log syslog all; router id 172.23.156.4; timeformat base iso long; timeformat log iso long; timeformat protocol iso long; timeformat route iso long; filter ibgp_export_v4 { if net = 178.202.247.4/32 then reject; accept; } filter ibgp_export_v6 { accept; } filter ibgp_import_v4 { krt_metric = 200; if net = 0.0.0.0/0 then reject; accept; } filter ibgp_import_v6 { krt_metric = 200; # if net = 0::/0 then reject; accept; } protocol device { } protocol direct { ipv4; ipv6; interface "ens*", "tun*", "vpn-*"; } protocol kernel { ipv4 { import all; export where proto !~ "direct*"; }; metric 0; learn; } protocol kernel { ipv6 { import all; export where proto !~ "direct*"; }; metric 0; learn; } protocol static { check link yes; route 134.61.120.0/22 via "tun0"; # ITC iDRACs route 134.130.43.208/30 via "tun0"; # ITC deploy1-jh.itc.rwth-aachen.de route 137.226.50.224/27 via "tun0"; # Jupyter route 137.226.254.0/23 via "tun0"; # EONERC office network route 134.130.48.0/24 via "tun0"; # EONERC server network route 137.226.81.156/32 via "tun0"; # efs-itc01.eonerc.rwth-aachen.de route 134.130.0.0/16 via 134.130.169.1 via 137.226.133.129; route 134.61.0.0/16 via 134.130.169.1 via 137.226.133.129; route 137.226.0.0/16 via 134.130.169.1 via 137.226.133.129; route 192.35.229.0/24 via 134.130.169.1 via 137.226.133.129; # lian.0l.de route 178.202.247.4/32 via 134.130.169.1; # via 137.226.133.129; ipv4; } template bgp rr_clients { local as 207613; neighbor as 207613; rr client; rr cluster id 172.23.156.4; ipv4 { import keep filtered; import filter ibgp_import_v4; export filter ibgp_export_v4; next hop self; }; ipv6 { import keep filtered; import filter ibgp_import_v6; export filter ibgp_export_v6; next hop self; }; } protocol bgp edgy from rr_clients { description "iBGP: edgy.int.0l.de"; local 2a09:11c0:200::6; neighbor 2a09:11c0:200::7; } protocol bgp k8s_2_v4 from rr_clients { description "iBGP: k8s-2.acs.vms.0l.de"; local 172.23.156.6; neighbor 172.23.156.130; ipv4 { export none; }; } protocol bgp k8s_2_v6 from rr_clients { description "iBGP: k8s-2.acs.vms.0l.de"; local 2a09:11c0:200::6; neighbor 2a09:11c0:200:103:f0f4:8dff:fed4:d18d; ipv6 { export none; }; }