Re: how about a well-known DOWNGRADE BGP Community? (Was: RTBH Support Across the Industry)
Saku Ytti via NANOG <[email protected]>
| Newsgroups | gmane.org.operators.nanog |
|---|---|
| Message-ID | <CAAeewD-WEfESh8DDqzmXBJUkFy_u_NKn+h4LEOzEfzHXHS1mgA@mail.gmail.com> |
On Wed, 5 Aug 2026 at 00:01, Lukas Tribus <[email protected]> wrote: > Take an ASR9000 for example. A basic implementation that sets a > ingress qos-group/cos/dscp/exp bit for the attacked /32 and has an > egress queue configurations which deprioritizes scavenger traffic can > do nothing in a DoS situation. I don't think this is true. You set 'priority level 1' for NC+AF, 'priority level 2' for BE, and leave LE unset on the ingress policy. This sets the fabric priority, and VoQ will honor it. -- ++ytti _______________________________________________ NANOG mailing list https://lists.nanog.org/archives/list/[email protected]/message/QPTFFDDAFIHSHIDYZ5ZYGKH4QRE4AC6H/