Rayhaan JaufeerallyandClaude Fable 5.1
87f96f9389
When both ends dial each other, exactly one TCP connection must survive
and both ends must pick the same one. Previously ferrix relied on the
other router to sort this out and could briefly hold two sessions.
- collision: a shared map keyed by the peer's BGP Identifier holds the one
connection currently preferred for that peer plus a kill signal. Each
connection calls admit() on receiving the peer's OPEN. The connection
initiated by the higher BGP Identifier wins; the loser gets Cease /
Connection Collision Resolution, whether it is the new connection or an
existing one in OpenConfirm running in another task.
- A collision with an Established session closes the new connection (RFC
default). The optional CollisionDetectEstablishedState is available as
collision_detect_established_state: a restarted peer's new connection
then replaces the stale session at once instead of being refused until
the hold timer expires. Enabled in the lab config.
- Two connections opened by the same side: the newer wins.
- OPEN validation rejects a peer using our own BGP Identifier or 0.0.0.0
with Bad BGP Identifier; collision resolution needs distinct identifiers.
- OpenConfirm no longer times out instantly when the negotiated hold time
is zero.
- Sessions record which side opened them; shown as "opened by" on the
status page and as `direction` in /api/peers. New counter
bgp_connection_collisions_total{closed}.
- Tests: unit tests for the rule (including that both ends agree), and
integration tests for simultaneous open in both identifier orders and
both arrival orders, Established default, restart replacement with route
flush, distinct identifiers, slot release, and Bad BGP Identifier.
Existing fan-out test now gives its two peers distinct identifiers.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
31 lines
841 B
Protocol Buffer Text Format
31 lines
841 B
Protocol Buffer Text Format
router_id: "10.200.0.1"
|
|
local_asn: 65000
|
|
listen_endpoints { address: "0.0.0.0" port: 179 }
|
|
|
|
peers {
|
|
name: "r1"
|
|
endpoint { address: "10.200.0.2" port: 179 }
|
|
remote_asn: 65001
|
|
hold_time_seconds: 30
|
|
}
|
|
peers {
|
|
name: "r2"
|
|
endpoint { address: "10.200.0.3" port: 179 }
|
|
remote_asn: 65002
|
|
hold_time_seconds: 30
|
|
}
|
|
connect_retry_seconds: 5
|
|
|
|
# If r1 or r2 is restarted it will dial us again while we still believe the
|
|
# old session is up. Let that new connection replace the stale one straight
|
|
# away instead of refusing it until the hold timer (30 s here) expires.
|
|
collision_detect_established_state: true
|
|
|
|
# Students may only announce out of 10.100.0.0/16; one /24 each is plenty.
|
|
local_route_policy {
|
|
allowed_prefixes: "10.100.0.0/16"
|
|
max_routes_per_owner: 4
|
|
}
|
|
|
|
http_endpoint { address: "0.0.0.0" port: 8080 }
|