- Bird-users - Mailing Lists

Re: Strange behaviour on filtering bgp_large_community ...
by Tim Weippert 15 May '23

15 May '23

Hi Maria, i think the confusion part is, that it works on CLI in a "symmetric" way but not in a function, that was my biggest questionmark :) regards, tim On Mon, May 15, 2023 at 01:21:46PM +0200, Maria Matejka wrote: > Hello! > > The ~ operator is not symmetric. We should probably better check its arguments or maybe even update the syntax. It basically means, when A ~ B, that A is in B. > > Sorry for that confusion. > Maria > > On 15 May 2023 12:59:11 CEST, Tim Weippert via Bird-users <bird-users(a)network.cz> wrote: > >Hi List, > > > >maybe i'm doing something wrong, but if i use some quick and dirty > >filter on the CLI all is working as expecting: > > > >show route where bgp_large_community ~ [(65000, 0, 1001)] > >show route where (65000, 0, 1001) ~ bgp_large_community > > > >both get the expected results, show all routes with the specific > >community attached. > > > >If i use it in a filter function to filter the routes out: > > > >function filter_large(int TestID) > >{ > > if ( bgp_large_community ~ [(65000, 0, TestID)] ) then { return false; } > > return true; > >} > > > >i get "all" routes, if clause doesn't get catched. > > > >function filter_large_V2(int TestID) > >{ > > if ( (65000, 0, TestID) ~ bgp_large_community ) then { return false; } > > return true; > >} > > > >with the V2 function i get what i want, filter out all routes with the > >community attached and show all the rest. > > > >I'm a little confused here, because the first version of the if clause is > >used for bgp_ext_community on several functions on my setup and working > >as expected, only for bgp_large_community i need to switch to if clause > >from version V2, and only in a function? > > > >Can someone confirm or explain this? > > > >regards, > >tim > > > >-- > >Tim Weippert > >http://weiti.org - weiti(a)weiti.org > >GPG Fingerprint - E704 7303 6FF0 8393 ADB1 398E 67F2 94AE 5995 7DD8 -- Tim Weippert http://weiti.org - weiti(a)weiti.org GPG Fingerprint - E704 7303 6FF0 8393 ADB1 398E 67F2 94AE 5995 7DD8

2 1

question regarding table lookups
by Andrew Azarov 15 May '23

15 May '23

Hello, I wanted to ask bird gurus whether there is a way to lookup record in a different table during filtering? We have several connections but also external policy generating daemon which optimizes routes. The route optimization goes into kernel table 2 (as opposed to master). After that we have a pipe which imports those with higher preference. Problem is when the route is withdrawn from bgp peers partly or completely (basically is not available any more) the route from peer table still gets imported. The result is - we have network routing to nowhere, while there might be alternative working routes. I tried to find any information on another table lookup inside filter but was unable to discover anything meaningful... Is there a way to either: a) lookup another table within import filter for master table and bump preference? b) during import from kernel table #2 bump preference in other tables? instead of using pipes c) modify preference inside tables manually without using kernel tables? ie with birdc? Thank you in advance Regards, Andrew

2 1

BIRD 3.0alpha2
by Ondrej Filip 15 May '23

15 May '23

Dear BIRD Users, we are releasing another alpha version of BIRD 3. We've found some annoying bugs and fixed some usability issues as well as several issues with BIRD crashing. We also added a simple work balancing algorithm between threads. MRT is still switched off, BMP is not merged; they will get into some future alpha version. Measured performance in BGP is approx. 6-10x better (with 20 threads) than version 2.13, depending on the actual configuration. Kernel synchronization is slow with a large number of routes; we will look into it soon. If you have some time for trying this version out, we would love to hear your feedback. I thank my colleagues and namely Maria for this release! Cheers Ondrej

5 13

Bird policy towards non RFC-compliant workarounds.
by Arnaud Houdelette-Langlois 12 May '23

12 May '23

Hi. I have an issue with the BGP implementation of a well-known hardware manufacturer. Said implementation send multiple Add-Path capabilities, one for each address family, instead of sending only one capability with both address families. Moreover, it expects it's BGP peer to behave identically. If bird manages to understand the badly formatted open message, the said BGP implementation fails and reject bird (well-formed) message. The manufacturer is informed, but has still to provide a working patch. In the meantime, I think it would be easy to implement a workaround as a bgp protocol option in bird. I'm ready to dive into the code to do it. But ... Is it bird policy to accept such workaround pull requests ? -- Arnaud Houdelette-Langlois Administrateur des infrastructures systèmes et réseaux Normandie Université +33 2 31 56 69 54

2 1

IGP(OSPF) learned route not used for iBGP?
by Nico Schottelius 12 May '23

12 May '23

Hello fellow bird users, a quick IGP/iBGP question: Why does apu-router1 that should learn the IPv6 default route from server138 complain about not accepting the route? May 12 17:13:18 apu-router1 daemon.err bird: server138_v6_v4: Invalid NEXT_HOP attribute - address 2a0a:e5c0:32:2::21 not directly reachable May 12 17:13:18 apu-router1 daemon.err bird: server138_v6_v4: Invalid route ::/0 withdrawn Checking that apu-router1 has the route: bird> show route 2a0a:e5c0:32:2::20/124 Table master6: 2a0a:e5c0:32:2::20/124 unicast [ospf6 17:14:01.612] * E2 (150/10/10000) [0.0.0.138] via fe80::3eec:efff:fed2:d0c2 on eth1.2 weight 1 via fe80::3eec:efff:fed2:d0c4 on eth2 weight 1 unicast [server137_v6_v4 17:13:19.524] (100) [i] via 2a0a:e5c0:0:b::89 on eth2 unicast [server138_v6_v4 17:13:18.394] (100) [i] via 2a0a:e5c0:0:b::8a on eth2 bird> The complete setup is as follows: apu-router1 -- server138 -- [wireguard] -- server120 - apu-router1 and server138 are ASN 199553 [iBGP) - server120 is 209898 [eBGP] As the wireguard interface seems to be unusable with OSPF (likely due to missing multicast support), we use direct to read the route from the interface, the snippet from server137: protocol direct { ipv6; interface "s*"; } And then we propagate it via OSPF: ipv6 { import all; # Forward the routes that we specifically picked from s* devices # that are not picked up by ospf export filter { if source = RTS_DEVICE then { accept; } reject; }; }; On server138: bird> show route ::/0 Table master6: ::/0 unicast [server121_p15_v6_v4 15:11:34.058] * (100) [AS209898i] via 2a0a:e5c0:32:2::21 on s138s121 bird> show route 2a0a:e5c0:32:2::20/124 Table master6: 2a0a:e5c0:32:2::20/124 unicast [direct1 15:11:12.662] * (240) dev s138s121 unicast [server137_v6_v4 15:11:36.524] (100) [i] via 2a0a:e5c0:0:b::89 on eth2 unicast [apu_router2_v6_v4 15:13:17.009] (100) [i] via 2a0a:e5c0:0:b::47 on eth2 unicast [apu_router1_v6_v4 15:14:01.616] (100) [i] via 2a0a:e5c0:0:b::46 on eth2 bird> What are we doing incorrectly so that the apu-router1 does not use 2a0a:e5c0:32:2::20/124 that it learned via OSPF? Best regards, Nico -- Sustainable and modern Infrastructures by ungleich.ch

4 5

OTC attribute
by Marek Küthe 11 May '23

11 May '23

Hello, I have a few questions about RFC 9234 or `local role role-name` in bird. Is the OTC attribute kept even if you don`t have a `local role`? If yes, how to filter out the OTC attribute? I would be very happy about an answer! Greetings Marek Küthe -- Marek Küthe m.k(a)mk16.de er/ihm he/him

2 1

BGP as-override in BIRD
by Mazur, Dariusz 11 May '23

11 May '23

Hello Bird users, I was trying to find how to configure BGP as-override in BIRD, but without success. I am looking for this in BIRD: https://www.juniper.net/documentation/us/en/software/junos/bgp/topics/ref/s… Did anyone use this option? Thanks, Dariusz

2 1

Adding more then one bgp community at once
by Борис Коваленко 05 May '23

05 May '23

Hello! Is this possible to add many communites at once? bgp_community.add([(1,1), (1,2)]) is wrong "Setting clist attribute to non-clist value" Regards, Boris -- С уважением, Борис Коваленко

4 5

Missing checking the lsa_length in ospf
by Mingwei Zheng 03 May '23

03 May '23

Hi, I am doing testing work on network protocols and here is one possible issue I noticed in OSPF. I noticed that you have checked the length of lsa in your function ospf_dump_lsupd in lsupd.c <https://gitlab.nic.cz/labs/bird/-/blob/master/proto/ospf/lsupd.c>: if (((lsa_len % 4) != 0) || (lsa_len <= sizeof(struct ospf_lsa_header))) goto invalid; However in the other packet types, like LSACK and LSREQ, I didn’t see similar checking. I am worrying about whether this would be an issue. I would really appreciate it if anyone can have a look at it. Thank you! Best Mingwei

2 1

О(log n^2) config parser time regression in 2.0.11
by Yanko Kaneti 28 Apr '23

28 Apr '23

Hello, The recent bird1 EOL announcement nudged me to try a 1 to 1 (or close to it) migration of a legacy 1.6 config to 2.0. Without using any of the fancy new 2.0 features to keep things lazy. The old config has a giant 100M generated case statement in a function. Turns out with 2.0.11 and later (bisected to 1ac8e11b: Filter: Implement mixed declarations of local variables ) the config parser of the entire config couldn't finish in reasonable time. Came up with the following test bash+perl script demonstrating the issue. It generates a sequence of configs and test them with bird -p. #!/bin/bash pscript=$(cat <<'EOF' print "protocol device {};\n"; print "function origin_chk() {\n\tcase bgp_path.last {\n"; for ($i = 1; $i <= $ARGV[0]; $i++) { print "$i: if net ~ [\n\t10.20.30.0/24\n] then return true ;\n"; } print "} return false;\n}\n"; EOF ) TCONF=`mktemp --suffix=.conf` for NCASES in `seq 2000 2000 20000`; do perl -e "$pscript" $NCASES > $TCONF echo -n "$NCASES " { time -p ./bird -c $TCONF -p ; } 2>&1 | head -n1 # rm $TCONF done Following is a comparison of the times between 1ac8e11b and 1ac8e11b^ 1ac8e11b 1ac8e11b^ 2000 real 0.10 0.00 4000 real 0.39 0.01 6000 real 0.90 0.01 8000 real 1.92 0.02 10000 real 4.16 0.03 12000 real 7.78 0.03 14000 real 12.61 0.04 16000 real 18.84 0.04 18000 real 26.74 0.05 20000 real 36.39 0.03 Don't grok Flex/Bison at all so that was the extent of my troubleshooting. - Yanko

2 3