BGPLG(8)                OpenBSD System Manager's Manual               BGPLG(8)

NAME
     bgplgsh - looking glass shell for the OpenBSD Border Gateway Protocol
     daemon

SYNOPSIS
     bgplgsh

DESCRIPTION
     The bgplgsh program is a looking glass shell for the bgpd(8) Border Gate-
     way Protocol daemon.  The looking glass will provide a simple command
     line interface with read-only access to a restricted set of bgpd(8) and
     system status information, which is typically used on route servers by
     Internet Service Providers (ISPs) and Internet eXchange points (IXs).

     It requires three steps to enable the looking glass shell:

     1.   Add bgplgsh as a valid login shell.  See shells(5) for more informa-
          tion.

                # echo /usr/bin/bgplgsh >> /etc/shells

     2.   Create a new user for restricted looking glass access.  See
          adduser(8) for more information about system user management.

                # adduser -shell /usr/bin/bgplgsh -batch bgplg
                # passwd bgplg

     3.   Start the Border Gateway Protocol daemon with a second, restricted,
          control socket.  See bgpd(8) and bgplg(8) for more information.

          For example, set the following in /etc/rc.conf.local to start
          bgpd(8) using the second, restricted, control socket:

                bgpd_flags="-r /var/www/logs/bgpd.rsock"

FILES
     /var/www/logs/bgpd.rsock    Position of the second, restricted, control
                                 socket of bgpd(8).

SEE ALSO
     bgpd(8), bgplg(8)

HISTORY
     The bgplgsh program first appeared in OpenBSD 4.1.  The initial implemen-
     tation was done in 2005 for DE-CIX, the German commercial internet ex-
     change point.

AUTHORS
     The bgplgsh program was written by Reyk Floeter <reyk@vantronix.net>.

CAVEATS
     To prevent commands from running endlessly, bgplgsh will kill the corre-
     sponding processes after a hard limit of 60 seconds.  For example, this
     can take effect when using traceroute(8) with blackholed or bad routes.

OpenBSD 4.7                      May 31, 2007                                1
