Install and configure bird

roles/firewall/files/shorewall/macro.BGP

+PARAM	-	-	tcp	179

roles/firewall/files/shorewall/rules

@@ -160,6 +160,9 @@ ACCEPT                         all                     kube:$METALLB_RADIUS
 # API
 Web/ACCEPT			public:$GITLAB01	fw:$KUBE_API_PUBLIC
 
+# BGP
+BGP/ACCEPT			kube			fw
+
 ##### Kubernetes end
 
 # HAProxy

roles/firewall/tasks/main.yml

@@ -17,6 +17,7 @@
       - haproxy
       - shorewall
       - shorewall6
+      - bird2
     state: present
 - name: Copy static config files
   ansible.builtin.copy:

roles/firewall/templates/bird.conf.j2

+log syslog all;
+
+protocol device {
+}
+
+protocol direct {
+	ipv4;			# Connect to default IPv4 table
+	ipv6;			# ... and to default IPv6 table
+}
+
+protocol kernel {
+	ipv4 {			# Connect protocol to IPv4 table by channel
+	      export all;	# Export to protocol. default is export none
+	};
+}
+
+protocol bgp k8s {
+    router id {{ bird_router_id }};
+
+    local as 64567;
+ 
+    ipv4 {
+        import all;
+        export none;
+    };
+ 
+    neighbor range 10.98.1.0/24 as 64512;
+};