0
0
mirror of https://gitlab.nic.cz/labs/bird.git synced 2024-12-22 17:51:53 +00:00
Commit Graph

9 Commits

Author SHA1 Message Date
Pavel Tvrdík
a1f92cf15b RPKI: remove old code from grammar 2016-01-25 15:39:38 +01:00
Pavel Tvrdík
2c73a9c70d RPKI: Use '%N' key in printf net_addr 2016-01-25 15:39:38 +01:00
Pavel Tvrdík
3f2e839844 RPKI: Improve get_status cb and add show_proto_info cb 2016-01-25 15:39:38 +01:00
Pavel Tvrdík
25fc1cc645 RPKI: Force refresh group status after reconfigure 2016-01-25 15:39:38 +01:00
Pavel Tvrdík
e45dc8e01d RPKI: refactore transports 2016-01-25 15:39:38 +01:00
Pavel Tvrdík
4c1e54d4a6 RPKI: improve reconfiguration 2016-01-25 15:39:38 +01:00
Pavel Tvrdík
c727c28404 RPKI: replace sock->af usage with sock->fam 2016-01-25 15:39:38 +01:00
Pavel Tvrdík
cf2d812e9d RPKI: Add a documentation 2016-01-25 15:39:38 +01:00
Pavel Tvrdík
41f4b5940f RPKI protocol with integrated RTRLib inside
Add the RPKI protocol (RFC 6810) using the RTRLib
(http://rpki.realmv6.org/) that is integrated inside
the BIRD's code.

Implemeted transports are:
 - unprotected transport over TCP
 - secure transport over SSHv2

The code should work properly with one or more cache servers per protocol.

Example configuration of bird.conf:
  ...
  roa4 table roatable;

  protocol rpki {
    table roatable;

    cache 127.0.0.1; # defaults: port 8282, preference 1, no encryption

    cache 127.0.0.1 {
      preference 1;
      port 2222;
      ssh encryption {
        bird private key "/home/birdgeek/.ssh/id_rsa";
        cache public key "/home/birdgeek/.ssh/known_hosts";
        user "birdgeek";
      };
    };

    cache "rpki-validator.realmv6.org" {
      preference 2;
    };
  }
  ...
2016-01-25 15:39:38 +01:00