Package: quagga-bgpd
Version: 1.1.0-3
Severity: grave
Hi,
I lost all of my IPv6 connectivity this morning; a bit of searching shows that
it is due to an automated upgrade of:
2017-01-05 07:36:26 upgrade quagga:amd64 1.0.20160315-2 1.1.0-3
None of the neighbors see my IPv6 route anymore; it is not in the table,
and the peers (over various GRE tunnels, using link-local addresses) say:
altersex# show bgp neighbors fe80::5ccc:2ed1 routes
altersex#
Similarly for another Quagga peer:
pannekake.samfundet.no# show bgp neighbors fe80::5ccc:2ed1 routes
pannekake.samfundet.no#
My side claims it's advertising the network to one of them, though:
morgental# show bgp neighbors fe80::c30b:9a61 advertised-routes
BGP table version is 0, local router ID is 80.218.216.227
Status codes: s suppressed, d damped, h history, * valid, > best, = multipath,
i internal, r RIB-failure, S Stale, R Removed
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*> 2001:67c:29f4::/48
fe80::5ccc:2ed1 600 0 58302 i
But somehow not to the other one:
morgental# show bgp neighbors fe80::6bbf:a185 advertised-routes
morgental#
Restart of the daemon does not work, but downgrading Quagga back to
the previous version (1.0.20160315-3) immediately fixes the issue:
pannekake.samfundet.no# show bgp neighbors fe80::5ccc:2ed1 routes
BGP table version is 0, local router ID is 129.241.93.35
Status codes: s suppressed, d damped, h history, * valid, > best, = multipath,
i internal, r RIB-failure, S Stale, R Removed
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*> 2001:67c:a4::/48 :: 600 0 48908 i
Total number of prefixes 1
pannekake.samfundet.no#
Here's the entire Quagga config, for reference:
morgental# show run
Building configuration...
Current configuration:
!
hostname morgental
log file /var/log/quagga/quagga.log
log file /var/log/quagga/ospf6d.log
hostname fugl
log file /var/log/quagga/bgpd.log
bgp multiple-instance
!
service advanced-vty
!
debug ospf6 lsa unknown
debug bgp
!
password <removed>
enable password <removed>
!
interface bablefisk
no link-detect
!
interface br0
no link-detect
!
interface elfkin
no link-detect
!
interface eno1
no link-detect
!
interface enp2s0
no link-detect
!
interface enp2s0.2
no link-detect
!
interface enp2s0.3
no link-detect
!
interface enp2s0.10
no link-detect
!
interface enp2s0.11
no link-detect
!
interface eth0
no link-detect
!
interface eth0.2
no link-detect
!
interface eth0.3
no link-detect
!
interface eth0.4
no link-detect
!
interface eth0.5
no link-detect
!
interface eth0.10
no link-detect
!
interface eth0.11
no link-detect
!
interface eth0.2000
no link-detect
!
interface eth2
no link-detect
!
interface fnismc
no link-detect
!
interface foo
no link-detect
!
interface gre0
no link-detect
!
interface gretap0
no link-detect
!
interface he-ipv6
no link-detect
!
interface ifb0
no link-detect
!
interface ifb1
no link-detect
!
interface ip6gre0
no link-detect
!
interface ip6tnl0
no link-detect
!
interface k_adamcik
no link-detect
!
interface k_altersex
no link-detect
ipv6 ospf6 cost 1
ipv6 ospf6 network broadcast
!
interface k_berge
no link-detect
!
interface k_jodal
no link-detect
!
interface k_klette
no link-detect
!
interface k_kletteoslo
no link-detect
!
interface k_magne
no link-detect
ipv6 ospf6 cost 1
ipv6 ospf6 network broadcast
!
interface k_molven
no link-detect
ipv6 ospf6 cost 1
ipv6 ospf6 network broadcast
!
interface k_molvenfinnoy
no link-detect
!
interface k_pannekake
no link-detect
!
interface k_sandsmark
no link-detect
!
interface k_sesse
no link-detect
ipv6 ospf6 cost 1
ipv6 ospf6 network broadcast
!
interface k_torvaldl
no link-detect
!
interface k_trygve
no link-detect
!
interface k_underworld
no link-detect
!
interface k_wikene
no link-detect
!
interface k_xml
no link-detect
!
interface l2tpeth0
no link-detect
!
interface lo
no link-detect
!
interface merete
no link-detect
!
interface nat64
no link-detect
!
interface pan0
no link-detect
!
interface pimreg
no link-detect
!
interface renater
no link-detect
!
interface sit0
no link-detect
!
interface test
no link-detect
!
interface tungre
no link-detect
!
interface wlan0
no link-detect
!
interface wlp3s0
no link-detect
!
interface wmaster0
no link-detect
!
router bgp 48908
bgp router-id 80.218.216.227
bgp always-compare-med
bgp bestpath med missing-as-worst
neighbor kvadratsky peer-group
neighbor kvadratsky next-hop-self
neighbor kvadratsky soft-reconfiguration inbound
neighbor kvadratsky prefix-list kvadratsky in
neighbor 2001:470:12:84::1 remote-as 6939
neighbor 2001:470:12:84::1 update-source 2001:470:12:84::2
neighbor 2001:470:12:84::1 next-hop-self
neighbor 2001:470:12:84::1 soft-reconfiguration inbound
neighbor 2001:470:12:84::1 prefix-list no-transit out
neighbor 2001:470:12:84::1 route-map he in
neighbor 2001:67c:a4:ffff::5 remote-as 48908
neighbor 2001:67c:a4:ffff::5 update-source 2001:67c:a4:ffff::6
neighbor fe80::2ae3:8049 remote-as 64515
neighbor fe80::2ae3:8049 interface k_magne
neighbor fe80::2ae3:8049 update-source fe80::5ccc:2ed1
neighbor fe80::419b:407a remote-as 64514
neighbor fe80::419b:407a interface k_molven
neighbor fe80::419b:407a update-source fe80::5ccc:2ed1
neighbor fe80::6bbf:a185 remote-as 58302
neighbor fe80::6bbf:a185 interface k_altersex
neighbor fe80::6bbf:a185 update-source fe80::5ccc:2ed1
neighbor fe80::7770:7d72 remote-as 64517
neighbor fe80::7770:7d72 interface k_berge
neighbor fe80::7770:7d72 update-source fe80::5ccc:2ed1
neighbor fe80::c30b:9a61 remote-as 58302
neighbor fe80::c30b:9a61 interface k_pannekake
neighbor fe80::c30b:9a61 update-source fe80::5ccc:2ed1
!
address-family ipv6
network 2001:67c:a4::/48 route-map tag-kvadratsky
neighbor kvadratsky activate
neighbor kvadratsky prefix-list kvadratsky in
neighbor kvadratsky route-map tag-kvadratsky in
neighbor kvadratsky route-map kvadratsky-routes-only out
neighbor 2001:470:12:84::1 activate
neighbor 2001:470:12:84::1 next-hop-self
neighbor 2001:470:12:84::1 soft-reconfiguration inbound
neighbor 2001:470:12:84::1 prefix-list no-transit out
neighbor 2001:470:12:84::1 route-map he in
neighbor 2001:67c:a4:ffff::5 activate
neighbor 2001:67c:a4:ffff::5 next-hop-self
neighbor 2001:67c:a4:ffff::5 soft-reconfiguration inbound
neighbor fe80::2ae3:8049 peer-group kvadratsky
neighbor fe80::419b:407a peer-group kvadratsky
neighbor fe80::6bbf:a185 peer-group kvadratsky
neighbor fe80::7770:7d72 peer-group kvadratsky
neighbor fe80::c30b:9a61 peer-group kvadratsky
exit-address-family
exit
!
ipv6 prefix-list kvadratsky seq 10 permit 2001:67c:29f4::/48
ipv6 prefix-list kvadratsky seq 20 deny any
ipv6 prefix-list no-transit seq 5 permit 2001:67c:a4::/48
ipv6 prefix-list no-transit seq 10 deny any
ipv6 prefix-list samfundet-emergency seq 5 permit 2001:700:300:1800::/64
ipv6 prefix-list samfundet-emergency seq 10 deny any
ipv6 prefix-list kvadratsky seq 10 permit ::/0 ge 32
!
ip community-list standard KVADRATSKY permit 48908:2
ip community-list standard KVADRATSKY deny
!
route-map elfkin permit 10
set metric 1000
set metric 700
!
route-map he permit 10
set metric 500
!
route-map kvadratsky-routes-only permit 10
match community KVADRATSKY
set community none
set metric 600
!
route-map kvadratsky-routes-only permit 20
match ipv6 address prefix-list samfundet-emergency
set metric 1500
!
route-map tag-kvadratsky permit 10
set community 48908:2 additive
!
route-map prepend-to-death permit 10
set as-path prepend 48908 48908 48908 48908 48908 48908 48908 48908 48908 48908
!
ip forwarding
ipv6 forwarding
!
line vty
!
end
-- System Information:
Debian Release: 8.6
APT prefers stable
APT policy: (750, 'stable'), (500, 'proposed-updates')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.9.0 (SMP w/40 CPU cores)
Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
