antiddos.conf.j2 626 B

12345678910111213141516171819202122232425262728293031323334
  1. /*
  2. * Anti DDoS
  3. */
  4. protocol static antiddos_v4 {
  5. {% for prefix in dn42.antiddos.ipv4 %}
  6. route {{ prefix }} blackhole;
  7. {% endfor %}
  8. ipv4 {
  9. import filter {
  10. bgp_local_pref = 0;
  11. bgp_community.add((65535, 666));
  12. accept;
  13. };
  14. export none;
  15. };
  16. }
  17. protocol static antiddos_v6 {
  18. {% for prefix in dn42.antiddos.ipv6 %}
  19. route {{ prefix }} blackhole;
  20. {% endfor %}
  21. ipv6 {
  22. import filter {
  23. bgp_local_pref = 0;
  24. bgp_community.add((65535, 666));
  25. accept;
  26. };
  27. export none;
  28. };
  29. }