Function add_flowspec_rule

tools/grpc/python/flowspec_mitigation.py:192–237

Add a FlowSpec rule to GoBGP and return its UUID.

(stub, params)

def add_flowspec_rule(stub, params):
    """Add a FlowSpec rule to GoBGP and return its UUID."""
    rules = _build_flowspec_rules(params)
    if not rules:
        raise ValueError("no match criteria specified")

    nlri = nlri_pb2.NLRI(
        flow_spec=nlri_pb2.FlowSpecNLRI(rules=rules)
    )

    attributes = [
        attribute_pb2.Attribute(
            origin=attribute_pb2.OriginAttribute(origin=0)
        ),
    ]

    action_community = _build_action(params)
    if action_community is not None:
        attributes.append(
            attribute_pb2.Attribute(
                extended_communities=(
                    attribute_pb2.ExtendedCommunitiesAttribute(
                        communities=[action_community]
                    )
                )
            )
        )

    family = _detect_family(params)

    response = stub.AddPath(
        gobgp_pb2.AddPathRequest(
            table_type=gobgp_pb2.TABLE_TYPE_GLOBAL,
            path=gobgp_pb2.Path(
                nlri=nlri,
                pattrs=attributes,
                family=family,
            ),
        ),
        timeout=_TIMEOUT_SECONDS,
    )

    uuid = response.uuid.hex()
    with _lock:
        _active_rules[uuid] = params
    return uuid


def delete_flowspec_rule(stub, uuid):