[bgp]: Implement Universal Traffic Shift for SONiC

dockers/docker-fpm-frr/Dockerfile.j2

@@ -47,5 +47,11 @@ COPY ["bgpcfgd", "start.sh", "/usr/bin/"]
 COPY ["*.j2", "/usr/share/sonic/templates/"]
 COPY ["supervisord.conf", "/etc/supervisor/conf.d/"]
 COPY ["snmp.conf", "/etc/snmp/frr.conf"]
+COPY ["TSA", "/usr/bin/TSA"]
+COPY ["TSB", "/usr/bin/TSB"]
+COPY ["TSC", "/usr/bin/TSC"]
+RUN chmod a+x /usr/bin/TSA && \
+    chmod a+x /usr/bin/TSB && \
+    chmod a+x /usr/bin/TSC
 
 ENTRYPOINT ["/usr/bin/supervisord"]

dockers/docker-fpm-frr/TSA

@@ -0,0 +1,23 @@
+#!/bin/bash
+
+c=0
+config=$(vtysh -c "show run")
+echo "$config" | grep -q "route-map TO_BGP_PEER_V4 permit 2"
+c=$(($c+$?))
+echo "$config" | grep -q "route-map TO_BGP_PEER_V4 deny 3"
+c=$(($c+$?))
+echo "$config" | grep -q "route-map TO_BGP_PEER_V6 permit 2"
+c=$(($c+$?))
+echo "$config" | grep -q "route-map TO_BGP_PEER_V6 deny 3"
+c=$(($c+$?))
+
+if [[ $c -eq 4 ]];
+then
+  vtysh -c "configure terminal" -c "route-map TO_BGP_PEER_V4 permit 2" -c "match ip address prefix-list PL_LoopbackV4"
+  vtysh -c "configure terminal" -c "route-map TO_BGP_PEER_V4 deny 3"
+  vtysh -c "configure terminal" -c "route-map TO_BGP_PEER_V6 permit 2" -c "match ipv6 address prefix-list PL_LoopbackV6"
+  vtysh -c "configure terminal" -c "route-map TO_BGP_PEER_V6 deny 3"
+  echo "System Mode: Normal -> Maintenance"
+else
+  echo "System is already in Maintenance mode"
+fi

dockers/docker-fpm-frr/TSB

@@ -0,0 +1,24 @@
+#!/bin/bash
+
+c=0
+config=$(vtysh -c "show run")
+echo "$config" | grep -q "route-map TO_BGP_PEER_V4 permit 2"
+c=$(($c+$?))
+echo "$config" | grep -q "route-map TO_BGP_PEER_V4 deny 3"
+c=$(($c+$?))
+echo "$config" | grep -q "route-map TO_BGP_PEER_V6 permit 2"
+c=$(($c+$?))
+echo "$config" | grep -q "route-map TO_BGP_PEER_V6 deny 3"
+c=$(($c+$?))
+
+if [[ $c -eq 0 ]];
+then
+  vtysh -c "configure terminal" -c "no route-map TO_BGP_PEER_V4 deny 3"
+  vtysh -c "configure terminal" -c "no route-map TO_BGP_PEER_V4 permit 2"
+  vtysh -c "configure terminal" -c "no route-map TO_BGP_PEER_V6 deny 3"
+  vtysh -c "configure terminal" -c "no route-map TO_BGP_PEER_V6 permit 2"
+
+  echo "System Mode: Maintenance -> Normal"
+else
+  echo "System is already in Normal mode"
+fi

dockers/docker-fpm-frr/TSC

@@ -0,0 +1,25 @@
+#!/bin/bash
+
+echo "Traffic Shift Check:"
+c=0
+config=$(vtysh -c "show run")
+echo "$config" | grep -q "route-map TO_BGP_PEER_V4 permit 2"
+c=$(($c+$?))
+echo "$config" | grep -q "route-map TO_BGP_PEER_V4 deny 3"
+c=$(($c+$?))
+echo "$config" | grep -q "route-map TO_BGP_PEER_V6 permit 2"
+c=$(($c+$?))
+echo "$config" | grep -q "route-map TO_BGP_PEER_V6 deny 3"
+c=$(($c+$?))
+
+if [[ $c -eq 4 ]];
+then
+  echo "System Mode: Normal"
+elif [[ $c -eq 0 ]];
+then
+  echo "System Mode: Maintenance"
+else
+  echo "System Mode: Not consistent"
+fi
+
+echo

dockers/docker-fpm-frr/base_image_files/TSA

@@ -0,0 +1,3 @@
+#!/bin/bash
+
+docker exec -i bgp /usr/bin/TSA

dockers/docker-fpm-frr/base_image_files/TSB

@@ -0,0 +1,3 @@
+#!/bin/bash
+
+docker exec -i bgp /usr/bin/TSB

dockers/docker-fpm-frr/base_image_files/TSC

@@ -0,0 +1,5 @@
+#!/bin/bash
+
+docker exec -i bgp /usr/bin/TSC
+
+/usr/bin/portstat -p 5

dockers/docker-fpm-frr/bgpd.conf.default.j2

@@ -7,6 +7,21 @@ route-map FROM_BGP_SPEAKER_V4 permit 10
 !
 route-map TO_BGP_SPEAKER_V4 deny 10
 !
+{# generate loopback prefix-lists #}
+{% for (name, prefix) in LOOPBACK_INTERFACE|pfx_filter %}
+{% if prefix | ipv4 and name == 'Loopback0' %}
+ip prefix-list PL_LoopbackV4 permit {{ prefix | ip }}/32
+{% elif prefix | ipv6 and name == 'Loopback0' %}
+ipv6 prefix-list PL_LoopbackV6 permit {{ prefix | ip }}/64
+{% endif %}
+{% endfor %}
+!
+{# generate default peer route-maps #}
+!
+route-map TO_BGP_PEER_V4 permit 100
+!
+route-map TO_BGP_PEER_V6 permit 100
+!
 router bgp {{ DEVICE_METADATA['localhost']['bgp_asn'] }}
   bgp log-neighbor-changes
   bgp bestpath as-path multipath-relax
@@ -57,6 +72,10 @@ router bgp {{ DEVICE_METADATA['localhost']['bgp_asn'] }}
 {% if bgp_session.has_key('admin_status') and bgp_session['admin_status'] == 'down' or not bgp_session.has_key('admin_status') and DEVICE_METADATA['localhost'].has_key('default_bgp_status') and DEVICE_METADATA['localhost']['default_bgp_status'] == 'down' %}
   neighbor {{ neighbor_addr }} shutdown
 {% endif %}
+{# Apply default route-map for v4 peers #}
+{% if neighbor_addr | ipv4 %}
+  neighbor {{ neighbor_addr }} route-map TO_BGP_PEER_V4 out
+{% endif %}
 {% if neighbor_addr | ipv4 %}
   address-family ipv4
 {% if DEVICE_METADATA['localhost']['type'] == 'ToRRouter' %}
@@ -89,6 +108,8 @@ router bgp {{ DEVICE_METADATA['localhost']['bgp_asn'] }}
 {% if bgp_session['asn'] != DEVICE_METADATA['localhost']['bgp_asn'] %}
     neighbor {{ neighbor_addr }} route-map set-next-hop-global-v6 in
 {% endif %}
+{# Apply default route-map for v6 peers #}
+    neighbor {{ neighbor_addr }} route-map TO_BGP_PEER_V6 out
     maximum-paths 64
   exit-address-family
 {% endif %}

rules/docker-fpm-frr.mk

@@ -27,4 +27,6 @@ $(DOCKER_FPM_FRR)_RUN_OPT += -v /etc/sonic:/etc/sonic:ro
 $(DOCKER_FPM_FRR)_RUN_OPT += -v /etc/sonic/frr:/etc/frr:rw
 
 $(DOCKER_FPM_FRR)_BASE_IMAGE_FILES += vtysh:/usr/bin/vtysh
-
+$(DOCKER_FPM_FRR)_BASE_IMAGE_FILES += TSA:/usr/bin/TSA
+$(DOCKER_FPM_FRR)_BASE_IMAGE_FILES += TSB:/usr/bin/TSB
+$(DOCKER_FPM_FRR)_BASE_IMAGE_FILES += TSC:/usr/bin/TSC