mirror of
https://gitlab.nic.cz/labs/bird.git
synced 2025-01-03 15:41:54 +00:00
4661035431
The RPKI protocol (RFC 6810) using the RTRLib (http://rpki.realmv6.org/) that is integrated inside the BIRD's code. Implemeted transports are: - unprotected transport over TCP - secure transport over SSHv2 Example configuration of bird.conf: ... roa4 table r4; roa6 table r6; protocol rpki { debug all; # Import both IPv4 and IPv6 ROAs roa4 { table r4; }; roa6 { table r6; }; # Set cache server (validator) address, # overwrite default port 323 remote "rpki-validator.realmv6.org" port 8282; # Overwrite default time intervals retry 10; # Default 600 seconds refresh 60; # Default 3600 seconds expire 600; # Default 7200 seconds } protocol rpki { debug all; # Import only IPv4 routes roa4 { table r4; }; # Set cache server address to localhost, # use default ports tcp => 323 or ssh => 22 remote 127.0.0.1; # Use SSH transport instead of unprotected transport over TCP ssh encryption { bird private key "/home/birdgeek/.ssh/id_rsa"; remote public key "/home/birdgeek/.ssh/known_hosts"; user "birdgeek"; }; } ...
38 lines
983 B
C
38 lines
983 B
C
/*
|
|
* BIRD -- The Resource Public Key Infrastructure (RPKI) to Router Protocol
|
|
*
|
|
* (c) 2015 CZ.NIC
|
|
*
|
|
* This file was a part of RTRlib: http://rpki.realmv6.org/
|
|
*
|
|
* Can be freely distributed and used under the terms of the GNU GPL.
|
|
*/
|
|
|
|
#ifndef _BIRD_RPKI_PACKETS_H_
|
|
#define _BIRD_RPKI_PACKETS_H_
|
|
|
|
#include <arpa/inet.h>
|
|
|
|
#define RPKI_RX_BUFFER_SIZE 65536
|
|
#define RPKI_TX_BUFFER_SIZE 65536
|
|
#define RPKI_PDU_HEADER_LEN 8
|
|
|
|
/* Error PDU size is the biggest (has encapsulate PDU inside):
|
|
* Header size 8 Bytes +
|
|
* Length of Encapsulated PDU 4 Bytes +
|
|
* Encapsulated PDU IPv6 32 Bytes +
|
|
* Length of Text 4 Bytes +
|
|
* UTF-8 Text 400*2 Bytes
|
|
* = 848 Bytes
|
|
*/
|
|
#define RPKI_PDU_MAX_LEN 848
|
|
|
|
int rpki_send_serial_query(struct rpki_cache *cache);
|
|
int rpki_send_reset_query(struct rpki_cache *cache);
|
|
int rpki_rx_hook(sock *sk, int size);
|
|
void rpki_connected_hook(sock *sk);
|
|
void rpki_err_hook(sock *sk, int size);
|
|
void rpki_table_remove_all(struct rpki_cache *cache);
|
|
|
|
#endif
|