Routing tab

The Routing tab shows BGP and OSPF as BIRD runs them, read every 30 seconds through the router’s API. A link can open it directly: https://<router>:8881/#routing.

What you see

• Cards: BGP on or off with your AS and router id, sessions up, routes received, prefixes announced, OSPF neighbours and addresses blackholed. A card turns orange or red when something needs attention (a session down, an OSPF interface without a neighbour).
• Sessions: every BGP peer with its address and AS, its kind (primary or backup upstream, default route or full table, iBGP), its state (a green light when Established), since when, the routes received and sent, and the last error of a session that is down.
• Prefixes announced and blackhole (DDoS): what goes to your upstreams, and the addresses they are asked to drop.
• This router: the AS number and the router id.
• OSPF: its state, the area, the neighbours (a green light when Full) and the interfaces (cost, passive, full neighbours on each).

Changing BGP and OSPF (admins)

Admins get the forms and buttons; viewers only see. Everything the page does goes through the router’s API and is logged with the admin’s name.

• Add a peer: name, address, AS, upstream or iBGP, default route or full table, primary or backup, an optional password and blackhole community. Edit changes a peer (the password is kept unless you type a new one), Disable stops its session without removing it.
• Announce / Stop announcing a prefix.
• Blackhole an address under attack, and remove it again.
• BFD on a peer (a checkbox in the peer form): its state shows next to the peer’s kind.
• RPKI on / RPKI off under This router, with the validated data’s size and age.
• OSPF: add or remove an interface (with a cost, or passive), the area, tell OSPF our default route, take a default route from OSPF, turn OSPF on or off.

A change that could cut the router off shows a red banner with a countdown: Keep this change within 120 seconds, or it is undone by itself. Undo now puts the old configuration back at once. A blackhole is applied at once, without the countdown.

How it all works and what is safe: BGP and OSPF.