HI Ondrej,
On Fri, Jun 22, 2018 at 03:17:55AM +0200, Ondrej Zajicek wrote:
> On Thu, Jun 21, 2018 at 08:23:37PM +0200, Tim Weippert wrote:
> > Hi List,
> >
> > i do some testing on Bird as FlowSpec Controller.
> > ...
> > With this approach i can successfully drop all flow4 entries on a
> > cisco ASR 1001-X. But how would i add several flow routes to the flow
> > table and deside differntly on the action?
> >
> > Is it possible to add the community directly to the route entry in the
> > static table, as it is possible in a ipv4 static channel/protocol?
>
> Hi
>
> You can attach filter expressions directly to static routes, e.g.:
>
> route 10.20.0.0/16 via 10.10.1.1 {
> ospf_metric_1 = 100;
> };
Yes, that is what i know.
> For flowspec routes it would look like:
>
> route flow4 {
> src 80.147.231.118/32;
> dst 185.55.234.2/32;
> } {
> # Rate Limit 0 == discard
> bgp_ext_community.add((generic, 0x80060000, 0x00000000));
> };
Ah ok, just another block with { }, that is one of the few things i
haven't tested. Thanks!
> We are working on a way to specify flow actions in more user-friendly manner.
That would be great but if it works it is ok :)
regards,
tim
--
Tim Weippert
http://weiti.org - we...@weiti.org
GPG Fingerprint - E704 7303 6FF0 8393 ADB1 398E 67F2 94AE 5995 7DD8
