Page MenuHomeVyOS Platform

Feature Request: FRR Flowspec
Closed, DuplicatePublicFEATURE REQUEST

Description

Flowspec is the current method of signaling unwanted connectivity to a DDOS clearance center.

The FRR project has also a basic support for flowspec:
https://github.com/FRRouting/frr/blob/master/doc/user/flowspec.rst

It would be a huge benefit for VyOS if it would be able to receive flowspec information and allow the filtering for those.

There is also a nice presentation here:
https://docs.google.com/presentation/d/1ekQygUAG5yvQ3wWUyrw4Wcag0LgmbW1kV02IWcU4iUg/

Regards
Markus

Details

Difficulty level
Unknown (require assessment)
Version
-
Why the issue appeared?
Will be filled on close

Event Timeline

Already in 1.4

set protocols bgp address-family ipv4-flowspec

Will be adding the BGP op commands for it as well eventually...

@Cheeze_It There is a task for op-mode T4265
Task for controller T4266

@Viacheslav, hmmm, yeah that's a good point. I'll see what I can do to add the OP configs. I know I added the conf configs.

Thank you sir :)