0
0
mirror of https://gitlab.nic.cz/labs/bird.git synced 2024-11-17 08:38:42 +00:00
bird/nest
Pavel Tvrdík 65d2a88dd2 RPKI protocol with one cache server per protocol
The RPKI protocol (RFC 6810) using the RTRLib
(http://rpki.realmv6.org/) that is integrated inside
the BIRD's code.

Implemeted transports are:
 - unprotected transport over TCP
 - secure transport over SSHv2

Example configuration of bird.conf:
  ...
  roa4 table r4;
  roa6 table r6;

  protocol rpki {
    debug all;

    # Import both IPv4 and IPv6 ROAs
    roa4 { table r4; };
    roa6 { table r6; };

    # Set cache server (validator) address,
    # overwrite default port 323
    remote "rpki-validator.realmv6.org" port 8282;

    # Overwrite default time intervals
    retry   10;         # Default 600 seconds
    refresh 60;         # Default 3600 seconds
    expire 600;         # Default 7200 seconds
  }

  protocol rpki {
    debug all;

    # Import only IPv4 routes
    roa4 { table r4; };

    # Set cache server address to localhost,
    # use default ports tcp => 323 or ssh => 22
    remote 127.0.0.1;

    # Use SSH transport instead of unprotected transport over TCP
    ssh encryption {
      bird private key "/home/birdgeek/.ssh/id_rsa";
      remote public key "/home/birdgeek/.ssh/known_hosts";
      user "birdgeek";
    };
  }
  ...
2016-12-07 09:35:24 +01:00
..
a-path.c Filter: Implement last_nonaggregated operator on bgp_path 2016-02-16 17:33:58 +01:00
a-set.c unsigned [int] -> uint 2015-06-08 02:24:08 +02:00
attrs.h Filter: Implement last_nonaggregated operator on bgp_path 2016-02-16 17:33:58 +01:00
bfd.h Static: Support for BFD controlled static routes 2015-07-24 18:02:07 +02:00
bird.h Initial commit on integrated BIRD 2015-11-05 12:48:52 +01:00
cli.c unsigned [int] -> uint 2015-06-08 02:24:08 +02:00
cli.h unsigned [int] -> uint 2015-06-08 02:24:08 +02:00
cmds.c Delete old ROA code 2016-01-20 16:46:58 +01:00
cmds.h Implements eval command and minor CLI cleanups. 2013-07-25 13:15:32 +02:00
config.Y Merge remote-tracking branch 'origin/master' into int-new 2016-05-12 18:03:23 +02:00
Doc Documented sockets, events and timers. 2000-06-05 12:19:12 +00:00
iface.c Channels - explicit links between protocols and tables 2016-02-01 10:28:50 +01:00
iface.h Follow-up commit on integrated BIRD 2015-11-12 02:03:59 +01:00
locks.c Fixes a bug in locking code. 2015-02-21 12:30:14 +01:00
locks.h Temporary integrated OSPF commit. 2014-07-18 18:24:12 +02:00
Makefile Build system reworked to one global Makefile with includes and no nesting 2016-05-10 14:07:34 +02:00
mrtdump.h NEWS, version and documentation update. 2010-01-06 16:57:20 +01:00
neighbor.c Merge remote-tracking branch 'origin/master' into int-new 2016-05-12 18:03:23 +02:00
password.c Major RIP redesign 2015-10-05 13:18:10 +02:00
password.h Build system reworked to one global Makefile with includes and no nesting 2016-05-10 14:07:34 +02:00
proto-hooks.c Merge remote-tracking branch 'origin/master' into int-new 2016-05-12 18:03:23 +02:00
proto.c RPKI protocol with one cache server per protocol 2016-12-07 09:35:24 +01:00
proto.sgml Channels - explicit links between protocols and tables 2016-02-01 10:28:50 +01:00
protocol.h RPKI protocol with one cache server per protocol 2016-12-07 09:35:24 +01:00
route.h RPKI protocol with one cache server per protocol 2016-12-07 09:35:24 +01:00
rt-attr.c Merge branch 'int-new' of gitlab.labs.nic.cz:labs/bird into int-new 2016-05-13 13:48:04 +02:00
rt-dev.c Merge remote-tracking branch 'origin/master' into int-new 2016-05-12 18:03:23 +02:00
rt-dev.h Merge remote-tracking branch 'origin/master' into int-new 2016-05-12 18:03:23 +02:00
rt-fib.c BSD: Explicitly dropping routes with mismatched AF's. 2016-01-21 14:55:33 +01:00
rt-table.c RPKI protocol with one cache server per protocol 2016-12-07 09:35:24 +01:00