Routing
Showing results for 
Search instead for 
Do you mean 
Reply
Regular Visitor
Posts: 3
Registered: ‎02-16-2012
0 Kudos

Flowspec Actions supported?

Hi,

 

I was testing flowspec and I'm seeing an unknown community for flowspec remarking (community 0x8009).  The actions for rate, redirect seem to be fine, it's just remarkign that i'm having an issue with.

 

from RFC5575:

 

        +--------+--------------------+--------------------------+
        | type   | extended community | encoding                 |
        +--------+--------------------+--------------------------+
        | 0x8006 | traffic-rate       | 2-byte as#, 4-byte float |
        | 0x8007 | traffic-action     | bitmask                  |
        | 0x8008 | redirect           | 6-byte Route Target      |
        | 0x8009 | traffic-marking    | DSCP value               |
        +--------+--------------------+--------------------------+ 

 

8.0.0/24,7.0.0/24,proto=6,port=23/term:4 (1 entry, 1 announced)

TSI:

KRT in dfwd;

Action(s): accept,count

        *BGP    Preference: 170/-101

                Next hop type: Fictitious, Next hop index: 0

                Address: 0x16a5c20

                Next-hop reference count: 5

                State: <Active Ext>

                Local AS: 65123 Peer AS: 65001

                Age: 1:43 

                Validation State: unverified 

                Task: BGP_65001.10.0.0.41

                Announcement bits (1): 0-Flow

                AS path: 65001 I

                Communities: unknown type 8009 value 0:1a     <== route sent w remark community and decimal 26=af31

                Accepted

                Localpref: 100

                Router ID: 10.0.0.41

 

example rate limit (police) route:

 

192.168.0.1,10.0.0.1,proto=6,port=80/term:5 (1 entry, 1 announced)

TSI:

KRT in dfwd;

Action(s): rate-limit 9876kbps,count        <== bits per sec rate

        *BGP    Preference: 170/-101

                Next hop type: Fictitious, Next hop index: 0

                Address: 0x16a5c20

                Next-hop reference count: 5

                State: <Active Ext>

                Local AS: 65123 Peer AS: 65001

                Age: 1:43               

                Validation State: unverified 

                Task: BGP_65001.10.0.0.41

                Announcement bits (1): 0-Flow 

                AS path: 65001 I

                Communities: traffic-rate:0:1234567  <= bytes/sec

                Accepted

                Localpref: 100

                Router ID: 10.0.0.41

 

Highlighted
Distinguished Expert
Posts: 573
Registered: ‎08-23-2015
0 Kudos

Re: Flowspec Actions supported?

Hello,

 

Can you share your relevent configuration for flowspec?

 

Regards,

 

Rushi

Regular Visitor
Posts: 3
Registered: ‎02-16-2012
0 Kudos

Re: Flowspec Actions supported?

I heard back from our SE that remarking isn't currently supported, so we'll have to use something like DCU if we want to accomplish that last bit.