BGP communities Filtering

[Noitcennok]

Does anyone know how to secure my /24 from layer 7 attacks? i already contacted my upstream he said:

Upstream said: you will have to add bgp community 940 to your advertisement in order for filtering to work properly.

e have a cross-connect link between ISP and my vyos

My vyos configuration JustPaste.it - Share Text & Images the Easy Way 3

[runar]

This is a duplicate with phabricator ticket ⚓ T1567 BGP communities Filtering , please don’t post duplicate posts

[Noitcennok]

@runar ok

Please help me out someone who know how to set BGP communities filtering?

[rob]

and dub from here:

Vyos Layer 7 attacks

sorry have no time yesterday. 1.1.8 are no longer supported. You should update your box. in latest vyos. the config are like here: https://vyos.readthedocs.io/en/latest/routing/bgp.html#route-filter you just have to add the community with: set policy route-map <name> rule 1 set community... your ISP have to say how the community string have to look like.

and here:

Customer BGP cliente on VyOS

@josueconti do you know how to secure my /24 from layer 7 attacks? i already contacted my upstream he said: you will have to add bgp community 940 to your advertisement in order for filtering to work properly.

please don’t spam.