I upgraded a node from 1.2.3 to git, and now my node makes a flood of outgoing BGP traffic. The traffic consists in messages that repeat the same updates for a few routes. Here is one example (from tcpdump). Update Message (2), length: 63 Origin (1), length: 1, Flags [T]: IGP 0x0000: 00 AS Path (2), length: 22, Flags [T]: 64731 64768 64677 64602 64602 0x0000: 0205 0000 fcdb 0000 fd00 0000 fca5 0000 0x0010: fc5a 0000 fc5a Next Hop (3), length: 4, Flags [T]: 172.22.131.253 0x0000: ac16 83fd Updated routes: 172.22.2.0/23 This exact message repeated more than 10 times in only about 20 seconds. There are many more messages that also repeated more than 10 times in the same 20 seconds. -- Wanna turn ICANN into ICANN't? Join a darknet today: http://www.anonet2.org/darknet_comparison
When I downgrade to 1.2.5 the flood doesn't come back. I ran git commit e7b4948cbd3e4cacf4fe0f774b44d1f74029ea6d before. BTW, welterde runs the same commit, and doesn't get the same flood. Maybe I will look in the git log tomorrow. On Fri, Mar 11, 2011 at 12:28:55AM +0000, Nick wrote:
I upgraded a node from 1.2.3 to git, and now my node makes a flood of outgoing BGP traffic. The traffic consists in messages that repeat the same updates for a few routes. Here is one example (from tcpdump).
Update Message (2), length: 63 Origin (1), length: 1, Flags [T]: IGP 0x0000: 00 AS Path (2), length: 22, Flags [T]: 64731 64768 64677 64602 64602 0x0000: 0205 0000 fcdb 0000 fd00 0000 fca5 0000 0x0010: fc5a 0000 fc5a Next Hop (3), length: 4, Flags [T]: 172.22.131.253 0x0000: ac16 83fd Updated routes: 172.22.2.0/23
This exact message repeated more than 10 times in only about 20 seconds. There are many more messages that also repeated more than 10 times in the same 20 seconds.
-- Wanna turn ICANN into ICANN't? Join a darknet today: http://www.anonet2.org/darknet_comparison
-- Their mad rush in getting us out of the country is the greatest proof to me that I have served the cause of humanity, that I have never wavered or compromised. -- Emma Goldman Anarchists unite: you have nothing to lose but your governments. Q: What's the difference between a liberal voter and a liberal politician? A: The former is in search of his parents, while the latter seeks his children. Q: What's the difference between a liberal and an anarchist? A: The liberal actually thinks that slavery is a good thing. Q: What happens if you put a Y3K liberal in the blender? A: The blender jams when the blades hit his indestructible "black box." Q: What does ICANN do for a living? A: It auctions names and numbers off to a whole planet of suckers. Wanna turn ICANN into ICANN't? Join a darknet today: http://www.anonet2.org/darknet_comparison
On Fri, Mar 11, 2011 at 01:45:22AM +0000, Nick wrote:
When I downgrade to 1.2.5 the flood doesn't come back.
I am not sure how interpret this sentence. In 1.2.5, there was a flood or not? Which routes are exported to the BGP? Static routes or from another BGP? It would be a good idea to enable debug messages 'debug all { routes }' to know if there is the same flood inside BIRD or just on the output of BGP. -- Elen sila lumenn' omentielvo Ondrej 'SanTiago' Zajicek (email: santiago@crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."
On Sun, Mar 20, 2011 at 04:08:11PM +0100, Ondrej Zajicek wrote:
On Fri, Mar 11, 2011 at 01:45:22AM +0000, Nick wrote:
When I downgrade to 1.2.5 the flood doesn't come back.
I am not sure how interpret this sentence. In 1.2.5, there was a flood or not?
In 1.2.3 and 1.2.5 there was no flood. In git there was a flood.
Which routes are exported to the BGP? Static routes or from another BGP?
from another BGP
It would be a good idea to enable debug messages 'debug all { routes }' to know if there is the same flood inside BIRD or just on the output of BGP.
pipe_dn42_routes < replaced 172.22.55.0/24 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes > added 172.22.55.0/24 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes < replaced 172.22.50.0/24 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes > added 172.22.50.0/24 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes < replaced 172.22.62.0/24 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes > added 172.22.62.0/24 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes < replaced 172.22.59.0/24 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes > added 172.22.59.0/24 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes < replaced 172.22.44.0/23 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes > added 172.22.44.0/23 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes < replaced 172.22.41.0/27 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes > added [best] 172.22.41.0/27 via 172.22.104.40 on dn42_as64704 kernel1 < replaced 172.22.41.0/27 via 172.22.104.40 on dn42_as64704
The messages fly too fast for my terminal. Do you need a longer log? -- Wanna turn ICANN into ICANN't? Join a darknet today: http://www.anonet2.org/darknet_comparison
On Wed, Mar 23, 2011 at 04:53:44AM +0000, Nick wrote:
It would be a good idea to enable debug messages 'debug all { routes }' to know if there is the same flood inside BIRD or just on the output of BGP.
pipe_dn42_routes < replaced 172.22.55.0/24 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes > added 172.22.55.0/24 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes < replaced 172.22.50.0/24 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes > added 172.22.50.0/24 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes < replaced 172.22.62.0/24 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes > added 172.22.62.0/24 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes < replaced 172.22.59.0/24 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes > added 172.22.59.0/24 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes < replaced 172.22.44.0/23 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes > added 172.22.44.0/23 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes < replaced 172.22.41.0/27 via 172.22.104.40 on dn42_as64704 pipe_dn42_routes > added [best] 172.22.41.0/27 via 172.22.104.40 on dn42_as64704 kernel1 < replaced 172.22.41.0/27 via 172.22.104.40 on dn42_as64704
pipe_dn42_routes is a pipe protocol?
The messages fly too fast for my terminal. Do you need a longer log?
Longer log would be useful, activated debug messages are normally logged in system log. I would also need the config file. -- Elen sila lumenn' omentielvo Ondrej 'SanTiago' Zajicek (email: santiago@crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."
participants (2)
-
Nick -
Ondrej Zajicek