Re: rejected by protocol unicast

2019-12-11 Thread Ondrej Zajicek
On Wed, Dec 11, 2019 at 09:06:15AM +0100, Eric GITAU wrote: > On Wed, Dec 11, 2019 at 3:19 AM Ondrej Zajicek > > Hi > > > > This 'rejected by protocol' is completely harmless. That just means pe1 > > reject it back - no need to send the route back to the peer. > &

Re: rejected by protocol unicast

2019-12-10 Thread Ondrej Zajicek
On Tue, Dec 10, 2019 at 10:09:06PM +0100, wax xitau wrote: > Hi, > > Prefixes sent over a eBGP session are getting rejected "by protocol" as can > be seen in the logs below. > The prefixes are "added" and then get "rejected" by protocol. Hi This 'rejected by protocol' is completely harmless.

Re: Show route across multiple route tables

2019-12-09 Thread Ondrej Zajicek
On Sun, Dec 08, 2019 at 10:37:04AM +, Marian Rychtecký wrote: > Hi, > is this what you're looking for? > > sh route table all where (111, 222, 333) ~ bgp_large_community Or you can use multiple 'table' options to explicitly specify which tables. > On 07-Dec-19 23:02:52, "Logan Rawlins"

Re: [PATCH] Add CLI command to test reconfiguration status

2019-12-02 Thread Ondrej Zajicek
On Mon, Dec 02, 2019 at 07:30:27AM +, Kenth Eriksson wrote: > On Tue, 2019-11-26 at 15:59 +0100, Ondrej Zajicek wrote: > > > > > > I believe reply code issue is caused by the following lines since reply > > > code 3 is used twice... > > > >

Re: [PATCH] Add CLI command to test reconfiguration status

2019-11-26 Thread Ondrej Zajicek
On Mon, Nov 25, 2019 at 04:26:45PM +, Kenth Eriksson wrote: > On Mon, 2019-11-25 at 16:02 +, Kenth Eriksson wrote: > > On Wed, 2019-06-12 at 17:26 +0200, Ondrej Zajicek wrote: > > > CAUTION: This email originated from outside of the organization. Do not > &g

Re: bird bgp_mask/ regex with sets

2019-11-22 Thread Ondrej Zajicek
On Fri, Nov 22, 2019 at 07:36:16PM +, Mazur, Dariusz wrote: > Hello Ondrej, > Thanks for quick response. I use 2.0.5 Well, this feature is supported since 2.0.6. I would suggest to upgrade to 2.0.7. -- Elen sila lumenn' omentielvo Ondrej 'Santiago' Zajicek (email: santi...@crfreenet.org)

Re: bird bgp_mask/ regex with sets

2019-11-22 Thread Ondrej Zajicek
On Fri, Nov 22, 2019 at 03:01:05PM +, Mazur, Dariusz wrote: > Hello Bird users, > > I am trying to filter routing table entries based on as-path regex ( I try > to write regex: 32934 (3|5|7) ) > > bird> show route all where bgp_path ~ [= 32934 [3,5,7] =] > syntax error, unexpected '[' ->

Re: IPv6 BGP & kernel 4.19

2019-11-21 Thread Ondrej Zajicek
On Thu, Nov 21, 2019 at 04:09:24PM +, Andrew Hearn wrote: > > Without traffic through the box (all IPv6 prefixes filtered) the bgp > > sessions is stable. With traffic the bgp session dies after some time > > and ssh connections in the default table freezes. > > > > I did some packet captures

Re: Problems with compiling bird 2.7 on Debian Squeeze

2019-11-19 Thread Ondrej Zajicek
On Tue, Nov 19, 2019 at 12:26:04PM +0100, Maria Matějka wrote: > Hello! > > It may be GCC; I have just compiled BIRD on GCC 4.7.2 on Debian Wheezy. Yes, Debian 7 (Wheezy) is oldest we test builds on. Debian 6 (Squeeze) we considered too old to care. -- Elen sila lumenn' omentielvo Ondrej

Re: set bgp communities

2019-11-18 Thread Ondrej Zajicek
On Tue, Nov 12, 2019 at 10:54:42AM +0300, Twana Othman wrote: > Hello Friends, > > I have some prefixes to export to my BGP peer and I want to set a > communities when I am sending them. So, can you instruct me the syntax of > how to sent this community (100:12) to my prefixes ? please Hello In

Re: OSPF/BFD reaction time under 1 second

2019-11-18 Thread Ondrej Zajicek
On Tue, Nov 12, 2019 at 09:06:31AM +0100, Patrik Rehuš wrote: > Hello, > > In my topology I have 2 parallel connections from one host to the same > destination. The goal is to switch route to another one under 1 second (in > case of broken link). For this I used OSPF with BFD. BFD use 40ms

Re: Multi protocol route handling (IPv4 via IPv6)

2019-11-18 Thread Ondrej Zajicek
On Wed, Nov 13, 2019 at 05:16:57PM +0100, Nico Schottelius wrote: > > Hey Ondrej, > > very nice and also nice short patch! > > Do you plan to create a new release soon? Otherise I'll give it a try > from git directly. Probably during 2019-12. -- Elen sila lumenn' omentielvo Ondrej

Re: IPv6 Flowspec isn't displayed correctly with "show route"

2019-11-18 Thread Ondrej Zajicek
On Fri, Nov 15, 2019 at 12:08:12AM +0100, Alex D. wrote: > Hello, > > i have a problem when i try to get infos about a specific IPv6 FlowSpec > route by issuing "show route " or "show route all". Hello Thanks, here is a fix:

Re: Changing ECMP weight on OSPF routes with an ingress filter

2019-11-18 Thread Ondrej Zajicek
On Wed, Nov 13, 2019 at 06:38:09PM +0100, Alarig Le Lay wrote: > Hi, > > bird> show route all 0.0.0.0/0 > Table master4: > 0.0.0.0/0unicast [ospf_ipv4 12:15:31.798] I (150/30) > [89.234.186.31] > via 45.91.126.233 on tinc0 weight 1 > via 45.91.126.235 on tinc0 weight

Re: session established, no routes

2019-11-17 Thread Ondrej Zajicek
On Sun, Nov 17, 2019 at 12:41:39PM +0100, Tiemen Ruiten wrote: > I compiled and installed Bird 1.6.8 from source and the following > configuration works: Hi Seems like your original config did not have channels for direct protocol, should be: protocol direct { ipv4; ipv6; interface

Re: Multi protocol route handling (IPv4 via IPv6)

2019-11-12 Thread Ondrej Zajicek
On Sat, Nov 09, 2019 at 07:58:43PM +0100, Nico Schottelius wrote: > > Hello, > > I have setup an MP-BGP with 2 bird instances and my aim is to route IPv4 > via IPv6, like cumulus is doing it. > > Currently I receive the IPv4 and IPv6 routes via the IPv6 session, as > follows: > >

Re: RPKI validation on startup

2019-11-12 Thread Ondrej Zajicek
On Mon, Nov 11, 2019 at 10:41:24AM -0500, Matthias Waehlisch wrote: > On Mon, 11 Nov 2019, Maria Matějka wrote: > > > The problem is also that bird doesn't reevaluate affected routes after > > ROA has changed. This is going to be fixed in near future > > > based on the increasing interest in

Re: OSPF Routes

2019-11-11 Thread Ondrej Zajicek
On Mon, Nov 11, 2019 at 05:12:28PM +0100, Chris Althage wrote: > I cannot get my OSPF routes to show up in my Linux Routing table. I have > tried multiple configurations, but the routes never populate into Linux. > They are present in the Bird Interface, but not outside of Bird. I'm sorry > for

Re: Multi protocol route handling (IPv4 via IPv6)

2019-11-09 Thread Ondrej Zajicek
On Sat, Nov 09, 2019 at 07:58:43PM +0100, Nico Schottelius wrote: > Hello, > > I have setup an MP-BGP with 2 bird instances and my aim is to route IPv4 > via IPv6, like cumulus is doing it. > > Currently I receive the IPv4 and IPv6 routes via the IPv6 session, as > follows: > > 58.69.253.0/24

Re: OSPF graceful restart for unplanned outage?

2019-11-08 Thread Ondrej Zajicek
On Fri, Nov 08, 2019 at 03:51:03PM +, Kenth Eriksson wrote: > On Fri, 2019-11-08 at 16:10 +0100, Ondrej Zajicek wrote: > > CAUTION: This email originated from outside of the organization. Do not > > click links or open attachments unless you recognize the sender and know

Re: OSPF graceful restart for unplanned outage?

2019-11-08 Thread Ondrej Zajicek
On Fri, Nov 08, 2019 at 01:08:31PM +, Kenth Eriksson wrote: > Hi! > > Does bird support OSPF graceful restart for unplanned outage? The doc > only speaks about planned outage. Section 5 in RFC 3623 describes that > OSPF GR mechanism may be used for unplanned outage. No -- Elen sila lumenn'

Re: BGP - draft-ietf-idr-bgp-optimal-route-reflection-19

2019-11-06 Thread Ondrej Zajicek
On Tue, Nov 05, 2019 at 08:26:07PM +0200, Philippe Duke wrote: > Hello, Ondrej. > > I think like this is the option for now. Would like to try gain some > experience with protocol implementations in spare time if I have one. > > Tired of my current operational job routine. > > > Just want to

Re: BGP - draft-ietf-idr-bgp-optimal-route-reflection-19

2019-11-02 Thread Ondrej Zajicek
On Sat, Nov 02, 2019 at 05:41:34PM +0200, Philippe Duke wrote: > Hello, > > Does someone has an effort to implement  > draft-ietf-idr-bgp-optimal-route-reflection-19 for BGP? > > I see there is a difficulty in 4.1 in IGP metric. As far as I know, most > of vendors are currently using IGP

Re: Reload bug in bird 2.0.6/2.0.7

2019-11-01 Thread Ondrej Zajicek
On Fri, Nov 01, 2019 at 10:33:58PM +0100, Nico Schottelius wrote: > > Hello, > > when trying to reload a fully compatible/correct configuration file in > bird 2.0.6 or 2.0.7, I get the following answer: > > bird> reload > syntax error, unexpected END Hello Command to reload configuration is

More BIRD related software?

2019-10-29 Thread Ondrej Zajicek
Hi I just found another tool related to BIRD and updated and reorganized 'Related software' page on BIRD wiki: https://gitlab.labs.nic.cz/labs/bird/wikis/Related I wonder if you know more software worth mentioning there. -- Elen sila lumenn' omentielvo Ondrej 'Santiago' Zajicek (email:

Re: BFD session status notification

2019-10-29 Thread Ondrej Zajicek
On Mon, Oct 28, 2019 at 08:15:54PM +0800, Winston Chen wrote: > Hi, > > > I am wondering if there is a way an application can be notified when BFD > session status changes. > > I know currently I can check the BFD session by polling with birdc or > scanning the log, but if there is some way I

Re: Syntax for show route and primary route (*)?

2019-10-25 Thread Ondrej Zajicek
On Thu, Oct 24, 2019 at 02:18:16PM +, Kenth Eriksson wrote: > > Hi > > > > What is your config? It is possible that you have some 'keep filtered' > > routes in net->routes for 0.0.0.0/0? > > Configuration looks like this; Hi Thanks, fixed (commit 498d8145c0984acf6b39d7e312950315571e7030).

Re: Revalidating RPKI

2019-10-23 Thread Ondrej Zajicek
On Wed, Oct 23, 2019 at 05:22:35PM -0400, Darren O'Connor wrote: > Hi Maria. > > Maybe I'm misunderstanding the RPKI instances. My local bird2 instance is > connected to two routinator cache servers. Both are sending IPv4 and IPv6 > information over. This is the outputs of both on this particular

Re: Checking ROA via cli

2019-10-23 Thread Ondrej Zajicek
On Wed, Oct 23, 2019 at 05:31:21PM -0400, Darren O'Connor wrote: > I recently moved from bird to bird2. I'm currently using it as a backend to > bgpstuff.net, a looking glass. > > In order to check the ROA status for a prefix in bird1 I did the following, > and got the following result: > >

Re: Syntax for show route and primary route (*)?

2019-10-23 Thread Ondrej Zajicek
On Wed, Oct 23, 2019 at 12:40:42PM +, Kenth Eriksson wrote: > > But i do not understand the cases below, where there is no other route > > for that network and the only route does not have asterisk. > > Simplest of use case, its a default route from the kernel. But still no > asterisk. Below

Re: Syntax for show route and primary route (*)?

2019-10-23 Thread Ondrej Zajicek
On Wed, Oct 23, 2019 at 09:11:31AM +, Kenth Eriksson wrote: > Hi! > > When showing routing table, the output can have '*', '!' or empty depending > on the route. I thought that the asterisk ('*') > meant that the route is a primary route installed into the kernel. But this > does not seem

Re: FI_CONDITION must be of type T_BOOL, got 0x00

2019-10-22 Thread Ondrej Zajicek
On Tue, Oct 22, 2019 at 04:13:37PM +0200, Boris Tassou wrote: > Hi, > > It's my first mail here so, sorry if i missed something. > > I updated my bird to the 2.0.7 version on a FreeBSD 12.0-RELEASE-p10 and > i have an error with a if cond : > > Oct 22 14:37:32 scipio bird[1199]: filters, line

Re: Centos 8 BIRD 2.0.6 issue with rt_tables parsing

2019-10-22 Thread Ondrej Zajicek
On Tue, Oct 22, 2019 at 11:57:18AM +0300, Igor Gavrilov wrote: > Hello BIRD users. > Recently I have upgraded one of our router to Centos 8 with BIRD2 and > faced strange issue with rt_tables parsing. > When I have custom tables named with capital letters, for example: > > 128 AAA > 129 BBB > >

Re: [PATCH] nest/config.Y: fix build without babel, bgp, ospf, radv, rip or static

2019-10-19 Thread Ondrej Zajicek
On Sat, Oct 19, 2019 at 10:36:41AM +0200, Fabrice Fontaine wrote: > Build without babel, bgp, ospf, radv, rip or static fails on: Thanks, merged. -- Elen sila lumenn' omentielvo Ondrej 'Santiago' Zajicek (email: santi...@crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3,

Re: How to enter static prefix with multiple nexthops but no ECMP?

2019-10-16 Thread Ondrej Zajicek
On Wed, Oct 16, 2019 at 01:41:45PM +, Kenth Eriksson wrote: > Hi! > > Does bird support a static prefix with multiple nexthops, without > installing all of them in the kernel as ECMP? Hi I think that you are talking about multiple routes/paths with the same prefix. Static protocol currently

Re: next-hop-self for non-reflected routes only?

2019-10-14 Thread Ondrej Zajicek
On Mon, Oct 14, 2019 at 02:45:37PM +0100, Neil Jerram wrote: > > We implemented extension for next-hop-self in version 2.0.3 that allows > > to specify 'next hop self ebgp', this solves exactly this issue. > > > > For older versions, you would need to workaround that in filters, > > something

Re: IPv6, route reflectors and link-local nexthops

2019-10-14 Thread Ondrej Zajicek
On Mon, Oct 14, 2019 at 11:58:36AM +0200, Jan-Philipp Litza wrote: > I assume this is equivalent to a "restart"? That didn't change anything. > I even restarted bird on RR. Note, though, that RR is a redundant > system, so there is always another peer RR' that has the exact same route. And if you

Re: next-hop-self for non-reflected routes only?

2019-10-14 Thread Ondrej Zajicek
On Mon, Oct 14, 2019 at 11:08:50AM +0100, Neil Jerram wrote: > Hi - I have a topology like this, using BIRD 1.6.7: > > I want BIRD-B to reflect routes within its own AS, but also propagate > routes to and from AS 65001. So for the eBGP peering I have > My question is how to get the ideal

Re: IPv6, route reflectors and link-local nexthops

2019-10-11 Thread Ondrej Zajicek
On Fri, Oct 11, 2019 at 02:28:56PM +0200, Jan-Philipp Litza wrote: > > Important info was 'gateway recursive' option on direct BGP sessions, > > so all three BGP sessions generate recursive routes. > > There are only two sessions involved. Or do you mean sessions as in > "protocol

Re: IPv6, route reflectors and link-local nexthops

2019-10-11 Thread Ondrej Zajicek
On Fri, Oct 11, 2019 at 09:22:36AM +0200, Jan-Philipp Litza wrote: > Hi Ondrej, > > > Not really sure how that might happen with direct session. What is your > > BIRD version and configs? What routes do you have in routing table? > > I'm using a self-compiled bird 2.0.6. RR and R1 have

Re: IPv6, route reflectors and link-local nexthops

2019-10-10 Thread Ondrej Zajicek
On Thu, Oct 10, 2019 at 04:57:28PM +0200, Jan-Philipp Litza wrote: > Hi list, > > maybe this question boils down to "How can I tell bird to always use > global IPv6 addresses as nexthops". But let me give you a sketch of my > problem: > > RR R1 R2 > > Addresses: > RR 2001:db8:1::100,

Re: OSPF stuck in 2-way state

2019-10-08 Thread Ondrej Zajicek
On Tue, Oct 08, 2019 at 09:45:54AM +, Kenth Eriksson wrote: > On Tue, 2019-10-08 at 11:34 +0200, Ondrej Zajicek wrote: > The broken 2.0.6 tag I had locally was > 3a22a6e858cd703d254ab331183ccd56fe195c6b, which is only six commits > after 2.0.4. But I have now deleted that e

Re: OSPF stuck in 2-way state

2019-10-08 Thread Ondrej Zajicek
On Tue, Oct 08, 2019 at 07:53:53AM +, Kenth Eriksson wrote: > On Tue, 2019-10-08 at 06:45 +, Kenth Eriksson wrote: > > On Mon, 2019-10-07 at 18:34 +0200, Ondrej Zajicek wrote: > > > On Mon, Oct 07, 2019 at 02:38:13PM +, Kenth Eriksson wrote: > > > > &g

Re: OSPF stuck in 2-way state

2019-10-07 Thread Ondrej Zajicek
On Mon, Oct 07, 2019 at 02:38:13PM +, Kenth Eriksson wrote: > > The prio change is user driven, the user changed from prio 0 to 5 and > > then re-configured. So now bird has prio 5 and quagga 0. Initially both > > ends had prio 0. > > > Shouldn't the interface state machine be kicked when

Re: OSPF stuck in 2-way state

2019-10-07 Thread Ondrej Zajicek
On Mon, Oct 07, 2019 at 12:23:56PM +, Kenth Eriksson wrote: > Collected some more logs when the state machine becomes stuck. It > appears as the eth1 has been DR when this stuck state happens. Note > that interface transitions from Down to DROther in one step and then > maintains that state

Re: the semantics of AS0 in ROAs (was: misunderstanding or incorrectly implemented filter?)

2019-10-05 Thread Ondrej Zajicek
On Sat, Oct 05, 2019 at 10:43:00AM +, Christoph wrote: > >>> Reject RPKI INVALID announcement 200.124.231.0/24 by AS0 > > > >> > >> So I was wondering: > >> - Did I incorrectly assume first match wins? > >> - Is the reject_bogon_asns() function not working as intended? > > > > Hello > > > >

Re: misunderstanding or incorrectly implemented filter?

2019-10-04 Thread Ondrej Zajicek
On Fri, Oct 04, 2019 at 10:19:00PM +, Christoph wrote: > Hello, > > (please keep me in CC) > > we use filters from > https://bgpfilterguide.nlnog.net/ > > One of the first functions checks for bogon ASNs > way before the RPKI ROA check: > > > filter transit_in { > > > >

Re: IP version independent RPKI filter

2019-10-04 Thread Ondrej Zajicek
On Fri, Oct 04, 2019 at 10:00:00PM +, Christoph wrote: > Hello, > > We use a transit_in filter that checks the > net.type to decide which roa_check parameter to use: > > Is this significantly less efficient than having separate IPv4/6 filters > that do not need that additional if (net.type =

Re: Is BIRD on BSD a second class citizen?

2019-10-03 Thread Ondrej Zajicek
On Fri, Oct 04, 2019 at 12:00:16AM +0200, Maria Matejka wrote: > > The two main points being so far: > > - security: no privilege dropping on BSD > > This is not so easy when BIRD has to keep its privilege to open sockets > on port < 1024. There would be three different implementations for >

Re: Is BIRD on BSD a second class citizen?

2019-10-03 Thread Ondrej Zajicek
On Thu, Oct 03, 2019 at 09:07:00PM +, Christoph wrote: > Hello, > > (reminder: please keep me in CC, the mailing list issue is still unsolved) > > so far we get the impression that BIRD on BSD appears to > be somewhat less supported when compared to Linux based systems. Hello That is true.

Re: Is BIRD on BSD a second class citizen?

2019-10-03 Thread Ondrej Zajicek
On Thu, Oct 03, 2019 at 11:39:16PM +0200, Alarig Le Lay wrote: > Hello, > > On jeu. 3 oct. 21:07:00 2019, Christoph wrote: > > - security: no privilege dropping on BSD > > regis ~ # ps aux | grep bird > root 31131 4.2 3.6 607704 602720 ? Ss Apr05 10956:29 > /usr/sbin/bird -s

Re: OSPF stuck in 2-way state

2019-10-03 Thread Ondrej Zajicek
On Thu, Oct 03, 2019 at 06:36:05PM +0200, Ondrej Zajicek wrote: > > me.dr is 0 because ifa->drip is 0, but should it have declared itself > > as an eligible DR? > > Oh, you meant DR IP, not neghbor IP. I think that it is correct - the > process should start with the n

Re: OSPF stuck in 2-way state

2019-10-03 Thread Ondrej Zajicek
On Thu, Oct 03, 2019 at 01:49:23PM +, Kenth Eriksson wrote: > Hi! > > We are having a problem were sometimes bird ospf neighbor state machine > becomes stuck in a 2-way state. This happens when two broadcast > interfaces are connected, one of them is running quagga and the other > end is

Re: OSPF over openvpn; adjacency problems

2019-10-02 Thread Ondrej Zajicek
On Tue, Oct 01, 2019 at 08:13:17PM +0200, Thorsten Alteholz wrote: > Hi, > > I am trying to use OSPF over an openvpn link. tcpdump tells me that both > ends send their HELLO packet but bird does not want to recognize them. > > When looking at ospf_rc_hook() in proto/ospf/packet.c the HELLO

Re: Resolve a BGP next-hop with another BGP route

2019-09-30 Thread Ondrej Zajicek
On Mon, Sep 30, 2019 at 07:28:22PM +0200, mikma.b...@lists.m7n.se wrote: > On 30 September 2019 01:52:22 CEST, Ondrej Zajicek > > > Yes. Technically it is not because the other route is also BGP, but > > because the other route is also recursive / also has indirect next hop. &

Re: BFD neighbor reload issue

2019-09-30 Thread Ondrej Zajicek
On Mon, Sep 30, 2019 at 11:15:45PM +0800, Winston Chen wrote: > Hi, > > I am using BFD neighbor to config BFD sessions statically. I found that if I > add/remove BFD neighbors in bird.conf  and ask bird to reload with HUP > signal, bird cannot reload the configuration correctly. > ... > After

Re: Resolve a BGP next-hop with another BGP route

2019-09-29 Thread Ondrej Zajicek
On Sun, Sep 29, 2019 at 08:49:57PM +0200, Alarig Le Lay wrote: > Hello, > > It seems that bird can’t resolve the next-hop in that case. But there is > no issue when the next-hop is announced by OSPF. Hello Yes. Technically it is not because the other route is also BGP, but because the other

Re: every minute: "I/O loop cycle took .... ms for 2 events"

2019-09-28 Thread Ondrej Zajicek
On Sat, Sep 28, 2019 at 02:12:00PM +, Christoph wrote: > Hello, > > (please keep me in CC the mailing list issues are still not solved) > > we get the following WARN log entry exactly once a minute: > > I/O loop cycle took 6343 ms for 2 events > > Is this something to worry about? > Is

Re: OSPF key expire rules violates RFC 2293?

2019-09-27 Thread Ondrej Zajicek
On Thu, Sep 26, 2019 at 03:47:39PM +, Kenth Eriksson wrote: > Hi! > > When an OSPF key lifetime expires then bird stops using that key. E.g. > if the configured parameter "generate from time" expires, then bird > reverts to an OSPF interface in unauthenticated mode. > > Is this intentional?

Re: Question for proper RPKI check integration in the bird v2.0.4 with Euro-IX Informational BGP communities

2019-09-25 Thread Ondrej Zajicek
On Wed, Sep 25, 2019 at 04:39:50PM +0200, Irene Lalioti wrote: > Thanks a lot Ondrej! I will alter my code likewise, > > For the bgp communities inside the parenthesis, is it with : or , ? > seems with , works as well. BGP communities uses ',' - i copied it from your code and missed that. --

Re: Question for proper RPKI check integration in the bird v2.0.4 with Euro-IX Informational BGP communities

2019-09-25 Thread Ondrej Zajicek
On Wed, Sep 25, 2019 at 04:24:29PM +0200, Irene Lalioti wrote: > Děkuji moc Ondrej! > > That was needed, because I had altered it initially to this after having > checked the ripe's slides > > https://ripe78.ripe.net/wp-content/uploads/presentations/68-inex-ripe-reykjavik-rpki-2019-05-22.pdf >

Re: Question for proper RPKI check integration in the bird v2.0.4 with Euro-IX Informational BGP communities

2019-09-25 Thread Ondrej Zajicek
On Wed, Sep 25, 2019 at 10:58:11AM +0200, Irene Lalioti wrote: > Hello all, > > Can you please let me know where is the syntax error in my snippet , or > if it is wrong how else I should integrate it in a way bird doesn't > complain? Thanks in advance! Hello - As noticed by Barry O'Donovan, it

Re: Question for proper RPKI check integration in the bird v2.0.4 with Euro-IX Informational BGP communities

2019-09-25 Thread Ondrej Zajicek
On Wed, Sep 25, 2019 at 11:36:20AM +0100, Barry O'Donovan wrote: > Hi Irene, > > looks like you're trying to put together a route server config? > > First thing that jumps out at me is you have "roa check" but it should > be "roa_check". > > We have full working sample configs that are used in

Re: Segfault Showing export table on 2.0.6

2019-09-24 Thread Ondrej Zajicek
human -- to blame it on a computer is even more so." commit ca2dacfcee92d8cfecff74dd020c2d16202b0d5c Author: Ondrej Zajicek (work) Date: Tue Sep 24 17:12:15 2019 +0200 Nest: Fix bug in export table Exported route may be in modified state, we need to get cached one for rte_same() a

Re: Assertion 'c->channel_state == CS_UP' failed at nest/rt-table.c:1543

2019-09-23 Thread Ondrej Zajicek
On Mon, Sep 23, 2019 at 04:18:00PM +, Christoph wrote: > > If you can add 'debug { events, states };' option to the RPKI option, > > could you send me the logs during protocol initialization? There should > > be some part with 'Connected' and 'Changing ... state'. > > > > I disabled and

Re: Assertion 'c->channel_state == CS_UP' failed at nest/rt-table.c:1543

2019-09-22 Thread Ondrej Zajicek
On Sun, Sep 22, 2019 at 10:01:00PM +, Christoph wrote: > > On Sun, Sep 22, 2019 at 01:10:00AM +0200, Christoph wrote: > >> Hi, > >> (please keep me in CC, thanks) > >> > >> I got the following somewhat strangely formatted > >> log lines in /var/log/messages on a BIRD v2.0.6 instance > >>

Re: Assertion 'c->channel_state == CS_UP' failed at nest/rt-table.c:1543

2019-09-22 Thread Ondrej Zajicek
On Sun, Sep 22, 2019 at 01:10:00AM +0200, Christoph wrote: > Hi, > (please keep me in CC, thanks) > > I got the following somewhat strangely formatted > log lines in /var/log/messages on a BIRD v2.0.6 instance > connected to routinator3000 v0.5 ("r3k" bellow) > running on FreeBSD 12: Hi That is

Re: privilege dropping on BSD?

2019-09-22 Thread Ondrej Zajicek
On Sat, Sep 21, 2019 at 07:54:10PM +0200, Christoph wrote: > Hello, > > According to the documentation BIRD can not drop privileges on BSD systems: > > "The privilege restriction is not implemented in BSD port of BIRD." > > Is privilege dropping on the roadmap that we will see in the future on

Re: graceful restart command not shown in context help

2019-09-22 Thread Ondrej Zajicek
On Sat, Sep 21, 2019 at 01:56:06PM +0200, Christoph wrote: > Hello, > > > o Graceful restart command > > but I didn't see it in the "?" output so I assumed it does not exist: > > ...> > By using "g", auto-completion revealed the existence of the command > and it works as intended. > > bird>

Re: Bgp_local_pref path depending

2019-09-20 Thread Ondrej Zajicek
On Fri, Sep 20, 2019 at 03:09:38PM +0200, mattia.mil...@studenti.unitn.it wrote: > Hello all, I’m writing this email because i was trying to create an input > filter for my daemon. > > Protocol: BGP > I would like to evaluate an input path and change the bgp preference if the > path correspond

Re: Segfault Showing export table on 2.0.6

2019-09-20 Thread Ondrej Zajicek
On Fri, Sep 20, 2019 at 02:11:15PM +0100, Barry O'Donovan wrote: > > Ondrej Zajicek wrote on 19/09/2019 19:32: > > On Thu, Sep 19, 2019 at 04:13:52PM +, Matt Corallo wrote: > >> Sometimes showing export table(s) from birdc on 2.0.6 results in a > >> Segfault

Re: Inject ethernet-based defaults to OSPF

2019-09-20 Thread Ondrej Zajicek
On Fri, Sep 20, 2019 at 09:25:45AM +0200, daniele wrote: > Nice, will try that. One additional question: if leverage kernel protocol, > it means local routing tables already contain the default learnt through > DHCP. Wouldn't this generate some kind of warning (ie. bird4: Netlink: File > exists)

Re: Segfault Showing export table on 2.0.6

2019-09-19 Thread Ondrej Zajicek
On Thu, Sep 19, 2019 at 04:13:52PM +, Matt Corallo wrote: > Sometimes showing export table(s) from birdc on 2.0.6 results in a > Segfault of the bird daemon. I can try to debug further if this isn't > sufficient, but largely the only difference between one protocol and the > other is the

Re: Inject ethernet-based defaults to OSPF

2019-09-19 Thread Ondrej Zajicek
On Wed, Sep 18, 2019 at 11:53:30AM +0200, daniele wrote: > Hello list, > I???m looking for some advice from someone that has more experience. I'm > running bird 1.6.6. > I have two routers R1 and R2, each with a single internet uplink U1 and U2, > running OSPF and sharing a LAN ethernet segment.

Re: Unsupported empty lists - why?

2019-09-18 Thread Ondrej Zajicek
On Wed, Sep 18, 2019 at 02:46:15PM +0900, Nico Schottelius wrote: > > Hello, > > being a bird 1.6 user (Debian), I find myself often > in the situation that I'd like to define a variable in either bird.conf > or bird6.conf and have a general.conf that defines the filters used in > both

Re: [PATCH] Multiple neighbor range protocols in BGP

2019-09-17 Thread Ondrej Zajicek
On Mon, Sep 16, 2019 at 10:11:45AM -0400, Liam Nattrass wrote: > Hey Ondrej, > > Good point... Perhaps we can specify an instance ID (which doesn't appear > to be used in the BGP proto anywhere) to differentiate dynamic instances > from static instances? (See patch) Hi Using instance ID is a

Re: [PATCH] Multiple neighbor range protocols in BGP

2019-09-16 Thread Ondrej Zajicek
On Sun, Sep 15, 2019 at 07:58:07PM -0400, Liam Nattrass wrote: > Hey all, > > I was doing some work with dynamic neighbors in BGP, and found that I am > not able to use multiple protocol definitions with neighbor ranges. > Connections to the second and subsequent definitions are rejected. > >

Re: Debian packages for BIRD 2

2019-09-14 Thread Ondrej Zajicek
On Fri, Sep 13, 2019 at 01:42:45PM +0200, Toke Høiland-Jørgensen wrote: > Kees Meijs writes: > > > Hi list, > > > > Since our business is using BIRD (and Debian) a lot I just contact > > Ondřej Surý and volunteered for help in terms of maintaining the package. > > > > My goals are to (try to)

Re: BIRD 2.0.6 and 1.6.8

2019-09-14 Thread Ondrej Zajicek
On Thu, Sep 12, 2019 at 09:41:20AM +0200, Clemens Schrimpe wrote: > What would it take to get this > > > Version 2.0.6 > > o RAdv: Solicited unicast RAs > > "backported" to 1.6.x ? Hi Well, we do not plan to backport new features to 1.6.x, only bugfixes. Any reason why this feature should be

Re: Filter ext_community?

2019-09-12 Thread Ondrej Zajicek
On Thu, Sep 12, 2019 at 03:43:07PM -0500, Chris Herdt wrote: > I have a number of routes that include non-standard bgp_ext_community > entries, for example unknown 0x10b (VRF Route Import). > > Is there a way to filter bgp_ext_community for only route targets? > > I tried the following, but the

Re: Advices for a weird multihop setup

2019-09-12 Thread Ondrej Zajicek
On Thu, Sep 12, 2019 at 02:19:49PM +0200, Alarig Le Lay wrote: > Hi, > > I have a weird setup with a transit. My next-hop is 2a03:94e0:feff:: > (with a multihop session) which is reachable via 2a03:94e0:17ff::1 which > is on-link on eno1. (your should already tear blood here) > > So, when I

Re: Two similar kernel routes with different metrics on bird 1.6.4

2019-09-11 Thread Ondrej Zajicek
On Wed, Sep 11, 2019 at 12:48:11PM +0300, Andrew wrote: > Hi all. > > I have two default kernel routes with different metrics (for failover, when > first gateway becomes unreachable - all traffic is switched to second gw). I > want to pipe it to other kernel table to gracefully handle connections

Re: Kernel protocol and IPv6 route issue with Bird 2.0

2019-09-11 Thread Ondrej Zajicek
On Wed, Sep 11, 2019 at 12:31:16PM +, Nigel Kukard wrote: > Hi guys, > > I'm having an issue where IPv6 routes from the kernel routing table > don't appear to end up in my t_kernel6 table. Despite the next-hop being > link-local and the interface being UP. > ... > Here is the error I'm

Re: [PATCH] Add statistics to the OSPF interface object

2019-09-10 Thread Ondrej Zajicek
On Thu, Sep 05, 2019 at 04:28:17PM +0200, Kenth Eriksson wrote: > For now only OSPF authentication drops... Hi Please check commit 60dda81b825725716c0f5ba65256e9a4c3f45948 (not part of master branch): https://gitlab.labs.nic.cz/labs/bird/commit/60dda81b825725716c0f5ba65256e9a4c3f45948 That has

Re: bird >=2.0.4 Stack underflow and most routes become filtered

2019-09-10 Thread Ondrej Zajicek
On Sat, Aug 24, 2019 at 01:22:10AM +0300, Дружок 1 wrote: > Hi! > .. > /var/log/bird.log > 2019-08-22 15:38:38.604 filters, line 1023: Stack underflow > 2019-08-22 18:02:27.157 filters, line 511: Stack underflow > 2019-08-22 18:02:30.616 filters, line 0: Stack underflow > > then I issue

Re: Stack overflow in RFC 8203 BGP admin. shutdown comm. handling since 7ff34ca2

2019-09-09 Thread Ondrej Zajicek
On Mon, Sep 09, 2019 at 10:42:06AM -0400, Daniel McCarney wrote: > > Done. I'll update this thread when MITRE replies. > > Assigned CVE-2019-16159 Thanks, we will release fixed versions soon. -- Elen sila lumenn' omentielvo Ondrej 'Santiago' Zajicek (email: santi...@crfreenet.org) OpenPGP

Re: Stack overflow in RFC 8203 BGP admin. shutdown comm. handling since 7ff34ca2

2019-09-08 Thread Ondrej Zajicek
On Sun, Sep 08, 2019 at 05:54:35PM -0400, Daniel McCarney wrote: > Hi Ondrej, > > Thanks for the quick response. > > > Unfortunately it has been included in released versions 1.6.7 and 2.0.5. > > Bummer, apologies for missing that. Do you want to request a CVE or should I? If you could, i

Re: Stack overflow in RFC 8203 BGP admin. shutdown comm. handling since 7ff34ca2

2019-09-08 Thread Ondrej Zajicek
On Sun, Sep 08, 2019 at 01:59:03PM -0400, Daniel McCarney wrote: > Hi there, > > I believe a stack overflow was introduced in the BGP protocol support of BIRD > in > 7ff34ca2[1] that allows a BGP peer to corrupt stack memory via crafted RFC > 8203[0] BGP administrative shutdown communication

Re: ospf authentication status from bird cli?

2019-09-04 Thread Ondrej Zajicek
On Fri, Aug 30, 2019 at 12:19:34PM +, Kenth Eriksson wrote: > Is it possible to see ospf authentication status from bird cli? I have > seen that authentication failures are logged to file, but it would be > good to have it visible in cli as well. No, we do not keep track of unauthenticated

Re: OSPF not comeback up

2019-09-04 Thread Ondrej Zajicek
On Wed, Sep 04, 2019 at 11:50:28AM -0400, alpha_one_x86 wrote: > Hi, > > If OSPF is diconnected, when I reconnect it not comeback up, I need restart > bird. > > Why this? Hi This should not happen. Which BIRD version? Do you have any error messages in log? Do you see any strange behavior in

Re: Segfault in bird 2.0.5 when issuing "show ospf lsadb" from birdc

2019-08-29 Thread Ondrej Zajicek
n sila lumenn' omentielvo Ondrej 'Santiago' Zajicek (email: santi...@crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so." commit 56d8b1e7f6252158caf0ecd3147376b858b16d97 Author: Ondrej Zajicek (work)

Re: BGP reported established and last change time

2019-08-28 Thread Ondrej Zajicek
On Wed, Aug 28, 2019 at 07:02:38PM +, Van Dyk, Donovan wrote: > Hi, > > Has anyone eve ran into the issue of the date reporting for an established > BGP peer being reset to 00:00:00 when it rolls over to a new day using peer > status? > It appears that when the session rolls into the next

Re: A bug in patch from FreeBSD ports

2019-08-26 Thread Ondrej Zajicek
On Mon, Aug 26, 2019 at 07:39:32PM +0200, Ondrej Zajicek wrote: > Hello > > There is a patch for BIRD in FreeBSD ports that causes OSPF crash: > > ... > I would suggest to send BIRD patches for review to the BIRD mailing list > so we can review it and also merge it

A bug in patch from FreeBSD ports

2019-08-26 Thread Ondrej Zajicek
Hello There is a patch for BIRD in FreeBSD ports that causes OSPF crash: https://svnweb.freebsd.org/ports?view=revision=484648 22 + if (en->lsa_body && (en->lsa.age == LSA_MAXAGE)) 23 + { 24 +/* en could be an unexpected self-originated lsa in which case nf is NULL */ 25

Re: Reconfiguring problem while having a lot of static routes

2019-08-26 Thread Ondrej Zajicek
On Mon, Aug 26, 2019 at 12:30:04PM +0500, Vasily Oleynikov wrote: > Hello > > I have a bird 1.6.3 installation where is over 500k static routes. From some > moment service reconfiguring occupies significant time (over 20 minutes). > Is there some method to reduce time needed to reconfigure? My

Re: Bird 2 OSPF Authentication Type unknown (256) issue

2019-08-24 Thread Ondrej Zajicek
On Sat, Aug 24, 2019 at 09:06:55PM +0800, James Swineson wrote: > Hi, > > I have a Linux server and a Cisco IOS XE device connected with GRE/IPSec and > then can ping each other. Today I installed Bird 2.0.5 on the Linux server > and enabled OSPFv2 on both of them. Although they receive HELLO

Re: bird >=2.0.4 Stack underflow and most routes become filtered

2019-08-23 Thread Ondrej Zajicek
On Sat, Aug 24, 2019 at 01:22:10AM +0300, Дружок 1 wrote: > Hi! > .. > /var/log/bird.log > 2019-08-22 15:38:38.604 filters, line 1023: Stack underflow > 2019-08-22 18:02:27.157 filters, line 511: Stack underflow > 2019-08-22 18:02:30.616 filters, line 0: Stack underflow > > Re: bird >=2.0.4

Re: bird 1.6 seems to ignore ipv6 kernel routes on 4.19

2019-08-23 Thread Ondrej Zajicek
On Wed, Aug 21, 2019 at 11:30:53PM +0200, Toke Høiland-Jørgensen wrote: > >> # ip r a 2001:db8:1:14::/64 via 2001:db8:1:1::14 > >> # route -6 add 2001:db8:1:15::/64 gw 2001:db8:1:1::15 > > > > This command uses the old ioctl(SIOCADDRT) API which in turn generates > > > >> none 2001:db8:1:15::/64

Re: bird 1.6 seems to ignore ipv6 kernel routes on 4.19

2019-08-21 Thread Ondrej Zajicek
On Wed, Aug 21, 2019 at 02:35:13PM +0100, Tom Bird wrote: > Hi, > > I recently updated some virtual machine hosting nodes to Debian Buster from > Stretch, and I'm having an interesting problem with IPv6 kernel routes. My > example uses 1.6.6 but 1.6.7 shows the same behaviour, so I'm just

Re: IPsec (OSPFv3)

2019-08-19 Thread Ondrej Zajicek
On Mon, Aug 19, 2019 at 11:05:50AM +, Kenth Eriksson wrote: > On Thu, 2019-08-08 at 15:04 +0200, Ondrej Zajicek wrote: > > CAUTION: This email originated from outside of the organization. Do not > > click links or open attachments unless you recognize the sender and know

<    2   3   4   5   6   7   8   9   10   11   >