- Bird-users - Mailing Lists

bird2.15.1 - FreeBSD14
by Torsten Wilms 21 Jun '24

21 Jun '24

I am using FreeBSD 14 with FIBs. With bird2.14 I get routes via BGP and anything is fine. With bird2.15.1 I get routes, but the daemon doesn’t put them into the kernel routing table. Same configuration work with older version. Does something change which has an effect on it? template bgp general_bgp { debug { states, routes, interfaces }; strict bind on; enable route refresh on; graceful restart time 300; hold time 15; keepalive time 5; med metric on; password "*************"; } ipv4 table table_SLICE1 protocol direct direct_SLICE1 { interface "vtnet2"; ipv4 { table table_SLICE1; }; } protocol kernel kernel_SLICE1 { kernel table 1; scan time 10; ipv4 { table table_SLICE1; import all; export all; }; } ### br1 protocol bgp br1_SLICE1 from general_bgp { description "[SLICE1][br1] - BGP Transit Services"; local 100.64.1.185 as 64521; neighbor 100.64.1.7 as 64521; ipv4 { table table_SLICE1; import keep filtered; import all; export none; }; } ### br2 protocol bgp br2_SLICE1 from general_bgp { description "[SLICE1][br2] - BGP Transit Services"; local 100.64.1.185 as 64521; neighbor 100.64.1.8 as 64521; ipv4 { table table_SLICE1; import keep filtered; import all; export none; }; } -------------------- ~ # birdc show route table table_SLICE1 BIRD 2.14 ready. Table table_SLICE1: 0.0.0.0/0 unicast [br1_SLICE1 2024-06-10 09:02:07] * (100) [i] via 100.64.1.7 on vtnet2 unicast [br2_SLICE1 2024-06-10 09:02:02] (100) [i] via 100.64.1.8 on vtnet2 100.64.21.0/24 unicast [br1_SLICE1 2024-06-10 09:02:07] * (100) [i] via 100.64.1.7 on vtnet2 unicast [br2_SLICE1 2024-06-10 09:02:02] (100) [i] via 100.64.1.8 on vtnet2 100.64.1.0/24 unicast [direct_SLICE1 2024-06-10 09:01:05] ! (240) dev vtnet2 unicast [br2_SLICE1 2024-06-10 09:02:02] (100) [i] via 100.64.1.8 on vtnet2 unicast [br1_SLICE1 2024-06-10 09:02:07] (100) [i] via 100.64.1.7 on vtnet2 ~ # setfib 1 netstat -rn Routing tables (fib: 1) Internet: Destination Gateway Flags Netif Expire 100.64.1.0/24 link#3 U vtnet2 100.64.1.185 link#15 UHS lo0 127.0.0.1 link#15 UHS lo0 Internet6: Destination Gateway Flags Netif Expire ::/96 link#15 URS lo0 ::1 link#15 UHS lo0 ::ffff:0.0.0.0/96 link#15 URS lo0 fe80::%lo0/10 link#15 URS lo0 ff02::/16 link#15 URS lo0 Any idea? Thanks. BR Torsten

4 4

nl_allow_replace check for primary key
by Alexander Zubkov 16 Jun '24

16 Jun '24

Hi all, I've noticed this patch: https://gitlab.nic.cz/labs/bird/-/commit/00b139bd25c77b401d2065283cb970d9d8… It says that "(net, metric) is the primary key". But for my understanding the primary key in linux routing table also includes tos. It seems that BIRD currently does not support routes with tos, so it is not relevant now. But anyway the statement in code misses it, and this rifle might shoot in the future if tos support is added. Here is an example showing that tos is treated as a part of the primary key: # ip route add 192.168.2.0/24 via 192.168.0.2 metric 10 tos 0x10 # ip route add 192.168.2.0/24 via 192.168.0.3 metric 10 tos 0x20 # ip -N route show 192.168.2.0/24 192.168.2.0/24 tos 0x20 via 192.168.0.3 dev eth0 metric 10 192.168.2.0/24 tos 0x10 via 192.168.0.2 dev eth0 metric 10 # ip ro replace 192.168.2.0/24 via 192.168.0.4 metric 10 # ip -N route show 192.168.2.0/24 192.168.2.0/24 tos 0x20 via 192.168.0.3 dev eth0 metric 10 192.168.2.0/24 tos 0x10 via 192.168.0.2 dev eth0 metric 10 192.168.2.0/24 via 192.168.0.4 dev eth0 metric 10 # ip ro replace 192.168.2.0/24 via 192.168.0.5 metric 10 tos 0x10 # ip -N route show 192.168.2.0/24 192.168.2.0/24 tos 0x20 via 192.168.0.3 dev eth0 metric 10 192.168.2.0/24 tos 0x10 via 192.168.0.5 dev eth0 metric 10 192.168.2.0/24 via 192.168.0.4 dev eth0 metric 10 Regards, Alexander

1 0

RE: Bird bfd configuration
by LIU Chris 14 Jun '24

14 Jun '24

Hello, I am trying to configure BFD protocol. If configure 2 instances with below, it doesn't work. So I have to configure one instance, and put all the neighbors list to it. Is it possible to configure separate instance ? The below doesn't work protocol bfd Test1 { interface "eth2" { min rx interval 1000000 us; min tx interval 1000000 us; idle tx interval 3000000 us; multiplier 3; }; neighbor X1.Y1.Z1.A1 local X1.Y1.Z1.B1; } protocol bfd Test2 { interface "eth0" { min rx interval 1000000 us; min tx interval 1000000 us; idle tx interval 3000000 us; multiplier 3; }; neighbor X2.Y2.Z2.A2 local X2.Y2.Z2.B2; } Below it is working, protocol bfd Test { interface "eth*" { min rx interval 1000000 us; min tx interval 1000000 us; idle tx interval 3000000 us; multiplier 3; }; neighbor X1.Y1.Z1.A1 local X1.Y1.Z1.B1; neighbor X2.Y2.Z2.A2 local X2.Y2.Z2.B2; } With best regards, Chris Thales is in the process of carving out its Transportation activity (GTS) from other Thales' activities. In order to prepare this internal restructuring, a new e-mail address has been adopted and your GTS contacts now use urbanandmainlines.com. Please note that their Thales e-mail address remains also valid.

4 11

Include Timezone Information in birdc Outputs
by Tim Wattenberg 13 Jun '24

13 Jun '24

Hi, I have a small request: Timestamps being outputted by birdc currently do not include any timezone-information. I’d like the output to include this information. As far as I can see, this would require changes in the six TM_ISO_* constants in timer.h. Would you accept such a change? Thanks in advance, Tim.

1 1

[Routing Issue] There are two same net range routing on routing table.
by 이재용 09 Jun '24

09 Jun '24

Hello, We use BIRD for communication with servers with higher-level switches. But recently we came across the following case: server run as a ecmp routing. 10.171.0.0/24 proto bird nexthop via 10.171.0.25 dev p0 weight 1     nexthop via 10.171.1.25 dev p1 weight 1 For a change higher-level switches, we adjusted our ibgp LP value to flow traffic as a one path. As we expected, servers routing are changed as one path routing 10.171.0.0/24 proto bird but, one server has a two same net range routing. like this sample case1) 10.171.0.0/24 proto bird10.171.0.0/24 proto bird metric 32 nexthop via 10.171.0.25 dev ${interface1}      nexthop via 10.171.1.25 dev ${interface2}  case2 ) 10.171.0.0/24 proto bird metric 3210.171.0.0/24 proto bird nexthop via 10.171.0.25 dev ${interface1}     nexthop via 10.171.1.25 dev ${interface2}  in case1, there was any problem , but in case 2 it had. (flow packet as two paths)in my thought, pervious routing not deleted. So, two same range is now avaliable.if there are someone who have same problem, would you advise for this problem?

3 4

BGP Confederation Internal ASN Filtering and is_bogon() Functionality in New BIRD Version
by Brandon Zhi 08 Jun '24

08 Jun '24

Hi there, I am writing to inquire about the capabilities of the new version of BIRD regarding BGP Confederation internal ASNs. Specifically, I would like to know: 1. Can the new BIRD version filter BGP Confederation internal ASNs? 2. Does it support calculating the total AS path length, including internal ASNs within a BGP Confederation? Additionally, I have encountered an issue while using the `is_bogon()` function. It currently filters a route with the AS path (65000) 398741. I suspect this is because (65000) is being treated as a BOGON ASN. Below is the `define BOGON_ASNS` I am using: ```plaintext define BOGON_ASNS = [ 0, # RFC 7607 23456, # RFC 4893 AS_TRANS 64496..64511, # RFC 5398 and documentation/example ASNs 64512..65534, # RFC 6996 Private ASNs 65535, # RFC 7300 Last 16 bit ASN 65536..65551, # RFC 5398 and documentation/example ASNs 65552..131071, # RFC IANA reserved ASNs 4200000000..4294967294, # RFC 6996 Private ASNs 4294967295 # RFC 7300 Last 32 bit ASN ]; ``` Best regards, *Brandon Zhi* HUIZE LTD www.huize.asia <https://huize.asia/>| www.ixp.su | Twitter This e-mail and any attachments or any reproduction of this e-mail in whatever manner are confidential and for the use of the addressee(s) only. HUIZE LTD can’t take any liability and guarantee of the text of the email message and virus.

5 11

bug: routes in linux kernel are not removed on withdraw if krt_metric is used
by Leif Jakob 28 May '24

28 May '24

bird version: 2.0.12-7 (Debian stable) Hi, I use this config to install BGP routes into the linux kernel: protocol kernel { kernel table 300; scan time 10; learn on; graceful restart; metric 0; # needed to override in filter ipv6 { import none; # kernel->bgp - nothing needed export filter { # bgp->kernel if ( proto = "xxx" ) then { krt_metric = 20; accept; } # lower is choosed first by kernel if ( proto = "yyy" ) then { krt_metric = 30; accept; } reject; }; }; } This works fine. But when the route is removed (protocol gets down) it's still in the linux kernel. If I remove the krt_metric in the config it all works fine. Thanks Leif

2 1

[PATCH v2] conf: only offer bfd in bgp if bfd protocol is enabled
by Yuri Honegger 28 May '24

28 May '24

When trying to build bird with bfd support disabled (e.g. ./configure --with-protocols=bgp,static), it fails since the bgp configuration code expects bfd to be around. This patch makes the bfd option in the bgp protocol unavailable using some preprocessor logic if we are building without bfd. I'm currently trying to port bird to mac os x and the bfd module continues to cause trouble. Disabling it would therefore be useful. Sorry, with the first patch I accidentally managed to include the patch file itself. Here is a clean one. --- conf/Makefile | 4 +++- nest/config.Y | 2 ++ proto/bgp/config.Y | 3 ++- 3 files changed, 7 insertions(+), 2 deletions(-) diff --git a/conf/Makefile b/conf/Makefile index 19db9c2c..0fa6749a 100644 --- a/conf/Makefile +++ b/conf/Makefile @@ -14,8 +14,10 @@ $(o)cf-parse.y: $(s)gen_parser.m4 $(o)keywords.h: $(s)gen_keywords.m4 $(o)commands.h: $(s)gen_commands.m4 +enabled_protocols_m4_defines = $(foreach protocol,$(protocols),-D PROTOCOL_$(protocol)_ENABLED) + $(conf-y-targets): $(s)confbase.Y $(s)flowspec.Y - $(M4) $(M4FLAGS) -P $(if $(word 2,$(filter %.m4,$^)),$(error "Too many M4 scripts for one target"),$(filter %.m4,$^)) $(filter %.Y,$^) >$@ + $(M4) $(M4FLAGS) -P $(enabled_protocols_m4_defines) $(if $(word 2,$(filter %.m4,$^)),$(error "Too many M4 scripts for one target"),$(filter %.m4,$^)) $(filter %.Y,$^) >$@ $(o)cf-parse.tab.h: $(o)cf-parse.tab.c diff --git a/nest/config.Y b/nest/config.Y index 62b28072..a560a12f 100644 --- a/nest/config.Y +++ b/nest/config.Y @@ -603,6 +603,7 @@ password_item_end: /* BFD options */ +m4_ifdef([[PROTOCOL_bfd_ENABLED]],[[ bfd_item: INTERVAL expr_us { this_bfd_opts->min_rx_int = this_bfd_opts->min_tx_int = $2; } @@ -647,6 +648,7 @@ bfd_opts_end: bfd_opts: bfd_opts_start '{' bfd_items '}' bfd_opts_end ; +]]) /* Core commands */ diff --git a/proto/bgp/config.Y b/proto/bgp/config.Y index 4ce06488..f15cbad3 100644 --- a/proto/bgp/config.Y +++ b/proto/bgp/config.Y @@ -220,11 +220,12 @@ bgp_proto: | bgp_proto CHECK LINK bool ';' { BGP_CFG->check_link = $4; } | bgp_proto BFD bool ';' { if ($3) init_bfd_opts(&BGP_CFG->bfd); else BGP_CFG->bfd = NULL; } | bgp_proto BFD GRACEFUL ';' { init_bfd_opts(&BGP_CFG->bfd); BGP_CFG->bfd->mode = BGP_BFD_GRACEFUL; } - | bgp_proto BFD { open_bfd_opts(&BGP_CFG->bfd); } bfd_opts { close_bfd_opts(); } ';' | bgp_proto ENFORCE FIRST AS bool ';' { BGP_CFG->enforce_first_as = $5; } | bgp_proto LOCAL ROLE bgp_role_name ';' { BGP_CFG->local_role = $4; } | bgp_proto REQUIRE ROLES bool ';' { BGP_CFG->require_roles = $4; } | bgp_proto DISABLE RX bool ';' { BGP_CFG->disable_rx = $4; } + /* Since BFD is optional, only add the BFD option when building with BFD enabled */ + m4_ifdef([[PROTOCOL_bfd_ENABLED]],[[ | bgp_proto BFD { open_bfd_opts(&BGP_CFG->bfd); } bfd_opts { close_bfd_opts(); } ';']]) ; bgp_afi: -- 2.39.3 (Apple Git-146)

2 1

[PATCH v1] conf: only offer bfd in bgp if bfd protocol is enabled
by Yuri Honegger 24 May '24

24 May '24

When trying to build bird with bfd support disabled (e.g. ./configure --with-protocols=bgp,static), it fails since the bgp configuration code expects bfd to be around. This patch makes the bfd option in the bgp protocol unavailable using some preprocessor logic if we are building without bfd. I'm currently trying to port bird to mac os x and the bfd module continues to cause trouble. Disabling it would therefore be useful. --- conf/Makefile | 4 +- nest/config.Y | 2 + proto/bgp/config.Y | 3 +- ...er-bfd-in-bgp-if-bfd-protocol-is-ena.patch | 71 +++++++++++++++++++ 4 files changed, 78 insertions(+), 2 deletions(-) create mode 100644 v1-0001-conf-only-offer-bfd-in-bgp-if-bfd-protocol-is-ena.patch diff --git a/conf/Makefile b/conf/Makefile index 19db9c2c..0fa6749a 100644 --- a/conf/Makefile +++ b/conf/Makefile @@ -14,8 +14,10 @@ $(o)cf-parse.y: $(s)gen_parser.m4 $(o)keywords.h: $(s)gen_keywords.m4 $(o)commands.h: $(s)gen_commands.m4 +enabled_protocols_m4_defines = $(foreach protocol,$(protocols),-D PROTOCOL_$(protocol)_ENABLED) + $(conf-y-targets): $(s)confbase.Y $(s)flowspec.Y - $(M4) $(M4FLAGS) -P $(if $(word 2,$(filter %.m4,$^)),$(error "Too many M4 scripts for one target"),$(filter %.m4,$^)) $(filter %.Y,$^) >$@ + $(M4) $(M4FLAGS) -P $(enabled_protocols_m4_defines) $(if $(word 2,$(filter %.m4,$^)),$(error "Too many M4 scripts for one target"),$(filter %.m4,$^)) $(filter %.Y,$^) >$@ $(o)cf-parse.tab.h: $(o)cf-parse.tab.c diff --git a/nest/config.Y b/nest/config.Y index 62b28072..a560a12f 100644 --- a/nest/config.Y +++ b/nest/config.Y @@ -603,6 +603,7 @@ password_item_end: /* BFD options */ +m4_ifdef([[PROTOCOL_bfd_ENABLED]],[[ bfd_item: INTERVAL expr_us { this_bfd_opts->min_rx_int = this_bfd_opts->min_tx_int = $2; } @@ -647,6 +648,7 @@ bfd_opts_end: bfd_opts: bfd_opts_start '{' bfd_items '}' bfd_opts_end ; +]]) /* Core commands */ diff --git a/proto/bgp/config.Y b/proto/bgp/config.Y index 4ce06488..f15cbad3 100644 --- a/proto/bgp/config.Y +++ b/proto/bgp/config.Y @@ -220,11 +220,12 @@ bgp_proto: | bgp_proto CHECK LINK bool ';' { BGP_CFG->check_link = $4; } | bgp_proto BFD bool ';' { if ($3) init_bfd_opts(&BGP_CFG->bfd); else BGP_CFG->bfd = NULL; } | bgp_proto BFD GRACEFUL ';' { init_bfd_opts(&BGP_CFG->bfd); BGP_CFG->bfd->mode = BGP_BFD_GRACEFUL; } - | bgp_proto BFD { open_bfd_opts(&BGP_CFG->bfd); } bfd_opts { close_bfd_opts(); } ';' | bgp_proto ENFORCE FIRST AS bool ';' { BGP_CFG->enforce_first_as = $5; } | bgp_proto LOCAL ROLE bgp_role_name ';' { BGP_CFG->local_role = $4; } | bgp_proto REQUIRE ROLES bool ';' { BGP_CFG->require_roles = $4; } | bgp_proto DISABLE RX bool ';' { BGP_CFG->disable_rx = $4; } + /* Since BFD is optional, only add the BFD option when building with BFD enabled */ + m4_ifdef([[PROTOCOL_bfd_ENABLED]],[[ | bgp_proto BFD { open_bfd_opts(&BGP_CFG->bfd); } bfd_opts { close_bfd_opts(); } ';']]) ; bgp_afi: diff --git a/v1-0001-conf-only-offer-bfd-in-bgp-if-bfd-protocol-is-ena.patch b/v1-0001-conf-only-offer-bfd-in-bgp-if-bfd-protocol-is-ena.patch new file mode 100644 index 00000000..35480512 --- /dev/null +++ b/v1-0001-conf-only-offer-bfd-in-bgp-if-bfd-protocol-is-ena.patch @@ -0,0 +1,71 @@ +From f0e82b5f5ac02ea7a932da761c233b19a001a38c Mon Sep 17 00:00:00 2001 +From: Yuri Honegger <yuri.honegger(a)icloud.com> +Date: Fri, 24 May 2024 14:31:08 +0200 +Subject: [PATCH v1] conf: only offer bfd in bgp if bfd protocol is enabled + +When trying to build bird with bfd support disabled (e.g. ./configure --with-protocols=bgp,static), it fails since the bgp configuration code expects bfd to be around. + +This patch makes the bfd option in the bgp protocol unavailable using some preprocessor logic if we are building without bfd. +--- + conf/Makefile | 4 +++- + nest/config.Y | 2 ++ + proto/bgp/config.Y | 3 ++- + 3 files changed, 7 insertions(+), 2 deletions(-) + +diff --git a/conf/Makefile b/conf/Makefile +index 19db9c2c..0fa6749a 100644 +--- a/conf/Makefile ++++ b/conf/Makefile +@@ -14,8 +14,10 @@ $(o)cf-parse.y: $(s)gen_parser.m4 + $(o)keywords.h: $(s)gen_keywords.m4 + $(o)commands.h: $(s)gen_commands.m4 + ++enabled_protocols_m4_defines = $(foreach protocol,$(protocols),-D PROTOCOL_$(protocol)_ENABLED) ++ + $(conf-y-targets): $(s)confbase.Y $(s)flowspec.Y +- $(M4) $(M4FLAGS) -P $(if $(word 2,$(filter %.m4,$^)),$(error "Too many M4 scripts for one target"),$(filter %.m4,$^)) $(filter %.Y,$^) >$@ ++ $(M4) $(M4FLAGS) -P $(enabled_protocols_m4_defines) $(if $(word 2,$(filter %.m4,$^)),$(error "Too many M4 scripts for one target"),$(filter %.m4,$^)) $(filter %.Y,$^) >$@ + + $(o)cf-parse.tab.h: $(o)cf-parse.tab.c + +diff --git a/nest/config.Y b/nest/config.Y +index 62b28072..a560a12f 100644 +--- a/nest/config.Y ++++ b/nest/config.Y +@@ -603,6 +603,7 @@ password_item_end: + + + /* BFD options */ ++m4_ifdef([[PROTOCOL_bfd_ENABLED]],[[ + + bfd_item: + INTERVAL expr_us { this_bfd_opts->min_rx_int = this_bfd_opts->min_tx_int = $2; } +@@ -647,6 +648,7 @@ bfd_opts_end: + bfd_opts: + bfd_opts_start '{' bfd_items '}' bfd_opts_end + ; ++]]) + + + /* Core commands */ +diff --git a/proto/bgp/config.Y b/proto/bgp/config.Y +index 4ce06488..f15cbad3 100644 +--- a/proto/bgp/config.Y ++++ b/proto/bgp/config.Y +@@ -220,11 +220,12 @@ bgp_proto: + | bgp_proto CHECK LINK bool ';' { BGP_CFG->check_link = $4; } + | bgp_proto BFD bool ';' { if ($3) init_bfd_opts(&BGP_CFG->bfd); else BGP_CFG->bfd = NULL; } + | bgp_proto BFD GRACEFUL ';' { init_bfd_opts(&BGP_CFG->bfd); BGP_CFG->bfd->mode = BGP_BFD_GRACEFUL; } +- | bgp_proto BFD { open_bfd_opts(&BGP_CFG->bfd); } bfd_opts { close_bfd_opts(); } ';' + | bgp_proto ENFORCE FIRST AS bool ';' { BGP_CFG->enforce_first_as = $5; } + | bgp_proto LOCAL ROLE bgp_role_name ';' { BGP_CFG->local_role = $4; } + | bgp_proto REQUIRE ROLES bool ';' { BGP_CFG->require_roles = $4; } + | bgp_proto DISABLE RX bool ';' { BGP_CFG->disable_rx = $4; } ++ /* Since BFD is optional, only add the BFD option when building with BFD enabled */ ++ m4_ifdef([[PROTOCOL_bfd_ENABLED]],[[ | bgp_proto BFD { open_bfd_opts(&BGP_CFG->bfd); } bfd_opts { close_bfd_opts(); } ';']]) + ; + + bgp_afi: +-- +2.39.3 (Apple Git-146) + -- 2.39.3 (Apple Git-146)

1 0

Debian builds
by Gunnar Guðvarðarson 22 May '24

22 May '24

Hey, It looks like https://bird.network.cz/?download&tdir=debian/ is abandoned, both the key is wrong (does not match the packages) and the latest build is wheezy, which dropped support on 2018-05-31. And i just checked, the latest fedora package is for fedora 30, i'm running on fedora 40... Why are these builds not automated? p.s. It would be nice if you allowed posting issues on the github page https://github.com/CZ-NIC/bird. It lowers the barrier to entry a ton and might spike interest in the project. Just a thought. ~ Gunnar

4 3