As part of this PR, we got the CLI command:

set protocols bgp address-family ipv4-flowspec local-install

Which translates into this FRR config:

router bgp 65001
 address-family ipv4 flowspec
  local-install eth0
 exit-address-family
exit

This should use pbrd to install IP rules, iptables entries, and ipset entries. But:

• pbrd is not running in VyOS
• iptables compatibility exists, but it’s unclear how well it integrates with everything else
• ipset is completely missing

In practice, FlowSpec prefixes received from peers are inactive and not installed anywhere.

We need to make it work or remove from CLI.