Re: Delete all BGP communities except

2020-10-29 Thread Brooks Swinnerton
llo, > > Take a look at the "filter" function. I think it is what you want. > > On Thu, Oct 29, 2020 at 3:26 PM Brooks Swinnerton > wrote: > > > > Hello, > > > > Is it possible to delete all BGP communities from prefixes learned from > a specifi

Delete all BGP communities except

2020-10-29 Thread Brooks Swinnerton
Hello, Is it possible to delete all BGP communities from prefixes learned from a specific BGP session except ones that start with a given value? For example something like: if (bgp_path ~ 64496) then { bgp_large_community.delete([(!64496, *, *)]); } I haven't tested this syntax, but I can't

bgp_large_community wildcard in conditional

2020-10-29 Thread Brooks Swinnerton
Hello, I was wondering if it's possible to create a conditional that matches on a wildcard for a part of a BGP large community. For example: if ([*, 600, 6939]) ~ bgp_large_community then reject; This currently results in a syntax error at the position of the comma after the *.

Re: Filters giving odd errors

2020-08-14 Thread Brooks Swinnerton
I think Maria means sharing the smallest possible configuration that still reproduces the problem. If the problem is a result of the filters, then keeping those in place to help debug. I'd also be happy to try and debug your configuration as a whole (I wrote

Re: Prefix not making it through two iBGP sessions

2019-12-14 Thread Brooks Swinnerton
I stumbled upon Jobs' response over in https://bird.network.cz/pipermail/bird-users/2018-July/012572.html and adding `rr client;` on router 1 resolved the issue. On Sat, Dec 14, 2019 at 10:18 AM Brooks Swinnerton wrote: > Hello, > > I'm having trouble understanding why certain rout

Prefix not making it through two iBGP sessions

2019-12-14 Thread Brooks Swinnerton
Hello, I'm having trouble understanding why certain routes aren't making it through to an iBGP session on BIRD 2.0.7. My network layout looks something like below. I have three BIRD instances running, *Router 1* is connected to *Upstream 1*, *Router 2* is connected to *Upstream 2*, and *Router

Validating BGP routes with RPKI

2019-11-11 Thread Brooks Swinnerton
Just finished up getting RPKI set up using gortr as the validator. I thought I’d document the steps in case anyone else found them helpful: https://brooks.sh/2019/11/11/validating-bgp-routes-with-rpki-in-bird/. Any feedback is welcome.

RPKI validation on startup

2019-11-10 Thread Brooks Swinnerton
Hello, I have RPKI validation working correctly, but it seems that when BIRD first starts it does not reject invalid RPKI routes. If I run `reload in ` everything works great. I suspect this is some sort of race condition in 2.0.7. Has anyone else come across this?

Re: Configuring RPKI returns syntax error, unexpected CF_SYM_UNDEFINED

2019-11-10 Thread Brooks Swinnerton
That did the trick, thank you! On Sun, Nov 10, 2019 at 2:26 PM Pier Carlo Chiodi wrote: > Hello, > > you might need to compile BIRD with --enable-libssh. > > Bests > > > Il dom 10 nov 2019, 20:08 Brooks Swinnerton ha > scritto: > >> Hello, >> >

Configuring RPKI returns syntax error, unexpected CF_SYM_UNDEFINED

2019-11-10 Thread Brooks Swinnerton
Hello, I'm trying to configure RPKI in BIRD 2.0.6. With the following configuration: ``` 200 roa4 table r4; 201 roa6 table r6; 202 203 protocol rpki gortr { 204 roa4 { table r4; }; 205 roa6 { table r6; }; 206 207 remote "rpki.neptunenetworks.org" port 8282; 208 209 retry keep 90; 210

Re: iBGP stuck in connect state

2018-12-06 Thread Brooks Swinnerton
Ah ha, it was the firewall. It's always the firewall. On Wed, Dec 5, 2018 at 11:51 PM Brooks Swinnerton wrote: > Hello, > > I'm having trouble configuring two BIRD instances to talk to one another > over a wireguard tunnel with iBGP. They both stay in a `Connect` state. > >

iBGP stuck in connect state

2018-12-05 Thread Brooks Swinnerton
Hello, I'm having trouble configuring two BIRD instances to talk to one another over a wireguard tunnel with iBGP. They both stay in a `Connect` state. With debug all, I only see: ``` Dec 05 23:31:32 border bird[3460]: foo: Connecting to 169.254.2.2 from local address 169.254.3.3 Dec 05