ROA with static protocol in BIRD 2

Chriztoffer Hansen chriztoffer at netravnen.de
Thu Feb 27 10:46:01 CET 2020


Hi,

Robert Scheck skrev:
> Hello Maria,
> 
> as of writing, OpenBSD rpki-client produces an output file for BIRD 1.x
> like the following, where IPv4 and IPv6 end up in the same table. For me
> this ends with "This is an IPv4 router, therefore IPv6 addresses are not
> supported" error on BIRD 1.x all the time...am I overlooking something?
> 
> --- %< ---
> roa table roa {
>   roa 1.0.0.0/24 max 24 as 13335;
>   # […]
>   roa 2001:200::/32 max 32 as 2500;
>   # […]
> }
> --- %< ---
> 
> Is the above under any circumstances valid in any BIRD 1.x version? I did
> not use BIRD 1.x much, but I thought it is strictly either IPv4 or IPv6...

Correct,

what you fx. can do is:

--- %< ---
roa table internet_roas { include "/path/to/file/filename.conf"; };
--- %< ---
in the main config file for both the bird and bird6 daemon is this and
have the roa table itself located as separate files on disk.

the output of rpki-client can then be separated into two files by simply
piping through grep on the output.

- grep -v ':' > /path/to/file/bird1_roa_table_4.conf, and
- grep ':' > /path/to/file/bird1_roa_table_6.conf

E.g. bird1_roa_table_4.conf
--- %< ---
roa 1.1.1.0/24 max 24 as 13335;
roa 1.1.2.0/24 max 24 as 13335;
etc.
--- %< ---

E.g. bird1_roa_table_6.conf
--- %< ---
roa 2001:db8::/40 max 48 as 65536;
roa 2001:db8::/32 max 39 as 65536;
etc.
--- %< ---

-- 

Best regards,

Chriztoffer


More information about the Bird-users mailing list