Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

zebra, topotests: autorise nexthop interface labelled routes #15043

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

pguibert6WIND
Copy link
Member

When coming from staticd, some nexthop interface based routes should be able to add a label. This helps recursive routes to reuse the label.

interface eth0
ip address 192.0.2.1/32
!
ip route 192.0.2.2/32 eth0 label 55
ip route 172.31.0.0/24 192.0.2.2
ip route 172.31.1.0/24 192.0.2.2

The nexthop interface route is a connected route with no next-hop, and the destination packets with DA=192.0.2.2/32 be sent with a broadcast DMAC. This will result in dropping those packets on the receiving router.

However, the recursive routes will take the real MAC address of the 192.0.2.2 IP and the label 55 to forge outgoing packets going to the 172.31.0.0 or 172.31.1.0 sub-networks.

Fixes: ("7fcb24bbaa91") zebra: reject routes without nexthops

Link: #10058

Copy link
Member

@ton31337 ton31337 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please add pytestmark for topotest file.

@pguibert6WIND pguibert6WIND force-pushed the autorise_label_nexthop_iface_2 branch from 21d4970 to 2ff0980 Compare December 20, 2023 20:29
@pguibert6WIND
Copy link
Member Author

Please add pytestmark for topotest file.

done

@pguibert6WIND
Copy link
Member Author

ci:rerun

@pguibert6WIND pguibert6WIND force-pushed the autorise_label_nexthop_iface_2 branch from 2ff0980 to 25b733c Compare December 22, 2023 09:04
@pguibert6WIND
Copy link
Member Author

ci:rerun

@pguibert6WIND pguibert6WIND force-pushed the autorise_label_nexthop_iface_2 branch from 25b733c to 4be1606 Compare January 3, 2024 10:17
@github-actions github-actions bot added size/XS and removed size/L labels Jan 3, 2024
@ton31337
Copy link
Member

ton31337 commented Jan 6, 2024

Before it was a test, but now it's gone, or is this unintentional?

pguibert6WIND added a commit to pguibert6WIND/frr that referenced this pull request Jan 9, 2024
When coming from staticd, some nexthop interface based routes
should be able to add a label. This helps recursive routes to
reuse the label.

> interface eth0
>  ip address 192.0.2.1/32
> !
> ip route 192.0.2.2/32 eth0 label 55
> ip route 172.31.0.0/24 192.0.2.2
> ip route 172.31.1.0/24 192.0.2.2

The nexthop interface route is a connected route with no next-hop,
and the destination packets with DA=192.0.2.2/32 be sent with a
broadcast DMAC. This will result in dropping those packets on
the receiving router.

However, the recursive routes will take the real MAC address of the
192.0.2.2 IP and the label 55 to forge outgoing packets going to
the 172.31.0.0 or 172.31.1.0 sub-networks.

Fixes: ("7fcb24bbaa91") zebra: reject routes without nexthops

Link: FRRouting#10058

Signed-off-by: Philippe Guibert <[email protected]>

Link: FRRouting#15043
Signed-off-by: Philippe Guibert <[email protected]>
@pguibert6WIND pguibert6WIND force-pushed the autorise_label_nexthop_iface_2 branch from 4be1606 to e5240fc Compare January 9, 2024 16:21
@github-actions github-actions bot added size/L and removed size/XS labels Jan 9, 2024
@pguibert6WIND
Copy link
Member Author

Before it was a test, but now it's gone, or is this unintentional?

re-added it. this was a mistake from my side.

@pguibert6WIND pguibert6WIND force-pushed the autorise_label_nexthop_iface_2 branch from e5240fc to 94fb8f6 Compare January 23, 2024 16:48
@github-actions github-actions bot added size/XS and removed size/L labels Jan 23, 2024
pguibert6WIND added a commit to pguibert6WIND/frr that referenced this pull request Mar 5, 2024
When coming from staticd, some nexthop interface based routes
should be able to add a label. This helps recursive routes to
reuse the label.

> interface eth0
>  ip address 192.0.2.1/32
> !
> ip route 192.0.2.2/32 eth0 label 55
> ip route 172.31.0.0/24 192.0.2.2
> ip route 172.31.1.0/24 192.0.2.2

The nexthop interface route is a connected route with no next-hop,
and the destination packets with DA=192.0.2.2/32 be sent with a
broadcast DMAC. This will result in dropping those packets on
the receiving router.

However, the recursive routes will take the real MAC address of the
192.0.2.2 IP and the label 55 to forge outgoing packets going to
the 172.31.0.0 or 172.31.1.0 sub-networks.

Fixes: ("7fcb24bbaa91") zebra: reject routes without nexthops

Link: FRRouting#10058

Signed-off-by: Philippe Guibert <[email protected]>

Conflicts:
	zebra/zapi_msg.c, minor, MPLS auto mode not present on upstream

Link: FRRouting#15043

Signed-off-by: Philippe Guibert <[email protected]>
@pguibert6WIND pguibert6WIND force-pushed the autorise_label_nexthop_iface_2 branch from 94fb8f6 to e396ac2 Compare March 5, 2024 16:09
@github-actions github-actions bot added size/L and removed size/XS labels Mar 5, 2024
pguibert6WIND added a commit to pguibert6WIND/frr that referenced this pull request Mar 11, 2024
When coming from staticd, some nexthop interface based routes
should be able to add a label. This helps recursive routes to
reuse the label.

> interface eth0
>  ip address 192.0.2.1/32
> !
> ip route 192.0.2.2/32 eth0 label 55
> ip route 172.31.0.0/24 192.0.2.2
> ip route 172.31.1.0/24 192.0.2.2

The nexthop interface route is a connected route with no next-hop,
and the destination packets with DA=192.0.2.2/32 be sent with a
broadcast DMAC. This will result in dropping those packets on
the receiving router.

However, the recursive routes will take the real MAC address of the
192.0.2.2 IP and the label 55 to forge outgoing packets going to
the 172.31.0.0 or 172.31.1.0 sub-networks.

Fixes: ("7fcb24bbaa91") zebra: reject routes without nexthops

Link: FRRouting#10058

Signed-off-by: Philippe Guibert <[email protected]>

Conflicts:
	zebra/zapi_msg.c, minor, MPLS auto mode not present on upstream

Link: FRRouting#15043

Signed-off-by: Philippe Guibert <[email protected]>
@pguibert6WIND pguibert6WIND force-pushed the autorise_label_nexthop_iface_2 branch from e396ac2 to 04d3ec8 Compare March 11, 2024 16:30
When coming from staticd, some nexthop interface based routes
should be able to add a label. Following configuration can
help:

interface eth0
  ip address 10.125.0.1/32
!
ip route 10.125.0.0/24 eth0 label 55

Fixes: ("7fcb24bbaa91") zebra: reject routes without nexthops

Signed-off-by: Philippe Guibert <[email protected]>
When coming from staticd, some nexthop interface based routes
should be able to add a label. This helps recursive routes to
reuse the label.

> interface eth0
>  ip address 192.0.2.1/32
> !
> ip route 192.0.2.2/32 eth0 label 55
> ip route 172.31.0.0/24 192.0.2.2
> ip route 172.31.1.0/24 192.0.2.2

The nexthop interface route is a connected route with no next-hop,
and the destination packets with DA=192.0.2.2/32 be sent with a
broadcast DMAC. This will result in dropping those packets on
the receiving router.

However, the recursive routes will take the real MAC address of the
192.0.2.2 IP and the label 55 to forge outgoing packets going to
the 172.31.0.0 or 172.31.1.0 sub-networks.

Fixes: ("7fcb24bbaa91") zebra: reject routes without nexthops

Link: FRRouting#10058

Signed-off-by: Philippe Guibert <[email protected]>

Conflicts:
	zebra/zapi_msg.c, minor, MPLS auto mode not present on upstream

Link: FRRouting#15043

Signed-off-by: Philippe Guibert <[email protected]>
@pguibert6WIND pguibert6WIND force-pushed the autorise_label_nexthop_iface_2 branch from 04d3ec8 to fe3a55f Compare April 2, 2024 07:12
Copy link

This PR is stale because it has been open 180 days with no activity. Comment or remove the autoclose label in order to avoid having this PR closed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants