RE: [EXT] Re: Troubleshooting BIRD as flowspec manager

29 Aug 2021

      Sure! r1, r2, and r3 are FRR clients. BGP relationships are successfully formed and BGP routes are exchanged, but no flowspec is seen on the clients. I am currently analyzing packet captures, but still haven’t completely understood where in the packet header the flowspec is/should be.

log syslog all;

router id 4.4.4.4;

protocol device {
    scan time 10;
}

flow4 table flowtab4;

protocol static flowspec4{
  flow4 {
      import all;
      export all;
  };

  route flow4 {
      dst 172.16.0.1/32;
  }{
      bgp_ext_community.add((generic, 0x80060000, 0x0));
  };
}

template bgp bgp_fs_temp {
    local as 4;
    ipv4 {
        import all;
        export all;
    };
    flow4 {
        table flowtab4;
        import none;
        export all;
    };
}

protocol bgp r1 from bgp_fs_temp {
    neighbor 172.16.4.2 as 1;
}
protocol bgp r2 from bgp_fs_temp {
    neighbor 172.16.4.6 as 2;
}
protocol bgp r3 from bgp_fs_temp {
    neighbor 172.16.4.10 as 3;

Thank you!

Noris

From: 彭勇 <ppyy@pubyun.com>
Sent: Thursday, August 26, 2021 11:17 PM
To: Noris Rogers <nrogers@mitre.org>
Cc: bird-users@network.cz
Subject: [EXT] Re: Troubleshooting BIRD as flowspec manager

can you share your config file to let us check?

On Wed, Aug 25, 2021 at 4:23 AM Noris Rogers <nrogers@mitre.org<mailto:nrogers@mitre.org>> wrote:
Hello,

I am seeking to setup BIRD as a flowspec manager to send messages to FRR acting as a flowspec client. However, upon successful configuration of BGP relationships and advertising BGP routes, FRR is not able to see any flowspec rules. Is there a way to check to make sure BIRD is actually sending the flowspec rules with the BGP advertisements?

Thanks!
Noris

--
彭勇 (Peng Yong)
江苏网擎信息技术有限公司
地址：常州市关河西路119号银苑大厦1406室
电话：+86.519.68887168
传真：+86.519.68887169
手机：+86.18915883399
邮箱：ppyy@pubyun.com<mailto:ppyy@pubyun.com>