From 43aed88e798710b840d5759653d1546ab42c5d04 Mon Sep 17 00:00:00 2001 From: admin Date: Fri, 3 Mar 2023 15:26:41 +0000 Subject: [PATCH] update irr-filter & import limit --- .drone.yml | 4 ++-- protocol/external_network.conf | 2 ++ util/irr-filter.conf | 4 ++-- 3 files changed, 6 insertions(+), 4 deletions(-) diff --git a/.drone.yml b/.drone.yml index 4aa0fb4..ed30ffc 100644 --- a/.drone.yml +++ b/.drone.yml @@ -40,8 +40,8 @@ steps: image: debian:latest commands: - apt-get update -y && apt-get install bgpq4 git -y - - echo "define $(bgpq4 -tbl DOWNSTREAM_ASN AS-NET186)" > util/irr-filter.conf - - echo "define $(bgpq4 -6bl DOWNSTREAM_PREFIXES AS-NET186)" >> util/irr-filter.conf + - echo "define $(bgpq4 -tbl DOWNSTREAM_ASN AS-NET186 -S RIPE,ARIN,APNIC,AFRINIC,LACNIC -L 3)" > util/irr-filter.conf + - echo "define $(bgpq4 -6bl DOWNSTREAM_PREFIXES AS-NET186 -S RIPE,ARIN,APNIC,AFRINIC,LACNIC,RPKI -A -R48)" >> util/irr-filter.conf - echo "net.186526.xyz" >> CNAME - git rm -f ansible - name: push to repo diff --git a/protocol/external_network.conf b/protocol/external_network.conf index bf084fb..d507532 100644 --- a/protocol/external_network.conf +++ b/protocol/external_network.conf @@ -22,5 +22,7 @@ template bgp pub_downstream { ipv6 { import where downstream_import_filter(6939); export where downstream_export_filter(6939); + + import limit 50; }; } diff --git a/util/irr-filter.conf b/util/irr-filter.conf index 0284184..e918ff7 100644 --- a/util/irr-filter.conf +++ b/util/irr-filter.conf @@ -1,8 +1,8 @@ # Example: # define DOWNSTREAM_ASN = [ 200536 ]; # use bgpq4 generate this file: -# echo "define $(bgpq4 -tbl DOWNSTREAM_ASN AS-NET186 -S RIPE)" > util/irr-filter.conf -# echo "define $(bgpq4 -6bl DOWNSTREAM_PREFIXES AS-NET186 -S RIPE)" >> util/irr-filter.conf +# echo "define $(bgpq4 -tbl DOWNSTREAM_ASN AS-NET186 -S RIPE,ARIN,APNIC,AFRINIC,LACNIC -L 3)" > util/irr-filter.conf +# echo "define $(bgpq4 -6bl DOWNSTREAM_PREFIXES AS-NET186 -S RIPE,ARIN,APNIC,AFRINIC,LACNIC,RPKI -A -R48)" >> util/irr-filter.conf define DOWNSTREAM_ASN = [ 200536 ];