[BGP] Fix TCP MD5 authentication problem in VRF (sonic-net#19980)

[BGP] Fix TCP MD5 authentication problem in VRF Signed-off-by: Julian Chang - TW <[email protected]>
lolyu · Aug 28, 2024 · 13e3f80 · 13e3f80
1 parent 8dcf192
commit 13e3f80
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 0 deletions.
diff --git a/...-frr/patch/0053-bgpd-Set-md5-TCP-socket-option-for-outgoing-connections-on-listener.patch b/...-frr/patch/0053-bgpd-Set-md5-TCP-socket-option-for-outgoing-connections-on-listener.patch
@@ -0,0 +1,14 @@
+diff --git a/bgpd/bgp_network.c b/bgpd/bgp_network.c
+index 76bb9949d..974a57ef2 100644
+--- a/bgpd/bgp_network.c
++++ b/bgpd/bgp_network.c
+@@ -774,6 +774,9 @@ int bgp_connect(struct peer *peer)
+ 					     ? IPV4_MAX_BITLEN
+ 					     : IPV6_MAX_BITLEN;
+
++		if (!BGP_PEER_SU_UNSPEC(peer))
++			bgp_md5_set(peer);
++
+ 		bgp_md5_set_connect(peer->fd, &peer->su, prefixlen,
+ 				    peer->password);
+ 	}
diff --git a/src/sonic-frr/patch/series b/src/sonic-frr/patch/series
@@ -50,3 +50,4 @@
 0050-bgpd-backpressure-Avoid-use-after-free.patch
 0051-bgpd-backpressure-fix-ret-value-evpn_route_select_in.patch
 0052-bgpd-backpressure-log-error-for-evpn-when-route-inst.patch
+0053-bgpd-Set-md5-TCP-socket-option-for-outgoing-connections-on-listener.patch