0
0
mirror of https://gitlab.nic.cz/labs/bird.git synced 2024-12-22 09:41:54 +00:00
bird/sysdep/unix
Pavel Tvrdík 65d2a88dd2 RPKI protocol with one cache server per protocol
The RPKI protocol (RFC 6810) using the RTRLib
(http://rpki.realmv6.org/) that is integrated inside
the BIRD's code.

Implemeted transports are:
 - unprotected transport over TCP
 - secure transport over SSHv2

Example configuration of bird.conf:
  ...
  roa4 table r4;
  roa6 table r6;

  protocol rpki {
    debug all;

    # Import both IPv4 and IPv6 ROAs
    roa4 { table r4; };
    roa6 { table r6; };

    # Set cache server (validator) address,
    # overwrite default port 323
    remote "rpki-validator.realmv6.org" port 8282;

    # Overwrite default time intervals
    retry   10;         # Default 600 seconds
    refresh 60;         # Default 3600 seconds
    expire 600;         # Default 7200 seconds
  }

  protocol rpki {
    debug all;

    # Import only IPv4 routes
    roa4 { table r4; };

    # Set cache server address to localhost,
    # use default ports tcp => 323 or ssh => 22
    remote 127.0.0.1;

    # Use SSH transport instead of unprotected transport over TCP
    ssh encryption {
      bird private key "/home/birdgeek/.ssh/id_rsa";
      remote public key "/home/birdgeek/.ssh/known_hosts";
      user "birdgeek";
    };
  }
  ...
2016-12-07 09:35:24 +01:00
..
config.Y Build system reworked to one global Makefile with includes and no nesting 2016-05-10 14:07:34 +02:00
Doc Documented all the sysdeps (only briefly, I admit). 2000-06-05 12:49:04 +00:00
endian.h OpenBSD port related changes. 2009-05-11 01:32:49 +02:00
io.c RPKI protocol with one cache server per protocol 2016-12-07 09:35:24 +01:00
krt.c Merge branch 'int-new' into int-new-merged 2016-05-10 14:30:49 +02:00
krt.h Build system reworked to one global Makefile with includes and no nesting 2016-05-10 14:07:34 +02:00
krt.Y Build system reworked to one global Makefile with includes and no nesting 2016-05-10 14:07:34 +02:00
log.c Merge remote-tracking branch 'origin/master' into int-new 2016-05-12 18:03:23 +02:00
main.c Merge remote-tracking branch 'origin/master' into int-new 2016-05-12 18:03:23 +02:00
Makefile Build system reworked to one global Makefile with includes and no nesting 2016-05-10 14:07:34 +02:00
random.c Split random number functions off io.c, so that they can be documented 2000-06-05 11:46:40 +00:00
timer.h Fininshing integrated OSPF. 2014-11-03 10:42:55 +01:00
unix.h IO: Minor changes in socket AF handing 2016-05-17 15:21:49 +02:00