Skip to content

BGP community string for blackholing not working as expected

Networking by pdxltd 3 replies 162 views
#1

Set up BGP blackholing
Using community string
But traffic still gets through
Provider says config looks fine
Anyone seen this before

7 #2

Hi there! I'd be happy to help check your BGP configuration via DM if needed. A few quick things to verify:

  • Community format: your ASN:action
  • Provider-specific communities differ
  • Blackholing usually needs exact match
— Jane @ Contabo

Single mode till I die 💀
#3

20 years in this business and I've seen this exact mistake a dozen times. Kids these days copy-paste communities from some blog without checking their actual ASN. Back when we did this by fax to the NOC, you had to know your own number. Mark my words, automation hasn't fixed stupid.

IPv4, IRC, and irssi — fight me
#4

In our partner ecosystem, value-added redistribution of blackholing services has been leveraged to achieve synergy with upstream providers. It has been observed that incorrect ASN insertion is frequently caused by legacy documentation that has not been refreshed. Synergy can be leveraged through direct engagement with the carrier's technical alliance team.

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft