Blackholing and blackhole routing relay setup leveraging BGP communities

Philippe Strauss — Thu, 15 Jun 2023 14:30:21 GMT

Here is a simple yet powerful mean of blackholing, as an ISP, an internal or customer IP address victim of a DDoS, with the goal of minimizing the impact for other customers and services. The first Cisco IOS config snippet is to be set on a router acting only as a route server. The first BGP peer shows Cogent route blackhole server setup of some years back.

Lire la suite… (Il reste encore 2 min. de lecture)

Backing up and archiving Cisco IOS/ASA configurations live from the router without TFTP

Philippe Strauss — Sat, 31 May 2008 23:00:00 GMT

In Python and with Subversion archiving

At some point as a network admin, I did find easier to parse config file using python expect and some regexp, rather than relying on the unreliable TFTP. Here's a script which worked fine for one year or so. It also does automate archiving in subversion. It's delibaretly in a shape suitable for a blog page, working after tuning two paths in the first script, but without a tarball and 12 pages of doco. Python is simple enough to read and understand even for peoples having never learned this language.

Lire la suite… (Il reste encore 5 min. de lecture)

Philippe Strauss website (Articles sur Internet networking)

Blackholing and blackhole routing relay setup leveraging BGP communities

Backing up and archiving Cisco IOS/ASA configurations live from the router without TFTP

In Python and with Subversion archiving