Not abandoned no, just not a full time job either For some reason, github didn't notify me of your feature requests... ill take a look at the neighbor affinity one sometime soon
I couldn't find anything to manage IRR filters on Mikrotik, so wrote something in Python. I'm using this to keep IRR based route filters upto date for peers on IXPs along side RPKI.
I couldn't find anything for ROS7, so I've written a set of scripts to run on your LINUX host, and call the Mikrotik API to check the status of your BGP sessions. There's a version that'll send you emails, as well as one just to print the output.
I wrote something, in Python to run off the router on my monitoring host. This will also alert you if there is a session defined in /routing/bgp/connection but it doesn't appear in /routing/bgp/sessions as well as sessions which are not established in /routing/bgp/sessions. https://github.com/edgena...
I've written a readme in the github repo... happy to write some step by step/more comprehensive guide if you think its useful, including how to setup IRRPT (Although, that's all very well documented elsewhere on the internet)
So glad this was implemented, and confirm it works really well - thanks for implementing Mikrotik Team. It's not a replacement for filtering what the peers are sending of course viewtopic.php?p=997165
RPKI is another measure for routing security for sure as pe1chl said, but IRR filters sadly still have their place and are as important - there was just no decent systems I could find to manipulate these on Mikrotik, like there are for the big name vendors. I'm pretty happy with the setup now, dropp...
I've ended up writing a bunch of scripts, to generate the IRR filters off box using IRRPT and mangle them into ROS format, then a bunch of python to use the RouterOS API to check if they're in sync, and if they are not, remove the existing filter and add a new version... Not many folks on Mikrotik s...
That's pretty interesting. After a bunch of digging, I've actually gotten my script to output the right thing to remove the current filter, and put in a new version. As an example for AS23028 below; /routing/filter/rule remove [find chain=as23028-import-ipv4] /routing/filter/rule remove [find chain=...
Has anyone built IRR filtering on their eBGP sessions? Multiple tools exist to build the configuration off-router on a linux host (Such as bgpq4), but there's no way to update/replace the configuration, so every time the script runs, my import filter gets longer and longer as it simply appends to th...
Example? I don’t see communities or AS_PATH in there, even when specifying “detail” Any roadmap for BGP features you can share? The forum is peppered with inconsistencies between V4 and V6, and eBGP vs iBGP - I’ve got mostly everything I want working, RTBH, Customer communities, RPKI - happy to docu...
Same in ROS7.7 - I tried Interval 1, Space 4999 to try and get 1 in 5000, but it's clearly wrong - even raw output to my collector with no sampling doesn't seem to make much sense. I see traffic spikes reported that are bigger than the interfaces the traffic is traversing (25Gbps+ flows on 10Gbps po...
The issue persists in 7.7 (Be grateful in 6.x you have some troubleshooting capabilities for BGP - can't even see the AS_PATH in /ip/route/print let alone MED)... on Mikrotik, sadly MED isn't all that useful under iBGP in many real-world scenarios, where you'd actually want to use MED to steer traff...
For now, I've made the router with the preferred transit have a lower routerID, which whilst a complete bodge has enabled mostly what I'm looking todo. Any plans to implement a Cisco like option, to allow the user to choose how MED works on iBGP, so it matches eBGP? Is there a roadmap for BGP featur...
In my network, i've got two PE (PR1 and PR2) routers each with a transit and some peering attached. They both connect to a core router (CR1) which in turn connects to multiple access routers (It advertises these a default). Despite the transit on PR2 having a lower med, when all things are equal (Pa...