Comments (4)
snar
commented on July 20, 2024
1
On Thu, Sep 07, 2017 at 01:31:41AM +0000, andersonlich wrote:
this could be solve, if bgpq3 support for ouput route-filter-list.
• route-filter-list test {
• 100.64.0.0/10 upto /24;
• }
Support for route-filter-lists (new flag -z) implemented and pushed
to github. Thanks, missed this brand new (JunOS 16.2) feature.
from bgpq3.
snar
commented on July 20, 2024
On Thu, Jul 27, 2017 at 01:56:38PM +0000, Sebastian Wiesinger wrote:
Currently it is not possible to aggregate prefixes when prefix-lists are used:
***@***.***:~ $ bgpq3 -J3Al as-example AS-EXAMPLE
FATAL ERROR:Sorry, aggregation (-A) does not work in Juniper prefix-lists
You can try route-filters (-E) instead of prefix-lists (-P, default)
[Exit 255]
It will never be possible using aggregation with Juniper prefix-lists.
Reason is simple: aggregation means an attempt to transform initial set
of prefixes (simple prefix-list) to an equal set of rules, where:
a) all prefixes in initial set are allowed by resulting set of rules
b) no prefixes not included in initial set are NOT allowed by resulting set.
And, as there are no 'rules' in prefix-lists (each line is an exact match
for a single prefix), there is no way to transform prefix-list (unless
changing output to route-filters which are more flexible).
This would be an useful option to have when prefix-lists are used (as in our
case) with prefix-list-filter like this:
[edit policy-options policy-statement bgp-example-filter term default]
set from prefix-list-filter as-example orlonger
set then accept
You shall not use such configuration for routing polilcies, as it will
allow unregistered routes enter DFZ (any more-specific is permitted here) :(
Worse yet, imagine your peer registers 0.0.0.0/0 for his AS making this
term being equivalent to 'permit any'.
This will accept the prefixes in the prefix-list or longer prefixes. Using -A
in that case would make the prefix-list much smaller.
'permit any' or no prefix-list filtering at all is indeed smaller than
most prefix-filters :)
from bgpq3.
sebastianw
commented on July 20, 2024
Hmm I see what you mean. It might be a bit different in my case, for example we have a customer that has route-objects for his IP-Space which entails one /20 for all his space and some /24s for more specific allocations. Our route-filter (for most customers) says: allow the /20 and longer prefixes. We filter everything </24 beforehand. So the customer can announce everything in his space as long as it is >=/24. Then we only want the "umbrella" /20. But I can see why this might be difficult/misunderstood for automatic filter generation.
As for registering 0.0.0.0/0, isn't that a general problem of RADB as there are not really checks to see if someone is allowed to register address space? We don't have that problem with RIPE NCC address space as the database checks who is allowed to register route objects.
All in all feel free to close this, I can live with the way it is now.
from bgpq3.
andersonlich
commented on July 20, 2024
this could be solve, if bgpq3 support for ouput route-filter-list.
route-filter-list test {
100.64.0.0/10 upto /24;
}
from bgpq3.
Related Issues (20)
- FATAL ERROR:EOF from RADB (dequeue, ripe) Exit Code 255 HOT 2
- Clarify Nokia (classic CLI) options HOT 2
- Feature Request: Do not print anything if 0 objects received HOT 4
- bgpq3 exit code is 255, stderr: b'FATAL ERROR:select timeout\n' HOT 2
- Limitations of bgpq3 -S HOT 1
- filter route and AS (possible feature request) HOT 2
- Rationale behind the recommended sources HOT 1
- Cisco IOS XR format lacks one space in indentation HOT 1
- Sequence numbers not respected with empty result HOT 1
- Subnet length wrong HOT 3
- Uncorrected as-patch filter for Huawei HOT 1
- Possibility of tagging a new release HOT 1
- Add BGPQ3 to Arista EOS HOT 5
- Allow generation of combined IPv4/IPv6 lists HOT 3
- About the operation when multiple database sources are specified by'-S flag'
- BSD-3 files
- Invalid symbol in ASN errors HOT 1
- Certain prefixes that show up in the RIPE GUI don't get outputted by BGPq3 when the ASSet is queried HOT 8
- missing some prefixes HOT 11
- Install on ASR9K
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from bgpq3.