- frog - lists.frrouting.org

OSFP Bug in pfSense 2.8.0
by Mark Tinka 12 Jun '25

12 Jun '25

If anyone comes across OSPF failing to start after rebooting into pfSense 2.8.0, here you go: https://forum.netgate.com/topic/197642/2-8-0-ospf-route-propagation-fails-a… Worked well for me. Mark.

1 0

Re: [FROG] RPKI process efficiency
by Celsa Sanchez 20 May '25

20 May '25

Hi, I'm also experiencing high CPU usage after enabling RPKI validation in FRR. I'm running version 9.0.1 on Ubuntu 20.04.6 LTS. Additionally, I'm having trouble stopping the RPKI validation using `vtysh`. Is there any known issue with this version, or recommended steps to properly reset or disable RPKI? Any suggestions would be appreciated. Best regards, Celsa Sánchez El lun, 25 nov 2024 a las 5:43, Darshan Kowlaser via frog (< frog(a)lists.frrouting.org>) escribió: > > > > ---------- Forwarded message ---------- > From: Darshan Kowlaser <darshan(a)darshankowlaser.com> > To: frog(a)lists.frrouting.org > Cc: > Bcc: > Date: Mon, 25 Nov 2024 10:22:11 +0200 > Subject: RPKI process efficiency > Hello > > I'm experiencing high CPU usage on my RPKI process which is very odd. To > elaborate, I have two vyos boxes that have similar configuration for the > edge just handling BGP and OSPF to the core. On one of the routers I have > excessively high CPU usage and when checking the processes RPKI sits very > high compared to the other router. > > FRR Version: > `*FRRouting 9.1.1 (za-ct-ter-dc-rt-edge-01) on Linux(6.6.43-amd64-vyos).* > > > *Copyright 1996-2005 Kunihiro Ishiguro, et al.configured with: > '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include' > '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' > '--sysconfdir=/etc' '--localstatedir=/var' '--disable-option-checking' > '--disable-silent-rules' '--libdir=${prefix}/lib/x86_64-linux-gnu' > '--libexecdir=${prefix}/lib/x86_64-linux-gnu' '--disable-maintainer-mode' > '--localstatedir=/var/run/frr' '--sbindir=/usr/lib/frr' > '--sysconfdir=/etc/frr' '--with-vtysh-pager=/usr/bin/pager' > '--libdir=/usr/lib/x86_64-linux-gnu/frr' > '--with-moduledir=/usr/lib/x86_64-linux-gnu/frr/modules' > '--disable-dependency-tracking' '--enable-rpki' '--enable-scripting' > '--enable-pim6d' '--with-libpam' '--enable-doc' '--enable-doc-html' > '--enable-snmp' '--enable-fpm' '--disable-protobuf' '--disable-zeromq' > '--enable-ospfapi' '--enable-bgp-vnc' '--enable-multipath=256' > '--enable-user=frr' '--enable-group=frr' '--enable-vty-group=frrvty' > '--enable-configfile-mask=0640' '--enable-logfile-mask=0640' > 'build_alias=x86_64-linux-gnu' 'PYTHON=python3'* > ` > > Here is my RPKI configuration on the router experiencing high process CPU > usage : > > In Vtysh: > `*rpki* > > * rpki cache cpt-rpki-validator-01.example.xyz > <http://cpt-rpki-validator-01.example.xyz> 3323 preference 1 rpki cache > cpt-rpki-validator-02.example.xyz > <http://cpt-rpki-validator-02.example.xyz> 8282 preference 2* > ` > > In VyOS: > `*set protocols rpki cache cpt-rpki-validator-01.example.xyz > <http://cpt-rpki-validator-01.example.xyz> port '3323'* > > > > * set protocols rpki cache cpt-rpki-validator-01.example.xyz > <http://cpt-rpki-validator-01.example.xyz> preference '1' set protocols > rpki cache cpt-rpki-validator-02.example.xyz > <http://cpt-rpki-validator-02.example.xyz> port '8282' set protocols rpki > cache cpt-rpki-validator-02.example.xyz > <http://cpt-rpki-validator-02.example.xyz> preference '2'* > * set protocols rpki polling-period '3600* > ` > > The only thing different on the other box is that the server preference is > inverted. RPKI servers are running routinator and stayRTR, the router with > the issue preferences routinator. See below showing that it is the most > intensive process on the CPU : > > [image: image.png] > > Would be greatly appreciated if anyone could advise. > > > > ---------- Forwarded message ---------- > From: Darshan Kowlaser via frog <frog(a)lists.frrouting.org> > To: frog(a)lists.frrouting.org > Cc: > Bcc: > Date: Mon, 25 Nov 2024 10:22:11 +0200 > Subject: [FROG] RPKI process efficiency > _______________________________________________ > frog mailing list > frog(a)lists.frrouting.org > https://lists.frrouting.org/listinfo/frog >

2 2

Backport LDPD "disable-establish-hello"
by Andrii Melnychenko 05 May '25

05 May '25

Hi, currently I'm using 9.3 and 10.2 versions with a custom patch including the "disable-establish-hello" feature ( https://github.com/FRRouting/frr/pull/18417) Is it reasonable/possible to backport the LDPD "disable-establish-hello" feature to the older FRR version? If needed, I can provide the patch.

1 0

Behavior of multiple match inside one route-map command
by Willy Manga 01 May '25

01 May '25

Hi, If I have more than one 'match' clause inside a route-map, how does the route-map work? - is an 'AND' applied - is an 'OR' applied For instance route-map rm-UPSTREAM-IN permit 10 match peer 2001:db8::1 match ipv6 address prefix-list pl-DEFAULT-IPv6 set local-preference 250 Will FRR apply the local-preference when the 2 conditions match ? Thanks in advance. -- Willy Manga

1 1

Re: [FROG] Prefix import control from EVPN into VRF
by Alexis BAUVIN 09 Apr '25

09 Apr '25

Hi, "advertise ipvX unicast" will also turn on importing routes into the vrf. This setting is actually bidirectional. Regards, Alexis Le mar. 8 avr. 2025 à 18:06, Iakov Shiriaev via frog <frog(a)lists.frrouting.org> a écrit : > > > > > ---------- Forwarded message ---------- > From: Iakov Shiriaev <yakov(a)nebius.com> > To: "frog(a)lists.frrouting.org" <frog(a)lists.frrouting.org> > Cc: > Bcc: > Date: Tue, 18 Mar 2025 16:38:01 +0000 > Subject: Prefix import control from EVPN into VRF > Hello, > I'm looking at EVPN configuration in FRRouting and can't find one particular peace. > Under "l2vpn evpn" address family there's an "advertise ipvX unicast" command to start exporting from VRF into EVPN table. This command can also accept a route-map to control what's exported. > However, I don't see anything that can control a different direction, i.e. import into VRF. Did I miss it or is it not supported? > > Yakov Shiryaev, > Network engineer > Nebius > > > > ---------- Forwarded message ---------- > From: Iakov Shiriaev via frog <frog(a)lists.frrouting.org> > To: "frog(a)lists.frrouting.org" <frog(a)lists.frrouting.org> > Cc: > Bcc: > Date: Tue, 18 Mar 2025 16:38:01 +0000 > Subject: [FROG] Prefix import control from EVPN into VRF > _______________________________________________ > frog mailing list > frog(a)lists.frrouting.org > https://lists.frrouting.org/listinfo/frog

1 0

Prefix import control from EVPN into VRF
by Iakov Shiriaev 18 Mar '25

18 Mar '25

Hello, I'm looking at EVPN configuration in FRRouting and can't find one particular peace. Under "l2vpn evpn" address family there's an "advertise ipvX unicast" command to start exporting from VRF into EVPN table. This command can also accept a route-map to control what's exported. However, I don't see anything that can control a different direction, i.e. import into VRF. Did I miss it or is it not supported? Yakov Shiryaev, Network engineer Nebius

1 0

FRR t-ldp support
by Ilan Dadon 17 Mar '25

17 Mar '25

Hi we need to implement targeted ldp , is FRR package supports this ? Is there any document describing the configuration & operation ? Thanks Ilan Dadon SW Manager, R&D T: +972-3-766-8798 | M: +972-54-669-5789 | F: +972-3-647-5924 | ilan_d(a)rad.com<mailto:ilan_d@rad.com> RAD Data Communications Ltd. 24, Raoul Wallenberg St. Tel-Aviv 69719, Israel | www.rad.com<http://www.rad.com/>

1 0

Help regarding CLIs for RFC7432(EVPN-MPLS) using FRR Package
by Mahesh Krishnegowda 14 Mar '25

14 Mar '25

Hi , I am trying to find a config guide using FRR package for the complete configuration details of EVPN-MPLS and I am unable to find it. Your help is highly appreciated in finding proper documentation about test topology, configuration and any scripts involved.. More specifically about EVPN instance creation , ESID config and the attachment circuit config etc . -Thanks Mahesh ________________________________ Confidentiality Notice: This e-mail is strictly confidential and intended only for the person or entity to which it is addressed. It may contain information that is privileged, confidential or otherwise protected from disclosure. If you are not the intended recipient, you must not copy, disclose, distribute or take any action in reliance on information contained in this e-mail. If you have received this e-mail in error, please notify the sender by return e-mail and destroy the original message and all copies thereof.

1 0

Re: [FROG] Migration scripts for FRR from Quagga
by Doug Tucker 13 Mar '25

13 Mar '25

I am under a time crunch now and have to get things going. So with one of my routers, I copied the full bgpd.conf into frr.conf. I am receiving all routes from the remote peer, however, the only outgoing route they are getting from this config is the /24 subnet that the frr router lives in. The other 3 subnets that I have defined are not being propogated. Any ideas what would cause this and how to resolve would be appriciated. I've been searching for a frr.conf sample file on google I could use to compare to mine but coming up empty. Doug Tucker Sr. Director of Networking and Linux Operations o: 817.975.5832 e: doug.tucker(a)navigaglobal.com Newscycle Solutions is now Naviga. Learn more. CONFIDENTIALITY NOTICE: The contents of this email message and any attachments are intended solely for the addressee(s) and may contain confidential and/or privileged information and may be legally protected from disclosure. If you are not the intended recipient of this message or their agent, or if this message has been addressed to you in error, please immediately alert the sender by reply email and then delete this message and any attachments. If you are not the intended recipient, you are hereby notified that any use, dissemination, copying, or storage of this message or its attachments is strictly prohibite ________________________________ From: frog <frog-bounces+doug.tucker=navigaglobal.com(a)lists.frrouting.org> on behalf of Doug Tucker via frog <frog(a)lists.frrouting.org> Sent: Wednesday, June 12, 2024 12:39 PM To: Donald Sharp <donaldsharp72(a)gmail.com> Cc: frog(a)lists.frrouting.org <frog(a)lists.frrouting.org> Subject: Re: [FROG] Migration scripts for FRR from Quagga Naviga WARNING: External email. Please verify sender before opening attachments or clicking on links. _______________________________________________ frog mailing list frog(a)lists.frrouting.org https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.frr…<https://lists.frrouting.org/listinfo/frog>

3 9

Automatically switch default route to secondary uplink when primary uplink is unavailable
by Thomas Glanzmann 08 Mar '25

08 Mar '25

Hello, I have dark fibre with a static ip and a DSL line behind a NAT box. I would like to have the default route on the dark fibre and switch to the DSL line when the dark fibre is unavailable. I determine if the line is available by ping 1.1.1.1 and 8.8.8.8. I implemented the above in perl, but wonder if I reimplemented the wheel and this is already possible with frr, bird or another piece of software on Linux? Here I don't have BGP available. Find my perl Daemon here (public IPs changed), it runs every minute by cron. https://tg.st/u/genericrouteswitcher.pl Cheers, Thomas

1 0