quantum/bird-filter
1
0
Fork 0
mirror of https://github.com/quantum5/bird-filter.git synced 2025-04-24 00:51:57 -04:00
Code Issues Packages Projects Releases Wiki Activity

Improve skeleton bird config

Browse source
This commit is contained in:
Quantum 2023-10-07 00:48:28 -04:00
parent dd35fe6262
commit 398752c312
2 changed files with 27 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
README.md
View file

@ -25,10 +25,12 @@ solution like [PathVector][pv].
## Defining BGP sessions
You can use [`skeleton.conf`][skeleton] as a basic `bird` starting config. Note
that in this config, static protocol routes are internal to `bird` and will not
be exported to the kernel routing table. You can change this by changing the
export rules for `protocol kernel`.
You can use [`skeleton.conf`][skeleton] as a basic `bird` starting config.
Remember to read the `NOTE`s and change the things marked `FIXME`.
Also note that in this config, static protocol routes are internal to `bird`
and will not be exported to the kernel routing table. You can change this by
changing the export rules for `protocol kernel`.
This filter library makes use of two basic static protocols:
* `node_v4`: IPv4 routes to be exported by the `export_cone` helper.

21
skeleton.conf
View file

@ -8,6 +8,20 @@ protocol kernel {
scan time 60;
ipv4 {
export where source != RTS_STATIC;
# NOTE: this basic export above doesn't make the routes inserted into
# the kernel prefer your own IPs. Things will work fine with your
# server's IP assigned by the provider if you have a single upstream
# but strange things will happen if you have more than one peer.
# Instead, to use your own IP as the default source IP for outgoing
# connections on your system, add an IP from your range to the `lo`
# interface, remove the line above, and use the block below, changing
# 192.0.2.1 to the IP used.
#
# export filter {
# if source = RTS_STATIC then reject;
# if source = RTS_BGP then krt_prefsrc = 192.0.2.1;
# accept;
# };
};
}
@ -15,6 +29,13 @@ protocol kernel {
scan time 60;
ipv6 {
export where source != RTS_STATIC;
# NOTE: similar to above, use the following block to change the default
# source IP for outgoing connections.
# export filter {
# if source = RTS_STATIC then reject;
# if source = RTS_BGP then krt_prefsrc = 2001:db8::1;
# accept;
# };
};
}