September 2023 - frog - lists.frrouting.org

FRR and libyang2 update
by Donald Sharp 08 Jan '24

08 Jan '24

All -- The latest libyang2 release 2.1.111 has an incompatible change to it's ABI and causes FRR to no longer be able to work properly with it. See this issue filed for an explanation: https://github.com/FRRouting/frr/issues/14258 Additionally it is discussed here: https://github.com/CESNET/libyang/issues/2090 Since FRR needs to make changes to its code in order for FRR to continue to use newer versions of libyang2 it is not recommended that anyone upgrade to libyang2.1.111 or later at this point in time. We currently expect to be able to make these changes for the 9.1 release. What can you do? If you are using FRR 8.0 or later do not upgrade to libyang2.1.111 at this point in time. If you have, please downgrade to 2.1.80 or earlier. thanks! donald

2 2

FRR 9.0.1 and 8.5.3 Releases
by Jafar Al-Gharaibeh 28 Nov '23

28 Nov '23

Dear FRR Community, We are pleased to announce FRR 9.0.1 and FRR 8.5.3 bug fix releases. For release notes please visit: https://frrouting.org/release/ https://github.com/FRRouting/frr/releases Security updates: https://frrouting.org/security Cheers, The FRR Development Team!

1 1

Re: [FROG] RPKI, this is getting a bit frustrating
by Donald Sharp 30 Sep '23

30 Sep '23

Can I see the output of `show memory` for bgpd? I'm not aware of any memory leaks in rpki( but that does not mean that they don't exist ). I'd also like to see the output of the rpki section of a show run. donald On Thu, Sep 28, 2023 at 12:33 PM Chris Knipe via frog < frog(a)lists.frrouting.org> wrote: > > > > ---------- Forwarded message ---------- > From: Chris Knipe <savage(a)savage.za.org> > To: "frog(a)lists.frrouting.org" <frog(a)lists.frrouting.org> > Cc: > Bcc: > Date: Thu, 28 Sep 2023 15:24:21 +0000 > Subject: RPKI, this is getting a bit frustrating > > Hi All, > > > > Been battling with this one now for a while, through a few different > versions, and I am pulling my hair out here…. Is there any memory leaks in > RPKI??? > > > > My RPKI config: > > rpki > > rpki cache 172.65.0.2 8282 preference 1 > > rpki cache 172.65.0.2 8283 preference 2 > > exit > > > > Nothing more, nothing less. RPKI is (not yet) used in any route-maps, > policies, etc. > > > > RPKI works absolutely fine. However, when I start bgpd, it has a resident > memory size of ~3.6G (fine, considering it’s loading multiple full tables > for IPv4 & ipv6). When RPKI isn’t configured, the router is stable, and > memory usage is consistent and constant at ~3.6GB. > > > > However, as soon as RPKI is enabled, bgpd grows about 600MB in resident > memory per day. Eventually, the system runs out of memory and bgpd is > restarted (which, is obviously bad). > > > > root@MY-LOC-RS01A:~# ps auxxw|grep bgpd > > root 802 0.0 0.0 8784 2844 ? S<s Sep26 1:02 > /usr/lib/frr/watchfrr -d -F traditional zebra mgmtd bgpd ospfd ospf6d > staticd > > frr 850 16.8 54.7 4656684 4429752 ? S<sl Sep26 547:23 > /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1 -M rpki -e 10 > > root 12813 0.0 0.0 6608 2312 pts/2 S+ 17:21 0:00 grep > --color=auto bgpd > > > > We’re already at 4.6GB up from 3.6GB when BGP has initially started (2d > uptime for the longest BGP peer – see below). > > > > > > FRR version, and IPv4 BGP Peers (with prefixes): > > ZA-CTN-RS01A# sh ver > > FRRouting 9.0.1 (MY-LOC-RS01A) on Linux(5.15.0-84-generic). > > Copyright 1996-2005 Kunihiro Ishiguro, et al. > > configured with: > > '--build=x86_64-linux-gnu' '--prefix=/usr' > '--includedir=${prefix}/include' '--mandir=${prefix}/share/man' > '--infodir=${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var' > '--disable-option-checking' '--disable-silent-rules' > '--libdir=${prefix}/lib/x86_64-linux-gnu' > '--libexecdir=${prefix}/lib/x86_64-linux-gnu' '--disable-maintainer-mode' > '--localstatedir=/var/run/frr' '--sbindir=/usr/lib/frr' > '--sysconfdir=/etc/frr' '--with-vtysh-pager=/usr/bin/pager' > '--libdir=/usr/lib/x86_64-linux-gnu/frr' > '--with-moduledir=/usr/lib/x86_64-linux-gnu/frr/modules' > '--disable-dependency-tracking' '--enable-rpki' '--disable-scripting' > '--enable-pim6d' '--with-libpam' '--enable-doc' '--enable-doc-html' > '--enable-snmp' '--enable-fpm' '--disable-protobuf' '--disable-zeromq' > '--enable-ospfapi' '--enable-bgp-vnc' '--enable-multipath=256' > '--enable-user=frr' '--enable-group=frr' '--enable-vty-group=frrvty' > '--enable-configfile-mask=0640' '--enable-logfile-mask=0640' > 'build_alias=x86_64-linux-gnu' 'PYTHON=python3' > > > > > > IPv4 Unicast Summary (VRF default): > > BGP router identifier aaa.bbb.112.164, local AS number xxxxxx vrf-id 0 > > BGP table version 8318219 > > RIB entries 1693671, using 310 MiB of memory > > Peers 12, using 245 KiB of memory > > Dampening enabled. > > > > Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ > Up/Down State/PfxRcd PfxSnt Desc > > aaa.bbb.112.165 4 xxxxxx 723094 1164605 8318219 0 0 > 2d05h58m 4 1665344 MY-LOC-RS01B > > aaa.bbb.112.240 4 xxxxxx 265406 743205 8318219 0 0 > 2d05h58m 835450 922653 MY-LOC-TR01A > > aaa.bbb.112.241 4 xxxxxx 156145 763504 8318219 0 0 > 2d05h58m 603608 922653 MY-LOC-TR01B > > aaa.bbb.112.242 4 xxxxxx 26776 761874 8318219 0 0 > 2d05h58m 113141 922653 MY-LOC-PR01A > > aaa.bbb.112.243 4 xxxxxx 37609 761874 8318219 0 0 > 2d05h58m 113141 922653 MY-LOC-PR01B > > aaa.bbb.112.244 4 xxxxxx 3241 745167 8318219 0 0 > 2d05h58m 0 922653 MY-LOC-CR01A > > aaa.bbb.112.245 4 xxxxxx 3241 743205 8318219 0 0 > 2d05h58m 0 922653 MY-LOC-CR01B > > aaa.bbb.112.248 4 xxxxxx 384 436702 8318219 0 0 > 06:16:02 0 922653 MY-LOC-IKE01A > > aaa.bbb.112.249 4 xxxxxx 381 306758 8318219 0 0 > 06:18:32 0 922653 MY-LOC-IKE01B > > aaa.bbb.113.151 4 xxxxxx 0 0 0 0 0 > never Active 0 MY-LOC-RS01A > > aaa.bbb.113.152 4 xxxxxx 0 0 0 0 0 > never Active 0 MY-LOC-RS01B > > Total number of neighbors 11 > > > > Thanks, > > Chris. > > > > > > > > > > ---------- Forwarded message ---------- > From: Chris Knipe via frog <frog(a)lists.frrouting.org> > To: "frog(a)lists.frrouting.org" <frog(a)lists.frrouting.org> > Cc: > Bcc: > Date: Thu, 28 Sep 2023 15:24:21 +0000 > Subject: [FROG] RPKI, this is getting a bit frustrating > _______________________________________________ > frog mailing list > frog(a)lists.frrouting.org > https://lists.frrouting.org/listinfo/frog >

2 3

lists.frrouting.org unreachable via IPv6
by Willy Manga 30 Sep '23

30 Sep '23

Hi, I can't reach the list https://lists.frrouting.org/pipermail/frog/ over IPv6 . No issue with IPv4 though. -- Willy Manga @ongolaboy https://ongola.blogspot.com/

1 0

Re: [FROG] RPKI, this is getting a bit frustrating
by Willy Manga 29 Sep '23

29 Sep '23

Hi Chris, On 28/09/2023 20:38, frog-request(a)lists.frrouting.org wrote: > [...] > My RPKI config: > rpki > rpki cache 172.65.0.2 8282 preference 1 > rpki cache 172.65.0.2 8283 preference 2 [...] Is there a reason to use the same validator on two different ports ? Why not use another one? (by the way I was not even aware of port 8283 on that validator) In my setup running FRRouting 9.0.1 (bdr2) on Linux(6.1.0-12-amd64), debian 12. I have 3 validators - 2 from Cloudflare (IPv4 and IPv6) - another one on IPv6 We perform route origin validation without any issue. Config b# sh rpki cache-connection Connected to group 2 rpki tcp cache rp.my.domain 323 pref 5 rpki tcp cache 2606:4700:60::2 8282 pref 2 (connected) rpki tcp cache 172.65.0.2 8282 pref 3 sh memory bgpd --> http://paste.debian.net/1293467/ -- Willy Manga @ongolaboy https://ongola.blogspot.com/

2 1

RPKI, this is getting a bit frustrating
by Chris Knipe 28 Sep '23

28 Sep '23

Hi All, Been battling with this one now for a while, through a few different versions, and I am pulling my hair out here.... Is there any memory leaks in RPKI??? My RPKI config: rpki rpki cache 172.65.0.2 8282 preference 1 rpki cache 172.65.0.2 8283 preference 2 exit Nothing more, nothing less. RPKI is (not yet) used in any route-maps, policies, etc. RPKI works absolutely fine. However, when I start bgpd, it has a resident memory size of ~3.6G (fine, considering it's loading multiple full tables for IPv4 & ipv6). When RPKI isn't configured, the router is stable, and memory usage is consistent and constant at ~3.6GB. However, as soon as RPKI is enabled, bgpd grows about 600MB in resident memory per day. Eventually, the system runs out of memory and bgpd is restarted (which, is obviously bad). root@MY-LOC-RS01A:~# ps auxxw|grep bgpd root 802 0.0 0.0 8784 2844 ? S<s Sep26 1:02 /usr/lib/frr/watchfrr -d -F traditional zebra mgmtd bgpd ospfd ospf6d staticd frr 850 16.8 54.7 4656684 4429752 ? S<sl Sep26 547:23 /usr/lib/frr/bgpd -d -F traditional -A 127.0.0.1 -M rpki -e 10 root 12813 0.0 0.0 6608 2312 pts/2 S+ 17:21 0:00 grep --color=auto bgpd We're already at 4.6GB up from 3.6GB when BGP has initially started (2d uptime for the longest BGP peer - see below). FRR version, and IPv4 BGP Peers (with prefixes): ZA-CTN-RS01A# sh ver FRRouting 9.0.1 (MY-LOC-RS01A) on Linux(5.15.0-84-generic). Copyright 1996-2005 Kunihiro Ishiguro, et al. configured with: '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include' '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--disable-option-checking' '--disable-silent-rules' '--libdir=${prefix}/lib/x86_64-linux-gnu' '--libexecdir=${prefix}/lib/x86_64-linux-gnu' '--disable-maintainer-mode' '--localstatedir=/var/run/frr' '--sbindir=/usr/lib/frr' '--sysconfdir=/etc/frr' '--with-vtysh-pager=/usr/bin/pager' '--libdir=/usr/lib/x86_64-linux-gnu/frr' '--with-moduledir=/usr/lib/x86_64-linux-gnu/frr/modules' '--disable-dependency-tracking' '--enable-rpki' '--disable-scripting' '--enable-pim6d' '--with-libpam' '--enable-doc' '--enable-doc-html' '--enable-snmp' '--enable-fpm' '--disable-protobuf' '--disable-zeromq' '--enable-ospfapi' '--enable-bgp-vnc' '--enable-multipath=256' '--enable-user=frr' '--enable-group=frr' '--enable-vty-group=frrvty' '--enable-configfile-mask=0640' '--enable-logfile-mask=0640' 'build_alias=x86_64-linux-gnu' 'PYTHON=python3' IPv4 Unicast Summary (VRF default): BGP router identifier aaa.bbb.112.164, local AS number xxxxxx vrf-id 0 BGP table version 8318219 RIB entries 1693671, using 310 MiB of memory Peers 12, using 245 KiB of memory Dampening enabled. Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd PfxSnt Desc aaa.bbb.112.165 4 xxxxxx 723094 1164605 8318219 0 0 2d05h58m 4 1665344 MY-LOC-RS01B aaa.bbb.112.240 4 xxxxxx 265406 743205 8318219 0 0 2d05h58m 835450 922653 MY-LOC-TR01A aaa.bbb.112.241 4 xxxxxx 156145 763504 8318219 0 0 2d05h58m 603608 922653 MY-LOC-TR01B aaa.bbb.112.242 4 xxxxxx 26776 761874 8318219 0 0 2d05h58m 113141 922653 MY-LOC-PR01A aaa.bbb.112.243 4 xxxxxx 37609 761874 8318219 0 0 2d05h58m 113141 922653 MY-LOC-PR01B aaa.bbb.112.244 4 xxxxxx 3241 745167 8318219 0 0 2d05h58m 0 922653 MY-LOC-CR01A aaa.bbb.112.245 4 xxxxxx 3241 743205 8318219 0 0 2d05h58m 0 922653 MY-LOC-CR01B aaa.bbb.112.248 4 xxxxxx 384 436702 8318219 0 0 06:16:02 0 922653 MY-LOC-IKE01A aaa.bbb.112.249 4 xxxxxx 381 306758 8318219 0 0 06:18:32 0 922653 MY-LOC-IKE01B aaa.bbb.113.151 4 xxxxxx 0 0 0 0 0 never Active 0 MY-LOC-RS01A aaa.bbb.113.152 4 xxxxxx 0 0 0 0 0 never Active 0 MY-LOC-RS01B Total number of neighbors 11 Thanks, Chris.

1 0

Expired certificate
by Erwan David 13 Sep '23

13 Sep '23

Hello, Going to https://deb.frrouting.org I get an expired certificate, in detail it is deb-ch.frrouting.org, certificate serial is 03:36:38:3B:C0:B1:87:4A:9F:42:F2:DB:C3:37:CE:87:2D:CC I cannot find the actual address used, but the DNS cache in my firefox gives addresses 2a07:e480:0:1::38 2a07:e480:2::1106 194.147.136.38 194.147.139.20 Hope this message will reach the right people -- Erwan David

2 1

Best Frr Version And Linux platform For Frr 40Gbps
by Ramin Malekgahsemi 11 Sep '23

11 Sep '23

Hi Dears I want Forward 40G To up 100G bps BW On Frr Please Suggest To me stable linux version and frr Version Fo this Capacity Thanks

1 0

Re: [FROG] [dev] FRR 9.0.1 and 8.5.3 Releases
by mike tancsa 08 Sep '23

08 Sep '23

Hi, I am guessing there is still no easy way to upgrade individual instances from 8.5.1 to 8.5.3 when ibgp is involved ? ie its a "do all at once" step ? https://lists.frrouting.org/pipermail/frog/2023-June/001283.html ---Mike On 9/8/2023 11:52 AM, Jafar Al-Gharaibeh via dev wrote: > _______________________________________________ > dev mailing list > dev(a)lists.frrouting.org > https://lists.frrouting.org/listinfo/dev

2 1