- Bird-users - Mailing Lists

bird adversites a direct route from an interface without carrier
by Alarig Le Lay 21 Oct '21

21 Oct '21

Hi, On one router I have an interface that used to be connected to another machine, so the state is NO-CARRIER: core01-arendal ~ # ip addr show enp1s0 2: enp1s0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN group default qlen 1000 link/ether 00:0d:b9:48:c1:c0 brd ff:ff:ff:ff:ff:ff inet 10.0.4.1/31 scope global enp1s0 valid_lft forever preferred_lft forever inet6 2001:4640:a14f:fffd::2/127 scope global valid_lft forever preferred_lft forever inet6 fe80::20d:b9ff:fe48:c1c0/64 scope link valid_lft forever preferred_lft forever On another router, I still have this route from OSPF, advertised from core01-arendal: core02-arendal ~ # birdc BIRD 2.0.8 ready. bird> show route all for 10.0.4.0 Table master4: 10.0.4.0/31 unicast [ospf_ipv4 17:51:54.613] * E2 (150/1/10000) [45.91.126.254] via 10.0.4.5 on enp2s0 Type: OSPF-E2 univ igp_metric: 1 OSPF.metric1: 1 OSPF.metric2: 10000 OSPF.tag: 0x00000000 OSPF.router_id: 45.91.126.254 bird> show route all for 2001:4640:a14f:fffd::2 Table master6: 2001:4640:a14f:fffd::2/128 unicast [ospf_ipv6 17:51:58.613] * I (150/1) [45.91.126.254] via fe80::20d:b9ff:fe48:c1c2 on enp2s0 Type: OSPF univ igp_metric: 1 OSPF.metric1: 1 OSPF.router_id: 45.91.126.254 bird> And here is the export filter for OSPF: export filter { if (proto = "kernel_grt_ipv4" || proto = "direct1" || source = RTS_DEVICE) then { accept; } else reject; }; Given that the interface is unplugged, I expected bird to withdrawn the route rather than keeping it into OSPF. Regards, -- Alarig Le Lay

2 5

Bird just doesn't want to find OSPF neighbors although they are there and can communicate
by Lukas Haase 20 Oct '21

20 Oct '21

Hi, I am having big trouble getting Bird/OSPF working. I broke it down to a simple setup: Point-to-point wireguard link between Node1 (192.168.56.224/31) and Node2 (192.168.56.225/31) using nbma. There were nothing but troubles with multicast and to avoid all these hassles for now, I directly switched to nbma. Config Station 1: protocol ospf test { area 0.0.0.0 { interface "wg-tun" { cost 10; type nbma; authentication cryptographic; password "VWj3QH8LAtWIzQca"; neighbors { 192.168.56.225; }; }; }; } Config Station 2: protocol ospf test { area 0.0.0.0 { interface "wg-tun" { type nbma; cost 10; authentication cryptographic; password "VWj3QH8LAtWIzQca"; neighbors { 192.168.56.224; }; }; }; } - Ping from both sides to the other works. Yet the neighbor table just stay empty: node1:~# birdc show ospf neighbors BIRD 1.6.8 ready. test: Router ID Pri State DTime Interface Router IP node1:~# node2~:# birdc show ospf neighbors BIRD 1.6.8 ready. test: Router ID Pri State DTime Interface Router IP node2:~# Both OSPF Hello are received via tcpdump (see below). What else can be missed? Thanks, Lukas node1:~# tcpdump -n -vvv -i wg-tun 'proto ospf' tcpdump: listening on wg-tun, link-type RAW (Raw IP), capture size 262144 bytes 23:41:09.515892 IP (tos 0xc0, ttl 1, id 65434, offset 0, flags [none], proto OSPF (89), length 80) 192.168.56.224 > 192.168.56.225: OSPFv2, Hello, length 44 Router-ID 192.168.56.193, Backbone Area, Authentication Type: MD5 (2) Key-ID: 1, Auth-Length: 16, Crypto Sequence Number: 0x00012747 Options [External] Hello Timer 10s, Dead Timer 40s, Mask 255.255.255.254, Priority 1 Designated Router 192.168.56.224 23:41:19.589835 IP (tos 0xc0, ttl 1, id 10125, offset 0, flags [none], proto OSPF (89), length 80) 192.168.56.225 > 192.168.56.224: OSPFv2, Hello, length 44 Router-ID 192.168.56.194, Backbone Area, Authentication Type: MD5 (2) Key-ID: 1, Auth-Length: 16, Crypto Sequence Number: 0x00209357 Options [External] Hello Timer 10s, Dead Timer 40s, Mask 255.255.255.254, Priority 1 Designated Router 192.168.56.225 node2:~# tcpdump -n -vvv -i wg-tun 'proto ospf' tcpdump: listening on wg-tun, link-type RAW (Raw IP), snapshot length 262144 bytes 23:41:29.723176 IP (tos 0xc0, ttl 1, id 2705, offset 0, flags [none], proto OSPF (89), length 80) 192.168.56.224 > 192.168.56.225: OSPFv2, Hello, length 44 Router-ID 192.168.56.193, Backbone Area, Authentication Type: MD5 (2) Key-ID: 1, Auth-Length: 16, Crypto Sequence Number: 0x00012748 Options [External] Hello Timer 10s, Dead Timer 40s, Mask 255.255.255.254, Priority 1 Designated Router 192.168.56.224 23:41:39.732903 IP (tos 0xc0, ttl 1, id 12839, offset 0, flags [none], proto OSPF (89), length 80) 192.168.56.225 > 192.168.56.224: OSPFv2, Hello, length 44 Router-ID 192.168.56.194, Backbone Area, Authentication Type: MD5 (2) Key-ID: 1, Auth-Length: 16, Crypto Sequence Number: 0x00209358 Options [External] Hello Timer 10s, Dead Timer 40s, Mask 255.255.255.254, Priority 1 Designated Router 192.168.56.225

4 8

bgp_large_community wildcard in conditional
by Brooks Swinnerton 18 Oct '21

18 Oct '21

Hello, I was wondering if it's possible to create a conditional that matches on a wildcard for a part of a BGP large community. For example: if ([*, 600, 6939]) ~ bgp_large_community then reject; This currently results in a syntax error at the position of the comma after the *.

5 7

Deleting a single route in BGP
by Johannes Ludwig 05 Oct '21

05 Oct '21

Hello everyone! Currently I'm writing my bachelor thesis that also contains an implementation of an extension in BIRD and BGP. One building block is deleting a single route in BGP without triggering an Update message (with route withdraws) and the route must be deleted programmatically, so without receiving an Update message. The problem is, that I see no support for that. I can't call rte_update2 with new == NULL, because this would delete all routes that lead to the specified network. But I want to delete only one specific route! The problem description and what I have done so far: Delete a specific route without triggering a BGP Update Message: Since BGP has no use case where only a specific route should be deleted, this problem is difficult (at least for me). Normally we receive a Route Withdraw Message and can call rte_update2() with the not reachable network and when rte * new == NULL all routes that lead to the target network are deleted. But in my use case I only want to remove one specific route. At the moment I add specific pflags to the rte I want to delete and in rte_update2 I check if new->pflags has the specific value. If so, I jump to drop in rte_update2, where the route is deleted. The route is deleted but no recalculation is done, therefore I set new to the best route of the reachable network (net->routes) and jump to recalc in rte_update2(). I add my specific pflags and when bgp_rt_notify in attrs.c is called I return. Unbelievable but this works -- almost! My problem is that the route is deleted in the BIRD BGP Routingtable, so when I call birdc show route all it shows me all routes without the deleted one (so far so good), BUT the kernel routing table is not changed. And this is the point where I have to change my approach. To summarize my problem in one sentence: How can I delete a single route in BIRD without declaring a network as unreachable and calling rte_update2() with new == NULL, because this approach would lead to the deletion of all routes that lead to a network. I hope someone can help me and maybe explain where I can look, what functions could be useful and what things I have to consider. Many thanks in advance! Johannes Ludwig

2 1

Lower number of IPv6 routes received than expected
by Adrian Brooks 04 Oct '21

04 Oct '21

Hello, I'm hoping someone can help me out with some troubleshooting please. I'm using two IPv4 sessions to send the Internet routing table into Bird. Taking the first session, the advertising router tells me it's sending 871273 IPv4 unicast routes and 134440 IPv6 unicast routes towards Bird. All the IPv4 routes arrive, but I only get ~16k IPv6 routes. I don't have any filters configured to reject routes so I'm puzzled as to what's going on. How could I troubleshoot further? I didn't see any obviously related messages in the log. BIRD 2.0.8 ready. bird> show route import table uplink1.ipv4 count 871273 of 871273 routes for 871273 networks in table import bird> bird> show route import table uplink1.ipv6 count 16091 of 16091 routes for 16091 networks in table import The second session (sourced from a different router) is better, but there's still not enough: bird> show route import table uplink2.ipv6 count 45357 of 45357 routes for 45357 networks in table import Thanks in advance for any pointers, Regards, Adrian Adrian BROOKS Telecom Networks - Fixed Services Platforms Tel. : +352 2424 2301 adrian.brooks(a)post.lu<mailto:adrian.brooks@post.lu> POST Technologies 20, Rue de Reims L-2417 Luxembourg www.posttechnologies.lu<http://www.posttechnologies.lu/> [logo_technologies(a)2x.png] Ce message et toutes les pièces jointes (ci-après le "message") sont établis à l'intention exclusive de ses destinataires et sont confidentiels. Si vous recevez ce message par erreur, merci de le détruire et d'en avertir immédiatement l'expéditeur. Toute utilisation de ce message non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. Internet ne permettant pas d'assurer l'intégrité de ce message, POST Luxembourg décline toute responsabilité au titre de ce message, dans l'hypothèse où il aurait été modifié.

2 2

bird-2.0.8 in Debian testing
by Jakub Ružička 03 Oct '21

03 Oct '21

Hello Community, latest bird2-2.0.8 is now available from Debian testing (and unstable) \o/ HOWTO get on Debian bullseye: echo "deb http://deb.debian.org/debian testing main" >> /etc/apt/sources.list apt update apt -t testing install bird2 # TEST ALL THE THINGS This can be backported into bullseye-backports. Cheers, Jakub Ružička CZ.NIC packager 📦

3 2

OSPF on OpenBSD
by Bastien Durel 30 Sep '21

30 Sep '21

Hello, I'm trying to use bird to replace ospfd on OpenBSD, but it seems to have a strange effect on the networking stack :( I've tried multiple times, from OpenBSD 6.6 to 6.9, with bird2 (2.0.8 now) Here is my bird config: openbsd-test# cat /etc/bird.conf|grep -v ^#|grep -v '^$' log "/var/log/bird.log" { debug, trace, info, remote, warning, error, auth, fatal, bug }; router id 10.42.42.69; debug protocols all; protocol device { } protocol direct { disabled; # Disable by default ipv4; # Connect to default IPv4 table ipv6; # ... and to default IPv6 table } protocol kernel { ipv4 { # Connect protocol to IPv4 table by channel export all; # Export to protocol. default is export none }; } protocol kernel { ipv6 { export all; }; } protocol static { ipv4; # Again, IPv4 channel with default options } protocol ospf v2 ospfv2 { rfc1583compat yes; tick 2; ipv4 {}; area 0 { interface "em0" { cost 5; }; }; } And the em0 config: em0: flags=248843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,AUTOCONF6TEMP,AUTOC ONF6> mtu 1500 lladdr 08:00:27:d6:6e:dd index 1 priority 0 llprio 3 groups: egress media: Ethernet autoselect (1000baseT full-duplex) status: active inet6 fe80::a00:27ff:fed6:6edd%em0 prefixlen 64 scopeid 0x1 inet 10.42.42.69 netmask 0xffffff00 broadcast 10.42.42.255 Before starting bird, I have a simple routing table : openbsd-test# route -n show - inet Routing tables Internet: Destination Gateway Flags Refs Use Mtu Prio Iface default 10.42.42.1 UGS 6 12 - 8 em0 224/4 127.0.0.1 URS 0 0 32768 8 lo0 10.42.42/24 10.42.42.69 UCn 2 0 - 4 em0 10.42.42.1 40:62:31:07:55:11 UHLch 1 2 - 3 em0 10.42.42.21 00:25:22:1e:0b:b7 UHLc 0 1 - 3 em0 10.42.42.69 08:00:27:d6:6e:dd UHLl 0 4 - 1 em0 10.42.42.255 10.42.42.69 UHb 0 0 - 1 em0 127/8 127.0.0.1 UGRS 0 0 32768 8 lo0 127.0.0.1 127.0.0.1 UHhl 1 2 32768 1 lo0 When bird is started, it inserts routes as intended: openbsd-test# route -n show -inet Routing tables Internet: Destination Gateway Flags Refs Use Mtu Prio Iface default 10.42.42.1 UGS 5 314 - 8 em0 default 10.42.42.1 UG1 0 0 - 56 em0 224/4 127.0.0.1 URS 0 19 32768 8 lo0 5.39.65.35 10.42.42.1 UGH1 0 0 - 56 em0 10.0.42.21 10.42.42.21 UGH1 0 0 - 56 em0 10.2.0/24 10.42.42.1 UG1 0 0 - 56 em0 10.42.0/24 10.42.42.1 UG1 0 0 - 56 em0 10.42.1.56/30 10.42.42.21 UG1 0 0 - 56 em0 10.42.1.64/30 10.42.42.21 UG1 0 0 - 56 em0 10.42.7.6 10.42.42.21 UGH1 0 0 - 56 em0 10.42.7.7 10.42.42.21 UGH1 0 0 - 56 em0 10.42.7.53 10.42.42.21 UGH1 0 0 - 56 em0 10.42.42/24 10.42.42.69 U1h 66 193 - 56 em0 10.42.42.69 08:00:27:d6:6e:dd UHLl 0 104 - 1 em0 10.42.42.255 10.42.42.69 UHb 0 13 - 1 em0 10.60.77.5 10.42.42.1 UGH1 0 0 - 56 em0 [...] But after that, the box cannot join anythin with IPv4. Established connections (eg. ssh) over IPv4 fails. Even the gateway is unreachable: openbsd-test# ping 10.42.42.1 PING 10.42.42.1 (10.42.42.1): 56 data bytes ping: sendmsg: Invalid argument ping: wrote 10.42.42.1 64 chars, ret=-1 ping: sendmsg: Invalid argument ping: wrote 10.42.42.1 64 chars, ret=-1 ^C --- 10.42.42.1 ping statistics --- 2 packets transmitted, 0 packets received, 100.0% packet loss With no ospfv3 configured, ipv6 connections are not lost dmesg returns theses messages : arp_rtrequest: bad gateway value: em0 arpresolve: 10.42.42.1: route contains no arp information arpresolve: 10.42.42.0: route contains no arp information arpresolve: 10.42.42.1: route contains no arp information The last ones beeing flooded when the box tries to send packets Whatever bird makes to the networking stack persists even if bird is shut down. A reboot is necessary to recover. On OpenBSD mailing list, someone said the problem may be bird overwriting the 10.42.42/24 route (which was directly connected) by another (the flags changed from UCn to U1h) After stopping bird, flags and prios are not restored (10.42.42/24 gets U1 / prio 56), and the default route kept is the one bird inserted openbsd-test# route -n show -inet Routing tables Internet: Destination Gateway Flags Refs Use Mtu Prio Iface default 10.42.42.1 UG1 2 2 - 56 em0 224/4 127.0.0.1 URS 0 13 32768 8 lo0 10.42.42/24 10.42.42.69 U1 0 76 - 56 em0 10.42.42.69 08:00:27:d6:6e:dd UHLl 0 23 - 1 em0 10.42.42.255 10.42.42.69 UHb 0 6 - 1 em0 127/8 127.0.0.1 UGRS 0 0 32768 8 lo0 127.0.0.1 127.0.0.1 UHhl 1 2 32768 1 lo0 Do you know how to prevent that ? Thanks, -- Bastien

3 3

Bird2 not distributing IPv6 address on dummy to OSPF
by Blažej Krajňák 28 Sep '21

28 Sep '21

Hello, I just installed fresh Debian 11 server and I need to distribute IPv6 /128 address from dummy1 interface to OSPF. Direct protocol see that address, but neighbour not. Am I missing something? ip -6 route 2a02:6ca3:0:2::25 dev dummy1 proto bird metric 32 pref medium 2a02:6ca3:0:2::25 dev dummy1 proto kernel metric 256 pref medium bird> show route table master6 Table master6: 2a02:6ca3:0:2::25/128 unicast [ospf2 00:32:34.008] I (150/0) [172.20.12.25] dev dummy1 log syslog all; router id 172.20.12.25; protocol device { } protocol direct { disabled; # Disable by default ipv4; # Connect to default IPv4 table ipv6; # ... and to default IPv6 table } protocol kernel { ipv4 { export all; }; } protocol kernel { ipv6 { export all; }; } protocol static { ipv4; } protocol static { ipv6; } protocol ospf v2 { ipv4 { import all; }; area 0 { interface "ens192" { type broadcast; }; interface "dummy1" { stub; }; }; } protocol ospf v3 { ipv6 { import all; }; area 0 { interface "ens192" { type broadcast; }; interface "dummy1" { stub; }; }; }

3 3

RPKI not working with protocol pipe
by Dewangga Alam 28 Sep '21

28 Sep '21

Hello! I just migrating configuration using port pipe recently, but I just realized the RPKI/ROA validation isn’t working. Debian 10 Bird 2.0.8 … snip … ipv4 table master4; ipv6 table master6; ipv4 table igptable4; ipv6 table igptable6; roa4 table t_roa4; roa6 table t_roa6; protocol rpki rpki1 { roa4 { table t_roa4; }; roa6 { table t_roa6; }; remote “ip.ad.dr.es" port 8282; retry keep 30; refresh keep 30; expire keep 3600; } function is_v4_rpki_invalid() { return roa_check(t_roa4, net, bgp_path.last_nonaggregated) = ROA_INVALID; } function is_v6_rpki_invalid() { return roa_check(t_roa6, net, bgp_path.last_nonaggregated) = ROA_INVALID; } protocol pipe pipe1 { # sync routing table igp to master table master4; peer table igptable4; export all; import all; } … snip … Starting using the filter to call is_v4_rpki_invalid(), isn’t working. But if the setup without proto pipe, the filter and table t_roa4 and t_roa6 are able validate the prefix. The configuration for rpki is working. # show proto rpki1 Name Proto Table State Since Info rpki1 RPKI --- up 2021-09-11 Established Is it possible to pipe Roa with pipe protocol and put the RPKI in place? Any feedback are welcome and appreciated. Many thanks.

1 0

Bird 2.0.8 + uClibc-ng, BGP RR + OSPF - OSPF falls to 'Alone' state at BGP routes recalculation
by Andrew 24 Sep '21

24 Sep '21

Hi all. I have Bird 2.0.8 on one of border routers, it runs with kernel 5.10.26 and uClibc-ng 1.0.38. It acts as RR and receives FV from uplink + FV from second border (also RR), and it has 2 routing tables (one which receives BGP routes, then routes sinks to main table. When second border's BGP link fails, Bird starts to rebuild routing table, and acts quite strange (too slow birdc response, etc) and after ~5 minutes OSPF looses neighbors and falls to state 'Alone'. It can be in that state for hours, and initiated only after bird restart (I didn't tried protocol restart - usually I don't wait for end of route table recalculation). When table recalculation is in progress, perf top shows that 40+% CPU time is used by malloc routine. Are there fixes in trunk for such behavior? If no - what extra info is needed for debugging?

2 2