BGP FLowspec to Yang/Yaml ACL

Douglas Fischer fischerdouglas at
Tue Jun 16 18:46:33 UTC 2020

Just a complementary demonstration of a cenário we this "bgpfs2acl" been

Em ter., 16 de jun. de 2020 às 15:39, Douglas Fischer <
fischerdouglas at> escreveu:

> We were looking for some way to implement BGP Flowspec Filtering(just the
> permit/deny basic) using L3 switches  in an automated way.
> Searching a bit we found
> Is almost what we are looking for!
> But is focused on Cisco devices.
> We even considered fork it to our specific vendor.
> But before reinventing the wheel, I decide to ask to colleagues if anybody
> knows some tool that converts BGP Flowspec ACLs into YAML or even to YANG.
> If that exists, with Ansible/Netconf/RestConf(or some similar tool), it
> would be easy to delegate to Switchs doing the basic filtering that only
> More expensive Routers can do by now.
> P.S.: This Idea does not include(on the first moment) more
> complex features of Flowspec like Redirect ou Rate-Limt.
> Any suggestions or ideas?
> --
> Douglas Fernando Fischer
> Engº de Controle e Automação

Douglas Fernando Fischer
Engº de Controle e Automação
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the NANOG mailing list