Implement a way to announce flowspec rules without hitting Adj-RIB-In
authorclaudio <claudio@openbsd.org>
Wed, 19 Apr 2023 13:23:33 +0000 (13:23 +0000)
committerclaudio <claudio@openbsd.org>
Wed, 19 Apr 2023 13:23:33 +0000 (13:23 +0000)
commitdd2a9ed2eb56190eca8c323c177ef4d3b11f60bd
tree02fef739ed597e0417e33abe5605716e186b8374
parent6bae335dd015f9e023db26fea05e06c52cf1d0d7
Implement a way to announce flowspec rules without hitting Adj-RIB-In
and Loc-RIB. Flowspec objects are collected in a single flowrib RIB
and then directly distributed into the various Adj-RIB-Outs.
For this to work add a bypass in the filter logic (flowspec AFI/SAFI
are currently accepted without any rule). The filter language lacks
a way to allow prefixes based on AFI/SAFI which is the minimum needed.
OK tb@
usr.sbin/bgpd/rde.c
usr.sbin/bgpd/rde.h
usr.sbin/bgpd/rde_filter.c
usr.sbin/bgpd/rde_peer.c
usr.sbin/bgpd/rde_rib.c