Supported BGP speakers and features

Supported features

This section contains a list of the features offered by route server configurations which are generated by ARouteServer.

For each feature, the compatibility with the supported BGP speakers is also shown.

Legend:

  • Yes = feature supported by the BGP speaker and implemented in the configuration generated by ARouteServer.

  • No = feature supported by the BGP speaker but not implemented in the configuration generated by ARouteServer.

  • N/A = feature not available in the BGP speaker.

Warning

Please note: support for BIRD v3 is in very early stages, and BIRD v3 itself is only in alpha version, testing release only.

Feature

BIRD

BIRD v2

BIRD v3 (alpha)

OpenBGPD

OpenBGPD Portable

Path hiding mitigation (RFC7947, 2.3.1)

Yes

Yes

Yes

Yes

Yes

Basic filters:

NEXT_HOP enforcement - strict (RFC7948, 4.8)

Yes

Yes

Yes

Yes

Yes

NEXT_HOP enforcement - same AS (RFC7948, 4.8)

Yes

Yes

Yes

Yes

Yes

Min and max IPv4/IPv6 prefix length

Yes

Yes

Yes

Yes

Yes

Max AS_PATH length

Yes

Yes

Yes

Yes

Yes

Reject invalid AS_PATHs (private/invalid ASNs)

Yes

Yes

Yes

Yes

Yes

Reject AS_PATHs containing transit-free ASNs

Yes

Yes

Yes

Yes

Yes

Reject ‘never via route-servers’ ASNs

Yes

Yes

Yes

Yes

Yes

Reject bogons

Yes

Yes

Yes

Yes

Yes

Max-prefix limit

Yes

Yes

Yes

Yes 1

Yes 1

Route Leak Prevention and Detection Using BGP Roles (RFC9234)

Yes

Yes

Yes 3

Yes

Yes

Prefixes and origin ASNs validation:

IRR-based filters (RFC7948, 4.6.2)

Yes

Yes

Yes

Yes

Yes

RPKI ROAs used as route objects

Yes

Yes

Yes

Yes

Yes

Origin AS from ARIN Whois database dump

Yes

Yes

Yes

Yes

Yes

NIC.BR Whois data (slide n. 26) from Registro.br

Yes

Yes

Yes

Yes

Yes

RPKI-based filtering (BGP Prefix Origin Validation)

Yes

Yes

Yes

Yes

Yes

RPKI ROAs retrieved via RTR protocol

Yes

Yes

Yes

Yes

Yes

Blackhole filtering support:

Optional NEXT_HOP rewriting

Yes

Yes

Yes

Yes

Yes

Signalling via BLACKHOLE and custom communities)

Yes

Yes

Yes

Yes

Yes

Client-by-client control over propagation

Yes

Yes

Yes

Yes

Yes

Graceful shutdown support:

GRACEFUL_SHUTDOWN BGP Community

Yes

Yes

Yes

Yes

Yes

Graceful shutdown of the route server itself

Yes

Yes

Yes

Yes

Yes

Control and informative communities:

Prefix/origin ASN in IRRDBs data

Yes

Yes

Yes

Yes

Yes

Do (not) announce to any / peer / on RTT basis

Yes

Yes

Yes

Yes

Yes

Prepend to any / peer / on RTT basis

Yes

Yes

Yes

Yes

Yes

Add NO_EXPORT / NO_ADVERTISE to any / peer

Yes

Yes

Yes

Yes

Yes

Custom informational BGP communities

Yes

Yes

Yes

Yes

Yes

Optional session features on a client-by-client basis:

Prepend route server ASN (RFC7947, 2.2.2.1)

Yes

Yes

Yes

Yes

Yes

Active sessions

Yes

Yes

Yes

Yes

Yes

GTSM (Generalized TTL Security Mechanism)

Yes

Yes

Yes

Yes

Yes

Multihop sessions

Yes 2

Yes 2

Yes 2

Yes

Yes

ADD_PATH capability (RFC7911)

Yes

Yes

Yes

Yes

Yes

IPv6 NEXT_HOP for IPv4 routes (RFC8950)

No

Yes

Yes

No

No

1: For max-prefix filtering, only the shutdown and the restart actions are supported by OpenBGPD. Restart is configured with a 15 minutes timer.

2: Multihop can be enabled only when path-hiding mitigation is turned off.

3: Support available in ARouteServer, but feature not implemented yet in the target BGP speaker.

For more details on the features which are not supported or partially supported, please see also the Caveats and limitations section of this documentation.

Integration testing coverage

This is a list of all the integration test cases which have been verified using the Live tests framework.

An actual instance of the BGP speaker which is under testing is spun up and configured in a way that some specific features could be tested; some expectations are set, then other instances of BIRD (the clients) are used to generate a set of announcements whose behaviour is supposed to match those expectations.

Finally, the expectations are verified against the route server instance and the outcome of the tests reported in an output file, that is used to automatically build this matrix.

Note

Some test names are a bit cryptic: to get a better understanding of them, please refer to the README file inside the tests/live_tests/scenarios sub-directory of the scenario they refer to (or to the Built-in scenarios section of this documentation).

Total test cases per BGP speaker

BGP speaker

Total

Passed ✔

Failed ✖

Skipped

BIRD

830

821

0

9

BIRD v2

940

930

0

10

BIRD v3

846

837

0

9

OpenBGPD 8.4

458

455

0

3

Scenarios

‘tag’ reject policy scenario, IPv4

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

AS_PATH too long

RPKI INVALID route

announced by ASN derived via 16bit_mapped_asn

bogon prefix

bogon prefix, wrong announcing ASN

good routes not received

invalid ASN in AS_PATH

invalid NEXT_HOP

invalid left-most ASN

local black list

log contains errors

origin not in as-macro

prefix in client’s blacklist

prefix is not in IPv6 global unicast space

skip

skip

skip

skip

prefix length

prefix not in as-macro

prefixes received by clients: AS1_1

prefixes received by clients: AS1_2

prefixes received by clients: AS2

reconfigure

transit-free ASN in AS_PATH

‘tag’ reject policy scenario, IPv6

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

AS_PATH too long

RPKI INVALID route

announced by ASN derived via 16bit_mapped_asn

bogon prefix

bogon prefix, wrong announcing ASN

good routes not received

invalid ASN in AS_PATH

invalid NEXT_HOP

invalid left-most ASN

local black list

log contains errors

origin not in as-macro

prefix in client’s blacklist

prefix is not in IPv6 global unicast space

prefix length

prefix not in as-macro

prefixes received by clients: AS1_1

prefixes received by clients: AS1_2

prefixes received by clients: AS2

reconfigure

transit-free ASN in AS_PATH

BGP communities, IPv4

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

announce to AS1 only (ext)

announce to AS1 only (lrg)

announce to AS1 only (std)

announce to AS131073 only (ext)

announce to AS131073 only (lrg)

custom BGP community (ext)

custom BGP community (lrg)

custom BGP community (std)

custom BGP community scrubbed

log contains errors

reconfigure

BGP communities, IPv6

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

announce to AS1 only (ext)

announce to AS1 only (lrg)

announce to AS1 only (std)

announce to AS131073 only (ext)

announce to AS131073 only (lrg)

custom BGP community (ext)

custom BGP community (lrg)

custom BGP community (std)

custom BGP community scrubbed

log contains errors

reconfigure

BOV custom comms, IPv4

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

RPKI, AS2 invalid prefix, bad ASN

RPKI, AS2 valid prefix, exact match

log contains errors

reconfigure

BOV custom comms, IPv6

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

RPKI, AS2 invalid prefix, bad ASN

RPKI, AS2 valid prefix, exact match

log contains errors

reconfigure

RFC8950

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

IPv4 prefix length within ipv6_pref_len but outside ipv4_pref_len

RPKI VALID routes

RPKI rejected routes, AS0

RPKI rejected routes, INVALID

accepted routes

dropped routes, not in r_set

log contains errors

next hop authorized address AS2_1

next hop same-as AS1_2

next hop strict mode on AS1_1

RPKI INVALID tagging, IPv4

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

RPKI, AS2 invalid prefix, bad ASN

RPKI, AS2 invalid prefix, bad length

RPKI, AS2 unknown prefix

RPKI, AS2 valid prefix, exact match

RPKI, AS2 valid prefix, sub prefix

RPKI, AS3 invalid prefix, bad ASN

RPKI, AS3 invalid prefix, bad length

RPKI, AS3 unknown prefix

RPKI, AS3 valid prefix, exact match

RPKI, AS3 valid prefix, sub prefix

log contains errors

reconfigure

RPKI INVALID tagging, IPv6

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

RPKI, AS2 invalid prefix, bad ASN

RPKI, AS2 invalid prefix, bad length

RPKI, AS2 unknown prefix

RPKI, AS2 valid prefix, exact match

RPKI, AS2 valid prefix, sub prefix

RPKI, AS3 invalid prefix, bad ASN

RPKI, AS3 invalid prefix, bad length

RPKI, AS3 unknown prefix

RPKI, AS3 valid prefix, exact match

RPKI, AS3 valid prefix, sub prefix

log contains errors

reconfigure

RTR protocol

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

check the RTR session is up

log contains errors

restart OpenBGPD to speed up RTR session establishment

restart the RTR protocol on BIRD to speed up session establishment

route accepted because validator not running

route dropped after spinning the validator up

spin up the validator

default config, IPv4

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

log contains errors

default config, IPv6

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

log contains errors

examples, rich config, IPv4

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

log contains errors

examples, rich config, IPv6

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

log contains errors

global scenario, IPv4

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

RPKI, blackhole request for a covered prefix

RPKI, invalid prefix (bad ASN) not propagated to clients

RPKI, invalid prefix (bad ASN) received by rs

RPKI, invalid prefix (bad length) received by rs

RPKI, valid prefix propagated to clients

RPKI, valid prefix received by rs

bad communities as seen by AS101 upstreams

bad communities scrubbed by rs (lrg)

bad communities scrubbed by rs (std)

bad prefixes not received by clients

bad prefixes received by rs: AS_PATH len

bad prefixes received by rs: AS_SET origin, RFC6907 7.1.9

bad prefixes received by rs: IRR check for AS_SET origin, BIRD

skip

bad prefixes received by rs: IRR check for AS_SET origin, OpenBGPD

skip

skip

skip

bad prefixes received by rs: IRRdb white-list

bad prefixes received by rs: RPKI ROAs as route objects failed

bad prefixes received by rs: bogon

bad prefixes received by rs: bogon (wrong tag)

bad prefixes received by rs: client blacklist

bad prefixes received by rs: default route

bad prefixes received by rs: global blacklist

bad prefixes received by rs: global blacklist (wrong tag)

bad prefixes received by rs: invalid ASN in AS-PATH

bad prefixes received by rs: invalid NEXT_HOP

bad prefixes received by rs: invalid prefix-len

bad prefixes received by rs: left-most ASN

bad prefixes received by rs: never via route servers ASN in AS-PATH (PeeringDB)

bad prefixes received by rs: never via route servers ASN in AS-PATH (asns list)

bad prefixes received by rs: not IPv6 global unicast space

bad prefixes received by rs: origin not in AS-SET

bad prefixes received by rs: prefix not in AS-SET

bad prefixes received by rs: transit-free ASN in AS-PATH

bad prefixes received by rs: transit-free ASN in AS-PATH from a transit peer

bad prefixes received by rs: unknown NEXT_HOP

blackhole filtering requests as seen by rs (BLACKHOLE)

blackhole filtering requests as seen by rs (lrg cust)

blackhole filtering requests as seen by rs (std cust)

blackholed prefixes as seen by enabled clients (BLACKHOLE)

blackholed prefixes as seen by enabled clients (lrg_cust)

blackholed prefixes as seen by enabled clients (std_cust)

blackholed prefixes not seen by not enabled clients

control communities, NO_EXPORT to AS1

control communities, NO_EXPORT to AS151866

control communities, NO_EXPORT to any

control communities, RFC1997 NO_EXPORT

control communities, RTT, blackhole, not peers > 20 ms

control communities, RTT, ext comms, prepend 1x > 10 ms, 2x > 20 ms

control communities, RTT, not peers <= 5 and > 100 ms

control communities, RTT, not peers > 15 ms

control communities, RTT, not peers > 5 ms

control communities, RTT, not peers > 5 ms + AS3

control communities, RTT, only peers <= 15 ms

control communities, RTT, only peers <= 5 ms

control communities, RTT, prepend 3x <= 5 ms, 2x <= 20 ms, 1x any

control communities, RTT, prepend 3x > 100 ms, 2x > 10 ms

control communities, announce to AS1 only

control communities, announce to all except AS1

control communities, don’t announce to any

control communities, prepend once to AS1

control communities, prepend once to any

control communities, prepend thrice to AS1, once to others

control communities, prepend thrice to any

control communities, prepend twice to AS151866

control communities, prepend twice to AS2

control communities, prepend twice to any

good prefixes because of use_arin_bulk_whois_data

good prefixes because of use_registrobr_bulk_whois_data

good prefixes because of use_rpki_roas_as_route_objects: covering

good prefixes because of use_rpki_roas_as_route_objects: exact

good prefixes received by rs

good prefixes received by rs: IRRdb white-list

good prefixes received by rs: non-client NEXT_HOP

gshut by a not enabled client

gshut by an enabled client

log contains errors

other communities not scrubbed by rs (lrg)

other communities not scrubbed by rs (std)

prefixes from AS101 received by its upstreams

prefixes from AS101 received by rs

prefixes received by clients: AS1_1

prefixes received by clients: AS1_2

prefixes received by clients: AS2

prefixes received by clients: AS3

prefixes received by clients: AS3 (with ADD-PATH)

reconfigure

session configured via local include files

global scenario, IPv4, tag

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

RPKI, blackhole request for a covered prefix

RPKI, invalid prefix (bad ASN) not propagated to clients

RPKI, invalid prefix (bad ASN) received by rs

RPKI, invalid prefix (bad length) received by rs

RPKI, valid prefix propagated to clients

RPKI, valid prefix received by rs

bad communities as seen by AS101 upstreams

bad communities scrubbed by rs (lrg)

bad communities scrubbed by rs (std)

bad prefixes not received by clients

bad prefixes received by rs: AS_PATH len

bad prefixes received by rs: AS_SET origin, RFC6907 7.1.9

bad prefixes received by rs: IRR check for AS_SET origin, BIRD

bad prefixes received by rs: IRR check for AS_SET origin, OpenBGPD

skip

skip

skip

bad prefixes received by rs: IRRdb white-list

bad prefixes received by rs: RPKI ROAs as route objects failed

bad prefixes received by rs: bogon

bad prefixes received by rs: bogon (wrong tag)

bad prefixes received by rs: client blacklist

bad prefixes received by rs: default route

bad prefixes received by rs: global blacklist

bad prefixes received by rs: global blacklist (wrong tag)

bad prefixes received by rs: invalid ASN in AS-PATH

bad prefixes received by rs: invalid NEXT_HOP

bad prefixes received by rs: invalid prefix-len

bad prefixes received by rs: left-most ASN

bad prefixes received by rs: never via route servers ASN in AS-PATH (PeeringDB)

bad prefixes received by rs: never via route servers ASN in AS-PATH (asns list)

bad prefixes received by rs: not IPv6 global unicast space

bad prefixes received by rs: origin not in AS-SET

bad prefixes received by rs: prefix not in AS-SET

bad prefixes received by rs: transit-free ASN in AS-PATH

bad prefixes received by rs: transit-free ASN in AS-PATH from a transit peer

bad prefixes received by rs: unknown NEXT_HOP

blackhole filtering requests as seen by rs (BLACKHOLE)

blackhole filtering requests as seen by rs (lrg cust)

blackhole filtering requests as seen by rs (std cust)

blackholed prefixes as seen by enabled clients (BLACKHOLE)

blackholed prefixes as seen by enabled clients (lrg_cust)

blackholed prefixes as seen by enabled clients (std_cust)

blackholed prefixes not seen by not enabled clients

control communities, NO_EXPORT to AS1

control communities, NO_EXPORT to AS151866

control communities, NO_EXPORT to any

control communities, RFC1997 NO_EXPORT

control communities, RTT, blackhole, not peers > 20 ms

control communities, RTT, ext comms, prepend 1x > 10 ms, 2x > 20 ms

control communities, RTT, not peers <= 5 and > 100 ms

control communities, RTT, not peers > 15 ms

control communities, RTT, not peers > 5 ms

control communities, RTT, not peers > 5 ms + AS3

control communities, RTT, only peers <= 15 ms

control communities, RTT, only peers <= 5 ms

control communities, RTT, prepend 3x <= 5 ms, 2x <= 20 ms, 1x any

control communities, RTT, prepend 3x > 100 ms, 2x > 10 ms

control communities, announce to AS1 only

control communities, announce to all except AS1

control communities, don’t announce to any

control communities, prepend once to AS1

control communities, prepend once to any

control communities, prepend thrice to AS1, once to others

control communities, prepend thrice to any

control communities, prepend twice to AS151866

control communities, prepend twice to AS2

control communities, prepend twice to any

good prefixes because of use_arin_bulk_whois_data

good prefixes because of use_registrobr_bulk_whois_data

good prefixes because of use_rpki_roas_as_route_objects: covering

good prefixes because of use_rpki_roas_as_route_objects: exact

good prefixes received by rs

good prefixes received by rs: IRRdb white-list

good prefixes received by rs: non-client NEXT_HOP

gshut by a not enabled client

gshut by an enabled client

log contains errors

other communities not scrubbed by rs (lrg)

other communities not scrubbed by rs (std)

prefixes from AS101 received by its upstreams

prefixes from AS101 received by rs

prefixes received by clients: AS1_1

prefixes received by clients: AS1_2

prefixes received by clients: AS2

prefixes received by clients: AS3

prefixes received by clients: AS3 (with ADD-PATH)

reconfigure

session configured via local include files

global scenario, IPv4, tag&reject

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

RPKI, blackhole request for a covered prefix

RPKI, invalid prefix (bad ASN) not propagated to clients

RPKI, invalid prefix (bad ASN) received by rs

RPKI, invalid prefix (bad length) received by rs

RPKI, valid prefix propagated to clients

RPKI, valid prefix received by rs

bad communities as seen by AS101 upstreams

bad communities scrubbed by rs (lrg)

bad communities scrubbed by rs (std)

bad prefixes not received by clients

bad prefixes received by rs: AS_PATH len

bad prefixes received by rs: AS_SET origin, RFC6907 7.1.9

bad prefixes received by rs: IRR check for AS_SET origin, BIRD

bad prefixes received by rs: IRR check for AS_SET origin, OpenBGPD

skip

skip

skip

bad prefixes received by rs: IRRdb white-list

bad prefixes received by rs: RPKI ROAs as route objects failed

bad prefixes received by rs: bogon

bad prefixes received by rs: bogon (wrong tag)

bad prefixes received by rs: client blacklist

bad prefixes received by rs: default route

bad prefixes received by rs: global blacklist

bad prefixes received by rs: global blacklist (wrong tag)

bad prefixes received by rs: invalid ASN in AS-PATH

bad prefixes received by rs: invalid NEXT_HOP

bad prefixes received by rs: invalid prefix-len

bad prefixes received by rs: left-most ASN

bad prefixes received by rs: never via route servers ASN in AS-PATH (PeeringDB)

bad prefixes received by rs: never via route servers ASN in AS-PATH (asns list)

bad prefixes received by rs: not IPv6 global unicast space

bad prefixes received by rs: origin not in AS-SET

bad prefixes received by rs: prefix not in AS-SET

bad prefixes received by rs: transit-free ASN in AS-PATH

bad prefixes received by rs: transit-free ASN in AS-PATH from a transit peer

bad prefixes received by rs: unknown NEXT_HOP

blackhole filtering requests as seen by rs (BLACKHOLE)

blackhole filtering requests as seen by rs (lrg cust)

blackhole filtering requests as seen by rs (std cust)

blackholed prefixes as seen by enabled clients (BLACKHOLE)

blackholed prefixes as seen by enabled clients (lrg_cust)

blackholed prefixes as seen by enabled clients (std_cust)

blackholed prefixes not seen by not enabled clients

control communities, NO_EXPORT to AS1

control communities, NO_EXPORT to AS151866

control communities, NO_EXPORT to any

control communities, RFC1997 NO_EXPORT

control communities, RTT, blackhole, not peers > 20 ms

control communities, RTT, ext comms, prepend 1x > 10 ms, 2x > 20 ms

control communities, RTT, not peers <= 5 and > 100 ms

control communities, RTT, not peers > 15 ms

control communities, RTT, not peers > 5 ms

control communities, RTT, not peers > 5 ms + AS3

control communities, RTT, only peers <= 15 ms

control communities, RTT, only peers <= 5 ms

control communities, RTT, prepend 3x <= 5 ms, 2x <= 20 ms, 1x any

control communities, RTT, prepend 3x > 100 ms, 2x > 10 ms

control communities, announce to AS1 only

control communities, announce to all except AS1

control communities, don’t announce to any

control communities, prepend once to AS1

control communities, prepend once to any

control communities, prepend thrice to AS1, once to others

control communities, prepend thrice to any

control communities, prepend twice to AS151866

control communities, prepend twice to AS2

control communities, prepend twice to any

good prefixes because of use_arin_bulk_whois_data

good prefixes because of use_registrobr_bulk_whois_data

good prefixes because of use_rpki_roas_as_route_objects: covering

good prefixes because of use_rpki_roas_as_route_objects: exact

good prefixes received by rs

good prefixes received by rs: IRRdb white-list

good prefixes received by rs: non-client NEXT_HOP

gshut by a not enabled client

gshut by an enabled client

log contains errors

other communities not scrubbed by rs (lrg)

other communities not scrubbed by rs (std)

prefixes from AS101 received by its upstreams

prefixes from AS101 received by rs

prefixes received by clients: AS1_1

prefixes received by clients: AS1_2

prefixes received by clients: AS2

prefixes received by clients: AS3

prefixes received by clients: AS3 (with ADD-PATH)

reconfigure

session configured via local include files

global scenario, IPv6

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

RPKI, blackhole request for a covered prefix

RPKI, invalid prefix (bad ASN) not propagated to clients

RPKI, invalid prefix (bad ASN) received by rs

RPKI, invalid prefix (bad length) received by rs

RPKI, valid prefix propagated to clients

RPKI, valid prefix received by rs

bad communities as seen by AS101 upstreams

bad communities scrubbed by rs (lrg)

bad communities scrubbed by rs (std)

bad prefixes not received by clients

bad prefixes received by rs: AS_PATH len

bad prefixes received by rs: AS_SET origin, RFC6907 7.1.9

bad prefixes received by rs: IRR check for AS_SET origin, BIRD

skip

bad prefixes received by rs: IRR check for AS_SET origin, OpenBGPD

skip

skip

skip

bad prefixes received by rs: IRRdb white-list

bad prefixes received by rs: RPKI ROAs as route objects failed

bad prefixes received by rs: bogon

bad prefixes received by rs: bogon (wrong tag)

bad prefixes received by rs: client blacklist

bad prefixes received by rs: default route

bad prefixes received by rs: global blacklist

bad prefixes received by rs: global blacklist (wrong tag)

bad prefixes received by rs: invalid ASN in AS-PATH

bad prefixes received by rs: invalid NEXT_HOP

bad prefixes received by rs: invalid prefix-len

bad prefixes received by rs: left-most ASN

bad prefixes received by rs: never via route servers ASN in AS-PATH (PeeringDB)

bad prefixes received by rs: never via route servers ASN in AS-PATH (asns list)

bad prefixes received by rs: not IPv6 global unicast space

bad prefixes received by rs: origin not in AS-SET

bad prefixes received by rs: prefix not in AS-SET

bad prefixes received by rs: transit-free ASN in AS-PATH

bad prefixes received by rs: transit-free ASN in AS-PATH from a transit peer

bad prefixes received by rs: unknown NEXT_HOP

blackhole filtering requests as seen by rs (BLACKHOLE)

blackhole filtering requests as seen by rs (lrg cust)

blackhole filtering requests as seen by rs (std cust)

blackholed prefixes as seen by enabled clients (BLACKHOLE)

blackholed prefixes as seen by enabled clients (lrg_cust)

blackholed prefixes as seen by enabled clients (std_cust)

blackholed prefixes not seen by not enabled clients

control communities, NO_EXPORT to AS1

control communities, NO_EXPORT to AS151866

control communities, NO_EXPORT to any

control communities, RFC1997 NO_EXPORT

control communities, RTT, blackhole, not peers > 20 ms

control communities, RTT, ext comms, prepend 1x > 10 ms, 2x > 20 ms

control communities, RTT, not peers <= 5 and > 100 ms

control communities, RTT, not peers > 15 ms

control communities, RTT, not peers > 5 ms

control communities, RTT, not peers > 5 ms + AS3

control communities, RTT, only peers <= 15 ms

control communities, RTT, only peers <= 5 ms

control communities, RTT, prepend 3x <= 5 ms, 2x <= 20 ms, 1x any

control communities, RTT, prepend 3x > 100 ms, 2x > 10 ms

control communities, announce to AS1 only

control communities, announce to all except AS1

control communities, don’t announce to any

control communities, prepend once to AS1

control communities, prepend once to any

control communities, prepend thrice to AS1, once to others

control communities, prepend thrice to any

control communities, prepend twice to AS151866

control communities, prepend twice to AS2

control communities, prepend twice to any

good prefixes because of use_arin_bulk_whois_data

good prefixes because of use_registrobr_bulk_whois_data

good prefixes because of use_rpki_roas_as_route_objects: covering

good prefixes because of use_rpki_roas_as_route_objects: exact

good prefixes received by rs

good prefixes received by rs: IRRdb white-list

good prefixes received by rs: non-client NEXT_HOP

gshut by a not enabled client

gshut by an enabled client

log contains errors

other communities not scrubbed by rs (lrg)

other communities not scrubbed by rs (std)

prefixes from AS101 received by its upstreams

prefixes from AS101 received by rs

prefixes received by clients: AS1_1

prefixes received by clients: AS1_2

prefixes received by clients: AS2

prefixes received by clients: AS3

prefixes received by clients: AS3 (with ADD-PATH)

reconfigure

session configured via local include files

global scenario, IPv6, tag

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

RPKI, blackhole request for a covered prefix

RPKI, invalid prefix (bad ASN) not propagated to clients

RPKI, invalid prefix (bad ASN) received by rs

RPKI, invalid prefix (bad length) received by rs

RPKI, valid prefix propagated to clients

RPKI, valid prefix received by rs

bad communities as seen by AS101 upstreams

bad communities scrubbed by rs (lrg)

bad communities scrubbed by rs (std)

bad prefixes not received by clients

bad prefixes received by rs: AS_PATH len

bad prefixes received by rs: AS_SET origin, RFC6907 7.1.9

bad prefixes received by rs: IRR check for AS_SET origin, BIRD

bad prefixes received by rs: IRR check for AS_SET origin, OpenBGPD

skip

skip

skip

bad prefixes received by rs: IRRdb white-list

bad prefixes received by rs: RPKI ROAs as route objects failed

bad prefixes received by rs: bogon

bad prefixes received by rs: bogon (wrong tag)

bad prefixes received by rs: client blacklist

bad prefixes received by rs: default route

bad prefixes received by rs: global blacklist

bad prefixes received by rs: global blacklist (wrong tag)

bad prefixes received by rs: invalid ASN in AS-PATH

bad prefixes received by rs: invalid NEXT_HOP

bad prefixes received by rs: invalid prefix-len

bad prefixes received by rs: left-most ASN

bad prefixes received by rs: never via route servers ASN in AS-PATH (PeeringDB)

bad prefixes received by rs: never via route servers ASN in AS-PATH (asns list)

bad prefixes received by rs: not IPv6 global unicast space

bad prefixes received by rs: origin not in AS-SET

bad prefixes received by rs: prefix not in AS-SET

bad prefixes received by rs: transit-free ASN in AS-PATH

bad prefixes received by rs: transit-free ASN in AS-PATH from a transit peer

bad prefixes received by rs: unknown NEXT_HOP

blackhole filtering requests as seen by rs (BLACKHOLE)

blackhole filtering requests as seen by rs (lrg cust)

blackhole filtering requests as seen by rs (std cust)

blackholed prefixes as seen by enabled clients (BLACKHOLE)

blackholed prefixes as seen by enabled clients (lrg_cust)

blackholed prefixes as seen by enabled clients (std_cust)

blackholed prefixes not seen by not enabled clients

control communities, NO_EXPORT to AS1

control communities, NO_EXPORT to AS151866

control communities, NO_EXPORT to any

control communities, RFC1997 NO_EXPORT

control communities, RTT, blackhole, not peers > 20 ms

control communities, RTT, ext comms, prepend 1x > 10 ms, 2x > 20 ms

control communities, RTT, not peers <= 5 and > 100 ms

control communities, RTT, not peers > 15 ms

control communities, RTT, not peers > 5 ms

control communities, RTT, not peers > 5 ms + AS3

control communities, RTT, only peers <= 15 ms

control communities, RTT, only peers <= 5 ms

control communities, RTT, prepend 3x <= 5 ms, 2x <= 20 ms, 1x any

control communities, RTT, prepend 3x > 100 ms, 2x > 10 ms

control communities, announce to AS1 only

control communities, announce to all except AS1

control communities, don’t announce to any

control communities, prepend once to AS1

control communities, prepend once to any

control communities, prepend thrice to AS1, once to others

control communities, prepend thrice to any

control communities, prepend twice to AS151866

control communities, prepend twice to AS2

control communities, prepend twice to any

good prefixes because of use_arin_bulk_whois_data

good prefixes because of use_registrobr_bulk_whois_data

good prefixes because of use_rpki_roas_as_route_objects: covering

good prefixes because of use_rpki_roas_as_route_objects: exact

good prefixes received by rs

good prefixes received by rs: IRRdb white-list

good prefixes received by rs: non-client NEXT_HOP

gshut by a not enabled client

gshut by an enabled client

log contains errors

other communities not scrubbed by rs (lrg)

other communities not scrubbed by rs (std)

prefixes from AS101 received by its upstreams

prefixes from AS101 received by rs

prefixes received by clients: AS1_1

prefixes received by clients: AS1_2

prefixes received by clients: AS2

prefixes received by clients: AS3

prefixes received by clients: AS3 (with ADD-PATH)

reconfigure

session configured via local include files

global scenario, IPv6, tag&reject

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

RPKI, blackhole request for a covered prefix

RPKI, invalid prefix (bad ASN) not propagated to clients

RPKI, invalid prefix (bad ASN) received by rs

RPKI, invalid prefix (bad length) received by rs

RPKI, valid prefix propagated to clients

RPKI, valid prefix received by rs

bad communities as seen by AS101 upstreams

bad communities scrubbed by rs (lrg)

bad communities scrubbed by rs (std)

bad prefixes not received by clients

bad prefixes received by rs: AS_PATH len

bad prefixes received by rs: AS_SET origin, RFC6907 7.1.9

bad prefixes received by rs: IRR check for AS_SET origin, BIRD

bad prefixes received by rs: IRR check for AS_SET origin, OpenBGPD

skip

skip

skip

bad prefixes received by rs: IRRdb white-list

bad prefixes received by rs: RPKI ROAs as route objects failed

bad prefixes received by rs: bogon

bad prefixes received by rs: bogon (wrong tag)

bad prefixes received by rs: client blacklist

bad prefixes received by rs: default route

bad prefixes received by rs: global blacklist

bad prefixes received by rs: global blacklist (wrong tag)

bad prefixes received by rs: invalid ASN in AS-PATH

bad prefixes received by rs: invalid NEXT_HOP

bad prefixes received by rs: invalid prefix-len

bad prefixes received by rs: left-most ASN

bad prefixes received by rs: never via route servers ASN in AS-PATH (PeeringDB)

bad prefixes received by rs: never via route servers ASN in AS-PATH (asns list)

bad prefixes received by rs: not IPv6 global unicast space

bad prefixes received by rs: origin not in AS-SET

bad prefixes received by rs: prefix not in AS-SET

bad prefixes received by rs: transit-free ASN in AS-PATH

bad prefixes received by rs: transit-free ASN in AS-PATH from a transit peer

bad prefixes received by rs: unknown NEXT_HOP

blackhole filtering requests as seen by rs (BLACKHOLE)

blackhole filtering requests as seen by rs (lrg cust)

blackhole filtering requests as seen by rs (std cust)

blackholed prefixes as seen by enabled clients (BLACKHOLE)

blackholed prefixes as seen by enabled clients (lrg_cust)

blackholed prefixes as seen by enabled clients (std_cust)

blackholed prefixes not seen by not enabled clients

control communities, NO_EXPORT to AS1

control communities, NO_EXPORT to AS151866

control communities, NO_EXPORT to any

control communities, RFC1997 NO_EXPORT

control communities, RTT, blackhole, not peers > 20 ms

control communities, RTT, ext comms, prepend 1x > 10 ms, 2x > 20 ms

control communities, RTT, not peers <= 5 and > 100 ms

control communities, RTT, not peers > 15 ms

control communities, RTT, not peers > 5 ms

control communities, RTT, not peers > 5 ms + AS3

control communities, RTT, only peers <= 15 ms

control communities, RTT, only peers <= 5 ms

control communities, RTT, prepend 3x <= 5 ms, 2x <= 20 ms, 1x any

control communities, RTT, prepend 3x > 100 ms, 2x > 10 ms

control communities, announce to AS1 only

control communities, announce to all except AS1

control communities, don’t announce to any

control communities, prepend once to AS1

control communities, prepend once to any

control communities, prepend thrice to AS1, once to others

control communities, prepend thrice to any

control communities, prepend twice to AS151866

control communities, prepend twice to AS2

control communities, prepend twice to any

good prefixes because of use_arin_bulk_whois_data

good prefixes because of use_registrobr_bulk_whois_data

good prefixes because of use_rpki_roas_as_route_objects: covering

good prefixes because of use_rpki_roas_as_route_objects: exact

good prefixes received by rs

good prefixes received by rs: IRRdb white-list

good prefixes received by rs: non-client NEXT_HOP

gshut by a not enabled client

gshut by an enabled client

log contains errors

other communities not scrubbed by rs (lrg)

other communities not scrubbed by rs (std)

prefixes from AS101 received by its upstreams

prefixes from AS101 received by rs

prefixes received by clients: AS1_1

prefixes received by clients: AS1_2

prefixes received by clients: AS2

prefixes received by clients: AS3

prefixes received by clients: AS3 (with ADD-PATH)

reconfigure

session configured via local include files

global scenario, RFC8950

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

RPKI, blackhole request for a covered prefix

RPKI, invalid prefix (bad ASN) not propagated to clients

RPKI, invalid prefix (bad ASN) received by rs

RPKI, invalid prefix (bad length) received by rs

RPKI, valid prefix propagated to clients

RPKI, valid prefix received by rs

bad communities as seen by AS101 upstreams

bad communities scrubbed by rs (lrg)

bad communities scrubbed by rs (std)

bad prefixes not received by clients

bad prefixes received by rs: AS_PATH len

bad prefixes received by rs: AS_SET origin, RFC6907 7.1.9

bad prefixes received by rs: IRR check for AS_SET origin, BIRD

bad prefixes received by rs: IRR check for AS_SET origin, OpenBGPD

skip

bad prefixes received by rs: IRRdb white-list

bad prefixes received by rs: RPKI ROAs as route objects failed

bad prefixes received by rs: bogon

bad prefixes received by rs: client blacklist

bad prefixes received by rs: default route

bad prefixes received by rs: global blacklist

bad prefixes received by rs: invalid ASN in AS-PATH

bad prefixes received by rs: invalid NEXT_HOP

bad prefixes received by rs: invalid prefix-len

bad prefixes received by rs: left-most ASN

bad prefixes received by rs: never via route servers ASN in AS-PATH (PeeringDB)

bad prefixes received by rs: never via route servers ASN in AS-PATH (asns list)

bad prefixes received by rs: not IPv6 global unicast space

bad prefixes received by rs: origin not in AS-SET

bad prefixes received by rs: prefix not in AS-SET

bad prefixes received by rs: transit-free ASN in AS-PATH

bad prefixes received by rs: transit-free ASN in AS-PATH from a transit peer

bad prefixes received by rs: unknown NEXT_HOP

blackhole filtering requests as seen by rs (BLACKHOLE)

blackhole filtering requests as seen by rs (lrg cust)

blackhole filtering requests as seen by rs (std cust)

blackholed prefixes as seen by enabled clients (BLACKHOLE)

blackholed prefixes as seen by enabled clients (lrg_cust)

blackholed prefixes as seen by enabled clients (std_cust)

blackholed prefixes not seen by not enabled clients

control communities, NO_EXPORT to AS1

control communities, NO_EXPORT to AS151866

control communities, NO_EXPORT to any

control communities, RFC1997 NO_EXPORT

control communities, RTT, blackhole, not peers > 20 ms

control communities, RTT, ext comms, prepend 1x > 10 ms, 2x > 20 ms

control communities, RTT, not peers <= 5 and > 100 ms

control communities, RTT, not peers > 15 ms

control communities, RTT, not peers > 5 ms

control communities, RTT, not peers > 5 ms + AS3

control communities, RTT, only peers <= 15 ms

control communities, RTT, only peers <= 5 ms

control communities, RTT, prepend 3x <= 5 ms, 2x <= 20 ms, 1x any

control communities, RTT, prepend 3x > 100 ms, 2x > 10 ms

control communities, announce to AS1 only

control communities, announce to all except AS1

control communities, don’t announce to any

control communities, prepend once to AS1

control communities, prepend once to any

control communities, prepend thrice to AS1, once to others

control communities, prepend thrice to any

control communities, prepend twice to AS151866

control communities, prepend twice to AS2

control communities, prepend twice to any

good prefixes because of use_arin_bulk_whois_data

good prefixes because of use_registrobr_bulk_whois_data

good prefixes because of use_rpki_roas_as_route_objects: covering

good prefixes because of use_rpki_roas_as_route_objects: exact

good prefixes received by rs

good prefixes received by rs: IRRdb white-list

good prefixes received by rs: non-client NEXT_HOP

gshut by a not enabled client

gshut by an enabled client

log contains errors

other communities not scrubbed by rs (lrg)

other communities not scrubbed by rs (std)

prefixes from AS101 received by its upstreams

prefixes from AS101 received by rs

prefixes received by clients: AS1_1

prefixes received by clients: AS1_2

prefixes received by clients: AS2

prefixes received by clients: AS3

prefixes received by clients: AS3 (with ADD-PATH)

reconfigure

session configured via local include files

gshut, IPv4

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

clients receive routes tagged with GRACEFUL_SHUTDOWN

log contains errors

reconfigure

gshut, IPv6

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

clients receive routes tagged with GRACEFUL_SHUTDOWN

log contains errors

reconfigure

hooks example, IPv4

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

log contains errors

hooks example, IPv6

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

log contains errors

max-prefix, IPv4

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

AS5 session is down (max-prefix hit, action == shutdown)

clients log max-prefix notification

log contains errors

log is populated: import limit, no warning in the log file (AS6)

log is populated: receive limit, routes blocked

log is populated: receive limit, session shutdown (AS5)

number of prefixes received by rs from AS1

number of prefixes received by rs from AS2

number of prefixes received by rs from AS3

number of prefixes received by rs from AS4

number of prefixes received by rs from AS6

reconfigure

sessions are down

max-prefix, IPv6

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

AS5 session is down (max-prefix hit, action == shutdown)

clients log max-prefix notification

log contains errors

log is populated: import limit, no warning in the log file (AS6)

log is populated: receive limit, routes blocked

log is populated: receive limit, session shutdown (AS5)

number of prefixes received by rs from AS1

number of prefixes received by rs from AS2

number of prefixes received by rs from AS3

number of prefixes received by rs from AS4

number of prefixes received by rs from AS6

reconfigure

sessions are down

path hiding, mitigation off, IPv4

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

AS1 wants rs to not announce to AS3 and AS4

AS3 does not receive prefix at all

AS4 receives the prefix via AS2 because of ADD-PATH

log contains errors

reconfigure

rs should have best toward AS1

rs should receive prefix from both AS1 and AS2

path hiding, mitigation off, IPv6

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

AS1 wants rs to not announce to AS3 and AS4

AS3 does not receive prefix at all

AS4 receives the prefix via AS2 because of ADD-PATH

log contains errors

reconfigure

rs should have best toward AS1

rs should receive prefix from both AS1 and AS2

path hiding, mitigation on, IPv4

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

2nd best is withdrawn and AS3 should not see it anymore

skip

skip

skip

AS1 wants rs to not announce to AS3 and AS4

AS3 and AS4 don’t receive prefix via AS1

AS3 and AS4 receive prefix with sub-optimal path via AS2

log contains errors

reconfigure

rs should have best toward AS1

rs should receive prefix from both AS1 and AS2

path hiding, mitigation on, IPv6

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

2nd best is withdrawn and AS3 should not see it anymore

skip

skip

skip

AS1 wants rs to not announce to AS3 and AS4

AS3 and AS4 don’t receive prefix via AS1

AS3 and AS4 receive prefix with sub-optimal path via AS2

log contains errors

reconfigure

rs should have best toward AS1

rs should receive prefix from both AS1 and AS2

roles, IPv4

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

OTC is attached to routes without it

log contains errors

routes expected on AS2

routes with OTC from AS1

routes with OTC from AS2 are dropped

roles, IPv6

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

OTC is attached to routes without it

log contains errors

routes expected on AS2

routes with OTC from AS1

routes with OTC from AS2 are dropped

tag prefix/origin empty AS-SET, IPv4

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

AS2 ARIN Whois DB: tag only (w/o prefix_validated_via_arin_whois_db_dump)

AS2 ROA + ARIN Whois DB: tag only (w/o comms [arin_whois_db_dump, rpki_roas])

AS2 RPKI ROAs as route objects: tag only (w/o prefix_validated_via_rpki_roas)

AS2 no enforcement, prefix and origin not in AS-SET

AS2 prefix ok, origin ok, ARIN: tag only (w/o prefix_validated_via_arin_whois_db_dump)

AS2 prefix ok, origin ok, ROA: tag only (w/o prefix_validated_via_rpki_roas)

AS2 white list, prefix WL, origin WL

AS2 white list, prefix WL, origin ko

AS2 white list, prefix WL, origin ok

AS2 white list, prefix ko, origin WL

AS2 white list, prefix ok, origin WL

AS4 origin enforcement

AS4 prefix enforcement

AS4 route white list, ok (exact)

AS4 route white list, ok (more spec)

AS4 route white list, ok (origin any)

AS4 route white list, reject (more spec)

AS4 route white list, reject (origin KO)

AS4 white list, prefix WL, origin WL

AS4 white list, prefix WL, origin ko

AS4 white list, prefix WL, origin ok

AS4 white list, prefix ko, origin WL

AS4 white list, prefix ok, origin WL

AS5 white list, prefix WL, origin WL

AS5 white list, prefix WL, origin ko

AS5 white list, prefix WL, origin ok

AS5 white list, prefix ko, origin WL

AS5 white list, prefix ok, origin WL

AS6 ARIN Whois DB: ok (solely because of route white list)

AS6 ROA + ARIN Whois DB: enforced (rejected)

AS6 RPKI ROAs as route objects: invalid origin ASN

AS6 RPKI ROAs as route objects: ko

AS6 prefix ok, origin ok, ROA + ARIN: rejected

log contains errors

reconfigure

tag prefix/origin empty AS-SET, IPv6

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

AS2 ARIN Whois DB: tag only (w/o prefix_validated_via_arin_whois_db_dump)

AS2 ROA + ARIN Whois DB: tag only (w/o comms [arin_whois_db_dump, rpki_roas])

AS2 RPKI ROAs as route objects: tag only (w/o prefix_validated_via_rpki_roas)

AS2 no enforcement, prefix and origin not in AS-SET

AS2 prefix ok, origin ok, ARIN: tag only (w/o prefix_validated_via_arin_whois_db_dump)

AS2 prefix ok, origin ok, ROA: tag only (w/o prefix_validated_via_rpki_roas)

AS2 white list, prefix WL, origin WL

AS2 white list, prefix WL, origin ko

AS2 white list, prefix WL, origin ok

AS2 white list, prefix ko, origin WL

AS2 white list, prefix ok, origin WL

AS4 origin enforcement

AS4 prefix enforcement

AS4 route white list, ok (exact)

AS4 route white list, ok (more spec)

AS4 route white list, ok (origin any)

AS4 route white list, reject (more spec)

AS4 route white list, reject (origin KO)

AS4 white list, prefix WL, origin WL

AS4 white list, prefix WL, origin ko

AS4 white list, prefix WL, origin ok

AS4 white list, prefix ko, origin WL

AS4 white list, prefix ok, origin WL

AS5 white list, prefix WL, origin WL

AS5 white list, prefix WL, origin ko

AS5 white list, prefix WL, origin ok

AS5 white list, prefix ko, origin WL

AS5 white list, prefix ok, origin WL

AS6 ARIN Whois DB: ok (solely because of route white list)

AS6 ROA + ARIN Whois DB: enforced (rejected)

AS6 RPKI ROAs as route objects: invalid origin ASN

AS6 RPKI ROAs as route objects: ko

AS6 prefix ok, origin ok, ROA + ARIN: rejected

log contains errors

reconfigure

tag prefix/origin in AS-SET, IPv4

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

AS2 ARIN Whois DB: tag only (w/ prefix_validated_via_arin_whois_db_dump)

AS2 ROA + ARIN Whois DB: tag only (w/ comms [arin_whois_db_dump, rpki_roas])

AS2 RPKI ROAs as route objects: tag only (w/ prefix_validated_via_rpki_roas)

AS2 prefix ko origin ko

AS2 prefix ko origin ok

AS2 prefix ok origin ko

AS2 prefix ok origin ok

AS2 prefix ok, origin ok, ARIN: tag only (w/ prefix_validated_via_arin_whois_db_dump)

AS2 prefix ok, origin ok, ROA: tag only (w/ prefix_validated_via_rpki_roas)

AS2 white list, prefix WL, origin WL

AS2 white list, prefix WL, origin ko

AS2 white list, prefix WL, origin ok

AS2 white list, prefix ko, origin WL

AS2 white list, prefix ok, origin WL

AS4 prefix ko origin ok

AS4 prefix ok origin ok

AS4 route filtered (origin ko)

AS4 route filtered (prefix ko, origin ko)

AS4 route white list, ok (exact)

AS4 route white list, ok (more spec)

AS4 route white list, ok (origin any)

AS4 route white list, reject (more spec)

AS4 route white list, reject (origin KO)

AS4 white list, prefix WL, origin WL

AS4 white list, prefix WL, origin ko

AS4 white list, prefix WL, origin ok

AS4 white list, prefix ko, origin WL

AS4 white list, prefix ok, origin WL

AS5 prefix ok origin ko

AS5 prefix ok origin ok

AS5 route filtered (prefix ko)

AS5 route filtered (prefix ko, origin ko)

AS5 white list, prefix WL, origin WL

AS5 white list, prefix WL, origin ko

AS5 white list, prefix WL, origin ok

AS5 white list, prefix ko, origin WL

AS5 white list, prefix ok, origin WL

AS6 ARIN Whois DB: ok

AS6 ROA + ARIN Whois DB: enforce (w/ comms [arin_whois_db_dump, rpki_roas])

AS6 RPKI ROAs as route objects: invalid origin ASN

AS6 RPKI ROAs as route objects: ok

AS6 prefix ok, origin ok, ROA + ARIN: enforce (w/ comms [arin_whois_db_dump, rpki_roas])

log contains errors

reconfigure

tag prefix/origin in AS-SET, IPv6

Test

BIRD

BIRD v2

BIRD v3

OpenBGPD 8.4

AS2 ARIN Whois DB: tag only (w/ prefix_validated_via_arin_whois_db_dump)

AS2 ROA + ARIN Whois DB: tag only (w/ comms [arin_whois_db_dump, rpki_roas])

AS2 RPKI ROAs as route objects: tag only (w/ prefix_validated_via_rpki_roas)

AS2 prefix ko origin ko

AS2 prefix ko origin ok

AS2 prefix ok origin ko

AS2 prefix ok origin ok

AS2 prefix ok, origin ok, ARIN: tag only (w/ prefix_validated_via_arin_whois_db_dump)

AS2 prefix ok, origin ok, ROA: tag only (w/ prefix_validated_via_rpki_roas)

AS2 white list, prefix WL, origin WL

AS2 white list, prefix WL, origin ko

AS2 white list, prefix WL, origin ok

AS2 white list, prefix ko, origin WL

AS2 white list, prefix ok, origin WL

AS4 prefix ko origin ok

AS4 prefix ok origin ok

AS4 route filtered (origin ko)

AS4 route filtered (prefix ko, origin ko)

AS4 route white list, ok (exact)

AS4 route white list, ok (more spec)

AS4 route white list, ok (origin any)

AS4 route white list, reject (more spec)

AS4 route white list, reject (origin KO)

AS4 white list, prefix WL, origin WL

AS4 white list, prefix WL, origin ko

AS4 white list, prefix WL, origin ok

AS4 white list, prefix ko, origin WL

AS4 white list, prefix ok, origin WL

AS5 prefix ok origin ko

AS5 prefix ok origin ok

AS5 route filtered (prefix ko)

AS5 route filtered (prefix ko, origin ko)

AS5 white list, prefix WL, origin WL

AS5 white list, prefix WL, origin ko

AS5 white list, prefix WL, origin ok

AS5 white list, prefix ko, origin WL

AS5 white list, prefix ok, origin WL

AS6 ARIN Whois DB: ok

AS6 ROA + ARIN Whois DB: enforce (w/ comms [arin_whois_db_dump, rpki_roas])

AS6 RPKI ROAs as route objects: invalid origin ASN

AS6 RPKI ROAs as route objects: ok

AS6 prefix ok, origin ok, ROA + ARIN: enforce (w/ comms [arin_whois_db_dump, rpki_roas])

log contains errors

reconfigure