Index | Thread | Search

From:
Job Snijders <job@openbsd.org>
Subject:
Re: bgpd.conf with 4-byte ASN
To:
tech@openbsd.org
Date:
Wed, 18 Dec 2024 15:34:03 +0000

Download raw body.

Thread
On Tue, Dec 17, 2024 at 09:19:00PM +0100, Claudio Jeker wrote:
> This makes the example bgpd.conf work with a 4byte ASN.
> 
> In general I would try to avoid using a macro expand in communities when
> there is local-as and neighbor-as
> 
> I left the only $ASN in the ibgp example (apart from AS $ASN at the top).

I agree that `local-as` seems to fix the immediate issue, but it doesn't
seem to be a solution that is very different from how internally rules
where `local-as` cannot fit end up being silently ignored.

I am a bit worried about silencing what obviously are real errors.

For example, if someone makes a typo and ends up configuring:

    match from ebgp set { community delete 655366:* }

instead of:

    match from ebgp set { community delete 65536:* }

(they accidentally pressed 6 twice)

the program won't really help the operator by being silent about it

I'm OK as an immediate solution to using "local-as:" in /etc/examples/
because I can't immediately come up with a better approach.

Kind regards,

Job