nanog mailing list archives

Re: how about a well-known DOWNGRADE BGP Community? (Was: RTBH Support Across the Industry)


From: Saku Ytti via NANOG <nanog () lists nanog org>
Date: Wed, 5 Aug 2026 09:22:48 +0300

On Wed, 5 Aug 2026 at 00:01, Lukas Tribus <lukas () ltri eu> wrote:

Take an ASR9000 for example. A basic implementation that sets a
ingress qos-group/cos/dscp/exp bit for the attacked /32 and has an
egress queue configurations which deprioritizes scavenger traffic can
do nothing in a DoS situation.

I don't think this is true.

You set 'priority level 1' for NC+AF, 'priority level 2' for BE, and
leave LE unset on the ingress policy.

This sets the fabric priority, and VoQ will honor it.

-- 
  ++ytti
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/QPTFFDDAFIHSHIDYZ5ZYGKH4QRE4AC6H/


Current thread: