OpenBSD CVS

CVS log for src/usr.sbin/ldpd/ldpd.conf.5


[BACK] Up to [local] / src / usr.sbin / ldpd

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.42 / (download) - annotate - [select for diffs], Thu Mar 2 17:09:53 2023 UTC (15 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, OPENBSD_7_4_BASE, OPENBSD_7_4, OPENBSD_7_3_BASE, OPENBSD_7_3, HEAD
Changes since 1.41: +3 -3 lines
Diff to previous 1.41 (colored)

improve the Nd lines such that the format is consistent for the
various *d, *conf, *ctl files (where relevant) and simple;

also makes "man -k routing" more useful;

help from claudio and florian
ok claudio florian millert

Revision 1.41 / (download) - annotate - [select for diffs], Sat May 16 16:58:12 2020 UTC (4 years ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_7_2_BASE, OPENBSD_7_2, OPENBSD_7_1_BASE, OPENBSD_7_1, OPENBSD_7_0_BASE, OPENBSD_7_0, OPENBSD_6_9_BASE, OPENBSD_6_9, OPENBSD_6_8_BASE, OPENBSD_6_8
Changes since 1.40: +4 -4 lines
Diff to previous 1.40 (colored)

list example files in FILES with a short description: generally, "Example
configuration file.", but occasionally something else fit better; at the
same time, try to make the format for FILES more consistent;

original diff from clematis

Revision 1.40 / (download) - annotate - [select for diffs], Mon Feb 10 13:18:21 2020 UTC (4 years, 3 months ago) by schwarze
Branch: MAIN
CVS Tags: OPENBSD_6_7_BASE, OPENBSD_6_7
Changes since 1.39: +4 -2 lines
Diff to previous 1.39 (colored)

briefly mention /etc/examples/ in the FILES section of all the
manual pages that document the corresponding configuration files;
OK jmc@, and general direction discussed with many

Revision 1.39 / (download) - annotate - [select for diffs], Sun Mar 31 20:14:14 2019 UTC (5 years, 2 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_6_6_BASE, OPENBSD_6_6, OPENBSD_6_5_BASE, OPENBSD_6_5
Changes since 1.38: +6 -5 lines
Diff to previous 1.38 (colored)

new sentence, new line;

Revision 1.38 / (download) - annotate - [select for diffs], Sun Mar 31 19:08:30 2019 UTC (5 years, 2 months ago) by procter
Branch: MAIN
Changes since 1.37: +5 -5 lines
Diff to previous 1.37 (colored)

GTSM is not widely known, so be more concrete as to its effect
(viz. hop-limit-sensitive discards). Older implementations are
known to violate it, as it was made mandatory only recently by
RFC7552 (2015), eight years after the original LDP specification.
ok claudio@

Revision 1.37 / (download) - annotate - [select for diffs], Wed Jan 23 02:02:04 2019 UTC (5 years, 4 months ago) by dlg
Branch: MAIN
Changes since 1.36: +29 -12 lines
Diff to previous 1.36 (colored)

rework how tcp md5 signatures are configured.

previously ldpd only allowed tcp md5 to be configured against a
neighbor (by ldp router id), but other vendors supported configuring
tcp md5sig by prefix as well as neighbor. this reworks the config
so auth is maintained globally as a list of prefixes that you do
and do not want to do tcp md5sig auth with.

the config statements look more like what is in bgpd.conf now too.

an example of the new config for interoperating with my baby cisco
test network:

on ios:

	mpls ldp password required for MPLS
	mpls ldp password option 1 for MPLS key-chain LDPAUTH

	key chain LDPAUTH
	 key 1
	  key-string secret

	interface Loopback0
	 ip address 192.168.0.0 255.255.255.255
	end

	ip prefix-list MPLS seq 5 permit 192.168.0.0/24
	ip access-list standard MPLS

	mpls ldp router-id Loopback0 force

and in ldpd.conf:

	router-id 192.168.0.25
	tcp md5sig password secret 192.168.0.0/24
	address-family ipv4 { interface vmx1 }

this still supports specifying tcp md5sig on neighbors, but that
is syntactic sugar around adding entries to the list of auths.

ok (and lots of help from) claudio@

Revision 1.36 / (download) - annotate - [select for diffs], Mon Aug 6 17:25:11 2018 UTC (5 years, 9 months ago) by mestre
Branch: MAIN
CVS Tags: OPENBSD_6_4_BASE, OPENBSD_6_4
Changes since 1.35: +6 -6 lines
Diff to previous 1.35 (colored)

Change manpage example for reserved words since the macro used is to replace
a password and that way it would log it when the daemon is ran in verbose mode.

Hint and OK claudio@

Revision 1.35 / (download) - annotate - [select for diffs], Mon Jun 18 06:04:25 2018 UTC (5 years, 11 months ago) by jmc
Branch: MAIN
Changes since 1.34: +4 -4 lines
Diff to previous 1.34 (colored)

remove the SECTIONS header, since a one line DESCRIPTION is a bit silly;
use a more general text for the sections, and avoid the catchup issue
that was trying to document how many there were;

ok benno rob

Revision 1.34 / (download) - annotate - [select for diffs], Fri Mar 3 23:36:06 2017 UTC (7 years, 3 months ago) by renato
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE, OPENBSD_6_3, OPENBSD_6_2_BASE, OPENBSD_6_2, OPENBSD_6_1_BASE, OPENBSD_6_1
Changes since 1.33: +8 -2 lines
Diff to previous 1.33 (colored)

Allow to run on a non-default rdomain.

OK claudio@

Revision 1.33 / (download) - annotate - [select for diffs], Thu Jul 7 19:56:27 2016 UTC (7 years, 10 months ago) by rzalamena
Branch: MAIN
CVS Tags: OPENBSD_6_0_BASE, OPENBSD_6_0
Changes since 1.32: +5 -5 lines
Diff to previous 1.32 (colored)

Updated the ldpd.conf man page examples

The man page already contains the definition of the new neighbor-addr and
neighbor-id, but the examples were outdated. Now we may have an LSR-ID that
is different from its address.

ok renato@

Revision 1.32 / (download) - annotate - [select for diffs], Sat Jul 2 05:58:00 2016 UTC (7 years, 11 months ago) by jmc
Branch: MAIN
Changes since 1.31: +4 -4 lines
Diff to previous 1.31 (colored)

do not uppercase "hop limit";

Revision 1.31 / (download) - annotate - [select for diffs], Fri Jul 1 23:29:55 2016 UTC (7 years, 11 months ago) by renato
Branch: MAIN
Changes since 1.30: +3 -3 lines
Diff to previous 1.30 (colored)

Several minor tweaks.

Revision 1.30 / (download) - annotate - [select for diffs], Fri Jul 1 23:14:31 2016 UTC (7 years, 11 months ago) by renato
Branch: MAIN
Changes since 1.29: +34 -1 lines
Diff to previous 1.29 (colored)

Add GTSM support (RFC 6720).

This also finishes the missing bits from our RFC 7552 implementation
because GTSM is mandatory for LDPv6.

To avoid any kind of interoperability problems, I included a few
knobs to enable/disable GTSM on a per-address-family and per-neighbor
basis. Cisco's LDPv6 implementation, for instance, doesn't support GTSM.

"reads good" claudio@

Revision 1.29 / (download) - annotate - [select for diffs], Mon May 23 21:05:07 2016 UTC (8 years ago) by jmc
Branch: MAIN
Changes since 1.28: +4 -8 lines
Diff to previous 1.28 (colored)

various tweaks;

Revision 1.28 / (download) - annotate - [select for diffs], Mon May 23 19:14:03 2016 UTC (8 years ago) by renato
Branch: MAIN
Changes since 1.27: +2 -1 lines
Diff to previous 1.27 (colored)

Update copyright information.

Revision 1.27 / (download) - annotate - [select for diffs], Mon May 23 18:58:48 2016 UTC (8 years ago) by renato
Branch: MAIN
Changes since 1.26: +68 -15 lines
Diff to previous 1.26 (colored)

Add support for IPv6 (RFC 7552).

This includes:
* Full compliance to RFC 7552;
* Support for MD5 on LDPov6 sessions;
* Support for pseudowires over IPv6 LSPs (we're probably the world's
  first implementation doing this);
* Support for the IPv6 explicit-null label;
* Knob to specify the prefered address-family for TCP transport
  connections;
* Knob to use cisco non-compliant format to send and interpret the
  Dual-Stack capability TLV.

Revision 1.26 / (download) - annotate - [select for diffs], Mon May 23 18:49:22 2016 UTC (8 years ago) by renato
Branch: MAIN
Changes since 1.25: +29 -22 lines
Diff to previous 1.25 (colored)

Start sentences on new lines in ldpd.conf(5).

Revision 1.25 / (download) - annotate - [select for diffs], Mon May 23 17:43:42 2016 UTC (8 years ago) by renato
Branch: MAIN
Changes since 1.24: +6 -6 lines
Diff to previous 1.24 (colored)

Fix mess caused by my commit script.

I screwed up everything... trying to fix now.

Revision 1.24 / (download) - annotate - [select for diffs], Mon May 23 16:18:51 2016 UTC (8 years ago) by renato
Branch: MAIN
Changes since 1.23: +2 -1 lines
Diff to previous 1.23 (colored)

Make neighbor parameters per lsr-id not per transport-address.

With the advent of IPv6 support, a single neighbor can have two different
transport-addresses: one for ipv4 and one for ipv6. In order to define
neighbor-specific parameters in an indistinguishable way, define them
by lsr-id. This way we can switch between LDPov4 and LDPov6 and keep
the same configuration.

Revision 1.23 / (download) - annotate - [select for diffs], Mon May 23 15:53:40 2016 UTC (8 years ago) by renato
Branch: MAIN
Changes since 1.22: +3 -3 lines
Diff to previous 1.22 (colored)

Validate received hello holdtime and keepalive time.

Refuse a keepalive time of zero because it's invalid. For the hello
holdtime, zero is valid and means infinite.

Additionally, refuse values smaller than three for both the keepalive
timer and the hello holdtime. The keepalive/hello interval is calculated
as one third of their holdtime, which means that if the holdtime is one
or two, the calculated interval would be zero using integer arithmetic.

If anyone wants to use such a small holdtime, he or she should use
BFD instead.

Revision 1.22 / (download) - annotate - [select for diffs], Mon May 23 15:43:11 2016 UTC (8 years ago) by renato
Branch: MAIN
Changes since 1.21: +6 -1 lines
Diff to previous 1.21 (colored)

Add knob to configure the transport address.

This will be especially important when we add support for IPv6, because
we'll not be able to use the router-id as the transport-address in
this case.

Revision 1.21 / (download) - annotate - [select for diffs], Mon May 23 15:41:04 2016 UTC (8 years ago) by renato
Branch: MAIN
Changes since 1.20: +5 -1 lines
Diff to previous 1.20 (colored)

Allow setting the session holdtime per neighbor.

Revision 1.20 / (download) - annotate - [select for diffs], Mon May 23 15:36:53 2016 UTC (8 years ago) by renato
Branch: MAIN
Changes since 1.19: +34 -23 lines
Diff to previous 1.19 (colored)

Sort configuration options in ldpd.conf(5).

Revision 1.19 / (download) - annotate - [select for diffs], Mon May 23 15:32:48 2016 UTC (8 years ago) by renato
Branch: MAIN
Changes since 1.18: +12 -2 lines
Diff to previous 1.18 (colored)

Add support for including additional configuration files.

Pulled from ospfd. Original author: dlg@

Revision 1.18 / (download) - annotate - [select for diffs], Tue Jul 21 04:52:29 2015 UTC (8 years, 10 months ago) by renato
Branch: MAIN
CVS Tags: OPENBSD_5_9_BASE, OPENBSD_5_9, OPENBSD_5_8_BASE, OPENBSD_5_8
Changes since 1.17: +85 -2 lines
Diff to previous 1.17 (colored)

VPLS signaling support.

This patch introduces full support for pseudowire signaling in ldpd(8),
including Control Word and Status TLV negotiation.

As of now it's not possible to configure a VPWS, but the signaling is
the same. In the future, when VPWS support is available in the kernel,
ldpd(8) can be extended to support VPWS with only a few modifications.

Limitations:
* No support for FEC 129, only FEC 128 (more widely deployed);
* No support for group withdraws (not widely deployed);
* No support for MAC withdraws (not widely deployed).

Related RFCs:
* RFC 3916: Requirements for Pseudo-Wire Emulation Edge-to-Edge (PWE3)
* RFC 3985: Pseudo Wire Emulation Edge-to-Edge (PWE3) Architecture
* RFC 4385: Pseudowire Emulation Edge-to-Edge (PWE3) Control Word for
  Use over an MPLS PSN
* RFC 4446: IANA Allocations for Pseudowire Edge to Edge Emulation (PWE3)
* RFC 4447: Pseudowire Setup and Maintenance Using the Label Distribution
  Protocol (LDP)
* RFC 4448: Encapsulation Methods for Transport of Ethernet over MPLS
  Networks
* RFC 4905: Encapsulation Methods for Transport of Layer 2 Frames over
  MPLS Networks
* RFC 4906: Transport of Layer 2 Frames Over MPLS

ok claudio@

Revision 1.17 / (download) - annotate - [select for diffs], Sun Jul 19 22:36:30 2015 UTC (8 years, 10 months ago) by jmc
Branch: MAIN
Changes since 1.16: +5 -5 lines
Diff to previous 1.16 (colored)

new sentence, new line;

Revision 1.16 / (download) - annotate - [select for diffs], Sun Jul 19 21:01:56 2015 UTC (8 years, 10 months ago) by renato
Branch: MAIN
Changes since 1.15: +23 -3 lines
Diff to previous 1.15 (colored)

Implement md5 authentication support.

ok claudio@

Revision 1.15 / (download) - annotate - [select for diffs], Sun Jul 19 20:50:03 2015 UTC (8 years, 10 months ago) by renato
Branch: MAIN
Changes since 1.14: +1 -34 lines
Diff to previous 1.14 (colored)

Remove incomplete support for unnecessary modes of  operation.

LDP has several modes of operation, it was designed in that way so it
could run on legacy equipment like ATM/FR switches with very strict
memory limitations.

For modern hardware there's no point on using either the "Conservative
Label Retention" or "Downstream On Demand" modes of operation since they
save memory at cost of blackholing traffic when routing changes. Major
vendors implement only the "Liberal Label Retention" and "Downstream
Unsolicited" modes for non ATM/FR hardware. Let's do that too.

As for using either "Independent Control" or "Ordered Control", let's
stick with the first option mainly because it's easier to implement
and because it doesn't really matter which control mode is used. For
reference, Cisco implements only "Independent Control" and Juniper only
"Ordered Control". Both modes are interoperable.

The point of supporting only one combination of all modes of operation
is that it will allow for the writing of a simpler code without removing
useful functionality.

ok claudio@

Revision 1.14 / (download) - annotate - [select for diffs], Tue Jun 4 06:41:35 2013 UTC (11 years ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_5_7_BASE, OPENBSD_5_7, OPENBSD_5_6_BASE, OPENBSD_5_6, OPENBSD_5_5_BASE, OPENBSD_5_5, OPENBSD_5_4_BASE, OPENBSD_5_4
Changes since 1.13: +3 -4 lines
Diff to previous 1.13 (colored)

tweak previous;

Revision 1.13 / (download) - annotate - [select for diffs], Tue Jun 4 02:25:28 2013 UTC (11 years ago) by claudio
Branch: MAIN
Changes since 1.12: +39 -4 lines
Diff to previous 1.12 (colored)

Implement support for adjacencies and targeted hellos
Refactor adjacencies out of the neighbor handling so that it is possible to
have more complex topologies with targeted sessions.
From Renato Westphal

Revision 1.12 / (download) - annotate - [select for diffs], Sat Jun 1 20:07:07 2013 UTC (11 years ago) by jmc
Branch: MAIN
Changes since 1.11: +1 -2 lines
Diff to previous 1.11 (colored)

zap extra .Pp;

Revision 1.11 / (download) - annotate - [select for diffs], Sat Jun 1 19:28:55 2013 UTC (11 years ago) by claudio
Branch: MAIN
Changes since 1.10: +2 -2 lines
Diff to previous 1.10 (colored)

The keepalive timeout should be configured on a global basis and not per
interface.
Remove the iface pointer from the 'nbr' structure because it's not
needed anymore.
Diff from Renato Westphal

Revision 1.10 / (download) - annotate - [select for diffs], Sat Jun 1 18:47:07 2013 UTC (11 years ago) by claudio
Branch: MAIN
Changes since 1.9: +2 -6 lines
Diff to previous 1.9 (colored)

Drop support for per-interface labelspaces.
Support for per-interface labelspaces is only necessary for legacy ATM/FR
interfaces running in cell-mode. We shouldn't worry about this.
For platform-wide label spaces the label space id is always 0.
Diff by Renato Westphal

Revision 1.9 / (download) - annotate - [select for diffs], Sat Jun 1 18:35:02 2013 UTC (11 years ago) by claudio
Branch: MAIN
Changes since 1.8: +15 -17 lines
Diff to previous 1.8 (colored)

Drop support for passive interfaces.
Support for passive interfaces was inherited from ospfd but it doesn't
make any sense at all for ldpd.
Diff from Renato Westphal

Revision 1.8 / (download) - annotate - [select for diffs], Wed Aug 29 20:15:19 2012 UTC (11 years, 9 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_5_3_BASE, OPENBSD_5_3
Changes since 1.7: +3 -3 lines
Diff to previous 1.7 (colored)

rfc 5036 obsoletes rfc 3036; ok claudio

Revision 1.7 / (download) - annotate - [select for diffs], Tue Apr 24 14:56:09 2012 UTC (12 years, 1 month ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_5_2_BASE, OPENBSD_5_2
Changes since 1.6: +4 -4 lines
Diff to previous 1.6 (colored)

take a stab at documenting when arguments need quoted, and valid macro
characters;

prompted by a diff from robert peichaer org

thanks gilles and henning for feedback
ok deraadt zinke

Revision 1.6 / (download) - annotate - [select for diffs], Sat Apr 30 07:52:33 2011 UTC (13 years, 1 month ago) by sthen
Branch: MAIN
CVS Tags: OPENBSD_5_1_BASE, OPENBSD_5_1, OPENBSD_5_0_BASE, OPENBSD_5_0
Changes since 1.5: +6 -6 lines
Diff to previous 1.5 (colored)

no need to escape |, pointed out by jmc@
"it's worth killing, if just to stop it being copied all over the place"

Revision 1.5 / (download) - annotate - [select for diffs], Wed Sep 1 13:54:54 2010 UTC (13 years, 9 months ago) by claudio
Branch: MAIN
CVS Tags: OPENBSD_4_9_BASE, OPENBSD_4_9
Changes since 1.4: +2 -2 lines
Diff to previous 1.4 (colored)

s/lfib/fib/ for more consitency with the other routing daemons.
This started manly because of ldpctl beeing inconsistent and me misstyping
lfib almost every time.
OK michele@

Revision 1.4 / (download) - annotate - [select for diffs], Sat Jan 2 21:29:56 2010 UTC (14 years, 5 months ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_4_8_BASE, OPENBSD_4_8, OPENBSD_4_7_BASE, OPENBSD_4_7
Changes since 1.3: +4 -4 lines
Diff to previous 1.3 (colored)

sort SEE ALSO;

Revision 1.3 / (download) - annotate - [select for diffs], Sat Jan 2 19:44:53 2010 UTC (14 years, 5 months ago) by schwarze
Branch: MAIN
Changes since 1.2: +2 -3 lines
Diff to previous 1.2 (colored)

The .Rs macro must be followed by .Re, and empty .Rs is useless anyway.
Markup syntax error found by mandoc(1), also required to fix the mandoc build.
ok jmc@ sobrado@

Revision 1.2 / (download) - annotate - [select for diffs], Tue Jun 2 16:17:14 2009 UTC (15 years ago) by michele
Branch: MAIN
CVS Tags: OPENBSD_4_6_BASE, OPENBSD_4_6
Changes since 1.1: +53 -115 lines
Diff to previous 1.1 (colored)

Fix ldpd.conf man page.

Document the most important options currently present.

input jmc@

Revision 1.1 / (download) - annotate - [select for diffs], Mon Jun 1 20:59:45 2009 UTC (15 years ago) by michele
Branch: MAIN

Welcome ldpd, the Label Distribution Protocol daemon.
Built using the imsg/three process framework, its main aim
is to redistribute MPLS labels between peers.

Right now it has some really basic functionalities,
the basic protocol works and peers are able to exchange
labels and insert them in the kernel.
It still does not react to changes of topology.

Not yet connected to the builds.

ok claudio@ deraadt@

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.