Hi Toke, On Thu, Sep 22, 2016 at 18:34:18 +0200, Toke Høiland-Jørgensen wrote: [...]

...

The docs claim babel in bird to be "alpha". Is that still true?

Would say so. There are no known bugs, but it lacks some features; the most obvious one being that it only speaks IPv6 (because Bird lacks dual-stack support). [...]

So for non production, that sounds as good as ospf3, really.

Nope. The IETF working group has only just been formed a couple of months ago, and so there's not a consensus on what form any security features of Babel would take. Once we get around to discussing the security features I'll start thinking about implementing it, but until then, no auth...

Thanks for the info! I hope, some auth is somewhere on the list. Because, really, ipsec isn't fun, as we all know.

-Toke

Christian -- www.cosmokey.com

Hi Ondrej, On Mon, Sep 26, 2016 at 08:53:31PM +0200, Ondrej Zajicek wrote:

On Mon, Sep 26, 2016 at 08:07:43PM +0200, Tim Weippert wrote:

...

But on one of my environment Bird 1.6.1 immediately segfaults. I tried both the provided Debian package from cz.nic and also an recompile on my own.

Hi

Could you send me your config file, bird binary and core dump?

Send it directly to you, maybe it isn't interesting for the list :) regards, tim -- Tim Weippert http://weiti.org - weiti@weiti.org GPG Fingerprint - E704 7303 6FF0 8393 ADB1 398E 67F2 94AE 5995 7DD8

Me too! Config: # # BIRD configuration # # Generated by Puppet, DO NOT EDIT! # log syslog { info, remote, warning, error, auth, fatal, bug }; router id 10.2.3.0; # Filter that filter bgp_import { accept; } # Accept locally-generated host routes only filter bgp_export { if source ~ [RTS_STATIC, RTS_DEVICE, RTS_INHERIT] && net.len = 32 then accept; else reject; } # Set source and only accept BGP routes filter kernel_export { krt_prefsrc = 10.2.3.0; if source = RTS_BGP then accept; else reject; } protocol kernel { persist; # Don't remove routes on bird shutdown scan time 2; # Scan kernel routing table every 2 seconds device routes; import all; export filter kernel_export; learn on; merge paths on; # Multipath preference 230; # Prefer kernel routes to BGP/OSPF } protocol device { scan time 2; # Scan interfaces every 2 seconds } protocol static { } protocol direct { } template bgp tor { local as 4288283392; bfd on; import filter bgp_import; export filter bgp_export; } protocol bgp tor1 from tor { neighbor 10.2.4.0 as 65432; } protocol bgp tor2 from tor { neighbor 10.2.4.128 as 65432; } protocol bfd { interface "eth0" { interval 1000 ms; multiplier 4; }; interface "eth1" { interval 1000 ms; multiplier 4; }; } Cheers, Just On 27 September 2016 at 09:50, Maximilian Wilhelm <max@rfc2324.org> wrote:

Anno domini 2016 Tim Weippert scripsit:

Hi,

...

On Thu, Sep 22, 2016 at 01:52:20PM +0200, Ondrej Filip wrote:

...

Dear users, a new version of the 1.6.x branch is out:

Nice job.

Indeed.

...

But on one of my environment Bird 1.6.1 immediately segfaults. I tried both the provided Debian package from cz.nic and also an recompile on my own.

...

Both seems to have the same segfault. It tried something and think i can narrow it down on an PIPE with ~ 500 routes for ipv4 and ~ 300 routes for ipv6.

If i disable this pipe, bird runs without problems, all BGP Peerings and OSPF works ok. In another Environment, where muss less routes, i hadn't an segfault since update.

It seems only segfaults, when pipe to master/kernel and with "more" routes. I tried some testing with:

BGP Peering <-> T_BGP_PEER

with 422 routes, but if i enable an Pipe from T_BPG_PEER <-> master, bird segfaults.

[1033333.489725] bird[17404]: segfault at 0 ip (null) sp 00007ffe5d057a68 error 14 in bird[5604b045a000+70000] [1033333.870901] bird[17735]: segfault at 0 ip (null) sp 00007ffcf41235f8 error 14 in bird[55b35dbdc000+70000]

Attached is an strace file. If you need my config, please give me a short notice, i can provide it.

I'm facing the same problem here:

gw05.pad.ffho.net:~# dmesg -T | grep bird [Tue Sep 27 06:53:06 2016] bird[14102]: segfault at 0 ip (null) sp 00007ffd855c52d8 error 14 in libnss_files-2.13.so[ 7f0ac813e000+b000] [Tue Sep 27 06:53:12 2016] bird6[14133]: segfault at 0 ip (null) sp 00007fffe5a85f98 error 14 in libnss_files-2.13.so [7f50f6dce000+b000]

We are using a PIPE protocol as well, handling 560 routes.

I can provide you with the config as well, if needed.

Best Max

-- Notice: This email is confidential and may contain copyright material of members of the Ocado Group. Opinions and views expressed in this message may not necessarily reflect the opinions and views of the members of the Ocado Group. If you are not the intended recipient, please notify us immediately and delete all copies of this message. Please note that it is your responsibility to scan this message for viruses. Fetch and Sizzle are trading names of Speciality Stores Limited and Fabled is a trading name of Marie Claire Beauty Limited, both members of the Ocado Group. References to the “Ocado Group” are to Ocado Group plc (registered in England and Wales with number 7098618) and its subsidiary undertakings (as that expression is defined in the Companies Act 2006) from time to time. The registered office of Ocado Group plc is Titan Court, 3 Bishops Square, Hatfield Business Park, Hatfield, Herts. AL10 9NE.