97 lines
1.8 KiB
Bash
Executable File
97 lines
1.8 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
#
|
|
# bird-mkroa
|
|
# author: hexa-
|
|
#
|
|
# get updates from net.dn42.registry/utils/roa/
|
|
#
|
|
|
|
<<EOF
|
|
|
|
Load the ROA-Table from BIRD4_ROA_CFG like this:
|
|
|
|
roa table dn42_roa {
|
|
include "roa4.conf";
|
|
};
|
|
|
|
Check in your filters like this:
|
|
|
|
if (roa_check(dn42_roa, net, bgp_path.last) = ROA_INVALID) then {
|
|
print "[dn42] ROA check failed for ", net, " ASN ", bgp_path.last;
|
|
reject;
|
|
}
|
|
|
|
EOF
|
|
|
|
#
|
|
# Configuration
|
|
#
|
|
|
|
REGISTRY="/etc/bird/registry"
|
|
|
|
BIRD4C=birdc
|
|
BIRD4_ROA_CFG="/var/lib/bird/bird_roa_dn42.conf"
|
|
BIRD4_MAX_PREFIXLEN=28
|
|
|
|
BIRD6C=birdc6
|
|
BIRD6_ROA_CFG="/var/lib/bird/bird6_roa_dn42.conf"
|
|
BIRD6_MAX_PREFIXLEN=64
|
|
|
|
#
|
|
# End of configuration
|
|
#
|
|
|
|
# check if git repository exists
|
|
if [ ! -d "$REGISTRY/.git" ]; then
|
|
>&2 echo "registry directory does not exist;"
|
|
exit 1
|
|
fi
|
|
|
|
pushd $REGISTRY
|
|
git pull
|
|
popd
|
|
|
|
function mkroa() {
|
|
# based on utils/roa/genroa.sh by fritz@grimpen.net
|
|
|
|
for i in $*
|
|
do
|
|
route=$(grep -E "route[6]?:" $i | tr -d '[:blank:]' | cut -d':' -f2-)
|
|
origin=$(grep "origin:" $i | tr -d '[:blank:][:alpha:]' | cut -d':' -f2)
|
|
if [ -z "$origin" -o -z "$route" -o -n "$(echo $as | tr -d '[:digit:]')" ]
|
|
then
|
|
>&2 echo "$i is invalid"
|
|
continue
|
|
fi
|
|
prefixlen=$(echo $route | cut -d'/' -f2)
|
|
if [ $MAX_PREFIXLEN -gt $prefixlen ]; then
|
|
prefixlen=$MAX_PREFIXLEN
|
|
fi
|
|
|
|
while read -r asn
|
|
do
|
|
echo "roa $route max $prefixlen as $asn;"
|
|
done <<< "$origin"
|
|
done
|
|
}
|
|
|
|
MAX_PREFIXLEN=$BIRD4_MAX_PREFIXLEN mkroa $REGISTRY/data/route/* > $BIRD4_ROA_CFG
|
|
MAX_PREFIXLEN=$BIRD6_MAX_PREFIXLEN mkroa $REGISTRY/data/route6/* > $BIRD6_ROA_CFG
|
|
|
|
BIRD4_CHECK=$($BIRD4C configure check | grep error)
|
|
if [[ -z $BIRD4_CHECK ]]; then
|
|
$BIRD4C configure >/dev/null
|
|
else
|
|
>&2 echo $BIRD4_CHECK
|
|
fi
|
|
|
|
BIRD6_CHECK=$($BIRD6C configure check | grep error)
|
|
if [[ -z $BIRD6_CHECK ]]; then
|
|
$BIRD6C configure >/dev/null
|
|
else
|
|
>&2 echo $BIRD6_CHECK
|
|
fi
|
|
|
|
|