•  Štěpán Němec howto/OpenBGPD: pf: allow runtime modification of the dn42 tables Changing them without reloading the firewall can be useful, esp. in the <dn42peers> case. a9ad540
  •  Štěpán Němec howto/OpenBGPD: remove fe80::/64 from <dn42etc>, it makes no sense there IPv6 LLA do not partake in transit traffic. I guess I just copied the wireguard allowed IPs without thinking. 73cb9e8
  •  Štěpán Němec howto/{Bird2,OpenBGPD}: use more idiomatic CIDR prefix syntax 1f77238
  •  Štěpán Němec howto/OpenBGPD: eschew NAT, install fallback blackhole routes Also use a separate loopback interface for dn42 (not really necessary, but possibly convenient for related config management). e92734c
  •  Štěpán Němec howto/OpenBGPD: pf.conf: specify 'no state' for transit traffic Make sure state tracking doesn't interfere with asymmetric routing. Some discussion regarding 'keep state (sloppy)' vs 'no state' etc.: https://marc.info/?l=openbsd-tech&m=172164054316207&w=2 'Re: cache route at pf state' https://marc.info/?l=openbsd-misc&m=129864698805368&w=2 'Re: Alternatives to PF pflow for people running BGP ?' https://marc.info/?l=openbsd-misc&m=138308640116288&w=2 'Re: General question about openbgpd and PF' 139e96f
  •  Štěpán Němec howto/OpenBGPD: hostname.lo0: use syntax closer to man page Both work, but giving the family explicitly is closer to OpenBSD hostname.if(5) documentation. 7573f03
  •  Štěpán Němec howto/OpenBGPD: replace defunct looking glass link The defunctness confirmed by vinishor (IRC) via online personal communication with the high5.nl maintainer. Working instance kindly provided by VINISHOR-MNT. 12df37c
  •  Štěpán Němec Revamp and flesh out howto/OpenBGPD What was there previously was mostly minimally adjusted excerpts from OpenBGPD man pages and the example config, and of limited use to dn42 beginners (e.g., the config failed to provide the full dn42 route view to EBGP peers; it would only export one's allocated prefixes). Provide a more complete config example similar to the Bird2 howto, including Wireguard peering setup. 26a9228
  •  Štěpán Němec howto/OpenBGPD: fix typos 103bc28
  •  lare backport (cosmetic) changes from wiki-ng 37d7831