Cannot block flows with BGP FlowSpec

Giorgos Dimopoulos giorgos at talaia.io
Tue Feb 20 13:28:23 CET 2018


Understood, thank you for clarifying this!

Giorgos

On 20/02/18 12:45, Jan Maria Matejka wrote:
> Hello!
>
> On 02/20/2018 12:08 PM, Giorgos Dimopoulos wrote:
>> I'm using ExaBGP to send FlowSpec rules to BIRD. BIRD correctly lists the received rules when running 'show route table flowtab4' but the respective flows are not affected (i.e. drop traffic to a destination prefix).
>>
>> Is this because of a configuration issue on my side or BIRD does not implement the required FlowSpec actions?
> BIRD doesn't implement this feature. We support only resending
> the flowspec rules in Route Reflector mode and also injecting
> them via the static pseudoprotocol.
>
> Insertion of the rules into kernel is not implemented. It is
> a feature on our nice-to-have list but we aren't working on it.
>
> Maria



More information about the Bird-users mailing list