On Thu, Jun 21, 2018 at 08:23:37PM +0200, Tim Weippert wrote:
Hi List,
i do some testing on Bird as FlowSpec Controller. ... With this approach i can successfully drop all flow4 entries on a cisco ASR 1001-X. But how would i add several flow routes to the flow table and deside differntly on the action?
Is it possible to add the community directly to the route entry in the static table, as it is possible in a ipv4 static channel/protocol?
Hi You can attach filter expressions directly to static routes, e.g.: route 10.20.0.0/16 via 10.10.1.1 { ospf_metric_1 = 100; }; For flowspec routes it would look like: route flow4 { src 80.147.231.118/32; dst 185.55.234.2/32; } { # Rate Limit 0 == discard bgp_ext_community.add((generic, 0x80060000, 0x00000000)); }; We are working on a way to specify flow actions in more user-friendly manner. -- Elen sila lumenn' omentielvo Ondrej 'Santiago' Zajicek (email: santiago@crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."