- frog - lists.frrouting.org

BGP on FreeBSD: Feature Parity with Linux?
by Christoph 18 Oct '19

18 Oct '19

Hello, recently we started using BIRD as BGP daemon, but since we realized that BIRD has some (security) limitations on FreeBSD 12 [1] (when compared to Linux) we are looking for an alternative and consider switching to FRR 7.2 Therefore we wanted to verify that FRR does not have similar limitations. We found some platform specific information in the documentation here: http://docs.frrouting.org/en/latest/overview.html#supported-protocols-vs-pl… (vrrp has not been added yet) but would have some additional questions: - Should we expect any (notable) differences of FRR on FreeBSD when compared to Linux that go beyond what is documented on the page mentioned above? Is FRR on BSD a second class citizen? - Does FRR (BGP) support ECMP on FreeBSD? http://docs.frrouting.org/en/latest/installation.html#cmdoption-configure-e… - What memory footprint should we expect on an FRR BGP router with two neighbors with a bgp fulltable each? - Does FRR support privilege dropping (on FreeBSD) or does it run as root entirely? I see zebra and bgpd runs as user 'frr' by default on FreeBSD, so I can answer this one myself (yes it drops privileges to a non-root user). answered via the documentation: - Does FRR's RPKI support include support for re-validation of affected routes after an RPKI ROA update or has it the same limitation as BIRD that requires re-validating all routes? [2] According to http://docs.frrouting.org/en/latest/bgp.html#prefix-origin-validation-using… this appears to be supported: > Updates from the RPKI cache servers are directly applied and path > selection is updated accordingly. (Soft reconfiguration must be > enabled for this to work). thanks, Christoph [1] https://bird.network.cz/pipermail/bird-users/2019-October/013845.html [2] https://bird.network.cz/?get_doc&v=20&f=bird-6.html#ss6.13 > BIRD should re-validate all of affected routes after RPKI update by > RFC 6811, but we don't support it yet! You can use a BIRD's client > command reload in bgp_protocol_name for manual call of revalidation > of all routes.

2 1

Should I remove LL IPv6 addresses from BGP peering?
by Rudy Rucker 16 Oct '19

16 Oct '19

When I do 'show bgp', I see multipath on all my routes... should I try to trim down table and only have non-LinkLocal addresses? Is this configurable in bgpd.conf, or should I remove the linkLocal from the interaface? Example: *= 2001::/32 2001:504:30::ba00:6939:1 0 108 0 6939 i * fe80::ce4e:24ff:fe1f:28d3 0 108 0 6939 i *> fe80::ce4e:24ff:fe1f:28d3 0 108 0 6939 i (IX has localpref of 108) Thanks for pointers on best practices with IPv6 and BGP, Rudy

2 1

7.2 Release
by Donald Sharp 16 Oct '19

16 Oct '19

I'd like to thank everyone who's helped with the 7.2 release. This is one of our largest releases yet! We are in the process of building release images. ------- 1016 commits, with 50 individual authors. ALL Daemons -N <namespace> to allow for config file locating when running FRR inside of a namespace Impoved Testing across all daemons BFD VRF Support Conversion to Northbound interface BGP Aggregate-address add route-map support BMP Support Improved JSON output for many commands `show bgp afi safi summary failed` command `clear bop *` clears all peers Show FQDN for `show bgp ipv4 uni` commands Display BestPath selection reason as part of show commands EIGRP Infrastructure changes to allow VRF’s SIGHUP signals the config reload Conversion to Northbound interface ISIS BFD Support Support for circuits with MTU > 8192 PBRD fwmark support as part of match criteria autocompletion of PBRMAPS Improved Nexthop Support PIMD PIM-BSM receive support Improved debugging support Store ECMP paths that are not currently legal for use Disallow igmp query from a non-connected source Many new cli improvements and changes VRRPD Add Support for RFC 3768 and RFC 5798 Route-Maps Add sequence numbers to access-lists Add `match ip next-hop type blackhole` Improved ability to notice dependency changes SHARPD `sharp watch [import|nexthop]` you can now specify a prefix instead of a ssuming a /32 STATICD Significantly Improved NHT ZEBRA Many dataplane improvements for routes, neighbor table and EVPN NHT cli can now be specified per VRF and improved ability to control NHT data being shown Removed duplicate processing of routes Improved debugablility RMAC and VxLan support for the FPM LIB RCU support Nexthop Group Improvements `log-filter WORD` added Building openssl support libcap should be used as part of build or significant slowdowns will be experienced Lua builds have been fixed Improved Cross building Snapcraft Add Fabricd Add Libyang Update rtrlib and rpki Authors: Ameya Dharkar Anuradha Karuppiah Ashish Pant Chiu Bi-Ruei Binu Abraham Biswajit Sadhu btarno Chirag Shah Christian Franke David Lamparter Dinesh Dutt Don Slice Donald Sharp Donatas Abraitis Dmitrii Turlupov Emanuele Di Pascale Faicker Mo Igor Ryzhov Jafar Al-Gharaibeh Juergen Werner Kishore Aramalla Lakshman Krishnamoorthy Lou Berger Marcel Röthke Marcin Matląg Mark Stapp Martin Winter Matthew Smith Michal Ruprich Naveen Thanikachalam Nikos Triantafillis Nitin Soni Pawel Dembicki Philippe Guibert Quentin Young Quentin Young Rafael Zalamena Renato Westphal Rajesh Girada Rob Gil Saravanan K Sarita Patra Satheesh Kumar K Soman K S

1 0

ospf6d issues (crashes getting routes from my network)
by Rudy Rucker 12 Oct '19

12 Oct '19

I just upgraded from FreeBSD 11 to 12 and upgrade from quagga to FRR at the same time. bgpd and ospfd work fine, but ospf6 doesn't work. Not sure what I'm going wrong. Here is the output from zebra and ospf6. If I commend out all the interfaces EXCEPT lo0, ospf6d does not crash. router ospf6 ospf6 router-id 172.17.18.98 redistribute connected route-map MONKEY-ospf6 redistribute static route-map MONKEY-AND-MORE-ospf6 !interface cxl1 area 0.0.0.0 !interface cxl2 area 0.0.0.0 !interface cxl3 area 0.0.0.0 interface lo0 area 0.0.0.0 As soon as I get routes from my network, ospf6d tanks. Any thoughts? *** LOGS *** 2019/10/10 23:19:31 OSPF6: Scheduling cxl1 for sso 2019/10/10 23:19:31 OSPF6: SPF: Scheduled in 0 msec 2019/10/10 23:19:31 OSPF6: SPF processing: # Areas: 1, SPF runtime: 0 sec 5 usec, Reason: L+ 2019/10/10 23:19:31 OSPF6: Scheduling cxl2 for sso 2019/10/10 23:19:31 OSPF6: SPF: Scheduled in 50 msec 2019/10/10 23:19:31 OSPF6: Scheduling cxl3 for sso 2019/10/10 23:19:31 OSPF6: Neighbor state change 172.17.24.25%cxl3: [Down]->[Init] (HelloReceived) 2019/10/10 23:19:31 OSPF6: Neighbor state change 172.17.24.25%cxl3: [Init]->[ExStart] (2-WayReceived) 2019/10/10 23:19:31 OSPF6: Neighbor state change 172.17.24.25%cxl3: [ExStart]->[ExChange] (NegotiationDone) 2019/10/10 23:19:31 OSPF6: Neighbor state change 172.17.24.25%cxl3: [ExChange]->[Loading] (ExchangeDone) 2019/10/10 23:19:31 OSPF6: SPF processing: # Areas: 1, SPF runtime: 0 sec 109 usec, Reason: R+, R-, L+ 2019/10/10 23:19:31 OSPF6: SPF: Scheduled in 83 msec 2019/10/10 23:19:31 OSPF6: SPF processing: # Areas: 1, SPF runtime: 0 sec 116 usec, Reason: R+, N+, L+ 2019/10/10 23:19:33 OSPF6: Neighbor state change 10.8.254.122%cxl1: [Down]->[Init] (HelloReceived) 2019/10/10 23:19:33 OSPF6: Neighbor state change 10.8.254.122%cxl1: [Init]->[ExStart] (2-WayReceived) 2019/10/10 23:19:33 OSPF6: Neighbor state change 10.8.254.122%cxl1: [ExStart]->[ExChange] (NegotiationDone) 2019/10/10 23:19:33 OSPF6: Neighbor state change 10.8.254.122%cxl1: [ExChange]->[Loading] (ExchangeDone) 2019/10/10 23:19:33 OSPF6: SPF: Scheduled in 0 msec 2019/10/10 23:19:33 OSPF6: SPF processing: # Areas: 1, SPF runtime: 0 sec 99 usec, Reason: R+, R- 2019/10/10 23:19:36 OSPF6: Neighbor state change 172.17.24.25%cxl3: [Loading]->[Full] (LoadingDone) 2019/10/10 23:19:36 OSPF6: SPF: Scheduled in 0 msec 2019/10/10 23:19:31 ZEBRA: client 32 says hello and bids fair to announce only ospf6 routes vrf=0 2019/10/10 23:19:38 ZEBRA: [EC 4043309117] Client 'ospf6' encountered an error and is shutting down. 2019/10/10 23:19:38 ZEBRA: release_daemon_table_chunks: Released 0 table chunks 2019/10/10 23:19:38 ZEBRA: release_daemon_label_chunks: Released 0 label chunks 2019/10/10 23:19:39 ZEBRA: client 32 disconnected. 100 ospf6 routes removed from the rib *** CRASH *** If I run on the command line and don't background, it bombs after 7 seconds: # ospf6d Illegal instruction Here is the end of truss: # truss ospf6d ... mmap(0x0,4096,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANON,-1,0x0) = 34863378432 (0x81e04f000) mmap(0x0,4096,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANON,-1,0x0) = 34863382528 (0x81e050000) mmap(0x0,4096,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANON,-1,0x0) = 34863386624 (0x81e051000) mmap(0x0,4096,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANON,-1,0x0) = 34863390720 (0x81e052000) SIGNAL 11 (SIGSEGV) code=SEGV_ACCERR trapno=12 addr=0x7fffdffffff8 process killed, signal = 4 I wasn't seeing any CORE files when the process dumped, so I turned this knob: sysctl kern.sugid_coredump=1 Now there is a 1 GByte core file! # /usr/obj/usr/src/amd64.amd64/gnu/usr.bin/gdb/gdb/gdb /usr/local/sbin/ospf6d ospf6d.core (gdb) bt #0 0x000000080030678c in hash_get () from /usr/local/lib/libfrr.so.0 #1 0x000000080033a9b2 in route_node_lookup () from /usr/local/lib/libfrr.so.0 #2 0x0000000000241345 in ospf6_route_lookup () #3 0x000000000022e718 in ospf6_abr_examin_summary () #4 0x000000000022f13b in ospf6_abr_examin_brouter () #5 0x00000000002473ad in ospf6_top_init () #6 0x000000000022efda in ospf6_abr_examin_summary () #7 0x000000000022f13b in ospf6_abr_examin_brouter () #8 0x00000000002473ad in ospf6_top_init () #9 0x000000000022efda in ospf6_abr_examin_summary () #10 0x000000000022f13b in ospf6_abr_examin_brouter () #11 0x00000000002473ad in ospf6_top_init () .... lines #3 - #5 repeat to over #8500 ... I stopped hitting ENTER around there and quit. Any help would be appreciated. Rudy

3 6

CentOS7 and vxlan setup
by Chris Smith 23 Sep '19

23 Sep '19

Hi, I'm using frr 4 and I'm struggling to set up vxlans similar to the example here: http://docs.frrouting.org/en/latest/pim.html?highlight=vxlan#pim-evpn-confi… Using that config gives me a bunch of 'unknown command' errors because they are debian style interfaces. Switching what I can to the redhat style interface doesn't help, I still get stuck with 'vxlan-id' and 'vxlan-local-tunnelip' being unknown commands (let alone trying to get the bridge device working). My google fu is failing and the closest I came was https://lxadm.com/Unicast_VXLAN:_overlay_network_for_multiple_servers_with_… Though I'm not sure how I fit that together with frr. Does anyone have a complete example I can use with centos7? Thanks, -- Chris Smith System Administrator csmith(a)squiz.com.au Level 1, 435a Kent St, Sydney NSW 2000 P +61 2 9045 2800

2 1

BGP directory problem
by SHARIF, SHAHRIN 19 Sep '19

19 Sep '19

Hello, I am having problem configuring BGP. I need to go to the BGP directory I guess. Can you help me out to get into the directory? SHAHRIN SHARIF Graduate Research Assistant University Of South Carolina

2 1

how to get routing table entries with different src ip / from dummy interface?
by Stefan Priebe - Profihost AG 17 Sep '19

17 Sep '19

Hello list, i'm trying to get an linux kernel routing table entry like this one: # ip r get 52.218.237.186 52.218.237.186 via 192.0.2.2 dev br99 src 37.228.152.3 but frr always creates entries like this one: # ip r get 52.218.237.186 52.218.237.186 via 192.0.2.2 dev br99 src 192.0.2.3 37.228.152.3 is an ip of an dummy0 interface and 192.0.2.3 is the ip of br99. frr.conf: router bgp XXXXX bgp router-id 37.228.152.3 neighbor internal-bgp peer-group neighbor internal-bgp remote-as XXXXX neighbor internal-bgp capability dynamic neighbor 37.228.152.2 peer-group internal-bgp neighbor 37.228.152.2 description R2 neighbor 37.228.152.2 update-source dummy0 ! address-family ipv4 unicast neighbor 37.228.152.2 next-hop-self exit-address-family ! Greets, Stefan

2 4

Test
by Stefan Priebe - Profihost AG 17 Sep '19

17 Sep '19

-- Mit freundlichen Grüßen Stefan Priebe Bachelor of Science in Computer Science (BSCS) Vorstand (CTO) ------------------------------- Profihost AG Expo Plaza 1 30539 Hannover Deutschland Tel.: +49 (511) 5151 8181 | Fax.: +49 (511) 5151 8282 URL: http://www.profihost.com | E-Mail: info(a)profihost.com Sitz der Gesellschaft: Hannover, USt-IdNr. DE813460827 Registergericht: Amtsgericht Hannover, Register-Nr.: HRB 202350 Vorstand: Cristoph Bluhm, Stefan Priebe Aufsichtsrat: Prof. Dr. iur. Winfried Huck (Vorsitzender)

1 0

NoNeg on IPv6 only on BGP
by alpha_one_x86 05 Sep '19

05 Sep '19

Hi, I have NoNeg state on IPv6 only with this bgpd.conf: ! ! !interface eth2 ! ipv6 nd suppress-ra ! !interface lo ! router bgp 266671 bgp router-id 23.227.178.114 network 45.225.75.0/24 neighbor 23.227.177.1 remote-as 54540 neighbor 23.227.177.1 soft-reconfiguration inbound neighbor 23.227.177.1 ebgp-multihop 20 neighbor 2604:880:62::1 remote-as 54540 neighbor 2604:880:62::1 disable-connected-check neighbor 2604:880:62::1 ebgp-multihop 20 no bgp network import-check ! address-family ipv6 network 2803:1920::/32 neighbor 2604:880:62::1 activate exit-address-family ! address-family ipv4 network 45.225.75.0/24 neighbor 23.227.177.1 activate exit-address-family ! !ip forwarding !ipv6 forwarding ! line vty ! Any idea? -- alpha_one_x86/BRULE Herman <alpha_one_x86(a)first-world.info> Main developer of Supercopier/Ultracopier/CatchChallenger, Esourcing and server management IT, OS, technologies, research & development, security and business department

2 2

Question about PIM
by kevin-chiang 03 Sep '19

03 Sep '19

Dear developers, We have some questions about pimd: According to my test, seems FRR can't handle IGMPv3 report with exclude mode (system still forwards the specified multicast data packet which is received from exclude source IP) ==> Does FRR support IGMPv3 report with exclude mode?? ==> Or any bug fix plan in the future? If we enable IGMP only, then multicast data packet can't forward succeeded, seems we must enable PIM also. ==> Dose FRR have any plan to support only IGMP enable case?? Please guide us Thanks a lot BRs Kevin Loop Telecommunication International, Inc. www.looptelecom.com 8GESW is designed to transport Ethernet services over SDH/SONET networks (EoS). It provides eight GbE ports and a range of standard L2 switch functions, including VLAN, Q-in-Q, MAC learning, MSTP/RSTP, CoS and QoS, and etc. Ethernet bridging services include EPL, EVPL, and EPLAN. Max. bandwidth for SDH/SONET transportation is either STM-4/OC-12 or STM-16/OC-48. Dual 8GESW cards can be mounted simultaneously to achieve card-level protection. Protection switch happens within 50 ms without any traffic interruption. Traffic at the SDH/SONET side is further protected by SNCP/UPSR ring and MSP (1+1). For further arrangement and more information, please do not hesitate to contact Loop Telecom. "Migrating Legacy Networks to the Future"

2 1