I posted this to tech@ last week. As a workaround use -A in the rpki-client root crontab entry
Sent from my mobile > On May 11, 2023, at 16:42, Bastien Durel <[email protected]> wrote: > > Hello, > > I have an openbgpd running with only iBGP, and I run rpki-client on > this machine (the bgpd runs for LG, rpki-client generates for other > routers too). > > Since the 8th of may, it crashes on reload, after rpki-client ran > Only emptying the rpki-client config file makes it start again, until > it's reloaded after rpki run again. > > /etc/bgpd.conf: > > AS 212834 > router-id 10.126.0.39 > > prefix-set mynetworks { > 2001:678:de8::/48 > } > > include "/var/db/rpki-client/openbgpd.6" > > socket "/var/www/run/bgpd.rsock" restricted > > deny quick from ebgp prefix-set mynetworks or-longer > allow from ibgp > deny to ibgp > > network prefix-set mynetworks > > group "ibgp" { > remote-as 212834 > local-address 2001:678:de8:x > neighbor 2001:678:de8:y { > descr "r1" > } > neighbor 2001:678:de8:z { > descr "r2" > } > } > > > /var/db/rpki-client/openbgpd.6 is an ipv6-only view of /var/db/rpki- > client/openbgpd, generated by cron : > > grep -v -E '[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+/[0-9]+' > /var/db/rpki-client/openbgpd > /var/db/rpki-client/openbgpd.6 > > > When openbgpd.6 is non-empty, the log file contains : > > May 11 14:49:15 rpki bgpd[47637]: startup > May 11 14:49:15 rpki bgpd[84245]: rtr engine ready > May 11 14:49:15 rpki bgpd[17015]: route decision engine ready > May 11 14:49:15 rpki bgpd[28135]: session engine ready > May 11 14:49:16 rpki bgpd[28135]: listening on 0.0.0.0 > May 11 14:49:16 rpki bgpd[28135]: listening on :: > May 11 14:49:16 rpki bgpd[28135]: SE reconfigured > May 11 14:49:16 rpki bgpd[28135]: neighbor 2001:678:de8:z (r2): state change > None -> Idle, reason: None > May 11 14:49:16 rpki bgpd[28135]: neighbor 2001:678:de8:y (r1): state change > None -> Idle, reason: None > May 11 14:49:16 rpki bgpd[17015]: RDE reconfigured > May 11 14:49:16 rpki bgpd[17015]: running softreconfig in > May 11 14:49:16 rpki bgpd[17015]: softreconfig in done > May 11 14:49:16 rpki bgpd[17015]: starting softreconfig out for rib Loc-RIB > May 11 14:49:16 rpki bgpd[17015]: softreconfig out done for Loc-RIB > May 11 14:49:16 rpki bgpd[17015]: RDE soft reconfiguration done > May 11 14:49:16 rpki bgpd[84245]: RTR engine reconfigured > May 11 14:49:16 rpki bgpd[17015]: fatal in RDE: aspa_add_set: bad order of > adds > May 11 14:49:16 rpki bgpd[84245]: peer closed imsg connection > May 11 14:49:16 rpki bgpd[84245]: RTR: Lost connection to RDE > May 11 14:49:16 rpki bgpd[28135]: peer closed imsg connection > May 11 14:49:16 rpki bgpd[28135]: SE: Lost connection to RDE > May 11 14:49:16 rpki bgpd[28135]: peer closed imsg connection > May 11 14:49:16 rpki bgpd[28135]: SE: Lost connection to RDE control > May 11 14:49:16 rpki bgpd[47637]: peer closed imsg connection > May 11 14:49:16 rpki bgpd[47637]: main: Lost connection to RDE > May 11 14:49:16 rpki bgpd[28135]: peer closed imsg connection > May 11 14:49:16 rpki bgpd[84245]: peer closed imsg connection > May 11 14:49:16 rpki bgpd[28135]: SE: Lost connection to parent > May 11 14:49:16 rpki bgpd[47637]: kernel routing table 0 (Loc-RIB) decoupled > May 11 14:49:16 rpki bgpd[28135]: session engine exiting > May 11 14:49:16 rpki bgpd[84245]: fatal in RTR: Lost connection to parent > May 11 14:49:16 rpki bgpd[47637]: terminating > > I guess the aspa_add_set: bad order of adds is the cause of the > termination... > > > When openbgpd.6 is empty, bgpd start correctly : > > May 11 14:49:31 rpki bgpd[23169]: startup > May 11 14:49:31 rpki bgpd[82407]: route decision engine ready > May 11 14:49:31 rpki bgpd[71345]: session engine ready > May 11 14:49:31 rpki bgpd[86603]: rtr engine ready > May 11 14:49:31 rpki bgpd[71345]: listening on 0.0.0.0 > May 11 14:49:31 rpki bgpd[71345]: listening on :: > May 11 14:49:31 rpki bgpd[71345]: SE reconfigured > May 11 14:49:31 rpki bgpd[71345]: neighbor 2001:678:de8:z (r2): state change > None -> Idle, reason: None > May 11 14:49:31 rpki bgpd[71345]: neighbor 2001:678:de8:y (r1): state change > None -> Idle, reason: None > May 11 14:49:31 rpki bgpd[86603]: RTR engine reconfigured > May 11 14:49:31 rpki bgpd[82407]: RDE reconfigured > May 11 14:49:31 rpki bgpd[82407]: running softreconfig in > May 11 14:49:31 rpki bgpd[82407]: softreconfig in done > May 11 14:49:31 rpki bgpd[82407]: starting softreconfig out for rib Loc-RIB > May 11 14:49:31 rpki bgpd[82407]: softreconfig out done for Loc-RIB > May 11 14:49:31 rpki bgpd[82407]: RDE soft reconfiguration done > May 11 14:49:32 rpki bgpd[71345]: neighbor 2001:678:de8:y (r1): state change > Idle -> Active, reason: Start > May 11 14:49:32 rpki bgpd[71345]: neighbor 2001:678:de8:y (r1): state change > Active -> OpenSent, reason: Connection opened > May 11 14:49:32 rpki bgpd[71345]: neighbor 2001:678:de8:y (r1): state change > OpenSent -> OpenConfirm, reason: OPEN message received > May 11 14:49:32 rpki bgpd[71345]: neighbor 2001:678:de8:y (r1): state change > OpenConfirm -> Established, reason: KEEPALIVE message received > May 11 14:49:32 rpki bgpd[82407]: neighbor 2001:678:de8:y (r1): sending IPv6 > unicast EOR marker > May 11 14:49:34 rpki bgpd[82407]: neighbor 2001:678:de8:y (r1): received IPv6 > unicast EOR marker > May 11 14:49:36 rpki bgpd[71345]: neighbor 2001:678:de8:z (r2): state change > Idle -> Connect, reason: Start > May 11 14:49:36 rpki bgpd[71345]: neighbor 2001:678:de8:z (r2): state change > Connect -> OpenSent, reason: Connection opened > May 11 14:49:36 rpki bgpd[71345]: neighbor 2001:678:de8:z (r2): state change > OpenSent -> Active, reason: Connection closed > > > My rpki script also send config to bird routers, and they accpet it > without problem. > > Have you any clue ? > > Regards, > > -- > Bastien >
