Files
ferrix/fuzz/Cargo.toml
T
Rayhaan JaufeerallyandClaude Fable 5.1 630c175918 Rework the speaker: sans-I/O FSM, sharded table, RFC 7606, ADD-PATH
The work of the speaker-cleanup branch as one commit; the branch keeps
the step-by-step history.

Sessions
- The state machine is a pure function from events to actions, driven by
  one task per connection. Idle, Connect and Active belong to a dialer
  that keeps configured peers up with backoff.
- Capabilities are negotiated: address families, four-octet AS numbers
  with AS_TRANS and AS4_PATH, route refresh, ADD-PATH per family and
  direction.
- Collision detection per RFC 4271 section 6.8, by address and
  identifier.
- Connections are taken only from configured peers, a few per address.
- A panic in a session is contained and answered with a Cease; a core
  task that stops shuts the server down with a Cease to every peer.
- Writes that make no progress are given up (RFC 9687).

Codec
- Malformed UPDATEs are handled as RFC 7606 says: treat-as-withdraw,
  attribute discard, or session reset, with the NOTIFICATION to send.
- Address families are open types; any can be named and ignored.
- Prefixes are fixed-size values, normalised, with path identifiers.
- Lengths are filled in after writing; one definition of each type code.
- Property tests and fuzz targets for every decoder.

Routing table
- Adj-RIBs-In and Loc-RIB in one sharded table that sessions write to
  directly. Routes are sixteen bytes; attribute sets are interned in
  wire form. Best-path selection per RFC 4271 section 9.1.2.2 with
  deterministic MED.
- A journal per shard lets followers read changes at their own pace;
  one that falls behind is resynchronised.
- On a RIPE RIS dump of 148 peers and 39.3M routes: loaded in 2.0 s on
  12 cores, about 52 bytes a route.

Announcing
- Originated routes come from the configuration. Each session has its
  own exporter with an Adj-RIB-Out, so a slow peer delays only itself.
- Routes to a peer in our own AS have an empty path and a LOCAL_PREF.

Operations
- HTTP status page, JSON API, event stream and Prometheus metrics.
- Benchmarks on synthetic and real tables.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
2026-10-02 12:35:54 +02:00

55 lines
1003 B
TOML

# Coverage-guided fuzz targets, run with cargo-fuzz on a nightly toolchain.
# See README.md in this directory.
[package]
name = "bgp-fuzz"
version = "0.0.0"
edition = "2024"
license = "Apache-2.0"
publish = false
[package.metadata]
cargo-fuzz = true
# Not part of the main workspace: libfuzzer needs nightly, the workspace
# builds on stable.
[workspace]
[dependencies]
bgp-packet = { path = "../crates/packet" }
bgp-primitives = { path = "../crates/primitives" }
bgp-server = { path = "../crates/server" }
bytes = "1.10.1"
libfuzzer-sys = "0.4"
protobuf = "3.7.2"
[lib]
path = "src/lib.rs"
[[bin]]
name = "message"
path = "fuzz_targets/message.rs"
test = false
doc = false
bench = false
[[bin]]
name = "message_body"
path = "fuzz_targets/message_body.rs"
test = false
doc = false
bench = false
[[bin]]
name = "prefix_text"
path = "fuzz_targets/prefix_text.rs"
test = false
doc = false
bench = false
[[bin]]
name = "config"
path = "fuzz_targets/config.rs"
test = false
doc = false
bench = false