- Bird-users - Mailing Lists

BSD & non-/32 prefixes on p2p linkes
by Alexander V. Chernikov 21 Sep '13

21 Sep '13

Hello list! Currently bird assumes (bsd sysdep) that any prefix on p2p link is /32. For example: bird: direct1 < primary address 10.0.0.3/31 on interface gif15 added bird: Ignoring bogus prefix 10.0.0.3/31 received via direct1 bird: direct1 > invalid 10.0.0.3/31 dev gif15 IPv6 case was fixed in 3f5843740 <https://gitlab.labs.nic.cz/labs/bird/commit/3f58437405f8e37e9c14d83274a6b82…>. Can we do the same for IPv4 ?

2 4

bird + RIP = crash
by Eugene M. Zheganin 21 Sep '13

21 Sep '13

Hi. I'm trying to get rid of quagga on most of my routers. When they run BGP/OSPF everything is fine, but when it comes to RIP, bird crashes. I run bird on a set of VPN tunnels, mostly gre. I need RIP because Cisco marketoids keep on manufacturing small boxes that cannot run OSPF, only RIP is available. Bird crashes as soon as the protocol exchange is started. Here's a backtrace along with some info about the setup: ===Cut=== [emz@moscow-alpha:~/bird.cores]# gdb /usr/local/sbin/bird bird.core GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd"... Core was generated by `bird'. Program terminated with signal 6, Aborted. Reading symbols from /lib/libc.so.7...done. Loaded symbols for /lib/libc.so.7 Reading symbols from /libexec/ld-elf.so.1...done. Loaded symbols for /libexec/ld-elf.so.1 #0 0x00000008007a3abc in kill () from /lib/libc.so.7 (gdb) bt full #0 0x00000008007a3abc in kill () from /lib/libc.so.7 No symbol table info available. #1 0x00000008007a28bb in abort () from /lib/libc.so.7 No symbol table info available. #2 0x000000000044ef49 in bug (msg=Could not find the frame base for "bug". ) at log.c:254 args = Could not find the frame base for "bug". (gdb) bt #0 0x00000008007a3abc in kill () from /lib/libc.so.7 #1 0x00000008007a28bb in abort () from /lib/libc.so.7 #2 0x000000000044ef49 in bug (msg=Could not find the frame base for "bug". ) at log.c:254 #3 0x0000000000437aa6 in advertise_entry (p=0x800a1f920, b=0x800a5b004, whotoldme=2886730539, iface=0x0) at ../../../proto/rip/rip.c:330 #4 0x0000000000437d07 in process_block (p=0x800a1f920, block=0x800a5b004, whotoldme=2886730539, iface=0x0) at ../../../proto/rip/rip.c:386 #5 0x0000000000438054 in rip_process_packet (p=0x800a1f920, packet=0x800a5b000, num=1, whotoldme=2886730539, port=520, iface=0x0) at ../../../proto/rip/rip.c:449 #6 0x0000000000438349 in rip_rx (s=0x800a0e400, size=20) at ../../../proto/rip/rip.c:504 #7 0x00000000004497ef in sk_read (s=0x800a0e400) at io.c:1493 #8 0x0000000000449fe4 in io_loop () at io.c:1707 #9 0x00000000004504fd in main (argc=3, argv=0x7fffffffed48) at main.c:745 (gdb) ===Cut=== ===Cut=== [emz@moscow-alpha:~/bird.cores]# uname -a FreeBSD moscow-alpha 8.3-PRERELEASE FreeBSD 8.3-PRERELEASE #1: Thu Mar 29 16:14:11 MSK 2012 emz@moscow-alpha:/usr/obj/usr/src/sys/MOSCOW amd64 ===Cut=== ===Cut=== /* would be nice to have named lists for these ! :) */ filter importripv4 { if net ~ [ 94.159.37.112/29, 192.168.21.0/24, 172.16.0.95/32, 172.16.3.4/32, 172.16.3.26/32, 172.16.3.28/32, 172.16.3.32/32, 172.16.3.36/32, 172.16.3.42/32, 172.16.3.48/32, 172.16.3.50/32, 172.16.3.66/32, 172.16.3.68/32, 172.16.3.106/32, 172.16.3.108/32, 172.16.3.116/32, 172.16.3.132/32, 172.16.3.136/32, 172.16.3.142/32, 172.16.3.144/32, 172.16.3.146/32, 172.16.3.154/32, 172.16.3.174/32, 172.16.3.184/32, 172.16.3.188/32, 172.16.3.252/32, 172.16.5.0/32, 172.16.5.2/32, 172.16.5.4/32, 172.16.5.8/32, 172.16.0.94/32, 172.16.3.5/32, 172.16.3.27/32, 172.16.3.29/32, 172.16.3.33/32, 172.16.3.37/32, 172.16.3.43/32, 172.16.3.49/32, 172.16.3.51/32, 172.16.3.67/32, 172.16.3.69/32, 172.16.3.107/32, 172.16.3.109/32, 172.16.3.117/32, 172.16.3.133/32, 172.16.3.137/32, 172.16.3.143/32, 172.16.3.145/32, 172.16.3.147/32, 172.16.3.155/32, 172.16.3.175/32, 172.16.3.185/32, 172.16.3.189/32, 172.16.3.253/32, 172.16.5.1/32, 172.16.5.3/32, 172.16.5.5/32, 172.16.5.9/32 ] then reject; accept; } filter exportripv4 { if source = RTS_BGP then reject; if net ~ [ 94.159.37.112/29 ] then reject; accept; } protocol rip ripv4 { interface "gre21", "gre25", "gre6"; honor neighbor; import filter importripv4; export filter exportripv4; } ===Cut=== ===Cut=== [emz@moscow-alpha:/]# ifconfig gre21 gre21: flags=b051<UP,POINTOPOINT,RUNNING,LINK0,LINK1,MULTICAST> metric 0 mtu 1476 tunnel inet 94.159.37.114 --> 188.133.159.62 inet 172.16.3.184 --> 172.16.3.185 netmask 0xffffffff [emz@moscow-alpha:/]# ifconfig gre25 gre25: flags=b051<UP,POINTOPOINT,RUNNING,LINK0,LINK1,MULTICAST> metric 0 mtu 1476 tunnel inet 94.159.37.114 --> 178.219.36.237 inet 172.16.5.2 --> 172.16.5.3 netmask 0xffffffff [emz@moscow-alpha:/]# ifconfig gre6 gre6: flags=b051<UP,POINTOPOINT,RUNNING,LINK0,LINK1,MULTICAST> metric 0 mtu 1476 tunnel inet 94.159.37.114 --> 213.33.223.158 inet 172.16.3.42 --> 172.16.3.43 netmask 0xffffffff ===Cut=== Thanks. Eugene.

2 3

Re: OSPF: LSA disappeared
by Bao Nguyen 21 Sep '13

21 Sep '13

Just want to add to this thread that I'm seeing this behavior on BIRD as well, I'm seeing this on all the machines that I've installed. From the timer, it appeared to happened every 5 seconds.... root@sje17:~# birdc -v 0001 BIRD 1.3.4 ready. Jan 8 02:34:30 sje17 bird: OSPF: LSA disappeared (Type: 0005, Id: 10.25.206.123, Rt: 10.25.15.11) Jan 8 02:34:30 sje17 bird: OSPF: LSA disappeared (Type: 0005, Id: 10.25.205.147, Rt: 10.25.15.17) Jan 8 02:34:30 sje17 bird: OSPF: LSA disappeared (Type: 0001, Id: 10.25.15.3, Rt: 10.25.15.3) Jan 8 02:34:30 sje17 bird: OSPF: LSA disappeared (Type: 0001, Id: 10.25.15.4, Rt: 10.25.15.4) Jan 8 02:34:30 sje17 bird: OSPF: LSA disappeared (Type: 0002, Id: 10.25.202.1, Rt: 10.25.239.11) Jan 8 02:34:30 sje17 bird: OSPF: LSA disappeared (Type: 0002, Id: 10.25.201.1, Rt: 10.25.239.10) Jan 8 02:34:30 sje17 bird: OSPF: LSA disappeared (Type: 0002, Id: 10.25.201.13, Rt: 10.25.239.10) Jan 8 02:34:30 sje17 bird: OSPF: LSA disappeared (Type: 0005, Id: 10.25.201.12, Rt: 10.25.10.4) Jan 8 02:34:35 sje17 bird: OSPF: LSA disappeared (Type: 0005, Id: 10.25.206.123, Rt: 10.25.15.11) Jan 8 02:34:35 sje17 bird: OSPF: LSA disappeared (Type: 0005, Id: 10.25.205.147, Rt: 10.25.15.17) Jan 8 02:34:35 sje17 bird: OSPF: LSA disappeared (Type: 0001, Id: 10.25.15.3, Rt: 10.25.15.3) Jan 8 02:34:35 sje17 bird: OSPF: LSA disappeared (Type: 0001, Id: 10.25.15.4, Rt: 10.25.15.4) Jan 8 02:34:35 sje17 bird: OSPF: LSA disappeared (Type: 0002, Id: 10.25.202.1, Rt: 10.25.239.11) Jan 8 02:34:35 sje17 bird: OSPF: LSA disappeared (Type: 0002, Id: 10.25.201.1, Rt: 10.25.239.10) Jan 8 02:34:35 sje17 bird: OSPF: LSA disappeared (Type: 0002, Id: 10.25.201.13, Rt: 10.25.239.10) Jan 8 02:34:35 sje17 bird: OSPF: LSA disappeared (Type: 0005, Id: 10.25.201.12, Rt: 10.25.10.4) -bn 0216331C

3 7

bgp multipath ?? Help needed
by HL 21 Sep '13

21 Sep '13

Hello, I've tried this config in order to achive multipath some-load balance and fail over with bgp but with no luck.. bgp prefers one of the default GWs, so I had to use static multipath to achieve it, but this is for operating reasons only, I would like bgp to do it What is wrong with my config ??? Thanks Harry -------------------------- log syslog all; router id 10.0.173.254; protocol device { scan time 10; } protocol kernel { export all; scan time 15; } protocol static { preference 150; route 0.0.0.0/0 multipath via 10.0.11.1 weight 100 via 10.0.12.1 weight 5; } protocol static static_bgp { import all; route 10.0.0.0/8 reject; #route A.B.C.0/24 reject; #route D.E.F.0/24 reject; } protocol bgp c2811_1 { import all; export where proto = "static_bgp"; local as 64580; neighbor 10.0.11.1 as 64561; } protocol bgp c2811_2 { import all; export where proto = "static_bgp"; local as 64580; neighbor 10.0.12.1 as 64562; } ---------------------------------------------

2 1

bgp load balance and ipv6 radvd
by HL 17 Sep '13

17 Sep '13

Hello, I am watching this project for a year now and I Feel that it's time to try some of its features I have 2x2811 cisco connected to the isps Behind them I have a linux box running shorewall firewall and wish to have some routing daemon to manage fail over and load ballancing ... cisco 1 is confed as ------------------------------------- ! router bgp 12 no synchronization bgp router-id xx.xx.xx.xx bgp log-neighbor-changes network 0.0.0.0 redistribute connected neighbor 10.0.11.2 remote-as 10 auto-summary ! ------------------------------------------ cisco 2 as ! router bgp 11 no synchronization bgp router-id xx.xx.xx.xx bgp log-neighbor-changes network 0.0.0.0 redistribute connected neighbor 10.0.12.2 remote-as 10 auto-summary ! --------------------------------------------- The linux BOX is running an old version of quagga bgp soon to be updated current config is ----------------------------------------------------------- Current configuration: ! hostname bgpd log stdout ! router bgp 10 bgp router-id 10.0.173.254 bgp log-neighbor-changes network 10.0.173.0/24 network 10.168.1.0/24 network xx.xx.xx.xx network xx.xx.xx.xx neighbor 10.0.11.1 remote-as 12 neighbor 10.0.11.1 weight 100 neighbor 10.0.11.1 soft-reconfiguration inbound neighbor 10.0.11.1 route-map rm_peer_1_in in neighbor 10.0.12.1 remote-as 11 neighbor 10.0.12.1 weight 50 neighbor 10.0.12.1 soft-reconfiguration inbound neighbor 10.0.12.1 route-map rm_peer_2_in in ! route-map rm_peer_1_in permit 5 set local-preference 100 ! route-map rm_peer_2_in permit 5 set local-preference 100 ! line vty ! end ------------------------------------------------------------------------------------------------- and show ip bgp shows bgpd# show ip bgp BGP table version is 0, local router ID is 10.0.173.254 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, R Removed Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf Weight Path * 0.0.0.0 10.0.12.1 0 100 50 11 i *> 10.0.11.1 0 100 100 12 i ------------------------------------------------------------------------------------------------------------------------------- Ok so far so good ... Can I achieve the load balancer and fail over with bird with a conf like the above ... If yes that is Great cause here comes Q2 Q2 One of the isp's is giving me a /64 ipv6 dynamic prefix .... Since I thought I saw some radvd daemon included in bird ... Can radvd be confed to break this dynamic ipv6 and distribute it to the internal zones and network ??? Thanx in advance. Regards Harry.

2 1

LSA disappeared
by Eugene M. Zheganin 17 Sep '13

17 Sep '13

Hi. I got rid of quagga on one of my largest UNIX router, now the log is filling with 'LSA disappeared' messages. Not that it's a huge problem, but how do I get rid of them ? This doesn't look like a network problem or protocol misconfiguration, for example, when an pptp link goes down on a neiboring bird router, I got 'LSA disappeared' about this pptp link on this one. In the same time having log syslog { warning }; looks pretty enough for me. or does this message mean that it's some sort of problem ? Thanks. Eugene.

2 1

bird OSPFv2 exstart & router-id change
by Alexander V. Chernikov 13 Sep '13

13 Sep '13

Hello list! There is a "bug" in hello validation code causing neighbor to stuck in "exstart" state forever in case of router id change. RFC 2328 tells us to rely on neighbor source address for Broadcast/PtMP/MBMA links (10.5). No special checks are required for the router id (the same, 10.5). So, the problem can easily be repeated with 2 bird instances: B1 (rtr-id 1.2.3.22) B2 (rtr-id 1.2.3.20) Configure OSPFv2 on some shared medium, wait until they become adjacent (actually, FULL) Change B2 rtr-id to 1.2.3.200 and perform re-configure. Bird then (like any other good implementation) will send new hello without any neighbors in it, so B1 changes its state to "Down". When going to 'exstart' state the following problem occurs: B1 "remembers" old rtr-id (which is smaller than B1's) so it assumes B2 to be the master. B2 by the same rules assumes B1 is the master, so they start infinite DBDES ping-pong every RxmitInterval seconds (10.8) Patch to fix this behavior attached.

2 1

import functions & filters at same time of BGP protocol
by Javor Kliachev 12 Sep '13

12 Sep '13

Hello, I would like to know what will happen if we use function & filters configured at same time on import direction of given BGP procotol. Which is first pass? Till now we use one function to many applied to many BGP protocol with arguments and everything seems fine. But when I decided to apply and "filter import <some filter>" all conditions and rules in my applied function was totally ignored. Only the condition in the filter was checked. Here is my simple filter configuration: filter in_AS1234 { if ( net = 10.10.10.0/24 ) then reject; else accept; } My BGP protocol has following structure: protocol bgp R0_88 from PEERS { description "0.88_Customer"; neighbor 10.0.0.88 as 1234; import where MM_BGP_IN(1234,1,1); export where MM_BGP_OUT(1234); import filter in_AS1234; table T1234; route limit 1000; } Thank you for your help in advance. Best~ -- --- Find out about our new Cloud service - Cloudware.bg <http://cloudware.bg/?utm_source=email&utm_medium=signature&utm_content=link…> Access anywhere. Manage it yourself. Pay as you go. ------------------------------------------------------------------------ *Javor Kliachev* IP Engineer Neterra Ltd. Telephone: +359 2 975 16 16 Fax: +359 2 975 34 36 www.neterra.net <http://www.neterra.net>

2 3

BIRD and RPKI
by Michael Baer 11 Sep '13

11 Sep '13

Hi, I've been working on a BGPSEC implementation using BIRD. A requirement of the BGPSEC protocol is the availability of origin authentication using the RPKI. I understand that BIRD has implemented roa_tables that will allow a user to filter routes based on asn/prefix information pulled from the RPKI. It looks like it would be pretty straight forward to have a separate tool that uses one of the available RPKI pulling packages and then populates the roa_tables using BIRD's CLI or configuration interface. But for the sake of not duplicating effort and to make sure that I'm not missing anything, is this the expected method for someone supporting origin authentication in BIRD? or are there (currently) future plans for support that is more integral to BIRD? Thanks, Mike -- Michael Baer PARSONS baerm(a)tislabs.com

2 1

compiling bird for Synology DS713+
by Александр 11 Sep '13

11 Sep '13

Hello! I want to compile bird for Synology DS713+ (Linux DiskStation 3.2.40 #3776 SMP Mon Aug 26 23:41:39 CST 2013 x86_64 GNU/Linux), but fails here is configure output =========Beginning of the citation============== checking for gcc... gcc checking whether the C compiler works... yes checking for C compiler default output file name... a.out checking for suffix of executables... checking whether we are cross compiling... no checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed checking for library containing clock_gettime... -lrt checking build system type... x86_64-unknown-linux-gnu checking host system type... x86_64-unknown-linux-gnu checking for gcc... (cached) gcc checking whether we are using the GNU C compiler... (cached) yes checking whether gcc accepts -g... (cached) yes checking for gcc option to accept ISO C89... (cached) none needed checking whether CC supports -Wno-pointer-sign... yes checking whether CC supports -fno-strict-aliasing... yes checking whether CC supports -fno-strict-overflow... yes checking CFLAGS... -g -O2 -Wall -Wstrict-prototypes -Wno-parentheses -Wno-pointer-sign -fno-strict-a liasing -fno-strict-overflow checking how to run the C preprocessor... gcc -E checking for a BSD-compatible install... /opt/bin/install -c checking for ranlib... ranlib checking for flex... flex checking for bison... bison checking for gm4... no checking for m4... m4 checking which OS configuration should we use... ./sysdep/cf/linux.h checking system-dependent directories... sysdep/linux sysdep/unix lib checking protocols... ok checking for linux/rtnetlink.h... yes checking for grep that handles long lines and -e... /bin/grep checking for egrep... /bin/grep -E checking for ANSI C header files... yes checking for sys/types.h... yes checking for sys/stat.h... yes checking for stdlib.h... yes checking for string.h... yes checking for memory.h... yes checking for strings.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for unistd.h... yes checking syslog.h usability... yes checking syslog.h presence... yes checking for strings.h... yes checking alloca.h usability... yes checking alloca.h presence... yes checking for alloca.h... yes checking whether 'struct sockaddr' has sa_len... no checking whether byte ordering is bigendian... no checking size of char... 1 checking size of short int... 2 checking size of int... 4 checking size of long int... 4 checking size of long long int... 8 checking for 8-bit type... char checking for 16-bit type... short int checking for 32-bit type... int checking for 64-bit type... long long int checking usual alignment of structures... 8 checking characteristics of time_t... 32-bit signed checking for struct ip_mreqn... yes checking for add_history in -lhistory... yes checking for tgetent in -lncurses... yes checking for rl_callback_read_char in -lreadline... yes checking for rl_crlf in -lreadline... yes checking for rl_ding in -lreadline... yes configure: creating ./config.status config.status: creating Makefile config.status: creating obj/Makefile config.status: creating obj/Rules config.status: creating obj/sysdep/autoconf.h config.status: obj/sysdep/autoconf.h is unchanged config.status: executing merge commands Merging system-dependent modules (sysdep/linux sysdep/unix lib) BIRD was configured with the following options: Source directory: . Object directory: obj Iproute2 directory: /etc/iproute2 System configuration: ./sysdep/cf/linux.h Debugging: no Routing protocols: bgp ospf pipe rip static =========The end of the citation================ and make, which is fails =========Beginning of the citation============== make -C obj all make[1]: Entering directory `/volume1/tmp/bird-1.3.11/obj' echo > sysdep/paths.h "/* Generated by Makefile, don't edit manually! */" echo >> sysdep/paths.h "#define PATH_CONFIG_FILE \"/usr/local/etc/bird.conf\"" echo >> sysdep/paths.h "#define PATH_CONTROL_SOCKET \"/usr/local/var/run/bird.ctl\"" if test -n "/etc/iproute2" ; then echo >>sysdep/paths.h "#define PATH_IPROUTE_DIR \"/etc/iproute2\"" fi make depend make[2]: Entering directory `/volume1/tmp/bird-1.3.11/obj' mkdir -p nest filter proto/bgp proto/ospf proto/pipe proto/rip proto/static client doc touch .dir-stamp set -e ; for a in lib conf ; do make -C $a depend ; done make[3]: Entering directory `/volume1/tmp/bird-1.3.11/obj/lib' gcc -I../ -I../.. -MM bitops.c checksum.c event.c io.c ip.c ipv4.c krt.c lists.c log.c main.c md5.c mempool.c netlink.c patmatch.c printf.c random.c resource.c slab.c slists.c xmalloc.c >depend make[3]: Leaving directory `/volume1/tmp/bird-1.3.11/obj/lib' make[3]: Entering directory `/volume1/tmp/bird-1.3.11/obj/conf' m4 -P ../../conf/gen_keywords.m4 ../../conf/confbase.Y ../../sysdep/unix/config.Y ../../sysdep/unix/ krt.Y ../../sysdep/linux/netlink.Y ../../nest/config.Y ../../filter/config.Y ../../proto/bgp/config .Y ../../proto/ospf/config.Y ../../proto/pipe/config.Y ../../proto/rip/config.Y ../../proto/static/c onfig.Y >keywords.h m4 -P ../../conf/gen_commands.m4 ../../client/cmds.m4 ../../conf/confbase.Y ../../sysdep/unix/config .Y ../../sysdep/unix/krt.Y ../../sysdep/linux/netlink.Y ../../nest/config.Y ../../filter/config.Y . ./../proto/bgp/config.Y ../../proto/ospf/config.Y ../../proto/pipe/config.Y ../../proto/rip/config.Y ../../proto/static/config.Y | sort >commands.h m4 -P ../../conf/gen_parser.m4 ../../conf/confbase.Y ../../sysdep/unix/config.Y ../../sysdep/unix/kr t.Y ../../sysdep/linux/netlink.Y ../../nest/config.Y ../../filter/config.Y ../../proto/bgp/config.Y ../../proto/ospf/config.Y ../../proto/pipe/config.Y ../../proto/rip/config.Y ../../proto/static/con fig.Y >cf-parse.y bison -bcf-parse -dv -pcf_ cf-parse.y make[3]: *** [cf-parse.tab.c] Broken pipe make[3]: Leaving directory `/volume1/tmp/bird-1.3.11/obj/conf' make[2]: *** [depend] Error 2 make[2]: Leaving directory `/volume1/tmp/bird-1.3.11/obj' make[1]: *** [.dep-stamp] Error 2 make[1]: Leaving directory `/volume1/tmp/bird-1.3.11/obj' make: *** [all] Error 2 =========The end of the citation================ what can I do to compile it? thanks.

2 1