summaryrefslogtreecommitdiff
path: root/usr.sbin/bgpd
AgeCommit message (Collapse)Author
2012-08-24- rfc 5082 replaces rfc 3682; ok claudioJason McIntyre
- flesh out SEE ALSO in bgpd.8 - fix a formatting warning in relayd.conf.5
2012-08-24rfc 4456 replaces rfc 2796; ok claudioJason McIntyre
2012-08-12By default mask the reserved bits and the ext len bit in the attributeClaudio Jeker
flags field. Some systems seem to start sending bad flags around which cause session failures in bgpd. Make sure that bgpd ignores the must be zero flags correctly and ensure that they are always reset to zero when sending updates out. Reported and patch tested by Laurent CARON, OK henning@
2012-07-13Cleanup the knexthop mess and make sure we only send an update to the RDEClaudio Jeker
when there was a change in the nexthop info. Fixes massive memory consumption crashes when used with ospfd (which sometimes updates route that have not changed). Tested together with benno@ and a lot of input from Florian Obser. OK henning@
2012-07-13Make sure that set med 0 is ACTION_SET_MED and not relative. FixesClaudio Jeker
set med 0 and Hennings iBGP sessions. OK henning@
2012-07-11Limit "while(setsockopt(..SO_RCVBUF/SO_SNDBUF..))" loops to prevent themStuart Henderson
running away if the setsockopt call fails, as may happen if a peer bounces at the wrong time. OK claudio@ after tweaks to an earlier version which was OK phessler@.
2012-07-09Fix the handling of the message read buf with regard to MSG_PROCESS_LIMIT.Claudio Jeker
The read buffer was only processed when new data came in. So on quiet sessions it could take minutes until the read buffer was processed at the end of a load. Nobody realized this in the last 7.5 years. Tested by sthen@ OK henning@
2012-07-07prefered -> preferred;Jason McIntyre
2012-07-07Explain the bgpd decision process in the man page. I'm tired of lookingClaudio Jeker
at the C code over and over again. With and OK sthen@, henning@, jmc@
2012-07-04Seems like I missed to adjust the route decision code to cover the thingsClaudio Jeker
that need to be checked because of route reflection. Do this now and reference the new RR RFC in the man page. OK henning@ sthen@
2012-07-01typo in comment, s/withdrawl/withdrawal/Stuart Henderson
2012-06-19There are five main sections, not four, since routing domain support was added.Stuart Henderson
From Rod Whitworth.
2012-06-10Add error messages for BGP Finite State Machine Error subcodes as definedClaudio Jeker
in RFC 6608. OK henning@ sthen@
2012-05-27Extend the network code to allow attributes to be passed in with prefixes.Claudio Jeker
In the end this will allow anyone to use MRT table dumps to load prefixes into a bgpd instance. For example you can download the RIPE dumps and load full-feeds onto your laptop until the poor thing dies. OK henning@ sthen@
2012-05-22Flush the right networks, the dynamic ones not the static ones.Claudio Jeker
OK henning@, sthen@
2012-05-22Sync log strings with the possible values of IMSG_CTL_RESULTClaudio Jeker
OK henning@ sthen@
2012-05-22Fix a warning message to print the correct information. OK henning@ sthen@Claudio Jeker
2012-04-24take a stab at documenting when arguments need quoted, and valid macroJason McIntyre
characters; prompted by a diff from robert peichaer org thanks gilles and henning for feedback ok deraadt zinke
2012-04-12The ebgp flags is just a truth value and it is better to not == 1 compares.Claudio Jeker
OK henning@ sthen@
2012-04-12aspath_neighbor() should return the local AS number for empty AS pathes.Claudio Jeker
OK henning@ sthen@
2012-04-12accept() pacing for bgpd based on similar work done on other daemons.Claudio Jeker
OK henning@ sthen@
2012-04-07The Route Distinguishers should not be used to control distribution.Claudio Jeker
Found by and fix tested by Rimi Philippe
2012-03-27Introduce F_CTL_ACTIVE a flag to only show selected pathes.Claudio Jeker
Requested and OK deraadt@, OK henning@
2012-01-06typo in log_peer_warnx messageStuart Henderson
2011-11-06Add a #include that's currently picked up via another header that'sPhilip Guenthe
violating namespace rules ok claudio@
2011-09-21Fix nexthop_modify() to reset the flags when called. Until nowClaudio Jeker
set nexthop-self was sticky and so later set nexthop <IP> were not applied. Problem found and fix tested by Tony Sarendal. OK henning@
2011-09-20Move a few functions into util.c because bgpctl will need them soon.Claudio Jeker
2011-09-19Make it more clear what are subtypes and some more cleanup of theClaudio Jeker
mrt definitions.
2011-09-19remove an unused ctl struct and remove some unneeded values fromClaudio Jeker
struct ctl_show_rib since bgpctl does not look at them at all.
2011-09-18Reorder the headerfiles a bit. Move the bgpd specific prototypes out ofClaudio Jeker
mrt.h. Now mrt.h includes only protocol specific defines.
2011-09-17Implement new mrt table dump format as specified in draft-ietf-grow-mrt.Claudio Jeker
Tested with IP and IPv6 sessions and against the libbgpdump parser. OK henning@
2011-09-16Fix my usual typoClaudio Jeker
2011-08-20Decouple log_verbose() from log_init() so the verbose flag stays set withStuart Henderson
"-v" (previously only "-vd" worked). Similar to recent ospfd commit. ok claudio@
2011-07-09remove that rlimit code, rc.d and login classes do it much betterer theseHenning Brauer
days. screaming bob ok claudio
2011-07-04LINK_STATE_IS_UP() cleanup userland part. There is no need to specialClaudio Jeker
case carp(4) interfaces anymore. LINK_STATE_IS_UP() almost always does the right job. OK deraadt@ henning@ This needs a -current kernel or link state may be not reported correctly.
2011-06-23Use a common text explaining how the various configuration parsers usingStuart Henderson
the standard OpenBSD-style parse.y handle continuing lines with backslashes, paying particular attention to how comments are handled (which can cause nasty side-effects if you're not expecting it). Most wording from jmc@, with suggestions from fgsch@, marc@, Richard Toohey, patrick keshishian and Florian Obser, ok jmc@.
2011-05-05ibuf_add returns 0 or -1. adding up the return values in errs and thenHenning Brauer
checking errs > 0 is not going to work... also make errs signed in 2 cases triggered by Milosz Jakubowski <milosz.jakubowski at gmail.com> pointing out a few cases, diff written from scratch to cover all of them. unsigned errs noticed by sthen. ok claudio sthen
2011-05-01On reload the filtersets attached to a network need to be moved to theClaudio Jeker
existing network element. First free the old filterset and then move the new on top of it. This solves the reload issue with changing network statements. OK henning@
2011-05-01Free cname and rcname on exit. Found by Milosz JakubowskiClaudio Jeker
2011-04-30no need to escape |, pointed out by jmc@Stuart Henderson
"it's worth killing, if just to stop it being copied all over the place"
2011-03-07continguous -> contiguousHenning Brauer
From: "Anthony J. Bentley" <anthonyjbentley at gmail dot com>
2011-02-15Use log_as() to print the offending neighbor-as instead of printing itClaudio Jeker
as an int. This way 4-byte ASes should be printed nicely. OK deraadt@ henning@
2011-01-29improve error msg when enforce-neighbor-as is on and the path doesn'tHenning Brauer
start with the neighbor-as. makes finding the offender easier. from Sebastian Benoit <benoit-lists at fb12.de>, claudio agrees
2011-01-27change a logged error from 'enforce remote-as' to the correctStuart Henderson
'enforce neighbor-as'; from Sebastian Benoit on tech@.
2011-01-14plug memleak in err path; from zinovik, ok claudioHenning Brauer
2010-12-31Add missing #includes instead of assuming that some system header pulls inPhilip Guenthe
the needed bits ok deraadt@, millert@
2010-12-23Increase the DATA limit in the RDE to the max value and do the sameClaudio Jeker
for NOFILE in the session engine. OK henning, sthen@
2010-12-09The PF_KEY socket is like the routing socket. It must be polled all theClaudio Jeker
time to consume broadcasted messages or the socket gets full and own messages that are needed are lost. This fixes an infinit loop in pfkey_reply that happens when bgpd tcp md5sum is used on a system that also runs a larger IPsec setup. OK henning, lot of patience, debuging and testing by Thomas Boernert
2010-11-30Do what the comment actually says. Ignore the full attribute not only theClaudio Jeker
header. ATTR_UNDEF is still a bit strange though but at least it will now parse and ignore such a freak attribute correctly.
2010-11-29Deny prefixes that have F_ATTR_PARSE_ERR set by default. Now theyClaudio Jeker
will not leak into the Loc-RIB or other RIBs but act as withdraws. The invalid prefixes would not been selected anyway but it is better to keep them out of all RIBs but the Adj-RIB-In.