-
Notifications
You must be signed in to change notification settings - Fork 2
loop
Pre-Alpha. This page describes behavior that may change.
Route loop detection ingress filter per RFC 4271 Section 9 and RFC 4456 Section 8. Silently discards incoming UPDATE messages that indicate a routing loop.
Core.
Loaded automatically. No configuration is needed. The filter is registered at the protocol stage and runs on every received UPDATE.
The filter walks the path attributes of each incoming UPDATE once and performs three checks:
- AS loop (all sessions, RFC 4271 S9): if the local ASN appears anywhere in the AS_PATH attribute (in AS_SEQUENCE or AS_SET segments), the route is rejected.
- Originator-ID loop (iBGP only, RFC 4456 S8): if the ORIGINATOR_ID attribute matches the local Router ID, the route is rejected.
- Cluster-list loop (iBGP only, RFC 4456 S8): if the local Router ID appears in the CLUSTER_LIST attribute, the route is rejected.
The filter operates directly on the wire-format UPDATE payload with zero-copy attribute iteration. Rejected routes are logged at debug level and silently dropped before reaching the decision process.
- Runs as a protocol-stage ingress filter inside the BGP reactor. It is part of the filter chain that every received UPDATE passes through before route selection.
- No dependencies on other plugins. The filter is self-contained and stateless.
- Works with 2-byte and 4-byte ASN encodings depending on the peer's capability negotiation.
main/internal/component/bgp/reactor/filter/
Unreviewed draft. This wiki was authored in bulk and has not been reviewed. File corrections on the issue tracker.
- Overview
- YANG Model
- Editor Workflow
- Archive and Rollback
- System
- Interfaces
- VRRP
- BFD
- FIB
- OSPF
- IS-IS
- MPLS / LDP / RSVP-TE
- RSVP-TE
- SRv6
- Static Routes
- Policy Routing
- Firewall
- Traffic Control
- Class of Service
- L2TP/PPP
- PPPoE
- VPP Data Plane
- RPKI
- IPsec VPN
- TACACS+ AAA
- RADIUS AAA
- AS112 DNS
- Authorization
- Fleet
- BGP
- Starting and Stopping
- Show Commands
- Monitoring
- Flow Export
- DDoS Mitigation
- Anomaly Detection
- Health Checks
- Audit Trail
- Production Diagnostics
- Logging
- Operational Reports
- Healthcheck
- Self-Update
- Zero-Touch Provisioning
- MRT Analysis
- Upgrade and Restart
- Storage
- Policy
- Core
- Resilience
- Validation
- Capabilities
- Address Families
- Protocol
- Subsystems
- Infrastructure
- Route Server at an IXP
- Transit Edge with RPKI
- Public Looking Glass
- ExaBGP Migration Walkthrough
- FlowSpec Injection
- Chaos-Tested Peering
- AS Path Topology