Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-05-01 | RPKI: fixed rare va_list leak | Maria Matejka | |
2020-02-04 | RPKI: Allow build without libSSH | Maria Matejka | |
2019-10-19 | RPKI: Fix handling of IPv6 cache addresses | Ondrej Zajicek (work) | |
The old code used just sizeof(struct sockaddr) bytes of IP address. | |||
2019-07-29 | RPKI: Fix allocation of hostname when using an IPv6 address | Vincent Bernat | |
2019-07-23 | RPKI: Fix reconfiguration when ssh parameters are undefined | Ondrej Zajicek (work) | |
2018-06-26 | Config: Dropping CF_ADDTO. | Jan Maria Matejka | |
2018-05-29 | Protocol: Introducing an enum protocol_class | Jan Maria Matejka | |
This supersedes the EAP_* constants. | |||
2018-01-10 | Use non-fatal asserts even for regular build | Ondrej Zajicek (work) | |
2018-01-09 | Nest: Allow modification of channels inherited from templates | Ondrej Zajicek (work) | |
Multiple definitions of same channels are forbidden, but inherited channel can be redefined. In such case channel options are merged. | |||
2017-12-07 | Timers: Revert temporary names and remove old timer.h | Ondrej Zajicek (work) | |
2017-12-07 | Timers: Add typecast to unit-converting macros | Ondrej Zajicek (work) | |
2017-12-07 | RPKI: Update to new timers | Ondrej Zajicek (work) | |
2017-12-07 | Timers: Show sub-second times in some protocol outputs | Ondrej Zajicek (work) | |
2017-12-07 | Timers: Replace old timers with microsecond timers | Ondrej Zajicek (work) | |
The old timer interface is still kept, but implemented by new timers. The plan is to switch from the old inteface to the new interface, then clean it up. | |||
2017-04-18 | Check validity of dest w.r.t. net_type | Ondrej Zajicek (work) | |
Allow to define static roa/flow routes without dest. | |||
2017-02-22 | Merge branch 'int-new' into nexthop-merged | Jan Moskyto Matejka | |
2017-02-20 | Several minor fixes | Ondrej Zajicek (work) | |
2016-12-22 | Removing (struct rta)->cast. Never used. | Jan Moskyto Matejka | |
2016-12-13 | Minor cleanups | Ondrej Zajicek (work) | |
2016-12-07 | RPKI: fixed some of the extended warnings | Jan Moskyto Matejka | |
2016-12-07 | LibSSH may be switched off together with RPKI | Jan Moskyto Matejka | |
2016-12-07 | RPKI protocol with one cache server per protocol | Pavel TvrdĂk | |
The RPKI protocol (RFC 6810) using the RTRLib (http://rpki.realmv6.org/) that is integrated inside the BIRD's code. Implemeted transports are: - unprotected transport over TCP - secure transport over SSHv2 Example configuration of bird.conf: ... roa4 table r4; roa6 table r6; protocol rpki { debug all; # Import both IPv4 and IPv6 ROAs roa4 { table r4; }; roa6 { table r6; }; # Set cache server (validator) address, # overwrite default port 323 remote "rpki-validator.realmv6.org" port 8282; # Overwrite default time intervals retry 10; # Default 600 seconds refresh 60; # Default 3600 seconds expire 600; # Default 7200 seconds } protocol rpki { debug all; # Import only IPv4 routes roa4 { table r4; }; # Set cache server address to localhost, # use default ports tcp => 323 or ssh => 22 remote 127.0.0.1; # Use SSH transport instead of unprotected transport over TCP ssh encryption { bird private key "/home/birdgeek/.ssh/id_rsa"; remote public key "/home/birdgeek/.ssh/known_hosts"; user "birdgeek"; }; } ... |