BGP FlowSpec Route-reflector

[vincent.ma at gmx.fr]

No error message in log

Mar 26 22:15:07 ubuntu bird: sflow: Sending KEEPALIVE
Mar 26 22:15:12 ubuntu bird: sflow: Got UPDATE
Mar 26 22:15:18 ubuntu bird: sflow: Got KEEPALIVE
Mar 26 22:15:29 ubuntu bird: client1: Got KEEPALIVE

No error with sFlow-RT I tried directly with a Cisco router the route is well learned.

----

BGP Flowspec route from sFlow-RT to Bird :

Frame 3: 144 bytes on wire (1152 bits), 144 bytes captured (1152 bits)
Linux cooked capture
Internet Protocol Version 4, Src: 192.168.10.3, Dst: 192.168.10.2
Transmission Control Protocol, Src Port: 1179, Dst Port: 40745, Seq: 1, Ack: 20, Len: 76
Border Gateway Protocol - UPDATE Message
    Marker: ffffffffffffffffffffffffffffffff
    Length: 76
    Type: UPDATE Message (2)
    Withdrawn Routes Length: 0
    Total Path Attribute Length: 53
    Path attributes
        Path Attribute - MP_REACH_NLRI
            Flags: 0x80, Optional, Non-transitive, Complete
                1... .... = Optional: Set
                .0.. .... = Transitive: Not set
                ..0. .... = Partial: Not set
                ...0 .... = Extended-Length: Not set
                .... 0000 = Unused: 0x0
            Type Code: MP_REACH_NLRI (14)
            Length: 19
            Address family identifier (AFI): IPv4 (1)
            Subsequent address family identifier (SAFI): Flow Spec Filter (133)
            Next hop network address (0 bytes)
            Number of Subnetwork points of attachment (SNPA): 0
            Network layer reachability information (14 bytes)
                FLOW_SPEC_NLRI (14 bytes)
                    NRLI length: 13
                    Filter: Destination prefix filter (10.10.10.10/32)
                        Filter type: Destination prefix filter (1)
                        10.10.10.10/32
                            Destination IP filter prefix length: 32
                            Destination IP filter: 10.10.10.10
                    Filter: Protocol / Next Header filter (=17)
                        Filter type: Protocol / Next Header filter (3)
                        Operator flags: 0x81, end-of-list, Value length: 1 byte: 1 <<, equal
                            1... .... = end-of-list: Set
                            .0.. .... = and: Not set
                            ..00 .... = Value length: 1 byte: 1 << (0)
                            .... 0... = Reserved: Not set
                            .... .0.. = less than: Not set
                            .... ..0. = greater than: Not set
                            .... ...1 = equal: Set
                        Decimal value: 17
                    Filter: Destination port filter (=1004)
                        Filter type: Destination port filter (5)
                        Operator flags: 0x91, end-of-list, Value length: 2 bytes: 1 <<, equal
                            1... .... = end-of-list: Set
                            .0.. .... = and: Not set
                            ..01 .... = Value length: 2 bytes: 1 << (1)
                            .... 0... = Reserved: Not set
                            .... .0.. = less than: Not set
                            .... ..0. = greater than: Not set
                            .... ...1 = equal: Set
                        Decimal value: 1004
        Path Attribute - ORIGIN: IGP
            Flags: 0x40, Transitive, Well-known, Complete
                0... .... = Optional: Not set
                .1.. .... = Transitive: Set
                ..0. .... = Partial: Not set
                ...0 .... = Extended-Length: Not set
                .... 0000 = Unused: 0x0
            Type Code: ORIGIN (1)
            Length: 1
            Origin: IGP (0)
        Path Attribute - AS_PATH: 65000 
            Flags: 0x40, Transitive, Well-known, Complete
                0... .... = Optional: Not set
                .1.. .... = Transitive: Set
                ..0. .... = Partial: Not set
                ...0 .... = Extended-Length: Not set
                .... 0000 = Unused: 0x0
            Type Code: AS_PATH (2)
            Length: 6
            AS Path segment: 65000
                Segment type: AS_SEQUENCE (2)
                Segment length (number of ASN): 1
                AS4: 65000
        Path Attribute - LOCAL_PREF: 100
            Flags: 0x40, Transitive, Well-known, Complete
                0... .... = Optional: Not set
                .1.. .... = Transitive: Set
                ..0. .... = Partial: Not set
                ...0 .... = Extended-Length: Not set
                .... 0000 = Unused: 0x0
            Type Code: LOCAL_PREF (5)
            Length: 4
            Local preference: 100
        Path Attribute - EXTENDED_COMMUNITIES
            Flags: 0xc0, Optional, Transitive, Complete
                1... .... = Optional: Set
                .1.. .... = Transitive: Set
                ..0. .... = Partial: Not set
                ...0 .... = Extended-Length: Not set
                .... 0000 = Unused: 0x0
            Type Code: EXTENDED_COMMUNITIES (16)
            Length: 8
            Carried extended communities: (1 community)
                Flow spec traffic-rate: ASN 0, 0,000 Mbps [Transitive Experimental]
                    Type: Transitive Experimental (0x80)
                        1... .... = IANA Authority: Allocated on First Come First Serve Basis
                        .0.. .... = Transitive across AS: Transitive
                    Subtype (Experimental): Flow spec traffic-rate (0x06)
                    2-Octet AS: 0
                    Rate shaper: 0
 
 
 
 

Envoyé: jeudi 26 mars 2020 à 12:28
De: "Ondrej Zajicek" <santiago at crfreenet.org>
À: vincent.ma at gmx.fr
Cc: bird-users at network.cz
Objet: Re: BGP FlowSpec Route-reflector
On Wed, Mar 25, 2020 at 04:30:33PM +0100, vincent.ma at gmx.fr wrote:
> Hello,
>
> I'm trying to advertise bgpflowspec route from sflow-rt to bird.
>
> I have only "Import withdraws" although I send updates routes.

Hello

This should work without issues. Is there any error message in logs? What is on the other side?

--
Elen sila lumenn' omentielvo

Ondrej 'Santiago' Zajicek (email: santiago at crfreenet.org)
OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net)
"To err is human -- to blame it on a computer is even more so."