- Bird-users - Mailing Lists

Bird crash on interface disable
by Anes Mukhametov 01 Apr '21

01 Apr '21

Hi! Got an issue with 2.0.7. The daemon crashes on `ip link down`. Fix attached.

2 1

ignore max length as an argument of roa_check
by Pier Carlo Chiodi 31 Mar '21

31 Mar '21

Hello, first, thanks to the devs for 2.0.8! I see the option 'ignore max length' was introduced, and that it's possible to enable it at protocol configuration time. ignore max length switch Ignore received max length in ROA records and use max value (32 or 128) instead. This may be useful for implementing loose RPKI check for blackholes. Default: disabled. I was wondering what other people's feelings would be about having a similar option available at validation time, more specifically as an argument of roa_check. If my understanding is correct, being the current option available only at protocol level, it means that all the ROAs that are present inside the ROA table are used as if the maxLength attribute is not set. This means that it wouldn't be possible to configure a filter to perform a strict OV check (where the maxLength is also taken into account) using ROAs from that table. Having that option available at roa_check time, the same table could be used to perform both strict validation and also a loose validation, for example depending on the presence of the BLACKHOLE BGP community: (pseudo-code follows) # ... regular sanity checks done here... if BLACKHOLE { if (roa_check(ignore_max_lenght=True) = ROA_INVALID) then { reject; } accept; } else { if (roa_check() = ROA_INVALID) then { reject; } accept; } (Assuming ignore_max_lenght has default value == False.) Does it make sense? Thanks Pier Carlo Chiodi

5 7

[PATCH] MRT: Add overwrite switch (default: off)
by Wydrych, Piotr 29 Mar '21

29 Mar '21

Hello, I was working recently with MRT dumps. I wrote a small patch that allows bird to overwrite the dump file. Piotr -- Piotr 'GhosT' Wydrych ........ Engineering Manager, SDN ......... Akamai ........................................................................ A: Because it messes up the order in which people normally read text. .. Q: Why is top-posting such a bad thing? ................................

1 0

BGP connect retry time
by dev＠kou.li 29 Mar '21

29 Mar '21

Hello, I am running bird's BGP on a slower link with accounted data. I would like to lower connection attempt frequency when the peer is down. I found only two parameters mentioning connection delays: 'connect delay time' and 'connect retry time'. From documentation, I understood to change the 'connect retry time' to slow down failed connection attempts, but the bird seems to use 'connect delay time' repeatedly if the connection fails (test: bird 1.6.6, peer's firewall drops all BGP packets). So, what is the 'connect retry time' used for? Also, if I increase the 'connect delay time' to lower BGP data throughput in case the peer is offline, I introduce also unwanted delay when everything works and only the BGP protocol is restarted... I understand bird 1.6.6 is rather old to ask for any help here. However, it is such a basic functionality I do not believe it to have changed recently. Also, I found no mention of these parameters in the NEWS file. Milan

2 1

BMP protocol support - request for review and merge
by Maslanka, Pawel 29 Mar '21

29 Mar '21

Hi BIRD devs, Akamai team have implemented basic subset of BMP (BGP Monitoring Protocol) specification for BIRD project (according to RFC 7854). We are happy to share our work with BIRD community and would ask for review patch. Please feel free for modify this patch to meet BIRD source code requirements for merge it to BIRD mainline code since we post this patch under to GPLv2+ license (please look at |proto/bmp/LICENSE|). It worth to note that there are few minor unimplemented things from RFC 7854, but the most important are: - not implemented Route Mirroring message - not implemented Stats Report message This implementation has been tested with open source BMP collectors like OpenBMP and pmacct. This patch is compatible with BIRD v2.0.7 release. Additionally I would like to take the opportunity to thank Ondrej Zajicek for hints to contribution of this patch according to BIRD project specification. Thanks, Pawel Maslanka Software Engineer at Akamai Technologies, Inc.

2 1

Incorrect setting of BGP Path Attribute Extended Length flag breaks MRT output
by Simon Marsh 28 Mar '21

28 Mar '21

Hi, i run bird as a route collector in DN42 and so get a variety of different BGP daemons peering with and passing routes to the collector. We recently ran in to an issue where MRT dumps from bird were not readable by any of the common MRT parsers and, on investigation, found a bug in how bird handles the BGP Path Attribute Extended Length flag. The issue occurred because peers using the FRR daemon set the Extended Length flag on the AS PATH attribute by default, regardless of the actual data length. When bird re-encodes the AS Path (for example as part of the MRT dump) it correctly re-calculates whether to use an 8 bit or 16 bit length field for the attribute, but simply copies the flags and does not reset the Extended Length flag in the 8 bit case. This results in an AS PATH attribute being output that has the Extended Length flag set but with the actual length field being only 8 bits. Of course, any parsers trying read this get very confused. A simple fix is to ensure the Extended Length flag is cleared when encoding the 3 byte attribute header: diff --git a/proto/bgp/attrs.c b/proto/bgp/attrs.c index 6752cb7f..5c7b4fdd 100644 --- a/proto/bgp/attrs.c +++ b/proto/bgp/attrs.c @@ -118,7 +118,7 @@ bgp_set_attr(ea_list **attrs, struct linpool *pool, uint code, uint flags, uintp static inline int bgp_put_attr_hdr3(byte *buf, uint code, uint flags, uint len) { - *buf++ = flags; + *buf++ = flags & ~BAF_EXT_LEN; *buf++ = code; *buf++ = len; return 3; Cheers Simon

2 1

A ifname counterpart for the "from" attribute
by Marcel Krüger 26 Mar '21

26 Mar '21

Hi, is there any way to identify in a filter the interface the route was learned from? So basically an attribute which relates to "from" like ifname and ifindex relate to "gw"? This would be particularly useful when "from" is a link lcal address and therefore might not be enough to identify the source. If this doesn't exists, is there another way to enforce that the "gw" is always on the same interface the route was learned on whithout having to use interface specific configuration (e.g. customized filters or special igp tables in BGP). (I am mostly interested in BGP, but I guess that most solutions would apply more gnerally) If not, would a patch implementing such an route attribute have a chance of being merged? Best regards, Marcel

2 1

Re: Foreign upstream gateway for remote maintenance
by Bernd Naumann 26 Mar '21

26 Mar '21

Good morning Nils, On 26.03.21 08:47, Nils van Lück wrote: > Hello! > > I am using the latest Bird version from the git repo under Debian. I > have one dedicated NIC for the LAN, one dedicated NIC for BGP sessions > and one NIC with an IP from a foreign ASN for remote maintenance. How > can I make the routed traffic go through Bird but still connect to a > foreign gateway via SSH through another NIC? Also the operating system > updates (apt-get) should run over the third NIC and not over the bird > routes. > > NIC 1: LAN / OSPF > NIC 2: BGP / Peering / routed traffic over bird > NIC 3: foreign gateway fo remote maintenance of the routers debian instance > > Regards, > > Nils van Lück I'm not 100% sure... but I see two two ways, but both with limitations. Maybe someone can comment on these approaches, or provide an alternative better idea. 1) Use different routing tables. This way you can ensure that traffic which hits nic3 goes out of nic3 then. See https://tldp.org/HOWTO/pdf/Adv-Routing-HOWTO.pdf Section 4.2.1. Split access for the general setup But I do not know how you would /tell/ `apt` to use that table or a specific source address (so its traffic would then go out of nic3). However, bird is able to use different tables. 2) Using namespaces Start `sshd` in a separate namespace, and call `apt` also only from within this namespace. This namespace would only have `lo` and `nic3`. See for instance https://lwn.net/Articles/580893/ While using a namespace for sshd and apt, you would not need to configure bird / tell bird about it. Hope this helps somehow. Best, Bernd

2 1

Foreign upstream gateway for remote maintenance
by Nils van Lück 26 Mar '21

26 Mar '21

Hello! I am using the latest Bird version from the git repo under Debian. I have one dedicated NIC for the LAN, one dedicated NIC for BGP sessions and one NIC with an IP from a foreign ASN for remote maintenance. How can I make the routed traffic go through Bird but still connect to a foreign gateway via SSH through another NIC? Also the operating system updates (apt-get) should run over the third NIC and not over the bird routes. NIC 1: LAN / OSPF NIC 2: BGP / Peering / routed traffic over bird NIC 3: foreign gateway fo remote maintenance of the routers debian instance Regards, Nils van Lück

1 0

recursive next-hop from filter
by Manon Goo 25 Mar '21

25 Mar '21

Hallo, Is it possible to set or modify a recursive next-hop and the loop-up table for a route from a filter or function ? Kind regards, Manon

2 2