yet another irrtoolset replacement, 1.0
I released version 1.0 of my routers configuration generator. It can generate the complete BGP configuration (neighbor statements, route maps, prefix and as-path lists) of peering or customer-facing routers using RPSL data, a local configuration file and a configuration template based on the popular Template::Toolkit perl package. Currently I only provide an IOS configuration template, but it should be easy to write one for JUNOS (patches are welcome!). I know that it's being used in production by several ISPs in the RIPE and APNIC region, so if you are not satisfacted by irrtoolset I think it's worth some consideration. It can be downloaded from http://www.linux.it/~md/software/rpsltool-1.0.tgz and is free software released under the terms of the GPL. (I think that I advertised it enough, so future releases will be announced on the project mailing list.) Major changes since the last public release: Modularized and cleaned up the code. Added the routesdiff program (formerly part of my cisco-tools package), to show which routes are actually not being accepted from a peer. Added the testpeerfilter program, to test the effect of a filter on a peer without actually loading it on the router. Added the nagpeer program, to automatically generate reports of bugs in the RPSL objects published by a peer. Added the rpslexpand, to quickly perform RPSL expansion from the command line. Added the findextraobjs program, useful to identify obsolete entries in peers configuration files. Added documentation. -- ciao, Marco
Hi Marco, (intentionally keeping it on the mailing list, as others might be interested in the answer as well) On Mon, Apr 24, 2006 at 12:56:24PM +0200, Marco d'Itri wrote:
I released version 1.0 of my routers configuration generator. It can generate the complete BGP configuration (neighbor statements, route maps, prefix and as-path lists) of peering or customer-facing routers using RPSL data, a local configuration file and a configuration template based on the popular Template::Toolkit perl package.
Definitely something i need to check out. Questions: - Can your tool do IPv6 as well? - Can I use the template setup to do generate prefix-list filters (for the BGP session) and uRPF ACLs (for anti-spoofing filters) at the same time? thanks, Gert Doering -- NetMaster -- Total number of prefixes smaller than registry allocations: 92315 SpaceNet AG Mail: netmaster@Space.Net Joseph-Dollinger-Bogen 14 Tel : +49-89-32356-0 D- 80807 Muenchen Fax : +49-89-32356-234
On Apr 25, Gert Doering <gert@space.net> wrote:
- Can your tool do IPv6 as well? Yes, support for IPv6 and multicast has been a design requirement from start. It can handle IPv4/IPv6 unicast/multicast in all combinations.
- Can I use the template setup to do generate prefix-list filters (for the BGP session) and uRPF ACLs (for anti-spoofing filters) at the same time? You can now. :-) Writing the template code to generate the ACLs was trivial, but I had to implement a vmethod to convert CIDR prefixes to the net + netmask format used by IOS standard ACLs. I will mail you the patch.
(If anybody else needs other features, let me know and I will try to implement them...) -- ciao, Marco
participants (2)
-
Gert Doering
-
md@Linux.IT