oxidecomputer / oxidecomputer/maghemite
BGP: Add operator policy to define maximum prefix count and violation action
@taspelund is already working on this.
Since Apr 4, 2025.
- Dominant language
- Rust
- Stars
- 94
- Forks
- 6
- Avg merge
- 1d 8h
- Merged PRs (30d)
- 12
Description
A customer recently encountered a situation where their upstream BGP peers (controlled by a different administrative entity) increased the number of prefixes they were advertising to their Oxide system, which surpassed the number of routes supported by the Switch ASIC.
This brings about the question of how best to handle this situation (which is likely best addressed from multiple angles).
One approach would be to allow an operator to define upper limits on the amount of prefixes it is willing to receive (per AF).
One could imagine a scenario where this could be configured per-peer or globally, as well as offering different actions to be taken when the prefix limit is surpassed (e.g. resetting the BGP session, discarding routes received beyond the upper limit, alerting from the routing daemon, etc.).
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.