- frog - lists.frrouting.org

OSPF Adjacency Behavior with BFD Shutdown State
by Jagadeesh Banavara 24 Jul '25

24 Jul '25

Hi, I’ve observed a behavior and wanted to check if there’s a recommended approach or configuration to address it. When a BFD profile transitions to the shutdown state (admin down), it correctly brings down the OSPF adjacency. However, after a few seconds, the adjacency is re-established—even though the BFD session remains down. In contrast, BGP has a ‘strict' mode that prevents session establishment until the BFD session is up. Is there a similar mechanism or means available in FRR to keep OSPF down as long as the associated BFD session is in the down state? Any guidance or suggestions would be greatly appreciated. Thanks, Jagadeesh

1 0

BGPD advertises IPv4 prefixes when only IPv6 peer is up
by Richard Klingler 22 Jul '25

22 Jul '25

Good afternoon (o; New to FRR running two VM Debian 12 instances with FRR 10.4.0 for testing BGP setups. On each side I have v4 and v6 peers configured, but v4 is in admin shut state. But I see IPv4 prefix being advertised over the v6 BGP session. Is that a normal behaviour in FRR? thanks in advance richard

2 2

Fwd: Request to Join FRRouting Community Workspace
by Selvamani Ramasamy 30 Jun '25

30 Jun '25

Hi, I am not sure about how to contact the workspace administrator at FRRouting. for an invitation. Hence, sending the request to this e-mail list. It will be great if you do the needful for below request. Regards, Selva ---------- Forwarded message --------- From: Selvamani Ramasamy <selva(a)nexthop.ai> Date: Sat, Jun 28, 2025 at 4:13 PM Subject: Request to Join FRRouting Community Workspace To: <frr(a)lists.frrouting.org> Dear FRR Community Maintainers, I am Selva, currently working for nexthop.ai (https://nexthop.ai - a company mainly focussing on building AI infrastructure), and we are interested in contributing to the FRRouting project. I noticed that my company is not listed on the FRR community sign-in page. Could you kindly guide me on how to receive an invitation to the FRRouting community workspace or Slack (if available)? We are keen to collaborate and discuss ideas. Looking forward to your response. Best regards, Selva [https://www.linkedin.com/in/selvamani-ramasamy-3a53139/]

1 0

Fwd: Request to Join FRRouting Community Workspace
by Selvamani Ramasamy 30 Jun '25

30 Jun '25

Hi, I am not sure about the e-mail contact for this request. It will be great if you do the needful for below request. Regards, Selva ---------- Forwarded message --------- From: Selvamani Ramasamy <selva(a)nexthop.ai> Date: Sat, Jun 28, 2025 at 4:13 PM Subject: Request to Join FRRouting Community Workspace To: <frr(a)lists.frrouting.org> Dear FRR Community Maintainers, I am Selva, currently working for nexthop.ai (https://nexthop.ai - a company mainly focussing on building AI infrastructure), and we are interested in contributing to the FRRouting project. I noticed that my company is not listed on the FRR community sign-in page. Could you kindly guide me on how to receive an invitation to the FRRouting community workspace or Slack (if available)? We are keen to collaborate and discuss ideas. Looking forward to your response. Best regards, Selva [https://www.linkedin.com/in/selvamani-ramasamy-3a53139/]

1 0

Issue with BFD/BGP Session Recovery on FRR 10.3 and Arista Router
by Julien Cosmao 26 Jun '25

26 Jun '25

Hi everyone, I have a setup with a BFD/BGP session between an FRR instance (version 10.3) and an Arista router. Generally, everything works well, and routes are learned correctly between the devices. However, during failure testing, specifically when the Arista device is reloaded, issues arise. In this scenario, the BGP and BFD sessions fail to establish properly. The FRR instance sends BFD packets (UDP 3784) to the peer while the Arista device attempts to establish a BGP session. FRR bgp state stay in Idle. >From the documentation, it seems that FRR operates like BFD strict mode ? refusing to establish BGP before the BFD session is up. Here is the relevant documentation link: https://docs.frrouting.org/en/latest/bfd.html#clicmd-neighbor-A.B.C.D-X-X-X… Here is a sample of my FRR conf: frr version 10.3 frr defaults traditional ! hostname frr1 ! ! Setup logging log daemon bgpd file /var/log/frr/bgpd.log debugging log daemon bfdd file /var/log/frr/bfdd.log debugging ! debug bgp updates debug bgp neighbor-events debug bgp keepalives debug bgp bfd debug bfd distributed debug bfd peer debug bfd network router bgp 64512 bgp router-id 192.168.0.5 no bgp default ipv4-unicast neighbor PG_EDGE_V4 peer-group neighbor PG_EDGE_V4 remote-as 64534 neighbor PG_EDGE_V4 bfd neighbor PG_EDGE_V4 bfd profile edge neighbor 192.168.0.1 peer-group PG_EDGE_V4 neighbor 192.168.0.2 peer-group PG_EDGE_V4 ! address-family ipv4 unicast neighbor PG_EDGE_V4 activate neighbor PG_EDGE_V4 addpath-tx-all-paths neighbor PG_EDGE_V4 soft-reconfiguration inbound exit-address-family ! ! bfd profile edge detect-multiplier 8 transmit-interval 500 receive-interval 500 exit ! peer 192.168.0.1 profile edge exit ! peer 192.168.0.2 profile edge exit ! ! exit ! end The only way I have found to recover the sessions is to disable and then re-enable BFD on the router BGP configuration: configure terminal router bgp 64512 no neighbor PG_EDGE_V4 bfd no neighbor PG_EDGE_V4 bfd profile edge do clear bgp external neighbor PG_EDGE_V4 bfd neighbor PG_EDGE_V4 bfd profile edge Has anyone encountered a similar issue or have suggestions on how to resolve this? Thank you in advance for your help. Regards, Julien

1 0

Help with Key Chain encryption
by Patel, Rajen L. 12 Jun '25

12 Jun '25

I am running FRR 7.3 for RHEL 8 and implementing a key chain as follows: key chain ospf-1 key 1 key-string <MyPassword> cryptographic-algorithm hmac-sha-384 When I issue the 'cryptographic-algorithm hmac-sha-384' command, I get an error 'Validation'. If I use 256, it accepts the command but both 384 and 512 fail. How can I fix this? Thanks Rajen Patel

1 0

OSFP Bug in pfSense 2.8.0
by Mark Tinka 12 Jun '25

12 Jun '25

If anyone comes across OSPF failing to start after rebooting into pfSense 2.8.0, here you go: https://forum.netgate.com/topic/197642/2-8-0-ospf-route-propagation-fails-a… Worked well for me. Mark.

1 0

Re: [FROG] RPKI process efficiency
by Celsa Sanchez 20 May '25

20 May '25

Hi, I'm also experiencing high CPU usage after enabling RPKI validation in FRR. I'm running version 9.0.1 on Ubuntu 20.04.6 LTS. Additionally, I'm having trouble stopping the RPKI validation using `vtysh`. Is there any known issue with this version, or recommended steps to properly reset or disable RPKI? Any suggestions would be appreciated. Best regards, Celsa Sánchez El lun, 25 nov 2024 a las 5:43, Darshan Kowlaser via frog (< frog(a)lists.frrouting.org>) escribió: > > > > ---------- Forwarded message ---------- > From: Darshan Kowlaser <darshan(a)darshankowlaser.com> > To: frog(a)lists.frrouting.org > Cc: > Bcc: > Date: Mon, 25 Nov 2024 10:22:11 +0200 > Subject: RPKI process efficiency > Hello > > I'm experiencing high CPU usage on my RPKI process which is very odd. To > elaborate, I have two vyos boxes that have similar configuration for the > edge just handling BGP and OSPF to the core. On one of the routers I have > excessively high CPU usage and when checking the processes RPKI sits very > high compared to the other router. > > FRR Version: > `*FRRouting 9.1.1 (za-ct-ter-dc-rt-edge-01) on Linux(6.6.43-amd64-vyos).* > > > *Copyright 1996-2005 Kunihiro Ishiguro, et al.configured with: > '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include' > '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' > '--sysconfdir=/etc' '--localstatedir=/var' '--disable-option-checking' > '--disable-silent-rules' '--libdir=${prefix}/lib/x86_64-linux-gnu' > '--libexecdir=${prefix}/lib/x86_64-linux-gnu' '--disable-maintainer-mode' > '--localstatedir=/var/run/frr' '--sbindir=/usr/lib/frr' > '--sysconfdir=/etc/frr' '--with-vtysh-pager=/usr/bin/pager' > '--libdir=/usr/lib/x86_64-linux-gnu/frr' > '--with-moduledir=/usr/lib/x86_64-linux-gnu/frr/modules' > '--disable-dependency-tracking' '--enable-rpki' '--enable-scripting' > '--enable-pim6d' '--with-libpam' '--enable-doc' '--enable-doc-html' > '--enable-snmp' '--enable-fpm' '--disable-protobuf' '--disable-zeromq' > '--enable-ospfapi' '--enable-bgp-vnc' '--enable-multipath=256' > '--enable-user=frr' '--enable-group=frr' '--enable-vty-group=frrvty' > '--enable-configfile-mask=0640' '--enable-logfile-mask=0640' > 'build_alias=x86_64-linux-gnu' 'PYTHON=python3'* > ` > > Here is my RPKI configuration on the router experiencing high process CPU > usage : > > In Vtysh: > `*rpki* > > * rpki cache cpt-rpki-validator-01.example.xyz > <http://cpt-rpki-validator-01.example.xyz> 3323 preference 1 rpki cache > cpt-rpki-validator-02.example.xyz > <http://cpt-rpki-validator-02.example.xyz> 8282 preference 2* > ` > > In VyOS: > `*set protocols rpki cache cpt-rpki-validator-01.example.xyz > <http://cpt-rpki-validator-01.example.xyz> port '3323'* > > > > * set protocols rpki cache cpt-rpki-validator-01.example.xyz > <http://cpt-rpki-validator-01.example.xyz> preference '1' set protocols > rpki cache cpt-rpki-validator-02.example.xyz > <http://cpt-rpki-validator-02.example.xyz> port '8282' set protocols rpki > cache cpt-rpki-validator-02.example.xyz > <http://cpt-rpki-validator-02.example.xyz> preference '2'* > * set protocols rpki polling-period '3600* > ` > > The only thing different on the other box is that the server preference is > inverted. RPKI servers are running routinator and stayRTR, the router with > the issue preferences routinator. See below showing that it is the most > intensive process on the CPU : > > [image: image.png] > > Would be greatly appreciated if anyone could advise. > > > > ---------- Forwarded message ---------- > From: Darshan Kowlaser via frog <frog(a)lists.frrouting.org> > To: frog(a)lists.frrouting.org > Cc: > Bcc: > Date: Mon, 25 Nov 2024 10:22:11 +0200 > Subject: [FROG] RPKI process efficiency > _______________________________________________ > frog mailing list > frog(a)lists.frrouting.org > https://lists.frrouting.org/listinfo/frog >

2 2

Backport LDPD "disable-establish-hello"
by Andrii Melnychenko 05 May '25

05 May '25

Hi, currently I'm using 9.3 and 10.2 versions with a custom patch including the "disable-establish-hello" feature ( https://github.com/FRRouting/frr/pull/18417) Is it reasonable/possible to backport the LDPD "disable-establish-hello" feature to the older FRR version? If needed, I can provide the patch.

1 0

Behavior of multiple match inside one route-map command
by Willy Manga 30 Apr '25

30 Apr '25

Hi, If I have more than one 'match' clause inside a route-map, how does the route-map work? - is an 'AND' applied - is an 'OR' applied For instance route-map rm-UPSTREAM-IN permit 10 match peer 2001:db8::1 match ipv6 address prefix-list pl-DEFAULT-IPv6 set local-preference 250 Will FRR apply the local-preference when the 2 conditions match ? Thanks in advance. -- Willy Manga

1 1