exabgp icon indicating copy to clipboard operation
exabgp copied to clipboard

Limit usage of IPv4 and IPv6 flow routes

Open thomas-mangin opened this issue 2 years ago • 0 comments

It is possible to create funny rules for flowspec with, for example, a source IP as IPv4 and a destination IP as IPv6.

It is obviously not going to match any packets and should surely be reported to the user when the rule is created.

Should the implementation at the other end not validate input correctly, it may even be able to cause mayhem.

The same can be said about attributes (accepting binary) or updates in general.

thomas-mangin avatar Nov 06 '23 17:11 thomas-mangin