Not at my computer, just a wild guess – would you try please, instead of ::/0, narrowing the range, e.g. like 2000::/3? I haven't seen the code recently but this may help.

Maria


On 4 May 2024 17:16:21 CEST, Vladimir Pouzanov <farcaller@gmail.com> wrote:
Hi!

I'm running bird 2.15.1 and I'm trying to make it talk to cilium that uses gobgp under the hood. I can negotiate the session over ipv4 with no issues, but due to a bug in the cilium implementation, the ipv6 routes aren't advertised properly. The suggestion from cilium was to negotiate the session over ipv6, but this creates issues for bird.

I have a config that looks somewhat like this:

protocol bgp {
  local port 179 as 65100;
  neighbor range 0::/0 port 179 as 65100 internal;

  dynamic name "GW6_";
  direct;
  passive;

  ipv4 {
    import all;
  };

  ipv6 {
    import all;
  };
}

protocol bgp {
  local port 179 as 65100;
  neighbor range 10.0.0.0/8 port 179 as 65100 internal;

  dynamic name "GW4_";
  direct;
  passive;

  ipv4 {
    import all;
  };

  ipv6 {
    import all;
  };
}

When I connect to bird over ipv4, gobgp sends a packet like this:

Frame 4: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) on interface vmbrdev, id 0
Ethernet II, Src: 22:fc:7f:47:6b:f4 (22:fc:7f:47:6b:f4), Dst: 6e:82:6c:1b:e9:95 (6e:82:6c:1b:e9:95)
Internet Protocol Version 4, Src: 10.224.129.15, Dst: 10.224.129.1
Transmission Control Protocol, Src Port: 39201, Dst Port: 179, Seq: 1, Ack: 1, Len: 88
Border Gateway Protocol - OPEN Message
    Marker: ffffffffffffffffffffffffffffffff
    Length: 88
    Type: OPEN Message (1)
    Version: 4
    My AS: 65100
    Hold Time: 90
    BGP Identifier: 10.224.129.15
    Optional Parameters Length: 59
    Optional Parameters
        Optional Parameter: Capability
            Parameter Type: Capability (2)
            Parameter Length: 57
            Capability: Route refresh capability
                Type: Route refresh capability (2)
                Length: 0
            Capability: FQDN Capability
                Type: FQDN Capability (73)
                Length: 12
                Hostname Length: 10
                Hostname: dev-master
                Domain Name Length: 0
                Domain Name:
            Capability: Unknown capability 75
                Type: Unknown (75)
                Length: 13
                Unknown: 0c476f4247502f332e32332e30
            Capability: Multiprotocol extensions capability
                Type: Multiprotocol extensions capability (1)
                Length: 4
                AFI: IPv4 (1)
                Reserved: 00
                SAFI: Unicast (1)
            Capability: Multiprotocol extensions capability
                Type: Multiprotocol extensions capability (1)
                Length: 4
                AFI: IPv6 (2)
                Reserved: 00
                SAFI: Unicast (1)
            Capability: Support for 4-octet AS number capability
                Type: Support for 4-octet AS number capability (65)
                Length: 4
                AS Number: 65100
            Capability: Extended Next Hop Encoding
                Type: Extended Next Hop Encoding (5)
                Length: 6
                AFI: IPv4 (1)
                SAFI: Unicast (1)
                Next hop AFI: IPv6 (2)

Which is followed up by OPEN from bird2 and they establish the session. The logs say:

May 04 14:47:02 ammy bird[7755]: bgp2: Incoming connection from 10.224.129.15 (port 39201) accepted
May 04 14:47:02 ammy bird[7755]: GW4_1: Initializing
May 04 14:47:02 ammy bird[7755]: GW4_1: Starting
May 04 14:47:02 ammy bird[7755]: GW4_1: State changed to start
May 04 14:47:02 ammy bird[7755]: GW4_1: Started
May 04 14:47:02 ammy bird[7755]: GW4_1: Got OPEN(as=65100,hold=90,id=10.224.129.15)
May 04 14:47:02 ammy bird[7755]: GW4_1: Sending OPEN(ver=4,as=65100,hold=240,id=0ae08101)
May 04 14:47:02 ammy bird[7755]: GW4_1: Sending KEEPALIVE
May 04 14:47:02 ammy bird[7755]: GW4_1: Got KEEPALIVE
May 04 14:47:02 ammy bird[7755]: GW4_1: BGP session established

When I try to establish the connection over ipv6, gobgp sends an OPEN that's exactly the same sans being transferred over ipv6:

Frame 15: 174 bytes on wire (1392 bits), 174 bytes captured (1392 bits) on interface vmbrdev, id 0
Ethernet II, Src: 22:fc:7f:47:6b:f4 (22:fc:7f:47:6b:f4), Dst: 6e:82:6c:1b:e9:95 (6e:82:6c:1b:e9:95)
Internet Protocol Version 6, Src: 2a01:xxx:xxx:xxx:xxx:xxx:xxx:d930, Dst: fd00::53
Transmission Control Protocol, Src Port: 58663, Dst Port: 179, Seq: 1, Ack: 1, Len: 88

and then bird just stalls the connection. The logs say:

May 04 14:49:17 ammy bird[7755]: bgp1: Incoming connection from 2a01:4f8:173:fe11:6f81:e7cd:2787:fb71 (port 35581) accepted
May 04 14:49:17 ammy bird[7755]: GW6_1: Initializing
May 04 14:49:17 ammy bird[7755]: GW6_1: Starting
May 04 14:49:17 ammy bird[7755]: GW6_1: State changed to start
May 04 14:49:17 ammy bird[7755]: GW6_1: Waiting for 2a01:xxx:xxx:xxx:xxx:xxx:xxx:d930 to become my neighbor

I suspect it's either a bug or a misconfiguration on the bird side, because gobgp behaves the same in both scenarios. How do I investigate/debug this further?
--
Maria Matejka (she/her) | BIRD Team Leader | CZ.NIC, z.s.p.o.