-
-
Notifications
You must be signed in to change notification settings - Fork 44
/
config3.yaml
166 lines (166 loc) · 2.95 KB
/
config3.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
prefixes:
8_prefix: &8_prefix
- 10.0.0.0/8
16_prefix: &16_prefix
- 10.0.0.0/16
24_prefix_1: &24_prefix_1
- 10.0.1.0/24
24_prefix_2: &24_prefix_2
- 10.0.2.0/24
24_prefix_3: &24_prefix_3
- 10.0.3.0/24
24_prefix_4: &24_prefix_4
- 10.0.4.0/24
24_prefix_5: &24_prefix_5
- 10.0.5.0/24
24_prefix_6: &24_prefix_6
- 10.0.6.0/24
test_exc_op_23: &test_exc_op_23
- 10.10.0.0/23^-
test_inc_op_23: &test_inc_op_23
- 10.11.0.0/23^+
test_n_op_16: &test_n_op_16
- 10.12.0.0/16^24
test_n_m_op_16: &test_n_m_op_16
- 10.13.0.0/16^20-24
test_comms_24: &test_comms_24
- 10.0.20.0/24
test_as_set_24: &test_as_set_24
- 10.0.30.0/24
test_ipv6_benign: &test_ipv6_benign
- 2001:db8:abcd:10::/64
test_ipv6_exact: &test_ipv6_exact
- 2001:db8:abcd:11::/64
test_ipv6_sub: &test_ipv6_sub
- 2001:db8:abcd:12::/64
asns:
8_origin: &8_origin
1
8_upstream: &8_upstream
2
24_2_origin: &24_2_origin
242
24_3_origin: &24_3_origin
243
24_4_origin: &24_4_origin
244
24_5_origin: &24_5_origin
245
24_6_origin: &24_6_origin
300- 310
24_6_neighbors: &24_6_neighbors
320 -330
op_test_origin: &op_test_origin
444
comm_test_origin: &comm_test_origin
555
v6_origins: &v6_origins
- 777
- 888
- 999
rules:
- prefixes:
- *8_prefix
origin_asns:
- *8_origin
neighbors:
- *8_upstream
mitigation:
manual
- prefixes:
- *16_prefix
mitigation:
manual
- prefixes:
- *24_prefix_1
origin_asns:
'*'
mitigation:
manual
- prefixes:
- *24_prefix_2
origin_asns:
- *24_2_origin
mitigation:
manual
- prefixes:
- *24_prefix_3
origin_asns:
- *24_3_origin
neighbors:
'*'
mitigation:
manual
- prefixes:
- *24_prefix_4
origin_asns:
- *24_4_origin
mitigation:
manual
- prefixes:
- *24_prefix_5
origin_asns:
- *24_5_origin
neighbors:
'*'
policies:
- 'no-export'
mitigation:
manual
- prefixes:
- *test_exc_op_23
- *test_inc_op_23
- *test_n_op_16
- *test_n_m_op_16
origin_asns:
- *op_test_origin
neighbors:
'*'
mitigation:
manual
- prefixes:
- *24_prefix_6
origin_asns:
- *24_6_origin
neighbors:
- *24_6_neighbors
mitigation:
manual
- prefixes:
- *test_comms_24
origin_asns:
- *comm_test_origin
neighbors:
'*'
community_annotations:
- critical:
- in:
- '555:1'
- '555:2'
out:
- '555:3'
- '555:4'
- in:
- '555:10'
- medium:
- in:
- '555:3'
out:
- '555:4'
- low:
- in:
- '555:4'
- prefixes:
- *test_as_set_24
origin_asns:
- 6777
- prefixes:
- *test_ipv6_benign
- *test_ipv6_exact
- *test_ipv6_sub
origin_asns:
- *v6_origins
neighbors:
'*'
mitigation:
manual