- Bird-users - Mailing Lists

about ecmp
by 曾小小 11 Jan '14

11 Jan '14

Hello, I want to use the ospf protocol ecmp function, load balancing local to remote devices. Interface uses ipip tunnel connected. the local use FreeBSD 10.0-BETA1 and BIRD 1.3.11, using fib support multiple routing tables, gif interface is configured for parallel tunnels by setting the sysctl variable net.link.gif.parallel_tunnels to 1. the remote use Ubuntu 13.04 and Quagga (version 0.99.22). Configured as follows: protocol ospf ospf_gif { table tab_ospf_gif; router id 192.168.148.17; ecmp yes ; export all; import all; preference 200; area 0.0.0.10 { interface "gif0" { ecmp weight 3; hello 10; retransmit 5; cost 10; transmit delay 1; dead count 4; wait 40; type pointopoint; priority 0; authentication cryptographic; password "abc"; }; interface "gif1" { hello 10; retransmit 5; cost 10; transmit delay 1; dead count 4; wait 40; type pointopoint; priority 0; authentication cryptographic; password "abc"; }; }; } protocol pipe pipe_gif { table tab_ospf_gif; peer table master; import none; export all; } protocol kernel kernel_gif { debug all; table tab_ospf_gif; export all; kernel table 10; scan time 15; } In the test if configured ecmp function, the local device using bird view master table, tab_ospf_gif two tables are learning two equal cost routes to the remote device (see below). bird> show route table master 1007-0.0.0.0 / 0 multipath [ospf_gif 18:18] * E2 (200/10/10) [xxxx] via 192.168.170.41 on gif0 weight 3 via 192.168.170.149 on gif1 weight 1 bird> show route table tab_ospf_gif 1007-0.0.0.0 / 0 multipath [ospf_gif 18:18] * E2 (200/10/10) [xxxx] via 192.168.170.41 on gif0 weight 3 via 192.168.170.149 on gif1 weight 1 But I can not see the route to the fib in freebsd. Why? ? I look protocols, found that the route was refused entry, as follows: 1002-kernel_gif Kernel tab_ospf_gif up 18:42 1006- Preference: 10 Input filter: ACCEPT Output filter: ACCEPT Routes: 0 imported, 0 exported, 0 preferred Route change stats: received rejected filtered ignored accepted Import updates: 0 0 0 0 0 Import withdraws: 0 0 --- 0 0 Export updates: 3 3 0 --- 0 Export withdraws: 0 --- --- --- 0 Use debug discovery and found the following: 09-01-2014 23:58:45 <TRACE> kernel_gif <rejected by protocol 0.0.0.0 / 0 multipath 09-01-2014 23:58:45 <TRACE> kernel_gif <rejected by protocol 192.168.170.40/30 multipath 09-01-2014 23:58:45 <TRACE> kernel_gif <rejected by protocol 192.168.170.148/30 multipath If I do not use ecmp function, fib table freebsd system can view the routing entries, but only a single path. thank you very much.

3 2

Looking for freelance developper for BIRD dev
by Julien Ducros 05 Jan '14

05 Jan '14

Hi, We need some modifications in BIRD and i'm looking for a developper for a fews days of work. All developpements could be added to bird with free license if the BIRD team is interested with our contributions. Thanks for your private reply. Julien

3 2

Installation error
by Radoslaw Rams 01 Jan '14

01 Jan '14

Hello all, I have problem installing BIRD 1.3.11 (same problem with 1.4) on Debian (rel. 7.3). After installing libreadline6-dev library configuration passed with following result: BIRD was configured with the following options: Source directory: . Object directory: obj Iproute2 directory: /etc/iproute2 System configuration: ./sysdep/cf/linux.h Debugging: no Routing protocols: bgp ospf pipe rip static Client: yes But when I run make command I get error: .... ../../client/birdc.c:16:20: fatal error: curses.h: File or catalog not found compilation terminated. make[2] : *** [birdc.o] Error 1 make[2] : Leaving '/home/user/bird-1.4/obj/client' catalog make[1] : *** [subdir] Error 2 make[1] : Leaving '/home/user/bird-1.4/obj' catalog make: *** [all] Error 2 Best regards, Radoslaw

4 4

feature request: ecmp hash algorithm
by k simon 31 Dec '13

31 Dec '13

Hi,list, I planed use bird box as a load balancer, but I did'nt know bird's ecmp implemention weather support per-connection or per-packet.(I used FREEBSD platform.) And now, bird cannot config ECMP hash algorithm FTOS 9.2(0.0)/9.2(0.2) Configuration Guide for the S4820T System , such as SIP, DIP ,SIP XOR DIP, port etc, base on tulple. Support it will be cool. thanks Simon

1 0

Blackhole for DDoS mitigation
by Andre Nathan 30 Dec '13

30 Dec '13

Hello Let's say I'm facing a DDoS attack against one of my IP addresses. The attack is against a single IP, but it's flooding my network and taking it dow, so I'd like to blackhole it in my Bird router to mitigate the effects of the attack. Is this configuration enough to blackhole an address, say a.b.c.d? protocol static blackhole { table master; route a.b.c.d/32 blackhole; import all; } Thank you, Andre

3 3

System requirements for BIRD
by Tigran Zakoyan 23 Dec '13

23 Dec '13

Dear collegues, I failed to find anything regarding the subject. Could somebody give some prompts on it? Particularily, is a config like CPU: intel ATOM D2550 Dual Core 1.86G 4 thread DDR3 4Gb (or 8Gb) suitable for a 3 GBIT interface BGP router with 2 full view uplinks? I am intending to use something like this: http://www.aliexpress.com/item/2013-New-fanless-network-1U-server-with-inte… Thanks to the dev team, and kind regards. Tigran Zakoyan.

3 8

netflix uses bird
by Allan Pinto 22 Dec '13

22 Dec '13

https://signup.netflix.com/openconnect/software got it off hacker news, thats cloudflare and netflix now -- Thanx and regd's. Allan. http://tamahatta.com

1 0

bgppath.filter question - modifying AS_PATH
by Javor Kliachev 18 Dec '13

18 Dec '13

Hello, We use BIRD as Route Server. According your documentation we would like to know how given AS_PATH can be modified for example: To delete ALL ASNs from given AS_PATH except one AS predefined in int set. Here is my example config: function filter_bgp_as_path() int set remove_as; { remove_as = [ 50 ]; bgp_path.filter(remove_as); return true; } table T65533 protocol pipe P65533 from PIPES { description "TEST"; peer table T65533; export all; } protocol bgp R65533x1 from PEERS { source address 10.0.0.200; description "TEST"; neighbor 10.79.2.2 as 65533; multihop; import none; export where filter_bgp_as_path(); table T65533; passive off; } After running "birdc configure" I see in bird.log to return the following error: 17-12-2013 14:44:47 <ERR> filters, line 8: Can't add/delete to non-(e)clist 17-12-2013 14:44:47 <ERR> filters, line 8: Can't add/delete to non-(e)clist 17-12-2013 14:44:47 <ERR> filters, line 8: Can't add/delete to non-(e)clist Could you please point me in the right direction ? Is it possible at all to modify AS_PATH attribute? Thanks in advance! Best~ -- --- Find out about our new Cloud service - Cloudware.bg <http://cloudware.bg/?utm_source=email&utm_medium=signature&utm_content=link…> Access anywhere. Manage it yourself. Pay as you go. ------------------------------------------------------------------------ *Javor Kliachev* IP Engineer Neterra Ltd. Telephone: +359 2 975 16 16 Fax: +359 2 975 34 36 www.neterra.net <http://www.neterra.net>

3 4

Multiple OSPF adjacencies on same interface...
by Kristoffer Egefelt 16 Dec '13

16 Dec '13

Hi, Is this not supported? I’m trying to use a bonded interface on linux to connect to two routers, one router on each physical link, each with a /31 subnet. Only one of the routers (Force10 S4810) forms adjacency with the linux host (whichever comes first), the other gets stuck in EXSTART until I shut/no shut the link, then Bird creates adjacency with both routers. Quagga works as expected, but I’d rather use Bird due to better filtering etc. Any ideas ? Thanks Regards Kristoffer

5 9

OSPFv3 and logging (debug)
by Dmitry S. Nikolaev 10 Dec '13

10 Dec '13

Hello. Does anyone use OSPFv3 ? My question is about monitoring. We use OSPFv3 over tunnels and have more than one tunnel to one endpoint over different Inet channels (different providers): So, as example this is config of one of the side: protocol ospf office { debug { states, interfaces, events }; tick 1; rfc1583compat yes; area 0.0.0.0 { stub no; interface "ng2" { cost 5; type pointopoint; hello 10; retransmit 3; transmit delay 5; dead count 3; wait 40; }; interface "ng0" { cost 10; type pointopoint; hello 10; retransmit 3; transmit delay 5; dead count 3; wait 40; }; interface "ng1" { cost 30; type pointopoint; hello 10; retransmit 3; transmit delay 5; dead count 3; wait 40; }; }; import filter ospfIN; export filter ospfOUT; } Show OSPF neighbors: # birdc6 BIRD 1.3.11 ready. bird> show ospf neighbors office: Router ID Pri State DTime Interface Router IP 1.1.1.1 1 full/ptp 00:30 ng1 fe80::224:1dff:feb3:720 1.1.1.1 1 full/ptp 00:29 ng2 fe80::224:1dff:feb3:720 1.1.1.1 1 full/ptp 00:30 ng0 fe80::224:1dff:feb3:720 When any OSPF neighbor goes down/up then in log appear: Neighbor fe80::224:1dff:feb3:720 changes state from " full" to " init". Neighbor fe80::224:1dff:feb3:720 changes state from " init" to " 2way". Neighbor fe80::224:1dff:feb3:720 changes state from " 2way" to " exstart". Neighbor fe80::224:1dff:feb3:720 changes state from " exstart" to "exchange". Neighbor fe80::224:1dff:feb3:720 changes state from "exchange" to " loading". Neighbor fe80::224:1dff:feb3:720 changes state from " loading" to " full". But OSPFv3 use link-local address for adjacency and not global IP on the tunnel, example: ng0: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> metric 0 mtu 1500 inet 10.255.255.1 --> 10.255.255.2 netmask 0xffffffff inet6 fe80::224:1dff:feb3:720%ng0 prefixlen 64 scopeid 0x12 inet6 2001:XXX:XXXX:XXX::1:1 --> 2001:XXX:XXXX:XXX::1:2 prefixlen 128 nd6 options=3<PERFORMNUD,ACCEPT_RTADV> Thus it is impossible to understand exactly what neighbor (over what tunnel) change it`s state because there is no iface name in log. So monitoring system can say that some neighbor down/up but can`t say over what tunnel this neighbor was working :( Who faced with the same task ? How to solve? Thanks. P.S. Sorry for my english. -- With best regards, Dmitry S. Nikolaev Moscow, Russia

3 6