Skip to main content

Static Redirect Example

This example shows an always-on BGP flowspec rule with no defined destination. To prevent duplicate announcements, we explicitly tie it to a single zone. This effectively permanently diverts a subset of traffic (DNS, in this case) for cleaning while letting all remaining traffic follow its normal route.

Deployment​

plantuml

TOML Configuration​

[[mapping]]
zone-id = 0
workflows = [
    "Static Redirect DNS",
]

[workflows."Static Redirect DNS"]
actions = [
    "Redirect IPv4 DNS",
    "Redirect IPv6 DNS",
]
[[workflows."Static Redirect DNS".trigger]]
type = "always-on"

[actions."Redirect IPv4 DNS"]
type = "bgp-flowspec-v4"

protocol = "==6 | ==17" # TCP or UDP
port = "==53 | ==853" # DNS or DNS-over-HTTP

rt-redirect-asn = "64496:123" # Redirect to filter VRF

[actions."Redirect IPv6 DNS"]
type = "bgp-flowspec-v6"

protocol = "==6 | ==17" # TCP or UDP
port = "==53 | ==853" # DNS or DNS-over-HTTP

rt-redirect-asn = "64496:123" # Redirect to filter VRF