- Bird-users - Mailing Lists

Memory leak after a burst of route changes (bird v2.0.8)
by bird bird 13 Jun '22

13 Jun '22

Dear experts, We have a few routers running bird with BGP with route-reflector (full mesh) which has approximately 2K routes. Recently, the RAM usage of bird daemon increased to a few GBs, while normally the RAM usage is only a few MBs. The output of "show memory" showed using only a few KBs of memory, so it looks like some leak happened in the daemon. I wasn't able to find the cause of the event which led to the memory increase. The only lead I had is seeing a large amount of route changes to the routing table in short time. The output of "birdc show proto all all": global_routing_0_kernel Kernel global_routing_0 up 2022-05-01 Export updates: 748274310 0 0 --- 748274310 After the event stopped, the RAM usage of bird did not reduce for a few days until restarting bird daemon. Unfortunately I don't have additional logs or outputs from the time of the issue. However I was able to reproduce a similar scenario by adding a large amount of BGP routes at one burst. The route changes caused the RAM usage to increase to 500MB, and after removing the routes the RAM usage stayed 500MB and didn't reduce automatically until restart of bird daemon. I see a connection between the reproduction and the event that happened in our environment, therefore I hope that it can be enough information to investigate the memory leak. Any assistance will be highly appreciated. Many thanks!

1 0

Is there a way to merge communities from the same prefixes?
by Valery Lutoshkin 07 Jun '22

07 Jun '22

Hi all! I use bird2 (2.0.9) as RS for BGP prefix aggregation - several peers send me their prefixes, I aggregate them and send the result to the system. But there is an obvious issue - when peers send me the same prefix, BGP selects the best one and sends only that one. In this case, if prefixes had different communities, the result loses all but one. For example: peer 1: 1.1.1.1/32 1:100 peer 2: 1.1.1.1/32 2:200 peer 3: 1.1.1.1/32 3:300 If the last one was chosen, the result is 1.1.1.1/32 3:300 If there is any way to collect all communities and attach them to the chosen prefix (like this: 1.1.1.1/32 1:100,2:200,3:300), would anyone please tell me how to do that? Thank you, Valery

4 5

Feature request: CARP awareness in BIRD?
by Thomas Steen Rasmussen 06 Jun '22

06 Jun '22

Hello :) I am using BIRD on FreeBSD and it is working okay, apart from missing CARP awareness. I am wondering if anyone knows if work has been done in this area already? As you may know, CARP is a patent-free VRRP alternative originally from OpenBSD. A network interface can have one or more VHIDs, each VHID can be either MASTER or BACKUP. The IPs tied to a VHID are only usable when the VHID is MASTER. Currently "birdc show interfaces" shows no difference between two nodes where one is CARP MASTER and the other is CARP BACKUP. The consequence of this is that BIRD thinks it has a working local direct route which it then tries to use, but the OS refuses, since it understands that VHID is CARP BACKUP. Ideally BIRD would understand CARP semantics so when it has a DIRECT protocol it would only consume the routes from CARP MASTER VHIDs, and consider the CARP BACKUP VHID IPs as unusable. Please consider this a feature request. I am interested getting some BIRD experts opinion on 1) is this a feature you would be willing to include in BIRD and 2) how big a job is it? I would be willing to pay to have it developed, although I am just myself so I don't have unlimited funds. Thanks in advance, and thank you for BIRD; even without CARP support it is already awesome. Best regards, Thomas Steen Rasmussen

7 8

BIRD Testing With Ansible?
by Maria Matejka 02 Jun '22

02 Jun '22

TL;DR: Should we test BIRD with Ansible? Hello! Dear fellow users and anybody else reading this message, please take a deep breath and read the story of testing BIRD before you shout NO, YES, DEFINITELY MAYBE or whatever else. Long time ago, when Linux implemented Network Namespaces feature, even before anybody knew anything about "ip netns", Santiago created a simple but quite powerful tool called "netlab" to test BIRD on one machine, using this exact feature. It has grown to quite a decent set of automatic functionality tests which you can see in the bird-tools repository[1] in the "netlab" directory. After some time, when I got to BIRD development, we wanted to test also BIRD on different platforms. We went to virtualization, setup a decent testing setup with QEMU-KVM and OpenVSwitch and then I tried to run there a simple MPLS setup when the OpenVSwitch suddenly crashed on SegFault. I solved it by using just plain old bridges and veth's. When I met some friends several days later, one of them being a Linux kernel developer working also on OpenVSwitch, I mentioned these problems, thinking that he may give me a pointer how to solve it. Instead, he interrupted me, saying "hey, shut up, this is an embargoed bug". I had missed that this segfault may be a security problem leading at least to DoS. This was happening when the OpenStack and LibVirt and others were still in an early phase of development and we couldn't find any suitable solution for us so we just developed something for ourselves. Anyway, now it is 2022 and when I reach out to almost any user of BIRD, I hear about Ansible. I'm thinking whether it is a good idea to leave our old tooling in a museum and to migrate to Ansible. Facts: * Our team is familiar with the current tooling, not Ansible. * It's probably easier to learn how to use our tooling than Ansible, provided you have seen neither of them before. * Some of the users are already using BIRD with Ansible. * We don't know much about pros and cons of Ansible. Proposal: We would retire our old testing setups and instead of that we would upstream a bunch of functionality tests implemented in Ansible. I have some questions for you: (1) Are you using Ansible with BIRD? (2) Do you have some testing setup implemented with Ansible? (3) Would you run the upstream functionality tests if they used Ansible? (4) If encountering a bug, would you consider creating an Ansible scenario to replicate that behavior? (5) If contributing, would it be OK for you to create also an appropriate functionality test in Ansible, or rather in our current tooling? Thank you all for your answers and discussion, please don't throw chairs nor eggs nor tomatoes on each other. Maria

5 5

Using Babel.router_id in filters
by James Oakley 30 May '22

30 May '22

Hi, I would like to write a filter for a Babel protocol where I set a value based on the Babel router ID. I can see Babel.router_id in the route attributes, but it does not look like this is exposed to filters. Only babel_metric is exposed. Is there a reason for this or was it an oversight? -- James Oakley james(a)ttgi.io

3 2

Way to store ROA info so we can accept but view?
by Dan Mahoney (Gushi) 30 May '22

30 May '22

Hey all, We're using RPKI in testing at the day job, and for a given route, it seems the best we can do is apply a community to it so we can see that it's invalid. A howto I've found says that this is a bad idea and can cause problems. (https://bgpfilterguide.nlnog.net/guides/reject_invalids/) When you look at routes with something like "show route all", there's no field for the RPKI status or the ASes for which ROAs are allowed. So, the questions here is: 1) My understanding of the way RPKI-RTR works is that it's basically handed a tuple of prefix and AS, and RTR says "valid", "invalid", or "unknown". It feels like to check for AS 0 ROAs, we'd basically have to do two lookups for each route that's otherwise invalid, which feels inefficient. Is there a better way? 2) Can the output of "show route" be extended to include user defined fields, or are we locked into what's there? 3) If not, we're limited to adding communities or MEDs or local prefs or something like that, which is a hack, but at least gives us some info we can view. Is that a dangerous trade off? -Dan -- --------Dan Mahoney-------- Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC FB: fb.com/DanielMahoneyIV LI: linkedin.com/in/gushi Site: http://www.gushi.org ---------------------------

6 12

scalability and <RMT> error
by dytadam＠sina.com 29 May '22

29 May '22

Hi there, I was running OSPFv2 for a scale of more than a thousand. However, I noticed that the routing table keeps changing after running for hours. It seems the routing protocol has not come to stable point. And the log says <RMT> Bad DBDES packet from nbr, too late for DD exchange. How can I solve it? Is it because the packet is too large? Thank you so much.

2 1

[PATCH] RPKI: Display cache server port on show protocol
by Luiz Amaral 27 May '22

27 May '22

Hello, Recently I needed to check the address and port for my cache server, only to find out that the "show protocol all rpki1" output omitted the port. This small patch appends the port after the cache server address on the show protocol all output. Thanks, Luiz

2 1

[PATCH] RPKI: Implement VRF support
by Luiz Amaral 27 May '22

27 May '22

Hello, I made a small patch that adds VRF support to the RPKI protocol. I did some basic testing with and without VRF and it worked as expected. Please let me know if I missed anything. Thanks, Luiz

2 1

[PATCH] babel: Don't try to remove multicast seqno request objects from neighbour list
by Toke Høiland-Jørgensen 27 May '22

27 May '22

The Babel seqno request code keeps track of which seqno requests are outstanding for a neighbour by putting them onto a per-neighbour list. When reusing a seqno request, it will try to remove this node, but if the seqno request in question was a multicast request with no neighbour attached this will result in a crash because it tries to remove a list node that wasn't added to any list. Fix this by making the list remove conditional. Also add a check so that seqno requests are only reused if the neighbour also matches, allowing multiple outstanding requests for the same router ID. Fixes: ebd5751cdeb4 ("Babel: Seqno requests are properly decoupled from neighbors when the underlying interface disappears") Reported-by: Stefan Haller <stefan.haller(a)stha.de> Signed-off-by: Toke Høiland-Jørgensen <toke(a)toke.dk> --- proto/babel/babel.c | 18 +++++++++++------- 1 file changed, 11 insertions(+), 7 deletions(-) diff --git a/proto/babel/babel.c b/proto/babel/babel.c index 4a7d550f5efe..03f1cb500278 100644 --- a/proto/babel/babel.c +++ b/proto/babel/babel.c @@ -304,7 +304,7 @@ babel_add_seqno_request(struct babel_proto *p, struct babel_entry *e, struct babel_seqno_request *sr; WALK_LIST(sr, e->requests) - if (sr->router_id == router_id) + if (sr->router_id == router_id && sr->nbr == nbr) { /* Found matching or newer */ if (ge_mod64k(sr->seqno, seqno) && seqno_request_valid(sr)) @@ -312,7 +312,8 @@ babel_add_seqno_request(struct babel_proto *p, struct babel_entry *e, /* Found older */ rem_node(NODE sr); - rem_node(&sr->nbr_node); + if (sr->nbr) + rem_node(&sr->nbr_node); goto found; } @@ -349,17 +350,20 @@ static int babel_satisfy_seqno_request(struct babel_proto *p, struct babel_entry *e, u64 router_id, u16 seqno) { - struct babel_seqno_request *sr; + struct babel_seqno_request *sr, *srx; + int ret = 0; - WALK_LIST(sr, e->requests) + WALK_LIST_DELSAFE(sr, srx, e->requests) if ((sr->router_id == router_id) && ge_mod64k(seqno, sr->seqno)) { - /* Found the request, remove it */ + /* Found a matching request, remove it; there may be multiple outstanding + * requests, so continue looping + */ babel_remove_seqno_request(p, sr); - return 1; + ret = 1; } - return 0; + return ret; } static void -- 2.36.1

2 1