Re: [sonic-dev] [sonic-wg-routing] A reminder for 5/4 SONiC Routing WG kick off meeting

Thu May 4 02:39:59 UTC 2023

Thanks Lucy for bringing this issue up. 
I will ask our in house BGP folks to evaluate these three issues. 
In general, I would expect this is the issue for SONiC deployment as we use FRR BGP. 
Thanks
Eddie
------------------------------------------------------------------
From:Lucy Hyde <lhyde at linuxfoundation.org>
Sent At:2023 May 3 (Wed.) 19:21
To:sonic-wg-routing at lists.sonicfoundation.dev <sonic-wg-routing at lists.sonicfoundation.dev>; sonic-dev <sonic-dev at lists.sonicfoundation.dev>; Praveen Bhagwatula (pbhagwat) <pbhagwat at cisco.com>; Syed Hasan Raza Naqvi <syed.naqvi at broadcom.com>; Rita Hui <Rita.Hui at microsoft.com>; dev <dev at lists.frrouting.org>
Cc:Yanzhao Zhang <yanzhaoz at microsoft.com>; Lihua Yuan <Lihua.Yuan at microsoft.com>
Subject:Re: [sonic-dev] [sonic-wg-routing] A reminder for 5/4 SONiC Routing WG kick off meeting
Hello SONiC Routing Working Group,
I’m not sure if this is the appropriate place to ask this question and will also bring it up to the TSC- but I saw the note about using FRR in SONiC below and this article was flagged to me for investigation this morning:
https://thehackernews.com/2023/05/researchers-uncover-new-bgp-flaws-in.html?m=1 <https://thehackernews.com/2023/05/researchers-uncover-new-bgp-flaws-in.html?m=1 >
It discusses three vulnerabilities in FRRouting, and specifically mentions Cumulus, DENT, and SONiC. Please let me know if this is already being worked (so I can let Arpit know) and if not, if I can provide any assistance with regard to security scanning and audit and how you would like to proceed.
Best,
Lucy
Lucy Hyde
Program Manager | LF Projects in AI & Networking
The Linux Foundation
From: sonic-wg-routing at lists.sonicfoundation.dev <sonic-wg-routing at lists.sonicfoundation.dev> on behalf of Eddie Ruan via lists.sonicfoundation.dev <eddie.ruan=alibaba-inc.com at lists.sonicfoundation.dev>
Date: Wednesday, May 3, 2023 at 12:15 PM
To: sonic-wg-routing <sonic-wg-routing at lists.sonicfoundation.dev>, sonic-dev <sonic-dev at lists.sonicfoundation.dev>, Praveen Bhagwatula (pbhagwat) <pbhagwat at cisco.com>, Syed Hasan Raza Naqvi <syed.naqvi at broadcom.com>, Rita Hui <Rita.Hui at microsoft.com>, dev <dev at lists.frrouting.org>
Cc: Yanzhao Zhang <yanzhaoz at microsoft.com>, Lihua Yuan <Lihua.Yuan at microsoft.com>
Subject: [sonic-wg-routing] A reminder for 5/4 SONiC Routing WG kick off meeting
Hi, 
Just a friendly reminder that we will have routing WG kick off meeting on 5/4 5:30-6:30pm PST (5/5 8:30-9:30 am China time). The zoom info could be found below. 
You could subscribe this WG via https://lists.sonicfoundation.dev/g/sonic-wg-routing <https://lists.sonicfoundation.dev/g/sonic-wg-routing >

 * 
Subscribe: sonic-wg-routing+subscribe at lists.sonicfoundation.dev <mailto:sonic-wg-routing+subscribe at lists.sonicfoundation.dev >
I also include FRR email alias as well, since we use FRR as routing stack in SONiC and there are some enhancements needed from both FRR and SONiC to fully support routing features.
Thanks
Praveen, Hasan, Rita, Eddie
Please download and import the following iCalendar (.ics) files to your calendar system.
Weekly:  https://zoom.us/meeting/tJEvdOCpqjsoG9dYQnhKle_6lwCLbPogZgPq/ics?icsToken=98tyKuCtrDgjG9CVshiERowMAIjCXevwiGJBjfpZpS7rCwtfZzygOvVhHrBPH9_q <https://zoom.us/meeting/tJEvdOCpqjsoG9dYQnhKle_6lwCLbPogZgPq/ics?icsToken=98tyKuCtrDgjG9CVshiERowMAIjCXevwiGJBjfpZpS7rCwtfZzygOvVhHrBPH9_q >
Join Zoom Meeting
https://zoom.us/j/95239140213 <https://zoom.us/j/95239140213 >
Meeting ID: 952 3914 0213
One tap mobile
+13126266799,,95239140213# US (Chicago)
+16465588656,,95239140213# US (New York)
Dial by your location
 +1 312 626 6799 US (Chicago)
 +1 646 558 8656 US (New York)
 +1 646 931 3860 US
 +1 301 715 8592 US (Washington DC)
 +1 305 224 1968 US
 +1 309 205 3325 US
 +1 360 209 5623 US
 +1 386 347 5053 US
 +1 507 473 4847 US
 +1 564 217 2000 US
 +1 669 444 9171 US
 +1 669 900 6833 US (San Jose)
 +1 689 278 1000 US
 +1 719 359 4580 US
 +1 253 205 0468 US
 +1 253 215 8782 US (Tacoma)
 +1 346 248 7799 US (Houston)
 877 369 0926 US Toll-free
 855 880 1246 US Toll-free
 +1 204 272 7920 Canada
 +1 438 809 7799 Canada
 +1 587 328 1099 Canada
 +1 647 374 4685 Canada
 +1 647 558 0588 Canada
 +1 778 907 2071 Canada
 +1 780 666 0144 Canada
 855 703 8985 Canada Toll-free
Meeting ID: 952 3914 0213
Find your local number: https://zoom.us/u/aewVD44sd4 <https://zoom.us/u/aewVD44sd4 >
_._,_._,_
 Links:
 You receive all messages sent to this group. 
View/Reply Online (#278) <https://lists.sonicfoundation.dev/g/sonic-dev/message/278 > | Reply To Sender <mailto:lhyde at linuxfoundation.org?subject=Private:%20Re:%20Re%3A%20%5Bsonic-dev%5D%20%5Bsonic-wg-routing%5D%20A%20reminder%20for%205%2F4%20SONiC%20Routing%20WG%20kick%20off%20meeting > | Reply To Group <mailto:sonic-dev at lists.sonicfoundation.dev?subject=Re:%20Re%3A%20%5Bsonic-dev%5D%20%5Bsonic-wg-routing%5D%20A%20reminder%20for%205%2F4%20SONiC%20Routing%20WG%20kick%20off%20meeting > | Mute This Topic <https://lists.sonicfoundation.dev/mt/98676540/7341548 > | New Topic <https://lists.sonicfoundation.dev/g/sonic-dev/post >
Your Subscription <https://lists.sonicfoundation.dev/g/sonic-dev/editsub/7341548 > | Contact Group Owner <mailto:sonic-dev+owner at lists.sonicfoundation.dev > | Unsubscribe <https://lists.sonicfoundation.dev/g/sonic-dev/leave/11873633/7341548/944543055/xyzzy > [eddie.ruan at alibaba-inc.com]
_._,_._,_
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.frrouting.org/pipermail/dev/attachments/20230504/82839775/attachment-0001.htm>