1. 07 Dec, 2016 2 commits
    • Pavel Tvrdik's avatar
      Add `.asn' operator to all ROA prefixes in filters · 69ae5784
      Pavel Tvrdik authored
      Example:
        bird> eval (1.2.0.0/16 max 20 as 1234).asn
        1234
      
      Todo: Should be described in user docs
      69ae5784
    • Pavel Tvrdík's avatar
      RPKI protocol with one cache server per protocol · 65d2a88d
      Pavel Tvrdík authored
      The RPKI protocol (RFC 6810) using the RTRLib
      (http://rpki.realmv6.org/) that is integrated inside
      the BIRD's code.
      
      Implemeted transports are:
       - unprotected transport over TCP
       - secure transport over SSHv2
      
      Example configuration of bird.conf:
        ...
        roa4 table r4;
        roa6 table r6;
      
        protocol rpki {
          debug all;
      
          # Import both IPv4 and IPv6 ROAs
          roa4 { table r4; };
          roa6 { table r6; };
      
          # Set cache server (validator) address,
          # overwrite default port 323
          remote "rpki-validator.realmv6.org" port 8282;
      
          # Overwrite default time intervals
          retry   10;         # Default 600 seconds
          refresh 60;         # Default 3600 seconds
          expire 600;         # Default 7200 seconds
        }
      
        protocol rpki {
          debug all;
      
          # Import only IPv4 routes
          roa4 { table r4; };
      
          # Set cache server address to localhost,
          # use default ports tcp => 323 or ssh => 22
          remote 127.0.0.1;
      
          # Use SSH transport instead of unprotected transport over TCP
          ssh encryption {
            bird private key "/home/birdgeek/.ssh/id_rsa";
            remote public key "/home/birdgeek/.ssh/known_hosts";
            user "birdgeek";
          };
        }
        ...
      65d2a88d
  2. 17 May, 2016 1 commit
  3. 13 May, 2016 1 commit
  4. 12 May, 2016 4 commits
  5. 10 May, 2016 1 commit
  6. 28 Apr, 2016 1 commit
    • Ondřej Zajíček's avatar
      Add the Babel routing protocol (RFC 6126) · 937e75d8
      Ondřej Zajíček authored
      This patch implements the IPv6 subset of the Babel routing protocol.
      Based on the patch from Toke Hoiland-Jorgensen, with some heavy
      modifications and bugfixes.
      
      Thanks to Toke Hoiland-Jorgensen for the original patch.
      937e75d8
  7. 13 Apr, 2016 1 commit
    • Ondřej Zajíček's avatar
      BSD: Add the IPsec SA/SP database entries control · a7baa098
      Ondřej Zajíček authored
      Add code for manipulation with TCP-MD5 keys in the IPsec SA/SP database
      at FreeBSD systems. Now, BGP MD5 authentication (RFC 2385) keys are
      handled automatically on both Linux and FreeBSD.
      
      Based on patches from Pavel Tvrdik.
      a7baa098
  8. 07 Apr, 2016 1 commit
  9. 06 Apr, 2016 1 commit
    • Ondřej Zajíček's avatar
      IO: Replace RX priority heuristic with explicit mark · 9e7b3ebd
      Ondřej Zajíček authored
      In BIRD, RX has lower priority than TX with the exception of RX from
      control socket. The patch replaces heuristic based on socket type with
      explicit mark and uses it for both control socket and BGP session waiting
      to be established.
      
      This should avoid an issue when during heavy load, outgoing connection
      could connect (TX event), send open, but then failed to receive OPEN /
      establish in time, not sending notifications between and therefore
      got hold timer expired error from the neighbor immediately after it
      finally established the connection.
      9e7b3ebd
  10. 23 Mar, 2016 2 commits
  11. 19 Feb, 2016 1 commit
  12. 10 Feb, 2016 1 commit
  13. 01 Feb, 2016 1 commit
  14. 14 Jan, 2016 1 commit
  15. 13 Jan, 2016 1 commit
  16. 12 Jan, 2016 2 commits
  17. 11 Jan, 2016 1 commit
  18. 07 Jan, 2016 1 commit
  19. 29 Dec, 2015 2 commits
  20. 24 Dec, 2015 1 commit
  21. 22 Dec, 2015 1 commit
  22. 21 Dec, 2015 3 commits
  23. 20 Dec, 2015 2 commits
  24. 19 Dec, 2015 2 commits
  25. 18 Dec, 2015 1 commit
  26. 24 Nov, 2015 3 commits
  27. 13 Nov, 2015 1 commit