增加bird部署；

优化内存占用

deploy/bird/README.md

@@ -16,8 +16,8 @@ Server defaults in this repo:
 - `docker-compose.yml`: one-click local TCP test client.
 - `docker-compose.ssh.yml`: compose override for SSH transport.
 
-By default, the container prints periodic RPKI protocol snapshots to logs
-every 30 seconds.
+By default, the container uses event-driven observation and prints snapshots
+only when BIRD reports RPKI-related changes.
 
 ## Docker quick start
 
@@ -77,7 +77,10 @@ docker logs -f bird-rpki-client
 - `network_mode: host` expects your RTR server to be reachable at
   `host.docker.internal:323` from the container.
 - Observation is controlled by env vars:
-  `OBSERVE_INTERVAL` (seconds, default `30`) and `OBSERVE_PROTO`.
+  `OBSERVE_MODE` (`event` by default, `interval` as fallback),
+  `OBSERVE_DEBOUNCE_SECS` (default `1`),
+  `OBSERVE_INTERVAL` (seconds, used when `OBSERVE_MODE=interval`),
+  and `OBSERVE_PROTO`.
 - SSH mode mounts `../../certs` into `/config/ssh` and expects:
   `bird-rtr-client.pem` and `ssh_host_rsa_key.pub`.
 - Entrypoint auto-generates `/run/bird/known_hosts` from

deploy/bird/docker-compose.yml

@@ -15,6 +15,8 @@ services:
       RPKI_PORT: "323"
 
       OBSERVE_PROTO: "rpki_tcp"
+      OBSERVE_MODE: "event"
+      OBSERVE_DEBOUNCE_SECS: "1"
       OBSERVE_INTERVAL: "30"
 
       OBSERVE_ASPA_TABLE: "rtr_aspa"
@@ -29,4 +31,4 @@ services:
       SHOW_ROA4: "1"
       SHOW_ROA6: "1"
     volumes:
-      - ./bird.conf:/config/bird.conf:ro
+      - ./bird.conf:/config/bird.conf:ro

deploy/bird/entrypoint.sh

@@ -6,6 +6,8 @@ mkdir -p /run/bird
 SOCK_PATH="/run/bird/bird.ctl"
 PROTO="${OBSERVE_PROTO:-rpki_tcp}"
 INTERVAL="${OBSERVE_INTERVAL:-30}"
+MODE="${OBSERVE_MODE:-event}"
+DEBOUNCE_SECS="${OBSERVE_DEBOUNCE_SECS:-1}"
 RPKI_HOST="${RPKI_HOST:-host.docker.internal}"
 RPKI_PORT="${RPKI_PORT:-323}"
 
@@ -101,10 +103,37 @@ print_first_n_objects() {
   ' || true
 }
 
+print_snapshot() {
+  echo "==== $(date -u +"%Y-%m-%dT%H:%M:%SZ") RPKI snapshot ($PROTO) ===="
+  birdc -s "$SOCK_PATH" show protocols all "$PROTO" || true
+
+  if [ "$SHOW_ASPA" = "1" ]; then
+    echo "---- ASPA table ($ASPA_TABLE, first ${ASPA_COUNT} objects) ----"
+    print_first_n_objects "$ASPA_TABLE" "$ASPA_COUNT"
+  fi
+
+  if [ "$SHOW_ROA4" = "1" ]; then
+    echo "---- ROA4 table ($ROA4_TABLE, first ${ROA4_COUNT} objects) ----"
+    print_first_n_objects "$ROA4_TABLE" "$ROA4_COUNT"
+  fi
+
+  if [ "$SHOW_ROA6" = "1" ]; then
+    echo "---- ROA6 table ($ROA6_TABLE, first ${ROA6_COUNT} objects) ----"
+    print_first_n_objects "$ROA6_TABLE" "$ROA6_COUNT"
+  fi
+}
+
+is_rpki_related_event() {
+  line="$1"
+  echo "$line" | grep -Eiq "$PROTO|$ASPA_TABLE|$ROA4_TABLE|$ROA6_TABLE|rpki|rtr"
+}
+
 echo "[entrypoint] starting bird"
 echo "[entrypoint] config           : $BIRD_CONFIG_PATH"
 echo "[entrypoint] observe proto    : $PROTO"
-echo "[entrypoint] observe interval : $INTERVAL"
+echo "[entrypoint] observe mode     : $MODE"
+echo "[entrypoint] observe interval : $INTERVAL (used when mode=interval)"
+echo "[entrypoint] debounce secs    : $DEBOUNCE_SECS (used when mode=event)"
 echo "[entrypoint] target           : $RPKI_HOST:$RPKI_PORT"
 echo "[entrypoint] show aspa        : $SHOW_ASPA ($ASPA_TABLE, first $ASPA_COUNT objects)"
 echo "[entrypoint] show roa4        : $SHOW_ROA4 ($ROA4_TABLE, first $ROA4_COUNT objects)"
@@ -131,26 +160,41 @@ case "$INTERVAL" in
     ;;
 esac
 
-if [ "$INTERVAL" -gt 0 ]; then
+case "$MODE" in
+  event)
+    case "$DEBOUNCE_SECS" in
+      ''|*[!0-9]*)
+        DEBOUNCE_SECS=1
+        ;;
+    esac
+
+    echo "[entrypoint] waiting for BIRD monitor events and only printing on RPKI-related changes"
+    LAST_PRINT_TS=0
+
+    if birdc -s "$SOCK_PATH" monitor all 2>/dev/null | while IFS= read -r line; do
+      [ -n "$line" ] || continue
+      if ! is_rpki_related_event "$line"; then
+        continue
+      fi
+      now_ts="$(date +%s)"
+      if [ $((now_ts - LAST_PRINT_TS)) -lt "$DEBOUNCE_SECS" ]; then
+        continue
+      fi
+      LAST_PRINT_TS="$now_ts"
+      echo "[monitor] $line"
+      print_snapshot
+    done; then
+      :
+    else
+      echo "[entrypoint] WARNING: birdc monitor failed, fallback to interval polling"
+      MODE="interval"
+    fi
+    ;;
+esac
+
+if [ "$MODE" = "interval" ] && [ "$INTERVAL" -gt 0 ]; then
   while kill -0 "$BIRD_PID" 2>/dev/null; do
-    echo "==== $(date -u +"%Y-%m-%dT%H:%M:%SZ") RPKI snapshot ($PROTO) ===="
-    birdc -s "$SOCK_PATH" show protocols all "$PROTO" || true
-
-    if [ "$SHOW_ASPA" = "1" ]; then
-      echo "---- ASPA table ($ASPA_TABLE, first ${ASPA_COUNT} objects) ----"
-      print_first_n_objects "$ASPA_TABLE" "$ASPA_COUNT"
-    fi
-
-    if [ "$SHOW_ROA4" = "1" ]; then
-      echo "---- ROA4 table ($ROA4_TABLE, first ${ROA4_COUNT} objects) ----"
-      print_first_n_objects "$ROA4_TABLE" "$ROA4_COUNT"
-    fi
-
-    if [ "$SHOW_ROA6" = "1" ]; then
-      echo "---- ROA6 table ($ROA6_TABLE, first ${ROA6_COUNT} objects) ----"
-      print_first_n_objects "$ROA6_TABLE" "$ROA6_COUNT"
-    fi
-
+    print_snapshot
     sleep "$INTERVAL"
   done
 fi