BGP Flowspec VPNv4/VPNv6

Vincent Bernat bernat at luffy.cx
Fri Oct 25 18:18:54 CEST 2024


Hey!

I would be interested in implementing BGP Flowspec for VPNv4/VPNv6. 
Hacking flow4/flow6 to be VPNv4/VPNv6 instead of IPv4/IPv6 instead is 
easy, but I am unsure of the right way to *add* VPNv4/VPNv6. Should I 
add flowvpn4/flowvpn6 tables or reuse flow4/flow6 and only add 
"vpn4/vpn6 flow" channels to the BGP protocol?

The difference with the MPLS case is that there is no FIB for Flowspec, 
so the design could be simplified. But, maybe we prefer to follow the 
existing design and have distinct tables for VPN and non-VPN cases?

Thanks.


More information about the Bird-users mailing list