export filter matches, but not announced
Hi, I have a peer configured with an export filter called 'bgp_nullroute', and if I do 'birdc show route filter bgp_nullroute' i see a netblock there. I thought that would mean that this netblock would be exported/announced to the peer, but its not being exported, but there is something that I do not understand, I would appreciate a nudge in the right direction! protocol bgp nullroute { description "nullroute server"; local as ASN; source address 199.254.238.1; neighbor 192.168.1.1 as 64512; multihop 255; import filter bgp_in_nullroute; export filter bgp_nullroute; } protocol static static_nullroute { import filter static_nullroutes; include "static_nullroutes.conf"; } file static_nullroutes.conf has: route 204.13.164.220/32 blackhole; define ASN = 16652; filter bgp_nullroute { if (ASN,666) ~ bgp_community && net.len = 32 && our_network() then { accept; } else reject; } bird> show route all filter bgp_nullroute 204.13.164.220/32 blackhole [static_nullroute 09:11:08] (200) Type: static unicast univ BGP.community: (16652,666) bird> show protocols all nullroute name proto table state since info nullroute BGP master up 2020-07-23 10:01:28 Established Description: nullroute server Preference: 100 Input filter: bgp_in_nullroute Output filter: bgp_nullroute Routes: 0 imported, 0 exported, 0 preferred Route change stats: received rejected filtered ignored accepted Import updates: 0 0 0 0 0 Import withdraws: 0 0 --- 0 0 Export updates: 802145 134 802011 --- 0 Export withdraws: 71 --- --- --- 0 BGP state: Established Neighbor address: 192.168.1.1 Neighbor AS: 64512 Neighbor ID: 192.168.1.220 Neighbor caps: refresh AS4 Session: external multihop AS4 Source address: 199.254.238.1 Hold timer: 159/180 Keepalive timer: 3/60 -- micah
Hi, Please show the output of: show route export nullroute And why do you think it is not exported? On Thu, Jul 23, 2020 at 8:08 PM micah anderson <micah@riseup.net> wrote:
Hi,
I have a peer configured with an export filter called 'bgp_nullroute', and if I do 'birdc show route filter bgp_nullroute' i see a netblock there.
I thought that would mean that this netblock would be exported/announced to the peer, but its not being exported, but there is something that I do not understand, I would appreciate a nudge in the right direction!
protocol bgp nullroute { description "nullroute server"; local as ASN; source address 199.254.238.1; neighbor 192.168.1.1 as 64512; multihop 255; import filter bgp_in_nullroute; export filter bgp_nullroute; }
protocol static static_nullroute { import filter static_nullroutes; include "static_nullroutes.conf"; }
file static_nullroutes.conf has: route 204.13.164.220/32 blackhole;
define ASN = 16652;
filter bgp_nullroute { if (ASN,666) ~ bgp_community && net.len = 32 && our_network() then { accept; } else reject; }
bird> show route all filter bgp_nullroute 204.13.164.220/32 blackhole [static_nullroute 09:11:08] (200) Type: static unicast univ BGP.community: (16652,666)
bird> show protocols all nullroute name proto table state since info nullroute BGP master up 2020-07-23 10:01:28 Established Description: nullroute server Preference: 100 Input filter: bgp_in_nullroute Output filter: bgp_nullroute Routes: 0 imported, 0 exported, 0 preferred Route change stats: received rejected filtered ignored accepted Import updates: 0 0 0 0 0 Import withdraws: 0 0 --- 0 0 Export updates: 802145 134 802011 --- 0 Export withdraws: 71 --- --- --- 0 BGP state: Established Neighbor address: 192.168.1.1 Neighbor AS: 64512 Neighbor ID: 192.168.1.220 Neighbor caps: refresh AS4 Session: external multihop AS4 Source address: 199.254.238.1 Hold timer: 159/180 Keepalive timer: 3/60
-- micah
Alexander Zubkov <green@qrator.net> writes:
Hi,
Please show the output of: show route export nullroute
This produces nothing: bird> show route export nullroute bird>
And why do you think it is not exported?
Besides the above, the 'show protocols all nullroute' doesn't show a number for the accepted column, and the peer itself doesn't see the route from me.
On Thu, Jul 23, 2020 at 03:48:15PM -0400, micah anderson wrote:
Alexander Zubkov <green@qrator.net> writes:
Please show the output of: show route export nullroute
This produces nothing:
bird> show route export nullroute bird>
And why do you think it is not exported?
Besides the above, the 'show protocols all nullroute' doesn't show a number for the accepted column, and the peer itself doesn't see the route from me.
where is the 666 community added in your config, or the downstream config? Have you tried various 'show route' commands, possibly appeneded the 'filtered' keyword to inspect what is rejected where? Kind regards, Job
Maybe you have something in logs? Did you try to enable debugging? Which version of bird are you using? On Thu, Jul 23, 2020 at 9:48 PM micah anderson <micah@riseup.net> wrote:
Alexander Zubkov <green@qrator.net> writes:
Hi,
Please show the output of: show route export nullroute
This produces nothing:
bird> show route export nullroute bird>
And why do you think it is not exported?
Besides the above, the 'show protocols all nullroute' doesn't show a number for the accepted column, and the peer itself doesn't see the route from me.
Just wanted to follow-up on this thread, I solved the issue. The problem was I was including the null route file in two static protocol blocks by mistake. Once I removed it from the wrong one, things worked as expected. Thanks to all who responded! -- micah
participants (3)
-
Alexander Zubkov -
Job Snijders -
micah anderson