puppet-ff_gw/templates/etc/bird/bird6.conf.erb

table ibgp; # internal BGP peerings
table ebgp; # external (icvpn) BGP peerings
table freifunk; # kernel table 42 for routing from ff network

define ownas = <%= @ff_as %>;

router id <%= @own_ipv4 %>;

### functions ###

# own networks
function is_self_net() {
  return net ~ [ fd51:2bb2:fd0d::/48+,
    2001:bf7:180::/44+,
    2001:bf7:190::/44+,
    2001:bf7:200::/44+,
    2001:bf7:210::/44+,
    2001:bf7:220::/44+,
    2001:bf7:230::/44+];
}

# freifunk ip ranges in general
function is_freifunk() {
  return net ~ [ fc00::/7{48,64},
    2001:bf7::/32+];
}

function is_default() {
  return net ~ [ ::0/0 ];
}

### kernel ###

# synchronize from bird to main kernel routing table
# nothing in the other direction
# (do not sync a default route we received to the main routing table
# as this might collide with the normal default route of the host)
protocol kernel k_mast {
  scan time 10;
  import none;
  export where !is_default();
};

# synchronize from birds freifunk table to kernel routing table 42
# nothing in the other direction
protocol kernel k_frei {
  scan time 10;
  table freifunk;
  kernel table 42;
  import none;
  export all;
};

# this pseudo-protocol watches all interface up/down events
protocol device {
    scan time 10;
};

### pipes ###

# sync nothing from main routing table to ebgp
# sync routes (not own network) from ebgp to main routing table
protocol pipe p_maintbl {
  peer table ebgp;
  import where !is_self_net();
  export none;
};

# sync routes (not own network) from ebgp to ibgp
# sync routes (all) from ibgp to ebgp
protocol pipe p_ibgptbl {
  table ebgp;
  peer table ibgp;
  import all;
  export where !is_self_net();
};

# sync routes (freifunk and default routes we got) from ibgp to freifunk
# sync nothing from freifunk to ibgp
protocol pipe p_freitbl {
  table ibgp;
  peer table freifunk;
  import none;
  export where is_freifunk() || is_default();
};

### static routes ###

protocol static static_ffhh {  
  route fd51:2bb2:fd0d::/48 reject;
  route 2001:bf7:180::/44 reject;
  route 2001:bf7:190::/44 reject;
  route 2001:bf7:200::/44 reject;
  route 2001:bf7:210::/44 reject;
  route 2001:bf7:220::/44 reject;
  route 2001:bf7:230::/44 reject;
  table ebgp;
};

protocol static local_ffhh {
  route fd51:2bb2:fd0d::/64 via "br-ffhh";
  route 2001:bf7:180::/64 via "br-ffhh";
  table freifunk;
};

### templates ###

# template for same city freifunk gateways
template bgp locals {
  table ibgp;
  local as ownas;
  source address <%= @own_ipv6 %>;
  import filter {
    preference = 99;
    accept;
  };
  export where source = RTS_BGP;
  direct;
  next hop self;
};

<% @peerings_v6.each_pair do |key, hash| -%><% if hash["ip"] != @own_ipv6 -%>
protocol bgp <%= key %> from <%= hash["template"] %> {
  neighbor <%= hash["ip"] %> as <%= hash["as"] %>;
};
<% end -%><% end -%>

<% if @gw_do_ic_peering -%>
# template for icvpn gateways of other cities
template bgp peers {
  table ebgp;
  local as ownas;
  source address <%= @ic_vpn_ip6 %>;
  # ignore routes for our own network
  import where is_freifunk() && !is_self_net();
  export where is_freifunk() || (source = RTS_BGP);
  route limit 10000;
};

# template for upstream gateways
template bgp upstream from peers {
  # accept freifunk networks and default route
  import where (is_freifunk() || is_default()) && !is_self_net();
};

<% @ic_peerings_v6.each_pair do |key, hash| -%><% if hash["ip"] != @own_ipv6 -%>
protocol bgp <%= key %> from <%= hash["template"] %> {
  neighbor <%= hash["ip"] %> as <%= hash["as"] %>;
};
<% end -%><% end -%>
<% end -%>