OpenBSD developers release of the portable edition of the routing package , which can be used in operating systems other than OpenBSD. Portions of code from the OpenNTPD, OpenSSH, and LibreSSL projects were utilized to ensure portability. In addition to OpenBSD, Linux and FreeBSD support has been declared. OpenBGPD has been tested on Debian 9, Ubuntu 14.04, and FreeBSD 12.
The development of OpenBGPD is being conducted with the regional internet registrar RIPE NCC, which is interested in making OpenBGPD functional for use on servers for routing at Internet exchange points (IXP) and in creating a full-fledged alternative to the package (among other open alternatives implementing the BGP protocol, the projects worth noting are , , and ).
In the development of OpenBGPD, the primary focus is on ensuring the highest level of security and reliability. Stringent checks are applied for all parameters, buffer boundary compliance control measures, privilege separation, and restriction of access to system calls. The syntax of the configuration definition language is also noted for its convenience, along with high performance and memory efficiency (for example, OpenBGPD can operate with routing tables containing hundreds of thousands of entries). The project supports most of the BGP 4 specifications and complies with RFC8212 requirements, but does not attempt to be all-encompassing and mainly ensures support for the most needed and widespread features.
The release of OpenBGPD 6.6 features the following improvements:
- To enhance performance, the table , which stores information about routes selected by the local BGP router for announcing optimal routes to peers, has been converted to use RB-trees linked to the peers;
- The code for community matching has been rewritten, significantly speeding up the operation of configurations with multiple communities and a large number of peers.
- The command 'show mrt neighbors' has been added to bgpctl for dumping the table of neighboring BGP routers in the format ;
- When operating in Linux, support for BGP session protection via ;
- The maximum size of has been increased to 255 bytes.
Source: opennet.ru
