Enabling BGP FlowSpec routes export
Maria Matějka
maria.matejka at nic.cz
Tue Jan 21 14:19:08 CET 2020
Hello!
You won't advertise anything else than basic IPv4 routes with capabilities off
as the flowspec SAFI needs to be advertised and negotiated by a BGP Capability Advertisement.
Maria
On 1/21/20 2:05 PM, posta at davidepucci.it wrote:
> Hi.
> I'm setting up Bird (2.0.7) as a BGP FlowSpec controller and it has to send out FS routes to two (FRR-based) neighbors.
> Actual configuration is defined as below:
>
> flow4 table flowtab4;
> protocol static {
> flow4 {
> import all;
> export all;
> };
>
> route flow4 {
> src x.x.y.y/32;
> dst x.x.z.z/32;
> } {
> bgp_ext_community.add( (generic, 0x80060000, 0x0) );
> };
> }
> template bgp bgp_fs {
> local x.x.x.x as ABCDG;
> capabilities off;
>
> flow4 {
> table flowtab4;
> import all;
> export all;
> };
>
> ipv4 {
> import all;
> export all;
> };
> }
> protocol bgp bgp_svc01 from bgp_fs {
> neighbor y.y.y.y as ABCDE;
> }
> protocol bgp bgp_svc02 from bgp_fs {
> neighbor z.z.z.z as ABCDF;
> }
>
> The FS is properly assigned to the BGP protocol instances, but flowtab4 table is only UP as a channel for static1 protocol,
> while for bgp_svc01/02 is not (hence, no FS routes advertised BGP-side):
>
> bird> show protocol all static1
> Name Proto Table State Since Info
> static1 Static flowtab4 up 13:02:42.987
> Channel flow4
> State: UP
> ==================
> Table: flowtab4
> Preference: 200
> Input filter: ACCEPT
> Output filter: ACCEPT
> Routes: 1 imported, 0 exported, 1 preferred
> Route change stats: received rejected filtered ignored accepted
> Import updates: 1 0 0 0 1
> Import withdraws: 0 0 --- 0 0
> Export updates: 0 0 0 --- 0
> Export withdraws: 0 --- --- --- 0
>
> bird> show protocol all bgp_svc01
> Name Proto Table State Since Info
> bgp_svc01 BGP --- up 13:00:17.256 Established
> BGP state: Established
> Neighbor address: y.y.y.y
> Neighbor AS: ABCDE
> Local AS: ABCDG
> Neighbor ID: whateverID
> Local capabilities
> Neighbor capabilities
> Session: external
> Source address: x.x.x.x
> Hold timer: 4.820/9
> Keepalive timer: 2.054/3
> Channel flow4
> State: DOWN
> ====================
> Table: flowtab4
> Preference: 100
> Input filter: ACCEPT
> Output filter: ACCEPT
> Channel ipv4
> State: UP
> Table: master4
> Preference: 100
> Input filter: ACCEPT
> Output filter: ACCEPT
> Routes: 13 imported, 2 exported, 13 preferred
> Route change stats: received rejected filtered ignored accepted
> [...]
> BGP Next hop: x.x.x.x
>
> Looking forward to get some clarifications.
> Thank you.
>
> Kind regards,
> Davide Pucci.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3028 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://trubka.network.cz/pipermail/bird-users/attachments/20200121/6e4b6001/attachment.p7s>
More information about the Bird-users
mailing list