[ixpmanager] BIRD Config Gen: Prefixes Not Being Exported; Strange Errors
Barry O'Donovan
barry.odonovan at inex.ie
Sun Jan 21 12:58:46 GMT 2018
>From your config file, you have:
define routeserverasn = 327779;
This is a 32-bit ASN and so Bird is complaining because you cannot use a
32-bit ASN in standard community filters.
You really need a 16-bit ASN to run a route server and RIRs have no
issue giving 16-bit ASNs for route server purposes.
- Barry
Kyle Spencer wrote:
> Right. Silly me. Here's the offending section:
>
> ##
> ## Standard IXP community filter
> ##
>
> function ixp_community_filter(int peerasn)
> {
> if !(source = RTS_BGP) then
> return false;
>
> # it's unwise to conduct a 32-bit check on a 16-bit value
> if peerasn > 65535 then
> return true;
>
> # Implement widely used community filtering schema.
> if (0, peerasn) ~ bgp_community then
> return false;
> if (routeserverasn, peerasn) ~ bgp_community then
> return true;
> if (0, routeserverasn) ~ bgp_community then
> return false;
>
> return true;
> }
>
> The errors specifically reference this line for both v4 and v6 instances:
>
> if (routeserverasn, peerasn) ~ bgp_community then
>
> I've attached the full config file (for v4) just for reference.
>
> IRRDB filtering is not enabled right now.
>
>
> --
> Cell/WhatsApp/Signal: +256790884905 <tel:0790%20884905>
>
> On 21 Jan 2018 15:43, "Barry O'Donovan" <barry.odonovan at inex.ie
> <mailto:barry.odonovan at inex.ie>> wrote:
>
>
>
>
> Kyle Spencer wrote:
> > Meanwhile, BIRD's log file is flooded with this error:
> >
> > 2018-01-21 14:38:13 <ERR> ...
> > 2018-01-21 14:38:14 <ERR> filters, line 74: Can't operate with value
> > out of bounds in pair constructor
> > 2018-01-21 14:38:14 <ERR> filters, line 74: Can't operate with value
> > out of bounds in pair constructor
> > 2018-01-21 14:38:14 <ERR> ...
> > 2018-01-21 14:38:47 <ERR> filters, line 74: Can't operate with value
> > out of bounds in pair constructor
>
> We'll need to see the bird config file Kyle.
>
> Or at least the snippet around those lines.
>
> I presume you're try to build a safe route server with prefix filtering?
> Have you populated the database as per:
>
> http://docs.ixpmanager.org/features/irrdb/
> <http://docs.ixpmanager.org/features/irrdb/>
>
> - Barry
>
> _______________________________________________
> INEX IXP Manager mailing list
> ixpmanager at inex.ie <mailto:ixpmanager at inex.ie>
> https://www.inex.ie/mailman/listinfo/ixpmanager
> <https://www.inex.ie/mailman/listinfo/ixpmanager>
>
> _______________________________________________
> INEX IXP Manager mailing list
> ixpmanager at inex.ie
> https://www.inex.ie/mailman/listinfo/ixpmanager
--
Kind regards,
Barry O'Donovan
INEX Operations
https://www.inex.ie/support/
+353 1 531 3339
More information about the ixpmanager
mailing list