2.2.2.1 :( -- WBR, Eugene Prokopiev

5 7

Malformed AS_PATH error
by Jiřík Tomáš 06 Nov '14

06 Nov '14

Hi, I am seeing this error message in bird's log and I am unable to find reason. <RMT> PEER: Error: Malformed AS_PATH: 40022002080000b8800000b8800000b8 Weird thing is that if my peer sends me just his prefixes everything is alright. When he sends me full IP table and I apply filter to accept just my peer prefixes, the error occurs again. I have theory, that when BIRD reads route with a malformed path even if he does not accept it, it drops BGP connection with this error. So I have 2 questions. Am I correct in my theory? And if so is there way around it? best regards, Tomas Jirik

2 1

Testing release
by Ondrej Filip 05 Nov '14

05 Nov '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi guys! A new version of BIRD is close to be released. However there were a lot of changes mainly in OSPF code. Therefore we would like to ask you for some testing before the final version. So if you want to help us, please download here: ftp://bird.network.cz/pub/bird/testing/bird-1.5.0pre.tar.gz And let us know if if you were able to test it. Both positive and negative feedback is very welcome. Ondrej -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJUWgd3AAoJED82D4RIDoWP/KQP/1/CjiNyiis4tkAX8nLLmNM1 5PkNjhcuKFshxMoJD6MsCXrbZsLKgZC0aJr6wamZ+JK7yTPVlj/xGg7LgXFVa6XD Hqf7XUuZAI3HwkF4gUoX0xKOnRd86aRWbFPM8yQhOZ7IxQm0Nwx5LBcAzVm66jsU w2Oxi2JC/n3NtRKsvgVnYKglCTxGq0j+N1/T5XMyl/NVt5VogMeJAwmVRB86zWMk pVsNv+CFWLZkNXL59h2L8nbQRGvyHX1TwxStJbrt8YBTyUjt/YP37VeKWJ4Htaj2 jn53PZUnDJ2UgtmqfEk+aFyPGMIACBWrv5Hqajv3OnNf58ae9ePOEsZQI9QBlF78 Iv5LHqNG0iw3wykV2rFHezHEodDznVAW42kghK9Zlnu7ikB3o/y4Ut8UWuaIdEI5 3TQEnrKrUAPTFfXl8LP+KUgbbXTCJrhWMVhwYdgOC2GfTamvGW0Q1mPR1HED+6Li b5PmduToWW+muyEX3f1xj/rMnmoKmMxRG67WeR7Fj3hdbkVkkkIcWhiI+4JMB/VP eZmhIjEqMrI6m5/rSsF0I7IHez5mfV652eVAhmTKaAPgvdXmJ5W0Q3EauNQCp/bZ yneoJbdzrv0ZZAGlNQqVW+OT7aQb2ANy1WJu2HlOobgq710S4QIHlTaCk5kDdnmQ muH2uBxdJ/n/wW2T1N/O =GGs9 -----END PGP SIGNATURE-----

3 3

Problem running/compiling bird for ARM
by Radoslaw Kamil Ejsmont 03 Nov '14

03 Nov '14

Hi, I did a bit of research on the error. I have added the following lines to dbdes.c in ospf_dbdes_receive function -— SNIP -- unsigned int size = ntohs(ps_i->length); /* log sizes */ log(L_ERR "OSPF DBDES packet is (%u B)", n->ip, size); log(L_ERR "OSPF DBDES packet should be (%u B)", sizeof(struct ospf_dbdes_packet)); log(L_ERR "OSPF packet should be (%u B)", sizeof(struct ospf_packet)); log(L_ERR "IMMS should be (%u B)", sizeof(union imms)); log(L_ERR "Size of u8 %u", sizeof(u8)); log(L_ERR "Size of u16 %u", sizeof(u16)); log(L_ERR "Size of u32 %u", sizeof(u32)); log(L_ERR "Size of u64 %u", sizeof(u64)); log(L_ERR "Size of char %u", sizeof(char)); log(L_ERR "Size of short int %u", sizeof(short int)); log(L_ERR "Size of int %u", sizeof(int)); log(L_ERR "Size of long int %u", sizeof(long int)); log(L_ERR "Size of long long int %u", sizeof(long long int)); -— SNIP — This is the result on my 32-bit ARM router: Nov 2 21:38:35 router-2 daemon.err bird6: OSPF DBDES packet is (28 B) Nov 2 21:38:35 router-2 daemon.err bird6: OSPF DBDES packet should be (32 B) Nov 2 21:38:35 router-2 daemon.err bird6: OSPF packet should be (16 B) Nov 2 21:38:35 router-2 daemon.err bird6: IMMS should be (4 B) Nov 2 21:38:35 router-2 daemon.err bird6: Size of u8 1 Nov 2 21:38:35 router-2 daemon.err bird6: Size of u16 2 Nov 2 21:38:35 router-2 daemon.err bird6: Size of u32 4 Nov 2 21:38:35 router-2 daemon.err bird6: Size of u64 8 Nov 2 21:38:35 router-2 daemon.err bird6: Size of char 1 Nov 2 21:38:35 router-2 daemon.err bird6: Size of short int 2 Nov 2 21:38:35 router-2 daemon.err bird6: Size of int 4 Nov 2 21:38:35 router-2 daemon.err bird6: Size of long int 4 Nov 2 21:38:35 router-2 daemon.err bird6: Size of long long int 8 This is the result on 64-bit ubuntu 14.04 machine: 2014-11-02 22:57:14 <ERR> OSPF DBDES packet is (4269801472 B) 2014-11-02 22:57:14 <ERR> OSPF DBDES packet should be (28 B) 2014-11-02 22:57:14 <ERR> OSPF packet should be (16 B) 2014-11-02 22:57:14 <ERR> IMMS should be (1 B) 2014-11-02 22:57:14 <ERR> Size of u8 1 2014-11-02 22:57:14 <ERR> Size of u16 2 2014-11-02 22:57:14 <ERR> Size of u32 4 2014-11-02 22:57:14 <ERR> Size of u64 8 2014-11-02 22:57:14 <ERR> Size of char 1 2014-11-02 22:57:14 <ERR> Size of short int 2 2014-11-02 22:57:14 <ERR> Size of int 4 2014-11-02 22:57:14 <ERR> Size of long int 8 2014-11-02 22:57:14 <ERR> Size of long long int 8 I think that for some reason the ARM gcc () interprets this struct struct immsb { #ifdef CPU_BIG_ENDIAN u8 padding:5; u8 i:1; u8 m:1; u8 ms:1; #else u8 ms:1; u8 m:1; u8 i:1; u8 padding:5; #endif }; as 4 byte struct, instead of 1 byte subdivided into bit-long parts. This is the GCC version: # arm-linux-uclibc-gcc -v Reading specs from /home/rejsmont/src/optware/mbwe-bluering/toolchain/mbwe-bluering-buildroot/build_arm_nofpu/staging_dir/lib/gcc/arm-linux-uclibc/3.4.2/specs Configured with: /home/rejsmont/src/optware/mbwe-bluering/toolchain/mbwe-bluering-buildroot/toolchain_build_arm_nofpu/gcc-3.4.2/configure --prefix=/home/rejsmont/src/optware/mbwe-bluering/toolchain/mbwe-bluering-buildroot/build_arm_nofpu/staging_dir --build=x86_64-pc-linux-gnu --host=x86_64-pc-linux-gnu --target=arm-linux-uclibc --enable-languages=c,c++ --enable-shared --disable-__cxa_atexit --enable-target-optspace --with-gnu-ld --disable-nls --enable-threads --enable-multilib --with-float=soft Thread model: posix gcc version 3.4.2 Once again thanks in advance for help! Best, Radek -- Radoslaw Kamil Ejsmont, Ph.D. http://radoslaw.ejsmont.net

2 2

Mailing list transfer
by Ondrej Filip 25 Oct '14

25 Oct '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear BIRD users, this mailing list will be transferred to a new server (trubka.network.cz) in a few minutes. Please keep using the e-mail address bird-users(a)network.cz And please let me know if this causes any problems. Ondrej -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJUS3y7AAoJED82D4RIDoWPSm8QALd1BQbVDpaUF5G2B0gHZEK4 BWmVhcEML0374Dbe/fX0/CIgg/l/Eyyty1vnDVt4sF9nw8ixi6X05TrB8+i8u2Hp nPJjFCwWatnZogd+yCP9Con6fHWGS4W1Zwv49b8dw/Ps91zaj2EQpCEoS4oTLYif w0KCaSlodFKF4/47T27NPGk/MyrS7jLNUSOSuU5C+x6te/NUY6Cda1k7ms7YGW4O ubCxx9c0U8ZslXeVMB1kRvlynF2OA8Hv1cwW8hM+IxBgwrWrWZC4hUeAhuTQgWo6 3Uth+3WmQh1xFcOfUfClbRBaiXzAgMSuKQO+xmUG6gpa0obhqRjJmG6NXMi6PEYs /sSfdB4Hh2y/2rIOdlf5bETGppmxYjiutsizmTs5TeMNtqC6qzPzyNp+cspCh1ax LRhcWUxaaldxt/49Ggoo+2FuRlsFsKeJq5tDIZY6WT4mNe0UYlstsbJ5EzL5gPEU /YNZjw14PUDBl6FmZ+wQnh806bP/YA+ndqWJaMOROg3J5oj2K307BTBAhkaWtaMk EMv2Gd8tXagx5aWGZhN0XrZdt/FjzdVQXcxRFNeruEtGmdiCL6OZCIhcWZPJahNS xmXfRhtE2WqGNmGWIVCqVjwuKJMbeIquJqI8DoAu62nhWt3KyVPFatZAUbkE45RS H04h7OdcolOrEJhNaqsk =7NbV -----END PGP SIGNATURE-----

3 3