sunet-cdn/cdn-ops
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add import filters for bgp

Browse source
This commit is contained in:
Patrik Lundin 2024-10-28 13:26:13 +01:00
parent 7dc787cb68
commit 6a8671fa3e
Signed by: patlu
GPG key ID: A0A812BA2249F294
1 changed files with 19 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
global/overlay/etc/puppet/modules/cdn/templates/l4lb/bird.conf.erb
View file

@ -48,7 +48,10 @@ protocol bgp tug_r11_v4 {
hold time 90; hold time 90;
ipv4 { ipv4 {
import all; import filter {
if net ~ [ 0.0.0.0/0 ] then
accept; else reject;
};
export filter { export filter {
if net ~ [ 188.240.152.0/24{32,32} ] then if net ~ [ 188.240.152.0/24{32,32} ] then
accept; else reject; accept; else reject;
@ -63,7 +66,10 @@ protocol bgp tug_r11_v6 {
hold time 90; hold time 90;
ipv6 { ipv6 {
import all; import filter {
if net ~ [ ::/0 ] then
accept; else reject;
};
export filter { export filter {
if net ~ [ 2001:6b0:2100::/48{128,128} ] then if net ~ [ 2001:6b0:2100::/48{128,128} ] then
accept; else reject; accept; else reject;
@ -79,7 +85,10 @@ protocol bgp tug_r12_v4 {
hold time 90; hold time 90;
ipv4 { ipv4 {
import all; import filter {
if net ~ [ 0.0.0.0/0 ] then
accept; else reject;
};
export filter { export filter {
if net ~ [ 188.240.152.0/24{32,32} ] then if net ~ [ 188.240.152.0/24{32,32} ] then
accept; else reject; accept; else reject;
@ -94,10 +103,13 @@ protocol bgp tug_r12_v6 {
hold time 90; hold time 90;
ipv6 { ipv6 {
import all; import filter {
export filter { if net ~ [ ::/0 ] then
if net ~ [ 2001:6b0:2100::/48{128,128} ] then accept; else reject;
accept; else reject; };
export filter {
if net ~ [ 2001:6b0:2100::/48{128,128} ] then
accept; else reject;
}; };
}; };
} }