Curious filter matches ANY/NOT ANY problem

Nick Hilliard nick at inex.ie
Tue Nov 7 12:35:02 UTC 2017


Mark Prior wrote:
> it seems to think that
> 	filter "AS45355 AND NOT AS38442" matches ANY/NOT ANY

this is a long-standing bug which presents when you have an AS object
with both ipv4 and ipv6 route objects associated with it.

You can see the problem clearly by comparing the output of:

% peval -e 'AS38442'
% peval -e 'NOT AS38442'

Honestly, you would be better off using bgpq3 and handling the asn /
prefix set manipulation operations using a scripting language with array
union / exclusion and other set manipulation functions.  RtConfig and
peval were a great idea at the time, but it turned out that rpsl was too
complicated to be able to codify into comprehensible code and too
restrictive to be able to accurately model modern inter-domain routing
policy.

Nick



More information about the irrtoolset mailing list