Re: filter all prefixes except a few with 'case' control

2016-09-28 Thread Василий Олейников
Title: Re: filter all prefixes except a few with 'case' control It seems, that case doesn't work with prefix, only with single ip As I see, this construct:      case net {          1.1.1.1:accept;          2.2.2.2:accept;          else: reject;      } works fine. Maybe, ROA table can help y

Re: BIRD patches for IP-in-IP

2016-09-28 Thread 'Gustavo Ponza'
On 09/29/2016 12:04 AM, Ondrej Zajicek wrote: On Wed, Sep 28, 2016 at 05:29:01PM +0200, 'Gustavo Ponza' wrote: Hi Ondrej, Using BGP-based routing in NBMA tunnels is an interesting approach. We definitely should support this. But i would avoid things like 'krt_tunnel' attribute until we have su

filter all prefixes except a few with 'case' control

2016-09-28 Thread Войнович Андрей Александрович
Hi all! I try to implement simple filter which rejects all prefixes except a few with 'case' control this way: filter permit_white { case net { 1.1.1.1/32: accept; 2.2.2.2/32: accept; else: reject; } } But syntax check fails on lin

Re: BIRD patches for IP-in-IP

2016-09-28 Thread Ondrej Zajicek
On Wed, Sep 28, 2016 at 05:29:01PM +0200, 'Gustavo Ponza' wrote: > Hi Ondrej, > > >Using BGP-based routing in NBMA tunnels is an interesting approach. We > >definitely should support this. But i would avoid things like 'krt_tunnel' > >attribute until we have support for lightweight tunnels using R

Re: BIRD patches for IP-in-IP

2016-09-28 Thread 'Gustavo Ponza'
Hi Ondrej, Using BGP-based routing in NBMA tunnels is an interesting approach. We definitely should support this. But i would avoid things like 'krt_tunnel' attribute until we have support for lightweight tunnels using RTA_ENCAP. For IPIP tunnels, it seems like simplest approach is just to allo

Re: BIRD patches for IP-in-IP

2016-09-28 Thread Ondrej Zajicek
On Wed, Sep 28, 2016 at 02:54:26PM +0200, Christian Tacke wrote: > > Hi, > > I have followed this only a little... > > > On Wed, Sep 28, 2016 at 14:24:32 +0200, Ondrej Zajicek wrote: > [...] > > For IPIP tunnels, it seems like simplest approach is just to allow setting > > 'onlink' flag and ifa

Re: Problems after upgrade to 1.6.1 from 1.6.0

2016-09-28 Thread Ondrej Zajicek
On Wed, Sep 28, 2016 at 03:15:25PM +0200, Ralf Hildebrandt wrote: > I upgraded BIRD from a working > 1.6.0-3+trusty+1 > to > 1.6.1-1+trusty+1 > today (from the Ubuntu PPA > https://launchpad.net/~cz.nic-labs/+archive/ubuntu/bird ) Hi Thanks for the bugreport, we are already aware of the issue. S

Re: Problems after upgrade to 1.6.1 from 1.6.0

2016-09-28 Thread Ralf Hildebrandt
* Ralf Hildebrandt : > (gdb) run > Starting program: /usr/src/bird-1.6.1/build-ipv4/bird -f -u bird -g bird I tried running as root, same result: (gdb) set args -f (gdb) run Starting program: /usr/src/bird-1.6.1/build-ipv4/bird -f [Thread debugging using libthread_db enabled] Using host libthrea

Problems after upgrade to 1.6.1 from 1.6.0

2016-09-28 Thread Ralf Hildebrandt
I upgraded BIRD from a working 1.6.0-3+trusty+1 to 1.6.1-1+trusty+1 today (from the Ubuntu PPA https://launchpad.net/~cz.nic-labs/+archive/ubuntu/bird ) Then bird started to segfault: Sep 28 11:46:24 dns-ccm kernel: [4320833.655332] bird[10188]: segfault at 0 ip (null) sp 7fff3f962

Re: BIRD patches for IP-in-IP

2016-09-28 Thread Christian Tacke
Hi, I have followed this only a little... On Wed, Sep 28, 2016 at 14:24:32 +0200, Ondrej Zajicek wrote: [...] > For IPIP tunnels, it seems like simplest approach is just to allow setting > 'onlink' flag and iface from BGP import filter, like: > > onlink = true; > iface = "tunl0"; [...] Hmm, w

Re: BIRD patches for IP-in-IP

2016-09-28 Thread Ondrej Zajicek
On Tue, Sep 27, 2016 at 03:09:52PM +, Neil Jerram wrote: > Hi BIRD users! > > Attached are 3 patches that my team has been using for routing through > IP-in-IP tunnels, rebased on 1.6.1. I'd like to explain why we find them > useful, and start a conversation about whether they or something li