- Bird-users - Mailing Lists

New release 1.3.7!
by Ondrej Filip 23 Mar '12

23 Mar '12

Hi! Santiago did a great job again and we have a new version! Changes: Version 1.3.7 o Route Origin Authorization basics. o RIPng working again. o Extended clist operations in filters. o Fixes several bugs in BSD iface handling. o Several minor bugfixes and enhancements.

3 3

adding bgpsec to bird
by Michael Baer 20 Mar '12

20 Mar '12

Hi All, We've been working on an extension to BIRD supporting the BGPSec protocol that is currently being discussed in the IETF SIDR Working Group. And I had some questions I wanted to ask the BIRD developers. If the user list isn't the appropriate forum, let me know and we can discuss it elsewhere or offline. We've made some initial progress, although it's not even to what I would call an Alpha stage yet. Our current plan is to have a beta/alpha working by the beginning of Summer and to continue work on it for up to a year afterwords. We would like to have the work contributed back to the BIRD project. Which brings me to the questions I had. Is the BIRD team interested in the contribution? Are we in conflict with any work you are doing to support BGPSec? (I haven't seen any mention on the user list, but I don't know if there has been any work otherwise). Assuming you are interested, besides that our code should have a compatible license, i.e. GPL, and it should try match the coding style of the files that are modified, are there any other requirements or desires that you may have regarding code enhancements and contributions to the BIRD project? Thanks, Mike -- Michael Baer baerm(a)tislabs.com

3 6

community features request
by Oleg 19 Mar '12

19 Mar '12

Hi, list. I have the next situation. I want to filter our AS communities in an input filter. So, i made the next function for this: function filter_communities(pair set allowed) clist comm; pair set def_allowed; bool is_empty; { def_allowed = [(myas,1000), (myas,1001), (myas,1002)]; if ( (0,0) ~ allowed ) then allowed = def_allowed; comm = filter(bgp_community, allowed); bgp_community.delete([(myas,*)]); is_empty = true; if (( (myas,1000) ~ comm ) && ( (myas,1000) ~ allowed )) then { is_empty = false; bgp_community.add((myas,1000)); } if (( (myas,1001) ~ comm ) && ( (myas,1001) ~ allowed )) then { is_empty = false; bgp_community.add((myas,1001)); } if (( (myas,1002) ~ comm ) && ( (myas,1002) ~ allowed )) then { is_empty = false; bgp_community.add((myas,1002)); } if (( is_empty ) && ( (myas,1000) ~ allowed )) then bgp_community.add((myas,1000)); } Code overview: We have some allowed communities passed in function as a parameter (if we pass [(0,0)], then it treats like a NULL and default communities list is applied (def_allowed)). At first, we delete all not allowed our AS communities from bgp_community, but preserve not our AS communities. Then we insert default community (myas,1000), if we have no our AS community at all and (myas,1000) is allowed. So, what's wrong. It works fine, but the code seems some strange: 1. If we have empty clist or empty pair set constructions, we can do if ( allowed = [] ) then instead of hack with (0,0) community; 2. add(C,P) cann't get pair set like delete(C,P) do and 3. we have incompatible types clist and pair set (Why? Why cann't pair set be modifiable?). So we cann't simply do comm = filter(bgp_community, allowed); bgp_community.delete([(51230,*)]); bgp_community.add(comm); instead of tons of lines. So, if all of above would be true, we could write: function filter_communities(pair set allowed) pair set comm; pair set def_allowed; { def_allowed = [(myas,1000), (myas,1001), (myas,1002)]; if ( allowed = [] ) then allowed = def_allowed; comm = filter(bgp_community, allowed); bgp_community.delete([(myas,*)]); bgp_community.add(comm); if (( comm = [] ) && ( (myas,1000) ~ allowed )) then bgp_community.add((myas,1000)); } May be i do something wrong and my code can be simplified? Thanks.

3 8

Some small CLI changes
by Alexander V. Chernikov 19 Mar '12

19 Mar '12

Hello list! Two small additions: 1) Type filter can be specified in 'show symbols' command, like: 'show symbols table' 2) lsa database can be filtered by adv-router ID, like: 'show ospf lsadb advrouter 1.2.3.4' P.S. switch {} in show symbols is added in hope that a bit more info will be added when printing other data (it prints table type in "mpls/reflector" version, for example)

2 1

exporting routes to kernel
by Tomasz Głuch 19 Mar '12

19 Mar '12

Hi! I'm trying configure BIRD 1.3.6 on Centos 5.8. I have 2 routing tables. In default table I've routes imported from kernel, static and direct protocols: root@tomasz:~# ip ro s 10.110.10.5 dev eth0 proto bird 192.168.100.0/24 dev virbr1 proto kernel scope link src 192.168.100.1 10.110.10.0/24 dev eth0 proto kernel scope link src 10.110.10.27 192.168.122.0/24 dev virbr0 proto kernel scope link src 192.168.122.1 169.254.0.0/16 dev eth0 scope link metric 1000 default via 10.110.10.1 dev eth0 metric 100 root@tomasz:~# birdc BIRD 1.3.6 ready. bird> show route 0.0.0.0/0 via 10.110.10.1 on eth0 [kernel1 12:55] * (10) 192.168.100.0/24 dev virbr1 [direct1 12:55] * (240) 192.168.122.0/24 dev virbr0 [direct1 12:55] * (240) 10.110.10.5/32 dev eth0 [static1 12:55] * (200) 10.110.10.0/24 dev eth0 [direct1 12:55] * (240) Now, I would like to copy them to table 'testable'. Pipe protocol is configured with import all and export all filters. Bird's table testable includes all routes according to filters, but only static routes are exported to kernel2 table testable: bird> show route table testable 0.0.0.0/0 via 10.110.10.1 on eth0 [kernel1 12:55] * (10) 192.168.100.0/24 dev virbr1 [direct1 12:55] * (240) 192.168.122.0/24 dev virbr0 [direct1 12:55] * (240) 10.110.10.5/32 dev eth0 [static1 12:55] * (200) 10.110.10.0/24 dev eth0 [direct1 12:55] * (240) bird> q root@tomasz:~# ip ro s table testable 10.110.10.5 dev eth0 proto bird default via 10.110.10.1 dev eth0 proto bird In debug logs I spotted lines: Mar 15 12:55:53 tomasz bird: pipe1 < added 192.168.100.0/24 dev virbr1 Mar 15 12:55:53 tomasz bird: pipe1 < rejected by protocol 192.168.100.0/24 dev virbr1 It seems to be filtered out by krt_import_control() in krt.c. I prepare dirty hack as below and routes are propagated as I want. diff --git a/sysdep/unix/krt.c b/sysdep/unix/krt.c index 0fb8c4f..55a1a0a 100644 --- a/sysdep/unix/krt.c +++ b/sysdep/unix/krt.c @@ -770,7 +770,7 @@ krt_import_control(struct proto *P, rte **new, ea_list **attrs, struct linpool * if (!KRT_CF->devroutes && (e->attrs->dest == RTD_DEVICE) && - (e->attrs->source != RTS_STATIC_DEVICE)) + (!(e->attrs->source == RTS_STATIC_DEVICE || e->attrs->source == RTS_DEVICE))) return -1; if (!krt_capable(e)) Is there any reason to not accept routes other than RTS_STATIC_DEVICE, assuming that possible loops are filtered out? Is other approach for this issue? The same problem occurs when routes origin from OSPF. Minimal config which problem occurs on: router id 10.110.10.27; table testable; debug protocols all; protocol direct { interface "*"; export all; } protocol kernel { learn; # Learn all alien routes from the kernel persist; # Don't remove routes on bird shutdown scan time 20; # Scan kernel routing table every 20 seconds export all; # Default is export none } protocol kernel { table testable; persist; # Don't remove routes on bird shutdown scan time 20; # Scan kernel routing table every 20 seconds export all; # Default is export none kernel table 252; # Kernel table to synchronize with (default: main) } protocol device { scan time 10; # Scan interfaces every 10 seconds } protocol static { route 10.110.10.5/32 via "eth0"; } protocol pipe { peer table testable; import all; # default is all export all; # default is none } -- Best Regards, Tomasz Głuch groups @ tomaszgluch.pl

3 4

BIRD-1.3.6 - show bgp summary command
by Dean Belev 14 Mar '12

14 Mar '12

Hi there, Is the patch for 1.3.4 (http://marc.info/?l=bird-users&m=132155489919052&w=2 <http://marc.info/?l=bird-users&m=132155489919052&w=2>) usable for 1.3.6 ? We have a strange behavior when we tried to implement it for 1.3.6 - the process stops right after the Enter is triggered. But the "?" function works correctly. Best~ -- Dean Belev Network Management Team Neterra Ltd. Sofia, Bulgaria Phone: +359 2 974 33 11 Fax: +359 2 975 34 36 Mobile: +359 886 663 123 http://www.neterra.net

7 12

bird reflector: release 20120307 - Release candidate 1
by Alexander V. Chernikov 14 Mar '12

14 Mar '12

Hello list! Changelog: * Fix pipe transparent mode * Fix duplicated interfaces in OSPF in initial stage (reported by Nikita Shirokov) * Fix several major bugs in VPNv4 family (reported by Marek Zbroch) * Send withdraw label as asked by RFC3107 * Implement show symbols [table|protocol|etc..] filtering * Implement show ospf lsadb filtering by router id * Merge IPv6 macro/functions * Permit RD / IPv6 to be used in 'show route' for VPN/labeled families Link: http://bird.mpls.in/distfiles/bird/bird-20120307.tar.gz Documentation: http://bird.mpls.in/projects/mpls-bird/wiki/Bird_rr Git: http://bird.mpls.in/projects/mpls-bird/repository/show?rev=l3vpn Setup: Do configure with --enable-mpls switch (FreeBSD example) ./configure --prefix=/usr/local --mandir=/usr/local/man --infodir=/usr/local/info/ --build=amd64-portbld-freebsd8.2 --enable-mpls FreeBSD users can edit net/bird-devel port, change its version to 20120307 and call 'make makesum' This version is considered as RC1. Feel free to send questions/suggestions/patches.

1 0

BGP Local preference for prefix
by Marek Wajdzik 13 Mar '12

13 Mar '12

Is there a possibility to change bgp local preference of single prefix in import filter? If yes, then how to do it? Rgrds

3 2

[PATCH] Allow to match on the kernel route protocol in filters
by Jérémie Dimino 13 Mar '12

13 Mar '12

This patch add the two following attributes: - krt_source: an enum which export the value of u.krt.src - krt_proto: an integer which export the value of u.krt.proto --- doc/bird.sgml | 9 +++++++++ filter/config.Y | 10 +++++++++- filter/filter.c | 8 ++++++++ filter/filter.h | 1 + sysdep/unix/config.Y | 2 ++ sysdep/unix/main.c | 2 +- 6 files changed, 30 insertions(+), 2 deletions(-) diff --git a/doc/bird.sgml b/doc/bird.sgml index b8dabf4..d74483d 100644 --- a/doc/bird.sgml +++ b/doc/bird.sgml @@ -991,6 +991,9 @@ undefined value is regarded as empty clist for most purposes. <tag><m/enum/ dest</tag> Type of destination the packets should be sent to (<cf/RTD_ROUTER/ for forwarding to a neighboring router, <cf/RTD_DEVICE/ for routing to a directly-connected network, <cf/RTD_BLACKHOLE/ for packets to be silently discarded, <cf/RTD_UNREACHABLE/, <cf/RTD_PROHIBIT/ for packets that should be returned with ICMP host unreachable / ICMP administratively prohibited messages). Read-only. + <tag><m/enum/ krt_source</tag> + the source of kernel routes. Possible values: <cf/KRT_SRC_BIRD/, <cf/KRT_SRC_REDIRECT/, <cf/KRT_SRC_ALIEN/, <cf/KRT_SRC_KERNEL/. + <tag><m/int/ igp_metric</tag> The optional attribute that can be used to specify a distance to the network for routes that do not have a native protocol @@ -1603,6 +1606,12 @@ We support these attributes: <tag>int <cf/krt_realm/</tag> (Linux) The realm of the route. Can be used for traffic classification. + + <tag>enum krt_source <cf/krt_source/</tag> The source of the route. + + <tag>int <cf/krt_proto/</tag> The OS-dependent source of the route. + It is more precice than <cf/krt_source/ but is not available on all systems. + Currently its value is only meaningful under Linux. </descrip> <sect1>Example diff --git a/filter/config.Y b/filter/config.Y index 0166d27..65a2ee2 100644 --- a/filter/config.Y +++ b/filter/config.Y @@ -255,6 +255,7 @@ CF_KEYWORDS(FUNCTION, PRINT, PRINTN, UNSET, RETURN, IF, THEN, ELSE, CASE, TRUE, FALSE, RT, RO, UNKNOWN, GENERIC, FROM, GW, NET, MASK, PROTO, SOURCE, SCOPE, CAST, DEST, PREFERENCE, + KRT_PROTO, KRT_SOURCE, LEN, DEFINED, ADD, DELETE, CONTAINS, RESET, @@ -265,7 +266,7 @@ CF_KEYWORDS(FUNCTION, PRINT, PRINTN, UNSET, RETURN, %nonassoc THEN %nonassoc ELSE -%type <x> term block cmds cmds_int cmd function_body constant constructor print_one print_list var_list var_listn dynamic_attr static_attr function_call symbol bgp_path_expr +%type <x> term block cmds cmds_int cmd function_body constant constructor print_one print_list var_list var_listn dynamic_attr static_attr krt_attr function_call symbol bgp_path_expr %type <f> filter filter_body where_filter %type <i> type break_command pair_expr ec_kind %type <i32> pair_atom ec_expr @@ -705,6 +706,11 @@ static_attr: | DEST { $$ = f_new_inst(); $$->aux = T_ENUM_RTD; $$->a2.i = OFFSETOF(struct rta, dest); } ; +krt_attr: + KRT_SOURCE { $$ = f_new_inst(); $$->aux = T_ENUM_KRT_SOURCE; $$->a2.i = OFFSETOF(struct rte, u.krt.src); } + | KRT_PROTO { $$ = f_new_inst(); $$->aux = T_INT; $$->a2.i = OFFSETOF(struct rte, u.krt.proto); } + ; + term: '(' term ')' { $$ = $2; } | term '+' term { $$ = f_new_inst(); $$->code = '+'; $$->a1.p = $1; $$->a2.p = $3; } @@ -733,6 +739,8 @@ term: | rtadot dynamic_attr { $$ = $2; $$->code = P('e','a'); } + | rtadot krt_attr { $$ = $2; $$->code = 'k'; } + | term '.' IP { $$ = f_new_inst(); $$->code = P('c','p'); $$->a1.p = $1; $$->aux = T_IP; } | term '.' LEN { $$ = f_new_inst(); $$->code = 'L'; $$->a1.p = $1; } | term '.' MASK '(' term ')' { $$ = f_new_inst(); $$->code = P('i','M'); $$->a1.p = $1; $$->a2.p = $5; } diff --git a/filter/filter.c b/filter/filter.c index d6d338b..8cea76b 100644 --- a/filter/filter.c +++ b/filter/filter.c @@ -833,6 +833,14 @@ interpret(struct f_inst *what) } } break; + case 'k': /* u.krt access */ + { + res.type = what->aux; + if ((*f_rte)->attrs->source == RTS_INHERIT) + res.val.i = * ((char *) (*f_rte) + what->a2.i); + else + res.val.i = -1; + } case P('a','S'): ONEARG; if (what->aux != v1.type) diff --git a/filter/filter.h b/filter/filter.h index 2cf4652..51f5b7e 100644 --- a/filter/filter.h +++ b/filter/filter.h @@ -141,6 +141,7 @@ int tree_compare(const void *p1, const void *p2); #define T_ENUM_SCOPE 0x32 #define T_ENUM_RTC 0x33 #define T_ENUM_RTD 0x34 +#define T_ENUM_KRT_SOURCE 0x35 /* new enums go here */ #define T_ENUM_EMPTY 0x3f /* Special hack for atomic_aggr */ diff --git a/sysdep/unix/config.Y b/sysdep/unix/config.Y index 844f53d..e6d60b0 100644 --- a/sysdep/unix/config.Y +++ b/sysdep/unix/config.Y @@ -16,6 +16,8 @@ CF_DECLS CF_KEYWORDS(LOG, SYSLOG, ALL, DEBUG, TRACE, INFO, REMOTE, WARNING, ERROR, AUTH, FATAL, BUG, STDERR, SOFT) CF_KEYWORDS(TIMEFORMAT, ISO, SHORT, LONG, BASE, NAME) +CF_ENUM(T_ENUM_KRT_SOURCE, KRT_SRC_, BIRD, REDIRECT, ALIEN, KERNEL) + %type <i> log_mask log_mask_list log_cat %type <g> log_file %type <t> cfg_name diff --git a/sysdep/unix/main.c b/sysdep/unix/main.c index d617684..b022be9 100644 --- a/sysdep/unix/main.c +++ b/sysdep/unix/main.c @@ -188,7 +188,7 @@ sysdep_preconfig(struct config *c) init_list(&c->logfiles); #ifdef PATH_IPROUTE_DIR - // read_iproute_table(PATH_IPROUTE_DIR "/rt_protos", "ipp_", 256); + read_iproute_table(PATH_IPROUTE_DIR "/rt_protos", "ipp_", 256); read_iproute_table(PATH_IPROUTE_DIR "/rt_realms", "ipr_", 256); read_iproute_table(PATH_IPROUTE_DIR "/rt_scopes", "ips_", 256); read_iproute_table(PATH_IPROUTE_DIR "/rt_tables", "ipt_", 256); -- 1.7.9.1 --MP_/H2IZm=0dknKvFOfee5JxakH--

1 0

how to define a prefix
by Oleg 11 Mar '12

11 Mar '12

Hello. When I want to define a prefix: define our_net = 192.168.110.0/24; "bird> configure" says me: /etc/bird.conf, line 18: syntax error. bird 1.3.6.

2 2