Skip to content

[1.17.5] - BGP auth fails with: 'msg="failed to set md5" Err="protocol not available"' #40478

@ToroNZ

Description

@ToroNZ

Is there an existing issue for this?

  • I have searched the existing issues

Version

equal or higher than v1.17.5 and lower than v1.18.0

What happened?

The Cilium agent is unable to establish an authenticated BGP session.

Could the MD5 crypto missing? or some BGP dependency got updated and wrecked the MD5 auth mechanism.

How can we reproduce the issue?

  1. Install Cilium configuring BGP to use a password (RFC-2385)

Cilium Version

1.17.4
1.17.5

Kernel Version

6.14.9-300.fc42.x86_64

Kubernetes Version

v1.31.2

Regression

v1.17.3

Sysdump

cilium-sysdump-20250711-032514.zip

Relevant log output

time="2025-07-10T23:20:53.136122987Z" level=warning msg="failed to set md5" Err="protocol not available" Key="fdeb:e7:b88:3::1" Topic=Peer asn=64513 component=gobgp.BgpServerInstance subsys=bgp-control-plane
[...]
time="2025-07-10T23:20:53.13640939Z" level=warning msg="failed to unset md5" Err="protocol not available" Key=172.16.38.1 Topic=Peer asn=64513 component=gobgp.BgpServerInstance subsys=bgp-control-plane
[...]
time="2025-07-10T23:20:53.136479124Z" level=warning msg="failed to set md5" Err="protocol not available" Key=172.16.38.1 Topic=Peer asn=64513 component=gobgp.BgpServerInstance subsys=bgp-control-plane

Anything else?

The issue is NOT present on 1.17.3

Cilium Users Document

  • Are you a user of Cilium? Please add yourself to the Users doc

Code of Conduct

  • I agree to follow this project's Code of Conduct

Metadata

Metadata

Assignees

No one assigned

    Labels

    area/agentCilium agent related.area/bgpImpacts the Border Gateway Protocol feature.kind/bugThis is a bug in the Cilium logic.kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.kind/regressionThis functionality worked fine before, but was broken in a newer release of Cilium.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions