brnet/bird_config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

q

Browse Source
This commit is contained in:
gaoyuheng
2026-01-28 12:37:15 +08:00
parent a7252f5066
commit 022ef0ae8a
8 changed files with 80 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
bird/filter/inet_downstream.conf Normal file
View File

@@ -0,0 +1,15 @@
# 下游-收表控制器
function function_inet6_downstream_import() {
if is_bogon_prefix() || (bgp_path.len > 100) then return false;
bgp_large_community.add((LOCAL_ASN,200,0));
return true;
}
# 下游-发表控制器
function function_inet6_downstream_export() {
# 过滤掉begon和过长的段子（太长了下游受不了）
if is_bogon_prefix() || (bgp_path.len > 100) then reject;
# BGP发出底线防控
if bgp_large_community !~ [(LOCAL_ASN, 200,0)] then return false;
return true;
}

36
bird/filter/inet_filter.conf
View File

@@ -1,12 +1,12 @@
function function_inet4_bgp_import() {
if is_self_net_inet4() then return false;
if is_self_net() then return false;
if is_bogon_prefix() || (bgp_path.len > 100) then return false;
bgp_large_community.add((LOCAL_ASN,200,0));
return true;
}
function function_inet4_bgp_export() {
if !is_self_net_inet4() then return false;
if !is_self_net() then return false;
if is_bogon_prefix() || (bgp_path.len > 100) then reject;
if source != RTS_STATIC then reject;
if bgp_large_community !~ [(LOCAL_ASN, 200,0)] then return false;
@@ -14,44 +14,16 @@ function function_inet4_bgp_export() {
}
function function_inet6_bgp_import() {
if is_self_net_inet6() then return false;
if is_self_net() then return false;
if is_bogon_prefix() || (bgp_path.len > 100) then return false;
bgp_large_community.add((LOCAL_ASN,200,0));
return true;
}
function function_inet6_bgp_export() {
if !is_self_net_inet6() then return false;
if !is_self_net() then return false;
if is_bogon_prefix() || (bgp_path.len > 100) then reject;
if source != RTS_STATIC then reject;
if bgp_large_community !~ [(LOCAL_ASN, 200,0)] then return false;
return true;
}
function function_inet4_ibgp_import() {
if is_self_net_inet4() then return false;
if is_bogon_prefix() then return false;
if bgp_large_community ~ [(LOCAL_ASN, 1,*)] then reject;
return true;
}
function function_inet4_ibgp_export() {
if is_self_net_inet4() then return false;
if is_bogon_prefix() then return false;
if bgp_large_community ~ [(LOCAL_ASN, 1,*)] then reject;
return true;
}
function function_inet6_ibgp_import() {
if is_self_net_inet6() then reject;
if is_bogon_prefix() then reject;
if bgp_large_community ~ [(LOCAL_ASN, 1,*)] then reject;
return true;
}
function function_inet6_ibgp_export() {
if is_self_net_inet6() then reject;
if is_bogon_prefix() then reject;
if bgp_large_community ~ [(LOCAL_ASN, 1,*)] then reject;
return true;
}

27
bird/filter/inet_ibgp.conf Normal file
View File

@@ -0,0 +1,27 @@
function function_inet4_ibgp_import() {
if is_self_net() then return false;
if is_bogon_prefix() then return false;
if bgp_large_community ~ [(LOCAL_ASN, 1,*)] then reject;
return true;
}
function function_inet4_ibgp_export() {
if is_self_net() then return false;
if is_bogon_prefix() then return false;
if bgp_large_community ~ [(LOCAL_ASN, 1,*)] then reject;
return true;
}
function function_inet6_ibgp_import() {
if is_self_net() then reject;
if is_bogon_prefix() then reject;
if bgp_large_community ~ [(LOCAL_ASN, 1,*)] then reject;
return true;
}
function function_inet6_ibgp_export() {
if is_self_net() then reject;
if is_bogon_prefix() then reject;
if bgp_large_community ~ [(LOCAL_ASN, 1,*)] then reject;
return true;
}

8
bird/function/dn42.conf
View File

@@ -11,4 +11,12 @@ function is_dn42_prefix() {
NET_IP6: return net ~ DN42_PREFIXES_V6;
else: print "is_dn42_prefix: unexpected net.type ", net.type, " ", net; return false;
}
}
function is_dn42_self_net() {
case net.type {
NET_IP4: return net ~ IS_SELF_NET_dn42v4;
NET_IP6: return net ~ IS_SELF_NET_dn42v6;
else: print "is_dn42_prefix: unexpected net.type ", net.type, " ", net; return false;
}
}

7
bird/function/inet.conf Normal file
View File

@@ -0,0 +1,7 @@
function is_self_net() {
case net.type {
NET_IP4: return net ~ IS_SELF_NET_inet4;
NET_IP6: return net ~ IS_SELF_NET_inet6;
else: print "is_dn42_prefix: unexpected net.type ", net.type, " ", net; return false;
}
}

8
bird/function/unet.conf
View File

@@ -6,13 +6,13 @@ function unet_is_valid_network_v4() {
function unet_is_valid_network_v4_allnet(){
if unet_is_valid_network_v4() then return true;
if is_self_net_inet4() then return true;
if is_self_net_dn42v4() then return true;
if is_self_net() then return true;
if is_dn42_self_net() then return true;
return false;
}
function unet_is_voalid_net_v6(){
if is_self_net_inet6() then return true;
if is_self_net_dn42v6() then return true;
if is_self_net() then return true;
if is_dn42_self_net() then return true;
return false;
}

12
bird/template/dn42.conf
View File

@@ -5,7 +5,7 @@ template bgp dn42_bgp_up {
table dn42v4;
import filter {
if !is_dn42_prefix() then reject;
if is_self_net_dn42v4() then reject;
if is_dn42_self_net() then reject;
bgp_large_community.add((DN42_ASN,200,0));# 传输到Ebgp
accept;
};
@@ -22,7 +22,7 @@ template bgp dn42_bgp_up {
table dn42v6;
import filter {
if !is_dn42_prefix() then reject;
if is_self_net_dn42v6() then reject;
if is_dn42_self_net() then reject;
bgp_large_community.add((DN42_ASN,200,0));# 传输到Ebgp
accept;
};
@@ -48,13 +48,13 @@ template bgp dn42_ibgp {
import filter {
if bgp_large_community ~ [(DN42_ASN, 1,*)] then reject;
if !is_dn42_prefix() then reject;
if is_self_net_dn42v4() then reject;
if is_dn42_self_net() then reject;
accept;
};
export filter {
if bgp_large_community ~ [(DN42_ASN, 1,*)] then reject;
if !is_dn42_prefix() then reject;
if is_self_net_dn42v4() then reject;
if is_dn42_self_net() then reject;
accept;
};
};
@@ -65,13 +65,13 @@ template bgp dn42_ibgp {
import filter {
if bgp_large_community ~ [(DN42_ASN, 1,*)] then reject;
if !is_dn42_prefix() then reject;
if is_self_net_dn42v6() then reject;
if is_dn42_self_net() then reject;
accept;
};
export filter {
if bgp_large_community ~ [(DN42_ASN, 1,*)] then reject;
if !is_dn42_prefix() then reject;
if is_self_net_dn42v6() then reject;
if is_dn42_self_net() then reject;
accept;
};
};