RPKI disabled
-
It seems FRR on TNSR (at least 20.10) was compiled explicitly with --disable-rpki:
vpp-test# show version FRRouting 7.3.1-29~tnsr_v20.10_1 (vpp-test). Copyright 1996-2005 Kunihiro Ishiguro, et al. configured with: '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--program-prefix=' '--disable-dependency-tracking' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--localstatedir=/var' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sbindir=/usr/lib/frr' '--sysconfdir=/etc/frr' '--localstatedir=/var/run/frr' '--disable-static' '--disable-werror' '--enable-irdp' '--enable-multipath=256' '--enable-vtysh' '--enable-ospfclient' '--enable-ospfapi' '--enable-rtadv' '--enable-ldpd' '--enable-pimd' '--enable-pbrd' '--disable-nhrpd' '--enable-eigrpd' '--enable-babeld' '--enable-vrrpd' '--enable-user=frr' '--enable-group=frr' '--enable-vty-group=frrvty' '--enable-fpm' '--enable-watchfrr' '--disable-bgp-vnc' '--enable-isisd' '--enable-systemd' '--disable-rpki' '--enable-bfdd' '--with-libtnsrinfradir=/var/lib/jenkins/workspace/tnsr-release/work/libtnsrinfra/build-root/rpmbuild/BUILDROOT/libtnsrinfra-0.0.1-51~tnsr_v20.10_1.el8.x86_64' '--with-libvppmgmtdir=/var/lib/jenkins/workspace/tnsr-release/work/libvppmgmt/build-root/rpmbuild/BUILDROOT/libvppmgmt-1.2.1-289~tnsr_v20.10_1.el8.x86_64' '--with-vppdir=/var/lib/jenkins/workspace/tnsr-release/work/vpp/build-root/rpmbuild/vpp-20.05' '--with-libyangdir=/var/lib/jenkins/workspace/tnsr-release/work/libyang/build-root/BUILDROOT/libyang-0.16.105-3.el8.2.x86_64' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'PKG_CONFIG_PATH=:/usr/lib64/pkgconfig:/usr/share/pkgconfig'I wonder if there's a reason for TNSR to ship without RPKI?
It's too bad - RPKI is a nice feature for BGP speakers like myself. I may try to recompile FRR based on github.com/Netgate/frr but time is limited. I also noticed that the FRR currently tagged on that github repo is
20.08. I'll chalk it up to "nice to have, will revisit in the future".
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.