Projet

Général

Profil

BGP » Historique » Version 171

Laurent GUERBY, 01/08/2015 14:57

1 20 Laurent GUERBY
{{>toc}}
2 20 Laurent GUERBY
3 1 Laurent GUERBY
h1. BGP
4 1 Laurent GUERBY
5 1 Laurent GUERBY
Nous utilisons BIRD sous Linux comme routeur BGP
6 1 Laurent GUERBY
7 1 Laurent GUERBY
http://bird.network.cz/
8 1 Laurent GUERBY
9 14 Laurent GUERBY
blog bgp http://www.renesys.com/blog/
10 15 Laurent GUERBY
flowspec http://www.slideshare.net/sfouant/an-introduction-to-bgp-flow-spec
11 16 Laurent GUERBY
DFZ = Default Free Zone archive http://archive.routeviews.org/
12 17 Laurent GUERBY
http://www.ripe.net/data-tools/stats/ris/routing-information-service
13 65 Laurent GUERBY
https://stat.ripe.net/widget/announced-prefixes
14 17 Laurent GUERBY
http://pch.net/resources/data/routing-tables/archive/
15 17 Laurent GUERBY
http://pch.net/resources/data/routing-tables/mrt-bgp-updates/
16 18 Laurent GUERBY
http://www.nanog.org/meetings/archive/
17 52 Laurent GUERBY
http://tools.ietf.org/html/draft-lapukhov-bgp-routing-large-dc-02
18 14 Laurent GUERBY
19 43 Laurent GUERBY
http://inside.godaddy.com/inside-story-happened-godaddy-com-sept-10-2012/
20 43 Laurent GUERBY
21 67 Laurent GUERBY
liste des communautés des opérateurs http://onesc.net/communities/ via http://www.bortzmeyer.org/7153.html
22 66 Laurent GUERBY
23 55 Laurent GUERBY
http://tools.ietf.org/html/rfc4271#section-9.1 BGP route decision process
24 55 Laurent GUERBY
25 29 Laurent GUERBY
http://www.ipbcop.org/
26 29 Laurent GUERBY
IP Best Current Operational Practices Documented best practices for Engineers by Engineers
27 29 Laurent GUERBY
28 30 Laurent GUERBY
BGP best practices ANSSI
29 30 Laurent GUERBY
https://www.sstic.org/media/SSTIC2012/SSTIC-actes/influence_des_bonnes_pratiques_sur_les_incidents_b/SSTIC2012-Article-influence_des_bonnes_pratiques_sur_les_incidents_bgp-contat_valadon_nataf_2.pdf
30 62 Laurent GUERBY
http://www.ssi.gouv.fr/fr/bonnes-pratiques/recommandations-et-guides/securite-des-reseaux/le-guide-des-bonnes-pratiques-de-configuration-de-bgp.html
31 64 Laurent GUERBY
http://tools.ietf.org/html/draft-ietf-opsec-bgp-security-01
32 30 Laurent GUERBY
33 37 Laurent GUERBY
https://www.ams-ix.net/technical/specifications-descriptions/ams-ix-route-servers
34 37 Laurent GUERBY
35 39 Laurent GUERBY
these LAAS BGP http://www.laas.fr/1-31360-Detail-Soutenance-de-these.php?id=600
36 41 Laurent GUERBY
http://www.laas.fr/1-31706-Publications.php?author=7738
37 1 Laurent GUERBY
http://www.net.t-labs.tu-berlin.de/papers/OMUPMO-OOSICP-11.pdf
38 42 Laurent GUERBY
http://hal.archives-ouvertes.fr/docs/00/60/53/83/PDF/dVirt-virtual_platform.pdf
39 42 Laurent GUERBY
http://hal.archives-ouvertes.fr/docs/00/48/70/74/PDF/Poster_SIGCOMM2010_philippe.pdf
40 40 Laurent GUERBY
41 44 Laurent GUERBY
Le monde sur BGP http://reseaux.blog.lemonde.fr/2012/11/04/routage-enjeu-cyberstrategie/
42 44 Laurent GUERBY
43 45 Laurent GUERBY
coupure free wanadoo http://www.journaldunet.com/solutions/0301/030122_freeft.shtml
44 45 Laurent GUERBY
45 46 Laurent GUERBY
tsunami Japon 2011 et BGP : http://archive.psg.com/111206.conext-quake.pdf
46 46 Laurent GUERBY
47 47 Laurent GUERBY
Session is up on telnet:route-views.routeviews.org username rviews
48 47 Laurent GUERBY
49 48 Laurent GUERBY
BGP book http://www.bortzmeyer.org/files/bgp.html
50 48 Laurent GUERBY
51 49 Laurent GUERBY
Cyclops is able to detect several forms of route hijack attacks http://cyclops.cs.ucla.edu/
52 50 Laurent GUERBY
BGPmon monitors the routing of your prefixes and alerts you in case of an 'interesting' path chang http://www.bgpmon.net/
53 49 Laurent GUERBY
54 53 Laurent GUERBY
http://jointtransit.nl/prices.html
55 53 Laurent GUERBY
56 54 Laurent GUERBY
http://blog.cloudflare.com/the-ddos-that-knocked-spamhaus-offline-and-ho
57 54 Laurent GUERBY
58 51 Laurent GUERBY
* taille table de routage http://bgp.potaroo.net/
59 1 Laurent GUERBY
60 65 Laurent GUERBY
* BGP	in	2011	 Geoff	Huston	 APNIC http://iepg.org/2011-11-ietf82/2011-11-13-bgp2011.pdf
61 56 Laurent GUERBY
62 57 Laurent GUERBY
* http://pages.cs.wisc.edu/~plonka/netgear-sntp/
63 57 Laurent GUERBY
64 58 Laurent GUERBY
* http://www.afnic.fr/fr/l-afnic-en-bref/actualites/actualites-generales/7114/show/l-observatoire-sur-la-resilience-de-l-internet-francais-publie-son-rapport-2012.html
65 58 Laurent GUERBY
66 59 Laurent GUERBY
* http://www.ris.ripe.net/dashboard/2a01:6600:8000::/40
67 59 Laurent GUERBY
68 60 Laurent GUERBY
* http://www.bortzmeyer.org/6996.html
69 60 Laurent GUERBY
** RFC 6996 : Autonomous System (AS) Reservation for Private Use
70 60 Laurent GUERBY
** http://www.iana.org/assignments/as-numbers
71 60 Laurent GUERBY
72 61 Laurent GUERBY
* Look for TRACEROUTE by SRCGUARDIAN in the Play Store.   It needs network access only...  Doesn't do TCP but does ICMP and UDP traceroutes and displays ASN as well ...
73 61 Laurent GUERBY
74 63 Laurent GUERBY
* http://www.team-cymru.org/Services/Bogons/bgp.html
75 63 Laurent GUERBY
** http://www.team-cymru.org/Services/Bogons/bgp-examples.html#bird-full
76 63 Laurent GUERBY
77 171 Laurent GUERBY
h1. Bird
78 171 Laurent GUERBY
79 171 Laurent GUERBY
h2. Link local IPv6 static route
80 171 Laurent GUERBY
81 171 Laurent GUERBY
<pre>
82 171 Laurent GUERBY
    protocol direct {
83 171 Laurent GUERBY
      interface "eth0";
84 171 Laurent GUERBY
    }
85 171 Laurent GUERBY
86 171 Laurent GUERBY
    protocol static {
87 171 Laurent GUERBY
      route 2001:db8::/32 via fe80::1%eth0;
88 171 Laurent GUERBY
    }
89 171 Laurent GUERBY
</pre>
90 171 Laurent GUERBY
91 171 Laurent GUERBY
92 38 Laurent GUERBY
h1. TouIX et GIX
93 38 Laurent GUERBY
94 38 Laurent GUERBY
http://touix.net
95 38 Laurent GUERBY
http://wikilulu.net/doku.php?id=articles:gix-howto
96 38 Laurent GUERBY
97 3 Laurent GUERBY
h1. Evolutions de la conf BGP
98 3 Laurent GUERBY
99 3 Laurent GUERBY
* http://lists.tetaneutral.net/pipermail/technique/2011-December/000118.html
100 3 Laurent GUERBY
101 5 Laurent GUERBY
TODO: 
102 6 Laurent GUERBY
* mise en place d'un gestionaire de version style git au moins pour documentation
103 5 Laurent GUERBY
* Comment gerer les password MD5 du fichier de conf (les garder secrets tout en publiant le reste)
104 5 Laurent GUERBY
* Atelier ?
105 7 Laurent GUERBY
** Laurent GUERBY
106 9 Raphaël Durand
** Solarus
107 10 Raphaël Durand
** Ajouter son nom...
108 4 Laurent GUERBY
109 13 Laurent GUERBY
Alternative a MP BGP
110 13 Laurent GUERBY
http://tools.ietf.org/html/draft-ietf-idr-bgp-multisession-06
111 13 Laurent GUERBY
112 31 Laurent GUERBY
Add Path
113 31 Laurent GUERBY
http://tools.ietf.org/html/draft-ietf-idr-add-paths-07
114 31 Laurent GUERBY
support in bird ? http://marc.info/?l=bird-users&m=134409996129466&w=2
115 31 Laurent GUERBY
116 2 Laurent GUERBY
h1. Liens
117 2 Laurent GUERBY
118 2 Laurent GUERBY
* http://www.cl.cam.ac.uk/~tgg22/talks/BGP_TUTORIAL_ICNP_2002.ppt
119 11 Laurent GUERBY
* http://www.menog.net/menog-meetings/menog5/presentations/smith-32bit-asn-update.pdf
120 12 Laurent GUERBY
* AS4 http://www.rfc-editor.org/rfc/rfc4893.txt
121 19 Laurent GUERBY
* bonnes pratiques incidents BGP
122 19 Laurent GUERBY
** https://www.sstic.org/media/SSTIC2012/SSTIC-actes/influence_des_bonnes_pratiques_sur_les_incidents_b/SSTIC2012-Slides-influence_des_bonnes_pratiques_sur_les_incidents_bgp-contat_valadon_nataf.pdf
123 35 Laurent GUERBY
* test ping plus UDP http://www.broadband-forum.org/technical/download/TR-143.pdf
124 2 Laurent GUERBY
125 1 Laurent GUERBY
h1. Configuration Toulouse
126 1 Laurent GUERBY
127 1 Laurent GUERBY
<pre>
128 1 Laurent GUERBY
router id 91.224.148.2;
129 1 Laurent GUERBY
define myas = 197422;
130 1 Laurent GUERBY
131 1 Laurent GUERBY
132 1 Laurent GUERBY
protocol device {
133 1 Laurent GUERBY
	scan time 10;
134 1 Laurent GUERBY
        primary "eth0" 91.224.148.3;
135 1 Laurent GUERBY
}
136 1 Laurent GUERBY
137 1 Laurent GUERBY
protocol static static_bgp {
138 1 Laurent GUERBY
	import all;
139 1 Laurent GUERBY
	route 91.224.148.0/23 reject;
140 1 Laurent GUERBY
}
141 1 Laurent GUERBY
142 1 Laurent GUERBY
143 1 Laurent GUERBY
protocol kernel{
144 1 Laurent GUERBY
	import all;
145 1 Laurent GUERBY
	export all;
146 1 Laurent GUERBY
}
147 1 Laurent GUERBY
148 1 Laurent GUERBY
149 1 Laurent GUERBY
function avoid_martians()
150 1 Laurent GUERBY
prefix set martians;
151 1 Laurent GUERBY
{
152 1 Laurent GUERBY
  martians = [ 169.254.0.0/16+, 172.16.0.0/12+, 192.168.0.0/16+, 10.0.0.0/8+, 224.0.0.0/4+, 240.0.0.0/4+ ];
153 1 Laurent GUERBY
154 1 Laurent GUERBY
  # Avoid 0.0.0.0/X
155 1 Laurent GUERBY
  if net.ip = 0.0.0.0 then return false;
156 1 Laurent GUERBY
157 1 Laurent GUERBY
  # Avoid too short and too long prefixes
158 1 Laurent GUERBY
  if (net.len < 8) || (net.len > 24) then return false;
159 1 Laurent GUERBY
160 1 Laurent GUERBY
  # Avoid RFC1918 networks
161 1 Laurent GUERBY
  if net ~ martians then return false;
162 1 Laurent GUERBY
  return true;
163 1 Laurent GUERBY
}
164 1 Laurent GUERBY
165 1 Laurent GUERBY
filter bgp_OUT {
166 1 Laurent GUERBY
	if (net ~ [91.224.148.0/23]) then accept;
167 1 Laurent GUERBY
	else reject;
168 1 Laurent GUERBY
}
169 1 Laurent GUERBY
170 1 Laurent GUERBY
171 1 Laurent GUERBY
protocol bgp TOUIX {
172 1 Laurent GUERBY
        local as myas;
173 1 Laurent GUERBY
        neighbor 91.213.236.1 as 47184;
174 1 Laurent GUERBY
        preference 200;
175 1 Laurent GUERBY
        import where avoid_martians();
176 1 Laurent GUERBY
        export filter bgp_OUT;
177 1 Laurent GUERBY
}
178 1 Laurent GUERBY
179 1 Laurent GUERBY
protocol bgp JAGUAR {
180 1 Laurent GUERBY
	 local as myas;
181 1 Laurent GUERBY
	 neighbor 31.172.233.1 as 30781;
182 1 Laurent GUERBY
	 preference 50;
183 1 Laurent GUERBY
         import where avoid_martians();
184 1 Laurent GUERBY
         export filter bgp_OUT;
185 1 Laurent GUERBY
}
186 1 Laurent GUERBY
187 1 Laurent GUERBY
protocol bgp TETANEUTRAL {
188 1 Laurent GUERBY
	local as myas;
189 1 Laurent GUERBY
	neighbor 91.224.148.2 as myas;
190 1 Laurent GUERBY
	preference 100;
191 1 Laurent GUERBY
	import where avoid_martians();
192 1 Laurent GUERBY
	export all;
193 1 Laurent GUERBY
}
194 1 Laurent GUERBY
</pre>
195 20 Laurent GUERBY
196 33 Laurent GUERBY
h1. IRR
197 33 Laurent GUERBY
198 33 Laurent GUERBY
* From nanog:
199 33 Laurent GUERBY
http://www.clarksys.com/blog/2009/09/02/using-irr-with-level3/
200 33 Laurent GUERBY
whois -h filtergen.level3.net "RIPE::YOUR-AS-SET  -searchpath=RIPE;ARIN;RADB -recurseok -warnonly"
201 33 Laurent GUERBY
202 20 Laurent GUERBY
h1. Blackholing
203 20 Laurent GUERBY
204 160 Laurent GUERBY
h2. DECIX
205 160 Laurent GUERBY
206 160 Laurent GUERBY
http://de-cix.net/products-services/de-cix-frankfurt/blackholing/
207 160 Laurent GUERBY
208 24 Laurent GUERBY
h2. Attaques
209 24 Laurent GUERBY
210 24 Laurent GUERBY
* 20120629 http://lists.tetaneutral.net/pipermail/technique/2012-July/000406.html
211 36 Laurent GUERBY
* http://blog.cloudflare.com/65gbps-ddos-no-problem
212 24 Laurent GUERBY
213 1 Laurent GUERBY
h2. URPF
214 34 Laurent GUERBY
215 65 Laurent GUERBY
blacklister une/plusieures sources est relativement complexe à mettre en place sur une petite infrastructure car nécessite la mise en place de l'URPF (Unicast Reverse Path Forwarding).
216 34 Laurent GUERBY
217 34 Laurent GUERBY
http://www.cisco.com/web/about/security/intelligence/ipv6_rtbh.html
218 34 Laurent GUERBY
219 20 Laurent GUERBY
h2. RFC3882 
220 1 Laurent GUERBY
221 22 Laurent GUERBY
* http://www.ietf.org/rfc/rfc3882.txt
222 1 Laurent GUERBY
community AS:666 sur annonce /32 pour balckhole par AS upstream
223 1 Laurent GUERBY
224 22 Laurent GUERBY
* doc CISCO
225 22 Laurent GUERBY
http://www.cisco.com/web/about/security/intelligence/blackhole.pdf
226 22 Laurent GUERBY
227 28 Laurent GUERBY
h2. RFC1997
228 28 Laurent GUERBY
229 28 Laurent GUERBY
* http://www.ietf.org/rfc/rfc1997.txt
230 28 Laurent GUERBY
BGP Communities Attribute
231 28 Laurent GUERBY
232 28 Laurent GUERBY
* doc CISCO
233 28 Laurent GUERBY
http://www.cisco.com/web/about/ac123/ac147/archived_issues/ipj_6-2/bgp_communities.html
234 28 Laurent GUERBY
235 22 Laurent GUERBY
h2. BIRD
236 22 Laurent GUERBY
237 22 Laurent GUERBY
* http://www.mail-archive.com/bird-users@atrey.karlin.mff.cuni.cz/msg01998.html
238 1 Laurent GUERBY
239 24 Laurent GUERBY
h2. Absolight
240 24 Laurent GUERBY
241 65 Laurent GUERBY
* communauté 29608:65001 sur /24..32 IPv4 et /41..128 IPv6 => blackhole
242 65 Laurent GUERBY
* test 20120703 IPv4 et IPv6, ça marche et convergence très rapide
243 24 Laurent GUERBY
244 22 Laurent GUERBY
h2. GIXE
245 1 Laurent GUERBY
246 65 Laurent GUERBY
* communauté 31576:666 sur /32 => blackhole
247 65 Laurent GUERBY
* test 20120703 => marche pas encore, signalé et dev a faire coté GIXE pour autoriser les /32
248 1 Laurent GUERBY
249 1 Laurent GUERBY
h2. Jaguar 
250 22 Laurent GUERBY
251 24 Laurent GUERBY
* https://extranet.jaguar-network.com/app/public/index.php?cmd=bgp-policy
252 65 Laurent GUERBY
* demande 20120702 : pas de communauté blackhole actuellement, en reflexion
253 65 Laurent GUERBY
* déploiement de matériel arbor networks, reglage a affiner (pas de detection d'attaque)
254 22 Laurent GUERBY
255 27 Laurent GUERBY
h2. Gitoyen
256 27 Laurent GUERBY
257 65 Laurent GUERBY
* demande 20120704 sur la liste, réponse 20120717
258 28 Laurent GUERBY
* Tata http://noc.easycolocate.nl/Teleglobe_bgp_comm.pdf
259 65 Laurent GUERBY
*** => black-hole route (host route or shorter prefix within customer’s RIR registred assignment) 64999:0
260 28 Laurent GUERBY
* Ielo  whois AS29075 => 29075:0 Null-route/Blackhole
261 32 Laurent GUERBY
* https://pad.ilico.org/p/cleanup-bgp-gitoyen
262 22 Laurent GUERBY
263 22 Laurent GUERBY
h2. France-IX
264 22 Laurent GUERBY
265 25 Laurent GUERBY
* community plan : https://apps.db.ripe.net/whois/lookup/ripe/aut-num/AS51706.html
266 26 Laurent GUERBY
* TODO tester
267 22 Laurent GUERBY
268 22 Laurent GUERBY
h2. Equinix-IX
269 1 Laurent GUERBY
270 26 Laurent GUERBY
* community plan : https://ix.equinix.com/ixp/mlpeCommunityInfo
271 26 Laurent GUERBY
* TODO tester
272 22 Laurent GUERBY
273 1 Laurent GUERBY
h2. TouIX
274 22 Laurent GUERBY
275 26 Laurent GUERBY
* demande acces switch et route server 20120702
276 22 Laurent GUERBY
* TODO
277 1 Laurent GUERBY
278 1 Laurent GUERBY
h2. Hurricane Electric
279 1 Laurent GUERBY
280 26 Laurent GUERBY
* http://www.he.net/adm/
281 1 Laurent GUERBY
* http://www.he.net/adm/blackhole.html
282 1 Laurent GUERBY
* TODO tester
283 28 Laurent GUERBY
284 28 Laurent GUERBY
h2. Sfinx
285 28 Laurent GUERBY
286 28 Laurent GUERBY
* http://www.renater.fr/route-servers-bgp?lang=fr
287 28 Laurent GUERBY
* whois  AS1304 =>
288 28 Laurent GUERBY
remarks:        1304:65281 = Apply NO-EXPORT community
289 28 Laurent GUERBY
remarks:        1304:65282 = Apply NO-ADVERTISE community
290 161 Laurent GUERBY
291 161 Laurent GUERBY
h2. Cogent
292 161 Laurent GUERBY
293 166 Laurent GUERBY
h3. Docs
294 166 Laurent GUERBY
295 161 Laurent GUERBY
* http://www.cogentco.com/files/docs/customer_service/guide/global_cogent_customer_user_guide.pdf
296 162 Laurent GUERBY
** communautés page 21-22
297 169 Laurent GUERBY
* http://www.onesc.net/communities/as174/
298 170 Laurent GUERBY
* https://www.nanog.org/mailinglist/mailarchives/old_archive/2005-03/msg00465.html
299 166 Laurent GUERBY
* https://www.nanog.org/meetings/nanog45/presentations/Sunday/RAS_traceroute_N45.pdf
300 1 Laurent GUERBY
301 162 Laurent GUERBY
France / Benelux:
302 162 Laurent GUERBY
+33 1 49 03 1818 (Hotline)
303 162 Laurent GUERBY
+33 1 49 03 1803 (fax)
304 162 Laurent GUERBY
fr-support@cogentco.com (maintenance and repair)
305 162 Laurent GUERBY
bnl-support@cogentco.com (maintenance and repair))
306 162 Laurent GUERBY
billingeu@cogentco.com (billing, customer care)
307 162 Laurent GUERBY
All Customers in Europe can also contact the European Cogent Customer Support team
308 162 Laurent GUERBY
using the generic email address for Europe: eu-support@cogentco.com 
309 162 Laurent GUERBY
310 164 Laurent GUERBY
Livré comme demandé sur rocade optique Fullsave :
311 164 Laurent GUERBY
Livré sur TLS01.CB.KD-05/A.To02.03&04 (tiroir optique N°2, fibre 03&04).
312 165 Laurent GUERBY
Cogent physical port te0/0/2/3-rcr11.tls01
313 164 Laurent GUERBY
314 163 Laurent GUERBY
Order ID/Service ID: 1-166108500
315 163 Laurent GUERBY
Service Type: EU_L3_ON_10GE_BURST
316 163 Laurent GUERBY
Commitment: 1000.0 MBps
317 163 Laurent GUERBY
Service Address: 125 bis ch du Sang de Serp
318 163 Laurent GUERBY
livraison dans baie Fullsave / salle LAP Te0/0/2/3 rcr01.tls01 -- > TLS01.CB.KD-05/A.To02.03&04
319 163 Laurent GUERBY
Toulouse, FR France 31000
320 163 Laurent GUERBY
Your service acceptance date is 27-May-2014 and your billing start date is 27-May-2014
321 163 Laurent GUERBY
322 163 Laurent GUERBY
Order ID/Service ID: 1-166108524
323 163 Laurent GUERBY
Service Type: EU_L3_ON_IPV6DSTACK_FLAT
324 163 Laurent GUERBY
Commitment: 0.0 MBps
325 163 Laurent GUERBY
Service Address: 125 bis ch du Sang de Serp
326 163 Laurent GUERBY
IPv6s fort port order 1-166108500
327 163 Laurent GUERBY
Toulouse, FR France 31000
328 163 Laurent GUERBY
Your service acceptance date is 27-May-2014 and your billing start date is 27-May-2014
329 163 Laurent GUERBY
330 163 Laurent GUERBY
Order ID/Service ID: 1-166108512
331 163 Laurent GUERBY
Service Type: EU_L0_ON_XCFIBER_FLAT
332 163 Laurent GUERBY
Commitment: 0.0 MBps
333 163 Laurent GUERBY
Service Address: 125 bis ch du Sang de Serp
334 163 Laurent GUERBY
Te0/0/2/3 rcr01.tls01 -- > TLS01.CB.KD-05/A.To02.03&04 port order 1-166108500
335 163 Laurent GUERBY
Toulouse, FR France 31000
336 163 Laurent GUERBY
Your service acceptance date is 27-May-2014 and your billing start date is 27-May-2014
337 162 Laurent GUERBY
338 162 Laurent GUERBY
h3. Config initiale BGP Cogent
339 162 Laurent GUERBY
340 161 Laurent GUERBY
<pre>
341 161 Laurent GUERBY
root@h7:~# cat /etc/bird/bird.conf
342 161 Laurent GUERBY
router id 149.11.58.74;
343 161 Laurent GUERBY
344 161 Laurent GUERBY
define myas = 197422;
345 161 Laurent GUERBY
346 161 Laurent GUERBY
timeformat base     iso long;
347 161 Laurent GUERBY
timeformat log      iso long;
348 161 Laurent GUERBY
timeformat protocol iso long;
349 161 Laurent GUERBY
timeformat route    iso long;
350 161 Laurent GUERBY
351 161 Laurent GUERBY
log "/var/log/bird/bird-20140527.log" all;
352 161 Laurent GUERBY
353 161 Laurent GUERBY
debug commands 2;
354 161 Laurent GUERBY
355 161 Laurent GUERBY
debug protocols { states, events };
356 161 Laurent GUERBY
357 161 Laurent GUERBY
protocol device {
358 161 Laurent GUERBY
        scan time 10;
359 161 Laurent GUERBY
}
360 161 Laurent GUERBY
361 161 Laurent GUERBY
protocol kernel {
362 161 Laurent GUERBY
        import all;
363 161 Laurent GUERBY
        export all;
364 161 Laurent GUERBY
        learn;
365 161 Laurent GUERBY
}
366 161 Laurent GUERBY
367 161 Laurent GUERBY
filter bgp_OUT {
368 167 Laurent GUERBY
        if (net ~ [91.224.148.0/23, 80.67.182.0/24, 89.234.156.0/23]) then {
369 167 Laurent GUERBY
          accept;
370 167 Laurent GUERBY
        }
371 161 Laurent GUERBY
        reject;
372 161 Laurent GUERBY
}
373 161 Laurent GUERBY
374 161 Laurent GUERBY
filter bgp_IN_PEERING {
375 161 Laurent GUERBY
       accept;
376 161 Laurent GUERBY
}
377 161 Laurent GUERBY
378 161 Laurent GUERBY
protocol bgp COGENT_TLS00 {
379 161 Laurent GUERBY
        local as myas;
380 161 Laurent GUERBY
        neighbor 149.11.58.73 as 174;
381 161 Laurent GUERBY
        import filter bgp_IN_PEERING;
382 161 Laurent GUERBY
        export filter bgp_OUT;
383 161 Laurent GUERBY
}
384 161 Laurent GUERBY
root@h7:~# cat /etc/bird/bird6.conf
385 161 Laurent GUERBY
router id 149.11.58.74;
386 161 Laurent GUERBY
387 161 Laurent GUERBY
define myas = 197422;
388 161 Laurent GUERBY
389 161 Laurent GUERBY
timeformat base     iso long;
390 161 Laurent GUERBY
timeformat log      iso long;
391 161 Laurent GUERBY
timeformat protocol iso long;
392 161 Laurent GUERBY
timeformat route    iso long;
393 161 Laurent GUERBY
394 161 Laurent GUERBY
log "/var/log/bird/bird6-20140527.log" all;
395 161 Laurent GUERBY
396 161 Laurent GUERBY
debug commands 2;
397 161 Laurent GUERBY
398 161 Laurent GUERBY
debug protocols { states, events };
399 161 Laurent GUERBY
400 161 Laurent GUERBY
listen bgp v6only;
401 161 Laurent GUERBY
402 161 Laurent GUERBY
protocol device {
403 161 Laurent GUERBY
        scan time 10;
404 161 Laurent GUERBY
}
405 161 Laurent GUERBY
406 161 Laurent GUERBY
protocol kernel {
407 161 Laurent GUERBY
        import all;
408 161 Laurent GUERBY
        export all;
409 161 Laurent GUERBY
        learn;
410 161 Laurent GUERBY
}
411 161 Laurent GUERBY
412 161 Laurent GUERBY
filter bgp_OUT_6 {
413 168 Laurent GUERBY
        if (net ~ [2a01:6600:8000::/40]) then {
414 168 Laurent GUERBY
          accept;
415 168 Laurent GUERBY
        }
416 161 Laurent GUERBY
        reject;
417 161 Laurent GUERBY
}
418 161 Laurent GUERBY
419 161 Laurent GUERBY
filter bgp_IN_PEERING_6 {
420 161 Laurent GUERBY
       accept;
421 161 Laurent GUERBY
}
422 161 Laurent GUERBY
423 161 Laurent GUERBY
protocol bgp COGENT_TLS00_6 {
424 161 Laurent GUERBY
        local as myas;
425 161 Laurent GUERBY
        neighbor 2001:978:2:68::8:1 as 174;
426 161 Laurent GUERBY
        import filter bgp_IN_PEERING_6;
427 161 Laurent GUERBY
        export filter bgp_OUT_6;
428 161 Laurent GUERBY
}
429 161 Laurent GUERBY
</pre>