stv0g/bird
stv0g/bird
2
1
Fork 0
Code Issues Pull requests Releases Wiki Activity

Compare commits

base: stv0g:c7b4b45c98ab3155222d6cc7c8e3f1407486ced0
Branches Tags
stv0g:edgy
stv0g:acs
stv0g:moon
stv0g:rpi
...
compare: stv0g:b9c1d54abcb2468cecf338d20808f911caa2e3a4
Branches Tags
stv0g:edgy
stv0g:acs
stv0g:moon
stv0g:rpi

2 commits
c7b4b45c98 ... b9c1d54abc

Author SHA1 Message Date
Steffen Vogel
b9c1d54abc set prefsrc for local traffic 2020-04-20 16:11:38 +02:00
Steffen Vogel
e083cb2d0d add import filter for RIPE RCCs 2020-04-20 16:11:20 +02:00
3 changed files with 10 additions and 2 deletions
Show stats Expand all files Collapse all files

3
filters/ebgp.conf
View file

@ -7,6 +7,9 @@ filter ebgp_import_v6
{
rej = false;
# Make sure we dont use peering IPs for originating traffic
krt_prefsrc = 2a09:11c0:200::14;
if is_rpki_invalid_v6() then
rej = true;

6
protocols/ripe-rcc.conf
View file

@ -1,3 +1,5 @@
include "/var/lib/bird/ripe_rcc_beacons.conf";
template bgp ripe_rcc_v4 {
local 80.81.196.155 as 207613;
neighbor as 12654;
@ -5,7 +7,7 @@ template bgp ripe_rcc_v4 {
ipv4 {
table ebgp_v4;
import all;
import where net ~ ripe_rcc_beacons_v4;
export none;# !!!! our ebgp_v4 table is bogus !!!!
};
}
@ -17,7 +19,7 @@ template bgp ripe_rcc_v6 {
ipv6 {
table ebgp_v6;
import all;
import all where net ~ ripe_rcc_beacons_v6;
export all;
};
}

3
update.sh
View file

@ -9,5 +9,8 @@ icvpn-scripts/mkroa -s icvpn-meta > /var/lib/bird/icvpn_roa.conf
curl -sfSLR {-o,-z}/var/lib/bird/bird_roa_dn42_v4.conf https://dn42.burble.com/roa/dn42_roa_bird2_4.conf
curl -sfSLR {-o,-z}/var/lib/bird/bird_roa_dn42_v6.conf https://dn42.burble.com/roa/dn42_roa_bird2_6.conf
bgpq3 -b -3 -4 AS12654:RS-RIS -l ripe_rcc_beacons_v4 > /var/lib/bird/ripe_rcc_beacons.conf
bgpq3 -b -3 -6 AS12654:RS-RIS -l ripe_rcc_beacons_v6 >> /var/lib/bird/ripe_rcc_beacons.conf
# Maybe do a 'birdc configure check' before?
birdc configure