mirror of
https://gitlab.labs.nic.cz/labs/bird.git
synced 2024-05-11 16:54:54 +00:00
65d2a88dd2
The RPKI protocol (RFC 6810) using the RTRLib
(http://rpki.realmv6.org/) that is integrated inside
the BIRD's code.
Implemeted transports are:
- unprotected transport over TCP
- secure transport over SSHv2
Example configuration of bird.conf:
...
roa4 table r4;
roa6 table r6;
protocol rpki {
debug all;
# Import both IPv4 and IPv6 ROAs
roa4 { table r4; };
roa6 { table r6; };
# Set cache server (validator) address,
# overwrite default port 323
remote "rpki-validator.realmv6.org" port 8282;
# Overwrite default time intervals
retry 10; # Default 600 seconds
refresh 60; # Default 3600 seconds
expire 600; # Default 7200 seconds
}
protocol rpki {
debug all;
# Import only IPv4 routes
roa4 { table r4; };
# Set cache server address to localhost,
# use default ports tcp => 323 or ssh => 22
remote 127.0.0.1;
# Use SSH transport instead of unprotected transport over TCP
ssh encryption {
bird private key "/home/birdgeek/.ssh/id_rsa";
remote public key "/home/birdgeek/.ssh/known_hosts";
user "birdgeek";
};
}
...
79 lines
1.7 KiB
C
79 lines
1.7 KiB
C
/*
|
|
* BIRD -- An implementation of the TCP protocol for the RPKI protocol transport
|
|
*
|
|
* (c) 2015 CZ.NIC
|
|
* (c) 2015 Pavel Tvrdik <pawel.tvrdik@gmail.com>
|
|
*
|
|
* This file was a part of RTRlib: http://rpki.realmv6.org/
|
|
*
|
|
* Can be freely distributed and used under the terms of the GNU GPL.
|
|
*/
|
|
|
|
#include <errno.h>
|
|
#include <netdb.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <sys/socket.h>
|
|
#include <sys/types.h>
|
|
#include <unistd.h>
|
|
|
|
#include "rpki.h"
|
|
#include "sysdep/unix/unix.h"
|
|
|
|
static int
|
|
rpki_tr_tcp_open(struct rpki_tr_sock *tr)
|
|
{
|
|
sock *sk = tr->sk;
|
|
|
|
sk->type = SK_TCP_ACTIVE;
|
|
|
|
if (sk_open(sk) != 0)
|
|
return RPKI_TR_ERROR;
|
|
|
|
return RPKI_TR_SUCCESS;
|
|
}
|
|
|
|
static const char *
|
|
rpki_tr_tcp_ident(struct rpki_tr_sock *tr)
|
|
{
|
|
ASSERT(tr != NULL);
|
|
|
|
struct rpki_cache *cache = tr->cache;
|
|
struct rpki_config *cf = (void *) cache->p->p.cf;
|
|
|
|
if (tr->ident != NULL)
|
|
return tr->ident;
|
|
|
|
const char *host = cf->hostname;
|
|
ip_addr ip = cf->ip;
|
|
u16 port = cf->port;
|
|
|
|
size_t colon_and_port_len = 6; /* max ":65535" */
|
|
size_t ident_len;
|
|
if (host)
|
|
ident_len = strlen(host) + colon_and_port_len + 1;
|
|
else
|
|
ident_len = IPA_MAX_TEXT_LENGTH + colon_and_port_len + 1;
|
|
|
|
char *ident = mb_alloc(cache->pool, ident_len);
|
|
if (host)
|
|
bsnprintf(ident, ident_len, "%s:%u", host, port);
|
|
else
|
|
bsnprintf(ident, ident_len, "%I:%u", ip, port);
|
|
|
|
tr->ident = ident;
|
|
return tr->ident;
|
|
}
|
|
|
|
/**
|
|
* rpki_tr_tcp_init - initializes the RPKI transport structure for a TCP connection
|
|
* @tr: allocated RPKI transport structure
|
|
*/
|
|
void
|
|
rpki_tr_tcp_init(struct rpki_tr_sock *tr)
|
|
{
|
|
tr->open_fp = &rpki_tr_tcp_open;
|
|
tr->ident_fp = &rpki_tr_tcp_ident;
|
|
}
|