aurore/ansible
aurore/ansible
11
2
Fork 0
Code Issues 1 Pull requests 13 Releases Wiki Activity

bird: add minimal BGP support

Browse source
This commit is contained in:
jeltz 2022-12-21 16:39:28 +01:00
parent 45ca2a3236
commit 8863eed924
Signed by: jeltz
GPG key ID: 800882B66C0C3326
2 changed files with 103 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/bird/defaults/main.yml
View file

@ -8,4 +8,6 @@ bird__ospf_dead: 20
bird__radv_interfaces: {}
bird__radv_dns_servers: []
bird__radv_max_interval: 5
bird__static_unreachable: []
bird__bgp_sessions: []
...

101
roles/bird/templates/bird.conf.j2
View file

@ -27,6 +27,29 @@ protocol kernel kernel6 {
};
}
{% if bird__static_unreachable | ansible.utils.ipv4 %}
protocol static unreachable4 {
ipv4 {
export all;
};
{% for route in bird__static_unreachable | ansible.utils.ipv4 %}
route {{ route }} unreachable;
{% endfor %}
}
{% endif %}
{% if bird__static_unreachable | ansible.utils.ipv6 %}
protocol static unreachable6 {
ipv6 {
export all;
};
{% for route in bird__static_unreachable | ansible.utils.ipv6 %}
route {{ route }} unreachable;
{% endfor %}
}
{% endif %}
protocol ospf v2 ospf4 {
ipv4 {
@ -83,6 +106,84 @@ protocol ospf v3 ospf6 {
}
{% for session in bird__bgp_sessions %}
protocol bgp {{ session.name }} {
local as {{ session.local.as }};
source address {{ session.local.address }};
neighbor {{ session.remote.address }} as {{ session.remote.as }};
ipv4 {
import filter {
{% for pref in session.import.local_pref | default([]) %}
{%
set networks =
pref.prefix
| product("+" if pref.sub else "")
| map("join")
| join(", ")
%}
{% set operator = '!~' if pref.negate | default(False) else '~' %}
if (net {{ operator }} [ {{ networks }} ]) then {
bgp_local_pref = {{ pref.pref | int }};
}
{% endfor %}
{% if session.import.accept == "all" %}
accept;
{% else %}
{% for accept in session.import.accept | default([]) %}
{%
set networks =
accept.prefix
| product("+" if accept.sub else "")
| map("join")
| join(", ")
%}
{% set operator = '!~' if accept.negate | default(False) else '~' %}
if (net {{ operator }} [ {{ networks }} ]) then accept;
{% endfor %}
reject;
{% endif %}
};
export filter {
{% for prepend in session.export.as_prepend | default([]) %}
{%
set networks =
prepend.prefix
| product("+" if prepend.sub else "")
| map("join")
| join(", ")
%}
{% set operator = '!~' if prepend.negate | default(False) else '~' %}
if (net {{ operator }} [ {{ networks }} ]) then {
{% for _ in range(prepend.size) %}
bgp_path.prepend({{ session.local.as }});
{% endfor %}
}
{% endfor %}
{% if session.export.accept == "all" %}
accept;
{% else %}
{% for accept in session.export.accept | default([]) %}
{%
set networks =
accept.prefix
| product("+" if accept.sub else "")
| map("join")
| join(", ")
%}
{% set operator = '!~' if accept.negate | default(False) else '~' %}
if (net {{ operator }} [ {{ networks }} ]) then accept;
{% endfor %}
reject;
{% endif %}
};
};
}
{% endfor %}
{% if bird__radv_interfaces %}
protocol radv {