- Bird-users - Mailing Lists

Watchdog/Supervise?
by Joe Wooller 28 Apr '13

28 Apr '13

Hey All, Just wondering what people are using to monitor the bird process(es)? Has anyone configured Supervise or the like? I have set up a test BIRD VM and have managed to make it Segfault once… :P Cheers Joe

9 15

BGP password behaviour
by Dan Rimal 28 Apr '13

28 Apr '13

Hello, today i have had very strange experience with bird. Few days ago (approx 6 days) i have established bgp session with bgp password attribute. Since established this session, i have got messages in system log like this: kernel: [2956936.985539] MD5 Hash failed for (195.81.xxx.yy, 179)->(195.81.xxx.yy, 46595) kernel: [2956936.985761] huh, entered softirq 3 NET_RX ffffffff814e7060 preempt_count 00000100, exited with 00000101? But peer was UP, routes was installed, everything seemed OK. I didn't notice this messages for few days althoug messages was added very often. After few days, it changes to: Apr 28 00:33:59 r1 kernel: [3432467.222576] BUG: scheduling while atomic: bird/6356/0x00000001 Apr 28 00:33:59 r1 kernel: [3432467.222656] Modules linked in: binfmt_misc ip_vs nf_conntrack libcrc32c 8021q garp stp llc dummy ipmi_devintf ipmi_si ipmi_msghandler mlx4_en mlx4_core joydev i2c_i801 i2c_core iTCO_wdt iTCO_vendor_support ixgbe i7core_edac ioatdma mdio eda c_core igb dca raid1 [last unloaded: scsi_wait_scan] Apr 28 00:33:59 r1 kernel: [3432467.223323] Pid: 6356, comm: bird Not tainted 3.3.1-3.fc16.x86_64 #1 Apr 28 00:33:59 r1 kernel: [3432467.223423] Call Trace: Apr 28 00:33:59 r1 kernel: [3432467.223510] [<ffffffff815eaec3>] __schedule_bug+0x68/0x6c Apr 28 00:33:59 r1 kernel: [3432467.223582] [<ffffffff815f2b52>] __schedule+0x6f2/0x7b0 Apr 28 00:33:59 r1 kernel: [3432467.223658] [<ffffffff815f2f2f>] schedule+0x3f/0x60 Apr 28 00:33:59 r1 kernel: [3432467.223746] [<ffffffff815f20dc>] schedule_hrtimeout_range_clock+0x12c/0x170 Apr 28 00:33:59 r1 kernel: [3432467.223928] [<ffffffff8107da00>] ? update_rmtp+0x70/0x70 Apr 28 00:33:59 r1 kernel: [3432467.224052] [<ffffffff8107e724>] ? hrtimer_start_range_ns+0x14/0x20 Apr 28 00:33:59 r1 kernel: [3432467.224132] [<ffffffff815f2133>] schedule_hrtimeout_range+0x13/0x20 Apr 28 00:33:59 r1 kernel: [3432467.224251] [<ffffffff81193cc9>] poll_schedule_timeout+0x49/0x70 Apr 28 00:33:59 r1 kernel: [3432467.224367] [<ffffffff81194656>] do_select+0x586/0x6d0 Apr 28 00:33:59 r1 kernel: [3432467.224494] [<ffffffff8107f8bf>] ? up+0x2f/0x50 Apr 28 00:33:59 r1 kernel: [3432467.224583] [<ffffffff81193dd0>] ? poll_freewait+0xe0/0xe0 Apr 28 00:33:59 r1 kernel: [3432467.224663] [<ffffffff81193ec0>] ? __pollwait+0xf0/0xf0 Apr 28 00:33:59 r1 kernel: [3432467.224743] [<ffffffff81193ec0>] ? __pollwait+0xf0/0xf0 Apr 28 00:33:59 r1 kernel: [3432467.224813] [<ffffffff81193ec0>] ? __pollwait+0xf0/0xf0 Apr 28 00:33:59 r1 kernel: [3432467.224911] [<ffffffff81193ec0>] ? __pollwait+0xf0/0xf0 Apr 28 00:33:59 r1 kernel: [3432467.224991] [<ffffffff81193ec0>] ? __pollwait+0xf0/0xf0 Apr 28 00:33:59 r1 kernel: [3432467.225066] [<ffffffff81193ec0>] ? __pollwait+0xf0/0xf0 Apr 28 00:33:59 r1 kernel: [3432467.225136] [<ffffffff81193ec0>] ? __pollwait+0xf0/0xf0 Apr 28 00:33:59 r1 kernel: [3432467.225206] [<ffffffff81193ec0>] ? __pollwait+0xf0/0xf0 Apr 28 00:33:59 r1 kernel: [3432467.225311] [<ffffffff81193ec0>] ? __pollwait+0xf0/0xf0 Apr 28 00:33:59 r1 kernel: [3432467.225405] [<ffffffff8119498c>] core_sys_select+0x1ec/0x370 Apr 28 00:33:59 r1 kernel: [3432467.225491] [<ffffffff8101b6f9>] ? read_tsc+0x9/0x20 Apr 28 00:33:59 r1 kernel: [3432467.225567] [<ffffffff810a4edd>] ? ktime_get_ts+0xad/0xe0 Apr 28 00:33:59 r1 kernel: [3432467.225728] [<ffffffff81194bd0>] sys_select+0xc0/0x100 Apr 28 00:33:59 r1 kernel: [3432467.225866] [<ffffffff815fbfe9>] system_call_fastpath+0x16/0x1b "MD5 hash failed" and "huh, entered.." message was completely replaced by BUG message with high frequency. After another three hours bird received signal HUP (logrotate) and it was deadly for bird, see two last lines: Apr 28 03:32:01 r1 kernel: [3443133.541261] BUG: scheduling while atomic: bird/6356/0x00000001 Apr 28 03:32:01 r1 kernel: [3443133.541341] Modules linked in: binfmt_misc ip_vs nf_conntrack libcrc32c 8021q garp stp llc dummy ipmi_devintf ipmi_si ipmi_msghandler mlx4_en mlx4_core joydev i2c_i801 i2c_core iTCO_wdt iTCO_vendor_support ixgbe i7core_edac ioatdma mdio eda c_core igb dca raid1 [last unloaded: scsi_wait_scan] Apr 28 03:32:01 r1 kernel: [3443133.541697] Pid: 6356, comm: bird Not tainted 3.3.1-3.fc16.x86_64 #1 Apr 28 03:32:01 r1 kernel: [3443133.541768] Call Trace: Apr 28 03:32:01 r1 kernel: [3443133.541838] [<ffffffff815eaec3>] __schedule_bug+0x68/0x6c Apr 28 03:32:01 r1 kernel: [3443133.541913] [<ffffffff815f2b52>] __schedule+0x6f2/0x7b0 Apr 28 03:32:01 r1 kernel: [3443133.542003] [<ffffffff815f2f2f>] schedule+0x3f/0x60 Apr 28 03:32:01 r1 kernel: [3443133.542081] [<ffffffff815f20dc>] schedule_hrtimeout_range_clock+0x12c/0x170 Apr 28 03:32:01 r1 kernel: [3443133.542224] [<ffffffff8107da00>] ? update_rmtp+0x70/0x70 Apr 28 03:32:01 r1 kernel: [3443133.542294] [<ffffffff8107e724>] ? hrtimer_start_range_ns+0x14/0x20 Apr 28 03:32:01 r1 kernel: [3443133.542367] [<ffffffff815f2133>] schedule_hrtimeout_range+0x13/0x20 Apr 28 03:32:01 r1 kernel: [3443133.542441] [<ffffffff81193cc9>] poll_schedule_timeout+0x49/0x70 Apr 28 03:32:01 r1 kernel: [3443133.542534] [<ffffffff81194656>] do_select+0x586/0x6d0 Apr 28 03:32:01 r1 kernel: [3443133.542608] [<ffffffff8151f330>] ? ip_forward_options+0x1f0/0x1f0 Apr 28 03:32:01 r1 kernel: [3443133.542681] [<ffffffff81193dd0>] ? poll_freewait+0xe0/0xe0 Apr 28 03:32:01 r1 kernel: [3443133.542754] [<ffffffff81193ec0>] ? __pollwait+0xf0/0xf0 Apr 28 03:32:01 r1 kernel: [3443133.542826] [<ffffffff81193ec0>] ? __pollwait+0xf0/0xf0 Apr 28 03:32:01 r1 kernel: [3443133.542897] [<ffffffff81193ec0>] ? __pollwait+0xf0/0xf0 Apr 28 03:32:01 r1 kernel: [3443133.542986] [<ffffffff81193ec0>] ? __pollwait+0xf0/0xf0 Apr 28 03:32:01 r1 kernel: [3443133.543064] [<ffffffff81193ec0>] ? __pollwait+0xf0/0xf0 Apr 28 03:32:01 r1 kernel: [3443133.543134] [<ffffffff81193ec0>] ? __pollwait+0xf0/0xf0 Apr 28 03:32:01 r1 kernel: [3443133.543201] [<ffffffff81193ec0>] ? __pollwait+0xf0/0xf0 Apr 28 03:32:01 r1 kernel: [3443133.543285] [<ffffffff81193ec0>] ? __pollwait+0xf0/0xf0 Apr 28 03:32:01 r1 kernel: [3443133.543354] [<ffffffff81193ec0>] ? __pollwait+0xf0/0xf0 Apr 28 03:32:01 r1 kernel: [3443133.543431] [<ffffffff8119498c>] core_sys_select+0x1ec/0x370 Apr 28 03:32:01 r1 kernel: [3443133.543503] [<ffffffff811be1a4>] ? fsnotify+0x1e4/0x290 Apr 28 03:32:01 r1 kernel: [3443133.543579] [<ffffffff8101b6f9>] ? read_tsc+0x9/0x20 Apr 28 03:32:01 r1 kernel: [3443133.543650] [<ffffffff810a4edd>] ? ktime_get_ts+0xad/0xe0 Apr 28 03:32:01 r1 kernel: [3443133.543728] [<ffffffff81194bd0>] sys_select+0xc0/0x100 Apr 28 03:32:01 r1 kernel: [3443133.543797] [<ffffffff815fbfe9>] system_call_fastpath+0x16/0x1b Apr 28 03:32:01 r1 kernel: [3443133.620802] bird[6356]: segfault at 7fb756e54000 ip 00007fb7566f0319 sp 00007fffaf69c350 error 6 Apr 28 03:32:01 r1 kernel: [3443133.620970] note: bird[6356] exited with preempt_count 1 I don't know exactly if this bug is kernel related or bird related, i don't know if BUG message is related to his precedesor "MD5 hash failed" message. I read a little bit about "BUG: scheduling while atomic".. always was related to kernel code, not userspace.. it is a bit confusing. After that, i have disabled md5 auth from affected BGP session and messages are completely gone. Environment: Fedora 16 / 3.3.1-3.fc16.x86_64, BIRD 1.3.9 with this patch: http://marc.info/?l=bird-users&m=136172837801057&w=2 Regards, Daniel

2 1

BGP Extended Communities
by Joe Wooller 24 Apr '13

24 Apr '13

Hey All, Just wondering if anyone in the IXP world would care to share how they do their Communities/Extended Communities and if most of the IXP actually conform to the same standard? BIRD examples appreciated too! Regards Joe

2 3

asynchronous interface updates on CentOS 6.4
by Rob Greenwood 17 Apr '13

17 Apr '13

Hi, I currently have the following bird configuration setup; # Configure logging log syslog { info, remote, auth, error, fatal, bug }; # Set the IPv4 router ID router id <%= router_id %>; # Configure the kernel protocol (for kernel routes) protocol kernel { persist no; # Do not persist routes when bird is stopped learn no; # Do not learn alient routes from the kernel export all; # Export all learnt routes to the kernel import none; # Do not import routes from the kernel } # Configure the direct protocol (for device routes) protocol direct { import all; # Import all directly connected routes into the table export none; # Do not export } # Configure the device protocol device { scan time 120; # Scan the list of interfaces every 120 seconds } When deleting an IP address from an interface (using ip addr del), the route is immediately withdrawn (presumably via asynchronous calls to bird). However, when adding an IP address back to the interface, the route doesn't appear in bird until the scan time kicks in. Should this not be asynchronous also? Thanks, Rob

1 0

a simple scenario using bird
by Nomad Esst 17 Apr '13

17 Apr '13

Hi Sorry for multiple questions. Are there any simple scenarios or tutorials about bird configurations and how mpls can be set? Please help Thanks

1 0

BGPSEC patch
by Michael Baer 16 Apr '13

16 Apr '13

Hi All, We've been working on adding BGPSEC capability to BIRD. I have a link below to patch against v1.3.9 that supports BGPSEC connections between routers. If you desire, the link could also be added to BIRD's related/software wiki. It has only been tested in a small test bed w/linux machines and is currently in an alpha state, but should support the BGPSEC protocol with the exception of confederation handling, and algorithm rollover and of course any bugs. I would be interested in any feedback if anyone wants to play with it. http://bgpsec.tislabs.com/ thanks, Mike -- Michael Baer PARSONS baerm(a)tislabs.com

1 0

MPLS for bird
by Nomad Esst 16 Apr '13

16 Apr '13

Hi guys How can I use MPLS for bird? Thanks

3 4

How to use ROA/RPKI ?
by Arnaud Fenioux 12 Apr '13

12 Apr '13

Hello all, I would like to use ROA filtering on my bird setup to reject invalid prefixes announced by my peers. I know there is currently no easy way to bind bird to an RPKI validator, right? I have to create a table in my conf file with "roa table roa_table_name" I have read ( https://ripe65.ripe.net/presentations/191-BIRD-20120926-OF-RIPE-EIX.pdf) there is a way to populate dynamically this table. How can I do that? "roa add" in cli? Is there a way to flush the table? I have also read (https://github.com/BIRD/bird/blob/master/filter/test.conf) I can use roa_check(). Can I do a filter like this? protocol bgp my_peer { local as 65000; neighbor 192.0.2.1 as 65001; import filter peer_in; } filter peer_in { if roa_check(roa_table_name, net, bgp_path.last) = ROA_INVALID then reject; accept; } Cheers!

2 2

Re: BGP MD5 with Juniper Router
by Ondrej Filip 11 Apr '13

11 Apr '13

On 26.3.2013 12:40, Kay Rechthien wrote: > Hey, > On 08.03.2013, at 16:21, Ondrej Filip <feela(a)network.cz> wrote: > >> On 8.3.2013 09:38, Rashed Alwarrag wrote: >>> Dear birds Experts >> >> Hi Rashed! >> >>> >>> we have a BGP peer between Bird server and Juniper devices , we >>> mentioned that in our Juniper router wrong MD5 password log appear as >>> below >>> >>> kernel: %KERN-4: tcp_auth_ok: Packet from 192.168.0.10:179 >>> <http://192.168.0.10:179> wrong MD5 digest >>> >>> when we capture the BGP update we mentioned that the bird server is >>> sending to the router the update with an unexpected MD5 key and The >>> router ignore this update then again the bird server retransmit the >>> same update with correct MD5 >> >> Are you using Linux or BSD? >> >> Ondrej > > we have the issue also here. Our Routeservers are running latest Ubuntu. > the issue is visible at cisco and juniper routers clearly. there are like ~10 bad packets per day and they don't affect the bgp session but they create a log entry every time at the routers. > Can you send us the output of this command: "ethtool -k <interface>" (posibly 'ethtool -k eth0") This usually helps: /usr/sbin/ethtool -K eth0 tso off /usr/sbin/ethtool -K eth0 gso off /usr/sbin/ethtool -K eth0 sg off > best regards > kay > >

3 5

MBGP: eBGP multihop session incorrect gw attribute value when resolving nexthop
by Sergey Popovich 28 Mar '13

28 Mar '13

I do not know is there is really BUG and should be reported in special manner or our configuration weakness, so I consider to ask before. Deploying BIRD for IPv6 recently on one of the our new Access Server we spot problem: routes not installed by kernel protocol in kernel's routing table. Multihoop MBGP session successfuly established with our RSs (OpenBGP) and route information exchanged in both directions: (confirmed by birdc6 'show route export as65001_rs1' and birdc6 'show route protocol as65001_rs1'). Routing information received from RSes received with correct nexthop (confirmed by birdc6 'show route protocol as65001_rs1 all' and network packet analyzer) But BIRD's `gw` attribute is set to :: (contrary to non :: (not link-local) nexthop received from RSes!) Our configuration follows ========================= We have an Access Server on which we plan to use dual-stack configuration and two Route Servers based on OpenBGP to establish multihop eBGP session with. Configuration for both BGPv4 and MBGP differs only in session network protocol (BGPv4 - over IPv4, MBGP - over IPv6) and small set of filter rules (especially address family dependent). BIRD's version also equal (1.3.9). So far we have no such problem for BGPv4 (IPv4 configuration). Here's BIRD's configuration summary comes ----------------------------------------- ### ## Direct ### protocol direct direct254 { # These routes are not installed in kernel by "kernel254" protocol # (they already installed by kernel (proto kernel)). # # Import these routes to BIRD's internal table to let BIRD correctly # resolve recursive nexthops and late install (by kernel254) into # kernel routing table. interface "bond0.*"; } ### ## Static ### # Install in kernel routing table to route MBGP session packets # to RSes protocol static static254 { # RS1 & RS2 route <rs1_ipv6_address>/128 via <gw_ipv6_to_rs>; route <rs2_ipv6_address>/128 via <gw_ipv6_to_rs>; } ### ## Kernel ### protocol kernel kernel254 { persist no; scan time 120; learn yes; device routes no; kernel table ipt_main; import filter { # Import only routes marked as static if krt_source != ipp_static then reject; accept; }; export all; } ### ## BGP ### # Common BGP session template template bgp bgp_templ { capabilities yes; advertise ipv4 yes; enable route refresh yes; enable as4 yes; start delay time 10; connect retry time 60; startup hold time 30; keepalive time 10; hold time 30; ### This is default for multihop ### gateway recursive; } # RS server filter fl_import_from_as65001 { # Apply ingress route policy here ### ### This is quick (and wery dirty!) workaround for problem: ### Explicitely overwrite `gw' attribute with nexthop value. ### ### Tested and found working. Should be considered as temporary. ### if gw = :: then gw = bgp_next_hop; accept; } filter fl_export_to_as65001 { # Apply egress route policy here accept; } template bgp bgp_templ_rs from bgp_templ { multihop 4; local <our_ipv6_address> as 65002; import filter fl_import_from_as65001; export filter fl_export_to_as65001; } # as65001, rs1 protocol bgp as65001_rs1 from bgp_templ_rs { neighbor <rs1_ipv6_address> as 65001; } # as65001, rs2 protocol bgp as65001_rs2 from bgp_templ_rs { neighbor <rs2_ipv6_address> as 65001; } Detailed problem investigation ============================== This problem probably comes from bgp_set_next_hop() in proto/bgp/packets.c. For IPv6 we have allocating an array of nexthops (with index 0 for NEXT_HOP from packet (or zero if none) and 1 for Link-Local), but it seems in bgp_attach_next_hop() in proto/bgp/packets.c we might set nexthop[1] with IPA_NONE in case no LL address received in update (which is in case of multihop configuration). It seems we need additionally (only?) check for ipa_nonzero(nexthop[1]) in bgp_set_next_hop() as this done in bgp_format_next_hop() and bgp_create_update() in proto/bgp/attrs.c. -- SP5474-RIPE Sergey Popovich

2 1