[j-nsp] BGP Flowspec + NSR

[Richard A Steenbergen]

So I noticed something interesting about NSR, apparently it doesn't
support BGP sessions with flowspec SAFIs enabled. Here is a sh bgp sum
from the backup RE of a router trying to do NSR, note the number of
flaps:

ras at backupre.somerouter> show bgp summary 
Groups: 53 Peers: 74 Down peers: 24
Table          Tot Paths  Act Paths Suppressed    History Damp State    Pending
inet.0            394198     250825          0          0          0          0
inetflow.0             0          0          0          0          0          0
inet6.0             3288       2418          0          0          0          0
Peer                     AS      InPkt     OutPkt    OutQ   Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped...
x.x.x.x                xxxx          0          0       0  142650           6 Idle  
x.x.x.x                xxxx          0          0       0  137608           3 Idle  
x.x.x.x                xxxx          0          0       0  130645           5 Idle  
x.x.x.x                xxxx          0          0       0  138745           1 Idle  
etc etc etc

ras at backupre.somerouter> show bgp neighbor x.x.x.x | match "Last flap"
  Last flap event: NsrNotsupported

It just sits and spins forever trying to bring up the BGP sync session
between the master and backup RE, and turning off inetflow negotiation
makes things work properly again. This was under 9.5 and 9.6, but I
haven't seen anything in any release notes about support for it in any
later software versions. Does anybody know if this is actually on the
roadmap to get supported, or has flowspec just completely fallen off the
radar since Pedro and Raszuk left Juniper? :)

-- 
Richard A Steenbergen <ras at e-gerbil.net>       http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)