summaryrefslogtreecommitdiff
path: root/python
diff options
context:
space:
mode:
authorNataliia Solomko <natalirs1985@gmail.com>2026-05-26 18:27:56 +0300
committerNataliia Solomko <natalirs1985@gmail.com>2026-06-09 18:41:56 +0300
commitb49e8f00560bdbd69f85539396afb6391b281519 (patch)
tree57990da78f634de549947fd28f408a137061aaa7 /python
parent6a5f1961cde6116457cb9e6b958bee7b66603c3b (diff)
downloadvyos-1x-b49e8f00560bdbd69f85539396afb6391b281519.tar.gz
vyos-1x-b49e8f00560bdbd69f85539396afb6391b281519.zip
bgp: T8223: Prevent `advertise-all-vni` in multiple BGP VRF instances simultaneously
FRR only allows one BGP instance to hold `advertise-all-vni` at a time (FRR issue #9405). When a default BGP instance is present it is always started before named VRF instances, so if a named VRF holds the flag FRR silently rejects it on every boot (regardless of default EVPN config), causing the running config to diverge from what is stored in VyOS. Enforce the following policy in verify(): - Default BGP instance may always hold `advertise-all-vni`. - A named VRF may hold it only when no default BGP instance exists. - Only one BGP instance (default or named VRF) may hold it at a time. The default BGP verify path additionally scans dependent VRFs so that adding or modifying the default BGP instance while a named VRF already holds the flag is caught even when the VRF node is not part of the current commit.
Diffstat (limited to 'python')
0 files changed, 0 insertions, 0 deletions