[j-nsp] BGP Flowspec + NSR

[Harry Reynolds]

I can confirm that the flowspec family is one of several that are not yet nsr supported. The expected results are as you show...

There is an ER/RLI to add but this is not currently scheduled for any release.

Regards

 

-----Original Message-----
From: juniper-nsp-bounces at puck.nether.net [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Richard A Steenbergen
Sent: Tuesday, March 16, 2010 4:44 PM
To: juniper-nsp at puck.nether.net
Subject: [j-nsp] BGP Flowspec + NSR

So I noticed something interesting about NSR, apparently it doesn't support BGP sessions with flowspec SAFIs enabled. Here is a sh bgp sum from the backup RE of a router trying to do NSR, note the number of
flaps:

ras at backupre.somerouter> show bgp summary
Groups: 53 Peers: 74 Down peers: 24
Table          Tot Paths  Act Paths Suppressed    History Damp State    Pending
inet.0            394198     250825          0          0          0          0
inetflow.0             0          0          0          0          0          0
inet6.0             3288       2418          0          0          0          0
Peer                     AS      InPkt     OutPkt    OutQ   Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped...
x.x.x.x                xxxx          0          0       0  142650           6 Idle  
x.x.x.x                xxxx          0          0       0  137608           3 Idle  
x.x.x.x                xxxx          0          0       0  130645           5 Idle  
x.x.x.x                xxxx          0          0       0  138745           1 Idle  
etc etc etc

ras at backupre.somerouter> show bgp neighbor x.x.x.x | match "Last flap"
  Last flap event: NsrNotsupported

It just sits and spins forever trying to bring up the BGP sync session between the master and backup RE, and turning off inetflow negotiation makes things work properly again. This was under 9.5 and 9.6, but I haven't seen anything in any release notes about support for it in any later software versions. Does anybody know if this is actually on the roadmap to get supported, or has flowspec just completely fallen off the radar since Pedro and Raszuk left Juniper? :)

-- 
Richard A Steenbergen <ras at e-gerbil.net>       http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)

_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp