Portable version of OpenBGPD 6.6p0 available

OpenBSD Developers подготовили release of a portable edition of the routing package OpenBGPD 6.6, which can be used on operating systems other than OpenBSD. To ensure portability, parts of the code from the OpenNTPD, OpenSSH and LibreSSL projects were used. In addition to OpenBSD, support for Linux and FreeBSD is announced. OpenBGPD has been tested on Debian 9, Ubuntu 14.04 and FreeBSD 12.

OpenBGPD is being developed under backed by regional Internet registrar RIPE NCC, which is interested in bringing the functionality of OpenBGPD to suitability for use on servers for routing at points of inter-operator exchange of traffic (IXP) and in creating a full-fledged alternative to the packet IBRD (from other open alternatives with the implementation of the BGP protocol, projects can be noted FRRouting, GoBGP, ExaBGP и Bio Routing).

When developing OpenBGPD, the focus is on providing the highest level of security and reliability. For protection, a strict check of the correctness of all parameters, means for monitoring compliance with buffer boundaries, separation of privileges and restriction of access to system calls are used. Among the advantages, there is also a convenient syntax for the configuration definition language, high performance and memory efficiency (for example, OpenBGPD can work with routing tables that include hundreds of thousands of entries). The project supports most of the BGP 4 specifications and complies with the requirements of RFC8212, but does not try to embrace the immensity and mainly provides support for the most requested and common functions.

The following improvements are noted in the OpenBGPD 6.6 release:

• To improve table performance Adj-RIB-Out, which stores information about the routes chosen by the local BGP router to advertise optimal routes to peers, has been switched to using RB trees associated with peers;
• The code for community matching has been rewritten, the work of configurations with several communities and a large number of peers has been significantly accelerated.
• Added 'show mrt neighbors' command to bgpctl to dump BGP neighbors table in format MRT TABLE_DUMP_V2;
• On Linux, BGP session security is supported using TCP MD5SIG;
• Maximum size communication end messages increased to 255 bytes.

Source: opennet.ru