OpenBSD developers release of the portable edition of the routing package , which can be used in operating systems other than OpenBSD. To ensure portability, parts of the code from the OpenNTPD, OpenSSH, and LibreSSL projects have been used. Support for Linux and FreeBSD is also announced. The operation of OpenBGPD has been tested in Debian 9, Ubuntu 14.04+, and FreeBSD 12.
The development of OpenBGPD is being conducted with the regional internet registrar RIPE NCC, which is interested in making OpenBGPD functional for use on servers for routing at Internet exchange points (IXP) and in creating a full-fledged alternative to the package (among other open alternatives implementing the BGP protocol, the projects worth noting are , , and ).
In the development of OpenBGPD, the primary focus is on ensuring the highest level of security and reliability. Stringent checks are applied for all parameters, buffer boundary compliance control measures, privilege separation, and restriction of access to system calls. The syntax of the configuration definition language is also noted for its convenience, along with high performance and memory efficiency (for example, OpenBGPD can operate with routing tables containing hundreds of thousands of entries). The project supports most of the BGP 4 specifications and complies with RFC8212 requirements, but does not attempt to be all-encompassing and mainly ensures support for the most needed and widespread features.
The release of OpenBGPD 6.7 the following improvements:
- Initial support for JSON format output has been implemented in the bgpctl utility;
- In allows the simultaneous setting of both IPv4 and IPv6 addresses in the local-address directive within 'group' blocks;
- Correct aggregation of ROA tables (Route Origin Authorisation) with prefix/source-as pairs into a single element with the longest 'maxlen' value has been ensured;
- A 'max-prefix {NUM} out' property is added to bgpd.conf to limit the number of announced prefixes to avoid full table leaks;
- The bgpctl command 'show neighbor' has been expanded to display counters for received and advertised prefixes, as well as the 'max-prefix out' limit value;
- Notifications now include information about the reasons for nested errors. The 'bgpctl show neighbor' command outputs the reason for the last received error;
- To ensure the correct execution of the 'graceful reload' operation, stale prefixes in the Adj-RIB-Out table, which stores information about routes selected by the local BGP router for announcing optimal pyramid routes, have been marked;
- The ability to build OpenBGPD using the bison parser generator package without requiring byacc has been added;
- An option '--runstatedir' has been added to specify the path to bgpctl.sock;
- The configure script has been cleaned up to improve portability.
Source: opennet.ru
