Sure! r1, r2, and r3 are FRR clients. BGP relationships are successfully formed and BGP routes are exchanged, but no flowspec is seen on the clients. I am currently analyzing packet captures, but still haven’t completely understood where in the packet header the flowspec is/should be.

log syslog all;

router id 4.4.4.4;

protocol device {

    scan time 10;

}

flow4 table flowtab4;

protocol static flowspec4{

  flow4 {

      import all;

      export all;

  };

  route flow4 {

      dst 172.16.0.1/32;

  }{

      bgp_ext_community.add((generic, 0x80060000, 0x0));

  };

}

template bgp bgp_fs_temp {

    local as 4;

    ipv4 {

        import all;

        export all;

    };

    flow4 {

        table flowtab4;

        import none;

        export all;

    };

}

protocol bgp r1 from bgp_fs_temp {

    neighbor 172.16.4.2 as 1;

}

protocol bgp r2 from bgp_fs_temp {

    neighbor 172.16.4.6 as 2;

}

protocol bgp r3 from bgp_fs_temp {

    neighbor 172.16.4.10 as 3;

Thank you!

Noris

From: 彭勇 <ppyy@pubyun.com>
Sent: Thursday, August 26, 2021 11:17 PM
To: Noris Rogers <nrogers@mitre.org>
Cc: bird-users@network.cz
Subject: [EXT] Re: Troubleshooting BIRD as flowspec manager

can you share your config file to let us check?

On Wed, Aug 25, 2021 at 4:23 AM Noris Rogers <nrogers@mitre.org> wrote:

Hello,

I am seeking to setup BIRD as a flowspec manager to send messages to FRR acting as a flowspec client. However, upon successful configuration of BGP relationships and advertising BGP routes, FRR is not able to see any flowspec rules. Is there a way to check to make sure BIRD is actually sending the flowspec rules with the BGP advertisements?

Thanks!

Noris

--

彭勇 (Peng Yong)
江苏网擎信息技术有限公司
地址：常州市关河西路119号银苑大厦1406室
电话：+86.519.68887168
传真：+86.519.68887169
手机：+86.18915883399
邮箱：ppyy@pubyun.com