65d2a88dd2
The RPKI protocol (RFC 6810) using the RTRLib (http://rpki.realmv6.org/) that is integrated inside the BIRD's code. Implemeted transports are: - unprotected transport over TCP - secure transport over SSHv2 Example configuration of bird.conf: ... roa4 table r4; roa6 table r6; protocol rpki { debug all; # Import both IPv4 and IPv6 ROAs roa4 { table r4; }; roa6 { table r6; }; # Set cache server (validator) address, # overwrite default port 323 remote "rpki-validator.realmv6.org" port 8282; # Overwrite default time intervals retry 10; # Default 600 seconds refresh 60; # Default 3600 seconds expire 600; # Default 7200 seconds } protocol rpki { debug all; # Import only IPv4 routes roa4 { table r4; }; # Set cache server address to localhost, # use default ports tcp => 323 or ssh => 22 remote 127.0.0.1; # Use SSH transport instead of unprotected transport over TCP ssh encryption { bird private key "/home/birdgeek/.ssh/id_rsa"; remote public key "/home/birdgeek/.ssh/known_hosts"; user "birdgeek"; }; } ...
46 lines
1.2 KiB
C
46 lines
1.2 KiB
C
/*
|
|
* BIRD -- The Resource Public Key Infrastructure (RPKI) to Router Protocol
|
|
*
|
|
* (c) 2015 CZ.NIC
|
|
* (c) 2015 Pavel Tvrdik <pawel.tvrdik@gmail.com>
|
|
*
|
|
* This file was a part of RTRlib: http://rpki.realmv6.org/
|
|
*
|
|
* Can be freely distributed and used under the terms of the GNU GPL.
|
|
*/
|
|
|
|
#ifndef _BIRD_RPKI_PACKETS_H_
|
|
#define _BIRD_RPKI_PACKETS_H_
|
|
|
|
#include <arpa/inet.h>
|
|
|
|
#define RPKI_PDU_HEADER_LEN 8
|
|
|
|
/* A Error PDU size is the biggest (has encapsulate PDU inside):
|
|
* +8 bytes (Header size)
|
|
* +4 bytes (Length of Encapsulated PDU)
|
|
* +32 bytes (Encapsulated PDU IPv6 32)
|
|
* +4 bytes (Length of inserted text)
|
|
* +800 bytes (UTF-8 text 400*2 bytes)
|
|
* ------------
|
|
* = 848 bytes (Maximal expected PDU size) */
|
|
#define RPKI_PDU_MAX_LEN 848
|
|
|
|
/* RX buffer size has a great impact to scheduler granularity */
|
|
#define RPKI_RX_BUFFER_SIZE 4096
|
|
#define RPKI_TX_BUFFER_SIZE RPKI_PDU_MAX_LEN
|
|
|
|
/* Return values */
|
|
enum rpki_rtvals {
|
|
RPKI_SUCCESS = 0,
|
|
RPKI_ERROR = -1
|
|
};
|
|
|
|
int rpki_send_serial_query(struct rpki_cache *cache);
|
|
int rpki_send_reset_query(struct rpki_cache *cache);
|
|
int rpki_rx_hook(sock *sk, int size);
|
|
void rpki_connected_hook(sock *sk);
|
|
void rpki_err_hook(sock *sk, int size);
|
|
|
|
#endif
|