RE: how about a well-known DOWNGRADE BGP Community? (Was: RTBH Support Across the Industry)

Michael Hare via NANOG <[email protected]>
Newsgroups gmane.org.operators.nanog
Message-ID <PH0PR06MB828539DDA54021EBD91275C1F9D42@PH0PR06MB8285.namprd06.prod.outlook.com>
+1.  Was going to follow up to Saku's message about how/if folks are doing that in JunOS [or other OS] natively without outside automation.   Our backbone has scavenger style plp in BE, I control admission via prefix-list in ingress fwfilter on untrusted interfaces.  Haven't personally tested but looks like DCU + forwarding-table export policy + output firewall filter, maybe this is possible today but requires output fwfilter to family mpls.  I don't currently have a fwfilter there so ideally another option exists.

-Michael

> -----Original Message-----
> From: jim deleskie via NANOG <[email protected]>
> Sent: Tuesday, August 4, 2026 9:00 AM
> To: North American Network Operators Group <[email protected]>
> Cc: jim deleskie <[email protected]>
> Subject: Re: how about a well-known DOWNGRADE BGP Community? (Was:
> RTBH Support Across the Industry)
> 
> I fully support this direction.
> 
> Job, anything I can do to assist, let me know please
> 
> -jim
> 
> On Tue, Aug 4, 2026 at 9:38 AM Job Snijders via NANOG
> <[email protected]>
> wrote:
> 
> > Dear all,
> >
> > Following up on the RTBH thread, we'd like to put forward an different
> > strategy for DoS attack mitigation. Perhaps just as an extra tool in the
> > toolbox.
> >
> >    Abstract --
> >    This document outlines a method to mitigate Denial of Service (DoS)
> >    attacks by using a well-known BGP community named "DOWNGRADE" as
> signal
> >    to neighboring networks to treat traffic destined towards "DOWNGRADE"
> >    tagged IP prefixes with low precedence. The "downgrade" strategy
> >    offers an appealing alternative to Remote Triggered Blackhole (RTBH)
> >    filtering, because RTBH filtering completes the DoS attack and hampers
> >    the defender's ability to monitor whether the attack is still ongoing.
> >
> > Read the full draft document here:
> >
> >
> > https://urldefense.com/v3/__https://datatracker.ietf.org/doc/html/draft-
> spaghetti-grow-downgrade-bgp-
> community__;!!Mak6IKo!I84uSQpoZr3Hgeb0DCb0OohZiOXtp1cZcaeVckp1CLt4n
> T_niCJvjcUFGnTGsreTP8yeCSencjX90coak9bz$
> >
> > Your feedback is most welcome!
> >
> > Kind regards,
> >
> > Job
> > _______________________________________________
> > NANOG mailing list
> >
> >
> https://urldefense.com/v3/__https://lists.nanog.org/archives/list/[email protected]
> anog.org/message/UGA3PTY45ILBQRASIJJVHAF3M57MQQ5I/__;!!Mak6IKo!I84u
> SQpoZr3Hgeb0DCb0OohZiOXtp1cZcaeVckp1CLt4nT_niCJvjcUFGnTGsreTP8yeCSe
> ncjX90TqgTZE0$
> >
> _______________________________________________
> NANOG mailing list
> https://urldefense.com/v3/__https://lists.nanog.org/archives/list/[email protected]
> anog.org/message/XQBBQVQTEKIECEDDE3TAE4BN2GQO5Q7Z/__;!!Mak6IKo!I8
> 4uSQpoZr3Hgeb0DCb0OohZiOXtp1cZcaeVckp1CLt4nT_niCJvjcUFGnTGsreTP8yeC
> SencjX90aGXE2jb$
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/[email protected]/message/6QPXWXFIU7X6ANK33C5GSXXELAOBWQ6I/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.