Hi,
having been through some quite bothersome problems in the past year
regarding the spread of ext-communities, I think we should increase the
urgency regarding this draft.
Current text:
--
* Scrub the BGP Extended Communities at the inbound direction which
are intendend for L3VPN purposes. That concerns the Extended
communities where the sub-type value has been set to 0x02 (Route
Target).
* Allow the rest of the BGP Extended Communities to transit
transparently through the Route Servers.
--
I think the recommendation instead should be to blanket drop all ext-comms
between operators unless they're specifically agreed on being used.
ext-comms nowadays are used for encapsulation types, mac-addresses and
lots of other uses. They only seem to get increased use, and the safest
way is to migrate traffic steering communities to classic and large, and
default drop all ext-comms completely on inter-operator BGP sessions.
Some vendors already do some filtering, some don't. I sent an email with
the, at the time, rather cryptic "780:*:*" in the subject. This turned out
to be kind of a vendor specific way to talk about it, and it's refined
later in the thread.
https://mailarchive.ietf.org/arch/msg/idr/THyP5F4obZtfb7CKxImMX1qcIok/
Currently I'm now dropping this (vendor specific config):
set policy-options community ALL-EXTENDED members origin:*:*
set policy-options community ALL-EXTENDED members target:*:*
set policy-options community ALL-EXTENDED members rt-import:*:*
set policy-options community ALL-EXTENDED members src-as:*:*
set policy-options community ALL-EXTENDED members bandwidth:*:*
set policy-options community ALL-EXTENDED members domain-id:*:*
set policy-options community ALL-EXTENDED members encapsulation:*:*
set policy-options community ALL-EXTENDED members color:*:*
set policy-options community ALL-EXTENDED members transport-target:*:*
It gets rid of everything "important" I've seen in the wild with my
limited footprint/exposure.
--
Mikael Abrahamsson email: [email protected]
_______________________________________________
GROW mailing list -- [email protected]
To unsubscribe send an email to [email protected]
