1. 16 Jan, 2018 1 commit
  2. 09 Jan, 2018 1 commit
  3. 03 Jan, 2018 1 commit
  4. 21 Dec, 2017 1 commit
  5. 13 Dec, 2017 1 commit
  6. 10 Dec, 2017 2 commits
  7. 08 Dec, 2017 1 commit
  8. 07 Dec, 2017 2 commits
  9. 10 Oct, 2017 4 commits
  10. 13 Sep, 2017 1 commit
  11. 06 Sep, 2017 1 commit
    • Ondřej Zajíček's avatar
      Basic VRF support · 943478b0
      Ondřej Zajíček authored
      Add basic VRF (virtual routing and forwarding) support. Protocols can be
      associated with VRFs, such protocols will be restricted to interfaces
      assigned to the VRF (as reported by Linux kernel) and will use sockets
      bound to the VRF. E.g., different multihop BGP instances can use diffent
      kernel routing tables to handle BGP TCP connections.
      
      The VRF support is preliminary, currently there are several limitations:
      
      - Recent Linux kernels (4.11) do not handle correctly sockets bound
      to interaces that are part of VRF, so most protocols other than multihop
      BGP do not work. This will be fixed by future kernel versions.
      
      - Neighbor cache ignores VRFs. Breaks config with the same prefix on
      local interfaces in different VRFs. Not much problem as single hop
      protocols do not work anyways.
      
      - Olock code ignores VRFs. Breaks config with multiple BGP peers with the
      same IP address in different VRFs.
      
      - Incoming BGP connections are not dispatched according to VRFs.
      Breaks config with multiple BGP peers with the same IP address in
      different VRFs. Perhaps we would need some kernel API to read VRF of
      incoming connection? Or probably use multiple listening sockets in
      int-new branch.
      
      - We should handle master VRF interface up/down events and perhaps
      disable associated protocols when VRF goes down. Or at least disable
      associated interfaces.
      
      - Also we should check if the master iface is really VRF iface and
      not some other kind of master iface.
      
      - BFD session request dispatch should be aware of VRFs.
      
      - Perhaps kernel protocol should read default kernel table ID from VRF
      iface so it is not necessary to configure it.
      
      - Perhaps we should have per-VRF default table.
      943478b0
  12. 30 Aug, 2017 2 commits
  13. 09 Jun, 2017 1 commit
  14. 29 Apr, 2017 1 commit
  15. 26 Apr, 2017 2 commits
  16. 25 Apr, 2017 1 commit
    • Ondřej Zajíček's avatar
      Nest: Update of show route cmd · b2949999
      Ondřej Zajíček authored
      Some code cleanup, multiple bugfixes, allows to specify also channel
      for 'show route export'. Interesting how such apparenty simple thing
      like show route cmd has plenty of ugly corner cases.
      b2949999
  17. 12 Apr, 2017 1 commit
  18. 29 Mar, 2017 2 commits
  19. 22 Mar, 2017 1 commit
  20. 14 Mar, 2017 2 commits
  21. 13 Mar, 2017 1 commit
  22. 08 Mar, 2017 1 commit
  23. 23 Feb, 2017 1 commit
  24. 20 Feb, 2017 1 commit
  25. 19 Feb, 2017 1 commit
  26. 07 Feb, 2017 1 commit
  27. 22 Jan, 2017 1 commit
  28. 22 Dec, 2016 1 commit
  29. 07 Dec, 2016 3 commits
    • Ondřej Zajíček's avatar
      Doc: Add MP-BGP example config file · 66e5dc15
      Ondřej Zajíček authored
      66e5dc15
    • Ondřej Zajíček's avatar
      Basic flow specification support (RFC 5575) · 77234bbb
      Ondřej Zajíček authored
      Add flow4/flow6 network and rt-table type and operations, config grammar
      and static protocol support.
      
      Squashed flowspec branch from Pavel Tvrdik.
      77234bbb
    • Pavel Tvrdík's avatar
      RPKI protocol with one cache server per protocol · 65d2a88d
      Pavel Tvrdík authored
      The RPKI protocol (RFC 6810) using the RTRLib
      (http://rpki.realmv6.org/) that is integrated inside
      the BIRD's code.
      
      Implemeted transports are:
       - unprotected transport over TCP
       - secure transport over SSHv2
      
      Example configuration of bird.conf:
        ...
        roa4 table r4;
        roa6 table r6;
      
        protocol rpki {
          debug all;
      
          # Import both IPv4 and IPv6 ROAs
          roa4 { table r4; };
          roa6 { table r6; };
      
          # Set cache server (validator) address,
          # overwrite default port 323
          remote "rpki-validator.realmv6.org" port 8282;
      
          # Overwrite default time intervals
          retry   10;         # Default 600 seconds
          refresh 60;         # Default 3600 seconds
          expire 600;         # Default 7200 seconds
        }
      
        protocol rpki {
          debug all;
      
          # Import only IPv4 routes
          roa4 { table r4; };
      
          # Set cache server address to localhost,
          # use default ports tcp => 323 or ssh => 22
          remote 127.0.0.1;
      
          # Use SSH transport instead of unprotected transport over TCP
          ssh encryption {
            bird private key "/home/birdgeek/.ssh/id_rsa";
            remote public key "/home/birdgeek/.ssh/known_hosts";
            user "birdgeek";
          };
        }
        ...
      65d2a88d