Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SR Linux: prefix filters and match.prefix in routing policies #1311

Merged
merged 2 commits into from
Sep 11, 2024
Merged

Conversation

ipspace
Copy link
Owner

@ipspace ipspace commented Sep 11, 2024

No description provided.

@ipspace ipspace requested a review from hellt September 11, 2024 09:06
@ipspace
Copy link
Owner Author

ipspace commented Sep 11, 2024

I think I hit a bug in SR Linux :( or I can't figure out how it works :((

Here's what happens when running the tests/integration/routing/10-match-prefix.yml topology:

  • The in_x1 policy is applied as import-policy to X1 BGP neighbor (10.1.0.2). Please note I have to use the replace not update action because updating a list does not remove the existing list elements.
  • The import policy does not seem to work: it does not filter out the 172.42.42.0/24 prefix advertised by X1. Clearing the BGP session on the other end (and thus resending the BGP prefixes) does not change the results.
  • When I delete the import policy from the neighbor, commit the changes, reapply the import policy, and commit the changes, the route is filtered out.

FWIW, after starting the lab, netlab initial -o -l dut will generate the API requests sent to SR Linux in the config directory.

@ipspace
Copy link
Owner Author

ipspace commented Sep 11, 2024

@hellt: I think I found what the problem was: bogus activation of IPv4 AF on IPv6 neighbor and vice versa. Fixed that, running integration tests.

It will be "fun" to figure out why that matters though :(

@ipspace
Copy link
Owner Author

ipspace commented Sep 11, 2024

9c1814a fixed the "weird lack of import policy impact" issue. I think this is good to go.

@ipspace ipspace merged commit bc78993 into dev Sep 11, 2024
10 checks passed
@ipspace ipspace deleted the srl_prefix branch September 11, 2024 14:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants