July 2018 - frog - lists.frrouting.org

v6 Route Replace semantics
by Donald Sharp 09 Apr '20

09 Apr '20

All - We recently introduced, into master, a new cli switch for zebra on linux `--v6-rr-semantics`. This was allow zebra to take advantage of the linux kernel getting v6 route replace semantics that is coming soon in the 4.18 linux kernel. So if you are on the bleeding edge of linux kernels and FRR you can start to take advantage of this new feature. What are Route Replace semantics you ask? Suppose we have a v6 route with 2 nexthops: S>* 4:6:7::/64 [1/0] via 1:2:3::4, enp0s3, 00:00:02 via 1:2:8::8, enp0s8, 00:00:02 Now suppose we remove a nexthop: robot# conf t robot(config)# no ipv6 route 5:7:9::/78 1:2:8::9 robot(config)# end robot# show ipv6 route [snip] S>* 5:7:9::/78 [1/0] via 1:2:3::4, enp0s3, 00:01:04 Let's look at the netlink notifications for this event: [ROUTE]5:7:9::/78 proto static metric 20 <----------- From creation of the 2x ecmp for 5:7:9::/78 nexthop via 1:2:3::4 dev enp0s3 weight 1 nexthop via 1:2:8::9 dev enp0s8 weight 1 [ROUTE]Deleted 5:7:9::/78 proto static metric 20 <---- We delete the route nexthop via 1:2:3::4 dev enp0s3 weight 1 nexthop via 1:2:8::9 dev enp0s8 weight 1 [ROUTE]5:7:9::/78 via 1:2:3::4 dev enp0s3 proto static metric 20 pref medium <----- We add it back in. In order to get the routes right in the kernel we had to delete the route first and then add it back in. Exposing a small window of packets being dropped while the route is fixed in the fib. Route Replace semantics tells the linux kernel to just replace the nexthops for the route. New packets coming in would immediately start using the new ecmp nexthop group path: [ROUTE]5:7:9::/78 proto static metric 20 nexthop via 1:2:3::4 dev enp0s3 weight 1 nexthop via 1:2:8::9 dev enp0s8 weight 1 [ROUTE]5:7:9::/78 via 1:2:3::4 dev enp0s3 proto static metric 20 pref medium thanks! donald

2 1

FRR on NRL CORE (fyi)
by Phil Wiggins 11 Apr '19

11 Apr '19

If anyone is interested in running FRR in the NRL CORE emulation environment, I have some build scripts for FRR on CORE that I posted at the first link below. Normally CORE runs Quagga, so this script was a hack to shoehorn FRR as a Quagga replacement. These scripts are not part of CORE yet, so are unsupported. People on this list may want to use CORE for FRR experimentation and testing, so you can customize these scripts to suit your own needs. It's best to run this stuff in a VM with no internet connection (after installation) since CORE runs lots of processes as root - a well-known security issue. https://github.com/coreemu/core/issues/170 ( install_frr_for_core.sh) FRR on NRL CORE build script - assumes Ubuntu 16.04.4 clean installation in a VM or physical host: https://gist.github.com/apwiggins/44f3592a61965783372aea5881ed9f7a (core_misc_frr.py ) used by the install script above to install at ./core/misc/frr.py https://gist.github.com/apwiggins/d610c2794c8c0a12a45bfc093fd2e949 (core_services_frr.py) used by the install script above to install at ./core/services/frr.py https://gist.github.com/apwiggins/747a9a14feff2ce3a3b8760406b825a7 https://www.nrl.navy.mil/itd/ncs/products/core The Common Open Research Emulator (CORE) is a tool for emulating networks on one or more machines. You can connect these emulated networks to live networks. CORE consists of a GUI for drawing topologies of lightweight virtual machines, and Python modules for scripting network emulation. Cheers, Phil

2 3

received-routes.. doesn't work?
by Mark Kamichoff 02 Sep '18

02 Sep '18

Hi - I'm running various 3.1-dev versions of FRR and noticed that the "show ip bgp nei <peer> received-routes" doesn't seem to work as expected on any of them. Here's an example of the relevant parts of the configuration: ! router bgp 395460 neighbor 169.254.169.254 remote-as 64515 neighbor 169.254.169.254 password <snip> neighbor 169.254.169.254 ebgp-multihop 2 address-family ipv4 unicast neighbor 169.254.169.254 soft-reconfiguration inbound neighbor 169.254.169.254 route-map DENY_ALL in neighbor 169.254.169.254 route-map DENY_ALL out exit-address-family ! route-map DENY_ALL deny 65535 ! orca# show ip bgp neighbors 169.254.169.254 routes orca# show ip bgp neighbors 169.254.169.254 received-routes BGP table version is 0, local router ID is 10.3.4.36 Status codes: s suppressed, d damped, h history, * valid, > best, = multipath, i internal, r RIB-failure, S Stale, R Removed Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf Weight Path orca# >From tcpdump and other t-shooting I know that there is an IPv4 DFZ being received, but received-routes doesn't show any of the routes that should be in the adj-rib-in. Oddly, if I remove the inbound route-map I see expected prefixes using the "routes" /and/ "received-routes" command. If I put it back, the "received-routes" shows nothing once again. It would almost seem like soft-reconfiguration isn't really enabled, but received-routes should give me an error if it wasn't and the neighbor information confirms that it is: orca# show ip bgp neighbors 169.254.169.254 <snip> For address family: IPv4 Unicast Update group 5, subgroup 5 Packet Queue length 0 Inbound soft reconfiguration allowed <----- <snip> This isn't limited to the IPv4 AF, either. I've got IPv6 peers that echibit the same behavior. Have I found a bug or am I doing something wrong? I'm happy to file a bug report. More info., if it helps: orca# show version FRRouting 3.1-dev (). Copyright 1996-2005 Kunihiro Ishiguro, et al. configured with: '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include' '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--disable-silent-rules' '--libexecdir=${prefix}/lib/frr' '--disable-maintainer-mode' '--disable-dependency-tracking' '--enable-exampledir=/usr/share/doc/frr/examples/' '--localstatedir=/var/run/frr' '--sbindir=/usr/lib/frr' '--sysconfdir=/etc/frr' '--enable-ospfapi=yes' '--enable-vtysh=yes' '--enable-isisd=yes' '--enable-multipath=256' '--enable-user=frr' '--enable-group=frr' '--enable-vty-group=frrvty' '--enable-configfile-mask=0640' '--enable-logfile-mask=0640' '--enable-werror' '--enable-gcc-rdynamic' '--with-libpam' '--enable-systemd=yes' '--enable-poll=yes' '--enable-cumulus=yes' '--enable-pimd=yes' '--enable-dependency-tracking' '--enable-bgp-vnc=no' 'build_alias=x86_64-linux-gnu' orca# (orca:20:08:PDT)% uname -a Linux orca 4.9.0-3-amd64 #1 SMP Debian 4.9.25-1 (2017-05-02) x86_64 GNU/Linux (the build is from August 26th) Thanks! - Mark -- Mark Kamichoff prox(a)prolixium.com https://www.prolixium.com/

1 1

Redistribute to BGP ipv4 labeled-unicast
by Marco Marzetti 30 Jul '18

30 Jul '18

Dear members of the group, I've noticed neither "redistribute" nor "network" commands are supported by bgpd for AFI/SAFI ipv4 labeled-unicast. I took a look at github and i can't find the features in any of the milestones. Is there an underlying reason i can't spot or is it just the dev team hasn't found time yet? Thank you for your help. Regards

3 9

Fwd: Segment Routing with FRR
by 唐志军 23 Jul '18

23 Jul '18

Hello, My name is Zhijun. I am learning segment routing by using FRRouting. First, thank you for writing such a guide to setup segment routing in FRRouting. I have read this guide and set up an sr environment with 5 FRR routers. However, I cannot make it sure whether I did correctly. Bellow is my topo. [image: image.png] and this is my r1 config, [image: image.png] and I got bellow sr info, [image: image.png] I would be very grateful if you can tell me if this is right to config such an sr environment. And, in depth, how can I config a label switch path for traffic between H1 and H2, such as icmp packets? Best Reguards, Zhijun

1 0

[EVPN] ./configure options to create crash dump and debugging for EVPN
by Felipe Arturo Polanco 18 Jul '18

18 Jul '18

Hi, Could anyone please share the ./configure options to enable debugging information as well as crash dump ? I have BGPd crashing in an EVPN environment with this as backtrace: Jul 13 20:08:10 li1276-116 bgpd[14597]: /usr/lib/frr/libfrr.so.0(zlog_backtrace_sigsafe+0x32) [0x7f592688fb94] Jul 13 20:08:10 li1276-116 bgpd[14597]: /usr/lib/frr/libfrr.so.0(zlog_signal+0x219) [0x7f59268900b1] Jul 13 20:08:10 li1276-116 bgpd[14597]: /usr/lib/frr/libfrr.so.0(+0x4a729) [0x7f59268a0729] Jul 13 20:08:10 li1276-116 bgpd[14597]: /usr/lib/frr/bgpd() [0x4a12e4] Jul 13 20:08:10 li1276-116 bgpd[14597]: /usr/lib/frr/bgpd() [0x4a15ad] Jul 13 20:08:10 li1276-116 bgpd[14597]: /usr/lib/frr/bgpd() [0x4a1660] Jul 13 20:08:10 li1276-116 bgpd[14597]: /usr/lib/frr/bgpd(bgp_evpn_local_vni_add+0x133) [0x4a5163] Jul 13 20:08:10 li1276-116 bgpd[14597]: /usr/lib/frr/bgpd() [0x446f2c] Jul 13 20:08:10 li1276-116 bgpd[14597]: /usr/lib/frr/libfrr.so.0(+0x5b572) [0x7f59268b1572] Jul 13 20:08:10 li1276-116 bgpd[14597]: /usr/lib/frr/libfrr.so.0(thread_call+0x46) [0x7f59268aa5d1] Jul 13 20:08:10 li1276-116 bgpd[14597]: /usr/lib/frr/libfrr.so.0(frr_run+0x1ae) [0x7f592688eb93] Jul 13 20:08:10 li1276-116 bgpd[14597]: /usr/lib/frr/bgpd(main+0x1f8) [0x41cf74] Jul 13 20:08:10 li1276-116 bgpd[14597]: /usr/lib/frr/bgpd() [0x41e826] Jul 13 20:08:10 li1276-116 watchfrr[14612]: bgpd state -> down : read returned EOF This is happening randomly and is hard to reproduce so I believe a crash dump can help see where the problem is. Thanks,

2 4

Fwd: Help: how to enable RPKI in FRR 5?
by Paco Moreno 18 Jul '18

18 Jul '18

My bad, I forgot to send the response to the list. Also I've seen that in my first mail I misplaced the RPM link. The RPM that I've installed is the same that Martin has said https://github.com/FRRouting/frr/releases/download/frr-5.0.1/frr-5.0.1RPKI-… . ---------- Forwarded message --------- From: Paco Moreno <pc.moreno2099(a)gmail.com> Date: mar., 17 jul. 2018 a las 9:46 Subject: Re: [FROG] Help: how to enable RPKI in FRR 5? To: Martin Winter <mwinter(a)opensourcerouting.org> Hi Martin, thanks for your reply. I do have the RTRlib already, just as you have mentioned here and as is stated at the docs. Also, I've installed the FRR wtih RPKI package; and also I've tried by making the RPM package "manually", including the option "--enable-rpki" (the code that I've downloaded is from the branch master). Just to add more information of the problem, actually (and this is odd) the rpki commands do appear at the vtysh console as available commands: vtysh# find rpki (enable) rpki start (enable) rpki stop (enable) show rpki cache-connection (enable) show rpki cache-server (enable) show rpki prefix-table (config) rpki (config) debug rpki .... But they don't appear at the bgp daemon console whenever I connect via "telnet localhost 2605" and run the same command bgp# find rpki So, what else do you think that might be the problem? I really appreciate your help. Best regards, Francisco Moreno El mar., 17 jul. 2018 a las 9:12, Martin Winter (< mwinter(a)opensourcerouting.org>) escribió: > Paco, > > for RPKI, you need to download the RPKI version of FRR and install the > additional RTRLIB package as well. > > As described on the Github release page: > “For some platforms we publish RPKI enabled packages. Please be aware that > you will need > the RTRLIB package installed as well for the RPKI packages. You can find > the RTRLIB packages > on the NetDEF CI system in the RTRLIB project” > > So in your case (CentOS 7), you would download the FRR with RPKI package: > > https://github.com/FRRouting/frr/releases/download/frr-5.0.1/frr-5.0.1RPKI-… > > and the RTRLIB from > > https://ci1.netdef.org/artifact/RPKI-RTRLIB/shared/build-38/CentOS-7-x86_64… > > Install the RTRLIB first, then the FRR package > > We decided to distribute an extra package as the RTRLIB doesn’t have > official package in the > various distributions (i.e. CentOS 7) and requires a manual install. Tried > to avoid this extra > step for the majority who doesn’t need or want RPKI. > > Regards, > Martin Winter > > On 16 Jul 2018, at 16:01, Paco Moreno wrote: > > Hi there, > > I've been trying to configure FRR 5.0.1 (downloaded from Github releases > https://github.com/FRRouting/frr/releases/download/frr-5.0.1/frr-5.0.1-2018…) > and also 5.1 (manually built as RPM from master branch) to use RPKI. Both > cases in CentOS 7; there's no problem compiling nor executing the service > with the zebra and bgpd daemons active. But when I try to use the rpki > configuration (http://docs.frrouting.org/en/latest/bgp.html#enabling-rpki) > this is not recognized by the application. > > For example, if I place the conf at the bgpd.conf file like the example ( > http://docs.frrouting.org/en/latest/bgp.html#rpki-configuration-example) > nothing happens since the configuration seems to be unrecognized. After > that, I've tried to configure the rpki from the terminal (using "vtysh" or > by "telnet"), like this (multiple forms, probably a little desperate): > bgp# rpki > % [BGP] Unknown command: rpki > bgp# conf term > bgp(config)# rpki > % [BGP] Unknown command: rpki > bgp(config)# router bgp 1 > bgp(config-router)# rpki > % [BGP] Unknown command: rpki > > I don't know if I'm missing something or what to do, could somebody here > help me with this please? > > Best regards, > Francisco Moreno > > _______________________________________________ > frog mailing list > frog(a)lists.frrouting.org > https://lists.frrouting.org/listinfo/frog > >

3 6

Help: how to enable RPKI in FRR 5?
by Paco Moreno 17 Jul '18

17 Jul '18

Hi there, I've been trying to configure FRR 5.0.1 (downloaded from Github releases https://github.com/FRRouting/frr/releases/download/frr-5.0.1/frr-5.0.1-2018…) and also 5.1 (manually built as RPM from master branch) to use RPKI. Both cases in CentOS 7; there's no problem compiling nor executing the service with the zebra and bgpd daemons active. But when I try to use the rpki configuration (http://docs.frrouting.org/en/latest/bgp.html#enabling-rpki) this is not recognized by the application. For example, if I place the conf at the bgpd.conf file like the example ( http://docs.frrouting.org/en/latest/bgp.html#rpki-configuration-example) nothing happens since the configuration seems to be unrecognized. After that, I've tried to configure the rpki from the terminal (using "vtysh" or by "telnet"), like this (multiple forms, probably a little desperate): bgp# rpki % [BGP] Unknown command: rpki bgp# conf term bgp(config)# rpki % [BGP] Unknown command: rpki bgp(config)# router bgp 1 bgp(config-router)# rpki % [BGP] Unknown command: rpki I don't know if I'm missing something or what to do, could somebody here help me with this please? Best regards, Francisco Moreno

3 2

6PE functionality support in FRR
by Thiruvazhiyan Lakshmanan 17 Jul '18

17 Jul '18

Hi, We are looking for using FRR in our VM for BGP 3107 functionality with 6PE support. Basically FRR should peer with peering router with ipv6-label-unicast family and advertise its v6 loopback address with the label value of 2 (Explicit null label) and the next-hop of the route to be set to its v4 loopback address. Does FRR support this currently? Regards, Thiruvazhiyan L ============================================================================================================================ Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review the policy at http://www.techmahindra.com/Disclaimer.html <http://www.techmahindra.com/Disclaimer.html> externally http://tim.techmahindra.com/tim/disclaimer.html <http://tim.techmahindra.com/tim/disclaimer.html> internally within TechMahindra. ============================================================================================================================

1 0

Please add me to the Slack channel
by Felipe Arturo Polanco 15 Jul '18

15 Jul '18

Hi, Could someone please add me to the slack channel? Thanks.

2 1