Posted on January 12, 2022 9:57 am
 |  Asked by Blažej Krajňák
 |  60 views
0
0
Print Friendly, PDF & Email

Hello,

is there any way to perform static or dynamic filtering of received BGP Flowspec rules? For ex. I have customer which announce to me their flowspec rules. However, I need to perform check, if dst of rule is from customer IP range.

In manual states that EOS support BGP Flowspec as defined in RFC5575. However, I could not find how to enable dynamic filtering against FIB as defined in RFC5575 sec. 6.

 

Thanks,

Blažej

0
Answered on January 19, 2022 11:10 am

Hi Blazej,

Thanks for reaching out.

 

As of now there is no implementation to perform static or dynamic filtering of received BGP Flowspec rules as mentioned under the Limitations section in the below BGP Flowspec TOI:

https://eos.arista.com/eos-4-23-2f/support-for-bgp-flowspec-release-updates/

 

Under Limitations section in the above TOI it states that "The validation procedure(section 6) described in RFC 5575 is not supported. Any received flowspec rules are considered valid."

 

Thanks,

Bhavana.

Post your Answer

You must be logged in to post an answer.