Again on communities...

[Simone Morandini]

Hi guys,

one question (again) on communities: consider the following filtering 
function, applied on pipe protocols (no filtering on bgp protocol):

function bgp_out(int peeras)
{
        if !(source = RTS_BGP) then return false;
        if (0,     peeras) ~ bgp_community  then return false;
        if (65004, peeras) ~ bgp_community  then return true;
        if (0,     65004)  ~ bgp_community  then return false;
        return true;
}

If a given peer wants to peer only with two specific ASNs, he will then 
send these communities: (65004,ASN1) (65004,ASN2) to the route server.
Is it correct to say that such a filter simply doesn't work for this 
purpose? That is, routes are however announced to all the participants?
Should it be modify to be somehow like this:

function bgp_out(int peeras)
{
        if !(source = RTS_BGP) then return false;
   
        if (community attribute is non-empty)
          { 
              apply some filter logic; 
              return false;
          }
        else return true;
}

Thanks,
Simone.

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.