- Bird-users - Mailing Lists

bird OSPF lsupd bug (FULL/EXCHANGE problem)
by Alexander V. Chernikov 10 Sep '13

10 Sep '13

Hello list! There is a problem in OSPFv2/v3 lsupdate flooding code triggering incorrect state machine change. The problem is triggered under the following OSPF instability conditions: a) bird falls down to init state b) DR router LSA seqnum immediately increases after that c) some problems (like CoPP/policer/high CPU load) preventing DR to send DBD packets fast. In that case the following can happen: * Our local/remote fsm state is EXCHANGE * Some small number of LSA's are sent (so we have no outstanding LSRequests other than DR router LSA) * DR is a bit slow on sending the next portion * Given router LSA is received via other neighbor (so we have empty LSR list) * We are changing state to FULL while other side is stuck in EXCHANGE state. (So in practice we can end with up to 50% neighbors stuck in EXCHANGE state (from DR point of view) in case of OSPF flapping..)

2 1

IPSec design for OSPFv3?
by Thomas Johnson 09 Sep '13

09 Sep '13

I'm looking around, and not seeing anything online regarding how to protect BIRD OSPFv3 with IPSec (at least on FreeBSD). I am able to configure IPSec transport mode to protect unicast traffic between routers; but multicast traffic is still transmitted without AH. A number of sources seem to be setting up a GRE/IPSec tunnel between routers, and running OSPF on that interface, facilitating multicast traffic. That seems counter to performance though, wouldn't data traffic then [needlessly] use the tunnel? Another thought I had was to configure all OSPF interfaces as NBMA, making OSPF traffic easier to protect. Thoughts on this? Are BIRD users just skipping authentication for OSPFv3? Thanks, -- Thomas Johnson -- This e-mail and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient or the individual responsible for delivering the e-mail to the intended recipient, please be advised that you have received this e-mail in error and that any use, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you have received this communication in error, please return it to the sender immediately and delete the original message and any copy of it from your computer system. If you have any questions concerning this message, please contact the sender or call ClaimLynx at (952) 593-5969.

4 3

IPv6 and router advertisement
by Miłosz Oller 05 Sep '13

05 Sep '13

Hi I have a problem with RA. My BIRD config: http://wklej.org/hash/81158faf8c6/ My network config: Protocol radv dc1 on router 1 is "master", protocol radv dc2 on router 2 is "master". vlan 10 - 14 On each vlan interface, eg bond1.10, are assigned addresses (with keepalived): eg 2001:67c:2ad8::1/64 and 2001:67c:2ad8:1::1/64 Problem is on router 2 and protocol dc2. When I assign the address on vlan interface, eg 2001:67c:16f8:2::1/64 dev bond1.10 on router 2, hosts in this vlan recive addresses with this prefix. Host in vlan 10 3: eth0.10@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 inet6 2001:67c:16f8:3:c9dd:c2cb:611e:bcfd/64 scope global temporary dynamic valid_lft 86397sec preferred_lft 14397sec inet6 2001:67c:16f8:3:216:3eff:fe35:578b/64 scope global dynamic valid_lft 86397sec preferred_lft 14397sec inet6 2001:67c:16f8:2:c9dd:c2cb:611e:bcfd/64 scope global temporary dynamic valid_lft 86397sec preferred_lft 14397sec inet6 2001:67c:16f8:2:216:3eff:fe35:578b/64 scope global dynamic With protocol dc1 on router 1 is everything ok. Hosts don't recive any addresses. Why host recive address from router? -- Miłosz

3 2

GRE link state detection
by thegeezer 05 Sep '13

05 Sep '13

Howdy all, i was wondering if anyone has any idea if there is a means by which i can detect GRE link state ? what i have is two sites each with two very unstable internet links in order to vpn between them i have ipsec tunnels linking each side twice (four ipsec tunnels in total) i then have 4x GRE tunnels over the top of those in order that i have a secured routable VPN this gives me net.vpn0 net.vpn1 net.vpn2 and net.vpn3 finally i run BIRD over the top which works very well, and synchronises routing tables between the two sites, and allows for me to do such fun as # /etc/init.d/net.vpn0 stop and watch all traffic automagically cut over to another link. so far so awesome. however, as i said the internet links are very unstable, and sometimes just blackhole. so what i was hoping to do is just enable keepalives on the gre tunnel. which sadly seems to be cisco only. can anyone suggest a way of detecting if the GRE is not fully connected ? BIRD only fails over if the net.vpn0 device is down (ifconfig up/down) and for the life of me i cannot find how to detect if a GRE tunnel is 'connected', it seems to just blindly send packets to the remote IP. is my only choice to use L2TP instead ? thanks in advance for any suggestions; PS if i'm on the wrong list i'd welcome a friendly push to the correct list

4 4

direct protocol behaviour
by Dan Rimal 05 Sep '13

05 Sep '13

Hello, I have problem with direct protocol. I try to export connected routes to "custom" kernel tables, so i have kernel protocol, pipe protocol and appropriate config switches (i hope), see below. Everything seems ok, but there is bad behaviour in one situation. When i have added secondary IP from same subnet to the same interface (like VRRP does) and delete this secondary IP subsequently (like VRRP does on backup state), direct record disappear from bird table too, although primary address is stil up on the interface. To restore connected routes in bird table, i must restart direct protocol which initiate bgp reconnecting on all peers. Steps to reproduce problem: 1) [root@router.devel.f16 ~]# ip addr eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 52:54:00:56:ee:a8 brd ff:ff:ff:ff:ff:ff inet 172.20.24.2/24 brd 172.20.24.255 scope global eth1 [root@router.devel.f16 ~]# birdc BIRD 1.3.9 ready. bird> show route 10.0.10.0/24 dev eth0 [direct1 16:03] * (240) 172.20.24.0/24 dev eth1 [direct1 16:03] * (240) bird> 2) [root@router.devel.f16 ~]# ip addr add 172.20.24.15/24 dev eth1 [root@router.devel.f16 ~]# ip addr eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 52:54:00:56:ee:a8 brd ff:ff:ff:ff:ff:ff inet 172.20.24.2/24 brd 172.20.24.255 scope global eth1 inet 172.20.24.15/24 scope global secondary eth1 3) [root@router.devel.f16 ~]# ip addr del 172.20.24.15/24 dev eth1 [root@router.devel.f16 ~]# birdc BIRD 1.3.9 ready. bird> show route 10.0.10.0/24 dev eth0 [direct1 16:03] * (240) bird> restart direct1 direct1: restarted bird> show route 10.0.10.0/24 dev eth0 [direct1 16:09] * (240) 172.20.24.0/24 dev eth1 [direct1 16:09] * (240) bird> config file: table t_cust; filter to_t_cust { if ( source = RTS_DEVICE ) then { accept; } else { reject; } } protocol kernel { scan time 180; import all; export all; } protocol device { scan time 10; } protocol direct { } protocol pipe p_cust { table t_cust; peer table master; import filter to_t_cust; export none; } protocol kernel k_cust { kernel table 90; table t_cust; persist; device routes; scan time 180; import none; # z kernelu do birda export all; # z birda do kernelu } Regards, Dan Rimal

2 2

BGP syslog
by Jimmy Halim 05 Sep '13

05 Sep '13

Hi guys, Can I confirm with you guys that syslog is only logging the event for BGP Notification errors only? I mean, it does not log the BGP session up and down event? Thanks in advance! Cheers, Jimmy

7 26

Simple load balancing setup with RIP
by jarek 05 Sep '13

05 Sep '13

Hello! Can someone help me with simple load balancing setup ? I tried to do it myself, but failed. This is my case: /--------------\ | NET A | \--------------/ | | +-------eth0--------+ |Router A with bird | +---eth1-----eth2---+ | | Link 1 Link 2 | | /----GW1------GW2----\ | | | NET B | | | \--------------------/ I need that hosts from NET A will connect to hosts in NET B. NET A is my network with router A as default GW. NET B is commercial network with RIP. NET A must be exported over RIP to NET B. Link 1 and Link 2 should work with load balancing and fail over. best regards Jarek

2 1

IPv6 and trigger
by Miłosz Oller 30 Aug '13

30 Aug '13

Hi I have configured IPv6 with radv. It works properly on one router. I have two routers with HA. In documentation is 'trigger prefix' in radv protocol. My config on routers: protocol radv dc { interface "bond1.10" { max ra interval 5; managed no; prefix 2001:67c:2ad8::/64 { autonomous off; }; prefix 2001:67c:2ad8:1::/64 { autonomous off; }; }; trigger 2001:067c:2ad8::/48; } I moved 2001:067c:2ad8:ffff::ffff/48 - bond1 and 2001:67c:2ad8::1/64 - bond1.10 on router 1 to router 2. And it doesn't work. Hosts don't have route to global network. How to configure it properly? -- Miłosz Oller

2 2

[PATCH 1/3] PATCH FLX: Add command line option for specifying the pid file
by Exceliance 28 Aug '13

28 Aug '13

--- sysdep/unix/main.c | 31 +++++++++++++++++++++++++++++-- 1 file changed, 29 insertions(+), 2 deletions(-) diff --git a/sysdep/unix/main.c b/sysdep/unix/main.c index bd80ba2..c0b2b22 100644 --- a/sysdep/unix/main.c +++ b/sysdep/unix/main.c @@ -548,16 +548,17 @@ signal_init(void) * Parsing of command-line arguments */ -static char *opt_list = "c:dD:ps:u:g:"; +static char *opt_list = "c:dD:ps:u:g:P:"; static int parse_and_exit; char *bird_name; static char *use_user; static char *use_group; +static char *pid_file; static void usage(void) { - fprintf(stderr, "Usage: %s [-c <config-file>] [-d] [-D <debug-file>] [-p] [-s <control-socket>] [-u <user>] [-g <group>]\n", bird_name); + fprintf(stderr, "Usage: %s [-c <config-file>] [-d] [-D <debug-file>] [-p] [-s <control-socket>] [-u <user>] [-g <group>] [-P <pid-file>]\n", bird_name); exit(1); } @@ -621,6 +622,28 @@ get_gid(const char *s) return gr->gr_gid; } +static inline void +set_pid(const char *s) +{ + int fd; + char pid[6]; + + if (!s) + return; + + memset(pid, 0, sizeof(pid)); + + if((fd=open(s, O_WRONLY|O_CREAT, 0664)) == -1) + die("Cannot open pid file '%s'", s); + + snprintf(pid, sizeof(pid), "%u", getpid()); + + if(write(fd, pid, sizeof(pid)) == -1) + die("Cannot write pid file '%s'", s); + + return; +} + static void parse_args(int argc, char **argv) { @@ -662,6 +685,9 @@ parse_args(int argc, char **argv) case 'g': use_group = optarg; break; + case 'P': + pid_file = optarg; + break; default: usage(); } @@ -733,6 +759,7 @@ main(int argc, char **argv) dup2(0, 2); } + set_pid(pid_file); signal_init(); #ifdef LOCAL_DEBUG -- 1.8.1.1 --Multipart=_Tue__24_Sep_2013_16_35_48_+0200_AMU0Imo+Flc+Ayzu Content-Type: text/x-diff; name="0003-FEAT-Add-protocol-volatile.patch" Content-Disposition: attachment; filename="0003-FEAT-Add-protocol-volatile.patch" Content-Transfer-Encoding: 7bit

1 0

OSPF generate default route
by Slawa Olhovchenkov 26 Aug '13

26 Aug '13

I have configuration problem: how I can generate default route in OSPF area? Generate, not redistribute from static kernel route or other routing protocol. Generate, not installed into kernel routeng table. Same as for Cisco 'default-information originate always'. Next question: conditional advertise default route (for example -- if present announce in BGP to some network).

4 6