Hi there,
I'm using the template from
https://github.com/neptune-networks/peering/blob/master/out/router.fqdn.example/bird.conf
for my filters, and I'm getting argument related errors in logs.
What's the issue with those filters?
P.S I need to find a guide on how to do bird2 and RPKI as well.
Logs:
----------------------------------------------------
2020-08-13 17:37:47 <ERR> filters, line 360: Argument 1 of instruction
FI_CONDITION must be of type T_BOOL, got 0x00
2020-08-13 17:37:47 <ERR> filters, line 360: Argument 1 of instruction
FI_CONDITION must be of type T_BOOL, got 0x00
2020-08-13 17:37:47 <ERR> filters, line 360: Argument 1 of instruction
FI_CONDITION must be of type T_BOOL, got 0x00
2020-08-13 17:37:47 <ERR> filters, line 360: Argument 1 of instruction
FI_CONDITION must be of type T_BOOL, got 0x00
2020-08-13 17:37:47 <ERR> filters, line 360: Argument 1 of instruction
FI_CONDITION must be of type T_BOOL, got 0x00
2020-08-13 17:37:47 <ERR> ...
----------------------------------------------------
Bird config, the filter functions:
----------------------------------------------------
# --- Filters (technically functions) ---
function default_import() {
if bgp_path.len > 32 then
reject "AS_PATH len [", bgp_path.len ,"] longer than 32 - REJECTING
", net;
if prefix_is_in_global_blacklist() then
reject "prefix is in global blacklist - REJECTING ", net;
if is_own_prefix() then
reject "prefix is our own - REJECTING ", net;
if is_own_internal_prefix() then {
if !prefix_is_in_global_whitelist() then
reject "prefix is our own and internal - REJECTING ", net;
}
if prefix_is_bogon() then
reject "prefix is bogon - REJECTING ", net;
if net.type = NET_IP4 then
if !is_prefix_length_valid(8, 24) then
reject "prefix len [", net.len, "] not in 8-24 - REJECTING ", net;
if net.type = NET_IP6 then
if !is_prefix_length_valid(12, 56) then
reject "prefix len [", net.len, "] not in 12-56 - REJECTING ", net;
#perform_rpki_validation();
if route_is_rpki_invalid() then
reject "RPKI, route is INVALID - REJECTING ", net;
add_region_community();
add_site_community();
honor_graceful_shutdown();
accept;
}
function peer_import() {
scrub_communities_in();
add_peer_community();
default_import();
}
function peer_export() {
strip_private_asns();
add_global_prepends();
if is_own_prefix() then accept;
if route_is_rpki_invalid() then
reject "RPKI, route is INVALID - NOT ANNOUNCING ", net;
if is_own_internal_prefix() then {
if !prefix_is_in_global_whitelist() then
reject "prefix is our own and internal - NOT ANNOUNCING ", net;
}
if net.type = NET_IP4 then
if !is_prefix_length_valid(8, 24) then
reject "prefix len [", net.len, "] not in 8-24 - REJECTING ", net;
if net.type = NET_IP6 then
if !is_prefix_length_valid(12, 48) then
reject "prefix len [", net.len, "] not in 12-48 - REJECTING ", net;
if prefix_is_bogon() then
reject "prefix is bogon - NOT ANNOUNCING ", net;
if as_path_contains_invalid_asn() then
reject "AS_PATH [", bgp_path ,"] contains invalid ASN - REJECTING
", net;
if should_not_export_to_site() then
reject "NO_EXPORT community in place for site - NOT ANNOUNCING ", net;
if should_not_export_to_region() then
reject "NO_EXPORT community in place for region - NOT ANNOUNCING ",
net;
if should_not_export_to_peers() then
reject "NO_EXPORT community in place for peers - NOT ANNOUNCING ", net;
if prefix_is_in_global_blacklist() then
reject "prefix is in global blacklist - REJECTING ", net;
if was_learned_from_customer() then accept;
reject;
}
function upstream_import() {
scrub_communities_in();
add_upstream_community();
default_import();
}
function upstream_export() {
strip_private_asns();
add_global_prepends();
if is_own_prefix() then accept;
if route_is_rpki_invalid() then
reject "RPKI, route is INVALID - NOT ANNOUNCING ", net;
if is_own_internal_prefix() then {
if !prefix_is_in_global_whitelist() then
reject "prefix is our own and internal - NOT ANNOUNCING ", net;
}
if net.type = NET_IP4 then
if !is_prefix_length_valid(8, 24) then
reject "prefix len [", net.len, "] not in 8-24 - REJECTING ", net;
if net.type = NET_IP6 then
if !is_prefix_length_valid(12, 48) then
reject "prefix len [", net.len, "] not in 12-48 - REJECTING ", net;
if prefix_is_bogon() then
reject "prefix is bogon - NOT ANNOUNCING ", net;
if as_path_contains_invalid_asn() then
reject "AS_PATH [", bgp_path ,"] contains invalid ASN - REJECTING
", net;
if should_not_export_to_site() then
reject "NO_EXPORT community in place for site - NOT ANNOUNCING ", net;
if should_not_export_to_region() then
reject "NO_EXPORT community in place for region - NOT ANNOUNCING ",
net;
if should_not_export_to_upstreams() then
reject "NO_EXPORT community in place for upstreams - NOT ANNOUNCING
", net;
if prefix_is_in_global_blacklist() then
reject "prefix is in global blacklist - REJECTING ", net;
if was_learned_from_customer() then accept;
reject;
}
function customer_import() {
scrub_communities_in();
add_customer_community();
default_import();
}
function customer_export() {
strip_private_asns();
add_global_prepends();
if is_own_prefix() then accept;
if route_is_rpki_invalid() then
reject "RPKI, route is INVALID - NOT ANNOUNCING ", net;
if is_own_internal_prefix() then {
if !prefix_is_in_global_whitelist() then
reject "prefix is our own and internal - NOT ANNOUNCING ", net;
}
if net.type = NET_IP4 then
if !is_prefix_length_valid(8, 24) then
reject "prefix len [", net.len, "] not in 8-24 - REJECTING ", net;
if net.type = NET_IP6 then
if !is_prefix_length_valid(12, 48) then
reject "prefix len [", net.len, "] not in 12-48 - REJECTING ", net;
if prefix_is_bogon() then
reject "prefix is bogon - NOT ANNOUNCING ", net;
if as_path_contains_invalid_asn() then
reject "AS_PATH [", bgp_path ,"] contains invalid ASN - REJECTING
", net;
if should_not_export_to_site() then
reject "NO_EXPORT community in place for site - NOT ANNOUNCING ", net;
if should_not_export_to_region() then
reject "NO_EXPORT community in place for region - NOT ANNOUNCING ",
net;
if should_not_export_to_customers() then
reject "NO_EXPORT community in place for customers - NOT ANNOUNCING
", net;
if prefix_is_in_global_blacklist() then
reject "prefix is in global blacklist - REJECTING ", net;
if was_learned_from_peer() then accept;
if was_learned_from_private_peer() then accept;
if was_learned_from_upstream() then accept;
if was_learned_from_customer() then accept;
reject;
}
function core_import() {
if prefix_is_bogon() then reject;
if prefix_is_in_global_blacklist() then
reject "prefix is in global blacklist - REJECTING ", net;
honor_graceful_shutdown();
accept;
}
function core_export() {
if prefix_is_bogon() then reject;
if prefix_is_in_global_blacklist() then
reject "prefix is in global blacklist - REJECTING ", net;
if is_own_prefix() then accept;
if is_own_internal_prefix() then accept;
if was_learned_from_peer() then accept;
if was_learned_from_private_peer() then accept;
if was_learned_from_upstream() then accept;
if was_learned_from_customer() then accept;
reject;
}
----------------------------------------------------
--
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus
