- Bird-users - Mailing Lists

Configure BGP multihop with version 1.6.8 not working
by Wei Huang 04 Nov '21

04 Nov '21

I am testing with Bird 1.6.8 with the following setup Box 1 with interface VPP0 (192.168.1.6) ----------R--------Box 2 with interface VPP0 (192.168.2.6) Middle router R has IP address 192.168.1.1 and 192.168.2.1 The config for Box 1: table T0; # This pseudo-protocol watches all interface up/down events. protocol device { scan time 10; # Scan interfaces every 10 seconds } # Configure logging log "/home/talariuser/log/dynamic_routing.log" { debug, trace, info, remote, warning, error, auth, fatal, bug } ; router id 198.168.100.5; protocol static { table T0; check link; route 192.168.2.0/24 via 192.168.1.1; # Default route import all; export all; } protocol bgp bgp1 { table T0; import all; # Do not change this parameters without assistance gateway recursive; next hop self; local as 100; hold time 180; source address 192.168.1.6; default bgp_local_pref 100; igp metric on; neighbor 192.168.2.6 as 100; multihop 3; import all; export all; } protocol direct { table T0; interface "vpp0"; } Similar on box2. The BGP stay in connect state. When I try to do packet capture on interface "vpp0", I don't see any packets sent out. Anybody can point out what I did wrong in the config? Thanks in advance, Wei

1 0

unstable BGP sessions after debian 10 -> 11 upgrade
by Christoph 02 Nov '21

02 Nov '21

Hello, we upgraded our debian BGP routers from debian buster to bullseye. On debian 10 they used the repo https://bird.network.cz/debian/ now they use the bird2 package directly from the official debian repos, both repos contain BIRD version 2.0.7. After upgrading and rebooting we noticed that iBGP sessions are constantly dying every few minutes. The logs also show multiple of these log entries: <WARN> Kernel dropped some netlink messages, will resync on next scan. <WARN> Event ... took 31415 ms <WARN> I/O loop cycle took 31529 ms for 9 events <WARN> Netlink: File exists Especially the warning "Kernel dropped some netlink messages" was not new but we previously solved them with these sysctl.conf settings: # solves the "Kernel dropped some netlink messages, will resync on next scan." BIRD Warnings # https://bird.network.cz/pipermail/bird-users/2017-September/011542.html # (we did not change the wmem_default since this is apparently not needed) net.core.rmem_max=4194304 net.core.rmem_default=4194304 net.core.wmem_max=4194304 The most obvious change is the linux kernel version: 4.19.208 (buster) 5.10.70 (bullseye) To avoid constantly dying iBGP sessions we increased the keepalive and hold timers. Are you observing similar issues on your debian 11 systems? Does the newer kernel need higher rmem values? best regards, Christoph

3 3

BIRD 2.0 on FreeBSD, multihop with multiple fibs
by Elmar K. Bins 02 Nov '21

02 Nov '21

Hi everyone, I hope this is not too specific... I'm running into a bit of a pickle here. This is FreeBSD 12.2 with multi-fib enabled; BIRD exporting all its received routes to fib 1, basic kernel routing in fib 0. (The service on the box is in fib 1, of course). I need to configure a multihop session where the BGP partner is not on the same interface as the box's default, but on a pni, which is behind a VLAN-tagged subinterface (i.e., bge0.300) down on a switch somewhere. Also, I can only BGP connect to the partner via the PNI. The interface has no fib tags, so it "exists" in both fibs. Let's say we are bge0.300 5.6.7.7. The other side of the PNI is at 5.6.7.8. Our BGP partner is at 1.2.3.4, reachable through 5.6.7.8. protocol static { ipv4; route 1.2.3.4/32 via 5.6.7.8; } Now, netstat tells me that 1.2.3.4/32 shows up in fib 1, but not in fib 0. BIRD only puts it in fib 1. In this setup, BIRD does not connect to 1.2.3.4 unless I manually add that host route to fib 0. Adding a % 'bge0.300' to the static route line doesn't change a thing, route still only appears in fib 1. Two questions: - why does BIRD put the route in fib 1 when no fib is specified, and the interface is not bound to a fib? - Is there a canonical way of solving this? I have the fib 0 static route configured in the system setup now, which makes it work. It would be nicer to have it thrown in there by BIRD, so the config is self-contained. Any guidance would be highly appreciated. Elmar.

1 0

Redistribution from BGP protocol to OSPF is not working
by keyvan ghadimi 01 Nov '21

01 Nov '21

Hi, I have Three routers in my network like the below diagram. RTR01 has a BGP to RTR02 and RTR02 has an OSPF to RTR03. I wrote a filter to redistribute origin routes from BGP protocol to OSPF in RTR02 but it's not working. ┌───────┐ ┌───────┐ ┌─────┐ │ RTR01. ├──┤ RTR02 ├── ──┤ RTR03 │ └───────┘ └───────┘ └─────┘ 10.2.2.3 -BGP- 10.2.2.2 10.100.100.2 -OSPF- 10.100.100.3 RTR02 Bird config: protocol bgp bgp_to_rtr01{ local as 64513; neighbor 10.2.2.3 as 64512; source address 10.2.2.2; allow local as 64513; multihop; ipv4 { import all; export all; }; } protocol ospf my_ospf { rfc1583compat yes; tick 2; ecmp no; ipv4 { import where proto = "bgp_to_rtr01"; }; area 0.0.0.0 { stub no; interface "dummy0" { type ptp; }; interface "enp0s9" { type broadcast; }; }; } I did the same redistribution to OSPF to announce the default route via OSPF and it is working, but the same filter for redistribution BGP to OSPF is not. Best Regards, Keyvan

2 3

BFD+BGP behavior difference between bird 1.6 and 2.0
by Kseniya Blashchuk 29 Oct '21

29 Oct '21

Hello! After upgrading to 2.0 I have noticed that "bgp on" in BGP peer configuration creates a separate BFD session, however it wasn't like that in bird 1.6, we had to specify neighbors in BFD section. Now for bird 2.0 it looks like specifying neighbors in BFD section is not necessary when "bgp on" is set in BGP configuration. The problem I have faced was "unknown session id" errors between two BGP routers, one running bird 1.6 and another running bird 2.0, same config. It looked like bird 2.0 was creating two BFD sessions comparing to bird 1.6 that created only one. Removing neighbor from BFD section at bird 2.0 fixed the issue. Can anybody tell me if anything has changed in 2.0 or am I missing something? The documentation looks quite similar for both versions in this case.

2 2

How to make bird now its own connectivity (OSPF)
by Lukas Haase 24 Oct '21

24 Oct '21

Hi, Assume the following toy example: R1: R2: 10.1.1.0/24 <--- 10.1.1.1, 192.168.1.1 <---------> 192.168.1.2, 10.1.2.1 ---> 10.1.2.0/24 Net 10.1.1.0/24 has R1 as default route, net 10.1.2.0/24 R2. Since the network connectivity is known, 10.1.2.0/24 could reach 10.1.2.0/24 and vice versa. Of course, R1 and R2 need to exchange that information. It was my understanding that OSPF would do this automatically. But this does not seem to be the case with Bird: Dynamic routes (10.1.1.0/24 and 192.168.1.0/24 for R1 and 192.168.1.0/24 and 10.1.2.0/24 for R2) do not land automatically in bird's routing table. I would like to understand exactly why and what is the "right" way to configure bird. Many protocols have flags to allow this but all say it would only be for "exceptional" purposes. But the above network is pretty much the most common one. Where else would routing information come from if not from the network connectivity? Note that this is not OSPF specific: My Mikrotik router automatically sends me all the routes of its connected networks, as I would expect it. So, I think there are the following options: 1.) The direct protocol. But the doc makes it sound this is not the right path: "[...] Although there are some use cases that use the direct protocol (like abusing eBGP as an IGP routing protocol), in most cases it is not needed to have these device routes in BIRD routing table and to use the direct protocol. [...]" 2.) The kernel protocol. But also here the docs have a strong bias importing dynamic routes (device routes): "[...] Unfortunately, there is one thing that makes the routing table synchronization a bit more complicated. In the kernel routing table there are also device routes for directly connected networks. These routes are usually managed by OS itself (as a part of IP address configuration) and we don't want to touch that. They are completely ignored during the scan of the kernel tables and also the export of device routes from BIRD tables to kernel routing tables is restricted to prevent accidental interference." 3.) The static protocol. I could add something like (for R1): protocol static { export all; route 10.1.1.0/24 via 192.168.1.1; } But then I would manually re-create the already known network connectivity in the config file. Why does no protocol in Bird want to take responsibility for the router's own connectivity? How on earth is this supposed to work? Thanks, Lukas

3 3

Broadcast RIP to each broadcast address on interface with multiple aliases
by bird21＠sensation.net.au 23 Oct '21

23 Oct '21

Hi all, I want to broadcast a last-resort old-school default route via RIPv1. The following config works: filter default_route { if net ~ [ 0.0.0.0/0 ] then { accept; } reject; } # ...snip... protocol rip { export filter default_route; interface "em0" { version 1; mode broadcast; update time 5; }; } ...but it only sends to the broadcast address of the main interface IP. How can I get it to send to the broadcast addresses of the aliases as well? These are the networks on the em0 adapter: x.x.x.192/28 (main) 192.168.x.0/24 (alias) 192.168.y.0/24 (alias) After consulting https://bird.network.cz/doc/bird-3.html#proto-iface , I tried the following to force additional/different addresses: interface x.x.x.193/28 { # actual interface IP/prefix interface x.x.x.192/28 { # network IP/prefix interface x.x.x.x { # interface IP only interface "em0" x.x.x.x { # interface name and IP interface "em0" x.x.x.x/28 { # interface name and IP/prefix All of these are rejected with the error "Interface name/mask expected, not IP prefix", regardless of whether I list the main interface IP, or main plus aliases (comma separated). Am I missing something simple in the syntax, or is the RIPv1 implementation not capable of doing this? Thanks in advance.

2 2

OSPFv3 between BIRD2 and RouterOS (Mikrotik)
by Kees Meijs | Nefos 21 Oct '21

21 Oct '21

Hi list, First of all: I'm very sorry if this has been discussed before. Anyway, we're experiencing possible (configuration) incompatibiliy between BIRD2 and Mikrotik RouterOS. To be precise, we're on BIRD 2.0.7 and RouterOS 6.48.5 (Level 6). Configuration snippet from BIRD: > protocol ospf v3 ospf_v6 { > # Do not generate ECMP (equal-cost multipath) routes. > ecmp no; > > area 0.0.0.0 { > interface "eth0" { > authentication cryptographic; > password "SOMETHING"; > bfd yes; > }; > > interface "eth1" { > authentication cryptographic; > password "SOMETHINGELSE"; > bfd yes; > }; > > interface "dummy0" { > stub; > }; > > interface "eth2" { > stub; > }; > > interface "eth3" { > type pointopoint; > bfd yes; > }; > }; > } The dummy0 interface has bound a /32 IPv4 and a /128 IPv6 address for BGP lookback. OSPFv3 should provide us with IGP in order to facilitate iBGP. Between BIRD nodes this works flawless. When adding the Mikrotik router to the mix, the /128 addresses don't get propagated. Other routes do and OSPFv3 seems to work fine, but the stub routes seem to be ignored. What am I missing here? Thanks! Cheers, Kees -- https://nefos.nl/contact <https://nefos.nl/contact> Nefos IT bv Ambachtsweg 25 (industrienummer 4217) 5627 BZ Eindhoven Nederland KvK 66494931 /Bereikbaar op maandag, dinsdag, donderdag en vrijdag tussen 09:00u en 17:00u./

2 3

bird adversites a direct route from an interface without carrier
by Alarig Le Lay 21 Oct '21

21 Oct '21

Hi, On one router I have an interface that used to be connected to another machine, so the state is NO-CARRIER: core01-arendal ~ # ip addr show enp1s0 2: enp1s0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN group default qlen 1000 link/ether 00:0d:b9:48:c1:c0 brd ff:ff:ff:ff:ff:ff inet 10.0.4.1/31 scope global enp1s0 valid_lft forever preferred_lft forever inet6 2001:4640:a14f:fffd::2/127 scope global valid_lft forever preferred_lft forever inet6 fe80::20d:b9ff:fe48:c1c0/64 scope link valid_lft forever preferred_lft forever On another router, I still have this route from OSPF, advertised from core01-arendal: core02-arendal ~ # birdc BIRD 2.0.8 ready. bird> show route all for 10.0.4.0 Table master4: 10.0.4.0/31 unicast [ospf_ipv4 17:51:54.613] * E2 (150/1/10000) [45.91.126.254] via 10.0.4.5 on enp2s0 Type: OSPF-E2 univ igp_metric: 1 OSPF.metric1: 1 OSPF.metric2: 10000 OSPF.tag: 0x00000000 OSPF.router_id: 45.91.126.254 bird> show route all for 2001:4640:a14f:fffd::2 Table master6: 2001:4640:a14f:fffd::2/128 unicast [ospf_ipv6 17:51:58.613] * I (150/1) [45.91.126.254] via fe80::20d:b9ff:fe48:c1c2 on enp2s0 Type: OSPF univ igp_metric: 1 OSPF.metric1: 1 OSPF.router_id: 45.91.126.254 bird> And here is the export filter for OSPF: export filter { if (proto = "kernel_grt_ipv4" || proto = "direct1" || source = RTS_DEVICE) then { accept; } else reject; }; Given that the interface is unplugged, I expected bird to withdrawn the route rather than keeping it into OSPF. Regards, -- Alarig Le Lay

2 5

Bird just doesn't want to find OSPF neighbors although they are there and can communicate
by Lukas Haase 20 Oct '21

20 Oct '21

Hi, I am having big trouble getting Bird/OSPF working. I broke it down to a simple setup: Point-to-point wireguard link between Node1 (192.168.56.224/31) and Node2 (192.168.56.225/31) using nbma. There were nothing but troubles with multicast and to avoid all these hassles for now, I directly switched to nbma. Config Station 1: protocol ospf test { area 0.0.0.0 { interface "wg-tun" { cost 10; type nbma; authentication cryptographic; password "VWj3QH8LAtWIzQca"; neighbors { 192.168.56.225; }; }; }; } Config Station 2: protocol ospf test { area 0.0.0.0 { interface "wg-tun" { type nbma; cost 10; authentication cryptographic; password "VWj3QH8LAtWIzQca"; neighbors { 192.168.56.224; }; }; }; } - Ping from both sides to the other works. Yet the neighbor table just stay empty: node1:~# birdc show ospf neighbors BIRD 1.6.8 ready. test: Router ID Pri State DTime Interface Router IP node1:~# node2~:# birdc show ospf neighbors BIRD 1.6.8 ready. test: Router ID Pri State DTime Interface Router IP node2:~# Both OSPF Hello are received via tcpdump (see below). What else can be missed? Thanks, Lukas node1:~# tcpdump -n -vvv -i wg-tun 'proto ospf' tcpdump: listening on wg-tun, link-type RAW (Raw IP), capture size 262144 bytes 23:41:09.515892 IP (tos 0xc0, ttl 1, id 65434, offset 0, flags [none], proto OSPF (89), length 80) 192.168.56.224 > 192.168.56.225: OSPFv2, Hello, length 44 Router-ID 192.168.56.193, Backbone Area, Authentication Type: MD5 (2) Key-ID: 1, Auth-Length: 16, Crypto Sequence Number: 0x00012747 Options [External] Hello Timer 10s, Dead Timer 40s, Mask 255.255.255.254, Priority 1 Designated Router 192.168.56.224 23:41:19.589835 IP (tos 0xc0, ttl 1, id 10125, offset 0, flags [none], proto OSPF (89), length 80) 192.168.56.225 > 192.168.56.224: OSPFv2, Hello, length 44 Router-ID 192.168.56.194, Backbone Area, Authentication Type: MD5 (2) Key-ID: 1, Auth-Length: 16, Crypto Sequence Number: 0x00209357 Options [External] Hello Timer 10s, Dead Timer 40s, Mask 255.255.255.254, Priority 1 Designated Router 192.168.56.225 node2:~# tcpdump -n -vvv -i wg-tun 'proto ospf' tcpdump: listening on wg-tun, link-type RAW (Raw IP), snapshot length 262144 bytes 23:41:29.723176 IP (tos 0xc0, ttl 1, id 2705, offset 0, flags [none], proto OSPF (89), length 80) 192.168.56.224 > 192.168.56.225: OSPFv2, Hello, length 44 Router-ID 192.168.56.193, Backbone Area, Authentication Type: MD5 (2) Key-ID: 1, Auth-Length: 16, Crypto Sequence Number: 0x00012748 Options [External] Hello Timer 10s, Dead Timer 40s, Mask 255.255.255.254, Priority 1 Designated Router 192.168.56.224 23:41:39.732903 IP (tos 0xc0, ttl 1, id 12839, offset 0, flags [none], proto OSPF (89), length 80) 192.168.56.225 > 192.168.56.224: OSPFv2, Hello, length 44 Router-ID 192.168.56.194, Backbone Area, Authentication Type: MD5 (2) Key-ID: 1, Auth-Length: 16, Crypto Sequence Number: 0x00209358 Options [External] Hello Timer 10s, Dead Timer 40s, Mask 255.255.255.254, Priority 1 Designated Router 192.168.56.225

4 8