The portable edition of the OpenBGPD routing package 8.0 has been released, developed by the OpenBSD project team and adapted for use on FreeBSD and Linux (support is claimed for Alpine, Debian, Fedora, RHEL/CentOS, Ubuntu). To ensure portability, code sections from the OpenNTPD, OpenSSH, and LibreSSL projects were used. The project supports most of the BGP 4 specifications and complies with RFC8212, but does not attempt to cover everything and mainly provides support for the most requested and commonly used features.
The development of OpenBGPD is supported by the regional internet registrar RIPE NCC, which is interested in enhancing the functionality of OpenBGPD for use in servers for routing at Internet Exchange Points (IXP) and for creating a full-fledged alternative to the BIRD package (other open alternatives implementing BGP include the FRRouting, GoBGP, ExaBGP, and Bio-Routing projects).
The project focuses on ensuring the highest level of security and reliability. It employs strict checks on the correctness of all parameters, tools to enforce buffer boundaries, privilege separation, and access restriction to system calls. Advantages also include an easy-to-use configuration definition language syntax, high performance, and efficiency in memory usage (for example, OpenBGPD can work with routing tables containing hundreds of thousands of entries).
Among the changes in the OpenBGPD 8.0 release:
- Initial support for Flowspec (RFC5575) has been added. Currently, only the announcement of flowspec rules is supported.
- The command parser capabilities in the bgpctl utility have been expanded, which can now handle commands specific to flowspec and constructs such as "bgpctl show rib 192.0.2.0/24 detail."
- A semaphore has been added to protect the publication of RTR session data (RPKI to Router) in the Route Decision Engine (RDE).
- A bug caused by the emergence of a new ASPA object in RPKI (Resource Public Key Infrastructure) has been fixed.
Source: opennet.ru
