Flowspec
Block Type Response Integration
Prior to creating a Flowspec plugin, you will need to configure at least 1 device with a unicast BGP neighbor.
Prerequisites
Different vendors and products may have their unique documentation and prerequisites for this setup. Below are example links to configure devices with a unicast BGP neighbor:
Netography Portal Steps
In Settings > Response Integrations, click Add Integration. Select Flowspec`
Configuration
The following fields are specific to the Flowspec integration.
| Field | Required | Description | Examples |
|---|---|---|---|
Neighbors | yes | IPv4/v6 unicast BGP neighbors configured in the Netography Portal. | |
Local Preference | yes | Used to choose the exit path for an autonomous system. Default 100 | 100 |
Factors | yes | srcip | |
Expiration | Number of seconds the blocklist will remain active | 3600 | |
Max | Limit on number of blocks | 1000 | |
Allow List | One or many Allow Lists configured in the Netography Portal, or a List of IP or IP/CIDR addresses | ||
Aggregate | Aggregate IP addresses by mask length |
Updated 4 months ago