[ixpmanager] BIRD Config Gen: Prefixes Not Being Exported; Strange Errors

Kyle Spencer kyle at stormzero.com
Sun Jan 21 13:07:27 GMT 2018


Noted. Annoying. Will request a 16-bit ASN from AfriNIC.

On Sun, Jan 21, 2018 at 3:58 PM, Barry O'Donovan <barry.odonovan at inex.ie> wrote:
> >From your config file, you have:
>
> define routeserverasn     = 327779;
>
> This is a 32-bit ASN and so Bird is complaining because you cannot use a
> 32-bit ASN in standard community filters.
>
> You really need a 16-bit ASN to run a route server and RIRs have no
> issue giving 16-bit ASNs for route server purposes.
>
>  - Barry
>
>
>
> Kyle Spencer wrote:
>> Right. Silly me. Here's the offending section:
>>
>> ##
>> ## Standard IXP community filter
>> ##
>>
>> function ixp_community_filter(int peerasn)
>> {
>>         if !(source = RTS_BGP) then
>>                 return false;
>>
>>         # it's unwise to conduct a 32-bit check on a 16-bit value
>>         if peerasn > 65535 then
>>                 return true;
>>
>>         # Implement widely used community filtering schema.
>>         if (0, peerasn) ~ bgp_community then
>>                 return false;
>>         if (routeserverasn, peerasn) ~ bgp_community then
>>                 return true;
>>         if (0, routeserverasn) ~ bgp_community then
>>                 return false;
>>
>>         return true;
>> }
>>
>> The errors specifically reference this line for both v4 and v6 instances:
>>
>>      if (routeserverasn, peerasn) ~ bgp_community then
>>
>> I've attached the full config file (for v4) just for reference.
>>
>> IRRDB filtering is not enabled right now.
>>
>>
>> --
>> Cell/WhatsApp/Signal: +256790884905 <tel:0790%20884905>
>>
>> On 21 Jan 2018 15:43, "Barry O'Donovan" <barry.odonovan at inex.ie
>> <mailto:barry.odonovan at inex.ie>> wrote:
>>
>>
>>
>>
>>     Kyle Spencer wrote:
>>     > Meanwhile, BIRD's log file is flooded with this error:
>>     >
>>     > 2018-01-21 14:38:13 <ERR> ...
>>     > 2018-01-21 14:38:14 <ERR> filters, line 74: Can't operate with value
>>     > out of bounds in pair constructor
>>     > 2018-01-21 14:38:14 <ERR> filters, line 74: Can't operate with value
>>     > out of bounds in pair constructor
>>     > 2018-01-21 14:38:14 <ERR> ...
>>     > 2018-01-21 14:38:47 <ERR> filters, line 74: Can't operate with value
>>     > out of bounds in pair constructor
>>
>>     We'll need to see the bird config file Kyle.
>>
>>     Or at least the snippet around those lines.
>>
>>     I presume you're try to build a safe route server with prefix filtering?
>>     Have you populated the database as per:
>>
>>     http://docs.ixpmanager.org/features/irrdb/
>>     <http://docs.ixpmanager.org/features/irrdb/>
>>
>>      - Barry
>>
>>     _______________________________________________
>>     INEX IXP Manager mailing list
>>     ixpmanager at inex.ie <mailto:ixpmanager at inex.ie>
>>     https://www.inex.ie/mailman/listinfo/ixpmanager
>>     <https://www.inex.ie/mailman/listinfo/ixpmanager>
>>
>> _______________________________________________
>> INEX IXP Manager mailing list
>> ixpmanager at inex.ie
>> https://www.inex.ie/mailman/listinfo/ixpmanager
>
> --
>
> Kind regards,
> Barry O'Donovan
> INEX Operations
>
> https://www.inex.ie/support/
> +353 1 531 3339
>
>
> _______________________________________________
> INEX IXP Manager mailing list
> ixpmanager at inex.ie
> https://www.inex.ie/mailman/listinfo/ixpmanager



-- 
Cell/WhatsApp/Signal: +256790884905


More information about the ixpmanager mailing list