sonic-buildimage/dockers/docker-fpm-frr/frr/bgpd/templates/general/policies.conf.j2

!
! template: bgpd/templates/general/policies.conf.j2
!
!
!
{% if constants.bgp.allow_list is defined and constants.bgp.allow_list.enabled is defined and constants.bgp.allow_list.enabled %}
{%   if constants.bgp.allow_list.default_action is defined and constants.bgp.allow_list.default_action.strip() == 'deny' %}
route-map ALLOW_LIST_DEPLOYMENT_ID_0_V4 permit 65535
  set community no-export additive
!
route-map ALLOW_LIST_DEPLOYMENT_ID_0_V6 permit 65535
  set community no-export additive
{%   else %}
route-map ALLOW_LIST_DEPLOYMENT_ID_0_V4 permit 65535
  set community {{ constants.bgp.allow_list.drop_community }} additive
!
route-map ALLOW_LIST_DEPLOYMENT_ID_0_V6 permit 65535
  set community {{ constants.bgp.allow_list.drop_community }} additive
{%   endif %}
!
route-map FROM_BGP_PEER_V4 permit 2
  call ALLOW_LIST_DEPLOYMENT_ID_0_V4
  on-match next
!
route-map FROM_BGP_PEER_V6 permit 2
  call ALLOW_LIST_DEPLOYMENT_ID_0_V6
  on-match next
!
{% endif %}
!
!
!
route-map FROM_BGP_PEER_V4 permit 100
!
route-map TO_BGP_PEER_V4 permit 100
!
!
route-map FROM_BGP_PEER_V6 permit 1
 set ipv6 next-hop prefer-global
!
route-map FROM_BGP_PEER_V6 permit 100
!
route-map TO_BGP_PEER_V6 permit 100
!
! end of template: bgpd/templates/general/policies.conf.j2
!
[bgpcfgd]: Split one bgp mega-template to chunks. (#4143) The one big bgp configuration template was splitted into chunks. Currently we have three types of bgp neighbor peers: general bgp peers. They are represented by CONFIG_DB::BGP_NEIGHBOR table entries dynamic bgp peers. They are represented by CONFIG_DB::BGP_PEER_RANGE table entries monitors bgp peers. They are represented by CONFIG_DB::BGP_MONITORS table entries This PR introduces three templates for each peer type: bgp policies: represent policieas that will be applied to the bgp peer-group (ip prefix-lists, route-maps, etc) bgp peer-group: represent bgp peer group which has common configuration for the bgp peer type and uses bgp routing policy from the previous item bgp peer-group instance: represent bgp configuration, which will be used to instatiate a bgp peer-group for the bgp peer-type. Usually this one is simple, consist of the referral to the bgp peer-group, bgp peer description and bgp peer ip address. This PR redefined constant.yml file. Now this file has a setting for to use or don't use bgp_neighbor metadata. This file has more parameters for now, which are not used. They will be used in the next iteration of bgpcfgd. Currently all tests have been disabled. I'm going to create next PR with the tests right after this PR is merged. I'm going to introduce better bgpcfgd in a short time. It will include support of dynamic changes for the templates. FIX:: #4231 2020-04-23 11:42:22 -05:00			`!`
			`! template: bgpd/templates/general/policies.conf.j2`
			`!`
			`!`
			`!`
[bgp] Add 'allow list' manager feature (#5513) implements a new feature: "BGP Allow list." This feature allows us to control which IP prefixes are going to be advertised via ebgp from the routes received from EBGP neighbors. 2020-10-02 12:06:04 -05:00			`{% if constants.bgp.allow_list is defined and constants.bgp.allow_list.enabled is defined and constants.bgp.allow_list.enabled %}`
			`{% if constants.bgp.allow_list.default_action is defined and constants.bgp.allow_list.default_action.strip() == 'deny' %}`
			`route-map ALLOW_LIST_DEPLOYMENT_ID_0_V4 permit 65535`
			`set community no-export additive`
			`!`
			`route-map ALLOW_LIST_DEPLOYMENT_ID_0_V6 permit 65535`
			`set community no-export additive`
			`{% else %}`
			`route-map ALLOW_LIST_DEPLOYMENT_ID_0_V4 permit 65535`
			`set community {{ constants.bgp.allow_list.drop_community }} additive`
			`!`
			`route-map ALLOW_LIST_DEPLOYMENT_ID_0_V6 permit 65535`
			`set community {{ constants.bgp.allow_list.drop_community }} additive`
			`{% endif %}`
			`!`
			`route-map FROM_BGP_PEER_V4 permit 2`
			`call ALLOW_LIST_DEPLOYMENT_ID_0_V4`
			`on-match next`
			`!`
			`route-map FROM_BGP_PEER_V6 permit 2`
			`call ALLOW_LIST_DEPLOYMENT_ID_0_V6`
			`on-match next`
			`!`
			`{% endif %}`
			`!`
			`!`
			`!`
[bgpcfgd]: Split one bgp mega-template to chunks. (#4143) The one big bgp configuration template was splitted into chunks. Currently we have three types of bgp neighbor peers: general bgp peers. They are represented by CONFIG_DB::BGP_NEIGHBOR table entries dynamic bgp peers. They are represented by CONFIG_DB::BGP_PEER_RANGE table entries monitors bgp peers. They are represented by CONFIG_DB::BGP_MONITORS table entries This PR introduces three templates for each peer type: bgp policies: represent policieas that will be applied to the bgp peer-group (ip prefix-lists, route-maps, etc) bgp peer-group: represent bgp peer group which has common configuration for the bgp peer type and uses bgp routing policy from the previous item bgp peer-group instance: represent bgp configuration, which will be used to instatiate a bgp peer-group for the bgp peer-type. Usually this one is simple, consist of the referral to the bgp peer-group, bgp peer description and bgp peer ip address. This PR redefined constant.yml file. Now this file has a setting for to use or don't use bgp_neighbor metadata. This file has more parameters for now, which are not used. They will be used in the next iteration of bgpcfgd. Currently all tests have been disabled. I'm going to create next PR with the tests right after this PR is merged. I'm going to introduce better bgpcfgd in a short time. It will include support of dynamic changes for the templates. FIX:: #4231 2020-04-23 11:42:22 -05:00			`route-map FROM_BGP_PEER_V4 permit 100`
			`!`
			`route-map TO_BGP_PEER_V4 permit 100`
			`!`
			`!`
			`route-map FROM_BGP_PEER_V6 permit 1`
			`set ipv6 next-hop prefer-global`
			`!`
			`route-map FROM_BGP_PEER_V6 permit 100`
			`!`
			`route-map TO_BGP_PEER_V6 permit 100`
			`!`
			`! end of template: bgpd/templates/general/policies.conf.j2`
			`!`