bcp/routing-bcp
1
0
Fork 0
mirror of https://github.com/denog/routing-bcp.git synced 2024-05-11 05:54:58 +00:00
Code Releases Activity

ANX / tvberlin filters added

Browse Source
This commit is contained in:
Theo Voss
2019-05-20 17:12:12 +00:00
parent 1012c3a3c8
commit 11f2d70564
5 changed files with 154 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
personal-filters/tvberlin/.filter-peering-import.txt.swp
BIN
View File
Binary file not shown.
personal-filters/tvberlin/README.md
+4
View File
@@ -0,0 +1,4 @@
# ANX BGP Edge Filters
Excerpt from the filters used for AS47147 - please re-use whatever you like.
Please contact me if you have any questions or comments, thanks.
personal-filters/tvberlin/filter-peering-export.txt
+40
View File
@@ -0,0 +1,40 @@
# first filter stage - ix level
term FILTER-PREFIX-LENGTH {
from {
route-filter 0.0.0.0/0 prefix-length-range /0-/7;
route-filter 0.0.0.0/0 prefix-length-range /25-/32;
}
then reject;
}
term REJECT-BOGON-ASNS {
from as-path-group BOGON-ASNS;
then reject;
}
term REJECT-BOGON-PREFIXES {
from {
prefix-list-filter 4-BOGON-PREFIXES orlonger;
}
then reject;
}
term REJECT-IXP-PREFIXES {
from {
prefix-list-filter 4-IXP-PREFIXES orlonger;
}
then reject;
}
term REJECT-TOO-MANY-HOPS {
from as-path AS-PATH-HOP-LIMIT;
then reject;
}
# second filter stage - peer level
term NO-EXPORT {
from community NO_EXPORT;
then reject;
}
term NO-ADVERTISE {
from community NO_ADVERTISE;
then reject;
}
personal-filters/tvberlin/filter-peering-import.txt
+72
View File
@@ -0,0 +1,72 @@
# first filter stage - ix level
term FILTER-PREFIX-LENGTH {
from {
route-filter 0.0.0.0/0 prefix-length-range /0-/7;
route-filter 0.0.0.0/0 prefix-length-range /25-/32;
}
then reject;
}
term REJECT-ANX-PREFIXES {
from {
prefix-list-filter 4-AS47147 orlonger;
}
then reject;
}
term REJECT-BOGON-ASNS {
from as-path-group BOGON-ASNS;
then reject;
}
term REJECT-BOGON-PREFIXES {
from {
prefix-list-filter 4-BOGON-PREFIXES orlonger;
}
then reject;
}
term REJECT-IXP-PREFIXES {
from {
prefix-list-filter 4-IXP-PREFIXES orlonger;
}
then reject;
}
term REJECT-TOO-MANY-HOPS {
from as-path AS-PATH-HOP-LIMIT;
then reject;
}
}
term RPKI-VALIDATION-VALID {
from validation-database valid;
then {
validation-state valid;
community add ANX_ORIGIN_RPKI_VALID;
}
}
term RPKI-VALIDATION-INVALID {
from validation-database invalid;
then {
validation-state invalid;
community add ANX_ORIGIN_RPKI_INVALID;
}
}
term RPKI-VALIDATION-UNKNOWN {
from validation-database unknown;
then {
validation-state unknown;
community add ANX_ORIGIN_RPKI_UNKNOWN;
}
}
# second stage - peer level
term RPKI_REJECT_INVALID {
from community ANX_ORIGIN_RPKI_INVALID;
then reject;
}
term PEERING {
from {
prefix-list-filter 4-AS-PEER orlonger;
}
then {
accept;
}
}
personal-filters/tvberlin/referenced-objects.txt
+38
View File
@@ -0,0 +1,38 @@
# referenced objects used in import/export terms
set policy-options as-path AS-PATH-HOP-LIMIT ".{30,}"
set policy-options as-path-group BOGON-ASNS as-path RFC7607-ZERO ".* 0 .*"
set policy-options as-path-group BOGON-ASNS as-path RFC4893-AS-TRANS ".* 23456 .*"
set policy-options as-path-group BOGON-ASNS as-path RFC5398-EXAMPLES1 ".* [64496-64511] .*"
set policy-options as-path-group BOGON-ASNS as-path RFC5398-EXAMPLES2 ".* [65536-65551] .*"
set policy-options as-path-group BOGON-ASNS as-path RFC6996-PRIVATE1 ".* [64512-65499] .*"
set policy-options as-path-group BOGON-ASNS as-path RFC6996-PRIVATE2 ".* [65501-65534] .*"
set policy-options as-path-group BOGON-ASNS as-path RFC6996-PRIVATE3 ".* [4200000000-4294967294] .*"
set policy-options as-path-group BOGON-ASNS as-path RFC6996-LAST16 ".* 65535 .*"
set policy-options as-path-group BOGON-ASNS as-path RFC6996-LAST32 ".* 4294967295 .*"
set policy-options as-path-group BOGON-ASNS as-path IANA-RESERVED ".* [65552-131071] .*"
set policy-options prefix-list 4-BOGON-PREFIXES 0.0.0.0/8
set policy-options prefix-list 4-BOGON-PREFIXES 10.0.0.0/8
set policy-options prefix-list 4-BOGON-PREFIXES 100.64.0.0/10
set policy-options prefix-list 4-BOGON-PREFIXES 127.0.0.0/8
set policy-options prefix-list 4-BOGON-PREFIXES 169.254.0.0/16
set policy-options prefix-list 4-BOGON-PREFIXES 172.16.0.0/12
set policy-options prefix-list 4-BOGON-PREFIXES 192.0.2.0/24
set policy-options prefix-list 4-BOGON-PREFIXES 192.168.0.0/16
set policy-options prefix-list 4-BOGON-PREFIXES 198.18.0.0/15
set policy-options prefix-list 4-BOGON-PREFIXES 198.51.100.0/24
set policy-options prefix-list 4-BOGON-PREFIXES 203.0.113.0/24
set policy-options prefix-list 4-BOGON-PREFIXES 224.0.0.0/4
set policy-options prefix-list 4-BOGON-PREFIXES 240.0.0.0/4
# ix network where connected to
set policy-options prefix-list 4-IXP-PREFIXES 80.81.192.0/21
set policy-options prefix-list 4-IXP-PREFIXES 80.81.202.0/24
set policy-options prefix-list 4-IXP-PREFIXES 80.81.203.0/24
set policy-options prefix-list 4-IXP-PREFIXES 80.249.208.0/21
set policy-options prefix-list 4-IXP-PREFIXES 91.206.52.0/23
set policy-options prefix-list 4-IXP-PREFIXES 185.1.58.0/24
set policy-options prefix-list 4-IXP-PREFIXES 185.1.74.0/26
set policy-options prefix-list 4-IXP-PREFIXES 193.203.0.0/23