bird/bird.conf

159 lines
2.3 KiB
Text

log syslog all;
router id 172.23.156.4;
timeformat base iso long;
timeformat log iso long;
timeformat protocol iso long;
timeformat route iso long;
filter ibgp_export_v4 {
if net = 178.202.247.4/32 then
reject;
accept;
}
filter ibgp_export_v6 {
accept;
}
filter ibgp_import_v4 {
krt_metric = 200;
if net = 0.0.0.0/0 then reject;
accept;
}
filter ibgp_import_v6 {
krt_metric = 200;
# if net = 0::/0 then reject;
accept;
}
protocol device {
}
protocol direct {
ipv4;
ipv6;
interface "ens*", "tun*", "vpn-*";
}
protocol kernel {
ipv4 {
import all;
export where proto !~ "direct*";
};
metric 0;
learn;
}
protocol kernel {
ipv6 {
import all;
export where proto !~ "direct*";
};
metric 0;
learn;
}
protocol static {
check link yes;
route 134.61.120.0/22
via "tun0"; # ITC iDRACs
route 134.130.43.208/30
via "tun0"; # ITC deploy1-jh.itc.rwth-aachen.de
route 137.226.50.224/27
via "tun0"; # Jupyter
route 137.226.254.0/23
via "tun0"; # EONERC office network
route 134.130.48.0/24
via "tun0"; # EONERC server network
route 137.226.81.156/32
via "tun0"; # efs-itc01.eonerc.rwth-aachen.de
route 134.130.0.0/16
via 134.130.169.1
via 137.226.133.129;
route 134.61.0.0/16
via 134.130.169.1
via 137.226.133.129;
route 137.226.0.0/16
via 134.130.169.1
via 137.226.133.129;
route 192.35.229.0/24
via 134.130.169.1
via 137.226.133.129;
# lian.0l.de
route 178.202.247.4/32
via 134.130.169.1;
# via 137.226.133.129;
ipv4;
}
template bgp rr_clients {
local as 207613;
neighbor as 207613;
rr client;
rr cluster id 172.23.156.4;
ipv4 {
import keep filtered;
import filter ibgp_import_v4;
export filter ibgp_export_v4;
next hop self;
};
ipv6 {
import keep filtered;
import filter ibgp_import_v6;
export filter ibgp_export_v6;
next hop self;
};
}
protocol bgp edgy from rr_clients {
description "iBGP: edgy.int.0l.de";
local 2a09:11c0:200::6;
neighbor 2a09:11c0:200::7;
}
protocol bgp k8s_2_v4 from rr_clients {
description "iBGP: k8s-2.acs.vms.0l.de";
local 172.23.156.6;
neighbor 172.23.156.130;
ipv4 {
export none;
};
}
protocol bgp k8s_2_v6 from rr_clients {
description "iBGP: k8s-2.acs.vms.0l.de";
local 2a09:11c0:200::6;
neighbor 2a09:11c0:200:103:f0f4:8dff:fed4:d18d;
ipv6 {
export none;
};
}