How to configure bird 1.6 router to reject local LAN traffic?
0
votes
0
answers
100
views
I am setting up CI environment where I have two subnets connected by two peered bird routers.
My current ipv4 config on one of the routers is as follows:
protocol device {
}
protocol direct {
interface "eth0";
interface "eth1";
}
protocol kernel {
import none;
export all;
}
protocol bgp {
import all;
export all;
local 10.100.0.9 as 9;
neighbor 10.100.0.7 as 7;
}
This and the other router are connected over 10.100.0.0/24. LAN instances connect to this router over 10.9.0.0/24.
Currently, when I send LAN ethernet packets from e.g. 10.9.0.71 to 10.9.0.72, and the ethernet dst is router's MAC then the packet is delivered to LAN server. What I would like to achieve for LAN packets is:
* when dst MAC is router's MAC then the packet does not reach the destination,
* when dst MAC is destination server's MAC then the packet reaches that destination, just as it does now.
I don't know very much about routing and bird
documentation is rather targeted to experienced users. So far I tried using filters and blackholed static routes, but it was more of a guesswork and none of it worked.
Asked by Boycott OpenAI sellouts
(101 rep)
May 5, 2023, 02:59 PM