summaryrefslogtreecommitdiff
path: root/usr.sbin/bgpd
AgeCommit message (Collapse)Author
2014-06-23The second level of the CTL_NET sysctl is a PF_*, not an AF_*Philip Guenther
inconsistent usage in route(8) noted by Gregor Best (gbe (at) ring0.de)
2014-05-20destinct is spelled distinct.David Gwynne
ok henning@ jmc@
2014-05-02spelling; Denis FondrasTheo de Raadt
2014-04-19Try to be clear why struct mrt_config nodes are allocated andClaudio Jeker
assigned to struct mrt pointers. I may need to rethink this later but lets hope this does not confuse more people and analyzers.
2014-04-13fix language/spelling in error stringBret Lambert
ok claudio@
2014-01-24fix the matching for filter rules of 'prefixlen = XX'Peter Hessler
OK claudio@
2014-01-23allow the somewhat special caseSebastian Benoit
match ... set nexthop ( 127.0.0.1 | ::1 ) match ... set nexthop blackhole to make a route valid before setting the blackhole flag on it. ok florian, claudio
2014-01-22Fix a bug where stale routes were not properly flushed on sessions announcingClaudio Jeker
the graceful restart capability. The bug is triggered when a router does not reconnect before the graceful restart timeout fires. This removes the checks for the CAPA_GR_FORWARD flag in the timeout and IMSG_SESSION_RESTARTED handler. CAPA_GR_RESTARTING is indicating that bgpd is currently doing a graceful restart for this neighbor and therefore the SE must issue a flush of stale routes in some way. CAPA_GR_FORWARD on the other hand is only indicating that the neighbor actually preserved the forwarding state which is too strict for the timeout handler. Tested by sthen@, florian@ and benno@
2014-01-22relax the cfg file secrecy check slightly to allow group readabilityHenning Brauer
default permissions and mtree NOT changed. prodded by benno, ok phessler benno jmatthew theo pelikan florian
2013-11-25use u_char for buffers in yylex, for ctype callsSebastian Benoit
found by millert@, ok deraadt@
2013-11-13from claudioSebastian Benoit
"Let msgbuf_write return -1 with errno EAGAIN. The users then must check if this was the case and readd the event or poll again. The current handling in the imsg code is wrong for sure." ok gilles, benno
2013-11-13Knob to set priority with which bgpd inserts routes into the kernelFlorian Obser
routing table. Need for it in "special" setups pointed out by Loic Blot (loic.blot _AT_ unix-experience _DOT_ fr) on tech. OK benno, henning
2013-10-30use more careful format strings to deal with various forms of AS#'sTheo de Raadt
ok claudio benno
2013-10-19Merge the prefix and prefixlen filter bits into one filter. Change theClaudio Jeker
filter expansion so that rules are grouped by prefixes last. The RDE will then be able to optimize the rules into table lookups but that is a later step. As additional goodies it is now possible to use inet and inet6 on their own and or-longer can be used as a shorthand for prefixlen >= len. OK henning@ sthen@ florian@
2013-10-17Less ambiguous wording concerning control socket configuration options.Bret Lambert
requested by and ok deraadt@
2013-10-16some .Pa;Jason McIntyre
2013-09-27typo in macro name; no md5 changeStuart Henderson
2013-09-10Document that wildcards can also be used when deleting communities.Paul de Weerd
After a discussion with sthen@ and claudio@; wording help from sthen@. OK claudio@, sthen@, jmc@
2013-08-14Rewrite the internals of the RDE reload logic.Claudio Jeker
This is the first step to make bgpd reload non blocking in the RDE. It also speeds up the reload time a fair bit in some cases (mainly if you run with multiple RIBs and have larger filtersets) and it should also fix a few edge cases on reloads. Testing done by benno@, florian@ and sthen@ OK henning@ and benno@
2013-08-14no longer any need to quote macro lines with >9 args;Jason McIntyre
From: Jan Stary
2013-07-17on graceful restart, the number of prefixes could be counted wrong,Sebastian Benoit
triping max-prefix. fix it this way, at least until prefix accounting is done better. diff from florian@ ok claudio@
2013-07-10Change the way the RDE updates its peer list. The SE is now always sendingClaudio Jeker
a IMSG_SESSION_ADD message to the RDE when a peer comes up or when a reload happens. The IMSG_SESSION_ADD has the full current config of the peer and so the RDE should end up with correct values. This affects mostly maxprefix and the RIB settings. OK henning@
2013-06-14grammar. ok jmc@Mark Lumsden
2013-05-31Unfuck BGP MPLS VPNs that got broken by the last few reload related commits.Claudio Jeker
OK henning@
2013-05-30When removing "dump (all|updates)" from bgpd.conf and reloading, tellFlorian Obser
the session engine to actually stop logging. Found the hard way by benno@. with & ok benno@ input & ok claudio@
2013-05-30Add partial support to bgpd for the ttl hack with ipv6. This sends the correctStuart Henderson
ttl on outgoing packets so peer sessions can come up correctly if both sides use ttl-security, but the kernel side is not yet implemented so incoming packets aren't verified (note added to manual for this). ok henning@
2013-05-22Set the correct route priority in send_rt6msg, as done for send_rtmsg.Stuart Henderson
Fixes v6 routes being added to the kernel as RTP_DEFAULT. ok florian@ benno@
2013-05-22whitespace nitsStuart Henderson
2013-05-20D'oh, add missing break in prefix_writebuf(). Another find by blambert@Claudio Jeker
who is to shy to commit these by himself.
2013-05-20Call pt_getaddr() a bit earlier so that addr.aid is available when firstClaudio Jeker
accessed. Found by magic clang skill of blambert@
2013-05-11change mrt rib dump ReopenTimerInterval from time_t to int. IntervallsSebastian Benoit
don't need to scale to 64 bits in this universe. ok claudio@ & florian@
2013-03-20less includesTheo de Raadt
2013-03-14use after free; 33% found by llvmFlorian Obser
OK sthen@
2013-03-14correct struct in sizeof(); found by llvmFlorian Obser
OK sthen@
2013-03-11handle ECONNABORTED errors from accept(). In many code blocks they can beTheo de Raadt
ignored silently and without aborting, much like EINTR and EWOULDBLOCK are. ok's from various maintainers of these directories...
2013-03-07Implements a few missing bits for better templates support:Claudio Jeker
- on config reload also adjust the cloned neighbors so that they get the config changes as well. - clean up sessions that are 1h idle but in state active (instead of down) - add bits to allow bgpctl to destroy cloned neighbors Tested by sthen@ some time ago, OK phessler@
2013-01-17Fixup printing of rdomain configs -- add network statements and only printClaudio Jeker
the description if it is set.
2013-01-10Don't log "unknown subcode" for subcode 0 when the hold timer expires,Stuart Henderson
this is a normal condition. ok phessler@ florian@
2013-01-09Almost exactly 10 years ago, we changed the length of PF table names toPeter Hessler
32 chars. Allow bgpd to use these newfangled longer names. OK sthen@
2013-01-02man page bits for "announce restart yes" defaultFlorian Obser
ok sthen@
2012-12-01The capability parser should only return an error in extreme cases. If aClaudio Jeker
particular capability is bad, log the fact and ignore it. This may give us a chance to bring up session that have e.g. unexpected AFI,SAFI pairs in them. Also make the error messages more user friendly. OK henning@, sthen@
2012-11-15buf_* -> ibuf_* in various log entries to reflect correct function names.Kenneth R Westerback
ok claudio@
2012-11-13pasto in log messageFlorian Obser
ok henning
2012-11-13macro tweaking;Jason McIntyre
2012-11-13Allow filtering based on the NEXTHOP attribute. This allows to build rulesClaudio Jeker
like: allow from any nexthop neighbor (to allow only prefixes that use the routers IP address as nexthop). Lots of testing, input and OK florian@
2012-11-02Unstick bgpctl reload after reloading a bgpd.conf with errors.Florian Obser
ok claudio, benno
2012-10-28Change email address in copyright to one that is valid.Claudio Jeker
2012-09-26last stage of rfc changes, using consistent Rs/Re blocks, and moving theJason McIntyre
references into a STANDARDS section;
2012-09-23Enable graceful restart by default. The only way to find out if it works forClaudio Jeker
real. After discussion with sthen@, henning@ and deraadt@. It can be disabled per neighbor with "announce restart no".
2012-09-18Expose the local weight in the ctl_show_rib struct so bgpctl can print it.Claudio Jeker
OK sthen@ henning@