mirror of
				https://gitlab.labs.nic.cz/labs/bird.git
				synced 2024-05-11 16:54:54 +00:00 
			
		
		
		
	RPKI protocol with one cache server per protocol
The RPKI protocol (RFC 6810) using the RTRLib
(http://rpki.realmv6.org/) that is integrated inside
the BIRD's code.
Implemeted transports are:
 - unprotected transport over TCP
 - secure transport over SSHv2
Example configuration of bird.conf:
  ...
  roa4 table r4;
  roa6 table r6;
  protocol rpki {
    debug all;
    # Import both IPv4 and IPv6 ROAs
    roa4 { table r4; };
    roa6 { table r6; };
    # Set cache server (validator) address,
    # overwrite default port 323
    remote "rpki-validator.realmv6.org" port 8282;
    # Overwrite default time intervals
    retry   10;         # Default 600 seconds
    refresh 60;         # Default 3600 seconds
    expire 600;         # Default 7200 seconds
  }
  protocol rpki {
    debug all;
    # Import only IPv4 routes
    roa4 { table r4; };
    # Set cache server address to localhost,
    # use default ports tcp => 323 or ssh => 22
    remote 127.0.0.1;
    # Use SSH transport instead of unprotected transport over TCP
    ssh encryption {
      bird private key "/home/birdgeek/.ssh/id_rsa";
      remote public key "/home/birdgeek/.ssh/known_hosts";
      user "birdgeek";
    };
  }
  ...
			
			
This commit is contained in:
		
				
					committed by
					
						
						Jan Moskyto Matejka
					
				
			
			
				
	
			
			
			
						parent
						
							2706747f66
						
					
				
				
					commit
					65d2a88dd2
				
			
							
								
								
									
										5
									
								
								proto/rpki/Doc
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										5
									
								
								proto/rpki/Doc
									
									
									
									
									
										Normal file
									
								
							@@ -0,0 +1,5 @@
 | 
			
		||||
S rpki.c
 | 
			
		||||
S packets.c
 | 
			
		||||
S transport.c
 | 
			
		||||
S tcp_transport.c
 | 
			
		||||
S ssh_transport.c
 | 
			
		||||
		Reference in New Issue
	
	Block a user