nanog mailing list archives
RE: how about a well-known DOWNGRADE BGP Community? (Was: RTBH Support Across the Industry)
From: Michael Hare via NANOG <nanog () lists nanog org>
Date: Tue, 4 Aug 2026 15:20:04 +0000
+1. Was going to follow up to Saku's message about how/if folks are doing that in JunOS [or other OS] natively without outside automation. Our backbone has scavenger style plp in BE, I control admission via prefix-list in ingress fwfilter on untrusted interfaces. Haven't personally tested but looks like DCU + forwarding-table export policy + output firewall filter, maybe this is possible today but requires output fwfilter to family mpls. I don't currently have a fwfilter there so ideally another option exists. -Michael
-----Original Message----- From: jim deleskie via NANOG <nanog () lists nanog org> Sent: Tuesday, August 4, 2026 9:00 AM To: North American Network Operators Group <nanog () lists nanog org> Cc: jim deleskie <deleskie () gmail com> Subject: Re: how about a well-known DOWNGRADE BGP Community? (Was: RTBH Support Across the Industry) I fully support this direction. Job, anything I can do to assist, let me know please -jim On Tue, Aug 4, 2026 at 9:38 AM Job Snijders via NANOG <nanog () lists nanog org> wrote:Dear all, Following up on the RTBH thread, we'd like to put forward an different strategy for DoS attack mitigation. Perhaps just as an extra tool in the toolbox. Abstract -- This document outlines a method to mitigate Denial of Service (DoS) attacks by using a well-known BGP community named "DOWNGRADE" assignalto neighboring networks to treat traffic destined towards "DOWNGRADE" tagged IP prefixes with low precedence. The "downgrade" strategy offers an appealing alternative to Remote Triggered Blackhole (RTBH) filtering, because RTBH filtering completes the DoS attack and hampers the defender's ability to monitor whether the attack is still ongoing. Read the full draft document here: https://urldefense.com/v3/__https://datatracker.ietf.org/doc/html/draft-spaghetti-grow-downgrade-bgp- community__;!!Mak6IKo!I84uSQpoZr3Hgeb0DCb0OohZiOXtp1cZcaeVckp1CLt4n T_niCJvjcUFGnTGsreTP8yeCSencjX90coak9bz$Your feedback is most welcome! Kind regards, Job _______________________________________________ NANOG mailing listhttps://urldefense.com/v3/__https://lists.nanog.org/archives/list/nanog@lists.n anog.org/message/UGA3PTY45ILBQRASIJJVHAF3M57MQQ5I/__;!!Mak6IKo!I84u SQpoZr3Hgeb0DCb0OohZiOXtp1cZcaeVckp1CLt4nT_niCJvjcUFGnTGsreTP8yeCSe ncjX90TqgTZE0$_______________________________________________ NANOG mailing list https://urldefense.com/v3/__https://lists.nanog.org/archives/list/nanog@lists.n anog.org/message/XQBBQVQTEKIECEDDE3TAE4BN2GQO5Q7Z/__;!!Mak6IKo!I8 4uSQpoZr3Hgeb0DCb0OohZiOXtp1cZcaeVckp1CLt4nT_niCJvjcUFGnTGsreTP8yeC SencjX90aGXE2jb$
_______________________________________________ NANOG mailing list https://lists.nanog.org/archives/list/nanog () lists nanog org/message/6QPXWXFIU7X6ANK33C5GSXXELAOBWQ6I/
Current thread:
- how about a well-known DOWNGRADE BGP Community? (Was: RTBH Support Across the Industry) Job Snijders via NANOG (Aug 04)
- Re: how about a well-known DOWNGRADE BGP Community? (Was: RTBH Support Across the Industry) jim deleskie via NANOG (Aug 04)
- RE: how about a well-known DOWNGRADE BGP Community? (Was: RTBH Support Across the Industry) Michael Hare via NANOG (Aug 04)
- Re: how about a well-known DOWNGRADE BGP Community? (Was: RTBH Support Across the Industry) Saku Ytti via NANOG (Aug 04)
- RE: how about a well-known DOWNGRADE BGP Community? (Was: RTBH Support Across the Industry) Michael Hare via NANOG (Aug 04)
- Re: how about a well-known DOWNGRADE BGP Community? (Was: RTBH Support Across the Industry) Saku Ytti via NANOG (Aug 04)
- RE: how about a well-known DOWNGRADE BGP Community? (Was: RTBH Support Across the Industry) Michael Hare via NANOG (Aug 04)
- Re: how about a well-known DOWNGRADE BGP Community? (Was: RTBH Support Across the Industry) jim deleskie via NANOG (Aug 04)
- Re: how about a well-known DOWNGRADE BGP Community? (Was: RTBH Support Across the Industry) Saku Ytti via NANOG (Aug 04)
- Re: how about a well-known DOWNGRADE BGP Community? (Was: RTBH Support Across the Industry) Saku Ytti via NANOG (Aug 04)
- Re: how about a well-known DOWNGRADE BGP Community? (Was: RTBH Support Across the Industry) Lukas Tribus via NANOG (Aug 05)
- Re: how about a well-known DOWNGRADE BGP Community? (Was: RTBH Support Across the Industry) Saku Ytti via NANOG (Aug 05)
