May 2023 - dev - lists.frrouting.org

FRR 8.4 Release
by Jafar Al-Gharaibeh 10 Aug '23

10 Aug '23

Dear FRR Community, We are pleased to announce FRR 8.4 release. Big thanks to all contributors. Packages are available at: Debian Packages - https://deb.frrouting.org RPM Packages - https://rpm.frrouting.org Snaps - https://snapcraft.io/frr Docker - frrouting/frr:v8.4.0 For release notes and a list of notable bug fixes, please visit: https://frrouting.org/release/8.4/ https://github.com/FRRouting/frr/releases/tag/frr-8.4 Cheers, The FRR Development Team!

1 3

Updating internal crypto implementation
by Ward, David - 0665 - MITLL 01 Jun '23

01 Jun '23

FRR has an "internal" implementation of the MD5 and SHA-256 algorithms, including HMAC functions for both. [1] This code is under a BSD license, and provides an alternative to linking FRR against OpenSSL, for which there were historical (?) issues around GPL incompatibility. Several routing protocols use one of these hash algorithms. ospf6d was extended last year to support the OSPFv3 Authentication Trailer (RFC 7166), which may use any of HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384, or HMAC-SHA-512. [2] The choice of algorithm is limited unless FRR has been compiled with OpenSSL support. Can we update FRR's internal crypto implementation in order to overcome this limitation? For example: * Gnulib provides a drop-in version of each of the algorithms mentioned above for inclusion in open-source projects, available under LGPL 2.1. * FreeBSD has adapted Colin Percival's SHA-256 implementation to support the other SHA-2 algorithms (but without the HMAC functions - which would seem straightforward to adapt). * Or should FRR rely on an external library for these functions instead? Should it allow the use of something other than OpenSSL, such as Libgcrypt? Thanks in advance, David [1] The SHA-256 implementation was written by Colin Percival, originally for FreeBSD. His current version seems to be here: https://github.com/Tarsnap/libcperciva/blob/master/alg/sha256.c [2] ospf6d also supports the use of HMAC-MD5 here, despite this not being specified in RFC 7166.

3 2

Request: FRR Debian repository for Debian Bookworm
by Yeechan Lu 15 May '23

15 May '23

Hi there, I'm inquiring about packages of FRR Debian repository for the upcoming Debian Bookworm release scheduled next month [1]. I noticed that Bookworm may include FRR version 8.4.2-1; however, I am currently using version 8.5 from FRR Debian repository on Debian Bullseye already. I do not want to "downgrade". Could you please share details on their availability or any plans to support this version? Thanks for your great work on FRRouting. [1]: https://lists.debian.org/debian-devel-announce/2023/04/msg00007.html Best regards, Yeechan Lu

2 1

Researchers Uncover New BGP Flaws in Popular Internet Routing Protocol Software
by Turritopsis Dohrnii Teo En Ming 10 May '23

10 May '23

Subject: Researchers Uncover New BGP Flaws in Popular Internet Routing Protocol Software Good day from Singapore, I have just come across this article. Thought of sharing it. Article: Researchers Uncover New BGP Flaws in Popular Internet Routing Protocol Software Link: https://thehackernews.com/2023/05/researchers-uncover-new-bgp-flaws-in.html Thank you. Regards, Mr. Turritopsis Dohrnii Teo En Ming Targeted Individual in Singapore Blogs: https://tdtemcerts.blogspot.com https://tdtemcerts.wordpress.com GIMP also stands for Government-Induced Medical Problems.

1 0

Re: [sonic-dev] [sonic-wg-routing] A reminder for 5/4 SONiC Routing WG kick off meeting
by Eddie Ruan 04 May '23

04 May '23

Thanks Lucy for bringing this issue up. I will ask our in house BGP folks to evaluate these three issues. In general, I would expect this is the issue for SONiC deployment as we use FRR BGP. Thanks Eddie ------------------------------------------------------------------ From:Lucy Hyde <lhyde(a)linuxfoundation.org> Sent At:2023 May 3 (Wed.) 19:21 To:sonic-wg-routing@lists.sonicfoundation.dev <sonic-wg-routing(a)lists.sonicfoundation.dev>; sonic-dev <sonic-dev(a)lists.sonicfoundation.dev>; Praveen Bhagwatula (pbhagwat) <pbhagwat(a)cisco.com>; Syed Hasan Raza Naqvi <syed.naqvi(a)broadcom.com>; Rita Hui <Rita.Hui(a)microsoft.com>; dev <dev(a)lists.frrouting.org> Cc:Yanzhao Zhang <yanzhaoz(a)microsoft.com>; Lihua Yuan <Lihua.Yuan(a)microsoft.com> Subject:Re: [sonic-dev] [sonic-wg-routing] A reminder for 5/4 SONiC Routing WG kick off meeting Hello SONiC Routing Working Group, I’m not sure if this is the appropriate place to ask this question and will also bring it up to the TSC- but I saw the note about using FRR in SONiC below and this article was flagged to me for investigation this morning: https://thehackernews.com/2023/05/researchers-uncover-new-bgp-flaws-in.html… <https://thehackernews.com/2023/05/researchers-uncover-new-bgp-flaws-in.html… > It discusses three vulnerabilities in FRRouting, and specifically mentions Cumulus, DENT, and SONiC. Please let me know if this is already being worked (so I can let Arpit know) and if not, if I can provide any assistance with regard to security scanning and audit and how you would like to proceed. Best, Lucy Lucy Hyde Program Manager | LF Projects in AI & Networking The Linux Foundation From: sonic-wg-routing(a)lists.sonicfoundation.dev <sonic-wg-routing(a)lists.sonicfoundation.dev> on behalf of Eddie Ruan via lists.sonicfoundation.dev <eddie.ruan=alibaba-inc.com(a)lists.sonicfoundation.dev> Date: Wednesday, May 3, 2023 at 12:15 PM To: sonic-wg-routing <sonic-wg-routing(a)lists.sonicfoundation.dev>, sonic-dev <sonic-dev(a)lists.sonicfoundation.dev>, Praveen Bhagwatula (pbhagwat) <pbhagwat(a)cisco.com>, Syed Hasan Raza Naqvi <syed.naqvi(a)broadcom.com>, Rita Hui <Rita.Hui(a)microsoft.com>, dev <dev(a)lists.frrouting.org> Cc: Yanzhao Zhang <yanzhaoz(a)microsoft.com>, Lihua Yuan <Lihua.Yuan(a)microsoft.com> Subject: [sonic-wg-routing] A reminder for 5/4 SONiC Routing WG kick off meeting Hi, Just a friendly reminder that we will have routing WG kick off meeting on 5/4 5:30-6:30pm PST (5/5 8:30-9:30 am China time). The zoom info could be found below. You could subscribe this WG via https://lists.sonicfoundation.dev/g/sonic-wg-routing <https://lists.sonicfoundation.dev/g/sonic-wg-routing > * Subscribe: sonic-wg-routing+subscribe(a)lists.sonicfoundation.dev <mailto:sonic-wg-routing+subscribe@lists.sonicfoundation.dev > I also include FRR email alias as well, since we use FRR as routing stack in SONiC and there are some enhancements needed from both FRR and SONiC to fully support routing features. Thanks Praveen, Hasan, Rita, Eddie Please download and import the following iCalendar (.ics) files to your calendar system. Weekly: https://zoom.us/meeting/tJEvdOCpqjsoG9dYQnhKle_6lwCLbPogZgPq/ics?icsToken=9… <https://zoom.us/meeting/tJEvdOCpqjsoG9dYQnhKle_6lwCLbPogZgPq/ics?icsToken=9… > Join Zoom Meeting https://zoom.us/j/95239140213 <https://zoom.us/j/95239140213 > Meeting ID: 952 3914 0213 One tap mobile +13126266799,,95239140213# US (Chicago) +16465588656,,95239140213# US (New York) Dial by your location +1 312 626 6799 US (Chicago) +1 646 558 8656 US (New York) +1 646 931 3860 US +1 301 715 8592 US (Washington DC) +1 305 224 1968 US +1 309 205 3325 US +1 360 209 5623 US +1 386 347 5053 US +1 507 473 4847 US +1 564 217 2000 US +1 669 444 9171 US +1 669 900 6833 US (San Jose) +1 689 278 1000 US +1 719 359 4580 US +1 253 205 0468 US +1 253 215 8782 US (Tacoma) +1 346 248 7799 US (Houston) 877 369 0926 US Toll-free 855 880 1246 US Toll-free +1 204 272 7920 Canada +1 438 809 7799 Canada +1 587 328 1099 Canada +1 647 374 4685 Canada +1 647 558 0588 Canada +1 778 907 2071 Canada +1 780 666 0144 Canada 855 703 8985 Canada Toll-free Meeting ID: 952 3914 0213 Find your local number: https://zoom.us/u/aewVD44sd4 <https://zoom.us/u/aewVD44sd4 > _._,_._,_ Links: You receive all messages sent to this group. View/Reply Online (#278) <https://lists.sonicfoundation.dev/g/sonic-dev/message/278 > | Reply To Sender <mailto:lhyde@linuxfoundation.org?subject=Private:%20Re:%20Re%3A%20%5Bsonic-dev%5D%20%5Bsonic-wg-routing%5D%20A%20reminder%20for%205%2F4%20SONiC%20Routing%20WG%20kick%20off%20meeting > | Reply To Group <mailto:sonic-dev@lists.sonicfoundation.dev?subject=Re:%20Re%3A%20%5Bsonic-dev%5D%20%5Bsonic-wg-routing%5D%20A%20reminder%20for%205%2F4%20SONiC%20Routing%20WG%20kick%20off%20meeting > | Mute This Topic <https://lists.sonicfoundation.dev/mt/98676540/7341548 > | New Topic <https://lists.sonicfoundation.dev/g/sonic-dev/post > Your Subscription <https://lists.sonicfoundation.dev/g/sonic-dev/editsub/7341548 > | Contact Group Owner <mailto:sonic-dev+owner@lists.sonicfoundation.dev > | Unsubscribe <https://lists.sonicfoundation.dev/g/sonic-dev/leave/11873633/7341548/944543… > [eddie.ruan(a)alibaba-inc.com] _._,_._,_

1 0

A reminder for 5/4 SONiC Routing WG kick off meeting
by Eddie Ruan 03 May '23

03 May '23

Hi, Just a friendly reminder that we will have routing WG kick off meeting on 5/4 5:30-6:30pm PST (5/5 8:30-9:30 am China time). The zoom info could be found below. You could subscribe this WG via https://lists.sonicfoundation.dev/g/sonic-wg-routing <https://lists.sonicfoundation.dev/g/sonic-wg-routing > * Subscribe: sonic-wg-routing+subscribe(a)lists.sonicfoundation.dev <mailto:sonic-wg-routing+subscribe@lists.sonicfoundation.dev > I also include FRR email alias as well, since we use FRR as routing stack in SONiC and there are some enhancements needed from both FRR and SONiC to fully support routing features. Thanks Praveen, Hasan, Rita, Eddie Please download and import the following iCalendar (.ics) files to your calendar system. Weekly: https://zoom.us/meeting/tJEvdOCpqjsoG9dYQnhKle_6lwCLbPogZgPq/ics?icsToken=9… <https://zoom.us/meeting/tJEvdOCpqjsoG9dYQnhKle_6lwCLbPogZgPq/ics?icsToken=9… > Join Zoom Meeting https://zoom.us/j/95239140213 <https://zoom.us/j/95239140213 > Meeting ID: 952 3914 0213 One tap mobile +13126266799,,95239140213# US (Chicago) +16465588656,,95239140213# US (New York) Dial by your location +1 312 626 6799 US (Chicago) +1 646 558 8656 US (New York) +1 646 931 3860 US +1 301 715 8592 US (Washington DC) +1 305 224 1968 US +1 309 205 3325 US +1 360 209 5623 US +1 386 347 5053 US +1 507 473 4847 US +1 564 217 2000 US +1 669 444 9171 US +1 669 900 6833 US (San Jose) +1 689 278 1000 US +1 719 359 4580 US +1 253 205 0468 US +1 253 215 8782 US (Tacoma) +1 346 248 7799 US (Houston) 877 369 0926 US Toll-free 855 880 1246 US Toll-free +1 204 272 7920 Canada +1 438 809 7799 Canada +1 587 328 1099 Canada +1 647 374 4685 Canada +1 647 558 0588 Canada +1 778 907 2071 Canada +1 780 666 0144 Canada 855 703 8985 Canada Toll-free Meeting ID: 952 3914 0213 Find your local number: https://zoom.us/u/aewVD44sd4 <https://zoom.us/u/aewVD44sd4 >

1 0