May 2023 - frog - lists.frrouting.org

FRR 8.4 Release
by Jafar Al-Gharaibeh 10 Aug '23

10 Aug '23

Dear FRR Community, We are pleased to announce FRR 8.4 release. Big thanks to all contributors. Packages are available at: Debian Packages - https://deb.frrouting.org RPM Packages - https://rpm.frrouting.org Snaps - https://snapcraft.io/frr Docker - frrouting/frr:v8.4.0 For release notes and a list of notable bug fixes, please visit: https://frrouting.org/release/8.4/ https://github.com/FRRouting/frr/releases/tag/frr-8.4 Cheers, The FRR Development Team!

1 3

BGP_NLRI_MISMATCH Problem
by Soeren Malchow 14 May '23

14 May '23

Dears, we are struggeling with a setup, where we have a BGP setup with our carrier and IPv4 works just fine (two endpoints on our side, two on theirs) on the same two connections we are also trying to advertise IPv6 prefixes, however, in that case the carrier router spits out this error message. The FRR is running on a pfsense on our side, however, there is no need to use the ui to do the configuration, we did that already on the CLI. BGP_NLRI_MISMATCH: bgp_process_caps: mismatch NLRI with 2001:xxxx:x:x:x:x:xx:xxxx (External AS 1xxxx): peer: <inet-unicast inet6-unicast>(17) us: <inet6-unicast>(16) (instance master) Which tells me that we are offering IPv6 and IPv4 but they only want ipv6, correct ? The configuration on our side is as follows frr version 7.5.1 frr defaults traditional hostname XXXXXX service integrated-vtysh-config ! password some_password ! ip router-id 62.xx.xx.x ! router bgp 1xxxx bgp router-id 62.xx.xx.xx bgp log-neighbor-changes no bgp network import-check neighbor 62.x.x.x remote-as 3xxx neighbor 62.x.x.x description Lumen peer neighbor 62.x.x.x bfd neighbor 62.x.x.x password PASSWORD neighbor 62.x.x.x update-source 62.xx.xx.xx neighbor 2001:xxxx:x:x:x:x:x:xxxx remote-as 3xxx neighbor 2001:xxxx:x:x:x:x:x:xxxx description Lumen Circuit 1 - IPv6 neighbor 2001:xxxx:x:x:x:x:x:xxxx bfd neighbor 2001:xxxx:x:x:x:x:x:xxxx password PASSWORD neighbor 2001:xxxx:x:x:x:x:x:xxxx update-source 2001:xxxx:x:x:x:x:xx:xxxx ! address-family ipv4 unicast network 62.x.x.xxx/25 route-map ALLOW-ALL network 212.x.x.x/29 route-map ALLOW-ALL neighbor 62.x.x.x route-map ALLOW-ALL in neighbor 62.x.x.x route-map ALLOW-ALL out exit-address-family ! address-family ipv6 unicast network 2001:XXXX:XXXX:X::/64 route-map ALLOW-ALL network 2001:XXXX:XXXX::/48 route-map ALLOW-ALL neighbor 2001:1900:x:x:x:x:x:xxxx activate no neighbor 2001:1900:x:x:x:x:x:xxxx send-community neighbor 2001:1900:x:x:x:x:x:xxxx route-map ALLOW-ALL in neighbor 2001:1900:x:x:x:x:x:xxxx route-map ALLOW-ALL out exit-address-family ! route-map ALLOW-ALL permit 100 description Match any route ! line vty ! bfd peer 62.x.x.x local-address 62.xx.xx.xx interface vtnet0 no shutdown ! ! any help on how to continue with this is very much appreciated. We have no idea what to do here Cheers Soeren

2 1

libyang2 and speeding up it's use
by Donald Sharp 10 May '23

10 May '23

I recently upgraded to libyang2.1.55, from an early version of libyang2 from a year or so ago. There was a huge improvement in startup times for configs using a decent number of route maps. I would highly recommend that you grab this latest version and upgrade to using it if you can do so. thanks! donald

1 0

Researchers Uncover New BGP Flaws in Popular Internet Routing Protocol Software
by Turritopsis Dohrnii Teo En Ming 10 May '23

10 May '23

Subject: Researchers Uncover New BGP Flaws in Popular Internet Routing Protocol Software Good day from Singapore, I have just come across this article. Thought of sharing it. Article: Researchers Uncover New BGP Flaws in Popular Internet Routing Protocol Software Link: https://thehackernews.com/2023/05/researchers-uncover-new-bgp-flaws-in.html Thank you. Regards, Mr. Turritopsis Dohrnii Teo En Ming Targeted Individual in Singapore Blogs: https://tdtemcerts.blogspot.com https://tdtemcerts.wordpress.com GIMP also stands for Government-Induced Medical Problems.

1 0

Re: [FROG] FRR 8.5.1 Release
by Mark Tinka 01 May '23

01 May '23

I hope there would have been some fixes to the outstanding IS-IS issues I have posted about. It seems IS-IS is not going to be ready for production use anytime soon, so I'll have to go back to Quagga. Mark. On 4/30/23 12:49, Jafar Al-Gharaibeh via frog wrote: > ear FRR Community, > > We are pleased to announce FRR 8.5.1 bug fix release. > > Packages are available at: > > Debian Packages -https://deb.frrouting.org > RPM Packages -https://rpm.frrouting.org > Snaps -https://snapcraft.io/frr > Docker - quay.io/frrouting/frr:v8.5.1 > > For release notes please visit: > > https://frrouting.org/release/8.5.1/ > > https://github.com/FRRouting/frr/releases/tag/frr-8.5.1 > > > > Cheers, > > The FRR Development Team!

2 2