[c-nsp] RPKI validation weirdness

Alarig Le Lay alarig at grifon.fr
Fri May 8 04:43:36 EDT 2020


Hi,

On Thu 07 May 2020 23:29:03 GMT, Pierre Emeriaud wrote:
> Yes, my fellow netadmin Alarig at as204092 just asked on bird's
> mailing list why didn't bird sent the extcommunity.
> https://bird.network.cz/pipermail/bird-users/2020-May/014559.html for
> the interested.

I had a patch to test and it works, now the community is well reflected.
  Refresh Epoch 1
  206155
    89.234.186.158 from 89.234.186.158 (80.67.190.204)
      Origin IGP, metric 50, localpref 200, valid, external, best
      Community: 64496:200
      path 7FA510447288 RPKI State not found
      rx pathid: 0, tx pathid: 0x0

In case of curiosity, this is the ebuild modification I had to make:
https://git.grifon.fr/alarig/SwordArMor-gentoo-overlay/commit/a4367e648124f151381ac18c555e4d4caa02d947

So we were facing a double bug here: bird not sending the community and
XE bugging as expected.

Thanks for your help!

Regards,
-- 
Alarig


More information about the cisco-nsp mailing list