February 2020 - frog - lists.frrouting.org

Yocto Recipe for FRR
by Amol Lad 10 Aug '21

10 Aug '21

Hi, Please advise if there is any Yocto recipe for FRRouting? If not, how to go about creating one for FRR? Yocto Recipe for FRR will hugely simplify integrating FRR in Yocto based embedded linux distributions. So please advise if there are any plans to develop this recipe? Thanks Amol ________________________________ The information in this email communication (inclusive of attachments) is confidential to 4RF Limited and the intended recipient(s). If you are not the intended recipient(s), please note that any use, disclosure, distribution or copying of this information or any part thereof is strictly prohibited and that the author accepts no liability for the consequences of any action taken on the basis of the information provided. If you have received this email in error, please notify the sender immediately by return email and then delete all instances of this email from your system. 4RF Limited will not accept responsibility for any consequences associated with the use of this email (including, but not limited to, damages sustained as a result of any viruses and/or any action or lack of action taken in reliance on it).

4 10

Display in wrong order for prefix-list
by Sébastien 65 24 Apr '20

24 Apr '20

Hi, I note that the display of a prefix-list AND bgp as-path access-list is not in the correct order, the sequences are mixed and this is not easily readable ... ip prefix-list LIST1 seq 10 deny X ip prefix-list LIST1 seq 100 deny X ip prefix-list LIST1 seq 105 deny X ip prefix-list LIST1 seq 15 deny X ip prefix-list LIST1 seq 20 deny X ip prefix-list LIST1 seq 200 permit X ip prefix-list LIST1 seq 25 deny X ip prefix-list LIST1 seq 30 deny X ip prefix-list LIST1 seq 35 deny X ip prefix-list LIST1 seq 40 deny X ip prefix-list LIST1 seq 45 deny X ip prefix-list LIST1 seq 5 deny X How to display the sequences in the right order (10,15,20,25,...,100,105,200,...)? Thank you !

4 6

v6 Route Replace semantics
by Donald Sharp 08 Apr '20

08 Apr '20

All - We recently introduced, into master, a new cli switch for zebra on linux `--v6-rr-semantics`. This was allow zebra to take advantage of the linux kernel getting v6 route replace semantics that is coming soon in the 4.18 linux kernel. So if you are on the bleeding edge of linux kernels and FRR you can start to take advantage of this new feature. What are Route Replace semantics you ask? Suppose we have a v6 route with 2 nexthops: S>* 4:6:7::/64 [1/0] via 1:2:3::4, enp0s3, 00:00:02 via 1:2:8::8, enp0s8, 00:00:02 Now suppose we remove a nexthop: robot# conf t robot(config)# no ipv6 route 5:7:9::/78 1:2:8::9 robot(config)# end robot# show ipv6 route [snip] S>* 5:7:9::/78 [1/0] via 1:2:3::4, enp0s3, 00:01:04 Let's look at the netlink notifications for this event: [ROUTE]5:7:9::/78 proto static metric 20 <----------- From creation of the 2x ecmp for 5:7:9::/78 nexthop via 1:2:3::4 dev enp0s3 weight 1 nexthop via 1:2:8::9 dev enp0s8 weight 1 [ROUTE]Deleted 5:7:9::/78 proto static metric 20 <---- We delete the route nexthop via 1:2:3::4 dev enp0s3 weight 1 nexthop via 1:2:8::9 dev enp0s8 weight 1 [ROUTE]5:7:9::/78 via 1:2:3::4 dev enp0s3 proto static metric 20 pref medium <----- We add it back in. In order to get the routes right in the kernel we had to delete the route first and then add it back in. Exposing a small window of packets being dropped while the route is fixed in the fib. Route Replace semantics tells the linux kernel to just replace the nexthops for the route. New packets coming in would immediately start using the new ecmp nexthop group path: [ROUTE]5:7:9::/78 proto static metric 20 nexthop via 1:2:3::4 dev enp0s3 weight 1 nexthop via 1:2:8::9 dev enp0s8 weight 1 [ROUTE]5:7:9::/78 via 1:2:3::4 dev enp0s3 proto static metric 20 pref medium thanks! donald

2 1

Zebra FIB update/withdrawal looping issue
by Templin (US), Fred L 25 Feb '20

25 Feb '20

I have a simple BGP configuration with one "hub" ASBR and two "spoke" ASBRs. The spoke ASBRs report IPv6 BGP routes to the hub, while the hub originates "default" to the spokes. So, the hub ASBR receives all advertised routes while the spokes receive only "default". When I run my network, BGP routes indeed show up at the hub ASBR and Zebra installs them in the FIB. However, after about 2-5 seconds, Zebra withdraws the routes and then about 2-5 seconds later it reinstalls them in the FIB again. This process recurs indefinitely even though there are no dynamic BGP protocol updates coming from the spokes. Any idea what could cause Zebra on the hub ASBR to loop and repeatedly install and withdraw the BGP routes? Thanks - Fred PS I am running the latest FRR release on Ubuntu 16.0.4.

1 0

What 'ge' 'le' really means ?
by Simon Jones 20 Feb '20

20 Feb '20

Hi all, In this command: > gyw-229(config)# ip prefix-list test_ipv4_1_1 seq 10 permit 192.18.8.0/24 > ge 24 > % Invalid prefix range for 192.18.8.0/24, make sure: len < ge-value <= > le-value > gyw-229(config)# ip prefix-list test_ipv4_1_1 seq 10 permit 192.18.8.0/24 > ge 25 we see 'ge' means greater. But in doc: > ge command specifies prefix length. The prefix list will be applied if the > prefix length is greater than or equal to the ge prefix length So what's 'ge' really means? And how to set equal command? Set equal command using 'ge xxx le xxx' before, but if 'ge' means greater, how to set? Use this command? > ip prefix-list test_ipv4_1_1 seq 10 permit 192.18.8.0/32 ---- Simon Jones

3 5

Fwd: trying to find example babeld.conf for use with FRR and Wireguard
by brian mullan 16 Feb '20

16 Feb '20

I have FRR and BGP working well with WireGuard but I'd really like to try Babled. However, I've searched the internet for a couple days now and the only babeld.conf files I've found are for openwrt use. Can anyone point me to an example babeld.conf for FRR that might work with WireGuard? thanks for any information or links. Brian

3 2

Changing BGP route map mid-session causes zebra to spin out of control
by Rudy Rucker 12 Feb '20

12 Feb '20

TL;DR: Having a '0.0.0.0/0 le 29' in a BGP prefix-list on a BGP session that has a full table can freak out zebra. If I go in and change a route-map, the box load goes to 100+ and starts dropping packets. The route-map had this prefix-list line ip prefix-list DEFAULT-IN-ip4 seq 99 permit 0.0.0.0/0 le 29 that seemed to break things, but changing it to: ip prefix-list DEFAULT-IN-ip4 seq 99 permit 0.0.0.0/0 le 24 fixes it. Repeatable: launch FRR with route-map COGENT-IN deny 10 match ip address prefix-list AS32329-ip4 route-map COGENT-IN permit 20 match ip address prefix-list COGENT-TEST-ONE-BLOCK set local-preference 100 set weight 101 Wait a few minutes, then change to route-map like this: orange(config)# route-map COGENT-IN permit 20 orange(config-route-map)# match ip address prefix-list DEFAULT-IN-ip4 orange(config-route-map)# set local-preference 100 orange(config-route-map)# set weight 101 And then load goes over 100 Here are the lists.... ip prefix-list COGENT-TEST-ONE-BLOCK seq 10 permit 38.0.0.0/8 le 24 ip prefix-list COGENT-TEST-ONE-BLOCK seq 20 deny any ip prefix-list DEFAULT-IN-ip4 seq 11 deny 10.0.0.0/8 le 32 ip prefix-list DEFAULT-IN-ip4 seq 12 deny 172.16.0.0/12 le 32 ip prefix-list DEFAULT-IN-ip4 seq 13 deny 192.168.0.0/16 le 32 ip prefix-list DEFAULT-IN-ip4 seq 14 deny 169.254.0.0/16 le 32 ip prefix-list DEFAULT-IN-ip4 seq 15 deny 127.0.0.0/8 le 32 ip prefix-list DEFAULT-IN-ip4 seq 99 permit 0.0.0.0/0 le 29 Output of truss on 'zebra' (I don't claim to really understand this output, other than reading 'Resource temporarily unavailable'. # truss -p 919 seteuid(0xa8) = 0 (0x0) read(6,"\M-H\0\^E\^B\^F\0\0\0B\M^@\0\0\a"...,1192) = 200 (0xc8) seteuid(0x0) = 0 (0x0) write(4,"\^A",1) = 1 (0x1) getrusage(RUSAGE_THREAD,{ u=27.163188,s=34.122484,in=5,out=7 }) = 0 (0x0) write(7,"\M-H\0\^E\^B\^F\0\0\0\^A\M^@\0\0"...,200) = 200 (0xc8) poll({ 6/POLLIN 12/POLLIN 15/POLLIN 16/POLLIN 3/POLLIN },5,0) = 2 (0x2) read(3,"\^A",64) = 1 (0x1) read(3,0x7fffffffe9b0,64) ERR#35 'Resource temporarily unavailable' write(7,"\M-H\0\^E\^A\^D\0\0\0\^C\M^@\0\0"...,200) = 200 (0xc8) seteuid(0xa8) = 0 (0x0) seteuid(0x0) = 0 (0x0) write(7,"\M-H\0\^E\^B\^F\0\0\0\^A\M^@\0\0"...,200) = 200 (0xc8) getrusage(RUSAGE_THREAD,{ u=27.163263,s=34.122484,in=5,out=7 }) = 0 (0x0) write(4,"\^A",1) = 1 (0x1) getrusage(RUSAGE_THREAD,{ u=27.163279,s=34.122484,in=5,out=7 }) = 0 (0x0) write(7,"\M-H\0\^E\^A\^D\0\0\0\^C\M^@\0\0"...,200) = 200 (0xc8) getrusage(RUSAGE_THREAD,{ u=27.163294,s=34.122484,in=5,out=7 }) = 0 (0x0) seteuid(0xa8) = 0 (0x0) read(6,"\M-H\0\^E\^A\^D\0\0\0C\M^@\0\0\a"...,1192) = 200 (0xc8) write(4,"\^A",1) = 1 (0x1) getrusage(RUSAGE_THREAD,{ u=27.163335,s=34.122484,in=5,out=7 }) = 0 (0x0) seteuid(0x0) = 0 (0x0) poll({ 6/POLLIN 12/POLLIN 15/POLLIN 16/POLLIN 3/POLLIN },5,0) = 2 (0x2) read(3,"\^A\^A",64) = 2 (0x2) read(3,0x7fffffffe9b0,64) ERR#35 'Resource temporarily unavailable' write(7,"\M-H\0\^E\^B\^F\0\0\0\^A\M^@\0\0"...,200) = 200 (0xc8) getrusage(RUSAGE_THREAD,{ u=27.163391,s=34.122484,in=5,out=7 }) = 0 (0x0) write(4,"\^A",1) = 1 (0x1) getrusage(RUSAGE_THREAD,{ u=27.163421,s=34.122484,in=5,out=7 }) = 0 (0x0) write(7,"\M-H\0\^E\^A\^D\0\0\0\^C\M^@\0\0"...,200) = 200 (0xc8) getrusage(RUSAGE_THREAD,{ u=27.163444,s=34.122484,in=5,out=7 }) = 0 (0x0) read(6,"\M-H\0\^E\^B\^F\0\0\0B\M^@\0\0\a"...,1192) = 200 (0xc8) seteuid(0xa8) = 0 (0x0) write(4,"\^A",1) = 1 (0x1) seteuid(0x0) = 0 (0x0) getrusage(RUSAGE_THREAD,{ u=27.163492,s=34.122484,in=5,out=7 }) = 0 (0x0) poll({ 6/POLLIN 12/POLLIN 15/POLLIN 16/POLLIN 3/POLLIN },5,0) = 2 (0x2) read(3,"\^A\^A",64) = 2 (0x2) write(7,"\M-H\0\^E\^B\^F\0\0\0\^A\M^@\0\0"...,200) = 200 (0xc8) read(3,0x7fffffffe9b0,64) ERR#35 'Resource temporarily unavailable' write(7,"\M-H\0\^E\^A\^D\0\0\0\^C\M^@\0\0"...,200) = 200 (0xc8) I'm not positive I figured this out... maybe it is late at night and traffic levels are down. Thanks, Rudy

1 0

Re: [FROG] Installing FRR on Ubuntu 18.04
by ian.2.oakley＠bt.com 10 Feb '20

10 Feb '20

Hi Nuno, I did that, and after a bit of sudo magic it's installed. Thank you. Regards, Ian -----Original Message----- From: Nuno Vieira <nuno(a)hashpower.pt> Sent: 10 February 2020 11:53 To: Oakley,I,Ian,TUS2 R <ian.2.oakley(a)bt.com> Subject: Re: [FROG] Installing FRR on Ubuntu 18.04 this below on a single line (just copy & paste properly) echo "deb https://deb.frrouting.org/frr bionic frr-stable" > /etc/apt/sources.list.d/frr.list Nuno Vieira # hashpower - datacenter and it services Leiria | Portugal p: +351308814400 e: nuno(a)hashpower.pt w: https://hashpower.pt ----- Original Message ----- > From: "ian 2 oakley" <ian.2.oakley(a)bt.com> > To: "Nuno Vieira" <nuno(a)hashpower.pt> > Cc: "frog" <frog(a)lists.frrouting.org> > Sent: Monday, 10 February, 2020 11:27:11 > Subject: RE: [FROG] Installing FRR on Ubuntu 18.04 > Hi Nuno, > > How would I alter the > > echo deb https://deb.frrouting.org/frr $(lsb_release -s -c) $FRRVER | > sudo tee -a /etc/apt/sources.list.d/frr.list > > command that currently produces > > deb https://deb.frrouting.org/frr bionic > > so that it produces > > deb https://deb.frrouting.org/frr bionic frr-stable > > or do I just manually rename the entries resulting from > > more /etc/apt/sources.list.d/frr.list > > Thanks in advance, > Ian > > -----Original Message----- > From: Nuno Vieira <nuno(a)hashpower.pt> > Sent: 10 February 2020 11:14 > To: Oakley,I,Ian,TUS2 R <ian.2.oakley(a)bt.com> > Cc: tim(a)provu.co.uk; frog <frog(a)lists.frrouting.org> > Subject: Re: [FROG] Installing FRR on Ubuntu 18.04 > > yo > > change that to: > > deb https://deb.frrouting.org/frr bionic frr-stable > > it will work then. > > cheers > > Nuno Vieira > > # hashpower - datacenter and it services Leiria | Portugal > > p: +351308814400 > e: nuno(a)hashpower.pt > w: https://hashpower.pt > > ----- Original Message ----- >> From: "ian 2 oakley" <ian.2.oakley(a)bt.com> >> To: tim(a)provu.co.uk >> Cc: "frog" <frog(a)lists.frrouting.org> >> Sent: Monday, 10 February, 2020 10:27:09 >> Subject: Re: [FROG] Installing FRR on Ubuntu 18.04 > >> Hi Tim, >> >> Did that, got this: >> >> deb https://deb.frrouting.org/frr bionic >> >> which doesn't seem wrong, but evidently it is. >> >> Hope that helps, >> Ian >> >> -----Original Message----- >> From: Tim Bray <tim(a)provu.co.uk> >> Sent: 07 February 2020 16:06 >> To: Oakley,I,Ian,TUS2 R <ian.2.oakley(a)bt.com> >> Cc: frog(a)lists.frrouting.org >> Subject: Re: [FROG] Installing FRR on Ubuntu 18.04 >> >> type >> >> more /etc/apt/sources.list.d/frr.list >> >> and copy and paste to email. So we can see what the problem is. >> >> Tim >> >> On 07/02/2020 15:11, ian.2.oakley(a)bt.com wrote: >>> E: Malformed entry 1 in list file /etc/apt/sources.list.d/frr.list >>> (Component) >>> E: The list of sources could not be read. >> _______________________________________________ >> frog mailing list >> frog(a)lists.frrouting.org > > https://lists.frrouting.org/listinfo/frog

1 0

Installing FRR on Ubuntu 18.04
by ian.2.oakley＠bt.com 10 Feb '20

10 Feb '20

Hi all, I've been trying to reinstall FRR on my Ubuntu 18.04 virtual machine, following the instructions given in the official guidance (http://docs.frrouting.org/projects/dev-guide/en/latest/building-frr-for-ubu…) but when I do I get the following error on the sudo make install stage: configure: error: libyang needs to be compiled with ENABLE_LYD_PRIV=ON. Instructions for this are included in the build documentation for your platform at http://docs.frrouting.org/projects/dev-guide/en/latest/building.html Having installed libyang from source with ENABLE_LYD_PRIV=ON, I'm not sure what's occurring. Does libyang need to be installed into the FRR directory for it to work properly? Best regards Ian Oakley Research Specialist IoT Security +44 (0)1473 626841 [EmailSigLogo] This email contains information from BT that might be privileged or confidential. And it's only meant for the person above. If that's not you, we're sorry - we must have sent it to you by mistake. Please email us to let us know, and don't copy or forward it to anyone else. Thanks. We monitor our email systems and may record all our emails. British Telecommunications plc R/O : 81 Newgate Street, London EC1A 7AJ Registered in England: No 1800000

4 7

回复：frog Digest, Vol 34, Issue 11
by xiaoyu＠ongod.org 09 Feb '20

09 Feb '20

1 0