T

Build flock Image / build (push) Has been cancelled

Details

bird: declare anycast as protocol static; filter static→kernel export

Two coupled changes that fix the anycast advertisement path:

1. Add anycast /128 + /32 prefixes as `route … blackhole` lines in the
   protocol static stanzas. BIRD's master tables pick them up at
   preference 200 — higher than kernel-learned routes — so they're the
   ones the BGP export filter sees.

2. The kernel protocol's export filter now rejects RTS_STATIC. Without
   this, BIRD would push its blackhole back into the kernel, clobbering
   the agent-installed `<anycast> via <pod-eth0> dev flock<8hex>` route
   that's actually responsible for forwarding to the pod.

Result: BIRD has the route to advertise via BGP; the kernel has the
right route to forward; nothing fights over the kernel table.

Replaces the abandoned `gateway recursive` attempt — that's a BIRD 1.x
keyword, not BIRD 2.15.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

2026-04-25 08:16:45 -05:00

.gitea/workflows

ci: move go test into Dockerfile build stage

2026-04-24 21:19:10 -05:00

cmd

M2: netlink, IPAM/handler wiring, BIRD sidecar, CNI installer

2026-04-24 22:33:48 -05:00

deploy

agent: maintain NetworkUnavailable=False on owned nodes

2026-04-24 23:11:47 -05:00

pkg

bird: declare anycast as protocol static; filter static→kernel export