33 lines
1.1 KiB
Protocol Buffer Text Format
33 lines
1.1 KiB
Protocol Buffer Text Format
# ferrix_bgp running on the production router itself, next to BIRD.
|
|
router_id: "10.255.0.2"
|
|
local_asn: 4200000001
|
|
|
|
# Unused in practice (BIRD is passive and we dial it), but a listener is
|
|
# required. 179 belongs to BIRD, so take another port on our own address.
|
|
listen_endpoints { address: "::1" port: 9179 }
|
|
|
|
peers {
|
|
name: "pr01-bird"
|
|
endpoint { address: "::1" port: 179 }
|
|
# BIRD recognises its neighbour by source address, so pin ours.
|
|
local_address: "::1"
|
|
remote_asn: 210036
|
|
hold_time_seconds: 90
|
|
}
|
|
connect_retry_seconds: 5
|
|
collision_detect_established_state: true
|
|
|
|
local_route_policy {
|
|
allowed_prefixes: "2a0d:d741::/40"
|
|
max_routes_per_owner: 1
|
|
}
|
|
|
|
# Loopback only. Students reach it through the reverse proxy, which adds TLS
|
|
# and a password; the API itself has neither.
|
|
http_endpoint { address: "127.0.0.1" port: 8080 }
|
|
|
|
# Show who pings the lab addresses. The kernel answers the pings (AnyIP route
|
|
# in 05-lab-lo.network); this only listens. Watches allowed_prefixes above.
|
|
# Needs CAP_NET_RAW, which the systemd unit grants.
|
|
ping_monitor {}
|