HI Ondrej, On Fri, Jun 22, 2018 at 03:17:55AM +0200, Ondrej Zajicek wrote:
On Thu, Jun 21, 2018 at 08:23:37PM +0200, Tim Weippert wrote:
Hi List,
i do some testing on Bird as FlowSpec Controller. ... With this approach i can successfully drop all flow4 entries on a cisco ASR 1001-X. But how would i add several flow routes to the flow table and deside differntly on the action?
Is it possible to add the community directly to the route entry in the static table, as it is possible in a ipv4 static channel/protocol?
Hi
You can attach filter expressions directly to static routes, e.g.:
route 10.20.0.0/16 via 10.10.1.1 { ospf_metric_1 = 100; };
Yes, that is what i know.
For flowspec routes it would look like:
route flow4 { src 80.147.231.118/32; dst 185.55.234.2/32; } { # Rate Limit 0 == discard bgp_ext_community.add((generic, 0x80060000, 0x00000000)); };
Ah ok, just another block with { }, that is one of the few things i haven't tested. Thanks!
We are working on a way to specify flow actions in more user-friendly manner.
That would be great but if it works it is ok :) regards, tim -- Tim Weippert http://weiti.org - weiti@weiti.org GPG Fingerprint - E704 7303 6FF0 8393 ADB1 398E 67F2 94AE 5995 7DD8