- Bird-users - Mailing Lists

Injecting OSPF learned routes (only)
by Nico Schottelius 27 Feb '24

27 Feb '24

Good morning bird users, I am a bit puzzled about properly adding OSPF learned routes into the kernel and let me show you why: If I use a filter such as: filter static_and_bgp_and_ospf { if(source = RTS_STATIC || source = RTS_BGP || source = RTS_OSPF) then accept; reject; } And configure the kernel to use it like this: protocol kernel kernel_v4 { ipv4 { export filter static_and_bgp_and_ospf; }; } protocol kernel kernel_v6 { ipv6 { export filter static_and_bgp_and_ospf; }; } Then I get route duplications in the kernel: [04:29] server123.place10:~# ip r | grep 147.78.195.224/27 147.78.195.224/27 dev eth1 proto kernel scope link src 147.78.195.254 147.78.195.224/27 dev eth1 proto bird scope link metric 32 The reason for that semes: - server123 has the route because of an interface address - other hosts in the network also have an interface in that network While this is not necessarily a big problem, it seems wrong to inject the route, because we learned it from OSPF, even though we already had it in the first place. How do you usually handle inserting OSPF learned routes? Do you just have them duplicate or do you have some logic that resembles.. "If I already have that route and I receive it again from outside (such as OSPF), do not inject it again" ? Looking forward to read how you handle this logic! Best regards from Seoul, Nico -- Sustainable and modern Infrastructures by ungleich.ch

4 3

segfault on running "show mem" command with bird-3.0alpha2
by Prem Anand 26 Feb '24

26 Feb '24

Hi All, I am seeing this segfault with bird-3.0alpha2 on trying to run the "show mem" command. Not sure if it is a known issue. Just thought of reporting it. By the way, bird-3.0 though in alpha, looks really stable. Was able to scale upto 1K BGP Sessions without any major issues. Eagerly looking for a 3.0 stable release soon. Regards Prem Thread 1 "bird" received signal SIGSEGV, Segmentation fault. 0x00005555555841c3 in rmemsize (res=<optimized out>) at lib/resource.c:271 271 if (!r->class->memsize) (gdb) bt #0 0x00005555555841c3 in rmemsize (res=<optimized out>) at lib/resource.c:271 #1 cmd_show_memory () at nest/cmds.c:122 #2 0x000055555560c03e in cf_parse.isra.0 () at nest/config.Y:640 #3 0x000055555556a523 in cli_parse (c=0x7fffffffd920) at conf/conf.c:179 #4 0x00005555555837fd in cli_command (c=c@entry=0x5555556bb338) at nest/cli.c:273 #5 0x0000555555583b3c in cli_event (data=0x5555556bb338) at nest/cli.c:302 #6 0x00005555555786cb in ev_run_list_limited (l=0x555555681000 <global_event_list>, limit=4294967294) at lib/event.c:331 #7 0x0000555555566e14 in io_loop () at sysdep/unix/io.c:2216 #8 main (argc=<optimized out>, argv=<optimized out>) at sysdep/unix/main.c:972 (gdb) f 1 #1 cmd_show_memory () at nest/cmds.c:122 122 struct resmem total = rmemsize(&root_pool); (gdb) print root_pool $3 = {r = {n = {next = 0x0, prev = 0x0, list = 0x0}, class = 0x0}, inside = {first = 0x555555685360, last = 0x5555556bb630}, domain = 0x555555680e40 <the_bird_domain_gen.lto_priv>, name = 0x555555656735 "Root"} (gdb) print root_pool->r->class $5 = (const struct resclass *) 0x0 (gdb)

2 2

L3VPN and BGP add-path
by Marcel Menzel 26 Feb '24

26 Feb '24

Hello List, I am running the new MPLS L3VPN feature for quite a while now, and it's working without issues so far for me, but I have one question: I set "add paths on;" on my iBGP peer template in all SAFIs and while it was running successfully before the migration to L3VPN, the additional routes in the RIB are now gone, but the capabilities are still exchanged between peers. Furthermore, I can't set "add paths on;" property for any SAFI in the L3VPN protocol, this might be the reason why those additional routes are missing? My only question now is if this just hasn't been implemented yet with BIRD (I am just being curious hence I'm asking), my config is something missing or this being the general fact that add-path with MPLS L3VPN simply is not a thing with other vendors aswell (to be fair, I've never seen an L3VPN network with add-path enabled in production so far). Thanks for the heads-up in advance, Marcel

2 1

Re: FOSDEM 2024 talk recording - Flying higher: hardware offloading with BIRD
by Asbjørn Sloth Tønnesen 23 Feb '24

23 Feb '24

Hi Tim, Thanks for posting. On 2/20/24 09:14, Tim Small wrote: > If anyone is looking to reproduce this setup, then ConnectX 5 NICs (both 25Gb and 100Gb) seem to be available used on > online auction sites from around 150 Euro. The talk was a bit crammed for time, but the next speaker didn't show up, so we unexpectedly had time for questions. Once I get the last bit's done, I will do a more detailed blog post, about the setup we are making at my hackerspace Labitat (AS2052350), for that we also need forwarding to directly connected hosts and reverse path filtering. One of the last slides has a picture of this setup, with a thin client and a ConnectX-5 running at <15W while doing 10G routing (DAC). Currently I am trying to fix kernel performance, for the non-offloaded long-tail traffic: https://lore.kernel.org/netdev/20240215160458.1727237-1-ast@fiberby.net/ -- Best regards Asbjørn Sloth Tønnesen

2 2

[patch] add 'source address' configuration option to RPKI protocols
by Job Snijders 22 Feb '24

22 Feb '24

Dear BIRD team, Greetings from Amsterdam! I'd like to be able to explicitly configure the source IP address for RPKI-To-Router sessions. Predictable source addresses are useful for minimizing the holes to be poked in ACLs. The below changeset adds a 'source address' configuration option to RPKI protocols. Kind regards, Job diff --git doc/bird.sgml doc/bird.sgml index 76ca7f75..a271d47e 100644 --- doc/bird.sgml +++ doc/bird.sgml @@ -5700,6 +5700,7 @@ protocol rpki [<name>] { refresh [keep] <num>; retry [keep] <num>; expire [keep] <num>; + source address <ip>; transport tcp; transport ssh { bird private key "</path/to/id_rsa>"; @@ -5753,6 +5754,9 @@ specify both channels. instead. This may be useful for implementing loose RPKI check for blackholes. Default: disabled. + <tag>source address <m/ip/</tag> + Define local address we should use as a source address for the RTR session. + <tag>transport tcp</tag> Unprotected transport over TCP. It's a default transport. Should be used only on secure private networks. Default: tcp diff --git proto/rpki/config.Y proto/rpki/config.Y index c28cab7a..31656057 100644 --- proto/rpki/config.Y +++ proto/rpki/config.Y @@ -32,7 +32,7 @@ rpki_check_unused_transport(void) CF_DECLS CF_KEYWORDS(RPKI, REMOTE, BIRD, PRIVATE, PUBLIC, KEY, TCP, SSH, TRANSPORT, USER, - RETRY, REFRESH, EXPIRE, KEEP, IGNORE, MAX, LENGTH) + RETRY, REFRESH, EXPIRE, KEEP, IGNORE, MAX, LENGTH, SOURCE, ADDRESS) %type <i> rpki_keep_interval @@ -60,6 +60,7 @@ rpki_proto_item: | REMOTE rpki_cache_addr | REMOTE rpki_cache_addr rpki_proto_item_port | rpki_proto_item_port + | SOURCE ADDRESS ipa { RPKI_CFG->local_ip = $3; } | TRANSPORT rpki_transport | REFRESH rpki_keep_interval expr { if (rpki_check_refresh_interval($3)) diff --git proto/rpki/rpki.h proto/rpki/rpki.h index 8a5c38fd..e67eb0e3 100644 --- proto/rpki/rpki.h +++ proto/rpki/rpki.h @@ -116,6 +116,7 @@ struct rpki_proto { struct rpki_config { struct proto_config c; const char *hostname; /* Full domain name or stringified IP address of cache server */ + ip_addr local_ip; /* Source address to use */ ip_addr ip; /* IP address of cache server or IPA_NONE */ u16 port; /* Port number of cache server */ struct rpki_tr_config tr_config; /* Specific transport configuration structure */ diff --git proto/rpki/transport.c proto/rpki/transport.c index 81bd6dd8..26571977 100644 --- proto/rpki/transport.c +++ proto/rpki/transport.c @@ -82,6 +82,7 @@ rpki_tr_open(struct rpki_tr_sock *tr) sk->daddr = cf->ip; sk->dport = cf->port; sk->host = cf->hostname; + sk->saddr = cf->local_ip; sk->rbsize = RPKI_RX_BUFFER_SIZE; sk->tbsize = RPKI_TX_BUFFER_SIZE; sk->tos = IP_PREC_INTERNET_CONTROL;

2 2

Take Specific Value Inside BGP Community
by Ilham Maulana 20 Feb '24

20 Feb '24

Hi, Is it possible in bird to copy specific value inside BGP Community? Example: Route 1, Community (a,b,c) -> inbound Route 2, Community (a,b,d) -> inbound -- Route 1, Community (k,l,c) -> outbound Route 2, Community (k,l,d) -> outbound The specific value I want to preserve is c and d, and it is dynamic variable. whatever c and d inbound, copy to c and d outbound. Thanks. Ilham [5f622eb5-c189-4e05-8584-e4a1d2071a6b]

3 4

Adding support for an experimental IPv6 Hop By Hop Extension header
by Mccherry, Paul (Postgraduate Researcher) 19 Feb '24

19 Feb '24

I am a Phd Researcher at Lancaster university researching the security of the UK Internet infrastructure. I need to add support for a proposed experimental IPv6 Hop By Hop Extension Header to a routers Kernel to test my theories. I am more a server/network engineer and researcher than I am a programmer but I am able to write in Python and use scripting languages. Can anyone recommend tools and Router emulation software where one could add support for an experimental IPv6 Hop By Hop Extension Header in order to test the methodology ? The new extension header requires changes to the IFindex table (an additional field) and a new ACL to make routing decisions on the new field within the IFindex table. It also will need to provide the capability of allowing an installation engineer to make changes to this field on initial setup. If Bird is unable to provide such a testbed, can anyone recommend another solution. ? However, I do think a capability to provide researchers with an easy method to test new IPv6 Extension headers would be really useful considering the takeup of IPv6 and the future of the internet.

3 2

point to point connection but no routes imported.
by Benoit Chesneau 18 Feb '24

18 Feb '24

Hi all, I have an issue witth the route import onbetween two machine. They are connected to each others by a vlan and at each end ana /31 is setup. I can ping between each end. R1: VLAN330(1.1.1.1) ----> R2 : VLAN330(1.1.1.2) R2( 1.1.1.2) is connected to upstreams transit and collect correctly the routes. But when I do the following config on this rouyer (R2): R2 is showing some exported routes but R1 received nothing: ``` Route change stats: received rejected filtered ignored accepted Import updates: 1 0 0 0 1 Import withdraws: 0 0 --- 0 0 Export updates: 934590 27 0 --- 934563 Export withdraws: 18 --- --- --- 18 ``` What could be the issue ? I have the following configuratiosn: R1: ``` define AS65001_IPV4 = [ 1.1.1.184/29{29,32} ]; filter ebgp_home_as65001_import { if (net.type = NET_IP4 && ! (net ~ AS65001_IPV4)) then reject; accept; } filter ebgp_home_as65001_export { protocol bgp home_65001_ipv4 { local 1.1.1.2 as 209823; neighbor 1.1.1.1 as 65001; default bgp_med 0; default bgp_local_pref 400; ipv4 { import keep filtered; import filter ebgp_home_as65001_import; export all; next hop self on; }; }; ``` R2: ``` router id 1.1.1.1; log syslog all; log "/var/log/bird.log" all; debug protocols all; watchdog warning 5 s; watchdog timeout 30 s; protocol device { scan time 30; } protocol direct { ipv4; ipv6; check link yes; } protocol kernel kernel4 { ipv4 { import all; export where source != RTS_DEVICE; }; learn off; scan time 300; } protocol kernel kernel6 { ipv6 { import all; export where source != RTS_DEVICE; }; learn off; scan time 300; } protocol static static4 { ipv4 { export all; }; # Reject default route route 0.0.0.0/0 unreachable; # main route route 1.1.1.184/29 blackhole; } filter bgp_export { if (net.type = NET_IP4 && ! (net ~ [ 1.1.1.184/29 ])) then reject; accept; } template bgp T_GW4 { local 1.1.1.1 as 65001; default bgp_med 0; default bgp_local_pref 400; multihop; ipv4 { import keep filtered; import all; export filter bgp_export; next hop self on; }; } protocol bgp ccre1_ipv4_1 from T_GW4 { neighbor 1.1.1.2 as <PUBLIC AS >; }; ``` Benoît Chesneau, Enki Multimedia — t. +33608655490 Sent with Proton Mail secure email.

2 3

[patch] SendHoldTimer BGP Error code
by Job Snijders 18 Feb '24

18 Feb '24

Dear all, IANA registered an "Early Allocation" BGP Error code for draft-ietf-idr-bgp-sendholdtimer, see https://www.iana.org/assignments/bgp-parameters/bgp-parameters.xhtml#bgp-pa… The below changeset aligns bird with IANA's Border Gateway Protocol (BGP) Parameters registry. Kind regards, Job diff --git proto/bgp/bgp.c proto/bgp/bgp.c index e97b45e6..bd6e90d6 100644 --- proto/bgp/bgp.c +++ proto/bgp/bgp.c @@ -1059,12 +1059,13 @@ bgp_send_hold_timeout(timer *t) struct bgp_conn *conn = t->data; struct bgp_proto *p = conn->bgp; + DBG("BGP: Send hold timeout\n"); + if (conn->state == BS_CLOSE) return; - /* Error codes not yet assigned by IANA */ - uint code = 4; - uint subcode = 1; + uint code = 8; + uint subcode = 0; /* Like bgp_error() but without NOTIFICATION */ bgp_log_error(p, BE_BGP_TX, "Error", code, subcode, NULL, 0); diff --git proto/bgp/packets.c proto/bgp/packets.c index 18a226fb..8320991a 100644 --- proto/bgp/packets.c +++ proto/bgp/packets.c @@ -3275,7 +3275,6 @@ static struct { { 3, 10, "Invalid network field" }, { 3, 11, "Malformed AS_PATH" }, { 4, 0, "Hold timer expired" }, - { 4, 1, "Send hold timer expired" }, /* Provisional [draft-ietf-idr-bgp-sendholdtimer] */ { 5, 0, "Finite state machine error" }, /* Subcodes are according to [RFC6608] */ { 5, 1, "Unexpected message in OpenSent state" }, { 5, 2, "Unexpected message in OpenConfirm state" }, @@ -3290,7 +3289,8 @@ static struct { { 6, 7, "Connection collision resolution" }, { 6, 8, "Out of Resources" }, { 7, 0, "Invalid ROUTE-REFRESH message" }, /* [RFC7313] */ - { 7, 1, "Invalid ROUTE-REFRESH message length" } /* [RFC7313] */ + { 7, 1, "Invalid ROUTE-REFRESH message length" }, /* [RFC7313] */ + { 8, 0, "Send hold timer expired" } /* [draft-ietf-idr-bgp-sendholdtimer] */ }; /**

2 1

Static route IPv4 via FE80::2/64 and interface issue
by Saklak, Marcin 15 Feb '24

15 Feb '24

Hello Bird Users, I have an issue with adding static route and interfaces. I use two different platform one has interface names like eth-1_1_32 and second eth-1\1\64. First one works as I would expect. First platform: ifconfig eth-1_1_32 eth-1_1_32: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 bird.conf: route 192.168.1.5/32 via fe80::2 % 'eth-1_1_32'; ip r 192.168.1.5 via inet6 fe80::2 dev eth-1_1_32 proto bird metric 32 but second platform with interfaces in eth-1\1\64 style didn’t work ifconfig eth-1\\1\\64 eth-1\1\64: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 I’ve got an error message for route 192.168.1.5/32 via fe80::2 % 'eth-1\1\64'; birdc BIRD 2.13 ready. bird> configure Reading configuration from /mnt/storage/config/bird.conf /mnt/storage/config/bird.conf:29:45 Invalid character in apostrophed symbol for: route 192.168.1.5/32 via fe80::2 % "eth-1\1\64"; bird> configure Reading configuration from /mnt/storage/config/bird.conf /mnt/storage/config/bird.conf:29:51 syntax error, unexpected TEXT for: route 192.168.1.5/32 via "fe80::2%eth-1\1\64"; no error and no entries in linux I did also tests with route 192.168.1.5/32 via "fe80::2%eth-1\\\1\\\64"; route 192.168.1.5/32 via "fe80::2%eth-1\\1\\64"; route 192.168.1.5/32 via fe80::2 % ’eth-1\\\1\\\64’; route 192.168.1.5/32 via fe80::2 % ’eth-1\\1\\64’; without any success Is it possible to make it work on both cases or there is some other way to configure such static route? Thanks, Marcin

4 4