- Bird-users - Mailing Lists

ULG PATCH: Fix render() encoding
by Frederik Kriewitz 04 Jun '14

04 Jun '14

Fixes exceptions like this: ERROR in CGI: Traceback (most recent call last): File "/var/www/html/ulg.py", line 785, in <module> handler.index(**params) File "/var/www/html/ulg.py", line 722, in index print self.renderULGIndex() UnicodeEncodeError: 'ascii' codec can't encode character u'\xa0' in position 6254: ordinal not in range(128)

1 0

Universal Looking Glass mailinglist
by Frederik Kriewitz 04 Jun '14

04 Jun '14

Hello, is there a dedicated mailinglist for the Universal looking Glass project or what's the best way to submit patches? Best Regards, Freddy

2 1

Stale Routes -- Long Uptime?
by Stephen Holmes 20 May '14

20 May '14

Bird Users, BIRD version 1.2.5 Uptime > 3 years, nice work guys! Two identical servers running BIRD with identical config. I ran into some routes sticking around in some of my route server tables from a neighbor that was down. I did some testing and I had some success reloading the pipe protocols, but not 100%. Even with that neighbor and all it's pipes completely removed from the config the routes remained, originating from the de-configured bgp peer. During my testing I decided to do a mass reload of all the pipes to/from that down neighbor and that actually crashed the bird process, goodbye uptime. The crash did clear up the stale routes of course. I decided to just go ahead and restart my secondary route server as well to clean up the routes there. I am writing to see if others have had this experience with stale routes. My version is really old, could this be a bug that has not surfaced? Could the long uptime have lead to weirdness? Lastly, is there a configuration issue that could lead to this? I am not seeking a definitive response, or a dive into my configs, as there seem to be a lot of factors that might never point to a cause, just looking to see if others have had a similar experience. I just did a preliminary test and the configs work fine on 1.4.3 so the plan for now is to simply upgrade in the hopes this doesn't resurface. -Stephen

2 2

Neighbors dissapears
by Александр 14 May '14

14 May '14

Hello! I have the following problem: several servers connected via openvpn tap tunnels if I set "type broadcast;" on tap interfaces - everything is ok but I'd like to filter neighbors and set type pointomultipoint; strict nonbroadcast yes; neighbors { x.x.x.x; } at initial moment - everything is ok, "show ospf neighbors" shows all defined neighbors in state "full/ptp", but after some time part of neighbors dissapears!!! tunnel is ok, I can ping neighbors ip, tcpdump show ospf hello packages. only possibile solution to return neighbors back is to call "restart all" or simply restart bird.. any ideas how to make neighbors to be all the time?

1 0

Attack of DDOS
by Virgilio Pavel 05 May '14

05 May '14

Hi, I have a question. How can I do my bird.conf reject a DDOS Attack? Can I do this in my bird.conf? protocol static { (...) route x.w.y.z/32 reject; (...) } Best regards, []'s Virgilio Pavel

2 1

[PATCH] Fix protocol memory use free under certrain configure/undo cases
by Sergey Popovich 05 May '14

05 May '14

It is possible to cause BIRD to use after free memory block, allocated to the protocol in the following conditions: bird.conf: --------- router id 1.1.1.1; protocol static static1 { route 0.0.0.0/0 blackhole; } protocol static static2 { route 0.0.0.0/0 blackhole; } Start bird. On the console do: BIRD 1.3.11 ready. name proto table state since info static1 Static master up 18:17:30 static2 Static master up 18:17:30 Edit bird.conf and comment out protocol static2 (or static1, this does not important). Save configuration file candidate. Then on console do: BIRD 1.3.11 ready. name proto table state since info static1 Static master up 18:19:02 See no protocol static2, it is freed in proto_rethink_goal(), but still in old (BIRD's startup config) config structure, thus not initialized as new on undo operation at protos_commit(). And after this we have use after free protocol structure, which is already removed after first configure, where protocol commented out in config. In certrain environments (especially with glibc compiled to detect double free corruptions) this leads to BIRD crash. Fix by initializing pointer to the protocol in configuration file when protocol is candidate for removal (all cases where cf_new is set to NULL). Signed-off-by: Sergey Popovich <popovich_sergei(a)mail.ru> --- nest/proto.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/nest/proto.c b/nest/proto.c index edb490f..c21be85 100644 --- a/nest/proto.c +++ b/nest/proto.c @@ -599,7 +599,10 @@ proto_rethink_goal(struct proto *p) rem_node(&p->glob_node); mb_free(p); if (!nc) - return; + { + p->cf->global->proto = NULL; + return; + } p = proto_init(nc); } -- 1.7.10.4

2 2

segfault with exabgp and bird 1.4.2
by Charlie Allom 03 May '14

03 May '14

Hi, I have been running a stable mesh with a BIRD peer in a mesh for a few weeks now. Trying to connect with ExaBGP makes BIRD segfault. How can I debug this further? Here is the TCP stream: https://spodder.com/~yeled/bird.pcap It seems innocuous to me. C. ~% ulimit -c 100000 ~% file ./bird ./bird: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), for GNU/Linux 2.6.8, dynamically linked (uses shared libs), not stripped ~% sudo ./bird bird: Hello or poll interval less that 5 makes cryptographic authenication prone to replay attacks ~% sudo ./birdc BIRD 1.4.2 ready. Connection closed by server. ~% sudo gdb bird core GNU gdb 6.8-debian Copyright (C) 2008 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu"... warning: Can't read pathname for load map: Input/output error. Reading symbols from /lib/librt.so.1...done. Loaded symbols for /lib/librt.so.1 Reading symbols from /lib/libpthread.so.0...done. Loaded symbols for /lib/libpthread.so.0 Reading symbols from /lib/libc.so.6...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/ld-linux-x86-64.so.2...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Core was generated by `./bird'. Program terminated with signal 11, Segmentation fault. [New process 11480] #0 bgp_rx (sk=0x6aa930, size=<value optimized out>) at ../../../proto/bgp/packets.c:1030 1030 ../../../proto/bgp/packets.c: No such file or directory. in ../../../proto/bgp/packets.c (gdb) bt #0 bgp_rx (sk=0x6aa930, size=<value optimized out>) at ../../../proto/bgp/packets.c:1030 #1 0x00000000004396f3 in sk_read (s=0x6aa930) at io.c:1602 #2 0x000000000043ab03 in io_loop () at io.c:1843 #3 0x000000000043d7a1 in main (argc=<value optimized out>, argv=<value optimized out>) at main.c:820 (gdb)

3 9

BGP/OSPF synchronisation
by Tom Harbert 03 May '14

03 May '14

Hello, I am running BIRD 1.4.2 on two Ubuntu Linux 12.04 systems acting as border routers. Two eBGP peers on each with iBGP between them. OSPF also between them and internally. I notice that on reboot 10-15 packets both in and out are lost. This seems to happen just as/after the bird process starts. It appears as if perhaps BGP is establishing prior to the OSPF neighbors coming up and as a result black-holing traffic. I am nailing down my public IP prefixes with null routes. I have attempted to use the 'start delay time x' command under the BGP sessions however they still establish immediately. I believe this is because this command delays the outbound attempt to connect yet the remote side is initiating it. # eBGP session to X protocol bgp eBGP_X { description "eBGP - X"; local as X; neighbor x.x.x.x as x; * start delay time 60;* import filter import_eBGP_X; export filter export_eBGP_X; } Has anyone else ran into this problem with a similar design? Is there a different command to prevent BGP peering from establishing or to wait for the IGP? I have implemented a workaround/hack by filtering incoming TCP connections with destination port 179. This prevents the peers from being established until the *start delay time* is reached. I will review my routing configuration/design however is there another way to accomplish this? Thanks! Tom.

2 1

Beta Version: Tool for RPKI ROA Table
by Matthias Waehlisch 01 May '14

01 May '14

Hi, we implemented a tool that maintains the ROA table in BIRD, i.e., automatically adds and deletes ROA information. It does not require changes of the BIRD code base. It's still in beta state but maybe of interest to you: * https://github.com/rtrlib/bird-rtrlib-cli Feedback is welcome! Cheers matthias -- Matthias Waehlisch . Freie Universitaet Berlin, Inst. fuer Informatik, AG CST . Takustr. 9, D-14195 Berlin, Germany .. mailto:waehlisch@ieee.org .. http://www.inf.fu-berlin.de/~waehl :. Also: http://inet.cpt.haw-hamburg.de .. http://www.link-lab.net

1 0

BIRD 1.4.2 - some strange things
by Javor Kliachev 25 Apr '14

25 Apr '14

Hello, After upgrade from 1.3.9 to 1.4.2, we're observing following things: *1) Testing ADD-PATH feature on iBGP:** * With AS-PATH functionality everything looks fine but: How we may see all exported routes to given iBGP member with "add paths on" enabled. I have tried with: root@rs2-nix-bird:~# birdc show route export R0_100 count *2796* of 3377 routes for 3377 networks But obvious there is something wrong because on other side on RS1 I see the following: root@rs1-nix-bird:~# birdc show route protocol R0_200 count *3334* of 7034 routes for 6017 networks There are difference of 538 prefixes ( that are more that one path per destination ). *So my question is*: Is there any other command to see all exported prefixes when as-path is enabled. *2) BGP Route limit - strange thing:* With the new version, today I observed that when "BGP protocol" has configured limit to 1, every time when we run "birdc configure" the session from UP goes DOWN and back to UP and then stay ESTABLISHED with following reason: It is happen absolutely everytime when we run "birdc configure". Apr 23 16:17:24 rs2-nix bird: Reconfiguring Apr 23 16:17:24 rs2-nix bird: Protocol R0_187 hits route import limit (1), action: restart Apr 23 16:17:24 rs2-nix bird: R0_252: Reconfigured Apr 23 16:17:24 rs2-nix bird: Reconfigured Apr 23 16:17:26 rs2-nix bird: R0_187: Shutdown requested From *R0_187* normally we should receive only 1 prefix. When we increase the limit to 2 everything looks fine. With the old version 1.3.9 it works without restart the session. *Here is my config:* protocol bgp R0_187 from iBGP { neighbor 10.0.0.187 as 65535; import all export all table T65535; route limit 1; direct; } Thanks in advance! Best~ -- --- Find out about our new Cloud service - Cloudware.bg <http://cloudware.bg/?utm_source=email&utm_medium=signature&utm_content=link…> Access anywhere. Manage it yourself. Pay as you go. ------------------------------------------------------------------------ *Javor Kliachev* IP Engineer Neterra Ltd. Telephone: +359 2 975 16 16 Fax: +359 2 975 34 36 www.neterra.net <http://www.neterra.net>

2 2