]> git.puffer.fish Git - matthieu/frr.git/commit
bgpd: support TTL-security with iBGP
authorPradosh Mohapatra <pmohapat@cumulusnetworks.com>
Thu, 12 Sep 2013 03:37:07 +0000 (03:37 +0000)
committerDavid Lamparter <equinox@opensourcerouting.org>
Mon, 19 May 2014 21:25:46 +0000 (23:25 +0200)
commit5d804b439a4138c77f81de30c64f923e2b5c1340
treeb63e3dc3a266d42311392e57c37e2b0a9855ff0b
parent5f9adb5d26d3af31b00c02084468e9f92b461b01
bgpd: support TTL-security with iBGP

Traditionally, ttl-security feature has been associated with EBGP
sessions as those identify directly connected external peers. The
GTSM RFC (rfc 5082) does not make any restrictions on type of
peering. In fact, it is beneficial to support ttl-security for both
EBGP and IBGP sessions. Specifically, in data centers, there are
directly connected IBGP peerings that will benefit from the protection
ttl-security provides.

Signed-off-by: Dinesh G Dutt <ddutt@cumulusnetworks.com>
Reviewed-by: Pradosh Mohapatra <pmohapat@cumulusnetworks.com>
[DL: function refactoring split out into previous 2 patches.  changes:
     - bgp_set_socket_ttl(): ret type int -> void
     - is_ebgp_multihop_configured(): stripped peer == NULL check
     - comments/whitespace]
Signed-off-by: David Lamparter <equinox@opensourcerouting.org>
bgpd/bgp_network.c
bgpd/bgp_vty.c
bgpd/bgpd.c
doc/bgpd.texi