[PATCH proxmox-perl-rs v4 2/7] sdn: fabrics: add BGP config generation

[Hannes Laimer <h.laimer@proxmox.com>]

From: Stefan Hanreich <s.hanreich@proxmox.com>

Add BGP support to the fabric config generation pipeline. This
includes interface name mapping and network interface output for
BGP unnumbered links.

Co-authored-by: Hannes Laimer <h.laimer@proxmox.com>
Signed-off-by: Hannes Laimer <h.laimer@proxmox.com>
Signed-off-by: Stefan Hanreich <s.hanreich@proxmox.com>
---
 pve-rs/src/bindings/sdn/fabrics.rs | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)

diff --git a/pve-rs/src/bindings/sdn/fabrics.rs b/pve-rs/src/bindings/sdn/fabrics.rs
index 1ebfde1..f914094 100644
--- a/pve-rs/src/bindings/sdn/fabrics.rs
+++ b/pve-rs/src/bindings/sdn/fabrics.rs
@@ -32,6 +32,7 @@ pub mod pve_rs_sdn_fabrics {
     use proxmox_ve_config::sdn::fabric::section_config::interface::InterfaceName;
     use proxmox_ve_config::sdn::fabric::section_config::node::{Node as ConfigNode, NodeId};
     use proxmox_ve_config::sdn::fabric::section_config::Section;
+    use proxmox_ve_config::sdn::fabric::section_config::protocol::bgp::BgpNode;
     use proxmox_ve_config::sdn::fabric::{FabricConfig, FabricEntry};
     use proxmox_ve_config::sdn::wireguard::WireGuardConfigBuilder;
 
@@ -406,6 +407,15 @@ pub mod pve_rs_sdn_fabrics {
                     }
                 }
                 ConfigNode::WireGuard(_) => {}
+                ConfigNode::Bgp(node_section) => {
+                    if let BgpNode::Internal(properties) = node_section.properties_mut() {
+                        for interface in properties.interfaces_mut() {
+                            if let Some(mapped_name) = map_name(&mapping, interface.name())? {
+                                interface.set_name(mapped_name);
+                            }
+                        }
+                    }
+                }
             }
         }
 
@@ -499,6 +509,8 @@ pub mod pve_rs_sdn_fabrics {
                     daemons.insert("fabricd");
                 }
                 FabricEntry::WireGuard(_) => {} // not a frr fabric
+                // bgpd is enabled by default in /etc/frr/daemons
+                FabricEntry::Bgp(_) => {}
             };
         }
 
@@ -719,6 +731,22 @@ pub mod pve_rs_sdn_fabrics {
                         }
                     }
                 }
+                ConfigNode::Bgp(node_section) => {
+                    if let BgpNode::Internal(properties) = node_section.properties() {
+                        for interface in properties.interfaces() {
+                            let name = interface.name();
+                            writeln!(interfaces)?;
+                            writeln!(interfaces, "auto {name}")?;
+                            writeln!(interfaces, "iface {name} inet manual")?;
+                            writeln!(interfaces, "\tip-forward 1")?;
+                            writeln!(interfaces, "\tip6-forward 1")?;
+                            // BGP unnumbered uses RAs to discover peer link-local
+                            // addresses. frr listens for them itself, but the kernel
+                            // would otherwise install RA-derived routes we don't want.
+                            writeln!(interfaces, "\taccept-ra 0")?;
+                        }
+                    }
+                }
             }
         }
 
-- 
2.47.3