[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bird-users
Subject:    BGP session closed after receipt of flowspec route without destination prefix
From:       "Alex D." <listensammler () gmx ! de>
Date:       2020-01-24 20:33:17
Message-ID: 5E2B548D.2050100 () gmx ! de
[Download RAW message or body]

Hi,

i configured the following flowspec route on a Juniper router:
route v6test {
     match {
         source 2a02:xxxx:xxxx:xxxx::1/128;
     }
     then discard;
}

The route was accepted on my Juniper router and blocked all traffic from
src ip 2a02:xxxx:xxxx:xxxx::1 as expected. After advertising the route,
BIRD closed the BGP session. Is this an expected behaviour, means does
is it necessary, that a dst prefix for a flowspec route must exist ?

Log:
2020-01-24 09:52:26.750 <RMT> vs_dis_r1_6838: No dst prefix at first pos
2020-01-24 09:52:26.750 <RMT> vs_dis_r1_6838: Error: Malformed attribute
list
2020-01-24 09:52:26.750 <TRACE> vs_dis_r1_6838: BGP session closed

BIRD accepted the route after changing to:
route v6test {
     match {
         destination ::/0;
         source 2a02:xxxx:xxxx:xxxx::1/128;
     }
     then discard;
}

Regards,
Alex

[Attachment #3 (text/html)]

<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=ISO-8859-15">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Hi,<br>
    <br>
    i configured the following flowspec route on a Juniper router:<br>
    <meta http-equiv="Content-Type" content="text/html;
      charset=ISO-8859-15">
    <meta name="ProgId" content="PowerPoint.Slide">
    <meta name="Generator" content="Microsoft PowerPoint 14">
    route v6test {<br>
        match {<br>
            source 2a02:xxxx:xxxx:xxxx::1/128;<br>
        }<br>
        then discard;<br>
    }<br>
    <br>
    The route was accepted on my Juniper router and blocked all traffic
    from src ip 2a02:xxxx:xxxx:xxxx::1 as expected. After advertising
    the route, BIRD closed the BGP session. Is this an expected
    behaviour, means does is it necessary, that a dst prefix for a
    flowspec route must exist ?<br>
    <br>
    Log:<br>
    2020-01-24 09:52:26.750 &lt;RMT&gt; vs_dis_r1_6838: No dst prefix at
    first pos<br>
    2020-01-24 09:52:26.750 &lt;RMT&gt; vs_dis_r1_6838: Error: Malformed
    attribute list<br>
    2020-01-24 09:52:26.750 &lt;TRACE&gt; vs_dis_r1_6838: BGP session
    closed<br>
    <br>
    BIRD accepted the route after changing to:<br>
    <meta http-equiv="Content-Type" content="text/html;
      charset=ISO-8859-15">
    <meta name="ProgId" content="PowerPoint.Slide">
    <meta name="Generator" content="Microsoft PowerPoint 14">
    route v6test {<br>
        match {<br>
            destination ::/0;<br>
            source 2a02:xxxx:xxxx:xxxx::1/128;<br>
        }<br>
        then discard;<br>
    }<br>
    <br>
    Regards,<br>
    Alex<br>
  </body>
</html>


[prev in list] [next in list] [prev in thread] [next in thread]

Configure | About | News | Add a list | Sponsored by KoreLogic