I am under a time crunch now and have to get things going. So with one of my routers, I copied the full bgpd.conf into frr.conf. I am receiving all routes from the remote peer, however, the only outgoing route they are getting from this config is the /24 subnet that the frr router lives in. The other 3 subnets that I have defined are not being propogated. Any ideas what would cause this and how to resolve would be appriciated. I've been searching for a frr.conf sample file on google I could use to compare to mine but coming up empty.
Doug Tucker
Sr. Director of Networking and Linux Operations
o: 817.975.5832
e: doug.tucker(a)navigaglobal.com
Newscycle Solutions is now Naviga. Learn more.
CONFIDENTIALITY NOTICE: The contents of this email message and any attachments are intended solely for the addressee(s) and may contain confidential and/or privileged information and may be legally protected from disclosure. If you are not the intended recipient of this message or their agent, or if this message has been addressed to you in error, please immediately alert the sender by reply email and then delete this message and any attachments. If you are not the intended recipient, you are hereby notified that any use, dissemination, copying, or storage of this message or its attachments is strictly prohibite
________________________________
From: frog <frog-bounces+doug.tucker=navigaglobal.com(a)lists.frrouting.org> on behalf of Doug Tucker via frog <frog(a)lists.frrouting.org>
Sent: Wednesday, June 12, 2024 12:39 PM
To: Donald Sharp <donaldsharp72(a)gmail.com>
Cc: frog(a)lists.frrouting.org <frog(a)lists.frrouting.org>
Subject: Re: [FROG] Migration scripts for FRR from Quagga
Naviga WARNING: External email. Please verify sender before opening attachments or clicking on links.
_______________________________________________
frog mailing list
frog(a)lists.frrouting.org
https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.frr…<https://lists.frrouting.org/listinfo/frog>
Hello
I'm experiencing high CPU usage on my RPKI process which is very odd. To
elaborate, I have two vyos boxes that have similar configuration for the
edge just handling BGP and OSPF to the core. On one of the routers I have
excessively high CPU usage and when checking the processes RPKI sits very
high compared to the other router.
FRR Version:
`*FRRouting 9.1.1 (za-ct-ter-dc-rt-edge-01) on Linux(6.6.43-amd64-vyos).*
*Copyright 1996-2005 Kunihiro Ishiguro, et al.configured with:
'--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include'
'--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info'
'--sysconfdir=/etc' '--localstatedir=/var' '--disable-option-checking'
'--disable-silent-rules' '--libdir=${prefix}/lib/x86_64-linux-gnu'
'--libexecdir=${prefix}/lib/x86_64-linux-gnu' '--disable-maintainer-mode'
'--localstatedir=/var/run/frr' '--sbindir=/usr/lib/frr'
'--sysconfdir=/etc/frr' '--with-vtysh-pager=/usr/bin/pager'
'--libdir=/usr/lib/x86_64-linux-gnu/frr'
'--with-moduledir=/usr/lib/x86_64-linux-gnu/frr/modules'
'--disable-dependency-tracking' '--enable-rpki' '--enable-scripting'
'--enable-pim6d' '--with-libpam' '--enable-doc' '--enable-doc-html'
'--enable-snmp' '--enable-fpm' '--disable-protobuf' '--disable-zeromq'
'--enable-ospfapi' '--enable-bgp-vnc' '--enable-multipath=256'
'--enable-user=frr' '--enable-group=frr' '--enable-vty-group=frrvty'
'--enable-configfile-mask=0640' '--enable-logfile-mask=0640'
'build_alias=x86_64-linux-gnu' 'PYTHON=python3'*
`
Here is my RPKI configuration on the router experiencing high process CPU
usage :
In Vtysh:
`*rpki*
* rpki cache cpt-rpki-validator-01.example.xyz
<http://cpt-rpki-validator-01.example.xyz> 3323 preference 1 rpki cache
cpt-rpki-validator-02.example.xyz
<http://cpt-rpki-validator-02.example.xyz> 8282 preference 2*
`
In VyOS:
`*set protocols rpki cache cpt-rpki-validator-01.example.xyz
<http://cpt-rpki-validator-01.example.xyz> port '3323'*
* set protocols rpki cache cpt-rpki-validator-01.example.xyz
<http://cpt-rpki-validator-01.example.xyz> preference '1' set protocols
rpki cache cpt-rpki-validator-02.example.xyz
<http://cpt-rpki-validator-02.example.xyz> port '8282' set protocols rpki
cache cpt-rpki-validator-02.example.xyz
<http://cpt-rpki-validator-02.example.xyz> preference '2'*
* set protocols rpki polling-period '3600*
`
The only thing different on the other box is that the server preference is
inverted. RPKI servers are running routinator and stayRTR, the router with
the issue preferences routinator. See below showing that it is the most
intensive process on the CPU :
[image: image.png]
Would be greatly appreciated if anyone could advise.
