Revised Validation Procedure for BGP Flow Specifications
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 12
- Abstract
- This document describes a modification to the validation procedure defined for the dissemination of BGP Flow Specifications. The dissemination of BGP Flow Specifications as specified in RFC 8955 requires that the originator of the Flow Specification match the originator of the best-match unicast route for the destination prefix embedded in the Flow Specification. For an Internal Border Gateway Protocol (iBGP) received route, the originator is typically a border router within the same autonomous system (AS). The objective is to allow only BGP speakers within the data forwarding path to originate BGP Flow Specifications. Sometimes it is desirable to originate the BGP Flow Specification from any place within the autonomous system itself, for example, from a centralized BGP route controller. However, the validation procedure described in RFC 8955 will fail in this scenario. The modification proposed herein relaxes the validation rule to enable Flow Specifications to be originated within the same autonomous system as the BGP speaker performing the validation. Additionally, this document revises the AS_PATH validation rules so Flow Specifications received from an External Border Gateway Protocol (eBGP) peer can be validated when such a peer is a BGP route server. This document updates the validation procedure in RFC 8955.
- Publication Date
- 2021-08-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC9117- Link
- https://doi.org/10.17487/RFC9117
- Author(s)
- Jim UttaroJuan AlcaideClarence FilsfilsDavid SmithProdosh Mohapatra
- Keyword(s)
- Flowspec
Latest version of IETF RFC 9117
Document Versions — IETF RFC 9117
-
▶ IETF RFC 9117 (2021-08-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 2119 [Active*]
- IETF RFC 4271 [Active*]
- IETF RFC 4760 [Active*]
- IETF RFC 5065 [Active*]
- RFC7947 — RFC7947 EXTERNAL
- IETF RFC 8174 [Active*]
- IETF RFC 8955 [Active*]
Bibliographic Reference(s)
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC9117.json
Amends:
IETF RFC 8955 [Active*]
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 9117, Revised Validation Procedure for BGP Flow Specifications. Available at https://doi.org/10.17487/RFC9117
Snippet:
IETF RFC 9117, Revised Validation Procedure for BGP Flow Specifications. Available at https://doi.org/10.17487/RFC9117
HTML (ISO 690 compliant)
Preview:
IETF RFC 9117, Revised Validation Procedure for BGP Flow Specifications. Available at https://doi.org/10.17487/RFC9117
Snippet:
<span class="citation"><cite>IETF RFC 9117</cite>, Revised Validation Procedure for BGP Flow Specifications. Available at <a href="https://doi.org/10.17487/RFC9117" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9117</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 9117, Revised Validation Procedure for BGP Flow Specifications
doi: 10.17487/RFC9117
url: https://doi.org/10.17487/RFC9117
doi: 10.17487/RFC9117
url: https://doi.org/10.17487/RFC9117
Snippet:
<li> <cite id="bib-rfc9117">IETF RFC 9117</cite>, Revised Validation Procedure for BGP Flow Specifications <span class="doi">10.17487/RFC9117</span> </li>