summaryrefslogtreecommitdiff
path: root/NEWS
diff options
context:
space:
mode:
authorOndrej Zajicek (work) <santiago@crfreenet.org>2021-12-20 20:25:35 +0100
committerOndrej Zajicek (work) <santiago@crfreenet.org>2022-02-06 23:27:13 +0100
commit1f2eb2aca8e348fefc1822ec2adcad0cc97768d8 (patch)
tree11494fc2f2dbc8b7aeb2a4a172fec6d2263af4ab /NEWS
parent1ae42e522374ae60c23fe4c419c62b2209fbeea8 (diff)
BGP: Implement flowspec validation procedure
Implement flowspec validation procedure as described in RFC 8955 sec. 6 and RFC 9117. The Validation procedure enforces that only routers in the forwarding path for a network can originate flowspec rules for that network. The patch adds new mechanism for tracking inter-table dependencies, which is necessary as the flowspec validation depends on IP routes, and flowspec rules must be revalidated when best IP routes change. The validation procedure is disabled by default and requires that relevant IP table uses trie, as it uses interval queries for subnets.
Diffstat (limited to 'NEWS')
0 files changed, 0 insertions, 0 deletions