Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-01-07 | RPKI: Remove port (and SSH username) from 'Cache server' output line | Ondrej Zajicek (work) | |
It was mixed-up if hostname is IPv6 address, and reporting separate values (like port) on separate lines fits better into key-value style of 'show protocols all' output. Also, the patch simplifies transport identification formatting (although it is unused now). Thanks to Alarig Le Lay for the suggestion. | |||
2020-02-04 | RPKI: Allow build without libSSH | Maria Matejka | |
2018-01-10 | Use non-fatal asserts even for regular build | Ondrej Zajicek (work) | |
2016-12-07 | LibSSH may be switched off together with RPKI | Jan Moskyto Matejka | |
2016-12-07 | RPKI protocol with one cache server per protocol | Pavel TvrdĂk | |
The RPKI protocol (RFC 6810) using the RTRLib (http://rpki.realmv6.org/) that is integrated inside the BIRD's code. Implemeted transports are: - unprotected transport over TCP - secure transport over SSHv2 Example configuration of bird.conf: ... roa4 table r4; roa6 table r6; protocol rpki { debug all; # Import both IPv4 and IPv6 ROAs roa4 { table r4; }; roa6 { table r6; }; # Set cache server (validator) address, # overwrite default port 323 remote "rpki-validator.realmv6.org" port 8282; # Overwrite default time intervals retry 10; # Default 600 seconds refresh 60; # Default 3600 seconds expire 600; # Default 7200 seconds } protocol rpki { debug all; # Import only IPv4 routes roa4 { table r4; }; # Set cache server address to localhost, # use default ports tcp => 323 or ssh => 22 remote 127.0.0.1; # Use SSH transport instead of unprotected transport over TCP ssh encryption { bird private key "/home/birdgeek/.ssh/id_rsa"; remote public key "/home/birdgeek/.ssh/known_hosts"; user "birdgeek"; }; } ... |