kernel.conf 883 B

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647
  1. # Gitoyen <contact@gitoyen.net>
  2. #
  3. # vim: set ts=4:sw=4
  4. # Recupere les routes "connectees"
  5. protocol direct {
  6. interface "lagg0.*";
  7. }
  8. protocol device {
  9. scan time 5;
  10. }
  11. # Filtres pour le protocole kernel permettant la gestion du blackhole
  12. filter import_kernel {
  13. if dest = RTD_BLACKHOLE && is_within_gitoyen() then {
  14. bgp_community.add ((20766,9999));
  15. accept;
  16. }
  17. if is_within_carp() then {
  18. reject;
  19. }
  20. accept;
  21. }
  22. filter export_kernel {
  23. if filter( bgp_community, [ (20766,9999) ]).len >0 then {
  24. dest = RTD_BLACKHOLE;
  25. accept;
  26. }
  27. if is_within_carp() then {
  28. reject;
  29. }
  30. accept;
  31. }
  32. # Import/export des routes depuis/vers le noyau
  33. protocol kernel {
  34. learn;
  35. scan time 60;
  36. import filter import_kernel;
  37. export filter export_kernel;
  38. persist;
  39. #device routes;
  40. }