# ferrix_bgp running on the production router itself, next to BIRD.
router_id: "10.255.0.2"
local_asn: 4200000001

# Unused in practice (BIRD is passive and we dial it), but a listener is
# required. 179 belongs to BIRD, so take another port on our own address.
listen_endpoints { address: "::1" port: 9179 }

peers {
    name: "pr01-bird"
    endpoint { address: "::1" port: 179 }
    # BIRD recognises its neighbour by source address, so pin ours.
    local_address: "::1"
    remote_asn: 210036
    hold_time_seconds: 90
}
connect_retry_seconds: 5
collision_detect_established_state: true

local_route_policy {
    allowed_prefixes: "2a0d:d741::/40"
    max_routes_per_owner: 1
}

# Loopback only. Students reach it through the reverse proxy, which adds TLS
# and a password; the API itself has neither.
http_endpoint { address: "127.0.0.1" port: 8080 }

# Show who pings the lab addresses. The kernel answers the pings (AnyIP route
# in 05-lab-lo.network); this only listens. Watches allowed_prefixes above.
# Needs CAP_NET_RAW, which the systemd unit grants.
ping_monitor {}