- Bird-users - Mailing Lists

check for the existence of a variable
by Pavlos Parissis 01 Oct '14

01 Oct '14

Hi, I want to be able to include a file which will normally have a constant but in some cases it may not have any content, but I still want to be able to restart/reload without problems. Here is a snippet: include "/etc/bird.d/anycast_prefixes.conf"; function anycast_advertise() { if defined(ACAST_PS_ADVERTISE) then return net ~ ACAST_PS_ADVERTISE; else { return false; } } The content of /etc/bird.d/anycast_prefixes.conf is define ACAST_PS_ADVERTISE = [ 192.168.200.1/32, # Frontend 1 192.168.200.2/32 # Frontend 2 ]; The defined function complains about missing variables. Is it possible to express what I want? Thanks, Pavlos

1 0

Re: bgp router with multi asn's - neighbor config ?
by Kai 01 Oct '14

01 Oct '14

Hi Ondrej! Thanks for your hints. Please let me add a question! (see below) On Thu, 2014-09-04 at 16:32 +0200, Ondrej Zajicek wrote: > On Thu, Sep 04, 2014 at 12:32:46PM +0000, Leo Vandewoestijne wrote: > > > > > > You cannot have two BGP relations to a single peer. I see two options: > > > > > You will certainly have to do this on different IP's. > > And actually I only do it with different IP's in different netmasks. > > Yes, you can have two BGP sessions between two BGP neighbors if you use > two pairs of IP addresses, IMHO it should work even if all addresses have > the same netmask. I now tried a setup with a peer (only one IP address) and a router on my side which has two IP addresses configured on the same interface (primary and secondary). The schema of config on my side would look like this: interface tun0: 10.0.0.1 (primary) 10.0.0.2 (secondary) protocol bgp me_1 {6 local 10.0.0.1 as 1; router id 10.0.0.1; neighbor 10.0.0.9 as 9; direct; } protocol bgp me_2 {6 local 10.0.0.2 as 2; router id 10.0.0.2; neighbor 10.0.0.9 as 9; direct; } (In fact there are a lot of peers like this one.) This setup doesn't seem to work. It seems as if, with each restart, only on of the two connections comes online, not always the same one. The second connection is rejected when incoming. Which is the mistake I made here? Or does the peer have to have two IP addresses as well? The bird user manual states "Note that contrary to other IP routers, BIRD is able to act as a router located in multiple AS’es simultaneously". What is the intended way to configure this situation? Best regards and many thanks, Kai -- "Das ist Demokratie, wenn man sich aussuchen darf, wer einen verarscht." (Hagen Rether) D-65203 Wiesi fast: kai_pf (aT] web(dot)de ++ PGP Key fingerprint B567 C43E 99D1 7709 7D64 3BF8 2DE8 1092 0EEF D58E ++ -----BEGIN GEEK CODE BLOCK----- VERSION: 3.12 GCS/IT/CM d- s:- a+>-----(?) C++$ UL++(++++$) P+++ L++ E-(+) W--(+) N !w---($) !O !M V? PS+ PE-() Y+ PGP(+) t R*@ tv--@ b+>++ DI++ G e+++(*) h? y? ------END GEEK CODE BLOCK------

3 3

Non-default BGP port
by Matthias Waehlisch 01 Oct '14

01 Oct '14

Hi, do I see it correctly that the destination port to establish the BGP session cannot be changed? I would really like to have something like neighbor 1.2.3.4 port 5001 as 64512; Any reason not to support this? Thanks matthias -- Matthias Waehlisch . Freie Universitaet Berlin, Inst. fuer Informatik, AG CST . Takustr. 9, D-14195 Berlin, Germany .. mailto:waehlisch@ieee.org .. http://www.inf.fu-berlin.de/~waehl :. Also: http://inet.cpt.haw-hamburg.de .. http://www.link-lab.net

5 4

bird bgp peer problems
by Kai 28 Sep '14

28 Sep '14

Hello! I habe severe problems to understand birds behaviour regarding some peers. Two peers now carry debug parameters to analyse what's going on. Here is one example with config excerpt and debug output from syslog. Why is the incoming connection from the peer rejected? What does "Bad peer AS" mean in this context? Does the peer try to identify itself with _my_ ASN? Or does it expect me to be 65036 (what would be correct!)? --------------------------- protocol bgp Oldenburg1_wi from bgp_ic_wi { neighbor 10.207.0.27 as 65513; debug { states,interfaces,events }; }; # with my ASN defined to be 65036 in the template bgp_ic_wi: template bgp bgp_ic_wi { local wi_addr_ic as 65036; router id 10.207.0.56; table ic_wi; import where (is_freifunk_dn42() && !is_wimz_self_nets()); export where (is_wi_self_net() || (source = RTS_BGP)); direct; }; --------------------------- Sep 28 23:43:02 lotuswurzel bird: Oldenburg1_wi: Incoming connection from 10.207.0.27 (port 42544) rejected [...] Sep 28 23:43:47 lotuswurzel bird: Oldenburg1_wi: Connecting to 10.207.0.27 from local address 10.207.0.56 Sep 28 23:43:47 lotuswurzel bird: Oldenburg1_wi: Connected Sep 28 23:43:47 lotuswurzel bird: Oldenburg1_wi: Received: Bad peer AS: 65036 Sep 28 23:43:47 lotuswurzel bird: Oldenburg1_wi: State changed to stop Sep 28 23:43:47 lotuswurzel bird: Oldenburg1_wi: Down Sep 28 23:43:47 lotuswurzel bird: Oldenburg1_wi: State changed to down Sep 28 23:43:47 lotuswurzel bird: Oldenburg1_wi: Starting Sep 28 23:43:47 lotuswurzel bird: Oldenburg1_wi: State changed to start Sep 28 23:43:47 lotuswurzel bird: Oldenburg1_wi: Startup delayed by 300 seconds [...] Sep 28 23:47:02 lotuswurzel bird: Oldenburg1_wi: Incoming connection from 10.207.0.27 (port 42836) rejected [...] Sep 28 23:47:45 lotuswurzel bird: Oldenburg1_wi: Started Sep 28 23:47:45 lotuswurzel bird: Oldenburg1_wi: Connect delayed by 5 seconds Sep 28 23:47:49 lotuswurzel bird: Oldenburg1_wi: Connecting to 10.207.0.27 from local address 10.207.0.56 Sep 28 23:47:49 lotuswurzel bird: Oldenburg1_wi: Connected Sep 28 23:47:49 lotuswurzel bird: Oldenburg1_wi: Received: Bad peer AS: 65036 Sep 28 23:47:49 lotuswurzel bird: Oldenburg1_wi: State changed to stop Sep 28 23:47:49 lotuswurzel bird: Oldenburg1_wi: Down Sep 28 23:47:49 lotuswurzel bird: Oldenburg1_wi: State changed to down Sep 28 23:47:49 lotuswurzel bird: Oldenburg1_wi: Starting Sep 28 23:47:49 lotuswurzel bird: Oldenburg1_wi: State changed to start Sep 28 23:47:49 lotuswurzel bird: Oldenburg1_wi: Startup delayed by 300 seconds --------------------------- Best regards, Kai -- "Das ist Demokratie, wenn man sich aussuchen darf, wer einen verarscht." (Hagen Rether) D-65203 Wiesi fast: kai_pf (aT] web(dot)de ++ PGP Key fingerprint B567 C43E 99D1 7709 7D64 3BF8 2DE8 1092 0EEF D58E ++ -----BEGIN GEEK CODE BLOCK----- VERSION: 3.12 GCS/IT/CM d- s:- a+>-----(?) C++$ UL++(++++$) P+++ L++ E-(+) W--(+) N !w---($) !O !M V? PS+ PE-() Y+ PGP(+) t R*@ tv--@ b+>++ DI++ G e+++(*) h? y? ------END GEEK CODE BLOCK------

1 0

Bird Debian Repo broken ?!
by Daniel Wendler 27 Sep '14

27 Sep '14

Hello List, today i was a little bit confused about the package updates on our firewall. Only Wheezy Systems wants to update to latest version. After some research i realize the upgrades are from the official Debian Repo and not from the Bird repo. After looking in the bird repo i realized that: dists/{squeeze,wheezy}/main/binary-amd64/Packages{,.gz} are 0 byte files, so the apt-get update does not realize the files in the repo. The timestamp of the files say 21.08.14, so i think its broken since then. Could someone see the same behavior? -- Mit freundlichen Grüßen --------------------------------- Daniel Wendler

3 5

OSPF: problem with route insert and delete sequences
by Gerold Gruber 25 Sep '14

25 Sep '14

Hi list, we built a network with 2 OSPF areas and 18 Linux based Bird OSPF routers, running Bird 1.4.4 on Debian wheezy (mostly). And there are even more routers from other vendors. Part of this network is a VPN gateway which also takes part in OSPF routing. On this gateway up- and down scripts set or delete routes to the connected sites. So these routes are set or deleted in the kernel routing table and then noticed by Bird and ditributed. Now comes the problem: if one particular route is repeatedly set and deleted within a few seconds (as it appears when a VPN line flaps), then we see the following: Bird propagates each change to his neighbours immediately, but stops doing so after a few changes (3 to 5), at least the neighbour does not show the changes in his debug log anymore. This can be reproduced by setting and deleting kernel routes on the command line, with sleep 1 between. A Cisco box apparently does some kind of filtering: each change is propagated after ~5 seconds if no further change within this interval negates the change. (e.g.: route is deleted and re-inserted within 1 second, then no change is propagated to the neighbours). As Bird stops propagating these changes it is some kind of random which state the neighbours are left. So wrong routes may remain (delete is missing at the end), or reappearing routes are not propagated and lost. So from the behaviour seen with the current release some kind of serious problem arises for us. Probably this is related to "future work" Route aggregation and flap dampening from the Bird web site? What would be a workaround to circumvent this? Are there plans to fix this in the near future? Best regards Gerold -- Abteilung Systembetrieb Telefon: +49 2371 787 117 Fax: +49 2371 787 61117 E-Mail: gruber(a)citkomm.de Internet: http://www.citkomm.de Citkomm services GmbH* KDVZ Citkomm (Kommunaler Zweckverband) Griesenbraucker Str. 4 58640 Iserlohn Telefon: +49 2371 787 0 Fax: +49 2371 787 279 E-Mail: post(a)citkomm.de * Sitz der Gesellschaft: Iserlohn Handelsregister: AG Iserlohn, HRB 26 86 Geschäftsführer: Dr. Michael Neubauer, Hans Jürgen Friebe, Kerstin Pliquett

1 0

question: importing routes from kernel filtered by function with prefix match
by Kai 22 Sep '14

22 Sep '14

Dear experienced bird experts! :) While trying to setup my first more complex bird config I cannot determine the error I made that impede my config from working. Excerpt from the config: table kern_wimz; function is_wimz_self_nets() { return (net ~ [10.56.0.0/16+, 10.37.0.0/16+]); } # import only self from kernel, export anything but wi&mz - remark: exporting done by other kernel protocoll instances protocol kernel kern_import { scan time 30; import where is_wimz_self_nets(); export none; table kern_wimz; kernel table 254; # main }; I also added a - seemingly neccessary: table bla; protocol device { scan time 30; table bla; }; (Complete config: https://github.com/freifunk-mwu/technik-meta/wiki/birdconfig ) In the main kernel routing table (#254) one can find - among others - the two prefixes 10.37.0.0/18 and 10.56.0.0/18 . I expected these two to be imported into kern_wimz. From there they are going to be transported to other tables by the pipe protocol. But kern_wimz remains empty. :( I consulted the documentation multiple times already, but I cannot pinpoint the mistake I made. Could anyone please provide me with a helpful hint? Best regards, Kai

1 0

constant rejected in router id ...
by Kai 22 Sep '14

22 Sep '14

Good Morning! When trying to use a previously defined constant value in a "router id", bird answers with a syntax error. Is this the intended behaviour? It would be quite handy to be able to use constants in this place also (as we have a multi-ASN-setup using the router-id-override within template-bgp-blocks). Example: define my_router_id = 10.11.12.13; router id my_router_id; Best regards, Kai

1 0

Re: static route multipath problem
by Ondrej Zajicek 19 Sep '14

19 Sep '14

On Thu, Sep 18, 2014 at 02:56:32PM +0800, 守得云开 wrote: > can i setup like this, 11, 12 and 13 is the ip of ppp0, ppp1 and ppp2: > ------------------------------ > route 0.0.0.0/0 multipath > via 10.10.10.11 weight 2 > via 10.10.10.12 weight 3 > via 10.10.10.12 weight 4; This should work > ------------------------------ > or link this: > ------------------------------ > route 0.0.0.0/0 multipath > via 10.10.10.1 dev ppp0 weight 2 > via 10.10.10.1 dev ppp1 weight 3 > via 10.10.10.1 dev ppp2 weight 4; We do not currently support 'dev' option here, but you could use this: route 0.0.0.0/0 multipath via 10.10.10.1%ppp0 weight 2 via 10.10.10.1%ppp1 weight 3 via 10.10.10.1%ppp2 weight 4; This is syntax for link-local IPv6 addresses like fe80::1234:5678%eth0, but works also for regular IPv4 addresses. -- Elen sila lumenn' omentielvo Ondrej 'Santiago' Zajicek (email: santiago(a)crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."

1 0

Shutting down BGP neighbor causes high CPU and many session flaps.
by Javor Kliachev 19 Sep '14

19 Sep '14

Hello, We use bird 1.4.2 as route server with multiple RIBs with ~100 BGP active sessions. Over one of these sessions, we're receiving ~ 360k prefixes and re-announcing them to all other sessions. By my calculations the total amount of all prefixes in all RIBs is about ~ 3600000 and till now everything was OK. *But today we have experienced the following issue: * When we stopped the session that we received ~360k, BIRD daemon went to 100% usage and held this behavior for period of~5-6 min. This event caused а lot of ( but not all ) sessions to start flapping. Here is the output taken from our log during the event: Sep 18 10:40:51 rs2 bird: R0_69: Received: Hold timer expired Sep 18 10:40:51 rs2 bird: R0_69: BGP session closed Sep 18 10:40:52 rs2 bird: R0_69: Down Sep 18 10:41:11 rs2 bird: R0_69: Startup delayed by 60 seconds Sep 18 10:41:45 rs2 bird: R0_69: Incoming connection from 10.0.0.69 (port 13073) rejected Sep 18 10:41:59 rs2 bird: R0_69: Started Sep 18 10:42:36 rs2 bird: R0_69: Incoming connection from 10.0.0.69 (port 24222) accepted Sep 18 10:42:36 rs2 bird: R0_69: BGP session established The above lines was repeated for all other affected sessions. After the CPU peak of 5 min, all affected sessions became UP again. Our CPU arch is 2 x Intel(R) Xeon(R) CPU E5310 1.6Ghz with 4 cores. I know BIRD that still may use only 1 CPU core but is there any plans to use more? We will highly appreciate for any suggestions or share some experience how to prevent in future such event. Thanks in advance! Best~ -- --- Find out about our new Cloud service - Cloudware.bg <http://cloudware.bg/?utm_source=email&utm_medium=signature&utm_content=link…> Access anywhere. Manage it yourself. Pay as you go. ------------------------------------------------------------------------ *Javor Kliachev* IP Engineer Neterra Ltd. Telephone: +359 2 975 16 16 Fax: +359 2 975 34 36 www.neterra.net <http://www.neterra.net>

2 1