- frog - lists.frrouting.org

Static VRF Route Leaking
by Donald Sharp 23 Jan '18

23 Jan '18

All - I'd like to thanks Philippe Guibert, Lou Berger, Renato Westphal and Russ White working with me to get static route leaking into the FRR code base on master. To configure: vrf DONNA ip route 4.3.2.1/32 99.1.2.3 nexthop-vrf EVA ! vrf EVA ip route 9.1.2.3/32 44.3.2.4 nexthop-vrf DONNA ! These two commands create a static route that leaks the nexthops into the appropriate vrf's. At this point in time, BGP has not been modified to take advantage of vrf route leaking in the traditional manner, but the underpinnings in zebra and the zapi protocol are now there. donald

1 0

layer-2 vxlan discovery w/ EVPN question
by Henry Snow 20 Jan '18

20 Jan '18

I have a bare metal hosting provider that provides me with layer-3 networking to every server. For some applications, I require a layer-2 network spanning the servers. This network is for the applications running on the server OS, not via VM or container tennants. I've been following this blog post: https://vincent.bernat.im/en/blog/2017-vxlan-bgp-evpn, using frr 3.1dev from git master from several nights ago. I believe I have the route reflector + vteps configured with respect to bgpd as described, but no routes are advertised. I do see bgp neighbors as expected. When I run 'show evpn mac vni 100', I do not see any mac addresses. My suspicion is that it is because I'm not using a bridge, but assigning an IP address directly to the vxlan interface. Looking at the source code (my C is very rusty), it looks like it enumerates all the VNIs, finds the bridges they're slaved to, then enumerates the interfaces on the bridge. I'm looking at this: https://github.com/FRRouting/frr/blob/8eac4812601f069f14fc7950e10904c2ae0ae… Is there a way to configure my interfaces without a bridge (or is this a bad approach)? If a bridge and additional slaved interface is required, any suggestions on how to configure the bridge with no additional tenants on the servers? Additional Thoughts: - using static unicast discovery, vxlan membership across servers works - adding a bridge interface and slaving the vxlan interface + a dummy interface, assigning an ip to the dummy did not seem to work - tried kernel 4.4 from elrepo, (tends to work better from previous docker overlay network experiences) Config: compiled from commit c1240044fbf081bb7407b1449d3954e4b63fec9f on CentOS 7.4, with --enable-cumulus Route Reflector: 10.40.1.131/31 bgpd.conf: router bgp 65000 bgp router-id 10.40.1.131 bgp cluster-id 10.40.1.131 bgp log-neighbor-changes no bgp default ipv4-unicast coalesce-time 1000 neighbor fabric peer-group neighbor fabric remote-as 65000 neighbor fabric update-source 10.40.1.131 neighbor fabric capability extended-nexthop bgp listen range 10.40.1.128/25 peer-group fabric ! address-family l2vpn evpn neighbor fabric activate neighbor fabric route-reflector-client exit-address-family ! layer-2 member server example: 10.40.1.129/31 bgpd.conf: router bgp 65000 bgp router-id 10.40.1.129 no bgp default ipv4-unicast coalesce-time 1000 neighbor fabric peer-group neighbor fabric remote-as 65000 neighbor fabric capability extended-nexthop neighbor 10.40.1.131 peer-group fabric ! address-family l2vpn evpn neighbor fabric activate advertise-all-vni exit-address-family ! vxlan configured with: # ip link vxlan100 type vxlan id 100 local 10.40.1.129 port 4789 nolearning # ip link set up dev vxlan100 # ip addr add 172.31.254.2/24 dev vxlan100 Thanks for any suggestions (or course corrections, as this is new to me)! -- Henry Snow | Director, Site Reliability Engineering eXelate, a Nielsen company <http://exelate.com/> E: henry.snow(a)nielsen.com | M: 347.366.2700 675 6th Ave, 3rd Floor, New York, NY 10010

1 1

New EVPN Code in Master
by Donald Sharp 17 Jan '18

17 Jan '18

All - EVPN control plane in FRR is now enhanced so that it supports both asymmetric and symmetric routing models. Prefix-based routing is also supported using EVPN type-5 routes. Also, with all routing models, L3 multi-tenancy is inherently supported I'd like to thank Mitesh for his hard work getting this done! thanks! donald

4 6

Release 3.0.3
by Donald Sharp 13 Jan '18

13 Jan '18

All - Release 3.0.3 has been spun up. Changes over version 3.0.2: Fixes for GCC 7.0 Always enable watchfrr on new installation (req for systemd operation) Add 'no password' command (with warning) Added Ubuntu 17.10 Package support in source (no binary packages built [yet]) https://github.com/FRRouting/frr/releases Thanks! donald

1 0

Anyone using vyos-1.2.0-alpha-frr-test.iso
by Christoffer Hansen 12 Dec '17

12 Dec '17

Hi to all FROGs, Anyone using the new test edition vyos-1.2.0-alpha-frr-test.iso and now if it is possible to do an upgrade from the vyos-1.1.8-amd64.iso version ? http://blog.vyos.net/a-vyos-1-dot-2-0-alpha-image-with-frr-instead-of-quagg… http://dev.packages.vyos.net/tmp/vyos-1.2.0-alpha-frr-test.iso Christoffer

2 1

Issue compiling 3.0.2
by Chris Babcock 03 Dec '17

03 Dec '17

Hi All, We've been using Quagga for a while and looking forward to switching over to FRR. I'm having trouble compiling on Centos 7 though. When I attempt to compile I get this error: checking whether to build static libraries... yes checking json-c/json.h usability... no checking json-c/json.h presence... no checking for json-c/json.h... no checking for json_object_get in -ljson-c... no checking for json_object_get in -ljson... no configure: error: lib json is needed to compile I see the header and c file in the lib folder: [centos@ip-172-30-5-42 frr-frr-3.0.2]$ find ./ -name json.* ./lib/json.c ./lib/json.h [centos@ip-172-30-5-42 frr-frr-3.0.2]$ I have json libs installed on my machine: [centos@ip-172-30-5-42 frr-frr-3.0.2]$ yum list installed | grep json json-c.x86_64 0.11-4.el7_0 installed json-devel.x86_64 0-4.20150410gitd7d0509.el7 @epel json-glib.x86_64 1.2.6-1.el7 @base json-glib-devel.x86_64 1.2.6-1.el7 @base libfastjson.x86_64 0.99.4-2.el7 @base python-jsonpatch.noarch 1.2-4.el7 @base python-jsonpointer.noarch 1.9-2.el7 installed [centos@ip-172-30-5-42 frr-frr-3.0.2]$ What am I missing? Thanks for any help. CB --

2 2

Nagios Monitoring
by Daniel 29 Nov '17

29 Nov '17

Hi There, is there any way to monitor all my BGP Sessions with Nagios? Actually I cant find any information about it. Only via SNMP but SNMP seems not possible because pfSense seems restricted in that issue. Cheers Daniel

2 2

trouble to making work BFD in OSPF
by Jonathan Grégoire 28 Nov '17

28 Nov '17

Hi all, I'm having a problem with BFD, it looks like that it doesn't want to start. The BFD status still at Unknown even if it's configured under interfaces. I make some search on the net but to find any solution. I might miss something in my config... or anybody might get the same thing as me. Could you help to make BFD work? ===================== ! interface enp0s8 ip ospf network point-to-point ip ospf hello-interval 60 ip ospf dead-interval 240 ip ospf bfd 3 300 300 ! interface enp0s9 ip ospf network point-to-point ip ospf hello-interval 60 ip ospf dead-interval 240 ip ospf bfd 3 300 300 ! router01-ospf# show ip ospf nei detail Neighbor 2.2.2.2, interface address 169.254.0.2 In the area 0.0.0.0 via interface enp0s8 Neighbor priority is 1, State is Full, 5 state changes Most recent state change statistics: Progressive change 8m59s ago DR is 0.0.0.0, BDR is 0.0.0.0 Options 2 *|-|-|-|-|-|E|- Dead timer due in 3m00s Database Summary List 0 Link State Request List 0 Link State Retransmission List 0 Thread Inactivity Timer on Thread Database Description Retransmision off Thread Link State Request Retransmission on Thread Link State Update Retransmission on BFD: Type: single hop Detect Mul: 3, Min Rx interval: 300, Min Tx interval: 300 Status: Unknown, Last update: never Neighbor 2.2.2.2, interface address 169.254.1.2 In the area 0.0.0.0 via interface enp0s9 Neighbor priority is 1, State is Full, 5 state changes Most recent state change statistics: Progressive change 8m59s ago DR is 0.0.0.0, BDR is 0.0.0.0 Options 2 *|-|-|-|-|-|E|- Dead timer due in 3m00s Database Summary List 0 Link State Request List 0 Link State Retransmission List 0 Thread Inactivity Timer on Thread Database Description Retransmision off Thread Link State Request Retransmission on Thread Link State Update Retransmission on BFD: Type: single hop Detect Mul: 3, Min Rx interval: 300, Min Tx interval: 300 Status: Unknown, Last update: never router01-ospf# =====================

2 1

BGP RPKI available in FRouting!
by Donald Sharp 17 Nov '17

17 Nov '17

All - I'd like to announce the arrival of BGP RPKI (RFC 6810) to FRRouting. I'd like to thank Marcel for taking the time to submit this code. To use this code, ensure that you have installed a new dependant library rtrlib available here: http://rtrlib.realmv6.org/ And configure FRR with `--enable-rpki` when compiling it. Thanks! donald

2 1

Security Issue CVE-2017-15865
by Donald Sharp 16 Nov '17

16 Nov '17

All - Security Issue CVE-2017-15865: `A Vulnerability exists in the BGP daemon of FRR where a malformed BGP Update packet can leak information from the BGP daemon and cause a denial of service by crashing the daemon` Has been fixed in releases 3.0.2 and 2.0.2 and the master branch of FRR. For further information: https://frrouting.org/community/security/cve-2017-15865.html As always the source is available at https://github.com/frrouting/frr Release Information can be found here: https://github.com/FRRouting/frr/releases thanks! donald

1 0