These are chat archives for Exa-Networks/exabgp

12th
Jan 2017
Nagarjun G
@nagarjung
Jan 12 2017 12:03
Hi All, I have an openbgpd router, I am looking for DDOS mitigation techiques. Does ExaBGP is meant for it ?
Thomas Mangin
@thomas-mangin
Jan 12 2017 12:20
You want to look at fastnetmon or wanguard
For some things exabgp is good for it
Nagarjun G
@nagarjung
Jan 12 2017 12:23
Are there any open source implementations of BGP flowspec ?
Thomas Mangin
@thomas-mangin
Jan 12 2017 12:24
ExaBGP and GoBGP - AFAICR
ExaBGP support was more extensive last time I looked
fastnetmon can use both, wanguard uses ExaBGP
Nagarjun G
@nagarjung
Jan 12 2017 12:27
I am totally new to security, I have an idea of BGP. Now looking into security to mitigate DDOS. So I did a quick reading and found out that BGP flowspec does that work of DDOS mitigation, but i did not find anything regarding openbgpd. So i thought we might have to additionally use some tecniques on top of openbgpd/openbsd. So i came accross Exabgp, now I am wondering if it can be used with openbsd/openbgpd ?
I will look into the above softwares you mentioned
Hope i was clear with the requirements
Thomas Mangin
@thomas-mangin
Jan 12 2017 12:40
You really need to continue to learn 😜
Flowspec requires a router which supports it and can drop/rate limit packets using its hardware/ASIC
If you look the wiki you will find many talks linked which will help you
You are on track good luck
Nagarjun G
@nagarjung
Jan 12 2017 12:43
Thank you Thomas
Brian Johnson
@brijohn
Jan 12 2017 20:53
@thomas-mangin Since I now have commit access to ExaBGP, do you have a particular process for submitting patches upstream? Should I still submit patches via a PR and then merge them into ExaBGP from there, or is it acceptable to simply push them directly?
Thomas Mangin
@thomas-mangin
Jan 12 2017 20:54
For change to your own code or bug fixes, just do it
For larger change, if you have a personal tree, happy to review with you what you do but I gave you access as I was happy with your work and just want to make it easy for you to contribute
So feel free to do what you need on master, if you are changing something large, let just discuss it here
For 3.4 the rule is backward compatibility over everything
That is it, more or less
Brian Johnson
@brijohn
Jan 12 2017 20:57
Alright thanks.
Thomas Mangin
@thomas-mangin
Jan 12 2017 20:58
I can always revert a commit .. just do not do it badly .. kidding ...
😈😜
Brian Johnson
@brijohn
Jan 12 2017 21:05
Well there was one time on a project were I accidentally rebased master into the development branch....That was messy. :smile: The lesson there is always check your git log before pushing.
Thomas Mangin
@thomas-mangin
Jan 12 2017 21:10
LOL, please don't