Re: Large communities indicating RPKI VALID status

2024-04-29 Thread Nigel Kukard via Bird-users
On 4/29/24 19:33, Job Snijders wrote: On Mon, 29 Apr 2024 at 21:27, Nigel Kukard via Bird-users wrote: Hi there Richard, On 4/29/24 19:14, Richard Laager wrote: Perhaps I am naive, but I assumed one would validate RPKI on the eBGP edge and simply reject INVALID routes

Re: Large communities indicating RPKI VALID status

2024-04-29 Thread Nigel Kukard via Bird-users
Hi there Richard, On 4/29/24 19:14, Richard Laager wrote: Perhaps I am naive, but I assumed one would validate RPKI on the eBGP edge and simply reject INVALID routes. Why would one want to accept INVALID at all? If we agree one would reject INVALID, then what is left to tag? For my

Large communities indicating RPKI VALID status

2024-04-26 Thread Nigel Kukard via Bird-users
Hi all, I was busy reading https://bgpfilterguide.nlnog.net/guides/reject_invalids/ and noticed the following text... Note: REALLY DONT store the validation state inside a bgp_community or bgp_large_community or bgp_ext_community variables. It can cause CPU & memory overload resulting in

Re: notification scripts ?

2023-12-13 Thread Nigel Kukard via Bird-users
On 12/13/23 10:14, Maria Matejka via Bird-users wrote: Hello! On 2023-12-13 10:19, Kees Meijs | Nefos wrote: Hi, On 12-12-2023 17:20, Maria Matejka via Bird-users wrote: We're prototyping a machine-friendly interface which should include, in some later versions, also subscribing to various

Re: Possibly a way to match Kernel.source field?

2023-09-30 Thread Nigel Kukard via Bird-users
egards, Alexander Zubkov On Sat, Sep 30, 2023, 22:20 Nigel Kukard via Bird-users wrote: Hi there fellow BIRD users, Does anyone perhaps know if there is a way to match this field? I'm trying to create a filter to prevent these from being imported into my one table which

Possibly a way to match Kernel.source field?

2023-09-30 Thread Nigel Kukard via Bird-users
Hi there fellow BIRD users, Does anyone perhaps know if there is a way to match this field? I'm trying to create a filter to prevent these from being imported into my one table which I feed into OSPF6. I've tried, Kernel.source and kernel.source sadly with no luck. This item corresponds to

Re: Doing something wrong with VRF's

2023-09-28 Thread Nigel Kukard via Bird-users
On 9/28/23 17:07, Daniel Gröber wrote: On Thu, Sep 28, 2023 at 04:03:33PM +, Nigel Kukard via Bird-users wrote: Well .. I feel embarrassed now. The issue was a missing "kernel table ;" in the kernel protocol. Don't feel bad. I was going to look into using VRFs with bird and n

Re: Doing something wrong with VRF's

2023-09-28 Thread Nigel Kukard via Bird-users
Well .. I feel embarrassed now. The issue was a missing "kernel table ;" in the kernel protocol. -N On 9/28/23 15:29, Nigel Kukard via Bird-users wrote: Hi there, I'm wondering if someone could point out what I'm doing wrong here? all my routes are being added to the system

Doing something wrong with VRF's

2023-09-28 Thread Nigel Kukard via Bird-users
Hi there, I'm wondering if someone could point out what I'm doing wrong here? all my routes are being added to the system main table and not my VRF. I could swear I had this working 100% (I took my config and added vrf "vrf0" to each protocol), i then regenerated my config file using my

Re: Garbage collection of unused dynamic BGP neighbours

2022-09-21 Thread Nigel Kukard via Bird-users
On 9/21/22 08:37, Tore Anderson via Bird-users wrote: * Ondrej Zajicek i think that 'configure' CLI command should remove unused dynamic BGP instaces as a side-effect of its unused protocols cleanup code, even if there is no change in configuration. I had already tried that unsuccessfully,