[ixpmanager] as112 config kernel export ipv6

[Pete Ashdown]

Barry, I found that I had to change that line and also comment out the 
following in both v4 & v6 configs for routes to be accepted from the 
route-servers:

     # Peer ASN == route's first ASN?
     #if (bgp_path.first != remote_as ) then {
     #    return false;
     #}


     # Prevent BGP NEXT_HOP Hijacking
     #if !( from = bgp_next_hop ) then {
     #    return false;
     #}

There is also no configuration for my route-collector appearing in the 
as112 config, even though I have "Monitor Route Collector BGP" checked 
on the Vlan Interface for AS112.

I'd like the above protections for other peers, so I'd guess that a 
second fn_import function needs to be done exclusively for the 
route-servers.  My github skills are pretty terrible, but I'd be happy 
to help patch the code if someone else doesn't want to jump in on it.  
As it is, the generated configurations for bird2 are not workable when 
peered with route-servers.


On 3/2/21 1:28 AM, Barry O'Donovan wrote:
> Hi Pete,
>
> the 'known good' you referenced looks like it's from the Bird v1 
> template.
>
> We're running Bird v1 locally for our AS112 services at INEX (and 
> Bird2 for everything else) so the Bird2 template may not have seen 
> much production use.
>
> Looks like there may be an issue here:
>
> https://github.com/inex/IXP-Manager/blob/master/resources/views/api/v4/router/as112/bird2/header.foil.php#L58 
>
>
> Can you try changing that line to:
>
>     ipv<?= $t->router->protocol() == 6 ? 6 : 4 ?> {
>
>
>  - Barry
>
>
> Pete Ashdown wrote on 02/03/2021 05:03:
>> I'm finding my as112 server has no idea how to get back to the IPv6 
>> prefixes of peers. I noticed this in the generated bird config:
>>
>> protocol kernel {
>>      ipv4 {
>>          export all;
>>      };
>>      scan time 60;
>> }
>>
>> Should it be ipv6?  The "Protocol" for the router is properly set to 
>> "ipv6" and the rest of the config has the proper IP addresses of the 
>> route servers.
>>
>> The "known good" sample configuration isn't explicit for ipv4 in the 
>> export stanza:
>>
>> https://github.com/inex/IXP-Manager/blob/master/data/travis-ci/known-good/ci-apiv4-as112-lan1-ipv6.conf 
>>
>>
>>
>> _______________________________________________
>> INEX IXP Manager mailing list
>> ixpmanager at inex.ie
>> Unsubscribe or change options here: 
>> https://www.inex.ie/mailman/listinfo/ixpmanager
>
>