- Bird-users - Mailing Lists

BIRD2 in Debian Backports
by Kees Meijs | Nefos 17 May '21

17 May '21

Hi list, For those Debian purists like myself: BIRD2 is in Debian Backports! Unfortunately it's version 2.0.7 and not 2.0.8 but it's a leap forward I guess. Please see https://packages.debian.org/buster-backports/bird2 Cheers, Kees -- https://nefos.nl/contact <https://nefos.nl/contact> Nefos IT bv Ambachtsweg 25 (industrienummer 4217) 5627 BZ Eindhoven Nederland KvK 66494931 /Bereikbaar op maandag, dinsdag, woensdag en vrijdag tussen 09:00u en 17:00u./

1 0

Using bird 1.x
by Peter Mitchell 13 May '21

13 May '21

Hello, I am researching BIRD 1.x for my computer science security in an open-source project and I noticed that its last update was in late 2019. I want to understand it from a maintenance perspective and I would like to know if security bugs found in 2.x will be looked into for 1.x and backported to the 1.x branch. Sorry if this has already been asked, I read through some FAQs and search past messages, but if I missed something please point me to it. Thanks, Peter M

2 1

textfsm json template examples
by Logan Rawlins 11 May '21

11 May '21

Like many of you on this list i've seen many running into issues needing json output from bird. For now i'm getting through this using textfsm and then adding the headers to the output creating dict lists of routes or other info from bird. This is probably the easiest method for parsing bird output into json hopefully this is of use to some on this list. <snip> def _parse_bird_output(cls, template, text): template='textfsm/' + template with open(template) as f: fsmtemplate = textfsm.TextFSM(f) header = fsmtemplate.header parsedtext = fsmtemplate.ParseText(text) output = [] for item in parsedtext: output.append(dict(zip(header,item))) return json.dumps(output) </snip> <routedetail.textfsm> Value Required Route (\d+\.\d+\.\d+\.\d+\/\d+|([0-9a-f]{0,4}:){2,7}[0-9a-f]{0,4}/\d{1,3}) Value Neighbor ((\w|\.)+) Value Age (\d+-\d+-\d+ \d+:\d+:\d+) Value NeiIP (\d+\.\d+\.\d+\.\d+) Value OriginAS (\d+) Value Filldown Table (.+) Value BGP_origin (\w+) Value BGP_aspath (.+) Value BGP_nexthop (\d+\.\d+\.\d+\.\d+) Value BGP_localpref (\d+) Value BGP_community (.+) Value BGP_med (\d+) Start ^Table ${Table}: ^${Route}.*\[${Neighbor} ${Age} from ${NeiIP}\].*\[AS${OriginAS}.\] ^\s+BGP.origin: ${BGP_origin} ^\s+BGP.as_path: ${BGP_aspath} ^\s+BGP.next_hop: ${BGP_nexthop} ^\s+BGP.med: ${BGP_med} ^\s+BGP.local_pref: ${BGP_localpref} -> CommCheck CommCheck ^\s+BGP.community: ${BGP_community} -> Record Start # input buffer line doesn't have BGP.community in it, go on to the next rule(s) but save ^\s*((?!BGP.community).)* -> Continue.Record # check for the start of new table or route and move back to initial state ^Table ${Table}: -> Start ^${Route}.*\[${Neighbor} ${Age} from ${NeiIP}\].*\[AS${OriginAS}.\] -> Start </routedetail.textfsm> <routes.textfsm> Value Filldown Table (.+) Value Required Route (\d+\.\d+\.\d+\.\d+\/\d+|([0-9a-f]{0,4}:){2,7}[0-9a-f]{0,4}/\d{1,3}) Value Neighbor ((\w|\.)+) Value NeiIP (\d+\.\d+\.\d+\.\d+) Value Age (\d+-\d+-\d+ \d+:\d+:\d+) Value OriginAS (\d+) Start ^BIRD \d+\.\d+\.\d+ ready. -> RTable RTable ^Table ${Table}: -> Record ^${Route}.*\[${Neighbor} ${Age} from ${NeiIP}\].*\[AS${OriginAS}.\] -> Record ^Table -> Start </routes.textfsm> <routecount.textfsm> Value Table (\S+) Value Routes (\d+) Value Total (\d+) Value Networks (\d+) Value Tables (\d+) Start ^${Routes} of ${Total} routes for ${Networks} networks in table ${Table} -> Record ^Total: ${Routes} of ${Total} routes for ${Networks} networks in ${Tables} tables -> Record </routecount.textfsm>

1 1

BIRD 2.0.8 packaging update
by Jakub Ružička 10 May '21

10 May '21

Hello BIRD Community! Latest bird-2.0.8 is available from most current downstream distro repos including: * Arch * EPEL/CentOS * Fedora * Gentoo * Manjaro * NixOS * OpenBSD You can use repology to get an overview: https://repology.org/project/bird/versions # Debian Debian is currently in Hard Freeze before 11/Bullseye release and thus updating bird2 package to 2.0.8 is problematic (it lacks autopkgtests): https://release.debian.org/bullseye/freeze_policy.html#hard Current Maintainer of Debian bird2 package Ondřej Surý has agreed to pass the maintenance to me but I don't have access yet. Once I gain it I'll release bird2-2.0.8 in experimental and eventually keep debian/master up-to-date after the freeze ends. The Community is also working on providing Debian backports for Debian stable. Until proper downstream packages are ready, I've prepared upstream packages for Debian 9, 10 and 11 in new bird-latest OBS repos: https://download.opensuse.org/repositories/home:/CZ-NIC:/bird-latest/ However, OBS "Download Package" link is currently missing instructions for Debian for some reason: https://software.opensuse.org//download.html?project=home%3ACZ-NIC%3Abird-l… It's either a bug in OBS or a slow propagation of new repo. I'm trying to resolve this on #opensuse-buildservice but for now you're left to your Debian-fu in enabling these repos. # Ubuntu I've updated BIRD launchpad PPA with upstream bird2-2.0.8 packages for all current Ubuntu releases: https://launchpad.net/~cz.nic-labs/+archive/ubuntu/bird I've tested all of these packages lightly on respective Ubuntu VMs. They installed successfully and bird service started. Ubuntu uses Debian bird packages so once they're updated in Debian, Ubuntu downstream should pick them up. # openSUSE bird-2.0.8 is available from openSUSE Tumbleweed. I've prepared new bird-latest OBS to cover remaining SUSE platforms: https://build.opensuse.org/package/show/home:CZ-NIC:bird-latest/bird Please use "Download Package" link (top right) to enable: https://software.opensuse.org//download.html?project=home%3ACZ-NIC%3Abird-l… # upstream packaging All the upstream packages were created from official 2.0.8 archive using modified downstream sources from Debian and Fedora. Please note that I had to disable -docs subpackages to get working builds on older systems as well as other tweaks like relaxing deps. I've prepared an upstream MR adding packaging in apkg format directly to upstream repo: https://gitlab.nic.cz/labs/bird/-/merge_requests/25 In short it allows building upstream packages directly from upstream sources or from upstream archives(tarballs) or combination of both, see more info in the MR. More work is required for building from sources, but I was able to use apkg to create packages for different .deb/.rpm distros from official upstream archives. Best Regards, Jakub Ružička CZ.NIC packager 📦

2 4

[PATCH] babel: Log the reason when refusing to run on an interface
by Toke Høiland-Jørgensen 10 May '21

10 May '21

The babel protocol code checks various properties of an interface before starting it: whether the interface is up, whether it supports multicast, and whether it has a link-local address assigned. However, it doesn't give any feedback if any of those checks fail, it just silently ignores the interface. Fix this by explicitly logging errors when any of the checks fail; to avoid spamming the logs for all interfaces on the system, move the checks so they are only performed after it was determined that an interface is actually configured by an interface pattern. Reported-by: Stefan Haller <stefan.haller(a)stha.de> Signed-off-by: Toke Høiland-Jørgensen <toke(a)toke.dk> --- proto/babel/babel.c | 50 ++++++++++++++++++++++++--------------------- 1 file changed, 27 insertions(+), 23 deletions(-) diff --git a/proto/babel/babel.c b/proto/babel/babel.c index 4b6b9d7f9f6f..6ac3bb6a7fec 100644 --- a/proto/babel/babel.c +++ b/proto/babel/babel.c @@ -1639,6 +1639,29 @@ babel_remove_iface(struct babel_proto *p, struct babel_iface *ifa) rfree(ifa->pool); /* contains ifa itself, locks, socket, etc */ } +static int iface_is_valid(struct babel_proto *p, struct iface *iface) +{ + if (!(iface->flags & IF_UP)) { + log(L_ERR "%s: Interface '%s' is down", p->p.name, iface->name); + return 0; + } + + if (!(iface->flags & IF_MULTICAST)) { + log(L_ERR "%s: Interface '%s' does not support multicast", + p->p.name, iface->name); + return 0; + } + + /* We need a link-local address to communicate */ + if (!iface->llv6) { + log(L_ERR "%s: Interface '%s' has no link-local address assigned", + p->p.name, iface->name); + return 0; + } + + return 1; +} + static void babel_if_notify(struct proto *P, unsigned flags, struct iface *iface) { @@ -1655,19 +1678,8 @@ babel_if_notify(struct proto *P, unsigned flags, struct iface *iface) if (ifa) babel_remove_iface(p, ifa); - if (!(iface->flags & IF_UP)) - return; - - /* We only speak multicast */ - if (!(iface->flags & IF_MULTICAST)) - return; - - /* Ignore ifaces without link-local address */ - if (!iface->llv6) - return; - struct babel_iface_config *ic = (void *) iface_patt_find(&cf->iface_list, iface, NULL); - if (ic) + if (ic && iface_is_valid(p, iface)) babel_add_iface(p, iface, ic); return; @@ -1733,20 +1745,12 @@ babel_reconfigure_ifaces(struct babel_proto *p, struct babel_config *cf) WALK_LIST(iface, iface_list) { - if (!(iface->flags & IF_UP)) - continue; - - /* Ignore non-multicast ifaces */ - if (!(iface->flags & IF_MULTICAST)) - continue; - - /* Ignore ifaces without link-local address */ - if (!iface->llv6) - continue; - struct babel_iface *ifa = babel_find_iface(p, iface); struct babel_iface_config *ic = (void *) iface_patt_find(&cf->iface_list, iface, NULL); + if (ic && !iface_is_valid(p, iface)) + continue; + if (ifa && ic) { if (babel_reconfigure_iface(p, ifa, ic)) -- 2.31.1

2 1

[PATCH] sysdep/bsd: propagate OS-level IFF_MULTICAST to internal IF_MULTICAST flag
by Toke Høiland-Jørgensen 10 May '21

10 May '21

The BSD code did not propagate the OS-level IFF_MULTICAST flag to the Bird-internal IF_MULTICAST flag, which causes problems with Wireguard interfaces on FreeBSD. The Linux sysdep code does propagate the flag already, so just copy over the same check and flag update. Tested-by: Stefan Haller <stefan.haller(a)stha.de> Signed-off-by: Toke Høiland-Jørgensen <toke(a)toke.dk> --- sysdep/bsd/krt-sock.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/sysdep/bsd/krt-sock.c b/sysdep/bsd/krt-sock.c index c2faa23dd44f..cd89544063c7 100644 --- a/sysdep/bsd/krt-sock.c +++ b/sysdep/bsd/krt-sock.c @@ -665,6 +665,9 @@ krt_read_ifinfo(struct ks_msg *msg, int scan) else f.flags |= IF_MULTIACCESS; /* NBMA */ + if (fl & IFF_MULTICAST) + f.flags |= IF_MULTICAST; + iface = if_update(&f); if (!scan) -- 2.31.1

2 1

ospf ptp link sending unicast packets instead of multicast; peer address config not required
by Senthil Kumar Nagappan 10 May '21

10 May '21

Hi, I did sent this message a week back but I could not see it in the mailing, moreover just now subscribed to this mailing list, so sending this again. I’m seeing some issues with ospf adj over ptpnumbered/unnumbered interface. 1. Forp2p connections, ospf should be sending only multicast packets toallospfrouters, but I see its sending to unicast address. (From RFC “On physical point-to-point networks, theIP destination is always set to the address AllSPFRouters”) 2. Forptp over unnumbered interface, bird requires peer address configuration whichis not required from the ospf perspective. Because bird is using peer addressand sending unicast packets, bird cannot form multiple ospf adj over ptpunnumbered interface between 2 endpoints using same peer address. Made some quick changes and have attached the patch thataddresses the issues. Relaxed the source ip address validation for ptp link inpacket.c for now. More validation can be added to make it complete. Thanks and Regards,Senthil

3 23

Loopback interface as OSPF stub interface (IPv6)
by Kenth Eriksson 07 May '21

07 May '21

Tried setting a loopback interface as an IPv6 OSPF stub interface, but this is not picked up as an OSPF interface. Doing the same on IPv4 loopback interface picks it up as an OSPF interface and announcing it as a stub in the area. Why not for IPv6? Thanks, Kenth

3 5

Per-route MTU for static route
by Tibor Kiss 05 May '21

05 May '21

Hello All, I wanted to configure per-route MTU for a static route, something I'd configure manually like this: ip route add 10.88.152.0/24 mtu 1600 \ nexthop via 172.17.3.1 \ nexthop via 172.17.3.2 Which would result in this: [root@workerbm-6 ~]# ip route <...> 10.88.152.0/24 mtu 1600 nexthop via 172.17.3.1 dev vlan97 weight 1 nexthop via 172.17.3.2 dev vlan97 weight 1 I figured this is not possible with BIRD right now, MTU cannot be defined for a static route. Did I miss something? Or any chance this would be added in the future? Thank you, Tibor

2 2

Missing bable routes after configure - bug in bird 2.0.8?
by Nico Schottelius 30 Apr '21

30 Apr '21

Hello, we are using direct + babel as an IGP and today something "funky" happened: the routes of one router disappeared and on other routers the babel entries contained empty router IDs in babel: bird> show babel entries babel1: Prefix Router ID Metric Seqno Routes Sources 185.203.114.0/23 00:00:00:00:93:4e:c3:fb 0 2204 4 0 195.141.230.102/31 <none> - - 1 0 185.203.112.0/24 <none> - - 2 0 147.78.195.224/27 00:00:00:00:93:4e:c3:fb 0 2204 7 0 193.192.225.72/31 <none> - - 1 0 94.78.2.168/29 00:00:00:00:93:4e:c3:fb 0 2204 4 0 147.78.195.0/29 <none> - - 1 0 185.155.31.0/24 00:00:00:00:93:4e:c3:fb 0 2204 4 0 45.134.132.0/29 00:00:00:00:93:4e:c3:fb 0 2204 4 0 185.155.31.0/26 00:00:00:00:93:4e:c3:fb 0 2204 4 0 2a0a:e5c0:1:f::/64 <none> - - 1 0 2a0a:e5c0:1:e::/64 <none> - - 1 0 2a0a:e5c0:1:d::/64 00:00:00:00:93:4e:c3:fb 0 2204 5 0 2a0a:e5c0:0:9::/64 00:00:00:00:00:00:00:2f 96 1 1 0 2a0a:e5c0:1:8::/64 00:00:00:00:93:4e:c3:fb 0 2204 10 0 2a0a:e5c0:0:6::/64 00:00:00:00:00:00:00:2e 96 2 1 0 2a0a:e5c0:0:5::/64 <none> - - 2 0 2a0a:e5c0:0:4::/64 00:00:00:00:00:00:00:2f 96 1 1 0 2a0a:e5c0:1:4::/64 00:00:00:00:93:4e:c3:fb 0 2204 5 0 2a0a:e5c0:0:3::/64 00:00:00:00:00:00:00:2e 96 2 1 0 2a0a:e5c0:0:2::/64 <none> - - 2 0 2a0a:e5c0:2:2::/64 00:00:00:00:93:4e:c3:fb 0 2204 5 0 2a0a:e5c0:10:1::/64 <none> - - 1 0 After restarting the router, the entries are correct now (router id 00:00:00:00:93:4e:c3:e3): bird> show babel entries babel1: Prefix Router ID Metric Seqno Routes Sources 185.203.114.0/23 00:00:00:00:93:4e:c3:fb 0 2204 4 0 195.141.230.102/31 <none> - - 1 0 185.203.112.0/24 <none> - - 2 0 147.78.195.224/27 00:00:00:00:93:4e:c3:fb 0 2204 7 0 193.192.225.72/31 <none> - - 1 0 94.78.2.168/29 00:00:00:00:93:4e:c3:fb 0 2204 4 0 147.78.195.0/29 00:00:00:00:93:4e:c3:e3 96 1 1 0 185.155.31.0/24 00:00:00:00:93:4e:c3:fb 0 2204 4 0 45.134.132.0/29 00:00:00:00:93:4e:c3:fb 0 2204 4 0 185.155.31.0/26 00:00:00:00:93:4e:c3:fb 0 2204 4 0 2a0a:e5c0:1:f::/64 00:00:00:00:93:4e:c3:e3 96 1 1 0 2a0a:e5c0:1:e::/64 00:00:00:00:93:4e:c3:e3 96 1 1 0 2a0a:e5c0:1:d::/64 00:00:00:00:93:4e:c3:fb 0 2204 5 0 2a0a:e5c0:0:9::/64 00:00:00:00:00:00:00:2f 96 1 1 0 2a0a:e5c0:1:8::/64 00:00:00:00:93:4e:c3:fb 0 2204 10 0 2a0a:e5c0:0:6::/64 00:00:00:00:00:00:00:2e 96 2 1 0 2a0a:e5c0:0:5::/64 <none> - - 2 0 The "funny" part is that bird 2.0.8 on that router was up and running, it did see babel neighbors, it did BGP, however only after restarting bird, the routes were correctly received be neighboring routers. As you can see in above table there is at least another router that is affected. I tried `disable babel1` and `enable babel1` on it, however that did not fix the problem. We did some amount of `configure` commands on the bird process, but my understanding was that it should be very similar to restarting it, without the loss of sessions. The babel protocol *did* previously export the routes correctly to other routers, but I am 99% sure that it did stop doing it, until we hard restarted bird. The babel configuration we use on most of our routers looks like this: protocol direct { ipv4; ipv6; interface "bond0.*"; } protocol babel { interface "bond0.*" { type wired; }; ipv4 { export where (source = RTS_DEVICE); }; ipv6 { export where (source = RTS_DEVICE); }; } So we are not re-babling like babeld, but only inject local device routes, as we have 2 redundant routers per network. Is there a conceptual problem or is this a bug in bird 2.0.8 and in either way, is there anything we can do to fix it besides restarting bird on router propagation error? Best regards, Nico p.s.: In case it matters, we are running bird on alpine/musl. -- Sustainable and modern Infrastructures by ungleich.ch

2 3