- Bird-users - Mailing Lists

bgppath.filter question - modifying AS_PATH
by Javor Kliachev 18 Dec '13

18 Dec '13

Hello, We use BIRD as Route Server. According your documentation we would like to know how given AS_PATH can be modified for example: To delete ALL ASNs from given AS_PATH except one AS predefined in int set. Here is my example config: function filter_bgp_as_path() int set remove_as; { remove_as = [ 50 ]; bgp_path.filter(remove_as); return true; } table T65533 protocol pipe P65533 from PIPES { description "TEST"; peer table T65533; export all; } protocol bgp R65533x1 from PEERS { source address 10.0.0.200; description "TEST"; neighbor 10.79.2.2 as 65533; multihop; import none; export where filter_bgp_as_path(); table T65533; passive off; } After running "birdc configure" I see in bird.log to return the following error: 17-12-2013 14:44:47 <ERR> filters, line 8: Can't add/delete to non-(e)clist 17-12-2013 14:44:47 <ERR> filters, line 8: Can't add/delete to non-(e)clist 17-12-2013 14:44:47 <ERR> filters, line 8: Can't add/delete to non-(e)clist Could you please point me in the right direction ? Is it possible at all to modify AS_PATH attribute? Thanks in advance! Best~ -- --- Find out about our new Cloud service - Cloudware.bg <http://cloudware.bg/?utm_source=email&utm_medium=signature&utm_content=link…> Access anywhere. Manage it yourself. Pay as you go. ------------------------------------------------------------------------ *Javor Kliachev* IP Engineer Neterra Ltd. Telephone: +359 2 975 16 16 Fax: +359 2 975 34 36 www.neterra.net <http://www.neterra.net>

3 4

Multiple OSPF adjacencies on same interface...
by Kristoffer Egefelt 16 Dec '13

16 Dec '13

Hi, Is this not supported? I’m trying to use a bonded interface on linux to connect to two routers, one router on each physical link, each with a /31 subnet. Only one of the routers (Force10 S4810) forms adjacency with the linux host (whichever comes first), the other gets stuck in EXSTART until I shut/no shut the link, then Bird creates adjacency with both routers. Quagga works as expected, but I’d rather use Bird due to better filtering etc. Any ideas ? Thanks Regards Kristoffer

5 9

OSPFv3 and logging (debug)
by Dmitry S. Nikolaev 10 Dec '13

10 Dec '13

Hello. Does anyone use OSPFv3 ? My question is about monitoring. We use OSPFv3 over tunnels and have more than one tunnel to one endpoint over different Inet channels (different providers): So, as example this is config of one of the side: protocol ospf office { debug { states, interfaces, events }; tick 1; rfc1583compat yes; area 0.0.0.0 { stub no; interface "ng2" { cost 5; type pointopoint; hello 10; retransmit 3; transmit delay 5; dead count 3; wait 40; }; interface "ng0" { cost 10; type pointopoint; hello 10; retransmit 3; transmit delay 5; dead count 3; wait 40; }; interface "ng1" { cost 30; type pointopoint; hello 10; retransmit 3; transmit delay 5; dead count 3; wait 40; }; }; import filter ospfIN; export filter ospfOUT; } Show OSPF neighbors: # birdc6 BIRD 1.3.11 ready. bird> show ospf neighbors office: Router ID Pri State DTime Interface Router IP 1.1.1.1 1 full/ptp 00:30 ng1 fe80::224:1dff:feb3:720 1.1.1.1 1 full/ptp 00:29 ng2 fe80::224:1dff:feb3:720 1.1.1.1 1 full/ptp 00:30 ng0 fe80::224:1dff:feb3:720 When any OSPF neighbor goes down/up then in log appear: Neighbor fe80::224:1dff:feb3:720 changes state from " full" to " init". Neighbor fe80::224:1dff:feb3:720 changes state from " init" to " 2way". Neighbor fe80::224:1dff:feb3:720 changes state from " 2way" to " exstart". Neighbor fe80::224:1dff:feb3:720 changes state from " exstart" to "exchange". Neighbor fe80::224:1dff:feb3:720 changes state from "exchange" to " loading". Neighbor fe80::224:1dff:feb3:720 changes state from " loading" to " full". But OSPFv3 use link-local address for adjacency and not global IP on the tunnel, example: ng0: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> metric 0 mtu 1500 inet 10.255.255.1 --> 10.255.255.2 netmask 0xffffffff inet6 fe80::224:1dff:feb3:720%ng0 prefixlen 64 scopeid 0x12 inet6 2001:XXX:XXXX:XXX::1:1 --> 2001:XXX:XXXX:XXX::1:2 prefixlen 128 nd6 options=3<PERFORMNUD,ACCEPT_RTADV> Thus it is impossible to understand exactly what neighbor (over what tunnel) change it`s state because there is no iface name in log. So monitoring system can say that some neighbor down/up but can`t say over what tunnel this neighbor was working :( Who faced with the same task ? How to solve? Thanks. P.S. Sorry for my english. -- With best regards, Dmitry S. Nikolaev Moscow, Russia

3 6

Segfaults with Bird 1.3.10
by Jonathan Stewart 09 Dec '13

09 Dec '13

Hey List, I have bird 1.3.10 on Ubuntu 12.04 LTS, 32-bit. Today, both bird and bird6 segfaulted on route server 1. This is what I know so far: jstewart@rs1:/var/log$ cat syslog|grep segfault Dec 5 18:22:58 rs1 kernel: [11076907.227513] bird[909]: segfault at 20 ip b773c6e2 sp bfc537a0 error 6 in bird[b772d000+5e000] Dec 5 18:32:12 rs1 kernel: [11077460.632120] bird6[20761]: segfault at 9471 ip b7745582 sp bfaceba0 error 6 in bird6[b7735000+6b000] Is there something further i should look into or check? I feel like i should upgrade to 1.4.0--is there a good place to find a Ubuntu package? Thanks for the help, -- Jonathan

5 7

Set Source
by Sargun Dhillon 07 Dec '13

07 Dec '13

So, from my understanding, routes in the Linux kernel have can have a source associated with them.This is RTA_SRC attribute in netlink ( I think ). We basically want to ensure that when our routers get routes, locally generated traffic comes from the loopback address. Does anyone know a way to do this? I think if BIRD set RTA_SRC before sending the route to the kernel, it would work. Could this attribute be surfaced via BIRD easily?

4 3

Looking Glass for BIRD on PHP
by Dmitry S. Nikolaev 07 Dec '13

07 Dec '13

Hello. I can`t find LG for BIRD on PHP and start to write it by myself. Now second version is availiable and it`s not the last one. For those who are interested in PHP LG (tot python version) please visit http://bird-lg.subnets.ru/ good luck ! -- With best regards, Dmitry S. Nikolaev Moscow, Russia

1 0

Contributing patches
by Pierluigi Rolando 06 Dec '13

06 Dec '13

Hi, We've started evaluating BIRD at work and I believe I might have a few patches that I'd like to contribute back (if you guys are interested). I'm new to the project and I'm wondering what's the proper procedure for this (tracking bugs, submitting patches, etc). I understand this is a users' mailing list and maybe there's a better place for that. thanks, Pierluigi

2 1

Routing and security
by Alessandro Brega 05 Dec '13

05 Dec '13

Hi guys, right now I have a quagga router, but I'm open to switch to bird if it makes sense and helps me with my problem below. My router has two transit neighbors and announcing my own IP space. I recently joined a public peering exchange (IXP) and so I'm part of their local network (/24), together with all other participants. So far everything works fine. Now for security I wonder if other participants could not simply route all their outgoing traffic through me? For example what happens if any other participant would point a default route to my IXP ip. If I understand correctly all outgoing traffic from that participant would then go to my router which would route it to the internet using my transit uplink, right? So I wonder if I have to take any measures against it. My ideas are: 1. Setup firewall (iptables) rules so that only traffic with a destination of my own IP space is accepted from other IXP participant. Drop any other traffic from IXP participants. 2. Somehow make quagga use a different kernel routing table for each neighbor (or peer-group). The routing table for the IXP neighbors would not contain any entries except for my own IP space and so no routing using my ip transit uplinks would occur. Looking at the output of ip rule showshows quagga is not doing this automatically? Would bird do this automatically? Am I on the right track? How do other routers like bord or hardware routers (cisco, juniper, ..) deal with this problem? Thank you for any help! Alessandro

5 4

Using RAdv and trigger routes with multiple interfaces
by Tore Anderson 29 Nov '13

29 Nov '13

Hi, I'm trying to set up conditional RA transmission from BIRD 1.3.11 on a firewall pair running Keepalived for HA/failover. My goal is to start emitting RAs on an interface as soon as Keepalived adds an IPv6 address on it, and start suppressing the RAs (i.e., sending with router lifetime=0) as soon as Keepalived removes it. On first look, it would appear that the "trigger" option is exactly what I need. However, I ran into the a problem - it appears to be global for the entire radv protocol instead of being per-interface, and that I cannot seem to work around limitation that by setting up multiple (one per interface) instances of the protocol either. To be more specific, assume that I have two interfaces with the following virtual IPs controlled by Keepalived: vlan100 = 2001:db8:100::1/64 vlan200 = 2001:db8:200::1/64 I would have liked to do something like: protocol radv { interface "vlan100" { trigger 2001:db8:100::/64; # <-- syntax error on this line }; interface "vlan200" { trigger 2001:db8:200::/64; }; } ...but that only gives me a syntax error on the line marked. So I tried the following instead, which also resulted in a syntax error: protocol radv vlan100 { # <-- syntax error on this line interface "vlan100"; trigger 2001:db8:100::/64; } protocol radv vlan200 { interface "vlan200"; trigger 2001:db8:200::/64; } Am I missing something obvious here or is the trigger feature only useful on routers with a single network interface? Best regards, Tore Anderson

2 2

Feature Request: Bird should be able to find out the correct source address for next hop self automatically
by Dr. Christian Riede 29 Nov '13

29 Nov '13

Hello, with protocol bgp { local as 48175; import filter as12843in; export filter as12843out; enable as4 yes; hold time 600 ; keepalive time 10; neighbor 2A02:0788:0001:0008::1 as 12843; path metric 1; next hop self; } I get bird> show route export bgp12 all 2001:67c:39c::/48 via 2001:67c:39c:8000::8000:4 on eth0 [static1 09:39] * (2000) Type: static unicast univ BGP.origin: IGP BGP.as_path: 48175 BGP.next_hop: 2001:67c:39c:8002::8000:3 BGP.local_pref: 100 After configuring the source address manually, I get the correct next hop: protocol bgp { local as 48175; import filter as12843in; export filter as12843out; enable as4 yes; hold time 600 ; keepalive time 10; neighbor 2A02:0788:0001:0008::1 as 12843; path metric 1; source address 2a02:788:1:8::3; next hop self; } bird> show route export bgp12 all 2001:67c:39c::/48 via 2001:67c:39c:8000::8000:4 on eth0 [static1 09:39] * (2000) Type: static unicast univ BGP.origin: IGP BGP.as_path: 48175 BGP.next_hop: 2a02:788:1:8::3 BGP.local_pref: 100 According to the documentation, bird should be able to find out the correct source address automatically. But is does not ;-) This is bird 1.3.9 Mit freundlichen Grüßen Christian Riede -- _________________________________________ =C=O=N=N=E=C=T== Karlsruhe GmbH Computer und Netzwerktechnik Gebrüder-Himmelheber-Straße 7 D-76135 Karlsruhe Amtsgericht Mannheim HRB 110258 Geschäftsführer: Stefan Kratzer Telefon: +49 721 20120-0 Telefax: +49 721 20120-500 Internet: http://www.connect-ka.de E-Mail: christian.riede(a)it-connect.de _________________________________________

2 1