3 ms·
Flowspec strikes again. Its a super useful tool if you want to blast out an ACL across your network in seconds (using BGP) but it has a number of sharp edges.
by kitteh 6y ago
Flowspec strikes again.
Its a super useful tool if you want to blast out an ACL across your network in seconds (using BGP) but it has a number of sharp edges. Several networks, including Cloudflare have learned what it can do. I've seen a few networks basically blackhole traffic or even lock themselves out of routers due to a poorly made Flowspec rules or a bug in the implementation.
- parliament32 6y agoIs "doing what you ask" considered a sharp edge? Network-related tools don't really have safeties, ever (your linux host will happily "ip rule add 0 blackhole" without confirmation). Every case of flowspec shenanigans in the news has been operator error.
- mrguyorama 6y agoIt's possible that if a tool allows you to destroy everything with a single click, that tool (or maybe process) is bad