- frog - lists.frrouting.org

high cpu usage because of 100s of ping to ospf peers by user frr
by neeraj kharbanda 06 Mar '20

06 Mar '20

Hi, i'd got a basic setup of ospf with 5 6 ospf neighbours. Everyon now and then there is very high cpu usage. Htop shows 100s of ping to ospf peers by user frr (just 5 to 8 peers). Other peers are mikrotik. Makes the system instable till kill all the pings. Its a pppoe server with 4000+ pppoe interfaces. Kindly help in resolving the problem. -- Thanks and Regards >From Chaos to Control Neeraj Kharbanda +919911145461

2 3

Zebra FIB update/withdrawal looping issue
by Templin (US), Fred L 25 Feb '20

25 Feb '20

I have a simple BGP configuration with one "hub" ASBR and two "spoke" ASBRs. The spoke ASBRs report IPv6 BGP routes to the hub, while the hub originates "default" to the spokes. So, the hub ASBR receives all advertised routes while the spokes receive only "default". When I run my network, BGP routes indeed show up at the hub ASBR and Zebra installs them in the FIB. However, after about 2-5 seconds, Zebra withdraws the routes and then about 2-5 seconds later it reinstalls them in the FIB again. This process recurs indefinitely even though there are no dynamic BGP protocol updates coming from the spokes. Any idea what could cause Zebra on the hub ASBR to loop and repeatedly install and withdraw the BGP routes? Thanks - Fred PS I am running the latest FRR release on Ubuntu 16.0.4.

1 0

What 'ge' 'le' really means ?
by Simon Jones 20 Feb '20

20 Feb '20

Hi all, In this command: > gyw-229(config)# ip prefix-list test_ipv4_1_1 seq 10 permit 192.18.8.0/24 > ge 24 > % Invalid prefix range for 192.18.8.0/24, make sure: len < ge-value <= > le-value > gyw-229(config)# ip prefix-list test_ipv4_1_1 seq 10 permit 192.18.8.0/24 > ge 25 we see 'ge' means greater. But in doc: > ge command specifies prefix length. The prefix list will be applied if the > prefix length is greater than or equal to the ge prefix length So what's 'ge' really means? And how to set equal command? Set equal command using 'ge xxx le xxx' before, but if 'ge' means greater, how to set? Use this command? > ip prefix-list test_ipv4_1_1 seq 10 permit 192.18.8.0/32 ---- Simon Jones

3 5

Fwd: trying to find example babeld.conf for use with FRR and Wireguard
by brian mullan 15 Feb '20

15 Feb '20

I have FRR and BGP working well with WireGuard but I'd really like to try Babled. However, I've searched the internet for a couple days now and the only babeld.conf files I've found are for openwrt use. Can anyone point me to an example babeld.conf for FRR that might work with WireGuard? thanks for any information or links. Brian

3 2

Changing BGP route map mid-session causes zebra to spin out of control
by Rudy Rucker 12 Feb '20

12 Feb '20

TL;DR: Having a '0.0.0.0/0 le 29' in a BGP prefix-list on a BGP session that has a full table can freak out zebra. If I go in and change a route-map, the box load goes to 100+ and starts dropping packets. The route-map had this prefix-list line ip prefix-list DEFAULT-IN-ip4 seq 99 permit 0.0.0.0/0 le 29 that seemed to break things, but changing it to: ip prefix-list DEFAULT-IN-ip4 seq 99 permit 0.0.0.0/0 le 24 fixes it. Repeatable: launch FRR with route-map COGENT-IN deny 10 match ip address prefix-list AS32329-ip4 route-map COGENT-IN permit 20 match ip address prefix-list COGENT-TEST-ONE-BLOCK set local-preference 100 set weight 101 Wait a few minutes, then change to route-map like this: orange(config)# route-map COGENT-IN permit 20 orange(config-route-map)# match ip address prefix-list DEFAULT-IN-ip4 orange(config-route-map)# set local-preference 100 orange(config-route-map)# set weight 101 And then load goes over 100 Here are the lists.... ip prefix-list COGENT-TEST-ONE-BLOCK seq 10 permit 38.0.0.0/8 le 24 ip prefix-list COGENT-TEST-ONE-BLOCK seq 20 deny any ip prefix-list DEFAULT-IN-ip4 seq 11 deny 10.0.0.0/8 le 32 ip prefix-list DEFAULT-IN-ip4 seq 12 deny 172.16.0.0/12 le 32 ip prefix-list DEFAULT-IN-ip4 seq 13 deny 192.168.0.0/16 le 32 ip prefix-list DEFAULT-IN-ip4 seq 14 deny 169.254.0.0/16 le 32 ip prefix-list DEFAULT-IN-ip4 seq 15 deny 127.0.0.0/8 le 32 ip prefix-list DEFAULT-IN-ip4 seq 99 permit 0.0.0.0/0 le 29 Output of truss on 'zebra' (I don't claim to really understand this output, other than reading 'Resource temporarily unavailable'. # truss -p 919 seteuid(0xa8) = 0 (0x0) read(6,"\M-H\0\^E\^B\^F\0\0\0B\M^@\0\0\a"...,1192) = 200 (0xc8) seteuid(0x0) = 0 (0x0) write(4,"\^A",1) = 1 (0x1) getrusage(RUSAGE_THREAD,{ u=27.163188,s=34.122484,in=5,out=7 }) = 0 (0x0) write(7,"\M-H\0\^E\^B\^F\0\0\0\^A\M^@\0\0"...,200) = 200 (0xc8) poll({ 6/POLLIN 12/POLLIN 15/POLLIN 16/POLLIN 3/POLLIN },5,0) = 2 (0x2) read(3,"\^A",64) = 1 (0x1) read(3,0x7fffffffe9b0,64) ERR#35 'Resource temporarily unavailable' write(7,"\M-H\0\^E\^A\^D\0\0\0\^C\M^@\0\0"...,200) = 200 (0xc8) seteuid(0xa8) = 0 (0x0) seteuid(0x0) = 0 (0x0) write(7,"\M-H\0\^E\^B\^F\0\0\0\^A\M^@\0\0"...,200) = 200 (0xc8) getrusage(RUSAGE_THREAD,{ u=27.163263,s=34.122484,in=5,out=7 }) = 0 (0x0) write(4,"\^A",1) = 1 (0x1) getrusage(RUSAGE_THREAD,{ u=27.163279,s=34.122484,in=5,out=7 }) = 0 (0x0) write(7,"\M-H\0\^E\^A\^D\0\0\0\^C\M^@\0\0"...,200) = 200 (0xc8) getrusage(RUSAGE_THREAD,{ u=27.163294,s=34.122484,in=5,out=7 }) = 0 (0x0) seteuid(0xa8) = 0 (0x0) read(6,"\M-H\0\^E\^A\^D\0\0\0C\M^@\0\0\a"...,1192) = 200 (0xc8) write(4,"\^A",1) = 1 (0x1) getrusage(RUSAGE_THREAD,{ u=27.163335,s=34.122484,in=5,out=7 }) = 0 (0x0) seteuid(0x0) = 0 (0x0) poll({ 6/POLLIN 12/POLLIN 15/POLLIN 16/POLLIN 3/POLLIN },5,0) = 2 (0x2) read(3,"\^A\^A",64) = 2 (0x2) read(3,0x7fffffffe9b0,64) ERR#35 'Resource temporarily unavailable' write(7,"\M-H\0\^E\^B\^F\0\0\0\^A\M^@\0\0"...,200) = 200 (0xc8) getrusage(RUSAGE_THREAD,{ u=27.163391,s=34.122484,in=5,out=7 }) = 0 (0x0) write(4,"\^A",1) = 1 (0x1) getrusage(RUSAGE_THREAD,{ u=27.163421,s=34.122484,in=5,out=7 }) = 0 (0x0) write(7,"\M-H\0\^E\^A\^D\0\0\0\^C\M^@\0\0"...,200) = 200 (0xc8) getrusage(RUSAGE_THREAD,{ u=27.163444,s=34.122484,in=5,out=7 }) = 0 (0x0) read(6,"\M-H\0\^E\^B\^F\0\0\0B\M^@\0\0\a"...,1192) = 200 (0xc8) seteuid(0xa8) = 0 (0x0) write(4,"\^A",1) = 1 (0x1) seteuid(0x0) = 0 (0x0) getrusage(RUSAGE_THREAD,{ u=27.163492,s=34.122484,in=5,out=7 }) = 0 (0x0) poll({ 6/POLLIN 12/POLLIN 15/POLLIN 16/POLLIN 3/POLLIN },5,0) = 2 (0x2) read(3,"\^A\^A",64) = 2 (0x2) write(7,"\M-H\0\^E\^B\^F\0\0\0\^A\M^@\0\0"...,200) = 200 (0xc8) read(3,0x7fffffffe9b0,64) ERR#35 'Resource temporarily unavailable' write(7,"\M-H\0\^E\^A\^D\0\0\0\^C\M^@\0\0"...,200) = 200 (0xc8) I'm not positive I figured this out... maybe it is late at night and traffic levels are down. Thanks, Rudy

1 0

Re: [FROG] Installing FRR on Ubuntu 18.04
by ian.2.oakley＠bt.com 10 Feb '20

10 Feb '20

Hi Nuno, I did that, and after a bit of sudo magic it's installed. Thank you. Regards, Ian -----Original Message----- From: Nuno Vieira <nuno(a)hashpower.pt> Sent: 10 February 2020 11:53 To: Oakley,I,Ian,TUS2 R <ian.2.oakley(a)bt.com> Subject: Re: [FROG] Installing FRR on Ubuntu 18.04 this below on a single line (just copy & paste properly) echo "deb https://deb.frrouting.org/frr bionic frr-stable" > /etc/apt/sources.list.d/frr.list Nuno Vieira # hashpower - datacenter and it services Leiria | Portugal p: +351308814400 e: nuno(a)hashpower.pt w: https://hashpower.pt ----- Original Message ----- > From: "ian 2 oakley" <ian.2.oakley(a)bt.com> > To: "Nuno Vieira" <nuno(a)hashpower.pt> > Cc: "frog" <frog(a)lists.frrouting.org> > Sent: Monday, 10 February, 2020 11:27:11 > Subject: RE: [FROG] Installing FRR on Ubuntu 18.04 > Hi Nuno, > > How would I alter the > > echo deb https://deb.frrouting.org/frr $(lsb_release -s -c) $FRRVER | > sudo tee -a /etc/apt/sources.list.d/frr.list > > command that currently produces > > deb https://deb.frrouting.org/frr bionic > > so that it produces > > deb https://deb.frrouting.org/frr bionic frr-stable > > or do I just manually rename the entries resulting from > > more /etc/apt/sources.list.d/frr.list > > Thanks in advance, > Ian > > -----Original Message----- > From: Nuno Vieira <nuno(a)hashpower.pt> > Sent: 10 February 2020 11:14 > To: Oakley,I,Ian,TUS2 R <ian.2.oakley(a)bt.com> > Cc: tim(a)provu.co.uk; frog <frog(a)lists.frrouting.org> > Subject: Re: [FROG] Installing FRR on Ubuntu 18.04 > > yo > > change that to: > > deb https://deb.frrouting.org/frr bionic frr-stable > > it will work then. > > cheers > > Nuno Vieira > > # hashpower - datacenter and it services Leiria | Portugal > > p: +351308814400 > e: nuno(a)hashpower.pt > w: https://hashpower.pt > > ----- Original Message ----- >> From: "ian 2 oakley" <ian.2.oakley(a)bt.com> >> To: tim(a)provu.co.uk >> Cc: "frog" <frog(a)lists.frrouting.org> >> Sent: Monday, 10 February, 2020 10:27:09 >> Subject: Re: [FROG] Installing FRR on Ubuntu 18.04 > >> Hi Tim, >> >> Did that, got this: >> >> deb https://deb.frrouting.org/frr bionic >> >> which doesn't seem wrong, but evidently it is. >> >> Hope that helps, >> Ian >> >> -----Original Message----- >> From: Tim Bray <tim(a)provu.co.uk> >> Sent: 07 February 2020 16:06 >> To: Oakley,I,Ian,TUS2 R <ian.2.oakley(a)bt.com> >> Cc: frog(a)lists.frrouting.org >> Subject: Re: [FROG] Installing FRR on Ubuntu 18.04 >> >> type >> >> more /etc/apt/sources.list.d/frr.list >> >> and copy and paste to email. So we can see what the problem is. >> >> Tim >> >> On 07/02/2020 15:11, ian.2.oakley(a)bt.com wrote: >>> E: Malformed entry 1 in list file /etc/apt/sources.list.d/frr.list >>> (Component) >>> E: The list of sources could not be read. >> _______________________________________________ >> frog mailing list >> frog(a)lists.frrouting.org > > https://lists.frrouting.org/listinfo/frog

1 0

Installing FRR on Ubuntu 18.04
by ian.2.oakley＠bt.com 10 Feb '20

10 Feb '20

Hi all, I've been trying to reinstall FRR on my Ubuntu 18.04 virtual machine, following the instructions given in the official guidance (http://docs.frrouting.org/projects/dev-guide/en/latest/building-frr-for-ubu…) but when I do I get the following error on the sudo make install stage: configure: error: libyang needs to be compiled with ENABLE_LYD_PRIV=ON. Instructions for this are included in the build documentation for your platform at http://docs.frrouting.org/projects/dev-guide/en/latest/building.html Having installed libyang from source with ENABLE_LYD_PRIV=ON, I'm not sure what's occurring. Does libyang need to be installed into the FRR directory for it to work properly? Best regards Ian Oakley Research Specialist IoT Security +44 (0)1473 626841 [EmailSigLogo] This email contains information from BT that might be privileged or confidential. And it's only meant for the person above. If that's not you, we're sorry - we must have sent it to you by mistake. Please email us to let us know, and don't copy or forward it to anyone else. Thanks. We monitor our email systems and may record all our emails. British Telecommunications plc R/O : 81 Newgate Street, London EC1A 7AJ Registered in England: No 1800000

4 7

回复：frog Digest, Vol 34, Issue 11
by xiaoyu＠ongod.org 08 Feb '20

08 Feb '20

1 0

WireGuard CKR key from BGP dupport
by Алексей 01 Feb '20

01 Feb '20

As an idea to implement key exchange through ckr by bgp from WireGuard?

1 0

Dual Core Design
by Travis Garrison 27 Jan '20

27 Jan '20

Trying to make sure I have the design down. We have 2 cores and 2 upstream connections. We also have a cross connect to an IX off 1 core. What would be the best way to configure iBGP between the cores so that we would gain the benefit of the IX from both cores and concurrent/failover usage from both upstream providers. Both upstream providers are the same speed and we advertise our networks to both in a multihomed scenario. We may be adding a 3rd core/upstream provider in the future. Core1 connects to ISP1 (full table) and IX Core2 connects to ISP2 (full table) All edge routers have an iBGP connection to both core routers and receive default routes only. Debian 10 FRR 7.2 Thanks Travis

1 0